From 80edc7f1e39dd9bc0da917671b975754f387c037 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 10:25:12 +0900 Subject: [PATCH 001/691] test: reject shared-writable provider evidence authority --- .../provider_evidence_directory_authority.rs | 50 +++++++++++++++++++ 1 file changed, 50 insertions(+) create mode 100644 src-tauri/tests/provider_evidence_directory_authority.rs diff --git a/src-tauri/tests/provider_evidence_directory_authority.rs b/src-tauri/tests/provider_evidence_directory_authority.rs new file mode 100644 index 000000000..7e6089d4e --- /dev/null +++ b/src-tauri/tests/provider_evidence_directory_authority.rs @@ -0,0 +1,50 @@ +#[cfg(unix)] +#[test] +fn shared_writable_provider_evidence_directory_fails_closed() { + use disksage_lib::cloud::CloudProvider; + use disksage_lib::cloud_transfer::{ + ProviderSyncEvidence, RemoteChecksumAlgorithm, RemoteContentProof, SyncEvidenceKind, + }; + use disksage_lib::provider_evidence::write_immutable_sync_evidence; + use std::os::unix::fs::PermissionsExt; + + let directory = tempfile::tempdir().expect("temporary provider evidence directory"); + let mut permissions = std::fs::metadata(directory.path()) + .expect("provider evidence directory metadata") + .permissions(); + permissions.set_mode(0o777); + std::fs::set_permissions(directory.path(), permissions) + .expect("make provider evidence directory shared-writable for regression"); + + let evidence = ProviderSyncEvidence { + receipt_id: "a".repeat(64), + provider: CloudProvider::Onedrive, + destination: "/cloud/report.pdf".into(), + observed_bytes: 42, + destination_blake3: "b".repeat(64), + confirmed_at_ms: 30, + kind: SyncEvidenceKind::ProviderApi, + evidence_id: format!("provider-api:{}", "c".repeat(64)), + sync_complete: true, + remote_content: Some(RemoteContentProof { + object_id: "remote-id".into(), + revision: "revision-1".into(), + algorithm: RemoteChecksumAlgorithm::QuickXor, + checksum: "quick-xor".into(), + location_bound: true, + location_proof: Some(format!("onedrive-path-v1:{}", "d".repeat(64))), + }), + }; + + let error = write_immutable_sync_evidence(directory.path(), &evidence) + .expect_err("shared-writable provider evidence authority must fail closed"); + + assert_eq!(error, "provider-evidence-directory-writable-by-others"); + assert_eq!( + std::fs::read_dir(directory.path()) + .expect("provider evidence directory remains readable") + .count(), + 0, + "refusing the unsafe directory must not create an evidence file" + ); +} From ea596aefd7fe6711872cfcf9a3ff235e34fd19ef Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 10:36:53 +0900 Subject: [PATCH 002/691] security: reject shared-writable provider evidence directories --- src-tauri/src/provider_evidence.rs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src-tauri/src/provider_evidence.rs b/src-tauri/src/provider_evidence.rs index 4afcccd37..39da61c53 100644 --- a/src-tauri/src/provider_evidence.rs +++ b/src-tauri/src/provider_evidence.rs @@ -120,6 +120,13 @@ fn secure_evidence_directory(path: &Path) -> Result<(), String> { if !metadata.is_dir() || metadata.file_type().is_symlink() { return Err("provider-evidence-directory-unsafe".into()); } + #[cfg(unix)] + { + use std::os::unix::fs::PermissionsExt; + if metadata.permissions().mode() & 0o022 != 0 { + return Err("provider-evidence-directory-writable-by-others".into()); + } + } Ok(()) } From f13236316f726c43c0f3fbcb793f9bf901bf5101 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 12:13:38 +0900 Subject: [PATCH 003/691] test: distinguish provider evidence write principals --- .../provider_evidence_directory_authority.rs | 74 ++++++++++--------- 1 file changed, 38 insertions(+), 36 deletions(-) diff --git a/src-tauri/tests/provider_evidence_directory_authority.rs b/src-tauri/tests/provider_evidence_directory_authority.rs index 7e6089d4e..71e2de5b5 100644 --- a/src-tauri/tests/provider_evidence_directory_authority.rs +++ b/src-tauri/tests/provider_evidence_directory_authority.rs @@ -8,43 +8,45 @@ fn shared_writable_provider_evidence_directory_fails_closed() { use disksage_lib::provider_evidence::write_immutable_sync_evidence; use std::os::unix::fs::PermissionsExt; - let directory = tempfile::tempdir().expect("temporary provider evidence directory"); - let mut permissions = std::fs::metadata(directory.path()) - .expect("provider evidence directory metadata") - .permissions(); - permissions.set_mode(0o777); - std::fs::set_permissions(directory.path(), permissions) - .expect("make provider evidence directory shared-writable for regression"); + for unsafe_write_bit in [0o020, 0o002] { + let directory = tempfile::tempdir().expect("temporary provider evidence directory"); + let mut permissions = std::fs::metadata(directory.path()) + .expect("provider evidence directory metadata") + .permissions(); + permissions.set_mode(0o700 | unsafe_write_bit); + std::fs::set_permissions(directory.path(), permissions) + .expect("make provider evidence directory shared-writable for regression"); - let evidence = ProviderSyncEvidence { - receipt_id: "a".repeat(64), - provider: CloudProvider::Onedrive, - destination: "/cloud/report.pdf".into(), - observed_bytes: 42, - destination_blake3: "b".repeat(64), - confirmed_at_ms: 30, - kind: SyncEvidenceKind::ProviderApi, - evidence_id: format!("provider-api:{}", "c".repeat(64)), - sync_complete: true, - remote_content: Some(RemoteContentProof { - object_id: "remote-id".into(), - revision: "revision-1".into(), - algorithm: RemoteChecksumAlgorithm::QuickXor, - checksum: "quick-xor".into(), - location_bound: true, - location_proof: Some(format!("onedrive-path-v1:{}", "d".repeat(64))), - }), - }; + let evidence = ProviderSyncEvidence { + receipt_id: "a".repeat(64), + provider: CloudProvider::Onedrive, + destination: "/cloud/report.pdf".into(), + observed_bytes: 42, + destination_blake3: "b".repeat(64), + confirmed_at_ms: 30, + kind: SyncEvidenceKind::ProviderApi, + evidence_id: format!("provider-api:{}", "c".repeat(64)), + sync_complete: true, + remote_content: Some(RemoteContentProof { + object_id: "remote-id".into(), + revision: "revision-1".into(), + algorithm: RemoteChecksumAlgorithm::QuickXor, + checksum: "quick-xor".into(), + location_bound: true, + location_proof: Some(format!("onedrive-path-v1:{}", "d".repeat(64))), + }), + }; - let error = write_immutable_sync_evidence(directory.path(), &evidence) - .expect_err("shared-writable provider evidence authority must fail closed"); + let error = write_immutable_sync_evidence(directory.path(), &evidence) + .expect_err("shared-writable provider evidence authority must fail closed"); - assert_eq!(error, "provider-evidence-directory-writable-by-others"); - assert_eq!( - std::fs::read_dir(directory.path()) - .expect("provider evidence directory remains readable") - .count(), - 0, - "refusing the unsafe directory must not create an evidence file" - ); + assert_eq!(error, "provider-evidence-directory-writable-by-others"); + assert_eq!( + std::fs::read_dir(directory.path()) + .expect("provider evidence directory remains readable") + .count(), + 0, + "refusing the unsafe directory must not create an evidence file" + ); + } } From dc1dbc48de5127a9da5d4f36a37c50e7b7bc7067 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 14:05:35 +0900 Subject: [PATCH 004/691] test: require atomic private provider evidence mode --- .../provider_evidence_directory_authority.rs | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/src-tauri/tests/provider_evidence_directory_authority.rs b/src-tauri/tests/provider_evidence_directory_authority.rs index 71e2de5b5..08e876bae 100644 --- a/src-tauri/tests/provider_evidence_directory_authority.rs +++ b/src-tauri/tests/provider_evidence_directory_authority.rs @@ -50,3 +50,25 @@ fn shared_writable_provider_evidence_directory_fails_closed() { ); } } + +#[cfg(unix)] +#[test] +fn provider_evidence_file_is_private_from_creation_not_only_after_path_chmod() { + let source = std::fs::read_to_string( + std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("src/provider_evidence.rs"), + ) + .expect("provider evidence source must be readable"); + + assert!( + source.contains("options.mode(0o400);"), + "provider evidence must be created with read-only owner mode atomically, so a crash before post-write chmod cannot leave a broader evidence file" + ); + assert!( + source.contains("file.set_permissions(permissions)"), + "post-write hardening must remain bound to the opened evidence object rather than re-resolving its pathname" + ); + assert!( + !source.contains("std::fs::set_permissions(&path, permissions)"), + "provider evidence hardening must not chmod a pathname that can be replaced after create_new" + ); +} From a4c839fe9822d6645a2cfd0dc1dccc2037cb270c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 14:07:26 +0900 Subject: [PATCH 005/691] fix: create provider evidence private atomically --- src-tauri/src/provider_evidence.rs | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/src-tauri/src/provider_evidence.rs b/src-tauri/src/provider_evidence.rs index 39da61c53..b0ee5133e 100644 --- a/src-tauri/src/provider_evidence.rs +++ b/src-tauri/src/provider_evidence.rs @@ -147,9 +147,14 @@ pub fn write_immutable_sync_evidence( if encoded.len() as u64 > MAX_PROVIDER_EVIDENCE_RECORD_BYTES { return Err("provider-evidence-record-too-large".into()); } - let mut file = std::fs::OpenOptions::new() - .write(true) - .create_new(true) + let mut options = std::fs::OpenOptions::new(); + options.write(true).create_new(true); + #[cfg(unix)] + { + use std::os::unix::fs::OpenOptionsExt; + options.mode(0o400); + } + let mut file = options .open(&path) .map_err(|_| "provider-evidence-record-create-failed".to_string())?; let result = (|| -> Result<(), String> { @@ -167,7 +172,7 @@ pub fn write_immutable_sync_evidence( } #[cfg(not(unix))] permissions.set_readonly(true); - std::fs::set_permissions(&path, permissions) + file.set_permissions(permissions) .map_err(|_| "provider-evidence-record-permissions-failed".to_string())?; #[cfg(unix)] std::fs::File::open(directory) From 72871e437c5972711b8073e0c43f3f3a39131781 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 14:44:07 +0900 Subject: [PATCH 006/691] test: prove provider evidence private publication at runtime --- .../provider_evidence_directory_authority.rs | 78 +++++++++++++------ 1 file changed, 55 insertions(+), 23 deletions(-) diff --git a/src-tauri/tests/provider_evidence_directory_authority.rs b/src-tauri/tests/provider_evidence_directory_authority.rs index 08e876bae..7391b78ed 100644 --- a/src-tauri/tests/provider_evidence_directory_authority.rs +++ b/src-tauri/tests/provider_evidence_directory_authority.rs @@ -1,10 +1,34 @@ #[cfg(unix)] -#[test] -fn shared_writable_provider_evidence_directory_fails_closed() { +fn valid_provider_evidence() -> disksage_lib::cloud_transfer::ProviderSyncEvidence { use disksage_lib::cloud::CloudProvider; use disksage_lib::cloud_transfer::{ ProviderSyncEvidence, RemoteChecksumAlgorithm, RemoteContentProof, SyncEvidenceKind, }; + + ProviderSyncEvidence { + receipt_id: "a".repeat(64), + provider: CloudProvider::Onedrive, + destination: "/cloud/report.pdf".into(), + observed_bytes: 42, + destination_blake3: "b".repeat(64), + confirmed_at_ms: 30, + kind: SyncEvidenceKind::ProviderApi, + evidence_id: format!("provider-api:{}", "c".repeat(64)), + sync_complete: true, + remote_content: Some(RemoteContentProof { + object_id: "remote-id".into(), + revision: "revision-1".into(), + algorithm: RemoteChecksumAlgorithm::QuickXor, + checksum: "quick-xor".into(), + location_bound: true, + location_proof: Some(format!("onedrive-path-v1:{}", "d".repeat(64))), + }), + } +} + +#[cfg(unix)] +#[test] +fn shared_writable_provider_evidence_directory_fails_closed() { use disksage_lib::provider_evidence::write_immutable_sync_evidence; use std::os::unix::fs::PermissionsExt; @@ -17,27 +41,7 @@ fn shared_writable_provider_evidence_directory_fails_closed() { std::fs::set_permissions(directory.path(), permissions) .expect("make provider evidence directory shared-writable for regression"); - let evidence = ProviderSyncEvidence { - receipt_id: "a".repeat(64), - provider: CloudProvider::Onedrive, - destination: "/cloud/report.pdf".into(), - observed_bytes: 42, - destination_blake3: "b".repeat(64), - confirmed_at_ms: 30, - kind: SyncEvidenceKind::ProviderApi, - evidence_id: format!("provider-api:{}", "c".repeat(64)), - sync_complete: true, - remote_content: Some(RemoteContentProof { - object_id: "remote-id".into(), - revision: "revision-1".into(), - algorithm: RemoteChecksumAlgorithm::QuickXor, - checksum: "quick-xor".into(), - location_bound: true, - location_proof: Some(format!("onedrive-path-v1:{}", "d".repeat(64))), - }), - }; - - let error = write_immutable_sync_evidence(directory.path(), &evidence) + let error = write_immutable_sync_evidence(directory.path(), &valid_provider_evidence()) .expect_err("shared-writable provider evidence authority must fail closed"); assert_eq!(error, "provider-evidence-directory-writable-by-others"); @@ -51,6 +55,34 @@ fn shared_writable_provider_evidence_directory_fails_closed() { } } +#[cfg(unix)] +#[test] +fn provider_evidence_is_owner_read_only_and_create_once_at_runtime() { + use disksage_lib::provider_evidence::{ + read_immutable_sync_evidence, write_immutable_sync_evidence, + }; + use std::os::unix::fs::PermissionsExt; + + let directory = tempfile::tempdir().expect("temporary provider evidence directory"); + let evidence = valid_provider_evidence(); + + let (record, path) = write_immutable_sync_evidence(directory.path(), &evidence) + .expect("valid provider evidence must be written once"); + let metadata = std::fs::symlink_metadata(&path).expect("provider evidence metadata"); + assert!(metadata.is_file()); + assert_eq!(metadata.permissions().mode() & 0o777, 0o400); + assert!(metadata.permissions().readonly()); + assert_eq!( + read_immutable_sync_evidence(&path).expect("written evidence must read back"), + record + ); + + assert_eq!( + write_immutable_sync_evidence(directory.path(), &evidence).unwrap_err(), + "provider-evidence-record-create-failed" + ); +} + #[cfg(unix)] #[test] fn provider_evidence_file_is_private_from_creation_not_only_after_path_chmod() { From 4f970d7907918dd7661dcb13a201362535bafd80 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Thu, 13 Aug 2026 19:48:32 +0900 Subject: [PATCH 007/691] feat: persist provider sync goals and runtime ADRs --- .../adr/0001-cloud-offload-goal-state.md | 31 ++ .../goals/cloud-offload-goal.json | 21 ++ .../cloud-offload-operator-runbook.md | 20 ++ src-tauri/src/cloud_adr.rs | 329 ++++++++++++++++++ src-tauri/src/cloud_eviction.rs | 1 + src-tauri/src/cloud_transfer.rs | 87 +++++ src-tauri/src/commands.rs | 67 +++- src-tauri/src/git_worktree.rs | 156 ++++++++- src-tauri/src/lib.rs | 1 + src-tauri/src/naruon_lineage.rs | 2 + src-tauri/src/provider_evidence.rs | 6 + src-tauri/src/provider_sync.rs | 67 +++- src-tauri/tests/cloud_eviction_fail_closed.rs | 1 + src/lib/CloudArchive.svelte | 22 ++ src/lib/api.ts | 26 ++ 15 files changed, 829 insertions(+), 8 deletions(-) create mode 100644 docs/architecture/adr/0001-cloud-offload-goal-state.md create mode 100644 docs/architecture/goals/cloud-offload-goal.json create mode 100644 docs/development/cloud-offload-operator-runbook.md create mode 100644 src-tauri/src/cloud_adr.rs diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md new file mode 100644 index 000000000..596ea8bfa --- /dev/null +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -0,0 +1,31 @@ +# ADR-0001: Provider evidence drives the cloud-offload Goal + +**Status:** Accepted +**Date:** 2026-08-13 + +## Context + +A File Provider destination that is local and current is not necessarily uploaded. In particular, +`is_local_current=true` with `is_uploaded=false` must remain distinguishable from a completed +provider sync. Manual notes allow the displayed Goal and the evidence protecting the source to +drift. + +## Decision + +DiskSage stores the provider state (`pending-upload`, `uploading`, `not-local-current`, and other +fail-closed states) in content-bound evidence. The runtime Goal is derived from the same receipt +and immutable evidence: + +`copy-verified → pending-provider-sync → provider-sync-confirmed → eviction-ready → source-evicted`. + +After copy, DiskSage atomically writes `cloud-goals/-latest.json`. After each provider +attestation and the explicit OS-Trash step, it atomically writes both that Goal projection and +`cloud-adr/-latest.json`. The projections contain no credentials and are never used as +the authority for eviction; the receipt and immutable evidence are revalidated at every mutation. + +## Consequences + +- `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. +- Goal completion gates remain false until their corresponding evidence exists. +- `eviction-ready` permits only the separately approved, reversible OS-Trash operation. +- A stale projection is replaceable state and must be reconciled against immutable evidence. diff --git a/docs/architecture/goals/cloud-offload-goal.json b/docs/architecture/goals/cloud-offload-goal.json new file mode 100644 index 000000000..61b725450 --- /dev/null +++ b/docs/architecture/goals/cloud-offload-goal.json @@ -0,0 +1,21 @@ +{ + "goal_id": "disksage-cloud-offload", + "status": "active", + "state_source": "runtime:cloud-goals/-latest.json", + "adr_source": "runtime:cloud-adr/-latest.json", + "states": [ + "copy-verified", + "pending-provider-sync", + "provider-sync-confirmed", + "eviction-ready", + "source-evicted" + ], + "completion_gates": [ + "metadata-and-lineage-bound", + "copy-content-verified", + "provider-sync-state-complete", + "immutable-evidence-record-valid", + "explicit-eviction-permit" + ], + "safety_invariant": "source-retained-until-an-explicit-trash-step" +} diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md new file mode 100644 index 000000000..edb9dac9a --- /dev/null +++ b/docs/development/cloud-offload-operator-runbook.md @@ -0,0 +1,20 @@ +# Cloud offload runtime evidence + +DiskSage plans cloud copies from embedded metadata first, then filename date, filesystem creation +time, and modification time. Filename tokens such as `2026-04-28` or `251210` are secondary +evidence and never establish production time by themselves. + +The runtime sequence is: + +1. A verified copy writes `cloud-goals/-latest.json` with provider and evidence gates + explicitly incomplete. +2. Provider attestation writes an immutable evidence record, then updates the Goal and ADR + projections atomically. +3. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and + no eviction permit is issued. +4. Only a fresh attestation plus the separate receipt-bound human approval may move the source to + the OS Trash. The destination and Trash are never emptied by DiskSage. + +The Goal and ADR files are replaceable projections. Agents or operators must compare them with the +immutable receipt/evidence record before any mutation. Naruon receives lineage/provider evidence, +not a second independent deletion authority. diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs new file mode 100644 index 000000000..9b763e850 --- /dev/null +++ b/src-tauri/src/cloud_adr.rs @@ -0,0 +1,329 @@ +//! Runtime cloud-offload ADR and Goal projections. +//! +//! Receipts and provider-evidence records remain the immutable authorities. These files are +//! replaceable, atomically written projections for the UI, agents, and reconciliation jobs. + +use crate::cloud_transfer::{CloudCopyReceipt, CloudOffloadGoalState, ProviderSyncState}; +use crate::provider_evidence::ProviderSyncEvidenceRecord; +use std::collections::BTreeMap; +use std::io::Write; +use std::path::{Path, PathBuf}; + +pub const CLOUD_ADR_SCHEMA_VERSION: u32 = 1; +pub const CLOUD_GOAL_SCHEMA_VERSION: u32 = 1; + +#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] +#[serde(deny_unknown_fields)] +pub struct CloudOffloadAdrSnapshot { + pub schema_version: u32, + pub adr_id: String, + pub receipt_id: String, + pub goal_state: CloudOffloadGoalState, + pub provider_sync_state: ProviderSyncState, + pub sync_complete: bool, + pub decision: String, + pub consequences: Vec, + pub evidence_record_id: String, + pub updated_at_ms: u64, +} + +#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] +#[serde(deny_unknown_fields)] +pub struct CloudOffloadGoalSnapshot { + pub schema_version: u32, + pub goal_id: String, + pub status: String, + pub receipt_id: String, + pub goal_state: CloudOffloadGoalState, + pub provider_sync_state: ProviderSyncState, + pub completion_gates: BTreeMap, + pub safety_invariant: String, + pub evidence_record_id: Option, + pub updated_at_ms: u64, +} + +fn decision_for(goal_state: CloudOffloadGoalState, sync_state: ProviderSyncState) -> String { + match goal_state { + CloudOffloadGoalState::CopyVerified => "retain-source-after-copy".into(), + CloudOffloadGoalState::PendingProviderSync => { + format!("retain-source-provider-state-{}", sync_state.as_str()) + } + CloudOffloadGoalState::ProviderSyncConfirmed => { + "retain-source-eviction-gate-pending".into() + } + CloudOffloadGoalState::EvictionReady => "source-eviction-permit-issued".into(), + CloudOffloadGoalState::SourceEvicted => "source-moved-to-os-trash".into(), + } +} + +pub fn snapshot_from_evidence( + record: &ProviderSyncEvidenceRecord, + goal_state: CloudOffloadGoalState, + updated_at_ms: u64, +) -> CloudOffloadAdrSnapshot { + let evidence = &record.evidence; + let mut consequences = if goal_state == CloudOffloadGoalState::SourceEvicted { + vec!["source-in-os-trash-reversible".into()] + } else { + vec!["source-retained".into()] + }; + if goal_state == CloudOffloadGoalState::SourceEvicted { + consequences.push("explicit-trash-step-completed".into()); + } else if goal_state == CloudOffloadGoalState::EvictionReady { + consequences.push("explicit-trash-step-may-proceed".into()); + } else { + consequences.push("eviction-blocked-until-provider-proof".into()); + } + CloudOffloadAdrSnapshot { + schema_version: CLOUD_ADR_SCHEMA_VERSION, + adr_id: format!("cloud-offload:{}", record.record_id), + receipt_id: evidence.receipt_id.clone(), + goal_state, + provider_sync_state: evidence.sync_state, + sync_complete: evidence.sync_complete, + decision: decision_for(goal_state, evidence.sync_state), + consequences, + evidence_record_id: record.record_id.clone(), + updated_at_ms, + } +} + +fn completion_gates( + receipt: &CloudCopyReceipt, + record: Option<&ProviderSyncEvidenceRecord>, + goal_state: CloudOffloadGoalState, +) -> (BTreeMap, ProviderSyncState, Option) { + let lineage_bound = receipt.lineage.is_some() && receipt.lineage_fingerprint.is_some(); + let mut gates = BTreeMap::new(); + gates.insert("metadata-and-lineage-bound".into(), lineage_bound); + gates.insert("copy-content-verified".into(), receipt.copy_verified); + let Some(record) = record else { + gates.insert("provider-sync-state-complete".into(), false); + gates.insert("immutable-evidence-record-valid".into(), false); + gates.insert("explicit-eviction-permit".into(), false); + return (gates, ProviderSyncState::Unknown, None); + }; + let evidence = &record.evidence; + let evidence_valid = crate::provider_evidence::validate_sync_evidence_record(record).is_ok(); + let content_verified = receipt.copy_verified + && receipt.bytes == evidence.observed_bytes + && receipt.blake3 == evidence.destination_blake3; + let provider_complete = evidence_valid + && content_verified + && evidence.sync_complete + && evidence.sync_state.is_complete(); + let permit_issued = matches!( + goal_state, + CloudOffloadGoalState::EvictionReady | CloudOffloadGoalState::SourceEvicted + ); + gates.insert("copy-content-verified".into(), content_verified); + gates.insert("provider-sync-state-complete".into(), provider_complete); + gates.insert("immutable-evidence-record-valid".into(), evidence_valid); + gates.insert("explicit-eviction-permit".into(), permit_issued); + (gates, evidence.sync_state, Some(record.record_id.clone())) +} + +pub fn goal_snapshot_from_evidence( + receipt: &CloudCopyReceipt, + record: &ProviderSyncEvidenceRecord, + goal_state: CloudOffloadGoalState, + updated_at_ms: u64, +) -> CloudOffloadGoalSnapshot { + let (completion_gates, provider_sync_state, evidence_record_id) = + completion_gates(receipt, Some(record), goal_state); + CloudOffloadGoalSnapshot { + schema_version: CLOUD_GOAL_SCHEMA_VERSION, + goal_id: "disksage-cloud-offload".into(), + status: if goal_state == CloudOffloadGoalState::SourceEvicted { + "completed".into() + } else { + "active".into() + }, + receipt_id: receipt.receipt_id.clone(), + goal_state, + provider_sync_state, + completion_gates, + safety_invariant: "source-retained-until-an-explicit-trash-step".into(), + evidence_record_id, + updated_at_ms, + } +} + +pub fn initial_goal_snapshot( + receipt: &CloudCopyReceipt, + updated_at_ms: u64, +) -> CloudOffloadGoalSnapshot { + let (completion_gates, provider_sync_state, evidence_record_id) = + completion_gates(receipt, None, CloudOffloadGoalState::CopyVerified); + CloudOffloadGoalSnapshot { + schema_version: CLOUD_GOAL_SCHEMA_VERSION, + goal_id: "disksage-cloud-offload".into(), + status: "active".into(), + receipt_id: receipt.receipt_id.clone(), + goal_state: CloudOffloadGoalState::CopyVerified, + provider_sync_state, + completion_gates, + safety_invariant: "source-retained-until-an-explicit-trash-step".into(), + evidence_record_id, + updated_at_ms, + } +} + +fn secure_directory(directory: &Path) -> Result<(), String> { + std::fs::create_dir_all(directory) + .map_err(|_| "cloud-snapshot-directory-create-failed".to_string())?; + let metadata = std::fs::symlink_metadata(directory) + .map_err(|_| "cloud-snapshot-directory-metadata-failed".to_string())?; + if !metadata.is_dir() || metadata.file_type().is_symlink() { + return Err("cloud-snapshot-directory-unsafe".into()); + } + Ok(()) +} + +fn write_latest_json( + directory: &Path, + receipt_id: &str, + updated_at_ms: u64, + encoded: &[u8], + kind: &str, +) -> Result { + if receipt_id.len() != 64 || !receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) { + return Err("cloud-snapshot-receipt-id-invalid".into()); + } + secure_directory(directory)?; + let path = directory.join(format!("{receipt_id}-latest.json")); + let temporary = directory.join(format!( + ".{receipt_id}-{updated_at_ms}-{}-{kind}.tmp", + std::process::id() + )); + let mut file = std::fs::OpenOptions::new() + .write(true) + .create_new(true) + .open(&temporary) + .map_err(|_| format!("cloud-{kind}-temp-create-failed"))?; + file.write_all(encoded) + .map_err(|_| format!("cloud-{kind}-write-failed"))?; + file.sync_all() + .map_err(|_| format!("cloud-{kind}-sync-failed"))?; + drop(file); + if std::fs::rename(&temporary, &path).is_err() { + let _ = std::fs::remove_file(&temporary); + return Err(format!("cloud-{kind}-rename-failed")); + } + Ok(path) +} + +pub fn write_latest_snapshot( + directory: &Path, + snapshot: &CloudOffloadAdrSnapshot, +) -> Result { + let encoded = + serde_json::to_vec_pretty(snapshot).map_err(|_| "cloud-adr-json-invalid".to_string())?; + write_latest_json( + directory, + &snapshot.receipt_id, + snapshot.updated_at_ms, + &encoded, + "adr", + ) +} + +pub fn write_latest_goal_snapshot( + directory: &Path, + snapshot: &CloudOffloadGoalSnapshot, +) -> Result { + let encoded = + serde_json::to_vec_pretty(snapshot).map_err(|_| "cloud-goal-json-invalid".to_string())?; + write_latest_json( + directory, + &snapshot.receipt_id, + snapshot.updated_at_ms, + &encoded, + "goal", + ) +} + +#[cfg(test)] +mod tests { + use super::*; + use crate::cloud::CloudProvider; + + fn receipt() -> CloudCopyReceipt { + CloudCopyReceipt { + version: crate::cloud_transfer::RECEIPT_VERSION, + receipt_id: "a".repeat(64), + candidate_fingerprint: "b".repeat(64), + provider: CloudProvider::Icloud, + source: "/source/file.bin".into(), + destination: "/cloud/file.bin".into(), + bytes: 1, + blake3: "c".repeat(64), + sha256: "d".repeat(64), + quick_xor_base64: String::new(), + source_modified_ms: 1, + copied_at_ms: 2, + copy_verified: true, + provider_sync_confirmed: false, + lineage_fingerprint: None, + lineage: None, + } + } + + fn pending_record() -> ProviderSyncEvidenceRecord { + crate::provider_evidence::create_sync_evidence_record( + &crate::cloud_transfer::ProviderSyncEvidence { + receipt_id: "a".repeat(64), + provider: CloudProvider::Icloud, + destination: "/cloud/file.bin".into(), + observed_bytes: 1, + destination_blake3: "c".repeat(64), + confirmed_at_ms: 3, + kind: crate::cloud_transfer::SyncEvidenceKind::ProviderNativeStatus, + evidence_id: "foundation:test".into(), + sync_complete: false, + sync_state: ProviderSyncState::PendingUpload, + remote_content: None, + }, + ) + .unwrap() + } + + #[test] + fn pending_upload_goal_never_satisfies_provider_gate() { + let record = pending_record(); + let snapshot = goal_snapshot_from_evidence( + &receipt(), + &record, + CloudOffloadGoalState::PendingProviderSync, + 4, + ); + assert_eq!( + snapshot.provider_sync_state, + ProviderSyncState::PendingUpload + ); + assert!(!snapshot.completion_gates["provider-sync-state-complete"]); + assert!(!snapshot.completion_gates["explicit-eviction-permit"]); + } + + #[test] + fn goal_projection_replaces_latest_atomically() { + let directory = tempfile::tempdir().unwrap(); + let snapshot = initial_goal_snapshot(&receipt(), 5); + let path = write_latest_goal_snapshot(directory.path(), &snapshot).unwrap(); + let persisted: CloudOffloadGoalSnapshot = + serde_json::from_slice(&std::fs::read(path).unwrap()).unwrap(); + assert_eq!(persisted.goal_state, CloudOffloadGoalState::CopyVerified); + assert!(persisted.evidence_record_id.is_none()); + } + + #[test] + fn snapshot_writer_rejects_path_like_receipt_ids() { + let directory = tempfile::tempdir().unwrap(); + let mut snapshot = initial_goal_snapshot(&receipt(), 5); + snapshot.receipt_id = "../outside".into(); + assert_eq!( + write_latest_goal_snapshot(directory.path(), &snapshot).unwrap_err(), + "cloud-snapshot-receipt-id-invalid" + ); + } +} diff --git a/src-tauri/src/cloud_eviction.rs b/src-tauri/src/cloud_eviction.rs index 5dd0d02c0..d242d177d 100644 --- a/src-tauri/src/cloud_eviction.rs +++ b/src-tauri/src/cloud_eviction.rs @@ -935,6 +935,7 @@ mod tests { kind: SyncEvidenceKind::ProviderNativeStatus, evidence_id: "native-test-evidence".into(), sync_complete: true, + sync_state: crate::cloud_transfer::ProviderSyncState::Complete, remote_content: None, }; let evidence_record = create_sync_evidence_record(&evidence).unwrap(); diff --git a/src-tauri/src/cloud_transfer.rs b/src-tauri/src/cloud_transfer.rs index e5fc42665..656cdcf97 100644 --- a/src-tauri/src/cloud_transfer.rs +++ b/src-tauri/src/cloud_transfer.rs @@ -43,6 +43,75 @@ pub enum SyncEvidenceKind { ProviderNativeStatus, } +/// Provider state observed alongside content-bound synchronization evidence. +/// +/// A local-current item with `is_uploaded=false` is deliberately represented as +/// `pending-upload`; it is not an incomplete-but-unknown result and never authorizes eviction. +#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, serde::Serialize, serde::Deserialize)] +#[serde(rename_all = "kebab-case")] +pub enum ProviderSyncState { + Complete, + PendingUpload, + NotUbiquitous, + NotLocalCurrent, + Uploading, + ExcludedFromSync, + SyncPaused, + RemoteUnavailable, + ContentMismatch, + #[default] + Unknown, +} + +impl ProviderSyncState { + pub fn is_complete(&self) -> bool { + *self == Self::Complete + } + + pub fn as_str(&self) -> &'static str { + match self { + Self::Complete => "complete", + Self::PendingUpload => "pending-upload", + Self::NotUbiquitous => "not-ubiquitous", + Self::NotLocalCurrent => "not-local-current", + Self::Uploading => "uploading", + Self::ExcludedFromSync => "excluded-from-sync", + Self::SyncPaused => "sync-paused", + Self::RemoteUnavailable => "remote-unavailable", + Self::ContentMismatch => "content-mismatch", + Self::Unknown => "unknown", + } + } + + pub fn is_unknown(&self) -> bool { + *self == Self::Unknown + } +} + +/// Runtime state of one metadata-bound cloud offload. This state machine never deletes a source; +/// `EvictionReady` only permits a separately approved OS-Trash operation. +#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)] +#[serde(rename_all = "kebab-case")] +pub enum CloudOffloadGoalState { + CopyVerified, + PendingProviderSync, + ProviderSyncConfirmed, + EvictionReady, + SourceEvicted, +} + +impl CloudOffloadGoalState { + pub fn after_attestation(evidence: &ProviderSyncEvidence, permit_available: bool) -> Self { + if permit_available && evidence.sync_complete && evidence.sync_state.is_complete() { + Self::EvictionReady + } else if evidence.sync_complete { + Self::ProviderSyncConfirmed + } else { + Self::PendingProviderSync + } + } +} + #[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)] #[serde(rename_all = "kebab-case")] pub enum RemoteChecksumAlgorithm { @@ -216,6 +285,9 @@ pub struct ProviderSyncEvidence { pub kind: SyncEvidenceKind, pub evidence_id: String, pub sync_complete: bool, + /// Older evidence records omit this field and deserialize as `unknown`. + #[serde(default, skip_serializing_if = "ProviderSyncState::is_unknown")] + pub sync_state: ProviderSyncState, pub remote_content: Option, } @@ -1646,10 +1718,23 @@ mod tests { kind: SyncEvidenceKind::ProviderNativeStatus, evidence_id: "icloud-uploaded-flag".into(), sync_complete: true, + sync_state: ProviderSyncState::Complete, remote_content: None, } } + #[test] + fn unknown_legacy_sync_state_cannot_promote_goal_to_eviction_ready() { + let evidence = evidence(); + assert_eq!(evidence.sync_state, ProviderSyncState::Complete); + let mut legacy = evidence; + legacy.sync_state = ProviderSyncState::Unknown; + assert_eq!( + CloudOffloadGoalState::after_attestation(&legacy, true), + CloudOffloadGoalState::ProviderSyncConfirmed + ); + } + #[test] fn candidate_gate_accepts_only_embedded_high_confidence_safe_paths() { let accepted = candidate(); @@ -2135,6 +2220,7 @@ mod tests { kind: SyncEvidenceKind::ProviderApi, evidence_id: "authenticated-provider-response".into(), sync_complete: true, + sync_state: ProviderSyncState::Complete, remote_content: Some(RemoteContentProof { object_id: "remote-id".into(), revision: "revision-1".into(), @@ -2169,6 +2255,7 @@ mod tests { kind: SyncEvidenceKind::ProviderApi, evidence_id: "authenticated-provider-response".into(), sync_complete: true, + sync_state: ProviderSyncState::Complete, remote_content: None, }; assert!(approve_evidence(&provider_receipt, &api_evidence) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index bfa74f856..937b42617 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -16,10 +16,10 @@ use crate::organize; use crate::safety; #[cfg(not(coverage))] use crate::{ - brew_cleanup, cloud, cloud_eviction, cloud_local_eviction, cloud_plan_view, cloud_review, cloud_transfer, - dev_artifacts, dupes, git_worktree, icloud_sync_health, provider_api_client, provider_capacity, - provider_client_runtime, provider_evidence, provider_global_sync, provider_oauth, - provider_sync, rules, + brew_cleanup, cloud, cloud_adr, cloud_eviction, cloud_local_eviction, cloud_plan_view, + cloud_review, cloud_transfer, dev_artifacts, dupes, git_worktree, icloud_sync_health, + provider_api_client, provider_capacity, provider_client_runtime, provider_evidence, + provider_global_sync, provider_oauth, provider_sync, rules, }; #[derive(Default)] @@ -1406,8 +1406,10 @@ pub async fn review_cloud_candidate( #[derive(serde::Serialize)] pub struct CloudCopyOutput { pub action: &'static str, + pub goal_state: cloud_transfer::CloudOffloadGoalState, pub receipt: cloud_transfer::CloudCopyReceipt, pub receipt_path: String, + pub goal_path: String, } #[cfg(not(coverage))] @@ -1515,14 +1517,24 @@ fn create_cloud_candidate_receipt( ©_approval, )? }; + let goal = cloud_adr::initial_goal_snapshot(&receipt, cloud::system_now_ms()); + let goal_path = cloud_adr::write_latest_goal_snapshot( + &app.path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())? + .join("cloud-goals"), + &goal, + )?; Ok(CloudCopyOutput { action: if adopt_existing { "adopt-existing-copy" } else { "copy-only" }, + goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, receipt, receipt_path: receipt_path.to_string_lossy().into_owned(), + goal_path: goal_path.to_string_lossy().into_owned(), }) } @@ -1605,10 +1617,13 @@ pub async fn adopt_existing_cloud_candidate( #[cfg(not(coverage))] #[derive(serde::Serialize)] pub struct CloudAttestationOutput { + pub goal_state: cloud_transfer::CloudOffloadGoalState, pub evidence: cloud_transfer::ProviderSyncEvidence, pub assessment: provider_sync::ProviderSyncTimelinessAssessment, pub evidence_record: provider_evidence::ProviderSyncEvidenceRecord, pub evidence_path: String, + pub adr_path: String, + pub goal_path: String, pub permit: Option, pub blockers: Vec, } @@ -1618,6 +1633,8 @@ fn collect_cloud_attestation_for_receipt( receipt: &cloud_transfer::CloudCopyReceipt, object_id: Option, evidence_dir: &Path, + adr_dir: &Path, + goal_dir: &Path, connection_path: &Path, cloud_roots: &[cloud::CloudRoot], ) -> Result { @@ -1700,11 +1717,25 @@ fn collect_cloud_attestation_for_receipt( Ok(permit) => (Some(permit), Vec::new()), Err(blockers) => (None, blockers), }; + let goal_state = + cloud_transfer::CloudOffloadGoalState::after_attestation(&evidence, permit.is_some()); + let adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); + let adr_path = cloud_adr::write_latest_snapshot(adr_dir, &adr)?; + let goal = cloud_adr::goal_snapshot_from_evidence( + receipt, + &evidence_record, + goal_state, + confirmed_at_ms, + ); + let goal_path = cloud_adr::write_latest_goal_snapshot(goal_dir, &goal)?; Ok(CloudAttestationOutput { + goal_state, evidence, assessment, evidence_record, evidence_path: evidence_path.to_string_lossy().into_owned(), + adr_path: adr_path.to_string_lossy().into_owned(), + goal_path: goal_path.to_string_lossy().into_owned(), permit, blockers, }) @@ -1731,6 +1762,8 @@ pub async fn attest_cloud_copy( .join("cloud-receipts") .join(format!("{receipt_id}.json")); let evidence_dir = app_data_dir.join("cloud-provider-evidence"); + let adr_dir = app_data_dir.join("cloud-adr"); + let goal_dir = app_data_dir.join("cloud-goals"); let connection_path = oauth_connections_path(&app)?; let cloud_roots = cloud::discover_cloud_roots(&resolve_home(&app)); tauri::async_runtime::spawn_blocking(move || { @@ -1742,6 +1775,8 @@ pub async fn attest_cloud_copy( &receipt, object_id, &evidence_dir, + &adr_dir, + &goal_dir, &connection_path, &cloud_roots, ) @@ -1754,10 +1789,13 @@ pub async fn attest_cloud_copy( #[derive(serde::Serialize)] pub struct CloudSourceEvictionOutput { pub action: &'static str, + pub goal_state: cloud_transfer::CloudOffloadGoalState, pub attestation: CloudAttestationOutput, pub approval: cloud_eviction::CloudSourceEvictionApproval, pub approval_path: String, pub eviction: cloud_eviction::CloudEvictionResult, + pub adr_path: String, + pub goal_path: String, } /// Recollect provider evidence and active-use evidence, bind an attributed human approval to the @@ -1786,6 +1824,8 @@ pub async fn trash_verified_cloud_source( .join("cloud-receipts") .join(format!("{receipt_id}.json")); let evidence_dir = app_data_dir.join("cloud-provider-evidence"); + let adr_dir = app_data_dir.join("cloud-adr"); + let goal_dir = app_data_dir.join("cloud-goals"); let approval_dir = app_data_dir.join("cloud-source-eviction-approvals"); let eviction_dir = app_data_dir.join("cloud-source-evictions"); let journal_path = journal_file_path(&app)?; @@ -1801,6 +1841,8 @@ pub async fn trash_verified_cloud_source( &receipt, object_id, &evidence_dir, + &adr_dir, + &goal_dir, &connection_path, &cloud_roots, )?; @@ -1835,12 +1877,29 @@ pub async fn trash_verified_cloud_source( &journal_path, cloud::system_now_ms(), )?; + let updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::snapshot_from_evidence( + &attestation.evidence_record, + cloud_transfer::CloudOffloadGoalState::SourceEvicted, + updated_at_ms, + ); + let adr_path = cloud_adr::write_latest_snapshot(&adr_dir, &adr)?; + let goal = cloud_adr::goal_snapshot_from_evidence( + &receipt, + &attestation.evidence_record, + cloud_transfer::CloudOffloadGoalState::SourceEvicted, + updated_at_ms, + ); + let goal_path = cloud_adr::write_latest_goal_snapshot(&goal_dir, &goal)?; Ok(CloudSourceEvictionOutput { action: "attest-approve-and-trash-verified-cloud-source", + goal_state: cloud_transfer::CloudOffloadGoalState::SourceEvicted, attestation, approval, approval_path: approval_path.to_string_lossy().into_owned(), eviction, + adr_path: adr_path.to_string_lossy().into_owned(), + goal_path: goal_path.to_string_lossy().into_owned(), }) }) .await diff --git a/src-tauri/src/git_worktree.rs b/src-tauri/src/git_worktree.rs index 09e4b381a..6b8f0dbda 100644 --- a/src-tauri/src/git_worktree.rs +++ b/src-tauri/src/git_worktree.rs @@ -14,6 +14,8 @@ use std::path::{Path, PathBuf}; use std::process::{Command, Stdio}; use std::thread; use std::time::{Duration, Instant}; +#[cfg(unix)] +use std::os::unix::process::CommandExt; pub const GIT_WORKTREE_AUDIT_SCHEMA_KIND: &str = "disksage.git-worktree-audit/v2"; const MAX_COMMAND_OUTPUT_BYTES: usize = 4 * 1024 * 1024; @@ -21,6 +23,8 @@ const MAX_REFERENCE_BYTES: usize = 1_024; const MAX_REACHABLE_COMMITS: usize = 100_000; const GIT_WORKTREE_REMOVAL_VERSION: u32 = 1; const MAX_RATIONALE_BYTES: usize = 1_000; +const MAX_ADMIN_FALLBACK_ENTRIES: usize = 512; +const MAX_ADMIN_FALLBACK_FILE_BYTES: u64 = 16 * 1024; const POLL_INTERVAL_MS: u64 = 10; #[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)] @@ -373,6 +377,17 @@ fn run_bounded_command( if program == "git" { command.env("GIT_OPTIONAL_LOCKS", "0"); } + #[cfg(unix)] + // Keep descendants in a private process group so a timeout cannot leave a Git helper holding + // stdout/stderr pipes open and make the bounded reader join hang indefinitely. + unsafe { + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } let mut child = command .spawn() .map_err(|_| format!("{program}-command-spawn-failed"))?; @@ -394,11 +409,19 @@ fn run_bounded_command( Ok(Some(status)) => break Some(status), Ok(None) if started.elapsed() >= Duration::from_millis(timeout_ms) => { timed_out = true; + #[cfg(unix)] + unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + } let _ = child.kill(); break child.wait().ok(); } Ok(None) => thread::sleep(Duration::from_millis(POLL_INTERVAL_MS)), Err(_) => { + #[cfg(unix)] + unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + } let _ = child.kill(); let _ = child.wait(); break None; @@ -1004,6 +1027,107 @@ fn list_worktrees( Ok(entries) } +fn read_admin_fallback_file(path: &Path) -> Result { + let metadata = fs::symlink_metadata(path) + .map_err(|_| "git-worktree-admin-fallback-file-missing".to_string())?; + if !metadata.is_file() || metadata.file_type().is_symlink() { + return Err("git-worktree-admin-fallback-file-unsafe".into()); + } + #[cfg(target_os = "macos")] + { + use std::os::darwin::fs::MetadataExt; + const SF_DATALESS: u32 = 0x4000_0000; + if metadata.st_flags() & SF_DATALESS != 0 { + return Err("git-worktree-admin-fallback-file-dataless".into()); + } + } + if metadata.len() > MAX_ADMIN_FALLBACK_FILE_BYTES { + return Err("git-worktree-admin-fallback-file-too-large".into()); + } + let mut file = fs::File::open(path) + .map_err(|_| "git-worktree-admin-fallback-file-open-failed".to_string())?; + let mut bytes = Vec::with_capacity(metadata.len() as usize); + file.read_to_end(&mut bytes) + .map_err(|_| "git-worktree-admin-fallback-file-read-failed".to_string())?; + String::from_utf8(bytes) + .map(|value| value.trim().to_string()) + .map_err(|_| "git-worktree-admin-fallback-file-not-utf8".into()) +} + +/// Recover bounded registration facts when Git's porcelain listing hangs on a malformed entry. +/// The returned records intentionally retain evidence gaps, so no removal operation can use them. +fn admin_fallback_worktrees( + common_dir: &Path, + options: GitWorktreeAuditOptions, +) -> (Vec, Vec) { + let admin_dir = common_dir.join("worktrees"); + let mut issues = vec![ + "read-only-git-admin-fallback".into(), + "git-worktree-remove-not-invoked".into(), + "git-worktree-prune-not-invoked".into(), + ]; + let mut entries: Vec<_> = match fs::read_dir(&admin_dir) { + Ok(read_dir) => read_dir.filter_map(Result::ok).collect(), + Err(_) => { + issues.push("git-worktree-admin-fallback-directory-unavailable".into()); + return (Vec::new(), issues); + } + }; + entries.sort_by_key(|entry| entry.file_name()); + if entries.len() > options.max_worktrees.min(MAX_ADMIN_FALLBACK_ENTRIES) { + issues.push("git-worktree-admin-fallback-entry-limit".into()); + } + entries.truncate(options.max_worktrees.min(MAX_ADMIN_FALLBACK_ENTRIES)); + let mut worktrees = Vec::with_capacity(entries.len()); + for entry in entries { + let name = entry.file_name().to_string_lossy().into_owned(); + let admin_entry = entry.path(); + let safe_dir = fs::symlink_metadata(&admin_entry) + .is_ok_and(|metadata| metadata.is_dir() && !metadata.file_type().is_symlink()); + if !safe_dir { + issues.push(format!("git-worktree-admin-fallback-entry-unsafe:{name}")); + continue; + } + let gitdir = read_admin_fallback_file(&admin_entry.join("gitdir")); + let path = gitdir + .as_ref() + .ok() + .and_then(|value| Path::new(value).parent()) + .map(Path::to_path_buf) + .unwrap_or_else(|| PathBuf::from(format!(""))); + let head = read_admin_fallback_file(&admin_entry.join("HEAD")) + .ok() + .filter(|value| is_oid(value)) + .unwrap_or_else(|| "admin-unknown-head".into()); + let locked = fs::symlink_metadata(admin_entry.join("locked")).is_ok(); + let lock_reason = locked + .then(|| read_admin_fallback_file(&admin_entry.join("locked")).unwrap_or_default()) + .filter(|value| !value.is_empty()); + let prunable = fs::symlink_metadata(admin_entry.join("prunable")).is_ok(); + let prunable_reason = prunable + .then(|| read_admin_fallback_file(&admin_entry.join("prunable")).unwrap_or_default()) + .filter(|value| !value.is_empty()); + if gitdir.is_err() { + issues.push(format!("git-worktree-admin-gitdir-unavailable:{name}")); + } + if head == "admin-unknown-head" { + issues.push(format!("git-worktree-admin-head-unavailable:{name}")); + } + worktrees.push(RawWorktree { + path, + head, + branch: None, + detached: true, + bare: false, + locked, + lock_reason, + prunable, + prunable_reason, + }); + } + (worktrees, issues) +} + fn status_observation(path: &Path, timeout_ms: u64) -> (Option, Option) { let result = match run_git( path, @@ -1114,12 +1238,18 @@ pub fn audit_git_worktrees( &retention_references, options.command_timeout_ms, )?; - let raw_worktrees = list_worktrees(&repository_root, options)?; + let (raw_worktrees, fallback_issues) = match list_worktrees(&repository_root, options) { + Ok(raw_worktrees) => (raw_worktrees, Vec::new()), + Err(error) if error == "git-worktree-list-timeout" => { + admin_fallback_worktrees(&common_dir, options) + } + Err(error) => return Err(error), + }; let actor_cwd = canonical_actor_cwd(); let common_dir_string = common_dir.to_string_lossy().into_owned(); let audit_origin = repository_root.clone(); let mut entries = Vec::with_capacity(raw_worktrees.len()); - let mut issues = Vec::new(); + let mut issues = fallback_issues; for (index, raw) in raw_worktrees.into_iter().enumerate() { let path_result = canonical_real_directory(&raw.path); @@ -2086,6 +2216,28 @@ mod tests { assert!(parse_worktree_porcelain(invalid_head).is_err()); } + #[cfg(unix)] + #[test] + fn admin_fallback_surfaces_stale_registration_without_creating_removal_candidates() { + let temp = tempfile::tempdir().unwrap(); + let common_dir = temp.path().join(".git"); + let admin = common_dir.join("worktrees").join("stale"); + fs::create_dir_all(&admin).unwrap(); + fs::write(admin.join("gitdir"), "/missing-worktree/.git\n").unwrap(); + fs::write(admin.join("HEAD"), "not-a-head\n").unwrap(); + let (entries, issues) = + admin_fallback_worktrees(&common_dir, GitWorktreeAuditOptions::default()); + assert_eq!(entries.len(), 1); + assert_eq!(entries[0].path, PathBuf::from("/missing-worktree")); + assert_eq!(entries[0].head, "admin-unknown-head"); + assert!(issues + .iter() + .any(|issue| issue == "read-only-git-admin-fallback")); + assert!(issues + .iter() + .any(|issue| issue == "git-worktree-admin-head-unavailable:stale")); + } + #[test] fn retention_reachability_membership_is_exact_and_fail_closed() { let reachable = BTreeSet::from([oid('a'), oid('b')]); diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 8e359a58c..6f68f3ab9 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -41,6 +41,7 @@ mod brew_cleanup; pub mod archive_git_tree; #[cfg_attr(coverage, allow(dead_code))] pub mod cloud; +pub mod cloud_adr; /// Typed backend-authored presentation contract for cloud archive plans. pub mod cloud_plan_view; pub mod cloud_local_inventory; diff --git a/src-tauri/src/naruon_lineage.rs b/src-tauri/src/naruon_lineage.rs index bef5ba30a..495094073 100644 --- a/src-tauri/src/naruon_lineage.rs +++ b/src-tauri/src/naruon_lineage.rs @@ -536,6 +536,7 @@ mod tests { kind: SyncEvidenceKind::ProviderNativeStatus, evidence_id: format!("file-provider:{}", "1".repeat(64)), sync_complete: true, + sync_state: crate::cloud_transfer::ProviderSyncState::Complete, remote_content: None, }) .unwrap() @@ -672,6 +673,7 @@ mod tests { let mut pending = evidence(&receipt).evidence; pending.confirmed_at_ms = receipt.copied_at_ms + PROVIDER_SYNC_OVERDUE_AFTER_MS; pending.sync_complete = false; + pending.sync_state = crate::cloud_transfer::ProviderSyncState::Uploading; let record = create_sync_evidence_record(&pending).unwrap(); let envelope = export_naruon_file_lineage(&receipt, Some(&record)).unwrap(); diff --git a/src-tauri/src/provider_evidence.rs b/src-tauri/src/provider_evidence.rs index 4afcccd37..9631c1567 100644 --- a/src-tauri/src/provider_evidence.rs +++ b/src-tauri/src/provider_evidence.rs @@ -55,6 +55,11 @@ fn validate_evidence(evidence: &ProviderSyncEvidence) -> Result<(), String> { { return Err("provider-evidence-id-invalid".into()); } + if !evidence.sync_state.is_unknown() + && evidence.sync_complete != evidence.sync_state.is_complete() + { + return Err("provider-evidence-sync-state-mismatch".into()); + } match (evidence.kind, &evidence.remote_content) { (SyncEvidenceKind::ProviderNativeStatus, None) | (SyncEvidenceKind::ProviderApi, Some(_)) => Ok(()), @@ -258,6 +263,7 @@ mod tests { kind: SyncEvidenceKind::ProviderApi, evidence_id: format!("provider-api:{}", "c".repeat(64)), sync_complete: true, + sync_state: crate::cloud_transfer::ProviderSyncState::Complete, remote_content: Some(RemoteContentProof { object_id: "remote-id".into(), revision: "revision-1".into(), diff --git a/src-tauri/src/provider_sync.rs b/src-tauri/src/provider_sync.rs index 4921b7b9c..50354be3d 100644 --- a/src-tauri/src/provider_sync.rs +++ b/src-tauri/src/provider_sync.rs @@ -1,7 +1,7 @@ use crate::cloud::CloudProvider; use crate::cloud_transfer::{ - CloudCopyReceipt, ProviderSyncEvidence, RemoteChecksumAlgorithm, RemoteContentProof, - SyncEvidenceKind, + CloudCopyReceipt, ProviderSyncEvidence, ProviderSyncState, RemoteChecksumAlgorithm, + RemoteContentProof, SyncEvidenceKind, }; #[cfg(test)] @@ -90,6 +90,20 @@ pub struct IcloudStatusSnapshot { pub destination_blake3: String, } +fn icloud_sync_state(snapshot: &IcloudStatusSnapshot) -> ProviderSyncState { + if !snapshot.is_ubiquitous { + ProviderSyncState::NotUbiquitous + } else if !snapshot.is_current { + ProviderSyncState::NotLocalCurrent + } else if snapshot.is_uploading { + ProviderSyncState::Uploading + } else if snapshot.is_uploaded { + ProviderSyncState::Complete + } else { + ProviderSyncState::PendingUpload + } +} + fn icloud_evidence_id( receipt: &CloudCopyReceipt, snapshot: &IcloudStatusSnapshot, @@ -143,6 +157,7 @@ pub fn evidence_from_icloud_snapshot( kind: SyncEvidenceKind::ProviderNativeStatus, evidence_id: icloud_evidence_id(receipt, snapshot, confirmed_at_ms), sync_complete, + sync_state: icloud_sync_state(snapshot), remote_content: None, }) } @@ -209,6 +224,24 @@ impl FileProviderStatusSnapshot { } } +fn file_provider_sync_state(snapshot: &FileProviderStatusSnapshot) -> ProviderSyncState { + if snapshot.item.is_excluded_from_sync { + ProviderSyncState::ExcludedFromSync + } else if snapshot.item.is_sync_paused { + ProviderSyncState::SyncPaused + } else if !snapshot.is_local_current() { + ProviderSyncState::NotLocalCurrent + } else if snapshot.item.has_unresolved_conflicts { + ProviderSyncState::ContentMismatch + } else if snapshot.item.is_uploading { + ProviderSyncState::Uploading + } else if snapshot.item.is_uploaded { + ProviderSyncState::Complete + } else { + ProviderSyncState::PendingUpload + } +} + fn file_provider_evidence_id( receipt: &CloudCopyReceipt, snapshot: &FileProviderStatusSnapshot, @@ -268,6 +301,7 @@ pub fn evidence_from_file_provider_snapshot( kind: SyncEvidenceKind::ProviderNativeStatus, evidence_id: file_provider_evidence_id(receipt, snapshot, confirmed_at_ms), sync_complete: snapshot.is_sync_complete(), + sync_state: file_provider_sync_state(snapshot), remote_content: None, }) } @@ -466,6 +500,13 @@ pub fn evidence_from_provider_api_snapshot_with_location( confirmed_at_ms, ), sync_complete, + sync_state: if sync_complete { + ProviderSyncState::Complete + } else if !snapshot.available || snapshot.trashed { + ProviderSyncState::RemoteUnavailable + } else { + ProviderSyncState::ContentMismatch + }, remote_content: Some(RemoteContentProof { object_id: snapshot.remote_object_id.clone(), revision: snapshot.remote_revision.clone(), @@ -876,9 +917,30 @@ mod tests { assert_eq!(evidence.kind, SyncEvidenceKind::ProviderNativeStatus); assert!(evidence.evidence_id.starts_with("foundation:")); assert_eq!(evidence.evidence_id.len(), 75); + assert_eq!(evidence.sync_state, ProviderSyncState::Complete); assert_eq!(evidence.remote_content, None); } + #[test] + fn local_current_but_not_uploaded_is_pending_upload() { + let receipt = receipt(CloudProvider::Icloud); + let evidence = evidence_from_icloud_snapshot( + &receipt, + &IcloudStatusSnapshot { + is_ubiquitous: true, + is_uploaded: false, + is_uploading: false, + is_current: true, + observed_bytes: 42, + destination_blake3: "content-hash".into(), + }, + 30, + ) + .unwrap(); + assert_eq!(evidence.sync_state, ProviderSyncState::PendingUpload); + assert!(!evidence.sync_complete); + } + #[test] fn timeliness_distinguishes_complete_pending_and_overdue_without_approving() { let receipt = receipt(CloudProvider::Icloud); @@ -903,6 +965,7 @@ mod tests { ["provider-sync-confirmation-pending"] ); assert!(!pending.sync_complete); + assert_eq!(pending.sync_state, ProviderSyncState::Uploading); let overdue = evidence_from_icloud_snapshot( &receipt, diff --git a/src-tauri/tests/cloud_eviction_fail_closed.rs b/src-tauri/tests/cloud_eviction_fail_closed.rs index e1f9ef31b..07c1b7d77 100644 --- a/src-tauri/tests/cloud_eviction_fail_closed.rs +++ b/src-tauri/tests/cloud_eviction_fail_closed.rs @@ -113,6 +113,7 @@ fn valid_receipt( kind: SyncEvidenceKind::ProviderNativeStatus, evidence_id: "native-test-evidence".into(), sync_complete: true, + sync_state: disksage_lib::cloud_transfer::ProviderSyncState::Complete, remote_content: None, }; let evidence_record = create_sync_evidence_record(&evidence).unwrap(); diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 66005c611..d66c8a68a 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -414,6 +414,22 @@ return new Date(ms).toLocaleDateString(); } + function syncStateLabel(state: api.ProviderSyncState | undefined): string { + const labels: Record = { + complete: "공급자 동기화 완료", + "pending-upload": "로컬 최신본이지만 공급자 업로드 대기 중", + "not-ubiquitous": "iCloud 관리 대상 아님", + "not-local-current": "로컬 최신본 아님", + uploading: "공급자 업로드 중", + "excluded-from-sync": "공급자 동기화 제외됨", + "sync-paused": "공급자 동기화 일시중지됨", + "remote-unavailable": "원격 객체를 확인할 수 없음", + "content-mismatch": "원격 콘텐츠가 로컬 복사본과 다름", + unknown: "공급자 상태 미확인", + }; + return labels[state ?? "unknown"]; + } + function duration(ms: number): string { const totalMinutes = Math.floor(ms / 60_000); const hours = Math.floor(totalMinutes / 60); @@ -607,6 +623,7 @@ {copied.action === "adopt-existing-copy" ? "기존 클라우드 복사본 검증·채택 완료" : "검증 복사 완료"} · 원본 보존됨
영수증 {copied.receipt.receipt_id} · {fmtBytes(copied.receipt.bytes)}
{copied.receipt.destination}
+

Goal: {copied.goal_state} · 동적 Goal: {copied.goal_path}

{#if copied.receipt.provider === "google-drive"}
- {#if report.notices.includes("icloud-new-copy-admission-blocked") - || report.notices.includes("provider-global-sync-blocked") - || report.notices.includes("provider-global-sync-evidence-unavailable")} + {#if hasProviderAdmissionBlocker(report.notices)}

현재 공급자 전역 동기화 증거가 불완전하거나 전송 중입니다. 새 copy-only 버튼은 비활성화되며, 상태가 해소된 뒤 다시 계획해야 합니다. 기존 복사본 채택·per-item attestation은 별도 경로로 동작합니다. From 72355aeada186ed72ffde0623d23920a49c90ec3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 07:04:26 +0900 Subject: [PATCH 042/691] feat: periodically reconcile cloud projections --- src/lib/CloudArchive.svelte | 32 ++++++++++++++++++++------------ 1 file changed, 20 insertions(+), 12 deletions(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 7592b0dcb..254041b5e 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -17,6 +17,7 @@ import { fmtBytes } from "./fmt"; import IcloudLocalEviction from "./IcloudLocalEviction.svelte"; + const RECONCILIATION_INTERVAL_MS = 60_000; const PROVIDER_ADMISSION_BLOCKERS = new Set([ "icloud-new-copy-admission-blocked", "provider-global-sync-blocked", @@ -80,18 +81,24 @@ ); let reviewPageData = $derived.by(() => cloudReviewQueuePage(filteredReviewCandidates, reviewPage)); - onMount(async () => { - try { - const discovery = await api.inspectCloudRoots(); - roots = discovery.roots; - rootIssues = discovery.issues; - connections = await api.listCloudProviderConnections(); - reviewDecisions = await api.listCloudReviewDecisions(); - selectedRoot = roots.find((root) => root.readable)?.path ?? ""; - await reconcileCloudReceipts(); - } catch (e) { - loadError = String(e); - } + onMount(() => { + const reconciliationTimer = setInterval(() => { + if (!reconciling) void reconcileCloudReceipts(); + }, RECONCILIATION_INTERVAL_MS); + void (async () => { + try { + const discovery = await api.inspectCloudRoots(); + roots = discovery.roots; + rootIssues = discovery.issues; + connections = await api.listCloudProviderConnections(); + reviewDecisions = await api.listCloudReviewDecisions(); + selectedRoot = roots.find((root) => root.readable)?.path ?? ""; + await reconcileCloudReceipts(); + } catch (e) { + loadError = String(e); + } + })(); + return () => clearInterval(reconciliationTimer); }); async function preview() { @@ -510,6 +517,7 @@ + 화면이 열려 있는 동안 60초마다 읽기 전용 ADR/Goal 재검증 {#if reconciliation}

From f9c886b280a0664734c1bfae3d70c30e9f98b6ad Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 07:05:16 +0900 Subject: [PATCH 043/691] docs: record periodic cloud projection reconciliation --- docs/development/cloud-offload-operator-runbook.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 254d560bf..0d12abaf8 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -13,7 +13,8 @@ The runtime sequence is: projections atomically in both entrypoints. 3. After restart, the desktop app automatically runs `reconcile_cloud_receipts` over the bounded receipt set; it refreshes provider evidence and the replaceable ADR/Goal projections only. The - UI also exposes a manual re-run, and the reconciliation never writes to cloud or evicts a source. + open desktop view repeats this read-only reconciliation every 60 seconds and exposes a manual + re-run; the reconciliation never writes to cloud or evicts a source. 4. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and no eviction permit is issued. 5. If the destination is valid but the receipt source is missing or unsafe, reconciliation writes From 74d717e676e52f23fed935e48d1f28b769147c73 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 07:20:18 +0900 Subject: [PATCH 044/691] fix: seed cloud projections when attestation is unavailable --- src-tauri/src/cloud_adr.rs | 44 ++++++++++++++++++++++++++++++++++++++ src-tauri/src/commands.rs | 12 ++++++++++- 2 files changed, 55 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 876e213ab..698ea3e81 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -344,6 +344,27 @@ pub fn write_projection_pair( (adr_path, goal_path, warnings) } +/// Seed projections for a receipt whose provider evidence is not available yet. +/// +/// This never creates an evidence record or advances a goal. A previously observed advanced +/// projection is authoritative for the current state, so its expected state-regression warning is +/// ignored while missing projections are created with an explicit `unknown` provider state. +pub fn ensure_initial_projection_pair( + receipt: &CloudCopyReceipt, + adr_dir: &Path, + goal_dir: &Path, + updated_at_ms: u64, +) -> Vec { + let adr = initial_adr_snapshot(receipt, updated_at_ms); + let goal = initial_goal_snapshot(receipt, updated_at_ms); + let (_, _, mut warnings) = write_projection_pair(adr_dir, &adr, goal_dir, &goal); + warnings.retain(|warning| { + !warning.ends_with("cloud-adr-state-regression") + && !warning.ends_with("cloud-goal-state-regression") + }); + warnings +} + #[cfg(test)] mod tests { use super::*; @@ -495,4 +516,27 @@ mod tests { .iter() .any(|warning| warning == "goal-projection-write-failed:cloud-goal-state-regression")); } + + #[test] + fn initial_projection_pair_seeds_missing_state_without_evidence() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + assert!(ensure_initial_projection_pair(&receipt, &adr_dir, &goal_dir, 4).is_empty()); + + let adr: CloudOffloadAdrSnapshot = serde_json::from_slice( + &std::fs::read(adr_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + let goal: CloudOffloadGoalSnapshot = serde_json::from_slice( + &std::fs::read(goal_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!(adr.goal_state, CloudOffloadGoalState::CopyVerified); + assert_eq!(adr.provider_sync_state, ProviderSyncState::Unknown); + assert_eq!(goal.goal_state, CloudOffloadGoalState::CopyVerified); + assert_eq!(goal.provider_sync_state, ProviderSyncState::Unknown); + assert!(goal.evidence_record_id.is_none()); + } } diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 905bf83dd..456d912c0 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1845,13 +1845,23 @@ fn reconcile_cloud_receipts_inner( } Err(error) => { output.error_count = output.error_count.saturating_add(1); + let projection_warnings = cloud_adr::ensure_initial_projection_pair( + &receipt, + adr_dir, + goal_dir, + output.observed_at_ms, + ); + let mut blockers = vec!["provider-attestation-incomplete".into()]; + if !projection_warnings.is_empty() { + blockers.push("dynamic-projection-update-incomplete".into()); + } output.entries.push(CloudReceiptReconciliationEntry { receipt_id: Some(receipt.receipt_id), provider: Some(receipt.provider), goal_state: None, provider_sync_state: None, eviction_permit: false, - blockers: vec!["provider-attestation-incomplete".into()], + blockers, error: Some(stable_reconciliation_error(&error)), }); } From 2de8ee1db61190fd1c270fc435a0417d8df6fc50 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 07:40:27 +0900 Subject: [PATCH 045/691] fix: expose retained projection state during reconciliation --- src-tauri/src/cloud_adr.rs | 115 +++++++++++++++++++++++++++++++++++-- src-tauri/src/commands.rs | 20 ++++++- 2 files changed, 128 insertions(+), 7 deletions(-) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 698ea3e81..aa3735d19 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -47,6 +47,15 @@ pub struct CloudOffloadGoalSnapshot { pub updated_at_ms: u64, } +/// The latest replaceable projection state used when a fresh provider attestation is unavailable. +/// This is never an eviction permit; it only keeps reconciliation/UI state truthful. +#[derive(Debug, Clone, Copy, PartialEq, Eq)] +pub struct CloudProjectionState { + pub goal_state: CloudOffloadGoalState, + pub provider_sync_state: ProviderSyncState, + pub updated_at_ms: u64, +} + fn decision_for(goal_state: CloudOffloadGoalState, sync_state: ProviderSyncState) -> String { match goal_state { CloudOffloadGoalState::CopyVerified => "retain-source-after-copy".into(), @@ -221,10 +230,7 @@ fn goal_state_rank(state: CloudOffloadGoalState) -> u8 { } } -fn projection_state( - encoded: &[u8], - kind: &str, -) -> Result<(CloudOffloadGoalState, u64), String> { +fn projection_state(encoded: &[u8], kind: &str) -> Result<(CloudOffloadGoalState, u64), String> { match kind { "adr" => serde_json::from_slice::(encoded) .map(|snapshot| (snapshot.goal_state, snapshot.updated_at_ms)) @@ -257,7 +263,8 @@ fn write_latest_json( if metadata.file_type().is_symlink() || !metadata.is_file() { return Err(format!("cloud-{kind}-existing-unsafe")); } - let existing = std::fs::read(&path).map_err(|_| format!("cloud-{kind}-existing-read-failed"))?; + let existing = + std::fs::read(&path).map_err(|_| format!("cloud-{kind}-existing-read-failed"))?; let previous = projection_state(&existing, kind)?; if goal_state_rank(incoming.0) < goal_state_rank(previous.0) || (incoming.0 == previous.0 && incoming.1 < previous.1) @@ -365,6 +372,68 @@ pub fn ensure_initial_projection_pair( warnings } +fn read_latest_projection( + directory: &Path, + receipt_id: &str, + kind: &str, +) -> Result, String> { + let metadata = match std::fs::symlink_metadata(directory) { + Ok(metadata) => metadata, + Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(None), + Err(_) => return Err(format!("cloud-{kind}-directory-metadata-failed")), + }; + if metadata.file_type().is_symlink() || !metadata.is_dir() { + return Err(format!("cloud-{kind}-directory-unsafe")); + } + let path = directory.join(format!("{receipt_id}-latest.json")); + let metadata = match std::fs::symlink_metadata(&path) { + Ok(metadata) => metadata, + Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(None), + Err(_) => return Err(format!("cloud-{kind}-existing-metadata-failed")), + }; + if metadata.file_type().is_symlink() || !metadata.is_file() { + return Err(format!("cloud-{kind}-existing-unsafe")); + } + let encoded = std::fs::read(&path).map_err(|_| format!("cloud-{kind}-existing-read-failed"))?; + serde_json::from_slice(&encoded) + .map(Some) + .map_err(|_| format!("cloud-{kind}-existing-invalid")) +} + +/// Read the last paired ADR/Goal state without creating or mutating anything. +/// A partial or divergent pair is treated as unavailable so callers cannot mistake stale state for +/// a fresh provider attestation. +pub fn read_projection_state( + receipt_id: &str, + adr_dir: &Path, + goal_dir: &Path, +) -> Result, String> { + if receipt_id.len() != 64 || !receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) { + return Err("cloud-snapshot-receipt-id-invalid".into()); + } + let adr = read_latest_projection::(adr_dir, receipt_id, "adr")?; + let goal = read_latest_projection::(goal_dir, receipt_id, "goal")?; + match (adr, goal) { + (None, None) => Ok(None), + (Some(_), None) | (None, Some(_)) => Err("cloud-projection-pair-incomplete".into()), + (Some(adr), Some(goal)) => { + if adr.receipt_id != receipt_id + || goal.receipt_id != receipt_id + || adr.goal_state != goal.goal_state + || adr.provider_sync_state != goal.provider_sync_state + || adr.updated_at_ms != goal.updated_at_ms + { + return Err("cloud-projection-state-mismatch".into()); + } + Ok(Some(CloudProjectionState { + goal_state: goal.goal_state, + provider_sync_state: goal.provider_sync_state, + updated_at_ms: goal.updated_at_ms, + })) + } + } +} + #[cfg(test)] mod tests { use super::*; @@ -539,4 +608,40 @@ mod tests { assert_eq!(goal.provider_sync_state, ProviderSyncState::Unknown); assert!(goal.evidence_record_id.is_none()); } + + #[test] + fn projection_state_can_be_read_without_granting_eviction_authority() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + ensure_initial_projection_pair(&receipt, &adr_dir, &goal_dir, 4); + + assert_eq!( + read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir).unwrap(), + Some(CloudProjectionState { + goal_state: CloudOffloadGoalState::CopyVerified, + provider_sync_state: ProviderSyncState::Unknown, + updated_at_ms: 4, + }) + ); + } + + #[test] + fn divergent_projection_pair_is_not_reused_as_current_state() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + ensure_initial_projection_pair(&receipt, &adr_dir, &goal_dir, 4); + let mut goal = initial_goal_snapshot(&receipt, 5); + goal.goal_state = CloudOffloadGoalState::PendingProviderSync; + goal.provider_sync_state = ProviderSyncState::PendingUpload; + write_latest_goal_snapshot(&goal_dir, &goal).unwrap(); + + assert_eq!( + read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir).unwrap_err(), + "cloud-projection-state-mismatch" + ); + } } diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 456d912c0..94c5c7cc4 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1855,11 +1855,27 @@ fn reconcile_cloud_receipts_inner( if !projection_warnings.is_empty() { blockers.push("dynamic-projection-update-incomplete".into()); } + let projection = + cloud_adr::read_projection_state(&receipt.receipt_id, adr_dir, goal_dir); + let (goal_state, provider_sync_state) = match projection { + Ok(Some(state)) => { + blockers.push("projection-state-not-revalidated".into()); + (Some(state.goal_state), Some(state.provider_sync_state)) + } + Ok(None) => (None, None), + Err(_) => { + blockers.push("dynamic-projection-state-unavailable".into()); + (None, None) + } + }; + if goal_state == Some(cloud_transfer::CloudOffloadGoalState::PendingProviderSync) { + output.pending_count = output.pending_count.saturating_add(1); + } output.entries.push(CloudReceiptReconciliationEntry { receipt_id: Some(receipt.receipt_id), provider: Some(receipt.provider), - goal_state: None, - provider_sync_state: None, + goal_state, + provider_sync_state, eviction_permit: false, blockers, error: Some(stable_reconciliation_error(&error)), From fb6704635424e6b5e53f82dd31707f3d73b7a0f0 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 07:43:56 +0900 Subject: [PATCH 046/691] fix: bound projection state reads --- src-tauri/src/cloud_adr.rs | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index aa3735d19..0ce9be6c3 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -6,12 +6,13 @@ use crate::cloud_transfer::{CloudCopyReceipt, CloudOffloadGoalState, ProviderSyncState}; use crate::provider_evidence::ProviderSyncEvidenceRecord; use std::collections::BTreeMap; -use std::io::Write; +use std::io::{Read, Write}; use std::path::{Path, PathBuf}; use std::sync::{Mutex, OnceLock}; pub const CLOUD_ADR_SCHEMA_VERSION: u32 = 2; pub const CLOUD_GOAL_SCHEMA_VERSION: u32 = 1; +const MAX_PROJECTION_BYTES: u64 = 256 * 1024; // ponytail: one process-wide lock keeps low-volume projections ordered; use per-receipt locks if // concurrent multi-account projection throughput ever becomes measurable. @@ -394,7 +395,20 @@ fn read_latest_projection( if metadata.file_type().is_symlink() || !metadata.is_file() { return Err(format!("cloud-{kind}-existing-unsafe")); } - let encoded = std::fs::read(&path).map_err(|_| format!("cloud-{kind}-existing-read-failed"))?; + if metadata.len() == 0 || metadata.len() > MAX_PROJECTION_BYTES { + return Err(format!("cloud-{kind}-existing-size-invalid")); + } + let capacity = usize::try_from(metadata.len()) + .map_err(|_| format!("cloud-{kind}-existing-size-invalid"))?; + let mut encoded = Vec::with_capacity(capacity); + std::fs::File::open(&path) + .map_err(|_| format!("cloud-{kind}-existing-read-failed"))? + .take(MAX_PROJECTION_BYTES + 1) + .read_to_end(&mut encoded) + .map_err(|_| format!("cloud-{kind}-existing-read-failed"))?; + if encoded.len() as u64 != metadata.len() { + return Err(format!("cloud-{kind}-existing-changed")); + } serde_json::from_slice(&encoded) .map(Some) .map_err(|_| format!("cloud-{kind}-existing-invalid")) From bf300864a7156b11963b44989e8513c77558e2d3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 07:48:11 +0900 Subject: [PATCH 047/691] fix: share observation time across projections --- src-tauri/src/bin/disksage-cloud-plan.rs | 5 +++-- src-tauri/src/commands.rs | 5 +++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index eddff368d..04cae42fb 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2996,8 +2996,9 @@ fn run() -> Result<(), String> { )? }; let (adr_dir, goal_dir) = cloud_projection_dirs(receipt_dir); - let adr = cloud_adr::initial_adr_snapshot(&receipt, cloud::system_now_ms()); - let goal = cloud_adr::initial_goal_snapshot(&receipt, cloud::system_now_ms()); + let projection_updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, projection_updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, projection_updated_at_ms); let (adr_path, goal_path, projection_warnings) = cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); println!( diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 94c5c7cc4..9f9b6362a 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1550,8 +1550,9 @@ fn create_cloud_candidate_receipt( let mut projection_warnings = Vec::new(); let (adr_path, goal_path) = match app.path().app_data_dir() { Ok(app_data_dir) => { - let adr = cloud_adr::initial_adr_snapshot(&receipt, cloud::system_now_ms()); - let goal = cloud_adr::initial_goal_snapshot(&receipt, cloud::system_now_ms()); + let projection_updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, projection_updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, projection_updated_at_ms); let (adr_path, goal_path, warnings) = cloud_adr::write_projection_pair( &app_data_dir.join("cloud-adr"), &adr, From 65b4db3cf2f3fd46212766225c0ffe42cb8b6d28 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:07:28 +0900 Subject: [PATCH 048/691] feat: reconcile cloud receipts from headless CLI --- .../cloud-offload-operator-runbook.md | 5 + src-tauri/src/bin/disksage-cloud-plan.rs | 339 +++++++++++++++++- src-tauri/src/cloud_adr.rs | 57 +++ src-tauri/src/cloud_transfer.rs | 16 + src-tauri/src/commands.rs | 23 +- 5 files changed, 413 insertions(+), 27 deletions(-) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 0d12abaf8..3c9927d80 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -15,6 +15,11 @@ The runtime sequence is: receipt set; it refreshes provider evidence and the replaceable ADR/Goal projections only. The open desktop view repeats this read-only reconciliation every 60 seconds and exposes a manual re-run; the reconciliation never writes to cloud or evicts a source. + The same operation is available headlessly with + `disksage-cloud-plan --reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH` + (add the existing OAuth connection flags only when a provider API fallback is required). This + command performs local evidence/projection writes only; `--audit-receipts` remains a strictly + read-only integrity report. 4. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and no eviction permit is issued. 5. If the destination is valid but the receipt source is missing or unsafe, reconciliation writes diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 04cae42fb..ad4c0f970 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -76,6 +76,7 @@ struct Args { adopt_existing_fingerprint: Option, receipt_dir: Option, audit_receipts: bool, + reconcile_receipts: bool, confirm_copy_phrase: Option, attest_receipt: Option, evidence_dir: Option, @@ -200,6 +201,7 @@ fn parse_args(args: &[String], home: &Path) -> Result { adopt_existing_fingerprint: None, receipt_dir: None, audit_receipts: false, + reconcile_receipts: false, confirm_copy_phrase: None, attest_receipt: None, evidence_dir: None, @@ -329,6 +331,7 @@ fn parse_args(args: &[String], home: &Path) -> Result { parsed.receipt_dir = Some(PathBuf::from(value(args, &mut index, "--receipt-dir")?)) } "--audit-receipts" => parsed.audit_receipts = true, + "--reconcile-receipts" => parsed.reconcile_receipts = true, "--confirm-copy-phrase" => { parsed.confirm_copy_phrase = Some(value(args, &mut index, "--confirm-copy-phrase")?) @@ -452,7 +455,7 @@ fn parse_args(args: &[String], home: &Path) -> Result { "--export-semantic-catalog" => parsed.export_semantic_catalog = true, "--help" | "-h" => { return Err( - "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH [--evidence-dir ABSOLUTE_PATH]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]".into(), + "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH] [--reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]".into(), ) } flag => return Err(format!("알 수 없는 인자: {flag}")), @@ -528,6 +531,10 @@ struct ReceiptReconciliationEntry { destination_state: Option, adr_projection_state: Option, goal_projection_state: Option, + goal_state: Option, + provider_sync_state: Option, + eviction_permit: bool, + attestation_error: Option, evidence_record_count: u64, issues: Vec, } @@ -546,6 +553,10 @@ struct ReceiptReconciliationReport { destination_not_present_count: u64, source_missing_destination_present_count: u64, incomplete_projection_count: u64, + attestation_attempted_count: u64, + provider_evidence_written_count: u64, + pending_provider_sync_count: u64, + eviction_ready_count: u64, entries: Vec, mutation_performed: bool, cloud_write_executed: bool, @@ -703,6 +714,10 @@ fn audit_receipts( destination_not_present_count: 0, source_missing_destination_present_count: 0, incomplete_projection_count: 0, + attestation_attempted_count: 0, + provider_evidence_written_count: 0, + pending_provider_sync_count: 0, + eviction_ready_count: 0, entries: Vec::new(), mutation_performed: false, cloud_write_executed: false, @@ -738,6 +753,10 @@ fn audit_receipts( destination_state: None, adr_projection_state: None, goal_projection_state: None, + goal_state: None, + provider_sync_state: None, + eviction_permit: false, + attestation_error: None, evidence_record_count: 0, issues: vec![format!("receipt-invalid:{error}")], }); @@ -792,6 +811,10 @@ fn audit_receipts( destination_state: Some(destination_state.into()), adr_projection_state: Some(adr_state.into()), goal_projection_state: Some(goal_state.into()), + goal_state: None, + provider_sync_state: None, + eviction_permit: false, + attestation_error: None, evidence_record_count: evidence_record_count(&evidence_dirs, &receipt.receipt_id), issues, }); @@ -822,14 +845,24 @@ fn validate_action_args(args: &Args) -> Result<(), String> { return Err("copy action과 existing-copy adoption action은 동시에 사용할 수 없음".into()); } let receipt_audit_action = args.audit_receipts; - if receipt_audit_action && (copy_action || adoption_action) { - return Err("receipt audit는 copy/adoption action과 함께 사용할 수 없음".into()); + let receipt_reconcile_action = args.reconcile_receipts; + let receipt_action = receipt_audit_action || receipt_reconcile_action; + if receipt_audit_action && receipt_reconcile_action { + return Err("--audit-receipts와 --reconcile-receipts는 함께 사용할 수 없음".into()); } - if !receipt_audit_action && (copy_action || adoption_action) != args.receipt_dir.is_some() { + if receipt_action && (copy_action || adoption_action) { + return Err( + "receipt audit/reconciliation은 copy/adoption action과 함께 사용할 수 없음".into(), + ); + } + if !receipt_action && (copy_action || adoption_action) != args.receipt_dir.is_some() { return Err("copy/adoption fingerprint와 --receipt-dir은 함께 지정해야 함".into()); } - if receipt_audit_action && args.receipt_dir.is_none() { - return Err("--audit-receipts에는 --receipt-dir이 필요함".into()); + if receipt_action && args.receipt_dir.is_none() { + return Err("--audit-receipts/--reconcile-receipts에는 --receipt-dir이 필요함".into()); + } + if receipt_reconcile_action && args.evidence_dir.is_none() { + return Err("--reconcile-receipts에는 --evidence-dir이 필요함".into()); } if (copy_action || adoption_action) != args.confirm_copy_phrase.is_some() { return Err("copy/adoption action에는 --confirm-copy-phrase가 반드시 필요함".into()); @@ -891,7 +924,10 @@ fn validate_action_args(args: &Args) -> Result<(), String> { } let attestation_action = args.attest_receipt.is_some(); let audit_evidence_override = args.audit_receipts && args.evidence_dir.is_some(); - if (attestation_action || eviction_action || audit_evidence_override) + if (attestation_action + || eviction_action + || receipt_reconcile_action + || audit_evidence_override) != args.evidence_dir.is_some() { return Err("attestation/eviction action에는 --evidence-dir이 반드시 필요함".into()); @@ -902,6 +938,7 @@ fn validate_action_args(args: &Args) -> Result<(), String> { let remote_provider_api = args.oauth_connections.is_some(); if remote_provider_api && args.attest_receipt.is_none() + && !receipt_reconcile_action && !eviction_action && !copy_action && !args.verify_capacity @@ -917,7 +954,7 @@ fn validate_action_args(args: &Args) -> Result<(), String> { || adoption_action || attestation_action || eviction_action - || receipt_audit_action + || receipt_action || exact_duplicate_review || args.export_naruon_lineage.is_some()) { @@ -961,7 +998,7 @@ fn validate_action_args(args: &Args) -> Result<(), String> { } let actions = usize::from(args.list_roots) + usize::from(args.inspect_roots) - + usize::from(receipt_audit_action) + + usize::from(receipt_action) + usize::from(copy_action) + usize::from(adoption_action) + usize::from(args.attest_receipt.is_some()) @@ -1022,7 +1059,7 @@ fn validate_action_args(args: &Args) -> Result<(), String> { } if actions > 1 { return Err( - "root inspection, copy, adoption, attestation, eviction, review action은 동시에 사용할 수 없음".into(), + "root inspection, receipt reconciliation, copy, adoption, attestation, eviction, review action은 동시에 사용할 수 없음".into(), ); } for (flag, fingerprint) in [ @@ -2440,21 +2477,35 @@ fn attest_receipt( let assessment = provider_sync::assess_provider_sync_timeliness(&receipt, &evidence)?; let (evidence_record, evidence_path) = provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; - let (permit, blockers) = + let source_blocker = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); + let (mut permit, mut blockers) = match cloud_transfer::approve_local_eviction(&receipt, &evidence_record) { Ok(permit) => (Some(permit), Vec::new()), Err(blockers) => (None, blockers), }; + if let Some(blocker) = source_blocker { + permit = None; + if !blockers.iter().any(|existing| existing == blocker) { + blockers.push(blocker.into()); + } + } let goal_state = cloud_transfer::CloudOffloadGoalState::after_attestation(&evidence, permit.is_some()); let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); - let adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); - let goal = cloud_adr::goal_snapshot_from_evidence( + let mut adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); + let mut goal = cloud_adr::goal_snapshot_from_evidence( &receipt, &evidence_record, goal_state, confirmed_at_ms, ); + if let Some(blocker) = source_blocker { + goal.status = "blocked".into(); + goal.completion_gates.insert("source-present".into(), false); + adr.decision = format!("{}-source-state-unverified", adr.decision); + adr.consequences + .push(format!("source-state-blocked:{blocker}")); + } let (adr_path, goal_path, projection_warnings) = cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); Ok(AttestationOutput { @@ -2473,6 +2524,203 @@ fn attest_receipt( }) } +#[cfg(not(coverage))] +fn stable_reconciliation_error(error: &str) -> String { + let token = error.split(',').next().unwrap_or_default(); + if !token.is_empty() + && token.len() <= 128 + && token + .bytes() + .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') + { + token.to_string() + } else { + "provider-attestation-failed".into() + } +} + +/// Re-attest every persisted receipt and refresh only local provider evidence and ADR/Goal +/// projections. This is the headless equivalent of the GUI reconciliation loop; it never writes +/// to a cloud provider and never evicts a source file. +#[cfg(not(coverage))] +fn reconcile_receipts( + receipt_dir: &Path, + evidence_dir: &Path, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, + generated_at_ms: u64, +) -> Result { + let mut report = audit_receipts(receipt_dir, Some(evidence_dir), generated_at_ms)?; + report.notices = vec![ + "provider-attestation-attempted", + "local-provider-evidence-write", + "dynamic-adr-goal-projection-write", + "immutable-receipts-remain-authority", + "no-cloud-write", + "no-local-eviction", + ]; + let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); + let mut paths = std::fs::read_dir(receipt_dir) + .map_err(|_| "receipt-directory-read-failed".to_string())? + .filter_map(Result::ok) + .map(|entry| entry.path()) + .collect::>(); + paths.sort(); + for path in paths { + let file_name = path + .file_name() + .and_then(|name| name.to_str()) + .unwrap_or_default() + .to_string(); + if regular_file_state(&path) != "present" || !file_name.ends_with(".json") { + continue; + } + let Ok(receipt) = cloud_transfer::read_immutable_receipt(&path) else { + continue; + }; + let Some(entry_index) = report + .entries + .iter() + .position(|entry| entry.receipt_id.as_deref() == Some(receipt.receipt_id.as_str())) + else { + continue; + }; + report.attestation_attempted_count = report.attestation_attempted_count.saturating_add(1); + match attest_receipt( + &path, + evidence_dir, + provider_object_id, + oauth_connections, + home, + ) { + Ok(attestation) => { + report.provider_evidence_written_count = + report.provider_evidence_written_count.saturating_add(1); + report.mutation_performed = true; + if attestation.goal_state + == cloud_transfer::CloudOffloadGoalState::PendingProviderSync + { + report.pending_provider_sync_count = + report.pending_provider_sync_count.saturating_add(1); + } + if attestation.permit.is_some() { + report.eviction_ready_count = report.eviction_ready_count.saturating_add(1); + } + let entry = &mut report.entries[entry_index]; + entry.goal_state = Some(attestation.goal_state); + entry.provider_sync_state = Some(attestation.evidence.sync_state); + entry.eviction_permit = attestation.permit.is_some(); + entry.attestation_error = None; + entry.issues.extend(attestation.blockers); + entry.issues.extend( + attestation + .projection_warnings + .into_iter() + .map(|warning| format!("projection-{warning}")), + ); + entry.adr_projection_state = Some( + projection_state( + &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "adr", + &receipt.receipt_id, + ) + .into(), + ); + entry.goal_projection_state = Some( + projection_state( + &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "goal", + &receipt.receipt_id, + ) + .into(), + ); + entry.evidence_record_count = + evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); + } + Err(error) => { + let projection_warnings = + cloud_adr::ensure_initial_projection_pair_with_source_state( + &receipt, + &adr_dir, + &goal_dir, + generated_at_ms, + ); + if projection_warnings.is_empty() { + report.mutation_performed = true; + } + let projection = + cloud_adr::read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir); + let entry = &mut report.entries[entry_index]; + entry.attestation_error = Some(stable_reconciliation_error(&error)); + entry.issues.push("provider-attestation-incomplete".into()); + if let Some(blocker) = + cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) + { + entry.issues.push(blocker.into()); + } + if !projection_warnings.is_empty() { + entry + .issues + .push("dynamic-projection-update-incomplete".into()); + } + entry.issues.extend( + projection_warnings + .into_iter() + .map(|warning| format!("projection-{warning}")), + ); + match projection { + Ok(Some(state)) => { + entry.goal_state = Some(state.goal_state); + entry.provider_sync_state = Some(state.provider_sync_state); + entry.eviction_permit = false; + entry.issues.push("projection-state-not-revalidated".into()); + if state.goal_state + == cloud_transfer::CloudOffloadGoalState::PendingProviderSync + { + report.pending_provider_sync_count = + report.pending_provider_sync_count.saturating_add(1); + } + } + Ok(None) => entry + .issues + .push("dynamic-projection-state-unavailable".into()), + Err(_) => entry + .issues + .push("dynamic-projection-state-unavailable".into()), + } + entry.adr_projection_state = Some( + projection_state( + &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "adr", + &receipt.receipt_id, + ) + .into(), + ); + entry.goal_projection_state = Some( + projection_state( + &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "goal", + &receipt.receipt_id, + ) + .into(), + ); + entry.evidence_record_count = + evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); + } + } + } + report.incomplete_projection_count = report + .entries + .iter() + .filter(|entry| { + entry.adr_projection_state.as_deref() != Some("valid") + || entry.goal_projection_state.as_deref() != Some("valid") + }) + .count() as u64; + Ok(report) +} + #[cfg(not(coverage))] fn evict_native_receipt( path: &Path, @@ -2501,6 +2749,9 @@ fn evict_native_receipt( )?; let (evidence_record, evidence_path) = provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; + if let Some(blocker) = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) { + return Err(blocker.into()); + } let permit = cloud_transfer::approve_local_eviction(&receipt, &evidence_record) .map_err(|blockers| blockers.join(","))?; let active_use_observed_at_ms = cloud::system_now_ms(); @@ -2589,6 +2840,25 @@ fn run() -> Result<(), String> { let raw: Vec = std::env::args().skip(1).collect(); let args = parse_args(&raw, &home)?; validate_action_args(&args)?; + if args.reconcile_receipts { + let report = reconcile_receipts( + args.receipt_dir + .as_deref() + .ok_or_else(|| "--reconcile-receipts에는 --receipt-dir이 필요함".to_string())?, + args.evidence_dir + .as_deref() + .ok_or_else(|| "--reconcile-receipts에는 --evidence-dir이 필요함".to_string())?, + args.provider_object_id.as_deref(), + args.oauth_connections.as_deref(), + &home, + cloud::system_now_ms(), + )?; + println!( + "{}", + serde_json::to_string_pretty(&report).map_err(|error| error.to_string())? + ); + return Ok(()); + } if args.audit_receipts { let report = audit_receipts( args.receipt_dir @@ -3247,6 +3517,49 @@ mod tests { assert!(validate_action_args(&missing_directory).is_err()); } + #[test] + fn receipt_reconciliation_requires_local_evidence_and_is_distinct_from_audit() { + let reconcile = parse_args( + &[ + "--reconcile-receipts".into(), + "--receipt-dir".into(), + "/app/cloud-receipts".into(), + "--evidence-dir".into(), + "/app/cloud-provider-evidence".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert!(reconcile.reconcile_receipts); + assert!(!reconcile.audit_receipts); + assert!(validate_action_args(&reconcile).is_ok()); + + let missing_evidence = parse_args( + &[ + "--reconcile-receipts".into(), + "--receipt-dir".into(), + "/receipts".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert!(validate_action_args(&missing_evidence).is_err()); + } + + #[test] + fn empty_receipt_reconciliation_does_not_claim_a_cloud_mutation() { + let temp = tempfile::tempdir().unwrap(); + let receipt_dir = temp.path().join("receipts"); + let evidence_dir = temp.path().join("evidence"); + std::fs::create_dir_all(&receipt_dir).unwrap(); + let report = + reconcile_receipts(&receipt_dir, &evidence_dir, None, None, temp.path(), 10).unwrap(); + assert_eq!(report.attestation_attempted_count, 0); + assert!(!report.mutation_performed); + assert!(!report.cloud_write_executed); + assert!(!report.source_eviction_authorized); + } + #[test] fn receipt_audit_counts_legacy_evidence_without_double_counting() { let temp = tempfile::tempdir().unwrap(); diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 0ce9be6c3..3dc1aba96 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -373,6 +373,37 @@ pub fn ensure_initial_projection_pair( warnings } +/// Seed the same no-evidence projection while binding the current source state. +/// +/// A provider probe can fail before it produces evidence. In that case a missing or unsafe source +/// must still make the projection explicitly blocked; otherwise a truthful provider-unknown +/// state could be mistaken for a live source eligible for later eviction. +#[cfg(not(coverage))] +pub fn ensure_initial_projection_pair_with_source_state( + receipt: &CloudCopyReceipt, + adr_dir: &Path, + goal_dir: &Path, + updated_at_ms: u64, +) -> Vec { + let mut adr = initial_adr_snapshot(receipt, updated_at_ms); + let mut goal = initial_goal_snapshot(receipt, updated_at_ms); + if let Some(blocker) = + crate::cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) + { + goal.status = "blocked".into(); + goal.completion_gates.insert("source-present".into(), false); + adr.decision = format!("{}-source-state-unverified", adr.decision); + adr.consequences + .push(format!("source-state-blocked:{blocker}")); + } + let (_, _, mut warnings) = write_projection_pair(adr_dir, &adr, goal_dir, &goal); + warnings.retain(|warning| { + !warning.ends_with("cloud-adr-state-regression") + && !warning.ends_with("cloud-goal-state-regression") + }); + warnings +} + fn read_latest_projection( directory: &Path, receipt_id: &str, @@ -623,6 +654,32 @@ mod tests { assert!(goal.evidence_record_id.is_none()); } + #[cfg(not(coverage))] + #[test] + fn source_state_projection_blocks_missing_source_without_fabricating_evidence() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + assert!(ensure_initial_projection_pair_with_source_state( + &receipt, &adr_dir, &goal_dir, 4 + ) + .is_empty()); + + let adr: CloudOffloadAdrSnapshot = serde_json::from_slice( + &std::fs::read(adr_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + let goal: CloudOffloadGoalSnapshot = serde_json::from_slice( + &std::fs::read(goal_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!(goal.status, "blocked"); + assert_eq!(goal.completion_gates["source-present"], false); + assert!(adr.decision.ends_with("-source-state-unverified")); + assert!(goal.evidence_record_id.is_none()); + } + #[test] fn projection_state_can_be_read_without_granting_eviction_authority() { let temporary = tempfile::tempdir().unwrap(); diff --git a/src-tauri/src/cloud_transfer.rs b/src-tauri/src/cloud_transfer.rs index 94a4955cf..0bbd6d42f 100644 --- a/src-tauri/src/cloud_transfer.rs +++ b/src-tauri/src/cloud_transfer.rs @@ -33,6 +33,22 @@ pub const RECEIPT_VERSION: u32 = 4; pub const CLOUD_COPY_APPROVAL_VERSION: u32 = 1; /// Maximum age accepted for an exact cloud-copy approval. pub const MAX_CLOUD_COPY_APPROVAL_AGE_MS: u64 = 15 * 60 * 1000; + +/// Return a bounded blocker when the source cannot be safely revalidated for a later eviction. +/// +/// This is deliberately separate from receipt integrity: a valid receipt may outlive its local +/// source, and that state must keep the dynamic ADR/Goal projection blocked rather than implying +/// that the source was safely removed. +#[cfg(not(coverage))] +pub fn source_eviction_blocker(source: &Path) -> Option<&'static str> { + match std::fs::symlink_metadata(source) { + Ok(metadata) if metadata.file_type().is_symlink() => Some("source-not-regular-file"), + Ok(metadata) if metadata.is_file() => None, + Ok(_) => Some("source-not-regular-file"), + Err(error) if error.kind() == std::io::ErrorKind::NotFound => Some("source-not-present"), + Err(_) => Some("source-state-unavailable"), + } +} #[cfg(not(coverage))] const MAX_RECEIPT_BYTES: u64 = 64 * 1024; diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 9f9b6362a..1a0a23565 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1723,16 +1723,6 @@ fn stable_reconciliation_error(error: &str) -> String { } #[cfg(not(coverage))] -fn source_eviction_blocker(source: &Path) -> Option<&'static str> { - match std::fs::symlink_metadata(source) { - Ok(metadata) if metadata.file_type().is_symlink() => Some("source-not-regular-file"), - Ok(metadata) if metadata.is_file() => None, - Ok(_) => Some("source-not-regular-file"), - Err(error) if error.kind() == std::io::ErrorKind::NotFound => Some("source-not-present"), - Err(_) => Some("source-state-unavailable"), - } -} - #[cfg(not(coverage))] fn reconcile_cloud_receipts_inner( receipt_dir: &Path, @@ -1846,13 +1836,18 @@ fn reconcile_cloud_receipts_inner( } Err(error) => { output.error_count = output.error_count.saturating_add(1); - let projection_warnings = cloud_adr::ensure_initial_projection_pair( + let projection_warnings = cloud_adr::ensure_initial_projection_pair_with_source_state( &receipt, adr_dir, goal_dir, output.observed_at_ms, ); let mut blockers = vec!["provider-attestation-incomplete".into()]; + if let Some(blocker) = + cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) + { + blockers.push(blocker.into()); + } if !projection_warnings.is_empty() { blockers.push("dynamic-projection-update-incomplete".into()); } @@ -1971,7 +1966,7 @@ fn collect_cloud_attestation_for_receipt( let assessment = provider_sync::assess_provider_sync_timeliness(receipt, &evidence)?; let (evidence_record, evidence_path) = provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; - let source_blocker = source_eviction_blocker(Path::new(&receipt.source)); + let source_blocker = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); let (mut permit, mut blockers) = match cloud_transfer::approve_local_eviction(receipt, &evidence_record) { Ok(permit) => (Some(permit), Vec::new()), @@ -2597,11 +2592,11 @@ mod tests { let temporary = tempfile::tempdir().unwrap(); let missing = temporary.path().join("missing.bin"); assert_eq!( - source_eviction_blocker(&missing), + cloud_transfer::source_eviction_blocker(&missing), Some("source-not-present") ); std::fs::write(&missing, b"source").unwrap(); - assert_eq!(source_eviction_blocker(&missing), None); + assert_eq!(cloud_transfer::source_eviction_blocker(&missing), None); } #[test] From 2d3f378b73617828b1baa2f15e044b8d7fcf726f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:09:16 +0900 Subject: [PATCH 049/691] fix: bound headless reconciliation scan --- src-tauri/src/bin/disksage-cloud-plan.rs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index ad4c0f970..f9a300409 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2567,6 +2567,9 @@ fn reconcile_receipts( .map(|entry| entry.path()) .collect::>(); paths.sort(); + if paths.len() > MAX_RECONCILIATION_RECEIPTS { + return Err("receipt-directory-entry-limit-exceeded".into()); + } for path in paths { let file_name = path .file_name() From eadf02d823ce0cbc5e5d012fdaea8ea5c6e3e1dc Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:10:40 +0900 Subject: [PATCH 050/691] docs: describe local reconciliation writes accurately --- docs/development/cloud-offload-operator-runbook.md | 6 +++--- src/lib/CloudArchive.svelte | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 3c9927d80..6e25d9a89 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -12,9 +12,9 @@ The runtime sequence is: 2. Provider attestation writes an immutable evidence record, then updates the Goal and ADR projections atomically in both entrypoints. 3. After restart, the desktop app automatically runs `reconcile_cloud_receipts` over the bounded - receipt set; it refreshes provider evidence and the replaceable ADR/Goal projections only. The - open desktop view repeats this read-only reconciliation every 60 seconds and exposes a manual - re-run; the reconciliation never writes to cloud or evicts a source. + receipt set; it refreshes provider evidence and the replaceable ADR/Goal projections locally. + The open desktop view repeats this cloud-write-free reconciliation every 60 seconds and exposes + a manual re-run; it never evicts a source. The same operation is available headlessly with `disksage-cloud-plan --reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH` (add the existing OAuth connection flags only when a provider API fallback is required). This diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 254041b5e..828cf4adc 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -517,7 +517,7 @@ - 화면이 열려 있는 동안 60초마다 읽기 전용 ADR/Goal 재검증 + 화면이 열려 있는 동안 60초마다 클라우드 쓰기·원본 삭제 없이 provider 증거와 ADR/Goal 갱신
{#if reconciliation}
From 33b8d39fed9d114665da8079724dd1a7dfbcee90 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:31:59 +0900 Subject: [PATCH 051/691] feat: classify provider sync blockers --- src-tauri/src/provider_global_sync.rs | 44 ++++++++++++++++++++++++++- 1 file changed, 43 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index 6e785d1b3..8e8eb8543 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -97,10 +97,14 @@ pub fn parse_dump( let mut pending_indexable_count = None; let mut needs_indexing = false; let mut has_error = false; + let mut has_filename_too_long = false; + let mut has_temporarily_disconnected = false; + let mut has_server_unreachable = false; for line in output.lines() { let trimmed = line.trim(); let marker = trimmed.strip_prefix("+ ").unwrap_or(trimmed).trim(); + let marker_lower = marker.to_ascii_lowercase(); upload_progress_present |= line_has_active_progress(marker, "upload progress:"); download_progress_present |= line_has_active_progress(marker, "download progress:"); if let Some(count) = parse_pending_indexable_count(marker) { @@ -110,7 +114,16 @@ pub fn parse_dump( if marker == "needs-indexing: yes" || marker == "indexing: yes" { needs_indexing = true; } - if marker.contains("temporarily disconnected") + has_filename_too_long |= marker.contains("POSIX 63") + || marker.contains("파일 이름이 너무 깁니다") + || marker_lower.contains("filename too long"); + has_temporarily_disconnected |= marker_lower.contains("temporarily disconnected"); + has_server_unreachable |= marker_lower.contains("serverunreachable") + || marker_lower.contains("server unreachable") + || marker_lower.contains("code=-1004"); + if has_filename_too_long + || has_temporarily_disconnected + || has_server_unreachable || marker.contains("user-disabled") || marker.contains("can't dump the extension") || marker.contains("Error Domain=") @@ -145,6 +158,15 @@ pub fn parse_dump( if needs_indexing || pending_indexable_count.is_some_and(|count| count > 0) { blockers.push("provider-global-sync-indexing-pending".into()); } + if has_filename_too_long { + blockers.push("provider-global-sync-filename-too-long".into()); + } + if has_temporarily_disconnected { + blockers.push("provider-global-sync-temporarily-disconnected".into()); + } + if has_server_unreachable { + blockers.push("provider-global-sync-server-unreachable".into()); + } if has_error { blockers.push("provider-global-sync-error".into()); } @@ -351,6 +373,9 @@ sync engine state: assert!(report .blockers .contains(&"provider-global-sync-error".into())); + assert!(report + .blockers + .contains(&"provider-global-sync-filename-too-long".into())); assert!(require_new_copy_admission(&report).is_err()); } @@ -359,9 +384,26 @@ sync engine state: let dump = "com.google.drivefs.fpext\nsync engine state:\n temporarily disconnected: yes\n"; let report = parse_dump(CloudProvider::GoogleDrive, dump).unwrap(); assert_eq!(report.state, ProviderGlobalSyncState::Error); + assert!(report + .blockers + .contains(&"provider-global-sync-temporarily-disconnected".into())); assert!(require_new_copy_admission(&report).is_err()); } + #[test] + fn server_unreachable_error_is_classified_without_retaining_provider_paths() { + let dump = "com.google.drivefs.fpext\nsync engine state:\n NSFileProviderErrorDomain Code=-1004 server unreachable\n"; + let report = parse_dump(CloudProvider::GoogleDrive, dump).unwrap(); + assert_eq!(report.state, ProviderGlobalSyncState::Error); + assert!(report + .blockers + .contains(&"provider-global-sync-server-unreachable".into())); + assert!(report + .notices + .iter() + .all(|notice| !notice.contains("server unreachable"))); + } + #[test] fn bounded_probe_rejects_output_beyond_limit() { assert!(!probe_output_is_truncated(MAX_DUMP_BYTES as usize)); From 106c929a203ef64a2c83b3ba868b07bab144044a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:43:08 +0900 Subject: [PATCH 052/691] feat: expose provider sync blockers in plans --- src-tauri/src/provider_global_sync.rs | 75 ++++++++++++++++++++------- 1 file changed, 55 insertions(+), 20 deletions(-) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index 8e8eb8543..ed8d99a30 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -288,32 +288,41 @@ pub fn require_new_copy_admission(report: &ProviderGlobalSyncReport) -> Result<( } } +fn is_stable_provider_blocker(notice: &str) -> bool { + notice.len() <= 128 + && notice.starts_with("provider-global-sync-") + && notice + .bytes() + .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') +} + pub fn attach_new_copy_admission_notice( notices: &mut Vec, report: Option<&ProviderGlobalSyncReport>, ) { - notices.retain(|notice| { - !matches!( - notice.as_str(), + notices.retain(|notice| !notice.starts_with("provider-global-sync-")); + let admission_notice = match report { + Some(report) + if report.evidence_complete + && report.state == ProviderGlobalSyncState::Clear + && report.blockers.is_empty() => + { "provider-global-sync-clear" - | "provider-global-sync-blocked" - | "provider-global-sync-evidence-unavailable" - ) - }); - notices.push( - match report { - Some(report) - if report.evidence_complete - && report.state == ProviderGlobalSyncState::Clear - && report.blockers.is_empty() => - { - "provider-global-sync-clear" - } - Some(_) => "provider-global-sync-blocked", - None => "provider-global-sync-evidence-unavailable", } - .into(), - ); + Some(_) => "provider-global-sync-blocked", + None => "provider-global-sync-evidence-unavailable", + } + .to_string(); + notices.push(admission_notice); + if let Some(report) = report { + notices.extend( + report + .blockers + .iter() + .filter(|blocker| is_stable_provider_blocker(blocker)) + .cloned(), + ); + } } #[cfg(test)] @@ -404,6 +413,32 @@ sync engine state: .all(|notice| !notice.contains("server unreachable"))); } + #[test] + fn admission_notice_exposes_stable_blockers_without_paths() { + let report = parse_dump( + CloudProvider::GoogleDrive, + "com.google.drivefs.fpext\nsync engine state:\n temporarily disconnected: yes\n", + ) + .unwrap(); + let mut notices = vec![ + "dry-run-only".into(), + "provider-global-sync-old/path".into(), + ]; + attach_new_copy_admission_notice(&mut notices, Some(&report)); + assert!(notices.contains(&"provider-global-sync-blocked".into())); + assert!(notices.contains(&"provider-global-sync-temporarily-disconnected".into())); + assert!(notices.iter().all(|notice| !notice.contains('/'))); + + attach_new_copy_admission_notice(&mut notices, Some(&report)); + assert_eq!( + notices + .iter() + .filter(|notice| notice.as_str() == "provider-global-sync-temporarily-disconnected") + .count(), + 1 + ); + } + #[test] fn bounded_probe_rejects_output_beyond_limit() { assert!(!probe_output_is_truncated(MAX_DUMP_BYTES as usize)); From 6a0c9e9bea03d65fee841cd6c3371c57e02cf31f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:55:00 +0900 Subject: [PATCH 053/691] fix: block copies during provider reconciliation --- src-tauri/src/provider_global_sync.rs | 41 ++++++++++++++++++++++++++- 1 file changed, 40 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index ed8d99a30..a3435c1be 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -77,6 +77,22 @@ fn parse_pending_indexable_count(line: &str) -> Option { .ok() } +fn has_reconciliation_backlog(line: &str) -> bool { + let line = line.trim_start(); + let line = line.strip_prefix("+ ").unwrap_or(line); + let Some(rest) = line.strip_prefix("reconciliation (") else { + return false; + }; + let Some((count, _)) = rest.split_once(" entries") else { + return false; + }; + count + .trim() + .parse::() + .ok() + .is_some_and(|count| count > 0) +} + fn probe_output_is_truncated(bytes_len: usize) -> bool { bytes_len as u64 > MAX_DUMP_BYTES } @@ -96,6 +112,7 @@ pub fn parse_dump( let mut download_progress_present = false; let mut pending_indexable_count = None; let mut needs_indexing = false; + let mut reconciliation_pending = false; let mut has_error = false; let mut has_filename_too_long = false; let mut has_temporarily_disconnected = false; @@ -114,6 +131,7 @@ pub fn parse_dump( if marker == "needs-indexing: yes" || marker == "indexing: yes" { needs_indexing = true; } + reconciliation_pending |= has_reconciliation_backlog(marker); has_filename_too_long |= marker.contains("POSIX 63") || marker.contains("파일 이름이 너무 깁니다") || marker_lower.contains("filename too long"); @@ -143,7 +161,8 @@ pub fn parse_dump( let pending = upload_progress_present || download_progress_present || needs_indexing - || pending_indexable_count.is_some_and(|count| count > 0); + || pending_indexable_count.is_some_and(|count| count > 0) + || reconciliation_pending; let state = if has_error { ProviderGlobalSyncState::Error } else if pending { @@ -158,6 +177,9 @@ pub fn parse_dump( if needs_indexing || pending_indexable_count.is_some_and(|count| count > 0) { blockers.push("provider-global-sync-indexing-pending".into()); } + if reconciliation_pending { + blockers.push("provider-global-sync-reconciliation-pending".into()); + } if has_filename_too_long { blockers.push("provider-global-sync-filename-too-long".into()); } @@ -355,6 +377,13 @@ sync engine state: i:227487 create-item: error:'NSError: POSIX 63 "filename too long"' "#; + const RECONCILIATION_BACKLOG_DUMP: &str = r#" +com.microsoft.OneDrive.FileProvider +sync engine state: + + scheduling state: running + + reconciliation (277399 entries): +"#; + #[test] fn quiet_dump_is_clear_without_retaining_paths() { let report = parse_dump(CloudProvider::Onedrive, QUIET_DUMP).unwrap(); @@ -388,6 +417,16 @@ sync engine state: assert!(require_new_copy_admission(&report).is_err()); } + #[test] + fn reconciliation_backlog_blocks_without_transfer_markers() { + let report = parse_dump(CloudProvider::Onedrive, RECONCILIATION_BACKLOG_DUMP).unwrap(); + assert_eq!(report.state, ProviderGlobalSyncState::Pending); + assert!(report + .blockers + .contains(&"provider-global-sync-reconciliation-pending".into())); + assert!(require_new_copy_admission(&report).is_err()); + } + #[test] fn disconnected_provider_is_error_and_fails_closed() { let dump = "com.google.drivefs.fpext\nsync engine state:\n temporarily disconnected: yes\n"; From 2c3b443a1f46a9d25a3f044b1b63b6ec4617e347 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 08:56:49 +0900 Subject: [PATCH 054/691] docs: document provider reconciliation blockers --- docs/development/cloud-offload-operator-runbook.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 6e25d9a89..7b1fd53f4 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -22,6 +22,10 @@ The runtime sequence is: read-only integrity report. 4. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and no eviction permit is issued. + Third-party File Provider dumps also block new copies while upload/download progress, + non-zero reconciliation backlogs (`provider-global-sync-reconciliation-pending`), provider + disconnection, or path errors are present; the stable blocker codes are shown in the plan and + are never a reason to bypass the gate. 5. If the destination is valid but the receipt source is missing or unsafe, reconciliation writes a blocked Goal/ADR projection and records `source-not-present` (or the precise source-state blocker); it never treats that as proof of a completed eviction. From 9e5e41a0400490c8058f9617dffc5ae6d7e67d23 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 11:38:04 +0900 Subject: [PATCH 055/691] fix: bound cloud source planning and surface partial scans --- src-tauri/src/bin/disksage-cloud-plan.rs | 11 +- src-tauri/src/cloud.rs | 324 ++++++++++++++++++++--- src-tauri/src/commands.rs | 13 +- src/lib/CloudArchive.svelte | 10 + 4 files changed, 310 insertions(+), 48 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index f9a300409..41b51ebc4 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2980,9 +2980,14 @@ fn run() -> Result<(), String> { { return Err("이미 클라우드 안에 있는 경로는 오프로드 원본으로 사용할 수 없음".into()); } - let files = cloud::collect_archive_files(&args.root, &excluded); - let snapshot = cloud::prepare_cloud_archive_source( - &files, + let collection = cloud::collect_archive_files_bounded( + &args.root, + &excluded, + cloud::ARCHIVE_SCAN_MAX_ENTRIES, + cloud::ARCHIVE_SCAN_MAX_DURATION, + ); + let snapshot = cloud::prepare_cloud_archive_source_from_collection( + &collection, &args.root, cloud::system_now_ms(), CloudPlanOptions { diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index b00b58e23..0fae52e0a 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -35,12 +35,24 @@ const METADATA_PROBE_TIMEOUT: Duration = Duration::from_secs(5); #[cfg(not(coverage))] const METADATA_PROBE_OUTPUT_LIMIT: usize = 1024 * 1024; #[cfg(not(coverage))] +const MACOS_METADATA_PROBE_TIMEOUT: Duration = Duration::from_millis(500); +#[cfg(not(coverage))] const EXIFTOOL_BATCH_SIZE: usize = 32; #[cfg(not(coverage))] -const EXIFTOOL_BATCH_TIMEOUT: Duration = Duration::from_secs(20); +const EXIFTOOL_BATCH_TIMEOUT: Duration = Duration::from_secs(5); #[cfg(not(coverage))] const EXIFTOOL_BATCH_OUTPUT_LIMIT: usize = 8 * 1024 * 1024; #[cfg(not(coverage))] +// ponytail: one largest-file metadata probe keeps planner latency bounded; expand only with an +// asynchronous per-file budget so a stalled macOS metadata provider cannot block planning. +const MAX_METADATA_PROBE_FILES: usize = 1; +#[cfg(not(coverage))] +const METADATA_PROBE_TOTAL_TIMEOUT: Duration = Duration::from_secs(5); +#[cfg(not(coverage))] +pub const ARCHIVE_SCAN_MAX_ENTRIES: u64 = 100_000; +#[cfg(not(coverage))] +pub const ARCHIVE_SCAN_MAX_DURATION: Duration = Duration::from_secs(10); +#[cfg(not(coverage))] const MAX_ZIP_METADATA_ENTRIES: usize = 10_000; #[cfg(not(coverage))] const MAX_ZIP_CONTEXT_NAMES: usize = 16; @@ -221,6 +233,9 @@ pub struct CloudSourceSnapshot { prepared_at_ms: u64, options: CloudPlanOptions, files: Vec, + source_scan_complete: bool, + source_scan_visited_entries: u64, + source_scan_stop_reasons: Vec, #[cfg(not(coverage))] duplicate_digests: BTreeMap>, #[cfg(not(coverage))] @@ -237,6 +252,20 @@ impl CloudSourceSnapshot { } } +/// Bounded result of the source-tree walk used by the cloud planner. +/// +/// An incomplete walk is evidence that the candidate set is not exhaustive. The planner keeps +/// the observed files for diagnosis but marks every resulting candidate blocked, so a partial +/// scan can never become a copy or eviction approval. +#[cfg(not(coverage))] +#[derive(Debug, Clone, PartialEq, Eq)] +pub struct ArchiveFileCollection { + pub files: Vec, + pub visited_entries: u64, + pub complete: bool, + pub stop_reasons: Vec, +} + #[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] pub struct CloudCandidate { /// Stable metadata fingerprint. This is not a content hash. @@ -886,12 +915,29 @@ fn millis(time: std::io::Result) -> u64 { /// Collect only archive-shaped regular files while pruning cloud roots and regenerable trees /// before descent. Symlinks/reparse points are rejected by the shared scanner guard. +/// +/// The walk is deliberately bounded. A partial source tree is useful diagnostic evidence but is +/// never eligible for copy because `plan_cloud_archive_from_snapshot` carries the incomplete-scan +/// blocker into every candidate. #[cfg(not(coverage))] -pub fn collect_archive_files(root: &Path, excluded_roots: &[PathBuf]) -> Vec { +pub fn collect_archive_files_bounded( + root: &Path, + excluded_roots: &[PathBuf], + max_entries: u64, + max_duration: Duration, +) -> ArchiveFileCollection { let excluded = excluded_roots.to_vec(); - let mut files: Vec = jwalk::WalkDir::new(root) + let mut files = Vec::new(); + let mut visited_entries = 0_u64; + let mut stop_reasons = Vec::new(); + let started = Instant::now(); + let max_entries = max_entries.max(1); + let max_duration = max_duration.max(Duration::from_millis(1)); + let mut complete = true; + let walker = jwalk::WalkDir::new(root) .follow_links(false) .skip_hidden(false) + .parallelism(jwalk::Parallelism::Serial) .process_read_dir(move |_depth, _path, _state, children| { children.retain(|result| { result @@ -914,24 +960,74 @@ pub fn collect_archive_files(root: &Path, excluded_roots: &[PathBuf]) -> Vec= max_entries { + complete = false; + stop_reasons.push("source-scan-entry-limit".into()); + break; + } + if started.elapsed() >= max_duration { + complete = false; + stop_reasons.push("source-scan-time-limit".into()); + break; + } + visited_entries = visited_entries.saturating_add(1); + let entry = match result { + Ok(entry) => entry, + Err(_) => { + complete = false; + if !stop_reasons.iter().any(|reason| reason == "source-scan-entry-error") { + stop_reasons.push("source-scan-entry-error".into()); + } + continue; + } + }; + if !entry.file_type().is_file() || archive_kind(&entry.path()).is_none() { + continue; + } + let Some(metadata) = entry.metadata().ok() else { + complete = false; + if !stop_reasons + .iter() + .any(|reason| reason == "source-scan-metadata-error") + { + stop_reasons.push("source-scan-metadata-error".into()); + } + continue; + }; + files.push(FileFact { + path: entry.path(), + bytes: metadata.len(), + created_ms: millis(metadata.created()), + modified_ms: millis(metadata.modified()), + content_metadata: ContentMetadata::default(), + }); + } + stop_reasons.sort(); + stop_reasons.dedup(); + if !stop_reasons.is_empty() { + complete = false; + } files.sort_by(|a, b| a.path.cmp(&b.path)); - files + ArchiveFileCollection { + files, + visited_entries, + complete, + stop_reasons, + } +} + +/// Collect archive files using the production source-scan bounds. +#[cfg(not(coverage))] +pub fn collect_archive_files(root: &Path, excluded_roots: &[PathBuf]) -> Vec { + collect_archive_files_bounded( + root, + excluded_roots, + ARCHIVE_SCAN_MAX_ENTRIES, + ARCHIVE_SCAN_MAX_DURATION, + ) + .files } /// Gregorian civil date from whole days since Unix epoch. The arithmetic is the @@ -1516,7 +1612,11 @@ fn macos_file_provenance_metadata(path: &Path) -> ContentMetadata { where_froms .args(["-px", "com.apple.metadata:kMDItemWhereFroms"]) .arg(path); - if let Ok(output) = run_metadata_command(where_froms) { + if let Ok(output) = run_metadata_command_with_limits( + where_froms, + MACOS_METADATA_PROBE_TIMEOUT, + METADATA_PROBE_OUTPUT_LIMIT, + ) { if let Some(bytes) = decode_hex_ascii(&output) { if let Ok(plist::Value::Array(values)) = plist::Value::from_reader(std::io::Cursor::new(bytes)) @@ -1540,7 +1640,11 @@ fn macos_file_provenance_metadata(path: &Path) -> ContentMetadata { let mut quarantine = local_command("xattr"); quarantine.args(["-p", "com.apple.quarantine"]).arg(path); - if let Ok(output) = run_metadata_command(quarantine) { + if let Ok(output) = run_metadata_command_with_limits( + quarantine, + MACOS_METADATA_PROBE_TIMEOUT, + METADATA_PROBE_OUTPUT_LIMIT, + ) { if let Some((acquired_seconds, agent)) = quarantine_record(&String::from_utf8_lossy(&output)) { @@ -4331,10 +4435,49 @@ pub fn prepare_cloud_archive_source( source_root: &Path, now_ms: u64, options: CloudPlanOptions, +) -> CloudSourceSnapshot { + prepare_cloud_archive_source_with_scan( + files, + source_root, + now_ms, + options, + true, + files.len() as u64, + Vec::new(), + ) +} + +/// Prepare source metadata while retaining whether the bounded filesystem walk was exhaustive. +#[cfg(not(coverage))] +pub fn prepare_cloud_archive_source_from_collection( + collection: &ArchiveFileCollection, + source_root: &Path, + now_ms: u64, + options: CloudPlanOptions, +) -> CloudSourceSnapshot { + prepare_cloud_archive_source_with_scan( + &collection.files, + source_root, + now_ms, + options, + collection.complete, + collection.visited_entries, + collection.stop_reasons.clone(), + ) +} + +fn prepare_cloud_archive_source_with_scan( + files: &[FileFact], + source_root: &Path, + now_ms: u64, + options: CloudPlanOptions, + source_scan_complete: bool, + source_scan_visited_entries: u64, + source_scan_stop_reasons: Vec, ) -> CloudSourceSnapshot { #[cfg(not(coverage))] - let batched_exiftool = { - let paths = files + let (batched_exiftool, selected_probe_paths, metadata_probe_started) = { + let mut probe_candidates = files .iter() .filter(|file| { file.bytes >= options.min_size_bytes @@ -4347,11 +4490,30 @@ pub fn prepare_cloud_archive_source( .is_ok_and(|relative| !relative.as_os_str().is_empty()) && file.content_metadata == ContentMetadata::default() && file.path.is_file() - && should_probe_general_metadata(&file.path) }) + .collect::>(); + probe_candidates.sort_by(|left, right| { + right + .bytes + .cmp(&left.bytes) + .then_with(|| left.path.cmp(&right.path)) + }); + probe_candidates.truncate(MAX_METADATA_PROBE_FILES); + let selected_probe_paths = probe_candidates + .iter() + .map(|file| file.path.clone()) + .collect::>(); + let paths = probe_candidates + .iter() + .filter(|file| should_probe_general_metadata(&file.path)) .map(|file| file.path.clone()) .collect::>(); - exiftool_metadata_batch(&paths) + let metadata_probe_started = Instant::now(); + ( + exiftool_metadata_batch(&paths), + selected_probe_paths, + metadata_probe_started, + ) }; let mut prepared_files = Vec::new(); @@ -4381,11 +4543,20 @@ pub fn prepare_cloud_archive_source( #[cfg(not(coverage))] if file.path.is_file() { verified_regular_files.insert(file.path.clone()); - if prepared.content_metadata == ContentMetadata::default() { + if prepared.content_metadata == ContentMetadata::default() + && selected_probe_paths.contains(&file.path) + && metadata_probe_started.elapsed() < METADATA_PROBE_TOTAL_TIMEOUT + { prepared.content_metadata = probe_content_metadata_with_general( &file.path, batched_exiftool.get(&file.path).cloned(), ); + } else if prepared.content_metadata == ContentMetadata::default() { + add_probe_warning( + &mut prepared.content_metadata, + "planner", + MetadataProbeFailure::Timeout, + ); } } prepared_files.push(prepared); @@ -4398,6 +4569,9 @@ pub fn prepare_cloud_archive_source( prepared_at_ms: now_ms, options, files: prepared_files, + source_scan_complete, + source_scan_visited_entries, + source_scan_stop_reasons, #[cfg(not(coverage))] duplicate_digests, #[cfg(not(coverage))] @@ -4417,6 +4591,8 @@ pub fn plan_cloud_archive_from_snapshot( let source_root = &snapshot.source_root; let now_ms = snapshot.prepared_at_ms; let options = snapshot.options; + let source_scan_blocker = (!snapshot.source_scan_complete) + .then(|| "source-scan-incomplete".to_string()); let mut candidates = Vec::new(); for file in files { let age_days = now_ms.saturating_sub(file.modified_ms) / DAY_MS; @@ -4500,8 +4676,10 @@ pub fn plan_cloud_archive_from_snapshot( let blocked_reason = if source_snapshot_stale { Some("source-snapshot-stale".into()) } else { - planner_blocked_reason(&file.path, kind, &lineage_metadata, &dst) - .or_else(|| provider_destination_path_blocked_reason(cloud_root, &dst)) + source_scan_blocker.clone().or_else(|| { + planner_blocked_reason(&file.path, kind, &lineage_metadata, &dst) + }) + .or_else(|| provider_destination_path_blocked_reason(cloud_root, &dst)) }; let source_context = relative .parent() @@ -4626,18 +4804,43 @@ pub fn plan_cloud_archive_from_snapshot( candidates.push(candidate); } #[cfg(not(coverage))] - let exact_duplicates = - mark_exact_duplicate_candidates(&mut candidates, Some(&snapshot.duplicate_digests)); + let exact_duplicates = { + candidates.sort_by(|a, b| b.bytes.cmp(&a.bytes).then_with(|| a.src.cmp(&b.src))); + candidates.truncate(options.limit); + mark_exact_duplicate_candidates(&mut candidates, Some(&snapshot.duplicate_digests)) + }; #[cfg(coverage)] - let exact_duplicates = ExactDuplicateSummary::default(); - candidates.sort_by(|a, b| b.bytes.cmp(&a.bytes).then_with(|| a.src.cmp(&b.src))); - candidates.truncate(options.limit); + let exact_duplicates = { + candidates.sort_by(|a, b| b.bytes.cmp(&a.bytes).then_with(|| a.src.cmp(&b.src))); + candidates.truncate(options.limit); + ExactDuplicateSummary::default() + }; let candidate_bytes = candidates.iter().map(|c| c.bytes).sum(); let potentially_reclaimable_bytes = candidates .iter() .filter(|c| c.blocked_reason.is_none()) .map(|c| c.bytes) .sum(); + let mut notices = vec![ + "dry-run-only".into(), + "cloud-quota-unverified".into(), + "provider-client-runtime-unverified".into(), + "cloud-sync-unverified".into(), + "full-transfer-content-hash-pending".into(), + ]; + if !snapshot.source_scan_complete { + notices.push("source-scan-incomplete".into()); + notices.push(format!( + "source-scan-visited-entries:{}", + snapshot.source_scan_visited_entries + )); + notices.extend( + snapshot + .source_scan_stop_reasons + .iter() + .map(|reason| format!("source-scan-stopped:{reason}")), + ); + } CloudPlanReport { cloud_root: cloud_root.clone(), generated_at_ms: now_ms, @@ -4647,13 +4850,7 @@ pub fn plan_cloud_archive_from_snapshot( potentially_reclaimable_bytes, exact_duplicates, capacity: None, - notices: vec![ - "dry-run-only".into(), - "cloud-quota-unverified".into(), - "provider-client-runtime-unverified".into(), - "cloud-sync-unverified".into(), - "full-transfer-content-hash-pending".into(), - ], + notices, } } @@ -4991,6 +5188,51 @@ mod tests { assert_eq!(files[0].path, real); } + #[cfg(not(coverage))] + #[test] + fn bounded_source_scan_blocks_partial_plans() { + let tmp = tempfile::tempdir().unwrap(); + let source_root = tmp.path().join("source"); + writable_dir(&source_root); + for name in ["one.pdf", "two.pdf", "three.pdf"] { + std::fs::write(source_root.join(name), b"pdf").unwrap(); + } + let collection = collect_archive_files_bounded( + &source_root, + &[], + 2, + Duration::from_secs(30), + ); + assert!(!collection.complete); + assert!(collection + .stop_reasons + .contains(&"source-scan-entry-limit".to_string())); + assert!(!collection.files.is_empty()); + + let snapshot = prepare_cloud_archive_source_from_collection( + &collection, + &source_root, + system_now_ms(), + CloudPlanOptions { + min_size_bytes: 1, + min_age_days: 0, + limit: 10, + }, + ); + let destination = source_root.join("cloud"); + writable_dir(&destination); + let report = plan_cloud_archive_from_snapshot( + &snapshot, + &root(CloudProvider::Icloud, &destination), + ); + assert!(report.notices.contains(&"source-scan-incomplete".to_string())); + assert!(report + .candidates + .iter() + .all(|candidate| candidate.blocked_reason.as_deref() == Some("source-scan-incomplete"))); + assert_eq!(report.potentially_reclaimable_bytes, 0); + } + #[test] fn civil_date_math_handles_epoch_and_leap_day() { assert_eq!(date_parts(0), (1970, 1, 1)); diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 1a0a23565..53b82d2e3 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1188,7 +1188,12 @@ fn cloud_plan_for_inputs( if excluded.iter().any(|cloud| root_path.starts_with(cloud)) { return Err("이미 클라우드 안에 있는 경로는 오프로드 원본으로 사용할 수 없음".into()); } - let files = cloud::collect_archive_files(&root_path, &excluded); + let collection = cloud::collect_archive_files_bounded( + &root_path, + &excluded, + cloud::ARCHIVE_SCAN_MAX_ENTRIES, + cloud::ARCHIVE_SCAN_MAX_DURATION, + ); let observed_at_ms = cloud::system_now_ms(); let capacity_snapshot = match authenticated_capacity_snapshot(&selected, app, observed_at_ms) { Ok(snapshot) => snapshot, @@ -1200,10 +1205,9 @@ fn cloud_plan_for_inputs( }; let selected = provider_capacity::root_with_verified_capacity_scope(&selected, &capacity_snapshot)?; - let mut report = cloud::plan_cloud_archive( - &files, + let snapshot = cloud::prepare_cloud_archive_source_from_collection( + &collection, &root_path, - &selected, observed_at_ms, cloud::CloudPlanOptions { min_size_bytes: min_size_mib.saturating_mul(1024 * 1024), @@ -1211,6 +1215,7 @@ fn cloud_plan_for_inputs( limit: limit.clamp(1, 1_000), }, ); + let mut report = cloud::plan_cloud_archive_from_snapshot(&snapshot, &selected); attach_capacity_assessment(&mut report, capacity_snapshot)?; let runtime = provider_client_runtime::collect_provider_client_runtime( selected.provider, diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 828cf4adc..767c25588 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -28,6 +28,10 @@ return notices.some((notice) => PROVIDER_ADMISSION_BLOCKERS.has(notice)); } + function hasIncompleteSourceScan(notices: readonly string[]): boolean { + return notices.includes("source-scan-incomplete"); + } + let { scannedRoot }: { scannedRoot: string | null } = $props(); let roots: api.CloudRoot[] = $state([]); @@ -648,6 +652,12 @@ 상태가 해소된 뒤 다시 계획해야 합니다. 기존 복사본 채택·per-item attestation은 별도 경로로 동작합니다.

{/if} + {#if hasIncompleteSourceScan(report.notices)} +

+ 원본 스캔이 제한 시간 또는 항목 수에 도달해 부분 결과만 수집되었습니다. 이 계획은 복사·원본 제거에 사용할 수 없으며, + 스캔 범위를 줄이거나 조건을 높여 전체 스캔을 다시 실행해야 합니다. +

+ {/if} {#if report.capacity} {#if report.capacity.can_fit === true}

From 6a9428c8d2e84585aafd21b8b9d35cc2e6d0e1a3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 11:42:09 +0900 Subject: [PATCH 056/691] fix: reject partial scans in Naruon readiness --- src-tauri/src/naruon_cloud_copy_readiness.rs | 22 ++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/src-tauri/src/naruon_cloud_copy_readiness.rs b/src-tauri/src/naruon_cloud_copy_readiness.rs index 415f3daa8..4f6bea9fe 100644 --- a/src-tauri/src/naruon_cloud_copy_readiness.rs +++ b/src-tauri/src/naruon_cloud_copy_readiness.rs @@ -488,6 +488,13 @@ pub fn export_naruon_cloud_copy_readiness_with_global_sync( icloud_health: Option<&IcloudSyncHealthReport>, provider_global_sync: Option<&ProviderGlobalSyncReport>, ) -> Result { + if report + .notices + .iter() + .any(|notice| notice == "source-scan-incomplete") + { + return Err("naruon-copy-readiness-source-scan-incomplete".into()); + } provider_client_runtime::validate_provider_client_runtime_snapshot(runtime)?; if runtime.provider != report.cloud_root.provider { return Err("naruon-copy-readiness-runtime-provider-mismatch".into()); @@ -1221,6 +1228,21 @@ mod tests { } } + #[test] + fn partial_source_scan_never_exports_readiness() { + let mut report = report(CloudProvider::Onedrive); + report.notices.push("source-scan-incomplete".into()); + let runtime = assess_provider_client_runtime( + CloudProvider::Onedrive, + Some(b"OneDrive Sync Service\n"), + 25, + ); + assert_eq!( + export_naruon_cloud_copy_readiness(&report, &runtime, None).unwrap_err(), + "naruon-copy-readiness-source-scan-incomplete" + ); + } + #[test] fn export_is_path_free_and_preserves_metadata_precedence_aggregates() { let onedrive_report = report(CloudProvider::Onedrive); From 682da7a6f651315b27a005ceef978ce0ca285981 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 12:02:57 +0900 Subject: [PATCH 057/691] fix: bound metadata and duplicate probes --- src-tauri/src/cloud.rs | 92 ++++++++++++++++++++++++++++++++++-------- 1 file changed, 75 insertions(+), 17 deletions(-) diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index 0fae52e0a..adb75a7e8 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -43,11 +43,10 @@ const EXIFTOOL_BATCH_TIMEOUT: Duration = Duration::from_secs(5); #[cfg(not(coverage))] const EXIFTOOL_BATCH_OUTPUT_LIMIT: usize = 8 * 1024 * 1024; #[cfg(not(coverage))] -// ponytail: one largest-file metadata probe keeps planner latency bounded; expand only with an -// asynchronous per-file budget so a stalled macOS metadata provider cannot block planning. -const MAX_METADATA_PROBE_FILES: usize = 1; +// ponytail: cap detailed probes per plan; expand only with an asynchronous per-file budget. +const MAX_METADATA_PROBE_FILES: usize = 32; #[cfg(not(coverage))] -const METADATA_PROBE_TOTAL_TIMEOUT: Duration = Duration::from_secs(5); +const METADATA_PROBE_TOTAL_TIMEOUT: Duration = Duration::from_secs(15); #[cfg(not(coverage))] pub const ARCHIVE_SCAN_MAX_ENTRIES: u64 = 100_000; #[cfg(not(coverage))] @@ -3320,6 +3319,26 @@ fn dataset_content_metadata(path: &Path) -> ContentMetadata { fn probe_content_metadata_with_general( path: &Path, prefetched_general: Option, +) -> ContentMetadata { + probe_content_metadata_with_general_inner(path, prefetched_general, true) +} + +#[cfg(not(coverage))] +fn probe_content_metadata_for_planner( + path: &Path, + prefetched_general: Option, +) -> ContentMetadata { + // Download origin and quarantine are useful audit context but are not production metadata. + // Keep them out of the planner's per-file subprocess budget so embedded/format metadata can + // be collected for more candidates without weakening the lineage precedence rules. + probe_content_metadata_with_general_inner(path, prefetched_general, false) +} + +#[cfg(not(coverage))] +fn probe_content_metadata_with_general_inner( + path: &Path, + prefetched_general: Option, + include_macos_provenance: bool, ) -> ContentMetadata { let extension = path .extension() @@ -3360,10 +3379,12 @@ fn probe_content_metadata_with_general( _ if multipart_archive_part(path).is_some() => multipart_archive_metadata(path), _ => ContentMetadata::default(), }; - merge_metadata( - merge_metadata(general, format_specific), - macos_file_provenance_metadata(path), - ) + let metadata = merge_metadata(general, format_specific); + if include_macos_provenance { + merge_metadata(metadata, macos_file_provenance_metadata(path)) + } else { + metadata + } } /// Reuse the cloud planner's bounded embedded/acquisition metadata probes in read-only audit @@ -3832,15 +3853,28 @@ fn hash_duplicate_candidate(path: &Path, expected_bytes: u64) -> Result BTreeMap> { + let mut eligible = files + .iter() + .filter(|file| { + let Some(kind) = archive_kind(&file.path) else { + return false; + }; + source_blocked_reason(&file.path, kind, &file.content_metadata).is_none() + }) + .collect::>(); + eligible.sort_by(|left, right| { + right + .bytes + .cmp(&left.bytes) + .then_with(|| left.path.cmp(&right.path)) + }); + eligible.truncate(limit.max(1)); + let mut by_size: BTreeMap> = BTreeMap::new(); - for file in files { - let Some(kind) = archive_kind(&file.path) else { - continue; - }; - if source_blocked_reason(&file.path, kind, &file.content_metadata).is_none() { - by_size.entry(file.bytes).or_default().push(file); - } + for file in eligible { + by_size.entry(file.bytes).or_default().push(file); } let mut digests = BTreeMap::new(); @@ -4547,7 +4581,7 @@ fn prepare_cloud_archive_source_with_scan( && selected_probe_paths.contains(&file.path) && metadata_probe_started.elapsed() < METADATA_PROBE_TOTAL_TIMEOUT { - prepared.content_metadata = probe_content_metadata_with_general( + prepared.content_metadata = probe_content_metadata_for_planner( &file.path, batched_exiftool.get(&file.path).cloned(), ); @@ -4563,7 +4597,7 @@ fn prepare_cloud_archive_source_with_scan( } #[cfg(not(coverage))] - let duplicate_digests = prehash_duplicate_candidates(&prepared_files); + let duplicate_digests = prehash_duplicate_candidates(&prepared_files, options.limit); CloudSourceSnapshot { source_root: source_root.to_path_buf(), prepared_at_ms: now_ms, @@ -6608,6 +6642,30 @@ mod tests { })); } + #[cfg(not(coverage))] + #[test] + fn duplicate_prehash_respects_candidate_limit() { + let tmp = tempfile::tempdir().unwrap(); + let files = ["a.tgz", "b.tgz"] + .into_iter() + .map(|name| { + let path = tmp.path().join(name); + std::fs::write(&path, b"same-content").unwrap(); + let metadata = std::fs::metadata(&path).unwrap(); + FileFact { + path, + bytes: metadata.len(), + created_ms: millis(metadata.created()), + modified_ms: millis(metadata.modified()), + content_metadata: ContentMetadata::default(), + } + }) + .collect::>(); + + assert!(prehash_duplicate_candidates(&files, 1).is_empty()); + assert_eq!(prehash_duplicate_candidates(&files, 2).len(), 2); + } + #[cfg(not(coverage))] #[test] fn source_snapshot_fails_closed_when_source_stat_changes() { From 4999e836a0147218704a83cd2e48a79a68199cfe Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 12:22:38 +0900 Subject: [PATCH 058/691] fix: block dataless provider placeholders --- .../adr/0001-cloud-offload-goal-state.md | 5 ++-- .../cloud-offload-operator-runbook.md | 7 +++-- src-tauri/src/cloud.rs | 30 ++++++++++++++++++- src-tauri/src/cloud_transfer.rs | 9 ++++++ 4 files changed, 45 insertions(+), 6 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index b5e4f823e..95cc1cdfb 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -30,7 +30,8 @@ no eviction permit. - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. - Goal completion gates remain false until their corresponding evidence exists. -- A `source-not-present` or unsafe-source observation blocks the Goal even when provider sync is - complete; DiskSage never infers that an externally removed source was safely evicted. +- A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal + even when provider sync is complete; DiskSage never infers that an externally removed or + File-Provider-dataless source was safely evicted. - `eviction-ready` permits only the separately approved, reversible OS-Trash operation. - A stale projection is replaceable state and must be reconciled against immutable evidence. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 7b1fd53f4..cdd2b8d2d 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -26,9 +26,10 @@ The runtime sequence is: non-zero reconciliation backlogs (`provider-global-sync-reconciliation-pending`), provider disconnection, or path errors are present; the stable blocker codes are shown in the plan and are never a reason to bypass the gate. -5. If the destination is valid but the receipt source is missing or unsafe, reconciliation writes - a blocked Goal/ADR projection and records `source-not-present` (or the precise source-state - blocker); it never treats that as proof of a completed eviction. +5. If the destination is valid but the receipt source is missing, unsafe, or macOS reports it as a + File Provider `dataless` object, reconciliation writes a blocked Goal/ADR projection and records + `source-not-present`, `source-content-not-local`, or the precise source-state blocker; it never + treats that as proof of a completed eviction. 6. Files inside a `.photoslibrary`/`.photolibrary` bundle are non-overridable `system-managed-photos-library-data` blockers; individual SQLite members are never copied. 7. Only a fresh attestation plus the separate receipt-bound human approval may move the source to diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index adb75a7e8..a79320cfc 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -912,6 +912,25 @@ fn millis(time: std::io::Result) -> u64 { .unwrap_or(0) } +#[cfg(target_os = "macos")] +pub(crate) fn metadata_is_dataless(metadata: &std::fs::Metadata) -> bool { + use std::os::macos::fs::MetadataExt; + + const SF_DATALESS: u32 = 0x4000_0000; + metadata.st_flags() & SF_DATALESS != 0 +} + +#[cfg(not(target_os = "macos"))] +pub(crate) fn metadata_is_dataless(_metadata: &std::fs::Metadata) -> bool { + false +} + +pub(crate) fn source_content_is_dataless(path: &Path) -> bool { + std::fs::metadata(path) + .map(|metadata| metadata_is_dataless(&metadata)) + .unwrap_or(false) +} + /// Collect only archive-shaped regular files while pruning cloud roots and regenerable trees /// before descent. Symlinks/reparse points are rejected by the shared scanner guard. /// @@ -3730,6 +3749,9 @@ fn source_blocked_reason( if multipart_archive_part(path).is_some() { return Some("multipart-archive-atomic-copy-required".into()); } + if source_content_is_dataless(path) { + return Some("source-content-not-local".into()); + } let extension = path .extension() .map(|extension| extension.to_string_lossy().to_ascii_lowercase()) @@ -3825,6 +3847,9 @@ fn hash_duplicate_candidate(path: &Path, expected_bytes: u64) -> Result Result Option<&'static str> { match std::fs::symlink_metadata(source) { Ok(metadata) if metadata.file_type().is_symlink() => Some("source-not-regular-file"), + Ok(metadata) if metadata.is_file() && crate::cloud::metadata_is_dataless(&metadata) => { + Some("source-content-not-local") + } Ok(metadata) if metadata.is_file() => None, Ok(_) => Some("source-not-regular-file"), Err(error) if error.kind() == std::io::ErrorKind::NotFound => Some("source-not-present"), @@ -1094,6 +1097,9 @@ fn copy_and_verify( if before.file_type().is_symlink() || !before.is_file() { return Err("source-must-be-regular-file".into()); } + if crate::cloud::metadata_is_dataless(&before) { + return Err("source-content-not-local".into()); + } let before_modified_ms = modified_ms(&before)?; if before.len() != candidate.bytes || before_modified_ms != candidate.modified_ms { return Err("source-changed-since-plan".into()); @@ -1184,6 +1190,9 @@ fn verify_existing_destination( if source_before.file_type().is_symlink() || !source_before.is_file() { return Err("source-must-be-regular-file".into()); } + if crate::cloud::metadata_is_dataless(&source_before) { + return Err("source-content-not-local".into()); + } let source_modified_ms = modified_ms(&source_before)?; if source_before.len() != candidate.bytes || source_modified_ms != candidate.modified_ms { return Err("source-changed-since-plan".into()); From 74e8cefefed45789219b0830c9b2e29c5cd95f95 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 12:24:32 +0900 Subject: [PATCH 059/691] perf: skip dataless metadata probes --- src-tauri/src/cloud.rs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index a79320cfc..664229fd1 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -3359,6 +3359,9 @@ fn probe_content_metadata_with_general_inner( prefetched_general: Option, include_macos_provenance: bool, ) -> ContentMetadata { + if source_content_is_dataless(path) { + return ContentMetadata::default(); + } let extension = path .extension() .map(|e| e.to_string_lossy().to_ascii_lowercase()) @@ -4552,6 +4555,7 @@ fn prepare_cloud_archive_source_with_scan( .is_ok_and(|relative| !relative.as_os_str().is_empty()) && file.content_metadata == ContentMetadata::default() && file.path.is_file() + && !source_content_is_dataless(&file.path) }) .collect::>(); probe_candidates.sort_by(|left, right| { From a6232c63c04f39754bf1cb472462a2bb3e63df87 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 12:40:23 +0900 Subject: [PATCH 060/691] fix: persist source blockers in dynamic goals --- .../adr/0001-cloud-offload-goal-state.md | 5 +- .../cloud-offload-operator-runbook.md | 4 +- src-tauri/src/bin/disksage-cloud-plan.rs | 8 +- src-tauri/src/cloud_adr.rs | 151 +++++++++++++++++- src-tauri/src/commands.rs | 8 +- 5 files changed, 168 insertions(+), 8 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 95cc1cdfb..13bf49bc7 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -24,7 +24,10 @@ attestation and the explicit OS-Trash step, it atomically writes both that Goal the authority for eviction; the receipt and immutable evidence are revalidated at every mutation. If an attestation finds the destination valid but the receipt's source is absent or unsafe, the runtime writes a blocked Goal projection, records the source-state blocker in the ADR, and issues -no eviction permit. +no eviction permit. If a prior projection has a higher monotonic state, that historical state is +preserved while the replaceable Goal is updated to `blocked` and its explicit eviction gate is +revoked; a terminal `source-evicted` projection is not rewritten merely because its original path +is now absent. ## Consequences diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index cdd2b8d2d..4645aedf8 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -29,7 +29,9 @@ The runtime sequence is: 5. If the destination is valid but the receipt source is missing, unsafe, or macOS reports it as a File Provider `dataless` object, reconciliation writes a blocked Goal/ADR projection and records `source-not-present`, `source-content-not-local`, or the precise source-state blocker; it never - treats that as proof of a completed eviction. + treats that as proof of a completed eviction. A previously advanced projection is not rewound; + its Goal status becomes `blocked` and the explicit eviction gate is revoked. A terminal + `source-evicted` projection remains completed because the original path is expected to be gone. 6. Files inside a `.photoslibrary`/`.photolibrary` bundle are non-overridable `system-managed-photos-library-data` blockers; individual SQLite members are never copied. 7. Only a fresh attestation plus the separate receipt-bound human approval may move the source to diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 41b51ebc4..6dc7344af 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2507,7 +2507,13 @@ fn attest_receipt( .push(format!("source-state-blocked:{blocker}")); } let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); + cloud_adr::write_projection_pair_with_source_blocker( + &adr_dir, + &adr, + &goal_dir, + &goal, + source_blocker, + ); Ok(AttestationOutput { action: "attest-provider-native", goal_state, diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 3dc1aba96..d937ce8c2 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -352,6 +352,67 @@ pub fn write_projection_pair( (adr_path, goal_path, warnings) } +/// Persist a source-state blocker without allowing a previously observed goal state to regress. +/// +/// A missing or non-local source is a current safety fact, not proof that a completed goal should +/// be rewound. Keep the monotonic state for audit history, but make the replaceable Goal blocked +/// and revoke its explicit eviction gate. A `source-evicted` projection is already the terminal +/// state and is left untouched when its original source is no longer present. +pub fn write_projection_pair_with_source_blocker( + adr_dir: &Path, + adr: &CloudOffloadAdrSnapshot, + goal_dir: &Path, + goal: &CloudOffloadGoalSnapshot, + source_blocker: Option<&str>, +) -> (Option, Option, Vec) { + let Some(source_blocker) = source_blocker else { + return write_projection_pair(adr_dir, adr, goal_dir, goal); + }; + + let mut adr = adr.clone(); + let mut goal = goal.clone(); + if let (Ok(Some(_previous_adr)), Ok(Some(previous_goal))) = ( + read_latest_projection::( + adr_dir, + &goal.receipt_id, + "adr", + ), + read_latest_projection::( + goal_dir, + &goal.receipt_id, + "goal", + ), + ) { + if previous_goal.goal_state == CloudOffloadGoalState::SourceEvicted { + return ( + Some(adr_dir.join(format!("{}-latest.json", goal.receipt_id))), + Some(goal_dir.join(format!("{}-latest.json", goal.receipt_id))), + Vec::new(), + ); + } + if goal_state_rank(previous_goal.goal_state) > goal_state_rank(goal.goal_state) { + adr.goal_state = previous_goal.goal_state; + goal.goal_state = previous_goal.goal_state; + adr.decision = format!( + "{}-source-state-unverified", + decision_for(previous_goal.goal_state, adr.provider_sync_state) + ); + } + } + goal.status = "blocked".into(); + goal.completion_gates.insert("source-present".into(), false); + goal.completion_gates + .insert("explicit-eviction-permit".into(), false); + let blocker = format!("source-state-blocked:{source_blocker}"); + if !adr.consequences.iter().any(|value| value == &blocker) { + adr.consequences.push(blocker); + } + if !adr.decision.ends_with("-source-state-unverified") { + adr.decision.push_str("-source-state-unverified"); + } + write_projection_pair(adr_dir, &adr, goal_dir, &goal) +} + /// Seed projections for a receipt whose provider evidence is not available yet. /// /// This never creates an evidence record or advances a goal. A previously observed advanced @@ -387,16 +448,22 @@ pub fn ensure_initial_projection_pair_with_source_state( ) -> Vec { let mut adr = initial_adr_snapshot(receipt, updated_at_ms); let mut goal = initial_goal_snapshot(receipt, updated_at_ms); - if let Some(blocker) = - crate::cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) - { + let source_blocker = + crate::cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); + if let Some(blocker) = source_blocker { goal.status = "blocked".into(); goal.completion_gates.insert("source-present".into(), false); adr.decision = format!("{}-source-state-unverified", adr.decision); adr.consequences .push(format!("source-state-blocked:{blocker}")); } - let (_, _, mut warnings) = write_projection_pair(adr_dir, &adr, goal_dir, &goal); + let (_, _, mut warnings) = write_projection_pair_with_source_blocker( + adr_dir, + &adr, + goal_dir, + &goal, + source_blocker, + ); warnings.retain(|warning| { !warning.ends_with("cloud-adr-state-regression") && !warning.ends_with("cloud-goal-state-regression") @@ -524,6 +591,25 @@ mod tests { .unwrap() } + fn complete_record() -> ProviderSyncEvidenceRecord { + crate::provider_evidence::create_sync_evidence_record( + &crate::cloud_transfer::ProviderSyncEvidence { + receipt_id: "a".repeat(64), + provider: CloudProvider::Icloud, + destination: "/cloud/file.bin".into(), + observed_bytes: 1, + destination_blake3: "c".repeat(64), + confirmed_at_ms: 3, + kind: crate::cloud_transfer::SyncEvidenceKind::ProviderNativeStatus, + evidence_id: "foundation:complete".into(), + sync_complete: true, + sync_state: ProviderSyncState::Complete, + remote_content: None, + }, + ) + .unwrap() + } + #[test] fn pending_upload_goal_never_satisfies_provider_gate() { let record = pending_record(); @@ -631,6 +717,63 @@ mod tests { .any(|warning| warning == "goal-projection-write-failed:cloud-goal-state-regression")); } + #[test] + fn source_blocker_updates_goal_without_rewinding_advanced_state() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + let record = complete_record(); + let advanced_adr = snapshot_from_evidence( + &record, + CloudOffloadGoalState::EvictionReady, + 10, + ); + let advanced_goal = goal_snapshot_from_evidence( + &receipt, + &record, + CloudOffloadGoalState::EvictionReady, + 10, + ); + write_projection_pair(&adr_dir, &advanced_adr, &goal_dir, &advanced_goal); + + let mut blocked_adr = snapshot_from_evidence( + &record, + CloudOffloadGoalState::ProviderSyncConfirmed, + 11, + ); + let mut blocked_goal = goal_snapshot_from_evidence( + &receipt, + &record, + CloudOffloadGoalState::ProviderSyncConfirmed, + 11, + ); + blocked_goal.status = "blocked".into(); + blocked_goal.completion_gates.insert("source-present".into(), false); + blocked_adr.decision.push_str("-source-state-unverified"); + blocked_adr + .consequences + .push("source-state-blocked:source-not-present".into()); + + let warnings = write_projection_pair_with_source_blocker( + &adr_dir, + &blocked_adr, + &goal_dir, + &blocked_goal, + Some("source-not-present"), + ) + .2; + assert!(warnings.is_empty()); + let persisted: CloudOffloadGoalSnapshot = serde_json::from_slice( + &std::fs::read(goal_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!(persisted.goal_state, CloudOffloadGoalState::EvictionReady); + assert_eq!(persisted.status, "blocked"); + assert!(!persisted.completion_gates["source-present"]); + assert!(!persisted.completion_gates["explicit-eviction-permit"]); + } + #[test] fn initial_projection_pair_seeds_missing_state_without_evidence() { let temporary = tempfile::tempdir().unwrap(); diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 53b82d2e3..cffdc98b5 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -2000,7 +2000,13 @@ fn collect_cloud_attestation_for_receipt( .push(format!("source-state-blocked:{blocker}")); } let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair(adr_dir, &adr, goal_dir, &goal); + cloud_adr::write_projection_pair_with_source_blocker( + adr_dir, + &adr, + goal_dir, + &goal, + source_blocker, + ); Ok(CloudAttestationOutput { goal_state, evidence, From dcded5230fe74cef96377022f0d8e786df414eaf Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 12:42:44 +0900 Subject: [PATCH 061/691] fix: clear stale eviction wording on blocked goals --- src-tauri/src/cloud_adr.rs | 40 ++++++++++++++++++++++++++++++++------ 1 file changed, 34 insertions(+), 6 deletions(-) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index d937ce8c2..1d2493d38 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -393,22 +393,36 @@ pub fn write_projection_pair_with_source_blocker( if goal_state_rank(previous_goal.goal_state) > goal_state_rank(goal.goal_state) { adr.goal_state = previous_goal.goal_state; goal.goal_state = previous_goal.goal_state; - adr.decision = format!( - "{}-source-state-unverified", - decision_for(previous_goal.goal_state, adr.provider_sync_state) - ); } } goal.status = "blocked".into(); goal.completion_gates.insert("source-present".into(), false); goal.completion_gates .insert("explicit-eviction-permit".into(), false); + let decision_state = if goal_state_rank(goal.goal_state) + >= goal_state_rank(CloudOffloadGoalState::ProviderSyncConfirmed) + { + CloudOffloadGoalState::ProviderSyncConfirmed + } else { + goal.goal_state + }; + adr.decision = format!( + "{}-source-state-unverified", + decision_for(decision_state, adr.provider_sync_state) + ); + adr.consequences + .retain(|value| value != "explicit-trash-step-may-proceed"); let blocker = format!("source-state-blocked:{source_blocker}"); if !adr.consequences.iter().any(|value| value == &blocker) { adr.consequences.push(blocker); } - if !adr.decision.ends_with("-source-state-unverified") { - adr.decision.push_str("-source-state-unverified"); + if !adr + .consequences + .iter() + .any(|value| value == "eviction-blocked-until-source-state") + { + adr.consequences + .push("eviction-blocked-until-source-state".into()); } write_projection_pair(adr_dir, &adr, goal_dir, &goal) } @@ -772,6 +786,20 @@ mod tests { assert_eq!(persisted.status, "blocked"); assert!(!persisted.completion_gates["source-present"]); assert!(!persisted.completion_gates["explicit-eviction-permit"]); + let persisted_adr: CloudOffloadAdrSnapshot = serde_json::from_slice( + &std::fs::read(adr_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!( + persisted_adr.decision, + "retain-source-eviction-gate-pending-source-state-unverified" + ); + assert!(persisted_adr + .consequences + .contains(&"eviction-blocked-until-source-state".into())); + assert!(!persisted_adr + .consequences + .contains(&"explicit-trash-step-may-proceed".into())); } #[test] From 1ad419f2eb3be3aca5ab1fc9da33d8ac62676374 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 12:54:07 +0900 Subject: [PATCH 062/691] ci: bound build and test runtimes --- .github/workflows/release.yml | 1 + .github/workflows/test.yml | 2 ++ 2 files changed, 3 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e25336bc8..ee5bfaae0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -67,6 +67,7 @@ jobs: duplicate_cli_source: src-tauri/target/release/disksage-duplicate-audit duplicate_cli_asset: src-tauri/target/release/disksage-duplicate-audit-macos-arm64 runs-on: ${{ matrix.os }} + timeout-minutes: 60 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 2ad646064..fe37d4707 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,6 +11,7 @@ permissions: jobs: test: runs-on: ubuntu-latest + timeout-minutes: 30 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: @@ -44,6 +45,7 @@ jobs: llm-engine-build: runs-on: ubuntu-latest + timeout-minutes: 30 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: From 423e83d1bd505d1756ffa4537058e307aa6144a1 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 13:10:49 +0900 Subject: [PATCH 063/691] feat: expose dynamic cloud goal status --- src-tauri/src/bin/disksage-cloud-plan.rs | 11 +++++++++ src-tauri/src/cloud_adr.rs | 31 ++++++++++++++++++++++++ src-tauri/src/commands.rs | 12 +++++++-- src/lib/CloudArchive.svelte | 3 ++- src/lib/api.ts | 1 + 5 files changed, 55 insertions(+), 3 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 6dc7344af..424014f78 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -531,6 +531,7 @@ struct ReceiptReconciliationEntry { destination_state: Option, adr_projection_state: Option, goal_projection_state: Option, + goal_status: Option, goal_state: Option, provider_sync_state: Option, eviction_permit: bool, @@ -753,6 +754,7 @@ fn audit_receipts( destination_state: None, adr_projection_state: None, goal_projection_state: None, + goal_status: None, goal_state: None, provider_sync_state: None, eviction_permit: false, @@ -811,6 +813,9 @@ fn audit_receipts( destination_state: Some(destination_state.into()), adr_projection_state: Some(adr_state.into()), goal_projection_state: Some(goal_state.into()), + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(), goal_state: None, provider_sync_state: None, eviction_permit: false, @@ -2644,6 +2649,9 @@ fn reconcile_receipts( ) .into(), ); + entry.goal_status = cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(); entry.evidence_record_count = evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); } @@ -2714,6 +2722,9 @@ fn reconcile_receipts( ) .into(), ); + entry.goal_status = cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(); entry.evidence_record_count = evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); } diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 1d2493d38..92b51e180 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -560,6 +560,17 @@ pub fn read_projection_state( } } +/// Read only the replaceable Goal status for UI/reconciliation reporting. +/// The status is informational; eviction authority still comes from immutable evidence and gates. +pub fn read_goal_status(goal_dir: &Path, receipt_id: &str) -> Result, String> { + Ok(read_latest_projection::( + goal_dir, + receipt_id, + "goal", + )? + .map(|snapshot| snapshot.status)) +} + #[cfg(test)] mod tests { use super::*; @@ -869,6 +880,26 @@ mod tests { ); } + #[test] + fn goal_status_can_be_read_without_granting_eviction_authority() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + let mut goal = initial_goal_snapshot(&receipt, 4); + goal.status = "blocked".into(); + write_latest_goal_snapshot(&goal_dir, &goal).unwrap(); + + assert_eq!( + read_goal_status(&goal_dir, &receipt.receipt_id).unwrap(), + Some("blocked".into()) + ); + assert_eq!( + read_goal_status(&adr_dir, &receipt.receipt_id).unwrap(), + None + ); + } + #[test] fn divergent_projection_pair_is_not_reused_as_current_state() { let temporary = tempfile::tempdir().unwrap(); diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index cffdc98b5..aa73c52d8 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1686,6 +1686,7 @@ pub struct CloudAttestationOutput { pub struct CloudReceiptReconciliationEntry { pub receipt_id: Option, pub provider: Option, + pub goal_status: Option, pub goal_state: Option, pub provider_sync_state: Option, pub eviction_permit: bool, @@ -1799,6 +1800,7 @@ fn reconcile_cloud_receipts_inner( output.entries.push(CloudReceiptReconciliationEntry { receipt_id: None, provider: None, + goal_status: None, goal_state: None, provider_sync_state: None, eviction_permit: false, @@ -1830,8 +1832,11 @@ fn reconcile_cloud_receipts_inner( output.eviction_ready_count = output.eviction_ready_count.saturating_add(1); } output.entries.push(CloudReceiptReconciliationEntry { - receipt_id: Some(receipt.receipt_id), + receipt_id: Some(receipt.receipt_id.clone()), provider: Some(receipt.provider), + goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) + .ok() + .flatten(), goal_state: Some(attestation.goal_state), provider_sync_state: Some(attestation.evidence.sync_state), eviction_permit: attestation.permit.is_some(), @@ -1873,8 +1878,11 @@ fn reconcile_cloud_receipts_inner( output.pending_count = output.pending_count.saturating_add(1); } output.entries.push(CloudReceiptReconciliationEntry { - receipt_id: Some(receipt.receipt_id), + receipt_id: Some(receipt.receipt_id.clone()), provider: Some(receipt.provider), + goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) + .ok() + .flatten(), goal_state, provider_sync_state, eviction_permit: false, diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 767c25588..533362af4 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -536,7 +536,8 @@ {#each reconciliation.entries as entry}

0}> 영수증 {entry.receipt_id ?? "무효"} · {entry.provider ?? "미확인"} · - Goal {entry.goal_state ?? "미확인"} · 동기화 {entry.provider_sync_state ?? "미확인"} + Goal {entry.goal_status ?? "미확인"} ({entry.goal_state ?? "미확인"}) · + 동기화 {entry.provider_sync_state ?? "미확인"} {#if entry.error} · {entry.error}{/if} {#if entry.blockers.length > 0} · 차단: {entry.blockers.join(", ")}{/if}

diff --git a/src/lib/api.ts b/src/lib/api.ts index 877ae07b0..19d4c37ef 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -827,6 +827,7 @@ export interface CloudAttestationOutput { export interface CloudReceiptReconciliationEntry { receipt_id: string | null; provider: CloudProvider | null; + goal_status: "active" | "blocked" | "completed" | string | null; goal_state: CloudOffloadGoalState | null; provider_sync_state: ProviderSyncState | null; eviction_permit: boolean; From d5731c73f97bb5e85c0841531bd7191ccbc98d7c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 13:15:43 +0900 Subject: [PATCH 064/691] fix: constrain cloud goal status contract --- src/lib/api.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/api.ts b/src/lib/api.ts index 19d4c37ef..898b83acf 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -827,7 +827,7 @@ export interface CloudAttestationOutput { export interface CloudReceiptReconciliationEntry { receipt_id: string | null; provider: CloudProvider | null; - goal_status: "active" | "blocked" | "completed" | string | null; + goal_status: "active" | "blocked" | "completed" | null; goal_state: CloudOffloadGoalState | null; provider_sync_state: ProviderSyncState | null; eviction_permit: boolean; From 665abefbe0dc7142ae612fb6922489c582c14a4a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 13:34:02 +0900 Subject: [PATCH 065/691] fix: harden dynamic cloud reconciliation --- src-tauri/src/bin/disksage-cloud-plan.rs | 9 +- src-tauri/src/cloud.rs | 101 ++++++----------------- src-tauri/src/cloud_adr.rs | 83 ++++++++++++++++--- src-tauri/src/commands.rs | 66 ++++++++++++--- src-tauri/src/icloud_sync_health.rs | 1 + src-tauri/src/rules.rs | 18 +++- src/lib/Cleanup.svelte | 11 ++- src/lib/CloudArchive.svelte | 7 +- src/lib/api.ts | 2 + 9 files changed, 189 insertions(+), 109 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 424014f78..d58bedf32 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2656,16 +2656,15 @@ fn reconcile_receipts( evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); } Err(error) => { - let projection_warnings = - cloud_adr::ensure_initial_projection_pair_with_source_state( + let projection_outcome = + cloud_adr::ensure_initial_projection_pair_with_source_state_outcome( &receipt, &adr_dir, &goal_dir, generated_at_ms, ); - if projection_warnings.is_empty() { - report.mutation_performed = true; - } + let projection_warnings = projection_outcome.warnings; + report.mutation_performed |= projection_outcome.wrote; let projection = cloud_adr::read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir); let entry = &mut report.entries[entry_index]; diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index 664229fd1..ec325d0d2 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -222,10 +222,10 @@ impl Default for CloudPlanOptions { /// Immutable, process-local evidence prepared once for one source corpus. /// -/// Content metadata and duplicate digests are destination-independent and expensive to collect. -/// A snapshot lets callers derive several destination plans without re-running probes or reading -/// source content again. Destination existence, account scope, review fingerprints, capacity, and -/// provider sync state are deliberately not cached. +/// Content metadata is destination-independent and expensive to collect. A snapshot lets callers +/// derive several destination plans without re-running probes. Destination existence, account +/// scope, review fingerprints, capacity, provider sync state, and content digests are deliberately +/// evaluated for each final destination-specific candidate set. #[derive(Debug, Clone)] pub struct CloudSourceSnapshot { source_root: PathBuf, @@ -236,8 +236,6 @@ pub struct CloudSourceSnapshot { source_scan_visited_entries: u64, source_scan_stop_reasons: Vec, #[cfg(not(coverage))] - duplicate_digests: BTreeMap>, - #[cfg(not(coverage))] verified_regular_files: BTreeSet, } @@ -1449,6 +1447,7 @@ enum MetadataProbeFailure { Spawn, Wait, Timeout, + FileLimit, Exit, Read, OutputTooLarge, @@ -1462,6 +1461,7 @@ impl MetadataProbeFailure { Self::Spawn => "spawn-failed", Self::Wait => "wait-failed", Self::Timeout => "timeout", + Self::FileLimit => "file-limit-exceeded", Self::Exit => "nonzero-exit", Self::Read => "output-read-failed", Self::OutputTooLarge => "output-limit-exceeded", @@ -3881,45 +3881,6 @@ fn hash_duplicate_candidate(path: &Path, expected_bytes: u64) -> Result BTreeMap> { - let mut eligible = files - .iter() - .filter(|file| { - let Some(kind) = archive_kind(&file.path) else { - return false; - }; - source_blocked_reason(&file.path, kind, &file.content_metadata).is_none() - }) - .collect::>(); - eligible.sort_by(|left, right| { - right - .bytes - .cmp(&left.bytes) - .then_with(|| left.path.cmp(&right.path)) - }); - eligible.truncate(limit.max(1)); - - let mut by_size: BTreeMap> = BTreeMap::new(); - for file in eligible { - by_size.entry(file.bytes).or_default().push(file); - } - - let mut digests = BTreeMap::new(); - for same_size in by_size.values().filter(|files| files.len() > 1) { - for file in same_size { - digests.insert( - file.path.clone(), - hash_duplicate_candidate(&file.path, file.bytes), - ); - } - } - digests -} - #[cfg(not(coverage))] fn source_snapshot_file_unchanged(file: &FileFact) -> bool { let Ok(metadata) = std::fs::metadata(&file.path) else { @@ -4541,7 +4502,7 @@ fn prepare_cloud_archive_source_with_scan( source_scan_stop_reasons: Vec, ) -> CloudSourceSnapshot { #[cfg(not(coverage))] - let (batched_exiftool, selected_probe_paths, metadata_probe_started) = { + let (batched_exiftool, probe_candidate_paths, selected_probe_paths, metadata_probe_started) = { let mut probe_candidates = files .iter() .filter(|file| { @@ -4564,6 +4525,10 @@ fn prepare_cloud_archive_source_with_scan( .cmp(&left.bytes) .then_with(|| left.path.cmp(&right.path)) }); + let probe_candidate_paths = probe_candidates + .iter() + .map(|file| file.path.clone()) + .collect::>(); probe_candidates.truncate(MAX_METADATA_PROBE_FILES); let selected_probe_paths = probe_candidates .iter() @@ -4577,6 +4542,7 @@ fn prepare_cloud_archive_source_with_scan( let metadata_probe_started = Instant::now(); ( exiftool_metadata_batch(&paths), + probe_candidate_paths, selected_probe_paths, metadata_probe_started, ) @@ -4618,18 +4584,23 @@ fn prepare_cloud_archive_source_with_scan( batched_exiftool.get(&file.path).cloned(), ); } else if prepared.content_metadata == ContentMetadata::default() { + let failure = if probe_candidate_paths.contains(&file.path) + && !selected_probe_paths.contains(&file.path) + { + MetadataProbeFailure::FileLimit + } else { + MetadataProbeFailure::Timeout + }; add_probe_warning( &mut prepared.content_metadata, "planner", - MetadataProbeFailure::Timeout, + failure, ); } } prepared_files.push(prepared); } - #[cfg(not(coverage))] - let duplicate_digests = prehash_duplicate_candidates(&prepared_files, options.limit); CloudSourceSnapshot { source_root: source_root.to_path_buf(), prepared_at_ms: now_ms, @@ -4639,8 +4610,6 @@ fn prepare_cloud_archive_source_with_scan( source_scan_visited_entries, source_scan_stop_reasons, #[cfg(not(coverage))] - duplicate_digests, - #[cfg(not(coverage))] verified_regular_files, } } @@ -4873,7 +4842,7 @@ pub fn plan_cloud_archive_from_snapshot( let exact_duplicates = { candidates.sort_by(|a, b| b.bytes.cmp(&a.bytes).then_with(|| a.src.cmp(&b.src))); candidates.truncate(options.limit); - mark_exact_duplicate_candidates(&mut candidates, Some(&snapshot.duplicate_digests)) + mark_exact_duplicate_candidates(&mut candidates, None) }; #[cfg(coverage)] let exact_duplicates = { @@ -5000,6 +4969,7 @@ mod tests { && evidence.value == "exiftool-batch:timeout" && evidence.confidence == "high" })); + assert_eq!(MetadataProbeFailure::FileLimit.code(), "file-limit-exceeded"); } #[cfg(all(not(coverage), unix))] @@ -6608,7 +6578,7 @@ mod tests { #[cfg(not(coverage))] #[test] - fn source_snapshot_reuses_probes_and_hashes_but_refreshes_destination_state() { + fn source_snapshot_reuses_probes_and_rehashes_final_destination_candidates() { let tmp = tempfile::tempdir().unwrap(); let source = tmp.path().join("source"); let google = tmp.path().join("google"); @@ -6652,7 +6622,6 @@ mod tests { ); assert_eq!(snapshot.candidate_count(), 2); - assert_eq!(snapshot.duplicate_digests.len(), 2); let google_report = plan_cloud_archive_from_snapshot(&snapshot, &root(CloudProvider::GoogleDrive, &google)); let onedrive_report = @@ -6674,30 +6643,6 @@ mod tests { })); } - #[cfg(not(coverage))] - #[test] - fn duplicate_prehash_respects_candidate_limit() { - let tmp = tempfile::tempdir().unwrap(); - let files = ["a.tgz", "b.tgz"] - .into_iter() - .map(|name| { - let path = tmp.path().join(name); - std::fs::write(&path, b"same-content").unwrap(); - let metadata = std::fs::metadata(&path).unwrap(); - FileFact { - path, - bytes: metadata.len(), - created_ms: millis(metadata.created()), - modified_ms: millis(metadata.modified()), - content_metadata: ContentMetadata::default(), - } - }) - .collect::>(); - - assert!(prehash_duplicate_candidates(&files, 1).is_empty()); - assert_eq!(prehash_duplicate_candidates(&files, 2).len(), 2); - } - #[cfg(not(coverage))] #[test] fn source_snapshot_fails_closed_when_source_stat_changes() { diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 92b51e180..df48295a2 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -326,6 +326,14 @@ pub fn write_latest_goal_snapshot( /// Persist replaceable ADR/Goal projections without turning an authoritative receipt/evidence /// result into a failed operation. Immutable records remain the source of truth. +#[derive(Debug)] +pub struct ProjectionWriteOutcome { + pub adr_path: Option, + pub goal_path: Option, + pub warnings: Vec, + pub wrote: bool, +} + pub fn write_projection_pair( adr_dir: &Path, adr: &CloudOffloadAdrSnapshot, @@ -365,8 +373,35 @@ pub fn write_projection_pair_with_source_blocker( goal: &CloudOffloadGoalSnapshot, source_blocker: Option<&str>, ) -> (Option, Option, Vec) { + let outcome = write_projection_pair_with_source_blocker_outcome( + adr_dir, + adr, + goal_dir, + goal, + source_blocker, + ); + (outcome.adr_path, outcome.goal_path, outcome.warnings) +} + +/// Write a projection pair and report whether either projection was actually changed. +/// +/// The source-evicted terminal state deliberately returns existing paths with `wrote = false`; +/// callers must not treat those paths as a mutation. +pub fn write_projection_pair_with_source_blocker_outcome( + adr_dir: &Path, + adr: &CloudOffloadAdrSnapshot, + goal_dir: &Path, + goal: &CloudOffloadGoalSnapshot, + source_blocker: Option<&str>, +) -> ProjectionWriteOutcome { let Some(source_blocker) = source_blocker else { - return write_projection_pair(adr_dir, adr, goal_dir, goal); + let (adr_path, goal_path, warnings) = write_projection_pair(adr_dir, adr, goal_dir, goal); + return ProjectionWriteOutcome { + wrote: adr_path.is_some() || goal_path.is_some(), + adr_path, + goal_path, + warnings, + }; }; let mut adr = adr.clone(); @@ -384,11 +419,12 @@ pub fn write_projection_pair_with_source_blocker( ), ) { if previous_goal.goal_state == CloudOffloadGoalState::SourceEvicted { - return ( - Some(adr_dir.join(format!("{}-latest.json", goal.receipt_id))), - Some(goal_dir.join(format!("{}-latest.json", goal.receipt_id))), - Vec::new(), - ); + return ProjectionWriteOutcome { + adr_path: Some(adr_dir.join(format!("{}-latest.json", goal.receipt_id))), + goal_path: Some(goal_dir.join(format!("{}-latest.json", goal.receipt_id))), + warnings: Vec::new(), + wrote: false, + }; } if goal_state_rank(previous_goal.goal_state) > goal_state_rank(goal.goal_state) { adr.goal_state = previous_goal.goal_state; @@ -424,7 +460,13 @@ pub fn write_projection_pair_with_source_blocker( adr.consequences .push("eviction-blocked-until-source-state".into()); } - write_projection_pair(adr_dir, &adr, goal_dir, &goal) + let (adr_path, goal_path, warnings) = write_projection_pair(adr_dir, &adr, goal_dir, &goal); + ProjectionWriteOutcome { + wrote: adr_path.is_some() || goal_path.is_some(), + adr_path, + goal_path, + warnings, + } } /// Seed projections for a receipt whose provider evidence is not available yet. @@ -460,6 +502,17 @@ pub fn ensure_initial_projection_pair_with_source_state( goal_dir: &Path, updated_at_ms: u64, ) -> Vec { + ensure_initial_projection_pair_with_source_state_outcome(receipt, adr_dir, goal_dir, updated_at_ms) + .warnings +} + +#[cfg(not(coverage))] +pub fn ensure_initial_projection_pair_with_source_state_outcome( + receipt: &CloudCopyReceipt, + adr_dir: &Path, + goal_dir: &Path, + updated_at_ms: u64, +) -> ProjectionWriteOutcome { let mut adr = initial_adr_snapshot(receipt, updated_at_ms); let mut goal = initial_goal_snapshot(receipt, updated_at_ms); let source_blocker = @@ -471,18 +524,18 @@ pub fn ensure_initial_projection_pair_with_source_state( adr.consequences .push(format!("source-state-blocked:{blocker}")); } - let (_, _, mut warnings) = write_projection_pair_with_source_blocker( + let mut outcome = write_projection_pair_with_source_blocker_outcome( adr_dir, &adr, goal_dir, &goal, source_blocker, ); - warnings.retain(|warning| { + outcome.warnings.retain(|warning| { !warning.ends_with("cloud-adr-state-regression") && !warning.ends_with("cloud-goal-state-regression") }); - warnings + outcome } fn read_latest_projection( @@ -740,6 +793,16 @@ mod tests { assert!(warnings .iter() .any(|warning| warning == "goal-projection-write-failed:cloud-goal-state-regression")); + + let outcome = write_projection_pair_with_source_blocker_outcome( + adr_directory.path(), + &initial_adr_snapshot(&receipt, 12), + goal_directory.path(), + &initial_goal_snapshot(&receipt, 12), + Some("source-not-present"), + ); + assert!(!outcome.wrote); + assert!(outcome.warnings.is_empty()); } #[test] diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index aa73c52d8..30e815449 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -3,6 +3,8 @@ use std::sync::atomic::AtomicBool; #[cfg(not(coverage))] use std::sync::atomic::Ordering; use std::sync::{Arc, Mutex}; +#[cfg(not(coverage))] +use std::time::{Duration, Instant}; #[cfg(not(coverage))] use tauri::{AppHandle, Emitter, State}; @@ -1705,6 +1707,8 @@ pub struct CloudReceiptReconciliationOutput { pub eviction_ready_count: u64, pub error_count: u64, pub provider_evidence_written: u64, + pub unprocessed_count: u64, + pub incomplete_reconciliation: bool, pub entries: Vec, pub cloud_write_executed: bool, pub source_eviction_authorized: bool, @@ -1712,6 +1716,10 @@ pub struct CloudReceiptReconciliationOutput { #[cfg(not(coverage))] const MAX_CLOUD_RECEIPT_RECONCILIATION_ENTRIES: usize = 10_000; +#[cfg(not(coverage))] +const MAX_CLOUD_RECEIPTS_PER_RECONCILIATION: usize = 256; +#[cfg(not(coverage))] +const CLOUD_RECONCILIATION_MAX_DURATION: Duration = Duration::from_secs(30); #[cfg(not(coverage))] fn stable_reconciliation_error(error: &str) -> String { @@ -1738,6 +1746,7 @@ fn reconcile_cloud_receipts_inner( connection_path: &Path, cloud_roots: &[cloud::CloudRoot], ) -> Result { + let reconciliation_started = Instant::now(); let receipt_metadata = match std::fs::symlink_metadata(receipt_dir) { Ok(metadata) => metadata, Err(error) if error.kind() == std::io::ErrorKind::NotFound => { @@ -1750,6 +1759,8 @@ fn reconcile_cloud_receipts_inner( eviction_ready_count: 0, error_count: 0, provider_evidence_written: 0, + unprocessed_count: 0, + incomplete_reconciliation: false, entries: Vec::new(), cloud_write_executed: false, source_eviction_authorized: false, @@ -1769,7 +1780,17 @@ fn reconcile_cloud_receipts_inner( if paths.len() > MAX_CLOUD_RECEIPT_RECONCILIATION_ENTRIES { return Err("cloud-receipt-directory-entry-limit-exceeded".into()); } - + let receipt_paths = paths + .into_iter() + .filter(|path| { + let Ok(metadata) = std::fs::symlink_metadata(path) else { + return false; + }; + metadata.is_file() + && !metadata.file_type().is_symlink() + && path.extension().and_then(|value| value.to_str()) == Some("json") + }) + .collect::>(); let mut output = CloudReceiptReconciliationOutput { schema_version: 1, observed_at_ms: cloud::system_now_ms(), @@ -1779,21 +1800,22 @@ fn reconcile_cloud_receipts_inner( eviction_ready_count: 0, error_count: 0, provider_evidence_written: 0, + unprocessed_count: 0, + incomplete_reconciliation: false, entries: Vec::new(), cloud_write_executed: false, source_eviction_authorized: false, }; - for path in paths { - let metadata = match std::fs::symlink_metadata(&path) { - Ok(metadata) => metadata, - Err(_) => continue, - }; - let is_json = path.extension().and_then(|value| value.to_str()) == Some("json"); - if metadata.file_type().is_symlink() || !metadata.is_file() || !is_json { - continue; + for (index, path) in receipt_paths.iter().enumerate() { + if index >= MAX_CLOUD_RECEIPTS_PER_RECONCILIATION + || reconciliation_started.elapsed() >= CLOUD_RECONCILIATION_MAX_DURATION + { + output.unprocessed_count = receipt_paths.len().saturating_sub(index) as u64; + output.incomplete_reconciliation = output.unprocessed_count > 0; + break; } output.receipts_seen = output.receipts_seen.saturating_add(1); - let receipt = match cloud_transfer::read_immutable_receipt(&path) { + let receipt = match cloud_transfer::read_immutable_receipt(path) { Ok(receipt) => receipt, Err(error) => { output.error_count = output.error_count.saturating_add(1); @@ -2605,6 +2627,30 @@ mod tests { assert!(!output.source_eviction_authorized); } + #[cfg(not(coverage))] + #[test] + fn reconciliation_reports_receipts_left_after_entry_budget() { + let temporary = tempfile::tempdir().unwrap(); + let receipts = temporary.path().join("receipts"); + std::fs::create_dir(&receipts).unwrap(); + for index in 0..=MAX_CLOUD_RECEIPTS_PER_RECONCILIATION { + std::fs::write(receipts.join(format!("{index:04}.json")), b"{}").unwrap(); + } + let output = reconcile_cloud_receipts_inner( + &receipts, + &temporary.path().join("evidence"), + &temporary.path().join("adr"), + &temporary.path().join("goals"), + &temporary.path().join("oauth.json"), + &[], + ) + .unwrap(); + assert_eq!(output.receipts_seen, MAX_CLOUD_RECEIPTS_PER_RECONCILIATION as u64); + assert_eq!(output.unprocessed_count, 1); + assert!(output.incomplete_reconciliation); + assert_eq!(output.error_count, MAX_CLOUD_RECEIPTS_PER_RECONCILIATION as u64); + } + #[cfg(not(coverage))] #[test] fn missing_source_blocks_eviction_permit() { diff --git a/src-tauri/src/icloud_sync_health.rs b/src-tauri/src/icloud_sync_health.rs index 8e3b249d1..d8546b17f 100644 --- a/src-tauri/src/icloud_sync_health.rs +++ b/src-tauri/src/icloud_sync_health.rs @@ -564,6 +564,7 @@ fn probe_native_status(observed_at_ms: u64) -> IcloudNativeStatusEvidence { ErrorKind::WouldBlock | ErrorKind::Interrupted ) => { if Instant::now() >= drain_deadline { + kill_group(); break; } thread::sleep(Duration::from_millis(5)); diff --git a/src-tauri/src/rules.rs b/src-tauri/src/rules.rs index 46f1d8f92..db2da39de 100644 --- a/src-tauri/src/rules.rs +++ b/src-tauri/src/rules.rs @@ -8,6 +8,12 @@ pub struct BaseDirs { pub home: PathBuf, } +fn absolute_env_path(name: &str) -> Option { + std::env::var_os(name) + .map(PathBuf::from) + .filter(|path| path.is_absolute()) +} + impl BaseDirs { pub fn from_env() -> Option { let home = std::env::var(if cfg!(windows) { "USERPROFILE" } else { "HOME" }).ok()?; @@ -19,7 +25,7 @@ impl BaseDirs { #[cfg(windows)] let local_data = std::env::var("LOCALAPPDATA").map(PathBuf::from).ok()?; #[cfg(not(windows))] - let local_data = home.join(".cache"); + let local_data = absolute_env_path("XDG_CACHE_HOME").unwrap_or_else(|| home.join(".cache")); Some(BaseDirs { temp, local_data, home }) } } @@ -71,10 +77,16 @@ fn catalog(bases: &BaseDirs) -> Vec<(&'static str, &'static str, PathBuf)> { bases.home.join(".cargo").join("registry").join("cache")), ]; + #[cfg(target_os = "macos")] + let uv = absolute_env_path("UV_CACHE_DIR").unwrap_or_else(|| bases.local_data.join("uv")); + #[cfg(target_os = "macos")] + let huggingface = absolute_env_path("HF_HUB_CACHE") + .or_else(|| absolute_env_path("HF_HOME").map(|path| path.join("hub"))) + .unwrap_or_else(|| bases.local_data.join("huggingface")); #[cfg(target_os = "macos")] entries.extend([ - ("uv-cache", "uv 캐시", bases.local_data.join("uv")), - ("huggingface-cache", "Hugging Face 캐시", bases.local_data.join("huggingface")), + ("uv-cache", "uv 캐시", uv), + ("huggingface-cache", "Hugging Face 캐시", huggingface), ("codex-runtimes-cache", "Codex 런타임 캐시", bases.local_data.join("codex-runtimes")), ("gradle-cache", "Gradle 캐시", bases.home.join(".gradle").join("caches")), ]); diff --git a/src/lib/Cleanup.svelte b/src/lib/Cleanup.svelte index 4efbd5dae..4222c0281 100644 --- a/src/lib/Cleanup.svelte +++ b/src/lib/Cleanup.svelte @@ -14,6 +14,7 @@ let results: api.CleanResult[] = $state([]); let busy = $state(false); let loadError = $state(""); + let cacheRetryMessage = $state(""); // ponytail: 배지는 개별 파일/디렉토리 후보(artifacts)에만 표시 — caches는 소수의 고정 규칙 카테고리라 LLM 판정 가치가 낮음. let verdicts: Record = $state({}); @@ -41,6 +42,7 @@ if (busy || !candidate.exists || candidate.bytes === 0) return; busy = true; loadError = ""; + cacheRetryMessage = ""; try { const targets = await api.listCacheTargets(candidate.path); if (targets.length === 0) return; @@ -54,7 +56,13 @@ results = await api.cleanCacheContents(candidate.path, targets); await load(); } catch (e) { - loadError = String(e); + const error = String(e); + if (error.includes("cache-cleanup-targets-stale")) { + await load(); + cacheRetryMessage = "캐시 내용이 바뀌어 최신 목록을 불러왔습니다. 다시 휴지통으로를 눌러 검토하세요."; + } else { + loadError = error; + } } finally { busy = false; } @@ -117,6 +125,7 @@

알려진 캐시 루트의 직계 항목만 객체 지문·크기·수정시각을 재검증한 뒤 휴지통으로 보냅니다. 캐시 루트 자체는 보존됩니다.

+ {#if cacheRetryMessage}

{cacheRetryMessage}

{/if}
    {#each caches as c (c.id)}
  • diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 533362af4..36ad1d7bc 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -55,6 +55,7 @@ let attestation: api.CloudAttestationOutput | null = $state(null); let reconciling = $state(false); let reconciliation: api.CloudReceiptReconciliationOutput | null = $state(null); + let reconciliationError = $state(""); let evicting = $state(false); let evictionConfirmation = $state(""); let evictionRationale = $state(""); @@ -324,11 +325,11 @@ async function reconcileCloudReceipts() { reconciling = true; - loadError = ""; + reconciliationError = ""; try { reconciliation = await api.reconcileCloudReceipts(); } catch (e) { - loadError = String(e); + reconciliationError = String(e); } finally { reconciling = false; } @@ -529,6 +530,7 @@ {reconciliation.receipts_seen}개 확인 · {reconciliation.attested_count}개 provider 증거 갱신 · {reconciliation.pending_count}개 업로드 대기 · {reconciliation.error_count}개 확인 실패 + {#if reconciliation.incomplete_reconciliation} · {reconciliation.unprocessed_count}개 미처리{/if} {#if reconciliation.entries.length === 0}

    저장된 cloud receipt가 없습니다.

    @@ -546,6 +548,7 @@

    이 작업은 provider 증거와 동적 ADR/Goal만 갱신하며 클라우드 쓰기·원본 삭제는 수행하지 않습니다.

{/if} + {#if reconciliationError}{/if} {#if roots.some((root) => !root.readable)}

접근 불가 클라우드 루트는 선택에서 제외했습니다. macOS 개인정보 보호 권한을 허용한 뒤 목록을 다시 불러오세요. diff --git a/src/lib/api.ts b/src/lib/api.ts index 898b83acf..cc5adc0e3 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -844,6 +844,8 @@ export interface CloudReceiptReconciliationOutput { eviction_ready_count: number; error_count: number; provider_evidence_written: number; + unprocessed_count: number; + incomplete_reconciliation: boolean; entries: CloudReceiptReconciliationEntry[]; cloud_write_executed: false; source_eviction_authorized: false; From 31a2a8b31baa9309f5c31e5bfc8560bac46a97fb Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 13:56:32 +0900 Subject: [PATCH 066/691] fix: bound headless cloud reconciliation --- src-tauri/src/bin/disksage-cloud-plan.rs | 67 +++++++++++++++++++++--- 1 file changed, 59 insertions(+), 8 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index d58bedf32..ad6b0ea56 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -11,6 +11,8 @@ use std::fs::OpenOptions; use std::io::Write; #[cfg(not(coverage))] use std::path::{Path, PathBuf}; +#[cfg(not(coverage))] +use std::time::{Duration, Instant}; #[cfg(not(coverage))] use disksage_lib::cloud::{ @@ -558,6 +560,8 @@ struct ReceiptReconciliationReport { provider_evidence_written_count: u64, pending_provider_sync_count: u64, eviction_ready_count: u64, + unprocessed_count: u64, + incomplete_reconciliation: bool, entries: Vec, mutation_performed: bool, cloud_write_executed: bool, @@ -567,6 +571,10 @@ struct ReceiptReconciliationReport { #[cfg(not(coverage))] const MAX_RECONCILIATION_RECEIPTS: usize = 10_000; +#[cfg(not(coverage))] +const MAX_RECONCILIATION_ATTESTATIONS: usize = 256; +#[cfg(not(coverage))] +const RECONCILIATION_MAX_DURATION: Duration = Duration::from_secs(30); #[cfg(not(coverage))] const MAX_RECONCILIATION_PROJECTION_BYTES: u64 = 64 * 1024; @@ -719,6 +727,8 @@ fn audit_receipts( provider_evidence_written_count: 0, pending_provider_sync_count: 0, eviction_ready_count: 0, + unprocessed_count: 0, + incomplete_reconciliation: false, entries: Vec::new(), mutation_performed: false, cloud_write_executed: false, @@ -2562,6 +2572,7 @@ fn reconcile_receipts( home: &Path, generated_at_ms: u64, ) -> Result { + let reconciliation_started = Instant::now(); let mut report = audit_receipts(receipt_dir, Some(evidence_dir), generated_at_ms)?; report.notices = vec![ "provider-attestation-attempted", @@ -2581,14 +2592,31 @@ fn reconcile_receipts( if paths.len() > MAX_RECONCILIATION_RECEIPTS { return Err("receipt-directory-entry-limit-exceeded".into()); } - for path in paths { - let file_name = path - .file_name() - .and_then(|name| name.to_str()) - .unwrap_or_default() - .to_string(); - if regular_file_state(&path) != "present" || !file_name.ends_with(".json") { - continue; + let receipt_paths = paths + .into_iter() + .filter(|path| { + let file_name = path + .file_name() + .and_then(|name| name.to_str()) + .unwrap_or_default(); + regular_file_state(path) == "present" && file_name.ends_with(".json") + }) + .collect::>(); + for (index, path) in receipt_paths.iter().enumerate() { + if index >= MAX_RECONCILIATION_ATTESTATIONS + || reconciliation_started.elapsed() >= RECONCILIATION_MAX_DURATION + { + report.unprocessed_count = receipt_paths.len().saturating_sub(index) as u64; + report.incomplete_reconciliation = report.unprocessed_count > 0; + if report.incomplete_reconciliation { + let notice = if index >= MAX_RECONCILIATION_ATTESTATIONS { + "reconciliation-entry-limit" + } else { + "reconciliation-time-limit" + }; + report.notices.push(notice); + } + break; } let Ok(receipt) = cloud_transfer::read_immutable_receipt(&path) else { continue; @@ -3584,6 +3612,29 @@ mod tests { assert!(!report.source_eviction_authorized); } + #[cfg(not(coverage))] + #[test] + fn headless_reconciliation_reports_receipts_left_after_entry_budget() { + let temp = tempfile::tempdir().unwrap(); + let receipt_dir = temp.path().join("receipts"); + let evidence_dir = temp.path().join("evidence"); + std::fs::create_dir_all(&receipt_dir).unwrap(); + for index in 0..=MAX_RECONCILIATION_ATTESTATIONS { + std::fs::write(receipt_dir.join(format!("{index:04}.json")), b"{}").unwrap(); + } + + let report = + reconcile_receipts(&receipt_dir, &evidence_dir, None, None, temp.path(), 10).unwrap(); + assert_eq!( + report.unprocessed_count, + (receipt_dir.read_dir().unwrap().count() - MAX_RECONCILIATION_ATTESTATIONS) as u64 + ); + assert!(report.incomplete_reconciliation); + assert!(report + .notices + .contains(&"reconciliation-entry-limit")); + } + #[test] fn receipt_audit_counts_legacy_evidence_without_double_counting() { let temp = tempfile::tempdir().unwrap(); From 657e783c1e54ef126283d3e95dd1864d10d8c214 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 14:32:06 +0900 Subject: [PATCH 067/691] fix: serialize dynamic projection writes across processes --- src-tauri/src/cloud_adr.rs | 86 +++++++++++++++++++++++++++++++++++++- 1 file changed, 84 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index df48295a2..52a61cbdb 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -9,14 +9,23 @@ use std::collections::BTreeMap; use std::io::{Read, Write}; use std::path::{Path, PathBuf}; use std::sync::{Mutex, OnceLock}; +use std::time::{Duration, Instant}; + +#[cfg(unix)] +use std::os::unix::fs::OpenOptionsExt; +#[cfg(unix)] +use std::os::unix::io::AsRawFd; +#[cfg(windows)] +use std::os::windows::fs::OpenOptionsExt; pub const CLOUD_ADR_SCHEMA_VERSION: u32 = 2; pub const CLOUD_GOAL_SCHEMA_VERSION: u32 = 1; const MAX_PROJECTION_BYTES: u64 = 256 * 1024; -// ponytail: one process-wide lock keeps low-volume projections ordered; use per-receipt locks if -// concurrent multi-account projection throughput ever becomes measurable. +// ponytail: one process-wide lock keeps low-volume projections ordered; the receipt lock below +// closes the cross-process race without adding a lock manager or database. static PROJECTION_WRITE_LOCK: OnceLock> = OnceLock::new(); +const INTERPROCESS_LOCK_TIMEOUT: Duration = Duration::from_secs(5); #[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] #[serde(deny_unknown_fields)] @@ -243,6 +252,78 @@ fn projection_state(encoded: &[u8], kind: &str) -> Result<(CloudOffloadGoalState } } +struct InterprocessProjectionLock { + file: std::fs::File, +} + +impl Drop for InterprocessProjectionLock { + fn drop(&mut self) { + #[cfg(unix)] + // SAFETY: the descriptor belongs to this guard and remains open until this method + // returns. Unlocking is best-effort because the file descriptor is closing anyway. + unsafe { + libc::flock(self.file.as_raw_fd(), libc::LOCK_UN) + }; + } +} + +fn acquire_interprocess_projection_lock( + directory: &Path, + receipt_id: &str, +) -> Result { + let lock_path = directory.join(format!(".{receipt_id}.lock")); + if let Ok(metadata) = std::fs::symlink_metadata(&lock_path) { + if metadata.file_type().is_symlink() || !metadata.is_file() { + return Err("cloud-projection-lock-unsafe".into()); + } + } + let deadline = Instant::now() + INTERPROCESS_LOCK_TIMEOUT; + loop { + let mut options = std::fs::OpenOptions::new(); + options.read(true).write(true).create(true); + #[cfg(unix)] + options.custom_flags(libc::O_NOFOLLOW | libc::O_CLOEXEC); + #[cfg(windows)] + options.share_mode(0); + let file = match options.open(&lock_path) { + Ok(file) => file, + Err(error) if error.kind() == std::io::ErrorKind::PermissionDenied => { + if Instant::now() >= deadline { + return Err("cloud-projection-lock-timeout".into()); + } + std::thread::sleep(Duration::from_millis(10)); + continue; + } + Err(_) => return Err("cloud-projection-lock-open-failed".into()), + }; + + #[cfg(unix)] + { + // SAFETY: flock only uses the live descriptor owned by `file`. + let result = unsafe { libc::flock(file.as_raw_fd(), libc::LOCK_EX | libc::LOCK_NB) }; + if result == 0 { + return Ok(InterprocessProjectionLock { file }); + } + let would_block = + std::io::Error::last_os_error().kind() == std::io::ErrorKind::WouldBlock; + drop(file); + if !would_block { + return Err("cloud-projection-lock-acquire-failed".into()); + } + } + + #[cfg(windows)] + return Ok(InterprocessProjectionLock { file }); + + #[cfg(unix)] + if Instant::now() >= deadline { + return Err("cloud-projection-lock-timeout".into()); + } + #[cfg(unix)] + std::thread::sleep(Duration::from_millis(10)); + } +} + fn write_latest_json( directory: &Path, receipt_id: &str, @@ -258,6 +339,7 @@ fn write_latest_json( .get_or_init(|| Mutex::new(())) .lock() .map_err(|_| "cloud-projection-write-lock-poisoned".to_string())?; + let _interprocess_guard = acquire_interprocess_projection_lock(directory, receipt_id)?; let path = directory.join(format!("{receipt_id}-latest.json")); let incoming = projection_state(encoded, kind)?; if let Ok(metadata) = std::fs::symlink_metadata(&path) { From ba1b64b011b85bf1e8ccb2f2cfdc46d4513f42e6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 14:33:33 +0900 Subject: [PATCH 068/691] test: cover receipt projection lock --- src-tauri/src/cloud_adr.rs | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 52a61cbdb..38a26cdf8 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -807,6 +807,18 @@ mod tests { assert!(persisted.evidence_record_id.is_none()); } + #[test] + fn projection_writer_creates_receipt_scoped_lock() { + let directory = tempfile::tempdir().unwrap(); + let snapshot = initial_goal_snapshot(&receipt(), 5); + write_latest_goal_snapshot(directory.path(), &snapshot).unwrap(); + let lock_path = directory + .path() + .join(format!(".{}.lock", snapshot.receipt_id)); + let metadata = std::fs::symlink_metadata(lock_path).unwrap(); + assert!(metadata.is_file()); + } + #[test] fn snapshot_writer_rejects_path_like_receipt_ids() { let directory = tempfile::tempdir().unwrap(); From d582c67f25ec104638fbe6660aab084e81eefda0 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 14:36:08 +0900 Subject: [PATCH 069/691] fix: label reconciliation sync states --- src/lib/CloudArchive.svelte | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 36ad1d7bc..90d611161 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -539,7 +539,7 @@

0}> 영수증 {entry.receipt_id ?? "무효"} · {entry.provider ?? "미확인"} · Goal {entry.goal_status ?? "미확인"} ({entry.goal_state ?? "미확인"}) · - 동기화 {entry.provider_sync_state ?? "미확인"} + 동기화 {syncStateLabel(entry.provider_sync_state ?? undefined)} {#if entry.error} · {entry.error}{/if} {#if entry.blockers.length > 0} · 차단: {entry.blockers.join(", ")}{/if}

From 5ea5f6cd5a5e9a09b5c948113097c2446d79bd47 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 14:36:48 +0900 Subject: [PATCH 070/691] chore: remove duplicate reconciliation cfg --- src-tauri/src/commands.rs | 1 - 1 file changed, 1 deletion(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 30e815449..d530b333b 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1736,7 +1736,6 @@ fn stable_reconciliation_error(error: &str) -> String { } } -#[cfg(not(coverage))] #[cfg(not(coverage))] fn reconcile_cloud_receipts_inner( receipt_dir: &Path, From 6c0559fb133aea4a612a1e5610056d4a08c4373f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 15:05:33 +0900 Subject: [PATCH 071/691] feat: surface iCloud admission health --- src/lib/CloudArchive.svelte | 55 ++++++++++++++++++++++++++++++++++++- src/lib/api.test.ts | 1 + src/lib/api.ts | 20 ++++++++++++++ 3 files changed, 75 insertions(+), 1 deletion(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 90d611161..a77c68d26 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -56,6 +56,9 @@ let reconciling = $state(false); let reconciliation: api.CloudReceiptReconciliationOutput | null = $state(null); let reconciliationError = $state(""); + let icloudHealth: api.IcloudSyncHealthReport | null = $state(null); + let icloudHealthError = $state(""); + let checkingIcloudHealth = $state(false); let evicting = $state(false); let evictionConfirmation = $state(""); let evictionRationale = $state(""); @@ -89,6 +92,7 @@ onMount(() => { const reconciliationTimer = setInterval(() => { if (!reconciling) void reconcileCloudReceipts(); + if (!checkingIcloudHealth) void refreshIcloudHealth(); }, RECONCILIATION_INTERVAL_MS); void (async () => { try { @@ -98,7 +102,7 @@ connections = await api.listCloudProviderConnections(); reviewDecisions = await api.listCloudReviewDecisions(); selectedRoot = roots.find((root) => root.readable)?.path ?? ""; - await reconcileCloudReceipts(); + await Promise.all([reconcileCloudReceipts(), refreshIcloudHealth()]); } catch (e) { loadError = String(e); } @@ -335,6 +339,18 @@ } } + async function refreshIcloudHealth() { + checkingIcloudHealth = true; + icloudHealthError = ""; + try { + icloudHealth = await api.inspectIcloudNewCopyAdmission(); + } catch (e) { + icloudHealthError = String(e); + } finally { + checkingIcloudHealth = false; + } + } + function sourceEvictionReady(): boolean { return copied !== null && attestation?.permit !== null @@ -471,6 +487,21 @@ return labels[state ?? "unknown"] ?? labels.unknown; } + function icloudBlockerLabel(blocker: string): string { + const labels: Record = { + "icloud-sync-health-evidence-incomplete": "iCloud 동기화 증거가 불완전함", + "icloud-upload-queue-nonempty": "iCloud 업로드 대기열이 남아 있음", + "icloud-upload-in-flight": "iCloud 업로드가 진행 중임", + "icloud-upload-blocked-on-sync-up": "iCloud sync-up 대기 항목이 있음", + "icloud-upload-out-of-quota": "iCloud 용량 부족 항목이 있음", + "icloud-upload-queue-state-unclassified": "분류되지 않은 iCloud 대기 상태가 있음", + "icloud-local-sync-item-error-present": "iCloud 로컬 동기화 오류가 있음", + "icloud-native-sync-up-pending": "macOS iCloud sync-up이 아직 끝나지 않음", + "icloud-native-status-evidence-incomplete": "macOS iCloud 상태 증거가 불완전함", + }; + return labels[blocker] ?? blocker; + } + function duration(ms: number): string { const totalMinutes = Math.floor(ms / 60_000); const hours = Math.floor(totalMinutes / 60); @@ -549,6 +580,28 @@ {/if} {#if reconciliationError}{/if} + {#if icloudHealth} +
+ iCloud 새 복사 admission + + {icloudHealth.new_copy_admission_state === "clear" ? "새 복사 허용 가능" : "새 복사 차단"} · + 대기 {icloudHealth.upload_queue.scheduled_waiting_count}개 · + 진행 {icloudHealth.upload_queue.scheduled_active_count}개 · + sync-up 차단 {icloudHealth.upload_queue.blocked_on_sync_up_count}개 · + 오류 {icloudHealth.upload_queue.item_error_count}개 + + {#if icloudHealth.new_copy_admission_blockers.length > 0} +

+ 차단 사유: + {icloudHealth.new_copy_admission_blockers.map(icloudBlockerLabel).join(", ")} +

+ {:else} +

iCloud 전역 업로드 대기열이 비어 있습니다. 개별 파일은 별도 provider 증거가 필요합니다.

+ {/if} +

읽기 전용 로컬 증거이며, 원격 용량·개별 파일 업로드 완료·원본 삭제 권한을 대신 증명하지 않습니다.

+
+ {/if} + {#if icloudHealthError}{/if} {#if roots.some((root) => !root.readable)}

접근 불가 클라우드 루트는 선택에서 제외했습니다. macOS 개인정보 보호 권한을 허용한 뒤 목록을 다시 불러오세요. diff --git a/src/lib/api.test.ts b/src/lib/api.test.ts index ee1871fe9..9e8423836 100644 --- a/src/lib/api.test.ts +++ b/src/lib/api.test.ts @@ -65,6 +65,7 @@ describe("api wrappers", () => { [() => api.removeStaleGitWorktrees("/repo", ["origin/main"], "b".repeat(64), `DiskSage stale worktree 2 4096 승인 ${"b".repeat(64)}`, "merged and idle worktrees reviewed"), "remove_stale_git_worktrees", { repositoryRoot: "/repo", retentionReferences: ["origin/main"], approvedRemovalPlanFingerprint: "b".repeat(64), confirmationExactApprovalPhrase: `DiskSage stale worktree 2 4096 승인 ${"b".repeat(64)}`, rationale: "merged and idle worktrees reviewed" }], [() => api.listCloudProviderConnections(), "list_cloud_provider_connections"], [() => api.verifyCloudProviderCapacity("/cloud"), "verify_cloud_provider_capacity", { cloudRoot: "/cloud" }], + [() => api.inspectIcloudNewCopyAdmission(), "inspect_icloud_new_copy_admission"], [() => api.listCloudReviewDecisions(), "list_cloud_review_decisions"], [() => api.connectCloudProvider("/cloud", "desktop-client-id"), "connect_cloud_provider", { cloudRoot: "/cloud", clientId: "desktop-client-id" }], [() => api.disconnectCloudProvider("/cloud"), "disconnect_cloud_provider", { cloudRoot: "/cloud" }], diff --git a/src/lib/api.ts b/src/lib/api.ts index cc5adc0e3..281fc389a 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -598,6 +598,24 @@ export interface CloudPlanReport { notices: string[]; } +export interface IcloudSyncHealthReport { + observed_at_ms: number; + evidence_complete: boolean; + upload_queue: { + scheduled_waiting_count: number; + scheduled_active_count: number; + blocked_on_sync_up_count: number; + out_of_quota_count: number; + item_error_count: number; + }; + sync_backlog_present: boolean; + new_copy_admission_state: "clear" | "blocked"; + new_copy_admission_blockers: string[]; + blockers: string[]; + notices: string[]; + local_eviction_authorized: boolean; +} + export type CapacityEvidenceKind = "provider-api" | "provider-native-status" | "unavailable"; export type CloudCapacityState = | "available" @@ -942,6 +960,8 @@ export const listCloudProviderConnections = () => invoke("list_cloud_provider_connections"); export const verifyCloudProviderCapacity = (cloudRoot: string) => invoke("verify_cloud_provider_capacity", { cloudRoot }); +export const inspectIcloudNewCopyAdmission = () => + invoke("inspect_icloud_new_copy_admission"); export const listCloudReviewDecisions = () => invoke("list_cloud_review_decisions"); export const connectCloudProvider = (cloudRoot: string, clientId: string) => From aa8bdd01690f3c6eed9fa6be1dc6d90c6f525968 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 15:11:57 +0900 Subject: [PATCH 072/691] feat: catalog macOS app support caches --- src-tauri/src/rules.rs | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/src-tauri/src/rules.rs b/src-tauri/src/rules.rs index db2da39de..03a0252c6 100644 --- a/src-tauri/src/rules.rs +++ b/src-tauri/src/rules.rs @@ -89,6 +89,8 @@ fn catalog(bases: &BaseDirs) -> Vec<(&'static str, &'static str, PathBuf)> { ("huggingface-cache", "Hugging Face 캐시", huggingface), ("codex-runtimes-cache", "Codex 런타임 캐시", bases.local_data.join("codex-runtimes")), ("gradle-cache", "Gradle 캐시", bases.home.join(".gradle").join("caches")), + ("macos-app-support-cache", "macOS 응용 프로그램 업데이트 캐시", + bases.home.join("Library").join("Application Support").join("Caches")), ]); // Windows 진단 캐시 — 조용히 수십 GB로 자라는 것들. RDP 자동 추적(RdClientAutoTrace)의 .etl 로그가 @@ -544,6 +546,19 @@ mod tests { assert!(cands.len() >= 7); } + #[cfg(target_os = "macos")] + #[test] + fn catalog_includes_macos_app_support_cache() { + let tmp = tempfile::tempdir().unwrap(); + let bases = fake_bases(tmp.path()); + let cands = cache_candidates(&bases); + let candidate = cands + .iter() + .find(|candidate| candidate.id == "macos-app-support-cache") + .expect("macOS application-support cache must be catalogued"); + assert!(candidate.path.ends_with("Library/Application Support/Caches")); + } + #[test] fn is_catalog_path_scopes_to_catalog() { let tmp = tempfile::tempdir().unwrap(); From 4e48f64f38af301335974b4347ca17cf2f238f2a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 15:34:08 +0900 Subject: [PATCH 073/691] feat: surface provider global sync blockers --- src-tauri/src/commands.rs | 18 ++++++++++ src-tauri/src/lib.rs | 1 + src/lib/CloudArchive.svelte | 72 +++++++++++++++++++++++++++++++++++-- src/lib/api.test.ts | 1 + src/lib/api.ts | 17 +++++++++ 5 files changed, 107 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index d530b333b..52b7f97f5 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1157,6 +1157,24 @@ pub fn inspect_icloud_new_copy_admission( icloud_sync_health::inspect_new_copy_admission(&resolve_home(&app), cloud::system_now_ms()) } +/// Inspect the provider-wide File Provider queue for a non-iCloud cloud root. +/// +/// This is read-only aggregate evidence. It never returns user paths and never authorizes a copy +/// or source eviction; iCloud continues to use its specialized CloudDocs health command above. +#[cfg(not(coverage))] +#[tauri::command] +pub fn inspect_cloud_provider_global_sync( + cloud_root: String, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + cloud::validate_cloud_root_readable(&selected)?; + if selected.provider == cloud::CloudProvider::Icloud { + return Err("provider-global-sync-icloud-specialized".into()); + } + provider_global_sync::inspect_new_copy_admission(selected.provider) +} + #[cfg(not(coverage))] struct CloudPlanningOutput { selected: cloud::CloudRoot, diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 88a3c4bc7..35a58f94e 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -132,6 +132,7 @@ pub fn run() { commands::verify_cloud_provider_capacity, commands::inspect_cloud_provider_client_runtime, commands::inspect_icloud_new_copy_admission, + commands::inspect_cloud_provider_global_sync, commands::list_cloud_review_decisions, commands::connect_cloud_provider, commands::disconnect_cloud_provider, diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index a77c68d26..8c80a4178 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -59,6 +59,9 @@ let icloudHealth: api.IcloudSyncHealthReport | null = $state(null); let icloudHealthError = $state(""); let checkingIcloudHealth = $state(false); + let providerGlobalSync: api.ProviderGlobalSyncReport | null = $state(null); + let providerGlobalSyncError = $state(""); + let checkingProviderGlobalSync = $state(false); let evicting = $state(false); let evictionConfirmation = $state(""); let evictionRationale = $state(""); @@ -93,6 +96,7 @@ const reconciliationTimer = setInterval(() => { if (!reconciling) void reconcileCloudReceipts(); if (!checkingIcloudHealth) void refreshIcloudHealth(); + if (!checkingProviderGlobalSync) void refreshProviderGlobalSync(); }, RECONCILIATION_INTERVAL_MS); void (async () => { try { @@ -102,7 +106,11 @@ connections = await api.listCloudProviderConnections(); reviewDecisions = await api.listCloudReviewDecisions(); selectedRoot = roots.find((root) => root.readable)?.path ?? ""; - await Promise.all([reconcileCloudReceipts(), refreshIcloudHealth()]); + await Promise.all([ + reconcileCloudReceipts(), + refreshIcloudHealth(), + refreshProviderGlobalSync(), + ]); } catch (e) { loadError = String(e); } @@ -351,6 +359,31 @@ } } + async function refreshProviderGlobalSync() { + const root = selectedRootDetails(); + if (!root || root.provider === "icloud") { + providerGlobalSync = null; + providerGlobalSyncError = ""; + return; + } + checkingProviderGlobalSync = true; + providerGlobalSyncError = ""; + try { + providerGlobalSync = await api.inspectCloudProviderGlobalSync(root.path); + } catch (e) { + providerGlobalSync = null; + providerGlobalSyncError = String(e); + } finally { + checkingProviderGlobalSync = false; + } + } + + function providerSelectionChanged() { + providerGlobalSync = null; + providerGlobalSyncError = ""; + void refreshProviderGlobalSync(); + } + function sourceEvictionReady(): boolean { return copied !== null && attestation?.permit !== null @@ -502,6 +535,19 @@ return labels[blocker] ?? blocker; } + function providerGlobalSyncBlockerLabel(blocker: string): string { + const labels: Record = { + "provider-global-sync-transfer-active": "전역 파일 전송이 진행 중임", + "provider-global-sync-indexing-pending": "공급자 인덱싱이 끝나지 않음", + "provider-global-sync-reconciliation-pending": "공급자 reconciliation 대기 항목이 있음", + "provider-global-sync-filename-too-long": "파일명 제한 오류가 있음", + "provider-global-sync-temporarily-disconnected": "공급자가 일시적으로 연결 해제됨", + "provider-global-sync-server-unreachable": "공급자 서버에 연결할 수 없음", + "provider-global-sync-error": "공급자 전역 동기화 오류가 있음", + }; + return labels[blocker] ?? blocker; + } + function duration(ms: number): string { const totalMinutes = Math.floor(ms / 60_000); const hours = Math.floor(totalMinutes / 60); @@ -531,7 +577,7 @@

{/if} {#if icloudHealthError}{/if} + {#if providerGlobalSync} +
+ {providerGlobalSync.provider} 전역 동기화 admission + + {providerGlobalSync.state === "clear" && providerGlobalSync.blockers.length === 0 ? "새 복사 허용 가능" : "새 복사 차단"} · + 업로드 전송 {providerGlobalSync.upload_progress_present ? "진행 중" : "없음"} · + 다운로드 전송 {providerGlobalSync.download_progress_present ? "진행 중" : "없음"} + {#if providerGlobalSync.pending_indexable_count !== null} + · 인덱싱 대기 {providerGlobalSync.pending_indexable_count}개 + {/if} + + {#if providerGlobalSync.blockers.length > 0} +

+ 차단 사유: {providerGlobalSync.blockers.map(providerGlobalSyncBlockerLabel).join(", ")} +

+ {:else} +

공급자 전역 동기화 대기열이 비어 있습니다. 개별 파일은 별도 provider 증거가 필요합니다.

+ {/if} +

읽기 전용 File Provider 집계 증거이며, 클라우드 쓰기·개별 파일 attestation·원본 삭제 권한을 대신 증명하지 않습니다.

+
+ {/if} + {#if providerGlobalSyncError}{/if} {#if roots.some((root) => !root.readable)}

접근 불가 클라우드 루트는 선택에서 제외했습니다. macOS 개인정보 보호 권한을 허용한 뒤 목록을 다시 불러오세요. diff --git a/src/lib/api.test.ts b/src/lib/api.test.ts index 9e8423836..d4e302ff1 100644 --- a/src/lib/api.test.ts +++ b/src/lib/api.test.ts @@ -66,6 +66,7 @@ describe("api wrappers", () => { [() => api.listCloudProviderConnections(), "list_cloud_provider_connections"], [() => api.verifyCloudProviderCapacity("/cloud"), "verify_cloud_provider_capacity", { cloudRoot: "/cloud" }], [() => api.inspectIcloudNewCopyAdmission(), "inspect_icloud_new_copy_admission"], + [() => api.inspectCloudProviderGlobalSync("/cloud"), "inspect_cloud_provider_global_sync", { cloudRoot: "/cloud" }], [() => api.listCloudReviewDecisions(), "list_cloud_review_decisions"], [() => api.connectCloudProvider("/cloud", "desktop-client-id"), "connect_cloud_provider", { cloudRoot: "/cloud", clientId: "desktop-client-id" }], [() => api.disconnectCloudProvider("/cloud"), "disconnect_cloud_provider", { cloudRoot: "/cloud" }], diff --git a/src/lib/api.ts b/src/lib/api.ts index 281fc389a..d90c74712 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -616,6 +616,21 @@ export interface IcloudSyncHealthReport { local_eviction_authorized: boolean; } +export type ProviderGlobalSyncState = "clear" | "pending" | "error" | "unavailable"; + +export interface ProviderGlobalSyncReport { + schema_version: number; + provider: Exclude; + evidence_kind: string; + evidence_complete: boolean; + state: ProviderGlobalSyncState; + upload_progress_present: boolean; + download_progress_present: boolean; + pending_indexable_count: number | null; + blockers: string[]; + notices: string[]; +} + export type CapacityEvidenceKind = "provider-api" | "provider-native-status" | "unavailable"; export type CloudCapacityState = | "available" @@ -962,6 +977,8 @@ export const verifyCloudProviderCapacity = (cloudRoot: string) => invoke("verify_cloud_provider_capacity", { cloudRoot }); export const inspectIcloudNewCopyAdmission = () => invoke("inspect_icloud_new_copy_admission"); +export const inspectCloudProviderGlobalSync = (cloudRoot: string) => + invoke("inspect_cloud_provider_global_sync", { cloudRoot }); export const listCloudReviewDecisions = () => invoke("list_cloud_review_decisions"); export const connectCloudProvider = (cloudRoot: string, clientId: string) => From 5e8c7905fe1709f4a25fc7652acf16d5fd46b810 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 16:28:06 +0900 Subject: [PATCH 074/691] feat: add headless stale worktree removal --- src-tauri/Cargo.toml | 5 + .../src/bin/disksage-git-worktree-remove.rs | 240 ++++++++++++++++++ 2 files changed, 245 insertions(+) create mode 100644 src-tauri/src/bin/disksage-git-worktree-remove.rs diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml index 2daae43b1..332830ff4 100644 --- a/src-tauri/Cargo.toml +++ b/src-tauri/Cargo.toml @@ -83,6 +83,11 @@ name = "disksage-git-worktree-audit" path = "src/bin/disksage-git-worktree-audit.rs" required-features = ["cloud-cli"] +[[bin]] +name = "disksage-git-worktree-remove" +path = "src/bin/disksage-git-worktree-remove.rs" +required-features = ["cloud-cli"] + [[bin]] name = "disksage-icloud-sync-health" path = "src/bin/disksage-icloud-sync-health.rs" diff --git a/src-tauri/src/bin/disksage-git-worktree-remove.rs b/src-tauri/src/bin/disksage-git-worktree-remove.rs new file mode 100644 index 000000000..2b04bf54d --- /dev/null +++ b/src-tauri/src/bin/disksage-git-worktree-remove.rs @@ -0,0 +1,240 @@ +//! Execute the existing fail-closed stale-worktree removal path from a terminal. +//! +//! The command re-audits immediately before mutation, requires the exact audit phrase, records +//! immutable approval/result evidence, and never deletes branches or runs `git worktree prune`. + +use disksage_lib::{cloud, git_worktree}; +use std::ffi::OsString; +use std::path::PathBuf; + +const USAGE: &str = "usage: disksage-git-worktree-remove \ +--repository-root ABSOLUTE_PATH --reference-ref REF [--reference-ref REF ...] \ +--approved-removal-plan-fingerprint HEX64 \ +--confirmation-exact-approval-phrase PHRASE --reviewed-by human:ID --rationale TEXT \ +--record-root ABSOLUTE_PATH"; + +#[derive(Debug, PartialEq, Eq)] +struct Args { + repository_root: PathBuf, + retention_references: Vec, + plan_fingerprint: String, + confirmation_phrase: String, + reviewed_by: String, + rationale: String, + record_root: PathBuf, +} + +fn next_utf8(args: &mut impl Iterator, option: &str) -> Result { + args.next() + .ok_or_else(|| format!("{option} requires a value"))? + .into_string() + .map_err(|_| format!("{option} requires a UTF-8 value")) +} + +fn next_path(args: &mut impl Iterator, option: &str) -> Result { + args.next() + .map(PathBuf::from) + .ok_or_else(|| format!("{option} requires an absolute path")) +} + +fn parse_args(raw_args: impl IntoIterator) -> Result { + let mut repository_root = None; + let mut retention_references = Vec::new(); + let mut plan_fingerprint = None; + let mut confirmation_phrase = None; + let mut reviewed_by = None; + let mut rationale = None; + let mut record_root = None; + let mut args = raw_args.into_iter(); + + while let Some(arg) = args.next() { + match arg.to_str() { + Some("--repository-root") => { + repository_root = Some(next_path(&mut args, "--repository-root")?) + } + Some("--reference-ref") => { + retention_references.push(next_utf8(&mut args, "--reference-ref")?) + } + Some("--approved-removal-plan-fingerprint") => { + plan_fingerprint = + Some(next_utf8(&mut args, "--approved-removal-plan-fingerprint")?) + } + Some("--confirmation-exact-approval-phrase") => { + confirmation_phrase = Some(next_utf8( + &mut args, + "--confirmation-exact-approval-phrase", + )?) + } + Some("--reviewed-by") => reviewed_by = Some(next_utf8(&mut args, "--reviewed-by")?), + Some("--rationale") => rationale = Some(next_utf8(&mut args, "--rationale")?), + Some("--record-root") => record_root = Some(next_path(&mut args, "--record-root")?), + Some("-h" | "--help") => return Err(USAGE.into()), + Some(option) => return Err(format!("unknown option: {option}\n{USAGE}")), + None => return Err("option must be valid UTF-8".into()), + } + } + + let repository_root = + repository_root.ok_or_else(|| format!("--repository-root is required\n{USAGE}"))?; + if !repository_root.is_absolute() { + return Err("--repository-root must be absolute".into()); + } + if retention_references.is_empty() { + return Err(format!("at least one --reference-ref is required\n{USAGE}")); + } + let plan_fingerprint = plan_fingerprint + .ok_or_else(|| format!("--approved-removal-plan-fingerprint is required\n{USAGE}"))?; + if plan_fingerprint.len() != 64 + || !plan_fingerprint + .bytes() + .all(|byte| byte.is_ascii_hexdigit()) + { + return Err("--approved-removal-plan-fingerprint must be 64 hexadecimal characters".into()); + } + let confirmation_phrase = confirmation_phrase + .ok_or_else(|| format!("--confirmation-exact-approval-phrase is required\n{USAGE}"))?; + let reviewed_by = reviewed_by.ok_or_else(|| format!("--reviewed-by is required\n{USAGE}"))?; + let rationale = rationale.ok_or_else(|| format!("--rationale is required\n{USAGE}"))?; + let record_root = record_root.ok_or_else(|| format!("--record-root is required\n{USAGE}"))?; + if !record_root.is_absolute() { + return Err("--record-root must be absolute".into()); + } + + Ok(Args { + repository_root, + retention_references, + plan_fingerprint, + confirmation_phrase, + reviewed_by, + rationale, + record_root, + }) +} + +#[derive(serde::Serialize)] +struct RemovalOutput { + action: &'static str, + report: git_worktree::GitWorktreeAuditReport, + approval: git_worktree::GitWorktreeRemovalApproval, + approval_path: String, + result: git_worktree::GitWorktreeRemovalResult, + result_path: Option, + result_record_error: Option, +} + +fn execute(args: Args) -> Result { + let options = git_worktree::GitWorktreeAuditOptions::default(); + let audited_at_ms = cloud::system_now_ms(); + let report = git_worktree::audit_git_worktrees( + &args.repository_root, + &args.retention_references, + options, + audited_at_ms, + )?; + if report.removal_plan_fingerprint != args.plan_fingerprint { + return Err("git-worktree-removal-plan-fingerprint-mismatch".into()); + } + let approval = git_worktree::approve_stale_worktree_removal( + &report, + &args.confirmation_phrase, + cloud::system_now_ms(), + &args.reviewed_by, + &args.rationale, + )?; + let record_dir = git_worktree::prepare_worktree_record_directory( + &args.record_root, + &report, + "git-worktree-removals", + )?; + let approval_path = git_worktree::write_immutable_worktree_record( + &record_dir, + &format!("{}.approval.json", approval.approval_id), + &approval, + )?; + let result = git_worktree::execute_stale_worktree_removal( + &report, + &approval, + &args.confirmation_phrase, + options, + cloud::system_now_ms(), + )?; + let result_record = git_worktree::write_immutable_worktree_record( + &record_dir, + &format!("{}.result.json", result.result_id), + &result, + ); + let (result_path, result_record_error) = match result_record { + Ok(path) => (Some(path.to_string_lossy().into_owned()), None), + Err(error) => (None, Some(error)), + }; + Ok(RemovalOutput { + action: "remove-stale-git-worktrees", + report, + approval, + approval_path: approval_path.to_string_lossy().into_owned(), + result, + result_path, + result_record_error, + }) +} + +fn main() { + let args = match parse_args(std::env::args_os().skip(1)) { + Ok(args) => args, + Err(error) => { + eprintln!("{error}"); + std::process::exit(64); + } + }; + match execute(args) { + Ok(output) => match serde_json::to_string_pretty(&output) { + Ok(encoded) => println!("{encoded}"), + Err(_) => std::process::exit(70), + }, + Err(error) => { + eprintln!("disksage-git-worktree-remove: {error}"); + std::process::exit(65); + } + } +} + +#[cfg(test)] +mod tests { + use super::*; + + fn valid_args() -> Vec { + vec![ + "--repository-root".into(), + "/tmp/repository".into(), + "--reference-ref".into(), + "origin/develop".into(), + "--approved-removal-plan-fingerprint".into(), + "a".repeat(64).into(), + "--confirmation-exact-approval-phrase".into(), + "DiskSage stale worktree approval".into(), + "--reviewed-by".into(), + "human:test".into(), + "--rationale".into(), + "merged and inactive".into(), + "--record-root".into(), + "/tmp/records".into(), + ] + } + + #[test] + fn parser_requires_explicit_mutation_boundary() { + assert!(parse_args(Vec::::new()).is_err()); + assert!(parse_args(valid_args()).is_ok()); + } + + #[test] + fn parser_rejects_non_absolute_roots_and_bad_fingerprint() { + let mut args = valid_args(); + args[1] = "relative".into(); + assert!(parse_args(args).is_err()); + + let mut args = valid_args(); + args[5] = "bad".into(); + assert!(parse_args(args).is_err()); + } +} From 046dd561ff455553eff7fe2a154c7c12687c86b8 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 16:30:08 +0900 Subject: [PATCH 075/691] docs: document stale worktree removal CLI --- README.md | 25 ++++++++++++++++++++----- 1 file changed, 20 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index ac8aac0a2..cd5a9e2c8 100644 --- a/README.md +++ b/README.md @@ -23,11 +23,11 @@ - 🩺 **Incomplete-download recovery validation** — decodes bounded PNG payloads and streams bounded whole-file or embedded ZIP ranges to EOF with entry CRC checks, without extraction, rename, or discard - 🧬 **Incomplete-download materialization plan** — binds fresh audit and recovery fingerprints to exact non-overlapping byte ranges, SHA-256/BLAKE3 content lineage, and content-addressed filename suggestions while withholding destination selection and write approval - ☁️ **Destination-bound recovery approval plan** — binds validated output units to one discovered cloud root, relative destination, fresh provider capacity evidence, collision checks, and one exact human-approval fingerprint without creating any output -- 🌿 **Stale Git worktree audit** — resolves an exact retention-reference OID set, preserves every exact retained tip plus primary/current/dirty/unmerged/locked/prunable/active worktree, measures bounded allocated bytes, and emits a path-redacted fingerprint and exact approval phrase without pruning or removing anything +- 🌿 **Stale Git worktree audit/removal** — resolves an exact retention-reference OID set, preserves every exact retained tip plus primary/current/dirty/unmerged/locked/prunable/active worktree, measures bounded allocated bytes, and gates clean merged inactive candidates behind a path-bound fingerprint, exact approval phrase, immediate re-audit, and immutable approval/result records; branch deletion and `git worktree prune` are unreachable ## Safety first -Every destructive action goes through explicit review and the OS trash — DiskSage has **no permanent-delete code path**. Developer-artifact selections carry a bounded, metadata-only fingerprint, byte/file counts, scan status, and a platform filesystem-object identity; the Rust command re-scans immediately before trashing, atomically stages the exact identity in a private sibling directory, and rejects changed, recreated, unreadable, or incomplete candidates. Cloud archiving currently exposes copy and evidence only: even a successful provider attestation returns a local-eviction permit without deleting the source. All destructive operations are journaled and sent to OS trash; identity-staged operations retain their private recovery directory so OS-trash undo has a valid staged target, while restoring to the original path remains a separate recovery step. +Every user-file destructive action goes through explicit review and the OS trash — DiskSage has **no permanent-delete code path** for those files. Developer-artifact selections carry a bounded, metadata-only fingerprint, byte/file counts, scan status, and a platform filesystem-object identity; the Rust command re-scans immediately before trashing, atomically stages the exact identity in a private sibling directory, and rejects changed, recreated, unreadable, or incomplete candidates. Cloud archiving currently exposes copy and evidence only: even a successful provider attestation returns a local-eviction permit without deleting the source. Stale Git worktree removal is the explicit repository-management exception: it invokes non-force `git worktree remove` only for clean, merged, inactive, fingerprint-identical candidates, records immutable approval/result evidence, retains branches, and never runs prune. All user-file trash operations are journaled and retain their private recovery directory so OS-trash undo has a valid staged target, while restoring to the original path remains a separate recovery step. The headless split-archive audit is read-only. A contiguous sequence does not invent proof that its last observed member is the terminal part, and a missing-part result is never automatic deletion @@ -107,7 +107,7 @@ cargo run --features cloud-cli --bin disksage-incomplete-download-materialize -- --execute ``` -Stale-worktree auditing is read-only. It does not fetch or assume that local remote-tracking +Stale-worktree auditing does not fetch or assume that local remote-tracking references are current, so operators should refresh every selected reference before auditing. `--reference-ref` is repeatable: use the integration branch and every current open-PR exact head. An exact retained tip is always preserved. A different secondary worktree is a removal candidate @@ -115,8 +115,7 @@ only when its HEAD is already contained in at least one resolved retention OID, untracked state is clean, its bounded allocated-byte scan is complete, it is neither locked nor prunable, and no active CWD or recursive `lsof` consumer is observed. Local paths, branch names, and reference names appear only in an optional create-new mode-0600 report. The public approval -phrase is plan evidence; this command has no remove, prune, branch-delete, or filesystem mutation -path. +phrase is plan evidence; it is not execution authority by itself. ```sh cargo run --features cloud-cli --bin disksage-git-worktree-audit -- \ @@ -126,6 +125,22 @@ cargo run --features cloud-cli --bin disksage-git-worktree-audit -- \ --private-output /absolute/private/new-git-worktree-audit.json ``` +After reviewing that exact private report, the mutating command repeats the full audit immediately +before removal. It requires the unchanged plan fingerprint, exact approval phrase, attributed +reviewer, rationale, and a record root outside every audited worktree. It removes only the +currently matching candidates and stops on any drift; branches remain and no prune is performed. + +```sh +cargo run --features cloud-cli --bin disksage-git-worktree-remove -- \ + --repository-root /absolute/repository/worktree \ + --reference-ref origin/develop \ + --approved-removal-plan-fingerprint LOWERCASE_HEX64 \ + --confirmation-exact-approval-phrase 'DiskSage stale worktree … 승인 LOWERCASE_HEX64' \ + --reviewed-by human:reviewer \ + --rationale "Merged, clean, inactive worktree with no retained unmerged commits" \ + --record-root /absolute/private/disksage-app-data +``` + ## Local volume evidence CLI DiskSage can capture a read-only, path-redacted filesystem-capacity snapshot: From 3f10cdb3b7daa77627ff71423916bad33c8b33ea Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 16:33:19 +0900 Subject: [PATCH 076/691] fix: make worktree remove help non-mutating --- .../src/bin/disksage-git-worktree-remove.rs | 30 +++++++++++++++---- 1 file changed, 24 insertions(+), 6 deletions(-) diff --git a/src-tauri/src/bin/disksage-git-worktree-remove.rs b/src-tauri/src/bin/disksage-git-worktree-remove.rs index 2b04bf54d..7858176f2 100644 --- a/src-tauri/src/bin/disksage-git-worktree-remove.rs +++ b/src-tauri/src/bin/disksage-git-worktree-remove.rs @@ -24,6 +24,12 @@ struct Args { record_root: PathBuf, } +#[derive(Debug, PartialEq, Eq)] +enum ParseResult { + Run(Args), + Help, +} + fn next_utf8(args: &mut impl Iterator, option: &str) -> Result { args.next() .ok_or_else(|| format!("{option} requires a value"))? @@ -37,7 +43,7 @@ fn next_path(args: &mut impl Iterator, option: &str) -> Result< .ok_or_else(|| format!("{option} requires an absolute path")) } -fn parse_args(raw_args: impl IntoIterator) -> Result { +fn parse_args(raw_args: impl IntoIterator) -> Result { let mut repository_root = None; let mut retention_references = Vec::new(); let mut plan_fingerprint = None; @@ -68,7 +74,7 @@ fn parse_args(raw_args: impl IntoIterator) -> Result reviewed_by = Some(next_utf8(&mut args, "--reviewed-by")?), Some("--rationale") => rationale = Some(next_utf8(&mut args, "--rationale")?), Some("--record-root") => record_root = Some(next_path(&mut args, "--record-root")?), - Some("-h" | "--help") => return Err(USAGE.into()), + Some("-h" | "--help") => return Ok(ParseResult::Help), Some(option) => return Err(format!("unknown option: {option}\n{USAGE}")), None => return Err("option must be valid UTF-8".into()), } @@ -100,7 +106,7 @@ fn parse_args(raw_args: impl IntoIterator) -> Result) -> Result Result { fn main() { let args = match parse_args(std::env::args_os().skip(1)) { - Ok(args) => args, + Ok(ParseResult::Run(args)) => args, + Ok(ParseResult::Help) => { + println!("{USAGE}"); + return; + } Err(error) => { eprintln!("{error}"); std::process::exit(64); @@ -224,7 +234,15 @@ mod tests { #[test] fn parser_requires_explicit_mutation_boundary() { assert!(parse_args(Vec::::new()).is_err()); - assert!(parse_args(valid_args()).is_ok()); + assert!(matches!(parse_args(valid_args()), Ok(ParseResult::Run(_)))); + } + + #[test] + fn help_is_a_successful_terminal_parse_result() { + assert_eq!( + parse_args([OsString::from("--help")]).unwrap(), + ParseResult::Help + ); } #[test] From fdffa1c483e9b2d585a46e61d2d19043de575cd6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 17:34:58 +0900 Subject: [PATCH 077/691] feat: add provider API cloud copy fallback --- src-tauri/src/bin/disksage-provider-oauth.rs | 54 ++- src-tauri/src/cloud_transfer.rs | 99 +++- src-tauri/src/commands.rs | 267 ++++++++++- src-tauri/src/lib.rs | 2 + src-tauri/src/provider_api_client.rs | 19 +- src-tauri/src/provider_api_write.rs | 475 +++++++++++++++++++ src-tauri/src/provider_evidence.rs | 73 +++ src-tauri/src/provider_oauth.rs | 112 ++++- src/lib/CloudArchive.svelte | 122 ++++- src/lib/api.test.ts | 3 +- src/lib/api.ts | 24 +- 11 files changed, 1188 insertions(+), 62 deletions(-) create mode 100644 src-tauri/src/provider_api_write.rs diff --git a/src-tauri/src/bin/disksage-provider-oauth.rs b/src-tauri/src/bin/disksage-provider-oauth.rs index baff043ea..eb16b49dd 100644 --- a/src-tauri/src/bin/disksage-provider-oauth.rs +++ b/src-tauri/src/bin/disksage-provider-oauth.rs @@ -1,8 +1,8 @@ -//! Headless OAuth lifecycle for read-only OneDrive and Google Drive evidence. +//! Headless OAuth lifecycle for OneDrive and Google Drive evidence and explicit API uploads. //! //! Refresh tokens remain in the operating-system credential store. This command emits only -//! non-secret connection descriptors and provider capacity evidence; it never performs a cloud -//! file write or source eviction. +//! non-secret connection descriptors and provider capacity evidence; this command itself never +//! performs a cloud file write or source eviction. #[cfg(not(coverage))] use std::path::{Path, PathBuf}; @@ -39,6 +39,7 @@ struct Args { cloud_root: Option, client_id: Option, manual_browser: bool, + write_access: bool, } #[cfg(not(coverage))] @@ -92,7 +93,7 @@ fn usage() -> String { "usage: disksage-provider-oauth [--home ABSOLUTE_PATH] ", "[--connections ABSOLUTE_PATH] ", "(--list | --connect --cloud-root ABSOLUTE_PATH --client-id ID ", - "[--manual-browser] | --verify-capacity --cloud-root ABSOLUTE_PATH | ", + "[--manual-browser] [--write-access] | --verify-capacity --cloud-root ABSOLUTE_PATH | ", "--disconnect --cloud-root ABSOLUTE_PATH)" ) .into() @@ -134,6 +135,7 @@ fn parse_args(args: &[String], environment_home: Option) -> Result) -> Result actions.push(Action::VerifyCapacity), "--disconnect" => actions.push(Action::Disconnect), "--manual-browser" => manual_browser = true, + "--write-access" => write_access = true, "--home" => { if home .replace(PathBuf::from(value(args, &mut index, "--home")?)) @@ -201,8 +204,8 @@ fn parse_args(args: &[String], environment_home: Option) -> Result { - if cloud_root.is_some() || client_id.is_some() || manual_browser { - return Err("--list does not accept root, client, or browser arguments".into()); + if cloud_root.is_some() || client_id.is_some() || manual_browser || write_access { + return Err("--list does not accept root, client, browser, or write arguments".into()); } } Action::Connect => { @@ -211,7 +214,7 @@ fn parse_args(args: &[String], environment_home: Option) -> Result { - if cloud_root.is_none() || client_id.is_some() || manual_browser { + if cloud_root.is_none() || client_id.is_some() || manual_browser || write_access { return Err( "capacity verification and disconnect require only --cloud-root".into(), ); @@ -226,6 +229,7 @@ fn parse_args(args: &[String], environment_home: Option) -> Result Result { .client_id .as_deref() .ok_or_else(|| "--client-id is required".to_string())?; - let pending = provider_oauth::prepare_authorization(root.provider, client_id)?; + let pending = provider_oauth::prepare_authorization_with_write_access( + root.provider, + client_id, + args.write_access, + )?; if args.manual_browser { - eprintln!("Open this read-only provider authorization URL in a browser:"); + eprintln!("Open this provider authorization URL in a browser:"); eprintln!("{}", pending.authorization_url()); } else { open_system_browser(pending.authorization_url())?; @@ -426,6 +434,7 @@ mod tests { assert!(parsed.cloud_root.is_none()); assert!(parsed.client_id.is_none()); assert!(!parsed.manual_browser); + assert!(!parsed.write_access); } #[test] @@ -449,6 +458,7 @@ mod tests { .unwrap(); assert_eq!(parsed.action, Action::Connect); assert!(parsed.manual_browser); + assert!(!parsed.write_access); assert_eq!(parsed.connections, connections); assert!(parse_args( &strings(&["--connect", "--cloud-root", "relative", "--client-id", "id"]), @@ -464,6 +474,19 @@ mod tests { Some(home), ) .is_err()); + let write = parse_args( + &[ + "--connect".into(), + "--cloud-root".into(), + cloud_root.to_string_lossy().into_owned(), + "--client-id".into(), + "12345678-1234-4abc-8def-1234567890ab".into(), + "--write-access".into(), + ], + Some(absolute_home()), + ) + .unwrap(); + assert!(write.write_access); } #[test] @@ -474,6 +497,7 @@ mod tests { assert!(parse_args(&[], home.clone()).is_err()); assert!(parse_args(&strings(&["--list", "--disconnect"]), home.clone()).is_err()); assert!(parse_args(&strings(&["--list", "--manual-browser"]), home.clone()).is_err()); + assert!(parse_args(&strings(&["--list", "--write-access"]), home.clone()).is_err()); assert!(parse_args( &[ "--verify-capacity".into(), @@ -489,9 +513,19 @@ mod tests { &[ "--disconnect".into(), "--cloud-root".into(), - root, + root.clone(), "--manual-browser".into(), ], + home.clone(), + ) + .is_err()); + assert!(parse_args( + &[ + "--verify-capacity".into(), + "--cloud-root".into(), + root, + "--write-access".into(), + ], home, ) .is_err()); diff --git a/src-tauri/src/cloud_transfer.rs b/src-tauri/src/cloud_transfer.rs index 82c191fec..e3ae64a97 100644 --- a/src-tauri/src/cloud_transfer.rs +++ b/src-tauri/src/cloud_transfer.rs @@ -144,6 +144,9 @@ pub enum RemoteChecksumAlgorithm { pub enum CloudCopyVerificationMethod { #[default] CopiedByDiskSage, + /// The source was uploaded through an authenticated provider API because the local File + /// Provider could not admit a new copy. The same copy-only approval still binds the action. + CopiedByProviderApi, AdoptedExisting, } @@ -172,10 +175,14 @@ impl CloudCopyApprovalAction { } } - fn verification_method(self) -> CloudCopyVerificationMethod { + fn accepts_verification_method(self, method: CloudCopyVerificationMethod) -> bool { match self { - Self::CopyOnly => CloudCopyVerificationMethod::CopiedByDiskSage, - Self::AdoptExistingCopy => CloudCopyVerificationMethod::AdoptedExisting, + Self::CopyOnly => matches!( + method, + CloudCopyVerificationMethod::CopiedByDiskSage + | CloudCopyVerificationMethod::CopiedByProviderApi + ), + Self::AdoptExistingCopy => method == CloudCopyVerificationMethod::AdoptedExisting, } } } @@ -776,7 +783,9 @@ pub fn validate_receipt_copy_approval(receipt: &CloudCopyReceipt) -> Result<(), || approval.review_fingerprint != lineage.review_fingerprint || approval.provider != receipt.provider || approval.destination_account_scope != lineage.destination_account_scope - || approval.action.verification_method() != lineage.copy_verification_method + || !approval + .action + .accepts_verification_method(lineage.copy_verification_method) || approval.exact_confirmation_phrase != expected_phrase || approval.approved_at_ms > receipt.copied_at_ms || receipt.copied_at_ms.saturating_sub(approval.approved_at_ms) @@ -1297,7 +1306,15 @@ fn write_immutable_receipt( } #[cfg(not(coverage))] -fn build_verified_receipt( +pub(crate) fn write_provider_api_receipt( + receipt: &CloudCopyReceipt, + receipt_dir: &Path, +) -> Result { + write_immutable_receipt(receipt, receipt_dir) +} + +#[cfg(not(coverage))] +pub(crate) fn build_verified_receipt( candidate: &CloudCandidate, review_decision: Option<&CloudReviewDecision>, copy_approval: &CloudCopyApproval, @@ -1349,6 +1366,78 @@ fn build_verified_receipt( Ok(receipt) } +/// Hash and bind a source before an authenticated provider upload. This deliberately does not +/// touch the destination: a disconnected File Provider may not expose a usable local directory. +#[cfg(not(coverage))] +pub(crate) fn prepare_provider_api_source_receipt( + candidate: &CloudCandidate, + cloud_root: &CloudRoot, + review_decision: Option<&CloudReviewDecision>, + copy_approval: &CloudCopyApproval, + copied_at_ms: u64, +) -> Result<(CloudCopyReceipt, ContentDigests), String> { + validate_cloud_copy_approval_for_action( + copy_approval, + candidate, + cloud_root, + CloudCopyApprovalAction::CopyOnly, + copied_at_ms, + )?; + let blockers = candidate_blockers_with_review(candidate, cloud_root, review_decision); + if !blockers.is_empty() { + return Err(blockers.join(",")); + } + let source = Path::new(&candidate.src); + let before = std::fs::symlink_metadata(source).map_err(|error| error.to_string())?; + if before.file_type().is_symlink() || !before.is_file() { + return Err("source-must-be-regular-file".into()); + } + if crate::cloud::metadata_is_dataless(&before) { + return Err("source-content-not-local".into()); + } + let before_modified_ms = modified_ms(&before)?; + if before.len() != candidate.bytes || before_modified_ms != candidate.modified_ms { + return Err("source-changed-since-plan".into()); + } + let hashes = hash_file(source)?; + let after = std::fs::symlink_metadata(source).map_err(|error| error.to_string())?; + if after.file_type().is_symlink() + || !after.is_file() + || after.len() != before.len() + || modified_ms(&after)? != before_modified_ms + { + return Err("source-changed-during-provider-upload-preflight".into()); + } + let receipt = build_verified_receipt( + candidate, + review_decision, + copy_approval, + hashes.clone(), + copied_at_ms, + CloudCopyVerificationMethod::CopiedByProviderApi, + )?; + Ok((receipt, hashes)) +} + +#[cfg(not(coverage))] +pub(crate) fn verify_provider_api_source_unchanged( + candidate: &CloudCandidate, + hashes: &ContentDigests, +) -> Result<(), String> { + let source = Path::new(&candidate.src); + let metadata = std::fs::symlink_metadata(source).map_err(|_| "source-unavailable".to_string())?; + if metadata.file_type().is_symlink() || !metadata.is_file() { + return Err("source-changed-during-provider-upload".into()); + } + if metadata.len() != candidate.bytes || modified_ms(&metadata)? != candidate.modified_ms { + return Err("source-changed-during-provider-upload".into()); + } + if hash_file(source)? != *hashes { + return Err("source-changed-during-provider-upload".into()); + } + Ok(()) +} + /// Copy a candidate only after validating both the optional metadata review decision and a fresh, /// exact, human-attributed copy approval. The production entrypoint reads the live clock at the /// mutation boundary so an earlier preflight cannot silently extend the approval lifetime. diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 52b7f97f5..7a5e42799 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -20,7 +20,7 @@ use crate::safety; use crate::{ brew_cleanup, cloud, cloud_adr, cloud_eviction, cloud_local_eviction, cloud_plan_view, cloud_review, cloud_transfer, dev_artifacts, dupes, git_worktree, icloud_sync_health, - provider_api_client, provider_capacity, provider_client_runtime, provider_evidence, + provider_api_client, provider_api_write, provider_capacity, provider_client_runtime, provider_evidence, provider_global_sync, provider_oauth, provider_sync, rules, }; @@ -1031,6 +1031,7 @@ pub fn list_cloud_review_decisions( pub async fn connect_cloud_provider( cloud_root: String, client_id: String, + write_access: bool, app: AppHandle, ) -> Result { let selected = selected_cloud_root(&app, &cloud_root)?; @@ -1038,7 +1039,11 @@ pub async fn connect_cloud_provider( if selected.provider == cloud::CloudProvider::Icloud { return Err("icloud-oauth-not-supported".into()); } - let pending = provider_oauth::prepare_authorization(selected.provider, &client_id)?; + let pending = provider_oauth::prepare_authorization_with_write_access( + selected.provider, + &client_id, + write_access, + )?; use tauri_plugin_opener::OpenerExt; app.opener() .open_url(pending.authorization_url(), None::<&str>) @@ -1465,6 +1470,7 @@ pub struct CloudCopyOutput { pub adr_path: Option, pub goal_path: Option, pub projection_warnings: Vec, + pub provider_object_id: Option, } #[cfg(not(coverage))] @@ -1480,6 +1486,7 @@ fn create_cloud_candidate_receipt( app: &AppHandle, adopt_existing: bool, ) -> Result { + use tauri::Manager; if metadata_fingerprint.len() != 64 || !metadata_fingerprint .bytes() @@ -1505,12 +1512,11 @@ fn create_cloud_candidate_receipt( [] => return Err("fresh-plan-candidate-not-found".into()), _ => return Err("fresh-plan-candidate-ambiguous".into()), }; - use tauri::Manager; - let receipt_dir = app + let app_data_dir = app .path() .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())? - .join("cloud-receipts"); + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_dir = app_data_dir.join("cloud-receipts"); let review_decision = if candidate.requires_review { cloud_review::load_latest_decisions(&cloud_review_directory(&app)?)? .into_iter() @@ -1607,6 +1613,192 @@ fn create_cloud_candidate_receipt( adr_path, goal_path, projection_warnings, + provider_object_id: None, + }) +} + +#[cfg(not(coverage))] +fn create_cloud_candidate_provider_api_receipt( + root: &str, + cloud_root: &str, + metadata_fingerprint: &str, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: &str, + approval_rationale: &str, + app: &AppHandle, +) -> Result { + use tauri::Manager; + if metadata_fingerprint.len() != 64 + || !metadata_fingerprint + .bytes() + .all(|byte| byte.is_ascii_hexdigit()) + { + return Err("metadata-fingerprint-invalid".into()); + } + let planning = + cloud_plan_for_inputs(root, cloud_root, min_size_mib, min_age_days, limit, app)?; + let CloudPlanningOutput { + selected, + report, + .. + } = planning; + if selected.provider == cloud::CloudProvider::Icloud { + return Err("provider-api-icloud-unsupported".into()); + } + let candidate = report + .candidates + .iter() + .find(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) + .ok_or_else(|| "fresh-plan-candidate-not-found".to_string())?; + if report + .candidates + .iter() + .filter(|entry| entry.metadata_fingerprint == metadata_fingerprint) + .count() + != 1 + { + return Err("fresh-plan-candidate-ambiguous".into()); + } + let connection_path = oauth_connections_path(app)?; + let connection = provider_oauth::connection_for_root( + &provider_oauth::load_connections(&connection_path)?, + &selected, + )?; + if !provider_oauth::scope_allows_write(&connection) { + return Err("provider-oauth-write-scope-required".into()); + } + let capacity = report + .capacity + .as_ref() + .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; + require_capacity_for_copy(candidate, &capacity.snapshot)?; + let review_decision = if candidate.requires_review { + cloud_review::load_latest_decisions(&cloud_review_directory(app)?)? + .into_iter() + .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) + } else { + None + }; + let copy_approval = cloud_transfer::create_cloud_copy_approval( + candidate, + &selected, + cloud_transfer::CloudCopyApprovalAction::CopyOnly, + cloud::system_now_ms(), + &local_human_reviewer(), + approval_rationale.trim(), + exact_confirmation_phrase, + )?; + let copied_at_ms = cloud::system_now_ms(); + let (receipt, source_hashes) = cloud_transfer::prepare_provider_api_source_receipt( + candidate, + &selected, + review_decision.as_ref(), + ©_approval, + copied_at_ms, + )?; + let access_token = provider_oauth::refreshed_access_token(&connection_path, &selected)?; + let upload = provider_api_write::upload_file( + selected.provider, + Path::new(&selected.path), + Path::new(&candidate.dst), + Path::new(&candidate.src), + candidate.bytes, + access_token.as_str(), + )?; + if let Err(error) = cloud_transfer::verify_provider_api_source_unchanged(candidate, &source_hashes) + { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => format!( + "{error},provider-api-upload-cleanup-failed:{cleanup_error}" + ), + }); + } + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_dir = app_data_dir.join("cloud-receipts"); + let receipt_path = match cloud_transfer::write_provider_api_receipt(&receipt, &receipt_dir) { + Ok(path) => path, + Err(error) => { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => format!( + "{error},provider-api-upload-cleanup-failed:{cleanup_error}" + ), + }); + } + }; + let mut projection_warnings = Vec::new(); + let (mut adr_path, mut goal_path) = match app.path().app_data_dir() { + Ok(app_data_dir) => { + let updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, updated_at_ms); + let (adr_path, goal_path, warnings) = cloud_adr::write_projection_pair( + &app_data_dir.join("cloud-adr"), + &adr, + &app_data_dir.join("cloud-goals"), + &goal, + ); + projection_warnings.extend(warnings); + ( + adr_path.map(|path| path.to_string_lossy().into_owned()), + goal_path.map(|path| path.to_string_lossy().into_owned()), + ) + } + Err(_) => { + projection_warnings.push("app-data-directory-unavailable".to_string()); + (None, None) + } + }; + let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; + let cloud_roots = cloud::discover_cloud_roots(&resolve_home(app)); + let attestation_object_id = (selected.provider == cloud::CloudProvider::GoogleDrive) + .then(|| upload.object_id.clone()); + match collect_cloud_attestation_for_receipt( + &receipt, + attestation_object_id, + &app_data_dir.join("cloud-provider-evidence"), + &app_data_dir.join("cloud-adr"), + &app_data_dir.join("cloud-goals"), + &connection_path, + &cloud_roots, + true, + ) { + Ok(attestation) => { + goal_state = attestation.goal_state; + adr_path = attestation.adr_path; + goal_path = attestation.goal_path; + projection_warnings.extend(attestation.projection_warnings); + } + Err(error) => projection_warnings.push(format!( + "provider-attestation-incomplete:{}", + stable_reconciliation_error(&error) + )), + } + Ok(CloudCopyOutput { + action: "copy-only", + goal_state, + receipt, + receipt_path: receipt_path.to_string_lossy().into_owned(), + adr_path, + goal_path, + projection_warnings, + provider_object_id: Some(upload.object_id), }) } @@ -1648,6 +1840,44 @@ pub async fn copy_cloud_candidate( .map_err(|_| "cloud-copy-task-failed".to_string())? } +/// Upload one approved candidate directly through the provider API when the local File Provider +/// cannot admit a new copy. The source is retained; the normal provider attestation and eviction +/// gates still run afterwards. +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn copy_cloud_candidate_via_provider_api( + root: String, + cloud_root: String, + metadata_fingerprint: String, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: String, + approval_rationale: String, + app: AppHandle, + state: State<'_, AppState>, +) -> Result { + let cloud_review = Arc::clone(&state.cloud_review); + tauri::async_runtime::spawn_blocking(move || { + let _guard = cloud_review + .lock() + .map_err(|_| "cloud-review-lock-poisoned".to_string())?; + create_cloud_candidate_provider_api_receipt( + &root, + &cloud_root, + &metadata_fingerprint, + min_size_mib, + min_age_days, + limit, + &exact_confirmation_phrase, + &approval_rationale, + &app, + ) + }) + .await + .map_err(|_| "cloud-provider-api-copy-task-failed".to_string())? +} + /// Rebuild the plan and adopt an already-existing destination only after full content-digest /// equality is proven. Both source and destination remain in place. #[cfg(not(coverage))] @@ -1857,6 +2087,7 @@ fn reconcile_cloud_receipts_inner( goal_dir, connection_path, cloud_roots, + false, ) { Ok(attestation) => { output.attested_count = output.attested_count.saturating_add(1); @@ -1943,6 +2174,7 @@ fn collect_cloud_attestation_for_receipt( goal_dir: &Path, connection_path: &Path, cloud_roots: &[cloud::CloudRoot], + force_provider_api: bool, ) -> Result { let confirmed_at_ms = cloud::system_now_ms(); let evidence = match receipt.provider { @@ -1966,10 +2198,27 @@ fn collect_cloud_attestation_for_receipt( .max_by_key(|root| Path::new(&root.path).components().count()) .cloned() .ok_or_else(|| "receipt-cloud-root-unavailable".to_string())?; - let object_id = object_id.filter(|value| !value.trim().is_empty()); + let object_id = object_id + .filter(|value| !value.trim().is_empty()) + .or_else(|| { + if receipt.provider == cloud::CloudProvider::GoogleDrive { + provider_evidence::latest_api_object_id( + evidence_dir, + &receipt.receipt_id, + receipt.provider, + ) + } else { + None + } + }); let fallback_requested = receipt.provider == cloud::CloudProvider::Onedrive || object_id.is_some(); - match provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) { + let native_evidence = if force_provider_api { + Err("provider-api-forced".to_string()) + } else { + provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) + }; + match native_evidence { Ok(evidence) if evidence.sync_complete || !fallback_requested => evidence, Err(error) if !fallback_requested => return Err(error), Ok(_) | Err(_) => { @@ -2106,6 +2355,7 @@ pub async fn attest_cloud_copy( &goal_dir, &connection_path, &cloud_roots, + false, ) }) .await @@ -2205,6 +2455,7 @@ pub async fn trash_verified_cloud_source( &goal_dir, &connection_path, &cloud_roots, + false, )?; let permit = attestation.permit.as_ref().ok_or_else(|| { if attestation.blockers.is_empty() { diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 35a58f94e..7df7476b5 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -69,6 +69,7 @@ pub mod naruon_lineage; /// Read-only, fail-closed Podman VM/store reclaim evidence. pub mod podman_reclaim; pub mod provider_api_client; +pub mod provider_api_write; pub mod provider_capacity; pub mod provider_client_runtime; pub mod provider_evidence; @@ -139,6 +140,7 @@ pub fn run() { commands::plan_cloud_archive, commands::review_cloud_candidate, commands::copy_cloud_candidate, + commands::copy_cloud_candidate_via_provider_api, commands::adopt_existing_cloud_candidate, commands::attest_cloud_copy, commands::reconcile_cloud_receipts, diff --git a/src-tauri/src/provider_api_client.rs b/src-tauri/src/provider_api_client.rs index 5e3e36202..080d54b83 100644 --- a/src-tauri/src/provider_api_client.rs +++ b/src-tauri/src/provider_api_client.rs @@ -24,6 +24,12 @@ const MAX_METADATA_RESPONSE_BYTES: u64 = 256 * 1_024; #[derive(Debug, Clone, PartialEq, Eq)] pub struct OneDrivePath(String); +impl OneDrivePath { + pub(crate) fn as_str(&self) -> &str { + &self.0 + } +} + /// An opaque Google Drive file ID paired with the exact My Drive-relative path expected from the /// receipt destination. Construction validates local path containment and Unicode normalization; /// collection still has to prove the authenticated remote parent chain. @@ -61,6 +67,13 @@ impl ProviderRemoteLocator { matches!(self, Self::OneDriveItemPath(_)) } + pub(crate) fn onedrive_path(&self) -> Option<&str> { + match self { + Self::OneDriveItemPath(path) => Some(path.as_str()), + _ => None, + } + } + fn location_proof(&self) -> Option { let Self::OneDriveItemPath(path) = self else { return None; @@ -135,7 +148,7 @@ pub fn provider_metadata_url(locator: &ProviderRemoteLocator) -> Result Result, String> { @@ -174,7 +187,7 @@ pub fn onedrive_path_locator( local_root: &Path, destination: &Path, ) -> Result { - let segments = normalized_relative_path_segments(local_root, destination)?; + let segments = destination_path_segments(local_root, destination)?; let locator = ProviderRemoteLocator::OneDriveItemPath(OneDrivePath(segments.join("/"))); provider_metadata_url(&locator)?; Ok(locator) @@ -187,7 +200,7 @@ pub fn google_drive_path_locator( destination: &Path, file_id: &str, ) -> Result { - let segments = normalized_relative_path_segments(local_root, destination)?; + let segments = destination_path_segments(local_root, destination)?; if segments.len() > MAX_GOOGLE_DRIVE_PATH_SEGMENTS { return Err("google-drive-path-too-deep".into()); } diff --git a/src-tauri/src/provider_api_write.rs b/src-tauri/src/provider_api_write.rs new file mode 100644 index 000000000..d1b7aa8ab --- /dev/null +++ b/src-tauri/src/provider_api_write.rs @@ -0,0 +1,475 @@ +//! Explicit OAuth write paths for provider copies when a desktop File Provider is unavailable. +//! +//! This module never accepts a token from the UI. Callers obtain a short-lived access token from +//! `provider_oauth`, bind the upload to the already-reviewed local source/destination, and keep the +//! The returned object id is bound into the immutable provider-evidence record by the normal +//! attestation path; subsequent checks still re-prove it against the source and remote metadata. + +use crate::cloud::CloudProvider; +use crate::provider_api_client::{onedrive_path_locator, ProviderRemoteLocator}; +use serde::Deserialize; +use std::io::Read; +use std::path::Path; + +const ONEDRIVE_GRAPH_ROOT: &str = "https://graph.microsoft.com/v1.0/me/drive/root"; +const ONEDRIVE_GRAPH_ITEMS: &str = "https://graph.microsoft.com/v1.0/me/drive/items"; +const GOOGLE_FILES: &str = "https://www.googleapis.com/drive/v3/files"; +const GOOGLE_UPLOAD_FILES: &str = "https://www.googleapis.com/upload/drive/v3/files"; +const MAX_BEARER_TOKEN_BYTES: usize = 64 * 1024; +const MAX_RESPONSE_BYTES: u64 = 256 * 1024; +const GOOGLE_CHUNK_BYTES: usize = 8 * 1024 * 1024; +const ONEDRIVE_CHUNK_BYTES: usize = 320 * 1024 * 10; + +#[derive(Debug, Clone, PartialEq, Eq)] +pub struct ProviderApiUploadResult { + pub provider: CloudProvider, + pub object_id: String, + pub locator: ProviderRemoteLocator, +} + +#[derive(Debug, Deserialize)] +struct UploadedItem { + id: Option, +} + +#[derive(Debug, Deserialize)] +struct GoogleFileList { + files: Vec, +} + +#[derive(Debug, Deserialize)] +struct GoogleFileEntry { + id: Option, + #[serde(rename = "mimeType")] + mime_type: Option, +} + +#[derive(Debug, Deserialize)] +struct OneDriveUploadSession { + #[serde(rename = "uploadUrl")] + upload_url: Option, +} + +fn validate_bearer_token(token: &str) -> Result<(), String> { + if token.is_empty() + || token.len() > MAX_BEARER_TOKEN_BYTES + || token.bytes().any(|byte| byte.is_ascii_control()) + { + return Err("provider-api-bearer-token-invalid".into()); + } + Ok(()) +} + +fn agent() -> ureq::Agent { + let config = ureq::Agent::config_builder() + .https_only(true) + .max_redirects(0) + .timeout_global(Some(std::time::Duration::from_secs(60))) + .build(); + ureq::Agent::new_with_config(config) +} + +fn safe_transport_error(error: ureq::Error) -> String { + match error { + ureq::Error::StatusCode(code) => format!("provider-api-http-status:{code}"), + ureq::Error::Timeout(_) => "provider-api-timeout".into(), + ureq::Error::HostNotFound => "provider-api-host-not-found".into(), + ureq::Error::BodyExceedsLimit(_) => "provider-api-response-too-large".into(), + _ => "provider-api-request-failed".into(), + } +} + +fn read_json Deserialize<'de>>( + response: &mut ureq::http::Response, +) -> Result { + if !(200..300).contains(&response.status().as_u16()) { + return Err(format!( + "provider-api-http-status:{}", + response.status().as_u16() + )); + } + let body = response + .body_mut() + .with_config() + .limit(MAX_RESPONSE_BYTES) + .read_to_string() + .map_err(safe_transport_error)?; + serde_json::from_str(&body).map_err(|_| "provider-api-response-invalid".into()) +} + +fn read_response_body(response: &mut ureq::http::Response) -> Result<(), String> { + if !(200..300).contains(&response.status().as_u16()) { + return Err(format!( + "provider-api-http-status:{}", + response.status().as_u16() + )); + } + response + .body_mut() + .with_config() + .limit(MAX_RESPONSE_BYTES) + .read_to_vec() + .map_err(safe_transport_error) + .map(|_| ()) +} + +fn response_location(response: &ureq::http::Response) -> Result { + response + .headers() + .get("Location") + .and_then(|value| value.to_str().ok()) + .filter(|value| value.starts_with("https://")) + .filter(|value| !value.bytes().any(|byte| byte.is_ascii_control())) + .map(str::to_owned) + .ok_or_else(|| "provider-api-upload-session-location-missing".into()) +} + +fn validate_local_source(source: &Path, expected_bytes: u64) -> Result { + let metadata = std::fs::symlink_metadata(source).map_err(|_| "source-unavailable".to_string())?; + if metadata.file_type().is_symlink() || !metadata.is_file() { + return Err("source-must-be-regular-file".into()); + } + if metadata.len() != expected_bytes { + return Err("source-size-changed-before-provider-upload".into()); + } + std::fs::File::open(source).map_err(|_| "source-unreadable".into()) +} + +fn percent_encode_segment(value: &str) -> String { + let mut encoded = String::with_capacity(value.len()); + for byte in value.bytes() { + if byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'.' | b'_' | b'~') { + encoded.push(char::from(byte)); + } else { + use std::fmt::Write; + write!(&mut encoded, "%{byte:02X}").expect("String formatting cannot fail"); + } + } + encoded +} + +fn onedrive_session_url(relative_path: &str) -> String { + let path = relative_path + .split('/') + .map(percent_encode_segment) + .collect::>() + .join("/"); + format!("{ONEDRIVE_GRAPH_ROOT}:/{path}:/createUploadSession") +} + +fn onedrive_metadata_url(relative_path: &str) -> String { + let path = relative_path + .split('/') + .map(percent_encode_segment) + .collect::>() + .join("/"); + format!("{ONEDRIVE_GRAPH_ROOT}:/{path}") +} + +fn google_query_escape(value: &str) -> String { + value.replace('\\', "\\\\").replace('\'', "\\'") +} + +fn google_list_children( + agent: &ureq::Agent, + token: &str, + parent_id: &str, + name: &str, +) -> Result, String> { + let query = format!( + "'{parent_id}' in parents and name = '{}' and trashed = false", + google_query_escape(name) + ); + let mut response = agent + .get(GOOGLE_FILES) + .query("q", query) + .query("spaces", "drive") + .query("pageSize", "100") + .query("fields", "files(id,mimeType)") + .header("Authorization", format!("Bearer {token}")) + .header("Accept", "application/json") + .call() + .map_err(safe_transport_error)?; + let list: GoogleFileList = read_json(&mut response)?; + Ok(list.files) +} + +fn google_create_folder( + agent: &ureq::Agent, + token: &str, + parent_id: &str, + name: &str, +) -> Result { + let metadata = serde_json::json!({ + "name": name, + "mimeType": "application/vnd.google-apps.folder", + "parents": [parent_id] + }); + let body = serde_json::to_vec(&metadata) + .map_err(|_| "provider-api-request-encode-failed".to_string())?; + let mut response = agent + .post(GOOGLE_FILES) + .query("supportsAllDrives", "false") + .header("Authorization", format!("Bearer {token}")) + .header("Content-Type", "application/json") + .send(body) + .map_err(safe_transport_error)?; + let item: UploadedItem = read_json(&mut response)?; + item.id + .filter(|id| !id.trim().is_empty()) + .ok_or_else(|| "provider-api-folder-id-missing".into()) +} + +fn google_parent_id( + agent: &ureq::Agent, + token: &str, + segments: &[String], +) -> Result { + let mut parent = "root".to_owned(); + for segment in segments { + let matches = google_list_children(agent, token, &parent, segment)?; + match matches.as_slice() { + [] => parent = google_create_folder(agent, token, &parent, segment)?, + [only] => { + if only.mime_type.as_deref() + != Some("application/vnd.google-apps.folder") + { + return Err("provider-api-parent-is-not-folder".into()); + } + parent = only + .id + .clone() + .filter(|id| !id.trim().is_empty()) + .ok_or_else(|| "provider-api-folder-id-missing".to_string())?; + } + _ => return Err("provider-api-parent-ambiguous".into()), + } + } + Ok(parent) +} + +fn google_upload_session( + agent: &ureq::Agent, + token: &str, + parent_id: &str, + name: &str, + bytes: u64, +) -> Result { + let metadata = serde_json::json!({"name": name, "parents": [parent_id]}); + let body = serde_json::to_vec(&metadata) + .map_err(|_| "provider-api-request-encode-failed".to_string())?; + let response = agent + .post(GOOGLE_UPLOAD_FILES) + .query("uploadType", "resumable") + .query("supportsAllDrives", "false") + .header("Authorization", format!("Bearer {token}")) + .header("Content-Type", "application/json; charset=UTF-8") + .header("X-Upload-Content-Type", "application/octet-stream") + .header("X-Upload-Content-Length", bytes.to_string()) + .send(body) + .map_err(safe_transport_error)?; + if !(200..300).contains(&response.status().as_u16()) { + return Err(format!( + "provider-api-http-status:{}", + response.status().as_u16() + )); + } + response_location(&response) +} + +fn upload_chunks( + agent: &ureq::Agent, + session_url: &str, + mut source: std::fs::File, + bytes: u64, + chunk_bytes: usize, + authorization: Option<&str>, +) -> Result { + let mut offset = 0_u64; + let mut buffer = vec![0_u8; chunk_bytes]; + while offset < bytes { + let want = (bytes - offset).min(chunk_bytes as u64) as usize; + source + .read_exact(&mut buffer[..want]) + .map_err(|_| "source-read-failed-during-provider-upload".to_string())?; + let end = offset + want as u64 - 1; + let content_range = format!("bytes {offset}-{end}/{bytes}"); + let mut request = agent + .put(session_url) + .header("Content-Length", want.to_string()) + .header("Content-Range", content_range) + .header("Content-Type", "application/octet-stream"); + if let Some(authorization) = authorization { + request = request.header("Authorization", authorization); + } + let mut response = request + .send(&buffer[..want]) + .map_err(safe_transport_error)?; + let status = response.status().as_u16(); + if (200..300).contains(&status) { + let item: UploadedItem = read_json(&mut response)?; + return item + .id + .filter(|id| !id.trim().is_empty()) + .ok_or_else(|| "provider-api-upload-object-id-missing".into()); + } + if status != 308 && status != 202 { + return Err(format!("provider-api-http-status:{status}")); + } + if let Some(range) = response.headers().get("Range").and_then(|v| v.to_str().ok()) { + let end = range + .rsplit_once('-') + .and_then(|(_, value)| value.parse::().ok()) + .ok_or_else(|| "provider-api-upload-range-invalid".to_string())?; + offset = end.saturating_add(1); + } else { + offset = end.saturating_add(1); + } + read_response_body(&mut response)?; + } + Err("provider-api-upload-completion-missing".into()) +} + +fn one_drive_upload( + agent: &ureq::Agent, + token: &str, + source: &Path, + relative_path: &str, + bytes: u64, +) -> Result { + let metadata_probe = agent + .get(onedrive_metadata_url(relative_path)) + .query("%24select", "id") + .header("Authorization", format!("Bearer {token}")) + .call(); + match metadata_probe { + Ok(mut response) => { + let _ = read_response_body(&mut response); + return Err("provider-api-destination-already-exists".into()); + } + Err(ureq::Error::StatusCode(404)) => {} + Err(error) => return Err(safe_transport_error(error)), + } + let session_body = serde_json::json!({ + "item": {"@microsoft.graph.conflictBehavior": "fail"} + }); + let body = serde_json::to_vec(&session_body) + .map_err(|_| "provider-api-request-encode-failed".to_string())?; + let mut session = agent + .post(onedrive_session_url(relative_path)) + .header("Authorization", format!("Bearer {token}")) + .header("Content-Type", "application/json") + .send(body) + .map_err(safe_transport_error)?; + let session: OneDriveUploadSession = read_json(&mut session)?; + let upload_url = session + .upload_url + .filter(|url| url.starts_with("https://") && !url.bytes().any(|byte| byte.is_ascii_control())) + .ok_or_else(|| "provider-api-upload-session-url-invalid".to_string())?; + let source_file = validate_local_source(source, bytes)?; + upload_chunks( + agent, + &upload_url, + source_file, + bytes, + ONEDRIVE_CHUNK_BYTES, + None, + ) +} + +fn google_upload( + agent: &ureq::Agent, + token: &str, + source: &Path, + destination: &Path, + local_root: &Path, + bytes: u64, +) -> Result { + let segments = crate::provider_api_client::destination_path_segments(local_root, destination)?; + let (name, folders) = segments + .split_last() + .ok_or_else(|| "provider-api-destination-path-invalid".to_string())?; + let parent = google_parent_id(agent, token, folders)?; + if !google_list_children(agent, token, &parent, name)?.is_empty() { + return Err("provider-api-destination-already-exists".into()); + } + let session = google_upload_session(agent, token, &parent, name, bytes)?; + let source_file = validate_local_source(source, bytes)?; + upload_chunks(agent, &session, source_file, bytes, GOOGLE_CHUNK_BYTES, None) +} + +pub fn upload_file( + provider: CloudProvider, + local_root: &Path, + destination: &Path, + source: &Path, + bytes: u64, + bearer_token: &str, +) -> Result { + validate_bearer_token(bearer_token)?; + let agent = agent(); + let object_id = match provider { + CloudProvider::Onedrive => { + let locator = onedrive_path_locator(local_root, destination)?; + let path = locator + .onedrive_path() + .ok_or_else(|| "provider-api-path-locator-invalid".to_string())?; + one_drive_upload(&agent, bearer_token, source, path, bytes)? + } + CloudProvider::GoogleDrive => { + google_upload(&agent, bearer_token, source, destination, local_root, bytes)? + } + CloudProvider::Icloud => return Err("provider-api-icloud-unsupported".into()), + }; + let locator = match provider { + CloudProvider::Onedrive => onedrive_path_locator(local_root, destination)?, + CloudProvider::GoogleDrive => ProviderRemoteLocator::GoogleDriveFileId(object_id.clone()), + CloudProvider::Icloud => unreachable!(), + }; + Ok(ProviderApiUploadResult { + provider, + object_id, + locator, + }) +} + +pub fn delete_uploaded_object( + provider: CloudProvider, + object_id: &str, + bearer_token: &str, +) -> Result<(), String> { + validate_bearer_token(bearer_token)?; + if object_id.trim().is_empty() || object_id.bytes().any(|byte| byte.is_ascii_control()) { + return Err("provider-api-object-id-invalid".into()); + } + let encoded = percent_encode_segment(object_id); + let url = match provider { + CloudProvider::Onedrive => format!("{ONEDRIVE_GRAPH_ITEMS}/{encoded}"), + CloudProvider::GoogleDrive => format!("{GOOGLE_FILES}/{encoded}"), + CloudProvider::Icloud => return Err("provider-api-icloud-unsupported".into()), + }; + let mut response = agent() + .delete(&url) + .header("Authorization", format!("Bearer {bearer_token}")) + .call() + .map_err(safe_transport_error)?; + read_response_body(&mut response) +} + +#[cfg(test)] +mod tests { + use super::*; + + #[test] + fn upload_session_urls_encode_each_path_segment() { + assert_eq!( + onedrive_session_url("DiskSage Archive/a b.txt"), + "https://graph.microsoft.com/v1.0/me/drive/root:/DiskSage%20Archive/a%20b.txt:/createUploadSession" + ); + } + + #[test] + fn google_query_escapes_drive_expression_literals() { + assert_eq!(google_query_escape(r"a\\b'c"), r"a\\\\b\'c"); + } +} diff --git a/src-tauri/src/provider_evidence.rs b/src-tauri/src/provider_evidence.rs index 9631c1567..95b481fcd 100644 --- a/src-tauri/src/provider_evidence.rs +++ b/src-tauri/src/provider_evidence.rs @@ -3,6 +3,7 @@ //! Provider status is time-sensitive. A successful check must therefore be persisted before a //! later source-eviction step can proceed, rather than surviving only in terminal or UI output. +use crate::cloud::CloudProvider; use crate::cloud_transfer::{ProviderSyncEvidence, SyncEvidenceKind}; use std::path::Path; @@ -246,6 +247,67 @@ pub fn read_immutable_sync_evidence(path: &Path) -> Result Option { + if !valid_hex64(receipt_id) { + return None; + } + let metadata = std::fs::symlink_metadata(directory).ok()?; + if !metadata.is_dir() || metadata.file_type().is_symlink() { + return None; + } + let prefix = format!("{receipt_id}-"); + let mut latest: Option<(u64, String, String)> = None; + for entry in std::fs::read_dir(directory).ok()?.take(4_096) { + let Ok(entry) = entry else { + continue; + }; + let path = entry.path(); + let Some(name) = path.file_name().and_then(|value| value.to_str()) else { + continue; + }; + if !name.starts_with(&prefix) || path.extension().and_then(|value| value.to_str()) != Some("json") { + continue; + } + let Ok(record) = read_immutable_sync_evidence(&path) else { + continue; + }; + if record.evidence.receipt_id != receipt_id + || record.evidence.provider != provider + || record.evidence.kind != SyncEvidenceKind::ProviderApi + { + continue; + } + let Some(remote) = record.evidence.remote_content.as_ref() else { + continue; + }; + if remote.object_id.trim().is_empty() { + continue; + } + let candidate = ( + record.evidence.confirmed_at_ms, + record.record_id.clone(), + remote.object_id.clone(), + ); + if latest + .as_ref() + .is_none_or(|current| (candidate.0, candidate.1.as_str()) > (current.0, current.1.as_str())) + { + latest = Some(candidate); + } + } + latest.map(|(_, _, object_id)| object_id) +} + #[cfg(test)] mod tests { use super::*; @@ -308,6 +370,17 @@ mod tests { assert!(serde_json::from_value::(value).is_err()); } + #[cfg(not(coverage))] + #[test] + fn latest_api_object_id_is_read_from_valid_immutable_evidence() { + let temp = tempfile::tempdir().unwrap(); + let (record, _) = write_immutable_sync_evidence(temp.path(), &evidence()).unwrap(); + assert_eq!( + latest_api_object_id(temp.path(), &record.evidence.receipt_id, CloudProvider::Onedrive), + Some("remote-id".into()) + ); + } + #[cfg(not(coverage))] #[test] fn immutable_record_round_trip_rejects_rename_and_collision() { diff --git a/src-tauri/src/provider_oauth.rs b/src-tauri/src/provider_oauth.rs index 06f9b98d9..e464a56c5 100644 --- a/src-tauri/src/provider_oauth.rs +++ b/src-tauri/src/provider_oauth.rs @@ -1,8 +1,8 @@ -//! Native OAuth 2.0 authorization for read-only cloud-provider metadata checks. +//! Native OAuth 2.0 authorization for cloud-provider metadata checks and explicit file uploads. //! //! DiskSage uses the system browser, PKCE S256, an ephemeral loopback listener, exact provider //! hosts, and an OS credential store. Refresh tokens never enter settings or command responses; -//! access tokens live only long enough to perform one provider metadata request. +//! access tokens live only long enough to perform one bounded provider operation. use crate::cloud::{cloud_root_path_matches, CloudProvider, CloudRoot}; use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine as _}; @@ -37,12 +37,14 @@ const ONEDRIVE_AUTH_ENDPOINT: &str = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize"; #[cfg(not(coverage))] const ONEDRIVE_TOKEN_ENDPOINT: &str = "https://login.microsoftonline.com/common/oauth2/v2.0/token"; -const ONEDRIVE_SCOPE: &str = "Files.Read offline_access"; +const ONEDRIVE_READ_SCOPE: &str = "Files.Read offline_access"; +const ONEDRIVE_WRITE_SCOPE: &str = "Files.ReadWrite offline_access"; const GOOGLE_AUTH_ENDPOINT: &str = "https://accounts.google.com/o/oauth2/v2/auth"; #[cfg(not(coverage))] const GOOGLE_TOKEN_ENDPOINT: &str = "https://oauth2.googleapis.com/token"; -const GOOGLE_SCOPE: &str = "https://www.googleapis.com/auth/drive.metadata.readonly"; +const GOOGLE_READ_SCOPE: &str = "https://www.googleapis.com/auth/drive.metadata.readonly"; +const GOOGLE_WRITE_SCOPE: &str = "https://www.googleapis.com/auth/drive"; #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)] pub struct OAuthConnection { @@ -72,12 +74,30 @@ impl Default for ConnectionDocument { pub fn requested_scope(provider: CloudProvider) -> Result<&'static str, String> { match provider { - CloudProvider::Onedrive => Ok(ONEDRIVE_SCOPE), - CloudProvider::GoogleDrive => Ok(GOOGLE_SCOPE), + CloudProvider::Onedrive => Ok(ONEDRIVE_READ_SCOPE), + CloudProvider::GoogleDrive => Ok(GOOGLE_READ_SCOPE), CloudProvider::Icloud => Err("icloud-oauth-not-supported".into()), } } +pub fn requested_write_scope(provider: CloudProvider) -> Result<&'static str, String> { + match provider { + CloudProvider::Onedrive => Ok(ONEDRIVE_WRITE_SCOPE), + CloudProvider::GoogleDrive => Ok(GOOGLE_WRITE_SCOPE), + CloudProvider::Icloud => Err("icloud-oauth-not-supported".into()), + } +} + +fn scope_is_valid(provider: CloudProvider, scope: &str) -> Result { + Ok(scope == requested_scope(provider)? || scope == requested_write_scope(provider)?) +} + +pub fn scope_allows_write(connection: &OAuthConnection) -> bool { + requested_write_scope(connection.provider) + .map(|scope| connection.scope == scope) + .unwrap_or(false) +} + fn authorization_endpoint(provider: CloudProvider) -> Result<&'static str, String> { match provider { CloudProvider::Onedrive => Ok(ONEDRIVE_AUTH_ENDPOINT), @@ -183,6 +203,7 @@ fn generate_pkce() -> Result { fn build_authorization_url( provider: CloudProvider, client_id: &str, + scope: &str, redirect_uri: &str, challenge: &str, state: &str, @@ -205,8 +226,10 @@ fn build_authorization_url( if challenge.len() != 43 || state.len() != 43 { return Err("oauth-pkce-material-invalid".into()); } + if scope.is_empty() || scope.bytes().any(|byte| byte.is_ascii_control()) { + return Err("oauth-scope-invalid".into()); + } let endpoint = authorization_endpoint(provider)?; - let scope = requested_scope(provider)?; let mut params = vec![ ("client_id", client_id), ("redirect_uri", redirect_uri), @@ -268,7 +291,7 @@ fn validate_connection(connection: &OAuthConnection) -> Result<(), String> { || connection.cloud_root_id.trim().is_empty() || connection.cloud_root_path.trim().is_empty() || !Path::new(&connection.cloud_root_path).is_absolute() - || connection.scope != requested_scope(connection.provider)? + || !scope_is_valid(connection.provider, &connection.scope)? { return Err("oauth-connection-invalid".into()); } @@ -413,6 +436,7 @@ pub fn connection_for_root( pub struct PendingOAuth { provider: CloudProvider, client_id: String, + scope: String, redirect_uri: String, state: String, verifier: Zeroizing, @@ -431,6 +455,15 @@ impl PendingOAuth { pub fn prepare_authorization( provider: CloudProvider, client_id: &str, +) -> Result { + prepare_authorization_with_write_access(provider, client_id, false) +} + +#[cfg(not(coverage))] +pub fn prepare_authorization_with_write_access( + provider: CloudProvider, + client_id: &str, + write_access: bool, ) -> Result { validate_client_id(provider, client_id)?; let listener = TcpListener::bind(("127.0.0.1", 0)) @@ -458,9 +491,15 @@ pub fn prepare_authorization( } } let pkce = generate_pkce()?; + let scope = if write_access { + requested_write_scope(provider)? + } else { + requested_scope(provider)? + }; let authorization_url = build_authorization_url( provider, client_id, + scope, &redirect_uri, &pkce.challenge, &pkce.state, @@ -468,6 +507,7 @@ pub fn prepare_authorization( Ok(PendingOAuth { provider, client_id: client_id.to_owned(), + scope: scope.to_owned(), redirect_uri, state: pkce.state, verifier: pkce.verifier, @@ -694,7 +734,8 @@ fn validate_token_value(value: &str) -> bool { } fn parse_token_document( - provider: CloudProvider, + _provider: CloudProvider, + required_scope: &str, json: &str, refresh_required: bool, ) -> Result { @@ -721,7 +762,7 @@ fn parse_token_document( return Err("oauth-token-expiry-invalid".into()); } if let Some(scope) = &document.scope { - let required_resource_scope = requested_scope(provider)? + let required_resource_scope = required_scope .split_whitespace() .next() .expect("provider scope is non-empty"); @@ -773,6 +814,7 @@ fn safe_oauth_transport_error(error: ureq::Error) -> String { #[cfg(not(coverage))] fn read_token_response( provider: CloudProvider, + required_scope: &str, response: ureq::http::Response, refresh_required: bool, ) -> Result { @@ -789,7 +831,7 @@ fn read_token_response( .read_to_string() .map_err(safe_oauth_transport_error)?, ); - parse_token_document(provider, body.as_str(), refresh_required) + parse_token_document(provider, required_scope, body.as_str(), refresh_required) } #[cfg(not(coverage))] @@ -803,7 +845,7 @@ fn exchange_authorization_code(pending: &PendingOAuth, code: &str) -> Result agent.post(endpoint).send_form([ ("client_id", pending.client_id.as_str()), @@ -815,7 +857,7 @@ fn exchange_authorization_code(pending: &PendingOAuth, code: &str) -> Result return Err("icloud-oauth-not-supported".into()), } .map_err(safe_oauth_transport_error)?; - read_token_response(pending.provider, response, true) + read_token_response(pending.provider, &pending.scope, response, true) } #[cfg(not(coverage))] @@ -837,7 +879,7 @@ fn refresh_grant(connection: &OAuthConnection, refresh_token: &str) -> Result return Err("icloud-oauth-not-supported".into()), } .map_err(safe_oauth_transport_error)?; - read_token_response(connection.provider, response, false) + read_token_response(connection.provider, &connection.scope, response, false) } #[cfg(not(coverage))] @@ -894,7 +936,7 @@ pub fn finish_authorization( cloud_root_id: root.id.clone(), cloud_root_path: root.path.clone(), client_id: pending.client_id.clone(), - scope: requested_scope(root.provider)?.into(), + scope: pending.scope.clone(), connected_at_ms, }; validate_connection(&connection)?; @@ -1039,6 +1081,7 @@ mod tests { let microsoft = build_authorization_url( CloudProvider::Onedrive, MICROSOFT_CLIENT_ID, + ONEDRIVE_READ_SCOPE, "http://localhost:49152", &challenge, &state, @@ -1052,6 +1095,7 @@ mod tests { let google = build_authorization_url( CloudProvider::GoogleDrive, GOOGLE_CLIENT_ID, + GOOGLE_READ_SCOPE, "http://127.0.0.1:49153", &challenge, &state, @@ -1065,6 +1109,7 @@ mod tests { assert!(build_authorization_url( CloudProvider::Onedrive, MICROSOFT_CLIENT_ID, + ONEDRIVE_READ_SCOPE, "https://attacker.invalid/callback", &challenge, &state, @@ -1073,6 +1118,7 @@ mod tests { assert!(build_authorization_url( CloudProvider::GoogleDrive, GOOGLE_CLIENT_ID, + GOOGLE_READ_SCOPE, "http://localhost:49153", &challenge, &state, @@ -1080,6 +1126,38 @@ mod tests { .is_err()); } + #[test] + fn write_scopes_are_explicit_and_distinct_from_metadata_scopes() { + assert_eq!( + requested_write_scope(CloudProvider::Onedrive).unwrap(), + "Files.ReadWrite offline_access" + ); + assert_eq!( + requested_write_scope(CloudProvider::GoogleDrive).unwrap(), + "https://www.googleapis.com/auth/drive" + ); + assert_ne!( + requested_scope(CloudProvider::Onedrive).unwrap(), + requested_write_scope(CloudProvider::Onedrive).unwrap() + ); + assert_ne!( + requested_scope(CloudProvider::GoogleDrive).unwrap(), + requested_write_scope(CloudProvider::GoogleDrive).unwrap() + ); + let mut connection = OAuthConnection { + connection_id: "connection:test".into(), + provider: CloudProvider::GoogleDrive, + cloud_root_id: "google-drive:test".into(), + cloud_root_path: "/cloud".into(), + client_id: GOOGLE_CLIENT_ID.into(), + scope: GOOGLE_WRITE_SCOPE.into(), + connected_at_ms: 1, + }; + assert!(scope_allows_write(&connection)); + connection.scope = GOOGLE_READ_SCOPE.into(); + assert!(!scope_allows_write(&connection)); + } + #[test] fn callback_parser_requires_exact_path_state_and_one_code() { let state = "s".repeat(43); @@ -1215,6 +1293,7 @@ mod tests { fn token_documents_require_bearer_resource_scope_and_refresh_on_consent() { let microsoft = parse_token_document( CloudProvider::Onedrive, + ONEDRIVE_READ_SCOPE, r#"{"access_token":"access","refresh_token":"refresh","token_type":"Bearer","expires_in":3599,"scope":"Files.Read offline_access"}"#, true, ) @@ -1224,6 +1303,7 @@ mod tests { let google = parse_token_document( CloudProvider::GoogleDrive, + GOOGLE_READ_SCOPE, r#"{"access_token":"access","token_type":"bearer","expires_in":3600,"scope":"https://www.googleapis.com/auth/drive.metadata.readonly"}"#, false, ) @@ -1236,7 +1316,7 @@ mod tests { r#"{"error":"invalid_grant"}"#, r#"{"access_token":"access","token_type":"Bearer","expires_in":0}"#, ] { - assert!(parse_token_document(CloudProvider::GoogleDrive, invalid, true).is_err()); + assert!(parse_token_document(CloudProvider::GoogleDrive, GOOGLE_READ_SCOPE, invalid, true).is_err()); } } } diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 8c80a4178..f6b89a453 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -68,6 +68,7 @@ let eviction: api.CloudSourceEvictionOutput | null = $state(null); let objectId = $state(""); let oauthClientId = $state(""); + let oauthWriteAccess = $state(true); let connecting = $state(false); let disconnecting = $state(false); let checkingCapacity = $state(false); @@ -173,6 +174,30 @@ && approvalPhrase !== null; } + function providerApiWriteConnected(): boolean { + const connection = connectionForSelectedRoot(); + if (!connection) return false; + return (connection.provider === "onedrive" && connection.scope === "Files.ReadWrite offline_access") + || (connection.provider === "google-drive" + && connection.scope === "https://www.googleapis.com/auth/drive"); + } + + function providerApiCopyEligible(candidate: api.CloudCandidate): boolean { + const decision = matchingReviewDecision(candidate); + const exactApproval = decision?.disposition === "approved"; + const embeddedHighConfidence = candidate.production_time_confidence === "high" + && candidate.production_time_source.startsWith("embedded:"); + const approvalPhrase = api.cloudCopyApprovalPhrase(candidate, "copy-only"); + return selectedRootDetails()?.provider !== "icloud" + && hasProviderAdmissionBlocker(report?.notices ?? []) + && providerApiWriteConnected() + && candidate.blocked_reason === null + && (!candidate.requires_review || exactApproval) + && (embeddedHighConfidence || exactApproval) + && api.cloudCapacityAllowsCopy(report?.capacity) + && approvalPhrase !== null; + } + function adoptEligible(candidate: api.CloudCandidate): boolean { const decision = matchingReviewDecision(candidate); const exactApproval = decision?.disposition === "approved"; @@ -272,6 +297,44 @@ Math.max(0, Math.floor(minAgeDays)), 200, ); + objectId = copied.provider_object_id ?? ""; + } catch (e) { + loadError = String(e); + } finally { + copyingFingerprint = ""; + } + } + + async function copyCandidateViaProviderApi(candidate: api.CloudCandidate) { + if (!scannedRoot || !selectedRoot || !providerApiCopyEligible(candidate)) return; + const exactConfirmationPhrase = + (copyConfirmations[candidate.metadata_fingerprint] ?? "").trim(); + const approvalRationale = + (copyRationales[candidate.metadata_fingerprint] ?? "").trim(); + const expectedApprovalPhrase = api.cloudCopyApprovalPhrase(candidate, "copy-only"); + if (!expectedApprovalPhrase + || exactConfirmationPhrase !== expectedApprovalPhrase + || !approvalRationale) return; + copyingFingerprint = candidate.metadata_fingerprint; + loadError = ""; + copied = null; + attestation = null; + eviction = null; + evictionConfirmation = ""; + evictionRationale = ""; + objectId = ""; + try { + copied = await api.copyCloudCandidateViaProviderApi( + scannedRoot, + selectedRoot, + candidate.metadata_fingerprint, + exactConfirmationPhrase, + approvalRationale, + Math.max(1, Math.floor(minSizeMib)), + Math.max(0, Math.floor(minAgeDays)), + 200, + ); + objectId = copied.provider_object_id ?? ""; } catch (e) { loadError = String(e); } finally { @@ -467,7 +530,11 @@ connecting = true; loadError = ""; try { - const connection = await api.connectCloudProvider(root.path, oauthClientId.trim()); + const connection = await api.connectCloudProvider( + root.path, + oauthClientId.trim(), + oauthWriteAccess, + ); connections = [ ...connections.filter((entry) => entry.connection_id !== connection.connection_id), connection, @@ -705,7 +772,7 @@ {:else if selectedRootDetails()}

{#if connectionForSelectedRoot()} - 읽기 전용 OAuth descriptor 발견 + {providerApiWriteConnected() ? "OAuth 업로드 연결" : "읽기 전용 OAuth descriptor 발견"} 범위: {connectionForSelectedRoot()?.scope}

Client ID는 비밀키가 아닙니다. PKCE와 임의 loopback 포트를 사용하고 refresh token만 OS 보안 저장소에 보관합니다. @@ -756,7 +827,7 @@

Microsoft Entra 앱은 Mobile/Desktop public client로 만들고 loopback redirect URI http://localhost를 등록해야 합니다. 실행 시 임의 포트를 붙이며 IPv4·IPv6 loopback만 수신합니다.

{/if} {#if selectedRootDetails()?.provider === "google-drive"} -

Google OAuth Client 유형은 Desktop app이어야 합니다. 기존 Drive 파일의 원격 메타데이터 확인에는 restricted scope인 drive.metadata.readonly가 필요하므로 OAuth 앱 검증 또는 테스트 사용자 등록이 필요할 수 있습니다.

+

Google OAuth Client 유형은 Desktop app이어야 합니다. 업로드 fallback을 선택하면 Drive 파일 쓰기 권한 동의가 필요합니다. 동의하지 않으면 읽기 전용 attestation만 사용합니다.

{/if} {/if}
@@ -1111,7 +1182,7 @@ >보류 {/if} - {#if copyEligible(candidate)} + {#if copyEligible(candidate) || providerApiCopyEligible(candidate)} {@const copyApprovalPhrase = api.cloudCopyApprovalPhrase(candidate, "copy-only")}
현재 메타데이터·출발지·목적지에 결부된 문구를 정확히 입력해야 합니다.
@@ -1144,18 +1215,35 @@ disabled={copyingFingerprint !== ""} /> - + {#if copyEligible(candidate)} + + {/if} + {#if providerApiCopyEligible(candidate)} +

File Provider 전역 동기화가 막혀 있어, 명시적 OAuth 쓰기 연결로 공급자 API에 직접 업로드합니다. 원본은 유지되고 이후 API attestation이 필요합니다.

+ + {/if}
{/if} {#if adoptEligible(candidate)} diff --git a/src/lib/api.test.ts b/src/lib/api.test.ts index d4e302ff1..73eb785d3 100644 --- a/src/lib/api.test.ts +++ b/src/lib/api.test.ts @@ -68,13 +68,14 @@ describe("api wrappers", () => { [() => api.inspectIcloudNewCopyAdmission(), "inspect_icloud_new_copy_admission"], [() => api.inspectCloudProviderGlobalSync("/cloud"), "inspect_cloud_provider_global_sync", { cloudRoot: "/cloud" }], [() => api.listCloudReviewDecisions(), "list_cloud_review_decisions"], - [() => api.connectCloudProvider("/cloud", "desktop-client-id"), "connect_cloud_provider", { cloudRoot: "/cloud", clientId: "desktop-client-id" }], + [() => api.connectCloudProvider("/cloud", "desktop-client-id"), "connect_cloud_provider", { cloudRoot: "/cloud", clientId: "desktop-client-id", writeAccess: false }], [() => api.disconnectCloudProvider("/cloud"), "disconnect_cloud_provider", { cloudRoot: "/cloud" }], [() => api.planCloudArchive("/scan", "/cloud"), "plan_cloud_archive", { root: "/scan", cloudRoot: "/cloud", minSizeMib: 256, minAgeDays: 90, limit: 200 }], [() => api.planCloudArchive("/scan", "/cloud", 10, 30, 5), "plan_cloud_archive", { root: "/scan", cloudRoot: "/cloud", minSizeMib: 10, minAgeDays: 30, limit: 5 }], [() => api.reviewCloudCandidate("/scan", "/cloud", "a".repeat(64), "b".repeat(64), "approved", "verified exact source"), "review_cloud_candidate", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "a".repeat(64), reviewFingerprint: "b".repeat(64), disposition: "approved", rationale: "verified exact source", minSizeMib: 256, minAgeDays: 90, limit: 200 }], [() => api.reviewCloudCandidate("/scan", "/cloud", "c".repeat(64), "d".repeat(64), "held", "needs another look", 10, 30, 5), "review_cloud_candidate", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "c".repeat(64), reviewFingerprint: "d".repeat(64), disposition: "held", rationale: "needs another look", minSizeMib: 10, minAgeDays: 30, limit: 5 }], [() => api.copyCloudCandidate("/scan", "/cloud", "a".repeat(64), "exact copy", "reviewed exact copy"), "copy_cloud_candidate", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "a".repeat(64), exactConfirmationPhrase: "exact copy", approvalRationale: "reviewed exact copy", minSizeMib: 256, minAgeDays: 90, limit: 200 }], + [() => api.copyCloudCandidateViaProviderApi("/scan", "/cloud", "a".repeat(64), "exact copy", "reviewed exact copy"), "copy_cloud_candidate_via_provider_api", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "a".repeat(64), exactConfirmationPhrase: "exact copy", approvalRationale: "reviewed exact copy", minSizeMib: 256, minAgeDays: 90, limit: 200 }], [() => api.copyCloudCandidate("/scan", "/cloud", "b".repeat(64), "exact copy", "reviewed exact copy", 10, 30, 5), "copy_cloud_candidate", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "b".repeat(64), exactConfirmationPhrase: "exact copy", approvalRationale: "reviewed exact copy", minSizeMib: 10, minAgeDays: 30, limit: 5 }], [() => api.adoptExistingCloudCandidate("/scan", "/cloud", "e".repeat(64), "exact adoption", "reviewed exact adoption"), "adopt_existing_cloud_candidate", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "e".repeat(64), exactConfirmationPhrase: "exact adoption", approvalRationale: "reviewed exact adoption", minSizeMib: 256, minAgeDays: 90, limit: 200 }], [() => api.adoptExistingCloudCandidate("/scan", "/cloud", "f".repeat(64), "exact adoption", "reviewed exact adoption", 10, 30, 5), "adopt_existing_cloud_candidate", { root: "/scan", cloudRoot: "/cloud", metadataFingerprint: "f".repeat(64), exactConfirmationPhrase: "exact adoption", approvalRationale: "reviewed exact adoption", minSizeMib: 10, minAgeDays: 30, limit: 5 }], diff --git a/src/lib/api.ts b/src/lib/api.ts index d90c74712..58c74e1ca 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -771,6 +771,7 @@ export interface CloudCopyOutput { adr_path: string | null; goal_path: string | null; projection_warnings: string[]; + provider_object_id: string | null; } export type SyncEvidenceKind = "provider-api" | "provider-native-status"; @@ -981,8 +982,8 @@ export const inspectCloudProviderGlobalSync = (cloudRoot: string) => invoke("inspect_cloud_provider_global_sync", { cloudRoot }); export const listCloudReviewDecisions = () => invoke("list_cloud_review_decisions"); -export const connectCloudProvider = (cloudRoot: string, clientId: string) => - invoke("connect_cloud_provider", { cloudRoot, clientId }); +export const connectCloudProvider = (cloudRoot: string, clientId: string, writeAccess = false) => + invoke("connect_cloud_provider", { cloudRoot, clientId, writeAccess }); export const disconnectCloudProvider = (cloudRoot: string) => invoke("disconnect_cloud_provider", { cloudRoot }); export const planCloudArchive = ( @@ -1038,6 +1039,25 @@ export const copyCloudCandidate = ( minAgeDays, limit, }); +export const copyCloudCandidateViaProviderApi = ( + root: string, + cloudRoot: string, + metadataFingerprint: string, + exactConfirmationPhrase: string, + approvalRationale: string, + minSizeMib = 256, + minAgeDays = 90, + limit = 200, +) => invoke("copy_cloud_candidate_via_provider_api", { + root, + cloudRoot, + metadataFingerprint, + exactConfirmationPhrase, + approvalRationale, + minSizeMib, + minAgeDays, + limit, +}); export const adoptExistingCloudCandidate = ( root: string, cloudRoot: string, From 01639563efb567721af959bdaeae89287708ff2b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 17:38:19 +0900 Subject: [PATCH 078/691] fix: gate iCloud copy on current admission --- src/lib/CloudArchive.svelte | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index f6b89a453..5cbc8b2e2 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -166,11 +166,14 @@ const providerAdmissionBlocked = report ? hasProviderAdmissionBlocker(report.notices) : true; + const icloudAdmissionBlocked = selectedRootDetails()?.provider === "icloud" + && icloudHealth?.new_copy_admission_state !== "clear"; return candidate.blocked_reason === null && (!candidate.requires_review || exactApproval) && (embeddedHighConfidence || exactApproval) && capacityEvidenceAvailable && !providerAdmissionBlocked + && !icloudAdmissionBlocked && approvalPhrase !== null; } From 5759404286bd3224feffa118a746f54bcced385b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 17:49:46 +0900 Subject: [PATCH 079/691] fix: serialize dynamic projection pairs --- src-tauri/src/cloud_adr.rs | 91 +++++++++++++++++++++++++++++++++++--- 1 file changed, 86 insertions(+), 5 deletions(-) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 38a26cdf8..08abd8109 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -240,6 +240,10 @@ fn goal_state_rank(state: CloudOffloadGoalState) -> u8 { } } +fn valid_receipt_id(receipt_id: &str) -> bool { + receipt_id.len() == 64 && receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) +} + fn projection_state(encoded: &[u8], kind: &str) -> Result<(CloudOffloadGoalState, u64), String> { match kind { "adr" => serde_json::from_slice::(encoded) @@ -269,9 +273,9 @@ impl Drop for InterprocessProjectionLock { fn acquire_interprocess_projection_lock( directory: &Path, - receipt_id: &str, + lock_stem: &str, ) -> Result { - let lock_path = directory.join(format!(".{receipt_id}.lock")); + let lock_path = directory.join(format!(".{lock_stem}.lock")); if let Ok(metadata) = std::fs::symlink_metadata(&lock_path) { if metadata.file_type().is_symlink() || !metadata.is_file() { return Err("cloud-projection-lock-unsafe".into()); @@ -324,6 +328,14 @@ fn acquire_interprocess_projection_lock( } } +fn acquire_projection_pair_lock( + adr_dir: &Path, + receipt_id: &str, +) -> Result { + secure_directory(adr_dir)?; + acquire_interprocess_projection_lock(adr_dir, &format!("{receipt_id}.pair")) +} + fn write_latest_json( directory: &Path, receipt_id: &str, @@ -331,7 +343,7 @@ fn write_latest_json( encoded: &[u8], kind: &str, ) -> Result { - if receipt_id.len() != 64 || !receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) { + if !valid_receipt_id(receipt_id) { return Err("cloud-snapshot-receipt-id-invalid".into()); } secure_directory(directory)?; @@ -421,6 +433,30 @@ pub fn write_projection_pair( adr: &CloudOffloadAdrSnapshot, goal_dir: &Path, goal: &CloudOffloadGoalSnapshot, +) -> (Option, Option, Vec) { + if adr.receipt_id == goal.receipt_id && valid_receipt_id(&adr.receipt_id) { + let pair_lock = match acquire_projection_pair_lock(adr_dir, &adr.receipt_id) { + Ok(lock) => lock, + Err(error) => { + return ( + None, + None, + vec![format!("projection-pair-lock-failed:{error}")], + ) + } + }; + let result = write_projection_pair_unlocked(adr_dir, adr, goal_dir, goal); + drop(pair_lock); + return result; + } + write_projection_pair_unlocked(adr_dir, adr, goal_dir, goal) +} + +fn write_projection_pair_unlocked( + adr_dir: &Path, + adr: &CloudOffloadAdrSnapshot, + goal_dir: &Path, + goal: &CloudOffloadGoalSnapshot, ) -> (Option, Option, Vec) { let mut warnings = Vec::new(); let adr_path = match write_latest_snapshot(adr_dir, adr) { @@ -486,6 +522,27 @@ pub fn write_projection_pair_with_source_blocker_outcome( }; }; + if adr.receipt_id != goal.receipt_id || !valid_receipt_id(&goal.receipt_id) { + let (adr_path, goal_path, warnings) = write_projection_pair(adr_dir, adr, goal_dir, goal); + return ProjectionWriteOutcome { + wrote: adr_path.is_some() || goal_path.is_some(), + adr_path, + goal_path, + warnings, + }; + } + let pair_lock = match acquire_projection_pair_lock(adr_dir, &goal.receipt_id) { + Ok(lock) => lock, + Err(error) => { + return ProjectionWriteOutcome { + adr_path: None, + goal_path: None, + warnings: vec![format!("projection-pair-lock-failed:{error}")], + wrote: false, + } + } + }; + let mut adr = adr.clone(); let mut goal = goal.clone(); if let (Ok(Some(_previous_adr)), Ok(Some(previous_goal))) = ( @@ -542,7 +599,9 @@ pub fn write_projection_pair_with_source_blocker_outcome( adr.consequences .push("eviction-blocked-until-source-state".into()); } - let (adr_path, goal_path, warnings) = write_projection_pair(adr_dir, &adr, goal_dir, &goal); + let (adr_path, goal_path, warnings) = + write_projection_pair_unlocked(adr_dir, &adr, goal_dir, &goal); + drop(pair_lock); ProjectionWriteOutcome { wrote: adr_path.is_some() || goal_path.is_some(), adr_path, @@ -625,6 +684,9 @@ fn read_latest_projection( receipt_id: &str, kind: &str, ) -> Result, String> { + if !valid_receipt_id(receipt_id) { + return Err("cloud-snapshot-receipt-id-invalid".into()); + } let metadata = match std::fs::symlink_metadata(directory) { Ok(metadata) => metadata, Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(None), @@ -669,7 +731,7 @@ pub fn read_projection_state( adr_dir: &Path, goal_dir: &Path, ) -> Result, String> { - if receipt_id.len() != 64 || !receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) { + if !valid_receipt_id(receipt_id) { return Err("cloud-snapshot-receipt-id-invalid".into()); } let adr = read_latest_projection::(adr_dir, receipt_id, "adr")?; @@ -819,6 +881,25 @@ mod tests { assert!(metadata.is_file()); } + #[test] + fn projection_pair_writer_creates_receipt_scoped_pair_lock() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + write_projection_pair( + &adr_dir, + &initial_adr_snapshot(&receipt, 5), + &goal_dir, + &initial_goal_snapshot(&receipt, 5), + ); + let metadata = std::fs::symlink_metadata( + adr_dir.join(format!(".{}.pair.lock", receipt.receipt_id)), + ) + .unwrap(); + assert!(metadata.is_file()); + } + #[test] fn snapshot_writer_rejects_path_like_receipt_ids() { let directory = tempfile::tempdir().unwrap(); From 0459d46a02b12404f83af9c9f5693b800fbc5ca1 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 18:22:34 +0900 Subject: [PATCH 080/691] feat: add headless provider API cloud copy --- .../cloud-offload-operator-runbook.md | 6 + ...-07-16-cloud-provider-oauth-pkce-design.md | 34 +- src-tauri/src/bin/disksage-cloud-plan.rs | 407 ++++++++++++++++-- src-tauri/src/cloud_transfer.rs | 6 +- 4 files changed, 401 insertions(+), 52 deletions(-) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 4645aedf8..bde12e1e9 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -20,6 +20,12 @@ The runtime sequence is: (add the existing OAuth connection flags only when a provider API fallback is required). This command performs local evidence/projection writes only; `--audit-receipts` remains a strictly read-only integrity report. + When the local File Provider cannot admit a new OneDrive or Google Drive item, an explicitly + approved headless upload can use `--provider-api-copy-fingerprint HEX64` together with + `--oauth-connections ABSOLUTE_PATH`. This path requires the write OAuth scope, fresh capacity, + the same human-attributed copy phrase and review gates, re-hashes the source after upload, and + immediately attempts provider-API attestation. It never supports iCloud or local eviction in + the same action; the returned receipt/object ID is the hand-off for a later attestation. 4. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and no eviction permit is issued. Third-party File Provider dumps also block new copies while upload/download progress, diff --git a/docs/superpowers/specs/2026-07-16-cloud-provider-oauth-pkce-design.md b/docs/superpowers/specs/2026-07-16-cloud-provider-oauth-pkce-design.md index 554e153f5..f7a8959ff 100644 --- a/docs/superpowers/specs/2026-07-16-cloud-provider-oauth-pkce-design.md +++ b/docs/superpowers/specs/2026-07-16-cloud-provider-oauth-pkce-design.md @@ -3,9 +3,10 @@ ## Scope This slice replaces manually pasted OneDrive and Google Drive access tokens with native desktop -OAuth. It exists only to authorize the read-only provider metadata requests that bind an immutable -copy receipt to a provider-native object ID, size, revision, and checksum. It does not upload, -move, evict, trash, or delete a file. +OAuth. Read-only connections authorize provider metadata requests that bind an immutable copy +receipt to a provider-native object ID, size, revision, and checksum. An explicitly separate +write-scope connection can also authorize the headless provider-API copy fallback; it never +authorizes source eviction or cloud deletion. The flow is deterministic Rust code. It does not need an AI agent, an external LLM, or an LLM-as-a-Judge, so `noema`, `contextual-orchestrator`, and `fast-mlsirm` are deliberately outside @@ -37,6 +38,14 @@ this security boundary. | OneDrive | `Files.Read offline_access` | Read the signed-in user's existing drive item metadata and refresh access without write permission. | | Google Drive | `https://www.googleapis.com/auth/drive.metadata.readonly` | Read metadata for an existing locally synced Drive file. `drive.file` cannot generally see pre-existing files unless the user selected/shared/created them through the app. | +The explicit provider-API copy fallback requests a separate write connection only when the +operator chooses `--provider-api-copy-fingerprint`: + +| Provider | Write scope | Boundary | +| --- | --- | --- | +| OneDrive | `Files.ReadWrite offline_access` | Upload the exact reviewed candidate to the exact destination; no source eviction. | +| Google Drive | `https://www.googleapis.com/auth/drive` | Create destination folders/file and upload the exact reviewed candidate; no source eviction. | + Google classifies `drive.metadata.readonly` as a restricted scope. A Google OAuth consent-screen configuration, test-user registration, and possibly app verification are therefore prerequisites. DiskSage displays this before consent. It does not silently fall back to a broader read/write scope. @@ -99,12 +108,23 @@ where automatic browser launch is unavailable. - Create an OAuth Client ID of type **Desktop app**. Desktop loopback clients use the runtime `http://127.0.0.1:` redirect and do not embed a client secret. +## Provider API copy fallback + +The headless planner keeps the normal File Provider copy as the default. If that local admission +gate is unavailable, `--provider-api-copy-fingerprint` requires a write-scope connection, fresh +capacity, a fresh human-attributed copy approval, and a source pre-hash/re-hash pair. The upload +is performed by the Rust provider API transport, the immutable receipt records +`CopiedByProviderApi`, and DiskSage immediately attempts API attestation. A failed attestation +leaves the source retained and the dynamic ADR/Goal in `copy-verified` or `pending-provider-sync`; +it never upgrades the state from a missing proof. + ## Remaining boundary -The provider-native object ID is still entered explicitly. Automating object-ID discovery from a -local sync root is a separate provider-mapping slice and must prove that the discovered object maps -to the exact receipt destination before it can remove this input. No source-removal command is -introduced by this design. +Standalone attestation still requires the provider-native object ID explicitly (Google Drive). The +provider-API copy fallback obtains that ID from its upload response and returns it for a later +attestation hand-off; object discovery from a local sync root remains a separate provider-mapping +slice that must prove the exact receipt destination. No source-removal command is introduced by +this design. ## Primary references diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index ad6b0ea56..de7607403 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -38,6 +38,8 @@ use disksage_lib::naruon_lineage; #[cfg(not(coverage))] use disksage_lib::provider_api_client::{self, FixedHostProviderMetadataClient}; #[cfg(not(coverage))] +use disksage_lib::provider_api_write; +#[cfg(not(coverage))] use disksage_lib::provider_capacity::{self, FixedHostProviderCapacityClient}; #[cfg(not(coverage))] use disksage_lib::provider_client_runtime; @@ -75,6 +77,7 @@ struct Args { exact_duplicate_kind: Option, capacity_reserve_mib: u64, copy_fingerprint: Option, + provider_api_copy_fingerprint: Option, adopt_existing_fingerprint: Option, receipt_dir: Option, audit_receipts: bool, @@ -200,6 +203,7 @@ fn parse_args(args: &[String], home: &Path) -> Result { exact_duplicate_kind: None, capacity_reserve_mib: 1024, copy_fingerprint: None, + provider_api_copy_fingerprint: None, adopt_existing_fingerprint: None, receipt_dir: None, audit_receipts: false, @@ -322,6 +326,13 @@ fn parse_args(args: &[String], home: &Path) -> Result { "--copy-fingerprint" => { parsed.copy_fingerprint = Some(value(args, &mut index, "--copy-fingerprint")?) } + "--provider-api-copy-fingerprint" => { + parsed.provider_api_copy_fingerprint = Some(value( + args, + &mut index, + "--provider-api-copy-fingerprint", + )?) + } "--adopt-existing-fingerprint" => { parsed.adopt_existing_fingerprint = Some(value( args, @@ -457,7 +468,7 @@ fn parse_args(args: &[String], home: &Path) -> Result { "--export-semantic-catalog" => parsed.export_semantic_catalog = true, "--help" | "-h" => { return Err( - "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH] [--reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]".into(), + "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH] [--reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --provider-api-copy-fingerprint HEX64 --receipt-dir PATH --oauth-connections ABSOLUTE_PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]".into(), ) } flag => return Err(format!("알 수 없는 인자: {flag}")), @@ -479,6 +490,22 @@ struct CopyOutput { projection_warnings: Vec, } +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct ProviderApiCopyOutput { + action: &'static str, + goal_state: cloud_transfer::CloudOffloadGoalState, + receipt: CloudCopyReceipt, + receipt_path: String, + provider_object_id: String, + evidence_path: Option, + adr_path: Option, + goal_path: Option, + projection_warnings: Vec, + permit: Option, + blockers: Vec, +} + #[cfg(not(coverage))] #[derive(Debug, serde::Serialize)] struct AttestationOutput { @@ -839,7 +866,8 @@ fn audit_receipts( #[cfg(not(coverage))] fn validate_action_args(args: &Args) -> Result<(), String> { - let copy_action = args.copy_fingerprint.is_some(); + let provider_api_copy_action = args.provider_api_copy_fingerprint.is_some(); + let copy_action = args.copy_fingerprint.is_some() || provider_api_copy_action; let adoption_action = args.adopt_existing_fingerprint.is_some(); let exact_duplicate_review = args.exact_duplicate_review_prefix.is_some() || args.exact_duplicate_kind.is_some(); @@ -856,6 +884,9 @@ fn validate_action_args(args: &Args) -> Result<(), String> { "--all-readable-roots는 --cloud-root 또는 --provider와 함께 사용할 수 없음".into(), ); } + if args.copy_fingerprint.is_some() && provider_api_copy_action { + return Err("native copy와 provider API copy는 동시에 사용할 수 없음".into()); + } if copy_action && adoption_action { return Err("copy action과 existing-copy adoption action은 동시에 사용할 수 없음".into()); } @@ -882,6 +913,12 @@ fn validate_action_args(args: &Args) -> Result<(), String> { if (copy_action || adoption_action) != args.confirm_copy_phrase.is_some() { return Err("copy/adoption action에는 --confirm-copy-phrase가 반드시 필요함".into()); } + if provider_api_copy_action && args.oauth_connections.is_none() { + return Err("--provider-api-copy-fingerprint에는 --oauth-connections가 필요함".into()); + } + if provider_api_copy_action && args.provider_object_id.is_some() { + return Err("provider API copy는 --provider-object-id를 직접 받을 수 없음".into()); + } let review_evidence_fields = [ args.review_candidate_fingerprint.is_some(), args.review_fingerprint.is_some(), @@ -1079,6 +1116,10 @@ fn validate_action_args(args: &Args) -> Result<(), String> { } for (flag, fingerprint) in [ ("--copy-fingerprint", args.copy_fingerprint.as_ref()), + ( + "--provider-api-copy-fingerprint", + args.provider_api_copy_fingerprint.as_ref(), + ), ( "--adopt-existing-fingerprint", args.adopt_existing_fingerprint.as_ref(), @@ -2410,6 +2451,7 @@ fn collect_receipt_sync_evidence( oauth_connections: Option<&Path>, home: &Path, confirmed_at_ms: u64, + force_provider_api: bool, ) -> Result { let provider_object_id = provider_object_id .map(str::trim) @@ -2423,49 +2465,54 @@ fn collect_receipt_sync_evidence( } CloudProvider::Onedrive | CloudProvider::GoogleDrive => { let fallback_requested = oauth_connections.is_some(); - match provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) { - Ok(evidence) if evidence.sync_complete || !fallback_requested => Ok(evidence), - Err(error) if !fallback_requested => Err(error), - Ok(_) | Err(_) => { - let connection_path = oauth_connections - .ok_or_else(|| "oauth-connections-path-missing".to_string())?; - let selected_root = receipt_cloud_root(receipt, home)?; - let access_token = - provider_oauth::refreshed_access_token(connection_path, &selected_root)?; - match receipt.provider { - CloudProvider::Onedrive => { - if provider_object_id.is_some() { - return Err("onedrive-provider-object-id-not-accepted".into()); - } - let locator = provider_api_client::onedrive_path_locator( - Path::new(&selected_root.path), - Path::new(&receipt.destination), - )?; - provider_api_client::collect_authenticated_provider_api_evidence_from_source( - receipt, - &locator, - access_token.as_str(), - &FixedHostProviderMetadataClient::default(), - confirmed_at_ms, - ) + if !force_provider_api { + match provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) { + Ok(evidence) if evidence.sync_complete || !fallback_requested => { + return Ok(evidence); + } + Err(error) if !fallback_requested => return Err(error), + Ok(_) | Err(_) => {} + } + } + { + let connection_path = oauth_connections + .ok_or_else(|| "oauth-connections-path-missing".to_string())?; + let selected_root = receipt_cloud_root(receipt, home)?; + let access_token = + provider_oauth::refreshed_access_token(connection_path, &selected_root)?; + match receipt.provider { + CloudProvider::Onedrive => { + if provider_object_id.is_some() { + return Err("onedrive-provider-object-id-not-accepted".into()); } - CloudProvider::GoogleDrive => { - let locator = provider_api_client::google_drive_path_locator( - Path::new(&selected_root.path), - Path::new(&receipt.destination), - provider_object_id - .ok_or_else(|| "provider-object-id-missing".to_string())?, - )?; - provider_api_client::collect_authenticated_google_drive_path_evidence_from_source( + let locator = provider_api_client::onedrive_path_locator( + Path::new(&selected_root.path), + Path::new(&receipt.destination), + )?; + provider_api_client::collect_authenticated_provider_api_evidence_from_source( + receipt, + &locator, + access_token.as_str(), + &FixedHostProviderMetadataClient::default(), + confirmed_at_ms, + ) + } + CloudProvider::GoogleDrive => { + let locator = provider_api_client::google_drive_path_locator( + Path::new(&selected_root.path), + Path::new(&receipt.destination), + provider_object_id + .ok_or_else(|| "provider-object-id-missing".to_string())?, + )?; + provider_api_client::collect_authenticated_google_drive_path_evidence_from_source( receipt, &locator, access_token.as_str(), &FixedHostProviderMetadataClient::default(), confirmed_at_ms, ) - } - CloudProvider::Icloud => unreachable!(), } + CloudProvider::Icloud => unreachable!(), } } } @@ -2479,6 +2526,25 @@ fn attest_receipt( provider_object_id: Option<&str>, oauth_connections: Option<&Path>, home: &Path, +) -> Result { + attest_receipt_with_mode( + path, + evidence_dir, + provider_object_id, + oauth_connections, + home, + false, + ) +} + +#[cfg(not(coverage))] +fn attest_receipt_with_mode( + path: &Path, + evidence_dir: &Path, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, + force_provider_api: bool, ) -> Result { let receipt = cloud_transfer::read_immutable_receipt(path)?; let confirmed_at_ms = cloud::system_now_ms(); @@ -2488,6 +2554,7 @@ fn attest_receipt( oauth_connections, home, confirmed_at_ms, + force_provider_api, )?; let assessment = provider_sync::assess_provider_sync_timeliness(&receipt, &evidence)?; let (evidence_record, evidence_path) = @@ -2530,7 +2597,11 @@ fn attest_receipt( source_blocker, ); Ok(AttestationOutput { - action: "attest-provider-native", + action: if force_provider_api { + "attest-provider-api" + } else { + "attest-provider-native" + }, goal_state, receipt_id: receipt.receipt_id, evidence, @@ -2560,6 +2631,180 @@ fn stable_reconciliation_error(error: &str) -> String { } } +#[cfg(not(coverage))] +fn copy_candidate_via_provider_api( + candidate: &cloud::CloudCandidate, + selected: &CloudRoot, + report: &cloud::CloudPlanReport, + receipt_dir: &Path, + review_decision: Option<&CloudReviewDecision>, + exact_confirmation_phrase: &str, + approved_by: &str, + rationale: &str, + oauth_connections: &Path, + capacity_reserve_mib: u64, + home: &Path, +) -> Result { + if selected.provider == CloudProvider::Icloud { + return Err("provider-api-icloud-unsupported".into()); + } + let connection = provider_oauth::connection_for_root( + &provider_oauth::load_connections(oauth_connections)?, + selected, + )?; + if !provider_oauth::scope_allows_write(&connection) { + return Err("provider-oauth-write-scope-required".into()); + } + let capacity_snapshot = report + .capacity + .as_ref() + .map(|assessment| assessment.snapshot.clone()) + .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; + let capacity = provider_capacity::assess_capacity( + capacity_snapshot, + candidate.bytes, + candidate.bytes, + capacity_reserve_mib.saturating_mul(1024 * 1024), + ); + if capacity.can_fit != Some(true) { + return Err(if capacity.blockers.is_empty() { + "cloud-capacity-verification-required".into() + } else { + capacity.blockers.join(",") + }); + } + + let copy_approval = cloud_transfer::create_cloud_copy_approval( + candidate, + selected, + cloud_transfer::CloudCopyApprovalAction::CopyOnly, + cloud::system_now_ms(), + approved_by, + rationale, + exact_confirmation_phrase, + )?; + let copied_at_ms = cloud::system_now_ms(); + let (receipt, source_hashes) = cloud_transfer::prepare_provider_api_source_receipt( + candidate, + selected, + review_decision, + ©_approval, + copied_at_ms, + )?; + let access_token = provider_oauth::refreshed_access_token(oauth_connections, selected)?; + let upload = provider_api_write::upload_file( + selected.provider, + Path::new(&selected.path), + Path::new(&candidate.dst), + Path::new(&candidate.src), + candidate.bytes, + access_token.as_str(), + )?; + if let Err(error) = + cloud_transfer::verify_provider_api_source_unchanged(candidate, &source_hashes) + { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => { + format!("{error},provider-api-upload-cleanup-failed:{cleanup_error}") + } + }); + } + + let receipt_path = match cloud_transfer::write_provider_api_receipt(&receipt, receipt_dir) { + Ok(path) => path, + Err(error) => { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => { + format!("{error},provider-api-upload-cleanup-failed:{cleanup_error}") + } + }); + } + }; + + let evidence_dir = receipt_dir + .parent() + .unwrap_or(receipt_dir) + .join("cloud-provider-evidence"); + let (adr_dir, goal_dir) = cloud_projection_dirs(receipt_dir); + let updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, updated_at_ms); + let (initial_adr_path, initial_goal_path, mut projection_warnings) = + cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); + let mut adr_path = initial_adr_path.map(|path| path.to_string_lossy().into_owned()); + let mut goal_path = initial_goal_path.map(|path| path.to_string_lossy().into_owned()); + let receipt_id = receipt.receipt_id.clone(); + let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; + let mut evidence_path = None; + let mut permit = None; + let mut blockers = Vec::new(); + let provider_object_id = upload.object_id; + let attest_object_id = + (selected.provider == CloudProvider::GoogleDrive).then(|| provider_object_id.clone()); + match attest_receipt_with_mode( + &receipt_path, + &evidence_dir, + attest_object_id.as_deref(), + Some(oauth_connections), + home, + true, + ) { + Ok(attestation) => { + goal_state = attestation.goal_state; + evidence_path = Some(attestation.evidence_path); + permit = attestation.permit; + blockers = attestation.blockers; + adr_path = attestation.adr_path; + goal_path = attestation.goal_path; + projection_warnings.extend(attestation.projection_warnings); + } + Err(error) => projection_warnings.push(format!( + "provider-attestation-incomplete:{}", + stable_reconciliation_error(&error) + )), + } + + Ok(ProviderApiCopyOutput { + action: "copy-via-provider-api", + goal_state, + receipt, + receipt_path: receipt_path.to_string_lossy().into_owned(), + provider_object_id, + evidence_path, + adr_path: adr_path.or_else(|| { + Some( + adr_dir + .join(format!("{}-latest.json", receipt_id)) + .to_string_lossy() + .into_owned(), + ) + }), + goal_path: goal_path.or_else(|| { + Some( + goal_dir + .join(format!("{}-latest.json", receipt_id)) + .to_string_lossy() + .into_owned(), + ) + }), + projection_warnings, + permit, + blockers, + }) +} + /// Re-attest every persisted receipt and refresh only local provider evidence and ADR/Goal /// projections. This is the headless equivalent of the GUI reconciliation loop; it never writes /// to a cloud provider and never evicts a source file. @@ -2793,6 +3038,7 @@ fn evict_native_receipt( oauth_connections, home, confirmed_at_ms, + false, )?; let (evidence_record, evidence_path) = provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; @@ -3090,7 +3336,9 @@ fn run() -> Result<(), String> { .into_iter() .next() .ok_or_else(|| "선택된 클라우드 루트가 없음".to_string())?; - let capacity_required_for_plan = args.verify_capacity || args.copy_fingerprint.is_some(); + let capacity_required_for_plan = args.verify_capacity + || args.copy_fingerprint.is_some() + || args.provider_api_copy_fingerprint.is_some(); let (selected, report) = plan_with_optional_capacity( &snapshot, &selected, @@ -3209,6 +3457,59 @@ fn run() -> Result<(), String> { ); return Ok(()); } + if let Some(candidate_fingerprint) = &args.provider_api_copy_fingerprint { + let matches: Vec<_> = report + .candidates + .iter() + .filter(|candidate| candidate.metadata_fingerprint == *candidate_fingerprint) + .collect(); + let candidate = match matches.as_slice() { + [only] => *only, + [] => return Err("현재 fresh plan에 fingerprint가 일치하는 후보가 없음".into()), + _ => return Err("현재 fresh plan에서 fingerprint가 중복됨".into()), + }; + let receipt_dir = args + .receipt_dir + .as_deref() + .ok_or_else(|| "--receipt-dir이 필요함".to_string())?; + let review_decision = if candidate.requires_review { + args.review_dir + .as_deref() + .map(cloud_review::load_latest_decisions) + .transpose()? + .unwrap_or_default() + .into_iter() + .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) + } else { + None + }; + let output = copy_candidate_via_provider_api( + candidate, + &selected, + &report, + receipt_dir, + review_decision.as_ref(), + args.confirm_copy_phrase + .as_deref() + .ok_or_else(|| "--confirm-copy-phrase가 필요함".to_string())?, + args.reviewed_by + .as_deref() + .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, + args.review_rationale + .as_deref() + .ok_or_else(|| "--review-rationale가 필요함".to_string())?, + args.oauth_connections + .as_deref() + .ok_or_else(|| "--oauth-connections가 필요함".to_string())?, + args.capacity_reserve_mib, + &home, + )?; + println!( + "{}", + serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? + ); + return Ok(()); + } let receipt_action = args .copy_fingerprint .as_ref() @@ -3434,6 +3735,7 @@ mod tests { assert_eq!(defaults.root, PathBuf::from("/home/test")); assert_eq!(defaults.min_size_mib, 256); assert!(defaults.copy_fingerprint.is_none()); + assert!(defaults.provider_api_copy_fingerprint.is_none()); assert!(defaults.adopt_existing_fingerprint.is_none()); assert!(defaults.provider_object_id.is_none()); assert!(defaults.oauth_connections.is_none()); @@ -3630,9 +3932,7 @@ mod tests { (receipt_dir.read_dir().unwrap().count() - MAX_RECONCILIATION_ATTESTATIONS) as u64 ); assert!(report.incomplete_reconciliation); - assert!(report - .notices - .contains(&"reconciliation-entry-limit")); + assert!(report.notices.contains(&"reconciliation-entry-limit")); } #[test] @@ -4782,6 +5082,7 @@ mod tests { let help = parse_args(&["--help".into()], Path::new("/h")).unwrap_err(); assert!(help.contains("--reviewed-by human:ID")); assert!(help.contains("--confirm-copy-phrase EXACT")); + assert!(help.contains("--provider-api-copy-fingerprint HEX64")); assert!(help.contains("--export-naruon-copy-readiness --verify-capacity")); assert!(help.contains("--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json")); assert!(help.contains("--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json")); @@ -5202,6 +5503,28 @@ mod tests { .unwrap(); assert!(validate_action_args(&onedrive_path_fallback).is_ok()); + let mut provider_api_copy = parse_args( + &[ + "--provider-api-copy-fingerprint".into(), + "f".repeat(64), + "--receipt-dir".into(), + "/receipts".into(), + "--confirm-copy-phrase".into(), + "exact provider api copy phrase".into(), + "--reviewed-by".into(), + "human:local:test".into(), + "--review-rationale".into(), + "provider API path reviewed".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&provider_api_copy).is_err()); + provider_api_copy.oauth_connections = Some(PathBuf::from("/connections.json")); + assert!(validate_action_args(&provider_api_copy).is_ok()); + provider_api_copy.provider_object_id = Some("unexpected-id".into()); + assert!(validate_action_args(&provider_api_copy).is_err()); + let mut incomplete = parse_args( &[ "--attest-receipt".into(), diff --git a/src-tauri/src/cloud_transfer.rs b/src-tauri/src/cloud_transfer.rs index e3ae64a97..04e7c8e36 100644 --- a/src-tauri/src/cloud_transfer.rs +++ b/src-tauri/src/cloud_transfer.rs @@ -1306,7 +1306,7 @@ fn write_immutable_receipt( } #[cfg(not(coverage))] -pub(crate) fn write_provider_api_receipt( +pub fn write_provider_api_receipt( receipt: &CloudCopyReceipt, receipt_dir: &Path, ) -> Result { @@ -1369,7 +1369,7 @@ pub(crate) fn build_verified_receipt( /// Hash and bind a source before an authenticated provider upload. This deliberately does not /// touch the destination: a disconnected File Provider may not expose a usable local directory. #[cfg(not(coverage))] -pub(crate) fn prepare_provider_api_source_receipt( +pub fn prepare_provider_api_source_receipt( candidate: &CloudCandidate, cloud_root: &CloudRoot, review_decision: Option<&CloudReviewDecision>, @@ -1420,7 +1420,7 @@ pub(crate) fn prepare_provider_api_source_receipt( } #[cfg(not(coverage))] -pub(crate) fn verify_provider_api_source_unchanged( +pub fn verify_provider_api_source_unchanged( candidate: &CloudCandidate, hashes: &ContentDigests, ) -> Result<(), String> { From 2b375359ef43f7f8643dd4d3d89fa32a3b34e9d8 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 18:52:11 +0900 Subject: [PATCH 081/691] fix: block macOS File Provider private storage --- .../cloud-offload-operator-runbook.md | 3 ++ src-tauri/src/cloud.rs | 39 +++++++++++++++++++ 2 files changed, 42 insertions(+) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index bde12e1e9..7a74b9c14 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -38,6 +38,9 @@ The runtime sequence is: treats that as proof of a completed eviction. A previously advanced projection is not rewound; its Goal status becomes `blocked` and the explicit eviction gate is revoked. A terminal `source-evicted` projection remains completed because the original path is expected to be gone. + Files under macOS File Provider's private `File Provider Storage` tree (including + `DownloadStage`) are also non-overridable `system-managed-file-provider-storage` blockers; + DiskSage never treats provider staging bytes as user-owned cleanup candidates. 6. Files inside a `.photoslibrary`/`.photolibrary` bundle are non-overridable `system-managed-photos-library-data` blockers; individual SQLite members are never copied. 7. Only a fresh attestation plus the separate receipt-bound human approval may move the source to diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index ec325d0d2..0e525a74d 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -3743,6 +3743,9 @@ fn source_blocked_reason( kind: ArchiveKind, metadata: &ContentMetadata, ) -> Option { + if path_inside_managed_file_provider_storage(path) { + return Some("system-managed-file-provider-storage".into()); + } if path_inside_managed_photo_library(path) { return Some("system-managed-photos-library-data".into()); } @@ -3773,6 +3776,15 @@ fn source_blocked_reason( None } +/// File Provider's private storage and download staging trees are owned by macOS. Their files +/// are implementation state, not user payloads; only a provider-aware operation may reclaim them. +fn path_inside_managed_file_provider_storage(path: &Path) -> bool { + path.components().any(|component| { + let name = normalized_account_text(&component.as_os_str().to_string_lossy()); + name == "file provider storage" + }) +} + /// Photos databases are individually archive-shaped but are owned by the Photos package. /// Moving one member would corrupt the library; only a future package-aware operation may handle /// the bundle as a whole. @@ -5716,6 +5728,33 @@ mod tests { ); } + #[test] + fn file_provider_private_storage_is_non_overridable_planner_block() { + let destination = Path::new("/definitely/missing/disksage-destination"); + assert_eq!( + planner_blocked_reason( + &Path::new( + "/Users/test/Library/Group Containers/group.com.apple.iCloudDrive/" + ) + .join("File Provider Storage/DownloadStage/content.wav"), + ArchiveKind::Media, + &ContentMetadata::default(), + destination, + ) + .as_deref(), + Some("system-managed-file-provider-storage") + ); + assert_eq!( + planner_blocked_reason( + Path::new("/Users/test/iCloud Drive/DownloadStage/content.wav"), + ArchiveKind::Media, + &ContentMetadata::default(), + destination, + ), + None + ); + } + #[test] fn onedrive_destination_path_limits_fail_closed_without_affecting_other_providers() { let cloud_root = root(CloudProvider::Onedrive, Path::new("/cloud")); From df4da87cd299d104b57cdc52422ab343a6768926 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 19:28:55 +0900 Subject: [PATCH 082/691] fix: fail closed on stale iCloud health --- src/lib/CloudArchive.svelte | 1 + src/lib/cloudArchiveAdmissionContract.test.ts | 14 ++++++++++++++ 2 files changed, 15 insertions(+) create mode 100644 src/lib/cloudArchiveAdmissionContract.test.ts diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 5cbc8b2e2..36082bdf6 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -419,6 +419,7 @@ try { icloudHealth = await api.inspectIcloudNewCopyAdmission(); } catch (e) { + icloudHealth = null; icloudHealthError = String(e); } finally { checkingIcloudHealth = false; diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts new file mode 100644 index 000000000..b831771f9 --- /dev/null +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -0,0 +1,14 @@ +import { readFileSync } from "node:fs"; +import { dirname, resolve } from "node:path"; +import { fileURLToPath } from "node:url"; +import { describe, expect, it } from "vitest"; + +const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../.."); + +describe("CloudArchive iCloud admission contract", () => { + it("clears stale health evidence when refresh fails", () => { + const source = readFileSync(resolve(repositoryRoot, "src/lib/CloudArchive.svelte"), "utf8"); + expect(source).toContain("icloudHealth = null;"); + expect(source).toContain("icloudHealth?.new_copy_admission_state !== \"clear\""); + }); +}); From ad6a9843d0fa1d0dcdb760d19384004c20ab79cf Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 19:31:20 +0900 Subject: [PATCH 083/691] feat: expose managed iCloud sync storage --- src/lib/CloudArchive.svelte | 6 ++++++ src/lib/api.ts | 1 + src/lib/cloudArchiveAdmissionContract.test.ts | 2 ++ 3 files changed, 9 insertions(+) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 36082bdf6..ed083ac54 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -715,6 +715,12 @@ {:else}

iCloud 전역 업로드 대기열이 비어 있습니다. 개별 파일은 별도 provider 증거가 필요합니다.

{/if} + {#if typeof icloudHealth.managed_database_allocated_bytes === "number"} +

+ macOS 관리 iCloud 동기화 DB가 {fmtBytes(icloudHealth.managed_database_allocated_bytes)}를 사용 중입니다. + DiskSage는 이 시스템 관리 데이터를 삭제하지 않습니다. +

+ {/if}

읽기 전용 로컬 증거이며, 원격 용량·개별 파일 업로드 완료·원본 삭제 권한을 대신 증명하지 않습니다.

{/if} diff --git a/src/lib/api.ts b/src/lib/api.ts index 58c74e1ca..87958cdaa 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -601,6 +601,7 @@ export interface CloudPlanReport { export interface IcloudSyncHealthReport { observed_at_ms: number; evidence_complete: boolean; + managed_database_allocated_bytes?: number; upload_queue: { scheduled_waiting_count: number; scheduled_active_count: number; diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index b831771f9..e4f9e4b6c 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -10,5 +10,7 @@ describe("CloudArchive iCloud admission contract", () => { const source = readFileSync(resolve(repositoryRoot, "src/lib/CloudArchive.svelte"), "utf8"); expect(source).toContain("icloudHealth = null;"); expect(source).toContain("icloudHealth?.new_copy_admission_state !== \"clear\""); + expect(source).toContain("managed_database_allocated_bytes"); + expect(source).toContain("시스템 관리 데이터를 삭제하지 않습니다"); }); }); From 734f283139e20add116c1e730e9e23d3eab74b55 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 19:37:17 +0900 Subject: [PATCH 084/691] feat: surface iCloud account sync diagnostics --- src/lib/CloudArchive.svelte | 11 +++++++++++ src/lib/cloudArchiveAdmissionContract.test.ts | 2 ++ 2 files changed, 13 insertions(+) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index ed083ac54..d5ebe7af2 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -602,6 +602,8 @@ "icloud-local-sync-item-error-present": "iCloud 로컬 동기화 오류가 있음", "icloud-native-sync-up-pending": "macOS iCloud sync-up이 아직 끝나지 않음", "icloud-native-status-evidence-incomplete": "macOS iCloud 상태 증거가 불완전함", + "icloud-item-error-octagon-not-signed-in": "iCloud 계정 인증이 필요함", + "icloud-item-error-older-than-24h": "iCloud 동기화 오류가 24시간 이상 지속됨", }; return labels[blocker] ?? blocker; } @@ -721,6 +723,15 @@ DiskSage는 이 시스템 관리 데이터를 삭제하지 않습니다.

{/if} + {#if icloudHealth.notices.some((notice) => notice.startsWith("icloud-item-error-"))} +

+ 동기화 진단: + {icloudHealth.notices + .filter((notice) => notice.startsWith("icloud-item-error-")) + .map(icloudBlockerLabel) + .join(", ")} +

+ {/if}

읽기 전용 로컬 증거이며, 원격 용량·개별 파일 업로드 완료·원본 삭제 권한을 대신 증명하지 않습니다.

{/if} diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index e4f9e4b6c..2977a4c47 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -12,5 +12,7 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloudHealth?.new_copy_admission_state !== \"clear\""); expect(source).toContain("managed_database_allocated_bytes"); expect(source).toContain("시스템 관리 데이터를 삭제하지 않습니다"); + expect(source).toContain("icloud-item-error-octagon-not-signed-in"); + expect(source).toContain("동기화 진단:"); }); }); From 45245e1390cd5e0c28318e11180f7292428e39e8 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 19:54:57 +0900 Subject: [PATCH 085/691] fix: allow iCloud native reconciliation with shared oauth path --- src-tauri/src/bin/disksage-cloud-plan.rs | 35 +++++++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index de7607403..5999c0629 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2458,7 +2458,7 @@ fn collect_receipt_sync_evidence( .filter(|value| !value.is_empty()); match receipt.provider { CloudProvider::Icloud => { - if provider_object_id.is_some() || oauth_connections.is_some() { + if provider_object_id.is_some() { return Err("icloud-provider-api-fallback-not-supported".into()); } provider_sync::collect_icloud_sync_evidence(receipt, confirmed_at_ms) @@ -5547,6 +5547,39 @@ mod tests { assert!(validate_action_args(&unscoped).is_err()); } + #[cfg(not(coverage))] + #[test] + fn icloud_reconciliation_uses_native_probe_with_shared_oauth_descriptor() { + let receipt = CloudCopyReceipt { + version: cloud_transfer::RECEIPT_VERSION, + receipt_id: "0".repeat(64), + candidate_fingerprint: "1".repeat(64), + provider: CloudProvider::Icloud, + source: "/source/file.bin".into(), + destination: "/missing/icloud/file.bin".into(), + bytes: 1, + blake3: "2".repeat(64), + sha256: "3".repeat(64), + quick_xor_base64: String::new(), + source_modified_ms: 1, + copied_at_ms: 2, + copy_verified: true, + provider_sync_confirmed: false, + lineage_fingerprint: None, + lineage: None, + }; + let error = collect_receipt_sync_evidence( + &receipt, + None, + Some(Path::new("/connections.json")), + Path::new("/home/test"), + 3, + false, + ) + .unwrap_err(); + assert_ne!(error, "icloud-provider-api-fallback-not-supported"); + } + #[test] fn attestation_rejects_forged_receipt_before_destination_probe() { let temp = tempfile::tempdir().unwrap(); From ee643f837630016a8ea7fc68a30e6f0d58b5fa27 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 20:07:00 +0900 Subject: [PATCH 086/691] feat: project provider attestation blockers --- src-tauri/src/bin/disksage-cloud-plan.rs | 6 +- src-tauri/src/cloud_adr.rs | 188 ++++++++++++++++++++--- src-tauri/src/commands.rs | 18 ++- 3 files changed, 185 insertions(+), 27 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 5999c0629..560037ab4 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2929,19 +2929,21 @@ fn reconcile_receipts( evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); } Err(error) => { + let attestation_error = stable_reconciliation_error(&error); let projection_outcome = - cloud_adr::ensure_initial_projection_pair_with_source_state_outcome( + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( &receipt, &adr_dir, &goal_dir, generated_at_ms, + &attestation_error, ); let projection_warnings = projection_outcome.warnings; report.mutation_performed |= projection_outcome.wrote; let projection = cloud_adr::read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir); let entry = &mut report.entries[entry_index]; - entry.attestation_error = Some(stable_reconciliation_error(&error)); + entry.attestation_error = Some(attestation_error); entry.issues.push("provider-attestation-incomplete".into()); if let Some(blocker) = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 08abd8109..e5bab6c98 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -512,7 +512,43 @@ pub fn write_projection_pair_with_source_blocker_outcome( goal: &CloudOffloadGoalSnapshot, source_blocker: Option<&str>, ) -> ProjectionWriteOutcome { - let Some(source_blocker) = source_blocker else { + write_projection_pair_with_blockers_outcome( + adr_dir, + adr, + goal_dir, + goal, + source_blocker, + None, + ) +} + +/// Persist a provider-attestation blocker without rewinding a previously observed goal state. +pub fn write_projection_pair_with_provider_blocker_outcome( + adr_dir: &Path, + adr: &CloudOffloadAdrSnapshot, + goal_dir: &Path, + goal: &CloudOffloadGoalSnapshot, + provider_blocker: &str, +) -> ProjectionWriteOutcome { + write_projection_pair_with_blockers_outcome( + adr_dir, + adr, + goal_dir, + goal, + None, + Some(provider_blocker), + ) +} + +fn write_projection_pair_with_blockers_outcome( + adr_dir: &Path, + adr: &CloudOffloadAdrSnapshot, + goal_dir: &Path, + goal: &CloudOffloadGoalSnapshot, + source_blocker: Option<&str>, + provider_blocker: Option<&str>, +) -> ProjectionWriteOutcome { + if source_blocker.is_none() && provider_blocker.is_none() { let (adr_path, goal_path, warnings) = write_projection_pair(adr_dir, adr, goal_dir, goal); return ProjectionWriteOutcome { wrote: adr_path.is_some() || goal_path.is_some(), @@ -571,33 +607,60 @@ pub fn write_projection_pair_with_source_blocker_outcome( } } goal.status = "blocked".into(); - goal.completion_gates.insert("source-present".into(), false); + if source_blocker.is_some() { + goal.completion_gates.insert("source-present".into(), false); + } + if provider_blocker.is_some() { + goal.completion_gates + .insert("provider-sync-state-complete".into(), false); + } goal.completion_gates .insert("explicit-eviction-permit".into(), false); - let decision_state = if goal_state_rank(goal.goal_state) - >= goal_state_rank(CloudOffloadGoalState::ProviderSyncConfirmed) + let decision_state = if source_blocker.is_some() + && goal_state_rank(goal.goal_state) + >= goal_state_rank(CloudOffloadGoalState::ProviderSyncConfirmed) { CloudOffloadGoalState::ProviderSyncConfirmed } else { goal.goal_state }; - adr.decision = format!( - "{}-source-state-unverified", - decision_for(decision_state, adr.provider_sync_state) - ); + let mut decision = decision_for(decision_state, adr.provider_sync_state); + if source_blocker.is_some() { + decision.push_str("-source-state-unverified"); + } + if provider_blocker.is_some() { + decision.push_str("-provider-state-unverified"); + } + adr.decision = decision; adr.consequences .retain(|value| value != "explicit-trash-step-may-proceed"); - let blocker = format!("source-state-blocked:{source_blocker}"); - if !adr.consequences.iter().any(|value| value == &blocker) { - adr.consequences.push(blocker); + if let Some(source_blocker) = source_blocker { + let blocker = format!("source-state-blocked:{source_blocker}"); + if !adr.consequences.iter().any(|value| value == &blocker) { + adr.consequences.push(blocker); + } + if !adr + .consequences + .iter() + .any(|value| value == "eviction-blocked-until-source-state") + { + adr.consequences + .push("eviction-blocked-until-source-state".into()); + } } - if !adr - .consequences - .iter() - .any(|value| value == "eviction-blocked-until-source-state") - { - adr.consequences - .push("eviction-blocked-until-source-state".into()); + if let Some(provider_blocker) = provider_blocker { + let blocker = format!("provider-state-blocked:{provider_blocker}"); + if !adr.consequences.iter().any(|value| value == &blocker) { + adr.consequences.push(blocker); + } + if !adr + .consequences + .iter() + .any(|value| value == "eviction-blocked-until-provider-proof") + { + adr.consequences + .push("eviction-blocked-until-provider-proof".into()); + } } let (adr_path, goal_path, warnings) = write_projection_pair_unlocked(adr_dir, &adr, goal_dir, &goal); @@ -679,6 +742,42 @@ pub fn ensure_initial_projection_pair_with_source_state_outcome( outcome } +/// Seed or update projections when provider attestation fails, preserving the current monotonic +/// state while making the missing proof explicit in the replaceable Goal and ADR. +#[cfg(not(coverage))] +pub fn ensure_initial_projection_pair_with_provider_state_outcome( + receipt: &CloudCopyReceipt, + adr_dir: &Path, + goal_dir: &Path, + updated_at_ms: u64, + provider_blocker: &str, +) -> ProjectionWriteOutcome { + let mut adr = initial_adr_snapshot(receipt, updated_at_ms); + let mut goal = initial_goal_snapshot(receipt, updated_at_ms); + let source_blocker = + crate::cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); + if let Some(blocker) = source_blocker { + goal.status = "blocked".into(); + goal.completion_gates.insert("source-present".into(), false); + adr.decision = format!("{}-source-state-unverified", adr.decision); + adr.consequences + .push(format!("source-state-blocked:{blocker}")); + } + let mut outcome = write_projection_pair_with_blockers_outcome( + adr_dir, + &adr, + goal_dir, + &goal, + source_blocker, + Some(provider_blocker), + ); + outcome.warnings.retain(|warning| { + !warning.ends_with("cloud-adr-state-regression") + && !warning.ends_with("cloud-goal-state-regression") + }); + outcome +} + fn read_latest_projection( directory: &Path, receipt_id: &str, @@ -1051,6 +1150,59 @@ mod tests { .contains(&"explicit-trash-step-may-proceed".into())); } + #[cfg(not(coverage))] + #[test] + fn provider_blocker_updates_goal_without_rewinding_advanced_state() { + let temporary = tempfile::tempdir().unwrap(); + let source = temporary.path().join("source.bin"); + std::fs::write(&source, b"source").unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let mut receipt = receipt(); + receipt.source = source.to_string_lossy().into_owned(); + let record = pending_record(); + let advanced_adr = snapshot_from_evidence( + &record, + CloudOffloadGoalState::PendingProviderSync, + 10, + ); + let advanced_goal = goal_snapshot_from_evidence( + &receipt, + &record, + CloudOffloadGoalState::PendingProviderSync, + 10, + ); + write_projection_pair(&adr_dir, &advanced_adr, &goal_dir, &advanced_goal); + + let outcome = write_projection_pair_with_provider_blocker_outcome( + &adr_dir, + &advanced_adr, + &goal_dir, + &advanced_goal, + "provider-oauth-connection-missing", + ); + assert!(outcome.warnings.is_empty()); + let persisted: CloudOffloadGoalSnapshot = serde_json::from_slice( + &std::fs::read(goal_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!(persisted.status, "blocked"); + assert_eq!(persisted.goal_state, CloudOffloadGoalState::PendingProviderSync); + assert!(!persisted.completion_gates["provider-sync-state-complete"]); + assert!(!persisted.completion_gates["explicit-eviction-permit"]); + let persisted_adr: CloudOffloadAdrSnapshot = serde_json::from_slice( + &std::fs::read(adr_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert!(persisted_adr.decision.ends_with("-provider-state-unverified")); + assert!(persisted_adr + .consequences + .contains(&"provider-state-blocked:provider-oauth-connection-missing".into())); + assert!(persisted_adr + .consequences + .contains(&"eviction-blocked-until-provider-proof".into())); + } + #[test] fn initial_projection_pair_seeds_missing_state_without_evidence() { let temporary = tempfile::tempdir().unwrap(); diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 7a5e42799..63587b30e 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -2116,12 +2116,16 @@ fn reconcile_cloud_receipts_inner( } Err(error) => { output.error_count = output.error_count.saturating_add(1); - let projection_warnings = cloud_adr::ensure_initial_projection_pair_with_source_state( - &receipt, - adr_dir, - goal_dir, - output.observed_at_ms, - ); + let attestation_error = stable_reconciliation_error(&error); + let projection_warnings = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + adr_dir, + goal_dir, + output.observed_at_ms, + &attestation_error, + ) + .warnings; let mut blockers = vec!["provider-attestation-incomplete".into()]; if let Some(blocker) = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) @@ -2157,7 +2161,7 @@ fn reconcile_cloud_receipts_inner( provider_sync_state, eviction_permit: false, blockers, - error: Some(stable_reconciliation_error(&error)), + error: Some(attestation_error), }); } } From 3fc934dccbe67cd56fe64b6c9185235566b0b2fc Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 20:25:05 +0900 Subject: [PATCH 087/691] test: cover provider blocker reconciliation state --- src-tauri/src/cloud_adr.rs | 51 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index e5bab6c98..aace24e39 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -1203,6 +1203,57 @@ mod tests { .contains(&"eviction-blocked-until-provider-proof".into())); } + #[cfg(not(coverage))] + #[test] + fn provider_attestation_error_updates_seeded_projection_without_rewinding_goal() { + let temporary = tempfile::tempdir().unwrap(); + let source = temporary.path().join("source.bin"); + std::fs::write(&source, b"source").unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let mut receipt = receipt(); + receipt.source = source.to_string_lossy().into_owned(); + let record = pending_record(); + let advanced_adr = snapshot_from_evidence( + &record, + CloudOffloadGoalState::PendingProviderSync, + 10, + ); + let advanced_goal = goal_snapshot_from_evidence( + &receipt, + &record, + CloudOffloadGoalState::PendingProviderSync, + 10, + ); + write_projection_pair(&adr_dir, &advanced_adr, &goal_dir, &advanced_goal); + + let outcome = ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + 11, + "provider-oauth-connection-missing", + ); + assert!(outcome.wrote); + assert!(outcome.warnings.is_empty()); + let persisted: CloudOffloadGoalSnapshot = serde_json::from_slice( + &std::fs::read(goal_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!(persisted.goal_state, CloudOffloadGoalState::PendingProviderSync); + assert_eq!(persisted.status, "blocked"); + assert!(!persisted.completion_gates["provider-sync-state-complete"]); + assert!(!persisted.completion_gates["explicit-eviction-permit"]); + let persisted_adr: CloudOffloadAdrSnapshot = serde_json::from_slice( + &std::fs::read(adr_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert!(persisted_adr.decision.ends_with("-provider-state-unverified")); + assert!(persisted_adr + .consequences + .contains(&"provider-state-blocked:provider-oauth-connection-missing".into())); + } + #[test] fn initial_projection_pair_seeds_missing_state_without_evidence() { let temporary = tempfile::tempdir().unwrap(); From 7ea702acae8e0e7846c97acc2e7074dc2a80acb2 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 20:31:21 +0900 Subject: [PATCH 088/691] fix: block api copies when attestation fails --- src-tauri/src/bin/disksage-cloud-plan.rs | 25 ++++++++++++++++++++---- src-tauri/src/commands.rs | 25 ++++++++++++++++++++---- 2 files changed, 42 insertions(+), 8 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 560037ab4..54947316c 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -2770,10 +2770,27 @@ fn copy_candidate_via_provider_api( goal_path = attestation.goal_path; projection_warnings.extend(attestation.projection_warnings); } - Err(error) => projection_warnings.push(format!( - "provider-attestation-incomplete:{}", - stable_reconciliation_error(&error) - )), + Err(error) => { + let provider_blocker = stable_reconciliation_error(&error); + let projection_outcome = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + cloud::system_now_ms(), + &provider_blocker, + ); + if let Some(path) = projection_outcome.adr_path { + adr_path = Some(path.to_string_lossy().into_owned()); + } + if let Some(path) = projection_outcome.goal_path { + goal_path = Some(path.to_string_lossy().into_owned()); + } + projection_warnings.extend(projection_outcome.warnings); + projection_warnings.push(format!( + "provider-attestation-incomplete:{provider_blocker}" + )); + } } Ok(ProviderApiCopyOutput { diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 63587b30e..fc33419a4 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1785,10 +1785,27 @@ fn create_cloud_candidate_provider_api_receipt( goal_path = attestation.goal_path; projection_warnings.extend(attestation.projection_warnings); } - Err(error) => projection_warnings.push(format!( - "provider-attestation-incomplete:{}", - stable_reconciliation_error(&error) - )), + Err(error) => { + let provider_blocker = stable_reconciliation_error(&error); + let projection_outcome = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &app_data_dir.join("cloud-adr"), + &app_data_dir.join("cloud-goals"), + cloud::system_now_ms(), + &provider_blocker, + ); + if let Some(path) = projection_outcome.adr_path { + adr_path = Some(path.to_string_lossy().into_owned()); + } + if let Some(path) = projection_outcome.goal_path { + goal_path = Some(path.to_string_lossy().into_owned()); + } + projection_warnings.extend(projection_outcome.warnings); + projection_warnings.push(format!( + "provider-attestation-incomplete:{provider_blocker}" + )); + } } Ok(CloudCopyOutput { action: "copy-only", From 80ab617b960dc8ebb6e8450516b4b71ab58e112f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 20:38:40 +0900 Subject: [PATCH 089/691] feat: surface dynamic goal status after copy --- src-tauri/src/bin/disksage-cloud-plan.rs | 8 ++++++++ src-tauri/src/commands.rs | 15 +++++++++++++++ src/lib/CloudArchive.svelte | 4 ++-- src/lib/api.ts | 1 + 4 files changed, 26 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 54947316c..885b78450 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -483,6 +483,7 @@ fn parse_args(args: &[String], home: &Path) -> Result { struct CopyOutput { action: &'static str, goal_state: cloud_transfer::CloudOffloadGoalState, + goal_status: Option, receipt: CloudCopyReceipt, receipt_path: String, adr_path: Option, @@ -495,6 +496,7 @@ struct CopyOutput { struct ProviderApiCopyOutput { action: &'static str, goal_state: cloud_transfer::CloudOffloadGoalState, + goal_status: Option, receipt: CloudCopyReceipt, receipt_path: String, provider_object_id: String, @@ -2796,6 +2798,9 @@ fn copy_candidate_via_provider_api( Ok(ProviderApiCopyOutput { action: "copy-via-provider-api", goal_state, + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt_id) + .ok() + .flatten(), receipt, receipt_path: receipt_path.to_string_lossy().into_owned(), provider_object_id, @@ -3652,6 +3657,9 @@ fn run() -> Result<(), String> { "copy-only" }, goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(), receipt, receipt_path: receipt_path.to_string_lossy().into_owned(), adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index fc33419a4..249795590 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1465,6 +1465,7 @@ pub async fn review_cloud_candidate( pub struct CloudCopyOutput { pub action: &'static str, pub goal_state: cloud_transfer::CloudOffloadGoalState, + pub goal_status: Option, pub receipt: cloud_transfer::CloudCopyReceipt, pub receipt_path: String, pub adr_path: Option, @@ -1601,6 +1602,12 @@ fn create_cloud_candidate_receipt( (None, None) } }; + let goal_status = cloud_adr::read_goal_status( + &app_data_dir.join("cloud-goals"), + &receipt.receipt_id, + ) + .ok() + .flatten(); Ok(CloudCopyOutput { action: if adopt_existing { "adopt-existing-copy" @@ -1608,6 +1615,7 @@ fn create_cloud_candidate_receipt( "copy-only" }, goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, + goal_status, receipt, receipt_path: receipt_path.to_string_lossy().into_owned(), adr_path, @@ -1807,9 +1815,16 @@ fn create_cloud_candidate_provider_api_receipt( )); } } + let goal_status = cloud_adr::read_goal_status( + &app_data_dir.join("cloud-goals"), + &receipt.receipt_id, + ) + .ok() + .flatten(); Ok(CloudCopyOutput { action: "copy-only", goal_state, + goal_status, receipt, receipt_path: receipt_path.to_string_lossy().into_owned(), adr_path, diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index d5ebe7af2..8156d6384 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -915,10 +915,10 @@

{#if copied}
- {copied.action === "adopt-existing-copy" ? "기존 클라우드 복사본 검증·채택 완료" : "검증 복사 완료"} · 원본 보존됨 + {copied.goal_status === "blocked" ? "복사 완료 · 공급자 확인 차단" : copied.action === "adopt-existing-copy" ? "기존 클라우드 복사본 검증·채택 완료" : "검증 복사 완료"} · 원본 보존됨
영수증 {copied.receipt.receipt_id} · {fmtBytes(copied.receipt.bytes)}
{copied.receipt.destination}
-

Goal: {copied.goal_state} · 동적 ADR: {copied.adr_path ?? "실패"} · 동적 Goal: {copied.goal_path ?? "실패"}

+

Goal: {copied.goal_state} · 상태: {copied.goal_status ?? "미확인"} · 동적 ADR: {copied.adr_path ?? "실패"} · 동적 Goal: {copied.goal_path ?? "실패"}

{#each copied.projection_warnings as warning}

동적 ADR/Goal 투영 경고: {warning}

{/each} diff --git a/src/lib/api.ts b/src/lib/api.ts index 87958cdaa..491213a0d 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -767,6 +767,7 @@ export interface CloudLineageSnapshot { export interface CloudCopyOutput { action: "copy-only" | "adopt-existing-copy"; goal_state: CloudOffloadGoalState; + goal_status: string | null; receipt: CloudCopyReceipt; receipt_path: string; adr_path: string | null; From e0debeab4061014ff19a84be97736a1d3010a5b7 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 21:14:55 +0900 Subject: [PATCH 090/691] fix: project provider blockers on pending attestation --- src-tauri/src/bin/disksage-cloud-plan.rs | 34 +++++++++----- src-tauri/src/cloud_adr.rs | 56 ++++++++++++++++++++++-- src-tauri/src/commands.rs | 34 +++++++++----- src/lib/CloudArchive.svelte | 3 +- src/lib/api.ts | 1 + 5 files changed, 101 insertions(+), 27 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 885b78450..a05446995 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -513,6 +513,7 @@ struct ProviderApiCopyOutput { struct AttestationOutput { action: &'static str, goal_state: cloud_transfer::CloudOffloadGoalState, + goal_status: Option, receipt_id: String, evidence: disksage_lib::cloud_transfer::ProviderSyncEvidence, assessment: provider_sync::ProviderSyncTimelinessAssessment, @@ -2590,14 +2591,18 @@ fn attest_receipt_with_mode( adr.consequences .push(format!("source-state-blocked:{blocker}")); } - let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair_with_source_blocker( - &adr_dir, - &adr, - &goal_dir, - &goal, - source_blocker, - ); + let provider_blocker = blockers + .iter() + .find(|existing| Some(existing.as_str()) != source_blocker) + .map(String::as_str); + let projection = cloud_adr::write_projection_pair_with_state_blockers_outcome( + &adr_dir, + &adr, + &goal_dir, + &goal, + source_blocker, + provider_blocker, + ); Ok(AttestationOutput { action: if force_provider_api { "attest-provider-api" @@ -2605,14 +2610,21 @@ fn attest_receipt_with_mode( "attest-provider-native" }, goal_state, + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(), receipt_id: receipt.receipt_id, evidence, assessment, evidence_record, evidence_path: evidence_path.to_string_lossy().into_owned(), - adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), - projection_warnings, + adr_path: projection + .adr_path + .map(|path| path.to_string_lossy().into_owned()), + goal_path: projection + .goal_path + .map(|path| path.to_string_lossy().into_owned()), + projection_warnings: projection.warnings, permit, blockers, }) diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index aace24e39..0665b0561 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -512,7 +512,7 @@ pub fn write_projection_pair_with_source_blocker_outcome( goal: &CloudOffloadGoalSnapshot, source_blocker: Option<&str>, ) -> ProjectionWriteOutcome { - write_projection_pair_with_blockers_outcome( + write_projection_pair_with_state_blockers_outcome( adr_dir, adr, goal_dir, @@ -530,7 +530,7 @@ pub fn write_projection_pair_with_provider_blocker_outcome( goal: &CloudOffloadGoalSnapshot, provider_blocker: &str, ) -> ProjectionWriteOutcome { - write_projection_pair_with_blockers_outcome( + write_projection_pair_with_state_blockers_outcome( adr_dir, adr, goal_dir, @@ -540,7 +540,8 @@ pub fn write_projection_pair_with_provider_blocker_outcome( ) } -fn write_projection_pair_with_blockers_outcome( +/// Persist both source and provider blockers without rewinding a prior goal state. +pub fn write_projection_pair_with_state_blockers_outcome( adr_dir: &Path, adr: &CloudOffloadAdrSnapshot, goal_dir: &Path, @@ -763,7 +764,7 @@ pub fn ensure_initial_projection_pair_with_provider_state_outcome( adr.consequences .push(format!("source-state-blocked:{blocker}")); } - let mut outcome = write_projection_pair_with_blockers_outcome( + let mut outcome = write_projection_pair_with_state_blockers_outcome( adr_dir, &adr, goal_dir, @@ -1203,6 +1204,53 @@ mod tests { .contains(&"eviction-blocked-until-provider-proof".into())); } + #[cfg(not(coverage))] + #[test] + fn source_and_provider_blockers_are_both_projected() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + let record = pending_record(); + let adr = snapshot_from_evidence(&record, CloudOffloadGoalState::PendingProviderSync, 10); + let goal = goal_snapshot_from_evidence( + &receipt, + &record, + CloudOffloadGoalState::PendingProviderSync, + 10, + ); + + let outcome = write_projection_pair_with_state_blockers_outcome( + &adr_dir, + &adr, + &goal_dir, + &goal, + Some("source-not-present"), + Some("provider-sync-incomplete"), + ); + assert!(outcome.warnings.is_empty()); + + let persisted_goal: CloudOffloadGoalSnapshot = serde_json::from_slice( + &std::fs::read(goal_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert_eq!(persisted_goal.status, "blocked"); + assert!(!persisted_goal.completion_gates["source-present"]); + assert!(!persisted_goal.completion_gates["provider-sync-state-complete"]); + assert!(!persisted_goal.completion_gates["explicit-eviction-permit"]); + + let persisted_adr: CloudOffloadAdrSnapshot = serde_json::from_slice( + &std::fs::read(adr_dir.join(format!("{}-latest.json", receipt.receipt_id))).unwrap(), + ) + .unwrap(); + assert!(persisted_adr + .consequences + .contains(&"eviction-blocked-until-source-state".into())); + assert!(persisted_adr + .consequences + .contains(&"eviction-blocked-until-provider-proof".into())); + } + #[cfg(not(coverage))] #[test] fn provider_attestation_error_updates_seeded_projection_without_rewinding_goal() { diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 249795590..0f64c8fc9 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1952,6 +1952,7 @@ pub async fn adopt_existing_cloud_candidate( #[derive(serde::Serialize)] pub struct CloudAttestationOutput { pub goal_state: cloud_transfer::CloudOffloadGoalState, + pub goal_status: Option, pub evidence: cloud_transfer::ProviderSyncEvidence, pub assessment: provider_sync::ProviderSyncTimelinessAssessment, pub evidence_record: provider_evidence::ProviderSyncEvidenceRecord, @@ -2331,23 +2332,34 @@ fn collect_cloud_attestation_for_receipt( adr.consequences .push(format!("source-state-blocked:{blocker}")); } - let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair_with_source_blocker( - adr_dir, - &adr, - goal_dir, - &goal, - source_blocker, - ); + let provider_blocker = blockers + .iter() + .find(|existing| Some(existing.as_str()) != source_blocker) + .map(String::as_str); + let projection = cloud_adr::write_projection_pair_with_state_blockers_outcome( + adr_dir, + &adr, + goal_dir, + &goal, + source_blocker, + provider_blocker, + ); Ok(CloudAttestationOutput { goal_state, + goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) + .ok() + .flatten(), evidence, assessment, evidence_record, evidence_path: evidence_path.to_string_lossy().into_owned(), - adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), - projection_warnings, + adr_path: projection + .adr_path + .map(|path| path.to_string_lossy().into_owned()), + goal_path: projection + .goal_path + .map(|path| path.to_string_lossy().into_owned()), + projection_warnings: projection.warnings, permit, blockers, }) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 8156d6384..5158ec6d8 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -942,7 +942,8 @@ {#if attestation}

- Goal: {attestation.goal_state} · {syncStateLabel(attestation.evidence.sync_state)} + Goal: {attestation.goal_state} · 상태 {attestation.goal_status ?? "미확인"} · + {syncStateLabel(attestation.evidence.sync_state)}

{#if attestation.assessment.state === "overdue"}

diff --git a/src/lib/api.ts b/src/lib/api.ts index 491213a0d..5985fdfd1 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -849,6 +849,7 @@ export interface LocalEvictionPermit { export interface CloudAttestationOutput { goal_state: CloudOffloadGoalState; + goal_status: "active" | "blocked" | "completed" | null; evidence: ProviderSyncEvidence; assessment: ProviderSyncTimelinessAssessment; evidence_record: ProviderSyncEvidenceRecord; From 0b96ae98946b1a597d939bdf0f81ad9a7127baa3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 22:10:52 +0900 Subject: [PATCH 091/691] fix: project direct attestation failures --- src-tauri/src/commands.rs | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 0f64c8fc9..4f3870ef4 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -2395,7 +2395,7 @@ pub async fn attest_cloud_copy( if receipt.receipt_id != receipt_id { return Err("receipt-id-mismatch".into()); } - collect_cloud_attestation_for_receipt( + let result = collect_cloud_attestation_for_receipt( &receipt, object_id, &evidence_dir, @@ -2404,7 +2404,21 @@ pub async fn attest_cloud_copy( &connection_path, &cloud_roots, false, - ) + ); + if let Err(error) = &result { + // Keep direct GUI attestation consistent with reconciliation: a failed provider + // observation still updates the replaceable ADR/Goal projection, while the immutable + // receipt and source-eviction authority remain unchanged. + let provider_blocker = stable_reconciliation_error(error); + let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + cloud::system_now_ms(), + &provider_blocker, + ); + } + result }) .await .map_err(|_| "cloud-attestation-task-failed".to_string())? From 14ab893974402ed61bc2ffb2d3b7ae87d91b93a6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 22:21:54 +0900 Subject: [PATCH 092/691] fix: update projections before eviction failure --- src-tauri/src/commands.rs | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 4f3870ef4..ccf1172eb 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -2509,7 +2509,7 @@ pub async fn trash_verified_cloud_source( if receipt.receipt_id != receipt_id { return Err("receipt-id-mismatch".into()); } - let attestation = collect_cloud_attestation_for_receipt( + let attestation = match collect_cloud_attestation_for_receipt( &receipt, object_id, &evidence_dir, @@ -2518,7 +2518,20 @@ pub async fn trash_verified_cloud_source( &connection_path, &cloud_roots, false, - )?; + ) { + Ok(attestation) => attestation, + Err(error) => { + let provider_blocker = stable_reconciliation_error(&error); + let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + cloud::system_now_ms(), + &provider_blocker, + ); + return Err(error); + } + }; let permit = attestation.permit.as_ref().ok_or_else(|| { if attestation.blockers.is_empty() { "source-eviction-permit-unavailable".to_string() From b37a3b234b5bbe42373b3fbb7bf9e278a7238561 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 22:45:30 +0900 Subject: [PATCH 093/691] fix: terminate bounded discovery helper groups --- src-tauri/src/cloud.rs | 40 ++++++++++++++++++++++++++++++++++------ 1 file changed, 34 insertions(+), 6 deletions(-) diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index 0e525a74d..65ddc23d7 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -421,6 +421,8 @@ fn directory_access_issue(path: &Path) -> Option { #[cfg(all(not(coverage), target_os = "macos"))] fn run_bounded_find(path: &Path, action: &[&str]) -> Result, String> { + use std::os::unix::process::CommandExt; + let metadata = std::fs::metadata(path).map_err(|error| access_issue_for_error(&error))?; if !metadata.is_dir() { return Err("not-a-directory".into()); @@ -442,18 +444,39 @@ fn run_bounded_find(path: &Path, action: &[&str]) -> Result, String> { return Err("read-dir-helper-unavailable".into()); } - let mut child = Command::new(find) + let mut command = Command::new(find); + command .arg(path) .args(action) .stdin(Stdio::null()) .stdout(Stdio::piped()) - .stderr(Stdio::null()) + .stderr(Stdio::null()); + // File Provider paths can leave helper descendants holding stdout after the leader exits. + // Keep the helper in its own group so timeout cleanup closes the pipe and joins promptly. + unsafe { + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } + let mut child = command .spawn() .map_err(|_| "read-dir-helper-failed".to_string())?; - let stdout = child - .stdout - .take() - .ok_or_else(|| "read-dir-helper-failed".to_string())?; + let child_pid = child.id(); + let kill_group = || unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + }; + let stdout = match child.stdout.take() { + Some(stdout) => stdout, + None => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + return Err("read-dir-helper-failed".into()); + } + }; let reader = std::thread::spawn(move || { let mut output = Vec::new(); stdout @@ -470,12 +493,14 @@ fn run_bounded_find(path: &Path, action: &[&str]) -> Result, String> { std::thread::sleep(Duration::from_millis(10)); } Ok(None) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); let _ = reader.join(); return Err("read-dir-timeout".into()); } Err(_) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); let _ = reader.join(); @@ -483,6 +508,9 @@ fn run_bounded_find(path: &Path, action: &[&str]) -> Result, String> { } } }; + // The leader may have exited while a descendant still owns the pipe; close the private group + // before joining the reader so a successful probe cannot hang on inherited stdout. + kill_group(); let output = reader .join() .map_err(|_| "read-dir-helper-failed".to_string())? From 3454e8a643068c7aafc2d2f327156262500c286b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 23:36:12 +0900 Subject: [PATCH 094/691] fix: bound File Provider status helper cleanup --- src-tauri/src/provider_sync.rs | 40 +++++++++++++++++++++++++++++----- 1 file changed, 34 insertions(+), 6 deletions(-) diff --git a/src-tauri/src/provider_sync.rs b/src-tauri/src/provider_sync.rs index 3856d30e6..d25f928c0 100644 --- a/src-tauri/src/provider_sync.rs +++ b/src-tauri/src/provider_sync.rs @@ -679,23 +679,45 @@ fn hash_file(path: &std::path::Path) -> Result { #[cfg(all(target_os = "macos", not(coverage)))] pub(crate) fn file_providerctl_status(path: &str) -> Result { use std::io::Read; + use std::os::unix::process::CommandExt; use std::process::{Command, Stdio}; use std::time::{Duration, Instant}; const TIMEOUT: Duration = Duration::from_secs(5); const OUTPUT_LIMIT: u64 = 256 * 1_024; - let mut child = Command::new("/usr/bin/fileproviderctl") + let mut command = Command::new("/usr/bin/fileproviderctl"); + command .arg("evaluate") .arg(path) .stdout(Stdio::piped()) - .stderr(Stdio::null()) + .stderr(Stdio::null()); + // File Provider helpers can retain inherited stdout after the leader exits. Keep the + // helper in a private process group so bounded cleanup can always join the reader. + unsafe { + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } + let mut child = command .spawn() .map_err(|_| "file-provider-status-command-unavailable".to_string())?; - let stdout = child - .stdout - .take() - .ok_or_else(|| "file-provider-status-output-missing".to_string())?; + let child_pid = child.id(); + let kill_group = || unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + }; + let stdout = match child.stdout.take() { + Some(stdout) => stdout, + None => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + return Err("file-provider-status-output-missing".into()); + } + }; let output_reader = std::thread::spawn(move || { let mut output = Vec::new(); stdout @@ -711,17 +733,23 @@ pub(crate) fn file_providerctl_status(path: &str) -> Result { std::thread::sleep(Duration::from_millis(25)); } Ok(None) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); + let _ = output_reader.join(); return Err("file-provider-status-command-timeout".into()); } Err(_) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); + let _ = output_reader.join(); return Err("file-provider-status-command-wait-failed".into()); } } }; + // The leader may exit while a descendant still owns the pipe. + kill_group(); let output = output_reader .join() .map_err(|_| "file-provider-status-output-reader-panicked".to_string())? From 7c22dca35d2a166f3d7e741bd27b17a96859cb6f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 23:59:35 +0900 Subject: [PATCH 095/691] fix: guard cache cleanup with active-use evidence --- src-tauri/src/cache_cleanup.rs | 60 ++++++++++++++++++++++++++++++++++ src/lib/Cleanup.svelte | 2 +- 2 files changed, 61 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/cache_cleanup.rs b/src-tauri/src/cache_cleanup.rs index 2842f9d5b..0d0865b8f 100644 --- a/src-tauri/src/cache_cleanup.rs +++ b/src-tauri/src/cache_cleanup.rs @@ -6,6 +6,18 @@ fn sort_targets(targets: &mut Vec) { targets.sort_by(|left, right| left.path.cmp(&right.path)); } +fn active_use_blocker( + evidence: &crate::git_worktree::GitWorktreeActiveUseEvidence, +) -> Option<&'static str> { + if !evidence.assessed || !evidence.evidence_complete { + Some("cache-target-active-use-evidence-incomplete") + } else if evidence.active { + Some("cache-target-active-use-detected") + } else { + None + } +} + fn clean_cache_contents_inner( bases: &rules::BaseDirs, dir: &Path, @@ -24,9 +36,26 @@ fn clean_cache_contents_inner( return Err("cache-cleanup-targets-stale".into()); } + // One recursive probe covers the whole catalog root. Re-probing every child would multiply + // the bounded lsof cost by thousands of cache entries while adding no stronger snapshot. + let active_use = crate::git_worktree::active_use_evidence( + dir, + crate::reclaim::ACTIVE_USE_PROBE_TIMEOUT_MS, + crate::reclaim::ACTIVE_USE_PROBE_MAX_PIDS, + true, + ); + let active_use_error = active_use_blocker(&active_use); + Ok(expected .into_iter() .map(|target| { + if let Some(error) = active_use_error { + return CleanResult { + path: target.path, + ok: false, + error: error.into(), + }; + } match safety::trash_delete_if_identity( Path::new(&target.path), &target.object_id, @@ -125,6 +154,37 @@ mod tests { assert_eq!(fs::read(&victim).unwrap(), b"keep"); } + #[test] + fn active_use_evidence_blocks_cache_mutation() { + let incomplete = crate::git_worktree::GitWorktreeActiveUseEvidence { + method: "lsof-file-pid".into(), + assessed: true, + evidence_complete: false, + active: false, + observed_pids: Vec::new(), + results_truncated: false, + error: Some("active-use-timeout".into()), + }; + assert_eq!( + active_use_blocker(&incomplete), + Some("cache-target-active-use-evidence-incomplete") + ); + + let active = crate::git_worktree::GitWorktreeActiveUseEvidence { + method: "lsof-file-pid".into(), + assessed: true, + evidence_complete: true, + active: true, + observed_pids: vec![42], + results_truncated: false, + error: None, + }; + assert_eq!( + active_use_blocker(&active), + Some("cache-target-active-use-detected") + ); + } + #[cfg(unix)] #[test] fn cleanup_rejects_symlinked_catalog_root_without_touching_outside_data() { diff --git a/src/lib/Cleanup.svelte b/src/lib/Cleanup.svelte index 4222c0281..e2fafa969 100644 --- a/src/lib/Cleanup.svelte +++ b/src/lib/Cleanup.svelte @@ -49,7 +49,7 @@ const targetBytes = targets.reduce((sum, target) => sum + target.bytes, 0); const okay = await confirm( `${candidate.label}의 직계 캐시 ${targets.length}개(${fmtBytes(targetBytes)})를 휴지통으로 보냅니다.\n\n` + - "캐시 루트는 보존하며, 각 항목은 파일시스템 객체 지문·크기·수정시각을 다시 검증합니다. 휴지통에서 복원할 수 있습니다.", + "캐시 루트는 보존하며, 각 항목은 객체 지문·크기·수정시각·active-use를 다시 검증합니다. 사용 중이거나 증명이 불완전한 항목은 건너뜁니다. 휴지통에서 복원할 수 있습니다.", { title: "DiskSage", kind: "warning" }, ); if (!okay) return; From c3d6d60f4d9205a1953e4bebc53af14b1cae56fb Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 15 Aug 2026 00:09:57 +0900 Subject: [PATCH 096/691] fix: detect offloaded git metadata before audit --- src-tauri/src/git_worktree.rs | 93 +++++++++++++++++++++++++++++++++-- 1 file changed, 88 insertions(+), 5 deletions(-) diff --git a/src-tauri/src/git_worktree.rs b/src-tauri/src/git_worktree.rs index 99e815b67..cef05b3d6 100644 --- a/src-tauri/src/git_worktree.rs +++ b/src-tauri/src/git_worktree.rs @@ -10,10 +10,6 @@ use std::collections::BTreeSet; use std::ffi::OsString; use std::fs; use std::io::{Read, Write}; -use std::path::{Path, PathBuf}; -use std::process::{Command, Stdio}; -use std::thread; -use std::time::{Duration, Instant}; #[cfg(unix)] use std::os::fd::{AsRawFd, FromRawFd}; #[cfg(unix)] @@ -22,6 +18,10 @@ use std::os::unix::ffi::OsStrExt; use std::os::unix::fs::OpenOptionsExt; #[cfg(unix)] use std::os::unix::process::CommandExt; +use std::path::{Path, PathBuf}; +use std::process::{Command, Stdio}; +use std::thread; +use std::time::{Duration, Instant}; pub const GIT_WORKTREE_AUDIT_SCHEMA_KIND: &str = "disksage.git-worktree-audit/v2"; const MAX_COMMAND_OUTPUT_BYTES: usize = 4 * 1024 * 1024; @@ -473,6 +473,61 @@ fn run_git( Ok(result) } +fn git_admin_metadata_blocker( + status: &crate::provider_sync::FileProviderItemStatus, +) -> Option<&'static str> { + (!status.is_local_current()).then_some("git-worktree-admin-metadata-not-local-current") +} + +#[cfg(all(target_os = "macos", not(coverage)))] +fn check_file_provider_git_metadata(path: &Path) -> Result, String> { + let metadata = fs::symlink_metadata(path) + .map_err(|_| "git-worktree-admin-metadata-stat-failed".to_string())?; + let output = match crate::provider_sync::file_providerctl_status(&path.to_string_lossy()) { + Ok(output) => output, + // A regular local file is not a File Provider item; Git can inspect it normally. + Err(error) if error == "file-provider-status-command-failed" => return Ok(None), + Err(error) => return Err(format!("git-worktree-admin-metadata-{error}")), + }; + let status = crate::provider_sync::parse_file_providerctl_item_status(&output, metadata.len()) + .map_err(|error| format!("git-worktree-admin-metadata-{error}"))?; + Ok(git_admin_metadata_blocker(&status)) +} + +#[cfg(all(target_os = "macos", not(coverage)))] +fn ensure_git_admin_metadata_local(repository_root: &Path) -> Result<(), String> { + let git_entry = repository_root.join(".git"); + let mut paths = Vec::new(); + match fs::symlink_metadata(&git_entry) { + Ok(metadata) if metadata.is_dir() => { + paths.push(git_entry.join("HEAD")); + paths.push(git_entry.join("config")); + } + Ok(_) => paths.push(git_entry), + Err(_) => { + let head = repository_root.join("HEAD"); + if fs::symlink_metadata(&head).is_ok() { + paths.push(head); + paths.push(repository_root.join("config")); + } + } + } + for path in paths { + if fs::symlink_metadata(&path).is_err() { + continue; + } + if let Some(blocker) = check_file_provider_git_metadata(&path)? { + return Err(blocker.into()); + } + } + Ok(()) +} + +#[cfg(any(not(target_os = "macos"), coverage))] +fn ensure_git_admin_metadata_local(_repository_root: &Path) -> Result<(), String> { + Ok(()) +} + fn parse_worktree_porcelain(bytes: &[u8]) -> Result, String> { let mut entries = Vec::new(); let mut current = RawWorktreeBuilder::default(); @@ -1274,6 +1329,7 @@ pub fn audit_git_worktrees( return Err("git-worktree-repository-root-not-absolute".into()); } let repository_root = canonical_real_directory(repository_root)?; + ensure_git_admin_metadata_local(&repository_root)?; let common_dir = resolve_common_dir(&repository_root, options.command_timeout_ms)?; let retention_references = resolve_references( &repository_root, @@ -2311,7 +2367,11 @@ mod tests { ); let oversized = temp.path().join("oversized"); - fs::write(&oversized, vec![b'x'; (MAX_ADMIN_FALLBACK_FILE_BYTES + 1) as usize]).unwrap(); + fs::write( + &oversized, + vec![b'x'; (MAX_ADMIN_FALLBACK_FILE_BYTES + 1) as usize], + ) + .unwrap(); assert_eq!( read_admin_fallback_file(&oversized).unwrap_err(), "git-worktree-admin-fallback-file-too-large" @@ -2326,6 +2386,29 @@ mod tests { assert_eq!(containment_observation("not-an-oid", &reachable), None); } + #[test] + fn offloaded_git_metadata_is_a_hard_blocker() { + let status = crate::provider_sync::FileProviderItemStatus { + is_downloaded: false, + is_downloading: false, + is_most_recent_version_downloaded: false, + is_uploaded: true, + is_uploading: false, + has_unresolved_conflicts: false, + is_excluded_from_sync: false, + is_sync_paused: false, + is_trashed: false, + capabilities: 0, + allows_eviction: false, + observed_bytes: 30, + item_identifier_fingerprint: "f".repeat(64), + }; + assert_eq!( + git_admin_metadata_blocker(&status), + Some("git-worktree-admin-metadata-not-local-current") + ); + } + #[test] fn only_complete_clean_merged_idle_secondary_is_candidate() { let safe = ClassificationInput { From 94abd9a56368e3141310e2a9db04dc19d4432bd2 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 15 Aug 2026 00:25:16 +0900 Subject: [PATCH 097/691] fix: bind cleanup calibration to exact judgment --- src-tauri/src/brew_cleanup.rs | 10 ++++-- src-tauri/src/cloud_adr.rs | 50 ++++++++++++++++++++++++++++++ src-tauri/src/commands.rs | 13 +++++++- src-tauri/src/judge_calibration.rs | 19 ++++++++++++ src/lib/BrewCleanup.svelte | 9 ++++-- src/lib/api.test.ts | 2 +- src/lib/api.ts | 2 ++ 7 files changed, 98 insertions(+), 7 deletions(-) diff --git a/src-tauri/src/brew_cleanup.rs b/src-tauri/src/brew_cleanup.rs index ad124b6bb..d2b70f3c4 100644 --- a/src-tauri/src/brew_cleanup.rs +++ b/src-tauri/src/brew_cleanup.rs @@ -59,9 +59,9 @@ pub struct BrewCleanupJudgment { impl BrewCleanupJudgment { pub fn has_successful_calibration(&self) -> bool { - self.calibration - .as_ref() - .is_some_and(|calibration| calibration.passed) + self.calibration.as_ref().is_some_and(|calibration| { + calibration.passed && calibration.judgment_id == self.judgment_id + }) } } @@ -589,6 +589,7 @@ mod tests { crate::judge_calibration::validate( &crate::judge_calibration::JudgeCalibrationEvidence { schema_version: crate::judge_calibration::SCHEMA_VERSION, + judgment_id: judgment.judgment_id.clone(), categories: 2, model_labels: vec![0, 1, 0, 1], human_labels: vec![0, 1, 0, 1], @@ -600,6 +601,9 @@ mod tests { .unwrap(), ); assert!(judgment.has_successful_calibration()); + judgment.calibration.as_mut().unwrap().judgment_id = "b".repeat(64); + assert!(!judgment.has_successful_calibration()); + judgment.calibration.as_mut().unwrap().judgment_id = judgment.judgment_id.clone(); judgment.calibration.as_mut().unwrap().passed = false; assert!(!judgment.has_successful_calibration()); } diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 0665b0561..46752d4c8 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -1080,6 +1080,56 @@ mod tests { assert!(outcome.warnings.is_empty()); } + #[test] + fn late_pair_writer_cannot_rewind_source_evicted_state() { + let temporary = tempfile::tempdir().unwrap(); + let adr_dir = temporary.path().join("adr"); + let goal_dir = temporary.path().join("goals"); + let receipt = receipt(); + let pending = pending_record(); + let source_evicted_adr = + snapshot_from_evidence(&pending, CloudOffloadGoalState::SourceEvicted, 10); + let source_evicted_goal = goal_snapshot_from_evidence( + &receipt, + &pending, + CloudOffloadGoalState::SourceEvicted, + 10, + ); + let (_, _, warnings) = write_projection_pair( + &adr_dir, + &source_evicted_adr, + &goal_dir, + &source_evicted_goal, + ); + assert!(warnings.is_empty()); + + let complete = complete_record(); + let late_adr = + snapshot_from_evidence(&complete, CloudOffloadGoalState::ProviderSyncConfirmed, 11); + let late_goal = goal_snapshot_from_evidence( + &receipt, + &complete, + CloudOffloadGoalState::ProviderSyncConfirmed, + 11, + ); + let outcome = write_projection_pair(&adr_dir, &late_adr, &goal_dir, &late_goal); + assert!(outcome.0.is_none()); + assert!(outcome.1.is_none()); + assert!(outcome.2.iter().any(|warning| { + warning == "adr-projection-write-failed:cloud-adr-state-regression" + })); + assert!(outcome.2.iter().any(|warning| { + warning == "goal-projection-write-failed:cloud-goal-state-regression" + })); + assert_eq!( + read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir) + .unwrap() + .unwrap() + .goal_state, + CloudOffloadGoalState::SourceEvicted + ); + } + #[test] fn source_blocker_updates_goal_without_rewinding_advanced_state() { let temporary = tempfile::tempdir().unwrap(); diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index ccf1172eb..50b422523 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -517,7 +517,9 @@ pub fn judge_brew_cleanup( .judge_calibration .lock() .map_err(|_| "brew-cleanup-calibration-lock-poisoned".to_string())? - .clone(); + .as_ref() + .filter(|calibration| calibration.judgment_id == judgment.judgment_id) + .cloned(); drop(guard); *state .brew_cleanup_judgment @@ -549,6 +551,15 @@ pub fn validate_judge_calibration( .judge_calibration .lock() .map_err(|_| "judge-calibration-lock-poisoned".to_string())? = Some(result.clone()); + if let Some(judgment) = state + .brew_cleanup_judgment + .lock() + .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())? + .as_mut() + .filter(|judgment| judgment.judgment_id == result.judgment_id) + { + judgment.calibration = Some(result.clone()); + } Ok(result) } diff --git a/src-tauri/src/judge_calibration.rs b/src-tauri/src/judge_calibration.rs index ad6029de2..399f27253 100644 --- a/src-tauri/src/judge_calibration.rs +++ b/src-tauri/src/judge_calibration.rs @@ -17,6 +17,8 @@ const MAX_SAMPLES: usize = 100_000; #[serde(deny_unknown_fields)] pub struct JudgeCalibrationEvidence { pub schema_version: u32, + /// The exact local-model judgment this calibration sample evaluates. + pub judgment_id: String, /// Number of ordered labels: 2 is true/false; values above 2 are polytomous. pub categories: u32, pub model_labels: Vec, @@ -45,6 +47,7 @@ pub struct JudgeCalibrationGate { pub struct JudgeCalibrationResult { pub schema_version: u32, pub engine: String, + pub judgment_id: String, pub categories: u32, pub sample_count: usize, pub passed: bool, @@ -81,6 +84,14 @@ pub fn validate(evidence: &JudgeCalibrationEvidence) -> Result JudgeCalibrationEvidence { JudgeCalibrationEvidence { schema_version: SCHEMA_VERSION, + judgment_id: "a".repeat(64), categories, model_labels: vec![0, 1, 2, 0, 1, 2], human_labels: vec![0, 1, 2, 0, 1, 2], @@ -185,6 +198,12 @@ mod tests { #[test] fn rejects_mismatched_or_out_of_range_labels() { let mut value = evidence(2); + value.judgment_id = "not-a-judgment-id".into(); + assert_eq!( + validate(&value).unwrap_err(), + "judge-calibration-judgment-id-invalid" + ); + value.judgment_id = "a".repeat(64); value.model_labels = vec![0, 1, 0, 1, 0, 1]; value.human_labels[0] = 2; assert_eq!( diff --git a/src/lib/BrewCleanup.svelte b/src/lib/BrewCleanup.svelte index befcae024..905a36adb 100644 --- a/src/lib/BrewCleanup.svelte +++ b/src/lib/BrewCleanup.svelte @@ -34,7 +34,10 @@ function approvalGuidance(): string { if (!judgment || judgment.verdict !== "safe") return ""; - if (judgment.calibration && !judgment.calibration.passed) { + if (!judgment.calibration || judgment.calibration.judgment_id !== judgment.judgment_id) { + return "이 정확한 LLM 판정에 연결된 fast-mlsirm calibration이 필요합니다."; + } + if (!judgment.calibration.passed) { return "fast-mlsirm Judge calibration이 통과하지 않아 실행할 수 없습니다."; } if (confirmationPhrase.trim() !== judgment.exact_approval_phrase) { @@ -49,7 +52,9 @@ function executionReady(): boolean { return judgment !== null && judgment.verdict === "safe" - && (!judgment.calibration || judgment.calibration.passed) + && judgment.calibration !== undefined + && judgment.calibration.judgment_id === judgment.judgment_id + && judgment.calibration.passed && confirmationPhrase.trim() === judgment.exact_approval_phrase && rationale.trim().length > 0 && !executing diff --git a/src/lib/api.test.ts b/src/lib/api.test.ts index 73eb785d3..e5e9f300d 100644 --- a/src/lib/api.test.ts +++ b/src/lib/api.test.ts @@ -51,7 +51,7 @@ describe("api wrappers", () => { [() => api.summarizeUnknownBucket(["/a"]), "summarize_unknown_bucket", { paths: ["/a"] }], [() => api.planBrewCleanup(), "plan_brew_cleanup"], [() => api.judgeBrewCleanup(), "judge_brew_cleanup"], - [() => api.validateJudgeCalibration({ schema_version: 1, categories: 2, model_labels: [0, 1], human_labels: [0, 1] }), "validate_judge_calibration", { evidence: { schema_version: 1, categories: 2, model_labels: [0, 1], human_labels: [0, 1] } }], + [() => api.validateJudgeCalibration({ schema_version: 1, judgment_id: "a".repeat(64), categories: 2, model_labels: [0, 1], human_labels: [0, 1] }), "validate_judge_calibration", { evidence: { schema_version: 1, judgment_id: "a".repeat(64), categories: 2, model_labels: [0, 1], human_labels: [0, 1] } }], [() => api.executeBrewCleanup("a".repeat(64), "b".repeat(64), "DiskSage Homebrew cleanup 승인", "reviewed dry-run"), "execute_brew_cleanup", { planFingerprint: "a".repeat(64), judgmentId: "b".repeat(64), confirmationPhrase: "DiskSage Homebrew cleanup 승인", rationale: "reviewed dry-run" }], [() => api.getSettings(), "get_settings"], [() => api.setSettings(true), "set_settings", { onlineMode: true }], diff --git a/src/lib/api.ts b/src/lib/api.ts index 5985fdfd1..5318c46b6 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -193,6 +193,7 @@ export interface BrewCleanupJudgment { export interface JudgeCalibrationEvidence { schema_version: number; + judgment_id: string; categories: number; model_labels: number[]; human_labels: number[]; @@ -204,6 +205,7 @@ export interface JudgeCalibrationEvidence { export interface JudgeCalibrationResult { schema_version: number; engine: string; + judgment_id: string; categories: number; sample_count: number; passed: boolean; From d09aa51e1f5ca6d790f5e812262909e87b61dd1d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 15 Aug 2026 00:42:24 +0900 Subject: [PATCH 098/691] feat: expose local volume pressure in cloud plans --- src-tauri/src/bin/disksage-cloud-plan.rs | 3 +++ src-tauri/src/cloud.rs | 12 ++++++++++++ src-tauri/src/cloud_plan_view.rs | 7 +++++++ src-tauri/src/naruon_capacity.rs | 1 + src-tauri/src/naruon_cloud_copy_readiness.rs | 1 + src-tauri/src/semantic_catalog.rs | 1 + src/lib/CloudArchive.svelte | 16 ++++++++++++++++ src/lib/api.ts | 18 ++++++++++++++++++ 8 files changed, 59 insertions(+) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index a05446995..933d96b99 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -4338,6 +4338,7 @@ mod tests { potentially_reclaimable_bytes: 42, exact_duplicates: cloud::ExactDuplicateSummary::default(), capacity: None, + local_volume: None, notices: vec!["dry-run-only".into()], }; @@ -4926,6 +4927,7 @@ mod tests { }], }, capacity: None, + local_volume: None, notices: vec!["dry-run-only".into()], }; @@ -5232,6 +5234,7 @@ mod tests { potentially_reclaimable_bytes: 0, exact_duplicates: cloud::ExactDuplicateSummary::default(), capacity: None, + local_volume: None, notices: vec!["dry-run-only".into(), "cloud-quota-unverified".into()], }; diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index 65ddc23d7..1d615c2a0 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -307,6 +307,9 @@ pub struct CloudPlanReport { pub exact_duplicates: ExactDuplicateSummary, #[serde(default, skip_serializing_if = "Option::is_none")] pub capacity: Option, + /// Native source-volume pressure observed while preparing this plan. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub local_volume: Option, pub notices: Vec, } @@ -4896,6 +4899,7 @@ pub fn plan_cloud_archive_from_snapshot( .filter(|c| c.blocked_reason.is_none()) .map(|c| c.bytes) .sum(); + let local_volume = crate::volume_pressure::snapshot_volume(source_root, now_ms).ok(); let mut notices = vec![ "dry-run-only".into(), "cloud-quota-unverified".into(), @@ -4925,6 +4929,7 @@ pub fn plan_cloud_archive_from_snapshot( potentially_reclaimable_bytes, exact_duplicates, capacity: None, + local_volume, notices, } } @@ -5307,6 +5312,13 @@ mod tests { .iter() .all(|candidate| candidate.blocked_reason.as_deref() == Some("source-scan-incomplete"))); assert_eq!(report.potentially_reclaimable_bytes, 0); + assert_eq!( + report + .local_volume + .as_ref() + .map(|snapshot| snapshot.schema_version), + Some(crate::volume_pressure::LOCAL_VOLUME_SNAPSHOT_SCHEMA_VERSION) + ); } #[test] diff --git a/src-tauri/src/cloud_plan_view.rs b/src-tauri/src/cloud_plan_view.rs index e86ce84aa..693e6fd28 100644 --- a/src-tauri/src/cloud_plan_view.rs +++ b/src-tauri/src/cloud_plan_view.rs @@ -12,6 +12,7 @@ use crate::cloud_transfer::{ cloud_copy_approval_phrase, CloudCopyApprovalAction, MAX_CLOUD_COPY_APPROVAL_AGE_MS, }; use crate::provider_capacity::CloudCapacityAssessment; +use crate::volume_pressure::LocalVolumeSnapshot; /// One cloud candidate plus the backend-authored approval presentation for its current state. #[derive(Debug, Clone, serde::Serialize)] @@ -66,6 +67,9 @@ pub struct CloudPlanReportView { /// Authenticated provider capacity evidence when available. #[serde(default, skip_serializing_if = "Option::is_none")] pub capacity: Option, + /// Native source-volume pressure observed while preparing this plan. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub local_volume: Option, /// Stable operator notices produced by the planner and provider gates. pub notices: Vec, } @@ -81,6 +85,7 @@ impl From for CloudPlanReportView { potentially_reclaimable_bytes, exact_duplicates, capacity, + local_volume, notices, } = report; Self { @@ -95,6 +100,7 @@ impl From for CloudPlanReportView { potentially_reclaimable_bytes, exact_duplicates, capacity, + local_volume, notices, } } @@ -203,6 +209,7 @@ mod tests { potentially_reclaimable_bytes: 4096, exact_duplicates: ExactDuplicateSummary::default(), capacity: None, + local_volume: None, notices: vec!["cloud-quota-provider-native-verified".into()], }; let view = CloudPlanReportView::from(report); diff --git a/src-tauri/src/naruon_capacity.rs b/src-tauri/src/naruon_capacity.rs index a2dac5e70..3bb914309 100644 --- a/src-tauri/src/naruon_capacity.rs +++ b/src-tauri/src/naruon_capacity.rs @@ -259,6 +259,7 @@ mod tests { potentially_reclaimable_bytes: 100, exact_duplicates: ExactDuplicateSummary::default(), capacity: Some(assess_capacity(snapshot, 100, 0, 10)), + local_volume: None, notices: Vec::new(), } } diff --git a/src-tauri/src/naruon_cloud_copy_readiness.rs b/src-tauri/src/naruon_cloud_copy_readiness.rs index 4f6bea9fe..4062151fe 100644 --- a/src-tauri/src/naruon_cloud_copy_readiness.rs +++ b/src-tauri/src/naruon_cloud_copy_readiness.rs @@ -1145,6 +1145,7 @@ mod tests { 42, DEFAULT_CAPACITY_RESERVE_BYTES, )), + local_volume: None, notices: Vec::new(), } } diff --git a/src-tauri/src/semantic_catalog.rs b/src-tauri/src/semantic_catalog.rs index e42b61bdb..b58fc80dc 100644 --- a/src-tauri/src/semantic_catalog.rs +++ b/src-tauri/src/semantic_catalog.rs @@ -472,6 +472,7 @@ mod tests { candidates, exact_duplicates: ExactDuplicateSummary::default(), capacity: None, + local_volume: None, notices: vec!["dry-run-only".into()], } } diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 5158ec6d8..4cd34d363 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -32,6 +32,15 @@ return notices.includes("source-scan-incomplete"); } + function localPressureLabel(pressure: api.LocalVolumePressure): string { + return { + normal: "정상", + elevated: "상승", + high: "높음", + critical: "위험", + }[pressure]; + } + let { scannedRoot }: { scannedRoot: string | null } = $props(); let roots: api.CloudRoot[] = $state([]); @@ -875,6 +884,13 @@ 스캔 범위를 줄이거나 조건을 높여 전체 스캔을 다시 실행해야 합니다.

{/if} + {#if report.local_volume} +

+ 원본 볼륨 압력: {localPressureLabel(report.local_volume.pressure)} · 사용 가능 + {fmtBytes(report.local_volume.available_bytes)} + ({(report.local_volume.available_basis_points / 100).toFixed(2)}%) +

+ {/if} {#if report.capacity} {#if report.capacity.can_fit === true}

diff --git a/src/lib/api.ts b/src/lib/api.ts index 5318c46b6..6887b39f8 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -597,9 +597,27 @@ export interface CloudPlanReport { potentially_reclaimable_bytes: number; exact_duplicates: ExactDuplicateSummary; capacity?: CloudCapacityAssessment; + local_volume?: LocalVolumeSnapshot; notices: string[]; } +export type LocalVolumePressure = "normal" | "elevated" | "high" | "critical"; + +export interface LocalVolumeSnapshot { + schema_version: number; + observed_at_ms: number; + total_bytes: number; + free_bytes: number; + available_bytes: number; + used_bytes: number; + available_basis_points: number; + allocation_granularity_bytes: number; + pressure: LocalVolumePressure; + evidence_kind: string; + limitations: string[]; + evidence_fingerprint: string; +} + export interface IcloudSyncHealthReport { observed_at_ms: number; evidence_complete: boolean; From 809823682d31841d8fd51e2e2e3f967281f07b5b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 15 Aug 2026 01:21:44 +0900 Subject: [PATCH 099/691] test: prove pending icloud upload blocks eviction --- src-tauri/src/provider_sync.rs | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src-tauri/src/provider_sync.rs b/src-tauri/src/provider_sync.rs index d25f928c0..54c2f2387 100644 --- a/src-tauri/src/provider_sync.rs +++ b/src-tauri/src/provider_sync.rs @@ -969,6 +969,15 @@ mod tests { .unwrap(); assert_eq!(evidence.sync_state, ProviderSyncState::PendingUpload); assert!(!evidence.sync_complete); + + let mut record_evidence = evidence.clone(); + record_evidence.receipt_id = "a".repeat(64); + record_evidence.destination_blake3 = "b".repeat(64); + let record = crate::provider_evidence::create_sync_evidence_record(&record_evidence) + .unwrap(); + let blockers = crate::cloud_transfer::approve_local_eviction(&receipt, &record) + .expect_err("pending iCloud upload must not issue an eviction permit"); + assert!(blockers.contains(&"provider-sync-incomplete".to_string())); } #[test] From 247e7bf84d38ca8f73a869635d85ff77b73ff715 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:32:42 +0900 Subject: [PATCH 100/691] test: reproduce node-view symlink escape --- src-tauri/src/node_view_security_tests.rs | 33 +++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 src-tauri/src/node_view_security_tests.rs diff --git a/src-tauri/src/node_view_security_tests.rs b/src-tauri/src/node_view_security_tests.rs new file mode 100644 index 000000000..536816c9a --- /dev/null +++ b/src-tauri/src/node_view_security_tests.rs @@ -0,0 +1,33 @@ +//! Security regressions for scan-tree navigation. +//! +//! These tests exercise the same filesystem boundary as the Tauri `get_node` command without +//! introducing GUI/runtime dependencies. A lexical descendant is not sufficient authority: the +//! final directory object must still resolve within the canonical scanned root. + +use crate::{commands, scanner}; +use std::sync::atomic::AtomicBool; + +#[cfg(unix)] +#[test] +fn node_view_rejects_final_directory_symlink_escape() { + let scanned = tempfile::tempdir().expect("temporary scan root"); + let external = tempfile::tempdir().expect("temporary external root"); + std::fs::write(external.path().join("outside-secret.bin"), b"outside") + .expect("write external fixture"); + + let escape = scanned.path().join("escape"); + std::os::unix::fs::symlink(external.path(), &escape).expect("create directory symlink"); + + let result = scanner::scan_dir_with_interval( + scanned.path(), + &AtomicBool::new(false), + 1, + |_| {}, + ); + + let view = commands::node_view(&result, &escape); + assert!( + view.is_err(), + "a final directory symlink below the lexical root must not expose metadata outside the scanned root" + ); +} From 760322e6ce52210cba8b42800caf74c6da774ab3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:33:06 +0900 Subject: [PATCH 101/691] test: enable node-view symlink escape regression --- src-tauri/src/lib.rs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 7df7476b5..108b46474 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -18,6 +18,8 @@ mod settings; mod safety; #[cfg(all(test, target_os = "macos"))] mod macos_temp_guard_tests; +#[cfg(all(test, unix))] +mod node_view_security_tests; #[cfg_attr(coverage, allow(dead_code))] mod rules; #[cfg_attr(coverage, allow(dead_code))] From 2f87e3d06bc00107c5ddd7572d42cd54b4194925 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:35:39 +0900 Subject: [PATCH 102/691] fix: add identity-aware node navigation --- src-tauri/src/node_navigation.rs | 190 +++++++++++++++++++++++++++++++ 1 file changed, 190 insertions(+) create mode 100644 src-tauri/src/node_navigation.rs diff --git a/src-tauri/src/node_navigation.rs b/src-tauri/src/node_navigation.rs new file mode 100644 index 000000000..6104fd8b9 --- /dev/null +++ b/src-tauri/src/node_navigation.rs @@ -0,0 +1,190 @@ +//! Identity-aware, read-only scan-tree navigation. +//! +//! The UI passes a path selected from a prior scan. Lexical ancestry alone is not sufficient +//! authority because a final directory symlink or reparse path can still resolve outside the +//! scanned root. This module canonicalizes the scanned root and requested directory immediately +//! before enumeration, then requires the requested object to remain within that canonical root. +//! It never mutates the filesystem. + +use crate::commands::{AppState, EntryView, NodeView}; +use crate::scanner::ScanResult; +use std::path::{Component, Path, PathBuf}; + +const OUTSIDE_ROOT: &str = "path outside scanned root"; + +fn canonical_navigation_path(res: &ScanResult, path: &Path) -> Result { + if path.components().any(|component| matches!(component, Component::ParentDir)) { + return Err(OUTSIDE_ROOT.into()); + } + if !path.starts_with(&res.root) { + return Err(OUTSIDE_ROOT.into()); + } + + let canonical_root = std::fs::canonicalize(&res.root).map_err(|_| OUTSIDE_ROOT.to_string())?; + let canonical_path = std::fs::canonicalize(path).map_err(|_| OUTSIDE_ROOT.to_string())?; + if canonical_path != canonical_root && !canonical_path.starts_with(&canonical_root) { + return Err(OUTSIDE_ROOT.into()); + } + Ok(canonical_path) +} + +fn entry_is_link_or_reparse(path: &Path, file_type: &std::fs::FileType) -> bool { + if file_type.is_symlink() { + return true; + } + #[cfg(windows)] + { + use std::os::windows::fs::MetadataExt; + const FILE_ATTRIBUTE_REPARSE_POINT: u32 = 0x400; + return std::fs::symlink_metadata(path) + .map(|metadata| metadata.file_attributes() & FILE_ATTRIBUTE_REPARSE_POINT != 0) + .unwrap_or(true); + } + #[cfg(not(windows))] + { + let _ = path; + false + } +} + +/// Return one level of scan navigation only when the requested directory resolves inside the +/// canonical scanned root. +pub(crate) fn node_view(res: &ScanResult, path: &Path) -> Result { + let canonical_path = canonical_navigation_path(res, path)?; + let mut entries = Vec::new(); + for entry in std::fs::read_dir(&canonical_path).map_err(|_| "node directory unavailable".to_string())? { + let Ok(entry) = entry else { continue }; + let Ok(file_type) = entry.file_type() else { continue }; + let entry_path = entry.path(); + if entry_is_link_or_reparse(&entry_path, &file_type) { + continue; + } + let (size, is_dir) = if file_type.is_dir() { + ( + res.dir_sizes + .get(&entry_path) + .copied() + .unwrap_or_default(), + true, + ) + } else { + ( + std::fs::symlink_metadata(&entry_path) + .map(|metadata| metadata.len()) + .unwrap_or_default(), + false, + ) + }; + entries.push(EntryView { + name: entry.file_name().to_string_lossy().into_owned(), + path: entry_path.to_string_lossy().into_owned(), + size, + is_dir, + }); + } + entries.sort_by(|left, right| right.size.cmp(&left.size)); + Ok(NodeView { + path: path.to_string_lossy().into_owned(), + size: res + .dir_sizes + .get(&canonical_path) + .or_else(|| res.dir_sizes.get(path)) + .copied() + .unwrap_or_default(), + entries, + }) +} + +/// Tauri boundary for identity-aware node navigation. +#[cfg(not(coverage))] +#[tauri::command] +pub(crate) fn get_node(path: String, state: tauri::State<'_, AppState>) -> Result { + let guard = state + .result + .lock() + .map_err(|_| "scan result lock unavailable".to_string())?; + let result = guard.as_ref().ok_or_else(|| "no scan result".to_string())?; + node_view(result, &PathBuf::from(path)) +} + +#[cfg(test)] +mod tests { + use super::*; + use crate::scanner::scan_dir_with_interval; + use std::sync::atomic::AtomicBool; + + fn scan(root: &Path) -> ScanResult { + scan_dir_with_interval(root, &AtomicBool::new(false), 1, |_| {}) + } + + #[test] + fn legitimate_descendant_lists_entries_sorted_by_size() { + let root = tempfile::tempdir().unwrap(); + std::fs::create_dir(root.path().join("sub")).unwrap(); + std::fs::write(root.path().join("sub").join("large.bin"), vec![0u8; 32]).unwrap(); + std::fs::write(root.path().join("small.bin"), vec![0u8; 4]).unwrap(); + let result = scan(root.path()); + + let view = node_view(&result, root.path()).unwrap(); + assert_eq!(view.entries.len(), 2); + assert_eq!(view.entries[0].name, "sub"); + assert!(view.entries[0].is_dir); + } + + #[test] + fn lexical_parent_component_is_rejected() { + let root = tempfile::tempdir().unwrap(); + let result = scan(root.path()); + assert_eq!( + canonical_navigation_path(&result, &root.path().join("..")), + Err(OUTSIDE_ROOT.to_string()) + ); + } + + #[test] + fn lexical_sibling_is_rejected() { + let root = tempfile::tempdir().unwrap(); + let sibling = tempfile::tempdir().unwrap(); + let result = scan(root.path()); + assert_eq!( + canonical_navigation_path(&result, sibling.path()), + Err(OUTSIDE_ROOT.to_string()) + ); + } + + #[test] + fn missing_navigation_target_fails_closed() { + let root = tempfile::tempdir().unwrap(); + let result = scan(root.path()); + assert_eq!( + canonical_navigation_path(&result, &root.path().join("missing")), + Err(OUTSIDE_ROOT.to_string()) + ); + } + + #[cfg(unix)] + #[test] + fn final_symlink_escape_is_rejected() { + let root = tempfile::tempdir().unwrap(); + let external = tempfile::tempdir().unwrap(); + std::fs::write(external.path().join("secret.bin"), b"outside").unwrap(); + let escape = root.path().join("escape"); + std::os::unix::fs::symlink(external.path(), &escape).unwrap(); + let result = scan(root.path()); + + assert_eq!(node_view(&result, &escape).err().as_deref(), Some(OUTSIDE_ROOT)); + } + + #[cfg(unix)] + #[test] + fn child_symlink_entries_remain_hidden() { + let root = tempfile::tempdir().unwrap(); + std::fs::write(root.path().join("real.bin"), b"inside").unwrap(); + std::os::unix::fs::symlink(root.path().join("real.bin"), root.path().join("linked.bin")) + .unwrap(); + let result = scan(root.path()); + + let view = node_view(&result, root.path()).unwrap(); + assert!(view.entries.iter().all(|entry| entry.name != "linked.bin")); + } +} From 4fdc7a604bbd7d0cad7ed9ebcdc939d35d80766c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:35:59 +0900 Subject: [PATCH 103/691] fix: route node navigation through canonical-root guard --- src-tauri/src/lib.rs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 108b46474..4033fb05b 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -7,6 +7,8 @@ mod dupes; #[cfg_attr(coverage, allow(dead_code))] mod commands; #[cfg_attr(coverage, allow(dead_code))] +mod node_navigation; +#[cfg_attr(coverage, allow(dead_code))] mod cache_cleanup; #[cfg_attr(coverage, allow(dead_code))] mod scanner; @@ -96,7 +98,7 @@ pub fn run() { commands::list_roots, commands::start_scan, commands::cancel_scan, - commands::get_node, + node_navigation::get_node, commands::top_files, commands::list_cache_candidates, cache_cleanup::list_cache_targets, From a0f51379e23a43da775f7d0a1ced1cd5aaa9e893 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:36:08 +0900 Subject: [PATCH 104/691] test: bind symlink escape regression to registered navigator --- src-tauri/src/node_view_security_tests.rs | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src-tauri/src/node_view_security_tests.rs b/src-tauri/src/node_view_security_tests.rs index 536816c9a..586d87455 100644 --- a/src-tauri/src/node_view_security_tests.rs +++ b/src-tauri/src/node_view_security_tests.rs @@ -1,10 +1,10 @@ //! Security regressions for scan-tree navigation. //! -//! These tests exercise the same filesystem boundary as the Tauri `get_node` command without -//! introducing GUI/runtime dependencies. A lexical descendant is not sufficient authority: the -//! final directory object must still resolve within the canonical scanned root. +//! These tests exercise the same filesystem boundary as the registered Tauri `get_node` command +//! without introducing GUI/runtime dependencies. A lexical descendant is not sufficient authority: +//! the final directory object must still resolve within the canonical scanned root. -use crate::{commands, scanner}; +use crate::{node_navigation, scanner}; use std::sync::atomic::AtomicBool; #[cfg(unix)] @@ -25,7 +25,7 @@ fn node_view_rejects_final_directory_symlink_escape() { |_| {}, ); - let view = commands::node_view(&result, &escape); + let view = node_navigation::node_view(&result, &escape); assert!( view.is_err(), "a final directory symlink below the lexical root must not expose metadata outside the scanned root" From 5f42bda4c607fb4afd9d3e84cbc5e6db68948e22 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:47:50 +0900 Subject: [PATCH 105/691] test: require feedback for empty cache cleanup targets --- src/lib/cacheCleanupFlowContract.test.ts | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/lib/cacheCleanupFlowContract.test.ts b/src/lib/cacheCleanupFlowContract.test.ts index 22dfe295f..095859a71 100644 --- a/src/lib/cacheCleanupFlowContract.test.ts +++ b/src/lib/cacheCleanupFlowContract.test.ts @@ -24,4 +24,12 @@ describe("cache cleanup execution boundary", () => { expect(tauri).toContain("cache_cleanup::clean_cache_contents"); expect(tauri).toContain("cache_cleanup::list_cache_targets"); }); + + it("surfaces an actionable status when a cache candidate has no direct cleanup targets", () => { + const cleanup = readSource("src/lib/Cleanup.svelte"); + + expect(cleanup).toMatch( + /if \(targets\.length === 0\) \{[\s\S]*loadError = `\$\{candidate\.label\}에 정리할 직계 항목이 없습니다\.`;[\s\S]*return;/, + ); + }); }); From e0c9b14505b3c4fca146e211d3d20bf997d2cc42 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 20:48:40 +0900 Subject: [PATCH 106/691] fix: surface empty cache cleanup targets --- src/lib/Cleanup.svelte | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/lib/Cleanup.svelte b/src/lib/Cleanup.svelte index e2fafa969..31942990b 100644 --- a/src/lib/Cleanup.svelte +++ b/src/lib/Cleanup.svelte @@ -45,7 +45,10 @@ cacheRetryMessage = ""; try { const targets = await api.listCacheTargets(candidate.path); - if (targets.length === 0) return; + if (targets.length === 0) { + loadError = `${candidate.label}에 정리할 직계 항목이 없습니다.`; + return; + } const targetBytes = targets.reduce((sum, target) => sum + target.bytes, 0); const okay = await confirm( `${candidate.label}의 직계 캐시 ${targets.length}개(${fmtBytes(targetBytes)})를 휴지통으로 보냅니다.\n\n` + From a6eaf8882bb37bbe9db6a42e5193a4825b20a3b9 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sun, 16 Aug 2026 22:25:25 +0900 Subject: [PATCH 107/691] fix: disambiguate hardened get_node command --- src-tauri/src/lib.rs | 2 +- src-tauri/src/node_navigation.rs | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 4033fb05b..58d0813f7 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -98,7 +98,7 @@ pub fn run() { commands::list_roots, commands::start_scan, commands::cancel_scan, - node_navigation::get_node, + node_navigation::get_node_secure, commands::top_files, commands::list_cache_candidates, cache_cleanup::list_cache_targets, diff --git a/src-tauri/src/node_navigation.rs b/src-tauri/src/node_navigation.rs index 6104fd8b9..3fae4feca 100644 --- a/src-tauri/src/node_navigation.rs +++ b/src-tauri/src/node_navigation.rs @@ -97,8 +97,11 @@ pub(crate) fn node_view(res: &ScanResult, path: &Path) -> Result) -> Result { +#[tauri::command(rename = "get_node")] +pub(crate) fn get_node_secure( + path: String, + state: tauri::State<'_, AppState>, +) -> Result { let guard = state .result .lock() From bec87f1e182d4c14d59f325480cca4eb39114ac6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 02:32:18 +0900 Subject: [PATCH 108/691] test: require absolute fail-closed home resolution --- src-tauri/tests/home_resolution_contract.rs | 51 +++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 src-tauri/tests/home_resolution_contract.rs diff --git a/src-tauri/tests/home_resolution_contract.rs b/src-tauri/tests/home_resolution_contract.rs new file mode 100644 index 000000000..82019420f --- /dev/null +++ b/src-tauri/tests/home_resolution_contract.rs @@ -0,0 +1,51 @@ +#[path = "../src/home_resolution.rs"] +mod home_resolution; + +use std::path::PathBuf; + +fn absolute_fixture(name: &str) -> PathBuf { + if cfg!(windows) { + PathBuf::from(format!(r"C:\{name}")) + } else { + PathBuf::from(format!("/{name}")) + } +} + +#[test] +fn home_resolution_skips_relative_candidates() { + let expected = absolute_fixture("users/disksage"); + let resolved = home_resolution::select_absolute_home([ + Some(PathBuf::from("relative-app-home")), + Some(PathBuf::from("relative-home-env")), + Some(expected.clone()), + ]) + .expect("an absolute candidate should be selected"); + + assert_eq!(resolved, expected); + assert!(resolved.is_absolute()); +} + +#[test] +fn home_resolution_fails_closed_when_every_candidate_is_relative_or_missing() { + let error = home_resolution::select_absolute_home([ + None, + Some(PathBuf::from(".")), + Some(PathBuf::from("relative-user-profile")), + ]) + .expect_err("relative home candidates must never become path authority"); + + assert_eq!(error, "home-directory-unavailable"); +} + +#[test] +fn home_resolution_preserves_first_absolute_candidate_precedence() { + let app_home = absolute_fixture("app-home"); + let env_home = absolute_fixture("env-home"); + let resolved = home_resolution::select_absolute_home([ + Some(app_home.clone()), + Some(env_home), + ]) + .expect("the first absolute home candidate should win"); + + assert_eq!(resolved, app_home); +} From 2d88d6d5d9a11cc7d57c9bde91feabeddcbe01e0 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 02:32:30 +0900 Subject: [PATCH 109/691] fix: add fail-closed absolute home selector --- src-tauri/src/home_resolution.rs | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 src-tauri/src/home_resolution.rs diff --git a/src-tauri/src/home_resolution.rs b/src-tauri/src/home_resolution.rs new file mode 100644 index 000000000..aaed2281a --- /dev/null +++ b/src-tauri/src/home_resolution.rs @@ -0,0 +1,26 @@ +use std::path::PathBuf; + +/// Select the first absolute home-directory candidate and fail closed when none are usable. +/// +/// Callers may supply platform API results and native environment fallbacks in precedence order. +/// Relative values such as `.` are never accepted as path authority because they would make +/// `~/...` destinations depend on the process working directory. +pub(crate) fn select_absolute_home( + candidates: impl IntoIterator>, +) -> Result { + candidates + .into_iter() + .flatten() + .find(|candidate| candidate.is_absolute()) + .ok_or_else(|| "home-directory-unavailable".to_string()) +} + +/// Build the Windows HOMEDRIVE + HOMEPATH fallback without lossy UTF-8 conversion. +#[cfg(windows)] +pub(crate) fn windows_home_drive_path() -> Option { + let drive = std::env::var_os("HOMEDRIVE")?; + let path = std::env::var_os("HOMEPATH")?; + let mut combined = PathBuf::from(drive); + combined.push(path); + combined.is_absolute().then_some(combined) +} From 10da2296d5ae69d1e82fcb0df4826421592f14ce Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 02:37:29 +0900 Subject: [PATCH 110/691] fix: fail closed when home directory is unavailable --- src-tauri/src/commands.rs | 224 +++++++++----------------------------- 1 file changed, 53 insertions(+), 171 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 50b422523..5b0de9855 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -24,6 +24,10 @@ use crate::{ provider_global_sync, provider_oauth, provider_sync, rules, }; +#[cfg(not(coverage))] +#[path = "home_resolution.rs"] +mod home_resolution; + #[derive(Default)] pub struct AppState { pub result: Arc>>, @@ -302,10 +306,6 @@ fn user_rules_json(app: &AppHandle) -> String { #[cfg(not(coverage))] fn bundled_ontology_ttl(app: &AppHandle) -> Result { use tauri::Manager; - // 사용자 설정 디렉토리 오버라이드 우선, 없으면 번들 리소스. - // 오버라이드 파일이 없으면(read 실패) 조용히 번들로 폴백하지만, 파일이 있어도 - // parse가 실패하면(malformed) 상위 load_ontology_from이 에러를 낸다 — 의도적: - // 사용자가 편집한 잘못된 온톨로지를 조용히 무시하지 않고 알린다. if let Ok(dir) = app.path().app_config_dir() { let user_ttl = dir.join("ontology.ttl"); if let Ok(s) = std::fs::read_to_string(&user_ttl) { @@ -355,7 +355,6 @@ fn settings_file_path(app: &AppHandle) -> Result { Ok(dir.join("settings.json")) } -/// 현재 설정 조회. 파일 없으면 기본값(offline). 손상 파일은 parse_settings가 기본값으로 흡수. #[cfg(not(coverage))] #[tauri::command] pub fn get_settings(app: AppHandle) -> Result { @@ -366,7 +365,6 @@ pub fn get_settings(app: AppHandle) -> Result } } -/// online_mode 설정 후 영속. 반환은 저장된 설정. #[cfg(not(coverage))] #[tauri::command] pub fn set_settings( @@ -379,7 +377,6 @@ pub fn set_settings( Ok(s) } -// 아래 Tauri command 래퍼들은 coverage 빌드에서 제외 — 순수 로직(node_view 등)은 위에서 측정됨 #[cfg(not(coverage))] #[tauri::command] pub fn start_scan(root: String, app: AppHandle, state: State) -> Result<(), String> { @@ -391,7 +388,6 @@ pub fn start_scan(root: String, app: AppHandle, state: State) -> Resul let slot = state.result.clone(); let scanning = state.scanning.clone(); std::thread::spawn(move || { - // 패닉으로 스레드가 죽어도 scanning 플래그는 반드시 해제 struct ScanningReset(Arc); impl Drop for ScanningReset { fn drop(&mut self) { @@ -403,8 +399,8 @@ pub fn start_scan(root: String, app: AppHandle, state: State) -> Resul let _ = app.emit("scan://progress", s.clone()); }); let stats = res.stats.clone(); - *slot.lock().unwrap() = Some(res); // done 이벤트 전에 저장 (레이스 방지) - drop(_reset); // emit 전에 scanning 플래그 해제 (원래 순서 복원, 패닉 안전성은 Drop이 유지) + *slot.lock().unwrap() = Some(res); + drop(_reset); let _ = app.emit("scan://done", stats); }); Ok(()) @@ -419,7 +415,6 @@ pub fn cancel_scan(state: State) { #[cfg(not(coverage))] #[tauri::command] pub fn get_node(path: String, state: State) -> Result { - // ponytail: lock held across read_dir I/O; snapshot dir_sizes and read outside the lock if this stalls on huge/network dirs let guard = state.result.lock().unwrap(); let res = guard.as_ref().ok_or("no scan result")?; node_view(res, &PathBuf::from(path)) @@ -474,15 +469,12 @@ fn valid_brew_rationale(value: &str) -> bool { && !trimmed.chars().any(char::is_control) } -/// Build a read-only Homebrew cleanup plan. The command is macOS-only and fixed in Rust. #[cfg(not(coverage))] #[tauri::command(async)] pub fn plan_brew_cleanup() -> Result { brew_cleanup::plan(now_ms()) } -/// Ask the verified local model whether the fixed cleanup is appropriate. -/// A non-safe judgment is returned to the UI but is never stored as execution authority. #[cfg(not(coverage))] #[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] #[tauri::command(async)] @@ -536,10 +528,6 @@ pub fn judge_brew_cleanup( } } -/// Validate a binary or polytomous local-model judge against attributed human labels. -/// -/// The agreement arithmetic is delegated to fast-mlsirm's Rust core; this command never calls an -/// external model and never grants command execution authority by itself. #[cfg(not(coverage))] #[tauri::command] pub fn validate_judge_calibration( @@ -563,7 +551,6 @@ pub fn validate_judge_calibration( Ok(result) } -/// Re-plan immediately before running Homebrew, then consume the matching safe judgment once. #[cfg(not(coverage))] #[tauri::command(async)] pub fn execute_brew_cleanup( @@ -708,7 +695,6 @@ pub fn recent_operations( #[cfg(not(coverage))] #[tauri::command] pub fn expand_clean_targets(dir: String) -> Vec { - // 카탈로그 경로로만 스코프 — 임의 디렉토리 열람 IPC가 되지 않도록 let Some(bases) = rules::BaseDirs::from_env() else { return Vec::new(); }; @@ -729,37 +715,41 @@ pub fn find_duplicate_files(root: String) -> Result, Strin Ok(dupes::find_duplicates(files, 4096)) } -/// home 해석: app.path().home_dir() 우선, 실패 시 HOME/USERPROFILE 환경변수 폴백. +/// Resolve a real absolute home directory or fail closed. Relative environment values are never +/// accepted as path authority because they would make `~/...` destinations depend on the process +/// working directory. #[cfg(not(coverage))] -fn resolve_home(app: &AppHandle) -> PathBuf { +fn resolve_home(app: &AppHandle) -> Result { use tauri::Manager; - app.path() - .home_dir() - .ok() - .or_else(|| std::env::var("HOME").ok().map(PathBuf::from)) - .or_else(|| std::env::var("USERPROFILE").ok().map(PathBuf::from)) - .unwrap_or_else(|| PathBuf::from(".")) + let app_home = app.path().home_dir().ok(); + let home_env = std::env::var_os("HOME").map(PathBuf::from); + let user_profile = std::env::var_os("USERPROFILE").map(PathBuf::from); + #[cfg(windows)] + let drive_home = home_resolution::windows_home_drive_path(); + #[cfg(not(windows))] + let drive_home: Option = None; + + home_resolution::select_absolute_home([app_home, home_env, user_profile, drive_home]) } -/// Candidate local roots exposed by iCloud Drive, OneDrive, and Google Drive, including their -/// discovery-time readability evidence. #[cfg(not(coverage))] #[tauri::command] -pub fn list_cloud_roots(app: AppHandle) -> Vec { - cloud::discover_cloud_roots(&resolve_home(&app)) +pub fn list_cloud_roots(app: AppHandle) -> Result, String> { + let home = resolve_home(&app)?; + Ok(cloud::discover_cloud_roots(&home)) } -/// Return selectable roots together with bounded provider/account discovery failures. This does -/// not create a probe file, hydrate a placeholder, or contact a provider API. #[cfg(not(coverage))] #[tauri::command] -pub fn inspect_cloud_roots(app: AppHandle) -> cloud::CloudRootDiscoveryReport { - cloud::discover_cloud_roots_report(&resolve_home(&app)) +pub fn inspect_cloud_roots(app: AppHandle) -> Result { + let home = resolve_home(&app)?; + Ok(cloud::discover_cloud_roots_report(&home)) } #[cfg(not(coverage))] fn selected_cloud_root(app: &AppHandle, cloud_root: &str) -> Result { - let matches: Vec<_> = cloud::discover_cloud_roots(&resolve_home(app)) + let home = resolve_home(app)?; + let matches: Vec<_> = cloud::discover_cloud_roots(&home) .into_iter() .filter(|candidate| { cloud::cloud_root_path_matches(Path::new(&candidate.path), Path::new(cloud_root)) @@ -772,8 +762,6 @@ fn selected_cloud_root(app: &AppHandle, cloud_root: &str) -> Result, } -/// Rebuild and approve the exact plan, request removal of only the local iCloud copy, then retain -/// immutable approval/result records. The cloud object is never deleted by this command. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn evict_icloud_local_copy( @@ -890,7 +876,6 @@ pub async fn evict_icloud_local_copy( .map_err(|_| "icloud-local-eviction-task-failed".to_string())? } -/// Build a read-only, reference-bound audit of all worktrees in one Git common directory. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn plan_stale_git_worktrees( @@ -921,8 +906,6 @@ pub struct StaleGitWorktreeRemovalOutput { pub result_record_error: Option, } -/// Rebuild the exact audit, bind an attributed human approval, and remove only worktrees that -/// remain clean, merged, idle, and fingerprint-identical. Branch deletion and prune are excluded. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn remove_stale_git_worktrees( @@ -1015,8 +998,6 @@ fn cloud_review_directory(app: &AppHandle) -> Result { .map_err(|_| "app-data-directory-unavailable".to_string()) } -/// Return non-secret OAuth connection descriptors. Refresh tokens remain in the OS credential -/// store and this command never reads or returns them. #[cfg(not(coverage))] #[tauri::command] pub fn list_cloud_provider_connections( @@ -1025,7 +1006,6 @@ pub fn list_cloud_provider_connections( provider_oauth::load_connections(&oauth_connections_path(&app)?) } -/// Return only the latest non-secret approve/hold decision for each candidate fingerprint. #[cfg(not(coverage))] #[tauri::command] pub fn list_cloud_review_decisions( @@ -1034,9 +1014,6 @@ pub fn list_cloud_review_decisions( cloud_review::load_latest_decisions(&cloud_review_directory(&app)?) } -/// Start a native browser authorization-code flow with PKCE and a random loopback port. The -/// provider refresh token is committed to the OS credential store only after state validation and -/// a successful token exchange. Client IDs are public desktop-app identifiers, not secrets. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn connect_cloud_provider( @@ -1068,8 +1045,6 @@ pub async fn connect_cloud_provider( .map_err(|_| "provider-oauth-task-failed".to_string())? } -/// Remove the selected root's refresh token from the OS credential store and its non-secret local -/// connection descriptor. This does not alter any cloud file. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn disconnect_cloud_provider(cloud_root: String, app: AppHandle) -> Result<(), String> { @@ -1085,11 +1060,6 @@ pub async fn disconnect_cloud_provider(cloud_root: String, app: AppHandle) -> Re .map_err(|_| "provider-oauth-task-failed".to_string())? } -/// Revalidate a saved provider connection after launch without exposing access or refresh tokens. -/// -/// This is deliberately opt-in because it reads the OS credential store and contacts the fixed -/// provider capacity endpoint. Failures are returned as redacted, stable capacity evidence rather -/// than raw OAuth or transport details. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn verify_cloud_provider_capacity( @@ -1145,8 +1115,6 @@ pub async fn verify_cloud_provider_capacity( Ok(snapshot) } -/// Inspect the selected provider's local runtime prerequisite without returning process names, -/// local paths, account identifiers, or any remote-capacity/synchronization claim. #[cfg(not(coverage))] #[tauri::command] pub fn inspect_cloud_provider_client_runtime( @@ -1161,22 +1129,15 @@ pub fn inspect_cloud_provider_client_runtime( )) } -/// Inspect the local, path-free iCloud upload-queue prerequisite for adding a new copy. -/// -/// This reads only an immutable CloudDocs database snapshot. It does not contact iCloud, verify -/// remote capacity, attest per-item upload, or authorize source eviction. #[cfg(not(coverage))] #[tauri::command] pub fn inspect_icloud_new_copy_admission( app: AppHandle, ) -> Result { - icloud_sync_health::inspect_new_copy_admission(&resolve_home(&app), cloud::system_now_ms()) + let home = resolve_home(&app)?; + icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()) } -/// Inspect the provider-wide File Provider queue for a non-iCloud cloud root. -/// -/// This is read-only aggregate evidence. It never returns user paths and never authorizes a copy -/// or source eviction; iCloud continues to use its specialized CloudDocs health command above. #[cfg(not(coverage))] #[tauri::command] pub fn inspect_cloud_provider_global_sync( @@ -1210,7 +1171,8 @@ fn cloud_plan_for_inputs( ) -> Result { let root_path = PathBuf::from(root); cloud::validate_source_root_readable(&root_path)?; - let discovered = cloud::discover_cloud_roots(&resolve_home(app)); + let home = resolve_home(app)?; + let discovered = cloud::discover_cloud_roots(&home); let selected = discovered .iter() .find(|candidate| candidate.path == cloud_root) @@ -1260,11 +1222,7 @@ fn cloud_plan_for_inputs( provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); let (icloud_health, provider_global_sync) = if selected.provider == cloud::CloudProvider::Icloud { - let health = icloud_sync_health::inspect_new_copy_admission( - &resolve_home(app), - cloud::system_now_ms(), - ) - .ok(); + let health = icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()).ok(); icloud_sync_health::attach_new_copy_admission_notice(&mut report.notices, health.as_ref()); (health, None) } else { @@ -1371,9 +1329,6 @@ fn require_capacity_for_copy( } } -/// Read-only cloud offload plan. The selected destination must be one of the roots discovered -/// on this machine; this command never creates a folder or moves a file. Candidate approval text -/// is generated by Rust and returned as presentation evidence, never reconstructed by the UI. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn plan_cloud_archive( @@ -1393,8 +1348,6 @@ pub async fn plan_cloud_archive( .map_err(|_| "cloud-plan-task-failed".to_string())? } -/// Rebuild the plan and append an immutable approve/hold decision for the exact evidence shown by -/// the UI. A stale UI cannot approve a changed metadata snapshot. #[cfg(not(coverage))] fn local_human_reviewer() -> String { let raw = std::env::var(if cfg!(windows) { "USERNAME" } else { "USER" }) @@ -1785,7 +1738,8 @@ fn create_cloud_candidate_provider_api_receipt( } }; let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; - let cloud_roots = cloud::discover_cloud_roots(&resolve_home(app)); + let home = resolve_home(app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); let attestation_object_id = (selected.provider == cloud::CloudProvider::GoogleDrive) .then(|| upload.object_id.clone()); match collect_cloud_attestation_for_receipt( @@ -1845,8 +1799,6 @@ fn create_cloud_candidate_provider_api_receipt( }) } -/// Rebuild the plan from current metadata, then copy one uniquely matching safe candidate. -/// The source is retained and no local-eviction API is exposed by this command. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn copy_cloud_candidate( @@ -1883,9 +1835,6 @@ pub async fn copy_cloud_candidate( .map_err(|_| "cloud-copy-task-failed".to_string())? } -/// Upload one approved candidate directly through the provider API when the local File Provider -/// cannot admit a new copy. The source is retained; the normal provider attestation and eviction -/// gates still run afterwards. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn copy_cloud_candidate_via_provider_api( @@ -1921,8 +1870,6 @@ pub async fn copy_cloud_candidate_via_provider_api( .map_err(|_| "cloud-provider-api-copy-task-failed".to_string())? } -/// Rebuild the plan and adopt an already-existing destination only after full content-digest -/// equality is proven. Both source and destination remain in place. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn adopt_existing_cloud_candidate( @@ -2376,8 +2323,6 @@ fn collect_cloud_attestation_for_receipt( }) } -/// Read-only provider attestation. OneDrive and Google Drive access tokens are refreshed from an OS -/// credential-store token, used once in memory, and never accepted from or returned to the UI. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn attest_cloud_copy( @@ -2400,7 +2345,8 @@ pub async fn attest_cloud_copy( let adr_dir = app_data_dir.join("cloud-adr"); let goal_dir = app_data_dir.join("cloud-goals"); let connection_path = oauth_connections_path(&app)?; - let cloud_roots = cloud::discover_cloud_roots(&resolve_home(&app)); + let home = resolve_home(&app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); tauri::async_runtime::spawn_blocking(move || { let receipt = cloud_transfer::read_immutable_receipt(&receipt_path)?; if receipt.receipt_id != receipt_id { @@ -2417,9 +2363,6 @@ pub async fn attest_cloud_copy( false, ); if let Err(error) = &result { - // Keep direct GUI attestation consistent with reconciliation: a failed provider - // observation still updates the replaceable ADR/Goal projection, while the immutable - // receipt and source-eviction authority remain unchanged. let provider_blocker = stable_reconciliation_error(error); let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( &receipt, @@ -2435,8 +2378,6 @@ pub async fn attest_cloud_copy( .map_err(|_| "cloud-attestation-task-failed".to_string())? } -/// Re-attest every persisted cloud receipt after restart. This updates only local immutable -/// provider evidence and dynamic ADR/Goal projections; it never copies, evicts, or deletes files. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn reconcile_cloud_receipts( @@ -2452,7 +2393,8 @@ pub async fn reconcile_cloud_receipts( let adr_dir = app_data_dir.join("cloud-adr"); let goal_dir = app_data_dir.join("cloud-goals"); let connection_path = oauth_connections_path(&app)?; - let cloud_roots = cloud::discover_cloud_roots(&resolve_home(&app)); + let home = resolve_home(&app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); tauri::async_runtime::spawn_blocking(move || { reconcile_cloud_receipts_inner( &receipt_dir, @@ -2481,9 +2423,6 @@ pub struct CloudSourceEvictionOutput { pub projection_warnings: Vec, } -/// Recollect provider evidence and active-use evidence, bind an attributed human approval to the -/// exact immutable receipt, then move only that verified source to the operating-system Trash. -/// The cloud destination is never deleted and the Trash is never emptied by this command. #[cfg(not(coverage))] #[tauri::command(async)] pub async fn trash_verified_cloud_source( @@ -2513,7 +2452,8 @@ pub async fn trash_verified_cloud_source( let eviction_dir = app_data_dir.join("cloud-source-evictions"); let journal_path = journal_file_path(&app)?; let connection_path = oauth_connections_path(&app)?; - let cloud_roots = cloud::discover_cloud_roots(&resolve_home(&app)); + let home = resolve_home(&app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); let approved_by = local_human_reviewer(); tauri::async_runtime::spawn_blocking(move || { let receipt = cloud_transfer::read_immutable_receipt(&receipt_path)?; @@ -2613,12 +2553,9 @@ pub fn plan_organize( state: State, ) -> Result, String> { let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; - let rules = crate::userrules::parse_rules(&user_rules_json(&app))?; // malformed → Err surfaced + let rules = crate::userrules::parse_rules(&user_rules_json(&app))?; let files = dupes::collect_files(Path::new(&root)); - let home = resolve_home(&app); - // classify_prompt는 name/parent만 쓰므로 picker는 size 불필요(0으로 구성). - // ponytail: LLM picker는 파일마다 추론 1회 — 대규모 스캔 프리뷰에선 느릴 수 있음. - // 지금은 모델 있으면 전부 LLM 분류; 필요 시 후속에서 미분류 항목만으로 제한. + let home = resolve_home(&app)?; #[cfg(feature = "llm-engine")] { use tauri::Manager; @@ -2656,14 +2593,12 @@ pub fn plan_organize( )) } -/// 활성 사용자 규칙 조회(UI 표시용). 손상 파일은 Err. #[cfg(not(coverage))] #[tauri::command] pub fn user_rules(app: AppHandle) -> Result, String> { crate::userrules::parse_rules(&user_rules_json(&app)) } -/// MovePlan을 safety::move_file로 실행 — 항목별 결과, 하나 실패해도 나머지는 진행 (M2와 동일 원칙) #[cfg(not(coverage))] #[tauri::command(async)] pub fn execute_moves( @@ -2674,7 +2609,6 @@ pub fn execute_moves( Ok(execute_moves_inner(&plans, &jp, now_ms())) } -/// 최근 저널에서 op=="move"·outcome=="ok" 항목을 찾아 역이동(dst→src)한다. #[cfg(not(coverage))] #[tauri::command] pub fn undo_last_moves(limit: usize, app: AppHandle) -> Result, String> { @@ -2688,14 +2622,12 @@ pub struct ModelStatus { pub name: String, } -/// 모델 파일 경로: /models/.gguf pub fn model_file_path(app_data_dir: &Path) -> PathBuf { app_data_dir .join("models") .join(format!("{}.gguf", crate::llm::DEFAULT.name)) } -/// 모델 존재 여부 + 이름. 없으면 앱은 규칙 기반으로 동작(배지 미판정). pub fn model_status_for(model_path: &Path) -> ModelStatus { ModelStatus { present: model_path.exists(), @@ -2703,7 +2635,6 @@ pub fn model_status_for(model_path: &Path) -> ModelStatus { } } -/// 경로 + (이미 읽은) size·age로 FileMeta 구성. name/parent는 경로에서, 없으면 빈 문자열(패닉 없음). pub fn file_meta_at(path: &Path, size: u64, mtime_days: u64) -> crate::llm::FileMeta { let name = path .file_name() @@ -2723,7 +2654,6 @@ pub fn file_meta_at(path: &Path, size: u64, mtime_days: u64) -> crate::llm::File } } -/// 항목마다 캐시(path|size|mtime_ms) 확인 후 미스면 추론. 판정만 캐시(이유는 미스 시에만). pub fn verdicts_with( engine: &dyn crate::llm::InferenceEngine, cache: &mut crate::llm::VerdictCache, @@ -2747,10 +2677,6 @@ pub fn verdicts_with( out } -// --- M5: 모델 상태/다운로드, 캐시된 파일 판정, 미분류 뭉치 요약 IPC --- -// 순수 로직(model_file_path/model_status_for/file_meta_at/verdicts_with)은 위(게이트 측정 대상)에 있음. -// 아래는 io/엔진 수명주기를 다루는 얇은 래퍼 — coverage에서 제외. - #[cfg(not(coverage))] fn meta_items(paths: &[String]) -> Vec<(crate::llm::FileMeta, u64)> { paths @@ -2764,7 +2690,7 @@ fn meta_items(paths: &[String]) -> Vec<(crate::llm::FileMeta, u64)> { .and_then(|t| t.duration_since(std::time::UNIX_EPOCH).ok()) .map(|d| d.as_millis() as u64) .unwrap_or(0); - let age_days = now_ms().saturating_sub(mtime_ms) / 86_400_000; // 실제 파일 나이(프롬프트용); 캐시 키는 원시 mtime_ms 사용 + let age_days = now_ms().saturating_sub(mtime_ms) / 86_400_000; Some((file_meta_at(path, md.len(), age_days), mtime_ms)) }) .collect() @@ -2790,7 +2716,6 @@ pub fn download_model(app: AppHandle) -> Result<(), String> { crate::llm::download_to(&crate::llm::DEFAULT, &path) } -/// 캐시된 파일 판정 — 엔진 있으면 실제 추론(세션 캐시 활용), 없으면(feature off/모델 없음/엔진 초기화 실패) 전부 Unrated로 완만히 저하. #[cfg(not(coverage))] #[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] #[tauri::command(async)] @@ -2829,7 +2754,6 @@ pub fn file_verdicts( .collect()) } -/// 미분류 뭉치 한 줄 요약 — 엔진 없으면 None(스펙 §6 graceful degradation). #[cfg(not(coverage))] #[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] #[tauri::command(async)] @@ -2863,8 +2787,6 @@ pub fn summarize_unknown_bucket( Ok(None) } -/// 미분류 확장자 자문 추론. samples = InventoryReport.unknown_samples(경로). online_mode일 때만 웹 조회. -/// LLM은 feature+모델 있을 때만; 웹은 online_mode일 때만(feature 무관). 둘 다 없으면 source="none". #[cfg(not(coverage))] #[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] #[tauri::command(async)] @@ -2874,8 +2796,6 @@ pub fn reason_unknown_extensions( state: State, ) -> Result, String> { let exts = crate::reasoning::distinct_extensions(&samples); - - // opt-in 웹: online_mode일 때만 DdgLookup, 아니면 None → build_insights의 웹 분기 절대 미실행(default offline) let settings = get_settings(app.clone())?; let ddg = crate::web::DdgLookup; let web_fn = |ext: &str| -> Option { @@ -2887,13 +2807,11 @@ pub fn reason_unknown_extensions( None }; - // 오프라인 LLM(feature+모델+엔진 있으면 실제; 그 블록에서 반환). 없으면 아래 fallback로 낙하. #[cfg(feature = "llm-engine")] { use tauri::Manager; let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; if model_status_for(&model_file_path(&dir)).present { - // 온톨로지 로드는 LLM 경로에서만 필요 — 여기로 이동해 기본/웹전용 빌드가 malformed ontology.ttl로 실패하지 않게 함 let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; let candidates: Vec = onto .classes @@ -2901,7 +2819,6 @@ pub fn reason_unknown_extensions( .map(|c| c.id.rsplit(['#', '/']).next().unwrap_or(&c.id).to_string()) .collect(); let cand_refs: Vec<&str> = candidates.iter().map(|s| s.as_str()).collect(); - let mut guard = state.engine.lock().unwrap(); if guard.is_none() { if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { @@ -2910,13 +2827,11 @@ pub fn reason_unknown_extensions( } if let Some(engine) = guard.as_ref() { let reason = |ext: &str| crate::llm::reason_extension(engine, ext, &cand_refs); - // ponytail: engine lock held across the opt-in web lookups in build_insights (≤5s×N). Fine for the few distinct unknown exts; if a concurrent verdict call ever contends, split into a locked LLM pass + an unlocked web pass. return Ok(crate::reasoning::build_insights(&exts, &reason, web)); } } } - // fallback: LLM 없음(feature off/모델 없음/init 실패) — reason은 항상 None, 웹은 위 settings대로 적용 let reason = |_: &str| -> Option { None }; Ok(crate::reasoning::build_insights(&exts, &reason, web)) } @@ -2928,7 +2843,6 @@ mod tests { use std::fs; use std::sync::atomic::AtomicBool; - // --- M5 LLM 커맨드 순수 헬퍼 --- use crate::llm::{InferenceEngine, Verdict, VerdictCache}; struct CountingFake { @@ -3046,7 +2960,6 @@ mod tests { assert_eq!(m.parent, "downloads"); assert_eq!(m.size, 42); assert_eq!(m.mtime_days, 7); - // 파일명/부모 없는 경로 → 빈 문자열(패닉 없음) let root = file_meta_at(std::path::Path::new("/"), 0, 0); assert_eq!(root.name, ""); assert_eq!(root.parent, ""); @@ -3060,15 +2973,11 @@ mod tests { }; let mut cache = VerdictCache::new(); let meta = file_meta_at(std::path::Path::new("/x/a.bin"), 100, 1); - let items = vec![(meta.clone(), 1700u64), (meta, 1700u64)]; // 같은 path|size|mtime → 두 번째는 캐시 히트 + let items = vec![(meta.clone(), 1700u64), (meta, 1700u64)]; let out = verdicts_with(&engine, &mut cache, &items); assert_eq!(out.len(), 2); assert!(out.iter().all(|fv| fv.verdict == Verdict::Safe)); - assert_eq!( - engine.calls.get(), - 1, - "두 번째 항목은 캐시 히트라 추론 1회만" - ); + assert_eq!(engine.calls.get(), 1); } #[test] @@ -3083,10 +2992,9 @@ mod tests { let out = verdicts_with(&engine, &mut cache, &[a, b]); assert_eq!(out.len(), 2); assert_eq!(engine.calls.get(), 2); - let _ = out; // FileVerdict used + let _ = out; } - // 간격 1로 스캔 — 진행 콜백(클로저)도 매 엔트리마다 실행돼 커버리지에 0으로 남지 않는다 fn scan(root: &Path) -> ScanResult { scan_dir_with_interval(root, &AtomicBool::new(false), 1, |_| {}) } @@ -3115,10 +3023,8 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . fs::create_dir(root.join("sub")).unwrap(); fs::write(root.join("sub").join("inner.bin"), vec![0u8; 500]).unwrap(); fs::write(root.join("small.txt"), vec![0u8; 10]).unwrap(); - let res = scan(root); let view = node_view(&res, root).unwrap(); - assert_eq!(view.size, 510); assert_eq!(view.entries.len(), 2); assert_eq!(view.entries[0].name, "sub"); @@ -3139,14 +3045,12 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . fn node_view_rejects_parent_dir_components() { let tmp = tempfile::tempdir().unwrap(); let res = scan(tmp.path()); - // lexical starts_with는 통과하지만 OS 해석은 루트 밖(실존 디렉토리)인 경로 — 가드 없으면 Ok let sneaky = tmp.path().join(".."); assert!(node_view(&res, &sneaky).is_err()); } #[test] fn node_view_rejects_sibling_path_outside_root() { - // '..' 없이 루트 밖인 경로 — 두 번째 가드(starts_with)를 직접 태운다 let tmp = tempfile::tempdir().unwrap(); let other = tempfile::tempdir().unwrap(); let res = scan(tmp.path()); @@ -3176,7 +3080,7 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . fn node_view_errors_on_unreadable_dir() { let tmp = tempfile::tempdir().unwrap(); let res = scan(tmp.path()); - assert!(node_view(&res, &tmp.path().join("missing")).is_err()); + assert!(node_view(res.root.as_path(), &tmp.path().join("missing")).is_err()); } #[cfg(unix)] @@ -3221,8 +3125,6 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . let ok_dir = tmp.path().join("disksage-clean-fixture-dir"); fs::create_dir(&ok_dir).unwrap(); fs::write(ok_dir.join("inner.bin"), vec![0u8; 32]).unwrap(); - // 단일 파일 대상 — bytes 분기의 metadata().map(|m| m.len()) 성공 경로를 태운다 - // (missing은 metadata 실패만 태우고 성공은 태우지 않는다) let ok_file = tmp.path().join("disksage-clean-fixture-file.bin"); fs::write(&ok_file, vec![0u8; 16]).unwrap(); let missing = tmp.path().join("ghost"); @@ -3248,17 +3150,13 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . .iter() .find(|e| e.outcome == "ok" && e.path.contains("disksage-clean-fixture-dir")) .unwrap(); - assert_eq!(ok_entry.bytes, 32, "디렉토리는 재귀 크기로 저널링"); + assert_eq!(ok_entry.bytes, 32); let ok_file_entry = recent .iter() .find(|e| e.outcome == "ok" && e.path.contains("disksage-clean-fixture-file")) .unwrap(); - assert_eq!( - ok_file_entry.bytes, 16, - "단일 파일은 metadata 크기로 저널링" - ); + assert_eq!(ok_file_entry.bytes, 16); - // 테스트 픽스처 휴지통 정리 (win/linux) #[cfg(any(windows, target_os = "linux"))] { let items: Vec<_> = trash::os_limited::list() @@ -3282,15 +3180,12 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . fs::create_dir_all(&artifact).unwrap(); fs::write(project.join("package.json"), b"{}").unwrap(); fs::write(artifact.join("payload.bin"), b"old").unwrap(); - let now = std::time::SystemTime::now() .duration_since(std::time::UNIX_EPOCH) .unwrap() .as_millis() as u64; let observed = crate::dev_artifacts::find_artifacts(tmp.path(), 0, now); assert_eq!(observed.len(), 1); - - // The path still exists, but its metadata manifest no longer matches the selection. fs::write(artifact.join("payload.bin"), b"recreated-with-different-size").unwrap(); let results = clean_dev_artifacts_inner( &observed, @@ -3299,7 +3194,6 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . &tmp.path().join("journal.jsonl"), now, ); - assert_eq!(results.len(), 1); assert!(!results[0].ok); assert!(results[0].error.contains("다시 스캔")); @@ -3313,7 +3207,6 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . let src_ok = tmp.path().join("a.bin"); std::fs::write(&src_ok, vec![1u8; 16]).unwrap(); let dst_ok = tmp.path().join("sub").join("a.bin"); - // 하나는 성공(같은 볼륨 rename), 하나는 실패(존재하지 않는 src) let plans = vec![ organize::MovePlan { src: src_ok.to_string_lossy().into(), @@ -3341,7 +3234,6 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . let a = tmp.path().join("a.bin"); std::fs::write(&a, vec![2u8; 8]).unwrap(); let a_moved = tmp.path().join("dest").join("a.bin"); - // 먼저 이동 실행(저널에 move/ok 기록) let plans = vec![organize::MovePlan { src: a.to_string_lossy().into(), dst: a_moved.to_string_lossy().into(), @@ -3350,11 +3242,10 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . execute_moves_inner(&plans, &jp, 5); assert!(!a.exists()); assert!(a_moved.exists()); - // 되돌리기 → 원위치 복원 let undone = undo_last_moves_inner(10, &jp, 6); assert_eq!(undone.len(), 1); assert!(undone[0].ok); - assert!(a.exists(), "되돌리기로 원위치 복원"); + assert!(a.exists()); assert!(!a_moved.exists()); } @@ -3362,7 +3253,6 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . fn undo_last_moves_inner_respects_limit_after_filtering() { let tmp = tempfile::tempdir().unwrap(); let jp = tmp.path().join("j.jsonl"); - // 두 번 이동 → 저널에 move/ok 2건(+pending 2건). limit=1이면 최신 1건만 되돌림. for name in ["x.bin", "y.bin"] { let s = tmp.path().join(name); std::fs::write(&s, b"z").unwrap(); @@ -3378,11 +3268,7 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . ); } let undone = undo_last_moves_inner(1, &jp, 9); - assert_eq!( - undone.len(), - 1, - "filter-before-take: pending 라인이 실제 성공을 밀어내지 않음" - ); + assert_eq!(undone.len(), 1); } #[test] @@ -3399,14 +3285,10 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . }]; execute_moves_inner(&plans, &jp, 1); assert!(a_moved.exists()); - // 원래 자리에 새 파일이 다시 생겨 되돌리기 목적지가 막힘 → move_file이 실패해야 함 std::fs::write(&a, b"blocker").unwrap(); let undone = undo_last_moves_inner(1, &jp, 2); assert_eq!(undone.len(), 1); - assert!( - !undone[0].ok, - "목적지 재점유 시 되돌리기 실패를 보고해야 함" - ); - assert!(a_moved.exists(), "실패 시 원본은 이동된 위치에 그대로 남음"); + assert!(!undone[0].ok); + assert!(a_moved.exists()); } } From 60c571ff34b3c1ff2fc9ab70163203ca2445fa61 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 04:19:17 +0900 Subject: [PATCH 111/691] test: require Windows home resolution evidence --- .../home_resolution_windows_ci_contract.rs | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 src-tauri/tests/home_resolution_windows_ci_contract.rs diff --git a/src-tauri/tests/home_resolution_windows_ci_contract.rs b/src-tauri/tests/home_resolution_windows_ci_contract.rs new file mode 100644 index 000000000..ed8d04e84 --- /dev/null +++ b/src-tauri/tests/home_resolution_windows_ci_contract.rs @@ -0,0 +1,23 @@ +//! Control-plane regression for the platform-specific absolute-home contract. +//! +//! `home_resolution_contract.rs` deliberately uses Windows path semantics under `cfg!(windows)`. +//! A Linux-only test job cannot prove that `C:\\...` is absolute to `std::path::PathBuf` on the +//! shipped Windows target. Keep one narrow Windows runner that executes the real regression. + +#[test] +fn test_workflow_executes_home_resolution_contract_on_windows() { + let workflow = include_str!("../../.github/workflows/test.yml"); + + assert!( + workflow.contains("windows-home-resolution:"), + "test workflow must keep a dedicated Windows home-resolution job" + ); + assert!( + workflow.contains("runs-on: windows-latest"), + "home-resolution contract must execute with Windows path semantics" + ); + assert!( + workflow.contains("rustc --edition=2021 --test src-tauri/tests/home_resolution_contract.rs"), + "Windows job must execute the real home_resolution_contract.rs regression" + ); +} From 27b8e1f6cc0de91676fb453f5c5d6230831c3b71 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 04:19:41 +0900 Subject: [PATCH 112/691] ci: prove home resolution on Windows --- .github/workflows/test.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index fe37d4707..0b229ac72 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -43,6 +43,21 @@ jobs: - run: npm test - run: npm run build + windows-home-resolution: + runs-on: windows-latest + timeout-minutes: 10 + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + - uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable + - name: Windows absolute-home regression + shell: pwsh + run: | + New-Item -ItemType Directory -Force target | Out-Null + rustc --edition=2021 --test src-tauri/tests/home_resolution_contract.rs -o target/home-resolution-contract.exe + & .\target\home-resolution-contract.exe + llm-engine-build: runs-on: ubuntu-latest timeout-minutes: 30 From 6fc8e1eef3fef448208aa0039144100350a29a46 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 05:48:24 +0900 Subject: [PATCH 113/691] fix: pass scan result to node_view regression --- src-tauri/src/commands.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 5b0de9855..d9c5ab412 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -3080,7 +3080,7 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . fn node_view_errors_on_unreadable_dir() { let tmp = tempfile::tempdir().unwrap(); let res = scan(tmp.path()); - assert!(node_view(res.root.as_path(), &tmp.path().join("missing")).is_err()); + assert!(node_view(&res, &tmp.path().join("missing")).is_err()); } #[cfg(unix)] From 60dea31909c3bdf1e6972f8c424ce5d459688d9a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 11:00:58 +0900 Subject: [PATCH 114/691] test(security): cover legacy node navigation symlink escape --- src-tauri/src/node_view_security_tests.rs | 30 ++++++++++++++++++----- 1 file changed, 24 insertions(+), 6 deletions(-) diff --git a/src-tauri/src/node_view_security_tests.rs b/src-tauri/src/node_view_security_tests.rs index 586d87455..5ce31b375 100644 --- a/src-tauri/src/node_view_security_tests.rs +++ b/src-tauri/src/node_view_security_tests.rs @@ -1,15 +1,14 @@ //! Security regressions for scan-tree navigation. //! //! These tests exercise the same filesystem boundary as the registered Tauri `get_node` command -//! without introducing GUI/runtime dependencies. A lexical descendant is not sufficient authority: -//! the final directory object must still resolve within the canonical scanned root. +//! and the legacy library helper without introducing GUI/runtime dependencies. A lexical +//! descendant is not sufficient authority: the final directory object must still resolve within +//! the canonical scanned root. -use crate::{node_navigation, scanner}; +use crate::{commands, node_navigation, scanner}; use std::sync::atomic::AtomicBool; -#[cfg(unix)] -#[test] -fn node_view_rejects_final_directory_symlink_escape() { +fn scanned_escape_fixture() -> (tempfile::TempDir, tempfile::TempDir, std::path::PathBuf, scanner::ScanResult) { let scanned = tempfile::tempdir().expect("temporary scan root"); let external = tempfile::tempdir().expect("temporary external root"); std::fs::write(external.path().join("outside-secret.bin"), b"outside") @@ -24,6 +23,13 @@ fn node_view_rejects_final_directory_symlink_escape() { 1, |_| {}, ); + (scanned, external, escape, result) +} + +#[cfg(unix)] +#[test] +fn node_view_rejects_final_directory_symlink_escape() { + let (_scanned, _external, escape, result) = scanned_escape_fixture(); let view = node_navigation::node_view(&result, &escape); assert!( @@ -31,3 +37,15 @@ fn node_view_rejects_final_directory_symlink_escape() { "a final directory symlink below the lexical root must not expose metadata outside the scanned root" ); } + +#[cfg(unix)] +#[test] +fn legacy_commands_node_view_rejects_final_directory_symlink_escape() { + let (_scanned, _external, escape, result) = scanned_escape_fixture(); + + let view = commands::node_view(&result, &escape); + assert!( + view.is_err(), + "the legacy node_view helper must enforce the same canonical-root authority as the registered Tauri command" + ); +} From 21769de69a807864daf1d4d5ee7652b1a8fc5bdc Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 11:02:50 +0900 Subject: [PATCH 115/691] revert: keep node navigation regression on registered boundary --- src-tauri/src/node_view_security_tests.rs | 30 +++++------------------ 1 file changed, 6 insertions(+), 24 deletions(-) diff --git a/src-tauri/src/node_view_security_tests.rs b/src-tauri/src/node_view_security_tests.rs index 5ce31b375..586d87455 100644 --- a/src-tauri/src/node_view_security_tests.rs +++ b/src-tauri/src/node_view_security_tests.rs @@ -1,14 +1,15 @@ //! Security regressions for scan-tree navigation. //! //! These tests exercise the same filesystem boundary as the registered Tauri `get_node` command -//! and the legacy library helper without introducing GUI/runtime dependencies. A lexical -//! descendant is not sufficient authority: the final directory object must still resolve within -//! the canonical scanned root. +//! without introducing GUI/runtime dependencies. A lexical descendant is not sufficient authority: +//! the final directory object must still resolve within the canonical scanned root. -use crate::{commands, node_navigation, scanner}; +use crate::{node_navigation, scanner}; use std::sync::atomic::AtomicBool; -fn scanned_escape_fixture() -> (tempfile::TempDir, tempfile::TempDir, std::path::PathBuf, scanner::ScanResult) { +#[cfg(unix)] +#[test] +fn node_view_rejects_final_directory_symlink_escape() { let scanned = tempfile::tempdir().expect("temporary scan root"); let external = tempfile::tempdir().expect("temporary external root"); std::fs::write(external.path().join("outside-secret.bin"), b"outside") @@ -23,13 +24,6 @@ fn scanned_escape_fixture() -> (tempfile::TempDir, tempfile::TempDir, std::path: 1, |_| {}, ); - (scanned, external, escape, result) -} - -#[cfg(unix)] -#[test] -fn node_view_rejects_final_directory_symlink_escape() { - let (_scanned, _external, escape, result) = scanned_escape_fixture(); let view = node_navigation::node_view(&result, &escape); assert!( @@ -37,15 +31,3 @@ fn node_view_rejects_final_directory_symlink_escape() { "a final directory symlink below the lexical root must not expose metadata outside the scanned root" ); } - -#[cfg(unix)] -#[test] -fn legacy_commands_node_view_rejects_final_directory_symlink_escape() { - let (_scanned, _external, escape, result) = scanned_escape_fixture(); - - let view = commands::node_view(&result, &escape); - assert!( - view.is_err(), - "the legacy node_view helper must enforce the same canonical-root authority as the registered Tauri command" - ); -} From 221744d5a49811d696e916f13f4185491c0a0abe Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 02:37:33 -0700 Subject: [PATCH 116/691] test: require cloud-plan terminal help contract --- src-tauri/tests/cli_help_cloud_plan_exit.rs | 119 ++++++++++++++++++++ 1 file changed, 119 insertions(+) create mode 100644 src-tauri/tests/cli_help_cloud_plan_exit.rs diff --git a/src-tauri/tests/cli_help_cloud_plan_exit.rs b/src-tauri/tests/cli_help_cloud_plan_exit.rs new file mode 100644 index 000000000..a07d9cf8f --- /dev/null +++ b/src-tauri/tests/cli_help_cloud_plan_exit.rs @@ -0,0 +1,119 @@ +//! Black-box terminal contracts for the DiskSage cloud planning CLI. +//! +//! The process boundary matters here: help must terminate before HOME/provider/filesystem work, +//! while malformed host arguments must remain bounded and non-reflective. + +use std::ffi::OsString; +use std::path::{Path, PathBuf}; +use std::process::Command; + +const USAGE: &str = "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH] [--reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --provider-api-copy-fingerprint HEX64 --receipt-dir PATH --oauth-connections ABSOLUTE_PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]"; + +fn build_cloud_plan() -> (tempfile::TempDir, PathBuf) { + let target_dir = tempfile::tempdir().expect("isolated Cargo target directory must be created"); + let cargo = std::env::var_os("CARGO").unwrap_or_else(|| OsString::from("cargo")); + let status = Command::new(cargo) + .current_dir(env!("CARGO_MANIFEST_DIR")) + .args([ + "build", + "--locked", + "--features", + "cloud-cli", + "--bin", + "disksage-cloud-plan", + "--target-dir", + ]) + .arg(target_dir.path()) + .status() + .expect("cloud-plan CLI must be buildable for its process contract"); + assert!(status.success(), "cloud-plan CLI build must succeed before process assertions"); + + let binary = target_dir + .path() + .join("debug") + .join(format!("disksage-cloud-plan{}", std::env::consts::EXE_SUFFIX)); + assert!(binary.is_file(), "cloud-plan binary must exist after the explicit cloud-cli build"); + (target_dir, binary) +} + +fn command(binary: &Path) -> Command { + let mut command = Command::new(binary); + command.env_remove("HOME").env_remove("USERPROFILE"); + command +} + +fn assert_help_success(binary: &Path, flag: &str) { + let output = command(binary) + .arg(flag) + .output() + .expect("cloud-plan CLI must launch for its help contract"); + + assert!( + output.status.success(), + "{flag} must succeed without HOME/USERPROFILE, got status {:?} and stderr {:?}", + output.status.code(), + String::from_utf8_lossy(&output.stderr) + ); + assert!(output.stderr.is_empty(), "successful help must not use stderr"); + assert_eq!( + String::from_utf8(output.stdout).expect("help output must be UTF-8"), + format!("{USAGE}\n"), + "help must emit the exact stable synopsis plus one newline" + ); +} + +fn assert_invalid_argument_is_bounded(binary: &Path, args: &[&str]) { + let output = command(binary) + .args(args) + .output() + .expect("cloud-plan CLI must launch for invalid argument validation"); + + assert_eq!( + output.status.code(), + Some(2), + "invalid host arguments must use the ordinary bounded argument-error exit" + ); + assert!(output.stdout.is_empty(), "invalid invocation must not emit success output"); + let stderr = String::from_utf8(output.stderr).expect("diagnostics must remain valid UTF-8"); + assert!(!stderr.is_empty(), "invalid invocation must remain visible"); + assert!( + !stderr.contains("not-shown"), + "diagnostics must not reflect an opaque argument payload" + ); +} + +#[cfg(unix)] +fn assert_non_utf8_argument_is_bounded(binary: &Path) { + use std::os::unix::ffi::OsStringExt; + + let opaque = OsString::from_vec(vec![b'-', b'-', b'o', b'p', b'a', b'q', b'u', b'e', 0xff]); + let output = command(binary) + .arg(opaque) + .output() + .expect("cloud-plan CLI must launch for non-UTF-8 argument validation"); + + assert_eq!( + output.status.code(), + Some(2), + "non-UTF-8 option input must use the ordinary bounded error exit" + ); + assert!(output.stdout.is_empty(), "invalid non-UTF-8 input must not emit success output"); + let stderr = String::from_utf8(output.stderr).expect("diagnostics must remain valid UTF-8"); + assert!(!stderr.is_empty(), "invalid non-UTF-8 input must remain visible"); + assert!( + !stderr.contains("opaque") && !stderr.contains("panicked") && !stderr.contains("thread 'main'"), + "malformed host input must neither reflect payload bytes nor escape through a Rust panic" + ); +} + +#[test] +fn cloud_plan_help_is_terminal_and_invalid_host_arguments_are_bounded() { + let (_target_dir, binary) = build_cloud_plan(); + + assert_help_success(&binary, "--help"); + assert_help_success(&binary, "-h"); + assert_invalid_argument_is_bounded(&binary, &["--opaque-option=not-shown"]); + assert_invalid_argument_is_bounded(&binary, &["--help", "--opaque-option=not-shown"]); + #[cfg(unix)] + assert_non_utf8_argument_is_bounded(&binary); +} From 03bee06fcd5373882aebe87e1b76f7cdebf77370 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 13:10:08 -0700 Subject: [PATCH 117/691] test: prove global sync report identity is fail closed --- src-tauri/src/provider_global_sync.rs | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index a3435c1be..91881a30c 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -393,6 +393,27 @@ sync engine state: assert!(require_new_copy_admission(&report).is_ok()); } + #[test] + fn forged_report_identity_cannot_authorize_new_copy() { + let baseline = parse_dump(CloudProvider::Onedrive, QUIET_DUMP).unwrap(); + + let mut schema_drift = baseline.clone(); + schema_drift.schema_version = schema_drift.schema_version.saturating_add(1); + + let mut evidence_kind_drift = baseline.clone(); + evidence_kind_drift.evidence_kind = "forged-global-sync-evidence".into(); + + let mut provider_drift = baseline; + provider_drift.provider = CloudProvider::Icloud; + + for report in [schema_drift, evidence_kind_drift, provider_drift] { + assert_eq!( + require_new_copy_admission(&report).unwrap_err(), + "provider-global-sync-evidence-invalid" + ); + } + } + #[test] fn active_transfer_and_indexing_block_new_copy() { let report = parse_dump(CloudProvider::GoogleDrive, ACTIVE_DUMP).unwrap(); From f8d92181f275a8602cdab2c34a4c1683acacb3ad Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 13:11:26 -0700 Subject: [PATCH 118/691] fix: bind global sync admission to evidence identity --- src-tauri/src/provider_global_sync.rs | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index 91881a30c..1bc7d87d9 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -298,6 +298,12 @@ pub fn inspect_new_copy_admission( } pub fn require_new_copy_admission(report: &ProviderGlobalSyncReport) -> Result<(), String> { + if report.schema_version != PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION + || report.evidence_kind != "fileproviderctl-global-dump" + || provider_identifier(report.provider).is_none() + { + return Err("provider-global-sync-evidence-invalid".into()); + } if !report.evidence_complete { return Err("provider-global-sync-evidence-incomplete".into()); } From c8c09f970cb62f3fd321a24a0ade8e1123faa187 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 17:18:47 -0700 Subject: [PATCH 119/691] test: bind Naruon readiness to global sync evidence identity --- .../naruon_readiness_global_sync_identity.rs | 84 +++++++++++++++++++ 1 file changed, 84 insertions(+) create mode 100644 src-tauri/tests/naruon_readiness_global_sync_identity.rs diff --git a/src-tauri/tests/naruon_readiness_global_sync_identity.rs b/src-tauri/tests/naruon_readiness_global_sync_identity.rs new file mode 100644 index 000000000..b9cc9bd1a --- /dev/null +++ b/src-tauri/tests/naruon_readiness_global_sync_identity.rs @@ -0,0 +1,84 @@ +//! Provider-global-sync identity must be bound before Naruon readiness consumes its state. +//! +//! A caller can construct `ProviderGlobalSyncReport` directly. The readiness exporter therefore +//! must reject a report whose state/blocker shape is plausible but whose evidence kind is not the +//! canonical read-only File Provider global dump contract. + +use disksage_lib::cloud::{ + CloudAccountScope, CloudPlanOptions, CloudPlanReport, CloudProvider, CloudRoot, + ExactDuplicateSummary, +}; +use disksage_lib::naruon_cloud_copy_readiness::export_naruon_cloud_copy_readiness_with_global_sync; +use disksage_lib::provider_capacity::{ + assess_capacity, unavailable_capacity, DEFAULT_CAPACITY_RESERVE_BYTES, +}; +use disksage_lib::provider_client_runtime::assess_provider_client_runtime; +use disksage_lib::provider_global_sync::{ + ProviderGlobalSyncReport, ProviderGlobalSyncState, PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, +}; + +fn empty_onedrive_plan() -> CloudPlanReport { + let provider = CloudProvider::Onedrive; + CloudPlanReport { + cloud_root: CloudRoot { + id: "global-sync-identity-root".into(), + provider, + account_scope: CloudAccountScope::Personal, + label: "Global sync identity root".into(), + path: "/private/cloud".into(), + readable: true, + access_issue: None, + }, + generated_at_ms: 20, + source_selection_policy: Some(CloudPlanOptions { + min_size_bytes: 1, + min_age_days: 0, + limit: 1, + }), + candidates: Vec::new(), + candidate_bytes: 0, + potentially_reclaimable_bytes: 0, + exact_duplicates: ExactDuplicateSummary::default(), + capacity: Some(assess_capacity( + unavailable_capacity(provider, 10, "capacity-unavailable"), + 0, + 0, + DEFAULT_CAPACITY_RESERVE_BYTES, + )), + local_volume: None, + notices: Vec::new(), + } +} + +#[test] +fn forged_global_sync_evidence_kind_cannot_enter_readiness() { + let plan = empty_onedrive_plan(); + let runtime = assess_provider_client_runtime( + CloudProvider::Onedrive, + Some(b"OneDrive Sync Service\n"), + 25, + ); + let forged = ProviderGlobalSyncReport { + schema_version: PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, + provider: CloudProvider::Onedrive, + evidence_kind: "caller-asserted-clear-state".into(), + evidence_complete: true, + state: ProviderGlobalSyncState::Clear, + upload_progress_present: false, + download_progress_present: false, + pending_indexable_count: Some(0), + blockers: Vec::new(), + notices: Vec::new(), + }; + + assert_eq!( + export_naruon_cloud_copy_readiness_with_global_sync( + &plan, + &runtime, + None, + Some(&forged), + ) + .unwrap_err(), + "naruon-copy-readiness-provider-global-sync-invalid" + ); +} From 72665b4fa148731b393a17fb2fc5197854bb95b1 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 17:35:31 -0700 Subject: [PATCH 120/691] test: reject contradictory global sync clear evidence --- ...vider_global_sync_clear_state_integrity.rs | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 src-tauri/tests/provider_global_sync_clear_state_integrity.rs diff --git a/src-tauri/tests/provider_global_sync_clear_state_integrity.rs b/src-tauri/tests/provider_global_sync_clear_state_integrity.rs new file mode 100644 index 000000000..c7d8b76ae --- /dev/null +++ b/src-tauri/tests/provider_global_sync_clear_state_integrity.rs @@ -0,0 +1,48 @@ +//! Contradictory provider-global-sync evidence must never authorize a new copy. +//! +//! `ProviderGlobalSyncReport` is a public data contract and callers can construct it directly. +//! A `Clear` report is therefore authoritative only when its aggregate progress fields also prove +//! that no transfer or indexing work remains. State/blocker labels alone are insufficient. + +use disksage_lib::cloud::CloudProvider; +use disksage_lib::provider_global_sync::{ + require_new_copy_admission, ProviderGlobalSyncReport, ProviderGlobalSyncState, + PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, +}; + +fn clear_report() -> ProviderGlobalSyncReport { + ProviderGlobalSyncReport { + schema_version: PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, + provider: CloudProvider::Onedrive, + evidence_kind: "fileproviderctl-global-dump".into(), + evidence_complete: true, + state: ProviderGlobalSyncState::Clear, + upload_progress_present: false, + download_progress_present: false, + pending_indexable_count: Some(0), + blockers: Vec::new(), + notices: Vec::new(), + } +} + +#[test] +fn clear_state_requires_quiet_aggregate_progress_evidence() { + let baseline = clear_report(); + assert_eq!(require_new_copy_admission(&baseline), Ok(())); + + let mut upload_active = baseline.clone(); + upload_active.upload_progress_present = true; + + let mut download_active = baseline.clone(); + download_active.download_progress_present = true; + + let mut indexing_pending = baseline; + indexing_pending.pending_indexable_count = Some(1); + + for contradictory in [upload_active, download_active, indexing_pending] { + assert_eq!( + require_new_copy_admission(&contradictory).unwrap_err(), + "provider-global-sync-evidence-invalid" + ); + } +} From e32d858a8f23159a8bedff2b67a29bf3e631b82f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 17:36:41 -0700 Subject: [PATCH 121/691] test: keep contradictory sync evidence visibly blocked --- ...vider_global_sync_clear_state_integrity.rs | 27 ++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) diff --git a/src-tauri/tests/provider_global_sync_clear_state_integrity.rs b/src-tauri/tests/provider_global_sync_clear_state_integrity.rs index c7d8b76ae..ce8a80bd9 100644 --- a/src-tauri/tests/provider_global_sync_clear_state_integrity.rs +++ b/src-tauri/tests/provider_global_sync_clear_state_integrity.rs @@ -1,4 +1,4 @@ -//! Contradictory provider-global-sync evidence must never authorize a new copy. +//! Contradictory provider-global-sync evidence must never authorize or advertise a new copy. //! //! `ProviderGlobalSyncReport` is a public data contract and callers can construct it directly. //! A `Clear` report is therefore authoritative only when its aggregate progress fields also prove @@ -6,8 +6,8 @@ use disksage_lib::cloud::CloudProvider; use disksage_lib::provider_global_sync::{ - require_new_copy_admission, ProviderGlobalSyncReport, ProviderGlobalSyncState, - PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, + attach_new_copy_admission_notice, require_new_copy_admission, ProviderGlobalSyncReport, + ProviderGlobalSyncState, PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, }; fn clear_report() -> ProviderGlobalSyncReport { @@ -44,5 +44,26 @@ fn clear_state_requires_quiet_aggregate_progress_evidence() { require_new_copy_admission(&contradictory).unwrap_err(), "provider-global-sync-evidence-invalid" ); + + let mut notices = Vec::new(); + attach_new_copy_admission_notice(&mut notices, Some(&contradictory)); + assert!(notices.contains(&"provider-global-sync-blocked".to_string())); + assert!(!notices.contains(&"provider-global-sync-clear".to_string())); } } + +#[test] +fn forged_identity_is_never_advertised_as_clear() { + let mut forged = clear_report(); + forged.evidence_kind = "caller-asserted-clear-state".into(); + + assert_eq!( + require_new_copy_admission(&forged).unwrap_err(), + "provider-global-sync-evidence-invalid" + ); + + let mut notices = Vec::new(); + attach_new_copy_admission_notice(&mut notices, Some(&forged)); + assert!(notices.contains(&"provider-global-sync-blocked".to_string())); + assert!(!notices.contains(&"provider-global-sync-clear".to_string())); +} From df13e5c8b4a160982c0807e7a4aee8f774a044c4 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 17:37:53 -0700 Subject: [PATCH 122/691] fix: reject contradictory global sync clear evidence --- src-tauri/src/provider_global_sync.rs | 36 +++++++++++++++++++-------- 1 file changed, 25 insertions(+), 11 deletions(-) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index 1bc7d87d9..9949005dd 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -297,17 +297,37 @@ pub fn inspect_new_copy_admission( )) } +fn report_identity_is_valid(report: &ProviderGlobalSyncReport) -> bool { + report.schema_version == PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION + && report.evidence_kind == "fileproviderctl-global-dump" + && provider_identifier(report.provider).is_some() +} + +fn report_has_pending_aggregate_evidence(report: &ProviderGlobalSyncReport) -> bool { + report.upload_progress_present + || report.download_progress_present + || report.pending_indexable_count.is_some_and(|count| count > 0) +} + +fn report_is_authoritative_clear(report: &ProviderGlobalSyncReport) -> bool { + report_identity_is_valid(report) + && report.evidence_complete + && report.state == ProviderGlobalSyncState::Clear + && report.blockers.is_empty() + && !report_has_pending_aggregate_evidence(report) +} + pub fn require_new_copy_admission(report: &ProviderGlobalSyncReport) -> Result<(), String> { - if report.schema_version != PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION - || report.evidence_kind != "fileproviderctl-global-dump" - || provider_identifier(report.provider).is_none() + if !report_identity_is_valid(report) + || (report.state == ProviderGlobalSyncState::Clear + && report_has_pending_aggregate_evidence(report)) { return Err("provider-global-sync-evidence-invalid".into()); } if !report.evidence_complete { return Err("provider-global-sync-evidence-incomplete".into()); } - if report.state == ProviderGlobalSyncState::Clear && report.blockers.is_empty() { + if report_is_authoritative_clear(report) { Ok(()) } else if report.blockers.is_empty() { Err(format!("provider-global-sync-{}", report.state.as_str())) @@ -330,13 +350,7 @@ pub fn attach_new_copy_admission_notice( ) { notices.retain(|notice| !notice.starts_with("provider-global-sync-")); let admission_notice = match report { - Some(report) - if report.evidence_complete - && report.state == ProviderGlobalSyncState::Clear - && report.blockers.is_empty() => - { - "provider-global-sync-clear" - } + Some(report) if report_is_authoritative_clear(report) => "provider-global-sync-clear", Some(_) => "provider-global-sync-blocked", None => "provider-global-sync-evidence-unavailable", } From 9c37f7f8673cf43e253ca972c7d0e392dc93b170 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 17:38:31 -0700 Subject: [PATCH 123/691] test: reject contradictory sync evidence in Naruon readiness --- .../naruon_readiness_global_sync_identity.rs | 57 ++++++++++++++----- 1 file changed, 42 insertions(+), 15 deletions(-) diff --git a/src-tauri/tests/naruon_readiness_global_sync_identity.rs b/src-tauri/tests/naruon_readiness_global_sync_identity.rs index b9cc9bd1a..53969a74e 100644 --- a/src-tauri/tests/naruon_readiness_global_sync_identity.rs +++ b/src-tauri/tests/naruon_readiness_global_sync_identity.rs @@ -1,8 +1,8 @@ -//! Provider-global-sync identity must be bound before Naruon readiness consumes its state. +//! Provider-global-sync identity and quiet-state evidence must be bound before Naruon readiness. //! //! A caller can construct `ProviderGlobalSyncReport` directly. The readiness exporter therefore -//! must reject a report whose state/blocker shape is plausible but whose evidence kind is not the -//! canonical read-only File Provider global dump contract. +//! must reject a report whose state/blocker shape is plausible but whose evidence identity is +//! forged or whose aggregate progress fields contradict a claimed `Clear` state. use disksage_lib::cloud::{ CloudAccountScope, CloudPlanOptions, CloudPlanReport, CloudProvider, CloudRoot, @@ -50,18 +50,11 @@ fn empty_onedrive_plan() -> CloudPlanReport { } } -#[test] -fn forged_global_sync_evidence_kind_cannot_enter_readiness() { - let plan = empty_onedrive_plan(); - let runtime = assess_provider_client_runtime( - CloudProvider::Onedrive, - Some(b"OneDrive Sync Service\n"), - 25, - ); - let forged = ProviderGlobalSyncReport { +fn canonical_clear_report() -> ProviderGlobalSyncReport { + ProviderGlobalSyncReport { schema_version: PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, provider: CloudProvider::Onedrive, - evidence_kind: "caller-asserted-clear-state".into(), + evidence_kind: "fileproviderctl-global-dump".into(), evidence_complete: true, state: ProviderGlobalSyncState::Clear, upload_progress_present: false, @@ -69,16 +62,50 @@ fn forged_global_sync_evidence_kind_cannot_enter_readiness() { pending_indexable_count: Some(0), blockers: Vec::new(), notices: Vec::new(), - }; + } +} + +fn assert_rejected(report: &ProviderGlobalSyncReport) { + let plan = empty_onedrive_plan(); + let runtime = assess_provider_client_runtime( + CloudProvider::Onedrive, + Some(b"OneDrive Sync Service\n"), + 25, + ); assert_eq!( export_naruon_cloud_copy_readiness_with_global_sync( &plan, &runtime, None, - Some(&forged), + Some(report), ) .unwrap_err(), "naruon-copy-readiness-provider-global-sync-invalid" ); } + +#[test] +fn forged_global_sync_evidence_kind_cannot_enter_readiness() { + let mut forged = canonical_clear_report(); + forged.evidence_kind = "caller-asserted-clear-state".into(); + assert_rejected(&forged); +} + +#[test] +fn contradictory_clear_progress_cannot_enter_readiness() { + let baseline = canonical_clear_report(); + + let mut upload_active = baseline.clone(); + upload_active.upload_progress_present = true; + + let mut download_active = baseline.clone(); + download_active.download_progress_present = true; + + let mut indexing_pending = baseline; + indexing_pending.pending_indexable_count = Some(1); + + for contradictory in [upload_active, download_active, indexing_pending] { + assert_rejected(&contradictory); + } +} From 4ec7236644e059bb7761131beb6779849e6a75e3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 17:41:39 -0700 Subject: [PATCH 124/691] fix: bind Naruon readiness to quiet global sync evidence --- src-tauri/src/naruon_cloud_copy_readiness.rs | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/naruon_cloud_copy_readiness.rs b/src-tauri/src/naruon_cloud_copy_readiness.rs index 4062151fe..b6a68d9ba 100644 --- a/src-tauri/src/naruon_cloud_copy_readiness.rs +++ b/src-tauri/src/naruon_cloud_copy_readiness.rs @@ -657,12 +657,17 @@ fn validate_provider_global_sync_input( }; if report.schema_version != provider_global_sync::PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION || report.provider != provider + || report.evidence_kind != "fileproviderctl-global-dump" || !report.evidence_complete || report .blockers .iter() .any(|blocker| !is_reason_code(blocker)) || (report.state == ProviderGlobalSyncState::Clear && !report.blockers.is_empty()) + || (report.state == ProviderGlobalSyncState::Clear + && (report.upload_progress_present + || report.download_progress_present + || report.pending_indexable_count.is_some_and(|count| count > 0))) || (report.state != ProviderGlobalSyncState::Clear && report.blockers.is_empty()) { return Err("naruon-copy-readiness-provider-global-sync-invalid".into()); @@ -1105,7 +1110,7 @@ mod tests { fn report(provider: CloudProvider) -> CloudPlanReport { let scope = if provider == CloudProvider::GoogleDrive { - CloudAccountScope::Unknown + crate::cloud::CloudAccountScope::Unknown } else { CloudAccountScope::Personal }; From 53d92d18ace763a1378c3b68ca1f47b46a3777a7 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 19:07:16 -0700 Subject: [PATCH 125/691] fix: terminate cloud planner help before HOME lookup --- .../disksage-cloud-plan-implementation.rs.inc | 5665 ++++++++++++++++ src-tauri/src/bin/disksage-cloud-plan.rs | 5668 +---------------- 2 files changed, 5688 insertions(+), 5645 deletions(-) create mode 100644 src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc diff --git a/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc b/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc new file mode 100644 index 000000000..933d96b99 --- /dev/null +++ b/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc @@ -0,0 +1,5665 @@ +//! Headless entrypoint for planning, reviewing, copying, and attesting cloud archive candidates. + +#[cfg(target_os = "macos")] +embed_plist::embed_info_plist!("../../disksage-cloud-plan.Info.plist"); + +#[cfg(not(coverage))] +use std::collections::BTreeMap; +#[cfg(all(not(coverage), unix))] +use std::fs::OpenOptions; +#[cfg(all(not(coverage), unix))] +use std::io::Write; +#[cfg(not(coverage))] +use std::path::{Path, PathBuf}; +#[cfg(not(coverage))] +use std::time::{Duration, Instant}; + +#[cfg(not(coverage))] +use disksage_lib::cloud::{ + self, ArchiveKind, CloudAccountScope, CloudPlanOptions, CloudProvider, CloudRoot, +}; +#[cfg(not(coverage))] +use disksage_lib::cloud_adr; +#[cfg(not(coverage))] +use disksage_lib::cloud_eviction::{self, CloudEvictionResult, CloudSourceEvictionApproval}; +#[cfg(not(coverage))] +use disksage_lib::cloud_local_eviction; +#[cfg(not(coverage))] +use disksage_lib::cloud_review::{self, CloudReviewDecision, CloudReviewDisposition}; +#[cfg(not(coverage))] +use disksage_lib::cloud_transfer::{self, CloudCopyReceipt, LocalEvictionPermit}; +#[cfg(not(coverage))] +use disksage_lib::icloud_sync_health; +#[cfg(not(coverage))] +use disksage_lib::naruon_capacity; +#[cfg(not(coverage))] +use disksage_lib::naruon_cloud_copy_readiness; +use disksage_lib::naruon_lineage; +#[cfg(not(coverage))] +use disksage_lib::provider_api_client::{self, FixedHostProviderMetadataClient}; +#[cfg(not(coverage))] +use disksage_lib::provider_api_write; +#[cfg(not(coverage))] +use disksage_lib::provider_capacity::{self, FixedHostProviderCapacityClient}; +#[cfg(not(coverage))] +use disksage_lib::provider_client_runtime; +#[cfg(not(coverage))] +use disksage_lib::provider_evidence::{self, ProviderSyncEvidenceRecord}; +#[cfg(not(coverage))] +use disksage_lib::provider_global_sync; +#[cfg(not(coverage))] +use disksage_lib::provider_oauth; +#[cfg(not(coverage))] +use disksage_lib::provider_sync; +#[cfg(not(coverage))] +use disksage_lib::semantic_catalog; +#[cfg(all(not(coverage), unix))] +use sha2::{Digest, Sha256}; + +#[cfg(not(coverage))] +#[derive(Debug, Clone, PartialEq, Eq)] +struct Args { + root: PathBuf, + cloud_root: Option, + provider: Option, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + list_roots: bool, + inspect_roots: bool, + all_readable_roots: bool, + verify_capacity: bool, + decision_summary: bool, + review_reason_set: Option>, + private_review_output: Option, + private_candidate_inspection_output: Option, + exact_duplicate_review_prefix: Option, + exact_duplicate_kind: Option, + capacity_reserve_mib: u64, + copy_fingerprint: Option, + provider_api_copy_fingerprint: Option, + adopt_existing_fingerprint: Option, + receipt_dir: Option, + audit_receipts: bool, + reconcile_receipts: bool, + confirm_copy_phrase: Option, + attest_receipt: Option, + evidence_dir: Option, + provider_object_id: Option, + oauth_connections: Option, + evict_receipt: Option, + confirm_receipt_id: Option, + eviction_dir: Option, + eviction_approval_dir: Option, + journal_path: Option, + review_candidate_fingerprint: Option, + review_fingerprint: Option, + review_disposition: Option, + reviewed_by: Option, + review_rationale: Option, + review_dir: Option, + export_naruon_lineage: Option, + naruon_sync_evidence: Option, + export_naruon_capacity: bool, + export_naruon_copy_readiness: bool, + naruon_copy_readiness_output: Option, + export_semantic_catalog: bool, +} + +#[cfg(not(coverage))] +fn value(args: &[String], index: &mut usize, flag: &str) -> Result { + *index += 1; + args.get(*index) + .cloned() + .ok_or_else(|| format!("{flag} 값이 필요함")) +} + +#[cfg(not(coverage))] +fn parse_provider(value: &str) -> Result { + match value { + "icloud" => Ok(CloudProvider::Icloud), + "onedrive" => Ok(CloudProvider::Onedrive), + "google-drive" => Ok(CloudProvider::GoogleDrive), + _ => Err(format!("지원하지 않는 provider: {value}")), + } +} + +#[cfg(not(coverage))] +fn parse_review_reason_set(value: &str) -> Result, String> { + if value.len() > 2_048 { + return Err("--review-reason-set 값이 너무 김".into()); + } + let raw = value.split('|').collect::>(); + if raw.is_empty() || raw.len() > 16 { + return Err("--review-reason-set은 1개 이상 16개 이하 사유여야 함".into()); + } + let mut reasons = Vec::with_capacity(raw.len()); + for reason in raw { + if reason.is_empty() + || reason.len() > 128 + || !reason + .bytes() + .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') + { + return Err("--review-reason-set 사유 형식이 올바르지 않음".into()); + } + reasons.push(reason.to_string()); + } + let original_len = reasons.len(); + reasons.sort(); + reasons.dedup(); + if reasons.len() != original_len { + return Err("--review-reason-set에 중복 사유가 있음".into()); + } + Ok(reasons) +} + +#[cfg(not(coverage))] +fn parse_exact_duplicate_review_prefix(value: &str) -> Result { + if value.is_empty() + || value.len() > 255 + || matches!(value, "." | "..") + || value + .chars() + .any(|character| character.is_control() || matches!(character, '/' | '\\')) + { + return Err("--exact-duplicate-review-prefix는 단일 디렉터리 이름 prefix여야 함".into()); + } + Ok(value.to_string()) +} + +#[cfg(not(coverage))] +fn parse_archive_kind(value: &str) -> Result { + match value { + "document" => Ok(ArchiveKind::Document), + "media" => Ok(ArchiveKind::Media), + "archive" => Ok(ArchiveKind::Archive), + "dataset" => Ok(ArchiveKind::Dataset), + "backup" => Ok(ArchiveKind::Backup), + "creative" => Ok(ArchiveKind::Creative), + "incomplete-download" => Ok(ArchiveKind::IncompleteDownload), + _ => Err(format!("지원하지 않는 exact duplicate kind: {value}")), + } +} + +#[cfg(not(coverage))] +fn parse_args(args: &[String], home: &Path) -> Result { + let mut parsed = Args { + root: home.to_path_buf(), + cloud_root: None, + provider: None, + min_size_mib: 256, + min_age_days: 90, + limit: 200, + list_roots: false, + inspect_roots: false, + all_readable_roots: false, + verify_capacity: false, + decision_summary: false, + review_reason_set: None, + private_review_output: None, + private_candidate_inspection_output: None, + exact_duplicate_review_prefix: None, + exact_duplicate_kind: None, + capacity_reserve_mib: 1024, + copy_fingerprint: None, + provider_api_copy_fingerprint: None, + adopt_existing_fingerprint: None, + receipt_dir: None, + audit_receipts: false, + reconcile_receipts: false, + confirm_copy_phrase: None, + attest_receipt: None, + evidence_dir: None, + provider_object_id: None, + oauth_connections: None, + evict_receipt: None, + confirm_receipt_id: None, + eviction_dir: None, + eviction_approval_dir: None, + journal_path: None, + review_candidate_fingerprint: None, + review_fingerprint: None, + review_disposition: None, + reviewed_by: None, + review_rationale: None, + review_dir: None, + export_naruon_lineage: None, + naruon_sync_evidence: None, + export_naruon_capacity: false, + export_naruon_copy_readiness: false, + naruon_copy_readiness_output: None, + export_semantic_catalog: false, + }; + let mut index = 0; + while index < args.len() { + match args[index].as_str() { + "--root" => parsed.root = PathBuf::from(value(args, &mut index, "--root")?), + "--cloud-root" => { + parsed.cloud_root = Some(PathBuf::from(value(args, &mut index, "--cloud-root")?)) + } + "--provider" => { + parsed.provider = Some(parse_provider(&value(args, &mut index, "--provider")?)?) + } + "--min-size-mib" => { + parsed.min_size_mib = value(args, &mut index, "--min-size-mib")? + .parse() + .map_err(|_| "--min-size-mib는 정수여야 함".to_string())? + } + "--min-age-days" => { + parsed.min_age_days = value(args, &mut index, "--min-age-days")? + .parse() + .map_err(|_| "--min-age-days는 정수여야 함".to_string())? + } + "--limit" => { + parsed.limit = value(args, &mut index, "--limit")? + .parse() + .map_err(|_| "--limit는 정수여야 함".to_string())? + } + "--list-roots" => parsed.list_roots = true, + "--inspect-roots" => parsed.inspect_roots = true, + "--all-readable-roots" => parsed.all_readable_roots = true, + "--verify-capacity" => parsed.verify_capacity = true, + "--decision-summary" => parsed.decision_summary = true, + "--review-reason-set" => { + if parsed.review_reason_set.is_some() { + return Err("--review-reason-set은 한 번만 지정할 수 있음".into()); + } + parsed.review_reason_set = Some(parse_review_reason_set(&value( + args, + &mut index, + "--review-reason-set", + )?)?); + } + "--private-review-output" => { + if parsed.private_review_output.is_some() { + return Err("--private-review-output은 한 번만 지정할 수 있음".into()); + } + parsed.private_review_output = Some(PathBuf::from(value( + args, + &mut index, + "--private-review-output", + )?)); + } + "--private-candidate-inspection-output" => { + if parsed.private_candidate_inspection_output.is_some() { + return Err( + "--private-candidate-inspection-output은 한 번만 지정할 수 있음" + .into(), + ); + } + parsed.private_candidate_inspection_output = Some(PathBuf::from(value( + args, + &mut index, + "--private-candidate-inspection-output", + )?)); + } + "--exact-duplicate-review-prefix" => { + if parsed.exact_duplicate_review_prefix.is_some() { + return Err( + "--exact-duplicate-review-prefix는 한 번만 지정할 수 있음".into(), + ); + } + parsed.exact_duplicate_review_prefix = Some( + parse_exact_duplicate_review_prefix(&value( + args, + &mut index, + "--exact-duplicate-review-prefix", + )?)?, + ); + } + "--exact-duplicate-kind" => { + if parsed.exact_duplicate_kind.is_some() { + return Err("--exact-duplicate-kind는 한 번만 지정할 수 있음".into()); + } + parsed.exact_duplicate_kind = Some(parse_archive_kind(&value( + args, + &mut index, + "--exact-duplicate-kind", + )?)?); + } + "--capacity-reserve-mib" => { + parsed.capacity_reserve_mib = value(args, &mut index, "--capacity-reserve-mib")? + .parse() + .map_err(|_| "--capacity-reserve-mib는 정수여야 함".to_string())? + } + "--copy-fingerprint" => { + parsed.copy_fingerprint = Some(value(args, &mut index, "--copy-fingerprint")?) + } + "--provider-api-copy-fingerprint" => { + parsed.provider_api_copy_fingerprint = Some(value( + args, + &mut index, + "--provider-api-copy-fingerprint", + )?) + } + "--adopt-existing-fingerprint" => { + parsed.adopt_existing_fingerprint = Some(value( + args, + &mut index, + "--adopt-existing-fingerprint", + )?) + } + "--receipt-dir" => { + parsed.receipt_dir = Some(PathBuf::from(value(args, &mut index, "--receipt-dir")?)) + } + "--audit-receipts" => parsed.audit_receipts = true, + "--reconcile-receipts" => parsed.reconcile_receipts = true, + "--confirm-copy-phrase" => { + parsed.confirm_copy_phrase = + Some(value(args, &mut index, "--confirm-copy-phrase")?) + } + "--attest-receipt" => { + parsed.attest_receipt = Some(PathBuf::from(value( + args, + &mut index, + "--attest-receipt", + )?)) + } + "--evidence-dir" => { + parsed.evidence_dir = Some(PathBuf::from(value( + args, + &mut index, + "--evidence-dir", + )?)) + } + "--provider-object-id" => { + parsed.provider_object_id = Some(value(args, &mut index, "--provider-object-id")?) + } + "--oauth-connections" => { + parsed.oauth_connections = Some(PathBuf::from(value( + args, + &mut index, + "--oauth-connections", + )?)) + } + "--evict-receipt" => { + parsed.evict_receipt = Some(PathBuf::from(value( + args, + &mut index, + "--evict-receipt", + )?)) + } + "--confirm-receipt-id" => { + parsed.confirm_receipt_id = + Some(value(args, &mut index, "--confirm-receipt-id")?) + } + "--eviction-dir" => { + parsed.eviction_dir = + Some(PathBuf::from(value(args, &mut index, "--eviction-dir")?)) + } + "--eviction-approval-dir" => { + parsed.eviction_approval_dir = Some(PathBuf::from(value( + args, + &mut index, + "--eviction-approval-dir", + )?)) + } + "--journal-path" => { + parsed.journal_path = + Some(PathBuf::from(value(args, &mut index, "--journal-path")?)) + } + "--review-candidate-fingerprint" => { + parsed.review_candidate_fingerprint = Some(value( + args, + &mut index, + "--review-candidate-fingerprint", + )?) + } + "--review-fingerprint" => { + parsed.review_fingerprint = + Some(value(args, &mut index, "--review-fingerprint")?) + } + "--review-disposition" => { + parsed.review_disposition = Some(match value( + args, + &mut index, + "--review-disposition", + )? + .as_str() + { + "approved" => CloudReviewDisposition::Approved, + "held" => CloudReviewDisposition::Held, + value => return Err(format!("지원하지 않는 review disposition: {value}")), + }) + } + "--reviewed-by" => { + parsed.reviewed_by = Some(value(args, &mut index, "--reviewed-by")?) + } + "--review-rationale" => { + parsed.review_rationale = Some(value(args, &mut index, "--review-rationale")?) + } + "--review-dir" => { + parsed.review_dir = + Some(PathBuf::from(value(args, &mut index, "--review-dir")?)) + } + "--export-naruon-lineage" => { + parsed.export_naruon_lineage = Some(PathBuf::from(value( + args, + &mut index, + "--export-naruon-lineage", + )?)) + } + "--naruon-sync-evidence" => { + parsed.naruon_sync_evidence = Some(PathBuf::from(value( + args, + &mut index, + "--naruon-sync-evidence", + )?)) + } + "--export-naruon-capacity" => parsed.export_naruon_capacity = true, + "--export-naruon-copy-readiness" => { + parsed.export_naruon_copy_readiness = true + } + "--naruon-copy-readiness-output" => { + if parsed.naruon_copy_readiness_output.is_some() { + return Err( + "--naruon-copy-readiness-output은 한 번만 지정할 수 있음" + .into(), + ); + } + parsed.naruon_copy_readiness_output = + Some(PathBuf::from(value( + args, + &mut index, + "--naruon-copy-readiness-output", + )?)); + } + "--export-semantic-catalog" => parsed.export_semantic_catalog = true, + "--help" | "-h" => { + return Err( + "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH] [--reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --provider-api-copy-fingerprint HEX64 --receipt-dir PATH --oauth-connections ABSOLUTE_PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]".into(), + ) + } + flag => return Err(format!("알 수 없는 인자: {flag}")), + } + index += 1; + } + Ok(parsed) +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct CopyOutput { + action: &'static str, + goal_state: cloud_transfer::CloudOffloadGoalState, + goal_status: Option, + receipt: CloudCopyReceipt, + receipt_path: String, + adr_path: Option, + goal_path: Option, + projection_warnings: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct ProviderApiCopyOutput { + action: &'static str, + goal_state: cloud_transfer::CloudOffloadGoalState, + goal_status: Option, + receipt: CloudCopyReceipt, + receipt_path: String, + provider_object_id: String, + evidence_path: Option, + adr_path: Option, + goal_path: Option, + projection_warnings: Vec, + permit: Option, + blockers: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct AttestationOutput { + action: &'static str, + goal_state: cloud_transfer::CloudOffloadGoalState, + goal_status: Option, + receipt_id: String, + evidence: disksage_lib::cloud_transfer::ProviderSyncEvidence, + assessment: provider_sync::ProviderSyncTimelinessAssessment, + evidence_record: ProviderSyncEvidenceRecord, + evidence_path: String, + adr_path: Option, + goal_path: Option, + projection_warnings: Vec, + permit: Option, + blockers: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct EvictionOutput { + action: &'static str, + goal_state: cloud_transfer::CloudOffloadGoalState, + receipt_id: String, + evidence: disksage_lib::cloud_transfer::ProviderSyncEvidence, + evidence_record: ProviderSyncEvidenceRecord, + evidence_path: String, + permit: LocalEvictionPermit, + approval: CloudSourceEvictionApproval, + approval_path: String, + eviction: CloudEvictionResult, + adr_path: Option, + goal_path: Option, + projection_warnings: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct ReviewOutput { + action: &'static str, + decision: CloudReviewDecision, + decision_path: String, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct ReceiptReconciliationEntry { + file_name: String, + receipt_id: Option, + provider: Option, + bytes: Option, + source_state: Option, + destination_state: Option, + adr_projection_state: Option, + goal_projection_state: Option, + goal_status: Option, + goal_state: Option, + provider_sync_state: Option, + eviction_permit: bool, + attestation_error: Option, + evidence_record_count: u64, + issues: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +struct ReceiptReconciliationReport { + schema_version: u32, + output_mode: &'static str, + generated_at_ms: u64, + receipts_seen: u64, + valid_receipts: u64, + invalid_receipts: u64, + ignored_entries: u64, + source_not_present_count: u64, + destination_not_present_count: u64, + source_missing_destination_present_count: u64, + incomplete_projection_count: u64, + attestation_attempted_count: u64, + provider_evidence_written_count: u64, + pending_provider_sync_count: u64, + eviction_ready_count: u64, + unprocessed_count: u64, + incomplete_reconciliation: bool, + entries: Vec, + mutation_performed: bool, + cloud_write_executed: bool, + source_eviction_authorized: bool, + notices: Vec<&'static str>, +} + +#[cfg(not(coverage))] +const MAX_RECONCILIATION_RECEIPTS: usize = 10_000; +#[cfg(not(coverage))] +const MAX_RECONCILIATION_ATTESTATIONS: usize = 256; +#[cfg(not(coverage))] +const RECONCILIATION_MAX_DURATION: Duration = Duration::from_secs(30); + +#[cfg(not(coverage))] +const MAX_RECONCILIATION_PROJECTION_BYTES: u64 = 64 * 1024; + +#[cfg(not(coverage))] +fn regular_file_state(path: &Path) -> &'static str { + match std::fs::symlink_metadata(path) { + Ok(metadata) if metadata.file_type().is_symlink() => "unsafe", + Ok(metadata) if metadata.is_file() => "present", + Ok(_) => "unsafe", + Err(error) if error.kind() == std::io::ErrorKind::NotFound => "missing", + Err(_) => "unavailable", + } +} + +#[cfg(not(coverage))] +fn projection_state(path: &Path, kind: &str, receipt_id: &str) -> &'static str { + let metadata = match std::fs::symlink_metadata(path) { + Ok(metadata) => metadata, + Err(error) if error.kind() == std::io::ErrorKind::NotFound => return "missing", + Err(_) => return "unavailable", + }; + if metadata.file_type().is_symlink() || !metadata.is_file() { + return "unsafe"; + } + if metadata.len() > MAX_RECONCILIATION_PROJECTION_BYTES { + return "oversized"; + } + let encoded = match std::fs::read(path) { + Ok(encoded) => encoded, + Err(_) => return "unavailable", + }; + match kind { + "adr" => match serde_json::from_slice::(&encoded) { + Ok(snapshot) + if snapshot.schema_version == cloud_adr::CLOUD_ADR_SCHEMA_VERSION + && snapshot.receipt_id == receipt_id + && snapshot.adr_id == format!("cloud-offload:{receipt_id}") => + { + "valid" + } + Ok(snapshot) if snapshot.receipt_id != receipt_id => "invalid-binding", + Ok(_) => "invalid-schema", + Err(_) => "invalid", + }, + "goal" => match serde_json::from_slice::(&encoded) { + Ok(snapshot) + if snapshot.schema_version == cloud_adr::CLOUD_GOAL_SCHEMA_VERSION + && snapshot.receipt_id == receipt_id + && snapshot.goal_id == "disksage-cloud-offload" => + { + "valid" + } + Ok(snapshot) if snapshot.receipt_id != receipt_id => "invalid-binding", + Ok(_) => "invalid-schema", + Err(_) => "invalid", + }, + _ => "invalid", + } +} + +#[cfg(not(coverage))] +fn evidence_record_count(evidence_dirs: &[PathBuf], receipt_id: &str) -> u64 { + let prefix = format!("{receipt_id}-"); + let mut names = BTreeMap::new(); + for evidence_dir in evidence_dirs { + let Ok(entries) = std::fs::read_dir(evidence_dir) else { + continue; + }; + for entry in entries + .filter_map(Result::ok) + .take(MAX_RECONCILIATION_RECEIPTS) + { + let path = entry.path(); + let Some(name) = entry.file_name().to_str().map(str::to_owned) else { + continue; + }; + if name.starts_with(&prefix) + && name.ends_with(".json") + && regular_file_state(&path) == "present" + { + names.insert(name, ()); + if names.len() >= MAX_RECONCILIATION_RECEIPTS { + return names.len() as u64; + } + } + } + } + names.len() as u64 +} + +#[cfg(not(coverage))] +fn audit_evidence_dirs(receipt_dir: &Path, evidence_dir: Option<&Path>) -> Vec { + if let Some(evidence_dir) = evidence_dir { + return vec![evidence_dir.to_path_buf()]; + } + let parent = receipt_dir.parent().unwrap_or(receipt_dir); + let provider_dir = parent.join("cloud-provider-evidence"); + let legacy_dir = parent.join("cloud-sync-evidence"); + let legacy_is_safe_directory = std::fs::symlink_metadata(&legacy_dir) + .map(|metadata| metadata.is_dir() && !metadata.file_type().is_symlink()) + .unwrap_or(false); + if legacy_is_safe_directory { + vec![provider_dir, legacy_dir] + } else { + vec![provider_dir] + } +} + +#[cfg(not(coverage))] +fn audit_receipts( + receipt_dir: &Path, + evidence_dir: Option<&Path>, + generated_at_ms: u64, +) -> Result { + let metadata = std::fs::symlink_metadata(receipt_dir) + .map_err(|_| "receipt-directory-unavailable".to_string())?; + if metadata.file_type().is_symlink() || !metadata.is_dir() { + return Err("receipt-directory-unsafe".into()); + } + let mut paths = std::fs::read_dir(receipt_dir) + .map_err(|_| "receipt-directory-read-failed".to_string())? + .filter_map(Result::ok) + .map(|entry| entry.path()) + .collect::>(); + paths.sort(); + if paths.len() > MAX_RECONCILIATION_RECEIPTS { + return Err("receipt-directory-entry-limit-exceeded".into()); + } + let parent = receipt_dir.parent().unwrap_or(receipt_dir); + let evidence_dirs = audit_evidence_dirs(receipt_dir, evidence_dir); + let projection_anchor = evidence_dirs + .first() + .cloned() + .unwrap_or_else(|| parent.join("cloud-provider-evidence")); + let (adr_dir, goal_dir) = cloud_projection_dirs(&projection_anchor); + let mut report = ReceiptReconciliationReport { + schema_version: 1, + output_mode: "cloud-receipt-reconciliation", + generated_at_ms, + receipts_seen: 0, + valid_receipts: 0, + invalid_receipts: 0, + ignored_entries: 0, + source_not_present_count: 0, + destination_not_present_count: 0, + source_missing_destination_present_count: 0, + incomplete_projection_count: 0, + attestation_attempted_count: 0, + provider_evidence_written_count: 0, + pending_provider_sync_count: 0, + eviction_ready_count: 0, + unprocessed_count: 0, + incomplete_reconciliation: false, + entries: Vec::new(), + mutation_performed: false, + cloud_write_executed: false, + source_eviction_authorized: false, + notices: vec![ + "read-only", + "immutable-receipts-remain-authority", + "no-cloud-write", + "no-local-eviction", + ], + }; + for path in paths { + let file_name = path + .file_name() + .and_then(|name| name.to_str()) + .unwrap_or_default() + .to_string(); + if regular_file_state(&path) != "present" || !file_name.ends_with(".json") { + report.ignored_entries = report.ignored_entries.saturating_add(1); + continue; + } + report.receipts_seen = report.receipts_seen.saturating_add(1); + let receipt = match cloud_transfer::read_immutable_receipt(&path) { + Ok(receipt) => receipt, + Err(error) => { + report.invalid_receipts = report.invalid_receipts.saturating_add(1); + report.entries.push(ReceiptReconciliationEntry { + file_name, + receipt_id: None, + provider: None, + bytes: None, + source_state: None, + destination_state: None, + adr_projection_state: None, + goal_projection_state: None, + goal_status: None, + goal_state: None, + provider_sync_state: None, + eviction_permit: false, + attestation_error: None, + evidence_record_count: 0, + issues: vec![format!("receipt-invalid:{error}")], + }); + continue; + } + }; + report.valid_receipts = report.valid_receipts.saturating_add(1); + let source_state = regular_file_state(Path::new(&receipt.source)); + let destination_state = regular_file_state(Path::new(&receipt.destination)); + let adr_state = projection_state( + &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "adr", + &receipt.receipt_id, + ); + let goal_state = projection_state( + &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "goal", + &receipt.receipt_id, + ); + let mut issues = Vec::new(); + if source_state != "present" { + report.source_not_present_count = report.source_not_present_count.saturating_add(1); + issues.push(format!("source-{source_state}")); + } + if destination_state != "present" { + report.destination_not_present_count = + report.destination_not_present_count.saturating_add(1); + issues.push(format!("destination-{destination_state}")); + } + if source_state == "missing" && destination_state == "present" { + report.source_missing_destination_present_count = report + .source_missing_destination_present_count + .saturating_add(1); + issues.push("source-missing-destination-present".into()); + } + if adr_state != "valid" { + issues.push(format!("adr-projection-{adr_state}")); + } + if goal_state != "valid" { + issues.push(format!("goal-projection-{goal_state}")); + } + if adr_state != "valid" || goal_state != "valid" { + report.incomplete_projection_count = + report.incomplete_projection_count.saturating_add(1); + } + report.entries.push(ReceiptReconciliationEntry { + file_name, + receipt_id: Some(receipt.receipt_id.clone()), + provider: Some(receipt.provider), + bytes: Some(receipt.bytes), + source_state: Some(source_state.into()), + destination_state: Some(destination_state.into()), + adr_projection_state: Some(adr_state.into()), + goal_projection_state: Some(goal_state.into()), + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(), + goal_state: None, + provider_sync_state: None, + eviction_permit: false, + attestation_error: None, + evidence_record_count: evidence_record_count(&evidence_dirs, &receipt.receipt_id), + issues, + }); + } + Ok(report) +} + +#[cfg(not(coverage))] +fn validate_action_args(args: &Args) -> Result<(), String> { + let provider_api_copy_action = args.provider_api_copy_fingerprint.is_some(); + let copy_action = args.copy_fingerprint.is_some() || provider_api_copy_action; + let adoption_action = args.adopt_existing_fingerprint.is_some(); + let exact_duplicate_review = + args.exact_duplicate_review_prefix.is_some() || args.exact_duplicate_kind.is_some(); + if args.exact_duplicate_review_prefix.is_some() != args.exact_duplicate_kind.is_some() { + return Err( + "--exact-duplicate-review-prefix와 --exact-duplicate-kind는 함께 지정해야 함".into(), + ); + } + if args.all_readable_roots && !args.decision_summary { + return Err("--all-readable-roots에는 --decision-summary가 필요함".into()); + } + if args.all_readable_roots && (args.cloud_root.is_some() || args.provider.is_some()) { + return Err( + "--all-readable-roots는 --cloud-root 또는 --provider와 함께 사용할 수 없음".into(), + ); + } + if args.copy_fingerprint.is_some() && provider_api_copy_action { + return Err("native copy와 provider API copy는 동시에 사용할 수 없음".into()); + } + if copy_action && adoption_action { + return Err("copy action과 existing-copy adoption action은 동시에 사용할 수 없음".into()); + } + let receipt_audit_action = args.audit_receipts; + let receipt_reconcile_action = args.reconcile_receipts; + let receipt_action = receipt_audit_action || receipt_reconcile_action; + if receipt_audit_action && receipt_reconcile_action { + return Err("--audit-receipts와 --reconcile-receipts는 함께 사용할 수 없음".into()); + } + if receipt_action && (copy_action || adoption_action) { + return Err( + "receipt audit/reconciliation은 copy/adoption action과 함께 사용할 수 없음".into(), + ); + } + if !receipt_action && (copy_action || adoption_action) != args.receipt_dir.is_some() { + return Err("copy/adoption fingerprint와 --receipt-dir은 함께 지정해야 함".into()); + } + if receipt_action && args.receipt_dir.is_none() { + return Err("--audit-receipts/--reconcile-receipts에는 --receipt-dir이 필요함".into()); + } + if receipt_reconcile_action && args.evidence_dir.is_none() { + return Err("--reconcile-receipts에는 --evidence-dir이 필요함".into()); + } + if (copy_action || adoption_action) != args.confirm_copy_phrase.is_some() { + return Err("copy/adoption action에는 --confirm-copy-phrase가 반드시 필요함".into()); + } + if provider_api_copy_action && args.oauth_connections.is_none() { + return Err("--provider-api-copy-fingerprint에는 --oauth-connections가 필요함".into()); + } + if provider_api_copy_action && args.provider_object_id.is_some() { + return Err("provider API copy는 --provider-object-id를 직접 받을 수 없음".into()); + } + let review_evidence_fields = [ + args.review_candidate_fingerprint.is_some(), + args.review_fingerprint.is_some(), + args.review_disposition.is_some(), + ]; + if review_evidence_fields.iter().any(|value| *value) + && !review_evidence_fields.iter().all(|value| *value) + { + return Err("review fingerprint와 disposition은 모두 함께 지정해야 함".into()); + } + let attribution_fields = [args.reviewed_by.is_some(), args.review_rationale.is_some()]; + if attribution_fields.iter().any(|value| *value) + && !attribution_fields.iter().all(|value| *value) + { + return Err("reviewer와 rationale는 함께 지정해야 함".into()); + } + let attributed = attribution_fields.iter().all(|value| *value); + let review_action = review_evidence_fields.iter().all(|value| *value); + if review_action && !attributed { + return Err("review action에는 reviewer와 rationale가 필요함".into()); + } + if (copy_action || adoption_action) && !attributed { + return Err("copy/adoption action에는 reviewer와 rationale가 필요함".into()); + } + if attributed { + cloud_review::validate_review_attribution( + args.reviewed_by + .as_deref() + .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, + args.review_rationale + .as_deref() + .ok_or_else(|| "--review-rationale가 필요함".to_string())?, + )?; + } + let eviction_fields = [ + args.evict_receipt.is_some(), + args.confirm_receipt_id.is_some(), + args.eviction_dir.is_some(), + args.eviction_approval_dir.is_some(), + args.journal_path.is_some(), + ]; + if eviction_fields.iter().any(|value| *value) + && (!eviction_fields.iter().all(|value| *value) || !attributed) + { + return Err( + "eviction action에는 receipt, 확인 id, eviction dir, approval dir, journal path, reviewer, rationale가 모두 필요함".into(), + ); + } + let eviction_action = eviction_fields.iter().all(|value| *value) && attributed; + if attributed && !review_action && !copy_action && !adoption_action && !eviction_action { + return Err( + "reviewer와 rationale는 review, copy, adoption 또는 eviction action에만 지정할 수 있음" + .into(), + ); + } + let attestation_action = args.attest_receipt.is_some(); + let audit_evidence_override = args.audit_receipts && args.evidence_dir.is_some(); + if (attestation_action + || eviction_action + || receipt_reconcile_action + || audit_evidence_override) + != args.evidence_dir.is_some() + { + return Err("attestation/eviction action에는 --evidence-dir이 반드시 필요함".into()); + } + if args.provider_object_id.is_some() && args.oauth_connections.is_none() { + return Err("--provider-object-id에는 --oauth-connections가 필요함".into()); + } + let remote_provider_api = args.oauth_connections.is_some(); + if remote_provider_api + && args.attest_receipt.is_none() + && !receipt_reconcile_action + && !eviction_action + && !copy_action + && !args.verify_capacity + { + return Err( + "provider API는 capacity, copy, attestation 또는 eviction action에만 지정할 수 있음" + .into(), + ); + } + if args.verify_capacity + && (args.list_roots + || args.inspect_roots + || adoption_action + || attestation_action + || eviction_action + || receipt_action + || exact_duplicate_review + || args.export_naruon_lineage.is_some()) + { + return Err( + "capacity verification은 plan, review 또는 copy action에서만 사용할 수 있음".into(), + ); + } + if args + .provider_object_id + .as_deref() + .is_some_and(|value| value.trim().is_empty()) + { + return Err("--provider-object-id는 비어 있을 수 없음".into()); + } + if review_action && args.review_dir.is_none() { + return Err("review action에는 --review-dir이 필요함".into()); + } + if args.review_dir.is_some() && !review_action && !copy_action && !adoption_action { + return Err("--review-dir은 review, copy, adoption action에만 지정할 수 있음".into()); + } + if args.naruon_sync_evidence.is_some() && args.export_naruon_lineage.is_none() { + return Err("--naruon-sync-evidence에는 --export-naruon-lineage가 필요함".into()); + } + if args.export_naruon_capacity && !args.verify_capacity { + return Err("--export-naruon-capacity에는 --verify-capacity가 필요함".into()); + } + if args.export_naruon_copy_readiness && !args.verify_capacity { + return Err("--export-naruon-copy-readiness에는 --verify-capacity가 필요함".into()); + } + if args.naruon_copy_readiness_output.is_some() && !args.export_naruon_copy_readiness { + return Err( + "--naruon-copy-readiness-output에는 --export-naruon-copy-readiness가 필요함".into(), + ); + } + if args + .naruon_copy_readiness_output + .as_ref() + .is_some_and(|path| !path.is_absolute()) + { + return Err("--naruon-copy-readiness-output은 절대 경로여야 함".into()); + } + let actions = usize::from(args.list_roots) + + usize::from(args.inspect_roots) + + usize::from(receipt_action) + + usize::from(copy_action) + + usize::from(adoption_action) + + usize::from(args.attest_receipt.is_some()) + + usize::from(eviction_action) + + usize::from(review_action) + + usize::from(args.export_naruon_lineage.is_some()) + + usize::from(args.export_naruon_capacity) + + usize::from(args.export_naruon_copy_readiness) + + usize::from(args.export_semantic_catalog); + if args.all_readable_roots && actions > 0 { + return Err( + "--all-readable-roots는 mutation 또는 root inspection과 함께 사용할 수 없음".into(), + ); + } + if exact_duplicate_review + && (actions > 0 + || args.all_readable_roots + || args.decision_summary + || args.review_reason_set.is_some()) + { + return Err( + "exact duplicate review batch는 다른 action 또는 summary mode와 함께 사용할 수 없음" + .into(), + ); + } + if args.decision_summary && actions > 0 { + return Err("--decision-summary는 plan 출력에만 사용할 수 있음".into()); + } + if args.review_reason_set.is_some() && !args.decision_summary { + return Err("--review-reason-set에는 --decision-summary가 필요함".into()); + } + if args.private_review_output.is_some() + && (!args.decision_summary || args.review_reason_set.is_none()) + { + return Err( + "--private-review-output에는 --decision-summary와 --review-reason-set이 필요함".into(), + ); + } + if args.private_review_output.is_some() && args.all_readable_roots { + return Err("--private-review-output은 단일 cloud destination에서만 사용할 수 있음".into()); + } + if args.private_candidate_inspection_output.is_some() && !args.decision_summary { + return Err("--private-candidate-inspection-output에는 --decision-summary가 필요함".into()); + } + if args.private_candidate_inspection_output.is_some() + && (args.review_reason_set.is_some() || args.private_review_output.is_some()) + { + return Err( + "--private-candidate-inspection-output은 exact review subset 출력과 함께 사용할 수 없음" + .into(), + ); + } + if args.private_candidate_inspection_output.is_some() && args.all_readable_roots { + return Err( + "--private-candidate-inspection-output은 단일 cloud destination에서만 사용할 수 있음" + .into(), + ); + } + if actions > 1 { + return Err( + "root inspection, receipt reconciliation, copy, adoption, attestation, eviction, review action은 동시에 사용할 수 없음".into(), + ); + } + for (flag, fingerprint) in [ + ("--copy-fingerprint", args.copy_fingerprint.as_ref()), + ( + "--provider-api-copy-fingerprint", + args.provider_api_copy_fingerprint.as_ref(), + ), + ( + "--adopt-existing-fingerprint", + args.adopt_existing_fingerprint.as_ref(), + ), + ( + "--review-candidate-fingerprint", + args.review_candidate_fingerprint.as_ref(), + ), + ("--review-fingerprint", args.review_fingerprint.as_ref()), + ("--confirm-receipt-id", args.confirm_receipt_id.as_ref()), + ] { + let Some(fingerprint) = fingerprint else { + continue; + }; + if fingerprint.len() != 64 || !fingerprint.bytes().all(|byte| byte.is_ascii_hexdigit()) { + return Err(format!("{flag}는 64자리 16진수여야 함")); + } + } + if let Some(receipt_dir) = &args.receipt_dir { + if !receipt_dir.is_absolute() { + return Err("--receipt-dir은 절대 경로여야 함".into()); + } + } + if let Some(receipt_path) = &args.attest_receipt { + if !receipt_path.is_absolute() { + return Err("--attest-receipt는 절대 경로여야 함".into()); + } + } + if let Some(evidence_dir) = &args.evidence_dir { + if !evidence_dir.is_absolute() { + return Err("--evidence-dir은 절대 경로여야 함".into()); + } + } + if let Some(connection_path) = &args.oauth_connections { + if !connection_path.is_absolute() { + return Err("--oauth-connections는 절대 경로여야 함".into()); + } + } + if let Some(output_path) = &args.private_review_output { + if !output_path.is_absolute() { + return Err("--private-review-output은 절대 경로여야 함".into()); + } + } + if let Some(output_path) = &args.private_candidate_inspection_output { + if !output_path.is_absolute() { + return Err("--private-candidate-inspection-output은 절대 경로여야 함".into()); + } + } + if let Some(receipt_path) = &args.evict_receipt { + if !receipt_path.is_absolute() { + return Err("--evict-receipt는 절대 경로여야 함".into()); + } + } + if let Some(eviction_dir) = &args.eviction_dir { + if !eviction_dir.is_absolute() { + return Err("--eviction-dir은 절대 경로여야 함".into()); + } + } + if let Some(approval_dir) = &args.eviction_approval_dir { + if !approval_dir.is_absolute() { + return Err("--eviction-approval-dir은 절대 경로여야 함".into()); + } + } + if let Some(journal_path) = &args.journal_path { + if !journal_path.is_absolute() { + return Err("--journal-path는 절대 경로여야 함".into()); + } + } + if let Some(review_dir) = &args.review_dir { + if !review_dir.is_absolute() { + return Err("--review-dir은 절대 경로여야 함".into()); + } + } + for (flag, path) in [ + ("--export-naruon-lineage", &args.export_naruon_lineage), + ("--naruon-sync-evidence", &args.naruon_sync_evidence), + ] { + if path.as_ref().is_some_and(|path| !path.is_absolute()) { + return Err(format!("{flag}는 절대 경로여야 함")); + } + } + Ok(()) +} + +#[cfg(not(coverage))] +fn candidate_decision_state(candidate: &cloud::CloudCandidate) -> &'static str { + if candidate.blocked_reason.is_some() { + "blocked" + } else if candidate.requires_review { + "review-required" + } else { + "ready-for-copy-review" + } +} + +#[cfg(not(coverage))] +fn increment(map: &mut BTreeMap, key: &str, value: u64) { + let entry = map.entry(key.to_string()).or_default(); + *entry = entry.saturating_add(value); +} + +/// Aggregate only fixed decision labels and evidence-source labels, never paths or metadata values. +/// Review-reason bytes can overlap because one candidate may carry several independent reasons. +#[cfg(not(coverage))] +fn decision_aggregates(report: &cloud::CloudPlanReport) -> serde_json::Value { + let mut decision_state_counts = BTreeMap::new(); + let mut decision_state_candidate_bytes = BTreeMap::new(); + let mut review_required_reason_counts = BTreeMap::new(); + let mut review_required_reason_candidate_bytes = BTreeMap::new(); + let mut review_required_sole_reason_counts = BTreeMap::new(); + let mut review_required_sole_reason_candidate_bytes = BTreeMap::new(); + let mut review_required_reason_count_distribution = BTreeMap::new(); + let mut review_required_reason_count_candidate_bytes = BTreeMap::new(); + let mut review_required_reason_set_counts = BTreeMap::new(); + let mut review_required_reason_set_candidate_bytes = BTreeMap::new(); + let mut blocked_reason_counts = BTreeMap::new(); + let mut blocked_reason_candidate_bytes = BTreeMap::new(); + let mut production_time_source_counts = BTreeMap::new(); + let mut production_time_source_candidate_bytes = BTreeMap::new(); + let mut production_time_confidence_counts = BTreeMap::new(); + let mut production_time_confidence_candidate_bytes = BTreeMap::new(); + + for candidate in &report.candidates { + let state = candidate_decision_state(candidate); + increment(&mut decision_state_counts, state, 1); + increment(&mut decision_state_candidate_bytes, state, candidate.bytes); + increment( + &mut production_time_source_counts, + &candidate.production_time_source, + 1, + ); + increment( + &mut production_time_source_candidate_bytes, + &candidate.production_time_source, + candidate.bytes, + ); + increment( + &mut production_time_confidence_counts, + &candidate.production_time_confidence, + 1, + ); + increment( + &mut production_time_confidence_candidate_bytes, + &candidate.production_time_confidence, + candidate.bytes, + ); + + if state == "review-required" { + let reason_count = candidate.review_reasons.len().to_string(); + let reason_set = candidate.review_reasons.join("|"); + increment( + &mut review_required_reason_count_distribution, + &reason_count, + 1, + ); + increment( + &mut review_required_reason_count_candidate_bytes, + &reason_count, + candidate.bytes, + ); + increment(&mut review_required_reason_set_counts, &reason_set, 1); + increment( + &mut review_required_reason_set_candidate_bytes, + &reason_set, + candidate.bytes, + ); + for reason in &candidate.review_reasons { + increment(&mut review_required_reason_counts, reason, 1); + increment( + &mut review_required_reason_candidate_bytes, + reason, + candidate.bytes, + ); + } + if let [sole_reason] = candidate.review_reasons.as_slice() { + increment(&mut review_required_sole_reason_counts, sole_reason, 1); + increment( + &mut review_required_sole_reason_candidate_bytes, + sole_reason, + candidate.bytes, + ); + } + } + if state == "blocked" { + if let Some(reason) = &candidate.blocked_reason { + increment(&mut blocked_reason_counts, reason, 1); + increment(&mut blocked_reason_candidate_bytes, reason, candidate.bytes); + } + } + } + + serde_json::json!({ + "decision_state": { + "counts": decision_state_counts, + "candidate_bytes": decision_state_candidate_bytes, + }, + "review_required_reason": { + "counts": review_required_reason_counts, + "candidate_bytes": review_required_reason_candidate_bytes, + "sole_reason_counts": review_required_sole_reason_counts, + "sole_reason_candidate_bytes": review_required_sole_reason_candidate_bytes, + "reason_count_distribution": review_required_reason_count_distribution, + "reason_count_candidate_bytes": review_required_reason_count_candidate_bytes, + "reason_set_counts": review_required_reason_set_counts, + "reason_set_candidate_bytes": review_required_reason_set_candidate_bytes, + "reason_set_delimiter": "|", + "candidate_bytes_can_overlap_across_reasons": true, + }, + "blocked_reason": { + "counts": blocked_reason_counts, + "candidate_bytes": blocked_reason_candidate_bytes, + }, + "production_time_source": { + "counts": production_time_source_counts, + "candidate_bytes": production_time_source_candidate_bytes, + }, + "production_time_confidence": { + "counts": production_time_confidence_counts, + "candidate_bytes": production_time_confidence_candidate_bytes, + }, + }) +} + +#[cfg(not(coverage))] +fn redacted_decision(candidate: &cloud::CloudCandidate) -> serde_json::Value { + let approval_action = match candidate.blocked_reason.as_deref() { + None => Some(cloud_transfer::CloudCopyApprovalAction::CopyOnly), + Some("destination-exists") => { + Some(cloud_transfer::CloudCopyApprovalAction::AdoptExistingCopy) + } + Some(_) => None, + }; + serde_json::json!({ + "metadata_fingerprint": &candidate.metadata_fingerprint, + "review_fingerprint": &candidate.review_fingerprint, + "provider": candidate.provider, + "destination_account_scope": candidate.destination_account_scope, + "kind": candidate.kind, + "bytes": candidate.bytes, + "age_days": candidate.age_days, + "production_time_ms": candidate.production_time_ms, + "production_time_source": &candidate.production_time_source, + "production_time_confidence": &candidate.production_time_confidence, + "decision_state": candidate_decision_state(candidate), + "requires_review": candidate.requires_review, + "review_reasons": &candidate.review_reasons, + "blocked_reason": &candidate.blocked_reason, + "copy_approval_action": approval_action, + "exact_copy_approval_phrase": approval_action + .map(|action| cloud_transfer::cloud_copy_approval_phrase(candidate, action)), + "copy_approval_max_age_ms": cloud_transfer::MAX_CLOUD_COPY_APPROVAL_AGE_MS, + }) +} + +#[cfg(not(coverage))] +const REVIEW_BATCH_FINGERPRINT_VERSION: u32 = 2; +#[cfg(not(coverage))] +const PRIVATE_REVIEW_DOSSIER_MAX_BYTES: usize = 16 * 1024 * 1024; + +#[cfg(not(coverage))] +fn review_batch_fingerprint( + report: &cloud::CloudPlanReport, + reasons: &[String], + candidates: &[&cloud::CloudCandidate], +) -> String { + let mut ordered = candidates.to_vec(); + ordered.sort_by(|left, right| { + left.metadata_fingerprint + .cmp(&right.metadata_fingerprint) + .then_with(|| left.review_fingerprint.cmp(&right.review_fingerprint)) + }); + let mut hasher = blake3::Hasher::new(); + hasher.update(b"disksage-cloud-review-batch-v2\0"); + hasher.update(&REVIEW_BATCH_FINGERPRINT_VERSION.to_le_bytes()); + for value in [ + report.cloud_root.provider.as_str().as_bytes(), + report.cloud_root.account_scope.as_str().as_bytes(), + ] { + hasher.update(&(value.len() as u64).to_le_bytes()); + hasher.update(value); + } + for reason in reasons { + hasher.update(reason.as_bytes()); + hasher.update(&[0]); + } + hasher.update(&(ordered.len() as u64).to_le_bytes()); + for candidate in ordered { + hasher.update(candidate.metadata_fingerprint.as_bytes()); + hasher.update(candidate.review_fingerprint.as_bytes()); + hasher.update(&candidate.bytes.to_le_bytes()); + } + hasher.finalize().to_hex().to_string() +} + +#[cfg(not(coverage))] +fn exact_review_candidates<'a>( + report: &'a cloud::CloudPlanReport, + reasons: &[String], +) -> Result, String> { + let candidates = report + .candidates + .iter() + .filter(|candidate| { + candidate_decision_state(candidate) == "review-required" + && candidate.review_reasons.as_slice() == reasons + }) + .collect::>(); + if candidates.is_empty() { + return Err("현재 fresh plan에 exact review reason set이 일치하는 후보가 없음".into()); + } + Ok(candidates) +} + +/// Produce an exact reason-set slice for inspection. The stable subset fingerprint binds only the +/// selected evidence; the separate decision-batch fingerprint records full-plan freshness. Neither +/// is approval: every approve/hold decision remains individually attributed and candidate-bound. +#[cfg(not(coverage))] +fn review_batch_summary( + report: &cloud::CloudPlanReport, + reasons: &[String], +) -> Result { + let candidates = exact_review_candidates(report, reasons)?; + let candidate_bytes = candidates.iter().fold(0u64, |total, candidate| { + total.saturating_add(candidate.bytes) + }); + let batch_fingerprint = review_batch_fingerprint(report, reasons, &candidates); + let decisions = candidates + .into_iter() + .map(redacted_decision) + .collect::>(); + + Ok(serde_json::json!({ + "schema_version": 3, + "output_mode": "review-batch-summary", + "generated_at_ms": report.generated_at_ms, + "source_selection_policy": report.source_selection_policy, + "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, + "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), + "review_batch_fingerprint_version": REVIEW_BATCH_FINGERPRINT_VERSION, + "review_batch_fingerprint": batch_fingerprint, + "reason_set": reasons, + "cloud": { + "provider": report.cloud_root.provider, + "account_scope": report.cloud_root.account_scope, + }, + "candidate_count": decisions.len(), + "candidate_bytes": candidate_bytes, + "metadata_policy": { + "production_time_precedence": [ + "embedded-metadata", + "explicit-filename-date", + "filesystem-created", + "filesystem-modified", + ], + "filename_dates_are_auxiliary": true, + "summary_is_dry_run_only": true, + "batch_fingerprint_is_not_approval": true, + "candidate_review_decisions_remain_individual": true, + "exact_human_attributed_copy_approval_required": true, + "copy_approval_max_age_ms": cloud_transfer::MAX_CLOUD_COPY_APPROVAL_AGE_MS, + }, + "redacted_from_summary": [ + "absolute-source-path", + "absolute-destination-path", + "relative-source-path-and-file-name", + "cloud-root-path-and-label", + "content-title-and-authors", + "raw-metadata-evidence-values", + "dataset-profile", + ], + "decisions": decisions, + })) +} + +/// Build the private, full-evidence counterpart of an exact reason-set review summary. +/// +/// Unlike `review_batch_summary`, this value intentionally contains sensitive local paths and raw +/// embedded metadata. It must only be written through `write_private_review_dossier`. +#[cfg(not(coverage))] +fn private_review_dossier( + report: &cloud::CloudPlanReport, + reasons: &[String], +) -> Result { + let mut candidates = exact_review_candidates(report, reasons)?; + candidates.sort_by(|left, right| { + left.metadata_fingerprint + .cmp(&right.metadata_fingerprint) + .then_with(|| left.review_fingerprint.cmp(&right.review_fingerprint)) + }); + let candidate_bytes = candidates.iter().fold(0u64, |total, candidate| { + total.saturating_add(candidate.bytes) + }); + let review_batch_fingerprint = review_batch_fingerprint(report, reasons, &candidates); + + Ok(serde_json::json!({ + "schema_version": 1, + "output_mode": "private-review-dossier", + "generated_at_ms": report.generated_at_ms, + "contains_sensitive_local_metadata": true, + "source_selection_policy": report.source_selection_policy, + "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, + "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), + "review_batch_fingerprint_version": REVIEW_BATCH_FINGERPRINT_VERSION, + "review_batch_fingerprint": review_batch_fingerprint, + "reason_set": reasons, + "cloud_root": &report.cloud_root, + "candidate_count": candidates.len(), + "candidate_bytes": candidate_bytes, + "metadata_policy": { + "production_time_precedence": [ + "embedded-metadata", + "explicit-filename-date", + "filesystem-created", + "filesystem-modified", + ], + "filename_dates_are_auxiliary": true, + "raw_metadata_values_are_review_evidence_only": true, + "dossier_is_not_approval": true, + "candidate_review_decisions_remain_individual": true, + }, + "candidates": candidates, + })) +} + +#[cfg(not(coverage))] +#[derive(serde::Serialize)] +struct PrivateCandidateInspection<'a> { + decision_state: &'static str, + #[serde(flatten)] + candidate: &'a cloud::CloudCandidate, +} + +/// Build a private, full-evidence inspection dossier for every candidate in one fresh plan. +/// +/// This intentionally includes blocked candidates because their paths and embedded metadata still +/// need human inspection even though they cannot enter the review or copy gates. The dossier is +/// evidence only: it does not create review decisions, authorize a copy, or authorize eviction. +#[cfg(not(coverage))] +fn private_candidate_inspection_dossier(report: &cloud::CloudPlanReport) -> serde_json::Value { + let mut candidates = report.candidates.iter().collect::>(); + candidates.sort_by(|left, right| { + left.metadata_fingerprint + .cmp(&right.metadata_fingerprint) + .then_with(|| left.review_fingerprint.cmp(&right.review_fingerprint)) + }); + let candidate_bytes = candidates.iter().fold(0u64, |total, candidate| { + total.saturating_add(candidate.bytes) + }); + let mut decision_state_counts = BTreeMap::<&'static str, u64>::new(); + let mut decision_state_bytes = BTreeMap::<&'static str, u64>::new(); + let inspections = candidates + .into_iter() + .map(|candidate| { + let decision_state = candidate_decision_state(candidate); + *decision_state_counts.entry(decision_state).or_insert(0) += 1; + let bytes = decision_state_bytes.entry(decision_state).or_insert(0); + *bytes = bytes.saturating_add(candidate.bytes); + PrivateCandidateInspection { + decision_state, + candidate, + } + }) + .collect::>(); + + serde_json::json!({ + "schema_version": 1, + "output_mode": "private-candidate-inspection-dossier", + "generated_at_ms": report.generated_at_ms, + "contains_sensitive_local_metadata": true, + "inspection_scope": "all-current-plan-candidates", + "source_selection_policy": report.source_selection_policy, + "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, + "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), + "cloud_root": &report.cloud_root, + "candidate_count": inspections.len(), + "candidate_bytes": candidate_bytes, + "decision_state": { + "counts": decision_state_counts, + "candidate_bytes": decision_state_bytes, + }, + "metadata_policy": { + "production_time_precedence": [ + "embedded-metadata", + "explicit-filename-date", + "filesystem-created", + "filesystem-modified", + ], + "filename_dates_are_auxiliary": true, + "raw_metadata_values_are_review_evidence_only": true, + "inspection_includes_blocked_candidates": true, + "dossier_is_not_approval": true, + "candidate_review_decisions_remain_individual": true, + }, + "cloud_write_executed": false, + "source_eviction_authorized": false, + "candidates": inspections, + }) +} + +#[cfg(all(not(coverage), unix))] +fn write_private_review_dossier( + path: &Path, + dossier: &serde_json::Value, +) -> Result<(String, usize), String> { + let parent = path + .parent() + .filter(|parent| !parent.as_os_str().is_empty()) + .ok_or_else(|| "private-review-output-parent-missing".to_string())?; + let parent_metadata = std::fs::symlink_metadata(parent) + .map_err(|_| "private-review-output-parent-unavailable".to_string())?; + if !parent_metadata.is_dir() || parent_metadata.file_type().is_symlink() { + return Err("private-review-output-parent-unsafe".into()); + } + + let encoded = serde_json::to_vec_pretty(dossier) + .map_err(|_| "private-review-output-json-invalid".to_string())?; + if encoded.len() > PRIVATE_REVIEW_DOSSIER_MAX_BYTES { + return Err("private-review-output-too-large".into()); + } + + let mut options = OpenOptions::new(); + options.write(true).create_new(true); + { + use std::os::unix::fs::OpenOptionsExt; + options.mode(0o600); + } + let mut file = options + .open(path) + .map_err(|_| "private-review-output-create-failed".to_string())?; + let result = (|| -> Result<(), String> { + file.write_all(&encoded) + .and_then(|_| file.sync_all()) + .map_err(|_| "private-review-output-write-failed".to_string())?; + let metadata = file + .metadata() + .map_err(|_| "private-review-output-metadata-failed".to_string())?; + if !metadata.is_file() || metadata.file_type().is_symlink() { + return Err("private-review-output-unsafe".into()); + } + { + use std::os::unix::fs::PermissionsExt; + if metadata.permissions().mode() & 0o777 != 0o600 { + return Err("private-review-output-mode-invalid".into()); + } + std::fs::File::open(parent) + .and_then(|directory| directory.sync_all()) + .map_err(|_| "private-review-output-parent-sync-failed".to_string())?; + } + Ok(()) + })(); + if let Err(error) = result { + drop(file); + let _ = std::fs::remove_file(path); + return Err(error); + } + + let sha256 = Sha256::digest(&encoded) + .iter() + .map(|byte| format!("{byte:02x}")) + .collect::(); + Ok((sha256, encoded.len())) +} + +#[cfg(all(not(coverage), not(unix)))] +fn write_private_review_dossier( + _path: &Path, + _dossier: &serde_json::Value, +) -> Result<(String, usize), String> { + Err("private-review-output-secure-mode-unsupported".into()) +} + +#[cfg(not(coverage))] +const EXACT_DUPLICATE_REVIEW_BATCH_FINGERPRINT_VERSION: u32 = 1; + +#[cfg(not(coverage))] +#[derive(Debug, Clone, serde::Serialize)] +struct RedactedMetadataEvidence { + field: String, + source: String, + confidence: String, +} + +#[cfg(not(coverage))] +#[derive(Debug, Clone, serde::Serialize)] +struct ExactDuplicateReviewMember { + metadata_fingerprint: String, + review_fingerprint: String, + relative_path: String, + kind: ArchiveKind, + bytes: u64, + production_time_ms: u64, + production_time_source: String, + production_time_confidence: String, + production_evidence: Vec, + source_lineage_evidence_fields: Vec, + canonical_recommendation: &'static str, + review_reasons: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, Clone, serde::Serialize)] +struct ExactDuplicateReviewCluster { + cluster_fingerprint: String, + content_sha256: String, + bytes_per_candidate: u64, + candidate_count: usize, + redundant_bytes: u64, + recommendation_confidence: String, + recommendation_reason_codes: Vec, + canonical: ExactDuplicateReviewMember, + redundant_copies: Vec, + requires_human_confirmation: bool, +} + +#[cfg(not(coverage))] +fn archive_kind_label(kind: ArchiveKind) -> &'static str { + match kind { + ArchiveKind::Document => "document", + ArchiveKind::Media => "media", + ArchiveKind::Archive => "archive", + ArchiveKind::Dataset => "dataset", + ArchiveKind::Backup => "backup", + ArchiveKind::Creative => "creative", + ArchiveKind::IncompleteDownload => "incomplete-download", + } +} + +#[cfg(not(coverage))] +fn normal_relative_components(path: &str) -> Option> { + let mut values = Vec::new(); + for component in Path::new(path).components() { + let std::path::Component::Normal(value) = component else { + return None; + }; + values.push(value.to_str()?.to_string()); + } + (!values.is_empty()).then_some(values) +} + +#[cfg(not(coverage))] +fn exact_duplicate_content_sha256(candidate: &cloud::CloudCandidate) -> Result { + let mut values = candidate + .metadata_evidence + .iter() + .filter(|evidence| evidence.field == "exact-duplicate-content-sha256") + .map(|evidence| evidence.value.clone()) + .collect::>(); + values.sort(); + values.dedup(); + match values.as_slice() { + [value] + if value.len() == 64 + && value + .bytes() + .all(|byte| byte.is_ascii_hexdigit() && !byte.is_ascii_uppercase()) => + { + Ok(value.clone()) + } + [] => Err("exact-duplicate-content-sha256-missing".into()), + _ => Err("exact-duplicate-content-sha256-invalid-or-conflicting".into()), + } +} + +#[cfg(not(coverage))] +fn exact_duplicate_review_member( + candidate: &cloud::CloudCandidate, + canonical: bool, +) -> ExactDuplicateReviewMember { + let mut production_evidence = candidate + .metadata_evidence + .iter() + .filter(|evidence| { + matches!( + evidence.field.as_str(), + "production-date" + | "filename-date-hint" + | "filesystem-created-date" + | "filesystem-modified-date" + ) + }) + .map(|evidence| RedactedMetadataEvidence { + field: evidence.field.clone(), + source: evidence.source.clone(), + confidence: evidence.confidence.clone(), + }) + .collect::>(); + production_evidence.sort_by(|left, right| { + left.field + .cmp(&right.field) + .then_with(|| left.source.cmp(&right.source)) + .then_with(|| left.confidence.cmp(&right.confidence)) + }); + production_evidence.dedup_by(|left, right| { + left.field == right.field + && left.source == right.source + && left.confidence == right.confidence + }); + + let mut source_lineage_evidence_fields = candidate + .content_context + .iter() + .filter_map(|context| context.split_once('=').map(|(field, _)| field.to_string())) + .collect::>(); + source_lineage_evidence_fields.sort(); + source_lineage_evidence_fields.dedup(); + + ExactDuplicateReviewMember { + metadata_fingerprint: candidate.metadata_fingerprint.clone(), + review_fingerprint: candidate.review_fingerprint.clone(), + relative_path: candidate.relative_path.clone(), + kind: candidate.kind, + bytes: candidate.bytes, + production_time_ms: candidate.production_time_ms, + production_time_source: candidate.production_time_source.clone(), + production_time_confidence: candidate.production_time_confidence.clone(), + production_evidence, + source_lineage_evidence_fields, + canonical_recommendation: if canonical { + "preferred" + } else { + "redundant-copy-candidate" + }, + review_reasons: candidate.review_reasons.clone(), + } +} + +#[cfg(not(coverage))] +fn hash_exact_duplicate_review_value(hasher: &mut blake3::Hasher, value: &[u8]) { + hasher.update(&(value.len() as u64).to_le_bytes()); + hasher.update(value); +} + +#[cfg(not(coverage))] +fn exact_duplicate_review_batch_fingerprint( + prefix: &str, + kind: ArchiveKind, + clusters: &[ExactDuplicateReviewCluster], +) -> String { + let mut hasher = blake3::Hasher::new(); + hasher.update(b"disksage-exact-duplicate-review-batch-v1\0"); + hasher.update(&EXACT_DUPLICATE_REVIEW_BATCH_FINGERPRINT_VERSION.to_le_bytes()); + hash_exact_duplicate_review_value(&mut hasher, prefix.as_bytes()); + hash_exact_duplicate_review_value(&mut hasher, archive_kind_label(kind).as_bytes()); + hash_exact_duplicate_review_value(&mut hasher, &(clusters.len() as u64).to_le_bytes()); + for cluster in clusters { + for value in [ + cluster.cluster_fingerprint.as_bytes(), + cluster.content_sha256.as_bytes(), + cluster.canonical.metadata_fingerprint.as_bytes(), + cluster.canonical.review_fingerprint.as_bytes(), + cluster.canonical.relative_path.as_bytes(), + ] { + hash_exact_duplicate_review_value(&mut hasher, value); + } + hash_exact_duplicate_review_value(&mut hasher, &cluster.bytes_per_candidate.to_le_bytes()); + hash_exact_duplicate_review_value(&mut hasher, &cluster.redundant_bytes.to_le_bytes()); + for member in &cluster.redundant_copies { + for value in [ + member.metadata_fingerprint.as_bytes(), + member.review_fingerprint.as_bytes(), + member.relative_path.as_bytes(), + ] { + hash_exact_duplicate_review_value(&mut hasher, value); + } + hash_exact_duplicate_review_value(&mut hasher, &member.bytes.to_le_bytes()); + } + } + hasher.finalize().to_hex().to_string() +} + +/// Emit a conservative, source-local review slice for exact duplicates. +/// +/// The selected canonical copy must be a direct child of the source root. Every redundant member +/// must be nested beneath a first path component that begins with the operator-supplied prefix. +/// The output is evidence for a later human decision; it cannot authorize or execute Trash. +#[cfg(not(coverage))] +fn exact_duplicate_review_batch( + report: &cloud::CloudPlanReport, + redundant_prefix: &str, + kind: ArchiveKind, +) -> Result { + let mut selected = Vec::new(); + for cluster in &report.exact_duplicates.clusters { + if cluster.recommendation_confidence != "high" + || cluster.recommendation_reason_codes.as_slice() + != ["richer-source-lineage-context-preferred"] + { + continue; + } + if !cluster.requires_human_confirmation + || cluster.candidate_count < 2 + || cluster.member_metadata_fingerprints.len() != cluster.candidate_count + || cluster.redundant_bytes + != cluster + .bytes_per_candidate + .saturating_mul((cluster.candidate_count - 1) as u64) + { + return Err("exact-duplicate-review-cluster-contract-invalid".into()); + } + + let mut members = Vec::with_capacity(cluster.member_metadata_fingerprints.len()); + for fingerprint in &cluster.member_metadata_fingerprints { + let matches = report + .candidates + .iter() + .filter(|candidate| candidate.metadata_fingerprint == *fingerprint) + .collect::>(); + match matches.as_slice() { + [only] => members.push(*only), + [] => { + return Err(format!( + "exact-duplicate-review-candidate-missing-from-bounded-plan:{fingerprint}" + )); + } + _ => { + return Err(format!( + "exact-duplicate-review-candidate-fingerprint-ambiguous:{fingerprint}" + )); + } + } + } + if members + .iter() + .any(|candidate| candidate.bytes != cluster.bytes_per_candidate) + { + return Err("exact-duplicate-review-member-size-mismatch".into()); + } + let canonical = members + .iter() + .copied() + .filter(|candidate| { + candidate.metadata_fingerprint == cluster.recommended_canonical_metadata_fingerprint + }) + .collect::>(); + let canonical = match canonical.as_slice() { + [only] => *only, + _ => return Err("exact-duplicate-review-canonical-not-unique".into()), + }; + if canonical.kind != kind + || normal_relative_components(&canonical.relative_path) + .is_none_or(|components| components.len() != 1) + { + continue; + } + + let mut redundant = members + .into_iter() + .filter(|candidate| candidate.metadata_fingerprint != canonical.metadata_fingerprint) + .collect::>(); + if redundant.is_empty() || redundant.iter().any(|candidate| candidate.kind != kind) { + continue; + } + let all_under_prefix = redundant.iter().all(|candidate| { + normal_relative_components(&candidate.relative_path).is_some_and(|components| { + components.len() > 1 && components[0].starts_with(redundant_prefix) + }) + }); + if !all_under_prefix { + continue; + } + redundant.sort_by(|left, right| { + left.relative_path + .cmp(&right.relative_path) + .then_with(|| left.metadata_fingerprint.cmp(&right.metadata_fingerprint)) + }); + + let content_sha256 = exact_duplicate_content_sha256(canonical)?; + for member in &redundant { + if exact_duplicate_content_sha256(member)? != content_sha256 { + return Err("exact-duplicate-review-content-sha256-mismatch".into()); + } + } + selected.push(ExactDuplicateReviewCluster { + cluster_fingerprint: cluster.cluster_fingerprint.clone(), + content_sha256, + bytes_per_candidate: cluster.bytes_per_candidate, + candidate_count: cluster.candidate_count, + redundant_bytes: cluster.redundant_bytes, + recommendation_confidence: cluster.recommendation_confidence.clone(), + recommendation_reason_codes: cluster.recommendation_reason_codes.clone(), + canonical: exact_duplicate_review_member(canonical, true), + redundant_copies: redundant + .into_iter() + .map(|candidate| exact_duplicate_review_member(candidate, false)) + .collect(), + requires_human_confirmation: true, + }); + } + if selected.is_empty() { + return Err("현재 fresh plan에 제한 조건을 만족하는 exact duplicate가 없음".into()); + } + selected.sort_by(|left, right| left.cluster_fingerprint.cmp(&right.cluster_fingerprint)); + let batch_fingerprint = + exact_duplicate_review_batch_fingerprint(redundant_prefix, kind, &selected); + let redundant_copy_count = selected + .iter() + .map(|cluster| cluster.redundant_copies.len()) + .sum::(); + let redundant_bytes = selected.iter().fold(0u64, |total, cluster| { + total.saturating_add(cluster.redundant_bytes) + }); + + Ok(serde_json::json!({ + "schema_version": 1, + "output_mode": "exact-duplicate-review-batch", + "generated_at_ms": report.generated_at_ms, + "exact_duplicate_review_batch_fingerprint_version": + EXACT_DUPLICATE_REVIEW_BATCH_FINGERPRINT_VERSION, + "exact_duplicate_review_batch_fingerprint": batch_fingerprint, + "selection": { + "recommendation_confidence": "high", + "recommendation_reason_codes_exact": [ + "richer-source-lineage-context-preferred", + ], + "canonical_location": "direct-child-of-source-root", + "redundant_first_component_prefix": redundant_prefix, + "kind": kind, + }, + "metadata_policy": { + "production_time_precedence": [ + "embedded-metadata", + "explicit-filename-date", + "filesystem-created", + "filesystem-modified", + ], + "filename_dates_are_auxiliary": true, + "summary_is_dry_run_only": true, + "batch_fingerprint_is_not_approval": true, + "human_confirmation_required_for_every_cluster": true, + "trash_execution_is_not_available_in_this_output_mode": true, + }, + "redacted_from_summary": [ + "absolute-source-path", + "absolute-destination-path", + "cloud-root-path-and-label", + "content-title-and-authors", + "raw-metadata-evidence-values", + "source-lineage-evidence-values", + "dataset-profile", + ], + "cluster_count": selected.len(), + "candidate_count": selected.len().saturating_add(redundant_copy_count), + "redundant_copy_count": redundant_copy_count, + "redundant_bytes": redundant_bytes, + "clusters": selected, + })) +} + +/// Produce a bounded operator view without paths, file names, or raw embedded metadata values. +/// +/// The full plan remains the durable lineage source. This view is intentionally limited to the +/// evidence needed to select a candidate for a separately attributed human review. +#[cfg(not(coverage))] +fn decision_summary(report: &cloud::CloudPlanReport) -> serde_json::Value { + let aggregates = decision_aggregates(report); + let decisions = report + .candidates + .iter() + .map(redacted_decision) + .collect::>(); + + serde_json::json!({ + "schema_version": 3, + "output_mode": "decision-summary", + "generated_at_ms": report.generated_at_ms, + "source_selection_policy": report.source_selection_policy, + "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, + "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), + "metadata_policy": { + "production_time_precedence": [ + "embedded-metadata", + "explicit-filename-date", + "filesystem-created", + "filesystem-modified", + ], + "filename_dates_are_auxiliary": true, + "summary_is_dry_run_only": true, + "review_fingerprints_bind_operator_decisions": true, + "exact_human_attributed_copy_approval_required": true, + "copy_approval_is_bound_to_review_fingerprint_and_action": true, + "verified_provider_sync_required_before_local_eviction": true, + }, + "cloud": { + "provider": report.cloud_root.provider, + "account_scope": report.cloud_root.account_scope, + }, + "candidate_count": report.candidates.len(), + "candidate_bytes": report.candidate_bytes, + "potentially_reclaimable_bytes": report.potentially_reclaimable_bytes, + "aggregates": aggregates, + "exact_duplicates": &report.exact_duplicates, + "capacity": &report.capacity, + "notices": &report.notices, + "redacted_from_summary": [ + "absolute-source-path", + "absolute-destination-path", + "relative-source-path-and-file-name", + "cloud-root-path-and-label", + "content-title-and-authors", + "raw-metadata-evidence-values", + "dataset-profile", + ], + "decisions": decisions, + }) +} + +/// Summarize the concrete lineage-preserving destination manifest without exposing any path or +/// embedded metadata value. Counts and bytes are deterministic for the decision batch. +#[cfg(not(coverage))] +fn organization_manifest_summary(report: &cloud::CloudPlanReport) -> serde_json::Value { + let mut kind_counts = BTreeMap::new(); + let mut kind_bytes = BTreeMap::new(); + let mut production_month_counts = BTreeMap::new(); + let mut production_month_bytes = BTreeMap::new(); + let mut context_coverage_counts = BTreeMap::new(); + let mut context_coverage_bytes = BTreeMap::new(); + let mut destination_collision_count = 0_u64; + let mut destination_collision_bytes = 0_u64; + + for candidate in &report.candidates { + let kind = archive_kind_label(candidate.kind); + increment(&mut kind_counts, kind, 1); + increment(&mut kind_bytes, kind, candidate.bytes); + + let (year, month) = cloud::production_year_month(candidate.production_time_ms); + let production_month = format!("{year:04}-{month:02}"); + increment(&mut production_month_counts, &production_month, 1); + increment( + &mut production_month_bytes, + &production_month, + candidate.bytes, + ); + + for (label, present) in [ + ("content-title-present", candidate.content_title.is_some()), + ( + "content-authors-present", + !candidate.content_authors.is_empty(), + ), + ( + "content-context-present", + !candidate.content_context.is_empty(), + ), + ( + "nested-source-context-preserved", + candidate.source_context != ".", + ), + ( + "embedded-metadata-present", + candidate + .metadata_evidence + .iter() + .any(|evidence| evidence.source.starts_with("embedded:")), + ), + ] { + if present { + increment(&mut context_coverage_counts, label, 1); + increment(&mut context_coverage_bytes, label, candidate.bytes); + } + } + + if candidate.blocked_reason.as_deref() == Some("destination-exists") { + destination_collision_count = destination_collision_count.saturating_add(1); + destination_collision_bytes = + destination_collision_bytes.saturating_add(candidate.bytes); + } + } + + serde_json::json!({ + "layout_policy": + "DiskSage Archive/{production-year}/{production-month}/{archive-kind}/{source-relative-path}", + "production_time_drives_year_and_month": true, + "source_relative_path_preserved_for_lineage": true, + "bound_to_decision_batch_fingerprint": true, + "candidate_groups": { + "archive_kind": { + "counts": kind_counts, + "candidate_bytes": kind_bytes, + }, + "production_month": { + "counts": production_month_counts, + "candidate_bytes": production_month_bytes, + }, + }, + "context_evidence_coverage": { + "counts": context_coverage_counts, + "candidate_bytes": context_coverage_bytes, + "candidate_bytes_can_overlap_across_evidence_kinds": true, + }, + "destination_collision_preflight": { + "counts": destination_collision_count, + "candidate_bytes": destination_collision_bytes, + "collision_policy": "block-do-not-overwrite", + }, + "manifest_is_dry_run_only": true, + "human_review_required_before_copy": true, + }) +} + +/// Produce a small, path-free overview for comparing destinations before opening a private +/// candidate dossier. Unlike `decision_summary`, this deliberately omits per-candidate +/// fingerprints, combinatorial reason sets, and duplicate-cluster membership. +#[cfg(not(coverage))] +fn compact_decision_summary(report: &cloud::CloudPlanReport) -> serde_json::Value { + let aggregates = decision_aggregates(report); + let review_required = &aggregates["review_required_reason"]; + let organization_manifest = organization_manifest_summary(report); + + serde_json::json!({ + "schema_version": 3, + "output_mode": "compact-decision-summary", + "generated_at_ms": report.generated_at_ms, + "source_selection_policy": report.source_selection_policy, + "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, + "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), + "metadata_policy": { + "production_time_precedence": [ + "embedded-metadata", + "explicit-filename-date", + "filesystem-created", + "filesystem-modified", + ], + "filename_dates_are_auxiliary": true, + "summary_is_dry_run_only": true, + "batch_fingerprint_is_not_approval": true, + "private_candidate_review_required_before_copy": true, + "exact_human_attributed_copy_approval_required": true, + "copy_approval_max_age_ms": cloud_transfer::MAX_CLOUD_COPY_APPROVAL_AGE_MS, + "verified_provider_sync_required_before_local_eviction": true, + }, + "cloud": { + "provider": report.cloud_root.provider, + "account_scope": report.cloud_root.account_scope, + }, + "candidate_count": report.candidates.len(), + "candidate_bytes": report.candidate_bytes, + "potentially_reclaimable_bytes": report.potentially_reclaimable_bytes, + "aggregates": { + "decision_state": aggregates["decision_state"].clone(), + "review_required_reason": { + "counts": review_required["counts"].clone(), + "candidate_bytes": review_required["candidate_bytes"].clone(), + "sole_reason_counts": review_required["sole_reason_counts"].clone(), + "sole_reason_candidate_bytes": + review_required["sole_reason_candidate_bytes"].clone(), + "candidate_bytes_can_overlap_across_reasons": true, + }, + "blocked_reason": aggregates["blocked_reason"].clone(), + "production_time_source": aggregates["production_time_source"].clone(), + "production_time_confidence": + aggregates["production_time_confidence"].clone(), + }, + "exact_duplicates": { + "cluster_count": report.exact_duplicates.cluster_count, + "candidate_count": report.exact_duplicates.candidate_count, + "candidate_bytes": report.exact_duplicates.candidate_bytes, + "redundant_bytes": report.exact_duplicates.redundant_bytes, + "cluster_members_omitted": true, + "human_confirmation_required": true, + }, + "organization_manifest": organization_manifest, + "capacity": &report.capacity, + "notices": &report.notices, + "next_step": { + "detailed_redacted_queue": "--decision-summary", + "private_exact_reason_dossier": + "--decision-summary --review-reason-set REASON|REASON --private-review-output ABSOLUTE_NEW_FILE.json", + }, + "redacted_from_summary": [ + "absolute-source-path", + "absolute-destination-path", + "relative-source-path-and-file-name", + "cloud-root-path-and-label", + "content-title-and-authors", + "raw-metadata-evidence-values", + "dataset-profile", + "candidate-metadata-and-review-fingerprints", + "review-reason-set-combinations", + "exact-duplicate-cluster-members", + ], + "candidate_details_included": false, + "cloud_write_executed": false, + "source_eviction_authorized": false, + }) +} + +#[cfg(not(coverage))] +fn receipt_cloud_root(receipt: &CloudCopyReceipt, home: &Path) -> Result { + let destination = Path::new(&receipt.destination); + cloud::discover_cloud_roots(home) + .into_iter() + .filter(|root| { + root.provider == receipt.provider && destination.starts_with(Path::new(&root.path)) + }) + .max_by_key(|root| Path::new(&root.path).components().count()) + .ok_or_else(|| "receipt-cloud-root-unavailable".to_string()) +} + +#[cfg(not(coverage))] +fn cloud_projection_dirs(anchor: &Path) -> (PathBuf, PathBuf) { + let parent = anchor.parent().unwrap_or(anchor); + (parent.join("cloud-adr"), parent.join("cloud-goals")) +} + +#[cfg(not(coverage))] +fn collect_root_capacity( + root: &CloudRoot, + oauth_connections: Option<&Path>, + observed_at_ms: u64, +) -> Result { + if root.provider == CloudProvider::Icloud { + return provider_capacity::collect_icloud_native_capacity(observed_at_ms); + } + let connection_path = oauth_connections + .ok_or_else(|| "provider-capacity-oauth-connections-required".to_string())?; + let access_token = provider_oauth::refreshed_access_token(connection_path, root)?; + provider_capacity::collect_authenticated_capacity( + root.provider, + access_token.as_str(), + observed_at_ms, + &FixedHostProviderCapacityClient::default(), + ) +} + +#[cfg(not(coverage))] +fn attach_capacity_snapshot( + report: &mut cloud::CloudPlanReport, + snapshot: provider_capacity::CloudCapacitySnapshot, + reserve_mib: u64, +) -> Result<(), String> { + if snapshot.provider != report.cloud_root.provider + || snapshot.account_scope.is_some_and(|scope| { + report.cloud_root.account_scope != CloudAccountScope::Unknown + && report.cloud_root.account_scope != scope + }) + { + return Err("cloud-capacity-root-binding-mismatch".into()); + } + let largest_candidate_bytes = report + .candidates + .iter() + .filter(|candidate| candidate.blocked_reason.is_none()) + .map(|candidate| candidate.bytes) + .max() + .unwrap_or_default(); + let assessment = provider_capacity::assess_capacity( + snapshot, + report.potentially_reclaimable_bytes, + largest_candidate_bytes, + reserve_mib.saturating_mul(1024 * 1024), + ); + report + .notices + .retain(|notice| notice != "cloud-quota-unverified"); + report.notices.push( + match assessment.can_fit { + Some(true) + if assessment.snapshot.evidence_kind + == provider_capacity::CapacityEvidenceKind::ProviderNativeStatus => + { + "cloud-quota-provider-native-verified" + } + Some(true) => "cloud-quota-provider-api-verified", + Some(false) => "cloud-quota-insufficient-or-blocked", + None => "cloud-quota-unavailable", + } + .into(), + ); + report.capacity = Some(assessment); + Ok(()) +} + +#[cfg(not(coverage))] +fn plan_with_optional_capacity( + source: &cloud::CloudSourceSnapshot, + root: &CloudRoot, + verify_capacity: bool, + oauth_connections: Option<&Path>, + reserve_mib: u64, + home: &Path, +) -> Result<(CloudRoot, cloud::CloudPlanReport), String> { + if !verify_capacity { + let mut report = cloud::plan_cloud_archive_from_snapshot(source, root); + attach_local_copy_prerequisites(&mut report, home); + return Ok((root.clone(), report)); + } + let observed_at_ms = cloud::system_now_ms(); + let capacity_snapshot = match collect_root_capacity(root, oauth_connections, observed_at_ms) { + Ok(snapshot) => snapshot, + Err(error) => provider_capacity::unavailable_capacity_from_error( + root.provider, + observed_at_ms, + &error, + ), + }; + let refined_root = + provider_capacity::root_with_verified_capacity_scope(root, &capacity_snapshot)?; + let mut report = cloud::plan_cloud_archive_from_snapshot(source, &refined_root); + attach_capacity_snapshot(&mut report, capacity_snapshot, reserve_mib)?; + attach_local_copy_prerequisites(&mut report, home); + Ok((refined_root, report)) +} + +#[cfg(not(coverage))] +fn attach_local_copy_prerequisites(report: &mut cloud::CloudPlanReport, home: &Path) { + let runtime = provider_client_runtime::collect_provider_client_runtime( + report.cloud_root.provider, + cloud::system_now_ms(), + ); + provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); + if report.cloud_root.provider == CloudProvider::Icloud { + let health = + icloud_sync_health::inspect_new_copy_admission(home, cloud::system_now_ms()).ok(); + icloud_sync_health::attach_new_copy_admission_notice(&mut report.notices, health.as_ref()); + } else { + let global_sync = + provider_global_sync::inspect_new_copy_admission(report.cloud_root.provider).ok(); + provider_global_sync::attach_new_copy_admission_notice( + &mut report.notices, + global_sync.as_ref(), + ); + } +} + +#[cfg(not(coverage))] +fn collect_receipt_sync_evidence( + receipt: &CloudCopyReceipt, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, + confirmed_at_ms: u64, + force_provider_api: bool, +) -> Result { + let provider_object_id = provider_object_id + .map(str::trim) + .filter(|value| !value.is_empty()); + match receipt.provider { + CloudProvider::Icloud => { + if provider_object_id.is_some() { + return Err("icloud-provider-api-fallback-not-supported".into()); + } + provider_sync::collect_icloud_sync_evidence(receipt, confirmed_at_ms) + } + CloudProvider::Onedrive | CloudProvider::GoogleDrive => { + let fallback_requested = oauth_connections.is_some(); + if !force_provider_api { + match provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) { + Ok(evidence) if evidence.sync_complete || !fallback_requested => { + return Ok(evidence); + } + Err(error) if !fallback_requested => return Err(error), + Ok(_) | Err(_) => {} + } + } + { + let connection_path = oauth_connections + .ok_or_else(|| "oauth-connections-path-missing".to_string())?; + let selected_root = receipt_cloud_root(receipt, home)?; + let access_token = + provider_oauth::refreshed_access_token(connection_path, &selected_root)?; + match receipt.provider { + CloudProvider::Onedrive => { + if provider_object_id.is_some() { + return Err("onedrive-provider-object-id-not-accepted".into()); + } + let locator = provider_api_client::onedrive_path_locator( + Path::new(&selected_root.path), + Path::new(&receipt.destination), + )?; + provider_api_client::collect_authenticated_provider_api_evidence_from_source( + receipt, + &locator, + access_token.as_str(), + &FixedHostProviderMetadataClient::default(), + confirmed_at_ms, + ) + } + CloudProvider::GoogleDrive => { + let locator = provider_api_client::google_drive_path_locator( + Path::new(&selected_root.path), + Path::new(&receipt.destination), + provider_object_id + .ok_or_else(|| "provider-object-id-missing".to_string())?, + )?; + provider_api_client::collect_authenticated_google_drive_path_evidence_from_source( + receipt, + &locator, + access_token.as_str(), + &FixedHostProviderMetadataClient::default(), + confirmed_at_ms, + ) + } + CloudProvider::Icloud => unreachable!(), + } + } + } + } +} + +#[cfg(not(coverage))] +fn attest_receipt( + path: &Path, + evidence_dir: &Path, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, +) -> Result { + attest_receipt_with_mode( + path, + evidence_dir, + provider_object_id, + oauth_connections, + home, + false, + ) +} + +#[cfg(not(coverage))] +fn attest_receipt_with_mode( + path: &Path, + evidence_dir: &Path, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, + force_provider_api: bool, +) -> Result { + let receipt = cloud_transfer::read_immutable_receipt(path)?; + let confirmed_at_ms = cloud::system_now_ms(); + let evidence = collect_receipt_sync_evidence( + &receipt, + provider_object_id, + oauth_connections, + home, + confirmed_at_ms, + force_provider_api, + )?; + let assessment = provider_sync::assess_provider_sync_timeliness(&receipt, &evidence)?; + let (evidence_record, evidence_path) = + provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; + let source_blocker = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); + let (mut permit, mut blockers) = + match cloud_transfer::approve_local_eviction(&receipt, &evidence_record) { + Ok(permit) => (Some(permit), Vec::new()), + Err(blockers) => (None, blockers), + }; + if let Some(blocker) = source_blocker { + permit = None; + if !blockers.iter().any(|existing| existing == blocker) { + blockers.push(blocker.into()); + } + } + let goal_state = + cloud_transfer::CloudOffloadGoalState::after_attestation(&evidence, permit.is_some()); + let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); + let mut adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); + let mut goal = cloud_adr::goal_snapshot_from_evidence( + &receipt, + &evidence_record, + goal_state, + confirmed_at_ms, + ); + if let Some(blocker) = source_blocker { + goal.status = "blocked".into(); + goal.completion_gates.insert("source-present".into(), false); + adr.decision = format!("{}-source-state-unverified", adr.decision); + adr.consequences + .push(format!("source-state-blocked:{blocker}")); + } + let provider_blocker = blockers + .iter() + .find(|existing| Some(existing.as_str()) != source_blocker) + .map(String::as_str); + let projection = cloud_adr::write_projection_pair_with_state_blockers_outcome( + &adr_dir, + &adr, + &goal_dir, + &goal, + source_blocker, + provider_blocker, + ); + Ok(AttestationOutput { + action: if force_provider_api { + "attest-provider-api" + } else { + "attest-provider-native" + }, + goal_state, + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(), + receipt_id: receipt.receipt_id, + evidence, + assessment, + evidence_record, + evidence_path: evidence_path.to_string_lossy().into_owned(), + adr_path: projection + .adr_path + .map(|path| path.to_string_lossy().into_owned()), + goal_path: projection + .goal_path + .map(|path| path.to_string_lossy().into_owned()), + projection_warnings: projection.warnings, + permit, + blockers, + }) +} + +#[cfg(not(coverage))] +fn stable_reconciliation_error(error: &str) -> String { + let token = error.split(',').next().unwrap_or_default(); + if !token.is_empty() + && token.len() <= 128 + && token + .bytes() + .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') + { + token.to_string() + } else { + "provider-attestation-failed".into() + } +} + +#[cfg(not(coverage))] +fn copy_candidate_via_provider_api( + candidate: &cloud::CloudCandidate, + selected: &CloudRoot, + report: &cloud::CloudPlanReport, + receipt_dir: &Path, + review_decision: Option<&CloudReviewDecision>, + exact_confirmation_phrase: &str, + approved_by: &str, + rationale: &str, + oauth_connections: &Path, + capacity_reserve_mib: u64, + home: &Path, +) -> Result { + if selected.provider == CloudProvider::Icloud { + return Err("provider-api-icloud-unsupported".into()); + } + let connection = provider_oauth::connection_for_root( + &provider_oauth::load_connections(oauth_connections)?, + selected, + )?; + if !provider_oauth::scope_allows_write(&connection) { + return Err("provider-oauth-write-scope-required".into()); + } + let capacity_snapshot = report + .capacity + .as_ref() + .map(|assessment| assessment.snapshot.clone()) + .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; + let capacity = provider_capacity::assess_capacity( + capacity_snapshot, + candidate.bytes, + candidate.bytes, + capacity_reserve_mib.saturating_mul(1024 * 1024), + ); + if capacity.can_fit != Some(true) { + return Err(if capacity.blockers.is_empty() { + "cloud-capacity-verification-required".into() + } else { + capacity.blockers.join(",") + }); + } + + let copy_approval = cloud_transfer::create_cloud_copy_approval( + candidate, + selected, + cloud_transfer::CloudCopyApprovalAction::CopyOnly, + cloud::system_now_ms(), + approved_by, + rationale, + exact_confirmation_phrase, + )?; + let copied_at_ms = cloud::system_now_ms(); + let (receipt, source_hashes) = cloud_transfer::prepare_provider_api_source_receipt( + candidate, + selected, + review_decision, + ©_approval, + copied_at_ms, + )?; + let access_token = provider_oauth::refreshed_access_token(oauth_connections, selected)?; + let upload = provider_api_write::upload_file( + selected.provider, + Path::new(&selected.path), + Path::new(&candidate.dst), + Path::new(&candidate.src), + candidate.bytes, + access_token.as_str(), + )?; + if let Err(error) = + cloud_transfer::verify_provider_api_source_unchanged(candidate, &source_hashes) + { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => { + format!("{error},provider-api-upload-cleanup-failed:{cleanup_error}") + } + }); + } + + let receipt_path = match cloud_transfer::write_provider_api_receipt(&receipt, receipt_dir) { + Ok(path) => path, + Err(error) => { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => { + format!("{error},provider-api-upload-cleanup-failed:{cleanup_error}") + } + }); + } + }; + + let evidence_dir = receipt_dir + .parent() + .unwrap_or(receipt_dir) + .join("cloud-provider-evidence"); + let (adr_dir, goal_dir) = cloud_projection_dirs(receipt_dir); + let updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, updated_at_ms); + let (initial_adr_path, initial_goal_path, mut projection_warnings) = + cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); + let mut adr_path = initial_adr_path.map(|path| path.to_string_lossy().into_owned()); + let mut goal_path = initial_goal_path.map(|path| path.to_string_lossy().into_owned()); + let receipt_id = receipt.receipt_id.clone(); + let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; + let mut evidence_path = None; + let mut permit = None; + let mut blockers = Vec::new(); + let provider_object_id = upload.object_id; + let attest_object_id = + (selected.provider == CloudProvider::GoogleDrive).then(|| provider_object_id.clone()); + match attest_receipt_with_mode( + &receipt_path, + &evidence_dir, + attest_object_id.as_deref(), + Some(oauth_connections), + home, + true, + ) { + Ok(attestation) => { + goal_state = attestation.goal_state; + evidence_path = Some(attestation.evidence_path); + permit = attestation.permit; + blockers = attestation.blockers; + adr_path = attestation.adr_path; + goal_path = attestation.goal_path; + projection_warnings.extend(attestation.projection_warnings); + } + Err(error) => { + let provider_blocker = stable_reconciliation_error(&error); + let projection_outcome = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + cloud::system_now_ms(), + &provider_blocker, + ); + if let Some(path) = projection_outcome.adr_path { + adr_path = Some(path.to_string_lossy().into_owned()); + } + if let Some(path) = projection_outcome.goal_path { + goal_path = Some(path.to_string_lossy().into_owned()); + } + projection_warnings.extend(projection_outcome.warnings); + projection_warnings.push(format!( + "provider-attestation-incomplete:{provider_blocker}" + )); + } + } + + Ok(ProviderApiCopyOutput { + action: "copy-via-provider-api", + goal_state, + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt_id) + .ok() + .flatten(), + receipt, + receipt_path: receipt_path.to_string_lossy().into_owned(), + provider_object_id, + evidence_path, + adr_path: adr_path.or_else(|| { + Some( + adr_dir + .join(format!("{}-latest.json", receipt_id)) + .to_string_lossy() + .into_owned(), + ) + }), + goal_path: goal_path.or_else(|| { + Some( + goal_dir + .join(format!("{}-latest.json", receipt_id)) + .to_string_lossy() + .into_owned(), + ) + }), + projection_warnings, + permit, + blockers, + }) +} + +/// Re-attest every persisted receipt and refresh only local provider evidence and ADR/Goal +/// projections. This is the headless equivalent of the GUI reconciliation loop; it never writes +/// to a cloud provider and never evicts a source file. +#[cfg(not(coverage))] +fn reconcile_receipts( + receipt_dir: &Path, + evidence_dir: &Path, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, + generated_at_ms: u64, +) -> Result { + let reconciliation_started = Instant::now(); + let mut report = audit_receipts(receipt_dir, Some(evidence_dir), generated_at_ms)?; + report.notices = vec![ + "provider-attestation-attempted", + "local-provider-evidence-write", + "dynamic-adr-goal-projection-write", + "immutable-receipts-remain-authority", + "no-cloud-write", + "no-local-eviction", + ]; + let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); + let mut paths = std::fs::read_dir(receipt_dir) + .map_err(|_| "receipt-directory-read-failed".to_string())? + .filter_map(Result::ok) + .map(|entry| entry.path()) + .collect::>(); + paths.sort(); + if paths.len() > MAX_RECONCILIATION_RECEIPTS { + return Err("receipt-directory-entry-limit-exceeded".into()); + } + let receipt_paths = paths + .into_iter() + .filter(|path| { + let file_name = path + .file_name() + .and_then(|name| name.to_str()) + .unwrap_or_default(); + regular_file_state(path) == "present" && file_name.ends_with(".json") + }) + .collect::>(); + for (index, path) in receipt_paths.iter().enumerate() { + if index >= MAX_RECONCILIATION_ATTESTATIONS + || reconciliation_started.elapsed() >= RECONCILIATION_MAX_DURATION + { + report.unprocessed_count = receipt_paths.len().saturating_sub(index) as u64; + report.incomplete_reconciliation = report.unprocessed_count > 0; + if report.incomplete_reconciliation { + let notice = if index >= MAX_RECONCILIATION_ATTESTATIONS { + "reconciliation-entry-limit" + } else { + "reconciliation-time-limit" + }; + report.notices.push(notice); + } + break; + } + let Ok(receipt) = cloud_transfer::read_immutable_receipt(&path) else { + continue; + }; + let Some(entry_index) = report + .entries + .iter() + .position(|entry| entry.receipt_id.as_deref() == Some(receipt.receipt_id.as_str())) + else { + continue; + }; + report.attestation_attempted_count = report.attestation_attempted_count.saturating_add(1); + match attest_receipt( + &path, + evidence_dir, + provider_object_id, + oauth_connections, + home, + ) { + Ok(attestation) => { + report.provider_evidence_written_count = + report.provider_evidence_written_count.saturating_add(1); + report.mutation_performed = true; + if attestation.goal_state + == cloud_transfer::CloudOffloadGoalState::PendingProviderSync + { + report.pending_provider_sync_count = + report.pending_provider_sync_count.saturating_add(1); + } + if attestation.permit.is_some() { + report.eviction_ready_count = report.eviction_ready_count.saturating_add(1); + } + let entry = &mut report.entries[entry_index]; + entry.goal_state = Some(attestation.goal_state); + entry.provider_sync_state = Some(attestation.evidence.sync_state); + entry.eviction_permit = attestation.permit.is_some(); + entry.attestation_error = None; + entry.issues.extend(attestation.blockers); + entry.issues.extend( + attestation + .projection_warnings + .into_iter() + .map(|warning| format!("projection-{warning}")), + ); + entry.adr_projection_state = Some( + projection_state( + &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "adr", + &receipt.receipt_id, + ) + .into(), + ); + entry.goal_projection_state = Some( + projection_state( + &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "goal", + &receipt.receipt_id, + ) + .into(), + ); + entry.goal_status = cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(); + entry.evidence_record_count = + evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); + } + Err(error) => { + let attestation_error = stable_reconciliation_error(&error); + let projection_outcome = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + generated_at_ms, + &attestation_error, + ); + let projection_warnings = projection_outcome.warnings; + report.mutation_performed |= projection_outcome.wrote; + let projection = + cloud_adr::read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir); + let entry = &mut report.entries[entry_index]; + entry.attestation_error = Some(attestation_error); + entry.issues.push("provider-attestation-incomplete".into()); + if let Some(blocker) = + cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) + { + entry.issues.push(blocker.into()); + } + if !projection_warnings.is_empty() { + entry + .issues + .push("dynamic-projection-update-incomplete".into()); + } + entry.issues.extend( + projection_warnings + .into_iter() + .map(|warning| format!("projection-{warning}")), + ); + match projection { + Ok(Some(state)) => { + entry.goal_state = Some(state.goal_state); + entry.provider_sync_state = Some(state.provider_sync_state); + entry.eviction_permit = false; + entry.issues.push("projection-state-not-revalidated".into()); + if state.goal_state + == cloud_transfer::CloudOffloadGoalState::PendingProviderSync + { + report.pending_provider_sync_count = + report.pending_provider_sync_count.saturating_add(1); + } + } + Ok(None) => entry + .issues + .push("dynamic-projection-state-unavailable".into()), + Err(_) => entry + .issues + .push("dynamic-projection-state-unavailable".into()), + } + entry.adr_projection_state = Some( + projection_state( + &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "adr", + &receipt.receipt_id, + ) + .into(), + ); + entry.goal_projection_state = Some( + projection_state( + &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), + "goal", + &receipt.receipt_id, + ) + .into(), + ); + entry.goal_status = cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(); + entry.evidence_record_count = + evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); + } + } + } + report.incomplete_projection_count = report + .entries + .iter() + .filter(|entry| { + entry.adr_projection_state.as_deref() != Some("valid") + || entry.goal_projection_state.as_deref() != Some("valid") + }) + .count() as u64; + Ok(report) +} + +#[cfg(not(coverage))] +fn evict_native_receipt( + path: &Path, + confirmation_receipt_id: &str, + eviction_dir: &Path, + approval_dir: &Path, + journal_path: &Path, + evidence_dir: &Path, + approved_by: &str, + rationale: &str, + provider_object_id: Option<&str>, + oauth_connections: Option<&Path>, + home: &Path, +) -> Result { + let receipt = cloud_transfer::read_immutable_receipt(path)?; + if confirmation_receipt_id != receipt.receipt_id { + return Err("eviction-confirmation-receipt-id-mismatch".into()); + } + let confirmed_at_ms = cloud::system_now_ms(); + let evidence = collect_receipt_sync_evidence( + &receipt, + provider_object_id, + oauth_connections, + home, + confirmed_at_ms, + false, + )?; + let (evidence_record, evidence_path) = + provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; + if let Some(blocker) = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) { + return Err(blocker.into()); + } + let permit = cloud_transfer::approve_local_eviction(&receipt, &evidence_record) + .map_err(|blockers| blockers.join(","))?; + let active_use_observed_at_ms = cloud::system_now_ms(); + let active_use = cloud_local_eviction::observe_path_active_use(Path::new(&receipt.source)); + let approved_at_ms = cloud::system_now_ms(); + let approval = cloud_eviction::create_source_eviction_approval( + &receipt, + &permit, + confirmation_receipt_id, + approved_at_ms, + approved_by, + rationale, + active_use_observed_at_ms, + active_use, + )?; + let approval_path = + cloud_eviction::write_immutable_source_eviction_approval(approval_dir, &approval)?; + let eviction = cloud_eviction::evict_source_with_human_approval( + &receipt, + &permit, + &approval, + confirmation_receipt_id, + eviction_dir, + journal_path, + cloud::system_now_ms(), + )?; + let goal_state = cloud_transfer::CloudOffloadGoalState::SourceEvicted; + let updated_at_ms = cloud::system_now_ms(); + let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); + let adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, updated_at_ms); + let goal = cloud_adr::goal_snapshot_from_evidence( + &receipt, + &evidence_record, + goal_state, + updated_at_ms, + ); + let (adr_path, goal_path, projection_warnings) = + cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); + Ok(EvictionOutput { + action: "attest-and-trash-verified-cloud-source", + goal_state, + receipt_id: receipt.receipt_id, + evidence, + evidence_record, + evidence_path: evidence_path.to_string_lossy().into_owned(), + permit, + approval, + approval_path: approval_path.to_string_lossy().into_owned(), + eviction, + adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), + goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), + projection_warnings, + }) +} + +#[cfg(not(coverage))] +fn home_dir() -> Result { + std::env::var("HOME") + .or_else(|_| std::env::var("USERPROFILE")) + .map(PathBuf::from) + .map_err(|_| "HOME/USERPROFILE을 찾을 수 없음".into()) +} + +#[cfg(not(coverage))] +fn select_root(roots: &[CloudRoot], args: &Args) -> Result { + let matches: Vec<&CloudRoot> = roots + .iter() + .filter(|root| { + args.cloud_root + .as_ref() + .map(|path| cloud::cloud_root_path_matches(Path::new(&root.path), path)) + .unwrap_or(true) + && args.provider.map(|p| p == root.provider).unwrap_or(true) + }) + .collect(); + match matches.as_slice() { + [only] => Ok((*only).clone()), + [] => Err("조건과 일치하는 탐지된 클라우드 루트가 없음 (--list-roots로 확인)".into()), + _ => Err("클라우드 루트가 여러 개임; --cloud-root로 하나를 선택해야 함".into()), + } +} + +#[cfg(not(coverage))] +fn run() -> Result<(), String> { + let home = home_dir()?; + let raw: Vec = std::env::args().skip(1).collect(); + let args = parse_args(&raw, &home)?; + validate_action_args(&args)?; + if args.reconcile_receipts { + let report = reconcile_receipts( + args.receipt_dir + .as_deref() + .ok_or_else(|| "--reconcile-receipts에는 --receipt-dir이 필요함".to_string())?, + args.evidence_dir + .as_deref() + .ok_or_else(|| "--reconcile-receipts에는 --evidence-dir이 필요함".to_string())?, + args.provider_object_id.as_deref(), + args.oauth_connections.as_deref(), + &home, + cloud::system_now_ms(), + )?; + println!( + "{}", + serde_json::to_string_pretty(&report).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if args.audit_receipts { + let report = audit_receipts( + args.receipt_dir + .as_deref() + .ok_or_else(|| "--audit-receipts에는 --receipt-dir이 필요함".to_string())?, + args.evidence_dir.as_deref(), + cloud::system_now_ms(), + )?; + println!( + "{}", + serde_json::to_string_pretty(&report).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if let Some(receipt_path) = &args.export_naruon_lineage { + let receipt = cloud_transfer::read_immutable_receipt(receipt_path)?; + let evidence = args + .naruon_sync_evidence + .as_deref() + .map(provider_evidence::read_immutable_sync_evidence) + .transpose()?; + let envelope = naruon_lineage::export_naruon_file_lineage(&receipt, evidence.as_ref())?; + println!( + "{}", + serde_json::to_string_pretty(&envelope).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if let Some(receipt_path) = &args.evict_receipt { + let output = evict_native_receipt( + receipt_path, + args.confirm_receipt_id + .as_deref() + .ok_or_else(|| "--confirm-receipt-id가 필요함".to_string())?, + args.eviction_dir + .as_deref() + .ok_or_else(|| "--eviction-dir이 필요함".to_string())?, + args.eviction_approval_dir + .as_deref() + .ok_or_else(|| "--eviction-approval-dir이 필요함".to_string())?, + args.journal_path + .as_deref() + .ok_or_else(|| "--journal-path가 필요함".to_string())?, + args.evidence_dir + .as_deref() + .ok_or_else(|| "--evidence-dir이 필요함".to_string())?, + args.reviewed_by + .as_deref() + .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, + args.review_rationale + .as_deref() + .ok_or_else(|| "--review-rationale가 필요함".to_string())?, + args.provider_object_id.as_deref(), + args.oauth_connections.as_deref(), + &home, + )?; + println!( + "{}", + serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if let Some(receipt_path) = &args.attest_receipt { + println!( + "{}", + serde_json::to_string_pretty(&attest_receipt( + receipt_path, + args.evidence_dir + .as_deref() + .ok_or_else(|| "--evidence-dir이 필요함".to_string())?, + args.provider_object_id.as_deref(), + args.oauth_connections.as_deref(), + &home, + )?) + .map_err(|error| error.to_string())? + ); + return Ok(()); + } + let discovery = cloud::discover_cloud_roots_report(&home); + if args.inspect_roots { + println!( + "{}", + serde_json::to_string_pretty(&discovery).map_err(|e| e.to_string())? + ); + return Ok(()); + } + let roots = discovery.roots; + if args.list_roots { + println!( + "{}", + serde_json::to_string_pretty(&roots).map_err(|e| e.to_string())? + ); + return Ok(()); + } + cloud::validate_source_root_readable(&args.root)?; + let selected_roots = if args.all_readable_roots { + let selected = roots + .iter() + .filter(|root| root.readable) + .cloned() + .collect::>(); + if selected.is_empty() { + return Err("재검증할 수 있는 읽기 가능 클라우드 루트가 없음".into()); + } + selected + } else { + vec![select_root(&roots, &args)?] + }; + for selected in &selected_roots { + cloud::validate_cloud_root_readable(selected)?; + } + let excluded: Vec = roots.iter().map(|r| PathBuf::from(&r.path)).collect(); + if excluded + .iter() + .any(|cloud_root| args.root.starts_with(cloud_root)) + { + return Err("이미 클라우드 안에 있는 경로는 오프로드 원본으로 사용할 수 없음".into()); + } + let collection = cloud::collect_archive_files_bounded( + &args.root, + &excluded, + cloud::ARCHIVE_SCAN_MAX_ENTRIES, + cloud::ARCHIVE_SCAN_MAX_DURATION, + ); + let snapshot = cloud::prepare_cloud_archive_source_from_collection( + &collection, + &args.root, + cloud::system_now_ms(), + CloudPlanOptions { + min_size_bytes: args.min_size_mib.saturating_mul(1024 * 1024), + min_age_days: args.min_age_days, + limit: args.limit.clamp(1, 1_000), + }, + ); + if args.all_readable_roots { + let mut summaries = Vec::with_capacity(selected_roots.len()); + for selected in &selected_roots { + let (_, report) = plan_with_optional_capacity( + &snapshot, + selected, + args.verify_capacity, + args.oauth_connections.as_deref(), + args.capacity_reserve_mib, + &home, + )?; + summaries.push(match args.review_reason_set.as_deref() { + Some(reasons) => review_batch_summary(&report, reasons)?, + None => compact_decision_summary(&report), + }); + } + let capacity_notice = if args.verify_capacity { + "cloud-capacity-assessed-per-destination" + } else { + "cloud-capacity-unverified" + }; + let output = serde_json::json!({ + "schema_version": 3, + "output_mode": "multicloud-decision-summary", + "source_snapshot": { + "candidate_count": snapshot.candidate_count(), + "candidate_bytes": snapshot.candidate_bytes(), + "reused_for_destination_count": selected_roots.len(), + "content_metadata_probed_once": true, + "duplicate_content_hashed_once": true, + }, + "destinations": summaries, + "notices": [ + "dry-run-only", + "destination-state-revalidated-per-plan", + "source-stat-revalidated-per-plan", + capacity_notice, + "cloud-sync-unverified", + ], + }); + println!( + "{}", + serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? + ); + return Ok(()); + } + let selected = selected_roots + .into_iter() + .next() + .ok_or_else(|| "선택된 클라우드 루트가 없음".to_string())?; + let capacity_required_for_plan = args.verify_capacity + || args.copy_fingerprint.is_some() + || args.provider_api_copy_fingerprint.is_some(); + let (selected, report) = plan_with_optional_capacity( + &snapshot, + &selected, + capacity_required_for_plan, + args.oauth_connections.as_deref(), + args.capacity_reserve_mib, + &home, + )?; + if args.export_naruon_capacity { + let envelope = naruon_capacity::export_naruon_cloud_capacity_assessment(&report)?; + println!( + "{}", + serde_json::to_string_pretty(&envelope).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if args.export_naruon_copy_readiness { + let observed_at_ms = cloud::system_now_ms(); + let runtime = provider_client_runtime::collect_provider_client_runtime( + selected.provider, + observed_at_ms, + ); + let icloud_health = if selected.provider == CloudProvider::Icloud { + icloud_sync_health::inspect_new_copy_admission(&home, observed_at_ms).ok() + } else { + None + }; + let provider_global_sync = if selected.provider == CloudProvider::Icloud { + None + } else { + provider_global_sync::inspect_new_copy_admission(selected.provider).ok() + }; + let envelope = + naruon_cloud_copy_readiness::export_naruon_cloud_copy_readiness_with_global_sync( + &report, + &runtime, + icloud_health.as_ref(), + provider_global_sync.as_ref(), + )?; + if let Some(output_path) = &args.naruon_copy_readiness_output { + let value = serde_json::to_value(&envelope) + .map_err(|_| "naruon-copy-readiness-output-json-invalid".to_string())?; + write_private_review_dossier(output_path, &value)?; + } + println!( + "{}", + serde_json::to_string_pretty(&envelope).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if args.export_semantic_catalog { + let batch = semantic_catalog::export_semantic_catalog_candidate_batch(&report)?; + println!( + "{}", + serde_json::to_string_pretty(&batch).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if let (Some(redundant_prefix), Some(kind)) = ( + args.exact_duplicate_review_prefix.as_deref(), + args.exact_duplicate_kind, + ) { + let output = exact_duplicate_review_batch(&report, redundant_prefix, kind)?; + println!( + "{}", + serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? + ); + return Ok(()); + } + if let Some(candidate_fingerprint) = &args.review_candidate_fingerprint { + let review_fingerprint = args + .review_fingerprint + .as_deref() + .ok_or_else(|| "--review-fingerprint가 필요함".to_string())?; + let matches: Vec<_> = report + .candidates + .iter() + .filter(|candidate| { + candidate.metadata_fingerprint == *candidate_fingerprint + && candidate.review_fingerprint == review_fingerprint + }) + .collect(); + let candidate = match matches.as_slice() { + [only] => *only, + [] => return Err("현재 fresh plan에 review fingerprint가 일치하는 후보가 없음".into()), + _ => return Err("현재 fresh plan에서 review fingerprint가 중복됨".into()), + }; + let disposition = args + .review_disposition + .ok_or_else(|| "--review-disposition이 필요함".to_string())?; + let decision = cloud_review::create_attributed_decision( + candidate, + disposition, + cloud::system_now_ms(), + args.reviewed_by + .as_deref() + .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, + args.review_rationale + .as_deref() + .ok_or_else(|| "--review-rationale가 필요함".to_string())?, + )?; + let decision_path = cloud_review::write_immutable_decision( + args.review_dir + .as_deref() + .ok_or_else(|| "--review-dir이 필요함".to_string())?, + &decision, + )?; + println!( + "{}", + serde_json::to_string_pretty(&ReviewOutput { + action: "review", + decision, + decision_path: decision_path.to_string_lossy().into_owned(), + }) + .map_err(|error| error.to_string())? + ); + return Ok(()); + } + if let Some(candidate_fingerprint) = &args.provider_api_copy_fingerprint { + let matches: Vec<_> = report + .candidates + .iter() + .filter(|candidate| candidate.metadata_fingerprint == *candidate_fingerprint) + .collect(); + let candidate = match matches.as_slice() { + [only] => *only, + [] => return Err("현재 fresh plan에 fingerprint가 일치하는 후보가 없음".into()), + _ => return Err("현재 fresh plan에서 fingerprint가 중복됨".into()), + }; + let receipt_dir = args + .receipt_dir + .as_deref() + .ok_or_else(|| "--receipt-dir이 필요함".to_string())?; + let review_decision = if candidate.requires_review { + args.review_dir + .as_deref() + .map(cloud_review::load_latest_decisions) + .transpose()? + .unwrap_or_default() + .into_iter() + .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) + } else { + None + }; + let output = copy_candidate_via_provider_api( + candidate, + &selected, + &report, + receipt_dir, + review_decision.as_ref(), + args.confirm_copy_phrase + .as_deref() + .ok_or_else(|| "--confirm-copy-phrase가 필요함".to_string())?, + args.reviewed_by + .as_deref() + .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, + args.review_rationale + .as_deref() + .ok_or_else(|| "--review-rationale가 필요함".to_string())?, + args.oauth_connections + .as_deref() + .ok_or_else(|| "--oauth-connections가 필요함".to_string())?, + args.capacity_reserve_mib, + &home, + )?; + println!( + "{}", + serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? + ); + return Ok(()); + } + let receipt_action = args + .copy_fingerprint + .as_ref() + .map(|fingerprint| (fingerprint, false)) + .or_else(|| { + args.adopt_existing_fingerprint + .as_ref() + .map(|fingerprint| (fingerprint, true)) + }); + if let Some((fingerprint, adopt_existing)) = receipt_action { + let matches: Vec<_> = report + .candidates + .iter() + .filter(|candidate| candidate.metadata_fingerprint == *fingerprint) + .collect(); + let candidate = match matches.as_slice() { + [only] => *only, + [] => return Err("현재 fresh plan에 fingerprint가 일치하는 후보가 없음".into()), + _ => return Err("현재 fresh plan에서 fingerprint가 중복됨".into()), + }; + let receipt_dir = args + .receipt_dir + .as_deref() + .ok_or_else(|| "--receipt-dir이 필요함".to_string())?; + let review_decision = if candidate.requires_review { + args.review_dir + .as_deref() + .map(cloud_review::load_latest_decisions) + .transpose()? + .unwrap_or_default() + .into_iter() + .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) + } else { + None + }; + let action = if adopt_existing { + cloud_transfer::CloudCopyApprovalAction::AdoptExistingCopy + } else { + cloud_transfer::CloudCopyApprovalAction::CopyOnly + }; + let action_at_ms = cloud::system_now_ms(); + let copy_approval = cloud_transfer::create_cloud_copy_approval( + candidate, + &selected, + action, + action_at_ms, + args.reviewed_by + .as_deref() + .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, + args.review_rationale + .as_deref() + .ok_or_else(|| "--review-rationale가 필요함".to_string())?, + args.confirm_copy_phrase + .as_deref() + .ok_or_else(|| "--confirm-copy-phrase가 필요함".to_string())?, + )?; + if !adopt_existing { + provider_client_runtime::require_provider_client_runtime( + selected.provider, + cloud::system_now_ms(), + )?; + if selected.provider == CloudProvider::Icloud { + let health = + icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()) + .map_err(|_| "icloud-new-copy-admission-evidence-unavailable".to_string())?; + icloud_sync_health::require_new_copy_admission(&health)?; + } else { + let global_sync = + provider_global_sync::inspect_new_copy_admission(selected.provider) + .map_err(|_| "provider-global-sync-evidence-unavailable".to_string())?; + provider_global_sync::require_new_copy_admission(&global_sync)?; + } + let capacity_snapshot = report + .capacity + .as_ref() + .map(|assessment| assessment.snapshot.clone()) + .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; + let assessment = provider_capacity::assess_capacity( + capacity_snapshot, + candidate.bytes, + candidate.bytes, + args.capacity_reserve_mib.saturating_mul(1024 * 1024), + ); + if assessment.can_fit != Some(true) { + return Err(if assessment.blockers.is_empty() { + "cloud-capacity-verification-required".into() + } else { + assessment.blockers.join(",") + }); + } + } + let (receipt, receipt_path) = if adopt_existing { + cloud_transfer::adopt_existing_cloud_copy_with_approval( + candidate, + &selected, + receipt_dir, + review_decision.as_ref(), + ©_approval, + )? + } else { + cloud_transfer::prepare_cloud_copy_with_approval( + candidate, + &selected, + receipt_dir, + review_decision.as_ref(), + ©_approval, + )? + }; + let (adr_dir, goal_dir) = cloud_projection_dirs(receipt_dir); + let projection_updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, projection_updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, projection_updated_at_ms); + let (adr_path, goal_path, projection_warnings) = + cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); + println!( + "{}", + serde_json::to_string_pretty(&CopyOutput { + action: if adopt_existing { + "adopt-existing-copy" + } else { + "copy-only" + }, + goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, + goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) + .ok() + .flatten(), + receipt, + receipt_path: receipt_path.to_string_lossy().into_owned(), + adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), + goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), + projection_warnings, + }) + .map_err(|error| error.to_string())? + ); + return Ok(()); + } + if args.decision_summary { + let mut summary = match args.review_reason_set.as_deref() { + Some(reasons) => review_batch_summary(&report, reasons)?, + None => decision_summary(&report), + }; + if let Some(output_path) = &args.private_candidate_inspection_output { + let dossier = private_candidate_inspection_dossier(&report); + let (sha256, bytes) = write_private_review_dossier(output_path, &dossier)?; + summary + .as_object_mut() + .ok_or_else(|| "decision summary JSON object가 아님".to_string())? + .insert( + "private_candidate_inspection_dossier".into(), + serde_json::json!({ + "written": true, + "bytes": bytes, + "sha256": sha256, + "unix_mode": "0600", + "create_new": true, + "contains_sensitive_local_metadata": true, + "includes_blocked_candidates": true, + "is_approval": false, + "cloud_write_executed": false, + "source_eviction_authorized": false, + }), + ); + } + if let Some(output_path) = &args.private_review_output { + let reasons = args + .review_reason_set + .as_deref() + .ok_or_else(|| "private review reason set이 없음".to_string())?; + let dossier = private_review_dossier(&report, reasons)?; + let (sha256, bytes) = write_private_review_dossier(output_path, &dossier)?; + summary + .as_object_mut() + .ok_or_else(|| "review summary JSON object가 아님".to_string())? + .insert( + "private_review_dossier".into(), + serde_json::json!({ + "written": true, + "bytes": bytes, + "sha256": sha256, + "unix_mode": "0600", + "create_new": true, + "contains_sensitive_local_metadata": true, + "is_approval": false, + }), + ); + } + println!( + "{}", + serde_json::to_string_pretty(&summary).map_err(|e| e.to_string())? + ); + } else { + println!( + "{}", + serde_json::to_string_pretty(&report).map_err(|e| e.to_string())? + ); + } + Ok(()) +} + +#[cfg(not(coverage))] +fn main() { + if let Err(error) = run() { + eprintln!("DiskSage cloud planner: {error}"); + std::process::exit(2); + } +} + +#[cfg(coverage)] +fn main() {} + +#[cfg(all(test, coverage))] +mod coverage_tests { + #[test] + fn noop_main_runs() { + super::main(); + } +} + +#[cfg(all(test, not(coverage)))] +mod tests { + use super::*; + + #[test] + fn parses_defaults_and_explicit_values() { + let defaults = parse_args(&[], Path::new("/home/test")).unwrap(); + assert_eq!(defaults.root, PathBuf::from("/home/test")); + assert_eq!(defaults.min_size_mib, 256); + assert!(defaults.copy_fingerprint.is_none()); + assert!(defaults.provider_api_copy_fingerprint.is_none()); + assert!(defaults.adopt_existing_fingerprint.is_none()); + assert!(defaults.provider_object_id.is_none()); + assert!(defaults.oauth_connections.is_none()); + assert!(defaults.evidence_dir.is_none()); + assert!(defaults.evict_receipt.is_none()); + assert!(defaults.eviction_approval_dir.is_none()); + assert!(defaults.review_candidate_fingerprint.is_none()); + assert!(defaults.reviewed_by.is_none()); + assert!(defaults.review_rationale.is_none()); + assert!(defaults.export_naruon_lineage.is_none()); + assert!(!defaults.export_naruon_capacity); + assert!(!defaults.export_naruon_copy_readiness); + assert!(defaults.naruon_copy_readiness_output.is_none()); + assert!(!defaults.export_semantic_catalog); + assert!(defaults.naruon_sync_evidence.is_none()); + assert!(!defaults.verify_capacity); + assert!(!defaults.decision_summary); + assert!(!defaults.all_readable_roots); + assert!(defaults.review_reason_set.is_none()); + assert!(defaults.private_review_output.is_none()); + assert!(defaults.private_candidate_inspection_output.is_none()); + assert!(defaults.exact_duplicate_review_prefix.is_none()); + assert!(defaults.exact_duplicate_kind.is_none()); + assert!(!defaults.audit_receipts); + assert_eq!(defaults.capacity_reserve_mib, 1024); + let args = vec![ + "--root".into(), + "/scan".into(), + "--provider".into(), + "icloud".into(), + "--min-size-mib".into(), + "1".into(), + "--min-age-days".into(), + "2".into(), + "--limit".into(), + "3".into(), + "--decision-summary".into(), + "--review-reason-set".into(), + "metadata-review-required|download-origin-needs-destination-review".into(), + "--private-review-output".into(), + "/private-review.json".into(), + "--verify-capacity".into(), + "--capacity-reserve-mib".into(), + "2048".into(), + ]; + let parsed = parse_args(&args, Path::new("/home/test")).unwrap(); + assert_eq!(parsed.root, PathBuf::from("/scan")); + assert_eq!(parsed.provider, Some(CloudProvider::Icloud)); + assert_eq!( + (parsed.min_size_mib, parsed.min_age_days, parsed.limit), + (1, 2, 3) + ); + assert!(parsed.verify_capacity); + assert!(parsed.decision_summary); + assert_eq!( + parsed.review_reason_set, + Some(vec![ + "download-origin-needs-destination-review".into(), + "metadata-review-required".into(), + ]) + ); + assert_eq!( + parsed.private_review_output, + Some(PathBuf::from("/private-review.json")) + ); + assert_eq!(parsed.capacity_reserve_mib, 2048); + + let inspection = parse_args( + &[ + "--decision-summary".into(), + "--private-candidate-inspection-output".into(), + "/private-inspection.json".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert_eq!( + inspection.private_candidate_inspection_output, + Some(PathBuf::from("/private-inspection.json")) + ); + assert!(validate_action_args(&inspection).is_ok()); + + let duplicate_review = parse_args( + &[ + "--exact-duplicate-review-prefix".into(), + "smart_bundle_".into(), + "--exact-duplicate-kind".into(), + "document".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert_eq!( + duplicate_review.exact_duplicate_review_prefix.as_deref(), + Some("smart_bundle_") + ); + assert_eq!( + duplicate_review.exact_duplicate_kind, + Some(ArchiveKind::Document) + ); + assert!(validate_action_args(&duplicate_review).is_ok()); + } + + #[test] + fn receipt_audit_requires_only_a_receipt_directory_and_is_read_only() { + let audit = parse_args( + &[ + "--audit-receipts".into(), + "--receipt-dir".into(), + "/app/cloud-receipts".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert!(audit.audit_receipts); + assert!(validate_action_args(&audit).is_ok()); + + let audit_with_external_evidence = parse_args( + &[ + "--audit-receipts".into(), + "--receipt-dir".into(), + "/receipts".into(), + "--evidence-dir".into(), + "/provider-evidence".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert!(validate_action_args(&audit_with_external_evidence).is_ok()); + + let missing_directory = + parse_args(&["--audit-receipts".into()], Path::new("/home/test")).unwrap(); + assert!(validate_action_args(&missing_directory).is_err()); + } + + #[test] + fn receipt_reconciliation_requires_local_evidence_and_is_distinct_from_audit() { + let reconcile = parse_args( + &[ + "--reconcile-receipts".into(), + "--receipt-dir".into(), + "/app/cloud-receipts".into(), + "--evidence-dir".into(), + "/app/cloud-provider-evidence".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert!(reconcile.reconcile_receipts); + assert!(!reconcile.audit_receipts); + assert!(validate_action_args(&reconcile).is_ok()); + + let missing_evidence = parse_args( + &[ + "--reconcile-receipts".into(), + "--receipt-dir".into(), + "/receipts".into(), + ], + Path::new("/home/test"), + ) + .unwrap(); + assert!(validate_action_args(&missing_evidence).is_err()); + } + + #[test] + fn empty_receipt_reconciliation_does_not_claim_a_cloud_mutation() { + let temp = tempfile::tempdir().unwrap(); + let receipt_dir = temp.path().join("receipts"); + let evidence_dir = temp.path().join("evidence"); + std::fs::create_dir_all(&receipt_dir).unwrap(); + let report = + reconcile_receipts(&receipt_dir, &evidence_dir, None, None, temp.path(), 10).unwrap(); + assert_eq!(report.attestation_attempted_count, 0); + assert!(!report.mutation_performed); + assert!(!report.cloud_write_executed); + assert!(!report.source_eviction_authorized); + } + + #[cfg(not(coverage))] + #[test] + fn headless_reconciliation_reports_receipts_left_after_entry_budget() { + let temp = tempfile::tempdir().unwrap(); + let receipt_dir = temp.path().join("receipts"); + let evidence_dir = temp.path().join("evidence"); + std::fs::create_dir_all(&receipt_dir).unwrap(); + for index in 0..=MAX_RECONCILIATION_ATTESTATIONS { + std::fs::write(receipt_dir.join(format!("{index:04}.json")), b"{}").unwrap(); + } + + let report = + reconcile_receipts(&receipt_dir, &evidence_dir, None, None, temp.path(), 10).unwrap(); + assert_eq!( + report.unprocessed_count, + (receipt_dir.read_dir().unwrap().count() - MAX_RECONCILIATION_ATTESTATIONS) as u64 + ); + assert!(report.incomplete_reconciliation); + assert!(report.notices.contains(&"reconciliation-entry-limit")); + } + + #[test] + fn receipt_audit_counts_legacy_evidence_without_double_counting() { + let temp = tempfile::tempdir().unwrap(); + let receipt_dir = temp.path().join("cloud-receipts"); + let provider_dir = temp.path().join("cloud-provider-evidence"); + let legacy_dir = temp.path().join("cloud-sync-evidence"); + std::fs::create_dir_all(&receipt_dir).unwrap(); + std::fs::create_dir_all(&provider_dir).unwrap(); + std::fs::create_dir_all(&legacy_dir).unwrap(); + std::fs::write(provider_dir.join("abc-1.json"), b"provider").unwrap(); + std::fs::write(legacy_dir.join("abc-1.json"), b"legacy-copy").unwrap(); + std::fs::write(legacy_dir.join("abc-2.json"), b"legacy").unwrap(); + + let dirs = audit_evidence_dirs(&receipt_dir, None); + assert_eq!(evidence_record_count(&dirs, "abc"), 2); + assert_eq!( + audit_evidence_dirs(&receipt_dir, Some(&legacy_dir)), + vec![legacy_dir] + ); + } + + #[test] + fn receipt_audit_rejects_unbound_or_outdated_projections() { + let temp = tempfile::tempdir().unwrap(); + let path = temp.path().join("projection.json"); + let receipt_id = "a".repeat(64); + let snapshot = cloud_adr::CloudOffloadAdrSnapshot { + schema_version: cloud_adr::CLOUD_ADR_SCHEMA_VERSION, + adr_id: format!("cloud-offload:{receipt_id}"), + receipt_id: receipt_id.clone(), + goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, + provider_sync_state: cloud_transfer::ProviderSyncState::Unknown, + sync_complete: false, + decision: "retain-source-after-copy".into(), + consequences: vec!["source-retained".into()], + evidence_record_id: None, + updated_at_ms: 1, + }; + std::fs::write(&path, serde_json::to_vec(&snapshot).unwrap()).unwrap(); + assert_eq!(projection_state(&path, "adr", &receipt_id), "valid"); + + let mut unbound = snapshot.clone(); + unbound.receipt_id = "b".repeat(64); + std::fs::write(&path, serde_json::to_vec(&unbound).unwrap()).unwrap(); + assert_eq!( + projection_state(&path, "adr", &receipt_id), + "invalid-binding" + ); + + let mut outdated = snapshot; + outdated.schema_version = 1; + std::fs::write(&path, serde_json::to_vec(&outdated).unwrap()).unwrap(); + assert_eq!( + projection_state(&path, "adr", &receipt_id), + "invalid-schema" + ); + } + + #[test] + fn all_readable_roots_is_dry_run_summary_with_optional_capacity() { + let valid = parse_args( + &["--all-readable-roots".into(), "--decision-summary".into()], + Path::new("/h"), + ) + .unwrap(); + assert!(valid.all_readable_roots); + assert!(validate_action_args(&valid).is_ok()); + + let missing_summary = + parse_args(&["--all-readable-roots".into()], Path::new("/h")).unwrap(); + assert!(validate_action_args(&missing_summary).is_err()); + let scoped = parse_args( + &[ + "--all-readable-roots".into(), + "--decision-summary".into(), + "--provider".into(), + "icloud".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&scoped).is_err()); + let capacity = parse_args( + &[ + "--all-readable-roots".into(), + "--decision-summary".into(), + "--verify-capacity".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(capacity.verify_capacity); + assert!(validate_action_args(&capacity).is_ok()); + } + + #[test] + fn parser_and_selector_reject_ambiguous_or_invalid_input() { + assert!(parse_args(&["--wat".into()], Path::new("/h")).is_err()); + assert!(parse_args(&["--provider".into(), "box".into()], Path::new("/h")).is_err()); + assert!(parse_args(&["--limit".into(), "x".into()], Path::new("/h")).is_err()); + assert!(parse_args( + &["--capacity-reserve-mib".into(), "x".into()], + Path::new("/h") + ) + .is_err()); + assert!(parse_args(&["--root".into()], Path::new("/h")).is_err()); + for reason_set in [ + "", + "duplicate|duplicate", + "Uppercase-not-allowed", + "contains_space", + "destination-account-scope-unknown|", + ] { + assert!(parse_args( + &[ + "--decision-summary".into(), + "--review-reason-set".into(), + reason_set.into(), + ], + Path::new("/h"), + ) + .is_err()); + } + assert!(parse_args( + &[ + "--review-reason-set".into(), + "first-reason".into(), + "--review-reason-set".into(), + "second-reason".into(), + ], + Path::new("/h"), + ) + .is_err()); + let inspect = parse_args(&["--inspect-roots".into()], Path::new("/h")).unwrap(); + assert!(inspect.inspect_roots); + let both = parse_args( + &["--list-roots".into(), "--inspect-roots".into()], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&both).is_err()); + let summary_action = parse_args( + &["--decision-summary".into(), "--list-roots".into()], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&summary_action).is_err()); + let reason_set_without_summary = parse_args( + &[ + "--review-reason-set".into(), + "destination-account-scope-unknown".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&reason_set_without_summary).is_err()); + let reason_set_summary = parse_args( + &[ + "--decision-summary".into(), + "--review-reason-set".into(), + "destination-account-scope-unknown".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&reason_set_summary).is_ok()); + let private_review = parse_args( + &[ + "--decision-summary".into(), + "--review-reason-set".into(), + "destination-account-scope-unknown".into(), + "--private-review-output".into(), + "/private/review.json".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&private_review).is_ok()); + let mut relative_private_review = private_review.clone(); + relative_private_review.private_review_output = Some(PathBuf::from("review.json")); + assert!(validate_action_args(&relative_private_review).is_err()); + let mut missing_reason_set = private_review.clone(); + missing_reason_set.review_reason_set = None; + assert!(validate_action_args(&missing_reason_set).is_err()); + let mut multicloud_private_review = private_review; + multicloud_private_review.all_readable_roots = true; + assert!(validate_action_args(&multicloud_private_review).is_err()); + let private_inspection = parse_args( + &[ + "--decision-summary".into(), + "--private-candidate-inspection-output".into(), + "/private/inspection.json".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&private_inspection).is_ok()); + let mut missing_inspection_summary = private_inspection.clone(); + missing_inspection_summary.decision_summary = false; + assert!(validate_action_args(&missing_inspection_summary).is_err()); + let mut relative_private_inspection = private_inspection.clone(); + relative_private_inspection.private_candidate_inspection_output = + Some(PathBuf::from("inspection.json")); + assert!(validate_action_args(&relative_private_inspection).is_err()); + let mut exact_subset_conflict = private_inspection.clone(); + exact_subset_conflict.review_reason_set = + Some(vec!["destination-account-scope-unknown".into()]); + assert!(validate_action_args(&exact_subset_conflict).is_err()); + let mut multicloud_private_inspection = private_inspection; + multicloud_private_inspection.all_readable_roots = true; + assert!(validate_action_args(&multicloud_private_inspection).is_err()); + for prefix in ["", ".", "..", "nested/path", "nested\\path", "line\nbreak"] { + assert!(parse_args( + &[ + "--exact-duplicate-review-prefix".into(), + prefix.into(), + "--exact-duplicate-kind".into(), + "document".into(), + ], + Path::new("/h"), + ) + .is_err()); + } + assert!(parse_args( + &[ + "--exact-duplicate-review-prefix".into(), + "bundle_".into(), + "--exact-duplicate-kind".into(), + "unknown".into(), + ], + Path::new("/h"), + ) + .is_err()); + let missing_duplicate_kind = parse_args( + &["--exact-duplicate-review-prefix".into(), "bundle_".into()], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&missing_duplicate_kind).is_err()); + let duplicate_summary_conflict = parse_args( + &[ + "--exact-duplicate-review-prefix".into(), + "bundle_".into(), + "--exact-duplicate-kind".into(), + "document".into(), + "--decision-summary".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&duplicate_summary_conflict).is_err()); + let roots = vec![ + CloudRoot { + id: "/a".into(), + provider: CloudProvider::Icloud, + account_scope: disksage_lib::cloud::CloudAccountScope::Unknown, + label: "a".into(), + path: "/a".into(), + readable: true, + access_issue: None, + }, + CloudRoot { + id: "/b".into(), + provider: CloudProvider::Icloud, + account_scope: disksage_lib::cloud::CloudAccountScope::Unknown, + label: "b".into(), + path: "/b".into(), + readable: true, + access_issue: None, + }, + ]; + let mut args = parse_args(&[], Path::new("/h")).unwrap(); + assert!(select_root(&roots, &args).is_err()); + args.cloud_root = Some(PathBuf::from("/b")); + assert_eq!(select_root(&roots, &args).unwrap().path, "/b"); + args.cloud_root = Some(PathBuf::from("/missing")); + assert!(select_root(&roots, &args).is_err()); + } + + #[test] + fn selector_accepts_canonically_equivalent_unicode_path_and_fails_ambiguous() { + let decomposed = "/cloud/GoogleDrive-user/\u{1102}\u{1162} \u{1103}\u{1173}\u{1105}\u{1161}\u{110b}\u{1175}\u{1107}\u{1173}"; + let composed = "/cloud/GoogleDrive-user/내 드라이브"; + let root = CloudRoot { + id: decomposed.into(), + provider: CloudProvider::GoogleDrive, + account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + label: "Google Drive".into(), + path: decomposed.into(), + readable: true, + access_issue: None, + }; + let mut args = parse_args(&[], Path::new("/home/test")).unwrap(); + args.cloud_root = Some(PathBuf::from(composed)); + + assert_eq!(select_root(&[root.clone()], &args).unwrap(), root); + + let canonically_equivalent_duplicate = CloudRoot { + id: composed.into(), + path: composed.into(), + ..root.clone() + }; + assert!(select_root(&[root, canonically_equivalent_duplicate], &args).is_err()); + } + + #[test] + fn decision_summary_keeps_review_evidence_and_redacts_paths_and_sensitive_values() { + let candidate = cloud::CloudCandidate { + metadata_fingerprint: "a".repeat(64), + review_fingerprint: "b".repeat(64), + src: "/Users/private/Downloads/report.pdf".into(), + dst: "/Users/private/Cloud/report.pdf".into(), + provider: CloudProvider::Icloud, + destination_account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + kind: cloud::ArchiveKind::Document, + bytes: 42, + age_days: 7, + created_ms: 10, + modified_ms: 20, + production_time_ms: 5, + production_time_source: "embedded-pdf-creation-date".into(), + production_time_confidence: "high".into(), + source_root: "/Users/private/Downloads".into(), + relative_path: "report.pdf".into(), + source_context: "Downloads".into(), + requires_review: true, + review_reasons: vec![ + "download-origin-needs-destination-review".into(), + "metadata-review-required".into(), + ], + content_title: Some("Confidential title".into()), + content_authors: vec!["Private Author".into()], + content_context: vec!["private context".into()], + duration_ms: None, + dataset_profile: None, + metadata_evidence: vec![cloud::MetadataEvidence { + field: "creation-date".into(), + value: "private raw value".into(), + source: "pdf-info".into(), + confidence: "high".into(), + }], + blocked_reason: None, + }; + let mut report = cloud::CloudPlanReport { + cloud_root: CloudRoot { + id: "/Users/private/Cloud".into(), + provider: CloudProvider::Icloud, + account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + label: "private@example.com".into(), + path: "/Users/private/Cloud".into(), + readable: true, + access_issue: None, + }, + generated_at_ms: 100, + source_selection_policy: Some(cloud::CloudPlanOptions { + min_size_bytes: 90 * 1024 * 1024, + min_age_days: 30, + limit: 200, + }), + candidates: vec![candidate], + candidate_bytes: 42, + potentially_reclaimable_bytes: 42, + exact_duplicates: cloud::ExactDuplicateSummary::default(), + capacity: None, + local_volume: None, + notices: vec!["dry-run-only".into()], + }; + + let summary = decision_summary(&report); + let item = &summary["decisions"][0]; + assert_eq!(summary["output_mode"], "decision-summary"); + assert_eq!(summary["schema_version"], 3); + assert!(summary["redacted_from_summary"] + .as_array() + .unwrap() + .contains(&serde_json::json!("relative-source-path-and-file-name"))); + assert_eq!(summary["candidate_count"], 1); + assert_eq!( + summary["source_selection_policy"]["min_size_bytes"], + 90 * 1024 * 1024 + ); + assert_eq!(summary["source_selection_policy"]["min_age_days"], 30); + assert_eq!(summary["source_selection_policy"]["limit"], 200); + assert_eq!( + summary["decision_batch_fingerprint_version"], + cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION + ); + assert_eq!( + summary["decision_batch_fingerprint"] + .as_str() + .unwrap() + .len(), + 64 + ); + assert!(item.get("relative_path").is_none()); + assert_eq!(item["decision_state"], "review-required"); + assert_eq!(item["copy_approval_action"], "copy-only"); + assert_eq!( + item["exact_copy_approval_phrase"], + format!( + "DiskSage cloud copy-only {} 승인", + item["review_fingerprint"].as_str().unwrap() + ) + ); + assert_eq!(item["copy_approval_max_age_ms"], 15 * 60 * 1000); + let mut destination_exists = report.candidates[0].clone(); + destination_exists.blocked_reason = Some("destination-exists".into()); + let adoption = redacted_decision(&destination_exists); + assert_eq!(adoption["copy_approval_action"], "adopt-existing-copy"); + assert_eq!( + adoption["exact_copy_approval_phrase"], + format!( + "DiskSage cloud adopt-existing-copy {} 승인", + adoption["review_fingerprint"].as_str().unwrap() + ) + ); + + destination_exists.blocked_reason = Some("incomplete-download".into()); + let ineligible = redacted_decision(&destination_exists); + assert!(ineligible["copy_approval_action"].is_null()); + assert!(ineligible["exact_copy_approval_phrase"].is_null()); + assert_eq!( + summary["aggregates"]["decision_state"]["counts"]["review-required"], + 1 + ); + assert_eq!( + summary["aggregates"]["decision_state"]["candidate_bytes"]["review-required"], + 42 + ); + assert_eq!( + summary["aggregates"]["review_required_reason"]["counts"]["metadata-review-required"], + 1 + ); + assert_eq!( + summary["aggregates"]["review_required_reason"]["candidate_bytes"] + ["download-origin-needs-destination-review"], + 42 + ); + assert_eq!( + summary["aggregates"]["review_required_reason"] + ["candidate_bytes_can_overlap_across_reasons"], + true + ); + assert!( + summary["aggregates"]["review_required_reason"]["sole_reason_counts"] + ["metadata-review-required"] + .is_null() + ); + assert_eq!( + summary["aggregates"]["review_required_reason"]["reason_count_distribution"]["2"], + 1 + ); + assert_eq!( + summary["aggregates"]["review_required_reason"]["reason_set_counts"] + ["download-origin-needs-destination-review|metadata-review-required"], + 1 + ); + assert_eq!( + summary["aggregates"]["review_required_reason"]["reason_set_delimiter"], + "|" + ); + assert_eq!( + summary["aggregates"]["production_time_source"]["counts"]["embedded-pdf-creation-date"], + 1 + ); + assert_eq!( + summary["aggregates"]["production_time_confidence"]["counts"]["high"], + 1 + ); + assert!(item.get("src").is_none()); + assert!(item.get("dst").is_none()); + assert!(item.get("metadata_evidence").is_none()); + + let encoded = serde_json::to_string(&summary).unwrap(); + for redacted in [ + "/Users/private", + "private@example.com", + "Confidential title", + "Private Author", + "private raw value", + "report.pdf", + ] { + assert!(!encoded.contains(redacted)); + } + + let mut compact_report = report.clone(); + compact_report.exact_duplicates = cloud::ExactDuplicateSummary { + cluster_count: 1, + candidate_count: 2, + candidate_bytes: 84, + redundant_bytes: 42, + clusters: vec![cloud::ExactDuplicateClusterRecommendation { + cluster_fingerprint: "c".repeat(64), + candidate_count: 2, + bytes_per_candidate: 42, + redundant_bytes: 42, + recommended_canonical_metadata_fingerprint: "d".repeat(64), + recommendation_confidence: "high".into(), + recommendation_reason_codes: vec!["richer-source-lineage-context-preferred".into()], + member_metadata_fingerprints: vec!["d".repeat(64), "e".repeat(64)], + requires_human_confirmation: true, + }], + }; + let compact = compact_decision_summary(&compact_report); + assert_eq!(compact["output_mode"], "compact-decision-summary"); + assert_eq!(compact["schema_version"], 3); + assert_eq!(compact["candidate_details_included"], false); + assert_eq!(compact["cloud_write_executed"], false); + assert_eq!(compact["source_eviction_authorized"], false); + assert_eq!( + compact["metadata_policy"]["exact_human_attributed_copy_approval_required"], + true + ); + assert_eq!(compact["exact_duplicates"]["cluster_count"], 1); + assert_eq!(compact["exact_duplicates"]["redundant_bytes"], 42); + assert_eq!(compact["exact_duplicates"]["cluster_members_omitted"], true); + assert_eq!( + compact["organization_manifest"]["candidate_groups"]["archive_kind"]["counts"] + ["document"], + 1 + ); + assert_eq!( + compact["organization_manifest"]["candidate_groups"]["production_month"]["counts"] + ["1970-01"], + 1 + ); + assert_eq!( + compact["organization_manifest"]["context_evidence_coverage"]["counts"] + ["content-context-present"], + 1 + ); + assert_eq!( + compact["organization_manifest"]["context_evidence_coverage"]["counts"] + ["nested-source-context-preserved"], + 1 + ); + assert_eq!( + compact["organization_manifest"]["destination_collision_preflight"]["counts"], + 0 + ); + assert_eq!( + compact["organization_manifest"]["source_relative_path_preserved_for_lineage"], + true + ); + assert!(compact.get("decisions").is_none()); + assert!(compact["exact_duplicates"].get("clusters").is_none()); + assert!(compact["aggregates"]["review_required_reason"] + .get("reason_set_counts") + .is_none()); + assert_eq!( + compact["aggregates"]["review_required_reason"]["counts"]["metadata-review-required"], + 1 + ); + assert_eq!( + compact["decision_batch_fingerprint"], + cloud::cloud_decision_batch_fingerprint(&compact_report) + ); + let encoded_compact = serde_json::to_string(&compact).unwrap(); + for redacted in [ + "/Users/private".to_string(), + "private@example.com".to_string(), + "Confidential title".to_string(), + "Private Author".to_string(), + "private raw value".to_string(), + "report.pdf".to_string(), + "c".repeat(64), + "d".repeat(64), + "e".repeat(64), + ] { + assert!(!encoded_compact.contains(&redacted)); + } + + let reason_set = report.candidates[0].review_reasons.clone(); + let review_batch = review_batch_summary(&report, &reason_set).unwrap(); + assert_eq!(review_batch["output_mode"], "review-batch-summary"); + assert_eq!(review_batch["schema_version"], 3); + assert!(review_batch["redacted_from_summary"] + .as_array() + .unwrap() + .contains(&serde_json::json!("relative-source-path-and-file-name"))); + assert_eq!(review_batch["candidate_count"], 1); + assert_eq!(review_batch["candidate_bytes"], 42); + assert_eq!(review_batch["reason_set"], serde_json::json!(reason_set)); + assert!(review_batch["decisions"][0].get("relative_path").is_none()); + assert!(!serde_json::to_string(&review_batch) + .unwrap() + .contains("report.pdf")); + assert_eq!( + review_batch["review_batch_fingerprint"] + .as_str() + .unwrap() + .len(), + 64 + ); + assert_eq!( + review_batch["metadata_policy"]["batch_fingerprint_is_not_approval"], + true + ); + assert_eq!( + review_batch["metadata_policy"]["candidate_review_decisions_remain_individual"], + true + ); + assert_eq!( + review_batch_summary(&report, &report.candidates[0].review_reasons).unwrap() + ["review_batch_fingerprint"], + review_batch["review_batch_fingerprint"] + ); + let mut unrelated_changed = report.clone(); + let mut unrelated = unrelated_changed.candidates[0].clone(); + unrelated.metadata_fingerprint = "c".repeat(64); + unrelated.review_fingerprint = "d".repeat(64); + unrelated.relative_path = "other.pdf".into(); + unrelated.src = "/Users/private/Downloads/other.pdf".into(); + unrelated.dst = "/Users/private/Cloud/other.pdf".into(); + unrelated.bytes = 9; + unrelated.review_reasons = vec!["different-reason".into()]; + unrelated_changed.candidates.push(unrelated); + unrelated_changed.candidate_bytes += 9; + unrelated_changed.potentially_reclaimable_bytes += 9; + let unrelated_batch = review_batch_summary(&unrelated_changed, &reason_set).unwrap(); + assert_ne!( + unrelated_batch["decision_batch_fingerprint"], + review_batch["decision_batch_fingerprint"] + ); + assert_eq!( + unrelated_batch["review_batch_fingerprint"], + review_batch["review_batch_fingerprint"] + ); + + let mut selected_changed = report.clone(); + selected_changed.candidates[0].review_fingerprint = "e".repeat(64); + assert_ne!( + review_batch_summary(&selected_changed, &reason_set).unwrap() + ["review_batch_fingerprint"], + review_batch["review_batch_fingerprint"] + ); + let encoded_batch = serde_json::to_string(&review_batch).unwrap(); + for redacted in [ + "/Users/private", + "private@example.com", + "Confidential title", + "Private Author", + "private raw value", + ] { + assert!(!encoded_batch.contains(redacted)); + } + assert!(review_batch_summary(&report, &["not-present".into()]).is_err()); + + let dossier = private_review_dossier(&report, &reason_set).unwrap(); + assert_eq!(dossier["output_mode"], "private-review-dossier"); + assert_eq!( + dossier["review_batch_fingerprint"], + review_batch["review_batch_fingerprint"] + ); + assert_eq!(dossier["candidate_count"], 1); + assert_eq!(dossier["candidate_bytes"], 42); + assert_eq!( + dossier["metadata_policy"]["filename_dates_are_auxiliary"], + true + ); + assert_eq!( + dossier["metadata_policy"]["candidate_review_decisions_remain_individual"], + true + ); + let encoded_dossier = serde_json::to_string(&dossier).unwrap(); + for private_value in [ + "/Users/private", + "private@example.com", + "Confidential title", + "Private Author", + "private raw value", + ] { + assert!(encoded_dossier.contains(private_value)); + } + + let mut inspection_report = report.clone(); + let mut blocked = inspection_report.candidates[0].clone(); + blocked.metadata_fingerprint = "1".repeat(64); + blocked.review_fingerprint = "2".repeat(64); + blocked.relative_path = "blocked-private.zip".into(); + blocked.src = "/Users/private/Downloads/blocked-private.zip".into(); + blocked.dst = "/Users/private/Cloud/blocked-private.zip".into(); + blocked.blocked_reason = Some("opaque-container-content-uninspected".into()); + inspection_report.candidates.push(blocked); + inspection_report.candidate_bytes = 84; + let inspection = private_candidate_inspection_dossier(&inspection_report); + assert_eq!( + inspection["output_mode"], + "private-candidate-inspection-dossier" + ); + assert_eq!( + inspection["inspection_scope"], + "all-current-plan-candidates" + ); + assert_eq!(inspection["candidate_count"], 2); + assert_eq!(inspection["candidate_bytes"], 84); + assert_eq!(inspection["decision_state"]["counts"]["blocked"], 1); + assert_eq!(inspection["decision_state"]["counts"]["review-required"], 1); + assert_eq!( + inspection["metadata_policy"]["inspection_includes_blocked_candidates"], + true + ); + assert_eq!( + inspection["metadata_policy"]["dossier_is_not_approval"], + true + ); + assert_eq!(inspection["cloud_write_executed"], false); + assert_eq!(inspection["source_eviction_authorized"], false); + assert!(inspection["candidates"] + .as_array() + .unwrap() + .iter() + .any(|candidate| { + candidate["decision_state"] == "blocked" + && candidate["relative_path"] == "blocked-private.zip" + })); + + #[cfg(unix)] + { + use std::os::unix::fs::PermissionsExt; + let private_dir = tempfile::tempdir().unwrap(); + let private_path = private_dir.path().join("review.json"); + let (sha256, bytes) = write_private_review_dossier(&private_path, &dossier).unwrap(); + assert_eq!(sha256.len(), 64); + assert!(bytes > 0); + assert_eq!(std::fs::read(&private_path).unwrap().len(), bytes); + assert!(write_private_review_dossier(&private_path, &dossier).is_err()); + assert_eq!( + std::fs::metadata(&private_path) + .unwrap() + .permissions() + .mode() + & 0o777, + 0o600 + ); + } + + let mut mixed = report.clone(); + let mut ready = mixed.candidates[0].clone(); + ready.metadata_fingerprint = "c".repeat(64); + ready.review_fingerprint = "d".repeat(64); + ready.bytes = 10; + ready.requires_review = false; + ready.review_reasons.clear(); + ready.production_time_source = "filename:path-token".into(); + ready.production_time_confidence = "low".into(); + let mut blocked = mixed.candidates[0].clone(); + blocked.metadata_fingerprint = "e".repeat(64); + blocked.review_fingerprint = "f".repeat(64); + blocked.bytes = 7; + blocked.blocked_reason = Some("incomplete-download".into()); + mixed.candidates.extend([ready, blocked]); + let aggregates = decision_aggregates(&mixed); + assert_eq!(aggregates["decision_state"]["counts"]["review-required"], 1); + assert_eq!( + aggregates["decision_state"]["counts"]["ready-for-copy-review"], + 1 + ); + assert_eq!(aggregates["decision_state"]["counts"]["blocked"], 1); + assert_eq!( + aggregates["blocked_reason"]["counts"]["incomplete-download"], + 1 + ); + assert_eq!( + aggregates["review_required_reason"]["counts"]["metadata-review-required"], + 1 + ); + assert_eq!( + aggregates["production_time_source"]["counts"]["filename:path-token"], + 1 + ); + + let mut sole_reason = report.clone(); + sole_reason.candidates[0].review_reasons = vec!["destination-account-scope-unknown".into()]; + let sole_reason_aggregates = decision_aggregates(&sole_reason); + assert_eq!( + sole_reason_aggregates["review_required_reason"]["sole_reason_counts"] + ["destination-account-scope-unknown"], + 1 + ); + assert_eq!( + sole_reason_aggregates["review_required_reason"]["sole_reason_candidate_bytes"] + ["destination-account-scope-unknown"], + 42 + ); + + let original_batch = cloud::cloud_decision_batch_fingerprint(&report); + let mut volatile_changed = report.clone(); + volatile_changed.generated_at_ms += 1; + volatile_changed + .notices + .push("fresh-capacity-required".into()); + assert_eq!( + cloud::cloud_decision_batch_fingerprint(&volatile_changed), + original_batch + ); + assert_eq!( + review_batch_summary(&volatile_changed, &reason_set).unwrap() + ["review_batch_fingerprint"], + review_batch["review_batch_fingerprint"] + ); + + let mut evidence_changed = report.clone(); + evidence_changed.candidates[0].review_fingerprint = "c".repeat(64); + assert_ne!( + cloud::cloud_decision_batch_fingerprint(&evidence_changed), + original_batch + ); + + let mut selection_changed = report.clone(); + selection_changed + .source_selection_policy + .as_mut() + .unwrap() + .min_size_bytes += 1; + assert_ne!( + cloud::cloud_decision_batch_fingerprint(&selection_changed), + original_batch + ); + + let mut blocker_changed = report.clone(); + blocker_changed.candidates[0].blocked_reason = Some("destination-exists".into()); + blocker_changed.potentially_reclaimable_bytes = 0; + assert_ne!( + cloud::cloud_decision_batch_fingerprint(&blocker_changed), + original_batch + ); + + let mut reordered = report.clone(); + let mut second = reordered.candidates[0].clone(); + second.metadata_fingerprint = "d".repeat(64); + second.review_fingerprint = "e".repeat(64); + reordered.candidates.push(second); + reordered.candidate_bytes *= 2; + reordered.potentially_reclaimable_bytes *= 2; + let ordered_batch = cloud::cloud_decision_batch_fingerprint(&reordered); + reordered.candidates.reverse(); + assert_eq!( + cloud::cloud_decision_batch_fingerprint(&reordered), + ordered_batch + ); + + report.candidates[0].requires_review = false; + assert_eq!( + candidate_decision_state(&report.candidates[0]), + "ready-for-copy-review" + ); + report.candidates[0].blocked_reason = Some("incomplete-download".into()); + assert_eq!(candidate_decision_state(&report.candidates[0]), "blocked"); + } + + #[test] + fn exact_duplicate_review_batch_binds_only_root_canonical_and_nested_prefix_copies() { + let content_sha256 = "1".repeat(64); + let member = |metadata_fingerprint: &str, + review_fingerprint: &str, + relative_path: &str, + context: Vec| { + cloud::CloudCandidate { + metadata_fingerprint: metadata_fingerprint.repeat(64), + review_fingerprint: review_fingerprint.repeat(64), + src: format!("/Users/private/Downloads/{relative_path}"), + dst: format!("/Users/private/Cloud/{relative_path}"), + provider: CloudProvider::Icloud, + destination_account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + kind: ArchiveKind::Document, + bytes: 42, + age_days: 7, + created_ms: 10, + modified_ms: 20, + production_time_ms: 30, + production_time_source: "embedded:exiftool:CreateDate".into(), + production_time_confidence: "high".into(), + source_root: "/Users/private/Downloads".into(), + relative_path: relative_path.into(), + source_context: "private-source-context".into(), + requires_review: true, + review_reasons: vec![ + "download-origin-needs-destination-review".into(), + "exact-duplicate-content-needs-canonical-selection".into(), + ], + content_title: Some("Private title".into()), + content_authors: vec!["Private author".into()], + content_context: context, + duration_ms: None, + dataset_profile: None, + metadata_evidence: vec![ + cloud::MetadataEvidence { + field: "production-date".into(), + value: "private-production-value".into(), + source: "embedded:exiftool:CreateDate".into(), + confidence: "high".into(), + }, + cloud::MetadataEvidence { + field: "exact-duplicate-content-sha256".into(), + value: content_sha256.clone(), + source: "local:content-hash".into(), + confidence: "high".into(), + }, + ], + blocked_reason: None, + } + }; + let canonical = member( + "a", + "b", + "report.docx", + vec![ + "download-origin-host=private.example".into(), + "download-agent=Edge".into(), + ], + ); + let redundant = member( + "c", + "d", + "smart_bundle_v1/report.docx", + vec!["download-agent=Bandizip".into()], + ); + let report = cloud::CloudPlanReport { + cloud_root: CloudRoot { + id: "/Users/private/Cloud".into(), + provider: CloudProvider::Icloud, + account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + label: "private@example.com".into(), + path: "/Users/private/Cloud".into(), + readable: true, + access_issue: None, + }, + generated_at_ms: 100, + source_selection_policy: Some(cloud::CloudPlanOptions::default()), + candidates: vec![canonical, redundant], + candidate_bytes: 84, + potentially_reclaimable_bytes: 84, + exact_duplicates: cloud::ExactDuplicateSummary { + cluster_count: 1, + candidate_count: 2, + candidate_bytes: 84, + redundant_bytes: 42, + clusters: vec![cloud::ExactDuplicateClusterRecommendation { + cluster_fingerprint: "e".repeat(64), + candidate_count: 2, + bytes_per_candidate: 42, + redundant_bytes: 42, + recommended_canonical_metadata_fingerprint: "a".repeat(64), + recommendation_confidence: "high".into(), + recommendation_reason_codes: vec![ + "richer-source-lineage-context-preferred".into() + ], + member_metadata_fingerprints: vec!["a".repeat(64), "c".repeat(64)], + requires_human_confirmation: true, + }], + }, + capacity: None, + local_volume: None, + notices: vec!["dry-run-only".into()], + }; + + let batch = + exact_duplicate_review_batch(&report, "smart_bundle_", ArchiveKind::Document).unwrap(); + assert_eq!(batch["output_mode"], "exact-duplicate-review-batch"); + assert_eq!(batch["cluster_count"], 1); + assert_eq!(batch["candidate_count"], 2); + assert_eq!(batch["redundant_copy_count"], 1); + assert_eq!(batch["redundant_bytes"], 42); + assert_eq!(batch["clusters"][0]["content_sha256"], content_sha256); + assert_eq!( + batch["clusters"][0]["canonical"]["relative_path"], + "report.docx" + ); + assert_eq!( + batch["clusters"][0]["redundant_copies"][0]["relative_path"], + "smart_bundle_v1/report.docx" + ); + assert_eq!( + batch["clusters"][0]["canonical"]["source_lineage_evidence_fields"], + serde_json::json!(["download-agent", "download-origin-host"]) + ); + assert_eq!( + batch["exact_duplicate_review_batch_fingerprint"] + .as_str() + .unwrap() + .len(), + 64 + ); + assert_eq!( + batch["metadata_policy"]["batch_fingerprint_is_not_approval"], + true + ); + assert_eq!( + batch["metadata_policy"]["trash_execution_is_not_available_in_this_output_mode"], + true + ); + + let encoded = serde_json::to_string(&batch).unwrap(); + for redacted in [ + "/Users/private", + "private@example.com", + "private.example", + "Private title", + "Private author", + "private-production-value", + "private-source-context", + "Bandizip", + "Edge", + ] { + assert!(!encoded.contains(redacted)); + } + + let repeated = + exact_duplicate_review_batch(&report, "smart_bundle_", ArchiveKind::Document).unwrap(); + assert_eq!( + repeated["exact_duplicate_review_batch_fingerprint"], + batch["exact_duplicate_review_batch_fingerprint"] + ); + assert!(exact_duplicate_review_batch(&report, "other_", ArchiveKind::Document).is_err()); + assert!( + exact_duplicate_review_batch(&report, "smart_bundle_", ArchiveKind::Media).is_err() + ); + + let mut evidence_changed = report.clone(); + evidence_changed.candidates[1].review_fingerprint = "f".repeat(64); + assert_ne!( + exact_duplicate_review_batch( + &evidence_changed, + "smart_bundle_", + ArchiveKind::Document, + ) + .unwrap()["exact_duplicate_review_batch_fingerprint"], + batch["exact_duplicate_review_batch_fingerprint"] + ); + + let mut incomplete = report; + incomplete.candidates.pop(); + assert!( + exact_duplicate_review_batch(&incomplete, "smart_bundle_", ArchiveKind::Document) + .unwrap_err() + .contains("missing-from-bounded-plan") + ); + } + + #[test] + fn action_validation_requires_explicit_consistent_copy_arguments() { + let mut args = parse_args(&[], Path::new("/h")).unwrap(); + args.copy_fingerprint = Some("a".repeat(64)); + assert!(validate_action_args(&args).is_err()); + args.receipt_dir = Some(PathBuf::from("/receipts")); + args.confirm_copy_phrase = Some("exact copy phrase".into()); + args.reviewed_by = Some("human:local:test".into()); + args.review_rationale = Some("exact copy reviewed".into()); + assert!(validate_action_args(&args).is_ok()); + args.receipt_dir = Some(PathBuf::from("relative-receipts")); + assert!(validate_action_args(&args).is_err()); + args.receipt_dir = Some(PathBuf::from("/receipts")); + args.copy_fingerprint = Some("not-a-fingerprint".into()); + assert!(validate_action_args(&args).is_err()); + + args.list_roots = false; + args.attest_receipt = Some(PathBuf::from("relative-receipt.json")); + assert!(validate_action_args(&args).is_err()); + args.copy_fingerprint = None; + args.receipt_dir = None; + args.list_roots = true; + args.attest_receipt = Some(PathBuf::from("/receipt.json")); + assert!(validate_action_args(&args).is_err()); + + let parsed = parse_args( + &[ + "--copy-fingerprint".into(), + "b".repeat(64), + "--receipt-dir".into(), + "/receipts".into(), + "--confirm-copy-phrase".into(), + "exact copy phrase".into(), + "--reviewed-by".into(), + "human:local:test".into(), + "--review-rationale".into(), + "exact copy reviewed".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert_eq!(parsed.copy_fingerprint, Some("b".repeat(64))); + assert_eq!(parsed.receipt_dir, Some(PathBuf::from("/receipts"))); + + let adoption = parse_args( + &[ + "--adopt-existing-fingerprint".into(), + "e".repeat(64), + "--receipt-dir".into(), + "/receipts".into(), + "--confirm-copy-phrase".into(), + "exact adoption phrase".into(), + "--reviewed-by".into(), + "human:local:test".into(), + "--review-rationale".into(), + "exact adoption reviewed".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert_eq!(adoption.adopt_existing_fingerprint, Some("e".repeat(64))); + assert!(validate_action_args(&adoption).is_ok()); + + let mut conflicting_receipt_actions = adoption; + conflicting_receipt_actions.copy_fingerprint = Some("f".repeat(64)); + assert!(validate_action_args(&conflicting_receipt_actions).is_err()); + + let review = parse_args( + &[ + "--review-candidate-fingerprint".into(), + "c".repeat(64), + "--review-fingerprint".into(), + "d".repeat(64), + "--review-disposition".into(), + "approved".into(), + "--reviewed-by".into(), + "human:local:test".into(), + "--review-rationale".into(), + "metadata reviewed".into(), + "--review-dir".into(), + "/reviews".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert_eq!(review.review_candidate_fingerprint, Some("c".repeat(64))); + assert_eq!(review.review_fingerprint, Some("d".repeat(64))); + assert_eq!( + review.review_disposition, + Some(CloudReviewDisposition::Approved) + ); + assert_eq!(review.review_dir, Some(PathBuf::from("/reviews"))); + assert_eq!(review.reviewed_by.as_deref(), Some("human:local:test")); + assert_eq!( + review.review_rationale.as_deref(), + Some("metadata reviewed") + ); + assert!(validate_action_args(&review).is_ok()); + + let mut non_human_review = review.clone(); + non_human_review.reviewed_by = Some("agent:codex".into()); + assert_eq!( + validate_action_args(&non_human_review).unwrap_err(), + "cloud-review-decision-attribution-invalid" + ); + + let help = parse_args(&["--help".into()], Path::new("/h")).unwrap_err(); + assert!(help.contains("--reviewed-by human:ID")); + assert!(help.contains("--confirm-copy-phrase EXACT")); + assert!(help.contains("--provider-api-copy-fingerprint HEX64")); + assert!(help.contains("--export-naruon-copy-readiness --verify-capacity")); + assert!(help.contains("--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json")); + assert!(help.contains("--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json")); + + assert!(parse_args( + &["--review-disposition".into(), "maybe".into(),], + Path::new("/h"), + ) + .is_err()); + } + + #[test] + fn capacity_verification_allows_plan_and_copy_actions() { + let mut plan = parse_args(&["--verify-capacity".into()], Path::new("/h")).unwrap(); + plan.oauth_connections = Some(PathBuf::from("/connections.json")); + assert!(validate_action_args(&plan).is_ok()); + + let mut copy = parse_args(&[], Path::new("/h")).unwrap(); + copy.copy_fingerprint = Some("a".repeat(64)); + copy.receipt_dir = Some(PathBuf::from("/receipts")); + copy.confirm_copy_phrase = Some("exact copy phrase".into()); + copy.reviewed_by = Some("human:test".into()); + copy.review_rationale = Some("exact copy reviewed".into()); + copy.oauth_connections = Some(PathBuf::from("/connections.json")); + assert!(validate_action_args(©).is_ok()); + + let review = parse_args( + &[ + "--verify-capacity".into(), + "--review-candidate-fingerprint".into(), + "c".repeat(64), + "--review-fingerprint".into(), + "d".repeat(64), + "--review-disposition".into(), + "approved".into(), + "--reviewed-by".into(), + "human:test".into(), + "--review-rationale".into(), + "provider scope and embedded metadata reviewed".into(), + "--review-dir".into(), + "/reviews".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&review).is_ok()); + + let mut adoption = copy.clone(); + adoption.copy_fingerprint = None; + adoption.adopt_existing_fingerprint = Some("b".repeat(64)); + assert!(validate_action_args(&adoption).is_err()); + + plan.list_roots = true; + assert!(validate_action_args(&plan).is_err()); + } + + #[test] + fn capacity_verification_without_connection_is_a_redacted_blocked_assessment() { + let root = CloudRoot { + id: "onedrive:test".into(), + provider: CloudProvider::Onedrive, + account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + label: "OneDrive".into(), + path: "/Cloud/OneDrive".into(), + readable: true, + access_issue: None, + }; + + let observed_at_ms = cloud::system_now_ms(); + let snapshot = match collect_root_capacity(&root, None, observed_at_ms) { + Ok(snapshot) => snapshot, + Err(error) => provider_capacity::unavailable_capacity_from_error( + root.provider, + observed_at_ms, + &error, + ), + }; + let assessment = provider_capacity::assess_capacity(snapshot, 10, 10, 1024 * 1024); + + assert_eq!(assessment.can_fit, None); + assert_eq!( + assessment.snapshot.unavailable_reason.as_deref(), + Some("provider-oauth-connection-missing") + ); + assert_eq!( + assessment.blockers, + ["provider-oauth-connection-missing".to_string()] + ); + } + + #[test] + fn capacity_attachment_marks_each_non_oauth_destination_unavailable() { + let root = CloudRoot { + id: "onedrive:test".into(), + provider: CloudProvider::Onedrive, + account_scope: disksage_lib::cloud::CloudAccountScope::Personal, + label: "OneDrive".into(), + path: "/Cloud/OneDrive".into(), + readable: true, + access_issue: None, + }; + let mut report = cloud::CloudPlanReport { + cloud_root: root.clone(), + generated_at_ms: 1, + source_selection_policy: Some(cloud::CloudPlanOptions::default()), + candidates: Vec::new(), + candidate_bytes: 0, + potentially_reclaimable_bytes: 0, + exact_duplicates: cloud::ExactDuplicateSummary::default(), + capacity: None, + local_volume: None, + notices: vec!["dry-run-only".into(), "cloud-quota-unverified".into()], + }; + + let snapshot = provider_capacity::unavailable_capacity_from_error( + CloudProvider::Onedrive, + 1, + "provider-capacity-oauth-connections-required", + ); + attach_capacity_snapshot(&mut report, snapshot, 1024).unwrap(); + + let assessment = report.capacity.unwrap(); + assert_eq!(assessment.can_fit, None); + assert_eq!( + assessment.blockers, + ["provider-oauth-connection-missing".to_string()] + ); + assert!(!report + .notices + .iter() + .any(|notice| notice == "cloud-quota-unverified")); + assert!(report + .notices + .iter() + .any(|notice| notice == "cloud-quota-unavailable")); + } + + #[test] + fn action_validation_requires_complete_review_arguments() { + let mut args = parse_args(&[], Path::new("/h")).unwrap(); + args.review_candidate_fingerprint = Some("c".repeat(64)); + assert!(validate_action_args(&args).is_err()); + args.review_fingerprint = Some("d".repeat(64)); + args.review_disposition = Some(CloudReviewDisposition::Held); + assert!(validate_action_args(&args).is_err()); + args.reviewed_by = Some("human:local:test".into()); + args.review_rationale = Some("metadata reviewed".into()); + args.review_dir = Some(PathBuf::from("relative-reviews")); + assert!(validate_action_args(&args).is_err()); + args.review_dir = Some(PathBuf::from("/reviews")); + assert!(validate_action_args(&args).is_ok()); + + args.copy_fingerprint = Some("a".repeat(64)); + args.receipt_dir = Some(PathBuf::from("/receipts")); + assert!(validate_action_args(&args).is_err()); + + args.review_candidate_fingerprint = None; + args.review_fingerprint = None; + args.review_disposition = None; + args.confirm_copy_phrase = Some("exact copy phrase".into()); + args.reviewed_by = Some("human:local:test".into()); + args.review_rationale = Some("exact copy reviewed".into()); + assert!(validate_action_args(&args).is_ok()); + + let mut reason_set = parse_args( + &[ + "--review-reason-set".into(), + "destination-account-scope-unknown".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&reason_set).is_err()); + reason_set.decision_summary = true; + assert!(validate_action_args(&reason_set).is_ok()); + } + + #[test] + fn naruon_export_requires_absolute_receipt_and_bound_optional_evidence() { + let export = parse_args( + &[ + "--export-naruon-lineage".into(), + "/receipts/receipt.json".into(), + "--naruon-sync-evidence".into(), + "/evidence/evidence.json".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&export).is_ok()); + + let relative = parse_args( + &["--export-naruon-lineage".into(), "receipt.json".into()], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&relative).is_err()); + + let evidence_only = parse_args( + &[ + "--naruon-sync-evidence".into(), + "/evidence/evidence.json".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&evidence_only).is_err()); + + let mut conflicting = export; + conflicting.list_roots = true; + assert!(validate_action_args(&conflicting).is_err()); + } + + #[test] + fn naruon_capacity_export_requires_fresh_single_destination_capacity() { + let export = parse_args( + &[ + "--verify-capacity".into(), + "--export-naruon-capacity".into(), + "--provider".into(), + "icloud".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(export.export_naruon_capacity); + assert!(validate_action_args(&export).is_ok()); + + let missing_capacity = + parse_args(&["--export-naruon-capacity".into()], Path::new("/h")).unwrap(); + assert!(validate_action_args(&missing_capacity).is_err()); + + let multiple = parse_args( + &[ + "--verify-capacity".into(), + "--export-naruon-capacity".into(), + "--all-readable-roots".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&multiple).is_err()); + } + + #[test] + fn naruon_copy_readiness_export_is_fresh_single_destination_and_safe_output() { + let export = parse_args( + &[ + "--verify-capacity".into(), + "--export-naruon-copy-readiness".into(), + "--naruon-copy-readiness-output".into(), + "/artifacts/readiness.json".into(), + "--provider".into(), + "onedrive".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(export.export_naruon_copy_readiness); + assert_eq!( + export.naruon_copy_readiness_output, + Some(PathBuf::from("/artifacts/readiness.json")) + ); + assert!(validate_action_args(&export).is_ok()); + + let missing_capacity = + parse_args(&["--export-naruon-copy-readiness".into()], Path::new("/h")).unwrap(); + assert!(validate_action_args(&missing_capacity).is_err()); + + let output_only = parse_args( + &[ + "--naruon-copy-readiness-output".into(), + "/artifacts/readiness.json".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&output_only).is_err()); + + let relative_output = parse_args( + &[ + "--verify-capacity".into(), + "--export-naruon-copy-readiness".into(), + "--naruon-copy-readiness-output".into(), + "readiness.json".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&relative_output).is_err()); + + let mut conflicting = export; + conflicting.export_naruon_capacity = true; + assert!(validate_action_args(&conflicting).is_err()); + } + + #[test] + fn semantic_catalog_export_is_single_destination_dry_run_only() { + let export = parse_args( + &[ + "--export-semantic-catalog".into(), + "--provider".into(), + "icloud".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(export.export_semantic_catalog); + assert!(validate_action_args(&export).is_ok()); + + let mut conflicting = export.clone(); + conflicting.copy_fingerprint = Some("a".repeat(64)); + conflicting.receipt_dir = Some(PathBuf::from("/receipts")); + assert!(validate_action_args(&conflicting).is_err()); + + let multiple = parse_args( + &[ + "--export-semantic-catalog".into(), + "--all-readable-roots".into(), + "--decision-summary".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&multiple).is_err()); + + let summary = parse_args( + &[ + "--export-semantic-catalog".into(), + "--decision-summary".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&summary).is_err()); + } + + #[test] + fn action_validation_requires_explicit_complete_eviction_arguments() { + let mut args = parse_args(&[], Path::new("/h")).unwrap(); + args.evict_receipt = Some(PathBuf::from("/receipts/a.json")); + assert!(validate_action_args(&args).is_err()); + args.confirm_receipt_id = Some("a".repeat(64)); + args.eviction_dir = Some(PathBuf::from("/evictions")); + args.eviction_approval_dir = Some(PathBuf::from("/approvals")); + args.journal_path = Some(PathBuf::from("relative-journal")); + assert!(validate_action_args(&args).is_err()); + args.journal_path = Some(PathBuf::from("/journal/operations.jsonl")); + args.evidence_dir = Some(PathBuf::from("relative-evidence")); + assert!(validate_action_args(&args).is_err()); + args.evidence_dir = Some(PathBuf::from("/evidence")); + args.reviewed_by = Some("human:local:test".into()); + args.review_rationale = Some("verified exact receipt source".into()); + assert!(validate_action_args(&args).is_ok()); + + args.attest_receipt = Some(PathBuf::from("/receipt.json")); + assert!(validate_action_args(&args).is_err()); + + let parsed = parse_args( + &[ + "--evict-receipt".into(), + "/receipts/a.json".into(), + "--confirm-receipt-id".into(), + "b".repeat(64), + "--eviction-dir".into(), + "/evictions".into(), + "--eviction-approval-dir".into(), + "/approvals".into(), + "--journal-path".into(), + "/journal/operations.jsonl".into(), + "--evidence-dir".into(), + "/evidence".into(), + "--reviewed-by".into(), + "human:local:test".into(), + "--review-rationale".into(), + "verified exact receipt source".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert_eq!(parsed.confirm_receipt_id, Some("b".repeat(64))); + assert!(validate_action_args(&parsed).is_ok()); + } + + #[test] + fn provider_api_fallback_requires_complete_scoped_arguments() { + let parsed = parse_args( + &[ + "--attest-receipt".into(), + "/receipts/a.json".into(), + "--provider-object-id".into(), + "remote-item-id".into(), + "--oauth-connections".into(), + "/app-data/cloud-oauth-connections.json".into(), + "--evidence-dir".into(), + "/evidence".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert_eq!(parsed.provider_object_id.as_deref(), Some("remote-item-id")); + assert_eq!( + parsed.oauth_connections, + Some(PathBuf::from("/app-data/cloud-oauth-connections.json")) + ); + assert!(validate_action_args(&parsed).is_ok()); + + let onedrive_path_fallback = parse_args( + &[ + "--attest-receipt".into(), + "/receipts/a.json".into(), + "--oauth-connections".into(), + "/app-data/cloud-oauth-connections.json".into(), + "--evidence-dir".into(), + "/evidence".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&onedrive_path_fallback).is_ok()); + + let mut provider_api_copy = parse_args( + &[ + "--provider-api-copy-fingerprint".into(), + "f".repeat(64), + "--receipt-dir".into(), + "/receipts".into(), + "--confirm-copy-phrase".into(), + "exact provider api copy phrase".into(), + "--reviewed-by".into(), + "human:local:test".into(), + "--review-rationale".into(), + "provider API path reviewed".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&provider_api_copy).is_err()); + provider_api_copy.oauth_connections = Some(PathBuf::from("/connections.json")); + assert!(validate_action_args(&provider_api_copy).is_ok()); + provider_api_copy.provider_object_id = Some("unexpected-id".into()); + assert!(validate_action_args(&provider_api_copy).is_err()); + + let mut incomplete = parse_args( + &[ + "--attest-receipt".into(), + "/receipts/a.json".into(), + "--provider-object-id".into(), + "remote-item-id".into(), + "--evidence-dir".into(), + "/evidence".into(), + ], + Path::new("/h"), + ) + .unwrap(); + assert!(validate_action_args(&incomplete).is_err()); + incomplete.oauth_connections = Some(PathBuf::from("relative-connections.json")); + assert!(validate_action_args(&incomplete).is_err()); + + let mut unscoped = parse_args(&[], Path::new("/h")).unwrap(); + unscoped.provider_object_id = Some("remote-item-id".into()); + unscoped.oauth_connections = Some(PathBuf::from("/connections.json")); + assert!(validate_action_args(&unscoped).is_err()); + } + + #[cfg(not(coverage))] + #[test] + fn icloud_reconciliation_uses_native_probe_with_shared_oauth_descriptor() { + let receipt = CloudCopyReceipt { + version: cloud_transfer::RECEIPT_VERSION, + receipt_id: "0".repeat(64), + candidate_fingerprint: "1".repeat(64), + provider: CloudProvider::Icloud, + source: "/source/file.bin".into(), + destination: "/missing/icloud/file.bin".into(), + bytes: 1, + blake3: "2".repeat(64), + sha256: "3".repeat(64), + quick_xor_base64: String::new(), + source_modified_ms: 1, + copied_at_ms: 2, + copy_verified: true, + provider_sync_confirmed: false, + lineage_fingerprint: None, + lineage: None, + }; + let error = collect_receipt_sync_evidence( + &receipt, + None, + Some(Path::new("/connections.json")), + Path::new("/home/test"), + 3, + false, + ) + .unwrap_err(); + assert_ne!(error, "icloud-provider-api-fallback-not-supported"); + } + + #[test] + fn attestation_rejects_forged_receipt_before_destination_probe() { + let temp = tempfile::tempdir().unwrap(); + let receipt = CloudCopyReceipt { + version: cloud_transfer::RECEIPT_VERSION, + receipt_id: "0".repeat(64), + candidate_fingerprint: "1".repeat(64), + provider: CloudProvider::Icloud, + source: temp + .path() + .join("source.pdf") + .to_string_lossy() + .into_owned(), + destination: temp + .path() + .join("destination-does-not-exist.pdf") + .to_string_lossy() + .into_owned(), + bytes: 1, + blake3: "2".repeat(64), + sha256: "3".repeat(64), + quick_xor_base64: "AAAAAAAAAAAAAAAAAAAAAAAAAAA=".into(), + source_modified_ms: 1, + copied_at_ms: 2, + copy_verified: true, + provider_sync_confirmed: false, + lineage_fingerprint: None, + lineage: None, + }; + let path = temp.path().join(format!("{}.json", receipt.receipt_id)); + std::fs::write(&path, serde_json::to_vec(&receipt).unwrap()).unwrap(); + let mut permissions = std::fs::metadata(&path).unwrap().permissions(); + permissions.set_readonly(true); + std::fs::set_permissions(&path, permissions).unwrap(); + + let error = + attest_receipt(&path, temp.path(), None, None, Path::new("/home/test")).unwrap_err(); + assert!(error.contains("receipt-integrity-mismatch")); + assert!(!error.contains("No such file")); + } +} diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 933d96b99..9738b7f03 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -1,3753 +1,39 @@ -//! Headless entrypoint for planning, reviewing, copying, and attesting cloud archive candidates. - -#[cfg(target_os = "macos")] -embed_plist::embed_info_plist!("../../disksage-cloud-plan.Info.plist"); - -#[cfg(not(coverage))] -use std::collections::BTreeMap; -#[cfg(all(not(coverage), unix))] -use std::fs::OpenOptions; -#[cfg(all(not(coverage), unix))] -use std::io::Write; -#[cfg(not(coverage))] -use std::path::{Path, PathBuf}; -#[cfg(not(coverage))] -use std::time::{Duration, Instant}; - -#[cfg(not(coverage))] -use disksage_lib::cloud::{ - self, ArchiveKind, CloudAccountScope, CloudPlanOptions, CloudProvider, CloudRoot, -}; -#[cfg(not(coverage))] -use disksage_lib::cloud_adr; -#[cfg(not(coverage))] -use disksage_lib::cloud_eviction::{self, CloudEvictionResult, CloudSourceEvictionApproval}; -#[cfg(not(coverage))] -use disksage_lib::cloud_local_eviction; -#[cfg(not(coverage))] -use disksage_lib::cloud_review::{self, CloudReviewDecision, CloudReviewDisposition}; -#[cfg(not(coverage))] -use disksage_lib::cloud_transfer::{self, CloudCopyReceipt, LocalEvictionPermit}; -#[cfg(not(coverage))] -use disksage_lib::icloud_sync_health; -#[cfg(not(coverage))] -use disksage_lib::naruon_capacity; -#[cfg(not(coverage))] -use disksage_lib::naruon_cloud_copy_readiness; -use disksage_lib::naruon_lineage; -#[cfg(not(coverage))] -use disksage_lib::provider_api_client::{self, FixedHostProviderMetadataClient}; -#[cfg(not(coverage))] -use disksage_lib::provider_api_write; -#[cfg(not(coverage))] -use disksage_lib::provider_capacity::{self, FixedHostProviderCapacityClient}; -#[cfg(not(coverage))] -use disksage_lib::provider_client_runtime; -#[cfg(not(coverage))] -use disksage_lib::provider_evidence::{self, ProviderSyncEvidenceRecord}; -#[cfg(not(coverage))] -use disksage_lib::provider_global_sync; -#[cfg(not(coverage))] -use disksage_lib::provider_oauth; -#[cfg(not(coverage))] -use disksage_lib::provider_sync; -#[cfg(not(coverage))] -use disksage_lib::semantic_catalog; -#[cfg(all(not(coverage), unix))] -use sha2::{Digest, Sha256}; - -#[cfg(not(coverage))] -#[derive(Debug, Clone, PartialEq, Eq)] -struct Args { - root: PathBuf, - cloud_root: Option, - provider: Option, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - list_roots: bool, - inspect_roots: bool, - all_readable_roots: bool, - verify_capacity: bool, - decision_summary: bool, - review_reason_set: Option>, - private_review_output: Option, - private_candidate_inspection_output: Option, - exact_duplicate_review_prefix: Option, - exact_duplicate_kind: Option, - capacity_reserve_mib: u64, - copy_fingerprint: Option, - provider_api_copy_fingerprint: Option, - adopt_existing_fingerprint: Option, - receipt_dir: Option, - audit_receipts: bool, - reconcile_receipts: bool, - confirm_copy_phrase: Option, - attest_receipt: Option, - evidence_dir: Option, - provider_object_id: Option, - oauth_connections: Option, - evict_receipt: Option, - confirm_receipt_id: Option, - eviction_dir: Option, - eviction_approval_dir: Option, - journal_path: Option, - review_candidate_fingerprint: Option, - review_fingerprint: Option, - review_disposition: Option, - reviewed_by: Option, - review_rationale: Option, - review_dir: Option, - export_naruon_lineage: Option, - naruon_sync_evidence: Option, - export_naruon_capacity: bool, - export_naruon_copy_readiness: bool, - naruon_copy_readiness_output: Option, - export_semantic_catalog: bool, -} - -#[cfg(not(coverage))] -fn value(args: &[String], index: &mut usize, flag: &str) -> Result { - *index += 1; - args.get(*index) - .cloned() - .ok_or_else(|| format!("{flag} 값이 필요함")) -} - -#[cfg(not(coverage))] -fn parse_provider(value: &str) -> Result { - match value { - "icloud" => Ok(CloudProvider::Icloud), - "onedrive" => Ok(CloudProvider::Onedrive), - "google-drive" => Ok(CloudProvider::GoogleDrive), - _ => Err(format!("지원하지 않는 provider: {value}")), - } -} - -#[cfg(not(coverage))] -fn parse_review_reason_set(value: &str) -> Result, String> { - if value.len() > 2_048 { - return Err("--review-reason-set 값이 너무 김".into()); - } - let raw = value.split('|').collect::>(); - if raw.is_empty() || raw.len() > 16 { - return Err("--review-reason-set은 1개 이상 16개 이하 사유여야 함".into()); - } - let mut reasons = Vec::with_capacity(raw.len()); - for reason in raw { - if reason.is_empty() - || reason.len() > 128 - || !reason - .bytes() - .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') - { - return Err("--review-reason-set 사유 형식이 올바르지 않음".into()); - } - reasons.push(reason.to_string()); - } - let original_len = reasons.len(); - reasons.sort(); - reasons.dedup(); - if reasons.len() != original_len { - return Err("--review-reason-set에 중복 사유가 있음".into()); - } - Ok(reasons) -} - -#[cfg(not(coverage))] -fn parse_exact_duplicate_review_prefix(value: &str) -> Result { - if value.is_empty() - || value.len() > 255 - || matches!(value, "." | "..") - || value - .chars() - .any(|character| character.is_control() || matches!(character, '/' | '\\')) - { - return Err("--exact-duplicate-review-prefix는 단일 디렉터리 이름 prefix여야 함".into()); - } - Ok(value.to_string()) -} - -#[cfg(not(coverage))] -fn parse_archive_kind(value: &str) -> Result { - match value { - "document" => Ok(ArchiveKind::Document), - "media" => Ok(ArchiveKind::Media), - "archive" => Ok(ArchiveKind::Archive), - "dataset" => Ok(ArchiveKind::Dataset), - "backup" => Ok(ArchiveKind::Backup), - "creative" => Ok(ArchiveKind::Creative), - "incomplete-download" => Ok(ArchiveKind::IncompleteDownload), - _ => Err(format!("지원하지 않는 exact duplicate kind: {value}")), - } -} - -#[cfg(not(coverage))] -fn parse_args(args: &[String], home: &Path) -> Result { - let mut parsed = Args { - root: home.to_path_buf(), - cloud_root: None, - provider: None, - min_size_mib: 256, - min_age_days: 90, - limit: 200, - list_roots: false, - inspect_roots: false, - all_readable_roots: false, - verify_capacity: false, - decision_summary: false, - review_reason_set: None, - private_review_output: None, - private_candidate_inspection_output: None, - exact_duplicate_review_prefix: None, - exact_duplicate_kind: None, - capacity_reserve_mib: 1024, - copy_fingerprint: None, - provider_api_copy_fingerprint: None, - adopt_existing_fingerprint: None, - receipt_dir: None, - audit_receipts: false, - reconcile_receipts: false, - confirm_copy_phrase: None, - attest_receipt: None, - evidence_dir: None, - provider_object_id: None, - oauth_connections: None, - evict_receipt: None, - confirm_receipt_id: None, - eviction_dir: None, - eviction_approval_dir: None, - journal_path: None, - review_candidate_fingerprint: None, - review_fingerprint: None, - review_disposition: None, - reviewed_by: None, - review_rationale: None, - review_dir: None, - export_naruon_lineage: None, - naruon_sync_evidence: None, - export_naruon_capacity: false, - export_naruon_copy_readiness: false, - naruon_copy_readiness_output: None, - export_semantic_catalog: false, - }; - let mut index = 0; - while index < args.len() { - match args[index].as_str() { - "--root" => parsed.root = PathBuf::from(value(args, &mut index, "--root")?), - "--cloud-root" => { - parsed.cloud_root = Some(PathBuf::from(value(args, &mut index, "--cloud-root")?)) - } - "--provider" => { - parsed.provider = Some(parse_provider(&value(args, &mut index, "--provider")?)?) - } - "--min-size-mib" => { - parsed.min_size_mib = value(args, &mut index, "--min-size-mib")? - .parse() - .map_err(|_| "--min-size-mib는 정수여야 함".to_string())? - } - "--min-age-days" => { - parsed.min_age_days = value(args, &mut index, "--min-age-days")? - .parse() - .map_err(|_| "--min-age-days는 정수여야 함".to_string())? - } - "--limit" => { - parsed.limit = value(args, &mut index, "--limit")? - .parse() - .map_err(|_| "--limit는 정수여야 함".to_string())? - } - "--list-roots" => parsed.list_roots = true, - "--inspect-roots" => parsed.inspect_roots = true, - "--all-readable-roots" => parsed.all_readable_roots = true, - "--verify-capacity" => parsed.verify_capacity = true, - "--decision-summary" => parsed.decision_summary = true, - "--review-reason-set" => { - if parsed.review_reason_set.is_some() { - return Err("--review-reason-set은 한 번만 지정할 수 있음".into()); - } - parsed.review_reason_set = Some(parse_review_reason_set(&value( - args, - &mut index, - "--review-reason-set", - )?)?); - } - "--private-review-output" => { - if parsed.private_review_output.is_some() { - return Err("--private-review-output은 한 번만 지정할 수 있음".into()); - } - parsed.private_review_output = Some(PathBuf::from(value( - args, - &mut index, - "--private-review-output", - )?)); - } - "--private-candidate-inspection-output" => { - if parsed.private_candidate_inspection_output.is_some() { - return Err( - "--private-candidate-inspection-output은 한 번만 지정할 수 있음" - .into(), - ); - } - parsed.private_candidate_inspection_output = Some(PathBuf::from(value( - args, - &mut index, - "--private-candidate-inspection-output", - )?)); - } - "--exact-duplicate-review-prefix" => { - if parsed.exact_duplicate_review_prefix.is_some() { - return Err( - "--exact-duplicate-review-prefix는 한 번만 지정할 수 있음".into(), - ); - } - parsed.exact_duplicate_review_prefix = Some( - parse_exact_duplicate_review_prefix(&value( - args, - &mut index, - "--exact-duplicate-review-prefix", - )?)?, - ); - } - "--exact-duplicate-kind" => { - if parsed.exact_duplicate_kind.is_some() { - return Err("--exact-duplicate-kind는 한 번만 지정할 수 있음".into()); - } - parsed.exact_duplicate_kind = Some(parse_archive_kind(&value( - args, - &mut index, - "--exact-duplicate-kind", - )?)?); - } - "--capacity-reserve-mib" => { - parsed.capacity_reserve_mib = value(args, &mut index, "--capacity-reserve-mib")? - .parse() - .map_err(|_| "--capacity-reserve-mib는 정수여야 함".to_string())? - } - "--copy-fingerprint" => { - parsed.copy_fingerprint = Some(value(args, &mut index, "--copy-fingerprint")?) - } - "--provider-api-copy-fingerprint" => { - parsed.provider_api_copy_fingerprint = Some(value( - args, - &mut index, - "--provider-api-copy-fingerprint", - )?) - } - "--adopt-existing-fingerprint" => { - parsed.adopt_existing_fingerprint = Some(value( - args, - &mut index, - "--adopt-existing-fingerprint", - )?) - } - "--receipt-dir" => { - parsed.receipt_dir = Some(PathBuf::from(value(args, &mut index, "--receipt-dir")?)) - } - "--audit-receipts" => parsed.audit_receipts = true, - "--reconcile-receipts" => parsed.reconcile_receipts = true, - "--confirm-copy-phrase" => { - parsed.confirm_copy_phrase = - Some(value(args, &mut index, "--confirm-copy-phrase")?) - } - "--attest-receipt" => { - parsed.attest_receipt = Some(PathBuf::from(value( - args, - &mut index, - "--attest-receipt", - )?)) - } - "--evidence-dir" => { - parsed.evidence_dir = Some(PathBuf::from(value( - args, - &mut index, - "--evidence-dir", - )?)) - } - "--provider-object-id" => { - parsed.provider_object_id = Some(value(args, &mut index, "--provider-object-id")?) - } - "--oauth-connections" => { - parsed.oauth_connections = Some(PathBuf::from(value( - args, - &mut index, - "--oauth-connections", - )?)) - } - "--evict-receipt" => { - parsed.evict_receipt = Some(PathBuf::from(value( - args, - &mut index, - "--evict-receipt", - )?)) - } - "--confirm-receipt-id" => { - parsed.confirm_receipt_id = - Some(value(args, &mut index, "--confirm-receipt-id")?) - } - "--eviction-dir" => { - parsed.eviction_dir = - Some(PathBuf::from(value(args, &mut index, "--eviction-dir")?)) - } - "--eviction-approval-dir" => { - parsed.eviction_approval_dir = Some(PathBuf::from(value( - args, - &mut index, - "--eviction-approval-dir", - )?)) - } - "--journal-path" => { - parsed.journal_path = - Some(PathBuf::from(value(args, &mut index, "--journal-path")?)) - } - "--review-candidate-fingerprint" => { - parsed.review_candidate_fingerprint = Some(value( - args, - &mut index, - "--review-candidate-fingerprint", - )?) - } - "--review-fingerprint" => { - parsed.review_fingerprint = - Some(value(args, &mut index, "--review-fingerprint")?) - } - "--review-disposition" => { - parsed.review_disposition = Some(match value( - args, - &mut index, - "--review-disposition", - )? - .as_str() - { - "approved" => CloudReviewDisposition::Approved, - "held" => CloudReviewDisposition::Held, - value => return Err(format!("지원하지 않는 review disposition: {value}")), - }) - } - "--reviewed-by" => { - parsed.reviewed_by = Some(value(args, &mut index, "--reviewed-by")?) - } - "--review-rationale" => { - parsed.review_rationale = Some(value(args, &mut index, "--review-rationale")?) - } - "--review-dir" => { - parsed.review_dir = - Some(PathBuf::from(value(args, &mut index, "--review-dir")?)) - } - "--export-naruon-lineage" => { - parsed.export_naruon_lineage = Some(PathBuf::from(value( - args, - &mut index, - "--export-naruon-lineage", - )?)) - } - "--naruon-sync-evidence" => { - parsed.naruon_sync_evidence = Some(PathBuf::from(value( - args, - &mut index, - "--naruon-sync-evidence", - )?)) - } - "--export-naruon-capacity" => parsed.export_naruon_capacity = true, - "--export-naruon-copy-readiness" => { - parsed.export_naruon_copy_readiness = true - } - "--naruon-copy-readiness-output" => { - if parsed.naruon_copy_readiness_output.is_some() { - return Err( - "--naruon-copy-readiness-output은 한 번만 지정할 수 있음" - .into(), - ); - } - parsed.naruon_copy_readiness_output = - Some(PathBuf::from(value( - args, - &mut index, - "--naruon-copy-readiness-output", - )?)); - } - "--export-semantic-catalog" => parsed.export_semantic_catalog = true, - "--help" | "-h" => { - return Err( - "usage: disksage-cloud-plan [--list-roots | --inspect-roots] [--root PATH] [--cloud-root PATH | --provider icloud|onedrive|google-drive | --all-readable-roots --decision-summary] [--min-size-mib N] [--min-age-days N] [--limit N] [--audit-receipts --receipt-dir ABSOLUTE_PATH] [--reconcile-receipts --receipt-dir ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]]] [--decision-summary [--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json | --review-reason-set REASON|REASON [--private-review-output ABSOLUTE_NEW_FILE.json]] | --exact-duplicate-review-prefix DIR_PREFIX --exact-duplicate-kind document|media|archive|dataset|backup|creative|incomplete-download | --export-naruon-copy-readiness --verify-capacity [--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json] | --export-semantic-catalog] [--verify-capacity [--oauth-connections ABSOLUTE_PATH] [--export-naruon-capacity]] [--capacity-reserve-mib N] [--copy-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] [--oauth-connections ABSOLUTE_PATH] | --provider-api-copy-fingerprint HEX64 --receipt-dir PATH --oauth-connections ABSOLUTE_PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --adopt-existing-fingerprint HEX64 --receipt-dir PATH --confirm-copy-phrase EXACT --reviewed-by human:ID --review-rationale TEXT [--review-dir PATH] | --attest-receipt RECEIPT.json --evidence-dir ABSOLUTE_PATH [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --evict-receipt RECEIPT.json --confirm-receipt-id HEX64 --eviction-dir ABSOLUTE_PATH --eviction-approval-dir ABSOLUTE_PATH --journal-path ABSOLUTE_PATH --evidence-dir ABSOLUTE_PATH --reviewed-by human:ID --review-rationale TEXT [--oauth-connections ABSOLUTE_PATH [--provider-object-id GOOGLE_FILE_ID]] | --review-candidate-fingerprint HEX64 --review-fingerprint HEX64 --review-disposition approved|held --reviewed-by human:ID --review-rationale TEXT --review-dir PATH | --export-naruon-lineage RECEIPT.json [--naruon-sync-evidence EVIDENCE.json]]".into(), - ) - } - flag => return Err(format!("알 수 없는 인자: {flag}")), - } - index += 1; - } - Ok(parsed) -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct CopyOutput { - action: &'static str, - goal_state: cloud_transfer::CloudOffloadGoalState, - goal_status: Option, - receipt: CloudCopyReceipt, - receipt_path: String, - adr_path: Option, - goal_path: Option, - projection_warnings: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct ProviderApiCopyOutput { - action: &'static str, - goal_state: cloud_transfer::CloudOffloadGoalState, - goal_status: Option, - receipt: CloudCopyReceipt, - receipt_path: String, - provider_object_id: String, - evidence_path: Option, - adr_path: Option, - goal_path: Option, - projection_warnings: Vec, - permit: Option, - blockers: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct AttestationOutput { - action: &'static str, - goal_state: cloud_transfer::CloudOffloadGoalState, - goal_status: Option, - receipt_id: String, - evidence: disksage_lib::cloud_transfer::ProviderSyncEvidence, - assessment: provider_sync::ProviderSyncTimelinessAssessment, - evidence_record: ProviderSyncEvidenceRecord, - evidence_path: String, - adr_path: Option, - goal_path: Option, - projection_warnings: Vec, - permit: Option, - blockers: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct EvictionOutput { - action: &'static str, - goal_state: cloud_transfer::CloudOffloadGoalState, - receipt_id: String, - evidence: disksage_lib::cloud_transfer::ProviderSyncEvidence, - evidence_record: ProviderSyncEvidenceRecord, - evidence_path: String, - permit: LocalEvictionPermit, - approval: CloudSourceEvictionApproval, - approval_path: String, - eviction: CloudEvictionResult, - adr_path: Option, - goal_path: Option, - projection_warnings: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct ReviewOutput { - action: &'static str, - decision: CloudReviewDecision, - decision_path: String, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct ReceiptReconciliationEntry { - file_name: String, - receipt_id: Option, - provider: Option, - bytes: Option, - source_state: Option, - destination_state: Option, - adr_projection_state: Option, - goal_projection_state: Option, - goal_status: Option, - goal_state: Option, - provider_sync_state: Option, - eviction_permit: bool, - attestation_error: Option, - evidence_record_count: u64, - issues: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -struct ReceiptReconciliationReport { - schema_version: u32, - output_mode: &'static str, - generated_at_ms: u64, - receipts_seen: u64, - valid_receipts: u64, - invalid_receipts: u64, - ignored_entries: u64, - source_not_present_count: u64, - destination_not_present_count: u64, - source_missing_destination_present_count: u64, - incomplete_projection_count: u64, - attestation_attempted_count: u64, - provider_evidence_written_count: u64, - pending_provider_sync_count: u64, - eviction_ready_count: u64, - unprocessed_count: u64, - incomplete_reconciliation: bool, - entries: Vec, - mutation_performed: bool, - cloud_write_executed: bool, - source_eviction_authorized: bool, - notices: Vec<&'static str>, -} - -#[cfg(not(coverage))] -const MAX_RECONCILIATION_RECEIPTS: usize = 10_000; -#[cfg(not(coverage))] -const MAX_RECONCILIATION_ATTESTATIONS: usize = 256; -#[cfg(not(coverage))] -const RECONCILIATION_MAX_DURATION: Duration = Duration::from_secs(30); - -#[cfg(not(coverage))] -const MAX_RECONCILIATION_PROJECTION_BYTES: u64 = 64 * 1024; - -#[cfg(not(coverage))] -fn regular_file_state(path: &Path) -> &'static str { - match std::fs::symlink_metadata(path) { - Ok(metadata) if metadata.file_type().is_symlink() => "unsafe", - Ok(metadata) if metadata.is_file() => "present", - Ok(_) => "unsafe", - Err(error) if error.kind() == std::io::ErrorKind::NotFound => "missing", - Err(_) => "unavailable", - } -} - -#[cfg(not(coverage))] -fn projection_state(path: &Path, kind: &str, receipt_id: &str) -> &'static str { - let metadata = match std::fs::symlink_metadata(path) { - Ok(metadata) => metadata, - Err(error) if error.kind() == std::io::ErrorKind::NotFound => return "missing", - Err(_) => return "unavailable", - }; - if metadata.file_type().is_symlink() || !metadata.is_file() { - return "unsafe"; - } - if metadata.len() > MAX_RECONCILIATION_PROJECTION_BYTES { - return "oversized"; - } - let encoded = match std::fs::read(path) { - Ok(encoded) => encoded, - Err(_) => return "unavailable", - }; - match kind { - "adr" => match serde_json::from_slice::(&encoded) { - Ok(snapshot) - if snapshot.schema_version == cloud_adr::CLOUD_ADR_SCHEMA_VERSION - && snapshot.receipt_id == receipt_id - && snapshot.adr_id == format!("cloud-offload:{receipt_id}") => - { - "valid" - } - Ok(snapshot) if snapshot.receipt_id != receipt_id => "invalid-binding", - Ok(_) => "invalid-schema", - Err(_) => "invalid", - }, - "goal" => match serde_json::from_slice::(&encoded) { - Ok(snapshot) - if snapshot.schema_version == cloud_adr::CLOUD_GOAL_SCHEMA_VERSION - && snapshot.receipt_id == receipt_id - && snapshot.goal_id == "disksage-cloud-offload" => - { - "valid" - } - Ok(snapshot) if snapshot.receipt_id != receipt_id => "invalid-binding", - Ok(_) => "invalid-schema", - Err(_) => "invalid", - }, - _ => "invalid", - } -} - -#[cfg(not(coverage))] -fn evidence_record_count(evidence_dirs: &[PathBuf], receipt_id: &str) -> u64 { - let prefix = format!("{receipt_id}-"); - let mut names = BTreeMap::new(); - for evidence_dir in evidence_dirs { - let Ok(entries) = std::fs::read_dir(evidence_dir) else { - continue; - }; - for entry in entries - .filter_map(Result::ok) - .take(MAX_RECONCILIATION_RECEIPTS) - { - let path = entry.path(); - let Some(name) = entry.file_name().to_str().map(str::to_owned) else { - continue; - }; - if name.starts_with(&prefix) - && name.ends_with(".json") - && regular_file_state(&path) == "present" - { - names.insert(name, ()); - if names.len() >= MAX_RECONCILIATION_RECEIPTS { - return names.len() as u64; - } - } - } - } - names.len() as u64 -} - -#[cfg(not(coverage))] -fn audit_evidence_dirs(receipt_dir: &Path, evidence_dir: Option<&Path>) -> Vec { - if let Some(evidence_dir) = evidence_dir { - return vec![evidence_dir.to_path_buf()]; - } - let parent = receipt_dir.parent().unwrap_or(receipt_dir); - let provider_dir = parent.join("cloud-provider-evidence"); - let legacy_dir = parent.join("cloud-sync-evidence"); - let legacy_is_safe_directory = std::fs::symlink_metadata(&legacy_dir) - .map(|metadata| metadata.is_dir() && !metadata.file_type().is_symlink()) - .unwrap_or(false); - if legacy_is_safe_directory { - vec![provider_dir, legacy_dir] - } else { - vec![provider_dir] - } -} - -#[cfg(not(coverage))] -fn audit_receipts( - receipt_dir: &Path, - evidence_dir: Option<&Path>, - generated_at_ms: u64, -) -> Result { - let metadata = std::fs::symlink_metadata(receipt_dir) - .map_err(|_| "receipt-directory-unavailable".to_string())?; - if metadata.file_type().is_symlink() || !metadata.is_dir() { - return Err("receipt-directory-unsafe".into()); - } - let mut paths = std::fs::read_dir(receipt_dir) - .map_err(|_| "receipt-directory-read-failed".to_string())? - .filter_map(Result::ok) - .map(|entry| entry.path()) - .collect::>(); - paths.sort(); - if paths.len() > MAX_RECONCILIATION_RECEIPTS { - return Err("receipt-directory-entry-limit-exceeded".into()); - } - let parent = receipt_dir.parent().unwrap_or(receipt_dir); - let evidence_dirs = audit_evidence_dirs(receipt_dir, evidence_dir); - let projection_anchor = evidence_dirs - .first() - .cloned() - .unwrap_or_else(|| parent.join("cloud-provider-evidence")); - let (adr_dir, goal_dir) = cloud_projection_dirs(&projection_anchor); - let mut report = ReceiptReconciliationReport { - schema_version: 1, - output_mode: "cloud-receipt-reconciliation", - generated_at_ms, - receipts_seen: 0, - valid_receipts: 0, - invalid_receipts: 0, - ignored_entries: 0, - source_not_present_count: 0, - destination_not_present_count: 0, - source_missing_destination_present_count: 0, - incomplete_projection_count: 0, - attestation_attempted_count: 0, - provider_evidence_written_count: 0, - pending_provider_sync_count: 0, - eviction_ready_count: 0, - unprocessed_count: 0, - incomplete_reconciliation: false, - entries: Vec::new(), - mutation_performed: false, - cloud_write_executed: false, - source_eviction_authorized: false, - notices: vec![ - "read-only", - "immutable-receipts-remain-authority", - "no-cloud-write", - "no-local-eviction", - ], - }; - for path in paths { - let file_name = path - .file_name() - .and_then(|name| name.to_str()) - .unwrap_or_default() - .to_string(); - if regular_file_state(&path) != "present" || !file_name.ends_with(".json") { - report.ignored_entries = report.ignored_entries.saturating_add(1); - continue; - } - report.receipts_seen = report.receipts_seen.saturating_add(1); - let receipt = match cloud_transfer::read_immutable_receipt(&path) { - Ok(receipt) => receipt, - Err(error) => { - report.invalid_receipts = report.invalid_receipts.saturating_add(1); - report.entries.push(ReceiptReconciliationEntry { - file_name, - receipt_id: None, - provider: None, - bytes: None, - source_state: None, - destination_state: None, - adr_projection_state: None, - goal_projection_state: None, - goal_status: None, - goal_state: None, - provider_sync_state: None, - eviction_permit: false, - attestation_error: None, - evidence_record_count: 0, - issues: vec![format!("receipt-invalid:{error}")], - }); - continue; - } - }; - report.valid_receipts = report.valid_receipts.saturating_add(1); - let source_state = regular_file_state(Path::new(&receipt.source)); - let destination_state = regular_file_state(Path::new(&receipt.destination)); - let adr_state = projection_state( - &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), - "adr", - &receipt.receipt_id, - ); - let goal_state = projection_state( - &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), - "goal", - &receipt.receipt_id, - ); - let mut issues = Vec::new(); - if source_state != "present" { - report.source_not_present_count = report.source_not_present_count.saturating_add(1); - issues.push(format!("source-{source_state}")); - } - if destination_state != "present" { - report.destination_not_present_count = - report.destination_not_present_count.saturating_add(1); - issues.push(format!("destination-{destination_state}")); - } - if source_state == "missing" && destination_state == "present" { - report.source_missing_destination_present_count = report - .source_missing_destination_present_count - .saturating_add(1); - issues.push("source-missing-destination-present".into()); - } - if adr_state != "valid" { - issues.push(format!("adr-projection-{adr_state}")); - } - if goal_state != "valid" { - issues.push(format!("goal-projection-{goal_state}")); - } - if adr_state != "valid" || goal_state != "valid" { - report.incomplete_projection_count = - report.incomplete_projection_count.saturating_add(1); - } - report.entries.push(ReceiptReconciliationEntry { - file_name, - receipt_id: Some(receipt.receipt_id.clone()), - provider: Some(receipt.provider), - bytes: Some(receipt.bytes), - source_state: Some(source_state.into()), - destination_state: Some(destination_state.into()), - adr_projection_state: Some(adr_state.into()), - goal_projection_state: Some(goal_state.into()), - goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) - .ok() - .flatten(), - goal_state: None, - provider_sync_state: None, - eviction_permit: false, - attestation_error: None, - evidence_record_count: evidence_record_count(&evidence_dirs, &receipt.receipt_id), - issues, - }); - } - Ok(report) -} - -#[cfg(not(coverage))] -fn validate_action_args(args: &Args) -> Result<(), String> { - let provider_api_copy_action = args.provider_api_copy_fingerprint.is_some(); - let copy_action = args.copy_fingerprint.is_some() || provider_api_copy_action; - let adoption_action = args.adopt_existing_fingerprint.is_some(); - let exact_duplicate_review = - args.exact_duplicate_review_prefix.is_some() || args.exact_duplicate_kind.is_some(); - if args.exact_duplicate_review_prefix.is_some() != args.exact_duplicate_kind.is_some() { - return Err( - "--exact-duplicate-review-prefix와 --exact-duplicate-kind는 함께 지정해야 함".into(), - ); - } - if args.all_readable_roots && !args.decision_summary { - return Err("--all-readable-roots에는 --decision-summary가 필요함".into()); - } - if args.all_readable_roots && (args.cloud_root.is_some() || args.provider.is_some()) { - return Err( - "--all-readable-roots는 --cloud-root 또는 --provider와 함께 사용할 수 없음".into(), - ); - } - if args.copy_fingerprint.is_some() && provider_api_copy_action { - return Err("native copy와 provider API copy는 동시에 사용할 수 없음".into()); - } - if copy_action && adoption_action { - return Err("copy action과 existing-copy adoption action은 동시에 사용할 수 없음".into()); - } - let receipt_audit_action = args.audit_receipts; - let receipt_reconcile_action = args.reconcile_receipts; - let receipt_action = receipt_audit_action || receipt_reconcile_action; - if receipt_audit_action && receipt_reconcile_action { - return Err("--audit-receipts와 --reconcile-receipts는 함께 사용할 수 없음".into()); - } - if receipt_action && (copy_action || adoption_action) { - return Err( - "receipt audit/reconciliation은 copy/adoption action과 함께 사용할 수 없음".into(), - ); - } - if !receipt_action && (copy_action || adoption_action) != args.receipt_dir.is_some() { - return Err("copy/adoption fingerprint와 --receipt-dir은 함께 지정해야 함".into()); - } - if receipt_action && args.receipt_dir.is_none() { - return Err("--audit-receipts/--reconcile-receipts에는 --receipt-dir이 필요함".into()); - } - if receipt_reconcile_action && args.evidence_dir.is_none() { - return Err("--reconcile-receipts에는 --evidence-dir이 필요함".into()); - } - if (copy_action || adoption_action) != args.confirm_copy_phrase.is_some() { - return Err("copy/adoption action에는 --confirm-copy-phrase가 반드시 필요함".into()); - } - if provider_api_copy_action && args.oauth_connections.is_none() { - return Err("--provider-api-copy-fingerprint에는 --oauth-connections가 필요함".into()); - } - if provider_api_copy_action && args.provider_object_id.is_some() { - return Err("provider API copy는 --provider-object-id를 직접 받을 수 없음".into()); - } - let review_evidence_fields = [ - args.review_candidate_fingerprint.is_some(), - args.review_fingerprint.is_some(), - args.review_disposition.is_some(), - ]; - if review_evidence_fields.iter().any(|value| *value) - && !review_evidence_fields.iter().all(|value| *value) - { - return Err("review fingerprint와 disposition은 모두 함께 지정해야 함".into()); - } - let attribution_fields = [args.reviewed_by.is_some(), args.review_rationale.is_some()]; - if attribution_fields.iter().any(|value| *value) - && !attribution_fields.iter().all(|value| *value) - { - return Err("reviewer와 rationale는 함께 지정해야 함".into()); - } - let attributed = attribution_fields.iter().all(|value| *value); - let review_action = review_evidence_fields.iter().all(|value| *value); - if review_action && !attributed { - return Err("review action에는 reviewer와 rationale가 필요함".into()); - } - if (copy_action || adoption_action) && !attributed { - return Err("copy/adoption action에는 reviewer와 rationale가 필요함".into()); - } - if attributed { - cloud_review::validate_review_attribution( - args.reviewed_by - .as_deref() - .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, - args.review_rationale - .as_deref() - .ok_or_else(|| "--review-rationale가 필요함".to_string())?, - )?; - } - let eviction_fields = [ - args.evict_receipt.is_some(), - args.confirm_receipt_id.is_some(), - args.eviction_dir.is_some(), - args.eviction_approval_dir.is_some(), - args.journal_path.is_some(), - ]; - if eviction_fields.iter().any(|value| *value) - && (!eviction_fields.iter().all(|value| *value) || !attributed) - { - return Err( - "eviction action에는 receipt, 확인 id, eviction dir, approval dir, journal path, reviewer, rationale가 모두 필요함".into(), - ); - } - let eviction_action = eviction_fields.iter().all(|value| *value) && attributed; - if attributed && !review_action && !copy_action && !adoption_action && !eviction_action { - return Err( - "reviewer와 rationale는 review, copy, adoption 또는 eviction action에만 지정할 수 있음" - .into(), - ); - } - let attestation_action = args.attest_receipt.is_some(); - let audit_evidence_override = args.audit_receipts && args.evidence_dir.is_some(); - if (attestation_action - || eviction_action - || receipt_reconcile_action - || audit_evidence_override) - != args.evidence_dir.is_some() - { - return Err("attestation/eviction action에는 --evidence-dir이 반드시 필요함".into()); - } - if args.provider_object_id.is_some() && args.oauth_connections.is_none() { - return Err("--provider-object-id에는 --oauth-connections가 필요함".into()); - } - let remote_provider_api = args.oauth_connections.is_some(); - if remote_provider_api - && args.attest_receipt.is_none() - && !receipt_reconcile_action - && !eviction_action - && !copy_action - && !args.verify_capacity - { - return Err( - "provider API는 capacity, copy, attestation 또는 eviction action에만 지정할 수 있음" - .into(), - ); - } - if args.verify_capacity - && (args.list_roots - || args.inspect_roots - || adoption_action - || attestation_action - || eviction_action - || receipt_action - || exact_duplicate_review - || args.export_naruon_lineage.is_some()) - { - return Err( - "capacity verification은 plan, review 또는 copy action에서만 사용할 수 있음".into(), - ); - } - if args - .provider_object_id - .as_deref() - .is_some_and(|value| value.trim().is_empty()) - { - return Err("--provider-object-id는 비어 있을 수 없음".into()); - } - if review_action && args.review_dir.is_none() { - return Err("review action에는 --review-dir이 필요함".into()); - } - if args.review_dir.is_some() && !review_action && !copy_action && !adoption_action { - return Err("--review-dir은 review, copy, adoption action에만 지정할 수 있음".into()); - } - if args.naruon_sync_evidence.is_some() && args.export_naruon_lineage.is_none() { - return Err("--naruon-sync-evidence에는 --export-naruon-lineage가 필요함".into()); - } - if args.export_naruon_capacity && !args.verify_capacity { - return Err("--export-naruon-capacity에는 --verify-capacity가 필요함".into()); - } - if args.export_naruon_copy_readiness && !args.verify_capacity { - return Err("--export-naruon-copy-readiness에는 --verify-capacity가 필요함".into()); - } - if args.naruon_copy_readiness_output.is_some() && !args.export_naruon_copy_readiness { - return Err( - "--naruon-copy-readiness-output에는 --export-naruon-copy-readiness가 필요함".into(), - ); - } - if args - .naruon_copy_readiness_output - .as_ref() - .is_some_and(|path| !path.is_absolute()) - { - return Err("--naruon-copy-readiness-output은 절대 경로여야 함".into()); - } - let actions = usize::from(args.list_roots) - + usize::from(args.inspect_roots) - + usize::from(receipt_action) - + usize::from(copy_action) - + usize::from(adoption_action) - + usize::from(args.attest_receipt.is_some()) - + usize::from(eviction_action) - + usize::from(review_action) - + usize::from(args.export_naruon_lineage.is_some()) - + usize::from(args.export_naruon_capacity) - + usize::from(args.export_naruon_copy_readiness) - + usize::from(args.export_semantic_catalog); - if args.all_readable_roots && actions > 0 { - return Err( - "--all-readable-roots는 mutation 또는 root inspection과 함께 사용할 수 없음".into(), - ); - } - if exact_duplicate_review - && (actions > 0 - || args.all_readable_roots - || args.decision_summary - || args.review_reason_set.is_some()) - { - return Err( - "exact duplicate review batch는 다른 action 또는 summary mode와 함께 사용할 수 없음" - .into(), - ); - } - if args.decision_summary && actions > 0 { - return Err("--decision-summary는 plan 출력에만 사용할 수 있음".into()); - } - if args.review_reason_set.is_some() && !args.decision_summary { - return Err("--review-reason-set에는 --decision-summary가 필요함".into()); - } - if args.private_review_output.is_some() - && (!args.decision_summary || args.review_reason_set.is_none()) - { - return Err( - "--private-review-output에는 --decision-summary와 --review-reason-set이 필요함".into(), - ); - } - if args.private_review_output.is_some() && args.all_readable_roots { - return Err("--private-review-output은 단일 cloud destination에서만 사용할 수 있음".into()); - } - if args.private_candidate_inspection_output.is_some() && !args.decision_summary { - return Err("--private-candidate-inspection-output에는 --decision-summary가 필요함".into()); - } - if args.private_candidate_inspection_output.is_some() - && (args.review_reason_set.is_some() || args.private_review_output.is_some()) - { - return Err( - "--private-candidate-inspection-output은 exact review subset 출력과 함께 사용할 수 없음" - .into(), - ); - } - if args.private_candidate_inspection_output.is_some() && args.all_readable_roots { - return Err( - "--private-candidate-inspection-output은 단일 cloud destination에서만 사용할 수 있음" - .into(), - ); - } - if actions > 1 { - return Err( - "root inspection, receipt reconciliation, copy, adoption, attestation, eviction, review action은 동시에 사용할 수 없음".into(), - ); - } - for (flag, fingerprint) in [ - ("--copy-fingerprint", args.copy_fingerprint.as_ref()), - ( - "--provider-api-copy-fingerprint", - args.provider_api_copy_fingerprint.as_ref(), - ), - ( - "--adopt-existing-fingerprint", - args.adopt_existing_fingerprint.as_ref(), - ), - ( - "--review-candidate-fingerprint", - args.review_candidate_fingerprint.as_ref(), - ), - ("--review-fingerprint", args.review_fingerprint.as_ref()), - ("--confirm-receipt-id", args.confirm_receipt_id.as_ref()), - ] { - let Some(fingerprint) = fingerprint else { - continue; - }; - if fingerprint.len() != 64 || !fingerprint.bytes().all(|byte| byte.is_ascii_hexdigit()) { - return Err(format!("{flag}는 64자리 16진수여야 함")); - } - } - if let Some(receipt_dir) = &args.receipt_dir { - if !receipt_dir.is_absolute() { - return Err("--receipt-dir은 절대 경로여야 함".into()); - } - } - if let Some(receipt_path) = &args.attest_receipt { - if !receipt_path.is_absolute() { - return Err("--attest-receipt는 절대 경로여야 함".into()); - } - } - if let Some(evidence_dir) = &args.evidence_dir { - if !evidence_dir.is_absolute() { - return Err("--evidence-dir은 절대 경로여야 함".into()); - } - } - if let Some(connection_path) = &args.oauth_connections { - if !connection_path.is_absolute() { - return Err("--oauth-connections는 절대 경로여야 함".into()); - } - } - if let Some(output_path) = &args.private_review_output { - if !output_path.is_absolute() { - return Err("--private-review-output은 절대 경로여야 함".into()); - } - } - if let Some(output_path) = &args.private_candidate_inspection_output { - if !output_path.is_absolute() { - return Err("--private-candidate-inspection-output은 절대 경로여야 함".into()); - } - } - if let Some(receipt_path) = &args.evict_receipt { - if !receipt_path.is_absolute() { - return Err("--evict-receipt는 절대 경로여야 함".into()); - } - } - if let Some(eviction_dir) = &args.eviction_dir { - if !eviction_dir.is_absolute() { - return Err("--eviction-dir은 절대 경로여야 함".into()); - } - } - if let Some(approval_dir) = &args.eviction_approval_dir { - if !approval_dir.is_absolute() { - return Err("--eviction-approval-dir은 절대 경로여야 함".into()); - } - } - if let Some(journal_path) = &args.journal_path { - if !journal_path.is_absolute() { - return Err("--journal-path는 절대 경로여야 함".into()); - } - } - if let Some(review_dir) = &args.review_dir { - if !review_dir.is_absolute() { - return Err("--review-dir은 절대 경로여야 함".into()); - } - } - for (flag, path) in [ - ("--export-naruon-lineage", &args.export_naruon_lineage), - ("--naruon-sync-evidence", &args.naruon_sync_evidence), - ] { - if path.as_ref().is_some_and(|path| !path.is_absolute()) { - return Err(format!("{flag}는 절대 경로여야 함")); - } - } - Ok(()) -} - -#[cfg(not(coverage))] -fn candidate_decision_state(candidate: &cloud::CloudCandidate) -> &'static str { - if candidate.blocked_reason.is_some() { - "blocked" - } else if candidate.requires_review { - "review-required" - } else { - "ready-for-copy-review" - } -} - -#[cfg(not(coverage))] -fn increment(map: &mut BTreeMap, key: &str, value: u64) { - let entry = map.entry(key.to_string()).or_default(); - *entry = entry.saturating_add(value); -} - -/// Aggregate only fixed decision labels and evidence-source labels, never paths or metadata values. -/// Review-reason bytes can overlap because one candidate may carry several independent reasons. -#[cfg(not(coverage))] -fn decision_aggregates(report: &cloud::CloudPlanReport) -> serde_json::Value { - let mut decision_state_counts = BTreeMap::new(); - let mut decision_state_candidate_bytes = BTreeMap::new(); - let mut review_required_reason_counts = BTreeMap::new(); - let mut review_required_reason_candidate_bytes = BTreeMap::new(); - let mut review_required_sole_reason_counts = BTreeMap::new(); - let mut review_required_sole_reason_candidate_bytes = BTreeMap::new(); - let mut review_required_reason_count_distribution = BTreeMap::new(); - let mut review_required_reason_count_candidate_bytes = BTreeMap::new(); - let mut review_required_reason_set_counts = BTreeMap::new(); - let mut review_required_reason_set_candidate_bytes = BTreeMap::new(); - let mut blocked_reason_counts = BTreeMap::new(); - let mut blocked_reason_candidate_bytes = BTreeMap::new(); - let mut production_time_source_counts = BTreeMap::new(); - let mut production_time_source_candidate_bytes = BTreeMap::new(); - let mut production_time_confidence_counts = BTreeMap::new(); - let mut production_time_confidence_candidate_bytes = BTreeMap::new(); - - for candidate in &report.candidates { - let state = candidate_decision_state(candidate); - increment(&mut decision_state_counts, state, 1); - increment(&mut decision_state_candidate_bytes, state, candidate.bytes); - increment( - &mut production_time_source_counts, - &candidate.production_time_source, - 1, - ); - increment( - &mut production_time_source_candidate_bytes, - &candidate.production_time_source, - candidate.bytes, - ); - increment( - &mut production_time_confidence_counts, - &candidate.production_time_confidence, - 1, - ); - increment( - &mut production_time_confidence_candidate_bytes, - &candidate.production_time_confidence, - candidate.bytes, - ); - - if state == "review-required" { - let reason_count = candidate.review_reasons.len().to_string(); - let reason_set = candidate.review_reasons.join("|"); - increment( - &mut review_required_reason_count_distribution, - &reason_count, - 1, - ); - increment( - &mut review_required_reason_count_candidate_bytes, - &reason_count, - candidate.bytes, - ); - increment(&mut review_required_reason_set_counts, &reason_set, 1); - increment( - &mut review_required_reason_set_candidate_bytes, - &reason_set, - candidate.bytes, - ); - for reason in &candidate.review_reasons { - increment(&mut review_required_reason_counts, reason, 1); - increment( - &mut review_required_reason_candidate_bytes, - reason, - candidate.bytes, - ); - } - if let [sole_reason] = candidate.review_reasons.as_slice() { - increment(&mut review_required_sole_reason_counts, sole_reason, 1); - increment( - &mut review_required_sole_reason_candidate_bytes, - sole_reason, - candidate.bytes, - ); - } - } - if state == "blocked" { - if let Some(reason) = &candidate.blocked_reason { - increment(&mut blocked_reason_counts, reason, 1); - increment(&mut blocked_reason_candidate_bytes, reason, candidate.bytes); - } - } - } - - serde_json::json!({ - "decision_state": { - "counts": decision_state_counts, - "candidate_bytes": decision_state_candidate_bytes, - }, - "review_required_reason": { - "counts": review_required_reason_counts, - "candidate_bytes": review_required_reason_candidate_bytes, - "sole_reason_counts": review_required_sole_reason_counts, - "sole_reason_candidate_bytes": review_required_sole_reason_candidate_bytes, - "reason_count_distribution": review_required_reason_count_distribution, - "reason_count_candidate_bytes": review_required_reason_count_candidate_bytes, - "reason_set_counts": review_required_reason_set_counts, - "reason_set_candidate_bytes": review_required_reason_set_candidate_bytes, - "reason_set_delimiter": "|", - "candidate_bytes_can_overlap_across_reasons": true, - }, - "blocked_reason": { - "counts": blocked_reason_counts, - "candidate_bytes": blocked_reason_candidate_bytes, - }, - "production_time_source": { - "counts": production_time_source_counts, - "candidate_bytes": production_time_source_candidate_bytes, - }, - "production_time_confidence": { - "counts": production_time_confidence_counts, - "candidate_bytes": production_time_confidence_candidate_bytes, - }, - }) -} - -#[cfg(not(coverage))] -fn redacted_decision(candidate: &cloud::CloudCandidate) -> serde_json::Value { - let approval_action = match candidate.blocked_reason.as_deref() { - None => Some(cloud_transfer::CloudCopyApprovalAction::CopyOnly), - Some("destination-exists") => { - Some(cloud_transfer::CloudCopyApprovalAction::AdoptExistingCopy) - } - Some(_) => None, - }; - serde_json::json!({ - "metadata_fingerprint": &candidate.metadata_fingerprint, - "review_fingerprint": &candidate.review_fingerprint, - "provider": candidate.provider, - "destination_account_scope": candidate.destination_account_scope, - "kind": candidate.kind, - "bytes": candidate.bytes, - "age_days": candidate.age_days, - "production_time_ms": candidate.production_time_ms, - "production_time_source": &candidate.production_time_source, - "production_time_confidence": &candidate.production_time_confidence, - "decision_state": candidate_decision_state(candidate), - "requires_review": candidate.requires_review, - "review_reasons": &candidate.review_reasons, - "blocked_reason": &candidate.blocked_reason, - "copy_approval_action": approval_action, - "exact_copy_approval_phrase": approval_action - .map(|action| cloud_transfer::cloud_copy_approval_phrase(candidate, action)), - "copy_approval_max_age_ms": cloud_transfer::MAX_CLOUD_COPY_APPROVAL_AGE_MS, - }) -} - -#[cfg(not(coverage))] -const REVIEW_BATCH_FINGERPRINT_VERSION: u32 = 2; -#[cfg(not(coverage))] -const PRIVATE_REVIEW_DOSSIER_MAX_BYTES: usize = 16 * 1024 * 1024; - -#[cfg(not(coverage))] -fn review_batch_fingerprint( - report: &cloud::CloudPlanReport, - reasons: &[String], - candidates: &[&cloud::CloudCandidate], -) -> String { - let mut ordered = candidates.to_vec(); - ordered.sort_by(|left, right| { - left.metadata_fingerprint - .cmp(&right.metadata_fingerprint) - .then_with(|| left.review_fingerprint.cmp(&right.review_fingerprint)) - }); - let mut hasher = blake3::Hasher::new(); - hasher.update(b"disksage-cloud-review-batch-v2\0"); - hasher.update(&REVIEW_BATCH_FINGERPRINT_VERSION.to_le_bytes()); - for value in [ - report.cloud_root.provider.as_str().as_bytes(), - report.cloud_root.account_scope.as_str().as_bytes(), - ] { - hasher.update(&(value.len() as u64).to_le_bytes()); - hasher.update(value); - } - for reason in reasons { - hasher.update(reason.as_bytes()); - hasher.update(&[0]); - } - hasher.update(&(ordered.len() as u64).to_le_bytes()); - for candidate in ordered { - hasher.update(candidate.metadata_fingerprint.as_bytes()); - hasher.update(candidate.review_fingerprint.as_bytes()); - hasher.update(&candidate.bytes.to_le_bytes()); - } - hasher.finalize().to_hex().to_string() -} - -#[cfg(not(coverage))] -fn exact_review_candidates<'a>( - report: &'a cloud::CloudPlanReport, - reasons: &[String], -) -> Result, String> { - let candidates = report - .candidates - .iter() - .filter(|candidate| { - candidate_decision_state(candidate) == "review-required" - && candidate.review_reasons.as_slice() == reasons - }) - .collect::>(); - if candidates.is_empty() { - return Err("현재 fresh plan에 exact review reason set이 일치하는 후보가 없음".into()); - } - Ok(candidates) -} - -/// Produce an exact reason-set slice for inspection. The stable subset fingerprint binds only the -/// selected evidence; the separate decision-batch fingerprint records full-plan freshness. Neither -/// is approval: every approve/hold decision remains individually attributed and candidate-bound. -#[cfg(not(coverage))] -fn review_batch_summary( - report: &cloud::CloudPlanReport, - reasons: &[String], -) -> Result { - let candidates = exact_review_candidates(report, reasons)?; - let candidate_bytes = candidates.iter().fold(0u64, |total, candidate| { - total.saturating_add(candidate.bytes) - }); - let batch_fingerprint = review_batch_fingerprint(report, reasons, &candidates); - let decisions = candidates - .into_iter() - .map(redacted_decision) - .collect::>(); - - Ok(serde_json::json!({ - "schema_version": 3, - "output_mode": "review-batch-summary", - "generated_at_ms": report.generated_at_ms, - "source_selection_policy": report.source_selection_policy, - "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, - "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), - "review_batch_fingerprint_version": REVIEW_BATCH_FINGERPRINT_VERSION, - "review_batch_fingerprint": batch_fingerprint, - "reason_set": reasons, - "cloud": { - "provider": report.cloud_root.provider, - "account_scope": report.cloud_root.account_scope, - }, - "candidate_count": decisions.len(), - "candidate_bytes": candidate_bytes, - "metadata_policy": { - "production_time_precedence": [ - "embedded-metadata", - "explicit-filename-date", - "filesystem-created", - "filesystem-modified", - ], - "filename_dates_are_auxiliary": true, - "summary_is_dry_run_only": true, - "batch_fingerprint_is_not_approval": true, - "candidate_review_decisions_remain_individual": true, - "exact_human_attributed_copy_approval_required": true, - "copy_approval_max_age_ms": cloud_transfer::MAX_CLOUD_COPY_APPROVAL_AGE_MS, - }, - "redacted_from_summary": [ - "absolute-source-path", - "absolute-destination-path", - "relative-source-path-and-file-name", - "cloud-root-path-and-label", - "content-title-and-authors", - "raw-metadata-evidence-values", - "dataset-profile", - ], - "decisions": decisions, - })) -} - -/// Build the private, full-evidence counterpart of an exact reason-set review summary. -/// -/// Unlike `review_batch_summary`, this value intentionally contains sensitive local paths and raw -/// embedded metadata. It must only be written through `write_private_review_dossier`. -#[cfg(not(coverage))] -fn private_review_dossier( - report: &cloud::CloudPlanReport, - reasons: &[String], -) -> Result { - let mut candidates = exact_review_candidates(report, reasons)?; - candidates.sort_by(|left, right| { - left.metadata_fingerprint - .cmp(&right.metadata_fingerprint) - .then_with(|| left.review_fingerprint.cmp(&right.review_fingerprint)) - }); - let candidate_bytes = candidates.iter().fold(0u64, |total, candidate| { - total.saturating_add(candidate.bytes) - }); - let review_batch_fingerprint = review_batch_fingerprint(report, reasons, &candidates); - - Ok(serde_json::json!({ - "schema_version": 1, - "output_mode": "private-review-dossier", - "generated_at_ms": report.generated_at_ms, - "contains_sensitive_local_metadata": true, - "source_selection_policy": report.source_selection_policy, - "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, - "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), - "review_batch_fingerprint_version": REVIEW_BATCH_FINGERPRINT_VERSION, - "review_batch_fingerprint": review_batch_fingerprint, - "reason_set": reasons, - "cloud_root": &report.cloud_root, - "candidate_count": candidates.len(), - "candidate_bytes": candidate_bytes, - "metadata_policy": { - "production_time_precedence": [ - "embedded-metadata", - "explicit-filename-date", - "filesystem-created", - "filesystem-modified", - ], - "filename_dates_are_auxiliary": true, - "raw_metadata_values_are_review_evidence_only": true, - "dossier_is_not_approval": true, - "candidate_review_decisions_remain_individual": true, - }, - "candidates": candidates, - })) -} - -#[cfg(not(coverage))] -#[derive(serde::Serialize)] -struct PrivateCandidateInspection<'a> { - decision_state: &'static str, - #[serde(flatten)] - candidate: &'a cloud::CloudCandidate, -} - -/// Build a private, full-evidence inspection dossier for every candidate in one fresh plan. -/// -/// This intentionally includes blocked candidates because their paths and embedded metadata still -/// need human inspection even though they cannot enter the review or copy gates. The dossier is -/// evidence only: it does not create review decisions, authorize a copy, or authorize eviction. -#[cfg(not(coverage))] -fn private_candidate_inspection_dossier(report: &cloud::CloudPlanReport) -> serde_json::Value { - let mut candidates = report.candidates.iter().collect::>(); - candidates.sort_by(|left, right| { - left.metadata_fingerprint - .cmp(&right.metadata_fingerprint) - .then_with(|| left.review_fingerprint.cmp(&right.review_fingerprint)) - }); - let candidate_bytes = candidates.iter().fold(0u64, |total, candidate| { - total.saturating_add(candidate.bytes) - }); - let mut decision_state_counts = BTreeMap::<&'static str, u64>::new(); - let mut decision_state_bytes = BTreeMap::<&'static str, u64>::new(); - let inspections = candidates - .into_iter() - .map(|candidate| { - let decision_state = candidate_decision_state(candidate); - *decision_state_counts.entry(decision_state).or_insert(0) += 1; - let bytes = decision_state_bytes.entry(decision_state).or_insert(0); - *bytes = bytes.saturating_add(candidate.bytes); - PrivateCandidateInspection { - decision_state, - candidate, - } - }) - .collect::>(); - - serde_json::json!({ - "schema_version": 1, - "output_mode": "private-candidate-inspection-dossier", - "generated_at_ms": report.generated_at_ms, - "contains_sensitive_local_metadata": true, - "inspection_scope": "all-current-plan-candidates", - "source_selection_policy": report.source_selection_policy, - "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, - "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), - "cloud_root": &report.cloud_root, - "candidate_count": inspections.len(), - "candidate_bytes": candidate_bytes, - "decision_state": { - "counts": decision_state_counts, - "candidate_bytes": decision_state_bytes, - }, - "metadata_policy": { - "production_time_precedence": [ - "embedded-metadata", - "explicit-filename-date", - "filesystem-created", - "filesystem-modified", - ], - "filename_dates_are_auxiliary": true, - "raw_metadata_values_are_review_evidence_only": true, - "inspection_includes_blocked_candidates": true, - "dossier_is_not_approval": true, - "candidate_review_decisions_remain_individual": true, - }, - "cloud_write_executed": false, - "source_eviction_authorized": false, - "candidates": inspections, - }) -} - -#[cfg(all(not(coverage), unix))] -fn write_private_review_dossier( - path: &Path, - dossier: &serde_json::Value, -) -> Result<(String, usize), String> { - let parent = path - .parent() - .filter(|parent| !parent.as_os_str().is_empty()) - .ok_or_else(|| "private-review-output-parent-missing".to_string())?; - let parent_metadata = std::fs::symlink_metadata(parent) - .map_err(|_| "private-review-output-parent-unavailable".to_string())?; - if !parent_metadata.is_dir() || parent_metadata.file_type().is_symlink() { - return Err("private-review-output-parent-unsafe".into()); - } - - let encoded = serde_json::to_vec_pretty(dossier) - .map_err(|_| "private-review-output-json-invalid".to_string())?; - if encoded.len() > PRIVATE_REVIEW_DOSSIER_MAX_BYTES { - return Err("private-review-output-too-large".into()); - } - - let mut options = OpenOptions::new(); - options.write(true).create_new(true); - { - use std::os::unix::fs::OpenOptionsExt; - options.mode(0o600); - } - let mut file = options - .open(path) - .map_err(|_| "private-review-output-create-failed".to_string())?; - let result = (|| -> Result<(), String> { - file.write_all(&encoded) - .and_then(|_| file.sync_all()) - .map_err(|_| "private-review-output-write-failed".to_string())?; - let metadata = file - .metadata() - .map_err(|_| "private-review-output-metadata-failed".to_string())?; - if !metadata.is_file() || metadata.file_type().is_symlink() { - return Err("private-review-output-unsafe".into()); - } - { - use std::os::unix::fs::PermissionsExt; - if metadata.permissions().mode() & 0o777 != 0o600 { - return Err("private-review-output-mode-invalid".into()); - } - std::fs::File::open(parent) - .and_then(|directory| directory.sync_all()) - .map_err(|_| "private-review-output-parent-sync-failed".to_string())?; - } - Ok(()) - })(); - if let Err(error) = result { - drop(file); - let _ = std::fs::remove_file(path); - return Err(error); - } - - let sha256 = Sha256::digest(&encoded) - .iter() - .map(|byte| format!("{byte:02x}")) - .collect::(); - Ok((sha256, encoded.len())) -} - -#[cfg(all(not(coverage), not(unix)))] -fn write_private_review_dossier( - _path: &Path, - _dossier: &serde_json::Value, -) -> Result<(String, usize), String> { - Err("private-review-output-secure-mode-unsupported".into()) -} - -#[cfg(not(coverage))] -const EXACT_DUPLICATE_REVIEW_BATCH_FINGERPRINT_VERSION: u32 = 1; - -#[cfg(not(coverage))] -#[derive(Debug, Clone, serde::Serialize)] -struct RedactedMetadataEvidence { - field: String, - source: String, - confidence: String, -} - -#[cfg(not(coverage))] -#[derive(Debug, Clone, serde::Serialize)] -struct ExactDuplicateReviewMember { - metadata_fingerprint: String, - review_fingerprint: String, - relative_path: String, - kind: ArchiveKind, - bytes: u64, - production_time_ms: u64, - production_time_source: String, - production_time_confidence: String, - production_evidence: Vec, - source_lineage_evidence_fields: Vec, - canonical_recommendation: &'static str, - review_reasons: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, Clone, serde::Serialize)] -struct ExactDuplicateReviewCluster { - cluster_fingerprint: String, - content_sha256: String, - bytes_per_candidate: u64, - candidate_count: usize, - redundant_bytes: u64, - recommendation_confidence: String, - recommendation_reason_codes: Vec, - canonical: ExactDuplicateReviewMember, - redundant_copies: Vec, - requires_human_confirmation: bool, -} - -#[cfg(not(coverage))] -fn archive_kind_label(kind: ArchiveKind) -> &'static str { - match kind { - ArchiveKind::Document => "document", - ArchiveKind::Media => "media", - ArchiveKind::Archive => "archive", - ArchiveKind::Dataset => "dataset", - ArchiveKind::Backup => "backup", - ArchiveKind::Creative => "creative", - ArchiveKind::IncompleteDownload => "incomplete-download", - } -} - -#[cfg(not(coverage))] -fn normal_relative_components(path: &str) -> Option> { - let mut values = Vec::new(); - for component in Path::new(path).components() { - let std::path::Component::Normal(value) = component else { - return None; - }; - values.push(value.to_str()?.to_string()); - } - (!values.is_empty()).then_some(values) -} - -#[cfg(not(coverage))] -fn exact_duplicate_content_sha256(candidate: &cloud::CloudCandidate) -> Result { - let mut values = candidate - .metadata_evidence - .iter() - .filter(|evidence| evidence.field == "exact-duplicate-content-sha256") - .map(|evidence| evidence.value.clone()) - .collect::>(); - values.sort(); - values.dedup(); - match values.as_slice() { - [value] - if value.len() == 64 - && value - .bytes() - .all(|byte| byte.is_ascii_hexdigit() && !byte.is_ascii_uppercase()) => - { - Ok(value.clone()) - } - [] => Err("exact-duplicate-content-sha256-missing".into()), - _ => Err("exact-duplicate-content-sha256-invalid-or-conflicting".into()), - } -} - -#[cfg(not(coverage))] -fn exact_duplicate_review_member( - candidate: &cloud::CloudCandidate, - canonical: bool, -) -> ExactDuplicateReviewMember { - let mut production_evidence = candidate - .metadata_evidence - .iter() - .filter(|evidence| { - matches!( - evidence.field.as_str(), - "production-date" - | "filename-date-hint" - | "filesystem-created-date" - | "filesystem-modified-date" - ) - }) - .map(|evidence| RedactedMetadataEvidence { - field: evidence.field.clone(), - source: evidence.source.clone(), - confidence: evidence.confidence.clone(), - }) - .collect::>(); - production_evidence.sort_by(|left, right| { - left.field - .cmp(&right.field) - .then_with(|| left.source.cmp(&right.source)) - .then_with(|| left.confidence.cmp(&right.confidence)) - }); - production_evidence.dedup_by(|left, right| { - left.field == right.field - && left.source == right.source - && left.confidence == right.confidence - }); - - let mut source_lineage_evidence_fields = candidate - .content_context - .iter() - .filter_map(|context| context.split_once('=').map(|(field, _)| field.to_string())) - .collect::>(); - source_lineage_evidence_fields.sort(); - source_lineage_evidence_fields.dedup(); - - ExactDuplicateReviewMember { - metadata_fingerprint: candidate.metadata_fingerprint.clone(), - review_fingerprint: candidate.review_fingerprint.clone(), - relative_path: candidate.relative_path.clone(), - kind: candidate.kind, - bytes: candidate.bytes, - production_time_ms: candidate.production_time_ms, - production_time_source: candidate.production_time_source.clone(), - production_time_confidence: candidate.production_time_confidence.clone(), - production_evidence, - source_lineage_evidence_fields, - canonical_recommendation: if canonical { - "preferred" - } else { - "redundant-copy-candidate" - }, - review_reasons: candidate.review_reasons.clone(), - } -} - -#[cfg(not(coverage))] -fn hash_exact_duplicate_review_value(hasher: &mut blake3::Hasher, value: &[u8]) { - hasher.update(&(value.len() as u64).to_le_bytes()); - hasher.update(value); -} - -#[cfg(not(coverage))] -fn exact_duplicate_review_batch_fingerprint( - prefix: &str, - kind: ArchiveKind, - clusters: &[ExactDuplicateReviewCluster], -) -> String { - let mut hasher = blake3::Hasher::new(); - hasher.update(b"disksage-exact-duplicate-review-batch-v1\0"); - hasher.update(&EXACT_DUPLICATE_REVIEW_BATCH_FINGERPRINT_VERSION.to_le_bytes()); - hash_exact_duplicate_review_value(&mut hasher, prefix.as_bytes()); - hash_exact_duplicate_review_value(&mut hasher, archive_kind_label(kind).as_bytes()); - hash_exact_duplicate_review_value(&mut hasher, &(clusters.len() as u64).to_le_bytes()); - for cluster in clusters { - for value in [ - cluster.cluster_fingerprint.as_bytes(), - cluster.content_sha256.as_bytes(), - cluster.canonical.metadata_fingerprint.as_bytes(), - cluster.canonical.review_fingerprint.as_bytes(), - cluster.canonical.relative_path.as_bytes(), - ] { - hash_exact_duplicate_review_value(&mut hasher, value); - } - hash_exact_duplicate_review_value(&mut hasher, &cluster.bytes_per_candidate.to_le_bytes()); - hash_exact_duplicate_review_value(&mut hasher, &cluster.redundant_bytes.to_le_bytes()); - for member in &cluster.redundant_copies { - for value in [ - member.metadata_fingerprint.as_bytes(), - member.review_fingerprint.as_bytes(), - member.relative_path.as_bytes(), - ] { - hash_exact_duplicate_review_value(&mut hasher, value); - } - hash_exact_duplicate_review_value(&mut hasher, &member.bytes.to_le_bytes()); - } - } - hasher.finalize().to_hex().to_string() -} - -/// Emit a conservative, source-local review slice for exact duplicates. -/// -/// The selected canonical copy must be a direct child of the source root. Every redundant member -/// must be nested beneath a first path component that begins with the operator-supplied prefix. -/// The output is evidence for a later human decision; it cannot authorize or execute Trash. -#[cfg(not(coverage))] -fn exact_duplicate_review_batch( - report: &cloud::CloudPlanReport, - redundant_prefix: &str, - kind: ArchiveKind, -) -> Result { - let mut selected = Vec::new(); - for cluster in &report.exact_duplicates.clusters { - if cluster.recommendation_confidence != "high" - || cluster.recommendation_reason_codes.as_slice() - != ["richer-source-lineage-context-preferred"] - { - continue; - } - if !cluster.requires_human_confirmation - || cluster.candidate_count < 2 - || cluster.member_metadata_fingerprints.len() != cluster.candidate_count - || cluster.redundant_bytes - != cluster - .bytes_per_candidate - .saturating_mul((cluster.candidate_count - 1) as u64) - { - return Err("exact-duplicate-review-cluster-contract-invalid".into()); - } - - let mut members = Vec::with_capacity(cluster.member_metadata_fingerprints.len()); - for fingerprint in &cluster.member_metadata_fingerprints { - let matches = report - .candidates - .iter() - .filter(|candidate| candidate.metadata_fingerprint == *fingerprint) - .collect::>(); - match matches.as_slice() { - [only] => members.push(*only), - [] => { - return Err(format!( - "exact-duplicate-review-candidate-missing-from-bounded-plan:{fingerprint}" - )); - } - _ => { - return Err(format!( - "exact-duplicate-review-candidate-fingerprint-ambiguous:{fingerprint}" - )); - } - } - } - if members - .iter() - .any(|candidate| candidate.bytes != cluster.bytes_per_candidate) - { - return Err("exact-duplicate-review-member-size-mismatch".into()); - } - let canonical = members - .iter() - .copied() - .filter(|candidate| { - candidate.metadata_fingerprint == cluster.recommended_canonical_metadata_fingerprint - }) - .collect::>(); - let canonical = match canonical.as_slice() { - [only] => *only, - _ => return Err("exact-duplicate-review-canonical-not-unique".into()), - }; - if canonical.kind != kind - || normal_relative_components(&canonical.relative_path) - .is_none_or(|components| components.len() != 1) - { - continue; - } - - let mut redundant = members - .into_iter() - .filter(|candidate| candidate.metadata_fingerprint != canonical.metadata_fingerprint) - .collect::>(); - if redundant.is_empty() || redundant.iter().any(|candidate| candidate.kind != kind) { - continue; - } - let all_under_prefix = redundant.iter().all(|candidate| { - normal_relative_components(&candidate.relative_path).is_some_and(|components| { - components.len() > 1 && components[0].starts_with(redundant_prefix) - }) - }); - if !all_under_prefix { - continue; - } - redundant.sort_by(|left, right| { - left.relative_path - .cmp(&right.relative_path) - .then_with(|| left.metadata_fingerprint.cmp(&right.metadata_fingerprint)) - }); - - let content_sha256 = exact_duplicate_content_sha256(canonical)?; - for member in &redundant { - if exact_duplicate_content_sha256(member)? != content_sha256 { - return Err("exact-duplicate-review-content-sha256-mismatch".into()); - } - } - selected.push(ExactDuplicateReviewCluster { - cluster_fingerprint: cluster.cluster_fingerprint.clone(), - content_sha256, - bytes_per_candidate: cluster.bytes_per_candidate, - candidate_count: cluster.candidate_count, - redundant_bytes: cluster.redundant_bytes, - recommendation_confidence: cluster.recommendation_confidence.clone(), - recommendation_reason_codes: cluster.recommendation_reason_codes.clone(), - canonical: exact_duplicate_review_member(canonical, true), - redundant_copies: redundant - .into_iter() - .map(|candidate| exact_duplicate_review_member(candidate, false)) - .collect(), - requires_human_confirmation: true, - }); - } - if selected.is_empty() { - return Err("현재 fresh plan에 제한 조건을 만족하는 exact duplicate가 없음".into()); - } - selected.sort_by(|left, right| left.cluster_fingerprint.cmp(&right.cluster_fingerprint)); - let batch_fingerprint = - exact_duplicate_review_batch_fingerprint(redundant_prefix, kind, &selected); - let redundant_copy_count = selected - .iter() - .map(|cluster| cluster.redundant_copies.len()) - .sum::(); - let redundant_bytes = selected.iter().fold(0u64, |total, cluster| { - total.saturating_add(cluster.redundant_bytes) - }); - - Ok(serde_json::json!({ - "schema_version": 1, - "output_mode": "exact-duplicate-review-batch", - "generated_at_ms": report.generated_at_ms, - "exact_duplicate_review_batch_fingerprint_version": - EXACT_DUPLICATE_REVIEW_BATCH_FINGERPRINT_VERSION, - "exact_duplicate_review_batch_fingerprint": batch_fingerprint, - "selection": { - "recommendation_confidence": "high", - "recommendation_reason_codes_exact": [ - "richer-source-lineage-context-preferred", - ], - "canonical_location": "direct-child-of-source-root", - "redundant_first_component_prefix": redundant_prefix, - "kind": kind, - }, - "metadata_policy": { - "production_time_precedence": [ - "embedded-metadata", - "explicit-filename-date", - "filesystem-created", - "filesystem-modified", - ], - "filename_dates_are_auxiliary": true, - "summary_is_dry_run_only": true, - "batch_fingerprint_is_not_approval": true, - "human_confirmation_required_for_every_cluster": true, - "trash_execution_is_not_available_in_this_output_mode": true, - }, - "redacted_from_summary": [ - "absolute-source-path", - "absolute-destination-path", - "cloud-root-path-and-label", - "content-title-and-authors", - "raw-metadata-evidence-values", - "source-lineage-evidence-values", - "dataset-profile", - ], - "cluster_count": selected.len(), - "candidate_count": selected.len().saturating_add(redundant_copy_count), - "redundant_copy_count": redundant_copy_count, - "redundant_bytes": redundant_bytes, - "clusters": selected, - })) -} - -/// Produce a bounded operator view without paths, file names, or raw embedded metadata values. -/// -/// The full plan remains the durable lineage source. This view is intentionally limited to the -/// evidence needed to select a candidate for a separately attributed human review. -#[cfg(not(coverage))] -fn decision_summary(report: &cloud::CloudPlanReport) -> serde_json::Value { - let aggregates = decision_aggregates(report); - let decisions = report - .candidates - .iter() - .map(redacted_decision) - .collect::>(); - - serde_json::json!({ - "schema_version": 3, - "output_mode": "decision-summary", - "generated_at_ms": report.generated_at_ms, - "source_selection_policy": report.source_selection_policy, - "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, - "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), - "metadata_policy": { - "production_time_precedence": [ - "embedded-metadata", - "explicit-filename-date", - "filesystem-created", - "filesystem-modified", - ], - "filename_dates_are_auxiliary": true, - "summary_is_dry_run_only": true, - "review_fingerprints_bind_operator_decisions": true, - "exact_human_attributed_copy_approval_required": true, - "copy_approval_is_bound_to_review_fingerprint_and_action": true, - "verified_provider_sync_required_before_local_eviction": true, - }, - "cloud": { - "provider": report.cloud_root.provider, - "account_scope": report.cloud_root.account_scope, - }, - "candidate_count": report.candidates.len(), - "candidate_bytes": report.candidate_bytes, - "potentially_reclaimable_bytes": report.potentially_reclaimable_bytes, - "aggregates": aggregates, - "exact_duplicates": &report.exact_duplicates, - "capacity": &report.capacity, - "notices": &report.notices, - "redacted_from_summary": [ - "absolute-source-path", - "absolute-destination-path", - "relative-source-path-and-file-name", - "cloud-root-path-and-label", - "content-title-and-authors", - "raw-metadata-evidence-values", - "dataset-profile", - ], - "decisions": decisions, - }) -} - -/// Summarize the concrete lineage-preserving destination manifest without exposing any path or -/// embedded metadata value. Counts and bytes are deterministic for the decision batch. -#[cfg(not(coverage))] -fn organization_manifest_summary(report: &cloud::CloudPlanReport) -> serde_json::Value { - let mut kind_counts = BTreeMap::new(); - let mut kind_bytes = BTreeMap::new(); - let mut production_month_counts = BTreeMap::new(); - let mut production_month_bytes = BTreeMap::new(); - let mut context_coverage_counts = BTreeMap::new(); - let mut context_coverage_bytes = BTreeMap::new(); - let mut destination_collision_count = 0_u64; - let mut destination_collision_bytes = 0_u64; - - for candidate in &report.candidates { - let kind = archive_kind_label(candidate.kind); - increment(&mut kind_counts, kind, 1); - increment(&mut kind_bytes, kind, candidate.bytes); - - let (year, month) = cloud::production_year_month(candidate.production_time_ms); - let production_month = format!("{year:04}-{month:02}"); - increment(&mut production_month_counts, &production_month, 1); - increment( - &mut production_month_bytes, - &production_month, - candidate.bytes, - ); - - for (label, present) in [ - ("content-title-present", candidate.content_title.is_some()), - ( - "content-authors-present", - !candidate.content_authors.is_empty(), - ), - ( - "content-context-present", - !candidate.content_context.is_empty(), - ), - ( - "nested-source-context-preserved", - candidate.source_context != ".", - ), - ( - "embedded-metadata-present", - candidate - .metadata_evidence - .iter() - .any(|evidence| evidence.source.starts_with("embedded:")), - ), - ] { - if present { - increment(&mut context_coverage_counts, label, 1); - increment(&mut context_coverage_bytes, label, candidate.bytes); - } - } - - if candidate.blocked_reason.as_deref() == Some("destination-exists") { - destination_collision_count = destination_collision_count.saturating_add(1); - destination_collision_bytes = - destination_collision_bytes.saturating_add(candidate.bytes); - } - } - - serde_json::json!({ - "layout_policy": - "DiskSage Archive/{production-year}/{production-month}/{archive-kind}/{source-relative-path}", - "production_time_drives_year_and_month": true, - "source_relative_path_preserved_for_lineage": true, - "bound_to_decision_batch_fingerprint": true, - "candidate_groups": { - "archive_kind": { - "counts": kind_counts, - "candidate_bytes": kind_bytes, - }, - "production_month": { - "counts": production_month_counts, - "candidate_bytes": production_month_bytes, - }, - }, - "context_evidence_coverage": { - "counts": context_coverage_counts, - "candidate_bytes": context_coverage_bytes, - "candidate_bytes_can_overlap_across_evidence_kinds": true, - }, - "destination_collision_preflight": { - "counts": destination_collision_count, - "candidate_bytes": destination_collision_bytes, - "collision_policy": "block-do-not-overwrite", - }, - "manifest_is_dry_run_only": true, - "human_review_required_before_copy": true, - }) -} - -/// Produce a small, path-free overview for comparing destinations before opening a private -/// candidate dossier. Unlike `decision_summary`, this deliberately omits per-candidate -/// fingerprints, combinatorial reason sets, and duplicate-cluster membership. -#[cfg(not(coverage))] -fn compact_decision_summary(report: &cloud::CloudPlanReport) -> serde_json::Value { - let aggregates = decision_aggregates(report); - let review_required = &aggregates["review_required_reason"]; - let organization_manifest = organization_manifest_summary(report); - - serde_json::json!({ - "schema_version": 3, - "output_mode": "compact-decision-summary", - "generated_at_ms": report.generated_at_ms, - "source_selection_policy": report.source_selection_policy, - "decision_batch_fingerprint_version": cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION, - "decision_batch_fingerprint": cloud::cloud_decision_batch_fingerprint(report), - "metadata_policy": { - "production_time_precedence": [ - "embedded-metadata", - "explicit-filename-date", - "filesystem-created", - "filesystem-modified", - ], - "filename_dates_are_auxiliary": true, - "summary_is_dry_run_only": true, - "batch_fingerprint_is_not_approval": true, - "private_candidate_review_required_before_copy": true, - "exact_human_attributed_copy_approval_required": true, - "copy_approval_max_age_ms": cloud_transfer::MAX_CLOUD_COPY_APPROVAL_AGE_MS, - "verified_provider_sync_required_before_local_eviction": true, - }, - "cloud": { - "provider": report.cloud_root.provider, - "account_scope": report.cloud_root.account_scope, - }, - "candidate_count": report.candidates.len(), - "candidate_bytes": report.candidate_bytes, - "potentially_reclaimable_bytes": report.potentially_reclaimable_bytes, - "aggregates": { - "decision_state": aggregates["decision_state"].clone(), - "review_required_reason": { - "counts": review_required["counts"].clone(), - "candidate_bytes": review_required["candidate_bytes"].clone(), - "sole_reason_counts": review_required["sole_reason_counts"].clone(), - "sole_reason_candidate_bytes": - review_required["sole_reason_candidate_bytes"].clone(), - "candidate_bytes_can_overlap_across_reasons": true, - }, - "blocked_reason": aggregates["blocked_reason"].clone(), - "production_time_source": aggregates["production_time_source"].clone(), - "production_time_confidence": - aggregates["production_time_confidence"].clone(), - }, - "exact_duplicates": { - "cluster_count": report.exact_duplicates.cluster_count, - "candidate_count": report.exact_duplicates.candidate_count, - "candidate_bytes": report.exact_duplicates.candidate_bytes, - "redundant_bytes": report.exact_duplicates.redundant_bytes, - "cluster_members_omitted": true, - "human_confirmation_required": true, - }, - "organization_manifest": organization_manifest, - "capacity": &report.capacity, - "notices": &report.notices, - "next_step": { - "detailed_redacted_queue": "--decision-summary", - "private_exact_reason_dossier": - "--decision-summary --review-reason-set REASON|REASON --private-review-output ABSOLUTE_NEW_FILE.json", - }, - "redacted_from_summary": [ - "absolute-source-path", - "absolute-destination-path", - "relative-source-path-and-file-name", - "cloud-root-path-and-label", - "content-title-and-authors", - "raw-metadata-evidence-values", - "dataset-profile", - "candidate-metadata-and-review-fingerprints", - "review-reason-set-combinations", - "exact-duplicate-cluster-members", - ], - "candidate_details_included": false, - "cloud_write_executed": false, - "source_eviction_authorized": false, - }) -} - -#[cfg(not(coverage))] -fn receipt_cloud_root(receipt: &CloudCopyReceipt, home: &Path) -> Result { - let destination = Path::new(&receipt.destination); - cloud::discover_cloud_roots(home) - .into_iter() - .filter(|root| { - root.provider == receipt.provider && destination.starts_with(Path::new(&root.path)) - }) - .max_by_key(|root| Path::new(&root.path).components().count()) - .ok_or_else(|| "receipt-cloud-root-unavailable".to_string()) -} - -#[cfg(not(coverage))] -fn cloud_projection_dirs(anchor: &Path) -> (PathBuf, PathBuf) { - let parent = anchor.parent().unwrap_or(anchor); - (parent.join("cloud-adr"), parent.join("cloud-goals")) -} - -#[cfg(not(coverage))] -fn collect_root_capacity( - root: &CloudRoot, - oauth_connections: Option<&Path>, - observed_at_ms: u64, -) -> Result { - if root.provider == CloudProvider::Icloud { - return provider_capacity::collect_icloud_native_capacity(observed_at_ms); - } - let connection_path = oauth_connections - .ok_or_else(|| "provider-capacity-oauth-connections-required".to_string())?; - let access_token = provider_oauth::refreshed_access_token(connection_path, root)?; - provider_capacity::collect_authenticated_capacity( - root.provider, - access_token.as_str(), - observed_at_ms, - &FixedHostProviderCapacityClient::default(), - ) -} - -#[cfg(not(coverage))] -fn attach_capacity_snapshot( - report: &mut cloud::CloudPlanReport, - snapshot: provider_capacity::CloudCapacitySnapshot, - reserve_mib: u64, -) -> Result<(), String> { - if snapshot.provider != report.cloud_root.provider - || snapshot.account_scope.is_some_and(|scope| { - report.cloud_root.account_scope != CloudAccountScope::Unknown - && report.cloud_root.account_scope != scope - }) - { - return Err("cloud-capacity-root-binding-mismatch".into()); - } - let largest_candidate_bytes = report - .candidates - .iter() - .filter(|candidate| candidate.blocked_reason.is_none()) - .map(|candidate| candidate.bytes) - .max() - .unwrap_or_default(); - let assessment = provider_capacity::assess_capacity( - snapshot, - report.potentially_reclaimable_bytes, - largest_candidate_bytes, - reserve_mib.saturating_mul(1024 * 1024), - ); - report - .notices - .retain(|notice| notice != "cloud-quota-unverified"); - report.notices.push( - match assessment.can_fit { - Some(true) - if assessment.snapshot.evidence_kind - == provider_capacity::CapacityEvidenceKind::ProviderNativeStatus => - { - "cloud-quota-provider-native-verified" - } - Some(true) => "cloud-quota-provider-api-verified", - Some(false) => "cloud-quota-insufficient-or-blocked", - None => "cloud-quota-unavailable", - } - .into(), - ); - report.capacity = Some(assessment); - Ok(()) -} - -#[cfg(not(coverage))] -fn plan_with_optional_capacity( - source: &cloud::CloudSourceSnapshot, - root: &CloudRoot, - verify_capacity: bool, - oauth_connections: Option<&Path>, - reserve_mib: u64, - home: &Path, -) -> Result<(CloudRoot, cloud::CloudPlanReport), String> { - if !verify_capacity { - let mut report = cloud::plan_cloud_archive_from_snapshot(source, root); - attach_local_copy_prerequisites(&mut report, home); - return Ok((root.clone(), report)); - } - let observed_at_ms = cloud::system_now_ms(); - let capacity_snapshot = match collect_root_capacity(root, oauth_connections, observed_at_ms) { - Ok(snapshot) => snapshot, - Err(error) => provider_capacity::unavailable_capacity_from_error( - root.provider, - observed_at_ms, - &error, - ), - }; - let refined_root = - provider_capacity::root_with_verified_capacity_scope(root, &capacity_snapshot)?; - let mut report = cloud::plan_cloud_archive_from_snapshot(source, &refined_root); - attach_capacity_snapshot(&mut report, capacity_snapshot, reserve_mib)?; - attach_local_copy_prerequisites(&mut report, home); - Ok((refined_root, report)) -} - -#[cfg(not(coverage))] -fn attach_local_copy_prerequisites(report: &mut cloud::CloudPlanReport, home: &Path) { - let runtime = provider_client_runtime::collect_provider_client_runtime( - report.cloud_root.provider, - cloud::system_now_ms(), - ); - provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); - if report.cloud_root.provider == CloudProvider::Icloud { - let health = - icloud_sync_health::inspect_new_copy_admission(home, cloud::system_now_ms()).ok(); - icloud_sync_health::attach_new_copy_admission_notice(&mut report.notices, health.as_ref()); - } else { - let global_sync = - provider_global_sync::inspect_new_copy_admission(report.cloud_root.provider).ok(); - provider_global_sync::attach_new_copy_admission_notice( - &mut report.notices, - global_sync.as_ref(), - ); - } -} - -#[cfg(not(coverage))] -fn collect_receipt_sync_evidence( - receipt: &CloudCopyReceipt, - provider_object_id: Option<&str>, - oauth_connections: Option<&Path>, - home: &Path, - confirmed_at_ms: u64, - force_provider_api: bool, -) -> Result { - let provider_object_id = provider_object_id - .map(str::trim) - .filter(|value| !value.is_empty()); - match receipt.provider { - CloudProvider::Icloud => { - if provider_object_id.is_some() { - return Err("icloud-provider-api-fallback-not-supported".into()); - } - provider_sync::collect_icloud_sync_evidence(receipt, confirmed_at_ms) - } - CloudProvider::Onedrive | CloudProvider::GoogleDrive => { - let fallback_requested = oauth_connections.is_some(); - if !force_provider_api { - match provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) { - Ok(evidence) if evidence.sync_complete || !fallback_requested => { - return Ok(evidence); - } - Err(error) if !fallback_requested => return Err(error), - Ok(_) | Err(_) => {} - } - } - { - let connection_path = oauth_connections - .ok_or_else(|| "oauth-connections-path-missing".to_string())?; - let selected_root = receipt_cloud_root(receipt, home)?; - let access_token = - provider_oauth::refreshed_access_token(connection_path, &selected_root)?; - match receipt.provider { - CloudProvider::Onedrive => { - if provider_object_id.is_some() { - return Err("onedrive-provider-object-id-not-accepted".into()); - } - let locator = provider_api_client::onedrive_path_locator( - Path::new(&selected_root.path), - Path::new(&receipt.destination), - )?; - provider_api_client::collect_authenticated_provider_api_evidence_from_source( - receipt, - &locator, - access_token.as_str(), - &FixedHostProviderMetadataClient::default(), - confirmed_at_ms, - ) - } - CloudProvider::GoogleDrive => { - let locator = provider_api_client::google_drive_path_locator( - Path::new(&selected_root.path), - Path::new(&receipt.destination), - provider_object_id - .ok_or_else(|| "provider-object-id-missing".to_string())?, - )?; - provider_api_client::collect_authenticated_google_drive_path_evidence_from_source( - receipt, - &locator, - access_token.as_str(), - &FixedHostProviderMetadataClient::default(), - confirmed_at_ms, - ) - } - CloudProvider::Icloud => unreachable!(), - } - } - } - } -} - -#[cfg(not(coverage))] -fn attest_receipt( - path: &Path, - evidence_dir: &Path, - provider_object_id: Option<&str>, - oauth_connections: Option<&Path>, - home: &Path, -) -> Result { - attest_receipt_with_mode( - path, - evidence_dir, - provider_object_id, - oauth_connections, - home, - false, - ) -} - -#[cfg(not(coverage))] -fn attest_receipt_with_mode( - path: &Path, - evidence_dir: &Path, - provider_object_id: Option<&str>, - oauth_connections: Option<&Path>, - home: &Path, - force_provider_api: bool, -) -> Result { - let receipt = cloud_transfer::read_immutable_receipt(path)?; - let confirmed_at_ms = cloud::system_now_ms(); - let evidence = collect_receipt_sync_evidence( - &receipt, - provider_object_id, - oauth_connections, - home, - confirmed_at_ms, - force_provider_api, - )?; - let assessment = provider_sync::assess_provider_sync_timeliness(&receipt, &evidence)?; - let (evidence_record, evidence_path) = - provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; - let source_blocker = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); - let (mut permit, mut blockers) = - match cloud_transfer::approve_local_eviction(&receipt, &evidence_record) { - Ok(permit) => (Some(permit), Vec::new()), - Err(blockers) => (None, blockers), - }; - if let Some(blocker) = source_blocker { - permit = None; - if !blockers.iter().any(|existing| existing == blocker) { - blockers.push(blocker.into()); - } - } - let goal_state = - cloud_transfer::CloudOffloadGoalState::after_attestation(&evidence, permit.is_some()); - let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); - let mut adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); - let mut goal = cloud_adr::goal_snapshot_from_evidence( - &receipt, - &evidence_record, - goal_state, - confirmed_at_ms, - ); - if let Some(blocker) = source_blocker { - goal.status = "blocked".into(); - goal.completion_gates.insert("source-present".into(), false); - adr.decision = format!("{}-source-state-unverified", adr.decision); - adr.consequences - .push(format!("source-state-blocked:{blocker}")); - } - let provider_blocker = blockers - .iter() - .find(|existing| Some(existing.as_str()) != source_blocker) - .map(String::as_str); - let projection = cloud_adr::write_projection_pair_with_state_blockers_outcome( - &adr_dir, - &adr, - &goal_dir, - &goal, - source_blocker, - provider_blocker, - ); - Ok(AttestationOutput { - action: if force_provider_api { - "attest-provider-api" - } else { - "attest-provider-native" - }, - goal_state, - goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) - .ok() - .flatten(), - receipt_id: receipt.receipt_id, - evidence, - assessment, - evidence_record, - evidence_path: evidence_path.to_string_lossy().into_owned(), - adr_path: projection - .adr_path - .map(|path| path.to_string_lossy().into_owned()), - goal_path: projection - .goal_path - .map(|path| path.to_string_lossy().into_owned()), - projection_warnings: projection.warnings, - permit, - blockers, - }) -} - -#[cfg(not(coverage))] -fn stable_reconciliation_error(error: &str) -> String { - let token = error.split(',').next().unwrap_or_default(); - if !token.is_empty() - && token.len() <= 128 - && token - .bytes() - .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') - { - token.to_string() - } else { - "provider-attestation-failed".into() - } -} +//! Process boundary for the DiskSage cloud planner CLI. +//! +//! Host arguments are screened before any HOME/provider/filesystem work. The implementation stays +//! in the sibling include so the process contract can fail closed on non-UTF-8 input and terminate +//! help successfully even when no user-home environment is available. #[cfg(not(coverage))] -fn copy_candidate_via_provider_api( - candidate: &cloud::CloudCandidate, - selected: &CloudRoot, - report: &cloud::CloudPlanReport, - receipt_dir: &Path, - review_decision: Option<&CloudReviewDecision>, - exact_confirmation_phrase: &str, - approved_by: &str, - rationale: &str, - oauth_connections: &Path, - capacity_reserve_mib: u64, - home: &Path, -) -> Result { - if selected.provider == CloudProvider::Icloud { - return Err("provider-api-icloud-unsupported".into()); - } - let connection = provider_oauth::connection_for_root( - &provider_oauth::load_connections(oauth_connections)?, - selected, - )?; - if !provider_oauth::scope_allows_write(&connection) { - return Err("provider-oauth-write-scope-required".into()); - } - let capacity_snapshot = report - .capacity - .as_ref() - .map(|assessment| assessment.snapshot.clone()) - .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; - let capacity = provider_capacity::assess_capacity( - capacity_snapshot, - candidate.bytes, - candidate.bytes, - capacity_reserve_mib.saturating_mul(1024 * 1024), - ); - if capacity.can_fit != Some(true) { - return Err(if capacity.blockers.is_empty() { - "cloud-capacity-verification-required".into() - } else { - capacity.blockers.join(",") - }); - } - - let copy_approval = cloud_transfer::create_cloud_copy_approval( - candidate, - selected, - cloud_transfer::CloudCopyApprovalAction::CopyOnly, - cloud::system_now_ms(), - approved_by, - rationale, - exact_confirmation_phrase, - )?; - let copied_at_ms = cloud::system_now_ms(); - let (receipt, source_hashes) = cloud_transfer::prepare_provider_api_source_receipt( - candidate, - selected, - review_decision, - ©_approval, - copied_at_ms, - )?; - let access_token = provider_oauth::refreshed_access_token(oauth_connections, selected)?; - let upload = provider_api_write::upload_file( - selected.provider, - Path::new(&selected.path), - Path::new(&candidate.dst), - Path::new(&candidate.src), - candidate.bytes, - access_token.as_str(), - )?; - if let Err(error) = - cloud_transfer::verify_provider_api_source_unchanged(candidate, &source_hashes) - { - let cleanup = provider_api_write::delete_uploaded_object( - selected.provider, - &upload.object_id, - access_token.as_str(), - ); - return Err(match cleanup { - Ok(()) => error, - Err(cleanup_error) => { - format!("{error},provider-api-upload-cleanup-failed:{cleanup_error}") - } - }); - } +mod implementation { + include!("disksage-cloud-plan-implementation.rs.inc"); - let receipt_path = match cloud_transfer::write_provider_api_receipt(&receipt, receipt_dir) { - Ok(path) => path, - Err(error) => { - let cleanup = provider_api_write::delete_uploaded_object( - selected.provider, - &upload.object_id, - access_token.as_str(), - ); - return Err(match cleanup { - Ok(()) => error, - Err(cleanup_error) => { - format!("{error},provider-api-upload-cleanup-failed:{cleanup_error}") - } - }); - } - }; + pub(super) mod entry { + use std::path::Path; - let evidence_dir = receipt_dir - .parent() - .unwrap_or(receipt_dir) - .join("cloud-provider-evidence"); - let (adr_dir, goal_dir) = cloud_projection_dirs(receipt_dir); - let updated_at_ms = cloud::system_now_ms(); - let adr = cloud_adr::initial_adr_snapshot(&receipt, updated_at_ms); - let goal = cloud_adr::initial_goal_snapshot(&receipt, updated_at_ms); - let (initial_adr_path, initial_goal_path, mut projection_warnings) = - cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); - let mut adr_path = initial_adr_path.map(|path| path.to_string_lossy().into_owned()); - let mut goal_path = initial_goal_path.map(|path| path.to_string_lossy().into_owned()); - let receipt_id = receipt.receipt_id.clone(); - let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; - let mut evidence_path = None; - let mut permit = None; - let mut blockers = Vec::new(); - let provider_object_id = upload.object_id; - let attest_object_id = - (selected.provider == CloudProvider::GoogleDrive).then(|| provider_object_id.clone()); - match attest_receipt_with_mode( - &receipt_path, - &evidence_dir, - attest_object_id.as_deref(), - Some(oauth_connections), - home, - true, - ) { - Ok(attestation) => { - goal_state = attestation.goal_state; - evidence_path = Some(attestation.evidence_path); - permit = attestation.permit; - blockers = attestation.blockers; - adr_path = attestation.adr_path; - goal_path = attestation.goal_path; - projection_warnings.extend(attestation.projection_warnings); - } - Err(error) => { - let provider_blocker = stable_reconciliation_error(&error); - let projection_outcome = - cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( - &receipt, - &adr_dir, - &goal_dir, - cloud::system_now_ms(), - &provider_blocker, - ); - if let Some(path) = projection_outcome.adr_path { - adr_path = Some(path.to_string_lossy().into_owned()); - } - if let Some(path) = projection_outcome.goal_path { - goal_path = Some(path.to_string_lossy().into_owned()); - } - projection_warnings.extend(projection_outcome.warnings); - projection_warnings.push(format!( - "provider-attestation-incomplete:{provider_blocker}" - )); + pub(super) fn help_text() -> String { + super::parse_args(&["--help".to_string()], Path::new("/")) + .expect_err("the implementation parser must expose the stable help synopsis") } - } - - Ok(ProviderApiCopyOutput { - action: "copy-via-provider-api", - goal_state, - goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt_id) - .ok() - .flatten(), - receipt, - receipt_path: receipt_path.to_string_lossy().into_owned(), - provider_object_id, - evidence_path, - adr_path: adr_path.or_else(|| { - Some( - adr_dir - .join(format!("{}-latest.json", receipt_id)) - .to_string_lossy() - .into_owned(), - ) - }), - goal_path: goal_path.or_else(|| { - Some( - goal_dir - .join(format!("{}-latest.json", receipt_id)) - .to_string_lossy() - .into_owned(), - ) - }), - projection_warnings, - permit, - blockers, - }) -} -/// Re-attest every persisted receipt and refresh only local provider evidence and ADR/Goal -/// projections. This is the headless equivalent of the GUI reconciliation loop; it never writes -/// to a cloud provider and never evicts a source file. -#[cfg(not(coverage))] -fn reconcile_receipts( - receipt_dir: &Path, - evidence_dir: &Path, - provider_object_id: Option<&str>, - oauth_connections: Option<&Path>, - home: &Path, - generated_at_ms: u64, -) -> Result { - let reconciliation_started = Instant::now(); - let mut report = audit_receipts(receipt_dir, Some(evidence_dir), generated_at_ms)?; - report.notices = vec![ - "provider-attestation-attempted", - "local-provider-evidence-write", - "dynamic-adr-goal-projection-write", - "immutable-receipts-remain-authority", - "no-cloud-write", - "no-local-eviction", - ]; - let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); - let mut paths = std::fs::read_dir(receipt_dir) - .map_err(|_| "receipt-directory-read-failed".to_string())? - .filter_map(Result::ok) - .map(|entry| entry.path()) - .collect::>(); - paths.sort(); - if paths.len() > MAX_RECONCILIATION_RECEIPTS { - return Err("receipt-directory-entry-limit-exceeded".into()); - } - let receipt_paths = paths - .into_iter() - .filter(|path| { - let file_name = path - .file_name() - .and_then(|name| name.to_str()) - .unwrap_or_default(); - regular_file_state(path) == "present" && file_name.ends_with(".json") - }) - .collect::>(); - for (index, path) in receipt_paths.iter().enumerate() { - if index >= MAX_RECONCILIATION_ATTESTATIONS - || reconciliation_started.elapsed() >= RECONCILIATION_MAX_DURATION - { - report.unprocessed_count = receipt_paths.len().saturating_sub(index) as u64; - report.incomplete_reconciliation = report.unprocessed_count > 0; - if report.incomplete_reconciliation { - let notice = if index >= MAX_RECONCILIATION_ATTESTATIONS { - "reconciliation-entry-limit" - } else { - "reconciliation-time-limit" - }; - report.notices.push(notice); - } - break; - } - let Ok(receipt) = cloud_transfer::read_immutable_receipt(&path) else { - continue; - }; - let Some(entry_index) = report - .entries - .iter() - .position(|entry| entry.receipt_id.as_deref() == Some(receipt.receipt_id.as_str())) - else { - continue; - }; - report.attestation_attempted_count = report.attestation_attempted_count.saturating_add(1); - match attest_receipt( - &path, - evidence_dir, - provider_object_id, - oauth_connections, - home, - ) { - Ok(attestation) => { - report.provider_evidence_written_count = - report.provider_evidence_written_count.saturating_add(1); - report.mutation_performed = true; - if attestation.goal_state - == cloud_transfer::CloudOffloadGoalState::PendingProviderSync - { - report.pending_provider_sync_count = - report.pending_provider_sync_count.saturating_add(1); - } - if attestation.permit.is_some() { - report.eviction_ready_count = report.eviction_ready_count.saturating_add(1); - } - let entry = &mut report.entries[entry_index]; - entry.goal_state = Some(attestation.goal_state); - entry.provider_sync_state = Some(attestation.evidence.sync_state); - entry.eviction_permit = attestation.permit.is_some(); - entry.attestation_error = None; - entry.issues.extend(attestation.blockers); - entry.issues.extend( - attestation - .projection_warnings - .into_iter() - .map(|warning| format!("projection-{warning}")), - ); - entry.adr_projection_state = Some( - projection_state( - &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), - "adr", - &receipt.receipt_id, - ) - .into(), - ); - entry.goal_projection_state = Some( - projection_state( - &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), - "goal", - &receipt.receipt_id, - ) - .into(), - ); - entry.goal_status = cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) - .ok() - .flatten(); - entry.evidence_record_count = - evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); - } - Err(error) => { - let attestation_error = stable_reconciliation_error(&error); - let projection_outcome = - cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( - &receipt, - &adr_dir, - &goal_dir, - generated_at_ms, - &attestation_error, - ); - let projection_warnings = projection_outcome.warnings; - report.mutation_performed |= projection_outcome.wrote; - let projection = - cloud_adr::read_projection_state(&receipt.receipt_id, &adr_dir, &goal_dir); - let entry = &mut report.entries[entry_index]; - entry.attestation_error = Some(attestation_error); - entry.issues.push("provider-attestation-incomplete".into()); - if let Some(blocker) = - cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) - { - entry.issues.push(blocker.into()); - } - if !projection_warnings.is_empty() { - entry - .issues - .push("dynamic-projection-update-incomplete".into()); - } - entry.issues.extend( - projection_warnings - .into_iter() - .map(|warning| format!("projection-{warning}")), - ); - match projection { - Ok(Some(state)) => { - entry.goal_state = Some(state.goal_state); - entry.provider_sync_state = Some(state.provider_sync_state); - entry.eviction_permit = false; - entry.issues.push("projection-state-not-revalidated".into()); - if state.goal_state - == cloud_transfer::CloudOffloadGoalState::PendingProviderSync - { - report.pending_provider_sync_count = - report.pending_provider_sync_count.saturating_add(1); - } - } - Ok(None) => entry - .issues - .push("dynamic-projection-state-unavailable".into()), - Err(_) => entry - .issues - .push("dynamic-projection-state-unavailable".into()), - } - entry.adr_projection_state = Some( - projection_state( - &adr_dir.join(format!("{}-latest.json", receipt.receipt_id)), - "adr", - &receipt.receipt_id, - ) - .into(), - ); - entry.goal_projection_state = Some( - projection_state( - &goal_dir.join(format!("{}-latest.json", receipt.receipt_id)), - "goal", - &receipt.receipt_id, - ) - .into(), - ); - entry.goal_status = cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) - .ok() - .flatten(); - entry.evidence_record_count = - evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); - } + pub(super) fn run() -> Result<(), String> { + super::run() } } - report.incomplete_projection_count = report - .entries - .iter() - .filter(|entry| { - entry.adr_projection_state.as_deref() != Some("valid") - || entry.goal_projection_state.as_deref() != Some("valid") - }) - .count() as u64; - Ok(report) } #[cfg(not(coverage))] -fn evict_native_receipt( - path: &Path, - confirmation_receipt_id: &str, - eviction_dir: &Path, - approval_dir: &Path, - journal_path: &Path, - evidence_dir: &Path, - approved_by: &str, - rationale: &str, - provider_object_id: Option<&str>, - oauth_connections: Option<&Path>, - home: &Path, -) -> Result { - let receipt = cloud_transfer::read_immutable_receipt(path)?; - if confirmation_receipt_id != receipt.receipt_id { - return Err("eviction-confirmation-receipt-id-mismatch".into()); - } - let confirmed_at_ms = cloud::system_now_ms(); - let evidence = collect_receipt_sync_evidence( - &receipt, - provider_object_id, - oauth_connections, - home, - confirmed_at_ms, - false, - )?; - let (evidence_record, evidence_path) = - provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; - if let Some(blocker) = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) { - return Err(blocker.into()); - } - let permit = cloud_transfer::approve_local_eviction(&receipt, &evidence_record) - .map_err(|blockers| blockers.join(","))?; - let active_use_observed_at_ms = cloud::system_now_ms(); - let active_use = cloud_local_eviction::observe_path_active_use(Path::new(&receipt.source)); - let approved_at_ms = cloud::system_now_ms(); - let approval = cloud_eviction::create_source_eviction_approval( - &receipt, - &permit, - confirmation_receipt_id, - approved_at_ms, - approved_by, - rationale, - active_use_observed_at_ms, - active_use, - )?; - let approval_path = - cloud_eviction::write_immutable_source_eviction_approval(approval_dir, &approval)?; - let eviction = cloud_eviction::evict_source_with_human_approval( - &receipt, - &permit, - &approval, - confirmation_receipt_id, - eviction_dir, - journal_path, - cloud::system_now_ms(), - )?; - let goal_state = cloud_transfer::CloudOffloadGoalState::SourceEvicted; - let updated_at_ms = cloud::system_now_ms(); - let (adr_dir, goal_dir) = cloud_projection_dirs(evidence_dir); - let adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, updated_at_ms); - let goal = cloud_adr::goal_snapshot_from_evidence( - &receipt, - &evidence_record, - goal_state, - updated_at_ms, - ); - let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); - Ok(EvictionOutput { - action: "attest-and-trash-verified-cloud-source", - goal_state, - receipt_id: receipt.receipt_id, - evidence, - evidence_record, - evidence_path: evidence_path.to_string_lossy().into_owned(), - permit, - approval, - approval_path: approval_path.to_string_lossy().into_owned(), - eviction, - adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), - projection_warnings, - }) -} - -#[cfg(not(coverage))] -fn home_dir() -> Result { - std::env::var("HOME") - .or_else(|_| std::env::var("USERPROFILE")) - .map(PathBuf::from) - .map_err(|_| "HOME/USERPROFILE을 찾을 수 없음".into()) -} - -#[cfg(not(coverage))] -fn select_root(roots: &[CloudRoot], args: &Args) -> Result { - let matches: Vec<&CloudRoot> = roots - .iter() - .filter(|root| { - args.cloud_root - .as_ref() - .map(|path| cloud::cloud_root_path_matches(Path::new(&root.path), path)) - .unwrap_or(true) - && args.provider.map(|p| p == root.provider).unwrap_or(true) - }) - .collect(); - match matches.as_slice() { - [only] => Ok((*only).clone()), - [] => Err("조건과 일치하는 탐지된 클라우드 루트가 없음 (--list-roots로 확인)".into()), - _ => Err("클라우드 루트가 여러 개임; --cloud-root로 하나를 선택해야 함".into()), - } -} - -#[cfg(not(coverage))] -fn run() -> Result<(), String> { - let home = home_dir()?; - let raw: Vec = std::env::args().skip(1).collect(); - let args = parse_args(&raw, &home)?; - validate_action_args(&args)?; - if args.reconcile_receipts { - let report = reconcile_receipts( - args.receipt_dir - .as_deref() - .ok_or_else(|| "--reconcile-receipts에는 --receipt-dir이 필요함".to_string())?, - args.evidence_dir - .as_deref() - .ok_or_else(|| "--reconcile-receipts에는 --evidence-dir이 필요함".to_string())?, - args.provider_object_id.as_deref(), - args.oauth_connections.as_deref(), - &home, - cloud::system_now_ms(), - )?; - println!( - "{}", - serde_json::to_string_pretty(&report).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if args.audit_receipts { - let report = audit_receipts( - args.receipt_dir - .as_deref() - .ok_or_else(|| "--audit-receipts에는 --receipt-dir이 필요함".to_string())?, - args.evidence_dir.as_deref(), - cloud::system_now_ms(), - )?; - println!( - "{}", - serde_json::to_string_pretty(&report).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if let Some(receipt_path) = &args.export_naruon_lineage { - let receipt = cloud_transfer::read_immutable_receipt(receipt_path)?; - let evidence = args - .naruon_sync_evidence - .as_deref() - .map(provider_evidence::read_immutable_sync_evidence) - .transpose()?; - let envelope = naruon_lineage::export_naruon_file_lineage(&receipt, evidence.as_ref())?; - println!( - "{}", - serde_json::to_string_pretty(&envelope).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if let Some(receipt_path) = &args.evict_receipt { - let output = evict_native_receipt( - receipt_path, - args.confirm_receipt_id - .as_deref() - .ok_or_else(|| "--confirm-receipt-id가 필요함".to_string())?, - args.eviction_dir - .as_deref() - .ok_or_else(|| "--eviction-dir이 필요함".to_string())?, - args.eviction_approval_dir - .as_deref() - .ok_or_else(|| "--eviction-approval-dir이 필요함".to_string())?, - args.journal_path - .as_deref() - .ok_or_else(|| "--journal-path가 필요함".to_string())?, - args.evidence_dir - .as_deref() - .ok_or_else(|| "--evidence-dir이 필요함".to_string())?, - args.reviewed_by - .as_deref() - .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, - args.review_rationale - .as_deref() - .ok_or_else(|| "--review-rationale가 필요함".to_string())?, - args.provider_object_id.as_deref(), - args.oauth_connections.as_deref(), - &home, - )?; - println!( - "{}", - serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if let Some(receipt_path) = &args.attest_receipt { - println!( - "{}", - serde_json::to_string_pretty(&attest_receipt( - receipt_path, - args.evidence_dir - .as_deref() - .ok_or_else(|| "--evidence-dir이 필요함".to_string())?, - args.provider_object_id.as_deref(), - args.oauth_connections.as_deref(), - &home, - )?) - .map_err(|error| error.to_string())? - ); - return Ok(()); - } - let discovery = cloud::discover_cloud_roots_report(&home); - if args.inspect_roots { - println!( - "{}", - serde_json::to_string_pretty(&discovery).map_err(|e| e.to_string())? - ); - return Ok(()); - } - let roots = discovery.roots; - if args.list_roots { - println!( - "{}", - serde_json::to_string_pretty(&roots).map_err(|e| e.to_string())? - ); - return Ok(()); - } - cloud::validate_source_root_readable(&args.root)?; - let selected_roots = if args.all_readable_roots { - let selected = roots - .iter() - .filter(|root| root.readable) - .cloned() - .collect::>(); - if selected.is_empty() { - return Err("재검증할 수 있는 읽기 가능 클라우드 루트가 없음".into()); - } - selected - } else { - vec![select_root(&roots, &args)?] - }; - for selected in &selected_roots { - cloud::validate_cloud_root_readable(selected)?; - } - let excluded: Vec = roots.iter().map(|r| PathBuf::from(&r.path)).collect(); - if excluded - .iter() - .any(|cloud_root| args.root.starts_with(cloud_root)) - { - return Err("이미 클라우드 안에 있는 경로는 오프로드 원본으로 사용할 수 없음".into()); - } - let collection = cloud::collect_archive_files_bounded( - &args.root, - &excluded, - cloud::ARCHIVE_SCAN_MAX_ENTRIES, - cloud::ARCHIVE_SCAN_MAX_DURATION, - ); - let snapshot = cloud::prepare_cloud_archive_source_from_collection( - &collection, - &args.root, - cloud::system_now_ms(), - CloudPlanOptions { - min_size_bytes: args.min_size_mib.saturating_mul(1024 * 1024), - min_age_days: args.min_age_days, - limit: args.limit.clamp(1, 1_000), - }, - ); - if args.all_readable_roots { - let mut summaries = Vec::with_capacity(selected_roots.len()); - for selected in &selected_roots { - let (_, report) = plan_with_optional_capacity( - &snapshot, - selected, - args.verify_capacity, - args.oauth_connections.as_deref(), - args.capacity_reserve_mib, - &home, - )?; - summaries.push(match args.review_reason_set.as_deref() { - Some(reasons) => review_batch_summary(&report, reasons)?, - None => compact_decision_summary(&report), - }); - } - let capacity_notice = if args.verify_capacity { - "cloud-capacity-assessed-per-destination" - } else { - "cloud-capacity-unverified" - }; - let output = serde_json::json!({ - "schema_version": 3, - "output_mode": "multicloud-decision-summary", - "source_snapshot": { - "candidate_count": snapshot.candidate_count(), - "candidate_bytes": snapshot.candidate_bytes(), - "reused_for_destination_count": selected_roots.len(), - "content_metadata_probed_once": true, - "duplicate_content_hashed_once": true, - }, - "destinations": summaries, - "notices": [ - "dry-run-only", - "destination-state-revalidated-per-plan", - "source-stat-revalidated-per-plan", - capacity_notice, - "cloud-sync-unverified", - ], - }); - println!( - "{}", - serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? - ); - return Ok(()); - } - let selected = selected_roots - .into_iter() - .next() - .ok_or_else(|| "선택된 클라우드 루트가 없음".to_string())?; - let capacity_required_for_plan = args.verify_capacity - || args.copy_fingerprint.is_some() - || args.provider_api_copy_fingerprint.is_some(); - let (selected, report) = plan_with_optional_capacity( - &snapshot, - &selected, - capacity_required_for_plan, - args.oauth_connections.as_deref(), - args.capacity_reserve_mib, - &home, - )?; - if args.export_naruon_capacity { - let envelope = naruon_capacity::export_naruon_cloud_capacity_assessment(&report)?; - println!( - "{}", - serde_json::to_string_pretty(&envelope).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if args.export_naruon_copy_readiness { - let observed_at_ms = cloud::system_now_ms(); - let runtime = provider_client_runtime::collect_provider_client_runtime( - selected.provider, - observed_at_ms, - ); - let icloud_health = if selected.provider == CloudProvider::Icloud { - icloud_sync_health::inspect_new_copy_admission(&home, observed_at_ms).ok() - } else { - None - }; - let provider_global_sync = if selected.provider == CloudProvider::Icloud { - None - } else { - provider_global_sync::inspect_new_copy_admission(selected.provider).ok() - }; - let envelope = - naruon_cloud_copy_readiness::export_naruon_cloud_copy_readiness_with_global_sync( - &report, - &runtime, - icloud_health.as_ref(), - provider_global_sync.as_ref(), - )?; - if let Some(output_path) = &args.naruon_copy_readiness_output { - let value = serde_json::to_value(&envelope) - .map_err(|_| "naruon-copy-readiness-output-json-invalid".to_string())?; - write_private_review_dossier(output_path, &value)?; - } - println!( - "{}", - serde_json::to_string_pretty(&envelope).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if args.export_semantic_catalog { - let batch = semantic_catalog::export_semantic_catalog_candidate_batch(&report)?; - println!( - "{}", - serde_json::to_string_pretty(&batch).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if let (Some(redundant_prefix), Some(kind)) = ( - args.exact_duplicate_review_prefix.as_deref(), - args.exact_duplicate_kind, - ) { - let output = exact_duplicate_review_batch(&report, redundant_prefix, kind)?; - println!( - "{}", - serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? - ); - return Ok(()); - } - if let Some(candidate_fingerprint) = &args.review_candidate_fingerprint { - let review_fingerprint = args - .review_fingerprint - .as_deref() - .ok_or_else(|| "--review-fingerprint가 필요함".to_string())?; - let matches: Vec<_> = report - .candidates - .iter() - .filter(|candidate| { - candidate.metadata_fingerprint == *candidate_fingerprint - && candidate.review_fingerprint == review_fingerprint - }) - .collect(); - let candidate = match matches.as_slice() { - [only] => *only, - [] => return Err("현재 fresh plan에 review fingerprint가 일치하는 후보가 없음".into()), - _ => return Err("현재 fresh plan에서 review fingerprint가 중복됨".into()), - }; - let disposition = args - .review_disposition - .ok_or_else(|| "--review-disposition이 필요함".to_string())?; - let decision = cloud_review::create_attributed_decision( - candidate, - disposition, - cloud::system_now_ms(), - args.reviewed_by - .as_deref() - .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, - args.review_rationale - .as_deref() - .ok_or_else(|| "--review-rationale가 필요함".to_string())?, - )?; - let decision_path = cloud_review::write_immutable_decision( - args.review_dir - .as_deref() - .ok_or_else(|| "--review-dir이 필요함".to_string())?, - &decision, - )?; - println!( - "{}", - serde_json::to_string_pretty(&ReviewOutput { - action: "review", - decision, - decision_path: decision_path.to_string_lossy().into_owned(), - }) - .map_err(|error| error.to_string())? - ); - return Ok(()); - } - if let Some(candidate_fingerprint) = &args.provider_api_copy_fingerprint { - let matches: Vec<_> = report - .candidates - .iter() - .filter(|candidate| candidate.metadata_fingerprint == *candidate_fingerprint) - .collect(); - let candidate = match matches.as_slice() { - [only] => *only, - [] => return Err("현재 fresh plan에 fingerprint가 일치하는 후보가 없음".into()), - _ => return Err("현재 fresh plan에서 fingerprint가 중복됨".into()), - }; - let receipt_dir = args - .receipt_dir - .as_deref() - .ok_or_else(|| "--receipt-dir이 필요함".to_string())?; - let review_decision = if candidate.requires_review { - args.review_dir - .as_deref() - .map(cloud_review::load_latest_decisions) - .transpose()? - .unwrap_or_default() - .into_iter() - .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) - } else { - None - }; - let output = copy_candidate_via_provider_api( - candidate, - &selected, - &report, - receipt_dir, - review_decision.as_ref(), - args.confirm_copy_phrase - .as_deref() - .ok_or_else(|| "--confirm-copy-phrase가 필요함".to_string())?, - args.reviewed_by - .as_deref() - .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, - args.review_rationale - .as_deref() - .ok_or_else(|| "--review-rationale가 필요함".to_string())?, - args.oauth_connections - .as_deref() - .ok_or_else(|| "--oauth-connections가 필요함".to_string())?, - args.capacity_reserve_mib, - &home, - )?; - println!( - "{}", - serde_json::to_string_pretty(&output).map_err(|error| error.to_string())? - ); - return Ok(()); - } - let receipt_action = args - .copy_fingerprint - .as_ref() - .map(|fingerprint| (fingerprint, false)) - .or_else(|| { - args.adopt_existing_fingerprint - .as_ref() - .map(|fingerprint| (fingerprint, true)) - }); - if let Some((fingerprint, adopt_existing)) = receipt_action { - let matches: Vec<_> = report - .candidates - .iter() - .filter(|candidate| candidate.metadata_fingerprint == *fingerprint) - .collect(); - let candidate = match matches.as_slice() { - [only] => *only, - [] => return Err("현재 fresh plan에 fingerprint가 일치하는 후보가 없음".into()), - _ => return Err("현재 fresh plan에서 fingerprint가 중복됨".into()), - }; - let receipt_dir = args - .receipt_dir - .as_deref() - .ok_or_else(|| "--receipt-dir이 필요함".to_string())?; - let review_decision = if candidate.requires_review { - args.review_dir - .as_deref() - .map(cloud_review::load_latest_decisions) - .transpose()? - .unwrap_or_default() - .into_iter() - .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) - } else { - None - }; - let action = if adopt_existing { - cloud_transfer::CloudCopyApprovalAction::AdoptExistingCopy - } else { - cloud_transfer::CloudCopyApprovalAction::CopyOnly - }; - let action_at_ms = cloud::system_now_ms(); - let copy_approval = cloud_transfer::create_cloud_copy_approval( - candidate, - &selected, - action, - action_at_ms, - args.reviewed_by - .as_deref() - .ok_or_else(|| "--reviewed-by가 필요함".to_string())?, - args.review_rationale - .as_deref() - .ok_or_else(|| "--review-rationale가 필요함".to_string())?, - args.confirm_copy_phrase - .as_deref() - .ok_or_else(|| "--confirm-copy-phrase가 필요함".to_string())?, - )?; - if !adopt_existing { - provider_client_runtime::require_provider_client_runtime( - selected.provider, - cloud::system_now_ms(), - )?; - if selected.provider == CloudProvider::Icloud { - let health = - icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()) - .map_err(|_| "icloud-new-copy-admission-evidence-unavailable".to_string())?; - icloud_sync_health::require_new_copy_admission(&health)?; - } else { - let global_sync = - provider_global_sync::inspect_new_copy_admission(selected.provider) - .map_err(|_| "provider-global-sync-evidence-unavailable".to_string())?; - provider_global_sync::require_new_copy_admission(&global_sync)?; - } - let capacity_snapshot = report - .capacity - .as_ref() - .map(|assessment| assessment.snapshot.clone()) - .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; - let assessment = provider_capacity::assess_capacity( - capacity_snapshot, - candidate.bytes, - candidate.bytes, - args.capacity_reserve_mib.saturating_mul(1024 * 1024), - ); - if assessment.can_fit != Some(true) { - return Err(if assessment.blockers.is_empty() { - "cloud-capacity-verification-required".into() - } else { - assessment.blockers.join(",") - }); - } - } - let (receipt, receipt_path) = if adopt_existing { - cloud_transfer::adopt_existing_cloud_copy_with_approval( - candidate, - &selected, - receipt_dir, - review_decision.as_ref(), - ©_approval, - )? - } else { - cloud_transfer::prepare_cloud_copy_with_approval( - candidate, - &selected, - receipt_dir, - review_decision.as_ref(), - ©_approval, - )? - }; - let (adr_dir, goal_dir) = cloud_projection_dirs(receipt_dir); - let projection_updated_at_ms = cloud::system_now_ms(); - let adr = cloud_adr::initial_adr_snapshot(&receipt, projection_updated_at_ms); - let goal = cloud_adr::initial_goal_snapshot(&receipt, projection_updated_at_ms); - let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); - println!( - "{}", - serde_json::to_string_pretty(&CopyOutput { - action: if adopt_existing { - "adopt-existing-copy" - } else { - "copy-only" - }, - goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, - goal_status: cloud_adr::read_goal_status(&goal_dir, &receipt.receipt_id) - .ok() - .flatten(), - receipt, - receipt_path: receipt_path.to_string_lossy().into_owned(), - adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), - projection_warnings, - }) - .map_err(|error| error.to_string())? - ); - return Ok(()); +fn main() { + let raw = std::env::args_os().skip(1).collect::>(); + if raw.len() == 1 && matches!(raw[0].to_str(), Some("--help" | "-h")) { + println!("{}", implementation::entry::help_text()); + return; } - if args.decision_summary { - let mut summary = match args.review_reason_set.as_deref() { - Some(reasons) => review_batch_summary(&report, reasons)?, - None => decision_summary(&report), - }; - if let Some(output_path) = &args.private_candidate_inspection_output { - let dossier = private_candidate_inspection_dossier(&report); - let (sha256, bytes) = write_private_review_dossier(output_path, &dossier)?; - summary - .as_object_mut() - .ok_or_else(|| "decision summary JSON object가 아님".to_string())? - .insert( - "private_candidate_inspection_dossier".into(), - serde_json::json!({ - "written": true, - "bytes": bytes, - "sha256": sha256, - "unix_mode": "0600", - "create_new": true, - "contains_sensitive_local_metadata": true, - "includes_blocked_candidates": true, - "is_approval": false, - "cloud_write_executed": false, - "source_eviction_authorized": false, - }), - ); - } - if let Some(output_path) = &args.private_review_output { - let reasons = args - .review_reason_set - .as_deref() - .ok_or_else(|| "private review reason set이 없음".to_string())?; - let dossier = private_review_dossier(&report, reasons)?; - let (sha256, bytes) = write_private_review_dossier(output_path, &dossier)?; - summary - .as_object_mut() - .ok_or_else(|| "review summary JSON object가 아님".to_string())? - .insert( - "private_review_dossier".into(), - serde_json::json!({ - "written": true, - "bytes": bytes, - "sha256": sha256, - "unix_mode": "0600", - "create_new": true, - "contains_sensitive_local_metadata": true, - "is_approval": false, - }), - ); - } - println!( - "{}", - serde_json::to_string_pretty(&summary).map_err(|e| e.to_string())? - ); - } else { - println!( - "{}", - serde_json::to_string_pretty(&report).map_err(|e| e.to_string())? - ); + if raw.iter().any(|argument| argument.to_str().is_none()) { + eprintln!("DiskSage cloud planner: invalid-argument-encoding"); + std::process::exit(2); } - Ok(()) -} - -#[cfg(not(coverage))] -fn main() { - if let Err(error) = run() { + if let Err(error) = implementation::entry::run() { eprintln!("DiskSage cloud planner: {error}"); std::process::exit(2); } @@ -3755,1911 +41,3 @@ fn main() { #[cfg(coverage)] fn main() {} - -#[cfg(all(test, coverage))] -mod coverage_tests { - #[test] - fn noop_main_runs() { - super::main(); - } -} - -#[cfg(all(test, not(coverage)))] -mod tests { - use super::*; - - #[test] - fn parses_defaults_and_explicit_values() { - let defaults = parse_args(&[], Path::new("/home/test")).unwrap(); - assert_eq!(defaults.root, PathBuf::from("/home/test")); - assert_eq!(defaults.min_size_mib, 256); - assert!(defaults.copy_fingerprint.is_none()); - assert!(defaults.provider_api_copy_fingerprint.is_none()); - assert!(defaults.adopt_existing_fingerprint.is_none()); - assert!(defaults.provider_object_id.is_none()); - assert!(defaults.oauth_connections.is_none()); - assert!(defaults.evidence_dir.is_none()); - assert!(defaults.evict_receipt.is_none()); - assert!(defaults.eviction_approval_dir.is_none()); - assert!(defaults.review_candidate_fingerprint.is_none()); - assert!(defaults.reviewed_by.is_none()); - assert!(defaults.review_rationale.is_none()); - assert!(defaults.export_naruon_lineage.is_none()); - assert!(!defaults.export_naruon_capacity); - assert!(!defaults.export_naruon_copy_readiness); - assert!(defaults.naruon_copy_readiness_output.is_none()); - assert!(!defaults.export_semantic_catalog); - assert!(defaults.naruon_sync_evidence.is_none()); - assert!(!defaults.verify_capacity); - assert!(!defaults.decision_summary); - assert!(!defaults.all_readable_roots); - assert!(defaults.review_reason_set.is_none()); - assert!(defaults.private_review_output.is_none()); - assert!(defaults.private_candidate_inspection_output.is_none()); - assert!(defaults.exact_duplicate_review_prefix.is_none()); - assert!(defaults.exact_duplicate_kind.is_none()); - assert!(!defaults.audit_receipts); - assert_eq!(defaults.capacity_reserve_mib, 1024); - let args = vec![ - "--root".into(), - "/scan".into(), - "--provider".into(), - "icloud".into(), - "--min-size-mib".into(), - "1".into(), - "--min-age-days".into(), - "2".into(), - "--limit".into(), - "3".into(), - "--decision-summary".into(), - "--review-reason-set".into(), - "metadata-review-required|download-origin-needs-destination-review".into(), - "--private-review-output".into(), - "/private-review.json".into(), - "--verify-capacity".into(), - "--capacity-reserve-mib".into(), - "2048".into(), - ]; - let parsed = parse_args(&args, Path::new("/home/test")).unwrap(); - assert_eq!(parsed.root, PathBuf::from("/scan")); - assert_eq!(parsed.provider, Some(CloudProvider::Icloud)); - assert_eq!( - (parsed.min_size_mib, parsed.min_age_days, parsed.limit), - (1, 2, 3) - ); - assert!(parsed.verify_capacity); - assert!(parsed.decision_summary); - assert_eq!( - parsed.review_reason_set, - Some(vec![ - "download-origin-needs-destination-review".into(), - "metadata-review-required".into(), - ]) - ); - assert_eq!( - parsed.private_review_output, - Some(PathBuf::from("/private-review.json")) - ); - assert_eq!(parsed.capacity_reserve_mib, 2048); - - let inspection = parse_args( - &[ - "--decision-summary".into(), - "--private-candidate-inspection-output".into(), - "/private-inspection.json".into(), - ], - Path::new("/home/test"), - ) - .unwrap(); - assert_eq!( - inspection.private_candidate_inspection_output, - Some(PathBuf::from("/private-inspection.json")) - ); - assert!(validate_action_args(&inspection).is_ok()); - - let duplicate_review = parse_args( - &[ - "--exact-duplicate-review-prefix".into(), - "smart_bundle_".into(), - "--exact-duplicate-kind".into(), - "document".into(), - ], - Path::new("/home/test"), - ) - .unwrap(); - assert_eq!( - duplicate_review.exact_duplicate_review_prefix.as_deref(), - Some("smart_bundle_") - ); - assert_eq!( - duplicate_review.exact_duplicate_kind, - Some(ArchiveKind::Document) - ); - assert!(validate_action_args(&duplicate_review).is_ok()); - } - - #[test] - fn receipt_audit_requires_only_a_receipt_directory_and_is_read_only() { - let audit = parse_args( - &[ - "--audit-receipts".into(), - "--receipt-dir".into(), - "/app/cloud-receipts".into(), - ], - Path::new("/home/test"), - ) - .unwrap(); - assert!(audit.audit_receipts); - assert!(validate_action_args(&audit).is_ok()); - - let audit_with_external_evidence = parse_args( - &[ - "--audit-receipts".into(), - "--receipt-dir".into(), - "/receipts".into(), - "--evidence-dir".into(), - "/provider-evidence".into(), - ], - Path::new("/home/test"), - ) - .unwrap(); - assert!(validate_action_args(&audit_with_external_evidence).is_ok()); - - let missing_directory = - parse_args(&["--audit-receipts".into()], Path::new("/home/test")).unwrap(); - assert!(validate_action_args(&missing_directory).is_err()); - } - - #[test] - fn receipt_reconciliation_requires_local_evidence_and_is_distinct_from_audit() { - let reconcile = parse_args( - &[ - "--reconcile-receipts".into(), - "--receipt-dir".into(), - "/app/cloud-receipts".into(), - "--evidence-dir".into(), - "/app/cloud-provider-evidence".into(), - ], - Path::new("/home/test"), - ) - .unwrap(); - assert!(reconcile.reconcile_receipts); - assert!(!reconcile.audit_receipts); - assert!(validate_action_args(&reconcile).is_ok()); - - let missing_evidence = parse_args( - &[ - "--reconcile-receipts".into(), - "--receipt-dir".into(), - "/receipts".into(), - ], - Path::new("/home/test"), - ) - .unwrap(); - assert!(validate_action_args(&missing_evidence).is_err()); - } - - #[test] - fn empty_receipt_reconciliation_does_not_claim_a_cloud_mutation() { - let temp = tempfile::tempdir().unwrap(); - let receipt_dir = temp.path().join("receipts"); - let evidence_dir = temp.path().join("evidence"); - std::fs::create_dir_all(&receipt_dir).unwrap(); - let report = - reconcile_receipts(&receipt_dir, &evidence_dir, None, None, temp.path(), 10).unwrap(); - assert_eq!(report.attestation_attempted_count, 0); - assert!(!report.mutation_performed); - assert!(!report.cloud_write_executed); - assert!(!report.source_eviction_authorized); - } - - #[cfg(not(coverage))] - #[test] - fn headless_reconciliation_reports_receipts_left_after_entry_budget() { - let temp = tempfile::tempdir().unwrap(); - let receipt_dir = temp.path().join("receipts"); - let evidence_dir = temp.path().join("evidence"); - std::fs::create_dir_all(&receipt_dir).unwrap(); - for index in 0..=MAX_RECONCILIATION_ATTESTATIONS { - std::fs::write(receipt_dir.join(format!("{index:04}.json")), b"{}").unwrap(); - } - - let report = - reconcile_receipts(&receipt_dir, &evidence_dir, None, None, temp.path(), 10).unwrap(); - assert_eq!( - report.unprocessed_count, - (receipt_dir.read_dir().unwrap().count() - MAX_RECONCILIATION_ATTESTATIONS) as u64 - ); - assert!(report.incomplete_reconciliation); - assert!(report.notices.contains(&"reconciliation-entry-limit")); - } - - #[test] - fn receipt_audit_counts_legacy_evidence_without_double_counting() { - let temp = tempfile::tempdir().unwrap(); - let receipt_dir = temp.path().join("cloud-receipts"); - let provider_dir = temp.path().join("cloud-provider-evidence"); - let legacy_dir = temp.path().join("cloud-sync-evidence"); - std::fs::create_dir_all(&receipt_dir).unwrap(); - std::fs::create_dir_all(&provider_dir).unwrap(); - std::fs::create_dir_all(&legacy_dir).unwrap(); - std::fs::write(provider_dir.join("abc-1.json"), b"provider").unwrap(); - std::fs::write(legacy_dir.join("abc-1.json"), b"legacy-copy").unwrap(); - std::fs::write(legacy_dir.join("abc-2.json"), b"legacy").unwrap(); - - let dirs = audit_evidence_dirs(&receipt_dir, None); - assert_eq!(evidence_record_count(&dirs, "abc"), 2); - assert_eq!( - audit_evidence_dirs(&receipt_dir, Some(&legacy_dir)), - vec![legacy_dir] - ); - } - - #[test] - fn receipt_audit_rejects_unbound_or_outdated_projections() { - let temp = tempfile::tempdir().unwrap(); - let path = temp.path().join("projection.json"); - let receipt_id = "a".repeat(64); - let snapshot = cloud_adr::CloudOffloadAdrSnapshot { - schema_version: cloud_adr::CLOUD_ADR_SCHEMA_VERSION, - adr_id: format!("cloud-offload:{receipt_id}"), - receipt_id: receipt_id.clone(), - goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, - provider_sync_state: cloud_transfer::ProviderSyncState::Unknown, - sync_complete: false, - decision: "retain-source-after-copy".into(), - consequences: vec!["source-retained".into()], - evidence_record_id: None, - updated_at_ms: 1, - }; - std::fs::write(&path, serde_json::to_vec(&snapshot).unwrap()).unwrap(); - assert_eq!(projection_state(&path, "adr", &receipt_id), "valid"); - - let mut unbound = snapshot.clone(); - unbound.receipt_id = "b".repeat(64); - std::fs::write(&path, serde_json::to_vec(&unbound).unwrap()).unwrap(); - assert_eq!( - projection_state(&path, "adr", &receipt_id), - "invalid-binding" - ); - - let mut outdated = snapshot; - outdated.schema_version = 1; - std::fs::write(&path, serde_json::to_vec(&outdated).unwrap()).unwrap(); - assert_eq!( - projection_state(&path, "adr", &receipt_id), - "invalid-schema" - ); - } - - #[test] - fn all_readable_roots_is_dry_run_summary_with_optional_capacity() { - let valid = parse_args( - &["--all-readable-roots".into(), "--decision-summary".into()], - Path::new("/h"), - ) - .unwrap(); - assert!(valid.all_readable_roots); - assert!(validate_action_args(&valid).is_ok()); - - let missing_summary = - parse_args(&["--all-readable-roots".into()], Path::new("/h")).unwrap(); - assert!(validate_action_args(&missing_summary).is_err()); - let scoped = parse_args( - &[ - "--all-readable-roots".into(), - "--decision-summary".into(), - "--provider".into(), - "icloud".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&scoped).is_err()); - let capacity = parse_args( - &[ - "--all-readable-roots".into(), - "--decision-summary".into(), - "--verify-capacity".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(capacity.verify_capacity); - assert!(validate_action_args(&capacity).is_ok()); - } - - #[test] - fn parser_and_selector_reject_ambiguous_or_invalid_input() { - assert!(parse_args(&["--wat".into()], Path::new("/h")).is_err()); - assert!(parse_args(&["--provider".into(), "box".into()], Path::new("/h")).is_err()); - assert!(parse_args(&["--limit".into(), "x".into()], Path::new("/h")).is_err()); - assert!(parse_args( - &["--capacity-reserve-mib".into(), "x".into()], - Path::new("/h") - ) - .is_err()); - assert!(parse_args(&["--root".into()], Path::new("/h")).is_err()); - for reason_set in [ - "", - "duplicate|duplicate", - "Uppercase-not-allowed", - "contains_space", - "destination-account-scope-unknown|", - ] { - assert!(parse_args( - &[ - "--decision-summary".into(), - "--review-reason-set".into(), - reason_set.into(), - ], - Path::new("/h"), - ) - .is_err()); - } - assert!(parse_args( - &[ - "--review-reason-set".into(), - "first-reason".into(), - "--review-reason-set".into(), - "second-reason".into(), - ], - Path::new("/h"), - ) - .is_err()); - let inspect = parse_args(&["--inspect-roots".into()], Path::new("/h")).unwrap(); - assert!(inspect.inspect_roots); - let both = parse_args( - &["--list-roots".into(), "--inspect-roots".into()], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&both).is_err()); - let summary_action = parse_args( - &["--decision-summary".into(), "--list-roots".into()], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&summary_action).is_err()); - let reason_set_without_summary = parse_args( - &[ - "--review-reason-set".into(), - "destination-account-scope-unknown".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&reason_set_without_summary).is_err()); - let reason_set_summary = parse_args( - &[ - "--decision-summary".into(), - "--review-reason-set".into(), - "destination-account-scope-unknown".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&reason_set_summary).is_ok()); - let private_review = parse_args( - &[ - "--decision-summary".into(), - "--review-reason-set".into(), - "destination-account-scope-unknown".into(), - "--private-review-output".into(), - "/private/review.json".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&private_review).is_ok()); - let mut relative_private_review = private_review.clone(); - relative_private_review.private_review_output = Some(PathBuf::from("review.json")); - assert!(validate_action_args(&relative_private_review).is_err()); - let mut missing_reason_set = private_review.clone(); - missing_reason_set.review_reason_set = None; - assert!(validate_action_args(&missing_reason_set).is_err()); - let mut multicloud_private_review = private_review; - multicloud_private_review.all_readable_roots = true; - assert!(validate_action_args(&multicloud_private_review).is_err()); - let private_inspection = parse_args( - &[ - "--decision-summary".into(), - "--private-candidate-inspection-output".into(), - "/private/inspection.json".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&private_inspection).is_ok()); - let mut missing_inspection_summary = private_inspection.clone(); - missing_inspection_summary.decision_summary = false; - assert!(validate_action_args(&missing_inspection_summary).is_err()); - let mut relative_private_inspection = private_inspection.clone(); - relative_private_inspection.private_candidate_inspection_output = - Some(PathBuf::from("inspection.json")); - assert!(validate_action_args(&relative_private_inspection).is_err()); - let mut exact_subset_conflict = private_inspection.clone(); - exact_subset_conflict.review_reason_set = - Some(vec!["destination-account-scope-unknown".into()]); - assert!(validate_action_args(&exact_subset_conflict).is_err()); - let mut multicloud_private_inspection = private_inspection; - multicloud_private_inspection.all_readable_roots = true; - assert!(validate_action_args(&multicloud_private_inspection).is_err()); - for prefix in ["", ".", "..", "nested/path", "nested\\path", "line\nbreak"] { - assert!(parse_args( - &[ - "--exact-duplicate-review-prefix".into(), - prefix.into(), - "--exact-duplicate-kind".into(), - "document".into(), - ], - Path::new("/h"), - ) - .is_err()); - } - assert!(parse_args( - &[ - "--exact-duplicate-review-prefix".into(), - "bundle_".into(), - "--exact-duplicate-kind".into(), - "unknown".into(), - ], - Path::new("/h"), - ) - .is_err()); - let missing_duplicate_kind = parse_args( - &["--exact-duplicate-review-prefix".into(), "bundle_".into()], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&missing_duplicate_kind).is_err()); - let duplicate_summary_conflict = parse_args( - &[ - "--exact-duplicate-review-prefix".into(), - "bundle_".into(), - "--exact-duplicate-kind".into(), - "document".into(), - "--decision-summary".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&duplicate_summary_conflict).is_err()); - let roots = vec![ - CloudRoot { - id: "/a".into(), - provider: CloudProvider::Icloud, - account_scope: disksage_lib::cloud::CloudAccountScope::Unknown, - label: "a".into(), - path: "/a".into(), - readable: true, - access_issue: None, - }, - CloudRoot { - id: "/b".into(), - provider: CloudProvider::Icloud, - account_scope: disksage_lib::cloud::CloudAccountScope::Unknown, - label: "b".into(), - path: "/b".into(), - readable: true, - access_issue: None, - }, - ]; - let mut args = parse_args(&[], Path::new("/h")).unwrap(); - assert!(select_root(&roots, &args).is_err()); - args.cloud_root = Some(PathBuf::from("/b")); - assert_eq!(select_root(&roots, &args).unwrap().path, "/b"); - args.cloud_root = Some(PathBuf::from("/missing")); - assert!(select_root(&roots, &args).is_err()); - } - - #[test] - fn selector_accepts_canonically_equivalent_unicode_path_and_fails_ambiguous() { - let decomposed = "/cloud/GoogleDrive-user/\u{1102}\u{1162} \u{1103}\u{1173}\u{1105}\u{1161}\u{110b}\u{1175}\u{1107}\u{1173}"; - let composed = "/cloud/GoogleDrive-user/내 드라이브"; - let root = CloudRoot { - id: decomposed.into(), - provider: CloudProvider::GoogleDrive, - account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - label: "Google Drive".into(), - path: decomposed.into(), - readable: true, - access_issue: None, - }; - let mut args = parse_args(&[], Path::new("/home/test")).unwrap(); - args.cloud_root = Some(PathBuf::from(composed)); - - assert_eq!(select_root(&[root.clone()], &args).unwrap(), root); - - let canonically_equivalent_duplicate = CloudRoot { - id: composed.into(), - path: composed.into(), - ..root.clone() - }; - assert!(select_root(&[root, canonically_equivalent_duplicate], &args).is_err()); - } - - #[test] - fn decision_summary_keeps_review_evidence_and_redacts_paths_and_sensitive_values() { - let candidate = cloud::CloudCandidate { - metadata_fingerprint: "a".repeat(64), - review_fingerprint: "b".repeat(64), - src: "/Users/private/Downloads/report.pdf".into(), - dst: "/Users/private/Cloud/report.pdf".into(), - provider: CloudProvider::Icloud, - destination_account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - kind: cloud::ArchiveKind::Document, - bytes: 42, - age_days: 7, - created_ms: 10, - modified_ms: 20, - production_time_ms: 5, - production_time_source: "embedded-pdf-creation-date".into(), - production_time_confidence: "high".into(), - source_root: "/Users/private/Downloads".into(), - relative_path: "report.pdf".into(), - source_context: "Downloads".into(), - requires_review: true, - review_reasons: vec![ - "download-origin-needs-destination-review".into(), - "metadata-review-required".into(), - ], - content_title: Some("Confidential title".into()), - content_authors: vec!["Private Author".into()], - content_context: vec!["private context".into()], - duration_ms: None, - dataset_profile: None, - metadata_evidence: vec![cloud::MetadataEvidence { - field: "creation-date".into(), - value: "private raw value".into(), - source: "pdf-info".into(), - confidence: "high".into(), - }], - blocked_reason: None, - }; - let mut report = cloud::CloudPlanReport { - cloud_root: CloudRoot { - id: "/Users/private/Cloud".into(), - provider: CloudProvider::Icloud, - account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - label: "private@example.com".into(), - path: "/Users/private/Cloud".into(), - readable: true, - access_issue: None, - }, - generated_at_ms: 100, - source_selection_policy: Some(cloud::CloudPlanOptions { - min_size_bytes: 90 * 1024 * 1024, - min_age_days: 30, - limit: 200, - }), - candidates: vec![candidate], - candidate_bytes: 42, - potentially_reclaimable_bytes: 42, - exact_duplicates: cloud::ExactDuplicateSummary::default(), - capacity: None, - local_volume: None, - notices: vec!["dry-run-only".into()], - }; - - let summary = decision_summary(&report); - let item = &summary["decisions"][0]; - assert_eq!(summary["output_mode"], "decision-summary"); - assert_eq!(summary["schema_version"], 3); - assert!(summary["redacted_from_summary"] - .as_array() - .unwrap() - .contains(&serde_json::json!("relative-source-path-and-file-name"))); - assert_eq!(summary["candidate_count"], 1); - assert_eq!( - summary["source_selection_policy"]["min_size_bytes"], - 90 * 1024 * 1024 - ); - assert_eq!(summary["source_selection_policy"]["min_age_days"], 30); - assert_eq!(summary["source_selection_policy"]["limit"], 200); - assert_eq!( - summary["decision_batch_fingerprint_version"], - cloud::CLOUD_DECISION_BATCH_FINGERPRINT_VERSION - ); - assert_eq!( - summary["decision_batch_fingerprint"] - .as_str() - .unwrap() - .len(), - 64 - ); - assert!(item.get("relative_path").is_none()); - assert_eq!(item["decision_state"], "review-required"); - assert_eq!(item["copy_approval_action"], "copy-only"); - assert_eq!( - item["exact_copy_approval_phrase"], - format!( - "DiskSage cloud copy-only {} 승인", - item["review_fingerprint"].as_str().unwrap() - ) - ); - assert_eq!(item["copy_approval_max_age_ms"], 15 * 60 * 1000); - let mut destination_exists = report.candidates[0].clone(); - destination_exists.blocked_reason = Some("destination-exists".into()); - let adoption = redacted_decision(&destination_exists); - assert_eq!(adoption["copy_approval_action"], "adopt-existing-copy"); - assert_eq!( - adoption["exact_copy_approval_phrase"], - format!( - "DiskSage cloud adopt-existing-copy {} 승인", - adoption["review_fingerprint"].as_str().unwrap() - ) - ); - - destination_exists.blocked_reason = Some("incomplete-download".into()); - let ineligible = redacted_decision(&destination_exists); - assert!(ineligible["copy_approval_action"].is_null()); - assert!(ineligible["exact_copy_approval_phrase"].is_null()); - assert_eq!( - summary["aggregates"]["decision_state"]["counts"]["review-required"], - 1 - ); - assert_eq!( - summary["aggregates"]["decision_state"]["candidate_bytes"]["review-required"], - 42 - ); - assert_eq!( - summary["aggregates"]["review_required_reason"]["counts"]["metadata-review-required"], - 1 - ); - assert_eq!( - summary["aggregates"]["review_required_reason"]["candidate_bytes"] - ["download-origin-needs-destination-review"], - 42 - ); - assert_eq!( - summary["aggregates"]["review_required_reason"] - ["candidate_bytes_can_overlap_across_reasons"], - true - ); - assert!( - summary["aggregates"]["review_required_reason"]["sole_reason_counts"] - ["metadata-review-required"] - .is_null() - ); - assert_eq!( - summary["aggregates"]["review_required_reason"]["reason_count_distribution"]["2"], - 1 - ); - assert_eq!( - summary["aggregates"]["review_required_reason"]["reason_set_counts"] - ["download-origin-needs-destination-review|metadata-review-required"], - 1 - ); - assert_eq!( - summary["aggregates"]["review_required_reason"]["reason_set_delimiter"], - "|" - ); - assert_eq!( - summary["aggregates"]["production_time_source"]["counts"]["embedded-pdf-creation-date"], - 1 - ); - assert_eq!( - summary["aggregates"]["production_time_confidence"]["counts"]["high"], - 1 - ); - assert!(item.get("src").is_none()); - assert!(item.get("dst").is_none()); - assert!(item.get("metadata_evidence").is_none()); - - let encoded = serde_json::to_string(&summary).unwrap(); - for redacted in [ - "/Users/private", - "private@example.com", - "Confidential title", - "Private Author", - "private raw value", - "report.pdf", - ] { - assert!(!encoded.contains(redacted)); - } - - let mut compact_report = report.clone(); - compact_report.exact_duplicates = cloud::ExactDuplicateSummary { - cluster_count: 1, - candidate_count: 2, - candidate_bytes: 84, - redundant_bytes: 42, - clusters: vec![cloud::ExactDuplicateClusterRecommendation { - cluster_fingerprint: "c".repeat(64), - candidate_count: 2, - bytes_per_candidate: 42, - redundant_bytes: 42, - recommended_canonical_metadata_fingerprint: "d".repeat(64), - recommendation_confidence: "high".into(), - recommendation_reason_codes: vec!["richer-source-lineage-context-preferred".into()], - member_metadata_fingerprints: vec!["d".repeat(64), "e".repeat(64)], - requires_human_confirmation: true, - }], - }; - let compact = compact_decision_summary(&compact_report); - assert_eq!(compact["output_mode"], "compact-decision-summary"); - assert_eq!(compact["schema_version"], 3); - assert_eq!(compact["candidate_details_included"], false); - assert_eq!(compact["cloud_write_executed"], false); - assert_eq!(compact["source_eviction_authorized"], false); - assert_eq!( - compact["metadata_policy"]["exact_human_attributed_copy_approval_required"], - true - ); - assert_eq!(compact["exact_duplicates"]["cluster_count"], 1); - assert_eq!(compact["exact_duplicates"]["redundant_bytes"], 42); - assert_eq!(compact["exact_duplicates"]["cluster_members_omitted"], true); - assert_eq!( - compact["organization_manifest"]["candidate_groups"]["archive_kind"]["counts"] - ["document"], - 1 - ); - assert_eq!( - compact["organization_manifest"]["candidate_groups"]["production_month"]["counts"] - ["1970-01"], - 1 - ); - assert_eq!( - compact["organization_manifest"]["context_evidence_coverage"]["counts"] - ["content-context-present"], - 1 - ); - assert_eq!( - compact["organization_manifest"]["context_evidence_coverage"]["counts"] - ["nested-source-context-preserved"], - 1 - ); - assert_eq!( - compact["organization_manifest"]["destination_collision_preflight"]["counts"], - 0 - ); - assert_eq!( - compact["organization_manifest"]["source_relative_path_preserved_for_lineage"], - true - ); - assert!(compact.get("decisions").is_none()); - assert!(compact["exact_duplicates"].get("clusters").is_none()); - assert!(compact["aggregates"]["review_required_reason"] - .get("reason_set_counts") - .is_none()); - assert_eq!( - compact["aggregates"]["review_required_reason"]["counts"]["metadata-review-required"], - 1 - ); - assert_eq!( - compact["decision_batch_fingerprint"], - cloud::cloud_decision_batch_fingerprint(&compact_report) - ); - let encoded_compact = serde_json::to_string(&compact).unwrap(); - for redacted in [ - "/Users/private".to_string(), - "private@example.com".to_string(), - "Confidential title".to_string(), - "Private Author".to_string(), - "private raw value".to_string(), - "report.pdf".to_string(), - "c".repeat(64), - "d".repeat(64), - "e".repeat(64), - ] { - assert!(!encoded_compact.contains(&redacted)); - } - - let reason_set = report.candidates[0].review_reasons.clone(); - let review_batch = review_batch_summary(&report, &reason_set).unwrap(); - assert_eq!(review_batch["output_mode"], "review-batch-summary"); - assert_eq!(review_batch["schema_version"], 3); - assert!(review_batch["redacted_from_summary"] - .as_array() - .unwrap() - .contains(&serde_json::json!("relative-source-path-and-file-name"))); - assert_eq!(review_batch["candidate_count"], 1); - assert_eq!(review_batch["candidate_bytes"], 42); - assert_eq!(review_batch["reason_set"], serde_json::json!(reason_set)); - assert!(review_batch["decisions"][0].get("relative_path").is_none()); - assert!(!serde_json::to_string(&review_batch) - .unwrap() - .contains("report.pdf")); - assert_eq!( - review_batch["review_batch_fingerprint"] - .as_str() - .unwrap() - .len(), - 64 - ); - assert_eq!( - review_batch["metadata_policy"]["batch_fingerprint_is_not_approval"], - true - ); - assert_eq!( - review_batch["metadata_policy"]["candidate_review_decisions_remain_individual"], - true - ); - assert_eq!( - review_batch_summary(&report, &report.candidates[0].review_reasons).unwrap() - ["review_batch_fingerprint"], - review_batch["review_batch_fingerprint"] - ); - let mut unrelated_changed = report.clone(); - let mut unrelated = unrelated_changed.candidates[0].clone(); - unrelated.metadata_fingerprint = "c".repeat(64); - unrelated.review_fingerprint = "d".repeat(64); - unrelated.relative_path = "other.pdf".into(); - unrelated.src = "/Users/private/Downloads/other.pdf".into(); - unrelated.dst = "/Users/private/Cloud/other.pdf".into(); - unrelated.bytes = 9; - unrelated.review_reasons = vec!["different-reason".into()]; - unrelated_changed.candidates.push(unrelated); - unrelated_changed.candidate_bytes += 9; - unrelated_changed.potentially_reclaimable_bytes += 9; - let unrelated_batch = review_batch_summary(&unrelated_changed, &reason_set).unwrap(); - assert_ne!( - unrelated_batch["decision_batch_fingerprint"], - review_batch["decision_batch_fingerprint"] - ); - assert_eq!( - unrelated_batch["review_batch_fingerprint"], - review_batch["review_batch_fingerprint"] - ); - - let mut selected_changed = report.clone(); - selected_changed.candidates[0].review_fingerprint = "e".repeat(64); - assert_ne!( - review_batch_summary(&selected_changed, &reason_set).unwrap() - ["review_batch_fingerprint"], - review_batch["review_batch_fingerprint"] - ); - let encoded_batch = serde_json::to_string(&review_batch).unwrap(); - for redacted in [ - "/Users/private", - "private@example.com", - "Confidential title", - "Private Author", - "private raw value", - ] { - assert!(!encoded_batch.contains(redacted)); - } - assert!(review_batch_summary(&report, &["not-present".into()]).is_err()); - - let dossier = private_review_dossier(&report, &reason_set).unwrap(); - assert_eq!(dossier["output_mode"], "private-review-dossier"); - assert_eq!( - dossier["review_batch_fingerprint"], - review_batch["review_batch_fingerprint"] - ); - assert_eq!(dossier["candidate_count"], 1); - assert_eq!(dossier["candidate_bytes"], 42); - assert_eq!( - dossier["metadata_policy"]["filename_dates_are_auxiliary"], - true - ); - assert_eq!( - dossier["metadata_policy"]["candidate_review_decisions_remain_individual"], - true - ); - let encoded_dossier = serde_json::to_string(&dossier).unwrap(); - for private_value in [ - "/Users/private", - "private@example.com", - "Confidential title", - "Private Author", - "private raw value", - ] { - assert!(encoded_dossier.contains(private_value)); - } - - let mut inspection_report = report.clone(); - let mut blocked = inspection_report.candidates[0].clone(); - blocked.metadata_fingerprint = "1".repeat(64); - blocked.review_fingerprint = "2".repeat(64); - blocked.relative_path = "blocked-private.zip".into(); - blocked.src = "/Users/private/Downloads/blocked-private.zip".into(); - blocked.dst = "/Users/private/Cloud/blocked-private.zip".into(); - blocked.blocked_reason = Some("opaque-container-content-uninspected".into()); - inspection_report.candidates.push(blocked); - inspection_report.candidate_bytes = 84; - let inspection = private_candidate_inspection_dossier(&inspection_report); - assert_eq!( - inspection["output_mode"], - "private-candidate-inspection-dossier" - ); - assert_eq!( - inspection["inspection_scope"], - "all-current-plan-candidates" - ); - assert_eq!(inspection["candidate_count"], 2); - assert_eq!(inspection["candidate_bytes"], 84); - assert_eq!(inspection["decision_state"]["counts"]["blocked"], 1); - assert_eq!(inspection["decision_state"]["counts"]["review-required"], 1); - assert_eq!( - inspection["metadata_policy"]["inspection_includes_blocked_candidates"], - true - ); - assert_eq!( - inspection["metadata_policy"]["dossier_is_not_approval"], - true - ); - assert_eq!(inspection["cloud_write_executed"], false); - assert_eq!(inspection["source_eviction_authorized"], false); - assert!(inspection["candidates"] - .as_array() - .unwrap() - .iter() - .any(|candidate| { - candidate["decision_state"] == "blocked" - && candidate["relative_path"] == "blocked-private.zip" - })); - - #[cfg(unix)] - { - use std::os::unix::fs::PermissionsExt; - let private_dir = tempfile::tempdir().unwrap(); - let private_path = private_dir.path().join("review.json"); - let (sha256, bytes) = write_private_review_dossier(&private_path, &dossier).unwrap(); - assert_eq!(sha256.len(), 64); - assert!(bytes > 0); - assert_eq!(std::fs::read(&private_path).unwrap().len(), bytes); - assert!(write_private_review_dossier(&private_path, &dossier).is_err()); - assert_eq!( - std::fs::metadata(&private_path) - .unwrap() - .permissions() - .mode() - & 0o777, - 0o600 - ); - } - - let mut mixed = report.clone(); - let mut ready = mixed.candidates[0].clone(); - ready.metadata_fingerprint = "c".repeat(64); - ready.review_fingerprint = "d".repeat(64); - ready.bytes = 10; - ready.requires_review = false; - ready.review_reasons.clear(); - ready.production_time_source = "filename:path-token".into(); - ready.production_time_confidence = "low".into(); - let mut blocked = mixed.candidates[0].clone(); - blocked.metadata_fingerprint = "e".repeat(64); - blocked.review_fingerprint = "f".repeat(64); - blocked.bytes = 7; - blocked.blocked_reason = Some("incomplete-download".into()); - mixed.candidates.extend([ready, blocked]); - let aggregates = decision_aggregates(&mixed); - assert_eq!(aggregates["decision_state"]["counts"]["review-required"], 1); - assert_eq!( - aggregates["decision_state"]["counts"]["ready-for-copy-review"], - 1 - ); - assert_eq!(aggregates["decision_state"]["counts"]["blocked"], 1); - assert_eq!( - aggregates["blocked_reason"]["counts"]["incomplete-download"], - 1 - ); - assert_eq!( - aggregates["review_required_reason"]["counts"]["metadata-review-required"], - 1 - ); - assert_eq!( - aggregates["production_time_source"]["counts"]["filename:path-token"], - 1 - ); - - let mut sole_reason = report.clone(); - sole_reason.candidates[0].review_reasons = vec!["destination-account-scope-unknown".into()]; - let sole_reason_aggregates = decision_aggregates(&sole_reason); - assert_eq!( - sole_reason_aggregates["review_required_reason"]["sole_reason_counts"] - ["destination-account-scope-unknown"], - 1 - ); - assert_eq!( - sole_reason_aggregates["review_required_reason"]["sole_reason_candidate_bytes"] - ["destination-account-scope-unknown"], - 42 - ); - - let original_batch = cloud::cloud_decision_batch_fingerprint(&report); - let mut volatile_changed = report.clone(); - volatile_changed.generated_at_ms += 1; - volatile_changed - .notices - .push("fresh-capacity-required".into()); - assert_eq!( - cloud::cloud_decision_batch_fingerprint(&volatile_changed), - original_batch - ); - assert_eq!( - review_batch_summary(&volatile_changed, &reason_set).unwrap() - ["review_batch_fingerprint"], - review_batch["review_batch_fingerprint"] - ); - - let mut evidence_changed = report.clone(); - evidence_changed.candidates[0].review_fingerprint = "c".repeat(64); - assert_ne!( - cloud::cloud_decision_batch_fingerprint(&evidence_changed), - original_batch - ); - - let mut selection_changed = report.clone(); - selection_changed - .source_selection_policy - .as_mut() - .unwrap() - .min_size_bytes += 1; - assert_ne!( - cloud::cloud_decision_batch_fingerprint(&selection_changed), - original_batch - ); - - let mut blocker_changed = report.clone(); - blocker_changed.candidates[0].blocked_reason = Some("destination-exists".into()); - blocker_changed.potentially_reclaimable_bytes = 0; - assert_ne!( - cloud::cloud_decision_batch_fingerprint(&blocker_changed), - original_batch - ); - - let mut reordered = report.clone(); - let mut second = reordered.candidates[0].clone(); - second.metadata_fingerprint = "d".repeat(64); - second.review_fingerprint = "e".repeat(64); - reordered.candidates.push(second); - reordered.candidate_bytes *= 2; - reordered.potentially_reclaimable_bytes *= 2; - let ordered_batch = cloud::cloud_decision_batch_fingerprint(&reordered); - reordered.candidates.reverse(); - assert_eq!( - cloud::cloud_decision_batch_fingerprint(&reordered), - ordered_batch - ); - - report.candidates[0].requires_review = false; - assert_eq!( - candidate_decision_state(&report.candidates[0]), - "ready-for-copy-review" - ); - report.candidates[0].blocked_reason = Some("incomplete-download".into()); - assert_eq!(candidate_decision_state(&report.candidates[0]), "blocked"); - } - - #[test] - fn exact_duplicate_review_batch_binds_only_root_canonical_and_nested_prefix_copies() { - let content_sha256 = "1".repeat(64); - let member = |metadata_fingerprint: &str, - review_fingerprint: &str, - relative_path: &str, - context: Vec| { - cloud::CloudCandidate { - metadata_fingerprint: metadata_fingerprint.repeat(64), - review_fingerprint: review_fingerprint.repeat(64), - src: format!("/Users/private/Downloads/{relative_path}"), - dst: format!("/Users/private/Cloud/{relative_path}"), - provider: CloudProvider::Icloud, - destination_account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - kind: ArchiveKind::Document, - bytes: 42, - age_days: 7, - created_ms: 10, - modified_ms: 20, - production_time_ms: 30, - production_time_source: "embedded:exiftool:CreateDate".into(), - production_time_confidence: "high".into(), - source_root: "/Users/private/Downloads".into(), - relative_path: relative_path.into(), - source_context: "private-source-context".into(), - requires_review: true, - review_reasons: vec![ - "download-origin-needs-destination-review".into(), - "exact-duplicate-content-needs-canonical-selection".into(), - ], - content_title: Some("Private title".into()), - content_authors: vec!["Private author".into()], - content_context: context, - duration_ms: None, - dataset_profile: None, - metadata_evidence: vec![ - cloud::MetadataEvidence { - field: "production-date".into(), - value: "private-production-value".into(), - source: "embedded:exiftool:CreateDate".into(), - confidence: "high".into(), - }, - cloud::MetadataEvidence { - field: "exact-duplicate-content-sha256".into(), - value: content_sha256.clone(), - source: "local:content-hash".into(), - confidence: "high".into(), - }, - ], - blocked_reason: None, - } - }; - let canonical = member( - "a", - "b", - "report.docx", - vec![ - "download-origin-host=private.example".into(), - "download-agent=Edge".into(), - ], - ); - let redundant = member( - "c", - "d", - "smart_bundle_v1/report.docx", - vec!["download-agent=Bandizip".into()], - ); - let report = cloud::CloudPlanReport { - cloud_root: CloudRoot { - id: "/Users/private/Cloud".into(), - provider: CloudProvider::Icloud, - account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - label: "private@example.com".into(), - path: "/Users/private/Cloud".into(), - readable: true, - access_issue: None, - }, - generated_at_ms: 100, - source_selection_policy: Some(cloud::CloudPlanOptions::default()), - candidates: vec![canonical, redundant], - candidate_bytes: 84, - potentially_reclaimable_bytes: 84, - exact_duplicates: cloud::ExactDuplicateSummary { - cluster_count: 1, - candidate_count: 2, - candidate_bytes: 84, - redundant_bytes: 42, - clusters: vec![cloud::ExactDuplicateClusterRecommendation { - cluster_fingerprint: "e".repeat(64), - candidate_count: 2, - bytes_per_candidate: 42, - redundant_bytes: 42, - recommended_canonical_metadata_fingerprint: "a".repeat(64), - recommendation_confidence: "high".into(), - recommendation_reason_codes: vec![ - "richer-source-lineage-context-preferred".into() - ], - member_metadata_fingerprints: vec!["a".repeat(64), "c".repeat(64)], - requires_human_confirmation: true, - }], - }, - capacity: None, - local_volume: None, - notices: vec!["dry-run-only".into()], - }; - - let batch = - exact_duplicate_review_batch(&report, "smart_bundle_", ArchiveKind::Document).unwrap(); - assert_eq!(batch["output_mode"], "exact-duplicate-review-batch"); - assert_eq!(batch["cluster_count"], 1); - assert_eq!(batch["candidate_count"], 2); - assert_eq!(batch["redundant_copy_count"], 1); - assert_eq!(batch["redundant_bytes"], 42); - assert_eq!(batch["clusters"][0]["content_sha256"], content_sha256); - assert_eq!( - batch["clusters"][0]["canonical"]["relative_path"], - "report.docx" - ); - assert_eq!( - batch["clusters"][0]["redundant_copies"][0]["relative_path"], - "smart_bundle_v1/report.docx" - ); - assert_eq!( - batch["clusters"][0]["canonical"]["source_lineage_evidence_fields"], - serde_json::json!(["download-agent", "download-origin-host"]) - ); - assert_eq!( - batch["exact_duplicate_review_batch_fingerprint"] - .as_str() - .unwrap() - .len(), - 64 - ); - assert_eq!( - batch["metadata_policy"]["batch_fingerprint_is_not_approval"], - true - ); - assert_eq!( - batch["metadata_policy"]["trash_execution_is_not_available_in_this_output_mode"], - true - ); - - let encoded = serde_json::to_string(&batch).unwrap(); - for redacted in [ - "/Users/private", - "private@example.com", - "private.example", - "Private title", - "Private author", - "private-production-value", - "private-source-context", - "Bandizip", - "Edge", - ] { - assert!(!encoded.contains(redacted)); - } - - let repeated = - exact_duplicate_review_batch(&report, "smart_bundle_", ArchiveKind::Document).unwrap(); - assert_eq!( - repeated["exact_duplicate_review_batch_fingerprint"], - batch["exact_duplicate_review_batch_fingerprint"] - ); - assert!(exact_duplicate_review_batch(&report, "other_", ArchiveKind::Document).is_err()); - assert!( - exact_duplicate_review_batch(&report, "smart_bundle_", ArchiveKind::Media).is_err() - ); - - let mut evidence_changed = report.clone(); - evidence_changed.candidates[1].review_fingerprint = "f".repeat(64); - assert_ne!( - exact_duplicate_review_batch( - &evidence_changed, - "smart_bundle_", - ArchiveKind::Document, - ) - .unwrap()["exact_duplicate_review_batch_fingerprint"], - batch["exact_duplicate_review_batch_fingerprint"] - ); - - let mut incomplete = report; - incomplete.candidates.pop(); - assert!( - exact_duplicate_review_batch(&incomplete, "smart_bundle_", ArchiveKind::Document) - .unwrap_err() - .contains("missing-from-bounded-plan") - ); - } - - #[test] - fn action_validation_requires_explicit_consistent_copy_arguments() { - let mut args = parse_args(&[], Path::new("/h")).unwrap(); - args.copy_fingerprint = Some("a".repeat(64)); - assert!(validate_action_args(&args).is_err()); - args.receipt_dir = Some(PathBuf::from("/receipts")); - args.confirm_copy_phrase = Some("exact copy phrase".into()); - args.reviewed_by = Some("human:local:test".into()); - args.review_rationale = Some("exact copy reviewed".into()); - assert!(validate_action_args(&args).is_ok()); - args.receipt_dir = Some(PathBuf::from("relative-receipts")); - assert!(validate_action_args(&args).is_err()); - args.receipt_dir = Some(PathBuf::from("/receipts")); - args.copy_fingerprint = Some("not-a-fingerprint".into()); - assert!(validate_action_args(&args).is_err()); - - args.list_roots = false; - args.attest_receipt = Some(PathBuf::from("relative-receipt.json")); - assert!(validate_action_args(&args).is_err()); - args.copy_fingerprint = None; - args.receipt_dir = None; - args.list_roots = true; - args.attest_receipt = Some(PathBuf::from("/receipt.json")); - assert!(validate_action_args(&args).is_err()); - - let parsed = parse_args( - &[ - "--copy-fingerprint".into(), - "b".repeat(64), - "--receipt-dir".into(), - "/receipts".into(), - "--confirm-copy-phrase".into(), - "exact copy phrase".into(), - "--reviewed-by".into(), - "human:local:test".into(), - "--review-rationale".into(), - "exact copy reviewed".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert_eq!(parsed.copy_fingerprint, Some("b".repeat(64))); - assert_eq!(parsed.receipt_dir, Some(PathBuf::from("/receipts"))); - - let adoption = parse_args( - &[ - "--adopt-existing-fingerprint".into(), - "e".repeat(64), - "--receipt-dir".into(), - "/receipts".into(), - "--confirm-copy-phrase".into(), - "exact adoption phrase".into(), - "--reviewed-by".into(), - "human:local:test".into(), - "--review-rationale".into(), - "exact adoption reviewed".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert_eq!(adoption.adopt_existing_fingerprint, Some("e".repeat(64))); - assert!(validate_action_args(&adoption).is_ok()); - - let mut conflicting_receipt_actions = adoption; - conflicting_receipt_actions.copy_fingerprint = Some("f".repeat(64)); - assert!(validate_action_args(&conflicting_receipt_actions).is_err()); - - let review = parse_args( - &[ - "--review-candidate-fingerprint".into(), - "c".repeat(64), - "--review-fingerprint".into(), - "d".repeat(64), - "--review-disposition".into(), - "approved".into(), - "--reviewed-by".into(), - "human:local:test".into(), - "--review-rationale".into(), - "metadata reviewed".into(), - "--review-dir".into(), - "/reviews".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert_eq!(review.review_candidate_fingerprint, Some("c".repeat(64))); - assert_eq!(review.review_fingerprint, Some("d".repeat(64))); - assert_eq!( - review.review_disposition, - Some(CloudReviewDisposition::Approved) - ); - assert_eq!(review.review_dir, Some(PathBuf::from("/reviews"))); - assert_eq!(review.reviewed_by.as_deref(), Some("human:local:test")); - assert_eq!( - review.review_rationale.as_deref(), - Some("metadata reviewed") - ); - assert!(validate_action_args(&review).is_ok()); - - let mut non_human_review = review.clone(); - non_human_review.reviewed_by = Some("agent:codex".into()); - assert_eq!( - validate_action_args(&non_human_review).unwrap_err(), - "cloud-review-decision-attribution-invalid" - ); - - let help = parse_args(&["--help".into()], Path::new("/h")).unwrap_err(); - assert!(help.contains("--reviewed-by human:ID")); - assert!(help.contains("--confirm-copy-phrase EXACT")); - assert!(help.contains("--provider-api-copy-fingerprint HEX64")); - assert!(help.contains("--export-naruon-copy-readiness --verify-capacity")); - assert!(help.contains("--naruon-copy-readiness-output ABSOLUTE_NEW_FILE.json")); - assert!(help.contains("--private-candidate-inspection-output ABSOLUTE_NEW_FILE.json")); - - assert!(parse_args( - &["--review-disposition".into(), "maybe".into(),], - Path::new("/h"), - ) - .is_err()); - } - - #[test] - fn capacity_verification_allows_plan_and_copy_actions() { - let mut plan = parse_args(&["--verify-capacity".into()], Path::new("/h")).unwrap(); - plan.oauth_connections = Some(PathBuf::from("/connections.json")); - assert!(validate_action_args(&plan).is_ok()); - - let mut copy = parse_args(&[], Path::new("/h")).unwrap(); - copy.copy_fingerprint = Some("a".repeat(64)); - copy.receipt_dir = Some(PathBuf::from("/receipts")); - copy.confirm_copy_phrase = Some("exact copy phrase".into()); - copy.reviewed_by = Some("human:test".into()); - copy.review_rationale = Some("exact copy reviewed".into()); - copy.oauth_connections = Some(PathBuf::from("/connections.json")); - assert!(validate_action_args(©).is_ok()); - - let review = parse_args( - &[ - "--verify-capacity".into(), - "--review-candidate-fingerprint".into(), - "c".repeat(64), - "--review-fingerprint".into(), - "d".repeat(64), - "--review-disposition".into(), - "approved".into(), - "--reviewed-by".into(), - "human:test".into(), - "--review-rationale".into(), - "provider scope and embedded metadata reviewed".into(), - "--review-dir".into(), - "/reviews".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&review).is_ok()); - - let mut adoption = copy.clone(); - adoption.copy_fingerprint = None; - adoption.adopt_existing_fingerprint = Some("b".repeat(64)); - assert!(validate_action_args(&adoption).is_err()); - - plan.list_roots = true; - assert!(validate_action_args(&plan).is_err()); - } - - #[test] - fn capacity_verification_without_connection_is_a_redacted_blocked_assessment() { - let root = CloudRoot { - id: "onedrive:test".into(), - provider: CloudProvider::Onedrive, - account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - label: "OneDrive".into(), - path: "/Cloud/OneDrive".into(), - readable: true, - access_issue: None, - }; - - let observed_at_ms = cloud::system_now_ms(); - let snapshot = match collect_root_capacity(&root, None, observed_at_ms) { - Ok(snapshot) => snapshot, - Err(error) => provider_capacity::unavailable_capacity_from_error( - root.provider, - observed_at_ms, - &error, - ), - }; - let assessment = provider_capacity::assess_capacity(snapshot, 10, 10, 1024 * 1024); - - assert_eq!(assessment.can_fit, None); - assert_eq!( - assessment.snapshot.unavailable_reason.as_deref(), - Some("provider-oauth-connection-missing") - ); - assert_eq!( - assessment.blockers, - ["provider-oauth-connection-missing".to_string()] - ); - } - - #[test] - fn capacity_attachment_marks_each_non_oauth_destination_unavailable() { - let root = CloudRoot { - id: "onedrive:test".into(), - provider: CloudProvider::Onedrive, - account_scope: disksage_lib::cloud::CloudAccountScope::Personal, - label: "OneDrive".into(), - path: "/Cloud/OneDrive".into(), - readable: true, - access_issue: None, - }; - let mut report = cloud::CloudPlanReport { - cloud_root: root.clone(), - generated_at_ms: 1, - source_selection_policy: Some(cloud::CloudPlanOptions::default()), - candidates: Vec::new(), - candidate_bytes: 0, - potentially_reclaimable_bytes: 0, - exact_duplicates: cloud::ExactDuplicateSummary::default(), - capacity: None, - local_volume: None, - notices: vec!["dry-run-only".into(), "cloud-quota-unverified".into()], - }; - - let snapshot = provider_capacity::unavailable_capacity_from_error( - CloudProvider::Onedrive, - 1, - "provider-capacity-oauth-connections-required", - ); - attach_capacity_snapshot(&mut report, snapshot, 1024).unwrap(); - - let assessment = report.capacity.unwrap(); - assert_eq!(assessment.can_fit, None); - assert_eq!( - assessment.blockers, - ["provider-oauth-connection-missing".to_string()] - ); - assert!(!report - .notices - .iter() - .any(|notice| notice == "cloud-quota-unverified")); - assert!(report - .notices - .iter() - .any(|notice| notice == "cloud-quota-unavailable")); - } - - #[test] - fn action_validation_requires_complete_review_arguments() { - let mut args = parse_args(&[], Path::new("/h")).unwrap(); - args.review_candidate_fingerprint = Some("c".repeat(64)); - assert!(validate_action_args(&args).is_err()); - args.review_fingerprint = Some("d".repeat(64)); - args.review_disposition = Some(CloudReviewDisposition::Held); - assert!(validate_action_args(&args).is_err()); - args.reviewed_by = Some("human:local:test".into()); - args.review_rationale = Some("metadata reviewed".into()); - args.review_dir = Some(PathBuf::from("relative-reviews")); - assert!(validate_action_args(&args).is_err()); - args.review_dir = Some(PathBuf::from("/reviews")); - assert!(validate_action_args(&args).is_ok()); - - args.copy_fingerprint = Some("a".repeat(64)); - args.receipt_dir = Some(PathBuf::from("/receipts")); - assert!(validate_action_args(&args).is_err()); - - args.review_candidate_fingerprint = None; - args.review_fingerprint = None; - args.review_disposition = None; - args.confirm_copy_phrase = Some("exact copy phrase".into()); - args.reviewed_by = Some("human:local:test".into()); - args.review_rationale = Some("exact copy reviewed".into()); - assert!(validate_action_args(&args).is_ok()); - - let mut reason_set = parse_args( - &[ - "--review-reason-set".into(), - "destination-account-scope-unknown".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&reason_set).is_err()); - reason_set.decision_summary = true; - assert!(validate_action_args(&reason_set).is_ok()); - } - - #[test] - fn naruon_export_requires_absolute_receipt_and_bound_optional_evidence() { - let export = parse_args( - &[ - "--export-naruon-lineage".into(), - "/receipts/receipt.json".into(), - "--naruon-sync-evidence".into(), - "/evidence/evidence.json".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&export).is_ok()); - - let relative = parse_args( - &["--export-naruon-lineage".into(), "receipt.json".into()], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&relative).is_err()); - - let evidence_only = parse_args( - &[ - "--naruon-sync-evidence".into(), - "/evidence/evidence.json".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&evidence_only).is_err()); - - let mut conflicting = export; - conflicting.list_roots = true; - assert!(validate_action_args(&conflicting).is_err()); - } - - #[test] - fn naruon_capacity_export_requires_fresh_single_destination_capacity() { - let export = parse_args( - &[ - "--verify-capacity".into(), - "--export-naruon-capacity".into(), - "--provider".into(), - "icloud".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(export.export_naruon_capacity); - assert!(validate_action_args(&export).is_ok()); - - let missing_capacity = - parse_args(&["--export-naruon-capacity".into()], Path::new("/h")).unwrap(); - assert!(validate_action_args(&missing_capacity).is_err()); - - let multiple = parse_args( - &[ - "--verify-capacity".into(), - "--export-naruon-capacity".into(), - "--all-readable-roots".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&multiple).is_err()); - } - - #[test] - fn naruon_copy_readiness_export_is_fresh_single_destination_and_safe_output() { - let export = parse_args( - &[ - "--verify-capacity".into(), - "--export-naruon-copy-readiness".into(), - "--naruon-copy-readiness-output".into(), - "/artifacts/readiness.json".into(), - "--provider".into(), - "onedrive".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(export.export_naruon_copy_readiness); - assert_eq!( - export.naruon_copy_readiness_output, - Some(PathBuf::from("/artifacts/readiness.json")) - ); - assert!(validate_action_args(&export).is_ok()); - - let missing_capacity = - parse_args(&["--export-naruon-copy-readiness".into()], Path::new("/h")).unwrap(); - assert!(validate_action_args(&missing_capacity).is_err()); - - let output_only = parse_args( - &[ - "--naruon-copy-readiness-output".into(), - "/artifacts/readiness.json".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&output_only).is_err()); - - let relative_output = parse_args( - &[ - "--verify-capacity".into(), - "--export-naruon-copy-readiness".into(), - "--naruon-copy-readiness-output".into(), - "readiness.json".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&relative_output).is_err()); - - let mut conflicting = export; - conflicting.export_naruon_capacity = true; - assert!(validate_action_args(&conflicting).is_err()); - } - - #[test] - fn semantic_catalog_export_is_single_destination_dry_run_only() { - let export = parse_args( - &[ - "--export-semantic-catalog".into(), - "--provider".into(), - "icloud".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(export.export_semantic_catalog); - assert!(validate_action_args(&export).is_ok()); - - let mut conflicting = export.clone(); - conflicting.copy_fingerprint = Some("a".repeat(64)); - conflicting.receipt_dir = Some(PathBuf::from("/receipts")); - assert!(validate_action_args(&conflicting).is_err()); - - let multiple = parse_args( - &[ - "--export-semantic-catalog".into(), - "--all-readable-roots".into(), - "--decision-summary".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&multiple).is_err()); - - let summary = parse_args( - &[ - "--export-semantic-catalog".into(), - "--decision-summary".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&summary).is_err()); - } - - #[test] - fn action_validation_requires_explicit_complete_eviction_arguments() { - let mut args = parse_args(&[], Path::new("/h")).unwrap(); - args.evict_receipt = Some(PathBuf::from("/receipts/a.json")); - assert!(validate_action_args(&args).is_err()); - args.confirm_receipt_id = Some("a".repeat(64)); - args.eviction_dir = Some(PathBuf::from("/evictions")); - args.eviction_approval_dir = Some(PathBuf::from("/approvals")); - args.journal_path = Some(PathBuf::from("relative-journal")); - assert!(validate_action_args(&args).is_err()); - args.journal_path = Some(PathBuf::from("/journal/operations.jsonl")); - args.evidence_dir = Some(PathBuf::from("relative-evidence")); - assert!(validate_action_args(&args).is_err()); - args.evidence_dir = Some(PathBuf::from("/evidence")); - args.reviewed_by = Some("human:local:test".into()); - args.review_rationale = Some("verified exact receipt source".into()); - assert!(validate_action_args(&args).is_ok()); - - args.attest_receipt = Some(PathBuf::from("/receipt.json")); - assert!(validate_action_args(&args).is_err()); - - let parsed = parse_args( - &[ - "--evict-receipt".into(), - "/receipts/a.json".into(), - "--confirm-receipt-id".into(), - "b".repeat(64), - "--eviction-dir".into(), - "/evictions".into(), - "--eviction-approval-dir".into(), - "/approvals".into(), - "--journal-path".into(), - "/journal/operations.jsonl".into(), - "--evidence-dir".into(), - "/evidence".into(), - "--reviewed-by".into(), - "human:local:test".into(), - "--review-rationale".into(), - "verified exact receipt source".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert_eq!(parsed.confirm_receipt_id, Some("b".repeat(64))); - assert!(validate_action_args(&parsed).is_ok()); - } - - #[test] - fn provider_api_fallback_requires_complete_scoped_arguments() { - let parsed = parse_args( - &[ - "--attest-receipt".into(), - "/receipts/a.json".into(), - "--provider-object-id".into(), - "remote-item-id".into(), - "--oauth-connections".into(), - "/app-data/cloud-oauth-connections.json".into(), - "--evidence-dir".into(), - "/evidence".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert_eq!(parsed.provider_object_id.as_deref(), Some("remote-item-id")); - assert_eq!( - parsed.oauth_connections, - Some(PathBuf::from("/app-data/cloud-oauth-connections.json")) - ); - assert!(validate_action_args(&parsed).is_ok()); - - let onedrive_path_fallback = parse_args( - &[ - "--attest-receipt".into(), - "/receipts/a.json".into(), - "--oauth-connections".into(), - "/app-data/cloud-oauth-connections.json".into(), - "--evidence-dir".into(), - "/evidence".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&onedrive_path_fallback).is_ok()); - - let mut provider_api_copy = parse_args( - &[ - "--provider-api-copy-fingerprint".into(), - "f".repeat(64), - "--receipt-dir".into(), - "/receipts".into(), - "--confirm-copy-phrase".into(), - "exact provider api copy phrase".into(), - "--reviewed-by".into(), - "human:local:test".into(), - "--review-rationale".into(), - "provider API path reviewed".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&provider_api_copy).is_err()); - provider_api_copy.oauth_connections = Some(PathBuf::from("/connections.json")); - assert!(validate_action_args(&provider_api_copy).is_ok()); - provider_api_copy.provider_object_id = Some("unexpected-id".into()); - assert!(validate_action_args(&provider_api_copy).is_err()); - - let mut incomplete = parse_args( - &[ - "--attest-receipt".into(), - "/receipts/a.json".into(), - "--provider-object-id".into(), - "remote-item-id".into(), - "--evidence-dir".into(), - "/evidence".into(), - ], - Path::new("/h"), - ) - .unwrap(); - assert!(validate_action_args(&incomplete).is_err()); - incomplete.oauth_connections = Some(PathBuf::from("relative-connections.json")); - assert!(validate_action_args(&incomplete).is_err()); - - let mut unscoped = parse_args(&[], Path::new("/h")).unwrap(); - unscoped.provider_object_id = Some("remote-item-id".into()); - unscoped.oauth_connections = Some(PathBuf::from("/connections.json")); - assert!(validate_action_args(&unscoped).is_err()); - } - - #[cfg(not(coverage))] - #[test] - fn icloud_reconciliation_uses_native_probe_with_shared_oauth_descriptor() { - let receipt = CloudCopyReceipt { - version: cloud_transfer::RECEIPT_VERSION, - receipt_id: "0".repeat(64), - candidate_fingerprint: "1".repeat(64), - provider: CloudProvider::Icloud, - source: "/source/file.bin".into(), - destination: "/missing/icloud/file.bin".into(), - bytes: 1, - blake3: "2".repeat(64), - sha256: "3".repeat(64), - quick_xor_base64: String::new(), - source_modified_ms: 1, - copied_at_ms: 2, - copy_verified: true, - provider_sync_confirmed: false, - lineage_fingerprint: None, - lineage: None, - }; - let error = collect_receipt_sync_evidence( - &receipt, - None, - Some(Path::new("/connections.json")), - Path::new("/home/test"), - 3, - false, - ) - .unwrap_err(); - assert_ne!(error, "icloud-provider-api-fallback-not-supported"); - } - - #[test] - fn attestation_rejects_forged_receipt_before_destination_probe() { - let temp = tempfile::tempdir().unwrap(); - let receipt = CloudCopyReceipt { - version: cloud_transfer::RECEIPT_VERSION, - receipt_id: "0".repeat(64), - candidate_fingerprint: "1".repeat(64), - provider: CloudProvider::Icloud, - source: temp - .path() - .join("source.pdf") - .to_string_lossy() - .into_owned(), - destination: temp - .path() - .join("destination-does-not-exist.pdf") - .to_string_lossy() - .into_owned(), - bytes: 1, - blake3: "2".repeat(64), - sha256: "3".repeat(64), - quick_xor_base64: "AAAAAAAAAAAAAAAAAAAAAAAAAAA=".into(), - source_modified_ms: 1, - copied_at_ms: 2, - copy_verified: true, - provider_sync_confirmed: false, - lineage_fingerprint: None, - lineage: None, - }; - let path = temp.path().join(format!("{}.json", receipt.receipt_id)); - std::fs::write(&path, serde_json::to_vec(&receipt).unwrap()).unwrap(); - let mut permissions = std::fs::metadata(&path).unwrap().permissions(); - permissions.set_readonly(true); - std::fs::set_permissions(&path, permissions).unwrap(); - - let error = - attest_receipt(&path, temp.path(), None, None, Path::new("/home/test")).unwrap_err(); - assert!(error.contains("receipt-integrity-mismatch")); - assert!(!error.contains("No such file")); - } -} From 5d05edff942b0e208371616b2eb2cd2b208d50dd Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:12:33 +0900 Subject: [PATCH 126/691] fix: restore cloud planner CLI visibility --- src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc | 2 +- src-tauri/src/bin/disksage-cloud-plan.rs | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc b/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc index 933d96b99..6432bdc01 100644 --- a/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc +++ b/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc @@ -1,4 +1,4 @@ -//! Headless entrypoint for planning, reviewing, copying, and attesting cloud archive candidates. +// Headless entrypoint for planning, reviewing, copying, and attesting cloud archive candidates. #[cfg(target_os = "macos")] embed_plist::embed_info_plist!("../../disksage-cloud-plan.Info.plist"); diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 9738b7f03..7b67ef227 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -8,15 +8,15 @@ mod implementation { include!("disksage-cloud-plan-implementation.rs.inc"); - pub(super) mod entry { + pub(crate) mod entry { use std::path::Path; - pub(super) fn help_text() -> String { + pub(crate) fn help_text() -> String { super::parse_args(&["--help".to_string()], Path::new("/")) .expect_err("the implementation parser must expose the stable help synopsis") } - pub(super) fn run() -> Result<(), String> { + pub(crate) fn run() -> Result<(), String> { super::run() } } From 6285024b358e3519166ebe61919ae6bfdc09b334 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 22:12:47 -0700 Subject: [PATCH 127/691] fix: generate compilable cloud planner implementation --- src-tauri/build.rs | 46 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) diff --git a/src-tauri/build.rs b/src-tauri/build.rs index d860e1e6a..131aef616 100644 --- a/src-tauri/build.rs +++ b/src-tauri/build.rs @@ -1,3 +1,49 @@ +use std::{env, fs, path::PathBuf}; + +const CLOUD_PLAN_IMPLEMENTATION: &str = + "src/bin/disksage-cloud-plan-implementation.rs.inc"; +const EMBED_PLIST_CALL: &str = + "embed_plist::embed_info_plist!(\"../../disksage-cloud-plan.Info.plist\");"; +const GENERATED_EMBED_PLIST_CALL: &str = + "embed_plist::embed_info_plist!(concat!(env!(\"CARGO_MANIFEST_DIR\"), \"/disksage-cloud-plan.Info.plist\"));"; + +fn generate_cloud_plan_implementation() { + let manifest_dir = PathBuf::from( + env::var_os("CARGO_MANIFEST_DIR").expect("Cargo must provide CARGO_MANIFEST_DIR"), + ); + let source_path = manifest_dir.join(CLOUD_PLAN_IMPLEMENTATION); + println!("cargo:rerun-if-changed={}", source_path.display()); + + let source = fs::read_to_string(&source_path) + .expect("cloud-plan implementation source must be readable by build.rs"); + assert!( + source.starts_with("//!"), + "cloud-plan implementation must keep its source-level module documentation marker" + ); + assert_eq!( + source.matches(EMBED_PLIST_CALL).count(), + 1, + "cloud-plan implementation must contain exactly one Info.plist embedding call" + ); + + // `include!` cannot accept an inner `//!` document comment introduced by macro expansion. + // Preserve the source file as documentation-oriented text, but compile an equivalent generated + // copy whose first marker is an ordinary comment. Keep the plist path rooted at the crate + // manifest because `include_bytes!` otherwise resolves relative to OUT_DIR after generation. + let generated = source + .replacen("//!", "//", 1) + .replacen(EMBED_PLIST_CALL, GENERATED_EMBED_PLIST_CALL, 1); + + let out_dir = + PathBuf::from(env::var_os("OUT_DIR").expect("Cargo must provide OUT_DIR to build.rs")); + fs::write( + out_dir.join("disksage-cloud-plan-implementation.rs"), + generated, + ) + .expect("generated cloud-plan implementation must be writable in OUT_DIR"); +} + fn main() { + generate_cloud_plan_implementation(); tauri_build::build() } From 24eae0deeb140853a35a0a5b9b3b776c9b4fd573 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 22:14:48 -0700 Subject: [PATCH 128/691] fix: compile generated cloud planner bridge --- src-tauri/src/bin/disksage-cloud-plan.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 7b67ef227..d8791a11e 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -6,7 +6,7 @@ #[cfg(not(coverage))] mod implementation { - include!("disksage-cloud-plan-implementation.rs.inc"); + include!(concat!(env!("OUT_DIR"), "/disksage-cloud-plan-implementation.rs")); pub(crate) mod entry { use std::path::Path; From 23343ea6e968448d68c50273a3dacbd294f44772 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 22:19:11 -0700 Subject: [PATCH 129/691] fix: remove obsolete cloud planner code generation --- src-tauri/build.rs | 46 ---------------------------------------------- 1 file changed, 46 deletions(-) diff --git a/src-tauri/build.rs b/src-tauri/build.rs index 131aef616..d860e1e6a 100644 --- a/src-tauri/build.rs +++ b/src-tauri/build.rs @@ -1,49 +1,3 @@ -use std::{env, fs, path::PathBuf}; - -const CLOUD_PLAN_IMPLEMENTATION: &str = - "src/bin/disksage-cloud-plan-implementation.rs.inc"; -const EMBED_PLIST_CALL: &str = - "embed_plist::embed_info_plist!(\"../../disksage-cloud-plan.Info.plist\");"; -const GENERATED_EMBED_PLIST_CALL: &str = - "embed_plist::embed_info_plist!(concat!(env!(\"CARGO_MANIFEST_DIR\"), \"/disksage-cloud-plan.Info.plist\"));"; - -fn generate_cloud_plan_implementation() { - let manifest_dir = PathBuf::from( - env::var_os("CARGO_MANIFEST_DIR").expect("Cargo must provide CARGO_MANIFEST_DIR"), - ); - let source_path = manifest_dir.join(CLOUD_PLAN_IMPLEMENTATION); - println!("cargo:rerun-if-changed={}", source_path.display()); - - let source = fs::read_to_string(&source_path) - .expect("cloud-plan implementation source must be readable by build.rs"); - assert!( - source.starts_with("//!"), - "cloud-plan implementation must keep its source-level module documentation marker" - ); - assert_eq!( - source.matches(EMBED_PLIST_CALL).count(), - 1, - "cloud-plan implementation must contain exactly one Info.plist embedding call" - ); - - // `include!` cannot accept an inner `//!` document comment introduced by macro expansion. - // Preserve the source file as documentation-oriented text, but compile an equivalent generated - // copy whose first marker is an ordinary comment. Keep the plist path rooted at the crate - // manifest because `include_bytes!` otherwise resolves relative to OUT_DIR after generation. - let generated = source - .replacen("//!", "//", 1) - .replacen(EMBED_PLIST_CALL, GENERATED_EMBED_PLIST_CALL, 1); - - let out_dir = - PathBuf::from(env::var_os("OUT_DIR").expect("Cargo must provide OUT_DIR to build.rs")); - fs::write( - out_dir.join("disksage-cloud-plan-implementation.rs"), - generated, - ) - .expect("generated cloud-plan implementation must be writable in OUT_DIR"); -} - fn main() { - generate_cloud_plan_implementation(); tauri_build::build() } From 9c95e288772930f103bc773610107b769a163941 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 18 Aug 2026 22:19:45 -0700 Subject: [PATCH 130/691] fix: use corrected cloud planner source directly --- src-tauri/src/bin/disksage-cloud-plan.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index d8791a11e..7b67ef227 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -6,7 +6,7 @@ #[cfg(not(coverage))] mod implementation { - include!(concat!(env!("OUT_DIR"), "/disksage-cloud-plan-implementation.rs")); + include!("disksage-cloud-plan-implementation.rs.inc"); pub(crate) mod entry { use std::path::Path; From 83b236d08bb4963863fc4e22121256a9e42b16e8 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:32:52 +0900 Subject: [PATCH 131/691] fix: preserve cloud planner source contract --- src-tauri/Cargo.toml | 2 +- src-tauri/build.rs | 39 +++++++++++++++++++ .../disksage-cloud-plan-implementation.rs.inc | 2 +- src-tauri/src/bin/disksage-cloud-plan.rs | 5 ++- 4 files changed, 45 insertions(+), 3 deletions(-) diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml index 332830ff4..4c9e77fca 100644 --- a/src-tauri/Cargo.toml +++ b/src-tauri/Cargo.toml @@ -136,7 +136,7 @@ blake3 = "1.8.5" base64 = "0.23.1" oxttl = "0.2.3" oxrdf = "0.3.3" -llama-cpp-2 = { version = "0.1.151", optional = true } +llama-cpp-2 = { version = "0.1.151", default-features = false, features = ["common"], optional = true } sha2 = "0.11.0" sha1 = "0.11.0" same-file = "1.0.6" diff --git a/src-tauri/build.rs b/src-tauri/build.rs index d860e1e6a..f8a03beb6 100644 --- a/src-tauri/build.rs +++ b/src-tauri/build.rs @@ -1,3 +1,42 @@ +use std::{env, fs, path::PathBuf}; + +const CLOUD_PLAN_IMPLEMENTATION: &str = "src/bin/disksage-cloud-plan-implementation.rs.inc"; +const EMBED_PLIST_CALL: &str = + "embed_plist::embed_info_plist!(\"../../disksage-cloud-plan.Info.plist\");"; +const GENERATED_EMBED_PLIST_CALL: &str = + "embed_plist::embed_info_plist!(concat!(env!(\"CARGO_MANIFEST_DIR\"), \"/disksage-cloud-plan.Info.plist\"));"; + +fn generate_cloud_plan_implementation() { + let manifest_dir = PathBuf::from( + env::var_os("CARGO_MANIFEST_DIR").expect("Cargo must provide CARGO_MANIFEST_DIR"), + ); + let source_path = manifest_dir.join(CLOUD_PLAN_IMPLEMENTATION); + println!("cargo:rerun-if-changed={}", source_path.display()); + let source = fs::read_to_string(&source_path) + .expect("cloud-plan implementation source must be readable by build.rs"); + assert!( + source.starts_with("//!"), + "cloud-plan implementation must keep its source-level module documentation marker" + ); + assert_eq!( + source.matches(EMBED_PLIST_CALL).count(), + 1, + "cloud-plan implementation must contain exactly one Info.plist embedding call" + ); + let generated = + source + .replacen("//!", "//", 1) + .replacen(EMBED_PLIST_CALL, GENERATED_EMBED_PLIST_CALL, 1); + let out_dir = + PathBuf::from(env::var_os("OUT_DIR").expect("Cargo must provide OUT_DIR to build.rs")); + fs::write( + out_dir.join("disksage-cloud-plan-implementation.rs"), + generated, + ) + .expect("generated cloud-plan implementation must be writable in OUT_DIR"); +} + fn main() { + generate_cloud_plan_implementation(); tauri_build::build() } diff --git a/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc b/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc index 6432bdc01..933d96b99 100644 --- a/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc +++ b/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc @@ -1,4 +1,4 @@ -// Headless entrypoint for planning, reviewing, copying, and attesting cloud archive candidates. +//! Headless entrypoint for planning, reviewing, copying, and attesting cloud archive candidates. #[cfg(target_os = "macos")] embed_plist::embed_info_plist!("../../disksage-cloud-plan.Info.plist"); diff --git a/src-tauri/src/bin/disksage-cloud-plan.rs b/src-tauri/src/bin/disksage-cloud-plan.rs index 7b67ef227..8f946faaa 100644 --- a/src-tauri/src/bin/disksage-cloud-plan.rs +++ b/src-tauri/src/bin/disksage-cloud-plan.rs @@ -6,7 +6,10 @@ #[cfg(not(coverage))] mod implementation { - include!("disksage-cloud-plan-implementation.rs.inc"); + include!(concat!( + env!("OUT_DIR"), + "/disksage-cloud-plan-implementation.rs" + )); pub(crate) mod entry { use std::path::Path; From 6c232b3d828b050285be687cb0168bd670b11f47 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:45:27 +0900 Subject: [PATCH 132/691] ci: enable vbscript for windows msi --- .github/workflows/release.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ee5bfaae0..f4e51f423 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -84,6 +84,11 @@ jobs: if: matrix.os == 'macos-latest' run: brew install cmake + - name: Enable Windows Script Host for WiX MSI + if: matrix.os == 'windows-latest' + shell: pwsh + run: Enable-WindowsOptionalFeature -Online -FeatureName VBSCRIPT -All -NoRestart + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 From 7635776e0ff4a50e46b22d56a511a1d912902cbb Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:48:25 +0900 Subject: [PATCH 133/691] ci: pin Windows MSI release to windows-2022 --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f4e51f423..1f39fd04c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -43,7 +43,7 @@ jobs: cloud_cli_asset: src-tauri/target/release/disksage-cloud-plan-linux-x86_64 duplicate_cli_source: src-tauri/target/release/disksage-duplicate-audit duplicate_cli_asset: src-tauri/target/release/disksage-duplicate-audit-linux-x86_64 - - os: windows-latest + - os: windows-2022 bundles: | src-tauri/target/release/bundle/msi/*.msi src-tauri/target/release/bundle/nsis/*.exe @@ -85,7 +85,7 @@ jobs: run: brew install cmake - name: Enable Windows Script Host for WiX MSI - if: matrix.os == 'windows-latest' + if: matrix.os == 'windows-2022' shell: pwsh run: Enable-WindowsOptionalFeature -Online -FeatureName VBSCRIPT -All -NoRestart From 0bb591fad121162dc2732d4d95c78e0c86b2fed3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:51:01 +0900 Subject: [PATCH 134/691] ci: install Windows VBScript capability --- .github/workflows/release.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1f39fd04c..f2f82ab8b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -87,7 +87,19 @@ jobs: - name: Enable Windows Script Host for WiX MSI if: matrix.os == 'windows-2022' shell: pwsh - run: Enable-WindowsOptionalFeature -Online -FeatureName VBSCRIPT -All -NoRestart + run: | + $capability = Get-WindowsCapability -Online -Name 'VBScript*' | + Select-Object -First 1 + if ($null -eq $capability) { + throw 'VBScript Windows Capability is unavailable on this runner.' + } + if ($capability.State -ne 'Installed') { + Add-WindowsCapability -Online -Name $capability.Name + } + $installed = Get-WindowsCapability -Online -Name $capability.Name + if ($installed.State -ne 'Installed') { + throw "VBScript Windows Capability is not installed: $($installed.State)" + } - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: From 49668ff2f3a31477bcb7217d647d17dfefd2e44b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:53:55 +0900 Subject: [PATCH 135/691] ci: resolve Windows VBScript capability by identity --- .github/workflows/release.yml | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f2f82ab8b..bc8b9d223 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -88,15 +88,9 @@ jobs: if: matrix.os == 'windows-2022' shell: pwsh run: | - $capability = Get-WindowsCapability -Online -Name 'VBScript*' | - Select-Object -First 1 - if ($null -eq $capability) { - throw 'VBScript Windows Capability is unavailable on this runner.' - } - if ($capability.State -ne 'Installed') { - Add-WindowsCapability -Online -Name $capability.Name - } - $installed = Get-WindowsCapability -Online -Name $capability.Name + $capabilityName = 'VBScript~~~~0.0.1.0' + Add-WindowsCapability -Online -Name $capabilityName + $installed = Get-WindowsCapability -Online -Name $capabilityName if ($installed.State -ne 'Installed') { throw "VBScript Windows Capability is not installed: $($installed.State)" } From 930c7ea39fdb87a8a8e6b141c8ffaa8f69a2eb5d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:56:20 +0900 Subject: [PATCH 136/691] ci: register bundled VBScript engines for WiX --- .github/workflows/release.yml | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index bc8b9d223..8eb017863 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -88,11 +88,19 @@ jobs: if: matrix.os == 'windows-2022' shell: pwsh run: | - $capabilityName = 'VBScript~~~~0.0.1.0' - Add-WindowsCapability -Online -Name $capabilityName - $installed = Get-WindowsCapability -Online -Name $capabilityName - if ($installed.State -ne 'Installed') { - throw "VBScript Windows Capability is not installed: $($installed.State)" + $engines = @( + (Join-Path $env:windir 'System32\vbscript.dll'), + (Join-Path $env:windir 'SysWOW64\vbscript.dll') + ) | Where-Object { Test-Path $_ } + if ($engines.Count -eq 0) { + throw 'VBScript engine is unavailable on this runner.' + } + foreach ($engine in $engines) { + $regsvr32 = Join-Path (Split-Path $engine) 'regsvr32.exe' + & $regsvr32 /s $engine + if ($LASTEXITCODE -ne 0) { + throw "VBScript engine registration failed: $engine ($LASTEXITCODE)" + } } - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 From 2e6d542c27cdc6c84f556e64acbdf3f6ac5cd65d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 14:57:52 +0900 Subject: [PATCH 137/691] ci: capture VBScript registration exit status --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8eb017863..3d683b997 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -97,9 +97,9 @@ jobs: } foreach ($engine in $engines) { $regsvr32 = Join-Path (Split-Path $engine) 'regsvr32.exe' - & $regsvr32 /s $engine - if ($LASTEXITCODE -ne 0) { - throw "VBScript engine registration failed: $engine ($LASTEXITCODE)" + $registration = Start-Process -FilePath $regsvr32 -ArgumentList @('/s', $engine) -Wait -PassThru + if ($registration.ExitCode -ne 0) { + throw "VBScript engine registration failed: $engine ($($registration.ExitCode))" } } From 6d360a33f1779b89dde4def24f27cd8dab92a19f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 15:10:45 +0900 Subject: [PATCH 138/691] ci: expose WiX linker diagnostics --- .github/workflows/release.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3d683b997..7cc0bf8bb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -115,6 +115,30 @@ jobs: - name: Tauri build (with embedded LLM) run: npm run tauri -- build --features llm-engine + - name: Diagnose WiX MSI linker failure + if: failure() && matrix.os == 'windows-2022' + shell: pwsh + run: | + $light = Join-Path $env:LOCALAPPDATA 'tauri\WixTools314\light.exe' + $wix_dir = Join-Path $env:GITHUB_WORKSPACE 'src-tauri\target\release\wix\x64' + if (!(Test-Path -LiteralPath $light) -or !(Test-Path -LiteralPath $wix_dir)) { + Write-Host 'WiX diagnostic inputs are unavailable.' + exit 0 + } + $wixobjs = @(Get-ChildItem -LiteralPath $wix_dir -Filter '*.wixobj' -File) + $locale = Join-Path $wix_dir 'locale.wxl' + $output = Join-Path $env:RUNNER_TEMP 'disksage-wix-diagnostic.msi' + $arguments = @( + '-ext', 'WixUIExtension', + '-ext', 'WixUtilExtension', + '-o', $output, + '-cultures:en-us', + '-loc', $locale + ) + @($wixobjs.FullName) + @('-v') + & $light @arguments + Write-Host "WiX diagnostic exit code: $LASTEXITCODE" + exit 0 + - name: Build operational CLIs run: >- cargo build --manifest-path src-tauri/Cargo.toml --release --features cloud-cli From ad30090c3867c74847ba815c6109ba851073807c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 15:32:51 +0900 Subject: [PATCH 139/691] fix: keep planner source out of Tauri bin scan --- src-tauri/build.rs | 2 +- ...tion.rs.inc => cloud_plan_implementation.rs.inc} | 0 src-tauri/tests/package_metadata_contract.rs | 13 +++++++++++++ 3 files changed, 14 insertions(+), 1 deletion(-) rename src-tauri/{src/bin/disksage-cloud-plan-implementation.rs.inc => cloud_plan_implementation.rs.inc} (100%) diff --git a/src-tauri/build.rs b/src-tauri/build.rs index f8a03beb6..9bf51da16 100644 --- a/src-tauri/build.rs +++ b/src-tauri/build.rs @@ -1,6 +1,6 @@ use std::{env, fs, path::PathBuf}; -const CLOUD_PLAN_IMPLEMENTATION: &str = "src/bin/disksage-cloud-plan-implementation.rs.inc"; +const CLOUD_PLAN_IMPLEMENTATION: &str = "cloud_plan_implementation.rs.inc"; const EMBED_PLIST_CALL: &str = "embed_plist::embed_info_plist!(\"../../disksage-cloud-plan.Info.plist\");"; const GENERATED_EMBED_PLIST_CALL: &str = diff --git a/src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc b/src-tauri/cloud_plan_implementation.rs.inc similarity index 100% rename from src-tauri/src/bin/disksage-cloud-plan-implementation.rs.inc rename to src-tauri/cloud_plan_implementation.rs.inc diff --git a/src-tauri/tests/package_metadata_contract.rs b/src-tauri/tests/package_metadata_contract.rs index 5c27717ed..3430f6460 100644 --- a/src-tauri/tests/package_metadata_contract.rs +++ b/src-tauri/tests/package_metadata_contract.rs @@ -149,3 +149,16 @@ note = "publish = false" "commented or unrelated publish text must remain unrestricted in Cargo metadata and therefore fail the DiskSage guard" ); } + +#[test] +fn tauri_bin_directory_contains_only_rust_sources() { + let bin_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("src/bin"); + for entry in fs::read_dir(&bin_dir).expect("Tauri bin directory must be readable") { + let path = entry.expect("Tauri bin directory entries must be readable").path(); + assert!( + path.is_file() && path.extension().is_some_and(|extension| extension == "rs"), + "Tauri scans every src/bin entry as a binary; keep non-Rust source fragments outside it: {}", + path.display() + ); + } +} From 70b78eadf197a32d02ede1ef07160c6565d9beee Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 16:34:39 +0900 Subject: [PATCH 140/691] fix: preserve scanned paths across canonical navigation --- src-tauri/src/node_navigation.rs | 19 ++++++++++++++++--- 1 file changed, 16 insertions(+), 3 deletions(-) diff --git a/src-tauri/src/node_navigation.rs b/src-tauri/src/node_navigation.rs index 3fae4feca..ac11e9edc 100644 --- a/src-tauri/src/node_navigation.rs +++ b/src-tauri/src/node_navigation.rs @@ -51,6 +51,14 @@ fn entry_is_link_or_reparse(path: &Path, file_type: &std::fs::FileType) -> bool /// canonical scanned root. pub(crate) fn node_view(res: &ScanResult, path: &Path) -> Result { let canonical_path = canonical_navigation_path(res, path)?; + let canonical_root = + std::fs::canonicalize(&res.root).map_err(|_| OUTSIDE_ROOT.to_string())?; + let relative = canonical_path + .strip_prefix(&canonical_root) + .map_err(|_| OUTSIDE_ROOT.to_string())?; + // macOS canonicalizes `/var` to `/private/var`; keep scanner keys and UI paths in + // the original namespace while reading entries through the verified canonical path. + let display_path = res.root.join(relative); let mut entries = Vec::new(); for entry in std::fs::read_dir(&canonical_path).map_err(|_| "node directory unavailable".to_string())? { let Ok(entry) = entry else { continue }; @@ -62,7 +70,8 @@ pub(crate) fn node_view(res: &ScanResult, path: &Path) -> Result Result Result Date: Wed, 19 Aug 2026 16:54:32 +0900 Subject: [PATCH 141/691] feat: persist dynamic ADR context --- src-tauri/cloud_plan_implementation.rs.inc | 8 +++++ src-tauri/src/cloud_adr.rs | 42 +++++++++++++++++++++- src-tauri/src/cloud_transfer.rs | 10 ++++++ 3 files changed, 59 insertions(+), 1 deletion(-) diff --git a/src-tauri/cloud_plan_implementation.rs.inc b/src-tauri/cloud_plan_implementation.rs.inc index 933d96b99..30495e9d3 100644 --- a/src-tauri/cloud_plan_implementation.rs.inc +++ b/src-tauri/cloud_plan_implementation.rs.inc @@ -4007,6 +4007,14 @@ mod tests { goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, provider_sync_state: cloud_transfer::ProviderSyncState::Unknown, sync_complete: false, + context: vec![ + "metadata-first-lineage".into(), + "goal-state:copy-verified".into(), + "provider-sync-state:unknown".into(), + "provider-sync-complete:false".into(), + "provider-evidence-authoritative".into(), + "source-retained-until-explicit-trash-step".into(), + ], decision: "retain-source-after-copy".into(), consequences: vec!["source-retained".into()], evidence_record_id: None, diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 46752d4c8..5ffb15b84 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -18,7 +18,7 @@ use std::os::unix::io::AsRawFd; #[cfg(windows)] use std::os::windows::fs::OpenOptionsExt; -pub const CLOUD_ADR_SCHEMA_VERSION: u32 = 2; +pub const CLOUD_ADR_SCHEMA_VERSION: u32 = 3; pub const CLOUD_GOAL_SCHEMA_VERSION: u32 = 1; const MAX_PROJECTION_BYTES: u64 = 256 * 1024; @@ -36,12 +36,30 @@ pub struct CloudOffloadAdrSnapshot { pub goal_state: CloudOffloadGoalState, pub provider_sync_state: ProviderSyncState, pub sync_complete: bool, + /// Dynamic ADR context; old v2 projections deserialize with an empty context. + #[serde(default)] + pub context: Vec, pub decision: String, pub consequences: Vec, pub evidence_record_id: Option, pub updated_at_ms: u64, } +fn context_for( + goal_state: CloudOffloadGoalState, + sync_state: ProviderSyncState, + sync_complete: bool, +) -> Vec { + vec![ + "metadata-first-lineage".into(), + format!("goal-state:{}", goal_state.as_str()), + format!("provider-sync-state:{}", sync_state.as_str()), + format!("provider-sync-complete:{sync_complete}"), + "provider-evidence-authoritative".into(), + "source-retained-until-explicit-trash-step".into(), + ] +} + #[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] #[serde(deny_unknown_fields)] pub struct CloudOffloadGoalSnapshot { @@ -105,6 +123,7 @@ pub fn snapshot_from_evidence( goal_state, provider_sync_state: evidence.sync_state, sync_complete: evidence.sync_complete, + context: context_for(goal_state, evidence.sync_state, evidence.sync_complete), decision: decision_for(goal_state, evidence.sync_state), consequences, evidence_record_id: Some(record.record_id.clone()), @@ -125,6 +144,11 @@ pub fn initial_adr_snapshot( goal_state: CloudOffloadGoalState::CopyVerified, provider_sync_state: ProviderSyncState::Unknown, sync_complete: false, + context: context_for( + CloudOffloadGoalState::CopyVerified, + ProviderSyncState::Unknown, + false, + ), decision: decision_for( CloudOffloadGoalState::CopyVerified, ProviderSyncState::Unknown, @@ -956,6 +980,22 @@ mod tests { assert_eq!(snapshot.provider_sync_state, ProviderSyncState::Unknown); assert_eq!(snapshot.evidence_record_id, None); assert_eq!(snapshot.adr_id, format!("cloud-offload:{}", "a".repeat(64))); + assert!(snapshot + .context + .contains(&"goal-state:copy-verified".to_string())); + assert!(snapshot + .context + .contains(&"metadata-first-lineage".to_string())); + } + + #[test] + fn adr_v2_projection_deserializes_without_context() { + let mut value = serde_json::to_value(initial_adr_snapshot(&receipt(), 5)).unwrap(); + let object = value.as_object_mut().unwrap(); + object.remove("context"); + object.insert("schema_version".into(), serde_json::json!(2)); + let parsed: CloudOffloadAdrSnapshot = serde_json::from_value(value).unwrap(); + assert!(parsed.context.is_empty()); } #[test] diff --git a/src-tauri/src/cloud_transfer.rs b/src-tauri/src/cloud_transfer.rs index 04e7c8e36..6e363bf22 100644 --- a/src-tauri/src/cloud_transfer.rs +++ b/src-tauri/src/cloud_transfer.rs @@ -120,6 +120,16 @@ pub enum CloudOffloadGoalState { } impl CloudOffloadGoalState { + pub fn as_str(self) -> &'static str { + match self { + Self::CopyVerified => "copy-verified", + Self::PendingProviderSync => "pending-provider-sync", + Self::ProviderSyncConfirmed => "provider-sync-confirmed", + Self::EvictionReady => "eviction-ready", + Self::SourceEvicted => "source-evicted", + } + } + pub fn after_attestation(evidence: &ProviderSyncEvidence, permit_available: bool) -> Self { if !evidence.sync_complete || !evidence.sync_state.is_complete() { return Self::PendingProviderSync; From 2215dcc52717e300468fe7d1361d259bb744db0b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 17:00:36 +0900 Subject: [PATCH 142/691] docs: expose metadata precedence in ADR context --- src-tauri/cloud_plan_implementation.rs.inc | 2 ++ src-tauri/src/cloud_adr.rs | 2 ++ 2 files changed, 4 insertions(+) diff --git a/src-tauri/cloud_plan_implementation.rs.inc b/src-tauri/cloud_plan_implementation.rs.inc index 30495e9d3..056a69cc2 100644 --- a/src-tauri/cloud_plan_implementation.rs.inc +++ b/src-tauri/cloud_plan_implementation.rs.inc @@ -4012,6 +4012,8 @@ mod tests { "goal-state:copy-verified".into(), "provider-sync-state:unknown".into(), "provider-sync-complete:false".into(), + "filename-dates-auxiliary".into(), + "production-time-precedence:embedded-metadata>explicit-filename-date>filesystem-created>filesystem-modified".into(), "provider-evidence-authoritative".into(), "source-retained-until-explicit-trash-step".into(), ], diff --git a/src-tauri/src/cloud_adr.rs b/src-tauri/src/cloud_adr.rs index 5ffb15b84..a5d7140cc 100644 --- a/src-tauri/src/cloud_adr.rs +++ b/src-tauri/src/cloud_adr.rs @@ -55,6 +55,8 @@ fn context_for( format!("goal-state:{}", goal_state.as_str()), format!("provider-sync-state:{}", sync_state.as_str()), format!("provider-sync-complete:{sync_complete}"), + "filename-dates-auxiliary".into(), + "production-time-precedence:embedded-metadata>explicit-filename-date>filesystem-created>filesystem-modified".into(), "provider-evidence-authoritative".into(), "source-retained-until-explicit-trash-step".into(), ] From c09d53ab796570771ac1df4461788d3f4ee853bc Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 17:35:49 +0900 Subject: [PATCH 143/691] fix: skip metadata probes for dataless sources --- src-tauri/src/cloud.rs | 60 +++++++++++++++++++++++++++++++++++++++++- 1 file changed, 59 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index 1d615c2a0..79cf7f97b 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -4626,7 +4626,9 @@ fn prepare_cloud_archive_source_with_scan( &file.path, batched_exiftool.get(&file.path).cloned(), ); - } else if prepared.content_metadata == ContentMetadata::default() { + } else if prepared.content_metadata == ContentMetadata::default() + && !source_content_is_dataless(&file.path) + { let failure = if probe_candidate_paths.contains(&file.path) && !selected_probe_paths.contains(&file.path) { @@ -5321,6 +5323,62 @@ mod tests { ); } + #[cfg(all(target_os = "macos", not(coverage)))] + #[test] + fn dataless_files_are_not_misreported_as_metadata_probe_timeouts() { + let tmp = tempfile::tempdir().unwrap(); + let source = tmp.path().join("source"); + let cloud = tmp.path().join("cloud"); + writable_dir(&source); + writable_dir(&cloud); + let path = source.join("mail-backup.zip"); + std::fs::write(&path, b"placeholder").unwrap(); + let mark = std::process::Command::new("chflags") + .args(["dataless", path.to_str().unwrap()]) + .status() + .unwrap(); + if !mark.success() || !source_content_is_dataless(&path) { + let _ = std::process::Command::new("chflags") + .args(["nodataless", path.to_str().unwrap()]) + .status(); + return; + } + + let file_metadata = std::fs::metadata(&path).unwrap(); + let snapshot = prepare_cloud_archive_source( + &[FileFact { + path: path.clone(), + bytes: file_metadata.len(), + created_ms: millis(file_metadata.created()), + modified_ms: millis(file_metadata.modified()), + content_metadata: ContentMetadata::default(), + }], + &source, + system_now_ms(), + CloudPlanOptions { + min_size_bytes: 1, + min_age_days: 0, + limit: 10, + }, + ); + let report = plan_cloud_archive_from_snapshot( + &snapshot, + &root(CloudProvider::GoogleDrive, &cloud), + ); + assert!(report.candidates[0] + .metadata_evidence + .iter() + .all(|evidence| evidence.value != "planner:timeout")); + assert_eq!( + report.candidates[0].blocked_reason.as_deref(), + Some("source-content-not-local") + ); + + let _ = std::process::Command::new("chflags") + .args(["nodataless", path.to_str().unwrap()]) + .status(); + } + #[test] fn civil_date_math_handles_epoch_and_leap_day() { assert_eq!(date_parts(0), (1970, 1, 1)); From 422258e72af1a38c1b5b7ad415a63104e41e9002 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 18:03:04 +0900 Subject: [PATCH 144/691] fix: clean inactive cache entries independently --- ...ache-cleanup-is-per-item-evidence-bound.md | 50 +++++++++++++++++++ src-tauri/src/cache_cleanup.rs | 20 ++++---- 2 files changed, 59 insertions(+), 11 deletions(-) create mode 100644 docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md diff --git a/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md b/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md new file mode 100644 index 000000000..1261604e7 --- /dev/null +++ b/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md @@ -0,0 +1,50 @@ +# ADR-0002: Cache cleanup is per-item active-use evidence bound + +**Status:** Accepted +**Date:** 2026-08-19 + +## Context + +Package-manager and tool caches can share one root while individual entries have different +lifecycle states. For example, `~/.cache/uv/archive-v0` can contain live MCP runtimes next to +reproducible, unused environments. A root-wide active-use observation either blocks safe cleanup +of unrelated entries or encourages an unsafe manual bypass. Cache contents are not user-file +lineage and must not be uploaded to a cloud provider merely to reclaim local space. + +## Decision + +DiskSage exposes known cache roots through the existing cache catalog, including the macOS uv +cache. Cleanup uses the reviewed child manifest (`path`, byte count, modification time, and object +identity) and revalidates that manifest immediately before mutation. Active-use evidence is +collected independently for each reviewed child with bounded, path-local `lsof` evidence: + +- incomplete evidence or an active process leaves that child untouched and returns a stable blocker; +- an inactive child may be moved through DiskSage's identity-bound OS-Trash path; +- the cache root and all unrelated children remain untouched; +- the operation is journaled and never permanently deletes cache content. + +This per-item probe is the authoritative cleanup boundary. A live process elsewhere under the +same cache root must not prevent reclaiming an independently inactive entry, and it must never be +treated as evidence that the inactive entry is safe without its own probe. + +## Consequences + +- A user can clean inactive uv archive entries while active MCP/uv runtimes continue running. +- Changed, replaced, symlinked, or unreadable entries fail closed before they reach the OS Trash. +- The operation is reversible through the OS Trash; physical space is not claimed until the user + empties that Trash, and APFS shared blocks may make physical reclaim smaller than logical size. +- Cache cleanup does not create cloud-copy receipts, provider-sync evidence, or source-eviction + permits. User files still require the cloud-offload ADR and its provider evidence gates. + +## Alternatives rejected + +- **Root-wide active-use probe:** safe but unnecessarily blocks unrelated inactive entries. +- **Direct recursive deletion:** not reversible and cannot prove per-entry identity at mutation time. +- **Copying caches to iCloud/OneDrive/Google Drive:** wastes cloud capacity for reproducible data and + conflates cache cleanup with user-file lineage. + +## References + +- [ADR-0001: Provider evidence drives the cloud-offload Goal](0001-cloud-offload-goal-state.md) +- `src-tauri/src/cache_cleanup.rs` +- `src-tauri/src/rules.rs` diff --git a/src-tauri/src/cache_cleanup.rs b/src-tauri/src/cache_cleanup.rs index 0d0865b8f..c349f7630 100644 --- a/src-tauri/src/cache_cleanup.rs +++ b/src-tauri/src/cache_cleanup.rs @@ -36,20 +36,18 @@ fn clean_cache_contents_inner( return Err("cache-cleanup-targets-stale".into()); } - // One recursive probe covers the whole catalog root. Re-probing every child would multiply - // the bounded lsof cost by thousands of cache entries while adding no stronger snapshot. - let active_use = crate::git_worktree::active_use_evidence( - dir, - crate::reclaim::ACTIVE_USE_PROBE_TIMEOUT_MS, - crate::reclaim::ACTIVE_USE_PROBE_MAX_PIDS, - true, - ); - let active_use_error = active_use_blocker(&active_use); - Ok(expected .into_iter() .map(|target| { - if let Some(error) = active_use_error { + // Probe each reviewed child independently: a live MCP/uv process must not prevent + // reclaiming unrelated, inactive cache archives in the same catalog root. + let active_use = crate::git_worktree::active_use_evidence( + Path::new(&target.path), + crate::reclaim::ACTIVE_USE_PROBE_TIMEOUT_MS, + crate::reclaim::ACTIVE_USE_PROBE_MAX_PIDS, + true, + ); + if let Some(error) = active_use_blocker(&active_use) { return CleanResult { path: target.path, ok: false, From fb75754e5267486e8491619e34718abea20096d7 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 18:05:36 +0900 Subject: [PATCH 145/691] fix: probe cache files with file-local evidence --- src-tauri/src/cache_cleanup.rs | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/cache_cleanup.rs b/src-tauri/src/cache_cleanup.rs index c349f7630..1f263d8ec 100644 --- a/src-tauri/src/cache_cleanup.rs +++ b/src-tauri/src/cache_cleanup.rs @@ -41,11 +41,14 @@ fn clean_cache_contents_inner( .map(|target| { // Probe each reviewed child independently: a live MCP/uv process must not prevent // reclaiming unrelated, inactive cache archives in the same catalog root. + let recursive = std::fs::symlink_metadata(&target.path) + .map(|metadata| metadata.is_dir() && !metadata.file_type().is_symlink()) + .unwrap_or(false); let active_use = crate::git_worktree::active_use_evidence( Path::new(&target.path), crate::reclaim::ACTIVE_USE_PROBE_TIMEOUT_MS, crate::reclaim::ACTIVE_USE_PROBE_MAX_PIDS, - true, + recursive, ); if let Some(error) = active_use_blocker(&active_use) { return CleanResult { From f84635cd9825a2678de0d5e36973caf233a41df7 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 18:06:01 +0900 Subject: [PATCH 146/691] docs: bind cache probe scope in ADR --- .../adr/0002-cache-cleanup-is-per-item-evidence-bound.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md b/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md index 1261604e7..2a039f869 100644 --- a/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md +++ b/docs/architecture/adr/0002-cache-cleanup-is-per-item-evidence-bound.md @@ -16,7 +16,8 @@ lineage and must not be uploaded to a cloud provider merely to reclaim local spa DiskSage exposes known cache roots through the existing cache catalog, including the macOS uv cache. Cleanup uses the reviewed child manifest (`path`, byte count, modification time, and object identity) and revalidates that manifest immediately before mutation. Active-use evidence is -collected independently for each reviewed child with bounded, path-local `lsof` evidence: +collected independently for each reviewed child with bounded, path-local `lsof` evidence +(recursive for directories and direct for regular files): - incomplete evidence or an active process leaves that child untouched and returns a stable blocker; - an inactive child may be moved through DiskSage's identity-bound OS-Trash path; From 4fc847b8019e446a49b357368a87b40de7e27534 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 18:14:22 +0900 Subject: [PATCH 147/691] docs: fix production-date lineage policy in ADR --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 13bf49bc7..404ab012b 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -29,10 +29,18 @@ preserved while the replaceable Goal is updated to `blocked` and its explicit ev revoked; a terminal `source-evicted` projection is not rewritten merely because its original path is now absent. +Production-time lineage is recorded with explicit precedence: embedded file metadata first, then an +unambiguous filename date token, then filesystem creation time, and finally filesystem modification +time. Tokens such as `2026-04-28` or `251210` are stored as `filename:path-token` evidence with +low confidence and force review when they are selected; they are planning evidence, not proof of +cloud sync, ownership, or permission to evict the source. An embedded/filename disagreement is +also retained as a review blocker rather than silently resolved. + ## Consequences - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. - Goal completion gates remain false until their corresponding evidence exists. +- Filename dates can place a candidate in a provisional archive period, but never authorize automatic transfer or eviction. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. From dad079d20a32da8e21f7dfd1e78546b5c402e894 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 18:35:48 +0900 Subject: [PATCH 148/691] feat: allow personal native client copy-only mode --- README.md | 2 +- .../adr/0001-cloud-offload-goal-state.md | 8 +++ ...26-07-21-cloud-capacity-evidence-design.md | 8 +++ src-tauri/cloud_plan_implementation.rs.inc | 23 +++++++- src-tauri/src/commands.rs | 35 ++++++++++-- src-tauri/src/provider_capacity.rs | 55 +++++++++++++++++++ src/lib/CloudArchive.svelte | 9 ++- src/lib/api.test.ts | 21 +++++++ src/lib/api.ts | 15 +++++ 9 files changed, 167 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index cd5a9e2c8..86f2dd62c 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ - 🗂 **Ontology-based organizing** — files classified into an OWL taxonomy you can edit - 📊 **Disk inventory** — "what is on my disk?", aggregated by category, unknowns surfaced - 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety, fully offline -- ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source +- ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve when configured; for personal roots, permits copy-only through an observed native desktop client when OAuth quota evidence is the only missing input; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source - 🟢 **Provider client runtime gate** — observes only bounded process names, never emits a command line, path, account identifier, or process name, and blocks new OneDrive/Google Drive copies when the local vendor runtime is not observed; runtime presence remains only a local prerequisite and never becomes an account-authentication, capacity, or sync-completion claim - ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode and a bounded native `brctl status` summary, emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, or native `needs-sync-up`; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety - 🧾 **Naruon cloud-copy readiness envelope** — combines path-free production-time evidence aggregates, planner/review blockers, provider-client runtime, authoritative capacity assessment, and iCloud queue/native status; binds them with a recursively key-sorted SHA-256 fingerprint while keeping every write, sync, review, and eviction authority false diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 404ab012b..016e56ac6 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -36,11 +36,19 @@ low confidence and force review when they are selected; they are planning eviden cloud sync, ownership, or permission to evict the source. An embedded/filename disagreement is also retained as a review blocker rather than silently resolved. +For personal OneDrive and Google Drive roots, a running native desktop client may admit the +copy-only step when the only missing evidence is the separate OAuth quota connection. This mode is +explicitly marked as capacity-unverified, requires a fresh provider-wide sync admission, and +retains the source until per-item native sync evidence is attested. It never authorizes API upload, +remote-capacity claims, or source eviction; organization/shared roots and other OAuth failures +remain blocked. + ## Consequences - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. - Goal completion gates remain false until their corresponding evidence exists. - Filename dates can place a candidate in a provisional archive period, but never authorize automatic transfer or eviction. +- A personal native-client copy may proceed without OAuth quota evidence only while the matching desktop client is observed running; provider sync attestation still gates eviction. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/docs/superpowers/specs/2026-07-21-cloud-capacity-evidence-design.md b/docs/superpowers/specs/2026-07-21-cloud-capacity-evidence-design.md index fa33ae912..c7aa0c88d 100644 --- a/docs/superpowers/specs/2026-07-21-cloud-capacity-evidence-design.md +++ b/docs/superpowers/specs/2026-07-21-cloud-capacity-evidence-design.md @@ -56,6 +56,14 @@ labels a positive native snapshot `available` rather than inventing a provider h the same exact byte-plus-reserve comparison still gates the copy. A zero remaining count is `exceeded`. +For a personal OneDrive or Google Drive root, DiskSage has a narrowly scoped native-client +exception: when the matching desktop client is observed running, the only unavailable capacity +reason is `provider-oauth-connection-missing`, and a fresh provider-wide sync admission is clear, +the copy-only step may proceed with `native-client-copy-capacity-unverified`. The plan keeps +`can_fit` unknown and makes no remote-capacity claim. Organization/shared roots, other OAuth +failures, and every API-upload path remain blocked. Per-item provider sync evidence and the +explicit source-eviction gate are unchanged. + The plan-level assessment uses the total potentially reclaimable candidate bytes. A plan may report that the full batch does not fit even though a smaller individual candidate can fit; the copy command therefore re-evaluates that exact candidate against the plan's freshly collected, root-bound diff --git a/src-tauri/cloud_plan_implementation.rs.inc b/src-tauri/cloud_plan_implementation.rs.inc index 056a69cc2..be7333f16 100644 --- a/src-tauri/cloud_plan_implementation.rs.inc +++ b/src-tauri/cloud_plan_implementation.rs.inc @@ -2433,6 +2433,18 @@ fn attach_local_copy_prerequisites(report: &mut cloud::CloudPlanReport, home: &P cloud::system_now_ms(), ); provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); + if report.capacity.as_ref().is_some_and(|assessment| { + provider_capacity::native_personal_client_copy_capacity_exception( + report.cloud_root.provider, + report.cloud_root.account_scope, + runtime.copy_prerequisite_met, + &assessment.snapshot, + ) + }) { + report + .notices + .push("native-client-copy-capacity-unverified".into()); + } if report.cloud_root.provider == CloudProvider::Icloud { let health = icloud_sync_health::inspect_new_copy_admission(home, cloud::system_now_ms()).ok(); @@ -3603,7 +3615,7 @@ fn run() -> Result<(), String> { .ok_or_else(|| "--confirm-copy-phrase가 필요함".to_string())?, )?; if !adopt_existing { - provider_client_runtime::require_provider_client_runtime( + let runtime = provider_client_runtime::require_provider_client_runtime( selected.provider, cloud::system_now_ms(), )?; @@ -3629,7 +3641,14 @@ fn run() -> Result<(), String> { candidate.bytes, args.capacity_reserve_mib.saturating_mul(1024 * 1024), ); - if assessment.can_fit != Some(true) { + let native_client_mode = + provider_capacity::native_personal_client_copy_capacity_exception( + selected.provider, + selected.account_scope, + runtime.copy_prerequisite_met, + &assessment.snapshot, + ); + if assessment.can_fit != Some(true) && !native_client_mode { return Err(if assessment.blockers.is_empty() { "cloud-capacity-verification-required".into() } else { diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index d9c5ab412..4aadccc15 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -1220,6 +1220,17 @@ fn cloud_plan_for_inputs( cloud::system_now_ms(), ); provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); + let native_client_mode = report.capacity.as_ref().is_some_and(|assessment| { + provider_capacity::native_personal_client_copy_capacity_exception( + selected.provider, + selected.account_scope, + runtime.copy_prerequisite_met, + &assessment.snapshot, + ) + }); + if native_client_mode { + report.notices.push("native-client-copy-capacity-unverified".into()); + } let (icloud_health, provider_global_sync) = if selected.provider == cloud::CloudProvider::Icloud { let health = icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()).ok(); @@ -1311,6 +1322,7 @@ fn attach_capacity_assessment( fn require_capacity_for_copy( candidate: &cloud::CloudCandidate, snapshot: &provider_capacity::CloudCapacitySnapshot, + allow_native_personal_client_exception: bool, ) -> Result<(), String> { let assessment = provider_capacity::assess_capacity( snapshot.clone(), @@ -1318,7 +1330,15 @@ fn require_capacity_for_copy( candidate.bytes, provider_capacity::DEFAULT_CAPACITY_RESERVE_BYTES, ); - if assessment.can_fit == Some(true) { + if assessment.can_fit == Some(true) + || (allow_native_personal_client_exception + && provider_capacity::native_personal_client_copy_capacity_exception( + candidate.provider, + candidate.destination_account_scope, + true, + snapshot, + )) + { Ok(()) } else { Err(if assessment.blockers.is_empty() { @@ -1505,7 +1525,7 @@ fn create_cloud_candidate_receipt( exact_confirmation_phrase, )?; if !adopt_existing { - provider_client_runtime::require_provider_client_runtime( + let runtime = provider_client_runtime::require_provider_client_runtime( selected.provider, cloud::system_now_ms(), )?; @@ -1524,7 +1544,14 @@ fn create_cloud_candidate_receipt( .capacity .as_ref() .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; - require_capacity_for_copy(candidate, &snapshot.snapshot)?; + let native_client_mode = + provider_capacity::native_personal_client_copy_capacity_exception( + selected.provider, + selected.account_scope, + runtime.copy_prerequisite_met, + &snapshot.snapshot, + ); + require_capacity_for_copy(candidate, &snapshot.snapshot, native_client_mode)?; } let (receipt, receipt_path) = if adopt_existing { cloud_transfer::adopt_existing_cloud_copy_with_approval( @@ -1645,7 +1672,7 @@ fn create_cloud_candidate_provider_api_receipt( .capacity .as_ref() .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; - require_capacity_for_copy(candidate, &capacity.snapshot)?; + require_capacity_for_copy(candidate, &capacity.snapshot, false)?; let review_decision = if candidate.requires_review { cloud_review::load_latest_decisions(&cloud_review_directory(app)?)? .into_iter() diff --git a/src-tauri/src/provider_capacity.rs b/src-tauri/src/provider_capacity.rs index d5a942ded..58f661376 100644 --- a/src-tauri/src/provider_capacity.rs +++ b/src-tauri/src/provider_capacity.rs @@ -578,6 +578,23 @@ pub fn unavailable_capacity_from_error( unavailable_capacity(provider, observed_at_ms, reason) } +/// Allow personal desktop-client copies when the native sync application is running but DiskSage +/// has no separate OAuth quota connection. This is intentionally copy-only: provider sync +/// attestation remains mandatory before any source eviction. +pub fn native_personal_client_copy_capacity_exception( + provider: CloudProvider, + account_scope: CloudAccountScope, + client_runtime_observed: bool, + snapshot: &CloudCapacitySnapshot, +) -> bool { + provider != CloudProvider::Icloud + && account_scope == CloudAccountScope::Personal + && client_runtime_observed + && snapshot.provider == provider + && snapshot.evidence_kind == CapacityEvidenceKind::Unavailable + && snapshot.unavailable_reason.as_deref() == Some("provider-oauth-connection-missing") +} + pub fn assess_capacity( snapshot: CloudCapacitySnapshot, requested_bytes: u64, @@ -741,6 +758,44 @@ mod tests { ); } + #[test] + fn personal_native_client_exception_never_authorizes_eviction_or_non_oauth_failures() { + let snapshot = unavailable_capacity( + CloudProvider::GoogleDrive, + 1, + "provider-oauth-connection-missing", + ); + assert!(native_personal_client_copy_capacity_exception( + CloudProvider::GoogleDrive, + CloudAccountScope::Personal, + true, + &snapshot, + )); + assert!(!native_personal_client_copy_capacity_exception( + CloudProvider::GoogleDrive, + CloudAccountScope::Organization, + true, + &snapshot, + )); + assert!(!native_personal_client_copy_capacity_exception( + CloudProvider::GoogleDrive, + CloudAccountScope::Personal, + false, + &snapshot, + )); + let api_failure = unavailable_capacity( + CloudProvider::GoogleDrive, + 1, + "cloud-capacity-provider-api-unavailable", + ); + assert!(!native_personal_client_copy_capacity_exception( + CloudProvider::GoogleDrive, + CloudAccountScope::Personal, + true, + &api_failure, + )); + } + #[test] fn provider_capacity_scope_refines_unknown_root_and_rejects_mismatches() { let root = CloudRoot { diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 4cd34d363..d3af3a7a5 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -170,7 +170,8 @@ const exactApproval = decision?.disposition === "approved"; const embeddedHighConfidence = candidate.production_time_confidence === "high" && candidate.production_time_source.startsWith("embedded:"); - const capacityEvidenceAvailable = api.cloudCapacityAllowsCopy(report?.capacity); + const capacityEvidenceAvailable = api.cloudCapacityAllowsCopy(report?.capacity) + || api.cloudNativeClientCopyAllowed(report?.capacity, selectedRootDetails(), report?.notices ?? []); const approvalPhrase = api.cloudCopyApprovalPhrase(candidate, "copy-only"); const providerAdmissionBlocked = report ? hasProviderAdmissionBlocker(report.notices) @@ -909,7 +910,11 @@ {:else}

원격 quota를 검증할 수 없음: {report.capacity.snapshot.unavailable_reason ?? "cloud-capacity-unavailable"}. - OneDrive·Google Drive는 읽기 전용 OAuth 연결 후 다시 계획해야 복사할 수 있습니다. + {#if api.cloudNativeClientCopyAllowed(report.capacity, selectedRootDetails(), report.notices)} + 개인 native-client 모드: 실행 중인 OneDrive·Google Drive 앱으로 copy-only를 진행하고, 개별 sync 증거 전에는 원본을 보존합니다. + {:else} + OneDrive·Google Drive는 읽기 전용 OAuth 연결 후 다시 계획해야 복사할 수 있습니다. + {/if} iCloud는 macOS 네이티브 계정 상태 확인 후 다시 계획해야 복사할 수 있습니다.

{/if} diff --git a/src/lib/api.test.ts b/src/lib/api.test.ts index e5e9f300d..213b13483 100644 --- a/src/lib/api.test.ts +++ b/src/lib/api.test.ts @@ -217,4 +217,25 @@ describe("cloud capacity copy gate", () => { }, })).toBe(false); }); + + it("allows personal native-client copy-only mode only with the explicit runtime notice", () => { + const unavailable: api.CloudCapacityAssessment = { + ...assessment, + can_fit: null, + snapshot: { + ...snapshot, + provider: "google-drive", + evidence_kind: "unavailable", + state: "unavailable", + remaining_bytes: null, + evidence_fingerprint: null, + unavailable_reason: "provider-oauth-connection-missing", + }, + }; + const root = { provider: "google-drive" as const, account_scope: "personal" as const }; + const notices = ["provider-client-runtime-observed", "native-client-copy-capacity-unverified"]; + expect(api.cloudNativeClientCopyAllowed(unavailable, root, notices)).toBe(true); + expect(api.cloudNativeClientCopyAllowed(unavailable, { ...root, account_scope: "organization" }, notices)).toBe(false); + expect(api.cloudNativeClientCopyAllowed(unavailable, root, notices.slice(0, 1))).toBe(false); + }); }); diff --git a/src/lib/api.ts b/src/lib/api.ts index 6887b39f8..bc8e4b742 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -695,6 +695,21 @@ export function cloudCapacityAllowsCopy( && assessment.snapshot.evidence_kind !== "unavailable"; } +/** Personal native-client mode permits copy-only when the desktop sync app is running. */ +export function cloudNativeClientCopyAllowed( + assessment: CloudCapacityAssessment | null | undefined, + root: Pick | null | undefined, + notices: readonly string[], +): boolean { + return root?.account_scope === "personal" + && root.provider !== "icloud" + && notices.includes("provider-client-runtime-observed") + && notices.includes("native-client-copy-capacity-unverified") + && assessment?.can_fit === null + && assessment.snapshot.evidence_kind === "unavailable" + && assessment.snapshot.unavailable_reason === "provider-oauth-connection-missing"; +} + export interface ExactDuplicateSummary { cluster_count: number; candidate_count: number; From f82065d38bc11f786f520c88bc06b6ace9b1785e Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 19:17:38 +0900 Subject: [PATCH 149/691] fix: ignore hidden default provider domain marker --- src-tauri/src/provider_global_sync.rs | 48 +++++++++++++++++++++++++-- 1 file changed, 46 insertions(+), 2 deletions(-) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index 9949005dd..cb1fbef6b 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -117,11 +117,15 @@ pub fn parse_dump( let mut has_filename_too_long = false; let mut has_temporarily_disconnected = false; let mut has_server_unreachable = false; + let mut hidden_default_domain = false; for line in output.lines() { let trimmed = line.trim(); let marker = trimmed.strip_prefix("+ ").unwrap_or(trimmed).trim(); let marker_lower = marker.to_ascii_lowercase(); + if marker.starts_with("domain: ") { + hidden_default_domain = marker.contains("(default)") && marker.contains("(hidden)"); + } upload_progress_present |= line_has_active_progress(marker, "upload progress:"); download_progress_present |= line_has_active_progress(marker, "download progress:"); if let Some(count) = parse_pending_indexable_count(marker) { @@ -142,7 +146,7 @@ pub fn parse_dump( if has_filename_too_long || has_temporarily_disconnected || has_server_unreachable - || marker.contains("user-disabled") + || (marker.contains("user-disabled") && !hidden_default_domain) || marker.contains("can't dump the extension") || marker.contains("Error Domain=") || (marker.contains("error:'") && !marker.contains("error:''")) @@ -306,7 +310,9 @@ fn report_identity_is_valid(report: &ProviderGlobalSyncReport) -> bool { fn report_has_pending_aggregate_evidence(report: &ProviderGlobalSyncReport) -> bool { report.upload_progress_present || report.download_progress_present - || report.pending_indexable_count.is_some_and(|count| count > 0) + || report + .pending_indexable_count + .is_some_and(|count| count > 0) } fn report_is_authoritative_clear(report: &ProviderGlobalSyncReport) -> bool { @@ -404,6 +410,25 @@ sync engine state: + reconciliation (277399 entries): "#; + const HIDDEN_DEFAULT_USER_DISABLED_DUMP: &str = r#" +com.microsoft.OneDrive.FileProvider +domain: (default) (hidden) + + (user-disabled) +domain: personal +sync engine state: + + pending-indexable-count: 0 + + scheduling state: idle +"#; + + const ACTIVE_USER_DISABLED_DUMP: &str = r#" +com.microsoft.OneDrive.FileProvider +domain: personal + + (user-disabled) +sync engine state: + + pending-indexable-count: 0 + + scheduling state: idle +"#; + #[test] fn quiet_dump_is_clear_without_retaining_paths() { let report = parse_dump(CloudProvider::Onedrive, QUIET_DUMP).unwrap(); @@ -468,6 +493,25 @@ sync engine state: assert!(require_new_copy_admission(&report).is_err()); } + #[test] + fn hidden_default_domain_user_disabled_marker_is_not_global_error() { + let report = + parse_dump(CloudProvider::Onedrive, HIDDEN_DEFAULT_USER_DISABLED_DUMP).unwrap(); + assert_eq!(report.state, ProviderGlobalSyncState::Clear); + assert!(report.blockers.is_empty()); + assert!(require_new_copy_admission(&report).is_ok()); + } + + #[test] + fn active_domain_user_disabled_marker_still_blocks() { + let report = parse_dump(CloudProvider::Onedrive, ACTIVE_USER_DISABLED_DUMP).unwrap(); + assert_eq!(report.state, ProviderGlobalSyncState::Error); + assert!(report + .blockers + .contains(&"provider-global-sync-error".into())); + assert!(require_new_copy_admission(&report).is_err()); + } + #[test] fn disconnected_provider_is_error_and_fails_closed() { let dump = "com.google.drivefs.fpext\nsync engine state:\n temporarily disconnected: yes\n"; From 96825e0fed1a1b1258f9f013525548108314a199 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 19:27:10 +0900 Subject: [PATCH 150/691] feat: classify incomplete existing cloud copies --- src-tauri/src/cloud.rs | 47 +++++++++++++++-- src-tauri/src/provider_sync.rs | 92 ++++++++++++++++++++++++++++++++++ 2 files changed, 134 insertions(+), 5 deletions(-) diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index 79cf7f97b..f79e60ab9 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -3831,9 +3831,19 @@ fn planner_blocked_reason( kind: ArchiveKind, metadata: &ContentMetadata, destination: &Path, + provider: CloudProvider, + expected_bytes: u64, ) -> Option { if destination.exists() { - return Some("destination-exists".into()); + return Some( + crate::provider_sync::existing_destination_sync_blocker( + provider, + destination, + expected_bytes, + ) + .unwrap_or("destination-exists") + .into(), + ); } source_blocked_reason(path, kind, metadata) } @@ -4756,10 +4766,19 @@ pub fn plan_cloud_archive_from_snapshot( let blocked_reason = if source_snapshot_stale { Some("source-snapshot-stale".into()) } else { - source_scan_blocker.clone().or_else(|| { - planner_blocked_reason(&file.path, kind, &lineage_metadata, &dst) - }) - .or_else(|| provider_destination_path_blocked_reason(cloud_root, &dst)) + source_scan_blocker + .clone() + .or_else(|| { + planner_blocked_reason( + &file.path, + kind, + &lineage_metadata, + &dst, + cloud_root.provider, + file.bytes, + ) + }) + .or_else(|| provider_destination_path_blocked_reason(cloud_root, &dst)) }; let source_context = relative .parent() @@ -5508,6 +5527,8 @@ mod tests { ArchiveKind::IncompleteDownload, &metadata, Path::new("/definitely/missing/disksage-destination"), + CloudProvider::Icloud, + 0, ) .as_deref(), Some("incomplete-download") @@ -5753,6 +5774,8 @@ mod tests { ArchiveKind::Archive, &metadata, Path::new("/definitely/missing/disksage-destination"), + CloudProvider::Icloud, + 0, ) .as_deref(), Some("archive-index-unreadable") @@ -5769,6 +5792,8 @@ mod tests { ArchiveKind::IncompleteDownload, &ContentMetadata::default(), destination, + CloudProvider::Icloud, + 0, ) .as_deref(), Some("incomplete-download") @@ -5779,6 +5804,8 @@ mod tests { ArchiveKind::Archive, &ContentMetadata::default(), destination, + CloudProvider::Icloud, + 0, ) .as_deref(), Some("multipart-archive-atomic-copy-required") @@ -5796,6 +5823,8 @@ mod tests { ArchiveKind::Archive, &metadata, destination, + CloudProvider::Icloud, + 0, ) .as_deref(), Some("archive-index-unreadable") @@ -5811,6 +5840,8 @@ mod tests { ArchiveKind::Dataset, &ContentMetadata::default(), destination, + CloudProvider::Icloud, + 0, ) .as_deref(), Some("system-managed-photos-library-data") @@ -5821,6 +5852,8 @@ mod tests { ArchiveKind::Dataset, &ContentMetadata::default(), destination, + CloudProvider::Icloud, + 0, ), None ); @@ -5838,6 +5871,8 @@ mod tests { ArchiveKind::Media, &ContentMetadata::default(), destination, + CloudProvider::Icloud, + 0, ) .as_deref(), Some("system-managed-file-provider-storage") @@ -5848,6 +5883,8 @@ mod tests { ArchiveKind::Media, &ContentMetadata::default(), destination, + CloudProvider::Icloud, + 0, ), None ); diff --git a/src-tauri/src/provider_sync.rs b/src-tauri/src/provider_sync.rs index 54c2f2387..16a1149e4 100644 --- a/src-tauri/src/provider_sync.rs +++ b/src-tauri/src/provider_sync.rs @@ -224,6 +224,25 @@ impl FileProviderStatusSnapshot { } } +/// Return the stable blocker used when a provider-native destination exists locally but has not +/// reached a complete remote-sync state. This is diagnostic only; it never authorizes eviction. +fn incomplete_sync_blocker(sync_complete: bool) -> Option<&'static str> { + (!sync_complete).then_some("provider-sync-incomplete") +} + +fn icloud_sync_blocker(snapshot: &IcloudStatusSnapshot) -> Option<&'static str> { + incomplete_sync_blocker( + snapshot.is_ubiquitous + && snapshot.is_current + && !snapshot.is_uploading + && snapshot.is_uploaded, + ) +} + +fn file_provider_sync_blocker(snapshot: &FileProviderItemStatus) -> Option<&'static str> { + incomplete_sync_blocker(snapshot.is_sync_complete()) +} + fn file_provider_sync_state(snapshot: &FileProviderStatusSnapshot) -> ProviderSyncState { if snapshot.item.is_excluded_from_sync { ProviderSyncState::ExcludedFromSync @@ -763,6 +782,50 @@ pub(crate) fn file_providerctl_status(path: &str) -> Result { String::from_utf8(output).map_err(|_| "file-provider-status-output-not-utf8".into()) } +/// Inspect an already-existing destination during planning without retaining provider paths or +/// identifiers. A failed probe deliberately falls back to the ordinary collision blocker. +#[cfg(all(target_os = "macos", not(coverage)))] +pub fn existing_destination_sync_blocker( + provider: CloudProvider, + destination: &std::path::Path, + expected_bytes: u64, +) -> Option<&'static str> { + let metadata = std::fs::symlink_metadata(destination).ok()?; + if metadata.file_type().is_symlink() || !metadata.is_file() || metadata.len() != expected_bytes + { + return None; + } + let path = destination.to_str()?; + match provider { + CloudProvider::Icloud => { + let (is_ubiquitous, is_uploaded, is_uploading, is_current) = + foundation_icloud_status(path).ok()?; + icloud_sync_blocker(&IcloudStatusSnapshot { + is_ubiquitous, + is_uploaded, + is_uploading, + is_current, + observed_bytes: expected_bytes, + destination_blake3: String::new(), + }) + } + CloudProvider::Onedrive | CloudProvider::GoogleDrive => { + let output = file_providerctl_status(path).ok()?; + let status = parse_file_providerctl_item_status(&output, expected_bytes).ok()?; + file_provider_sync_blocker(&status) + } + } +} + +#[cfg(any(not(target_os = "macos"), coverage))] +pub fn existing_destination_sync_blocker( + _provider: CloudProvider, + _destination: &std::path::Path, + _expected_bytes: u64, +) -> Option<&'static str> { + None +} + /// Read macOS File Provider status for a OneDrive or Google Drive destination and bind it to the /// verified local copy. This never hydrates, evicts, uploads, or mutates the file. #[cfg(all(target_os = "macos", not(coverage)))] @@ -980,6 +1043,28 @@ mod tests { assert!(blockers.contains(&"provider-sync-incomplete".to_string())); } + #[test] + fn planner_marks_local_current_but_not_uploaded_as_incomplete() { + let snapshot = IcloudStatusSnapshot { + is_ubiquitous: true, + is_uploaded: false, + is_uploading: false, + is_current: true, + observed_bytes: 42, + destination_blake3: String::new(), + }; + assert_eq!( + icloud_sync_blocker(&snapshot), + Some("provider-sync-incomplete") + ); + + let uploaded = IcloudStatusSnapshot { + is_uploaded: true, + ..snapshot + }; + assert_eq!(icloud_sync_blocker(&uploaded), None); + } + #[test] fn timeliness_distinguishes_complete_pending_and_overdue_without_approving() { let receipt = receipt(CloudProvider::Icloud); @@ -1113,6 +1198,13 @@ mod tests { ); } + #[test] + fn planner_marks_pending_file_provider_item_as_incomplete() { + let output = uploaded_file_provider_output().replace("isUploaded = 1", "isUploaded = 0"); + let snapshot = parse_file_providerctl_snapshot(&output, 42, "content-hash").unwrap(); + assert_eq!(file_provider_sync_blocker(&snapshot.item), Some("provider-sync-incomplete")); + } + #[test] fn trashed_file_provider_item_remains_incomplete() { let output = uploaded_file_provider_output().replace("isTrashed = 0", "isTrashed = 1"); From dd077c1335bf9b8035518c5823cee99e7b304466 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 19:49:48 +0900 Subject: [PATCH 151/691] fix: bound iCloud native status probing on large databases --- src-tauri/src/icloud_sync_health.rs | 62 +++++++++++++++++++++++++++-- 1 file changed, 58 insertions(+), 4 deletions(-) diff --git a/src-tauri/src/icloud_sync_health.rs b/src-tauri/src/icloud_sync_health.rs index d8546b17f..308797cf9 100644 --- a/src-tauri/src/icloud_sync_health.rs +++ b/src-tauri/src/icloud_sync_health.rs @@ -462,6 +462,23 @@ fn parse_native_status_output( } } +fn native_status_summary_complete(output: &[u8]) -> bool { + let output = String::from_utf8_lossy(output); + let container_count = output.lines().any(|line| { + let mut parts = line.split_whitespace(); + parts.next().and_then(|value| value.parse::().ok()).is_some() + && parts.next() == Some("containers") + && parts.next() == Some("matching") + }); + let summary = output.lines().any(|line| { + line.contains("{client:") + && line.contains(" server:") + && line.contains(" sync:") + && line.contains(" last-sync:") + }); + container_count && summary +} + #[cfg(target_os = "macos")] fn probe_native_status(observed_at_ms: u64) -> IcloudNativeStatusEvidence { use std::io::ErrorKind; @@ -517,6 +534,7 @@ fn probe_native_status(observed_at_ms: u64) -> IcloudNativeStatusEvidence { let mut timed_out = false; let mut output_truncated = false; let mut read_failed = false; + let mut bounded_after_summary = false; let status = loop { match stdout.read(&mut buffer) { Ok(0) => {} @@ -541,6 +559,13 @@ fn probe_native_status(observed_at_ms: u64) -> IcloudNativeStatusEvidence { break None; } } + if native_status_summary_complete(&output) { + bounded_after_summary = true; + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + break None; + } match child.try_wait() { Ok(Some(status)) => { // The process can exit while unread bytes remain in the pipe. Drain them before @@ -597,7 +622,8 @@ fn probe_native_status(observed_at_ms: u64) -> IcloudNativeStatusEvidence { parse_native_status_output( &output, observed_at_ms, - !read_failed && status.is_some_and(|status| status.success()), + !read_failed + && (bounded_after_summary || status.is_some_and(|status| status.success())), timed_out, output_truncated, ) @@ -830,6 +856,13 @@ fn clone_client_database_snapshot(db_dir: &Path) -> Result Option { + let identity = source_file_identity(&db_dir.join("client.db"), true).ok().flatten()?; + (identity.logical_bytes <= MAX_SNAPSHOT_SOURCE_BYTES) + .then(|| probe_native_status(observed_at_ms)) +} + fn run_consistent_snapshot_queue_probe(db_dir: &Path) -> Result<(String, bool), String> { let snapshot = clone_client_database_snapshot(db_dir)?; let includes_wal = snapshot.includes_wal; @@ -1138,7 +1171,10 @@ pub fn probe_icloud_sync_health( .iter() .map(|(role, required)| database_file_evidence(db_dir, role, *required)) .collect::, _>>()?; - let native_status = probe_native_status(observed_at_ms); + #[cfg(target_os = "macos")] + let native_status = bounded_native_status(db_dir, observed_at_ms); + #[cfg(not(target_os = "macos"))] + let native_status = Some(probe_native_status(observed_at_ms)); match run_consistent_snapshot_queue_probe(db_dir) { Ok((output, includes_wal)) => { let mut report = build_report( @@ -1148,7 +1184,7 @@ pub fn probe_icloud_sync_health( true, includes_wal, )?; - report.native_status = Some(native_status); + report.native_status = native_status; attach_native_status_admission(&mut report); Ok(report) } @@ -1165,7 +1201,7 @@ pub fn probe_icloud_sync_health( report .notices .push("consistent-copy-on-write-snapshot-unavailable".into()); - report.native_status = Some(native_status); + report.native_status = native_status; attach_native_status_admission(&mut report); Ok(report) } @@ -1241,6 +1277,13 @@ mod tests { .contains("requestID")); } + #[test] + fn stops_native_probe_after_summary_before_detail_stream() { + let summary = b"1 containers matching '*'\\nforeground {client:needs-sync server:full-sync sync:needs-sync-up last-sync:now}\\n"; + assert!(native_status_summary_complete(summary)); + assert!(!native_status_summary_complete(b"1 containers matching '*'\\n")); + } + #[test] fn native_status_parser_fails_closed_without_a_summary() { let evidence = @@ -1419,6 +1462,17 @@ mod tests { assert_eq!(error, "icloud-sync-health-snapshot-source-too-large"); } + #[cfg(target_os = "macos")] + #[test] + fn oversized_cloud_docs_database_skips_expensive_native_status_probe() { + let source = tempfile::tempdir().unwrap(); + fs::File::create(source.path().join("client.db")) + .unwrap() + .set_len(MAX_SNAPSHOT_SOURCE_BYTES + 1) + .unwrap(); + assert!(bounded_native_status(source.path(), 1).is_none()); + } + #[cfg(target_os = "macos")] #[test] fn copy_on_write_snapshot_clones_main_and_wal_then_removes_temporary_files() { From ea3eb70248ebe04a8d899a6b102c0da3b58e8b8c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 20:02:32 +0900 Subject: [PATCH 152/691] fix: reject File Provider roots before source scan --- src-tauri/src/cloud.rs | 39 ++++++++++++++++++++++++++++++++++++++- 1 file changed, 38 insertions(+), 1 deletion(-) diff --git a/src-tauri/src/cloud.rs b/src-tauri/src/cloud.rs index f79e60ab9..1952ee247 100644 --- a/src-tauri/src/cloud.rs +++ b/src-tauri/src/cloud.rs @@ -973,6 +973,14 @@ pub fn collect_archive_files_bounded( max_entries: u64, max_duration: Duration, ) -> ArchiveFileCollection { + if path_inside_managed_file_provider_storage(root) { + return ArchiveFileCollection { + files: Vec::new(), + visited_entries: 0, + complete: false, + stop_reasons: vec!["source-scan-managed-file-provider-root".into()], + }; + } let excluded = excluded_roots.to_vec(); let mut files = Vec::new(); let mut visited_entries = 0_u64; @@ -3810,9 +3818,15 @@ fn source_blocked_reason( /// File Provider's private storage and download staging trees are owned by macOS. Their files /// are implementation state, not user payloads; only a provider-aware operation may reclaim them. fn path_inside_managed_file_provider_storage(path: &Path) -> bool { + let mut previous = String::new(); path.components().any(|component| { let name = normalized_account_text(&component.as_os_str().to_string_lossy()); - name == "file provider storage" + let managed = name == "file provider storage" + || (previous == "library" + && matches!(name.as_str(), "mobile documents" | "cloudstorage")) + || (previous == "application support" && name == "fileprovider"); + previous = name; + managed }) } @@ -5342,6 +5356,29 @@ mod tests { ); } + #[cfg(not(coverage))] + #[test] + fn bounded_source_scan_rejects_managed_file_provider_root() { + let tmp = tempfile::tempdir().unwrap(); + let source_root = tmp.path().join("Library/Mobile Documents"); + std::fs::create_dir_all(&source_root).unwrap(); + std::fs::write(source_root.join("report.pdf"), b"pdf").unwrap(); + + let collection = collect_archive_files_bounded( + &source_root, + &[], + 100, + Duration::from_secs(30), + ); + + assert!(!collection.complete); + assert!(collection.files.is_empty()); + assert_eq!( + collection.stop_reasons, + vec!["source-scan-managed-file-provider-root".to_string()] + ); + } + #[cfg(all(target_os = "macos", not(coverage)))] #[test] fn dataless_files_are_not_misreported_as_metadata_probe_timeouts() { From 1b8998b2355bcee7e65cb9f35911e4d362b98cfa Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 20:06:47 +0900 Subject: [PATCH 153/691] docs: record File Provider scan boundary --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 016e56ac6..6a6c224d3 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -43,12 +43,20 @@ retains the source until per-item native sync evidence is attested. It never aut remote-capacity claims, or source eviction; organization/shared roots and other OAuth failures remain blocked. +Source enumeration is also forbidden inside managed File Provider trees (`Library/Mobile +Documents`, `Library/CloudStorage`, `Library/Application Support/FileProvider`, and +`File Provider Storage`). If one of these trees is supplied as the scan root, the bounded collector +returns an incomplete scan with `source-scan-managed-file-provider-root` and produces no transfer +candidate. This prevents DiskSage diagnostics from competing with, or materializing, provider +state. + ## Consequences - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. - Goal completion gates remain false until their corresponding evidence exists. - Filename dates can place a candidate in a provisional archive period, but never authorize automatic transfer or eviction. - A personal native-client copy may proceed without OAuth quota evidence only while the matching desktop client is observed running; provider sync attestation still gates eviction. +- Managed File Provider roots are never recursively scanned; the explicit incomplete-scan blocker is non-overridable. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. From d0062cd34ce0ddb7f5d7a858dc2a9530d3b2381b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 20:16:19 +0900 Subject: [PATCH 154/691] fix: refresh projection issues after reconciliation --- src-tauri/cloud_plan_implementation.rs.inc | 54 ++++++++++++++++++++++ 1 file changed, 54 insertions(+) diff --git a/src-tauri/cloud_plan_implementation.rs.inc b/src-tauri/cloud_plan_implementation.rs.inc index be7333f16..aa469ee3b 100644 --- a/src-tauri/cloud_plan_implementation.rs.inc +++ b/src-tauri/cloud_plan_implementation.rs.inc @@ -666,6 +666,21 @@ fn projection_state(path: &Path, kind: &str, receipt_id: &str) -> &'static str { } } +#[cfg(not(coverage))] +fn refresh_projection_issues(entry: &mut ReceiptReconciliationEntry) { + entry.issues.retain(|issue| { + !issue.starts_with("adr-projection-") && !issue.starts_with("goal-projection-") + }); + for (kind, state) in [ + ("adr", entry.adr_projection_state.as_deref()), + ("goal", entry.goal_projection_state.as_deref()), + ] { + if let Some(state) = state.filter(|state| *state != "valid") { + entry.issues.push(format!("{kind}-projection-{state}")); + } + } +} + #[cfg(not(coverage))] fn evidence_record_count(evidence_dirs: &[PathBuf], receipt_id: &str) -> u64 { let prefix = format!("{receipt_id}-"); @@ -3049,6 +3064,7 @@ fn reconcile_receipts( evidence_record_count(&[evidence_dir.to_path_buf()], &receipt.receipt_id); } } + refresh_projection_issues(&mut report.entries[entry_index]); } report.incomplete_projection_count = report .entries @@ -3958,6 +3974,44 @@ mod tests { assert!(validate_action_args(&missing_evidence).is_err()); } + #[test] + fn reconciliation_refreshes_projection_issues_after_writing_projections() { + let mut entry = ReceiptReconciliationEntry { + file_name: "receipt.json".into(), + receipt_id: Some("receipt".into()), + provider: Some(CloudProvider::Icloud), + bytes: Some(1), + source_state: Some("present".into()), + destination_state: Some("present".into()), + adr_projection_state: Some("valid".into()), + goal_projection_state: Some("valid".into()), + goal_status: Some("blocked".into()), + goal_state: None, + provider_sync_state: None, + eviction_permit: false, + attestation_error: None, + evidence_record_count: 0, + issues: vec![ + "adr-projection-invalid-schema".into(), + "goal-projection-missing".into(), + "provider-attestation-incomplete".into(), + ], + }; + + refresh_projection_issues(&mut entry); + assert_eq!(entry.issues, vec!["provider-attestation-incomplete"]); + + entry.goal_projection_state = Some("missing".into()); + refresh_projection_issues(&mut entry); + assert_eq!( + entry.issues, + vec![ + "provider-attestation-incomplete", + "goal-projection-missing" + ] + ); + } + #[test] fn empty_receipt_reconciliation_does_not_claim_a_cloud_mutation() { let temp = tempfile::tempdir().unwrap(); From 311b2aa90e2a68260eceabe5636ff62b026a4cd7 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 20:31:22 +0900 Subject: [PATCH 155/691] feat: retain bounded provider timeout evidence --- .../adr/0001-cloud-offload-goal-state.md | 7 ++ src-tauri/src/provider_global_sync.rs | 68 +++++++++++++++++-- src/lib/CloudArchive.svelte | 1 + 3 files changed, 69 insertions(+), 7 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 6a6c224d3..fa5761b94 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -50,6 +50,12 @@ returns an incomplete scan with `source-scan-managed-file-provider-root` and pro candidate. This prevents DiskSage diagnostics from competing with, or materializing, provider state. +Provider-wide File Provider dumps are bounded by both output size and wall-clock time. If a timed-out +dump has already emitted safe aggregate markers, DiskSage may retain only those markers as +incomplete evidence; it records `provider-global-sync-probe-timeout`, marks the provider state +`unavailable`, and continues to block new copies. A partial dump can never become authoritative +clear evidence. + ## Consequences - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. @@ -57,6 +63,7 @@ state. - Filename dates can place a candidate in a provisional archive period, but never authorize automatic transfer or eviction. - A personal native-client copy may proceed without OAuth quota evidence only while the matching desktop client is observed running; provider sync attestation still gates eviction. - Managed File Provider roots are never recursively scanned; the explicit incomplete-scan blocker is non-overridable. +- A timed-out provider-wide dump may explain active transfer or reconciliation markers, but its incomplete evidence never admits a new copy. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index cb1fbef6b..5cdf07b33 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -12,6 +12,8 @@ use serde::{Deserialize, Serialize}; // room for real OneDrive/Google Drive dumps while retaining a hard memory ceiling. const MAX_DUMP_BYTES: u64 = 32 * 1024 * 1024; const PROBE_TIMEOUT_MS: u64 = 20_000; +const PROBE_TIMEOUT_MARKER: &str = "provider-global-sync-probe-timeout: yes"; +const PROBE_TIMEOUT_NOTICE: &str = "provider-global-sync-probe-timeout"; #[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)] #[serde(rename_all = "kebab-case")] @@ -107,6 +109,12 @@ pub fn parse_dump( if !output.contains(identifier) || !output.contains("sync engine state:") { return Err("provider-global-sync-dump-incomplete".into()); } + let probe_timed_out = output.lines().any(|line| { + line.trim() + .strip_prefix("+ ") + .unwrap_or_else(|| line.trim()) + == PROBE_TIMEOUT_MARKER + }); let mut upload_progress_present = false; let mut download_progress_present = false; @@ -167,7 +175,9 @@ pub fn parse_dump( || needs_indexing || pending_indexable_count.is_some_and(|count| count > 0) || reconciliation_pending; - let state = if has_error { + let state = if probe_timed_out { + ProviderGlobalSyncState::Unavailable + } else if has_error { ProviderGlobalSyncState::Error } else if pending { ProviderGlobalSyncState::Pending @@ -196,23 +206,45 @@ pub fn parse_dump( if has_error { blockers.push("provider-global-sync-error".into()); } + if probe_timed_out { + blockers.push(PROBE_TIMEOUT_NOTICE.into()); + } + let mut notices = vec![ + "provider-global-sync-dump-read-only".into(), + "provider-global-sync-user-paths-not-retained".into(), + ]; + if probe_timed_out { + notices.push(PROBE_TIMEOUT_NOTICE.into()); + } Ok(ProviderGlobalSyncReport { schema_version: PROVIDER_GLOBAL_SYNC_SCHEMA_VERSION, provider, evidence_kind: "fileproviderctl-global-dump".into(), - evidence_complete: true, + evidence_complete: !probe_timed_out, state, upload_progress_present, download_progress_present, pending_indexable_count, blockers, - notices: vec![ - "provider-global-sync-dump-read-only".into(), - "provider-global-sync-user-paths-not-retained".into(), - ], + notices, }) } +#[cfg(target_os = "macos")] +fn partial_dump_after_timeout(bytes: Vec, identifier: &str) -> Option { + if probe_output_is_truncated(bytes.len()) { + return None; + } + let mut output = String::from_utf8(bytes).ok()?; + if !output.contains(identifier) || !output.contains("sync engine state:") { + return None; + } + output.push_str("\n+ "); + output.push_str(PROBE_TIMEOUT_MARKER); + output.push('\n'); + Some(output) +} + #[cfg(target_os = "macos")] fn run_dump(provider: CloudProvider) -> Result { use std::io::Read; @@ -259,7 +291,12 @@ fn run_dump(provider: CloudProvider) -> Result { Ok(None) if Instant::now() >= deadline => { let _ = child.kill(); let _ = child.wait(); - let _ = reader.join(); + let partial = reader.join().ok().and_then(Result::ok); + if let Some(output) = + partial.and_then(|bytes| partial_dump_after_timeout(bytes, identifier)) + { + return Ok(output); + } return Err("provider-global-sync-probe-timeout".into()); } Ok(None) => thread::sleep(Duration::from_millis(50)), @@ -569,6 +606,23 @@ sync engine state: assert!(probe_output_is_truncated(MAX_DUMP_BYTES as usize + 1)); } + #[test] + fn timed_out_partial_dump_is_incomplete_and_fails_closed() { + let report = parse_dump( + CloudProvider::Onedrive, + &format!("{QUIET_DUMP}\n+ {PROBE_TIMEOUT_MARKER}\n"), + ) + .unwrap(); + assert_eq!(report.state, ProviderGlobalSyncState::Unavailable); + assert!(!report.evidence_complete); + assert!(report.blockers.contains(&PROBE_TIMEOUT_NOTICE.into())); + assert_eq!( + require_new_copy_admission(&report).unwrap_err(), + "provider-global-sync-evidence-incomplete" + ); + assert!(report.notices.contains(&PROBE_TIMEOUT_NOTICE.into())); + } + #[test] fn malformed_or_icloud_dump_is_rejected() { assert!(parse_dump(CloudProvider::Onedrive, "sync engine state:").is_err()); diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index d3af3a7a5..b60f302d8 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -627,6 +627,7 @@ "provider-global-sync-temporarily-disconnected": "공급자가 일시적으로 연결 해제됨", "provider-global-sync-server-unreachable": "공급자 서버에 연결할 수 없음", "provider-global-sync-error": "공급자 전역 동기화 오류가 있음", + "provider-global-sync-probe-timeout": "공급자 동기화 상태 확인이 시간 초과됨", }; return labels[blocker] ?? blocker; } From 128073c559e5403262156393a37bb4e315f25043 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 21:12:14 +0900 Subject: [PATCH 156/691] docs: keep worktrees off managed provider roots --- docs/development/cloud-offload-operator-runbook.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 7a74b9c14..84c2eb383 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -45,6 +45,11 @@ The runtime sequence is: `system-managed-photos-library-data` blockers; individual SQLite members are never copied. 7. Only a fresh attestation plus the separate receipt-bound human approval may move the source to the OS Trash. The destination and Trash are never emptied by DiskSage. +8. Keep DiskSage repositories, Git worktrees, and temporary evidence outside macOS-managed + File Provider roots (for example `~/Documents` when it carries a provider-domain marker). + A dataless `.git` file or a Git operation that waits on materialization is provider evidence, + not a stale-worktree deletion signal; stop the audit and relocate the worktree to a local + volume such as `/private/tmp` before continuing. The Goal and ADR files are replaceable projections. Agents or operators must compare them with the immutable receipt/evidence record before any mutation. Naruon receives lineage/provider evidence, From 549b05ce00a7561ff42be52731919005b9e35a80 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 21:13:01 +0900 Subject: [PATCH 157/691] docs: record provider-managed worktree boundary --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index fa5761b94..2dfa227cd 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -50,6 +50,11 @@ returns an incomplete scan with `source-scan-managed-file-provider-root` and pro candidate. This prevents DiskSage diagnostics from competing with, or materializing, provider state. +DiskSage repositories, Git worktrees, and temporary evidence are operated from a local volume +outside managed File Provider roots. A provider-domain marker on the parent or a dataless `.git` +entry is treated as provider materialization evidence, not as proof of a stale worktree; the +worktree audit stops and must be relocated before it can continue. + Provider-wide File Provider dumps are bounded by both output size and wall-clock time. If a timed-out dump has already emitted safe aggregate markers, DiskSage may retain only those markers as incomplete evidence; it records `provider-global-sync-probe-timeout`, marks the provider state @@ -63,6 +68,8 @@ clear evidence. - Filename dates can place a candidate in a provisional archive period, but never authorize automatic transfer or eviction. - A personal native-client copy may proceed without OAuth quota evidence only while the matching desktop client is observed running; provider sync attestation still gates eviction. - Managed File Provider roots are never recursively scanned; the explicit incomplete-scan blocker is non-overridable. +- Worktree audits stop on provider-managed parents or dataless Git metadata; stale-worktree removal + is never inferred from a materialization wait. - A timed-out provider-wide dump may explain active transfer or reconciliation markers, but its incomplete evidence never admits a new copy. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or From 59cb6a1fdfe10faf2cab4d4dc7ff8229e3caf687 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 21:23:33 +0900 Subject: [PATCH 158/691] fix: block copies while iCloud sync-down is pending --- .../adr/0001-cloud-offload-goal-state.md | 2 + .../cloud-offload-operator-runbook.md | 2 + src-tauri/src/icloud_sync_health.rs | 40 ++++++++++++++++++ src-tauri/src/naruon_cloud_copy_readiness.rs | 41 +++++++++++++++++-- src/lib/CloudArchive.svelte | 1 + 5 files changed, 83 insertions(+), 3 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 2dfa227cd..f5e029661 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -71,6 +71,8 @@ clear evidence. - Worktree audits stop on provider-managed parents or dataless Git metadata; stale-worktree removal is never inferred from a materialization wait. - A timed-out provider-wide dump may explain active transfer or reconciliation markers, but its incomplete evidence never admits a new copy. +- An iCloud native `needs-sync-up` or `needs-sync-down` state blocks new-copy admission until the + bounded native status is quiet; neither direction is treated as completed provider evidence. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 84c2eb383..994bbbf03 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -28,6 +28,8 @@ The runtime sequence is: the same action; the returned receipt/object ID is the hand-off for a later attestation. 4. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and no eviction permit is issued. + iCloud native `needs-sync-up` and `needs-sync-down` states are also explicit admission blockers; + the latter means the provider still has remote changes to materialize. Third-party File Provider dumps also block new copies while upload/download progress, non-zero reconciliation backlogs (`provider-global-sync-reconciliation-pending`), provider disconnection, or path errors are present; the stable blocker codes are shown in the plan and diff --git a/src-tauri/src/icloud_sync_health.rs b/src-tauri/src/icloud_sync_health.rs index 308797cf9..298e9642a 100644 --- a/src-tauri/src/icloud_sync_health.rs +++ b/src-tauri/src/icloud_sync_health.rs @@ -164,6 +164,14 @@ pub fn native_sync_up_pending(evidence: &IcloudNativeStatusEvidence) -> bool { .is_some_and(|state| state.split('|').any(|value| value == "needs-sync-up")) } +pub fn native_sync_down_pending(evidence: &IcloudNativeStatusEvidence) -> bool { + evidence.status_observed + && evidence + .sync_state + .as_deref() + .is_some_and(|state| state.split('|').any(|value| value == "needs-sync-down")) +} + #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)] pub struct IcloudSyncHealthReport { pub schema_version: u32, @@ -1092,6 +1100,24 @@ fn attach_native_status_admission(report: &mut IcloudSyncHealthReport) { .blockers .insert(0, "icloud-native-sync-up-pending".into()); } + if report + .native_status + .as_ref() + .is_some_and(native_sync_down_pending) + && !report + .new_copy_admission_blockers + .iter() + .any(|blocker| blocker == "icloud-native-sync-down-pending") + { + report.sync_backlog_present = true; + report + .new_copy_admission_blockers + .push("icloud-native-sync-down-pending".into()); + report.new_copy_admission_state = "blocked".into(); + report + .blockers + .insert(0, "icloud-native-sync-down-pending".into()); + } } /// Require a quiet local iCloud upload queue before adding another local copy. @@ -1277,6 +1303,20 @@ mod tests { .contains("requestID")); } + #[test] + fn native_sync_down_pending_is_detected_from_bounded_summary() { + let evidence = parse_native_status_output( + "1 containers matching '*'\n\ + foreground {client:needs-sync server:full-sync sync:needs-sync-down last-sync:now}\n", + 42, + false, + true, + false, + ); + assert!(native_sync_down_pending(&evidence)); + assert!(!native_sync_up_pending(&evidence)); + } + #[test] fn stops_native_probe_after_summary_before_detail_stream() { let summary = b"1 containers matching '*'\\nforeground {client:needs-sync server:full-sync sync:needs-sync-up last-sync:now}\\n"; diff --git a/src-tauri/src/naruon_cloud_copy_readiness.rs b/src-tauri/src/naruon_cloud_copy_readiness.rs index b6a68d9ba..4e97fc206 100644 --- a/src-tauri/src/naruon_cloud_copy_readiness.rs +++ b/src-tauri/src/naruon_cloud_copy_readiness.rs @@ -14,8 +14,8 @@ use sha2::{Digest, Sha256}; use crate::cloud::{CloudPlanOptions, CloudPlanReport, CloudProvider}; use crate::cloud_transfer; use crate::icloud_sync_health::{ - native_sync_up_pending, validate_native_status_evidence, IcloudNativeStatusEvidence, - IcloudSyncHealthReport, ICLOUD_SYNC_HEALTH_SCHEMA_VERSION, + native_sync_down_pending, native_sync_up_pending, validate_native_status_evidence, + IcloudNativeStatusEvidence, IcloudSyncHealthReport, ICLOUD_SYNC_HEALTH_SCHEMA_VERSION, }; use crate::naruon_capacity; use crate::provider_capacity::{self, CapacityEvidenceKind, CloudCapacityAssessment}; @@ -30,7 +30,7 @@ const RUNTIME_BLOCKERS: [&str; 2] = [ "provider-client-runtime-not-observed", "provider-client-runtime-evidence-unavailable", ]; -const ICLOUD_ADMISSION_BLOCKERS: [&str; 10] = [ +const ICLOUD_ADMISSION_BLOCKERS: [&str; 11] = [ "icloud-sync-health-evidence-incomplete", "icloud-upload-queue-nonempty", "icloud-upload-in-flight", @@ -40,6 +40,7 @@ const ICLOUD_ADMISSION_BLOCKERS: [&str; 10] = [ "icloud-local-sync-item-error-present", "icloud-native-status-evidence-incomplete", "icloud-native-sync-up-pending", + "icloud-native-sync-down-pending", "icloud-new-copy-admission-evidence-unavailable", ]; @@ -284,6 +285,13 @@ fn expected_icloud_admission_blockers(report: &IcloudSyncHealthReport) -> Vec Date: Wed, 19 Aug 2026 21:29:57 +0900 Subject: [PATCH 159/691] docs: describe both iCloud native sync directions --- README.md | 2 +- .../specs/2026-07-31-naruon-cloud-copy-readiness-design.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 86f2dd62c..771ce8325 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ - 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety, fully offline - ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve when configured; for personal roots, permits copy-only through an observed native desktop client when OAuth quota evidence is the only missing input; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source - 🟢 **Provider client runtime gate** — observes only bounded process names, never emits a command line, path, account identifier, or process name, and blocks new OneDrive/Google Drive copies when the local vendor runtime is not observed; runtime presence remains only a local prerequisite and never becomes an account-authentication, capacity, or sync-completion claim -- ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode and a bounded native `brctl status` summary, emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, or native `needs-sync-up`; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety +- ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode and a bounded native `brctl status` summary, emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, or native `needs-sync-up`/`needs-sync-down`; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety - 🧾 **Naruon cloud-copy readiness envelope** — combines path-free production-time evidence aggregates, planner/review blockers, provider-client runtime, authoritative capacity assessment, and iCloud queue/native status; binds them with a recursively key-sorted SHA-256 fingerprint while keeping every write, sync, review, and eviction authority false - 🧩 **Split-archive set audit** — groups `.zip.partNNN` siblings, proves internal gaps and duplicate indices, totals discard-review bytes, and emits a stable path-redacted fingerprint while keeping exact paths in an optional create-new mode-0600 private dossier - ⏳ **Incomplete-download audit** — inventories `.crdownload` files by bounded magic bytes, embedded ZIP structure, acquisition context, filesystem-modified staleness, final-sibling presence, and bounded active-use evidence without treating download time or filename dates as production dates diff --git a/docs/superpowers/specs/2026-07-31-naruon-cloud-copy-readiness-design.md b/docs/superpowers/specs/2026-07-31-naruon-cloud-copy-readiness-design.md index 41ac7f436..2f72dc055 100644 --- a/docs/superpowers/specs/2026-07-31-naruon-cloud-copy-readiness-design.md +++ b/docs/superpowers/specs/2026-07-31-naruon-cloud-copy-readiness-design.md @@ -30,7 +30,7 @@ a provider, attests synchronization, or authorizes local source eviction. - the complete provider-authoritative capacity assessment; - for iCloud, waiting and active upload queue counts/bytes plus the remaining admission blocker inputs and a bounded native `brctl status` summary - (`needs-sync-up` is itself a blocker, even when the private queue is quiet). + (`needs-sync-up` and `needs-sync-down` are blockers, even when the private queue is quiet). - for OneDrive and Google Drive, bounded provider-wide File Provider transfer and indexing state, without retaining provider paths or filenames. From 096e609d7bcb83eb405c3a9a74c5627ebd482aec Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 21:39:33 +0900 Subject: [PATCH 160/691] fix: bind Homebrew execution to calibrated judgment --- src-tauri/src/brew_cleanup.rs | 29 ++++++++++++++++++++++++++--- src-tauri/src/commands.rs | 2 +- 2 files changed, 27 insertions(+), 4 deletions(-) diff --git a/src-tauri/src/brew_cleanup.rs b/src-tauri/src/brew_cleanup.rs index d2b70f3c4..e0d0dcd92 100644 --- a/src-tauri/src/brew_cleanup.rs +++ b/src-tauri/src/brew_cleanup.rs @@ -402,12 +402,22 @@ pub fn judge( pub fn execute( plan: &BrewCleanupPlan, - judgment_id: &str, + judgment: &BrewCleanupJudgment, executed_at_ms: u64, ) -> Result { + if judgment.plan != *plan + || judgment.plan_fingerprint != plan.plan_fingerprint + || judgment.exact_approval_phrase != plan.exact_approval_phrase + || judgment.verdict != crate::llm::Verdict::Safe + || !judgment.has_successful_calibration() + || executed_at_ms.saturating_sub(judgment.judged_at_ms) > MAX_JUDGMENT_AGE_MS + { + return Err("brew-cleanup-llm-judgment-stale-or-not-safe".into()); + } + #[cfg(not(target_os = "macos"))] { - let _ = (plan, judgment_id, executed_at_ms); + let _ = (plan, judgment, executed_at_ms); return Err("brew-cleanup-unsupported-platform".into()); } @@ -425,7 +435,7 @@ pub fn execute( Ok(BrewCleanupExecution { schema_version: SCHEMA_VERSION, plan_fingerprint: plan.plan_fingerprint.clone(), - judgment_id: judgment_id.to_string(), + judgment_id: judgment.judgment_id.clone(), command: std::iter::once(EXECUTABLE.to_string()) .chain(EXECUTE_ARGUMENTS.iter().map(|arg| (*arg).to_string())) .collect(), @@ -608,6 +618,19 @@ mod tests { assert!(!judgment.has_successful_calibration()); } + #[test] + fn execute_rejects_uncalibrated_judgment_before_platform_dispatch() { + let judgment = judge( + &Fake(Ok(r#"{"verdict":"safe","reason":"fixed"}"#.into())), + &plan(), + 20, + ); + assert_eq!( + execute(&plan(), &judgment, 21).unwrap_err(), + "brew-cleanup-llm-judgment-stale-or-not-safe" + ); + } + #[test] fn command_arguments_are_fixed() { assert_eq!( diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 4aadccc15..553f883eb 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -594,7 +594,7 @@ pub fn execute_brew_cleanup( } let executed_at_ms = now_ms(); - let mut execution = match brew_cleanup::execute(&plan, &judgment_id, executed_at_ms) { + let mut execution = match brew_cleanup::execute(&plan, &judgment, executed_at_ms) { Ok(execution) => execution, Err(error) => { *stored = None; From 0e37dd35e60860ae22e29c6dd8c0342fcb5d2436 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 21:51:54 +0900 Subject: [PATCH 161/691] fix: fail closed on iCloud native status timeout --- README.md | 2 +- .../adr/0001-cloud-offload-goal-state.md | 2 + .../cloud-offload-operator-runbook.md | 1 + src-tauri/src/icloud_sync_health.rs | 49 ++++++++++++++++- src-tauri/src/naruon_cloud_copy_readiness.rs | 53 ++++++++++++++++--- src/lib/CloudArchive.svelte | 1 + 6 files changed, 98 insertions(+), 10 deletions(-) diff --git a/README.md b/README.md index 771ce8325..f9a85bcb0 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ - 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety, fully offline - ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve when configured; for personal roots, permits copy-only through an observed native desktop client when OAuth quota evidence is the only missing input; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source - 🟢 **Provider client runtime gate** — observes only bounded process names, never emits a command line, path, account identifier, or process name, and blocks new OneDrive/Google Drive copies when the local vendor runtime is not observed; runtime presence remains only a local prerequisite and never becomes an account-authentication, capacity, or sync-completion claim -- ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode and a bounded native `brctl status` summary, emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, or native `needs-sync-up`/`needs-sync-down`; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety +- ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode and a bounded native `brctl status` summary, emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, native status times out, or native `needs-sync-up`/`needs-sync-down`; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety - 🧾 **Naruon cloud-copy readiness envelope** — combines path-free production-time evidence aggregates, planner/review blockers, provider-client runtime, authoritative capacity assessment, and iCloud queue/native status; binds them with a recursively key-sorted SHA-256 fingerprint while keeping every write, sync, review, and eviction authority false - 🧩 **Split-archive set audit** — groups `.zip.partNNN` siblings, proves internal gaps and duplicate indices, totals discard-review bytes, and emits a stable path-redacted fingerprint while keeping exact paths in an optional create-new mode-0600 private dossier - ⏳ **Incomplete-download audit** — inventories `.crdownload` files by bounded magic bytes, embedded ZIP structure, acquisition context, filesystem-modified staleness, final-sibling presence, and bounded active-use evidence without treating download time or filename dates as production dates diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index f5e029661..c85c5ea5e 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -73,6 +73,8 @@ clear evidence. - A timed-out provider-wide dump may explain active transfer or reconciliation markers, but its incomplete evidence never admits a new copy. - An iCloud native `needs-sync-up` or `needs-sync-down` state blocks new-copy admission until the bounded native status is quiet; neither direction is treated as completed provider evidence. +- A timeout while collecting the bounded iCloud native status also blocks new-copy admission; + timeout is not interpreted as a quiet provider. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 994bbbf03..b339077e7 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -29,6 +29,7 @@ The runtime sequence is: 4. `is_local_current=true` with `is_uploaded=false` is `pending-upload`; the source remains and no eviction permit is issued. iCloud native `needs-sync-up` and `needs-sync-down` states are also explicit admission blockers; + a timeout while collecting native status is an admission blocker as well; the latter means the provider still has remote changes to materialize. Third-party File Provider dumps also block new copies while upload/download progress, non-zero reconciliation backlogs (`provider-global-sync-reconciliation-pending`), provider diff --git a/src-tauri/src/icloud_sync_health.rs b/src-tauri/src/icloud_sync_health.rs index 298e9642a..b17fafb54 100644 --- a/src-tauri/src/icloud_sync_health.rs +++ b/src-tauri/src/icloud_sync_health.rs @@ -1082,6 +1082,24 @@ fn attach_native_status_admission(report: &mut IcloudSyncHealthReport) { .push("icloud-native-status-evidence-incomplete".into()); report.new_copy_admission_state = "blocked".into(); } + if report + .native_status + .as_ref() + .is_some_and(|status| status.timed_out) + && !report + .new_copy_admission_blockers + .iter() + .any(|blocker| blocker == "icloud-native-status-command-timeout") + { + report.sync_backlog_present = true; + report + .new_copy_admission_blockers + .push("icloud-native-status-command-timeout".into()); + report.new_copy_admission_state = "blocked".into(); + report + .blockers + .insert(0, "icloud-native-status-command-timeout".into()); + } if report .native_status .as_ref() @@ -1443,12 +1461,39 @@ mod tests { assert_eq!(report.new_copy_admission_state, "blocked"); assert_eq!( report.new_copy_admission_blockers, - ["icloud-native-status-evidence-incomplete"] + [ + "icloud-native-status-evidence-incomplete", + "icloud-native-status-command-timeout" + ] ); assert_eq!( require_new_copy_admission(&report).unwrap_err(), - "icloud-native-status-evidence-incomplete" + "icloud-native-status-evidence-incomplete,icloud-native-status-command-timeout" + ); + } + + #[test] + fn native_status_timeout_blocks_new_copy_even_with_bounded_summary() { + let mut report = + build_report(1, vec![], IcloudUploadQueueSummary::default(), true, true).unwrap(); + report.native_status = Some(parse_native_status_output( + "1 containers matching '*'\n\ + foreground {client:needs-sync server:full-sync sync:needs-sync-down last-sync:now}\n", + 1, + false, + true, + false, + )); + attach_native_status_admission(&mut report); + + assert_eq!( + report.new_copy_admission_blockers, + [ + "icloud-native-status-command-timeout", + "icloud-native-sync-down-pending" + ] ); + assert!(require_new_copy_admission(&report).is_err()); } #[test] diff --git a/src-tauri/src/naruon_cloud_copy_readiness.rs b/src-tauri/src/naruon_cloud_copy_readiness.rs index 4e97fc206..1dacc099e 100644 --- a/src-tauri/src/naruon_cloud_copy_readiness.rs +++ b/src-tauri/src/naruon_cloud_copy_readiness.rs @@ -30,7 +30,7 @@ const RUNTIME_BLOCKERS: [&str; 2] = [ "provider-client-runtime-not-observed", "provider-client-runtime-evidence-unavailable", ]; -const ICLOUD_ADMISSION_BLOCKERS: [&str; 11] = [ +const ICLOUD_ADMISSION_BLOCKERS: [&str; 12] = [ "icloud-sync-health-evidence-incomplete", "icloud-upload-queue-nonempty", "icloud-upload-in-flight", @@ -39,6 +39,7 @@ const ICLOUD_ADMISSION_BLOCKERS: [&str; 11] = [ "icloud-upload-queue-state-unclassified", "icloud-local-sync-item-error-present", "icloud-native-status-evidence-incomplete", + "icloud-native-status-command-timeout", "icloud-native-sync-up-pending", "icloud-native-sync-down-pending", "icloud-new-copy-admission-evidence-unavailable", @@ -282,6 +283,13 @@ fn expected_icloud_admission_blockers(report: &IcloudSyncHealthReport) -> Vec Date: Wed, 19 Aug 2026 22:08:13 +0900 Subject: [PATCH 162/691] feat: detect stalled iCloud File Provider activity --- README.md | 2 +- .../adr/0001-cloud-offload-goal-state.md | 3 + .../cloud-offload-operator-runbook.md | 2 + src-tauri/src/icloud_sync_health.rs | 231 +++++++++++++++++- src-tauri/src/naruon_cloud_copy_readiness.rs | 53 +++- src/lib/CloudArchive.svelte | 4 + src/lib/api.ts | 7 + 7 files changed, 299 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index f9a85bcb0..82c565b0a 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ - 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety, fully offline - ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve when configured; for personal roots, permits copy-only through an observed native desktop client when OAuth quota evidence is the only missing input; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source - 🟢 **Provider client runtime gate** — observes only bounded process names, never emits a command line, path, account identifier, or process name, and blocks new OneDrive/Google Drive copies when the local vendor runtime is not observed; runtime presence remains only a local prerequisite and never becomes an account-authentication, capacity, or sync-completion claim -- ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode and a bounded native `brctl status` summary, emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, native status times out, or native `needs-sync-up`/`needs-sync-down`; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety +- ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode, a bounded native `brctl status` summary, and a path-free `fileproviderctl dump` activity probe; emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, native status times out, or File Provider reports no-progress fetches; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety - 🧾 **Naruon cloud-copy readiness envelope** — combines path-free production-time evidence aggregates, planner/review blockers, provider-client runtime, authoritative capacity assessment, and iCloud queue/native status; binds them with a recursively key-sorted SHA-256 fingerprint while keeping every write, sync, review, and eviction authority false - 🧩 **Split-archive set audit** — groups `.zip.partNNN` siblings, proves internal gaps and duplicate indices, totals discard-review bytes, and emits a stable path-redacted fingerprint while keeping exact paths in an optional create-new mode-0600 private dossier - ⏳ **Incomplete-download audit** — inventories `.crdownload` files by bounded magic bytes, embedded ZIP structure, acquisition context, filesystem-modified staleness, final-sibling presence, and bounded active-use evidence without treating download time or filename dates as production dates diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index c85c5ea5e..21563ece8 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -75,6 +75,9 @@ clear evidence. bounded native status is quiet; neither direction is treated as completed provider evidence. - A timeout while collecting the bounded iCloud native status also blocks new-copy admission; timeout is not interpreted as a quiet provider. +- The bounded iCloud File Provider activity probe records only the count of redacted `no progress` + fetch markers. Any such marker, a probe timeout, or unavailable probe evidence blocks new-copy + admission; no path, filename, item identifier, or content is retained. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index b339077e7..b9b29fff4 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -30,6 +30,8 @@ The runtime sequence is: no eviction permit is issued. iCloud native `needs-sync-up` and `needs-sync-down` states are also explicit admission blockers; a timeout while collecting native status is an admission blocker as well; + the bounded iCloud File Provider activity probe likewise blocks when it sees redacted + `no progress` fetches or times out; the latter means the provider still has remote changes to materialize. Third-party File Provider dumps also block new copies while upload/download progress, non-zero reconciliation backlogs (`provider-global-sync-reconciliation-pending`), provider diff --git a/src-tauri/src/icloud_sync_health.rs b/src-tauri/src/icloud_sync_health.rs index b17fafb54..76c1d1430 100644 --- a/src-tauri/src/icloud_sync_health.rs +++ b/src-tauri/src/icloud_sync_health.rs @@ -35,11 +35,18 @@ const MAX_STDERR_BYTES: usize = 4 * 1024; const BRCTL_STATUS_PATH: &str = "/usr/bin/brctl"; const BRCTL_STATUS_TIMEOUT: Duration = Duration::from_secs(5); const MAX_BRCTL_STATUS_BYTES: usize = 64 * 1024; +#[cfg(target_os = "macos")] +const FILEPROVIDERCTL_PATH: &str = "/usr/bin/fileproviderctl"; +#[cfg(target_os = "macos")] +const FILEPROVIDER_DUMP_TIMEOUT: Duration = Duration::from_secs(5); +#[cfg(target_os = "macos")] +const MAX_FILEPROVIDER_DUMP_BYTES: usize = 256 * 1024; const ITEM_ERROR_AGE_NOTICE_MS: u64 = 86_400_000; static SNAPSHOT_NONCE: AtomicU64 = AtomicU64::new(0); -pub const ICLOUD_SYNC_HEALTH_SCHEMA_VERSION: u32 = 4; +pub const ICLOUD_SYNC_HEALTH_SCHEMA_VERSION: u32 = 5; pub const ICLOUD_NATIVE_STATUS_SCHEMA_VERSION: u32 = 1; +pub const ICLOUD_FILE_PROVIDER_ACTIVITY_SCHEMA_VERSION: u32 = 1; const QUEUE_QUERY: &str = r#" PRAGMA query_only=ON; @@ -119,6 +126,36 @@ pub struct IcloudNativeStatusEvidence { pub notices: Vec, } +#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)] +#[serde(deny_unknown_fields)] +pub struct IcloudFileProviderActivityEvidence { + pub schema_version: u32, + pub observed_at_ms: u64, + pub command_succeeded: bool, + pub timed_out: bool, + pub output_truncated: bool, + pub no_progress_fetch_count: u64, + pub notices: Vec, +} + +pub fn validate_file_provider_activity_evidence( + evidence: &IcloudFileProviderActivityEvidence, +) -> Result<(), String> { + if evidence.schema_version != ICLOUD_FILE_PROVIDER_ACTIVITY_SCHEMA_VERSION + || evidence.notices.is_empty() + || evidence.notices.iter().any(|notice| { + notice.is_empty() + || notice.len() > 128 + || !notice + .bytes() + .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') + }) + { + return Err("icloud-file-provider-activity-shape-invalid".into()); + } + Ok(()) +} + pub fn validate_native_status_evidence( evidence: &IcloudNativeStatusEvidence, ) -> Result<(), String> { @@ -189,6 +226,8 @@ pub struct IcloudSyncHealthReport { pub upload_queue: IcloudUploadQueueSummary, #[serde(default)] pub native_status: Option, + #[serde(default)] + pub file_provider_activity: Option, pub sync_backlog_present: bool, /// Admission state for adding a new local item to iCloud Drive. /// @@ -487,6 +526,145 @@ fn native_status_summary_complete(output: &[u8]) -> bool { container_count && summary } +fn parse_file_provider_activity_output( + output: &str, + observed_at_ms: u64, + command_succeeded: bool, + timed_out: bool, + output_truncated: bool, +) -> IcloudFileProviderActivityEvidence { + let no_progress_fetch_count = output + .lines() + .filter(|line| { + let line = line.to_ascii_lowercase(); + line.contains("fetchcontentsforitemwithid") && line.contains("no progress") + }) + .count() as u64; + let mut notices = if command_succeeded { + vec!["icloud-file-provider-dump-observed".into()] + } else { + vec!["icloud-file-provider-dump-unavailable".into()] + }; + if timed_out { + notices.push("icloud-file-provider-dump-timeout".into()); + } + if output_truncated { + notices.push("icloud-file-provider-dump-output-truncated".into()); + } + if no_progress_fetch_count > 0 { + notices.push("icloud-file-provider-no-progress-fetch-observed".into()); + } + IcloudFileProviderActivityEvidence { + schema_version: ICLOUD_FILE_PROVIDER_ACTIVITY_SCHEMA_VERSION, + observed_at_ms, + command_succeeded, + timed_out, + output_truncated, + no_progress_fetch_count, + notices, + } +} + +#[cfg(target_os = "macos")] +fn probe_file_provider_activity(observed_at_ms: u64) -> IcloudFileProviderActivityEvidence { + use std::os::unix::process::CommandExt; + + let mut command = Command::new(FILEPROVIDERCTL_PATH); + command + .args(["dump", "com.apple.CloudDocs.iCloudDriveFileProvider", "-l"]) + .env("LANG", "C") + .env("LC_ALL", "C") + .stdin(Stdio::null()) + .stdout(Stdio::piped()) + .stderr(Stdio::null()); + unsafe { + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } + let mut child = match command.spawn() { + Ok(child) => child, + Err(_) => { + return parse_file_provider_activity_output("", observed_at_ms, false, false, false) + } + }; + let child_pid = child.id(); + let kill_group = || unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + }; + let stdout = match child.stdout.take() { + Some(stdout) => stdout, + None => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + return parse_file_provider_activity_output("", observed_at_ms, false, false, false); + } + }; + let output_reader = thread::spawn(move || { + let mut output = Vec::new(); + let read_result = stdout + .take((MAX_FILEPROVIDER_DUMP_BYTES + 1) as u64) + .read_to_end(&mut output); + (read_result.is_ok(), output) + }); + let deadline = Instant::now() + FILEPROVIDER_DUMP_TIMEOUT; + let status = loop { + match child.try_wait() { + Ok(Some(status)) => break Some(status), + Ok(None) if Instant::now() < deadline => thread::sleep(Duration::from_millis(25)), + Ok(None) => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + let (_read_ok, output) = output_reader.join().unwrap_or((false, Vec::new())); + let output_truncated = output.len() > MAX_FILEPROVIDER_DUMP_BYTES; + let output = String::from_utf8_lossy( + &output[..output.len().min(MAX_FILEPROVIDER_DUMP_BYTES)], + ); + return parse_file_provider_activity_output( + &output, + observed_at_ms, + false, + true, + output_truncated, + ); + } + Err(_) => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + let (_read_ok, output) = output_reader.join().unwrap_or((false, Vec::new())); + let output_truncated = output.len() > MAX_FILEPROVIDER_DUMP_BYTES; + let output = String::from_utf8_lossy( + &output[..output.len().min(MAX_FILEPROVIDER_DUMP_BYTES)], + ); + return parse_file_provider_activity_output( + &output, + observed_at_ms, + false, + false, + output_truncated, + ); + } + } + }; + kill_group(); + let (read_ok, output) = output_reader.join().unwrap_or((false, Vec::new())); + let output_truncated = output.len() > MAX_FILEPROVIDER_DUMP_BYTES; + let output = String::from_utf8_lossy(&output[..output.len().min(MAX_FILEPROVIDER_DUMP_BYTES)]); + parse_file_provider_activity_output( + &output, + observed_at_ms, + read_ok && status.is_some_and(|status| status.success()), + false, + output_truncated, + ) +} + #[cfg(target_os = "macos")] fn probe_native_status(observed_at_ms: u64) -> IcloudNativeStatusEvidence { use std::io::ErrorKind; @@ -1052,6 +1230,7 @@ fn build_report( managed_database_allocated_bytes, upload_queue, native_status: None, + file_provider_activity: None, sync_backlog_present, new_copy_admission_state: new_copy_admission_state.into(), new_copy_admission_blockers, @@ -1136,6 +1315,31 @@ fn attach_native_status_admission(report: &mut IcloudSyncHealthReport) { .blockers .insert(0, "icloud-native-sync-down-pending".into()); } + if let Some(activity) = report.file_provider_activity.as_ref() { + let blocker = if activity.no_progress_fetch_count > 0 { + Some("icloud-file-provider-no-progress") + } else if activity.timed_out { + Some("icloud-file-provider-dump-timeout") + } else if activity.output_truncated { + Some("icloud-file-provider-dump-output-truncated") + } else if !activity.command_succeeded { + Some("icloud-file-provider-evidence-unavailable") + } else { + None + }; + if let Some(blocker) = blocker { + if !report + .new_copy_admission_blockers + .iter() + .any(|existing| existing == blocker) + { + report.new_copy_admission_blockers.push(blocker.into()); + report.new_copy_admission_state = "blocked".into(); + report.sync_backlog_present = true; + report.blockers.insert(0, blocker.into()); + } + } + } } /// Require a quiet local iCloud upload queue before adding another local copy. @@ -1229,6 +1433,10 @@ pub fn probe_icloud_sync_health( includes_wal, )?; report.native_status = native_status; + #[cfg(target_os = "macos")] + { + report.file_provider_activity = Some(probe_file_provider_activity(observed_at_ms)); + } attach_native_status_admission(&mut report); Ok(report) } @@ -1246,6 +1454,10 @@ pub fn probe_icloud_sync_health( .notices .push("consistent-copy-on-write-snapshot-unavailable".into()); report.native_status = native_status; + #[cfg(target_os = "macos")] + { + report.file_provider_activity = Some(probe_file_provider_activity(observed_at_ms)); + } attach_native_status_admission(&mut report); Ok(report) } @@ -1358,6 +1570,23 @@ mod tests { .contains("/Users/")); } + #[test] + fn file_provider_parser_counts_redacted_no_progress_fetches() { + let evidence = parse_file_provider_activity_output( + "fetchContentsForItemWithID: (no timeout), no progress\nfetchContentsForItemWithID: (no timeout), no progress\n", + 42, + false, + true, + false, + ); + assert_eq!(evidence.no_progress_fetch_count, 2); + assert!(evidence.timed_out); + assert!(evidence + .notices + .contains(&"icloud-file-provider-no-progress-fetch-observed".to_string())); + assert!(validate_file_provider_activity_evidence(&evidence).is_ok()); + } + #[test] fn parser_rejects_missing_duplicate_and_unexpected_rows() { assert!(parse_queue_rows("scheduled_waiting|1|2\n").is_err()); diff --git a/src-tauri/src/naruon_cloud_copy_readiness.rs b/src-tauri/src/naruon_cloud_copy_readiness.rs index 1dacc099e..436061ce3 100644 --- a/src-tauri/src/naruon_cloud_copy_readiness.rs +++ b/src-tauri/src/naruon_cloud_copy_readiness.rs @@ -15,6 +15,7 @@ use crate::cloud::{CloudPlanOptions, CloudPlanReport, CloudProvider}; use crate::cloud_transfer; use crate::icloud_sync_health::{ native_sync_down_pending, native_sync_up_pending, validate_native_status_evidence, + validate_file_provider_activity_evidence, IcloudFileProviderActivityEvidence, IcloudNativeStatusEvidence, IcloudSyncHealthReport, ICLOUD_SYNC_HEALTH_SCHEMA_VERSION, }; use crate::naruon_capacity; @@ -30,7 +31,7 @@ const RUNTIME_BLOCKERS: [&str; 2] = [ "provider-client-runtime-not-observed", "provider-client-runtime-evidence-unavailable", ]; -const ICLOUD_ADMISSION_BLOCKERS: [&str; 12] = [ +const ICLOUD_ADMISSION_BLOCKERS: [&str; 16] = [ "icloud-sync-health-evidence-incomplete", "icloud-upload-queue-nonempty", "icloud-upload-in-flight", @@ -42,6 +43,10 @@ const ICLOUD_ADMISSION_BLOCKERS: [&str; 12] = [ "icloud-native-status-command-timeout", "icloud-native-sync-up-pending", "icloud-native-sync-down-pending", + "icloud-file-provider-no-progress", + "icloud-file-provider-dump-timeout", + "icloud-file-provider-dump-output-truncated", + "icloud-file-provider-evidence-unavailable", "icloud-new-copy-admission-evidence-unavailable", ]; @@ -96,6 +101,8 @@ pub struct IcloudNewCopyAdmissionSummary { pub database_snapshot_includes_wal: bool, #[serde(default)] pub native_status: Option, + #[serde(default)] + pub file_provider_activity: Option, } #[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] @@ -300,6 +307,17 @@ fn expected_icloud_admission_blockers(report: &IcloudSyncHealthReport) -> Vec 0 { + blockers.push("icloud-file-provider-no-progress".into()); + } else if activity.timed_out { + blockers.push("icloud-file-provider-dump-timeout".into()); + } else if activity.output_truncated { + blockers.push("icloud-file-provider-dump-output-truncated".into()); + } else if !activity.command_succeeded { + blockers.push("icloud-file-provider-evidence-unavailable".into()); + } + } blockers } @@ -339,6 +357,13 @@ fn validate_icloud_health( return Err("naruon-copy-readiness-icloud-native-status-time-mismatch".into()); } } + if let Some(activity) = report.file_provider_activity.as_ref() { + validate_file_provider_activity_evidence(activity) + .map_err(|_| "naruon-copy-readiness-icloud-file-provider-activity-invalid".to_string())?; + if activity.observed_at_ms != report.observed_at_ms { + return Err("naruon-copy-readiness-icloud-file-provider-activity-time-mismatch".into()); + } + } let reported_blockers = expected_icloud_admission_blockers(report); let reported_state = if reported_blockers.is_empty() { "clear" @@ -406,6 +431,7 @@ fn validate_icloud_health( evidence_complete: report.evidence_complete, database_snapshot_includes_wal: report.database_snapshot_includes_wal, native_status: report.native_status.clone(), + file_provider_activity: report.file_provider_activity.clone(), }), Some(admission_met), )) @@ -1038,6 +1064,17 @@ fn validate_icloud_admission_summary( { expected.push("icloud-native-sync-down-pending".to_string()); } + if let Some(activity) = summary.file_provider_activity.as_ref() { + if activity.no_progress_fetch_count > 0 { + expected.push("icloud-file-provider-no-progress".to_string()); + } else if activity.timed_out { + expected.push("icloud-file-provider-dump-timeout".to_string()); + } else if activity.output_truncated { + expected.push("icloud-file-provider-dump-output-truncated".to_string()); + } else if !activity.command_succeeded { + expected.push("icloud-file-provider-evidence-unavailable".to_string()); + } + } if !summary.evidence_complete { expected.push("icloud-new-copy-admission-evidence-unavailable".to_string()); } @@ -1068,6 +1105,13 @@ fn validate_icloud_admission_summary( validate_native_status_evidence(native_status).is_err() || native_status.observed_at_ms != summary.observed_at_ms }) + || summary + .file_provider_activity + .as_ref() + .is_some_and(|activity| { + validate_file_provider_activity_evidence(activity).is_err() + || activity.observed_at_ms != summary.observed_at_ms + }) || summary.state != expected_state || summary.blockers != expected { @@ -1227,6 +1271,7 @@ mod tests { managed_database_allocated_bytes: 1, upload_queue: queue, native_status: None, + file_provider_activity: None, sync_backlog_present: blocked, new_copy_admission_state: if blocked { "blocked".into() @@ -1451,6 +1496,12 @@ mod tests { let runtime = assess_provider_client_runtime(CloudProvider::Icloud, None, 25); let mut health = icloud_health(true); health.native_status = Some(native_sync_up_status()); + health + .new_copy_admission_blockers + .push("icloud-native-status-command-timeout".into()); + health + .blockers + .insert(0, "icloud-native-status-command-timeout".into()); health .new_copy_admission_blockers .push("icloud-native-sync-up-pending".into()); diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index efc1a2e96..c4035f6de 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -614,6 +614,10 @@ "icloud-native-sync-down-pending": "macOS iCloud sync-down이 아직 끝나지 않음", "icloud-native-status-evidence-incomplete": "macOS iCloud 상태 증거가 불완전함", "icloud-native-status-command-timeout": "macOS iCloud 상태 확인이 시간 초과되어 복사를 보류함", + "icloud-file-provider-no-progress": "File Provider fetch 요청이 진행률 없이 정지함", + "icloud-file-provider-dump-timeout": "File Provider 상태 확인이 시간 초과됨", + "icloud-file-provider-dump-output-truncated": "File Provider 상태 증거가 잘려 불완전함", + "icloud-file-provider-evidence-unavailable": "File Provider 상태 증거를 확인할 수 없음", "icloud-item-error-octagon-not-signed-in": "iCloud 계정 인증이 필요함", "icloud-item-error-older-than-24h": "iCloud 동기화 오류가 24시간 이상 지속됨", }; diff --git a/src/lib/api.ts b/src/lib/api.ts index bc8e4b742..23c09ffb6 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -629,6 +629,13 @@ export interface IcloudSyncHealthReport { out_of_quota_count: number; item_error_count: number; }; + file_provider_activity?: { + command_succeeded: boolean; + timed_out: boolean; + output_truncated: boolean; + no_progress_fetch_count: number; + notices: string[]; + } | null; sync_backlog_present: boolean; new_copy_admission_state: "clear" | "blocked"; new_copy_admission_blockers: string[]; From d096f0c9b265fe18f0b03e2e48d24419f539208d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 22:22:11 +0900 Subject: [PATCH 163/691] feat: bind ontology moves to file lineage --- README.md | 2 +- .../adr/0001-cloud-offload-goal-state.md | 4 + .../cloud-offload-operator-runbook.md | 4 + src-tauri/src/commands.rs | 16 +- src-tauri/src/organize.rs | 261 ++++++++++++++++-- src/lib/Organize.svelte | 7 + src/lib/api.ts | 8 + 7 files changed, 280 insertions(+), 22 deletions(-) diff --git a/README.md b/README.md index 82c565b0a..04ed38be1 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ - 🧹 **Known cache & temp cleanup** — OS, browser, and package-manager caches - 🛠 **Dev artifact cleanup** — stale `node_modules`, `target/`, `venv`, … - 👯 **Duplicate finder** — size → partial hash → BLAKE3 full hash -- 🗂 **Ontology-based organizing** — files classified into an OWL taxonomy you can edit +- 🗂 **Ontology-based organizing** — files classified into an OWL taxonomy you can edit; move plans bind metadata-first production-time lineage and source size/mtime, revalidate them immediately before moving, and skip File Provider dataless sources - 📊 **Disk inventory** — "what is on my disk?", aggregated by category, unknowns surfaced - 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety, fully offline - ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve when configured; for personal roots, permits copy-only through an observed native desktop client when OAuth quota evidence is the only missing input; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 21563ece8..f79ef0ea1 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -83,3 +83,7 @@ clear evidence. File-Provider-dataless source was safely evicted. - `eviction-ready` permits only the separately approved, reversible OS-Trash operation. - A stale projection is replaceable state and must be reconciled against immutable evidence. +- Ontology-based local organization uses the same lineage precedence as cloud planning (embedded + metadata, explicit filename date, filesystem creation time, then modification time). Its move + plan carries a path-free lineage fingerprint plus the source size/mtime snapshot and is rejected + if the source changes; File Provider dataless sources are not moved. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index b9b29fff4..9731b6044 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -4,6 +4,10 @@ DiskSage plans cloud copies from embedded metadata first, then filename date, fi time, and modification time. Filename tokens such as `2026-04-28` or `251210` are secondary evidence and never establish production time by themselves. +Ontology-based local organization uses the same precedence. Its preview records a path-free +lineage fingerprint and source size/mtime snapshot; execution rechecks both immediately before a +move and skips File Provider `dataless` sources. + The runtime sequence is: 1. A verified copy writes `cloud-goals/-latest.json` with provider and evidence gates diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 553f883eb..e46ad1267 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -223,7 +223,10 @@ pub fn execute_moves_inner( plans .iter() .map(|p| { - match safety::move_file(Path::new(&p.src), Path::new(&p.dst), journal_path, now_ms) { + match organize::validate_move_source(p).and_then(|_| { + safety::move_file(Path::new(&p.src), Path::new(&p.dst), journal_path, now_ms) + .map_err(|error| error.to_string()) + }) { Ok(()) => CleanResult { path: p.src.clone(), ok: true, @@ -2599,24 +2602,26 @@ pub fn plan_organize( let meta = file_meta_at(p, 0, 0); crate::llm::pick_class(engine, &meta, cands) }; - return Ok(organize::plan_moves_with( + return Ok(organize::plan_moves_with_metadata( &files, &onto, &home, now_ms(), &rules, &pick, + &organize::lineage_metadata_for_path, )); } } } - Ok(organize::plan_moves_with( + Ok(organize::plan_moves_with_metadata( &files, &onto, &home, now_ms(), &rules, &|_, _| None, + &organize::lineage_metadata_for_path, )) } @@ -3239,11 +3244,13 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . src: src_ok.to_string_lossy().into(), dst: dst_ok.to_string_lossy().into(), class_id: "x".into(), + ..Default::default() }, organize::MovePlan { src: tmp.path().join("ghost").to_string_lossy().into(), dst: tmp.path().join("g2").to_string_lossy().into(), class_id: "x".into(), + ..Default::default() }, ]; let results = execute_moves_inner(&plans, &jp, 1); @@ -3265,6 +3272,7 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . src: a.to_string_lossy().into(), dst: a_moved.to_string_lossy().into(), class_id: "x".into(), + ..Default::default() }]; execute_moves_inner(&plans, &jp, 5); assert!(!a.exists()); @@ -3289,6 +3297,7 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . src: s.to_string_lossy().into(), dst: d.to_string_lossy().into(), class_id: "x".into(), + ..Default::default() }], &jp, 1, @@ -3309,6 +3318,7 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . src: a.to_string_lossy().into(), dst: a_moved.to_string_lossy().into(), class_id: "x".into(), + ..Default::default() }]; execute_moves_inner(&plans, &jp, 1); assert!(a_moved.exists()); diff --git a/src-tauri/src/organize.rs b/src-tauri/src/organize.rs index 78abe649f..c1818a4d7 100644 --- a/src-tauri/src/organize.rs +++ b/src-tauri/src/organize.rs @@ -4,42 +4,119 @@ use crate::dupes::FileEntry; use crate::inventory::classify; use crate::ontology::Ontology; -#[derive(Debug, Clone, serde::Serialize, serde::Deserialize)] +// ponytail: cap metadata probes per organize request; raise only with measured bounded latency. +const MAX_LINEAGE_PROBES: usize = 32; + +#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize, Default)] +pub struct LineageMetadata { + pub production_time_ms: Option, + pub production_time_source: Option, + pub production_time_confidence: Option, + pub lineage_fingerprint: String, +} + +#[derive(Debug, Clone, Default, serde::Serialize, serde::Deserialize)] pub struct MovePlan { pub src: String, pub dst: String, pub class_id: String, + #[serde(default)] + pub source_size: Option, + #[serde(default)] + pub source_mtime_ms: Option, + #[serde(default)] + pub lineage: LineageMetadata, } -/// 후보 클래스 로컬명(온톨로지에서). picker에 전달. -fn local_name(id: &str) -> &str { - id.rsplit(['#', '/']).next().unwrap_or(id) +#[cfg(not(coverage))] +pub fn lineage_metadata_for_path(path: &Path) -> Option { + if crate::cloud::source_content_is_dataless(path) { + return None; + } + let file_metadata = std::fs::symlink_metadata(path).ok()?; + if file_metadata.file_type().is_symlink() || !file_metadata.is_file() { + return None; + } + let content = crate::cloud::probe_content_metadata_for_audit(path); + let filesystem_created_ms = file_metadata + .created() + .ok() + .and_then(|time| time.duration_since(std::time::UNIX_EPOCH).ok()) + .map(|duration| duration.as_millis() as u64) + .unwrap_or_default(); + let filesystem_modified_ms = file_metadata + .modified() + .ok() + .and_then(|time| time.duration_since(std::time::UNIX_EPOCH).ok()) + .map(|duration| duration.as_millis() as u64) + .unwrap_or_default(); + let (production_time_ms, production_time_source, production_time_confidence) = + if let Some(value) = content.production_time_ms { + ( + Some(value), + content.production_time_source, + content.production_time_confidence, + ) + } else if let Some(value) = crate::cloud::filename_date_ms(path) { + (Some(value), Some("filename:path-token".into()), Some("low".into())) + } else if filesystem_created_ms > 0 { + ( + Some(filesystem_created_ms), + Some("filesystem:created".into()), + Some("low".into()), + ) + } else if filesystem_modified_ms > 0 { + ( + Some(filesystem_modified_ms), + Some("filesystem:modified-fallback".into()), + Some("low".into()), + ) + } else { + (None, None, None) + }; + let mut hasher = blake3::Hasher::new(); + hasher.update(b"disksage-organize-lineage-v1\0"); + for value in [ + production_time_ms.unwrap_or_default().to_string(), + production_time_source.clone().unwrap_or_default(), + production_time_confidence.clone().unwrap_or_default(), + content.title.unwrap_or_default(), + content.authors.join("\0"), + content.context.join("\0"), + ] { + hasher.update(value.as_bytes()); + hasher.update(&[0]); + } + for evidence in content.evidence { + for value in [evidence.field, evidence.value, evidence.source, evidence.confidence] { + hasher.update(value.as_bytes()); + hasher.update(&[0]); + } + } + Some(LineageMetadata { + production_time_ms, + production_time_source, + production_time_confidence, + lineage_fingerprint: hasher.finalize().to_hex().to_string(), + }) } -/// 파일 → (picker 또는 확장자 classify) 로컬 클래스 → targetFolder → 목적지. -/// picker(step ②): 후보 목록 중 하나를 고르거나 None(그러면 확장자 classify로 폴백). -// ponytail: pick은 &dyn Fn(트레이트 객체) — generic(impl Fn)이면 호출부 클로저 타입마다 -// 별도 단형화(monomorphization)가 생겨, 커버리지 게이트가 단형화별 죽은 분기를 분기 미도달로 -// 집계한다(테스트를 아무리 추가해도 100%에 못 미침). 단일 컴파일 바디로 만들어 분기 커버리지를 -// 호출부 전체에서 합산되게 한다 — llm::InferenceEngine을 &dyn으로 주입하는 것과 같은 패턴. -pub fn plan_moves_with( +fn plan_moves_impl( files: &[FileEntry], onto: &Ontology, home: &Path, now_ms: u64, rules: &[crate::userrules::Rule], pick: &dyn Fn(&Path, &[&str]) -> Option, + lineage_probe: Option<&dyn Fn(&Path) -> Option>, ) -> Vec { let candidates: Vec<&str> = onto.classes.iter().map(|c| local_name(&c.id)).collect(); - // spec §6: build the Reasoner once per plan, reuse across every file (not per file). let reasoner = crate::ontology::Reasoner::build(onto); let mut plans = Vec::new(); + let mut lineage_probe_count = 0; for f in files { - // filename을 classify보다 먼저 확인 — 파일명 없는 경로(루트 등)는 여기서 걸러진다. - // (classify 뒤에 두면 이 분기가 도달 불가라 커버리지 사각이 됨) let Some(name) = f.path.file_name() else { continue }; let age_days = now_ms.saturating_sub(f.mtime_ms) / 86_400_000; - // precedence: 사용자 규칙 → picker(LLM) → 확장자 classify → 제외 let local: String = match crate::userrules::classify_by_rules(rules, &f.path, f.size, age_days) { Some(c) => c, None => match pick(&f.path, &candidates) { @@ -50,27 +127,111 @@ pub fn plan_moves_with( }, }, }; - // 로컬명 → 온톨로지 클래스 let Some(class) = onto.classes.iter().find(|c| local_name(&c.id) == local) else { continue }; let Some(template) = onto.resolve_target_with(&reasoner, &class.id) else { continue }; - // 템플릿 치환: ~ → home, {class} → 로컬명 let folder = template .replacen('~', &home.to_string_lossy(), 1) .replace("{class}", &local); let dst = Path::new(&folder).join(name); - // 이미 목적지 폴더에 있으면 제외 if f.path.parent() == Some(Path::new(&folder)) { continue; } + let lineage = match lineage_probe { + Some(probe) if lineage_probe_count < MAX_LINEAGE_PROBES => { + lineage_probe_count += 1; + probe(&f.path) + } + Some(_) => None, + None => Some(LineageMetadata::default()), + }; + let Some(lineage) = lineage else { continue }; plans.push(MovePlan { src: f.path.to_string_lossy().into_owned(), dst: dst.to_string_lossy().into_owned(), class_id: class.id.clone(), + source_size: lineage_probe.map(|_| f.size), + source_mtime_ms: lineage_probe.map(|_| f.mtime_ms), + lineage, }); } plans } +/// 후보 클래스 로컬명(온톨로지에서). picker에 전달. +fn local_name(id: &str) -> &str { + id.rsplit(['#', '/']).next().unwrap_or(id) +} + +/// 파일 → (picker 또는 확장자 classify) 로컬 클래스 → targetFolder → 목적지. +/// picker(step ②): 후보 목록 중 하나를 고르거나 None(그러면 확장자 classify로 폴백). +// ponytail: pick은 &dyn Fn(트레이트 객체) — generic(impl Fn)이면 호출부 클로저 타입마다 +// 별도 단형화(monomorphization)가 생겨, 커버리지 게이트가 단형화별 죽은 분기를 분기 미도달로 +// 집계한다(테스트를 아무리 추가해도 100%에 못 미침). 단일 컴파일 바디로 만들어 분기 커버리지를 +// 호출부 전체에서 합산되게 한다 — llm::InferenceEngine을 &dyn으로 주입하는 것과 같은 패턴. +pub fn plan_moves_with( + files: &[FileEntry], + onto: &Ontology, + home: &Path, + now_ms: u64, + rules: &[crate::userrules::Rule], + pick: &dyn Fn(&Path, &[&str]) -> Option, +) -> Vec { + plan_moves_impl(files, onto, home, now_ms, rules, pick, None) +} + +pub fn plan_moves_with_metadata( + files: &[FileEntry], + onto: &Ontology, + home: &Path, + now_ms: u64, + rules: &[crate::userrules::Rule], + pick: &dyn Fn(&Path, &[&str]) -> Option, + lineage_probe: &dyn Fn(&Path) -> Option, +) -> Vec { + plan_moves_impl( + files, + onto, + home, + now_ms, + rules, + pick, + Some(lineage_probe), + ) +} + +pub fn validate_move_source(plan: &MovePlan) -> Result<(), String> { + let path = Path::new(&plan.src); + let metadata = std::fs::symlink_metadata(path) + .map_err(|_| "organize-source-unavailable".to_string())?; + if metadata.file_type().is_symlink() || !metadata.is_file() { + return Err("organize-source-not-regular-file".into()); + } + if plan.source_size.is_some_and(|size| size != metadata.len()) { + return Err("organize-source-size-changed".into()); + } + let modified_ms = metadata + .modified() + .ok() + .and_then(|time| time.duration_since(std::time::UNIX_EPOCH).ok()) + .map(|duration| duration.as_millis() as u64) + .unwrap_or_default(); + if plan + .source_mtime_ms + .is_some_and(|mtime_ms| mtime_ms != modified_ms) + { + return Err("organize-source-mtime-changed".into()); + } + #[cfg(not(coverage))] + if !plan.lineage.lineage_fingerprint.is_empty() { + let current = lineage_metadata_for_path(path) + .ok_or_else(|| "organize-source-lineage-unavailable".to_string())?; + if current.lineage_fingerprint != plan.lineage.lineage_fingerprint { + return Err("organize-source-lineage-changed".into()); + } + } + Ok(()) +} + /// 확장자 규칙만 사용(picker 없음) — 기존 동작 유지. pub fn plan_moves(files: &[FileEntry], onto: &Ontology, home: &Path) -> Vec { plan_moves_with(files, onto, home, 0, &[], &|_, _| None) @@ -80,6 +241,7 @@ pub fn plan_moves(files: &[FileEntry], onto: &Ontology, home: &Path) -> Vec>(); + let probes = Cell::new(0); + let plans = plan_moves_with_metadata( + &files, + &onto, + Path::new("/home/u"), + 1_800_000_000_000, + &[], + &|_, _| None, + &|_| { + probes.set(probes.get() + 1); + Some(LineageMetadata::default()) + }, + ); + assert_eq!(probes.get(), MAX_LINEAGE_PROBES); + assert_eq!(plans.len(), MAX_LINEAGE_PROBES); + } + #[test] fn skips_unclassified_and_targetless() { let onto = parse_ttl(ONTO).unwrap(); diff --git a/src/lib/Organize.svelte b/src/lib/Organize.svelte index 15104d8d2..1b0bb29b0 100644 --- a/src/lib/Organize.svelte +++ b/src/lib/Organize.svelte @@ -104,6 +104,12 @@ {@const b = verdictBadge(verdicts[p.src])} {b.label} {/if} + {#if p.lineage?.production_time_ms} + + 생산 {new Date(p.lineage.production_time_ms).toISOString().slice(0, 10)} + · {p.lineage.production_time_source ?? "미상"} + + {/if} → {p.dst} @@ -141,6 +147,7 @@ .group li { padding: 1px 0; display: flex; gap: 0.5rem; align-items: center; } .path { overflow-wrap: anywhere; flex: 1; } .arrow { color: #999; flex-shrink: 0; } + .lineage { color: #666; font-size: 0.75rem; flex-shrink: 0; } .muted { color: #999; } .error { color: #b00; } .errors { color: #b00; font-size: 0.85rem; list-style: none; padding: 0; } diff --git a/src/lib/api.ts b/src/lib/api.ts index 23c09ffb6..d44e5ed15 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -125,6 +125,14 @@ export interface MovePlan { src: string; dst: string; class_id: string; + source_size?: number | null; + source_mtime_ms?: number | null; + lineage?: { + production_time_ms?: number | null; + production_time_source?: string | null; + production_time_confidence?: string | null; + lineage_fingerprint: string; + }; } export const planOrganize = (root: string) => From b394ecbf89cc233241aea43b6ff439a925a4e4e5 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 22:34:48 +0900 Subject: [PATCH 164/691] feat: bound organize scans and pass lineage to local judge --- README.md | 4 +- .../adr/0001-cloud-offload-goal-state.md | 3 +- .../cloud-offload-operator-runbook.md | 9 ++- src-tauri/src/commands.rs | 16 ++++- src-tauri/src/dupes.rs | 67 +++++++++++++++++++ src-tauri/src/llm/engine.rs | 2 +- src-tauri/src/llm/mod.rs | 3 +- src-tauri/src/llm/prompt.rs | 37 ++++++++-- src-tauri/src/organize.rs | 2 +- 9 files changed, 127 insertions(+), 16 deletions(-) diff --git a/README.md b/README.md index 04ed38be1..2505726b3 100644 --- a/README.md +++ b/README.md @@ -11,9 +11,9 @@ - 🧹 **Known cache & temp cleanup** — OS, browser, and package-manager caches - 🛠 **Dev artifact cleanup** — stale `node_modules`, `target/`, `venv`, … - 👯 **Duplicate finder** — size → partial hash → BLAKE3 full hash -- 🗂 **Ontology-based organizing** — files classified into an OWL taxonomy you can edit; move plans bind metadata-first production-time lineage and source size/mtime, revalidate them immediately before moving, and skip File Provider dataless sources +- 🗂 **Ontology-based organizing** — files classified into an OWL taxonomy you can edit; move plans use a complete bounded scan, bind metadata-first production-time lineage and source size/mtime, revalidate them immediately before moving, and skip File Provider dataless sources - 📊 **Disk inventory** — "what is on my disk?", aggregated by category, unknowns surfaced -- 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety, fully offline +- 🧠 **On-device LLM advisor** — embedded llama.cpp model judges delete-safety and ontology classes from bounded metadata-first lineage evidence, fully offline - ☁️ **Metadata-first cloud archive** — detects iCloud Drive, OneDrive, and Google Drive; inspects embedded file metadata, bounded dataset schemas, Rust-parsed ZIP indexes, and incomplete-download archive fragments without extracting payloads; exports a bounded path-free pre-copy preview contract for semantic-data-portal; verifies macOS iCloud quota through Apple's read-only native account client and revalidates authoritative OneDrive/Google account capacity through read-only OAuth with a conservative reserve when configured; for personal roots, permits copy-only through an observed native desktop client when OAuth quota evidence is the only missing input; requires a fresh bounded local provider-client runtime observation before a new vendor-root copy; refuses to add a new iCloud item while the read-only local CloudDocs queue reports pending, blocked, out-of-quota, unclassified, or errored work; performs gated copy-plus-hash verification; verifies macOS File Provider status first with native PKCE OAuth checksum plus exact OneDrive path or Google My Drive parent-chain fallback; and distinguishes normal provider-confirmation waits from overdue unconfirmed copies while retaining the source - 🟢 **Provider client runtime gate** — observes only bounded process names, never emits a command line, path, account identifier, or process name, and blocks new OneDrive/Google Drive copies when the local vendor runtime is not observed; runtime presence remains only a local prerequisite and never becomes an account-authentication, capacity, or sync-completion claim - ⏸️ **iCloud pre-copy pressure gate** — reads the private CloudDocs database through immutable SQLite mode, a bounded native `brctl status` summary, and a path-free `fileproviderctl dump` activity probe; emits only queue/state aggregates and stable blocker codes, and fails closed before a new iCloud copy when the existing local upload queue is non-empty, unhealthy, native status times out, or File Provider reports no-progress fetches; a quiet queue still does not prove remote capacity, per-item synchronization, or eviction safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index f79ef0ea1..f46fea815 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -86,4 +86,5 @@ clear evidence. - Ontology-based local organization uses the same lineage precedence as cloud planning (embedded metadata, explicit filename date, filesystem creation time, then modification time). Its move plan carries a path-free lineage fingerprint plus the source size/mtime snapshot and is rejected - if the source changes; File Provider dataless sources are not moved. + if the source changes; File Provider dataless sources are not moved. The organization walk is + bounded at 10,000 entries or 10 seconds and rejects partial results. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index 9731b6044..d0e5f3558 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -4,9 +4,12 @@ DiskSage plans cloud copies from embedded metadata first, then filename date, fi time, and modification time. Filename tokens such as `2026-04-28` or `251210` are secondary evidence and never establish production time by themselves. -Ontology-based local organization uses the same precedence. Its preview records a path-free -lineage fingerprint and source size/mtime snapshot; execution rechecks both immediately before a -move and skips File Provider `dataless` sources. +Ontology-based local organization uses the same precedence. Its preview performs a complete +bounded scan (10,000 entries or 10 seconds), records a path-free lineage fingerprint and source +size/mtime snapshot; execution rechecks both immediately before a move and skips File Provider +`dataless` sources. When the local model is enabled, its class prompt receives the same bounded +production-time evidence; metadata probing is capped at 32 files per planning pass. A partial scan +is rejected rather than producing a partial move plan. The runtime sequence is: diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index e46ad1267..e8778e825 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -2584,7 +2584,7 @@ pub fn plan_organize( ) -> Result, String> { let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; let rules = crate::userrules::parse_rules(&user_rules_json(&app))?; - let files = dupes::collect_files(Path::new(&root)); + let files = dupes::collect_files_bounded(Path::new(&root), 10_000, Duration::from_secs(10))?; let home = resolve_home(&app)?; #[cfg(feature = "llm-engine")] { @@ -2598,8 +2598,17 @@ pub fn plan_organize( } } if let Some(engine) = guard.as_ref() { + let lineage_probe_count = std::cell::Cell::new(0usize); let pick = |p: &Path, cands: &[&str]| { - let meta = file_meta_at(p, 0, 0); + let mut meta = file_meta_at(p, 0, 0); + if lineage_probe_count.get() < organize::MAX_LINEAGE_PROBES { + lineage_probe_count.set(lineage_probe_count.get() + 1); + if let Some(lineage) = organize::lineage_metadata_for_path(p) { + meta.production_time_ms = lineage.production_time_ms; + meta.production_time_source = lineage.production_time_source; + meta.production_time_confidence = lineage.production_time_confidence; + } + } crate::llm::pick_class(engine, &meta, cands) }; return Ok(organize::plan_moves_with_metadata( @@ -2683,6 +2692,9 @@ pub fn file_meta_at(path: &Path, size: u64, mtime_days: u64) -> crate::llm::File size, mtime_days, parent, + production_time_ms: None, + production_time_source: None, + production_time_confidence: None, } } diff --git a/src-tauri/src/dupes.rs b/src-tauri/src/dupes.rs index 8e200eb11..97c5f1764 100644 --- a/src-tauri/src/dupes.rs +++ b/src-tauri/src/dupes.rs @@ -1,6 +1,7 @@ use std::collections::HashMap; use std::path::{Path, PathBuf}; use std::io::Read; +use std::time::{Duration, Instant}; #[derive(Debug, Clone)] pub struct FileEntry { @@ -133,9 +134,59 @@ pub fn collect_files(root: &Path) -> Vec { .collect() } +/// Collect files for an organizing plan without allowing an unbounded walk. A partial +/// organization plan is unsafe, so either the complete bounded walk succeeds or the caller gets +/// a stable blocker. +pub fn collect_files_bounded( + root: &Path, + max_entries: usize, + max_duration: Duration, +) -> Result, String> { + let metadata = std::fs::symlink_metadata(root) + .map_err(|_| "organize-root-unavailable".to_string())?; + if metadata.file_type().is_symlink() || !metadata.is_dir() { + return Err("organize-root-not-directory".into()); + } + if max_entries == 0 || max_duration.is_zero() { + return Err("organize-scan-bound-invalid".into()); + } + let started = Instant::now(); + let mut seen = 0usize; + let walker = jwalk::WalkDir::new(root) + .follow_links(false) + .skip_hidden(false) + .process_read_dir(|_d, _p, _s, children| { + children.retain(|r| r.as_ref().map(crate::scanner::keep_entry).unwrap_or(true)); + }); + let mut files = Vec::new(); + for entry in walker { + if started.elapsed() >= max_duration { + return Err("organize-scan-timeout".into()); + } + if seen >= max_entries { + return Err("organize-scan-entry-limit".into()); + } + seen += 1; + let Ok(entry) = entry else { continue }; + if !entry.file_type().is_file() { + continue; + } + let Some(metadata) = entry.metadata().ok() else { + continue; + }; + files.push(FileEntry { + path: entry.path(), + size: metadata.len(), + mtime_ms: mtime_millis(&metadata), + }); + } + Ok(files) +} + #[cfg(test)] mod tests { use super::*; + use std::time::Duration; use std::path::PathBuf; use std::io::Write; @@ -326,6 +377,22 @@ mod tests { assert!(files.iter().any(|f| f.mtime_ms > 0), "mtime_ms filled for a real file"); } + #[test] + fn bounded_collection_rejects_partial_walks() { + let d = tempfile::tempdir().unwrap(); + for i in 0..3 { + std::fs::write(d.path().join(format!("{i}.txt")), b"x").unwrap(); + } + assert_eq!( + collect_files_bounded(d.path(), 2, Duration::from_secs(1)).unwrap_err(), + "organize-scan-entry-limit" + ); + assert_eq!( + collect_files_bounded(d.path(), 10, Duration::ZERO).unwrap_err(), + "organize-scan-bound-invalid" + ); + } + #[cfg(unix)] #[test] fn collect_files_excludes_dirs_and_symlinks() { diff --git a/src-tauri/src/llm/engine.rs b/src-tauri/src/llm/engine.rs index 18c2fedd1..5b8e78f0a 100644 --- a/src-tauri/src/llm/engine.rs +++ b/src-tauri/src/llm/engine.rs @@ -105,7 +105,7 @@ mod tests { fn real_engine_returns_a_rated_verdict() { let path = std::env::var("DISKSAGE_MODEL").expect("set DISKSAGE_MODEL to a .gguf path"); let engine = LlamaEngine::new(std::path::Path::new(&path)).unwrap(); - let meta = FileMeta { path: "/tmp/x.log".into(), name: "x.log".into(), size: 10, mtime_days: 1, parent: "tmp".into() }; + let meta = FileMeta { path: "/tmp/x.log".into(), name: "x.log".into(), size: 10, mtime_days: 1, parent: "tmp".into(), production_time_ms: None, production_time_source: None, production_time_confidence: None }; let fv = verdict_for(&engine, &meta); assert_ne!(fv.verdict, Verdict::Unrated); // 실제 모델이면 safe/caution/keep 중 하나 } diff --git a/src-tauri/src/llm/mod.rs b/src-tauri/src/llm/mod.rs index 233d7b55c..8e8ffa914 100644 --- a/src-tauri/src/llm/mod.rs +++ b/src-tauri/src/llm/mod.rs @@ -71,7 +71,8 @@ mod tests { } fn meta() -> FileMeta { FileMeta { path: "/downloads/old_report.pdf".into(), name: "old_report.pdf".into(), - size: 2_400_000, mtime_days: 420, parent: "downloads".into() } + size: 2_400_000, mtime_days: 420, parent: "downloads".into(), + production_time_ms: None, production_time_source: None, production_time_confidence: None } } #[test] diff --git a/src-tauri/src/llm/prompt.rs b/src-tauri/src/llm/prompt.rs index d60a4249a..251027c3e 100644 --- a/src-tauri/src/llm/prompt.rs +++ b/src-tauri/src/llm/prompt.rs @@ -8,6 +8,19 @@ pub struct FileMeta { pub size: u64, pub mtime_days: u64, pub parent: String, + pub production_time_ms: Option, + pub production_time_source: Option, + pub production_time_confidence: Option, +} + +fn lineage_hint(m: &FileMeta) -> String { + match (m.production_time_ms, m.production_time_source.as_deref()) { + (Some(time), Some(source)) => format!( + "production_time_ms={time} source={source} confidence={}", + m.production_time_confidence.as_deref().unwrap_or("unknown") + ), + _ => "production_time=unavailable".into(), + } } /// LLM 확장자 추론 결과. type_desc = "무슨 파일인가" 짧은 설명, class = 후보 중 제안(없으면 None). @@ -22,10 +35,15 @@ pub fn verdict_prompt(m: &FileMeta) -> String { format!( "You judge whether a file is safe to delete, using ONLY its metadata (never its contents).\n\ File: name={name} parent={parent} size={size}B age={age}d\n\ + Lineage evidence: {lineage}\n\ Reply with ONLY this JSON, no prose:\n\ {{\"verdict\":\"safe|caution|keep\",\"reason\":\"\"}}\n\ safe = regenerable/temporary; caution = maybe needed; keep = likely important.", - name = m.name, parent = m.parent, size = m.size, age = m.mtime_days + name = m.name, + parent = m.parent, + size = m.size, + age = m.mtime_days, + lineage = lineage_hint(m) ) } @@ -34,10 +52,14 @@ pub fn classify_prompt(m: &FileMeta, candidates: &[&str]) -> String { format!( "Classify this file into exactly one of the candidate classes, using ONLY metadata.\n\ File: name={name} parent={parent}\n\ + Lineage evidence: {lineage}\n\ Candidates: {list}\n\ Reply with ONLY this JSON (choose exactly one id from the list above):\n\ {{\"class\":\"\"}}", - name = m.name, parent = m.parent, list = candidates.join(", ") + name = m.name, + parent = m.parent, + lineage = lineage_hint(m), + list = candidates.join(", ") ) } @@ -70,13 +92,17 @@ mod tests { use super::*; fn meta() -> FileMeta { FileMeta { path: "/downloads/old_report.pdf".into(), name: "old_report.pdf".into(), - size: 2_400_000, mtime_days: 420, parent: "downloads".into() } + size: 2_400_000, mtime_days: 420, parent: "downloads".into(), + production_time_ms: Some(1_700_000_000_000), + production_time_source: Some("embedded:exiftool:CreateDate".into()), + production_time_confidence: Some("high".into()) } } #[test] fn verdict_prompt_has_metadata_and_schema() { let p = verdict_prompt(&meta()); assert!(p.contains("old_report.pdf")); assert!(p.contains("downloads")); + assert!(p.contains("embedded:exiftool:CreateDate")); assert!(p.contains(r#"{"verdict":"#)); assert!(p.contains("safe") && p.contains("caution") && p.contains("keep")); } @@ -85,6 +111,7 @@ mod tests { let p = classify_prompt(&meta(), &["Image", "Document", "Installer"]); for c in ["Image", "Document", "Installer"] { assert!(p.contains(c)); } assert!(p.to_lowercase().contains("exactly one")); + assert!(p.contains("production_time_ms=1700000000000")); } #[test] fn summary_prompt_includes_each_sample() { @@ -93,8 +120,8 @@ mod tests { } #[test] fn summary_prompt_handles_multiple_samples() { - let a = FileMeta { path: "/a/x.bin".into(), name: "x.bin".into(), size: 1, mtime_days: 1, parent: "a".into() }; - let b = FileMeta { path: "/a/y.dat".into(), name: "y.dat".into(), size: 2, mtime_days: 2, parent: "a".into() }; + let a = FileMeta { path: "/a/x.bin".into(), name: "x.bin".into(), size: 1, mtime_days: 1, parent: "a".into(), production_time_ms: None, production_time_source: None, production_time_confidence: None }; + let b = FileMeta { path: "/a/y.dat".into(), name: "y.dat".into(), size: 2, mtime_days: 2, parent: "a".into(), production_time_ms: None, production_time_source: None, production_time_confidence: None }; let p = summary_prompt(&[a, b]); assert!(p.contains("x.bin") && p.contains("y.dat")); } diff --git a/src-tauri/src/organize.rs b/src-tauri/src/organize.rs index c1818a4d7..92ace9672 100644 --- a/src-tauri/src/organize.rs +++ b/src-tauri/src/organize.rs @@ -5,7 +5,7 @@ use crate::inventory::classify; use crate::ontology::Ontology; // ponytail: cap metadata probes per organize request; raise only with measured bounded latency. -const MAX_LINEAGE_PROBES: usize = 32; +pub(crate) const MAX_LINEAGE_PROBES: usize = 32; #[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize, Default)] pub struct LineageMetadata { From 1a648a7224249a45941a82eb7e75f8eca300c13c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 22:56:38 +0900 Subject: [PATCH 165/691] fix: bound iCloud health probes during provider stalls --- .../adr/0001-cloud-offload-goal-state.md | 8 + .../cloud-offload-operator-runbook.md | 3 + src-tauri/src/icloud_sync_health.rs | 190 +++++++++++++----- 3 files changed, 155 insertions(+), 46 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index f46fea815..fab6e7955 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -61,6 +61,12 @@ incomplete evidence; it records `provider-global-sync-probe-timeout`, marks the `unavailable`, and continues to block new copies. A partial dump can never become authoritative clear evidence. +The local CloudDocs client database is also bounded before any query or snapshot. When `client.db` +exceeds the snapshot ceiling, DiskSage skips both the expensive snapshot and the fallback query, +returns incomplete evidence, and still runs the bounded File Provider activity probe. Pipe readers +are non-blocking and every provider subprocess is terminated with its private process group on +timeout; a health check cannot remain stuck behind a provider copy. + ## Consequences - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. @@ -78,6 +84,8 @@ clear evidence. - The bounded iCloud File Provider activity probe records only the count of redacted `no progress` fetch markers. Any such marker, a probe timeout, or unavailable probe evidence blocks new-copy admission; no path, filename, item identifier, or content is retained. +- An oversized CloudDocs `client.db` produces incomplete, fail-closed evidence without running a + long SQLite fallback query; the File Provider probe still reports whether the provider is stalled. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/docs/development/cloud-offload-operator-runbook.md b/docs/development/cloud-offload-operator-runbook.md index d0e5f3558..ba16727de 100644 --- a/docs/development/cloud-offload-operator-runbook.md +++ b/docs/development/cloud-offload-operator-runbook.md @@ -40,6 +40,9 @@ The runtime sequence is: the bounded iCloud File Provider activity probe likewise blocks when it sees redacted `no progress` fetches or times out; the latter means the provider still has remote changes to materialize. + If CloudDocs `client.db` exceeds the bounded snapshot ceiling, DiskSage skips the expensive + SQLite fallback and reports incomplete evidence instead of waiting indefinitely; the File Provider + probe remains bounded and still blocks new copies. Third-party File Provider dumps also block new copies while upload/download progress, non-zero reconciliation backlogs (`provider-global-sync-reconciliation-pending`), provider disconnection, or path errors are present; the stable blocker codes are shown in the plan and diff --git a/src-tauri/src/icloud_sync_health.rs b/src-tauri/src/icloud_sync_health.rs index 76c1d1430..a99b2bcf9 100644 --- a/src-tauri/src/icloud_sync_health.rs +++ b/src-tauri/src/icloud_sync_health.rs @@ -363,6 +363,18 @@ fn run_queue_probe_with_uri( if source_immutable { command.arg("-readonly"); } + #[cfg(unix)] + { + use std::os::unix::process::CommandExt; + unsafe { + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } + } let mut child = command .arg(client_db_uri) .arg(QUEUE_QUERY) @@ -371,36 +383,96 @@ fn run_queue_probe_with_uri( .stderr(Stdio::piped()) .spawn() .map_err(|_| "icloud-sync-health-sqlite3-spawn-failed".to_string())?; + let child_pid = child.id(); + #[cfg(unix)] + let kill_group = || unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + }; + #[cfg(not(unix))] + let kill_group = || {}; + let stdout = match child.stdout.take() { + Some(stdout) => stdout, + None => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + return Err("icloud-sync-health-query-stdout-unavailable".into()); + } + }; + let stderr = match child.stderr.take() { + Some(stderr) => stderr, + None => { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + return Err("icloud-sync-health-query-stderr-unavailable".into()); + } + }; + let stdout_reader = thread::spawn(move || { + let mut output = Vec::new(); + let read_ok = stdout + .take((MAX_STDOUT_BYTES + 1) as u64) + .read_to_end(&mut output) + .is_ok(); + (read_ok, output) + }); + let stderr_reader = thread::spawn(move || { + let mut output = Vec::new(); + let read_ok = stderr + .take((MAX_STDERR_BYTES + 1) as u64) + .read_to_end(&mut output) + .is_ok(); + (read_ok, output) + }); let deadline = Instant::now() + PROBE_TIMEOUT; loop { match child.try_wait() { - Ok(Some(_)) => break, + Ok(Some(_)) => { + kill_group(); + break; + } Ok(None) if Instant::now() < deadline => thread::sleep(Duration::from_millis(20)), Ok(None) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); + let _ = stdout_reader.join(); + let _ = stderr_reader.join(); return Err("icloud-sync-health-query-timeout".into()); } Err(_) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); + let _ = stdout_reader.join(); + let _ = stderr_reader.join(); return Err("icloud-sync-health-query-wait-failed".into()); } } } - let output = child - .wait_with_output() + let (stdout_ok, stdout) = stdout_reader + .join() + .map_err(|_| "icloud-sync-health-query-output-failed".to_string())?; + let (stderr_ok, stderr) = stderr_reader + .join() .map_err(|_| "icloud-sync-health-query-output-failed".to_string())?; - if output.stdout.len() > MAX_STDOUT_BYTES || output.stderr.len() > MAX_STDERR_BYTES { + if !stdout_ok || !stderr_ok { + return Err("icloud-sync-health-query-output-failed".into()); + } + if stdout.len() > MAX_STDOUT_BYTES || stderr.len() > MAX_STDERR_BYTES { return Err("icloud-sync-health-query-output-oversized".into()); } - if !output.status.success() { + let status = child + .try_wait() + .map_err(|_| "icloud-sync-health-query-wait-failed".to_string())? + .ok_or_else(|| "icloud-sync-health-query-wait-failed".to_string())?; + if !status.success() { return Err("icloud-sync-health-schema-unsupported".into()); } - if !output.stderr.is_empty() { + if !stderr.is_empty() { return Err("icloud-sync-health-query-stderr-present".into()); } - String::from_utf8(output.stdout).map_err(|_| "icloud-sync-health-query-output-not-utf8".into()) + String::from_utf8(stdout).map_err(|_| "icloud-sync-health-query-output-not-utf8".into()) } fn run_queue_probe(client_db: &Path) -> Result { @@ -595,7 +667,7 @@ fn probe_file_provider_activity(observed_at_ms: u64) -> IcloudFileProviderActivi let kill_group = || unsafe { let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); }; - let stdout = match child.stdout.take() { + let mut stdout = match child.stdout.take() { Some(stdout) => stdout, None => { kill_group(); @@ -604,63 +676,67 @@ fn probe_file_provider_activity(observed_at_ms: u64) -> IcloudFileProviderActivi return parse_file_provider_activity_output("", observed_at_ms, false, false, false); } }; - let output_reader = thread::spawn(move || { - let mut output = Vec::new(); - let read_result = stdout - .take((MAX_FILEPROVIDER_DUMP_BYTES + 1) as u64) - .read_to_end(&mut output); - (read_result.is_ok(), output) - }); + use std::io::ErrorKind; + use std::os::fd::AsRawFd; + let fd = stdout.as_raw_fd(); + let flags = unsafe { libc::fcntl(fd, libc::F_GETFL) }; + if flags < 0 || unsafe { libc::fcntl(fd, libc::F_SETFL, flags | libc::O_NONBLOCK) } < 0 { + kill_group(); + let _ = child.kill(); + let _ = child.wait(); + return parse_file_provider_activity_output("", observed_at_ms, false, false, false); + } + let mut output = Vec::new(); + let mut read_failed = false; + let mut timed_out = false; + let mut status = None; let deadline = Instant::now() + FILEPROVIDER_DUMP_TIMEOUT; - let status = loop { + loop { + let mut buffer = [0_u8; 16 * 1024]; + match stdout.read(&mut buffer) { + Ok(read) if read > 0 => { + let remaining = MAX_FILEPROVIDER_DUMP_BYTES + 1 - output.len(); + output.extend_from_slice(&buffer[..read.min(remaining)]); + } + Ok(_) => {} + Err(error) if error.kind() == ErrorKind::WouldBlock => {} + Err(_) => { + read_failed = true; + break; + } + } match child.try_wait() { - Ok(Some(status)) => break Some(status), + Ok(Some(child_status)) => { + status = Some(child_status); + break; + } Ok(None) if Instant::now() < deadline => thread::sleep(Duration::from_millis(25)), Ok(None) => { + timed_out = true; kill_group(); let _ = child.kill(); let _ = child.wait(); - let (_read_ok, output) = output_reader.join().unwrap_or((false, Vec::new())); - let output_truncated = output.len() > MAX_FILEPROVIDER_DUMP_BYTES; - let output = String::from_utf8_lossy( - &output[..output.len().min(MAX_FILEPROVIDER_DUMP_BYTES)], - ); - return parse_file_provider_activity_output( - &output, - observed_at_ms, - false, - true, - output_truncated, - ); + break; } Err(_) => { kill_group(); let _ = child.kill(); let _ = child.wait(); - let (_read_ok, output) = output_reader.join().unwrap_or((false, Vec::new())); - let output_truncated = output.len() > MAX_FILEPROVIDER_DUMP_BYTES; - let output = String::from_utf8_lossy( - &output[..output.len().min(MAX_FILEPROVIDER_DUMP_BYTES)], - ); - return parse_file_provider_activity_output( - &output, - observed_at_ms, - false, - false, - output_truncated, - ); + read_failed = true; + break; } } - }; - kill_group(); - let (read_ok, output) = output_reader.join().unwrap_or((false, Vec::new())); + } + if timed_out || read_failed { + kill_group(); + } let output_truncated = output.len() > MAX_FILEPROVIDER_DUMP_BYTES; let output = String::from_utf8_lossy(&output[..output.len().min(MAX_FILEPROVIDER_DUMP_BYTES)]); parse_file_provider_activity_output( &output, observed_at_ms, - read_ok && status.is_some_and(|status| status.success()), - false, + !timed_out && !read_failed && status.is_some_and(|status| status.success()), + timed_out, output_truncated, ) } @@ -1423,6 +1499,9 @@ pub fn probe_icloud_sync_health( let native_status = bounded_native_status(db_dir, observed_at_ms); #[cfg(not(target_os = "macos"))] let native_status = Some(probe_native_status(observed_at_ms)); + let source_database_too_large = managed_database_files + .iter() + .any(|file| file.role == "client.db" && file.logical_bytes > MAX_SNAPSHOT_SOURCE_BYTES); match run_consistent_snapshot_queue_probe(db_dir) { Ok((output, includes_wal)) => { let mut report = build_report( @@ -1440,6 +1519,25 @@ pub fn probe_icloud_sync_health( attach_native_status_admission(&mut report); Ok(report) } + Err(_) if source_database_too_large => { + let mut report = build_report( + observed_at_ms, + managed_database_files, + IcloudUploadQueueSummary::default(), + false, + false, + )?; + report + .notices + .push("icloud-sync-health-source-database-too-large".into()); + report.native_status = native_status; + #[cfg(target_os = "macos")] + { + report.file_provider_activity = Some(probe_file_provider_activity(observed_at_ms)); + } + attach_native_status_admission(&mut report); + Ok(report) + } Err(_) => { let client_db = db_dir.join("client.db"); let upload_queue = parse_queue_rows(&run_queue_probe(&client_db)?)?; From eb955800a18e4f0285afe9180eb0ca8486ef1cb9 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 23:11:38 +0900 Subject: [PATCH 166/691] feat: export path-free organization lineage --- .../adr/0001-cloud-offload-goal-state.md | 4 + src-tauri/src/commands.rs | 9 + src-tauri/src/lib.rs | 3 + src-tauri/src/organization_lineage.rs | 190 ++++++++++++++++++ src/lib/Organize.svelte | 20 ++ src/lib/api.ts | 24 +++ 6 files changed, 250 insertions(+) create mode 100644 src-tauri/src/organization_lineage.rs diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index fab6e7955..6bff2f2a4 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -96,3 +96,7 @@ timeout; a health check cannot remain stuck behind a provider copy. plan carries a path-free lineage fingerprint plus the source size/mtime snapshot and is rejected if the source changes; File Provider dataless sources are not moved. The organization walk is bounded at 10,000 entries or 10 seconds and rejects partial results. +- A complete organization plan can be exported as `disksage.organization-lineage-batch` v1. The + handoff contains only lineage fingerprints, size/mtime, production-time evidence, ontology class, + `targetFolder`, and the planned `move` action. Naruon stores it encrypted and returns a redacted + summary; it never receives paths, names, OAuth material, or move/eviction authority. diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index e8778e825..44faef472 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -20,6 +20,7 @@ use crate::safety; use crate::{ brew_cleanup, cloud, cloud_adr, cloud_eviction, cloud_local_eviction, cloud_plan_view, cloud_review, cloud_transfer, dev_artifacts, dupes, git_worktree, icloud_sync_health, + organization_lineage, provider_api_client, provider_api_write, provider_capacity, provider_client_runtime, provider_evidence, provider_global_sync, provider_oauth, provider_sync, rules, }; @@ -2634,6 +2635,14 @@ pub fn plan_organize( )) } +#[cfg(not(coverage))] +#[tauri::command] +pub fn export_organization_lineage( + plans: Vec, +) -> Result { + organization_lineage::export_move_plans(&plans, now_ms()) +} + #[cfg(not(coverage))] #[tauri::command] pub fn user_rules(app: AppHandle) -> Result, String> { diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 58d0813f7..9523cb349 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -70,6 +70,8 @@ pub mod multipart_archive; pub mod naruon_capacity; pub mod naruon_cloud_copy_readiness; pub mod naruon_lineage; +/// Path-free ontology organization lineage handoff for Naruon/semantic-data-portal. +pub mod organization_lineage; /// Read-only, fail-closed Podman VM/store reclaim evidence. pub mod podman_reclaim; pub mod provider_api_client; @@ -113,6 +115,7 @@ pub fn run() { commands::disk_inventory, commands::ontology_coherence, commands::plan_organize, + commands::export_organization_lineage, commands::user_rules, commands::execute_moves, commands::undo_last_moves, diff --git a/src-tauri/src/organization_lineage.rs b/src-tauri/src/organization_lineage.rs new file mode 100644 index 000000000..1049ce046 --- /dev/null +++ b/src-tauri/src/organization_lineage.rs @@ -0,0 +1,190 @@ +//! Path-free handoff for local ontology organization plans. +//! +//! This is a metadata contract only. It never includes source/destination paths, file names, +//! content, or provider credentials, and it cannot authorize a move or source eviction. + +use sha2::{Digest, Sha256}; + +use crate::organize::MovePlan; + +pub const ORGANIZATION_LINEAGE_SCHEMA: &str = "disksage.organization-lineage-batch"; +pub const ORGANIZATION_LINEAGE_SCHEMA_VERSION: u32 = 1; +pub const ORGANIZATION_LINEAGE_MAX_ITEMS: usize = 200; +pub const ORGANIZATION_LINEAGE_MAX_BODY_BYTES: usize = 512 * 1024; + +const MAX_DATETIME_EPOCH_MS: u64 = 253_402_300_799_999; + +#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] +#[serde(deny_unknown_fields)] +pub struct OrganizationLineageItem { + pub lineage_fingerprint: String, + pub source_size: u64, + pub source_mtime_ms: u64, + pub production_time_ms: u64, + pub production_time_source: String, + pub production_time_confidence: String, + pub ontology_class: String, + pub destination_relation: String, + pub action: String, +} + +#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)] +#[serde(deny_unknown_fields)] +pub struct OrganizationLineageBatch { + #[serde(rename = "schema")] + pub schema_kind: String, + pub version: u32, + pub generated_at_ms: u64, + pub complete: bool, + pub batch_fingerprint_sha256: String, + pub items: Vec, +} + +fn valid_lower_hex_64(value: &str) -> bool { + value.len() == 64 + && value + .bytes() + .all(|byte| byte.is_ascii_digit() || (b'a'..=b'f').contains(&byte)) +} + +fn bounded_text(value: &str, max_chars: usize) -> bool { + let count = value.chars().count(); + count > 0 && count <= max_chars && !value.chars().any(|character| character.is_control()) +} + +fn unsigned_batch( + generated_at_ms: u64, + items: Vec, +) -> OrganizationLineageBatch { + OrganizationLineageBatch { + schema_kind: ORGANIZATION_LINEAGE_SCHEMA.into(), + version: ORGANIZATION_LINEAGE_SCHEMA_VERSION, + generated_at_ms, + complete: true, + batch_fingerprint_sha256: String::new(), + items, + } +} + +/// Export a complete, path-free organization plan for Naruon/semantic-data-portal. +pub fn export_move_plans( + plans: &[MovePlan], + generated_at_ms: u64, +) -> Result { + if generated_at_ms == 0 || generated_at_ms > MAX_DATETIME_EPOCH_MS { + return Err("organization-lineage-generated-time-out-of-bounds".into()); + } + if plans.is_empty() { + return Err("organization-lineage-items-empty".into()); + } + if plans.len() > ORGANIZATION_LINEAGE_MAX_ITEMS { + return Err("organization-lineage-item-limit-exceeded".into()); + } + + let mut items = Vec::with_capacity(plans.len()); + for plan in plans { + let lineage = &plan.lineage; + let production_time_ms = lineage + .production_time_ms + .ok_or_else(|| "organization-lineage-production-time-missing".to_string())?; + let production_time_source = lineage + .production_time_source + .as_deref() + .ok_or_else(|| "organization-lineage-production-source-missing".to_string())?; + let production_time_confidence = lineage + .production_time_confidence + .as_deref() + .ok_or_else(|| "organization-lineage-production-confidence-missing".to_string())?; + + if !valid_lower_hex_64(&lineage.lineage_fingerprint) + || production_time_ms == 0 + || production_time_ms > MAX_DATETIME_EPOCH_MS + || !bounded_text(production_time_source, 256) + || !matches!( + production_time_confidence, + "high" | "medium" | "low" | "unknown" + ) + || !bounded_text(&plan.class_id, 512) + || !plan.class_id.starts_with("https://") + { + return Err("organization-lineage-metadata-invalid".into()); + } + let source_size = plan + .source_size + .ok_or_else(|| "organization-lineage-source-size-missing".to_string())?; + let source_mtime_ms = plan + .source_mtime_ms + .ok_or_else(|| "organization-lineage-source-mtime-missing".to_string())?; + items.push(OrganizationLineageItem { + lineage_fingerprint: lineage.lineage_fingerprint.clone(), + source_size, + source_mtime_ms, + production_time_ms, + production_time_source: production_time_source.into(), + production_time_confidence: production_time_confidence.into(), + ontology_class: plan.class_id.clone(), + destination_relation: "targetFolder".into(), + action: "move".into(), + }); + } + + let mut fingerprints = std::collections::BTreeSet::new(); + if items + .iter() + .any(|item| !fingerprints.insert(item.lineage_fingerprint.as_str())) + { + return Err("organization-lineage-fingerprint-duplicate".into()); + } + + let mut batch = unsigned_batch(generated_at_ms, items); + let unsigned = serde_json::to_vec(&batch).map_err(|_| "organization-lineage-json-invalid")?; + let digest = Sha256::digest(unsigned); + batch.batch_fingerprint_sha256 = digest.iter().map(|byte| format!("{byte:02x}")).collect(); + let encoded = serde_json::to_vec(&batch).map_err(|_| "organization-lineage-json-invalid")?; + if encoded.len() > ORGANIZATION_LINEAGE_MAX_BODY_BYTES { + return Err("organization-lineage-body-limit-exceeded".into()); + } + Ok(batch) +} + +#[cfg(test)] +mod tests { + use super::*; + use crate::organize::LineageMetadata; + + fn plan(fingerprint: &str) -> MovePlan { + MovePlan { + src: "/private/source/secret.mov".into(), + dst: "/Users/example/Media/Media/secret.mov".into(), + class_id: "https://disksage.app/ontology#Media".into(), + source_size: Some(42), + source_mtime_ms: Some(123), + lineage: LineageMetadata { + production_time_ms: Some(456), + production_time_source: Some("embedded:exiftool:MediaCreateDate".into()), + production_time_confidence: Some("high".into()), + lineage_fingerprint: fingerprint.into(), + }, + } + } + + #[test] + fn export_is_path_free_and_self_fingerprinted() { + let batch = export_move_plans(&[plan(&"a".repeat(64))], 1_000).unwrap(); + let json = serde_json::to_string(&batch).unwrap(); + assert!(!json.contains("secret.mov")); + assert!(!json.contains("/private/source")); + assert_eq!(batch.items[0].destination_relation, "targetFolder"); + assert_eq!(batch.batch_fingerprint_sha256.len(), 64); + } + + #[test] + fn export_rejects_unmaterialized_plan_metadata() { + let mut candidate = plan(&"b".repeat(64)); + candidate.lineage.production_time_ms = None; + assert_eq!( + export_move_plans(&[candidate], 1_000).unwrap_err(), + "organization-lineage-production-time-missing" + ); + } +} diff --git a/src/lib/Organize.svelte b/src/lib/Organize.svelte index 1b0bb29b0..adac77371 100644 --- a/src/lib/Organize.svelte +++ b/src/lib/Organize.svelte @@ -11,6 +11,7 @@ let loadError = $state(""); let results: api.CleanResult[] = $state([]); let verdicts: Record = $state({}); + let exportStatus = $state(""); async function loadVerdicts(paths: string[]) { try { @@ -77,6 +78,21 @@ busy = false; } } + + async function copyLineageHandoff() { + if (plans.length === 0) return; + busy = true; + exportStatus = ""; + try { + const batch = await api.exportOrganizationLineage(plans); + await navigator.clipboard.writeText(JSON.stringify(batch, null, 2)); + exportStatus = "경로 없는 계보 계약을 클립보드에 복사했습니다."; + } catch (e) { + exportStatus = `계보 내보내기 실패: ${String(e)}`; + } finally { + busy = false; + } + }
@@ -123,7 +139,11 @@ +
+ {#if exportStatus}

{exportStatus}

{/if} {/if} {#if results.length > 0} diff --git a/src/lib/api.ts b/src/lib/api.ts index d44e5ed15..79f91bf41 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -138,6 +138,30 @@ export interface MovePlan { export const planOrganize = (root: string) => invoke("plan_organize", { root }); +export interface OrganizationLineageItem { + lineage_fingerprint: string; + source_size: number; + source_mtime_ms: number; + production_time_ms: number; + production_time_source: string; + production_time_confidence: "high" | "medium" | "low" | "unknown"; + ontology_class: string; + destination_relation: "targetFolder"; + action: "move"; +} + +export interface OrganizationLineageBatch { + schema: "disksage.organization-lineage-batch"; + version: 1; + generated_at_ms: number; + complete: true; + batch_fingerprint_sha256: string; + items: OrganizationLineageItem[]; +} + +export const exportOrganizationLineage = (plans: MovePlan[]) => + invoke("export_organization_lineage", { plans }); + export interface RuleMatch { ext: string | null; name_contains: string | null; From 07e8d5090fba0ffe06abf160ac4534d7b0c82178 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 23:22:17 +0900 Subject: [PATCH 167/691] test: cover valid git fallback evidence gap --- src-tauri/src/git_worktree.rs | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/src-tauri/src/git_worktree.rs b/src-tauri/src/git_worktree.rs index cef05b3d6..c5e8067e9 100644 --- a/src-tauri/src/git_worktree.rs +++ b/src-tauri/src/git_worktree.rs @@ -2354,6 +2354,31 @@ mod tests { .any(|issue| issue == "git-worktree-admin-head-unavailable:stale")); } + #[cfg(unix)] + #[test] + fn admin_fallback_with_valid_oid_and_clean_path_stays_evidence_gap() { + let temp = tempfile::tempdir().unwrap(); + let common_dir = temp.path().join(".git"); + let worktree = temp.path().join("linked"); + fs::create_dir_all(&worktree).unwrap(); + let admin = common_dir.join("worktrees").join("linked"); + fs::create_dir_all(&admin).unwrap(); + fs::write(admin.join("gitdir"), format!("{}/.git\n", worktree.display())).unwrap(); + fs::write(admin.join("HEAD"), format!("{}\n", oid('a'))).unwrap(); + + let (entries, _) = + admin_fallback_worktrees(&common_dir, GitWorktreeAuditOptions::default()); + assert_eq!(entries.len(), 1); + assert_eq!(entries[0].path, worktree); + assert!(is_oid(&entries[0].head)); + assert!(entries[0].path.is_dir()); + assert!(entries[0].fallback_evidence_incomplete); + assert_eq!( + disposition(&["git-worktree-admin-fallback-evidence-incomplete".into()]), + GitWorktreeDisposition::EvidenceGap + ); + } + #[cfg(unix)] #[test] fn admin_fallback_file_rejects_symlinks_and_bounds_reads() { From aa7ac7e0e09bf5d7974ff912102df54f327ccf82 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 19 Aug 2026 23:31:48 +0900 Subject: [PATCH 168/691] feat: surface Podman reclaim evidence in cleanup --- .../adr/0001-cloud-offload-goal-state.md | 8 +++ src-tauri/src/commands.rs | 31 ++++++++++- src-tauri/src/lib.rs | 1 + src/lib/Cleanup.svelte | 52 +++++++++++++++++++ src/lib/api.ts | 40 ++++++++++++++ 5 files changed, 130 insertions(+), 2 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 6bff2f2a4..399121263 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -67,6 +67,11 @@ returns incomplete evidence, and still runs the bounded File Provider activity p are non-blocking and every provider subprocess is terminated with its private process group on timeout; a health check cannot remain stuck behind a provider copy. +Podman VM storage is a separate local reclaim domain, not cloud data. DiskSage exposes read-only +machine, guest-filesystem, image, container, volume, and raw-image evidence through the same +cleanup surface. Shared layers, sparse VM allocation, and unlinked volumes are never treated as +physical reclaim proof; prune, trim, stop, and delete remain outside the inspection command. + ## Consequences - `is_local_current=true` and `is_uploaded=false` produces `pending-upload` and no eviction permit. @@ -86,6 +91,9 @@ timeout; a health check cannot remain stuck behind a provider copy. admission; no path, filename, item identifier, or content is retained. - An oversized CloudDocs `client.db` produces incomplete, fail-closed evidence without running a long SQLite fallback query; the File Provider probe still reports whether the provider is stalled. +- Podman reclaim evidence reports the VM/store candidates and requires separate human review for + unused images or volumes. Reproducible dangling images may be cleaned as local generated + artifacts, but user-data volumes are not moved to a provider or deleted by inspection. - A `source-not-present`, `source-content-not-local`, or unsafe-source observation blocks the Goal even when provider sync is complete; DiskSage never infers that an externally removed or File-Provider-dataless source was safely evicted. diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 44faef472..499207a16 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -21,8 +21,9 @@ use crate::{ brew_cleanup, cloud, cloud_adr, cloud_eviction, cloud_local_eviction, cloud_plan_view, cloud_review, cloud_transfer, dev_artifacts, dupes, git_worktree, icloud_sync_health, organization_lineage, - provider_api_client, provider_api_write, provider_capacity, provider_client_runtime, provider_evidence, - provider_global_sync, provider_oauth, provider_sync, rules, + podman_reclaim, provider_api_client, provider_api_write, provider_capacity, + provider_client_runtime, provider_evidence, provider_global_sync, provider_oauth, provider_sync, + rules, }; #[cfg(not(coverage))] @@ -479,6 +480,32 @@ pub fn plan_brew_cleanup() -> Result { brew_cleanup::plan(now_ms()) } +fn podman_binary() -> PathBuf { + [ + "/opt/homebrew/bin/podman", + "/usr/local/bin/podman", + "/usr/bin/podman", + ] + .into_iter() + .map(PathBuf::from) + .find(|path| { + std::fs::symlink_metadata(path) + .is_ok_and(|metadata| metadata.is_file() && !metadata.file_type().is_symlink()) + }) + .unwrap_or_else(|| PathBuf::from("podman")) +} + +/// Read-only Podman VM/store evidence. The command never prunes, removes, trims, or stops. +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn inspect_podman_reclaim() -> podman_reclaim::PodmanReclaimPlan { + podman_reclaim::probe_podman_reclaim( + &podman_binary(), + podman_reclaim::DEFAULT_PODMAN_MACHINE, + podman_reclaim::DEFAULT_PROBE_TIMEOUT, + ) +} + #[cfg(not(coverage))] #[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] #[tauri::command(async)] diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs index 9523cb349..d9aab3ef7 100644 --- a/src-tauri/src/lib.rs +++ b/src-tauri/src/lib.rs @@ -127,6 +127,7 @@ pub fn run() { commands::set_settings, commands::reason_unknown_extensions, commands::plan_brew_cleanup, + commands::inspect_podman_reclaim, commands::judge_brew_cleanup, commands::validate_judge_calibration, commands::execute_brew_cleanup, diff --git a/src/lib/Cleanup.svelte b/src/lib/Cleanup.svelte index 31942990b..af0feaa4f 100644 --- a/src/lib/Cleanup.svelte +++ b/src/lib/Cleanup.svelte @@ -15,6 +15,9 @@ let busy = $state(false); let loadError = $state(""); let cacheRetryMessage = $state(""); + let podmanPlan: api.PodmanReclaimPlan | null = $state(null); + let podmanBusy = $state(false); + let podmanError = $state(""); // ponytail: 배지는 개별 파일/디렉토리 후보(artifacts)에만 표시 — caches는 소수의 고정 규칙 카테고리라 LLM 판정 가치가 낮음. let verdicts: Record = $state({}); @@ -38,6 +41,20 @@ } } + async function inspectPodman() { + if (podmanBusy) return; + podmanBusy = true; + podmanError = ""; + try { + podmanPlan = await api.inspectPodmanReclaim(); + } catch (e) { + podmanError = String(e); + podmanPlan = null; + } finally { + podmanBusy = false; + } + } + async function cleanCache(candidate: api.CacheCandidate) { if (busy || !candidate.exists || candidate.bytes === 0) return; busy = true; @@ -195,6 +212,40 @@ + +

Podman VM 저장소

+

+ 게스트·이미지·volume 증거만 읽습니다. prune, 삭제, trim, 중지는 이 화면에서 실행하지 않습니다. + 실제 물리 회수량은 전후 호스트 관측 없이는 확정하지 않습니다. +

+ + {#if podmanError}{/if} + {#if podmanPlan} +
+

+ {podmanPlan.evidence_complete ? "증거 완전" : "증거 불완전"} · + 게스트 여유 {podmanPlan.guest_filesystem ? fmtBytes(podmanPlan.guest_filesystem.available_bytes) : "확인 불가"} · + 보고 reclaimable {podmanPlan.assessment.podman_reported_reclaimable_bytes === null + ? "미확인" + : fmtBytes(podmanPlan.assessment.podman_reported_reclaimable_bytes)} +

+ {#if podmanPlan.unused_images} +

미사용 이미지 {podmanPlan.unused_images.unused_records}개 · exact record 합계 {fmtBytes(podmanPlan.unused_images.candidate_record_size_sum)}

+ {/if} + {#if podmanPlan.system_df} +

연결 없는 volume 후보 {fmtBytes(podmanPlan.system_df.local_volumes.reclaimable_bytes)}

+ {/if} + {#if podmanPlan.assessment.recommended_actions.length > 0} +
    + {#each podmanPlan.assessment.recommended_actions as action (action.kind)} +
  • {action.kind}: {action.rationale}
    • + {/each} +
+ {/if} +
+ {/if} diff --git a/src/lib/api.test.ts b/src/lib/api.test.ts index d2bc8da2b..d144a724e 100644 --- a/src/lib/api.test.ts +++ b/src/lib/api.test.ts @@ -39,6 +39,8 @@ describe("api wrappers", () => { [() => api.recentOperations(), "recent_operations", { limit: 20 }], [() => api.recentOperations(3), "recent_operations", { limit: 3 }], [() => api.findDuplicateFiles("/repo"), "find_duplicate_files", { root: "/repo" }], + [() => api.planOrphanCleanup(), "plan_orphan_cleanup"], + [() => api.cleanOrphanCandidates("a".repeat(64), [], "phrase", "reviewed cache"), "clean_orphan_candidates", { planFingerprint: "a".repeat(64), requests: [], confirmationPhrase: "phrase", rationale: "reviewed cache" }], [() => api.diskInventory("/repo"), "disk_inventory", { root: "/repo" }], [() => api.getOntology(), "get_ontology"], [() => api.ontologyCoherence(), "ontology_coherence"], diff --git a/src/lib/api.ts b/src/lib/api.ts index 98ff2d7f6..8af0c6187 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -55,6 +55,71 @@ export interface CleanResult { ok: boolean; error: string; } + +export interface OrphanRelationEvidence { + subject: string; + predicate: string; + object: string; + source: string; +} +export interface OrphanCandidate { + candidate_id: string; + kind: string; + bundle_id: string | null; + bytes: number; + files: number; + skipped: number; + scan_complete: boolean; + object_id: string; + metadata_fingerprint: string; + ontology_class: string; + confidence: string; + active_use_evidence_complete: boolean; + active_use: boolean; + relations: OrphanRelationEvidence[]; + review_reasons: string[]; + auto_trash_eligible: boolean; +} +export interface OrphanPlan { + schema_kind: "disksage.orphan-plan/v1"; + schema_version: number; + generated_at_ms: number; + plan_fingerprint: string; + candidate_count: number; + candidate_bytes: number; + scan_complete: boolean; + candidates: OrphanCandidate[]; + notices: string[]; + local_paths_included: false; + mutation_performed: false; + exact_approval_phrase: string; +} +export interface OrphanCleanupRequest { + candidate_id: string; + metadata_fingerprint: string; + bytes: number; + files: number; + skipped: number; + scan_complete: boolean; + object_id: string; +} +export interface OrphanCleanupItemResult { + candidate_id: string; + bytes: number; + attempted: boolean; + moved_to_trash: boolean; + error: string | null; +} +export interface OrphanCleanupResult { + schema_kind: "disksage.orphan-cleanup-result/v1"; + schema_version: number; + plan_fingerprint: string; + requested_count: number; + moved_count: number; + filesystem_mutation_executed: boolean; + items: OrphanCleanupItemResult[]; + notices: string[]; +} export interface JournalEntry { ts_ms: number; op: string; @@ -86,6 +151,18 @@ export const recentOperations = (limit = 20) => invoke("recent_operations", { limit }); export const findDuplicateFiles = (root: string) => invoke("find_duplicate_files", { root }); +export const planOrphanCleanup = () => invoke("plan_orphan_cleanup"); +export const cleanOrphanCandidates = ( + planFingerprint: string, + requests: OrphanCleanupRequest[], + confirmationPhrase: string, + rationale: string, +) => invoke("clean_orphan_candidates", { + planFingerprint, + requests, + confirmationPhrase, + rationale, +}); export interface PodmanReclaimPlan { schema_kind: "disksage.podman-reclaim-plan"; diff --git a/src/lib/cloudOffloadGoalProjectionContract.test.ts b/src/lib/cloudOffloadGoalProjectionContract.test.ts index e4e453dfc..f80324450 100644 --- a/src/lib/cloudOffloadGoalProjectionContract.test.ts +++ b/src/lib/cloudOffloadGoalProjectionContract.test.ts @@ -20,6 +20,10 @@ describe("cloud-offload Goal projection contract", () => { }; expect(goal.operator_actions).toContain("cancel-finder-copy"); + expect(goal.operator_actions).toEqual(expect.arrayContaining([ + "plan_orphan_cleanup", + "clean_orphan_candidates", + ])); expect(goal.runtime_evidence_failure_policy).toContain("fail-closed"); expect(goal.runtime_evidence_failure_policy).toContain("not process absence"); expect(goal.pre_copy_evidence_streams).toEqual(expect.arrayContaining([ diff --git a/src/lib/orphanCleanupContract.test.ts b/src/lib/orphanCleanupContract.test.ts new file mode 100644 index 000000000..89d3798ef --- /dev/null +++ b/src/lib/orphanCleanupContract.test.ts @@ -0,0 +1,58 @@ +import { readFileSync } from "node:fs"; +import { dirname, resolve } from "node:path"; +import { fileURLToPath } from "node:url"; +import { describe, expect, it } from "vitest"; + +const root = resolve(dirname(fileURLToPath(import.meta.url)), "../.."); + +describe("orphan cleanup safety contract", () => { + it("keeps the public plan path-free and requires the exact approval phrase", () => { + const api = readFileSync(resolve(root, "src/lib/api.ts"), "utf8"); + const component = readFileSync(resolve(root, "src/lib/OrphanCleanup.svelte"), "utf8"); + const orphan = readFileSync(resolve(root, "src-tauri/src/orphan.rs"), "utf8"); + + expect(api).toContain("plan_orphan_cleanup"); + expect(api).toContain("clean_orphan_candidates"); + expect(component).toContain("Application Support"); + expect(component).toContain("candidate.auto_trash_eligible"); + expect(component).toContain("plan.exact_approval_phrase"); + expect(component).toContain("candidate.metadata_fingerprint"); + expect(component).not.toContain("candidate.path"); + expect(component).toContain("cleanAndRefreshOrphanPlan"); + expect(component).toContain("outcome.refresh_failed"); + + // HOME identity must not exist in either the public TypeScript contract or the Rust wire type. + expect(api).not.toContain("root_fingerprint"); + expect(orphan).not.toContain("root_fingerprint: String"); + + // A globally incomplete plan is fail-closed in the UI before the backend submission boundary. + expect(component).toContain("!plan.scan_complete"); + + // Frontend admission must match the backend's normalized audit-rationale contract. + expect(component).toContain("rationale.trim()"); + + // Arbitrary backend/native exception text must not cross the customer-visible boundary. + expect(component).not.toContain("String(e)"); + expect(orphan).not.toContain("error: Some(error.to_string())"); + expect(orphan).toContain('error: Some("orphan-trash-operation-failed".into())'); + + // The real user-home root is a valid planning scope; generic cleanup protection intentionally + // treats HOME itself as protected and therefore cannot be reused as the planner admission test. + expect(orphan).not.toContain("crate::safety::is_protected(&canonical_home)"); + expect(orphan).toContain("planner_home_scope_is_safe"); + + // Validate the complete submitted batch before the first filesystem mutation. A later stale + // request must not turn an early request into an unreported partial mutation. + expect(orphan).toContain("validate_cleanup_requests(plan, requests)?"); + expect(orphan).toContain("for candidate in prepared"); + }); + + it("owns the child component styles it relies on instead of inheriting scoped parent CSS", () => { + const component = readFileSync(resolve(root, "src/lib/OrphanCleanup.svelte"), "utf8"); + + expect(component).toContain(" diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts new file mode 100644 index 000000000..d81cddb49 --- /dev/null +++ b/src/lib/uxContract.test.ts @@ -0,0 +1,54 @@ +import { readFileSync } from "node:fs"; +import { resolve } from "node:path"; +import { describe, expect, it } from "vitest"; + +const root = resolve(import.meta.dirname, "../.."); +const read = (relativePath: string) => readFileSync(resolve(root, relativePath), "utf8"); + +describe("UI/UX design and Storybook contract", () => { + it("keeps primitive, semantic, and component tokens with preference fallbacks", () => { + const tokens = read("src/lib/ui/design-tokens.css"); + expect(tokens).toContain("--ds-blue-700"); + expect(tokens).toContain("--ds-text: var(--ds-slate-950)"); + expect(tokens).toContain("--ds-control-min-size: 2.75rem"); + expect(tokens).toContain("prefers-color-scheme: dark"); + expect(tokens).toContain("prefers-reduced-motion: reduce"); + expect(tokens).toContain("forced-colors: active"); + }); + + it("keeps the shell keyboard and live-feedback boundaries explicit", () => { + const layout = read("src/routes/+layout.svelte"); + const page = read("src/routes/+page.svelte"); + expect(layout).toContain('href="#main-content"'); + expect(page).toContain('id="main-content" tabindex="-1"'); + expect(page).toContain('for="scan-root"'); + expect(page).toContain('role="alert"'); + expect(page).toContain('aria-live="polite"'); + expect(page).not.toContain("alert(`스캔 시작 실패"); + }); + + it("registers every provider state and interaction edge in Storybook", () => { + const story = read("src/lib/ux/ProviderStatusCard.stories.ts"); + const config = read(".storybook/preview.ts"); + const workflow = read(".github/workflows/test.yml"); + for (const state of ["clear", "checking", "provider-sync-incomplete", "materialization-stalled"]) { + expect(story).toContain(`state: "${state}"`); + } + expect(story).toContain("toHaveBeenCalledOnce"); + expect(story).toContain("toBeDisabled"); + expect(config).toContain('test: "error"'); + expect(config).toContain("mobile"); + expect(workflow).toContain("npm run build-storybook"); + }); + + it("uses release-consumer terminology rather than a shopping-domain actor", () => { + const files = [ + "CHANGELOG.md", + "docs/product-technical-gap-baseline.md", + "docs/doctoring/release-version-contract.md", + "docs/doctoring/release-artifact-provenance.md", + "scripts/ci/release-version.mjs", + ]; + for (const file of files) expect(read(file).toLowerCase()).not.toMatch(/\bbuyer\b/); + }); +}); diff --git a/src/routes/+layout.svelte b/src/routes/+layout.svelte new file mode 100644 index 000000000..92cb83e22 --- /dev/null +++ b/src/routes/+layout.svelte @@ -0,0 +1,6 @@ + + +본문으로 건너뛰기 + diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte index 4a4254473..0497efd07 100644 --- a/src/routes/+page.svelte +++ b/src/routes/+page.svelte @@ -18,33 +18,46 @@ let crumbs: string[] = $state([]); let top: api.EntryView[] = $state([]); let navSeq = 0; + let loadError = $state(""); + let scanMessage = $state(""); onMount(async () => { - roots = await api.listRoots(); - selectedRoot = roots[0] ?? ""; - await api.onScanProgress((s) => (stats = s)); - await api.onScanDone(async (s) => { - stats = s; - scanning = false; - try { - crumbs = [selectedRoot]; - node = await api.getNode(selectedRoot); - top = await api.topFiles(200); - } catch (e) { - console.error("post-scan load failed:", e); - } - }); + try { + roots = await api.listRoots(); + selectedRoot = roots[0] ?? ""; + await api.onScanProgress((s) => (stats = s)); + await api.onScanDone(async (s) => { + stats = s; + scanning = false; + scanMessage = `스캔 완료: ${s.files.toLocaleString()}개 파일, ${fmtBytes(s.bytes)}`; + try { + crumbs = [selectedRoot]; + node = await api.getNode(selectedRoot); + top = await api.topFiles(200); + } catch (e) { + loadError = String(e); + scanMessage = "스캔 결과를 화면에 불러오지 못했습니다."; + } + }); + } catch (e) { + loadError = String(e); + scanMessage = "스캔할 수 있는 위치를 불러오지 못했습니다."; + } }); async function scan() { + if (!selectedRoot || scanning) return; scanning = true; node = null; top = []; + loadError = ""; + scanMessage = `${selectedRoot} 스캔을 시작했습니다.`; try { await api.startScan(selectedRoot); } catch (e) { scanning = false; - alert(`스캔 시작 실패: ${e}`); + loadError = `스캔 시작 실패: ${e}`; + scanMessage = "스캔을 시작하지 못했습니다."; } } @@ -73,16 +86,25 @@ } -
+ + DiskSage · 로컬 저장공간과 클라우드 증거 + + + +

DiskSage

-
- {#each roots as r}{/each} {#if scanning} - + {:else} - + {/if} {#if stats} @@ -91,11 +113,13 @@ {/if}
+ {#if loadError}{/if} +

{scanMessage}

{#if node} -
From eb89d672ec0275bbb177043c9b437d2a97aeaa0c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 18:15:37 +0900 Subject: [PATCH 486/691] test: execute Storybook interaction contracts --- .github/workflows/test.yml | 20 + .storybook/preview.ts | 1 + docs/design/storybook-event-inventory.md | 1 + docs/product-technical-gap-baseline.md | 9 +- package-lock.json | 10916 ++++++++++++++++----- package.json | 5 +- src/lib/ux/ProviderStatusCard.stories.ts | 1 + src/lib/uxContract.test.ts | 3 + 8 files changed, 8765 insertions(+), 2191 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 4f45acfaa..f10dc16e4 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -44,6 +44,26 @@ jobs: - run: npm test - run: npm run build - run: npm run build-storybook + - name: Run Storybook interaction and accessibility tests + shell: bash + run: | + set -euo pipefail + npm run storybook -- --ci --no-open --port 6006 > /tmp/disksage-storybook.log 2>&1 & + server_pid=$! + cleanup() { kill "$server_pid" 2>/dev/null || true; } + trap cleanup EXIT + for attempt in $(seq 1 60); do + if curl --fail --silent http://127.0.0.1:6006/iframe.html >/dev/null; then + break + fi + if ! kill -0 "$server_pid" 2>/dev/null; then + cat /tmp/disksage-storybook.log + exit 1 + fi + sleep 1 + done + curl --fail --silent http://127.0.0.1:6006/iframe.html >/dev/null + npm run test-storybook -- --ci --url http://127.0.0.1:6006 --browsers chromium --testTimeout 30000 windows-home-resolution: runs-on: windows-latest diff --git a/.storybook/preview.ts b/.storybook/preview.ts index a523fb47b..7d5ccfd6e 100644 --- a/.storybook/preview.ts +++ b/.storybook/preview.ts @@ -14,6 +14,7 @@ const preview: Preview = { desktop: { name: "Desktop", styles: { width: "1280px", height: "800px" } }, mobile: { name: "Mobile", styles: { width: "375px", height: "812px" } }, }, + defaultViewport: "desktop", }, }, tags: ["autodocs"], diff --git a/docs/design/storybook-event-inventory.md b/docs/design/storybook-event-inventory.md index a39ad7060..bae1227fb 100644 --- a/docs/design/storybook-event-inventory.md +++ b/docs/design/storybook-event-inventory.md @@ -49,6 +49,7 @@ eviction authority: every destructive action remains behind the Rust evidence an ```bash npm run storybook npm run build-storybook +npm run test-storybook -- --ci --url http://127.0.0.1:6006 --browsers chromium --testTimeout 30000 ``` The a11y addon is configured with `a11y.test = "error"`. The interaction stories assert the diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 34e815a3d..0a262a4e6 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -60,10 +60,11 @@ baseline records the current loop's runtime and integration evidence. evidence, materialization stall, cancel callback, disabled action, mobile viewport, and reduced motion states. The a11y addon is configured to fail a story on detected violations; Storybook is development-only and cannot authorize cloud writes or source eviction. -- Local evidence at this implementation snapshot: `npm test` 30 files/128 tests, `svelte-check` - 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and production - dependency audit reported 0 vulnerabilities. The Storybook bundle emits a non-blocking >500 KiB - axe chunk advisory; no runtime bundle includes Storybook. +- Local evidence at this implementation snapshot: `npm test` 30 files/129 tests, `svelte-check` + 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and the + Storybook test runner passed 4 smoke/interaction stories in Chromium. The production and + development dependency audit reported 0 vulnerabilities after the uuid override. The Storybook + bundle emits a non-blocking >500 KiB axe chunk advisory; no runtime bundle includes Storybook. - Standards adopted for this slice are WCAG 2.2, WAI-ARIA APG, Design Tokens Format Module 2025.10, and Storybook accessibility testing. No Figma File ID exists for this change; ADR-0010 records that boundary and requires a superseding ADR when a Figma handoff is approved. diff --git a/package-lock.json b/package-lock.json index 28b1ffbe2..c517b7a0c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,6 +16,7 @@ "devDependencies": { "@storybook/addon-a11y": "^10.5.10", "@storybook/sveltekit": "^10.5.10", + "@storybook/test-runner": "^0.24.4", "@sveltejs/adapter-static": "^3.0.6", "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.3.0", @@ -62,335 +63,558 @@ "dev": true, "license": "MIT" }, - "node_modules/@babel/helper-string-parser": { + "node_modules/@babel/compat-data": { "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", - "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==", + "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.7.tgz", + "integrity": "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==", "dev": true, "license": "MIT", "engines": { "node": ">=6.9.0" } }, - "node_modules/@babel/helper-validator-identifier": { + "node_modules/@babel/core": { "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", - "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", + "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz", + "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==", "dev": true, "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.29.7", + "@babel/generator": "^7.29.7", + "@babel/helper-compilation-targets": "^7.29.7", + "@babel/helper-module-transforms": "^7.29.7", + "@babel/helpers": "^7.29.7", + "@babel/parser": "^7.29.7", + "@babel/template": "^7.29.7", + "@babel/traverse": "^7.29.7", + "@babel/types": "^7.29.7", + "@jridgewell/remapping": "^2.3.5", + "convert-source-map": "^2.0.0", + "debug": "^4.1.0", + "gensync": "^1.0.0-beta.2", + "json5": "^2.2.3", + "semver": "^6.3.1" + }, "engines": { "node": ">=6.9.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/babel" } }, - "node_modules/@babel/parser": { + "node_modules/@babel/core/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/@babel/generator": { "version": "7.29.8", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz", - "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==", + "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.8.tgz", + "integrity": "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==", "dev": true, "license": "MIT", "dependencies": { - "@babel/types": "^7.29.8" - }, - "bin": { - "parser": "bin/babel-parser.js" + "@babel/parser": "^7.29.8", + "@babel/types": "^7.29.8", + "@jridgewell/gen-mapping": "^0.3.12", + "@jridgewell/trace-mapping": "^0.3.28", + "jsesc": "^3.0.2" }, "engines": { - "node": ">=6.0.0" + "node": ">=6.9.0" } }, - "node_modules/@babel/runtime": { + "node_modules/@babel/helper-compilation-targets": { "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz", - "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==", + "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.29.7.tgz", + "integrity": "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==", "dev": true, "license": "MIT", + "dependencies": { + "@babel/compat-data": "^7.29.7", + "@babel/helper-validator-option": "^7.29.7", + "browserslist": "^4.24.0", + "lru-cache": "^5.1.1", + "semver": "^6.3.1" + }, "engines": { "node": ">=6.9.0" } }, - "node_modules/@babel/types": { - "version": "7.29.8", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz", - "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==", + "node_modules/@babel/helper-compilation-targets/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/@babel/helper-globals": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.29.7.tgz", + "integrity": "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==", "dev": true, "license": "MIT", - "dependencies": { - "@babel/helper-string-parser": "^7.29.7", - "@babel/helper-validator-identifier": "^7.29.7" - }, "engines": { "node": ">=6.9.0" } }, - "node_modules/@bcoe/v8-coverage": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz", - "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==", + "node_modules/@babel/helper-module-imports": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.29.7.tgz", + "integrity": "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==", "dev": true, "license": "MIT", + "dependencies": { + "@babel/traverse": "^7.29.7", + "@babel/types": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@emnapi/core": { - "version": "1.9.2", - "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz", - "integrity": "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==", + "node_modules/@babel/helper-module-transforms": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.29.7.tgz", + "integrity": "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==", "dev": true, "license": "MIT", - "optional": true, "dependencies": { - "@emnapi/wasi-threads": "1.2.1", - "tslib": "^2.4.0" + "@babel/helper-module-imports": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7", + "@babel/traverse": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0" } }, - "node_modules/@emnapi/runtime": { - "version": "1.9.2", - "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz", - "integrity": "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==", + "node_modules/@babel/helper-plugin-utils": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.29.7.tgz", + "integrity": "sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==", "dev": true, "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" + "engines": { + "node": ">=6.9.0" } }, - "node_modules/@emnapi/wasi-threads": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz", - "integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==", + "node_modules/@babel/helper-string-parser": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", + "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==", "dev": true, "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" + "engines": { + "node": ">=6.9.0" } }, - "node_modules/@esbuild/aix-ppc64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz", - "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==", - "cpu": [ - "ppc64" - ], + "node_modules/@babel/helper-validator-identifier": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", + "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "aix" - ], "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@esbuild/android-arm": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz", - "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==", - "cpu": [ - "arm" - ], + "node_modules/@babel/helper-validator-option": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.29.7.tgz", + "integrity": "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@esbuild/android-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz", - "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/helpers": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.7.tgz", + "integrity": "sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], + "dependencies": { + "@babel/template": "^7.29.7", + "@babel/types": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@esbuild/android-x64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz", - "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==", - "cpu": [ - "x64" - ], + "node_modules/@babel/parser": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz", + "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], + "dependencies": { + "@babel/types": "^7.29.8" + }, + "bin": { + "parser": "bin/babel-parser.js" + }, "engines": { - "node": ">=18" + "node": ">=6.0.0" } }, - "node_modules/@esbuild/darwin-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz", - "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/plugin-syntax-async-generators": { + "version": "7.8.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-async-generators/-/plugin-syntax-async-generators-7.8.4.tgz", + "integrity": "sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": ">=18" + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/darwin-x64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz", - "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==", - "cpu": [ - "x64" - ], + "node_modules/@babel/plugin-syntax-bigint": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-bigint/-/plugin-syntax-bigint-7.8.3.tgz", + "integrity": "sha512-wnTnFlG+YxQm3vDxpGE57Pj0srRU4sHE/mDkt1qv2YJJSeUAec2ma4WLUnUPeKjyrfntVwe/N6dCXpU+zL3Npg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": ">=18" + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/freebsd-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz", - "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/plugin-syntax-class-properties": { + "version": "7.12.13", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-class-properties/-/plugin-syntax-class-properties-7.12.13.tgz", + "integrity": "sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "freebsd" - ], - "engines": { - "node": ">=18" + "dependencies": { + "@babel/helper-plugin-utils": "^7.12.13" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/freebsd-x64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz", - "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==", - "cpu": [ - "x64" - ], + "node_modules/@babel/plugin-syntax-class-static-block": { + "version": "7.14.5", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-class-static-block/-/plugin-syntax-class-static-block-7.14.5.tgz", + "integrity": "sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "freebsd" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.14.5" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-arm": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz", - "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==", - "cpu": [ - "arm" - ], + "node_modules/@babel/plugin-syntax-import-attributes": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-import-attributes/-/plugin-syntax-import-attributes-7.29.7.tgz", + "integrity": "sha512-zGYcYfq/WmZ4V+kBIXQon9dSSc8ircGZqw9ZaNhhGj9nZkeBu1jHLBDQqYYi5WA9uawvA2sIMbry2nCFhf5Djg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz", - "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/plugin-syntax-import-meta": { + "version": "7.10.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-import-meta/-/plugin-syntax-import-meta-7.10.4.tgz", + "integrity": "sha512-Yqfm+XDx0+Prh3VSeEQCPU81yC+JWZ2pDPFSS4ZdpfZhp4MkFMaDC1UqseovEKwSUpnIL7+vK+Clp7bfh0iD7g==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.10.4" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-json-strings": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-json-strings/-/plugin-syntax-json-strings-7.8.3.tgz", + "integrity": "sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-jsx": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.29.7.tgz", + "integrity": "sha512-TSu8+mHCoEaaCDEZ0I3+6mvTBYR4PCxQwf2z9/r5Tbztv6NaLR3B9thGTTxX2WGuGHJqRiAbKPeGTJ5XWXVg6A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-ia32": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz", - "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==", - "cpu": [ - "ia32" - ], + "node_modules/@babel/plugin-syntax-logical-assignment-operators": { + "version": "7.10.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-logical-assignment-operators/-/plugin-syntax-logical-assignment-operators-7.10.4.tgz", + "integrity": "sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.10.4" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-nullish-coalescing-operator": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-nullish-coalescing-operator/-/plugin-syntax-nullish-coalescing-operator-7.8.3.tgz", + "integrity": "sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-numeric-separator": { + "version": "7.10.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-numeric-separator/-/plugin-syntax-numeric-separator-7.10.4.tgz", + "integrity": "sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.10.4" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-object-rest-spread": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz", + "integrity": "sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-optional-catch-binding": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-optional-catch-binding/-/plugin-syntax-optional-catch-binding-7.8.3.tgz", + "integrity": "sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-optional-chaining": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-optional-chaining/-/plugin-syntax-optional-chaining-7.8.3.tgz", + "integrity": "sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-private-property-in-object": { + "version": "7.14.5", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-private-property-in-object/-/plugin-syntax-private-property-in-object-7.14.5.tgz", + "integrity": "sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.14.5" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-loong64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz", - "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==", - "cpu": [ - "loong64" - ], + "node_modules/@babel/plugin-syntax-top-level-await": { + "version": "7.14.5", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-top-level-await/-/plugin-syntax-top-level-await-7.14.5.tgz", + "integrity": "sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.14.5" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-mips64el": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz", - "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==", - "cpu": [ - "mips64el" - ], + "node_modules/@babel/plugin-syntax-typescript": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-typescript/-/plugin-syntax-typescript-7.29.7.tgz", + "integrity": "sha512-ngr+82Sh0xMz25TPCZi+nC2iTzjfCdWS2ONXTp/PtSCHCgaCNBpdMqgvJ2ccdLlClVZ7sisIgB914j/JFe+RZA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/runtime": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz", + "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/template": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz", + "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.29.7", + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/traverse": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.29.8.tgz", + "integrity": "sha512-I5z7H3bf/41ktsNVLtpN0wAa336HkqIHQ5BuPLEhTkt1jVSyZpeNKIzTgEWmlxjdg81R0IgUCcaE+Ok3NvrfZg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.29.7", + "@babel/generator": "^7.29.8", + "@babel/helper-globals": "^7.29.7", + "@babel/parser": "^7.29.8", + "@babel/template": "^7.29.7", + "@babel/types": "^7.29.8", + "debug": "^4.3.1" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/types": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz", + "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-string-parser": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@bcoe/v8-coverage": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz", + "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-ppc64": { + "node_modules/@emnapi/core": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz", + "integrity": "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.1", + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/runtime": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz", + "integrity": "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/wasi-threads": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz", + "integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@esbuild/aix-ppc64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz", - "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==", + "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz", + "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==", "cpu": [ "ppc64" ], @@ -398,50 +622,50 @@ "license": "MIT", "optional": true, "os": [ - "linux" + "aix" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-riscv64": { + "node_modules/@esbuild/android-arm": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz", - "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz", + "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==", "cpu": [ - "riscv64" + "arm" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "android" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-s390x": { + "node_modules/@esbuild/android-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz", - "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz", + "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==", "cpu": [ - "s390x" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "android" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-x64": { + "node_modules/@esbuild/android-x64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz", - "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==", + "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz", + "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==", "cpu": [ "x64" ], @@ -449,16 +673,16 @@ "license": "MIT", "optional": true, "os": [ - "linux" + "android" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/netbsd-arm64": { + "node_modules/@esbuild/darwin-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz", - "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz", + "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==", "cpu": [ "arm64" ], @@ -466,16 +690,16 @@ "license": "MIT", "optional": true, "os": [ - "netbsd" + "darwin" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/netbsd-x64": { + "node_modules/@esbuild/darwin-x64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz", - "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz", + "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==", "cpu": [ "x64" ], @@ -483,16 +707,16 @@ "license": "MIT", "optional": true, "os": [ - "netbsd" + "darwin" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/openbsd-arm64": { + "node_modules/@esbuild/freebsd-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz", - "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz", + "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==", "cpu": [ "arm64" ], @@ -500,16 +724,16 @@ "license": "MIT", "optional": true, "os": [ - "openbsd" + "freebsd" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/openbsd-x64": { + "node_modules/@esbuild/freebsd-x64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz", - "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz", + "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==", "cpu": [ "x64" ], @@ -517,241 +741,186 @@ "license": "MIT", "optional": true, "os": [ - "openbsd" + "freebsd" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/openharmony-arm64": { + "node_modules/@esbuild/linux-arm": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz", - "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz", + "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==", "cpu": [ - "arm64" + "arm" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "openharmony" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/sunos-x64": { + "node_modules/@esbuild/linux-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz", - "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz", + "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==", "cpu": [ - "x64" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "sunos" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/win32-arm64": { + "node_modules/@esbuild/linux-ia32": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz", - "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz", + "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==", "cpu": [ - "arm64" + "ia32" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "win32" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/win32-ia32": { + "node_modules/@esbuild/linux-loong64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz", - "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz", + "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==", "cpu": [ - "ia32" + "loong64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "win32" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/win32-x64": { + "node_modules/@esbuild/linux-mips64el": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz", - "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz", + "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==", "cpu": [ - "x64" + "mips64el" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "win32" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@jridgewell/gen-mapping": { - "version": "0.3.13", - "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", - "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.0", - "@jridgewell/trace-mapping": "^0.3.24" - } - }, - "node_modules/@jridgewell/remapping": { - "version": "2.3.5", - "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", - "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/gen-mapping": "^0.3.5", - "@jridgewell/trace-mapping": "^0.3.24" - } - }, - "node_modules/@jridgewell/resolve-uri": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", - "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@jridgewell/sourcemap-codec": { - "version": "1.5.5", - "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", - "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", - "dev": true, - "license": "MIT" - }, - "node_modules/@jridgewell/trace-mapping": { - "version": "0.3.31", - "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", - "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/resolve-uri": "^3.1.0", - "@jridgewell/sourcemap-codec": "^1.4.14" - } - }, - "node_modules/@napi-rs/wasm-runtime": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz", - "integrity": "sha512-UMduMbqO5s5zF2NkNacMT/yK5Y5QiKvWr2+50bzIIxFDwVJ2h49b+oyjaCGPhJxd2/gC2x39EHv/gHVuu36x2Q==", + "node_modules/@esbuild/linux-ppc64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz", + "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==", + "cpu": [ + "ppc64" + ], "dev": true, "license": "MIT", "optional": true, - "dependencies": { - "@tybys/wasm-util": "^0.10.3" - }, + "os": [ + "linux" + ], "engines": { - "node": "^20.19.0 || ^22.13.0 || >=23.5.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/Brooooooklyn" - }, - "peerDependencies": { - "@emnapi/core": "^1.7.1 || ^2.0.0-alpha.4", - "@emnapi/runtime": "^1.7.1 || ^2.0.0-alpha.4" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-android-arm-eabi": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm-eabi/-/binding-android-arm-eabi-0.127.0.tgz", - "integrity": "sha512-0LC7ye4hvqbIKxAzThzvswgHLFu2AURKzYLeSVvLdu2TBOYWQDmHnTqPLeA597BcUCxiLqLsS4CJ5uoI5WYWCQ==", + "node_modules/@esbuild/linux-riscv64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz", + "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==", "cpu": [ - "arm" + "riscv64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "android" + "linux" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-android-arm64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm64/-/binding-android-arm64-0.127.0.tgz", - "integrity": "sha512-b5jtVTH6AU5CJXHNdj7Jj9IEiR9yVjjnwHzPJhGyHGPdcsZSzBCkS9GBbV33niRMvKthDwQRFRJfI4a+k4PvYg==", + "node_modules/@esbuild/linux-s390x": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz", + "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==", "cpu": [ - "arm64" + "s390x" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "android" + "linux" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-darwin-arm64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-arm64/-/binding-darwin-arm64-0.127.0.tgz", - "integrity": "sha512-obCE8B7ISKkJidjlhv9xRGJPOSDG2Yu6PRga9Ruaz35uintHxbp1Ki/Yc71wx4rj3Edrm0a1kzG1TAwit0wFpg==", + "node_modules/@esbuild/linux-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz", + "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==", "cpu": [ - "arm64" + "x64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "darwin" + "linux" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-darwin-x64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-x64/-/binding-darwin-x64-0.127.0.tgz", - "integrity": "sha512-JL6Xb5IwPQT8rUzlpsX7E+AgfcdNklXNPFp8pjCQQ5MQOQo5rtEB2ui+3Hgg9Sn7Y9Egj6YOLLiHhLpdAe12Aw==", + "node_modules/@esbuild/netbsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz", + "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==", "cpu": [ - "x64" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "darwin" + "netbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-freebsd-x64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-freebsd-x64/-/binding-freebsd-x64-0.127.0.tgz", - "integrity": "sha512-SDQ/3MQFw58fqQz3Z1PhSKFF3JoCF4gmlNjziDm8X02tTahCw0qJbd7FGPDKw1i4VTBZene9JPyC3mHtSvi+wA==", + "node_modules/@esbuild/netbsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz", + "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==", "cpu": [ "x64" ], @@ -759,377 +928,646 @@ "license": "MIT", "optional": true, "os": [ - "freebsd" + "netbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm-gnueabihf": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-0.127.0.tgz", - "integrity": "sha512-Av+D1MIqzV0YMGPT9we2SIZaMKD7Cxs4CvXSx/yxaWHewZjYEjScpOf5igc8IILASViw4WTnjlwUdI1KzVtDHQ==", + "node_modules/@esbuild/openbsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz", + "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==", "cpu": [ - "arm" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "openbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm-musleabihf": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-0.127.0.tgz", - "integrity": "sha512-Cs2fdJ8cPpFdeebj6p4dag8A4+56hPvZ0AhQQzlaLswGz1tz7bXt1nETLeorrM9+AMcWFFkqxcXwDGfTVidY8g==", + "node_modules/@esbuild/openbsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz", + "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==", "cpu": [ - "arm" + "x64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "openbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-0.127.0.tgz", - "integrity": "sha512-qdOfTcT6SY8gsJrrV92uyEUyjqMGPpIB5JZUG6QN5dukYd+7/j0kX6MwK1DgQj39jtUYixxPiaRUiEN1+0CXgQ==", + "node_modules/@esbuild/openharmony-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz", + "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==", "cpu": [ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "openharmony" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm64-musl": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-musl/-/binding-linux-arm64-musl-0.127.0.tgz", - "integrity": "sha512-EoTCZneNFU/P2qrpEM+RHmQwt+CvDkyGESG6qhr7KaegXLZwePfbrkCDfAk8/rhxbDUVGsZILX+2tqPzFtoFWA==", + "node_modules/@esbuild/sunos-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz", + "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==", "cpu": [ - "arm64" + "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "sunos" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-ppc64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-0.127.0.tgz", - "integrity": "sha512-zALjmZYgxFLHjXeudcDF0xFGNydTAtkAeXAr2EuC17ywCyFxcmQra4w0BMde0Yi/re4Bi4iwEoEXtYN7l6eBLQ==", + "node_modules/@esbuild/win32-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz", + "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==", "cpu": [ - "ppc64" + "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "win32" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-riscv64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-0.127.0.tgz", - "integrity": "sha512-fPP8M6zQLS7Jz7o9d5ArUSuAuSK3e+WCYVrCpdzeCOejidtZExJ9tjhDrAd3HEPqARBCPmdpqxESPFqy44vkBQ==", + "node_modules/@esbuild/win32-ia32": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz", + "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==", "cpu": [ - "riscv64" + "ia32" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "win32" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-riscv64-musl": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-0.127.0.tgz", - "integrity": "sha512-7IcC4Ao02oGpfnjt+X/oF4U2mllo2qoSkw5xxiXNKL9MCTsTiAC6616beOuehdxGcnz1bRoPC1RQ2f1GQDdN+g==", + "node_modules/@esbuild/win32-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz", + "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==", "cpu": [ - "riscv64" + "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "win32" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-s390x-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-0.127.0.tgz", - "integrity": "sha512-pbXIhiNFHoqWeqDNLiJ9JkpHz1IM9k4DXa66x+1GTWMG7iLxtkXgE53iiuKSXwmk3zIYmaPVfBvgcAhS583K4Q==", - "cpu": [ - "s390x" - ], + "node_modules/@hapi/hoek": { + "version": "9.3.0", + "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-9.3.0.tgz", + "integrity": "sha512-/c6rf4UJlmHlC9b5BaNvzAcFv7HZ2QHaV0D4/HNlBdvFnvQq8RI4kYdhyPCl7Xj+oWvTWQ8ujhqS53LIgAe6KQ==", "dev": true, - "libc": [ - "glibc" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "BSD-3-Clause" + }, + "node_modules/@hapi/topo": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/@hapi/topo/-/topo-5.1.0.tgz", + "integrity": "sha512-foQZKJig7Ob0BMAYBfcJk8d77QtOe7Wo4ox7ff1lQYoNNAb6jwcY1ncdoy2e9wQZzvNy7ODZCYJkK8kzmcAnAg==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^9.0.0" + } + }, + "node_modules/@isaacs/cliui": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz", + "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^5.1.2", + "string-width-cjs": "npm:string-width@^4.2.0", + "strip-ansi": "^7.0.1", + "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", + "wrap-ansi": "^8.1.0", + "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=12" } }, - "node_modules/@oxc-parser/binding-linux-x64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-gnu/-/binding-linux-x64-gnu-0.127.0.tgz", - "integrity": "sha512-MYCguB9RvBvlSd6gbuNI7QwiLoCCAlGnlRJFPrzLI6U1/9wkC/WK6LtBAUln55H1Ctqw45PWmqrobKoMhsYQzQ==", - "cpu": [ - "x64" - ], + "node_modules/@istanbuljs/load-nyc-config": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz", + "integrity": "sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "camelcase": "^5.3.1", + "find-up": "^4.1.0", + "get-package-type": "^0.1.0", + "js-yaml": "^3.13.1", + "resolve-from": "^5.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/@istanbuljs/schema": { + "version": "0.1.6", + "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.6.tgz", + "integrity": "sha512-+Sg6GCR/wy1oSmQDFq4LQDAhm3ETKnorxN+y5nbLULOR3P0c14f2Wurzj3/xqPXtasLFfHd5iRFQ7AJt4KH2cw==", "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" } }, - "node_modules/@oxc-parser/binding-linux-x64-musl": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-musl/-/binding-linux-x64-musl-0.127.0.tgz", - "integrity": "sha512-5eY0B/bxf1xIUxb4NOTvOI3KWtBQfPWYyKAzgcrCt0mDibSZygVpO1Pz8bkeiSZ5Jj9+M09dkggG3H8I5d0Uyg==", - "cpu": [ - "x64" - ], + "node_modules/@jest/console": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/console/-/console-30.4.1.tgz", + "integrity": "sha512-v3bhyxUh9Hgmo5p6hAOXe14/R3ZxZDOsvHleh4B07z3m/x4/ngPUXEm9XwK4sF4u+f+P2ORb0Ge+MgpaqRMVDA==", "dev": true, - "libc": [ - "musl" - ], "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "jest-message-util": "30.4.1", + "jest-util": "30.4.1", + "slash": "^3.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-openharmony-arm64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-openharmony-arm64/-/binding-openharmony-arm64-0.127.0.tgz", - "integrity": "sha512-Gld0ajrFTUXNtdw20fVBuTQx66FA75nIVg+//pPfR3sXkuABB4mTBhl3r9JNzrJpgW//qiwxf0nWXUWGJSL3UQ==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/core": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/@jest/core/-/core-30.4.2.tgz", + "integrity": "sha512-TZJA6cPJUFxoWhxaLo8t0VX/MZX2wPWr0uIDvLSHIvN4gu9h02vSzqI2kBADG1ExqQlC+cY09xKMSreivvrChQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "openharmony" - ], + "dependencies": { + "@jest/console": "30.4.1", + "@jest/pattern": "30.4.0", + "@jest/reporters": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "ansi-escapes": "^4.3.2", + "chalk": "^4.1.2", + "ci-info": "^4.2.0", + "exit-x": "^0.2.2", + "fast-json-stable-stringify": "^2.1.0", + "graceful-fs": "^4.2.11", + "jest-changed-files": "30.4.1", + "jest-config": "30.4.2", + "jest-haste-map": "30.4.1", + "jest-message-util": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-resolve": "30.4.1", + "jest-resolve-dependencies": "30.4.2", + "jest-runner": "30.4.2", + "jest-runtime": "30.4.2", + "jest-snapshot": "30.4.1", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "jest-watcher": "30.4.1", + "pretty-format": "30.4.1", + "slash": "^3.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } + } + }, + "node_modules/@jest/core/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-wasm32-wasi": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-wasm32-wasi/-/binding-wasm32-wasi-0.127.0.tgz", - "integrity": "sha512-T6KVD7rhLzFlwGRXMnxUFfkCZD8FHnb968wVXW1mXzgRFc5RNXOBY2mPPDZ77x5Ln76ltLMgtPg0cOkU1NSrEQ==", - "cpu": [ - "wasm32" - ], + "node_modules/@jest/create-cache-key-function": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/create-cache-key-function/-/create-cache-key-function-30.4.1.tgz", + "integrity": "sha512-R+xGEtzA95NIsvpXJSROG4t01956dDOt17KpamguY4XOnGvdHNFFXE7Er0C1OAsRjOwiIxpKqOvGlznIGZIQlQ==", "dev": true, "license": "MIT", - "optional": true, "dependencies": { - "@emnapi/core": "1.9.2", - "@emnapi/runtime": "1.9.2", - "@napi-rs/wasm-runtime": "^1.1.4" + "@jest/types": "30.4.1" }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-win32-arm64-msvc": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-0.127.0.tgz", - "integrity": "sha512-Ujvw4X+LD1CCGULcsQcvb4YNVoBGqt+JHgNNzGGaCImELiZLk477ifUH53gIbE7EKd933NdTi25JWEr9K2HwXw==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/diff-sequences": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/@jest/diff-sequences/-/diff-sequences-30.4.0.tgz", + "integrity": "sha512-zOpzlfUs45l6u7jm39qr87JCHUDsaeCtvL+kQe/Vn9jSnRB4/5IPXISm0h9I1vZW/o00Kn4UTJ2MOlhnUGwv3g==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-win32-ia32-msvc": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-0.127.0.tgz", - "integrity": "sha512-0cwxKO7KHQQQfo4Uf4B2SQrhgm+cJaP9OvFFhx52Tkg4bezsacu83GB2/In5bC415Ueeym+kXdnge/57rbSfTw==", - "cpu": [ - "ia32" - ], + "node_modules/@jest/environment": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/environment/-/environment-30.4.1.tgz", + "integrity": "sha512-AK9yNRqgKxiabqMoe4oW+3/TSSeV8vkdC7BGaxZdU0AFXfOpofTLqdru2GXKZghP3sdgwE9XXpnVwfZ8JnFV4w==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "@jest/fake-timers": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "jest-mock": "30.4.1" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-win32-x64-msvc": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-x64-msvc/-/binding-win32-x64-msvc-0.127.0.tgz", - "integrity": "sha512-rOrnSQSCbhI2kowr9XxE7m9a8oQXnBHjnS6j95LxxAnEZ0+Fz20WlRXG4ondQb+ejjt2KOsa65sE6++L6kUd+w==", - "cpu": [ - "x64" - ], + "node_modules/@jest/expect": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/expect/-/expect-30.4.1.tgz", + "integrity": "sha512-ginrj6TMgh2GshLUGCjO94Ptx9HhdZA/I6A9iUfyeLKFtdAjnKzHDgzgP9HYQgbxM1lbXScQ2eUBz2lGeVDPWA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "expect": "30.4.1", + "jest-snapshot": "30.4.1" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-project/types": { - "version": "0.142.0", - "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.142.0.tgz", - "integrity": "sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==", + "node_modules/@jest/expect-utils": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/expect-utils/-/expect-utils-30.4.1.tgz", + "integrity": "sha512-ZBn5CglH8fBsQsvs4VWNzD4aWfUYks+IdOOQU3MEK71ol/BcVm+P+rtb1KpiFBpSWSCE27uOahyyf1vfqOVbcQ==", "dev": true, "license": "MIT", - "funding": { - "url": "https://github.com/sponsors/Boshen" + "dependencies": { + "@jest/get-type": "30.1.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-resolver/binding-android-arm-eabi": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm-eabi/-/binding-android-arm-eabi-11.21.2.tgz", - "integrity": "sha512-xQoCRv+gKax9KTdwdaQNnAFOai8neay7g3jExDIORzhbrejwGSJaZNTdOJHR5ziLg2joMxOCMOFMo4zuxza2uQ==", - "cpu": [ - "arm" - ], + "node_modules/@jest/fake-timers": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-30.4.1.tgz", + "integrity": "sha512-iW5umdmfPeWzehrVhugFQZqCchSCud5S1l2YT0O9ZhjRR0ExclANDZkiSBwzqtnlOn0J1JXvO+HZ6rkuyOVOgQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ] + "dependencies": { + "@jest/types": "30.4.1", + "@sinonjs/fake-timers": "^15.4.0", + "@types/node": "*", + "jest-message-util": "30.4.1", + "jest-mock": "30.4.1", + "jest-util": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-android-arm64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm64/-/binding-android-arm64-11.21.2.tgz", - "integrity": "sha512-HF5oiE2L05yInPYCFD/4uxSrEZW4SuIfn99Y6L1xnJnzl066JR+MJs2rIdstw8A2MPlAKH+13dpFPNycjqzvGg==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/get-type": { + "version": "30.1.0", + "resolved": "https://registry.npmjs.org/@jest/get-type/-/get-type-30.1.0.tgz", + "integrity": "sha512-eMbZE2hUnx1WV0pmURZY9XoXPkUYjpc55mb0CrhtdWLtzMQPFvu/rZkTLZFTsdaVQa+Tr4eWAteqcUzoawq/uA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ] + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-darwin-arm64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-arm64/-/binding-darwin-arm64-11.21.2.tgz", - "integrity": "sha512-UX4u49CVCAD8QZNELaW8eMGgMAGwFWYEPbvNsh+3r/gs4NX3KfpiACMVwRQT0EuH3uat9hM5Zl+Ppm9pJD8tgg==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/globals": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/globals/-/globals-30.4.1.tgz", + "integrity": "sha512-ZbuY4cmXC8DkxYjfvT2DbcHWL2T6vmsMhXCDcmTB2T0y0gaezBI77ufq5ZAIdcRkYZ7NEQEDg1xFeKbxUJ5v5Q==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ] + "dependencies": { + "@jest/environment": "30.4.1", + "@jest/expect": "30.4.1", + "@jest/types": "30.4.1", + "jest-mock": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-darwin-x64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-x64/-/binding-darwin-x64-11.21.2.tgz", - "integrity": "sha512-J9xPx7YBkrRmJ+xl561ztnMWEc1aOyjEIxBiGX1dVb3u7bGSnfObfcZk+Pd+uM0HZAPNsQ1xvD8j52A/uOSqNQ==", - "cpu": [ - "x64" - ], + "node_modules/@jest/pattern": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/@jest/pattern/-/pattern-30.4.0.tgz", + "integrity": "sha512-RAWn3+f9u8BsHijKJ71uHcFp6vmyEt6VvoWXkl6hKF3qVIuWNmudVjg12DlBPGup/frIl5UcUlH5HfEuvHpEXg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ] + "dependencies": { + "@types/node": "*", + "jest-regex-util": "30.4.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-freebsd-x64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-freebsd-x64/-/binding-freebsd-x64-11.21.2.tgz", - "integrity": "sha512-fRlt7OvSaQkWj6+EDTVxawVxOlqJB2QSnBfkeCyK4RTvsGctbw3BiH2Tb7DzMs7bikc4BRBpvWP5zF9K8b54Zg==", - "cpu": [ - "x64" - ], + "node_modules/@jest/reporters": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/reporters/-/reporters-30.4.1.tgz", + "integrity": "sha512-/SnkPCzEQpUaBH81kjdEdDdo2WZl5hxw+BmLDGWjRkm8o7XlhjwsU36cqwe5PGBE5WYpBvDzRSdXx9rbGuJtNA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@bcoe/v8-coverage": "^0.2.3", + "@jest/console": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@jridgewell/trace-mapping": "^0.3.25", + "@types/node": "*", + "chalk": "^4.1.2", + "collect-v8-coverage": "^1.0.2", + "exit-x": "^0.2.2", + "glob": "^10.5.0", + "graceful-fs": "^4.2.11", + "istanbul-lib-coverage": "^3.0.0", + "istanbul-lib-instrument": "^6.0.0", + "istanbul-lib-report": "^3.0.0", + "istanbul-lib-source-maps": "^5.0.0", + "istanbul-reports": "^3.1.3", + "jest-message-util": "30.4.1", + "jest-util": "30.4.1", + "jest-worker": "30.4.1", + "slash": "^3.0.0", + "string-length": "^4.0.2", + "v8-to-istanbul": "^9.0.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } + } + }, + "node_modules/@jest/reporters/node_modules/@bcoe/v8-coverage": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz", + "integrity": "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@jest/schemas": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-30.4.1.tgz", + "integrity": "sha512-i6b4qw5qnP8c5FEeBJg/uZQ4ddrkN6Ca8qISJh0pr7a5hfn3h3v5x60BEbOC7OYAGZNMs1LfFLwnW2CuK8F57Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@sinclair/typebox": "^0.34.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/snapshot-utils": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/snapshot-utils/-/snapshot-utils-30.4.1.tgz", + "integrity": "sha512-ObY4ljvQ95mt6iwKtVLetR/4yXiAgl3H4nJxhztr0MTjrN97TwDYrnCp/kF60Ec9HdhkWTHSu+Hg05aXfngpOA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/types": "30.4.1", + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "natural-compare": "^1.4.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/source-map": { + "version": "30.0.1", + "resolved": "https://registry.npmjs.org/@jest/source-map/-/source-map-30.0.1.tgz", + "integrity": "sha512-MIRWMUUR3sdbP36oyNyhbThLHyJ2eEDClPCiHVbrYAe5g3CHRArIVpBw7cdSB5fr+ofSfIb2Tnsw8iEHL0PYQg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.25", + "callsites": "^3.1.0", + "graceful-fs": "^4.2.11" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/test-result": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/test-result/-/test-result-30.4.1.tgz", + "integrity": "sha512-/ZG7pgEiOmmWkN9TplKbOu4id2N5lh7FHwRwlkgBVAzGdRH+OkkQ8wX/kIxg4zmd3ZQvAL1RwL2yWsvNYYECTw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/console": "30.4.1", + "@jest/types": "30.4.1", + "@types/istanbul-lib-coverage": "^2.0.6", + "collect-v8-coverage": "^1.0.2" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/test-sequencer": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-30.4.1.tgz", + "integrity": "sha512-PeYE+4td5rKjoRPxztObrXU+H8hsjZfxKMXOcmrr34JerSyB/ROOxbbicz8B7A5j9R9VayDnVPvBmedqCsFCdw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/test-result": "30.4.1", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "slash": "^3.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/transform": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/transform/-/transform-30.4.1.tgz", + "integrity": "sha512-Wz0LyktlTvRefoymh+n64hQ84KNXsRGcwdoZ8CSa0Ea+fgYcHZlnk+hDP7v2MS7il2bQ5uTEIxf4/NNfhMN4KQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/core": "^7.27.4", + "@jest/types": "30.4.1", + "@jridgewell/trace-mapping": "^0.3.25", + "babel-plugin-istanbul": "^7.0.1", + "chalk": "^4.1.2", + "convert-source-map": "^2.0.0", + "fast-json-stable-stringify": "^2.1.0", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-util": "30.4.1", + "pirates": "^4.0.7", + "slash": "^3.0.0", + "write-file-atomic": "^5.0.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/types": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/types/-/types-30.4.1.tgz", + "integrity": "sha512-f1x/vJXIfjOlEmejYpbkbgw1gOqpPECwMvMEtBqe47j7H2Hg8h8w3o3ikhSXq3MI15kg+oQ0exWO0uCtTNJLoQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/pattern": "30.4.0", + "@jest/schemas": "30.4.1", + "@types/istanbul-lib-coverage": "^2.0.6", + "@types/istanbul-reports": "^3.0.4", + "@types/node": "*", + "@types/yargs": "^17.0.33", + "chalk": "^4.1.2" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jridgewell/gen-mapping": { + "version": "0.3.13", + "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", + "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.5.0", + "@jridgewell/trace-mapping": "^0.3.24" + } + }, + "node_modules/@jridgewell/remapping": { + "version": "2.3.5", + "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", + "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/gen-mapping": "^0.3.5", + "@jridgewell/trace-mapping": "^0.3.24" + } + }, + "node_modules/@jridgewell/resolve-uri": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", + "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@jridgewell/sourcemap-codec": { + "version": "1.5.5", + "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", + "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", + "dev": true, + "license": "MIT" + }, + "node_modules/@jridgewell/trace-mapping": { + "version": "0.3.31", + "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", + "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/resolve-uri": "^3.1.0", + "@jridgewell/sourcemap-codec": "^1.4.14" + } + }, + "node_modules/@napi-rs/wasm-runtime": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz", + "integrity": "sha512-UMduMbqO5s5zF2NkNacMT/yK5Y5QiKvWr2+50bzIIxFDwVJ2h49b+oyjaCGPhJxd2/gC2x39EHv/gHVuu36x2Q==", "dev": true, "license": "MIT", "optional": true, - "os": [ - "freebsd" - ] + "dependencies": { + "@tybys/wasm-util": "^0.10.3" + }, + "engines": { + "node": "^20.19.0 || ^22.13.0 || >=23.5.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/Brooooooklyn" + }, + "peerDependencies": { + "@emnapi/core": "^1.7.1 || ^2.0.0-alpha.4", + "@emnapi/runtime": "^1.7.1 || ^2.0.0-alpha.4" + } }, - "node_modules/@oxc-resolver/binding-linux-arm-gnueabihf": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-11.21.2.tgz", - "integrity": "sha512-gK+vPUcPQITkGwBKpZGrcDHSlU6eDGl7AQacxS2CEKAZIBHWkOVFeJwLZ4tYnA1acJqRM5lt7yYwPCVqGHIJ7A==", + "node_modules/@oxc-parser/binding-android-arm-eabi": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm-eabi/-/binding-android-arm-eabi-0.127.0.tgz", + "integrity": "sha512-0LC7ye4hvqbIKxAzThzvswgHLFu2AURKzYLeSVvLdu2TBOYWQDmHnTqPLeA597BcUCxiLqLsS4CJ5uoI5WYWCQ==", "cpu": [ "arm" ], @@ -1137,78 +1575,178 @@ "license": "MIT", "optional": true, "os": [ - "linux" - ] + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-arm-musleabihf": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-11.21.2.tgz", - "integrity": "sha512-L/Rgas7SrOKy/z7IH+HxSFRqVO4PuLDKLEGKvnhoCBBq3UJ0YzGBou3qMzaAGgkJwsIvX2pBF+7ojzfUhLiZxQ==", + "node_modules/@oxc-parser/binding-android-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm64/-/binding-android-arm64-0.127.0.tgz", + "integrity": "sha512-b5jtVTH6AU5CJXHNdj7Jj9IEiR9yVjjnwHzPJhGyHGPdcsZSzBCkS9GBbV33niRMvKthDwQRFRJfI4a+k4PvYg==", "cpu": [ - "arm" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" - ] + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-arm64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-11.21.2.tgz", - "integrity": "sha512-CUEYvlX1Fk7E9kUMzuswru1J9HLxMwnpDeQGjQuI4ZH+iNCoa2X9T+pvyzrbsgl7WnIeTFTlNlHsRfVdf5g9/g==", + "node_modules/@oxc-parser/binding-darwin-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-arm64/-/binding-darwin-arm64-0.127.0.tgz", + "integrity": "sha512-obCE8B7ISKkJidjlhv9xRGJPOSDG2Yu6PRga9Ruaz35uintHxbp1Ki/Yc71wx4rj3Edrm0a1kzG1TAwit0wFpg==", "cpu": [ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" - ] + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-arm64-musl": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-musl/-/binding-linux-arm64-musl-11.21.2.tgz", - "integrity": "sha512-ViN1ZibQyxwC67GpoP33oo+S9UyUnkog13vzQb9+v9bCNvrVzJuk0MRdacjtv/9xfRMVF/eqHFyl8YOeykI10Q==", + "node_modules/@oxc-parser/binding-darwin-x64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-x64/-/binding-darwin-x64-0.127.0.tgz", + "integrity": "sha512-JL6Xb5IwPQT8rUzlpsX7E+AgfcdNklXNPFp8pjCQQ5MQOQo5rtEB2ui+3Hgg9Sn7Y9Egj6YOLLiHhLpdAe12Aw==", "cpu": [ - "arm64" + "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ - "linux" - ] + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-ppc64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-11.21.2.tgz", - "integrity": "sha512-CU1sCqWnhGqYD5I1HedHk5pujrn7ssDkNB/AEQd/pd3D/EojVSgJUlpbafwIbyhia3PgIfkvdFpRPWSALzVumA==", + "node_modules/@oxc-parser/binding-freebsd-x64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-freebsd-x64/-/binding-freebsd-x64-0.127.0.tgz", + "integrity": "sha512-SDQ/3MQFw58fqQz3Z1PhSKFF3JoCF4gmlNjziDm8X02tTahCw0qJbd7FGPDKw1i4VTBZene9JPyC3mHtSvi+wA==", "cpu": [ - "ppc64" + "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" - ] + "freebsd" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-riscv64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-11.21.2.tgz", - "integrity": "sha512-jWVyZtIHca4Gb96x7dag+y69vlei7ffjrsveLkmf2ZhqEAz6ZSBnY1GWvgZUaZlwZP62A3xD092BW97Q5VGc+g==", + "node_modules/@oxc-parser/binding-linux-arm-gnueabihf": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-0.127.0.tgz", + "integrity": "sha512-Av+D1MIqzV0YMGPT9we2SIZaMKD7Cxs4CvXSx/yxaWHewZjYEjScpOf5igc8IILASViw4WTnjlwUdI1KzVtDHQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm-musleabihf": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-0.127.0.tgz", + "integrity": "sha512-Cs2fdJ8cPpFdeebj6p4dag8A4+56hPvZ0AhQQzlaLswGz1tz7bXt1nETLeorrM9+AMcWFFkqxcXwDGfTVidY8g==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-0.127.0.tgz", + "integrity": "sha512-qdOfTcT6SY8gsJrrV92uyEUyjqMGPpIB5JZUG6QN5dukYd+7/j0kX6MwK1DgQj39jtUYixxPiaRUiEN1+0CXgQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-musl/-/binding-linux-arm64-musl-0.127.0.tgz", + "integrity": "sha512-EoTCZneNFU/P2qrpEM+RHmQwt+CvDkyGESG6qhr7KaegXLZwePfbrkCDfAk8/rhxbDUVGsZILX+2tqPzFtoFWA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-ppc64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-0.127.0.tgz", + "integrity": "sha512-zALjmZYgxFLHjXeudcDF0xFGNydTAtkAeXAr2EuC17ywCyFxcmQra4w0BMde0Yi/re4Bi4iwEoEXtYN7l6eBLQ==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-riscv64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-0.127.0.tgz", + "integrity": "sha512-fPP8M6zQLS7Jz7o9d5ArUSuAuSK3e+WCYVrCpdzeCOejidtZExJ9tjhDrAd3HEPqARBCPmdpqxESPFqy44vkBQ==", "cpu": [ "riscv64" ], @@ -1220,12 +1758,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-riscv64-musl": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-11.21.2.tgz", - "integrity": "sha512-LF29obFqNgBUgDX7rmUK7M4D0JQG5LxhYzn3xXmECcHU9aQAdWG7NiY052qybtesEdwHQXKNTWYQ7mTsybNvWg==", + "node_modules/@oxc-parser/binding-linux-riscv64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-0.127.0.tgz", + "integrity": "sha512-7IcC4Ao02oGpfnjt+X/oF4U2mllo2qoSkw5xxiXNKL9MCTsTiAC6616beOuehdxGcnz1bRoPC1RQ2f1GQDdN+g==", "cpu": [ "riscv64" ], @@ -1237,12 +1778,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-s390x-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-11.21.2.tgz", - "integrity": "sha512-+NYcm+cCHBbtdQQ3A4phQTSuVRYnNHz7wrl9XRAPEovcdoqi0mb1K5ZOl+jN54ZD+q1zz3V0vltbFJmzecJKmw==", + "node_modules/@oxc-parser/binding-linux-s390x-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-0.127.0.tgz", + "integrity": "sha512-pbXIhiNFHoqWeqDNLiJ9JkpHz1IM9k4DXa66x+1GTWMG7iLxtkXgE53iiuKSXwmk3zIYmaPVfBvgcAhS583K4Q==", "cpu": [ "s390x" ], @@ -1254,12 +1798,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-x64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-gnu/-/binding-linux-x64-gnu-11.21.2.tgz", - "integrity": "sha512-UQqZDdG2r2HhAOsZEgufkIWHPQ886IUyuJQkoZByvzhW8j51R4UNzGBJFkTiTnLhQnggwJRdJgFWK4uY6ZVIMw==", + "node_modules/@oxc-parser/binding-linux-x64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-gnu/-/binding-linux-x64-gnu-0.127.0.tgz", + "integrity": "sha512-MYCguB9RvBvlSd6gbuNI7QwiLoCCAlGnlRJFPrzLI6U1/9wkC/WK6LtBAUln55H1Ctqw45PWmqrobKoMhsYQzQ==", "cpu": [ "x64" ], @@ -1271,12 +1818,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-x64-musl": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-musl/-/binding-linux-x64-musl-11.21.2.tgz", - "integrity": "sha512-3Q9PMRjalWkT6NZ4jfujuqTCFwoWErg3y3BnOgb544B8IMw4PktiwWOigMfOHNRLMghZeJ7hpfpZf4CP7rV7Og==", + "node_modules/@oxc-parser/binding-linux-x64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-musl/-/binding-linux-x64-musl-0.127.0.tgz", + "integrity": "sha512-5eY0B/bxf1xIUxb4NOTvOI3KWtBQfPWYyKAzgcrCt0mDibSZygVpO1Pz8bkeiSZ5Jj9+M09dkggG3H8I5d0Uyg==", "cpu": [ "x64" ], @@ -1288,12 +1838,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-openharmony-arm64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-openharmony-arm64/-/binding-openharmony-arm64-11.21.2.tgz", - "integrity": "sha512-Eljeq3ndtyKhM+Es8LITi4Zl2htzuRZcrPMF3kMCsrILztvU6AjZ3FuEhHHKobPUB9rMpzLpJP5bDqXI7r+iog==", + "node_modules/@oxc-parser/binding-openharmony-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-openharmony-arm64/-/binding-openharmony-arm64-0.127.0.tgz", + "integrity": "sha512-Gld0ajrFTUXNtdw20fVBuTQx66FA75nIVg+//pPfR3sXkuABB4mTBhl3r9JNzrJpgW//qiwxf0nWXUWGJSL3UQ==", "cpu": [ "arm64" ], @@ -1302,12 +1855,15 @@ "optional": true, "os": [ "openharmony" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-wasm32-wasi": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-wasm32-wasi/-/binding-wasm32-wasi-11.21.2.tgz", - "integrity": "sha512-HGDbNsIywqc4LxU38+CTJNnB/6BF7rheWOJ259b4eE0aEnelYblC8x+1tEd63bp31fYne63RQz9Jb4yVnC7Yig==", + "node_modules/@oxc-parser/binding-wasm32-wasi": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-wasm32-wasi/-/binding-wasm32-wasi-0.127.0.tgz", + "integrity": "sha512-T6KVD7rhLzFlwGRXMnxUFfkCZD8FHnb968wVXW1mXzgRFc5RNXOBY2mPPDZ77x5Ln76ltLMgtPg0cOkU1NSrEQ==", "cpu": [ "wasm32" ], @@ -1315,2077 +1871,6578 @@ "license": "MIT", "optional": true, "dependencies": { - "@emnapi/core": "1.11.0", - "@emnapi/runtime": "1.11.0", - "@napi-rs/wasm-runtime": "^1.1.5" + "@emnapi/core": "1.9.2", + "@emnapi/runtime": "1.9.2", + "@napi-rs/wasm-runtime": "^1.1.4" }, "engines": { - "node": ">=14.0.0" + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-arm64-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-0.127.0.tgz", + "integrity": "sha512-Ujvw4X+LD1CCGULcsQcvb4YNVoBGqt+JHgNNzGGaCImELiZLk477ifUH53gIbE7EKd933NdTi25JWEr9K2HwXw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-ia32-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-0.127.0.tgz", + "integrity": "sha512-0cwxKO7KHQQQfo4Uf4B2SQrhgm+cJaP9OvFFhx52Tkg4bezsacu83GB2/In5bC415Ueeym+kXdnge/57rbSfTw==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-x64-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-x64-msvc/-/binding-win32-x64-msvc-0.127.0.tgz", + "integrity": "sha512-rOrnSQSCbhI2kowr9XxE7m9a8oQXnBHjnS6j95LxxAnEZ0+Fz20WlRXG4ondQb+ejjt2KOsa65sE6++L6kUd+w==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-project/types": { + "version": "0.142.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.142.0.tgz", + "integrity": "sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/Boshen" } }, - "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/core": { - "version": "1.11.0", - "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.0.tgz", - "integrity": "sha512-l9Oo58x0HOP5znGzVhYW9U3e5wVuA4LAZU2AGezTmkhO1CgQRFDhDg4nneHsu/t3WniXg9QrG2nIXL/ZS8ln8Q==", + "node_modules/@oxc-resolver/binding-android-arm-eabi": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm-eabi/-/binding-android-arm-eabi-11.21.2.tgz", + "integrity": "sha512-xQoCRv+gKax9KTdwdaQNnAFOai8neay7g3jExDIORzhbrejwGSJaZNTdOJHR5ziLg2joMxOCMOFMo4zuxza2uQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@oxc-resolver/binding-android-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm64/-/binding-android-arm64-11.21.2.tgz", + "integrity": "sha512-HF5oiE2L05yInPYCFD/4uxSrEZW4SuIfn99Y6L1xnJnzl066JR+MJs2rIdstw8A2MPlAKH+13dpFPNycjqzvGg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@oxc-resolver/binding-darwin-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-arm64/-/binding-darwin-arm64-11.21.2.tgz", + "integrity": "sha512-UX4u49CVCAD8QZNELaW8eMGgMAGwFWYEPbvNsh+3r/gs4NX3KfpiACMVwRQT0EuH3uat9hM5Zl+Ppm9pJD8tgg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@oxc-resolver/binding-darwin-x64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-x64/-/binding-darwin-x64-11.21.2.tgz", + "integrity": "sha512-J9xPx7YBkrRmJ+xl561ztnMWEc1aOyjEIxBiGX1dVb3u7bGSnfObfcZk+Pd+uM0HZAPNsQ1xvD8j52A/uOSqNQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@oxc-resolver/binding-freebsd-x64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-freebsd-x64/-/binding-freebsd-x64-11.21.2.tgz", + "integrity": "sha512-fRlt7OvSaQkWj6+EDTVxawVxOlqJB2QSnBfkeCyK4RTvsGctbw3BiH2Tb7DzMs7bikc4BRBpvWP5zF9K8b54Zg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm-gnueabihf": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-11.21.2.tgz", + "integrity": "sha512-gK+vPUcPQITkGwBKpZGrcDHSlU6eDGl7AQacxS2CEKAZIBHWkOVFeJwLZ4tYnA1acJqRM5lt7yYwPCVqGHIJ7A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm-musleabihf": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-11.21.2.tgz", + "integrity": "sha512-L/Rgas7SrOKy/z7IH+HxSFRqVO4PuLDKLEGKvnhoCBBq3UJ0YzGBou3qMzaAGgkJwsIvX2pBF+7ojzfUhLiZxQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-11.21.2.tgz", + "integrity": "sha512-CUEYvlX1Fk7E9kUMzuswru1J9HLxMwnpDeQGjQuI4ZH+iNCoa2X9T+pvyzrbsgl7WnIeTFTlNlHsRfVdf5g9/g==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-musl/-/binding-linux-arm64-musl-11.21.2.tgz", + "integrity": "sha512-ViN1ZibQyxwC67GpoP33oo+S9UyUnkog13vzQb9+v9bCNvrVzJuk0MRdacjtv/9xfRMVF/eqHFyl8YOeykI10Q==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-ppc64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-11.21.2.tgz", + "integrity": "sha512-CU1sCqWnhGqYD5I1HedHk5pujrn7ssDkNB/AEQd/pd3D/EojVSgJUlpbafwIbyhia3PgIfkvdFpRPWSALzVumA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-riscv64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-11.21.2.tgz", + "integrity": "sha512-jWVyZtIHca4Gb96x7dag+y69vlei7ffjrsveLkmf2ZhqEAz6ZSBnY1GWvgZUaZlwZP62A3xD092BW97Q5VGc+g==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-riscv64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-11.21.2.tgz", + "integrity": "sha512-LF29obFqNgBUgDX7rmUK7M4D0JQG5LxhYzn3xXmECcHU9aQAdWG7NiY052qybtesEdwHQXKNTWYQ7mTsybNvWg==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-s390x-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-11.21.2.tgz", + "integrity": "sha512-+NYcm+cCHBbtdQQ3A4phQTSuVRYnNHz7wrl9XRAPEovcdoqi0mb1K5ZOl+jN54ZD+q1zz3V0vltbFJmzecJKmw==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-x64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-gnu/-/binding-linux-x64-gnu-11.21.2.tgz", + "integrity": "sha512-UQqZDdG2r2HhAOsZEgufkIWHPQ886IUyuJQkoZByvzhW8j51R4UNzGBJFkTiTnLhQnggwJRdJgFWK4uY6ZVIMw==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-x64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-musl/-/binding-linux-x64-musl-11.21.2.tgz", + "integrity": "sha512-3Q9PMRjalWkT6NZ4jfujuqTCFwoWErg3y3BnOgb544B8IMw4PktiwWOigMfOHNRLMghZeJ7hpfpZf4CP7rV7Og==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-openharmony-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-openharmony-arm64/-/binding-openharmony-arm64-11.21.2.tgz", + "integrity": "sha512-Eljeq3ndtyKhM+Es8LITi4Zl2htzuRZcrPMF3kMCsrILztvU6AjZ3FuEhHHKobPUB9rMpzLpJP5bDqXI7r+iog==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ] + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-wasm32-wasi/-/binding-wasm32-wasi-11.21.2.tgz", + "integrity": "sha512-HGDbNsIywqc4LxU38+CTJNnB/6BF7rheWOJ259b4eE0aEnelYblC8x+1tEd63bp31fYne63RQz9Jb4yVnC7Yig==", + "cpu": [ + "wasm32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/core": "1.11.0", + "@emnapi/runtime": "1.11.0", + "@napi-rs/wasm-runtime": "^1.1.5" + }, + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/core": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.0.tgz", + "integrity": "sha512-l9Oo58x0HOP5znGzVhYW9U3e5wVuA4LAZU2AGezTmkhO1CgQRFDhDg4nneHsu/t3WniXg9QrG2nIXL/ZS8ln8Q==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.2", + "tslib": "^2.4.0" + } + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/runtime": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.0.tgz", + "integrity": "sha512-55coeOFKHv1ywEcUXJtWU5f+Jr/W5tZDvZig8DLKSwUN1JpROQ4rk/SNOQiFWmaR/VKF4zuFyW1B8JduOSv6Pg==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/wasi-threads": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz", + "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@oxc-resolver/binding-win32-arm64-msvc": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-11.21.2.tgz", + "integrity": "sha512-iWx25CBEgH49iE9q5coEGI/jb1jl5kkCY9z6U5Og67xCkQ/WFMDc2J5U78+AE91SUxM2NqSLhJC8/PLfWnImww==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@oxc-resolver/binding-win32-x64-msvc": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-x64-msvc/-/binding-win32-x64-msvc-11.21.2.tgz", + "integrity": "sha512-VPoCAhKvCQTlG7vxqaBXcmuvbh77BfnGXj8g0pbvVXpm1F/R8rDVwqIWcEbMzrI1JvJlm8v7T9uMVQb6UctMRg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@pkgjs/parseargs": { + "version": "0.11.0", + "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz", + "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==", + "dev": true, + "license": "MIT", + "optional": true, + "engines": { + "node": ">=14" + } + }, + "node_modules/@pkgr/core": { + "version": "0.3.6", + "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.3.6.tgz", + "integrity": "sha512-SEeaJLb3qBNF/OaXnaR1NmmBbFYk1zC0ZH/52fATcRPLFg/p791YrcyFFy44Bo9sLaGuSuLp5Q6axbb/O+v/RA==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^14.18.0 || >=16.0.0" + }, + "funding": { + "url": "https://opencollective.com/pkgr" + } + }, + "node_modules/@polka/url": { + "version": "1.0.0-next.29", + "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", + "integrity": "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==", + "dev": true, + "license": "MIT" + }, + "node_modules/@rolldown/binding-android-arm64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.2.tgz", + "integrity": "sha512-l7x215OGvo1s52JWmR8U/DAVzEDWBCIbTm28aeJV/WDTSHgcKXaZTuBT0hJMs5NggilfJTW3clZVvd24yfKJxA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-darwin-arm64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.2.tgz", + "integrity": "sha512-9u9Xv6c1AJZT0FfwH5vrMG5Jjcwhc1MlyrPu0XfTqkzsmqfks2M6W/o5XwAJgVVN/jHpqqngC1WevHKKTIUtIA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-darwin-x64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.2.tgz", + "integrity": "sha512-9W1mbGZAfW3oqd85bhBkmpyHCCzL1TeG/zFFP3vg7b0rlly8cxOcre5nXwz+LHazCwac2MNWgPdPCHndABjpWQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-freebsd-x64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.2.tgz", + "integrity": "sha512-0p1lhiCSCyaerFwtrdZQUx7NqGk6LQnaRKWX7tFQqwQgvX0rjM15cIkm3pax1UpEakK14C4mOxx/jSqCBdBRqQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm-gnueabihf": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.2.tgz", + "integrity": "sha512-e+cOJXrJ2L3zx6YzqPg+f6Wbk3V1cKB8bOhbaYdVYN3DdquzNdRAmrbETz1qnt5yp/c7JNlNjmITiA2cVneQ7w==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm64-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.2.tgz", + "integrity": "sha512-JsSMsj6sNat/MuhG5fnBD7QgbtpHKVe30x5/bAVirDHdhoQRXJkF6xc0Jqk8O4fiCUQAzMOoH9wZi3m60c8wtg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm64-musl": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.2.tgz", + "integrity": "sha512-B5G/zJdHaoJn9vD50eGHWkiWfmq8Uhi3IiLPJTzmZTrAalk1bztUikSXo0qga18ibE0IXboyeMUnhPjhAJ45wQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-ppc64-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.2.tgz", + "integrity": "sha512-6mC/awzKka8W6EoekjegpfGkjz8jXWDX63pqu/HYVpyKtZfu65Jsh4QAH3Kej3CAv/c1oGX7psTmFEbr0mDxLA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-s390x-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.2.tgz", + "integrity": "sha512-412MX9fJLdA1IK28EZnc8jYv2HRTleOZgfLQumJ5zy7OeJLZlg/CETwFaXjNmGVxG51cFHpKLqb5LKvBC+HsHA==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-x64-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.2.tgz", + "integrity": "sha512-Q/+HI/ToJafZ1iCqGgVQXUEkIjufHCTF0gBQ2a5o3cg7GJ2h0qyq3nvvSmU+bGda2/7ygXpTY4TM6gO9OhQ0ZA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-x64-musl": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.2.tgz", + "integrity": "sha512-ZKp/w41n6wCvxzxQHtQSbuphfX3Y4cCvbjkKHusrLx4lh+JWLTU7StSltO/DKARISzbj368d+qUaCjI8K2wzXw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-openharmony-arm64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.2.tgz", + "integrity": "sha512-pxE6xD4KS3eAROkKK5yrhB9/3+vhlhVGMvlQLbdpzrBGDbKrnzx3RLwPaHvasLo6jgaiBLn7e04Df9C4tYhjmA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-win32-arm64-msvc": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.2.tgz", + "integrity": "sha512-4MqEue5re+xIZzAWsB8sj0P1kqZySWqIuN4t6QaIO/YA6SFwySOLruvWQFzfmqk8LBK2P30KCSJwf6mJCZZ5/A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-win32-x64-msvc": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.2.tgz", + "integrity": "sha512-NweNxxD0Nf9t8v7kodun45Ijp3EIwYY+uydPP6qBEYvfBqhIjN6dZMzlQja3tqX/aLs3F3Uz+AxDpKgRhpOZQg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/pluginutils": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", + "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@sideway/address": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/@sideway/address/-/address-4.1.5.tgz", + "integrity": "sha512-IqO/DUQHUkPeixNQ8n0JA6102hT9CmaljNTPmQ1u8MEhBo/R4Q8eKLN/vGZxuebwOroDB4cbpjheD4+/sKFK4Q==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^9.0.0" + } + }, + "node_modules/@sideway/formula": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/@sideway/formula/-/formula-3.0.1.tgz", + "integrity": "sha512-/poHZJJVjx3L+zVD6g9KgHfYnb443oi7wLu/XKojDviHy6HOEOA6z1Trk5aR1dGcmPenJEgb2sK2I80LeS3MIg==", + "dev": true, + "license": "BSD-3-Clause" + }, + "node_modules/@sideway/pinpoint": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/@sideway/pinpoint/-/pinpoint-2.0.0.tgz", + "integrity": "sha512-RNiOoTPkptFtSVzQevY/yWtZwf/RxyVnPy/OcA9HBM3MlGDnBEYL5B41H0MTn0Uec8Hi+2qUtTfG2WWZBmMejQ==", + "dev": true, + "license": "BSD-3-Clause" + }, + "node_modules/@sinclair/typebox": { + "version": "0.34.52", + "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.34.52.tgz", + "integrity": "sha512-XiMQh7qqVlxZzcVD+kkGMNGMzcTrDMLWI7S4x7z1MkCkbDPrekpZXEUK0eZqZFMuHQg2a2DZOcDIh9o5v3Gonw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@sinonjs/commons": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/@sinonjs/commons/-/commons-3.0.1.tgz", + "integrity": "sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "type-detect": "4.0.8" + } + }, + "node_modules/@sinonjs/fake-timers": { + "version": "15.4.0", + "resolved": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-15.4.0.tgz", + "integrity": "sha512-DsG+8/LscQIQg68J6Ef3dv10u6nVyetYn923s3/sus5eaGfTo1of5WMZSLf0UJc9KDuKPilPH0UDJCjvNbDNCA==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@sinonjs/commons": "^3.0.1" + } + }, + "node_modules/@standard-schema/spec": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", + "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@storybook/addon-a11y": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/addon-a11y/-/addon-a11y-10.5.10.tgz", + "integrity": "sha512-RpRQV5xUbrl6hCiNrd5FSMIo6pnRZ0VZxWvEW/ASLcreGkKUW5jl2AeLCe5YROE2i80s/dU+6VPzOYKrwWNFbQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/global": "^5.0.0", + "axe-core": "^4.2.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10" + } + }, + "node_modules/@storybook/builder-vite": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-10.5.10.tgz", + "integrity": "sha512-O4GgIP0tKLRueom3EmU3OaBUHKjNYj+jkOvmTIkn3PYTiWVkCuHqSKEs4ADvRyaQuLH+peHhFe4JtkNC9KbtrQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/csf-plugin": "10.5.10", + "ts-dedent": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/csf-plugin": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-10.5.10.tgz", + "integrity": "sha512-TaCLBrqVEr767+w58QDotDUiCTuE5cyRJuRcDlsKQyUIyGBv+lYD3lu8wBiVCYxgIjB/gu9HmqiC+0yx1rHzaw==", + "dev": true, + "license": "MIT", + "dependencies": { + "unplugin": "^2.3.5" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "esbuild": "*", + "rollup": "*", + "storybook": "^10.5.10", + "vite": "*", + "webpack": "*" + }, + "peerDependenciesMeta": { + "esbuild": { + "optional": true + }, + "rollup": { + "optional": true + }, + "vite": { + "optional": true + }, + "webpack": { + "optional": true + } + } + }, + "node_modules/@storybook/global": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/@storybook/global/-/global-5.0.0.tgz", + "integrity": "sha512-FcOqPAXACP0I3oJ/ws6/rrPT9WGhu915Cg8D02a9YxLo0DE9zI+a9A5gRGvmQ09fiWPukqI8ZAEoQEdWUKMQdQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/@storybook/icons": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/@storybook/icons/-/icons-2.1.0.tgz", + "integrity": "sha512-Fxh9vYpX9bQqFeHRiY8h2ApeRGDzRSMLwJwNZ/AIRqnyOKHxRKL+yFe+ctEkVJmuptRE9u1Hrn8ZZNHyfDKKNg==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" + } + }, + "node_modules/@storybook/svelte": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/svelte/-/svelte-10.5.10.tgz", + "integrity": "sha512-jSEv1q5fJYTrhz7/DBYNc5gMmRJ8SyyyMikSvN4S6juuS0eJTZWGd62UpDH3ClfT/TQmTjTJH4HeEnbzJ+VrCA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ts-dedent": "^2.0.0", + "type-fest": "^5.6.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "svelte": "^5.0.0" + } + }, + "node_modules/@storybook/svelte-vite": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/svelte-vite/-/svelte-vite-10.5.10.tgz", + "integrity": "sha512-yLqceMBE89p0L9vf9y6zE0ELeRxwfAU7ci3Hry7NEZkxQ4aYsuClUqCmlCLNrAI7nvoVK8v6fp82KgCcods95A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/builder-vite": "10.5.10", + "@storybook/svelte": "10.5.10", + "magic-string": "^0.30.0", + "svelte2tsx": "^0.7.55", + "typescript": "^4.9.4 || ^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "@sveltejs/vite-plugin-svelte": "^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0", + "storybook": "^10.5.10", + "svelte": "^5.0.0", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/sveltekit": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/sveltekit/-/sveltekit-10.5.10.tgz", + "integrity": "sha512-sPHfTp1yitR+kftQV/0a7dDw3q4/zTXvBeWjgUC8DKkUY7NuFDRUOf00zE086B4vSXSZukf9484VyO+owBkLCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/builder-vite": "10.5.10", + "@storybook/svelte": "10.5.10", + "@storybook/svelte-vite": "10.5.10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "svelte": "^5.0.0", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/test-runner": { + "version": "0.24.4", + "resolved": "https://registry.npmjs.org/@storybook/test-runner/-/test-runner-0.24.4.tgz", + "integrity": "sha512-xm04bba5N7QyHHc+wD4xmPZx0vKK/PIpmTFypy445HrWOj0nFK4pYg5dE6H4ppqMt7qZAnb5GfHTvBwJtywJ4A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/core": "^7.22.5", + "@babel/generator": "^7.22.5", + "@babel/template": "^7.22.5", + "@babel/types": "^7.22.5", + "@jest/types": "^30.0.1", + "@swc/core": "^1.5.22", + "@swc/jest": "^0.2.38", + "expect-playwright": "^0.8.0", + "jest": "^30.0.4", + "jest-circus": "^30.0.4", + "jest-environment-node": "^30.0.4", + "jest-junit": "^16.0.0", + "jest-process-manager": "^0.4.0", + "jest-runner": "^30.0.4", + "jest-serializer-html": "^7.1.0", + "jest-watch-typeahead": "^3.0.1", + "nyc": "^15.1.0", + "playwright": "^1.14.0", + "playwright-core": ">=1.2.0", + "rimraf": "^3.0.2", + "uuid": "^8.3.2" + }, + "bin": { + "test-storybook": "dist/test-storybook.js" + }, + "engines": { + "node": ">=20.0.0" + }, + "peerDependencies": { + "storybook": "^0.0.0-0 || ^10.0.0 || ^10.0.0-0 || ^10.1.0-0 || ^10.2.0-0 || ^10.3.0-0 || ^10.4.0-0 || ^10.5.0-0 || ^10.6.0-0" + } + }, + "node_modules/@sveltejs/acorn-typescript": { + "version": "1.0.11", + "resolved": "https://registry.npmjs.org/@sveltejs/acorn-typescript/-/acorn-typescript-1.0.11.tgz", + "integrity": "sha512-LFuZUkjJ9iF7JZye/aG5XM0SFcQ5VyL0oVX4WJ9dc0Va3R3s0OauX1BESVCb+YN/ol8TAfqGDDAQsTG627Y5kw==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "acorn": "^8.9.0" + } + }, + "node_modules/@sveltejs/adapter-static": { + "version": "3.0.10", + "resolved": "https://registry.npmjs.org/@sveltejs/adapter-static/-/adapter-static-3.0.10.tgz", + "integrity": "sha512-7D9lYFWJmB7zxZyTE/qxjksvMqzMuYrrsyh1f4AlZqeZeACPRySjbC3aFiY55wb1tWUaKOQG9PVbm74JcN2Iew==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "@sveltejs/kit": "^2.0.0" + } + }, + "node_modules/@sveltejs/kit": { + "version": "2.70.2", + "resolved": "https://registry.npmjs.org/@sveltejs/kit/-/kit-2.70.2.tgz", + "integrity": "sha512-RzRoRpuR2KXqc5yMO0akQHDZeT4AslOlznGITURsqHaVbtyYP4Wn3eE3gxj9JcDyNYO0crkxhdwFHc+2vkVm6w==", + "dev": true, + "license": "MIT", + "dependencies": { + "@standard-schema/spec": "^1.0.0", + "@sveltejs/acorn-typescript": "^1.0.9", + "@types/cookie": "^0.6.0", + "acorn": "^8.16.0", + "cookie": "^0.6.0", + "devalue": "^5.8.1", + "esm-env": "^1.2.2", + "kleur": "^4.1.5", + "magic-string": "^0.30.5", + "mrmime": "^2.0.0", + "set-cookie-parser": "^3.0.0", + "sirv": "^3.0.0" + }, + "bin": { + "svelte-kit": "svelte-kit.js" + }, + "engines": { + "node": ">=18.13" + }, + "peerDependencies": { + "@opentelemetry/api": "^1.0.0", + "@sveltejs/vite-plugin-svelte": "^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0 || ^7.0.0", + "svelte": "^4.0.0 || ^5.0.0-next.0", + "typescript": "^5.3.3 || ^6.0.0", + "vite": "^5.0.3 || ^6.0.0 || ^7.0.0-beta.0 || ^8.0.0" + }, + "peerDependenciesMeta": { + "@opentelemetry/api": { + "optional": true + }, + "typescript": { + "optional": true + } + } + }, + "node_modules/@sveltejs/load-config": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/@sveltejs/load-config/-/load-config-0.2.3.tgz", + "integrity": "sha512-VT3qmUb8pRV2QrZjd8iAmtg8lf4W0TIjZbvXtz5MKei/q96teWZgGJyyidJzOjzZzvdq616eSRVeMYIQChUTAQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 18.0.0" + } + }, + "node_modules/@sveltejs/vite-plugin-svelte": { + "version": "7.3.0", + "resolved": "https://registry.npmjs.org/@sveltejs/vite-plugin-svelte/-/vite-plugin-svelte-7.3.0.tgz", + "integrity": "sha512-QbRoJyD92e9R0ufeQIWRHrCC0ObcqSv/aBDdrQMoU+sypav3cDx5wytdQ6GLdXjEMO6xjrXGzfkUygng8JMv0A==", + "dev": true, + "license": "MIT", + "dependencies": { + "deepmerge": "^4.3.1", + "magic-string": "^1.0.0", + "obug": "^2.1.0", + "vitefu": "^1.1.2" + }, + "engines": { + "node": "^20.19 || ^22.12 || >=24" + }, + "peerDependencies": { + "svelte": "^5.46.4", + "vite": "^8.0.0-beta.7 || ^8.0.0" + } + }, + "node_modules/@sveltejs/vite-plugin-svelte/node_modules/magic-string": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.2.0.tgz", + "integrity": "sha512-ptco+HFxTLgjafSLim2LojBSwfg5feBjd+SqyiwdGkzC38UPdZy3zgrHMI2CoTf5fJL38tbHMYWVzIH8BxGqJw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.5.5" + } + }, + "node_modules/@swc/core": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core/-/core-1.16.1.tgz", + "integrity": "sha512-nUaeu91O5QZKrQdaDCHd402ogUIoNOOjpkZNq0UomWK0G6gDaGmLhvddF1/3BXf5O8aLyo6ZPY/aMDWvaJQ/hg==", + "dev": true, + "hasInstallScript": true, + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3", + "@swc/types": "^0.1.28" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/swc" + }, + "optionalDependencies": { + "@swc/core-darwin-arm64": "1.16.1", + "@swc/core-darwin-x64": "1.16.1", + "@swc/core-linux-arm-gnueabihf": "1.16.1", + "@swc/core-linux-arm64-gnu": "1.16.1", + "@swc/core-linux-arm64-musl": "1.16.1", + "@swc/core-linux-ppc64-gnu": "1.16.1", + "@swc/core-linux-s390x-gnu": "1.16.1", + "@swc/core-linux-x64-gnu": "1.16.1", + "@swc/core-linux-x64-musl": "1.16.1", + "@swc/core-win32-arm64-msvc": "1.16.1", + "@swc/core-win32-ia32-msvc": "1.16.1", + "@swc/core-win32-x64-msvc": "1.16.1" + }, + "peerDependencies": { + "@swc/helpers": ">=0.5.17" + }, + "peerDependenciesMeta": { + "@swc/helpers": { + "optional": true + } + } + }, + "node_modules/@swc/core-darwin-arm64": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-darwin-arm64/-/core-darwin-arm64-1.16.1.tgz", + "integrity": "sha512-zlJblJ8ncErD43lKdxjbUaUskJQf+LxiPXYcWXD8/8ZMV+7uuAT+CwjciLXpyZBd5Pq/S726bMpeeAwSeL1hhg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-darwin-x64": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-darwin-x64/-/core-darwin-x64-1.16.1.tgz", + "integrity": "sha512-IN0BmPWb0YAh/17mmlWB/HDBtTw2MfuW4hulf/tQAgTQBRH17l+z499bNJLK6LizSjqs0P7V+jU38Zj+vJC1DA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm-gnueabihf": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-arm-gnueabihf/-/core-linux-arm-gnueabihf-1.16.1.tgz", + "integrity": "sha512-EYgrx2YOCQ2Twz2S793kqNjPkpvYVUPzzR95bIb7by+VQcyaai4lZZ2iz/tZvcFVKSNcN3/JTKwx+aBn2ZL52A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm64-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-arm64-gnu/-/core-linux-arm64-gnu-1.16.1.tgz", + "integrity": "sha512-moyKm0YZlHdHohzm1YwgAyesqnE853rO0REMfJLFAova51wF9BNi+3ZW2PeS7Vqvn6HeJuepLpAHbBdZctxpHA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm64-musl": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-arm64-musl/-/core-linux-arm64-musl-1.16.1.tgz", + "integrity": "sha512-kKGBO9wdapiSzuf5ZzZ2fYtlu1BNSYtIIUxvH1ir/gcelTOREEHGDCLTDFx/2Knf878nU11A40z7LxwasEFxqA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-ppc64-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-ppc64-gnu/-/core-linux-ppc64-gnu-1.16.1.tgz", + "integrity": "sha512-nZ6qahtLxC3PM54cWOQZHxt4lTCF/3J4LIoWWzz6v7A+rLs8Dx54anYQf7mH3eIi8KlNpgKci/ie8ZSqFN8O7A==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-s390x-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-s390x-gnu/-/core-linux-s390x-gnu-1.16.1.tgz", + "integrity": "sha512-4ji5PNzhYq193Z4/4xUaSoNJza6iCkDJSzhetrbB6KOYxsr+kxtQr8ePWhMJUiMt6JUWtXaZ1PYT8FhtED+nGA==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-x64-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-x64-gnu/-/core-linux-x64-gnu-1.16.1.tgz", + "integrity": "sha512-VJQxqrisHV+B394IgrOu8YsIIXZgffnf5tO+yc9Z/hoUpuZEvuQTjWwlnpZdpyD+0nx6LTD1/3k646JYm43yJA==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-x64-musl": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-x64-musl/-/core-linux-x64-musl-1.16.1.tgz", + "integrity": "sha512-r9oV1mwxxsIGcLV1IQ/tw76MW3doatKze1QFWuC+a7QqJUkhY/bKTSVk6NpKKUGm2LDsE33Va8VqSClfA7vSiQ==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-arm64-msvc": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-win32-arm64-msvc/-/core-win32-arm64-msvc-1.16.1.tgz", + "integrity": "sha512-6huNRessoBLxWEqBm5zJXyCQ27TO7anvkdiuQ5MDO4CJni0nOXEqKtV9RllQ2TdyENKKsUMXVnIfW2hIXx/R5Q==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-ia32-msvc": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-win32-ia32-msvc/-/core-win32-ia32-msvc-1.16.1.tgz", + "integrity": "sha512-OVKJFUzphrGmsh+BGtcZDesx0YryV7/Yvy5XGgTqnrZfjnyfcr5uaqYQugCckdIlupc5Vs3XtDjRAj12z4ZPlw==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-x64-msvc": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-win32-x64-msvc/-/core-win32-x64-msvc-1.16.1.tgz", + "integrity": "sha512-Bt+VIhWYCGk4urklnkkteLUOeLv1VxigwTCeB/xC6rBZxY6IIKdDwCJf6on3E3SUGsIqmQS6QqtuJQc1VxF4Aw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/counter": { + "version": "0.1.3", + "resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.3.tgz", + "integrity": "sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==", + "dev": true, + "license": "Apache-2.0" + }, + "node_modules/@swc/jest": { + "version": "0.2.39", + "resolved": "https://registry.npmjs.org/@swc/jest/-/jest-0.2.39.tgz", + "integrity": "sha512-eyokjOwYd0Q8RnMHri+8/FS1HIrIUKK/sRrFp8c1dThUOfNeCWbLmBP1P5VsKdvmkd25JaH+OKYwEYiAYg9YAA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/create-cache-key-function": "^30.0.0", + "@swc/counter": "^0.1.3", + "jsonc-parser": "^3.2.0" + }, + "engines": { + "npm": ">= 7.0.0" + }, + "peerDependencies": { + "@swc/core": "*" + } + }, + "node_modules/@swc/types": { + "version": "0.1.28", + "resolved": "https://registry.npmjs.org/@swc/types/-/types-0.1.28.tgz", + "integrity": "sha512-V6Mnml8v09QALx6K0elJ7o9K/MkVDtW3t6L+7Ou/JcWtb3xwId2AH4FeOceySd2JaO87IMw4+6vSZxLm34LPbw==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3" + } + }, + "node_modules/@tauri-apps/api": { + "version": "2.11.1", + "resolved": "https://registry.npmjs.org/@tauri-apps/api/-/api-2.11.1.tgz", + "integrity": "sha512-M2FPuYND2m+wh5hfW9ZpSdxMPdEJovPBWwoHJmwUpysTYNHaOkVFN419m/K0LIgjb/7KU2vBgsUepJWugQCvAA==", + "license": "Apache-2.0 OR MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/tauri" + } + }, + "node_modules/@tauri-apps/cli": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli/-/cli-2.11.4.tgz", + "integrity": "sha512-R8xGtMpwyetawSqm9kYOuMmEqkhUbvcUy8n0aNXIxollKBLESUu5f4Fx+64hgASYm1H+jSWq6jCW6zqTnH6hqQ==", + "dev": true, + "license": "Apache-2.0 OR MIT", + "bin": { + "tauri": "tauri.js" + }, + "engines": { + "node": ">= 10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/tauri" + }, + "optionalDependencies": { + "@tauri-apps/cli-darwin-arm64": "2.11.4", + "@tauri-apps/cli-darwin-x64": "2.11.4", + "@tauri-apps/cli-linux-arm-gnueabihf": "2.11.4", + "@tauri-apps/cli-linux-arm64-gnu": "2.11.4", + "@tauri-apps/cli-linux-arm64-musl": "2.11.4", + "@tauri-apps/cli-linux-riscv64-gnu": "2.11.4", + "@tauri-apps/cli-linux-x64-gnu": "2.11.4", + "@tauri-apps/cli-linux-x64-musl": "2.11.4", + "@tauri-apps/cli-win32-arm64-msvc": "2.11.4", + "@tauri-apps/cli-win32-ia32-msvc": "2.11.4", + "@tauri-apps/cli-win32-x64-msvc": "2.11.4" + } + }, + "node_modules/@tauri-apps/cli-darwin-arm64": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-arm64/-/cli-darwin-arm64-2.11.4.tgz", + "integrity": "sha512-1ryOF3ZhpZ/nemHV5zVwBQBz9jDGKmKPvWPADOhc83ig0P4bMc2iER4NbC6r9sjeIZ6RVQ4g3RZIYvezhcl4TQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-darwin-x64": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-x64/-/cli-darwin-x64-2.11.4.tgz", + "integrity": "sha512-uFsGQAAfuyz1k/yGLmkWfkBlgKAqZfxqlHmLWx81QU27RJWfmbNHCIq8T8w1e+VClleIuZUjpHWfoE4E3DLo3A==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-arm-gnueabihf": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm-gnueabihf/-/cli-linux-arm-gnueabihf-2.11.4.tgz", + "integrity": "sha512-IaHZn5CdBL21oUmjiVOS1ctw6Ip1O0pjp70FwOWmYz1myWe0SY96ZIj2FYf7pT0m8bI2h/hrs5ZbEXXh44/MkQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-arm64-gnu": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-gnu/-/cli-linux-arm64-gnu-2.11.4.tgz", + "integrity": "sha512-N41/ukTRVe6XSuUTESuFdGeOW2i7k62tK+6gHK5Kd5/q5RPvvi19GaWAVPPb9u95HSGmTChSolBfzynUsssFaA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-arm64-musl": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-musl/-/cli-linux-arm64-musl-2.11.4.tgz", + "integrity": "sha512-v277UnT/fB64xAfSroL5N3Km3tLmvATWqJJw/wRI+g6o+HkeD0slyE7gOhNs1MbjE41R7bQOTxMVoL3aomUJmw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-riscv64-gnu": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-riscv64-gnu/-/cli-linux-riscv64-gnu-2.11.4.tgz", + "integrity": "sha512-qqgNkQ2u1yZHxjhxsZaxUtRDW8dIqIYm33rx/mzwQv0SfY9x1B+iraj8vWeFiXjjSVVhEMepXSOts1TqPzvXNQ==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-x64-gnu": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-gnu/-/cli-linux-x64-gnu-2.11.4.tgz", + "integrity": "sha512-2VRNWl84FOH0m2giiDkO2h0QXlcMJeX+zJDpI5kDIQAx6s+geF3v48F4DXfJez4GS/FdoDGnPnw1C2iYGbQ7bQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-x64-musl": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-musl/-/cli-linux-x64-musl-2.11.4.tgz", + "integrity": "sha512-o9GyhYor/nc7xarmwDE3ka2szuW3uuZzXjHWh64Q8YX5AtSgxdQkFWzrY4O8KiGtVNvFBI14H3Q49Qj5TOIP/A==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-win32-arm64-msvc": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-arm64-msvc/-/cli-win32-arm64-msvc-2.11.4.tgz", + "integrity": "sha512-ld5Ehb598m0VkYyylRPNeCFsBe/km0jxis6KgMpl3IGY6I/i1RwQXO05I1AsXUXO2WC6AvB/Lw4qTf/asiuEiQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-win32-ia32-msvc": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-ia32-msvc/-/cli-win32-ia32-msvc-2.11.4.tgz", + "integrity": "sha512-12Hxi0XX/H5VFxO/bGgHkFWhml9VMgEOu9CidjeCeTNQ1l6fpUlbiGgSP7CLI3PFtW9/FfbeHieZ+kyWK5H7CA==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-win32-x64-msvc": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-x64-msvc/-/cli-win32-x64-msvc-2.11.4.tgz", + "integrity": "sha512-+vDiqBIU5dMISg/wNvX3sF+ZHfgJGJ5T0AcO+EHNXV9GGAG+P5fzodlDXD3QdKCRgZxMoCm5PPvj3BqLNjBthw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/plugin-dialog": { + "version": "2.7.2", + "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-dialog/-/plugin-dialog-2.7.2.tgz", + "integrity": "sha512-pX0IGm1I3I6wc+zeKYcq1GSqogK6okCNX5fOdaNU5ab1AjGS6l1E5wFNjEb7meg7ZFSp0JUs+0jQGQNyOvLrsg==", + "license": "MIT OR Apache-2.0", + "dependencies": { + "@tauri-apps/api": "^2.11.0" + } + }, + "node_modules/@tauri-apps/plugin-opener": { + "version": "2.5.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-opener/-/plugin-opener-2.5.4.tgz", + "integrity": "sha512-1HnPkb+AmgO29HBazm4uPLKB+r7zzcTBW1d0fyYp1uP+jwtpoiNDGKMMzz58SFp49nOIrxdE3aUJtT57lfO9CQ==", + "license": "MIT OR Apache-2.0", + "dependencies": { + "@tauri-apps/api": "^2.11.0" + } + }, + "node_modules/@testing-library/dom": { + "version": "10.4.1", + "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.1.tgz", + "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.10.4", + "@babel/runtime": "^7.12.5", + "@types/aria-query": "^5.0.1", + "aria-query": "5.3.0", + "dom-accessibility-api": "^0.5.9", + "lz-string": "^1.5.0", + "picocolors": "1.1.1", + "pretty-format": "^27.0.2" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@testing-library/dom/node_modules/aria-query": { + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz", + "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "dequal": "^2.0.3" + } + }, + "node_modules/@testing-library/jest-dom": { + "version": "6.9.1", + "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-6.9.1.tgz", + "integrity": "sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@adobe/css-tools": "^4.4.0", + "aria-query": "^5.0.0", + "css.escape": "^1.5.1", + "dom-accessibility-api": "^0.6.3", + "picocolors": "^1.1.1", + "redent": "^3.0.0" + }, + "engines": { + "node": ">=14", + "npm": ">=6", + "yarn": ">=1" + } + }, + "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz", + "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@testing-library/user-event": { + "version": "14.6.5", + "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.5.tgz", + "integrity": "sha512-FhqjldLTpteueBaKflhNFlMT3+PM0O5fiBUivht6b9CZ1eesJyy7+g3Jr7XwJzt/Hip3ZG5hWwK1MX1FuDiE4w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12", + "npm": ">=6" + }, + "peerDependencies": { + "@testing-library/dom": ">=7.21.4" + } + }, + "node_modules/@tybys/wasm-util": { + "version": "0.10.3", + "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz", + "integrity": "sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@types/aria-query": { + "version": "5.0.4", + "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz", + "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/babel__core": { + "version": "7.20.5", + "resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz", + "integrity": "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/parser": "^7.20.7", + "@babel/types": "^7.20.7", + "@types/babel__generator": "*", + "@types/babel__template": "*", + "@types/babel__traverse": "*" + } + }, + "node_modules/@types/babel__generator": { + "version": "7.27.0", + "resolved": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.27.0.tgz", + "integrity": "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/types": "^7.0.0" + } + }, + "node_modules/@types/babel__template": { + "version": "7.4.4", + "resolved": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz", + "integrity": "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/parser": "^7.1.0", + "@babel/types": "^7.0.0" + } + }, + "node_modules/@types/babel__traverse": { + "version": "7.28.0", + "resolved": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.28.0.tgz", + "integrity": "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/types": "^7.28.2" + } + }, + "node_modules/@types/chai": { + "version": "5.2.3", + "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz", + "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/deep-eql": "*", + "assertion-error": "^2.0.1" + } + }, + "node_modules/@types/cookie": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.6.0.tgz", + "integrity": "sha512-4Kh9a6B2bQciAhf7FSuMRRkUWecJgJu9nPnx3yzpsfXX/c50REIqpHY4C82bXP90qrLtXtkDxTZosYO3UpOwlA==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/deep-eql": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz", + "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/estree": { + "version": "1.0.9", + "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz", + "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/istanbul-lib-coverage": { + "version": "2.0.6", + "resolved": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz", + "integrity": "sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/istanbul-lib-report": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz", + "integrity": "sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/istanbul-lib-coverage": "*" + } + }, + "node_modules/@types/istanbul-reports": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz", + "integrity": "sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/istanbul-lib-report": "*" + } + }, + "node_modules/@types/node": { + "version": "26.1.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz", + "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==", + "dev": true, + "license": "MIT", + "dependencies": { + "undici-types": "~8.3.0" + } + }, + "node_modules/@types/stack-utils": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz", + "integrity": "sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/trusted-types": { + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz", + "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/wait-on": { + "version": "5.3.4", + "resolved": "https://registry.npmjs.org/@types/wait-on/-/wait-on-5.3.4.tgz", + "integrity": "sha512-EBsPjFMrFlMbbUFf9D1Fp+PAB2TwmUn7a3YtHyD9RLuTIk1jDd8SxXVAoez2Ciy+8Jsceo2MYEYZzJ/DvorOKw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/node": "*" + } + }, + "node_modules/@types/yargs": { + "version": "17.0.35", + "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.35.tgz", + "integrity": "sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/yargs-parser": "*" + } + }, + "node_modules/@types/yargs-parser": { + "version": "21.0.3", + "resolved": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz", + "integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/@ungap/structured-clone": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.3.tgz", + "integrity": "sha512-60YRaenCQcVjYEKOcG824+DRGGIQ3VKErcBoAEDJZz5bKIs2ZG+X/H9Nk+Q6EVkwJk5QNApxbrc5QtBSwtrXAg==", + "dev": true, + "license": "ISC" + }, + "node_modules/@unrs/resolver-binding-android-arm-eabi": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm-eabi/-/resolver-binding-android-arm-eabi-1.12.2.tgz", + "integrity": "sha512-g5T90pqg1bo/7mytQx6F4iBNC0Wsh9cu+z9veDbFjc7HjpesJFWD7QMS0NGStXM075+7dJPPVvBbpZlnrdpi/w==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@unrs/resolver-binding-android-arm64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm64/-/resolver-binding-android-arm64-1.12.2.tgz", + "integrity": "sha512-YGCRZv/9GLhwmz6mYDeTsm/92BAyR28l6c2ReweVW5pWgfsitWLY8upvfRlGdoyD8HjeTHSYJWyZGD4KJA/nFQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@unrs/resolver-binding-darwin-arm64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-arm64/-/resolver-binding-darwin-arm64-1.12.2.tgz", + "integrity": "sha512-u9DiNT1auQMO20A9SyTuG3wUgQWB9Z7KjAg0uFuCDR1FsAY8A0CG2S6JpHS1xwm/w1G08bjXZDcyOCjv1WAm2w==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@unrs/resolver-binding-darwin-x64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-x64/-/resolver-binding-darwin-x64-1.12.2.tgz", + "integrity": "sha512-f7rPLi/T1HVKZu/u6t87lroib16n8vrSzcyxI7lg4BGO9UF26KhQL44sd9eOUgrTYhvRXtWOIZT5PejdPyJfUA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@unrs/resolver-binding-freebsd-x64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-freebsd-x64/-/resolver-binding-freebsd-x64-1.12.2.tgz", + "integrity": "sha512-BpcOjWCJub6nRZUS2zA20pmLvjtqAtGejETaIyRLiZiQf++cbrjltLA5NN/xaXfqeOBOSlMFbemIl5/S5tljmg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm-gnueabihf": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-gnueabihf/-/resolver-binding-linux-arm-gnueabihf-1.12.2.tgz", + "integrity": "sha512-vZTDvdSISZjJx66OzJqtsOhzifbqRjbmI1Mnu49fQDwog5GtDI4QidRiEAYbZCRj9C8YZEW+3ZjqsyS9GR4k2A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm-musleabihf": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-musleabihf/-/resolver-binding-linux-arm-musleabihf-1.12.2.tgz", + "integrity": "sha512-BiPI+IrIlwcW4nLLMM21+B1dFPzd55yAVgVGrdgDjNef+ch03GdxrcyaIz8X9SsQirh/kCQ7mviyWlMxdh2D7g==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-gnu/-/resolver-binding-linux-arm64-gnu-1.12.2.tgz", + "integrity": "sha512-zJc0H99FEPoFfSrNpa91HYfxzfAJCr502oxNK1cfdC9hlaFI43RT+JFCann9JUgZmLzzntChHyn13Sgn9ljHNg==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-musl/-/resolver-binding-linux-arm64-musl-1.12.2.tgz", + "integrity": "sha512-KQ3Lki6l+Pz1k/eBipN41ES+YUK30beLGb9YqcB1O542cyLCNE6GaxrfcY3T6EezmGGk84wb5XyO9loTM9tkcA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-loong64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-loong64-gnu/-/resolver-binding-linux-loong64-gnu-1.12.2.tgz", + "integrity": "sha512-3SJGEh1DborhG6pyxvhPzCT4bbSIVihsvgJc13P1bHG7KLdNDaF9T3gsTwFc7Jw/5Y5/iWOjkEx7Zy0NvCGX3Q==", + "cpu": [ + "loong64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-loong64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-loong64-musl/-/resolver-binding-linux-loong64-musl-1.12.2.tgz", + "integrity": "sha512-jiuG/Obbel7uw1PwHNFfrkiKhLAF6mnyZ6aWlOAVN9WqKm8v0OFGnciJIHu8+CMvXLQ8AD51LPzAoUfT21D5Ew==", + "cpu": [ + "loong64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-ppc64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-ppc64-gnu/-/resolver-binding-linux-ppc64-gnu-1.12.2.tgz", + "integrity": "sha512-q7xRvVpmcfeL+LlZg8Pbbo6QaTZwDU5BaGZbwfhkEsXJn3Was8xYfE0RBH266xZt0rM6B7i8xAYIvjthuUIWHg==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-riscv64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-gnu/-/resolver-binding-linux-riscv64-gnu-1.12.2.tgz", + "integrity": "sha512-0CVdx6lcnT3Q9inOH8tsMIOJ6ImndllMjqJHg8RLVdB7Vq4SfkEXl9mCSsVNuNA4MCYycRicCUxPCabVHJRr6A==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-riscv64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-musl/-/resolver-binding-linux-riscv64-musl-1.12.2.tgz", + "integrity": "sha512-iOwlRo9vnp6R6ohHQS11n0NnfdXx/omhkocmIfaPRpQhKZ+3BDMkkdRVh53qjkFkpPddf+FETA28NwGN7l5l+w==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-s390x-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-s390x-gnu/-/resolver-binding-linux-s390x-gnu-1.12.2.tgz", + "integrity": "sha512-HYJtLfXq94q8iZNFT1lknx258wlkkWhZeUXJRqzKBBUJ00CvZ+N33zgbCqimLjsyw5Va6uUxhVa12mI+kaveEw==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-x64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-gnu/-/resolver-binding-linux-x64-gnu-1.12.2.tgz", + "integrity": "sha512-mPsUhunKKDih5O96Y6enDQyHc1SqBPlY1E/SfMWDM3EdJ95Z9CArPeCVwCCqbP45ljvivdEk8Fxn+SIb1rDAJQ==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-x64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-musl/-/resolver-binding-linux-x64-musl-1.12.2.tgz", + "integrity": "sha512-azrt6+5ydLd8Vt210AAFis/lZevSfPw93EJRIJG+xPu4WCJ8K0kppCTpMyLPcKT7H15M4Jnt2tMp5bOvCkRC6A==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-openharmony-arm64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-openharmony-arm64/-/resolver-binding-openharmony-arm64-1.12.2.tgz", + "integrity": "sha512-YZ9hP4O0X9PQb8eO980qmLNGH4zT3I9+SZTdt0Pr0YyuGQhYKoOZkV02VzrzyOZJ5xIJ3UFIenKkUkGg8GjgWQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ] + }, + "node_modules/@unrs/resolver-binding-wasm32-wasi": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-wasm32-wasi/-/resolver-binding-wasm32-wasi-1.12.2.tgz", + "integrity": "sha512-tYFDIkMxSflfEc/h92ZWNsZlHSwgimbNHSO3PL2JWQHfCuC2q316jMyYU9TIWZsFK2bQwyK5VAdYgn8ygPj69A==", + "cpu": [ + "wasm32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/core": "1.10.0", + "@emnapi/runtime": "1.10.0", + "@napi-rs/wasm-runtime": "^1.1.4" + }, + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/@unrs/resolver-binding-wasm32-wasi/node_modules/@emnapi/core": { + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz", + "integrity": "sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.1", + "tslib": "^2.4.0" + } + }, + "node_modules/@unrs/resolver-binding-wasm32-wasi/node_modules/@emnapi/runtime": { + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz", + "integrity": "sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@unrs/resolver-binding-win32-arm64-msvc": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-arm64-msvc/-/resolver-binding-win32-arm64-msvc-1.12.2.tgz", + "integrity": "sha512-qzNyg3xL0VPQmCaUh+N5jSitce6k+uCBfMDesWRnlULOZaqUkaJ0ybdT+UqlAWJoQjuqfIU/0Ptx9bteN4D82g==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@unrs/resolver-binding-win32-ia32-msvc": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-ia32-msvc/-/resolver-binding-win32-ia32-msvc-1.12.2.tgz", + "integrity": "sha512-WD9sY00OfpHVGfsnHZoA8jVT+esS/Bg8z8jzxp5BnDCjjwsuKsPQrzswwpFy4J1AUJbXPRfkpcX0mXrzeXW79g==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@unrs/resolver-binding-win32-x64-msvc": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-x64-msvc/-/resolver-binding-win32-x64-msvc-1.12.2.tgz", + "integrity": "sha512-nAB74NfSNKknqQ1RrYj6uz8FcXEomu/MATJZxh/x+BArzN2U3JbOYC0APYzUIGhVY3m5hRxA8VPNdPBoG8txlA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@vitest/coverage-v8": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.10.tgz", + "integrity": "sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@bcoe/v8-coverage": "^1.0.2", + "@vitest/utils": "4.1.10", + "ast-v8-to-istanbul": "^1.0.0", + "istanbul-lib-coverage": "^3.2.2", + "istanbul-lib-report": "^3.0.1", + "istanbul-reports": "^3.2.0", + "magicast": "^0.5.2", + "obug": "^2.1.1", + "std-env": "^4.0.0-rc.1", + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "@vitest/browser": "4.1.10", + "vitest": "4.1.10" + }, + "peerDependenciesMeta": { + "@vitest/browser": { + "optional": true + } + } + }, + "node_modules/@vitest/expect": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.10.tgz", + "integrity": "sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@standard-schema/spec": "^1.1.0", + "@types/chai": "^5.2.2", + "@vitest/spy": "4.1.10", + "@vitest/utils": "4.1.10", + "chai": "^6.2.2", + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/mocker": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.10.tgz", + "integrity": "sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/spy": "4.1.10", + "estree-walker": "^3.0.3", + "magic-string": "^0.30.21" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "msw": "^2.4.9", + "vite": "^6.0.0 || ^7.0.0 || ^8.0.0" + }, + "peerDependenciesMeta": { + "msw": { + "optional": true + }, + "vite": { + "optional": true + } + } + }, + "node_modules/@vitest/pretty-format": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.10.tgz", + "integrity": "sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/runner": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.10.tgz", + "integrity": "sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/utils": "4.1.10", + "pathe": "^2.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/snapshot": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.10.tgz", + "integrity": "sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "4.1.10", + "@vitest/utils": "4.1.10", + "magic-string": "^0.30.21", + "pathe": "^2.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/spy": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.10.tgz", + "integrity": "sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/utils": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.10.tgz", + "integrity": "sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "4.1.10", + "convert-source-map": "^2.0.0", + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@webcontainer/env": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/@webcontainer/env/-/env-1.1.1.tgz", + "integrity": "sha512-6aN99yL695Hi9SuIk1oC88l9o0gmxL1nGWWQ/kNy81HigJ0FoaoTXpytCj6ItzgyCEwA9kF1wixsTuv5cjsgng==", + "dev": true, + "license": "MIT" + }, + "node_modules/acorn": { + "version": "8.18.0", + "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz", + "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==", + "dev": true, + "license": "MIT", + "bin": { + "acorn": "bin/acorn" + }, + "engines": { + "node": ">=0.4.0" + } + }, + "node_modules/agent-base": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "4" + }, + "engines": { + "node": ">= 6.0.0" + } + }, + "node_modules/aggregate-error": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz", + "integrity": "sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==", + "dev": true, + "license": "MIT", + "dependencies": { + "clean-stack": "^2.0.0", + "indent-string": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-escapes": { + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz", + "integrity": "sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "type-fest": "^0.21.3" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/ansi-escapes/node_modules/type-fest": { + "version": "0.21.3", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz", + "integrity": "sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==", + "dev": true, + "license": "(MIT OR CC0-1.0)", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-styles": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz", + "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/anymatch": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz", + "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==", + "dev": true, + "license": "ISC", + "dependencies": { + "normalize-path": "^3.0.0", + "picomatch": "^2.0.4" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/anymatch/node_modules/picomatch": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", + "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8.6" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } + }, + "node_modules/append-transform": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/append-transform/-/append-transform-2.0.0.tgz", + "integrity": "sha512-7yeyCEurROLQJFv5Xj4lEGTy0borxepjFv1g22oAdqFu//SrAlDl1O1Nxx15SH1RoliUml6p8dwJW9jvZughhg==", + "dev": true, + "license": "MIT", + "dependencies": { + "default-require-extensions": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/archy": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz", + "integrity": "sha512-Xg+9RwCg/0p32teKdGMPTPnVXKD0w3DfHnFTficozsAgsvq2XenPJq/MYpzzQ/v8zrOyJn6Ds39VA4JIDwFfqw==", + "dev": true, + "license": "MIT" + }, + "node_modules/argparse": { + "version": "1.0.10", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==", + "dev": true, + "license": "MIT", + "dependencies": { + "sprintf-js": "~1.0.2" + } + }, + "node_modules/aria-query": { + "version": "5.3.1", + "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.1.tgz", + "integrity": "sha512-Z/ZeOgVl7bcSYZ/u/rh0fOpvEpq//LZmdbkXyc7syVzjPAhfOa9ebsdTSjEBDU4vs5nC98Kfduj1uFo0qyET3g==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/assertion-error": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz", + "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + } + }, + "node_modules/ast-types": { + "version": "0.16.1", + "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.16.1.tgz", + "integrity": "sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==", + "dev": true, + "license": "MIT", + "dependencies": { + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/ast-v8-to-istanbul": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.5.tgz", + "integrity": "sha512-UPAgKJFSEGMWSDr3LX4tqnAb4f7KGT8O40Tyx8wbYmmZ/yn58lNCm8h3svs3eXgiGd5AXxz8NDOvXWvicq+rJA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.31", + "estree-walker": "^3.0.3", + "js-tokens": "^10.0.0" + } + }, + "node_modules/asynckit": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", + "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/axe-core": { + "version": "4.13.0", + "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.13.0.tgz", + "integrity": "sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==", + "dev": true, + "license": "MPL-2.0", + "engines": { + "node": ">=4" + } + }, + "node_modules/axios": { + "version": "1.19.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.19.0.tgz", + "integrity": "sha512-ht/iuYZXEjFxLH/Hkezgd7m6JKlHHXEUSneaDz8uZe1Gj5QZtCnpyDsckvAiEnT89OEbCLmnte4R4sn7P0EKFw==", + "dev": true, + "license": "MIT", + "dependencies": { + "follow-redirects": "^1.16.0", + "form-data": "^4.0.6", + "https-proxy-agent": "^5.0.1", + "proxy-from-env": "^2.1.0" + } + }, + "node_modules/axobject-query": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz", + "integrity": "sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/babel-jest": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-30.4.1.tgz", + "integrity": "sha512-fATAbM8piYxkiXQp3RBXmZHxZVNJZAVXXfyeyCN2Tida3+qJ8ea9UxhiJ2y4fLO90ZImKt6k9FlcH2+rLkJGhw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/transform": "30.4.1", + "@types/babel__core": "^7.20.5", + "babel-plugin-istanbul": "^7.0.1", + "babel-preset-jest": "30.4.0", + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "slash": "^3.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "@babel/core": "^7.11.0 || ^8.0.0-0" + } + }, + "node_modules/babel-plugin-istanbul": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-7.0.1.tgz", + "integrity": "sha512-D8Z6Qm8jCvVXtIRkBnqNHX0zJ37rQcFJ9u8WOS6tkYOsRdHBzypCstaxWiu5ZIlqQtviRYbgnRLSoCEvjqcqbA==", + "dev": true, + "license": "BSD-3-Clause", + "workspaces": [ + "test/babel-8" + ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.0.0", + "@istanbuljs/load-nyc-config": "^1.0.0", + "@istanbuljs/schema": "^0.1.3", + "istanbul-lib-instrument": "^6.0.2", + "test-exclude": "^6.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/babel-plugin-jest-hoist": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-30.4.0.tgz", + "integrity": "sha512-9EdtWM/sSfXLOGLwSn+GS6pIXyBnL07/8gyJlwFXjWy4DxMOyItqyUT29d4lQiS380EZwYlX7/At4PgBS+m2aA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/babel__core": "^7.20.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/babel-preset-current-node-syntax": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/babel-preset-current-node-syntax/-/babel-preset-current-node-syntax-1.2.0.tgz", + "integrity": "sha512-E/VlAEzRrsLEb2+dv8yp3bo4scof3l9nR4lrld+Iy5NyVqgVYUJnDAmunkhPMisRI32Qc4iRiz425d8vM++2fg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/plugin-syntax-async-generators": "^7.8.4", + "@babel/plugin-syntax-bigint": "^7.8.3", + "@babel/plugin-syntax-class-properties": "^7.12.13", + "@babel/plugin-syntax-class-static-block": "^7.14.5", + "@babel/plugin-syntax-import-attributes": "^7.24.7", + "@babel/plugin-syntax-import-meta": "^7.10.4", + "@babel/plugin-syntax-json-strings": "^7.8.3", + "@babel/plugin-syntax-logical-assignment-operators": "^7.10.4", + "@babel/plugin-syntax-nullish-coalescing-operator": "^7.8.3", + "@babel/plugin-syntax-numeric-separator": "^7.10.4", + "@babel/plugin-syntax-object-rest-spread": "^7.8.3", + "@babel/plugin-syntax-optional-catch-binding": "^7.8.3", + "@babel/plugin-syntax-optional-chaining": "^7.8.3", + "@babel/plugin-syntax-private-property-in-object": "^7.14.5", + "@babel/plugin-syntax-top-level-await": "^7.14.5" + }, + "peerDependencies": { + "@babel/core": "^7.0.0 || ^8.0.0-0" + } + }, + "node_modules/babel-preset-jest": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-30.4.0.tgz", + "integrity": "sha512-lBY4jxsNmCnSiu7kquw8ZC9F4+XLMOKypT3RnNHPvU2Kpd4W0xaPuLr5ZkRyOsvLYAY4yaW1ZwTW4xB7NIiZzg==", + "dev": true, + "license": "MIT", + "dependencies": { + "babel-plugin-jest-hoist": "30.4.0", + "babel-preset-current-node-syntax": "^1.2.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "@babel/core": "^7.11.0 || ^8.0.0-beta.1" + } + }, + "node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "dev": true, + "license": "MIT" + }, + "node_modules/baseline-browser-mapping": { + "version": "2.11.16", + "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.16.tgz", + "integrity": "sha512-H/bNPUFHewJHyCTdjn1n3Pit5+2GmWT6mmeHImPX+8MA9NA6b67jO4gYmi4jTbCJb2otq34KMZnovndDPqJwhQ==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "baseline-browser-mapping": "dist/cli.cjs" + }, + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/brace-expansion": { + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/browserslist": { + "version": "4.28.8", + "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.8.tgz", + "integrity": "sha512-V2NpofLblG64mfOtSgDhOJESZEGogzDMBv/q+W6oc4LXWP/q75eOXoOaaOu1EOadB9U4Bwx/e0yzbvwKH8zalA==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/browserslist" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "baseline-browser-mapping": "^2.11.12", + "caniuse-lite": "^1.0.30001809", + "electron-to-chromium": "^1.5.402", + "node-releases": "^2.0.53", + "update-browserslist-db": "^1.3.0" + }, + "bin": { + "browserslist": "cli.js" + }, + "engines": { + "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7" + } + }, + "node_modules/bser": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz", + "integrity": "sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "node-int64": "^0.4.0" + } + }, + "node_modules/buffer-from": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz", + "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/bundle-name": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz", + "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "run-applescript": "^7.0.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/caching-transform": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/caching-transform/-/caching-transform-4.0.0.tgz", + "integrity": "sha512-kpqOvwXnjjN44D89K5ccQC+RUrsy7jB/XLlRrx0D7/2HNcTPqzsb6XgYoErwko6QsV184CA2YgS1fxDiiDZMWA==", + "dev": true, + "license": "MIT", + "dependencies": { + "hasha": "^5.0.0", + "make-dir": "^3.0.0", + "package-hash": "^4.0.0", + "write-file-atomic": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/caching-transform/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/caching-transform/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/caching-transform/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/caching-transform/node_modules/write-file-atomic": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz", + "integrity": "sha512-AvHcyZ5JnSfq3ioSyjrBkH9yW4m7Ayk8/9My/DD9onKeu/94fwrMocemO2QAJFAlnnDN+ZDS+ZjAR5ua1/PV/Q==", + "dev": true, + "license": "ISC", + "dependencies": { + "imurmurhash": "^0.1.4", + "is-typedarray": "^1.0.0", + "signal-exit": "^3.0.2", + "typedarray-to-buffer": "^3.1.5" + } + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/callsites": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", + "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/camelcase": { + "version": "5.3.1", + "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz", + "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/caniuse-lite": { + "version": "1.0.30001809", + "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001809.tgz", + "integrity": "sha512-xxWVywk6a6Arlk+hymeycyn/VgqEfLDxupvhH/xiY5SJ/18kmi9o6MiO320DCUzypORHLtvh0I4i04tUhCNHNQ==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/caniuse-lite" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "CC-BY-4.0" + }, + "node_modules/chai": { + "version": "6.2.2", + "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", + "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/chalk": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz", + "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.1.0", + "supports-color": "^7.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" + } + }, + "node_modules/chalk/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/char-regex": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/char-regex/-/char-regex-1.0.2.tgz", + "integrity": "sha512-kWWXztvZ5SBQV+eRgKFeh8q5sLuZY2+8WUIzlxWVTg+oGwY14qylx1KbKzHd8P6ZYkAg0xyIDU9JMHhyJMZ1jw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + } + }, + "node_modules/check-error": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/check-error/-/check-error-2.1.3.tgz", + "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 16" + } + }, + "node_modules/chokidar": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", + "integrity": "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==", + "dev": true, + "license": "MIT", + "dependencies": { + "readdirp": "^4.0.1" + }, + "engines": { + "node": ">= 14.16.0" + }, + "funding": { + "url": "https://paulmillr.com/funding/" + } + }, + "node_modules/ci-info": { + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/ci-info/-/ci-info-4.4.0.tgz", + "integrity": "sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/sibiraj-s" + } + ], + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/cjs-module-lexer": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.2.1.tgz", + "integrity": "sha512-Ca8swihM+/4yKecYHY52kgJd300hi2lADU/a1RxNTRe+RJ9jvqQlESpbz9DnG9mowez8qwXHB8qYdIUw9e+F5Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/clean-stack": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz", + "integrity": "sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/cliui": { + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz", + "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.2.0", + "strip-ansi": "^6.0.1", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/cliui/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/cliui/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/cliui/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/cliui/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/cliui/node_modules/wrap-ansi": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/clsx": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", + "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/co": { + "version": "4.6.0", + "resolved": "https://registry.npmjs.org/co/-/co-4.6.0.tgz", + "integrity": "sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==", + "dev": true, + "license": "MIT", + "engines": { + "iojs": ">= 1.0.0", + "node": ">= 0.12.0" + } + }, + "node_modules/collect-v8-coverage": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/collect-v8-coverage/-/collect-v8-coverage-1.0.3.tgz", + "integrity": "sha512-1L5aqIkwPfiodaMgQunkF1zRhNqifHBmtbbbxcr6yVxxBnliw4TDOW6NxpO8DJLgJ16OT+Y4ztZqP6p/FtXnAw==", + "dev": true, + "license": "MIT" + }, + "node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "dev": true, + "license": "MIT" + }, + "node_modules/combined-stream": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz", + "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==", + "dev": true, + "license": "MIT", + "dependencies": { + "delayed-stream": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/commander": { + "version": "12.1.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz", + "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/commondir": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz", + "integrity": "sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg==", + "dev": true, + "license": "MIT" + }, + "node_modules/concat-map": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==", + "dev": true, + "license": "MIT" + }, + "node_modules/convert-source-map": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", + "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==", + "dev": true, + "license": "MIT" + }, + "node_modules/cookie": { + "version": "0.7.2", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", + "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cross-spawn": { + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.1.0", + "shebang-command": "^2.0.0", + "which": "^2.0.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/css.escape": { + "version": "1.5.1", + "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz", + "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==", + "dev": true, + "license": "MIT" + }, + "node_modules/cwd": { + "version": "0.10.0", + "resolved": "https://registry.npmjs.org/cwd/-/cwd-0.10.0.tgz", + "integrity": "sha512-YGZxdTTL9lmLkCUTpg4j0zQ7IhRB5ZmqNBbGCl3Tg6MP/d5/6sY7L5mmTjzbc6JKgVZYiqTQTNhPFsbXNGlRaA==", + "dev": true, + "license": "MIT", + "dependencies": { + "find-pkg": "^0.1.2", + "fs-exists-sync": "^0.1.0" + }, + "engines": { + "node": ">=0.8" + } + }, + "node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/decamelize": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz", + "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/dedent": { + "version": "1.7.2", + "resolved": "https://registry.npmjs.org/dedent/-/dedent-1.7.2.tgz", + "integrity": "sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "babel-plugin-macros": "^3.1.0" + }, + "peerDependenciesMeta": { + "babel-plugin-macros": { + "optional": true + } + } + }, + "node_modules/dedent-js": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dedent-js/-/dedent-js-1.0.1.tgz", + "integrity": "sha512-OUepMozQULMLUmhxS95Vudo0jb0UchLimi3+pQ2plj61Fcy8axbP9hbiD4Sz6DPqn6XG3kfmziVfQ1rSys5AJQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/deep-eql": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-5.0.2.tgz", + "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/deepmerge": { + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", + "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/default-browser": { + "version": "5.5.1", + "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.1.tgz", + "integrity": "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "bundle-name": "^4.1.0", + "default-browser-id": "^5.0.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/default-browser-id": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz", + "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/default-require-extensions": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-3.0.1.tgz", + "integrity": "sha512-eXTJmRbm2TIt9MgWTsOH1wEuhew6XGZcMeGKCtLedIg/NCsg1iBePXkceTdK4Fii7pzmN9tGsZhKzZ4h7O/fxw==", + "dev": true, + "license": "MIT", + "dependencies": { + "strip-bom": "^4.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/define-lazy-prop": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz", + "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/delayed-stream": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz", + "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.4.0" + } + }, + "node_modules/dequal": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", + "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/detect-libc": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", + "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=8" + } + }, + "node_modules/detect-newline": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz", + "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/devalue": { + "version": "5.9.0", + "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.0.tgz", + "integrity": "sha512-RWrqdArjvPbsATEhOPUo6Wndc/iWnkWKlhIrdlF3zMMYo/c3CVtoaVAyLtWxz5h8nSlkHzxnzV2uLydPXmtF+A==", + "dev": true, + "license": "MIT" + }, + "node_modules/diffable-html": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/diffable-html/-/diffable-html-4.1.0.tgz", + "integrity": "sha512-++kyNek+YBLH8cLXS+iTj/Hiy2s5qkRJEJ8kgu/WHbFrVY2vz9xPFUT+fii2zGF0m1CaojDlQJjkfrCt7YWM1g==", + "dev": true, + "license": "MIT", + "dependencies": { + "htmlparser2": "^3.9.2" + } + }, + "node_modules/dom-accessibility-api": { + "version": "0.5.16", + "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz", + "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==", + "dev": true, + "license": "MIT" + }, + "node_modules/dom-serializer": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz", + "integrity": "sha512-2/xPb3ORsQ42nHYiSunXkDjPLBaEj/xTwUO4B7XCZQTRk7EBtTOPaygh10YAAh2OI1Qrp6NWfpAhzswj0ydt9g==", + "dev": true, + "license": "MIT", + "dependencies": { + "domelementtype": "^2.0.1", + "entities": "^2.0.0" + } + }, + "node_modules/dom-serializer/node_modules/domelementtype": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz", + "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/fb55" + } + ], + "license": "BSD-2-Clause" + }, + "node_modules/dom-serializer/node_modules/entities": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz", + "integrity": "sha512-p92if5Nz619I0w+akJrLZH0MX0Pb5DX39XOwQTtXSdQQOaYH03S1uIQp4mhOZtAXrxq4ViO67YTiLBo2638o9A==", + "dev": true, + "license": "BSD-2-Clause", + "funding": { + "url": "https://github.com/fb55/entities?sponsor=1" + } + }, + "node_modules/domelementtype": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz", + "integrity": "sha512-BSKB+TSpMpFI/HOxCNr1O8aMOTZ8hT3pM3GQ0w/mWRmkhEDSFJkkyzz4XQsBV44BChwGkrDfMyjVD0eA2aFV3w==", + "dev": true, + "license": "BSD-2-Clause" + }, + "node_modules/domhandler": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz", + "integrity": "sha512-JiK04h0Ht5u/80fdLMCEmV4zkNh2BcoMFBmZ/91WtYZ8qVXSKjiw7fXMgFPnHcSZgOo3XdinHvmnDUeMf5R4wA==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "domelementtype": "1" + } + }, + "node_modules/domutils": { + "version": "1.7.0", + "resolved": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz", + "integrity": "sha512-Lgd2XcJ/NjEw+7tFvfKxOzCYKZsdct5lczQ2ZaQY8Djz7pfAD3Gbp8ySJWtreII/vDlMVmxwa6pHmdxIYgttDg==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "dom-serializer": "0", + "domelementtype": "1" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "dev": true, + "license": "MIT" + }, + "node_modules/electron-to-chromium": { + "version": "1.5.412", + "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.412.tgz", + "integrity": "sha512-z4rMe3esBzlzovKHj4gxJnsCGZRK5l4baUvm+gCGJBPE+gsyUMKsuU9tnEUtI1dOebXz1ytAPGjvXhmQ7rIPwA==", + "dev": true, + "license": "ISC" + }, + "node_modules/emittery": { + "version": "0.13.1", + "resolved": "https://registry.npmjs.org/emittery/-/emittery-0.13.1.tgz", + "integrity": "sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sindresorhus/emittery?sponsor=1" + } + }, + "node_modules/emoji-regex": { + "version": "9.2.2", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", + "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", + "dev": true, + "license": "MIT" + }, + "node_modules/entities": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz", + "integrity": "sha512-f2LZMYl1Fzu7YSBKg+RoROelpOaNrcGmE9AZubeDfrCEia483oW4MI4VyFd5VNHIgQ/7qm1I0wUHK1eJnn2y2w==", + "dev": true, + "license": "BSD-2-Clause" + }, + "node_modules/environment": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/environment/-/environment-1.1.0.tgz", + "integrity": "sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/error-ex": { + "version": "1.3.4", + "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz", + "integrity": "sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-arrayish": "^0.2.1" + } + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-module-lexer": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.1.tgz", + "integrity": "sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==", + "dev": true, + "license": "MIT" + }, + "node_modules/es-object-atoms": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz", + "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-set-tostringtag": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz", + "integrity": "sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.6", + "has-tostringtag": "^1.0.2", + "hasown": "^2.0.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es6-error": { + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/es6-error/-/es6-error-4.1.1.tgz", + "integrity": "sha512-Um/+FxMr9CISWh0bi5Zv0iOD+4cFh5qLeks1qhAopKVAJw3drgKbKySikp7wGhDL0HPeaja0P5ULZrxLkniUVg==", + "dev": true, + "license": "MIT" + }, + "node_modules/esbuild": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz", + "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "bin": { + "esbuild": "bin/esbuild" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "@esbuild/aix-ppc64": "0.28.2", + "@esbuild/android-arm": "0.28.2", + "@esbuild/android-arm64": "0.28.2", + "@esbuild/android-x64": "0.28.2", + "@esbuild/darwin-arm64": "0.28.2", + "@esbuild/darwin-x64": "0.28.2", + "@esbuild/freebsd-arm64": "0.28.2", + "@esbuild/freebsd-x64": "0.28.2", + "@esbuild/linux-arm": "0.28.2", + "@esbuild/linux-arm64": "0.28.2", + "@esbuild/linux-ia32": "0.28.2", + "@esbuild/linux-loong64": "0.28.2", + "@esbuild/linux-mips64el": "0.28.2", + "@esbuild/linux-ppc64": "0.28.2", + "@esbuild/linux-riscv64": "0.28.2", + "@esbuild/linux-s390x": "0.28.2", + "@esbuild/linux-x64": "0.28.2", + "@esbuild/netbsd-arm64": "0.28.2", + "@esbuild/netbsd-x64": "0.28.2", + "@esbuild/openbsd-arm64": "0.28.2", + "@esbuild/openbsd-x64": "0.28.2", + "@esbuild/openharmony-arm64": "0.28.2", + "@esbuild/sunos-x64": "0.28.2", + "@esbuild/win32-arm64": "0.28.2", + "@esbuild/win32-ia32": "0.28.2", + "@esbuild/win32-x64": "0.28.2" + } + }, + "node_modules/escalade": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz", + "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/escape-string-regexp": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz", + "integrity": "sha512-UpzcLCXolUWcNu5HtVMHYdXJjArjsF9C0aNnquZYY4uW/Vu0miy5YoWvbV345HauVvcAUnpRuhMMcqTcGOY2+w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/esm-env": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz", + "integrity": "sha512-Epxrv+Nr/CaL4ZcFGPJIYLWFom+YeV1DqMLHJoEd9SYRxNbaFruBwfEX/kkHUJf55j2+TUbmDcmuilbP1TmXHA==", + "dev": true, + "license": "MIT" + }, + "node_modules/esprima": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", + "dev": true, + "license": "BSD-2-Clause", + "bin": { + "esparse": "bin/esparse.js", + "esvalidate": "bin/esvalidate.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/esrap": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.3.0.tgz", + "integrity": "sha512-GQ/7RN8uOtEfNpzZzBMTzW9JBcX42oaSVtPzdF+6cEL8pqIL094iUpr9jzYGn4O4P/1S60dJ6izyT8F4LYARng==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.4.15" + }, + "peerDependencies": { + "@typescript-eslint/types": "^8.2.0" + }, + "peerDependenciesMeta": { + "@typescript-eslint/types": { + "optional": true + } + } + }, + "node_modules/estree-walker": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz", + "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0" + } + }, + "node_modules/execa": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz", + "integrity": "sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==", + "dev": true, + "license": "MIT", + "dependencies": { + "cross-spawn": "^7.0.3", + "get-stream": "^6.0.0", + "human-signals": "^2.1.0", + "is-stream": "^2.0.0", + "merge-stream": "^2.0.0", + "npm-run-path": "^4.0.1", + "onetime": "^5.1.2", + "signal-exit": "^3.0.3", + "strip-final-newline": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sindresorhus/execa?sponsor=1" + } + }, + "node_modules/execa/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/exit": { + "version": "0.1.2", + "resolved": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz", + "integrity": "sha512-Zk/eNKV2zbjpKzrsQ+n1G6poVbErQxJ0LBOJXaKZ1EViLzH+hrLu9cdXI4zw9dBQJslwBEpbQ2P1oS7nDxs6jQ==", + "dev": true, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/exit-x": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/exit-x/-/exit-x-0.2.2.tgz", + "integrity": "sha512-+I6B/IkJc1o/2tiURyz/ivu/O0nKNEArIUB5O7zBrlDVJr22SCLH3xTeEry428LvFhRzIA1g8izguxJ/gbNcVQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/expand-tilde": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz", + "integrity": "sha512-rtmc+cjLZqnu9dSYosX9EWmSJhTwpACgJQTfj4hgg2JjOD/6SIQalZrt4a3aQeh++oNxkazcaxrhPUj6+g5G/Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "os-homedir": "^1.0.1" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/expect": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/expect/-/expect-30.4.1.tgz", + "integrity": "sha512-PMARsyh/JtqC20HoGqlFcIlQAyqUtW4PlI1rup1uhYJtKuwAjbvWi3GQMAn+STdHum/dk8xrKfUM1+5SAwpolA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/expect-utils": "30.4.1", + "@jest/get-type": "30.1.0", + "jest-matcher-utils": "30.4.1", + "jest-message-util": "30.4.1", + "jest-mock": "30.4.1", + "jest-util": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/expect-playwright": { + "version": "0.8.0", + "resolved": "https://registry.npmjs.org/expect-playwright/-/expect-playwright-0.8.0.tgz", + "integrity": "sha512-+kn8561vHAY+dt+0gMqqj1oY+g5xWrsuGMk4QGxotT2WS545nVqqjs37z6hrYfIuucwqthzwJfCJUEYqixyljg==", + "deprecated": "⚠️ The 'expect-playwright' package is deprecated. The Playwright core assertions (via @playwright/test) now cover the same functionality. Please migrate to built-in expect. See https://playwright.dev/docs/test-assertions for migration.", + "dev": true, + "license": "MIT" + }, + "node_modules/expect-type": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz", + "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=12.0.0" + } + }, + "node_modules/fast-json-stable-stringify": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz", + "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==", + "dev": true, + "license": "MIT" + }, + "node_modules/fb-watchman": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz", + "integrity": "sha512-p5161BqbuCaSnB8jIbzQHOlpgsPmK5rJVDfDKO91Axs5NC1uu3HRQm6wt9cd9/+GtQQIO53JdGXXoyDpTAsgYA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "bser": "2.1.1" + } + }, + "node_modules/fdir": { + "version": "6.5.0", + "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", + "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12.0.0" + }, + "peerDependencies": { + "picomatch": "^3 || ^4" + }, + "peerDependenciesMeta": { + "picomatch": { + "optional": true + } + } + }, + "node_modules/find-cache-dir": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.2.tgz", + "integrity": "sha512-wXZV5emFEjrridIgED11OoUKLxiYjAcqot/NJdAkOhlJ+vGzwhOAfcG5OX1jP+S0PcjEn8bdMJv+g2jwQ3Onig==", + "dev": true, + "license": "MIT", + "dependencies": { + "commondir": "^1.0.1", + "make-dir": "^3.0.2", + "pkg-dir": "^4.1.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/avajs/find-cache-dir?sponsor=1" + } + }, + "node_modules/find-cache-dir/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/find-cache-dir/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/find-file-up": { + "version": "0.1.3", + "resolved": "https://registry.npmjs.org/find-file-up/-/find-file-up-0.1.3.tgz", + "integrity": "sha512-mBxmNbVyjg1LQIIpgO8hN+ybWBgDQK8qjht+EbrTCGmmPV/sc7RF1i9stPTD6bpvXZywBdrwRYxhSdJv867L6A==", + "dev": true, + "license": "MIT", + "dependencies": { + "fs-exists-sync": "^0.1.0", + "resolve-dir": "^0.1.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/find-pkg": { + "version": "0.1.2", + "resolved": "https://registry.npmjs.org/find-pkg/-/find-pkg-0.1.2.tgz", + "integrity": "sha512-0rnQWcFwZr7eO0513HahrWafsc3CTFioEB7DRiEYCUM/70QXSY8f3mCST17HXLcPvEhzH/Ty/Bxd72ZZsr/yvw==", + "dev": true, + "license": "MIT", + "dependencies": { + "find-file-up": "^0.1.2" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/find-process": { + "version": "1.4.11", + "resolved": "https://registry.npmjs.org/find-process/-/find-process-1.4.11.tgz", + "integrity": "sha512-mAOh9gGk9WZ4ip5UjV0o6Vb4SrfnAmtsFNzkMRH9HQiFXVQnDyQFrSHTK5UoG6E+KV+s+cIznbtwpfN41l2nFA==", + "dev": true, + "license": "MIT", + "dependencies": { + "chalk": "~4.1.2", + "commander": "^12.1.0", + "loglevel": "^1.9.2" + }, + "bin": { + "find-process": "bin/find-process.js" + } + }, + "node_modules/find-up": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz", + "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==", + "dev": true, + "license": "MIT", + "dependencies": { + "locate-path": "^5.0.0", + "path-exists": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/follow-redirects": { + "version": "1.16.0", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz", + "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==", + "dev": true, + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/RubenVerborgh" + } + ], + "license": "MIT", + "engines": { + "node": ">=4.0" + }, + "peerDependenciesMeta": { + "debug": { + "optional": true + } + } + }, + "node_modules/foreground-child": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz", + "integrity": "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==", + "dev": true, + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.6", + "signal-exit": "^4.0.1" + }, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/form-data": { + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", + "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "asynckit": "^0.4.0", + "combined-stream": "^1.0.8", + "es-set-tostringtag": "^2.1.0", + "hasown": "^2.0.4", + "mime-types": "^2.1.35" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/fromentries": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/fromentries/-/fromentries-1.3.2.tgz", + "integrity": "sha512-cHEpEQHUg0f8XdtZCc2ZAhrHzKzT0MrFUTcvx+hfxYu7rGMDc5SKoXFh+n4YigxsHXRzc6OrCshdR1bWH6HHyg==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/fs-exists-sync": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz", + "integrity": "sha512-cR/vflFyPZtrN6b38ZyWxpWdhlXrzZEBawlpBQMq7033xVY7/kg0GDMBK5jg8lDYQckdJ5x/YC88lM3C7VMsLg==", "dev": true, "license": "MIT", - "optional": true, - "dependencies": { - "@emnapi/wasi-threads": "1.2.2", - "tslib": "^2.4.0" + "engines": { + "node": ">=0.10.0" } }, - "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/runtime": { - "version": "1.11.0", - "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.0.tgz", - "integrity": "sha512-55coeOFKHv1ywEcUXJtWU5f+Jr/W5tZDvZig8DLKSwUN1JpROQ4rk/SNOQiFWmaR/VKF4zuFyW1B8JduOSv6Pg==", + "node_modules/fs.realpath": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==", "dev": true, - "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" - } + "license": "ISC" }, - "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/wasi-threads": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz", - "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==", + "node_modules/fsevents": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", + "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", "dev": true, + "hasInstallScript": true, "license": "MIT", "optional": true, - "dependencies": { - "tslib": "^2.4.0" + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" } }, - "node_modules/@oxc-resolver/binding-win32-arm64-msvc": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-11.21.2.tgz", - "integrity": "sha512-iWx25CBEgH49iE9q5coEGI/jb1jl5kkCY9z6U5Og67xCkQ/WFMDc2J5U78+AE91SUxM2NqSLhJC8/PLfWnImww==", - "cpu": [ - "arm64" - ], + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ] + "funding": { + "url": "https://github.com/sponsors/ljharb" + } }, - "node_modules/@oxc-resolver/binding-win32-x64-msvc": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-x64-msvc/-/binding-win32-x64-msvc-11.21.2.tgz", - "integrity": "sha512-VPoCAhKvCQTlG7vxqaBXcmuvbh77BfnGXj8g0pbvVXpm1F/R8rDVwqIWcEbMzrI1JvJlm8v7T9uMVQb6UctMRg==", - "cpu": [ - "x64" - ], + "node_modules/gensync": { + "version": "1.0.0-beta.2", + "resolved": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz", + "integrity": "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ] + "engines": { + "node": ">=6.9.0" + } }, - "node_modules/@polka/url": { - "version": "1.0.0-next.29", - "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", - "integrity": "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==", + "node_modules/get-caller-file": { + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz", + "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==", "dev": true, - "license": "MIT" + "license": "ISC", + "engines": { + "node": "6.* || 8.* || >= 10.*" + } }, - "node_modules/@rolldown/binding-android-arm64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.2.tgz", - "integrity": "sha512-l7x215OGvo1s52JWmR8U/DAVzEDWBCIbTm28aeJV/WDTSHgcKXaZTuBT0hJMs5NggilfJTW3clZVvd24yfKJxA==", - "cpu": [ - "arm64" - ], + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-darwin-arm64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.2.tgz", - "integrity": "sha512-9u9Xv6c1AJZT0FfwH5vrMG5Jjcwhc1MlyrPu0XfTqkzsmqfks2M6W/o5XwAJgVVN/jHpqqngC1WevHKKTIUtIA==", - "cpu": [ - "arm64" - ], + "node_modules/get-package-type": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz", + "integrity": "sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8.0.0" } }, - "node_modules/@rolldown/binding-darwin-x64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.2.tgz", - "integrity": "sha512-9W1mbGZAfW3oqd85bhBkmpyHCCzL1TeG/zFFP3vg7b0rlly8cxOcre5nXwz+LHazCwac2MNWgPdPCHndABjpWQ==", - "cpu": [ - "x64" - ], + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" } }, - "node_modules/@rolldown/binding-freebsd-x64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.2.tgz", - "integrity": "sha512-0p1lhiCSCyaerFwtrdZQUx7NqGk6LQnaRKWX7tFQqwQgvX0rjM15cIkm3pax1UpEakK14C4mOxx/jSqCBdBRqQ==", - "cpu": [ - "x64" - ], + "node_modules/get-stream": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz", + "integrity": "sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "freebsd" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@rolldown/binding-linux-arm-gnueabihf": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.2.tgz", - "integrity": "sha512-e+cOJXrJ2L3zx6YzqPg+f6Wbk3V1cKB8bOhbaYdVYN3DdquzNdRAmrbETz1qnt5yp/c7JNlNjmITiA2cVneQ7w==", - "cpu": [ - "arm" - ], + "node_modules/glob": { + "version": "10.5.0", + "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz", + "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "foreground-child": "^3.1.0", + "jackspeak": "^3.1.2", + "minimatch": "^9.0.4", + "minipass": "^7.1.2", + "package-json-from-dist": "^1.0.0", + "path-scurry": "^1.11.1" + }, + "bin": { + "glob": "dist/esm/bin.mjs" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/global-modules": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz", + "integrity": "sha512-JeXuCbvYzYXcwE6acL9V2bAOeSIGl4dD+iwLY9iUx2VBJJ80R18HCn+JCwHM9Oegdfya3lEkGCdaRkSyc10hDA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "global-prefix": "^0.1.4", + "is-windows": "^0.2.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=0.10.0" } }, - "node_modules/@rolldown/binding-linux-arm64-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.2.tgz", - "integrity": "sha512-JsSMsj6sNat/MuhG5fnBD7QgbtpHKVe30x5/bAVirDHdhoQRXJkF6xc0Jqk8O4fiCUQAzMOoH9wZi3m60c8wtg==", - "cpu": [ - "arm64" - ], + "node_modules/global-prefix": { + "version": "0.1.5", + "resolved": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz", + "integrity": "sha512-gOPiyxcD9dJGCEArAhF4Hd0BAqvAe/JzERP7tYumE4yIkmIedPUVXcJFWbV3/p/ovIIvKjkrTk+f1UVkq7vvbw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "homedir-polyfill": "^1.0.0", + "ini": "^1.3.4", + "is-windows": "^0.2.0", + "which": "^1.2.12" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=0.10.0" } }, - "node_modules/@rolldown/binding-linux-arm64-musl": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.2.tgz", - "integrity": "sha512-B5G/zJdHaoJn9vD50eGHWkiWfmq8Uhi3IiLPJTzmZTrAalk1bztUikSXo0qga18ibE0IXboyeMUnhPjhAJ45wQ==", - "cpu": [ - "arm64" - ], + "node_modules/global-prefix/node_modules/which": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz", + "integrity": "sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "which": "bin/which" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-linux-ppc64-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.2.tgz", - "integrity": "sha512-6mC/awzKka8W6EoekjegpfGkjz8jXWDX63pqu/HYVpyKtZfu65Jsh4QAH3Kej3CAv/c1oGX7psTmFEbr0mDxLA==", - "cpu": [ - "ppc64" - ], + "node_modules/graceful-fs": { + "version": "4.2.11", + "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", + "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/has-flag": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", + "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" } }, - "node_modules/@rolldown/binding-linux-s390x-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.2.tgz", - "integrity": "sha512-412MX9fJLdA1IK28EZnc8jYv2HRTleOZgfLQumJ5zy7OeJLZlg/CETwFaXjNmGVxG51cFHpKLqb5LKvBC+HsHA==", - "cpu": [ - "s390x" - ], + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-linux-x64-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.2.tgz", - "integrity": "sha512-Q/+HI/ToJafZ1iCqGgVQXUEkIjufHCTF0gBQ2a5o3cg7GJ2h0qyq3nvvSmU+bGda2/7ygXpTY4TM6gO9OhQ0ZA==", - "cpu": [ - "x64" - ], + "node_modules/has-tostringtag": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz", + "integrity": "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "has-symbols": "^1.0.3" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-linux-x64-musl": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.2.tgz", - "integrity": "sha512-ZKp/w41n6wCvxzxQHtQSbuphfX3Y4cCvbjkKHusrLx4lh+JWLTU7StSltO/DKARISzbj368d+qUaCjI8K2wzXw==", - "cpu": [ - "x64" - ], + "node_modules/hasha": { + "version": "5.2.2", + "resolved": "https://registry.npmjs.org/hasha/-/hasha-5.2.2.tgz", + "integrity": "sha512-Hrp5vIK/xr5SkeN2onO32H0MgNZ0f17HRNH39WfL0SYUNOTZ5Lz1TJ8Pajo/87dYGEFlLMm7mIc/k/s6Bvz9HQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "is-stream": "^2.0.0", + "type-fest": "^0.8.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@rolldown/binding-openharmony-arm64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.2.tgz", - "integrity": "sha512-pxE6xD4KS3eAROkKK5yrhB9/3+vhlhVGMvlQLbdpzrBGDbKrnzx3RLwPaHvasLo6jgaiBLn7e04Df9C4tYhjmA==", - "cpu": [ - "arm64" - ], + "node_modules/hasha/node_modules/type-fest": { + "version": "0.8.1", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz", + "integrity": "sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==", "dev": true, - "license": "MIT", - "optional": true, - "os": [ - "openharmony" - ], + "license": "(MIT OR CC0-1.0)", "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" } }, - "node_modules/@rolldown/binding-win32-arm64-msvc": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.2.tgz", - "integrity": "sha512-4MqEue5re+xIZzAWsB8sj0P1kqZySWqIuN4t6QaIO/YA6SFwySOLruvWQFzfmqk8LBK2P30KCSJwf6mJCZZ5/A==", - "cpu": [ - "arm64" - ], + "node_modules/hasown": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "function-bind": "^1.1.2" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" } }, - "node_modules/@rolldown/binding-win32-x64-msvc": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.2.tgz", - "integrity": "sha512-NweNxxD0Nf9t8v7kodun45Ijp3EIwYY+uydPP6qBEYvfBqhIjN6dZMzlQja3tqX/aLs3F3Uz+AxDpKgRhpOZQg==", - "cpu": [ - "x64" - ], + "node_modules/homedir-polyfill": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.3.tgz", + "integrity": "sha512-eSmmWE5bZTK2Nou4g0AI3zZ9rswp7GRKoKXS1BLUkvPviOqs4YTN1djQIqrXy9k5gEtdLPy86JjRwsNM9tnDcA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "parse-passwd": "^1.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=0.10.0" } }, - "node_modules/@rolldown/pluginutils": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", - "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "node_modules/html-escaper": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz", + "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==", "dev": true, "license": "MIT" }, - "node_modules/@standard-schema/spec": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", - "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "node_modules/htmlparser2": { + "version": "3.10.1", + "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz", + "integrity": "sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "domelementtype": "^1.3.1", + "domhandler": "^2.3.0", + "domutils": "^1.5.1", + "entities": "^1.1.1", + "inherits": "^2.0.1", + "readable-stream": "^3.1.1" + } }, - "node_modules/@storybook/addon-a11y": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/addon-a11y/-/addon-a11y-10.5.10.tgz", - "integrity": "sha512-RpRQV5xUbrl6hCiNrd5FSMIo6pnRZ0VZxWvEW/ASLcreGkKUW5jl2AeLCe5YROE2i80s/dU+6VPzOYKrwWNFbQ==", + "node_modules/https-proxy-agent": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==", "dev": true, "license": "MIT", "dependencies": { - "@storybook/global": "^5.0.0", - "axe-core": "^4.2.0" + "agent-base": "6", + "debug": "4" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" - }, - "peerDependencies": { - "storybook": "^10.5.10" + "engines": { + "node": ">= 6" } }, - "node_modules/@storybook/builder-vite": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-10.5.10.tgz", - "integrity": "sha512-O4GgIP0tKLRueom3EmU3OaBUHKjNYj+jkOvmTIkn3PYTiWVkCuHqSKEs4ADvRyaQuLH+peHhFe4JtkNC9KbtrQ==", + "node_modules/human-signals": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz", + "integrity": "sha512-B4FFZ6q/T2jhhksgkbEW3HBvWIfDW85snkQgawt07S7J5QXTk6BkNV+0yAeZrM5QpMAdYlocGoljn0sJ/WQkFw==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=10.17.0" + } + }, + "node_modules/import-local": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/import-local/-/import-local-3.2.0.tgz", + "integrity": "sha512-2SPlun1JUPWoM6t3F0dw0FkCF/jWY8kttcY4f599GLTSjh2OCuuhdTkJQsEcZzBqbXZGKMK2OqW1oZsjtf/gQA==", "dev": true, "license": "MIT", "dependencies": { - "@storybook/csf-plugin": "10.5.10", - "ts-dedent": "^2.0.0" + "pkg-dir": "^4.2.0", + "resolve-cwd": "^3.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" + "bin": { + "import-local-fixture": "fixtures/cli.js" }, - "peerDependencies": { - "storybook": "^10.5.10", - "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@storybook/csf-plugin": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-10.5.10.tgz", - "integrity": "sha512-TaCLBrqVEr767+w58QDotDUiCTuE5cyRJuRcDlsKQyUIyGBv+lYD3lu8wBiVCYxgIjB/gu9HmqiC+0yx1rHzaw==", + "node_modules/imurmurhash": { + "version": "0.1.4", + "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz", + "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.8.19" + } + }, + "node_modules/indent-string": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", + "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", "dev": true, "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/inflight": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==", + "deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.", + "dev": true, + "license": "ISC", "dependencies": { - "unplugin": "^2.3.5" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" + "once": "^1.3.0", + "wrappy": "1" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/ini": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", + "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", + "dev": true, + "license": "ISC" + }, + "node_modules/is-arrayish": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz", + "integrity": "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==", + "dev": true, + "license": "MIT" + }, + "node_modules/is-docker": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz", + "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==", + "dev": true, + "license": "MIT", + "bin": { + "is-docker": "cli.js" }, - "peerDependencies": { - "esbuild": "*", - "rollup": "*", - "storybook": "^10.5.10", - "vite": "*", - "webpack": "*" + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" }, - "peerDependenciesMeta": { - "esbuild": { - "optional": true - }, - "rollup": { - "optional": true - }, - "vite": { - "optional": true - }, - "webpack": { - "optional": true - } + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@storybook/global": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/@storybook/global/-/global-5.0.0.tgz", - "integrity": "sha512-FcOqPAXACP0I3oJ/ws6/rrPT9WGhu915Cg8D02a9YxLo0DE9zI+a9A5gRGvmQ09fiWPukqI8ZAEoQEdWUKMQdQ==", + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", "dev": true, - "license": "MIT" + "license": "MIT", + "engines": { + "node": ">=8" + } }, - "node_modules/@storybook/icons": { + "node_modules/is-generator-fn": { "version": "2.1.0", - "resolved": "https://registry.npmjs.org/@storybook/icons/-/icons-2.1.0.tgz", - "integrity": "sha512-Fxh9vYpX9bQqFeHRiY8h2ApeRGDzRSMLwJwNZ/AIRqnyOKHxRKL+yFe+ctEkVJmuptRE9u1Hrn8ZZNHyfDKKNg==", + "resolved": "https://registry.npmjs.org/is-generator-fn/-/is-generator-fn-2.1.0.tgz", + "integrity": "sha512-cTIB4yPYL/Grw0EaSzASzg6bBy9gqCofvWN8okThAYIxKJZC+udlRAmGbM0XLeniEJSs8uEgHPGuHSe1XsOLSQ==", "dev": true, "license": "MIT", - "peerDependencies": { - "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" + "engines": { + "node": ">=6" } }, - "node_modules/@storybook/svelte": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/svelte/-/svelte-10.5.10.tgz", - "integrity": "sha512-jSEv1q5fJYTrhz7/DBYNc5gMmRJ8SyyyMikSvN4S6juuS0eJTZWGd62UpDH3ClfT/TQmTjTJH4HeEnbzJ+VrCA==", + "node_modules/is-inside-container": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz", + "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==", "dev": true, "license": "MIT", "dependencies": { - "ts-dedent": "^2.0.0", - "type-fest": "^5.6.0" + "is-docker": "^3.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" + "bin": { + "is-inside-container": "cli.js" }, - "peerDependencies": { - "storybook": "^10.5.10", - "svelte": "^5.0.0" + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@storybook/svelte-vite": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/svelte-vite/-/svelte-vite-10.5.10.tgz", - "integrity": "sha512-yLqceMBE89p0L9vf9y6zE0ELeRxwfAU7ci3Hry7NEZkxQ4aYsuClUqCmlCLNrAI7nvoVK8v6fp82KgCcods95A==", + "node_modules/is-reference": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.3.tgz", + "integrity": "sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==", "dev": true, "license": "MIT", "dependencies": { - "@storybook/builder-vite": "10.5.10", - "@storybook/svelte": "10.5.10", - "magic-string": "^0.30.0", - "svelte2tsx": "^0.7.55", - "typescript": "^4.9.4 || ^5.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" - }, - "peerDependencies": { - "@sveltejs/vite-plugin-svelte": "^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0", - "storybook": "^10.5.10", - "svelte": "^5.0.0", - "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + "@types/estree": "^1.0.6" } - }, - "node_modules/@storybook/sveltekit": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/sveltekit/-/sveltekit-10.5.10.tgz", - "integrity": "sha512-sPHfTp1yitR+kftQV/0a7dDw3q4/zTXvBeWjgUC8DKkUY7NuFDRUOf00zE086B4vSXSZukf9484VyO+owBkLCQ==", + }, + "node_modules/is-stream": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz", + "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==", "dev": true, "license": "MIT", - "dependencies": { - "@storybook/builder-vite": "10.5.10", - "@storybook/svelte": "10.5.10", - "@storybook/svelte-vite": "10.5.10" + "engines": { + "node": ">=8" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" - }, - "peerDependencies": { - "storybook": "^10.5.10", - "svelte": "^5.0.0", - "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@sveltejs/acorn-typescript": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@sveltejs/acorn-typescript/-/acorn-typescript-1.0.11.tgz", - "integrity": "sha512-LFuZUkjJ9iF7JZye/aG5XM0SFcQ5VyL0oVX4WJ9dc0Va3R3s0OauX1BESVCb+YN/ol8TAfqGDDAQsTG627Y5kw==", + "node_modules/is-typedarray": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz", + "integrity": "sha512-cyA56iCMHAh5CdzjJIa4aohJyeO1YbwLi3Jc35MmRU6poroFjIGZzUzupGiRPOjgHg9TLu43xbpwXk523fMxKA==", "dev": true, - "license": "MIT", - "peerDependencies": { - "acorn": "^8.9.0" - } + "license": "MIT" }, - "node_modules/@sveltejs/adapter-static": { - "version": "3.0.10", - "resolved": "https://registry.npmjs.org/@sveltejs/adapter-static/-/adapter-static-3.0.10.tgz", - "integrity": "sha512-7D9lYFWJmB7zxZyTE/qxjksvMqzMuYrrsyh1f4AlZqeZeACPRySjbC3aFiY55wb1tWUaKOQG9PVbm74JcN2Iew==", + "node_modules/is-windows": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz", + "integrity": "sha512-n67eJYmXbniZB7RF4I/FTjK1s6RPOCTxhYrVYLRaCt3lF0mpWZPKr3T2LSZAqyjQsxR2qMmGYXXzK0YWwcPM1Q==", "dev": true, "license": "MIT", - "peerDependencies": { - "@sveltejs/kit": "^2.0.0" + "engines": { + "node": ">=0.10.0" } }, - "node_modules/@sveltejs/kit": { - "version": "2.70.2", - "resolved": "https://registry.npmjs.org/@sveltejs/kit/-/kit-2.70.2.tgz", - "integrity": "sha512-RzRoRpuR2KXqc5yMO0akQHDZeT4AslOlznGITURsqHaVbtyYP4Wn3eE3gxj9JcDyNYO0crkxhdwFHc+2vkVm6w==", + "node_modules/is-wsl": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz", + "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==", "dev": true, "license": "MIT", "dependencies": { - "@standard-schema/spec": "^1.0.0", - "@sveltejs/acorn-typescript": "^1.0.9", - "@types/cookie": "^0.6.0", - "acorn": "^8.16.0", - "cookie": "^0.6.0", - "devalue": "^5.8.1", - "esm-env": "^1.2.2", - "kleur": "^4.1.5", - "magic-string": "^0.30.5", - "mrmime": "^2.0.0", - "set-cookie-parser": "^3.0.0", - "sirv": "^3.0.0" - }, - "bin": { - "svelte-kit": "svelte-kit.js" + "is-inside-container": "^1.0.0" }, "engines": { - "node": ">=18.13" - }, - "peerDependencies": { - "@opentelemetry/api": "^1.0.0", - "@sveltejs/vite-plugin-svelte": "^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0 || ^7.0.0", - "svelte": "^4.0.0 || ^5.0.0-next.0", - "typescript": "^5.3.3 || ^6.0.0", - "vite": "^5.0.3 || ^6.0.0 || ^7.0.0-beta.0 || ^8.0.0" + "node": ">=16" }, - "peerDependenciesMeta": { - "@opentelemetry/api": { - "optional": true - }, - "typescript": { - "optional": true - } + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@sveltejs/load-config": { - "version": "0.2.3", - "resolved": "https://registry.npmjs.org/@sveltejs/load-config/-/load-config-0.2.3.tgz", - "integrity": "sha512-VT3qmUb8pRV2QrZjd8iAmtg8lf4W0TIjZbvXtz5MKei/q96teWZgGJyyidJzOjzZzvdq616eSRVeMYIQChUTAQ==", + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", "dev": true, - "license": "MIT", + "license": "ISC" + }, + "node_modules/istanbul-lib-coverage": { + "version": "3.2.2", + "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz", + "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==", + "dev": true, + "license": "BSD-3-Clause", "engines": { - "node": ">= 18.0.0" + "node": ">=8" } }, - "node_modules/@sveltejs/vite-plugin-svelte": { - "version": "7.3.0", - "resolved": "https://registry.npmjs.org/@sveltejs/vite-plugin-svelte/-/vite-plugin-svelte-7.3.0.tgz", - "integrity": "sha512-QbRoJyD92e9R0ufeQIWRHrCC0ObcqSv/aBDdrQMoU+sypav3cDx5wytdQ6GLdXjEMO6xjrXGzfkUygng8JMv0A==", + "node_modules/istanbul-lib-hook": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-3.0.0.tgz", + "integrity": "sha512-Pt/uge1Q9s+5VAZ+pCo16TYMWPBIl+oaNIjgLQxcX0itS6ueeaA+pEfThZpH8WxhFgCiEb8sAJY6MdUKgiIWaQ==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "deepmerge": "^4.3.1", - "magic-string": "^1.0.0", - "obug": "^2.1.0", - "vitefu": "^1.1.2" + "append-transform": "^2.0.0" }, "engines": { - "node": "^20.19 || ^22.12 || >=24" - }, - "peerDependencies": { - "svelte": "^5.46.4", - "vite": "^8.0.0-beta.7 || ^8.0.0" + "node": ">=8" } }, - "node_modules/@sveltejs/vite-plugin-svelte/node_modules/magic-string": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.2.0.tgz", - "integrity": "sha512-ptco+HFxTLgjafSLim2LojBSwfg5feBjd+SqyiwdGkzC38UPdZy3zgrHMI2CoTf5fJL38tbHMYWVzIH8BxGqJw==", + "node_modules/istanbul-lib-instrument": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-6.0.3.tgz", + "integrity": "sha512-Vtgk7L/R2JHyyGW07spoFlB8/lpjiOLTjMdms6AFMraYt3BaJauod/NGrfnVG/y4Ix1JEuMRPDPEj2ua+zz1/Q==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.5" - } - }, - "node_modules/@tauri-apps/api": { - "version": "2.11.1", - "resolved": "https://registry.npmjs.org/@tauri-apps/api/-/api-2.11.1.tgz", - "integrity": "sha512-M2FPuYND2m+wh5hfW9ZpSdxMPdEJovPBWwoHJmwUpysTYNHaOkVFN419m/K0LIgjb/7KU2vBgsUepJWugQCvAA==", - "license": "Apache-2.0 OR MIT", - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/tauri" + "@babel/core": "^7.23.9", + "@babel/parser": "^7.23.9", + "@istanbuljs/schema": "^0.1.3", + "istanbul-lib-coverage": "^3.2.0", + "semver": "^7.5.4" + }, + "engines": { + "node": ">=10" } }, - "node_modules/@tauri-apps/cli": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli/-/cli-2.11.4.tgz", - "integrity": "sha512-R8xGtMpwyetawSqm9kYOuMmEqkhUbvcUy8n0aNXIxollKBLESUu5f4Fx+64hgASYm1H+jSWq6jCW6zqTnH6hqQ==", + "node_modules/istanbul-lib-processinfo": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/istanbul-lib-processinfo/-/istanbul-lib-processinfo-2.0.3.tgz", + "integrity": "sha512-NkwHbo3E00oybX6NGJi6ar0B29vxyvNwoC7eJ4G4Yq28UfY758Hgn/heV8VRFhevPED4LXfFz0DQ8z/0kw9zMg==", "dev": true, - "license": "Apache-2.0 OR MIT", - "bin": { - "tauri": "tauri.js" + "license": "ISC", + "dependencies": { + "archy": "^1.0.0", + "cross-spawn": "^7.0.3", + "istanbul-lib-coverage": "^3.2.0", + "p-map": "^3.0.0", + "rimraf": "^3.0.0", + "uuid": "^8.3.2" }, "engines": { - "node": ">= 10" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/tauri" - }, - "optionalDependencies": { - "@tauri-apps/cli-darwin-arm64": "2.11.4", - "@tauri-apps/cli-darwin-x64": "2.11.4", - "@tauri-apps/cli-linux-arm-gnueabihf": "2.11.4", - "@tauri-apps/cli-linux-arm64-gnu": "2.11.4", - "@tauri-apps/cli-linux-arm64-musl": "2.11.4", - "@tauri-apps/cli-linux-riscv64-gnu": "2.11.4", - "@tauri-apps/cli-linux-x64-gnu": "2.11.4", - "@tauri-apps/cli-linux-x64-musl": "2.11.4", - "@tauri-apps/cli-win32-arm64-msvc": "2.11.4", - "@tauri-apps/cli-win32-ia32-msvc": "2.11.4", - "@tauri-apps/cli-win32-x64-msvc": "2.11.4" + "node": ">=8" } }, - "node_modules/@tauri-apps/cli-darwin-arm64": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-arm64/-/cli-darwin-arm64-2.11.4.tgz", - "integrity": "sha512-1ryOF3ZhpZ/nemHV5zVwBQBz9jDGKmKPvWPADOhc83ig0P4bMc2iER4NbC6r9sjeIZ6RVQ4g3RZIYvezhcl4TQ==", - "cpu": [ - "arm64" - ], + "node_modules/istanbul-lib-report": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz", + "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "darwin" - ], + "license": "BSD-3-Clause", + "dependencies": { + "istanbul-lib-coverage": "^3.0.0", + "make-dir": "^4.0.0", + "supports-color": "^7.1.0" + }, "engines": { - "node": ">= 10" + "node": ">=10" } }, - "node_modules/@tauri-apps/cli-darwin-x64": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-x64/-/cli-darwin-x64-2.11.4.tgz", - "integrity": "sha512-uFsGQAAfuyz1k/yGLmkWfkBlgKAqZfxqlHmLWx81QU27RJWfmbNHCIq8T8w1e+VClleIuZUjpHWfoE4E3DLo3A==", - "cpu": [ - "x64" - ], + "node_modules/istanbul-lib-source-maps": { + "version": "5.0.6", + "resolved": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-5.0.6.tgz", + "integrity": "sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "darwin" - ], + "license": "BSD-3-Clause", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.23", + "debug": "^4.1.1", + "istanbul-lib-coverage": "^3.0.0" + }, "engines": { - "node": ">= 10" + "node": ">=10" } }, - "node_modules/@tauri-apps/cli-linux-arm-gnueabihf": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm-gnueabihf/-/cli-linux-arm-gnueabihf-2.11.4.tgz", - "integrity": "sha512-IaHZn5CdBL21oUmjiVOS1ctw6Ip1O0pjp70FwOWmYz1myWe0SY96ZIj2FYf7pT0m8bI2h/hrs5ZbEXXh44/MkQ==", - "cpu": [ - "arm" - ], + "node_modules/istanbul-reports": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz", + "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "BSD-3-Clause", + "dependencies": { + "html-escaper": "^2.0.0", + "istanbul-lib-report": "^3.0.0" + }, "engines": { - "node": ">= 10" + "node": ">=8" } }, - "node_modules/@tauri-apps/cli-linux-arm64-gnu": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-gnu/-/cli-linux-arm64-gnu-2.11.4.tgz", - "integrity": "sha512-N41/ukTRVe6XSuUTESuFdGeOW2i7k62tK+6gHK5Kd5/q5RPvvi19GaWAVPPb9u95HSGmTChSolBfzynUsssFaA==", - "cpu": [ - "arm64" - ], + "node_modules/jackspeak": { + "version": "3.4.3", + "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz", + "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">= 10" + "license": "BlueOak-1.0.0", + "dependencies": { + "@isaacs/cliui": "^8.0.2" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + }, + "optionalDependencies": { + "@pkgjs/parseargs": "^0.11.0" } }, - "node_modules/@tauri-apps/cli-linux-arm64-musl": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-musl/-/cli-linux-arm64-musl-2.11.4.tgz", - "integrity": "sha512-v277UnT/fB64xAfSroL5N3Km3tLmvATWqJJw/wRI+g6o+HkeD0slyE7gOhNs1MbjE41R7bQOTxMVoL3aomUJmw==", - "cpu": [ - "arm64" - ], + "node_modules/jest": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest/-/jest-30.4.2.tgz", + "integrity": "sha512-Yi1jqNC/Oq0N4hBgNH/YvBpP1P57QqundgytzYqy3yqAa7NZPNjSoi4SGbRAXDMdBzNE6xBCi5U7RgfrvMEUVQ==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "@jest/core": "30.4.2", + "@jest/types": "30.4.1", + "import-local": "^3.2.0", + "jest-cli": "30.4.2" + }, + "bin": { + "jest": "bin/jest.js" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } } }, - "node_modules/@tauri-apps/cli-linux-riscv64-gnu": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-riscv64-gnu/-/cli-linux-riscv64-gnu-2.11.4.tgz", - "integrity": "sha512-qqgNkQ2u1yZHxjhxsZaxUtRDW8dIqIYm33rx/mzwQv0SfY9x1B+iraj8vWeFiXjjSVVhEMepXSOts1TqPzvXNQ==", - "cpu": [ - "riscv64" - ], + "node_modules/jest-changed-files": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-30.4.1.tgz", + "integrity": "sha512-IuctmYrxi21iOSOaIXpJWalHyPAsVv0GeBHKDn8C1CA4W5htHn7INL+wdnL4Bo0+olEndvAFkmb++tIQJG+vvg==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "execa": "^5.1.1", + "jest-util": "30.4.1", + "p-limit": "^3.1.0" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/cli-linux-x64-gnu": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-gnu/-/cli-linux-x64-gnu-2.11.4.tgz", - "integrity": "sha512-2VRNWl84FOH0m2giiDkO2h0QXlcMJeX+zJDpI5kDIQAx6s+geF3v48F4DXfJez4GS/FdoDGnPnw1C2iYGbQ7bQ==", - "cpu": [ - "x64" - ], + "node_modules/jest-circus": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-circus/-/jest-circus-30.4.2.tgz", + "integrity": "sha512-rvHH7VlY6LgbJXJTQ87GW62g1FntOtbhh0zT+v04kC+pgL6aBKyYINXxWukCpj3dcIBMw5/XUbtDS9dU9JTXeQ==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "@jest/environment": "30.4.1", + "@jest/expect": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "co": "^4.6.0", + "dedent": "^1.6.0", + "is-generator-fn": "^2.1.0", + "jest-each": "30.4.1", + "jest-matcher-utils": "30.4.1", + "jest-message-util": "30.4.1", + "jest-runtime": "30.4.2", + "jest-snapshot": "30.4.1", + "jest-util": "30.4.1", + "p-limit": "^3.1.0", + "pretty-format": "30.4.1", + "pure-rand": "^7.0.0", + "slash": "^3.0.0", + "stack-utils": "^2.0.6" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-circus/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/cli-linux-x64-musl": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-musl/-/cli-linux-x64-musl-2.11.4.tgz", - "integrity": "sha512-o9GyhYor/nc7xarmwDE3ka2szuW3uuZzXjHWh64Q8YX5AtSgxdQkFWzrY4O8KiGtVNvFBI14H3Q49Qj5TOIP/A==", - "cpu": [ - "x64" - ], + "node_modules/jest-cli": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-cli/-/jest-cli-30.4.2.tgz", + "integrity": "sha512-jfA2ocvVHMXS2QijrJ0d31ektP+d/W0T5RpcTX2Pq+3sVqHlsXVCM2+FmwpL+bdY8OfHpIg9xMxLF17Zg0U49Q==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "@jest/core": "30.4.2", + "@jest/test-result": "30.4.1", + "@jest/types": "30.4.1", + "chalk": "^4.1.2", + "exit-x": "^0.2.2", + "import-local": "^3.2.0", + "jest-config": "30.4.2", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "yargs": "^17.7.2" + }, + "bin": { + "jest": "bin/jest.js" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } } }, - "node_modules/@tauri-apps/cli-win32-arm64-msvc": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-arm64-msvc/-/cli-win32-arm64-msvc-2.11.4.tgz", - "integrity": "sha512-ld5Ehb598m0VkYyylRPNeCFsBe/km0jxis6KgMpl3IGY6I/i1RwQXO05I1AsXUXO2WC6AvB/Lw4qTf/asiuEiQ==", - "cpu": [ - "arm64" - ], + "node_modules/jest-config": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-config/-/jest-config-30.4.2.tgz", + "integrity": "sha512-rNHAShJQqQwFNoL0hbf3BphSBOWnpOUAKvidLS/AjNVLPfoj5mSf4jQMfW3cYOs6hXeZC7nF7mDHaBnbxELOzg==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">= 10" + "license": "MIT", + "dependencies": { + "@babel/core": "^7.27.4", + "@jest/get-type": "30.1.0", + "@jest/pattern": "30.4.0", + "@jest/test-sequencer": "30.4.1", + "@jest/types": "30.4.1", + "babel-jest": "30.4.1", + "chalk": "^4.1.2", + "ci-info": "^4.2.0", + "deepmerge": "^4.3.1", + "glob": "^10.5.0", + "graceful-fs": "^4.2.11", + "jest-circus": "30.4.2", + "jest-docblock": "30.4.0", + "jest-environment-node": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-resolve": "30.4.1", + "jest-runner": "30.4.2", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "parse-json": "^5.2.0", + "pretty-format": "30.4.1", + "slash": "^3.0.0", + "strip-json-comments": "^3.1.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "@types/node": "*", + "esbuild-register": ">=3.4.0", + "ts-node": ">=9.0.0" + }, + "peerDependenciesMeta": { + "@types/node": { + "optional": true + }, + "esbuild-register": { + "optional": true + }, + "ts-node": { + "optional": true + } } }, - "node_modules/@tauri-apps/cli-win32-ia32-msvc": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-ia32-msvc/-/cli-win32-ia32-msvc-2.11.4.tgz", - "integrity": "sha512-12Hxi0XX/H5VFxO/bGgHkFWhml9VMgEOu9CidjeCeTNQ1l6fpUlbiGgSP7CLI3PFtW9/FfbeHieZ+kyWK5H7CA==", - "cpu": [ - "ia32" - ], + "node_modules/jest-config/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "win32" - ], + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/cli-win32-x64-msvc": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-x64-msvc/-/cli-win32-x64-msvc-2.11.4.tgz", - "integrity": "sha512-+vDiqBIU5dMISg/wNvX3sF+ZHfgJGJ5T0AcO+EHNXV9GGAG+P5fzodlDXD3QdKCRgZxMoCm5PPvj3BqLNjBthw==", - "cpu": [ - "x64" - ], + "node_modules/jest-diff": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-diff/-/jest-diff-30.4.1.tgz", + "integrity": "sha512-CRpFK0RtLriVDGcPPAnR6HMVI8bSR2jnUIgralhauzYQZIb4RH9AtEInTuQr65LmmGggGcRT6HIASxwqsVsmlA==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "win32" - ], + "license": "MIT", + "dependencies": { + "@jest/diff-sequences": "30.4.0", + "@jest/get-type": "30.1.0", + "chalk": "^4.1.2", + "pretty-format": "30.4.1" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/plugin-dialog": { - "version": "2.7.2", - "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-dialog/-/plugin-dialog-2.7.2.tgz", - "integrity": "sha512-pX0IGm1I3I6wc+zeKYcq1GSqogK6okCNX5fOdaNU5ab1AjGS6l1E5wFNjEb7meg7ZFSp0JUs+0jQGQNyOvLrsg==", - "license": "MIT OR Apache-2.0", + "node_modules/jest-diff/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", "dependencies": { - "@tauri-apps/api": "^2.11.0" + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/plugin-opener": { - "version": "2.5.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-opener/-/plugin-opener-2.5.4.tgz", - "integrity": "sha512-1HnPkb+AmgO29HBazm4uPLKB+r7zzcTBW1d0fyYp1uP+jwtpoiNDGKMMzz58SFp49nOIrxdE3aUJtT57lfO9CQ==", - "license": "MIT OR Apache-2.0", + "node_modules/jest-docblock": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-30.4.0.tgz", + "integrity": "sha512-ZPMabUZCx5MpbZ2eBYSvZ0J8fvo3dR9oM+eeUpb3aKNQFuS2tu3Duw1TNlMoP8k3WQgKGJuhcMFvwcVuq6T7oA==", + "dev": true, + "license": "MIT", "dependencies": { - "@tauri-apps/api": "^2.11.0" + "detect-newline": "^3.1.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/dom": { - "version": "10.4.1", - "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.1.tgz", - "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==", + "node_modules/jest-each": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-each/-/jest-each-30.4.1.tgz", + "integrity": "sha512-/8MJbH6fuj48TstjrMf+u/pd06Qezz5xOXvZA6442heNOWr8bdeoGZX2d9fCn028CoMgYmroH9//zky5GfyYmA==", "dev": true, "license": "MIT", "dependencies": { - "@babel/code-frame": "^7.10.4", - "@babel/runtime": "^7.12.5", - "@types/aria-query": "^5.0.1", - "aria-query": "5.3.0", - "dom-accessibility-api": "^0.5.9", - "lz-string": "^1.5.0", - "picocolors": "1.1.1", - "pretty-format": "^27.0.2" + "@jest/get-type": "30.1.0", + "@jest/types": "30.4.1", + "chalk": "^4.1.2", + "jest-util": "30.4.1", + "pretty-format": "30.4.1" }, "engines": { - "node": ">=18" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/dom/node_modules/aria-query": { - "version": "5.3.0", - "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz", - "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==", + "node_modules/jest-each/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "Apache-2.0", + "license": "MIT", "dependencies": { - "dequal": "^2.0.3" + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/jest-dom": { - "version": "6.9.1", - "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-6.9.1.tgz", - "integrity": "sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==", + "node_modules/jest-environment-node": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-30.4.1.tgz", + "integrity": "sha512-4FZYVOk85hz2AyT6BbarKy9u37g6DbrDyCdFhsnDdXqyrueYQvB+0zO4f/kqLCRD0BsPRXPMNJeQwihKZV8naw==", "dev": true, "license": "MIT", "dependencies": { - "@adobe/css-tools": "^4.4.0", - "aria-query": "^5.0.0", - "css.escape": "^1.5.1", - "dom-accessibility-api": "^0.6.3", - "picocolors": "^1.1.1", - "redent": "^3.0.0" + "@jest/environment": "30.4.1", + "@jest/fake-timers": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "jest-mock": "30.4.1", + "jest-util": "30.4.1", + "jest-validate": "30.4.1" }, "engines": { - "node": ">=14", - "npm": ">=6", - "yarn": ">=1" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": { - "version": "0.6.3", - "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz", - "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==", - "dev": true, - "license": "MIT" - }, - "node_modules/@testing-library/user-event": { - "version": "14.6.5", - "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.5.tgz", - "integrity": "sha512-FhqjldLTpteueBaKflhNFlMT3+PM0O5fiBUivht6b9CZ1eesJyy7+g3Jr7XwJzt/Hip3ZG5hWwK1MX1FuDiE4w==", + "node_modules/jest-haste-map": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-30.4.1.tgz", + "integrity": "sha512-rFrcONd8jeFsyw+Z9CrScJgglRf2+NFmNam8dKu7n+SoHqNYT47mn0DdEcVUZJpvh7Iz6/si7f7yUH7GJHVgnw==", "dev": true, "license": "MIT", + "dependencies": { + "@jest/types": "30.4.1", + "@types/node": "*", + "anymatch": "^3.1.3", + "fb-watchman": "^2.0.2", + "graceful-fs": "^4.2.11", + "jest-regex-util": "30.4.0", + "jest-util": "30.4.1", + "jest-worker": "30.4.1", + "picomatch": "^4.0.3", + "walker": "^1.0.8" + }, "engines": { - "node": ">=12", - "npm": ">=6" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" }, - "peerDependencies": { - "@testing-library/dom": ">=7.21.4" + "optionalDependencies": { + "fsevents": "^2.3.3" } }, - "node_modules/@tybys/wasm-util": { - "version": "0.10.3", - "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz", - "integrity": "sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==", + "node_modules/jest-junit": { + "version": "16.0.0", + "resolved": "https://registry.npmjs.org/jest-junit/-/jest-junit-16.0.0.tgz", + "integrity": "sha512-A94mmw6NfJab4Fg/BlvVOUXzXgF0XIH6EmTgJ5NDPp4xoKq0Kr7sErb+4Xs9nZvu58pJojz5RFGpqnZYJTrRfQ==", "dev": true, - "license": "MIT", - "optional": true, + "license": "Apache-2.0", "dependencies": { - "tslib": "^2.4.0" + "mkdirp": "^1.0.4", + "strip-ansi": "^6.0.1", + "uuid": "^8.3.2", + "xml": "^1.0.1" + }, + "engines": { + "node": ">=10.12.0" } }, - "node_modules/@types/aria-query": { - "version": "5.0.4", - "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz", - "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==", + "node_modules/jest-junit/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } }, - "node_modules/@types/chai": { - "version": "5.2.3", - "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz", - "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==", + "node_modules/jest-leak-detector": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-leak-detector/-/jest-leak-detector-30.4.1.tgz", + "integrity": "sha512-IpmyiioeHxiWDhesHnUFmOxcTzwCwKpgACgWajtAP+nYQXiY7DakTxB6Bx9JFiRMljr0AX1PvnQdaU1KFoz6NQ==", "dev": true, "license": "MIT", "dependencies": { - "@types/deep-eql": "*", - "assertion-error": "^2.0.1" + "@jest/get-type": "30.1.0", + "pretty-format": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@types/cookie": { - "version": "0.6.0", - "resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.6.0.tgz", - "integrity": "sha512-4Kh9a6B2bQciAhf7FSuMRRkUWecJgJu9nPnx3yzpsfXX/c50REIqpHY4C82bXP90qrLtXtkDxTZosYO3UpOwlA==", + "node_modules/jest-leak-detector/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@types/deep-eql": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz", - "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==", + "node_modules/jest-matcher-utils": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-30.4.1.tgz", + "integrity": "sha512-zvYfX5CaeEkFrrLS9suWe9rvJrm9J1Iv3ua8kIBv9GEPzcnsfBf0bob37la7s67fs0nlBC3EuvkOLnXQKxtx4A==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/get-type": "30.1.0", + "chalk": "^4.1.2", + "jest-diff": "30.4.1", + "pretty-format": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@types/estree": { - "version": "1.0.9", - "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz", - "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==", + "node_modules/jest-matcher-utils/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@types/node": { - "version": "26.1.2", - "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz", - "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==", + "node_modules/jest-message-util": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-30.4.1.tgz", + "integrity": "sha512-kwCKIvq0MCW1HzLoGola9Te6JUdzgV0loyKJ3Qghrkz9i5/RRIHsL95BMQc2HBBhlBKC4j22K9p11TGHH8RBpQ==", "dev": true, "license": "MIT", "dependencies": { - "undici-types": "~8.3.0" + "@babel/code-frame": "^7.27.1", + "@jest/types": "30.4.1", + "@types/stack-utils": "^2.0.3", + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "jest-util": "30.4.1", + "picomatch": "^4.0.3", + "pretty-format": "30.4.1", + "slash": "^3.0.0", + "stack-utils": "^2.0.6" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@types/trusted-types": { - "version": "2.0.7", - "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz", - "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==", + "node_modules/jest-message-util/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@vitest/coverage-v8": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.10.tgz", - "integrity": "sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==", + "node_modules/jest-mock": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-mock/-/jest-mock-30.4.1.tgz", + "integrity": "sha512-/i8SVb8/NSB7RfNi8gfqu8gxLV23KaL5EpAttyb9iz8qWRIqXRLflycz/32wXsYkOnaUlx8NAKnJYtpsmXUmfw==", "dev": true, "license": "MIT", "dependencies": { - "@bcoe/v8-coverage": "^1.0.2", - "@vitest/utils": "4.1.10", - "ast-v8-to-istanbul": "^1.0.0", - "istanbul-lib-coverage": "^3.2.2", - "istanbul-lib-report": "^3.0.1", - "istanbul-reports": "^3.2.0", - "magicast": "^0.5.2", - "obug": "^2.1.1", - "std-env": "^4.0.0-rc.1", - "tinyrainbow": "^3.1.0" + "@jest/types": "30.4.1", + "@types/node": "*", + "jest-util": "30.4.1" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-pnp-resolver": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz", + "integrity": "sha512-+3NpwQEnRoIBtx4fyhblQDPgJI0H1IEIkX7ShLUjPGA7TtUTvI1oiKi3SR4oBR0hQhQR80l4WAe5RrXBwWMA8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" }, "peerDependencies": { - "@vitest/browser": "4.1.10", - "vitest": "4.1.10" + "jest-resolve": "*" }, "peerDependenciesMeta": { - "@vitest/browser": { + "jest-resolve": { "optional": true } } }, - "node_modules/@vitest/expect": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.10.tgz", - "integrity": "sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==", + "node_modules/jest-process-manager": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/jest-process-manager/-/jest-process-manager-0.4.0.tgz", + "integrity": "sha512-80Y6snDyb0p8GG83pDxGI/kQzwVTkCxc7ep5FPe/F6JYdvRDhwr6RzRmPSP7SEwuLhxo80lBS/NqOdUIbHIfhw==", + "deprecated": "⚠️ The 'jest-process-manager' package is deprecated. Please migrate to Playwright's built-in test runner (@playwright/test) which now includes full Jest-style features and parallel testing. See https://playwright.dev/docs/intro for details.", "dev": true, "license": "MIT", "dependencies": { - "@standard-schema/spec": "^1.1.0", - "@types/chai": "^5.2.2", - "@vitest/spy": "4.1.10", - "@vitest/utils": "4.1.10", - "chai": "^6.2.2", - "tinyrainbow": "^3.1.0" - }, - "funding": { - "url": "https://opencollective.com/vitest" + "@types/wait-on": "^5.2.0", + "chalk": "^4.1.0", + "cwd": "^0.10.0", + "exit": "^0.1.2", + "find-process": "^1.4.4", + "prompts": "^2.4.1", + "signal-exit": "^3.0.3", + "spawnd": "^5.0.0", + "tree-kill": "^1.2.2", + "wait-on": "^7.0.0" + } + }, + "node_modules/jest-process-manager/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/jest-regex-util": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-30.4.0.tgz", + "integrity": "sha512-mWlvLviKIgIQ8VCuM1xRdD0TWp3zlzionlmDBjuXVBs+VkmXq6FgW9T4Emr7oGz/Rk6feDCGyiugolcQEyp3mg==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/mocker": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.10.tgz", - "integrity": "sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==", + "node_modules/jest-resolve": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-30.4.1.tgz", + "integrity": "sha512-Zry8Yq/yJcNAZ7dJ5F2heic8AheXvbFZ7XI5V+h28nrYZ7Qoyy4dItq8OodjnYD270mvX+ZudmrNV9cysqhW5Q==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/spy": "4.1.10", - "estree-walker": "^3.0.3", - "magic-string": "^0.30.21" + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "jest-pnp-resolver": "^1.2.3", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "slash": "^3.0.0", + "unrs-resolver": "^1.7.11" }, - "funding": { - "url": "https://opencollective.com/vitest" - }, - "peerDependencies": { - "msw": "^2.4.9", - "vite": "^6.0.0 || ^7.0.0 || ^8.0.0" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-resolve-dependencies": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-30.4.2.tgz", + "integrity": "sha512-gDiVh1I+GxYzz9oXlyw+1wv6VOYX1WYxMOfjsA3iGKePV2oxmbHhwxfkALxNxYy1ciw6APWwkW2zZONwP97aEQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "jest-regex-util": "30.4.0", + "jest-snapshot": "30.4.1" }, - "peerDependenciesMeta": { - "msw": { - "optional": true - }, - "vite": { - "optional": true - } + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/pretty-format": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.10.tgz", - "integrity": "sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==", + "node_modules/jest-runner": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-runner/-/jest-runner-30.4.2.tgz", + "integrity": "sha512-2dw0PslVYXxffXGpLo+Ejad+KcI1Qkjn7f4X4619gf21oCUmL+SPfjqIa/losUem3yEOvfNZe/F1HWUcNpODcg==", "dev": true, "license": "MIT", "dependencies": { - "tinyrainbow": "^3.1.0" + "@jest/console": "30.4.1", + "@jest/environment": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "emittery": "^0.13.1", + "exit-x": "^0.2.2", + "graceful-fs": "^4.2.11", + "jest-docblock": "30.4.0", + "jest-environment-node": "30.4.1", + "jest-haste-map": "30.4.1", + "jest-leak-detector": "30.4.1", + "jest-message-util": "30.4.1", + "jest-resolve": "30.4.1", + "jest-runtime": "30.4.2", + "jest-util": "30.4.1", + "jest-watcher": "30.4.1", + "jest-worker": "30.4.1", + "p-limit": "^3.1.0", + "source-map-support": "0.5.13" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-runtime": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-30.4.2.tgz", + "integrity": "sha512-3/5e8iPz2k/VLqlr8DgTftYyLUv8Su3FkCAO2/Od81UsUTpSxOrS6O5x5KkoQwyUjmpYyDJKeyAvg2T2nvpNkQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/environment": "30.4.1", + "@jest/fake-timers": "30.4.1", + "@jest/globals": "30.4.1", + "@jest/source-map": "30.0.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "cjs-module-lexer": "^2.1.0", + "collect-v8-coverage": "^1.0.2", + "glob": "^10.5.0", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "jest-message-util": "30.4.1", + "jest-mock": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-resolve": "30.4.1", + "jest-snapshot": "30.4.1", + "jest-util": "30.4.1", + "slash": "^3.0.0", + "strip-bom": "^4.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-serializer-html": { + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/jest-serializer-html/-/jest-serializer-html-7.1.0.tgz", + "integrity": "sha512-xYL2qC7kmoYHJo8MYqJkzrl/Fdlx+fat4U1AqYg+kafqwcKPiMkOcjWHPKhueuNEgr+uemhGc+jqXYiwCyRyLA==", + "dev": true, + "license": "MIT", + "dependencies": { + "diffable-html": "^4.1.0" + } + }, + "node_modules/jest-snapshot": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-30.4.1.tgz", + "integrity": "sha512-tEOkkfOMppUyeiHwjZswOQ3lcnoTnws/q5FnGIaeIh/jmoU0ZlgMYRR8sTlTj+nNGCoJ0RDq6SfxGxCsyMTPmw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/core": "^7.27.4", + "@babel/generator": "^7.27.5", + "@babel/plugin-syntax-jsx": "^7.27.1", + "@babel/plugin-syntax-typescript": "^7.27.1", + "@babel/types": "^7.27.3", + "@jest/expect-utils": "30.4.1", + "@jest/get-type": "30.1.0", + "@jest/snapshot-utils": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "babel-preset-current-node-syntax": "^1.2.0", + "chalk": "^4.1.2", + "expect": "30.4.1", + "graceful-fs": "^4.2.11", + "jest-diff": "30.4.1", + "jest-matcher-utils": "30.4.1", + "jest-message-util": "30.4.1", + "jest-util": "30.4.1", + "pretty-format": "30.4.1", + "semver": "^7.7.2", + "synckit": "^0.11.8" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-snapshot/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/runner": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.10.tgz", - "integrity": "sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==", + "node_modules/jest-util": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-util/-/jest-util-30.4.1.tgz", + "integrity": "sha512-vjQb1sACEiv13DKJMDToJpzVW0joCsIQrmbg0fi7CyOOt+g9jTuQl2A216pWRBYhOVt53XbL/2LbMKg1BECWOw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/utils": "4.1.10", - "pathe": "^2.0.3" + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "ci-info": "^4.2.0", + "graceful-fs": "^4.2.11", + "picomatch": "^4.0.3" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/snapshot": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.10.tgz", - "integrity": "sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==", + "node_modules/jest-validate": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-validate/-/jest-validate-30.4.1.tgz", + "integrity": "sha512-PDWi4SOwLnwqNDfHZjOcsEFyZ4fc/2W2gVL3DEoyqnB6jCQMLRtfBong8s6omIw3lI0HWOus12xfnFmQtjW3fw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/pretty-format": "4.1.10", - "@vitest/utils": "4.1.10", - "magic-string": "^0.30.21", - "pathe": "^2.0.3" + "@jest/get-type": "30.1.0", + "@jest/types": "30.4.1", + "camelcase": "^6.3.0", + "chalk": "^4.1.2", + "leven": "^3.1.0", + "pretty-format": "30.4.1" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/spy": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.10.tgz", - "integrity": "sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==", + "node_modules/jest-validate/node_modules/camelcase": { + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz", + "integrity": "sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==", "dev": true, "license": "MIT", + "engines": { + "node": ">=10" + }, "funding": { - "url": "https://opencollective.com/vitest" + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@vitest/utils": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.10.tgz", - "integrity": "sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==", + "node_modules/jest-validate/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/pretty-format": "4.1.10", - "convert-source-map": "^2.0.0", - "tinyrainbow": "^3.1.0" + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@webcontainer/env": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/@webcontainer/env/-/env-1.1.1.tgz", - "integrity": "sha512-6aN99yL695Hi9SuIk1oC88l9o0gmxL1nGWWQ/kNy81HigJ0FoaoTXpytCj6ItzgyCEwA9kF1wixsTuv5cjsgng==", + "node_modules/jest-watch-typeahead": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/jest-watch-typeahead/-/jest-watch-typeahead-3.0.1.tgz", + "integrity": "sha512-SFmHcvdueTswZlVhPCWfLXMazvwZlA2UZTrcE7MC3NwEVeWvEcOx6HUe+igMbnmA6qowuBSW4in8iC6J2EYsgQ==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "ansi-escapes": "^7.0.0", + "chalk": "^5.2.0", + "jest-regex-util": "^30.0.0", + "jest-watcher": "^30.0.0", + "slash": "^5.0.0", + "string-length": "^6.0.0", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=18.0.0" + }, + "peerDependencies": { + "jest": "^30.0.0" + } }, - "node_modules/acorn": { - "version": "8.18.0", - "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz", - "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==", + "node_modules/jest-watch-typeahead/node_modules/ansi-escapes": { + "version": "7.3.0", + "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-7.3.0.tgz", + "integrity": "sha512-BvU8nYgGQBxcmMuEeUEmNTvrMVjJNSH7RgW24vXexN4Ven6qCvy4TntnvlnwnMLTVlcRQQdbRY8NKnaIoeWDNg==", "dev": true, "license": "MIT", - "bin": { - "acorn": "bin/acorn" + "dependencies": { + "environment": "^1.0.0" }, "engines": { - "node": ">=0.4.0" + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/ansi-regex": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", - "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "node_modules/jest-watch-typeahead/node_modules/chalk": { + "version": "5.6.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.6.2.tgz", + "integrity": "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==", "dev": true, "license": "MIT", "engines": { - "node": ">=8" + "node": "^12.17.0 || ^14.13 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" } }, - "node_modules/ansi-styles": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz", - "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==", + "node_modules/jest-watch-typeahead/node_modules/slash": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz", + "integrity": "sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg==", "dev": true, "license": "MIT", "engines": { - "node": ">=10" + "node": ">=14.16" }, "funding": { - "url": "https://github.com/chalk/ansi-styles?sponsor=1" + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/aria-query": { - "version": "5.3.1", - "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.1.tgz", - "integrity": "sha512-Z/ZeOgVl7bcSYZ/u/rh0fOpvEpq//LZmdbkXyc7syVzjPAhfOa9ebsdTSjEBDU4vs5nC98Kfduj1uFo0qyET3g==", + "node_modules/jest-watch-typeahead/node_modules/string-length": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/string-length/-/string-length-6.0.0.tgz", + "integrity": "sha512-1U361pxZHEQ+FeSjzqRpV+cu2vTzYeWeafXFLykiFlv4Vc0n3njgU8HrMbyik5uwm77naWMuVG8fhEF+Ovb1Kg==", "dev": true, - "license": "Apache-2.0", + "license": "MIT", + "dependencies": { + "strip-ansi": "^7.1.0" + }, "engines": { - "node": ">= 0.4" + "node": ">=16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/assertion-error": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz", - "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==", + "node_modules/jest-watcher": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-30.4.1.tgz", + "integrity": "sha512-/l9UonmvCwjHH7d2h3iAwIloLc1H0S8mJZ/LNK3i86hqwPAz8otUJjP9MfYtz9Tt77Su5FD2xGjZn8d31IZHlw==", "dev": true, "license": "MIT", + "dependencies": { + "@jest/test-result": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "ansi-escapes": "^4.3.2", + "chalk": "^4.1.2", + "emittery": "^0.13.1", + "jest-util": "30.4.1", + "string-length": "^4.0.2" + }, "engines": { - "node": ">=12" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/ast-types": { - "version": "0.16.1", - "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.16.1.tgz", - "integrity": "sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==", + "node_modules/jest-worker": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-worker/-/jest-worker-30.4.1.tgz", + "integrity": "sha512-SHynN/q/QD++iNyvMdy+WMmbCGk8jIsNcRxycXbWubSOhvo6T+j2afcfUSl+3hYsiBebOTo0cT7c2H7CXugu1g==", "dev": true, "license": "MIT", "dependencies": { - "tslib": "^2.0.1" + "@types/node": "*", + "@ungap/structured-clone": "^1.3.0", + "jest-util": "30.4.1", + "merge-stream": "^2.0.0", + "supports-color": "^8.1.1" }, "engines": { - "node": ">=4" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/ast-v8-to-istanbul": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.5.tgz", - "integrity": "sha512-UPAgKJFSEGMWSDr3LX4tqnAb4f7KGT8O40Tyx8wbYmmZ/yn58lNCm8h3svs3eXgiGd5AXxz8NDOvXWvicq+rJA==", + "node_modules/jest-worker/node_modules/supports-color": { + "version": "8.1.1", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz", + "integrity": "sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==", "dev": true, "license": "MIT", "dependencies": { - "@jridgewell/trace-mapping": "^0.3.31", - "estree-walker": "^3.0.3", - "js-tokens": "^10.0.0" + "has-flag": "^4.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/supports-color?sponsor=1" + } + }, + "node_modules/joi": { + "version": "17.13.6", + "resolved": "https://registry.npmjs.org/joi/-/joi-17.13.6.tgz", + "integrity": "sha512-ImNZaq/LSysofih+xIGYfR0WUXMA9GLUNB//YTCSrZptoRmVgaNAdJyi6K1kXi9pkLEoSkoI8I4UwtNiu/D7nw==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^9.3.0", + "@hapi/topo": "^5.1.0", + "@sideway/address": "^4.1.5", + "@sideway/formula": "^3.0.1", + "@sideway/pinpoint": "^2.0.0" + } + }, + "node_modules/js-tokens": { + "version": "10.0.0", + "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz", + "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/js-yaml": { + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "dev": true, + "license": "MIT", + "dependencies": { + "argparse": "^1.0.7", + "esprima": "^4.0.0" + }, + "bin": { + "js-yaml": "bin/js-yaml.js" } }, - "node_modules/axe-core": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.13.0.tgz", - "integrity": "sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==", + "node_modules/jsesc": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz", + "integrity": "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==", "dev": true, - "license": "MPL-2.0", + "license": "MIT", + "bin": { + "jsesc": "bin/jsesc" + }, "engines": { - "node": ">=4" + "node": ">=6" } }, - "node_modules/axobject-query": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz", - "integrity": "sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==", + "node_modules/json-parse-even-better-errors": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz", + "integrity": "sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==", "dev": true, - "license": "Apache-2.0", - "engines": { - "node": ">= 0.4" - } + "license": "MIT" }, - "node_modules/bundle-name": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz", - "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==", + "node_modules/json5": { + "version": "2.2.3", + "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz", + "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==", "dev": true, "license": "MIT", - "dependencies": { - "run-applescript": "^7.0.0" + "bin": { + "json5": "lib/cli.js" }, "engines": { - "node": ">=18" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "node": ">=6" } }, - "node_modules/chai": { - "version": "6.2.2", - "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", - "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", + "node_modules/jsonc-parser": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz", + "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/kleur": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", + "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==", "dev": true, "license": "MIT", "engines": { - "node": ">=18" + "node": ">=6" } }, - "node_modules/check-error": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/check-error/-/check-error-2.1.3.tgz", - "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==", + "node_modules/leven": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz", + "integrity": "sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A==", "dev": true, "license": "MIT", "engines": { - "node": ">= 16" + "node": ">=6" } }, - "node_modules/chokidar": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", - "integrity": "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==", + "node_modules/lightningcss": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz", + "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==", "dev": true, - "license": "MIT", + "license": "MPL-2.0", "dependencies": { - "readdirp": "^4.0.1" + "detect-libc": "^2.0.3" }, "engines": { - "node": ">= 14.16.0" + "node": ">= 12.0.0" }, "funding": { - "url": "https://paulmillr.com/funding/" + "type": "opencollective", + "url": "https://opencollective.com/parcel" + }, + "optionalDependencies": { + "lightningcss-android-arm64": "1.33.0", + "lightningcss-darwin-arm64": "1.33.0", + "lightningcss-darwin-x64": "1.33.0", + "lightningcss-freebsd-x64": "1.33.0", + "lightningcss-linux-arm-gnueabihf": "1.33.0", + "lightningcss-linux-arm64-gnu": "1.33.0", + "lightningcss-linux-arm64-musl": "1.33.0", + "lightningcss-linux-x64-gnu": "1.33.0", + "lightningcss-linux-x64-musl": "1.33.0", + "lightningcss-win32-arm64-msvc": "1.33.0", + "lightningcss-win32-x64-msvc": "1.33.0" } }, - "node_modules/clsx": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", - "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==", + "node_modules/lightningcss-android-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz", + "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "android" + ], "engines": { - "node": ">=6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/convert-source-map": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", - "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==", - "dev": true, - "license": "MIT" - }, - "node_modules/cookie": { - "version": "0.7.2", - "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", - "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "node_modules/lightningcss-darwin-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz", + "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], "engines": { - "node": ">= 0.6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/css.escape": { - "version": "1.5.1", - "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz", - "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==", - "dev": true, - "license": "MIT" - }, - "node_modules/dedent-js": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/dedent-js/-/dedent-js-1.0.1.tgz", - "integrity": "sha512-OUepMozQULMLUmhxS95Vudo0jb0UchLimi3+pQ2plj61Fcy8axbP9hbiD4Sz6DPqn6XG3kfmziVfQ1rSys5AJQ==", + "node_modules/lightningcss-darwin-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz", + "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT" + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } }, - "node_modules/deep-eql": { - "version": "5.0.2", - "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-5.0.2.tgz", - "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==", + "node_modules/lightningcss-freebsd-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz", + "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "freebsd" + ], "engines": { - "node": ">=6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/deepmerge": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", - "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==", + "node_modules/lightningcss-linux-arm-gnueabihf": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz", + "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==", + "cpu": [ + "arm" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=0.10.0" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/default-browser": { - "version": "5.5.1", - "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.1.tgz", - "integrity": "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw==", + "node_modules/lightningcss-linux-arm64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz", + "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", - "dependencies": { - "bundle-name": "^4.1.0", - "default-browser-id": "^5.0.0" - }, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=18" + "node": ">= 12.0.0" }, "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/default-browser-id": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz", - "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==", + "node_modules/lightningcss-linux-arm64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz", + "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=18" + "node": ">= 12.0.0" }, "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/define-lazy-prop": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz", - "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==", + "node_modules/lightningcss-linux-x64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz", + "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=12" + "node": ">= 12.0.0" }, "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/dequal": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", - "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "node_modules/lightningcss-linux-x64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz", + "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/detect-libc": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", - "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "node_modules/lightningcss-win32-arm64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz", + "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "Apache-2.0", + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], "engines": { - "node": ">=8" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/devalue": { - "version": "5.9.0", - "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.0.tgz", - "integrity": "sha512-RWrqdArjvPbsATEhOPUo6Wndc/iWnkWKlhIrdlF3zMMYo/c3CVtoaVAyLtWxz5h8nSlkHzxnzV2uLydPXmtF+A==", - "dev": true, - "license": "MIT" - }, - "node_modules/dom-accessibility-api": { - "version": "0.5.16", - "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz", - "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==", - "dev": true, - "license": "MIT" - }, - "node_modules/es-module-lexer": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.1.tgz", - "integrity": "sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==", - "dev": true, - "license": "MIT" - }, - "node_modules/esbuild": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz", - "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==", + "node_modules/lightningcss-win32-x64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz", + "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==", + "cpu": [ + "x64" + ], "dev": true, - "hasInstallScript": true, - "license": "MIT", - "bin": { - "esbuild": "bin/esbuild" - }, + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], "engines": { - "node": ">=18" + "node": ">= 12.0.0" }, - "optionalDependencies": { - "@esbuild/aix-ppc64": "0.28.2", - "@esbuild/android-arm": "0.28.2", - "@esbuild/android-arm64": "0.28.2", - "@esbuild/android-x64": "0.28.2", - "@esbuild/darwin-arm64": "0.28.2", - "@esbuild/darwin-x64": "0.28.2", - "@esbuild/freebsd-arm64": "0.28.2", - "@esbuild/freebsd-x64": "0.28.2", - "@esbuild/linux-arm": "0.28.2", - "@esbuild/linux-arm64": "0.28.2", - "@esbuild/linux-ia32": "0.28.2", - "@esbuild/linux-loong64": "0.28.2", - "@esbuild/linux-mips64el": "0.28.2", - "@esbuild/linux-ppc64": "0.28.2", - "@esbuild/linux-riscv64": "0.28.2", - "@esbuild/linux-s390x": "0.28.2", - "@esbuild/linux-x64": "0.28.2", - "@esbuild/netbsd-arm64": "0.28.2", - "@esbuild/netbsd-x64": "0.28.2", - "@esbuild/openbsd-arm64": "0.28.2", - "@esbuild/openbsd-x64": "0.28.2", - "@esbuild/openharmony-arm64": "0.28.2", - "@esbuild/sunos-x64": "0.28.2", - "@esbuild/win32-arm64": "0.28.2", - "@esbuild/win32-ia32": "0.28.2", - "@esbuild/win32-x64": "0.28.2" + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/esm-env": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz", - "integrity": "sha512-Epxrv+Nr/CaL4ZcFGPJIYLWFom+YeV1DqMLHJoEd9SYRxNbaFruBwfEX/kkHUJf55j2+TUbmDcmuilbP1TmXHA==", + "node_modules/lines-and-columns": { + "version": "1.2.4", + "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz", + "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==", "dev": true, "license": "MIT" }, - "node_modules/esprima": { - "version": "4.0.1", - "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", - "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", + "node_modules/locate-character": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/locate-character/-/locate-character-3.0.0.tgz", + "integrity": "sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==", "dev": true, - "license": "BSD-2-Clause", - "bin": { - "esparse": "bin/esparse.js", - "esvalidate": "bin/esvalidate.js" - }, - "engines": { - "node": ">=4" - } + "license": "MIT" }, - "node_modules/esrap": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.3.0.tgz", - "integrity": "sha512-GQ/7RN8uOtEfNpzZzBMTzW9JBcX42oaSVtPzdF+6cEL8pqIL094iUpr9jzYGn4O4P/1S60dJ6izyT8F4LYARng==", + "node_modules/locate-path": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz", + "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==", "dev": true, "license": "MIT", "dependencies": { - "@jridgewell/sourcemap-codec": "^1.4.15" - }, - "peerDependencies": { - "@typescript-eslint/types": "^8.2.0" + "p-locate": "^4.1.0" }, - "peerDependenciesMeta": { - "@typescript-eslint/types": { - "optional": true - } - } - }, - "node_modules/estree-walker": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz", - "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", - "dev": true, - "license": "MIT", - "dependencies": { - "@types/estree": "^1.0.0" - } - }, - "node_modules/expect-type": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz", - "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==", - "dev": true, - "license": "Apache-2.0", "engines": { - "node": ">=12.0.0" + "node": ">=8" } }, - "node_modules/fdir": { - "version": "6.5.0", - "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", - "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", + "node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", "dev": true, - "license": "MIT", - "engines": { - "node": ">=12.0.0" - }, - "peerDependencies": { - "picomatch": "^3 || ^4" - }, - "peerDependenciesMeta": { - "picomatch": { - "optional": true - } - } + "license": "MIT" }, - "node_modules/fsevents": { - "version": "2.3.3", - "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", - "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", + "node_modules/lodash.flattendeep": { + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz", + "integrity": "sha512-uHaJFihxmJcEX3kT4I23ABqKKalJ/zDrDg0lsFtc1h+3uw49SIJ5beyhx5ExVRti3AvKoOJngIj7xz3oylPdWQ==", "dev": true, - "hasInstallScript": true, - "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": "^8.16.0 || ^10.6.0 || >=11.0.0" - } + "license": "MIT" }, - "node_modules/has-flag": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", - "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", + "node_modules/loglevel": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/loglevel/-/loglevel-1.9.2.tgz", + "integrity": "sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==", "dev": true, "license": "MIT", "engines": { - "node": ">=8" + "node": ">= 0.6.0" + }, + "funding": { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/loglevel" } }, - "node_modules/html-escaper": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz", - "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==", + "node_modules/loupe": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz", + "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==", "dev": true, "license": "MIT" - }, - "node_modules/indent-string": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", - "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", + }, + "node_modules/lru-cache": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz", + "integrity": "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==", "dev": true, - "license": "MIT", - "engines": { - "node": ">=8" + "license": "ISC", + "dependencies": { + "yallist": "^3.0.2" } }, - "node_modules/is-docker": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz", - "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==", + "node_modules/lz-string": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz", + "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==", "dev": true, "license": "MIT", "bin": { - "is-docker": "cli.js" - }, - "engines": { - "node": "^12.20.0 || ^14.13.1 || >=16.0.0" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "lz-string": "bin/bin.js" } }, - "node_modules/is-inside-container": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz", - "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==", + "node_modules/magic-string": { + "version": "0.30.21", + "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz", + "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==", "dev": true, "license": "MIT", "dependencies": { - "is-docker": "^3.0.0" - }, - "bin": { - "is-inside-container": "cli.js" - }, - "engines": { - "node": ">=14.16" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "@jridgewell/sourcemap-codec": "^1.5.5" } }, - "node_modules/is-reference": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.3.tgz", - "integrity": "sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==", + "node_modules/magicast": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.4.tgz", + "integrity": "sha512-llBEhWm1SacoRwgHUoQJYtwp4PBLF4faQi5TCpIGyGs9n4y5+juI0tDgyKIfpqxckRHaHzouUEph3THklWh03w==", "dev": true, "license": "MIT", "dependencies": { - "@types/estree": "^1.0.6" + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7", + "source-map-js": "^1.2.1" } }, - "node_modules/is-wsl": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz", - "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==", + "node_modules/make-dir": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz", + "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==", "dev": true, "license": "MIT", "dependencies": { - "is-inside-container": "^1.0.0" + "semver": "^7.5.3" }, "engines": { - "node": ">=16" + "node": ">=10" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/istanbul-lib-coverage": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz", - "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==", + "node_modules/makeerror": { + "version": "1.0.12", + "resolved": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.12.tgz", + "integrity": "sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==", "dev": true, "license": "BSD-3-Clause", + "dependencies": { + "tmpl": "1.0.5" + } + }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "dev": true, + "license": "MIT", "engines": { - "node": ">=8" + "node": ">= 0.4" } }, - "node_modules/istanbul-lib-report": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz", - "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==", + "node_modules/merge-stream": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz", + "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==", "dev": true, - "license": "BSD-3-Clause", - "dependencies": { - "istanbul-lib-coverage": "^3.0.0", - "make-dir": "^4.0.0", - "supports-color": "^7.1.0" - }, + "license": "MIT" + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "dev": true, + "license": "MIT", "engines": { - "node": ">=10" + "node": ">= 0.6" } }, - "node_modules/istanbul-reports": { - "version": "3.2.0", - "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz", - "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==", + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", "dev": true, - "license": "BSD-3-Clause", + "license": "MIT", "dependencies": { - "html-escaper": "^2.0.0", - "istanbul-lib-report": "^3.0.0" + "mime-db": "1.52.0" }, "engines": { - "node": ">=8" + "node": ">= 0.6" } }, - "node_modules/js-tokens": { - "version": "10.0.0", - "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz", - "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==", - "dev": true, - "license": "MIT" - }, - "node_modules/jsonc-parser": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz", - "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==", + "node_modules/mimic-fn": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz", + "integrity": "sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==", "dev": true, - "license": "MIT" + "license": "MIT", + "engines": { + "node": ">=6" + } }, - "node_modules/kleur": { - "version": "4.1.5", - "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", - "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==", + "node_modules/min-indent": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz", + "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==", "dev": true, "license": "MIT", "engines": { - "node": ">=6" + "node": ">=4" } }, - "node_modules/lightningcss": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz", - "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==", + "node_modules/minimatch": { + "version": "9.0.9", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", + "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "dev": true, - "license": "MPL-2.0", + "license": "ISC", "dependencies": { - "detect-libc": "^2.0.3" + "brace-expansion": "^2.0.2" }, "engines": { - "node": ">= 12.0.0" + "node": ">=16 || 14 >=14.17" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" - }, - "optionalDependencies": { - "lightningcss-android-arm64": "1.33.0", - "lightningcss-darwin-arm64": "1.33.0", - "lightningcss-darwin-x64": "1.33.0", - "lightningcss-freebsd-x64": "1.33.0", - "lightningcss-linux-arm-gnueabihf": "1.33.0", - "lightningcss-linux-arm64-gnu": "1.33.0", - "lightningcss-linux-arm64-musl": "1.33.0", - "lightningcss-linux-x64-gnu": "1.33.0", - "lightningcss-linux-x64-musl": "1.33.0", - "lightningcss-win32-arm64-msvc": "1.33.0", - "lightningcss-win32-x64-msvc": "1.33.0" + "url": "https://github.com/sponsors/isaacs" } }, - "node_modules/lightningcss-android-arm64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz", - "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==", - "cpu": [ - "arm64" - ], + "node_modules/minimist": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", + "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "android" - ], - "engines": { - "node": ">= 12.0.0" - }, + "license": "MIT", "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/lightningcss-darwin-arm64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz", - "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==", - "cpu": [ - "arm64" - ], + "node_modules/minipass": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz", + "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "darwin" - ], + "license": "BlueOak-1.0.0", "engines": { - "node": ">= 12.0.0" + "node": ">=16 || 14 >=14.17" + } + }, + "node_modules/mkdirp": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==", + "dev": true, + "license": "MIT", + "bin": { + "mkdirp": "bin/cmd.js" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": ">=10" } }, - "node_modules/lightningcss-darwin-x64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz", - "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==", - "cpu": [ - "x64" - ], + "node_modules/mri": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz", + "integrity": "sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "darwin" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "node": ">=4" } }, - "node_modules/lightningcss-freebsd-x64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz", - "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==", - "cpu": [ - "x64" - ], + "node_modules/mrmime": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz", + "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "freebsd" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" + "node": ">=10" + } + }, + "node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "dev": true, + "license": "MIT" + }, + "node_modules/nanoid": { + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "bin": { + "nanoid": "bin/nanoid.cjs" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" } }, - "node_modules/lightningcss-linux-arm-gnueabihf": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz", - "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==", - "cpu": [ - "arm" - ], + "node_modules/napi-postinstall": { + "version": "0.3.4", + "resolved": "https://registry.npmjs.org/napi-postinstall/-/napi-postinstall-0.3.4.tgz", + "integrity": "sha512-PHI5f1O0EP5xJ9gQmFGMS6IZcrVvTjpXjz7Na41gTE7eE2hK11lg04CECCYEEjdc17EV4DO+fkGEtt7TpTaTiQ==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "bin": { + "napi-postinstall": "lib/cli.js" + }, "engines": { - "node": ">= 12.0.0" + "node": "^12.20.0 || ^14.18.0 || >=16.0.0" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "url": "https://opencollective.com/napi-postinstall" } }, - "node_modules/lightningcss-linux-arm64-gnu": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz", - "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==", - "cpu": [ - "arm64" - ], + "node_modules/natural-compare": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz", + "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">= 12.0.0" + "license": "MIT" + }, + "node_modules/node-int64": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz", + "integrity": "sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==", + "dev": true, + "license": "MIT" + }, + "node_modules/node-preload": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/node-preload/-/node-preload-0.2.1.tgz", + "integrity": "sha512-RM5oyBy45cLEoHqCeh+MNuFAxO0vTFBLskvQbOKnEE7YTTSN4tbN8QWDIPQ6L+WvKsB/qLEGpYe2ZZ9d4W9OIQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "process-on-spawn": "^1.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": ">=8" } }, - "node_modules/lightningcss-linux-arm64-musl": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz", - "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==", - "cpu": [ - "arm64" - ], + "node_modules/node-releases": { + "version": "2.0.53", + "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.53.tgz", + "integrity": "sha512-D9UOmYG3UH1V+ENW56t5QXBwJw1YEY18ruVeus89Rw+SyIgjPkCO84bRzO3uNIYosJbNwiabWVn48o3uJLjxFQ==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "node": ">=18" } }, - "node_modules/lightningcss-linux-x64-gnu": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz", - "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==", - "cpu": [ - "x64" - ], + "node_modules/normalize-path": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz", + "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "node": ">=0.10.0" } }, - "node_modules/lightningcss-linux-x64-musl": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz", - "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==", - "cpu": [ - "x64" - ], + "node_modules/npm-run-path": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz", + "integrity": "sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">= 12.0.0" + "license": "MIT", + "dependencies": { + "path-key": "^3.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": ">=8" } }, - "node_modules/lightningcss-win32-arm64-msvc": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz", - "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==", - "cpu": [ - "arm64" - ], + "node_modules/nyc": { + "version": "15.1.0", + "resolved": "https://registry.npmjs.org/nyc/-/nyc-15.1.0.tgz", + "integrity": "sha512-jMW04n9SxKdKi1ZMGhvUTHBN0EICCRkHemEoE5jm6mTYcqcdas0ATzgUgejlQUHMvpnOZqGB5Xxsv9KxJW1j8A==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">= 12.0.0" + "license": "ISC", + "dependencies": { + "@istanbuljs/load-nyc-config": "^1.0.0", + "@istanbuljs/schema": "^0.1.2", + "caching-transform": "^4.0.0", + "convert-source-map": "^1.7.0", + "decamelize": "^1.2.0", + "find-cache-dir": "^3.2.0", + "find-up": "^4.1.0", + "foreground-child": "^2.0.0", + "get-package-type": "^0.1.0", + "glob": "^7.1.6", + "istanbul-lib-coverage": "^3.0.0", + "istanbul-lib-hook": "^3.0.0", + "istanbul-lib-instrument": "^4.0.0", + "istanbul-lib-processinfo": "^2.0.2", + "istanbul-lib-report": "^3.0.0", + "istanbul-lib-source-maps": "^4.0.0", + "istanbul-reports": "^3.0.2", + "make-dir": "^3.0.0", + "node-preload": "^0.2.1", + "p-map": "^3.0.0", + "process-on-spawn": "^1.0.0", + "resolve-from": "^5.0.0", + "rimraf": "^3.0.0", + "signal-exit": "^3.0.2", + "spawn-wrap": "^2.0.0", + "test-exclude": "^6.0.0", + "yargs": "^15.0.2" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "bin": { + "nyc": "bin/nyc.js" + }, + "engines": { + "node": ">=8.9" } }, - "node_modules/lightningcss-win32-x64-msvc": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz", - "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==", - "cpu": [ - "x64" - ], + "node_modules/nyc/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "win32" - ], + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, "engines": { - "node": ">= 12.0.0" + "node": ">=8" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "url": "https://github.com/chalk/ansi-styles?sponsor=1" } }, - "node_modules/locate-character": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/locate-character/-/locate-character-3.0.0.tgz", - "integrity": "sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==", + "node_modules/nyc/node_modules/brace-expansion": { + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/nyc/node_modules/cliui": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz", + "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.2.0", + "strip-ansi": "^6.0.0", + "wrap-ansi": "^6.2.0" + } + }, + "node_modules/nyc/node_modules/convert-source-map": { + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz", + "integrity": "sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A==", "dev": true, "license": "MIT" }, - "node_modules/loupe": { - "version": "3.2.1", - "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz", - "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==", + "node_modules/nyc/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", "dev": true, "license": "MIT" }, - "node_modules/lz-string": { - "version": "1.5.0", - "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz", - "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==", + "node_modules/nyc/node_modules/foreground-child": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz", + "integrity": "sha512-dCIq9FpEcyQyXKCkyzmlPTFNgrCzPudOe+mhvJU5zAtlBnGVy2yKxtfsxK2tQBThwq225jcvBjpw1Gr40uzZCA==", "dev": true, - "license": "MIT", - "bin": { - "lz-string": "bin/bin.js" + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.0", + "signal-exit": "^3.0.2" + }, + "engines": { + "node": ">=8.0.0" } }, - "node_modules/magic-string": { - "version": "0.30.21", - "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz", - "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==", + "node_modules/nyc/node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", "dev": true, - "license": "MIT", + "license": "ISC", "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.5" + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" } }, - "node_modules/magicast": { - "version": "0.5.4", - "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.4.tgz", - "integrity": "sha512-llBEhWm1SacoRwgHUoQJYtwp4PBLF4faQi5TCpIGyGs9n4y5+juI0tDgyKIfpqxckRHaHzouUEph3THklWh03w==", + "node_modules/nyc/node_modules/istanbul-lib-instrument": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-4.0.3.tgz", + "integrity": "sha512-BXgQl9kf4WTCPCCpmFGoJkz/+uhvm7h7PFKUYxh7qarQd3ER33vHG//qaE8eN25l07YqZPpHXU9I09l/RD5aGQ==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "@babel/parser": "^7.29.7", - "@babel/types": "^7.29.7", - "source-map-js": "^1.2.1" + "@babel/core": "^7.7.5", + "@istanbuljs/schema": "^0.1.2", + "istanbul-lib-coverage": "^3.0.0", + "semver": "^6.3.0" + }, + "engines": { + "node": ">=8" } }, - "node_modules/make-dir": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz", - "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==", + "node_modules/nyc/node_modules/istanbul-lib-source-maps": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz", + "integrity": "sha512-n3s8EwkdFIJCG3BPKBYvskgXGoy88ARzvegkitk60NxRdwltLOTaH7CUiMRXvwYorl0Q712iEjcWB+fK/MrWVw==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "semver": "^7.5.3" + "debug": "^4.1.1", + "istanbul-lib-coverage": "^3.0.0", + "source-map": "^0.6.1" }, "engines": { "node": ">=10" + } + }, + "node_modules/nyc/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/min-indent": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz", - "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==", + "node_modules/nyc/node_modules/minimatch": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz", + "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, + "node_modules/nyc/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/nyc/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/nyc/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/nyc/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", "dev": true, "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, "engines": { - "node": ">=4" + "node": ">=8" } }, - "node_modules/mri": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz", - "integrity": "sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==", + "node_modules/nyc/node_modules/wrap-ansi": { + "version": "6.2.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz", + "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==", "dev": true, "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, "engines": { - "node": ">=4" + "node": ">=8" } }, - "node_modules/mrmime": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz", - "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==", + "node_modules/nyc/node_modules/y18n": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz", + "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/nyc/node_modules/yargs": { + "version": "15.4.1", + "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz", + "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==", "dev": true, "license": "MIT", + "dependencies": { + "cliui": "^6.0.0", + "decamelize": "^1.2.0", + "find-up": "^4.1.0", + "get-caller-file": "^2.0.1", + "require-directory": "^2.1.1", + "require-main-filename": "^2.0.0", + "set-blocking": "^2.0.0", + "string-width": "^4.2.0", + "which-module": "^2.0.0", + "y18n": "^4.0.0", + "yargs-parser": "^18.1.2" + }, "engines": { - "node": ">=10" + "node": ">=8" } }, - "node_modules/nanoid": { - "version": "3.3.18", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", - "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", + "node_modules/nyc/node_modules/yargs-parser": { + "version": "18.1.3", + "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz", + "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==", "dev": true, - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "license": "MIT", - "bin": { - "nanoid": "bin/nanoid.cjs" + "license": "ISC", + "dependencies": { + "camelcase": "^5.0.0", + "decamelize": "^1.2.0" }, "engines": { - "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" + "node": ">=6" } }, "node_modules/obug": { @@ -3402,6 +8459,32 @@ "node": ">=12.20.0" } }, + "node_modules/once": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", + "dev": true, + "license": "ISC", + "dependencies": { + "wrappy": "1" + } + }, + "node_modules/onetime": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz", + "integrity": "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "mimic-fn": "^2.1.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/open": { "version": "10.2.0", "resolved": "https://registry.npmjs.org/open/-/open-10.2.0.tgz", @@ -3421,6 +8504,16 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/os-homedir": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz", + "integrity": "sha512-B5JU3cabzk8c67mRRd3ECmROafjYMXbuzlwtqdM8IbS8ktlTix8aFGb2bAGKrSRIlnfKwovGUUr72JUPyOb6kQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, "node_modules/oxc-parser": { "version": "0.127.0", "resolved": "https://registry.npmjs.org/oxc-parser/-/oxc-parser-0.127.0.tgz", @@ -3500,6 +8593,180 @@ "@oxc-resolver/binding-win32-x64-msvc": "11.21.2" } }, + "node_modules/p-limit": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz", + "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "yocto-queue": "^0.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/p-locate": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz", + "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==", + "dev": true, + "license": "MIT", + "dependencies": { + "p-limit": "^2.2.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/p-locate/node_modules/p-limit": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz", + "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==", + "dev": true, + "license": "MIT", + "dependencies": { + "p-try": "^2.0.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/p-map": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/p-map/-/p-map-3.0.0.tgz", + "integrity": "sha512-d3qXVTF/s+W+CdJ5A29wywV2n8CQQYahlgz2bFiA+4eVNJbHJodPZ+/gXwPGh0bOqA+j8S+6+ckmvLGPk1QpxQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "aggregate-error": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/p-try": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz", + "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/package-hash": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/package-hash/-/package-hash-4.0.0.tgz", + "integrity": "sha512-whdkPIooSu/bASggZ96BWVvZTRMOFxnyUG5PnTSGKoJE2gd5mbVNmR2Nj20QFzxYYgAXpoqC+AiXzl+UMRh7zQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "graceful-fs": "^4.1.15", + "hasha": "^5.0.0", + "lodash.flattendeep": "^4.4.0", + "release-zalgo": "^1.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/package-json-from-dist": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz", + "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==", + "dev": true, + "license": "BlueOak-1.0.0" + }, + "node_modules/parse-json": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz", + "integrity": "sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.0.0", + "error-ex": "^1.3.1", + "json-parse-even-better-errors": "^2.3.0", + "lines-and-columns": "^1.1.6" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/parse-passwd": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz", + "integrity": "sha512-1Y1A//QUXEZK7YKz+rD9WydcE1+EuPr6ZBgKecAB8tmoW6UFv0NREVJe1p+jRxtThkcbbKkfwIbWJe/IeE6m2Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/path-exists": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz", + "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-is-absolute": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/path-key": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", + "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-scurry": { + "version": "1.11.1", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz", + "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "lru-cache": "^10.2.0", + "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" + }, + "engines": { + "node": ">=16 || 14 >=14.18" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/path-scurry/node_modules/lru-cache": { + "version": "10.4.3", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz", + "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==", + "dev": true, + "license": "ISC" + }, "node_modules/pathe": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz", @@ -3537,6 +8804,76 @@ "url": "https://github.com/sponsors/jonschlinkert" } }, + "node_modules/pirates": { + "version": "4.0.7", + "resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz", + "integrity": "sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 6" + } + }, + "node_modules/pkg-dir": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz", + "integrity": "sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "find-up": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/playwright": { + "version": "1.62.1", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.62.1.tgz", + "integrity": "sha512-0M+L3LAD8/nm554LOla9Ayx0j0tmFZ0FBcoQ7F1VuVHpM/XpiC8RcDzBQB8W5+hA8L22THxELzeF+2WcUzvcLg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright-core": "1.62.1" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=20" + }, + "optionalDependencies": { + "fsevents": "2.3.2" + } + }, + "node_modules/playwright-core": { + "version": "1.62.1", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.62.1.tgz", + "integrity": "sha512-wPYSwEBJY9GHraISXqyqtx0na0LpO3XEX7jNDhntbex7tzUS7kLnZsOlFruFJB4Hi/rhDMjXGqHewDZ68nYZVw==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "playwright-core": "cli.js" + }, + "engines": { + "node": ">=20" + } + }, + "node_modules/playwright/node_modules/fsevents": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz", + "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, "node_modules/postcss": { "version": "8.5.25", "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz", @@ -3581,6 +8918,70 @@ "node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0" } }, + "node_modules/process-on-spawn": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/process-on-spawn/-/process-on-spawn-1.1.0.tgz", + "integrity": "sha512-JOnOPQ/8TZgjs1JIH/m9ni7FfimjNa/PRx7y/Wb5qdItsnhO0jE4AT7fC0HjC28DUQWDr50dwSYZLdRMlqDq3Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "fromentries": "^1.2.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/prompts": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz", + "integrity": "sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "kleur": "^3.0.3", + "sisteransi": "^1.0.5" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/prompts/node_modules/kleur": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz", + "integrity": "sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/proxy-from-env": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz", + "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + } + }, + "node_modules/pure-rand": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-7.0.1.tgz", + "integrity": "sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==", + "dev": true, + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/dubzzz" + }, + { + "type": "opencollective", + "url": "https://opencollective.com/fast-check" + } + ], + "license": "MIT" + }, "node_modules/react": { "version": "19.2.8", "resolved": "https://registry.npmjs.org/react/-/react-19.2.8.tgz", @@ -3599,6 +9000,37 @@ "dev": true, "license": "MIT" }, + "node_modules/react-is-18": { + "name": "react-is", + "version": "18.3.1", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz", + "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==", + "dev": true, + "license": "MIT" + }, + "node_modules/react-is-19": { + "name": "react-is", + "version": "19.2.8", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-19.2.8.tgz", + "integrity": "sha512-s5un28nYxKJw5gvUHyW5PCC28CvBqLu9r3cWgzHT4Vo/5fqqkFcdRYsGcKf50WMPpjjFZS5d76fn3YCo2njKwQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/readable-stream": { + "version": "3.6.2", + "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", + "dev": true, + "license": "MIT", + "dependencies": { + "inherits": "^2.0.3", + "string_decoder": "^1.1.1", + "util-deprecate": "^1.0.1" + }, + "engines": { + "node": ">= 6" + } + }, "node_modules/readdirp": { "version": "4.1.2", "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz", @@ -3644,6 +9076,136 @@ "node": ">=8" } }, + "node_modules/release-zalgo": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/release-zalgo/-/release-zalgo-1.0.0.tgz", + "integrity": "sha512-gUAyHVHPPC5wdqX/LG4LWtRYtgjxyX78oanFNTMMyFEfOqdC54s3eE82imuWKbOeqYht2CrNf64Qb8vgmmtZGA==", + "dev": true, + "license": "ISC", + "dependencies": { + "es6-error": "^4.0.1" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/require-directory": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz", + "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/require-main-filename": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz", + "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==", + "dev": true, + "license": "ISC" + }, + "node_modules/resolve-cwd": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz", + "integrity": "sha512-OrZaX2Mb+rJCpH/6CpSqt9xFVpN++x01XnN2ie9g6P5/3xelLAkXWVADpdz1IHD/KFfEXyE6V0U01OQ3UO2rEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "resolve-from": "^5.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/resolve-dir": { + "version": "0.1.1", + "resolved": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz", + "integrity": "sha512-QxMPqI6le2u0dCLyiGzgy92kjkkL6zO0XyvHzjdTNH3zM6e5Hz3BwG6+aEyNgiQ5Xz6PwTwgQEj3U50dByPKIA==", + "dev": true, + "license": "MIT", + "dependencies": { + "expand-tilde": "^1.2.2", + "global-modules": "^0.2.3" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/resolve-from": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz", + "integrity": "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/rimraf": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "integrity": "sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==", + "deprecated": "Rimraf versions prior to v4 are no longer supported", + "dev": true, + "license": "ISC", + "dependencies": { + "glob": "^7.1.3" + }, + "bin": { + "rimraf": "bin.js" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/rimraf/node_modules/brace-expansion": { + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/rimraf/node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/rimraf/node_modules/minimatch": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz", + "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, "node_modules/rolldown": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.2.tgz", @@ -3690,86 +9252,303 @@ "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/sade": { - "version": "1.8.1", - "resolved": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz", - "integrity": "sha512-xal3CZX1Xlo/k4ApwCFrHVACi9fBqJ7V+mwhBsuf/1IOKbBy098Fex+Wa/5QMubw09pSZ/u8EY8PWgevJsXp1A==", + "node_modules/rxjs": { + "version": "7.8.2", + "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz", + "integrity": "sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "tslib": "^2.1.0" + } + }, + "node_modules/sade": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz", + "integrity": "sha512-xal3CZX1Xlo/k4ApwCFrHVACi9fBqJ7V+mwhBsuf/1IOKbBy098Fex+Wa/5QMubw09pSZ/u8EY8PWgevJsXp1A==", + "dev": true, + "license": "MIT", + "dependencies": { + "mri": "^1.1.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/scule": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/scule/-/scule-1.3.0.tgz", + "integrity": "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==", + "dev": true, + "license": "MIT" + }, + "node_modules/semver": { + "version": "7.8.5", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz", + "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/set-blocking": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==", + "dev": true, + "license": "ISC" + }, + "node_modules/set-cookie-parser": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-3.1.2.tgz", + "integrity": "sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==", + "dev": true, + "license": "MIT" + }, + "node_modules/shebang-command": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", + "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", + "dev": true, + "license": "MIT", + "dependencies": { + "shebang-regex": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/shebang-regex": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", + "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/siginfo": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz", + "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==", + "dev": true, + "license": "ISC" + }, + "node_modules/signal-exit": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz", + "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/sirv": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/sirv/-/sirv-3.0.2.tgz", + "integrity": "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@polka/url": "^1.0.0-next.24", + "mrmime": "^2.0.0", + "totalist": "^3.0.0" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/sisteransi": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz", + "integrity": "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==", + "dev": true, + "license": "MIT" + }, + "node_modules/slash": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz", + "integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/source-map": { + "version": "0.6.1", + "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", + "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/source-map-js": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", + "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/source-map-support": { + "version": "0.5.13", + "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.13.tgz", + "integrity": "sha512-SHSKFHadjVA5oR4PPqhtAVdcBWwRYVd6g6cAXnIbRiIwc2EhPrTuKUBdSLvlEKyIP3GCf89fltvcZiP9MMFA1w==", + "dev": true, + "license": "MIT", + "dependencies": { + "buffer-from": "^1.0.0", + "source-map": "^0.6.0" + } + }, + "node_modules/spawn-wrap": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-2.0.0.tgz", + "integrity": "sha512-EeajNjfN9zMnULLwhZZQU3GWBoFNkbngTUPfaawT4RkMiviTxcX0qfhVbGey39mfctfDHkWtuecgQ8NJcyQWHg==", + "dev": true, + "license": "ISC", + "dependencies": { + "foreground-child": "^2.0.0", + "is-windows": "^1.0.2", + "make-dir": "^3.0.0", + "rimraf": "^3.0.0", + "signal-exit": "^3.0.2", + "which": "^2.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/spawn-wrap/node_modules/foreground-child": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz", + "integrity": "sha512-dCIq9FpEcyQyXKCkyzmlPTFNgrCzPudOe+mhvJU5zAtlBnGVy2yKxtfsxK2tQBThwq225jcvBjpw1Gr40uzZCA==", + "dev": true, + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.0", + "signal-exit": "^3.0.2" + }, + "engines": { + "node": ">=8.0.0" + } + }, + "node_modules/spawn-wrap/node_modules/is-windows": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz", + "integrity": "sha512-eXK1UInq2bPmjyX6e3VHIzMLobc4J94i4AWn+Hpq3OU5KkrRC96OAcR3PRJ/pGu6m8TRnBHP9dkXQVsT/COVIA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/spawn-wrap/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", "dev": true, "license": "MIT", "dependencies": { - "mri": "^1.1.0" + "semver": "^6.0.0" }, "engines": { - "node": ">=6" + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/scule": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/scule/-/scule-1.3.0.tgz", - "integrity": "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==", - "dev": true, - "license": "MIT" - }, - "node_modules/semver": { - "version": "7.8.5", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz", - "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==", + "node_modules/spawn-wrap/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", "dev": true, "license": "ISC", "bin": { "semver": "bin/semver.js" - }, - "engines": { - "node": ">=10" } }, - "node_modules/set-cookie-parser": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-3.1.2.tgz", - "integrity": "sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==", - "dev": true, - "license": "MIT" - }, - "node_modules/siginfo": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz", - "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==", + "node_modules/spawn-wrap/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", "dev": true, "license": "ISC" }, - "node_modules/sirv": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/sirv/-/sirv-3.0.2.tgz", - "integrity": "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==", + "node_modules/spawnd": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/spawnd/-/spawnd-5.0.0.tgz", + "integrity": "sha512-28+AJr82moMVWolQvlAIv3JcYDkjkFTEmfDc503wxrF5l2rQ3dFz6DpbXp3kD4zmgGGldfM4xM4v1sFj/ZaIOA==", "dev": true, "license": "MIT", "dependencies": { - "@polka/url": "^1.0.0-next.24", - "mrmime": "^2.0.0", - "totalist": "^3.0.0" - }, - "engines": { - "node": ">=18" + "exit": "^0.1.2", + "signal-exit": "^3.0.3", + "tree-kill": "^1.2.2", + "wait-port": "^0.2.9" } }, - "node_modules/source-map": { - "version": "0.6.1", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", - "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", + "node_modules/spawnd/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", "dev": true, - "license": "BSD-3-Clause", - "engines": { - "node": ">=0.10.0" - } + "license": "ISC" }, - "node_modules/source-map-js": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", - "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "node_modules/sprintf-js": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==", "dev": true, - "license": "BSD-3-Clause", + "license": "BSD-3-Clause" + }, + "node_modules/stack-utils": { + "version": "2.0.6", + "resolved": "https://registry.npmjs.org/stack-utils/-/stack-utils-2.0.6.tgz", + "integrity": "sha512-XlkWvfIm6RmsWtNJx+uqtKLS8eqFbxUg0ZzLXqY0caEy9l7hruX8IpiDnjsLavoBgqCCR71TqWO8MaXYheJ3RQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "escape-string-regexp": "^2.0.0" + }, "engines": { - "node": ">=0.10.0" + "node": ">=10" } }, "node_modules/stackback": { @@ -3920,6 +9699,160 @@ "node": ">=14.0.0" } }, + "node_modules/string_decoder": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", + "dev": true, + "license": "MIT", + "dependencies": { + "safe-buffer": "~5.2.0" + } + }, + "node_modules/string-length": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/string-length/-/string-length-4.0.2.tgz", + "integrity": "sha512-+l6rNN5fYHNhZZy41RXsYptCjA2Igmq4EG7kZAYFQI1E1VTXarr6ZPXBg6eq7Y6eK4FEhY6AJlyuFIb/v/S0VQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "char-regex": "^1.0.2", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/string-length/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/string-width-cjs": { + "name": "string-width", + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/string-width-cjs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz", + "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^6.2.2" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, + "node_modules/strip-ansi-cjs": { + "name": "strip-ansi", + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi/node_modules/ansi-regex": { + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.3.0.tgz", + "integrity": "sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/strip-bom": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz", + "integrity": "sha512-3xurFv5tEgii33Zi8Jtp55wEIILR9eh34FAW00PZf+JnSsTmV/ioewSgQl97JHvgjoRGwPShsWm+IdrxB35d0w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-final-newline": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz", + "integrity": "sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, "node_modules/strip-indent": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz", @@ -3933,6 +9866,19 @@ "node": ">=8" } }, + "node_modules/strip-json-comments": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz", + "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/supports-color": { "version": "7.2.0", "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", @@ -4014,6 +9960,22 @@ "typescript": "^4.9.4 || ^5.0.0 || ^6.0.0" } }, + "node_modules/synckit": { + "version": "0.11.13", + "resolved": "https://registry.npmjs.org/synckit/-/synckit-0.11.13.tgz", + "integrity": "sha512-eNRKgb3z66Yp3D2CixVujOUvXLFUTij/zVnV8KRyvFdQwpz7I5DS8UfRkTeLzb64u+dkzDSdelE24izu+zSSUg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@pkgr/core": "^0.3.6" + }, + "engines": { + "node": "^14.18.0 || >=16.0.0" + }, + "funding": { + "url": "https://opencollective.com/synckit" + } + }, "node_modules/tagged-tag": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/tagged-tag/-/tagged-tag-1.0.0.tgz", @@ -4027,6 +9989,67 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/test-exclude": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz", + "integrity": "sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==", + "dev": true, + "license": "ISC", + "dependencies": { + "@istanbuljs/schema": "^0.1.2", + "glob": "^7.1.4", + "minimatch": "^3.0.4" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/test-exclude/node_modules/brace-expansion": { + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/test-exclude/node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/test-exclude/node_modules/minimatch": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz", + "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, "node_modules/tiny-invariant": { "version": "1.3.3", "resolved": "https://registry.npmjs.org/tiny-invariant/-/tiny-invariant-1.3.3.tgz", @@ -4088,6 +10111,13 @@ "node": ">=14.0.0" } }, + "node_modules/tmpl": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz", + "integrity": "sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==", + "dev": true, + "license": "BSD-3-Clause" + }, "node_modules/totalist": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/totalist/-/totalist-3.0.1.tgz", @@ -4098,6 +10128,16 @@ "node": ">=6" } }, + "node_modules/tree-kill": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz", + "integrity": "sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==", + "dev": true, + "license": "MIT", + "bin": { + "tree-kill": "cli.js" + } + }, "node_modules/ts-dedent": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/ts-dedent/-/ts-dedent-2.3.0.tgz", @@ -4115,6 +10155,16 @@ "dev": true, "license": "0BSD" }, + "node_modules/type-detect": { + "version": "4.0.8", + "resolved": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz", + "integrity": "sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4" + } + }, "node_modules/type-fest": { "version": "5.8.0", "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-5.8.0.tgz", @@ -4131,6 +10181,16 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/typedarray-to-buffer": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz", + "integrity": "sha512-zdu8XMNEDepKKR+XYOXAVPtWui0ly0NtohUscw+UmaHiAWT8hrV1rr//H6V+0DvJ3OQ19S979M0laLfX8rm82Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-typedarray": "^1.0.0" + } + }, "node_modules/typescript": { "version": "5.6.3", "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz", @@ -4159,13 +10219,82 @@ "dev": true, "license": "MIT", "dependencies": { - "@jridgewell/remapping": "^2.3.5", - "acorn": "^8.15.0", - "picomatch": "^4.0.3", - "webpack-virtual-modules": "^0.6.2" + "@jridgewell/remapping": "^2.3.5", + "acorn": "^8.15.0", + "picomatch": "^4.0.3", + "webpack-virtual-modules": "^0.6.2" + }, + "engines": { + "node": ">=18.12.0" + } + }, + "node_modules/unrs-resolver": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/unrs-resolver/-/unrs-resolver-1.12.2.tgz", + "integrity": "sha512-dmlRxBJJayXjqTwC+JtF1HhJmgf3ftQ3YejFcZrf4+KKtJv0qDsK1pjqaaVjG7wJ5NJ6UVP1OqRMQ71Z4C3rxQ==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "dependencies": { + "napi-postinstall": "^0.3.4" + }, + "funding": { + "url": "https://opencollective.com/unrs-resolver" + }, + "optionalDependencies": { + "@unrs/resolver-binding-android-arm-eabi": "1.12.2", + "@unrs/resolver-binding-android-arm64": "1.12.2", + "@unrs/resolver-binding-darwin-arm64": "1.12.2", + "@unrs/resolver-binding-darwin-x64": "1.12.2", + "@unrs/resolver-binding-freebsd-x64": "1.12.2", + "@unrs/resolver-binding-linux-arm-gnueabihf": "1.12.2", + "@unrs/resolver-binding-linux-arm-musleabihf": "1.12.2", + "@unrs/resolver-binding-linux-arm64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-arm64-musl": "1.12.2", + "@unrs/resolver-binding-linux-loong64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-loong64-musl": "1.12.2", + "@unrs/resolver-binding-linux-ppc64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-riscv64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-riscv64-musl": "1.12.2", + "@unrs/resolver-binding-linux-s390x-gnu": "1.12.2", + "@unrs/resolver-binding-linux-x64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-x64-musl": "1.12.2", + "@unrs/resolver-binding-openharmony-arm64": "1.12.2", + "@unrs/resolver-binding-wasm32-wasi": "1.12.2", + "@unrs/resolver-binding-win32-arm64-msvc": "1.12.2", + "@unrs/resolver-binding-win32-ia32-msvc": "1.12.2", + "@unrs/resolver-binding-win32-x64-msvc": "1.12.2" + } + }, + "node_modules/update-browserslist-db": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.1.tgz", + "integrity": "sha512-ZZ61DsRsOnakl74HAmp3oSN4aXUmEWXf+i/yv0h7tIBfICc3VdrFErQKUUKPgu3AMsTUMbcongALEN4l6GSUrQ==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/browserslist" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "escalade": "^3.2.0", + "picocolors": "^1.1.1" }, - "engines": { - "node": ">=18.12.0" + "bin": { + "update-browserslist-db": "cli.js" + }, + "peerDependencies": { + "browserslist": ">= 4.21.0" } }, "node_modules/use-sync-external-store": { @@ -4178,6 +10307,42 @@ "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, + "node_modules/util-deprecate": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==", + "dev": true, + "license": "MIT" + }, + "node_modules/uuid": { + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "dev": true, + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], + "license": "MIT", + "bin": { + "uuid": "dist/esm/bin/uuid" + } + }, + "node_modules/v8-to-istanbul": { + "version": "9.3.0", + "resolved": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz", + "integrity": "sha512-kiGUalWN+rgBJ/1OHZsBtU4rXZOfj/7rKQxULKlIzwzQSvMJUUNgPwJEEh7gU6xEVxC0ahoOBvN2YI8GH6FNgA==", + "dev": true, + "license": "ISC", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.12", + "@types/istanbul-lib-coverage": "^2.0.1", + "convert-source-map": "^2.0.0" + }, + "engines": { + "node": ">=10.12.0" + } + }, "node_modules/vite": { "version": "8.2.1", "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.1.tgz", @@ -4366,6 +10531,139 @@ } } }, + "node_modules/wait-on": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/wait-on/-/wait-on-7.2.0.tgz", + "integrity": "sha512-wCQcHkRazgjG5XoAq9jbTMLpNIjoSlZslrJ2+N9MxDsGEv1HnFoVjOCexL0ESva7Y9cu350j+DWADdk54s4AFQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "axios": "^1.6.1", + "joi": "^17.11.0", + "lodash": "^4.17.21", + "minimist": "^1.2.8", + "rxjs": "^7.8.1" + }, + "bin": { + "wait-on": "bin/wait-on" + }, + "engines": { + "node": ">=12.0.0" + } + }, + "node_modules/wait-port": { + "version": "0.2.14", + "resolved": "https://registry.npmjs.org/wait-port/-/wait-port-0.2.14.tgz", + "integrity": "sha512-kIzjWcr6ykl7WFbZd0TMae8xovwqcqbx6FM9l+7agOgUByhzdjfzZBPK2CPufldTOMxbUivss//Sh9MFawmPRQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "chalk": "^2.4.2", + "commander": "^3.0.2", + "debug": "^4.1.1" + }, + "bin": { + "wait-port": "bin/wait-port.js" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wait-port/node_modules/ansi-styles": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz", + "integrity": "sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^1.9.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/wait-port/node_modules/chalk": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz", + "integrity": "sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^3.2.1", + "escape-string-regexp": "^1.0.5", + "supports-color": "^5.3.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/wait-port/node_modules/color-convert": { + "version": "1.9.3", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz", + "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "1.1.3" + } + }, + "node_modules/wait-port/node_modules/color-name": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz", + "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==", + "dev": true, + "license": "MIT" + }, + "node_modules/wait-port/node_modules/commander": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/commander/-/commander-3.0.2.tgz", + "integrity": "sha512-Gar0ASD4BDyKC4hl4DwHqDrmvjoxWKZigVnAbn5H1owvm4CxCPdb0HQDehwNYMJpla5+M2tPmPARzhtYuwpHow==", + "dev": true, + "license": "MIT" + }, + "node_modules/wait-port/node_modules/escape-string-regexp": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz", + "integrity": "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.8.0" + } + }, + "node_modules/wait-port/node_modules/has-flag": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz", + "integrity": "sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/wait-port/node_modules/supports-color": { + "version": "5.5.0", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz", + "integrity": "sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==", + "dev": true, + "license": "MIT", + "dependencies": { + "has-flag": "^3.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/walker": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/walker/-/walker-1.0.8.tgz", + "integrity": "sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "makeerror": "1.0.12" + } + }, "node_modules/webpack-virtual-modules": { "version": "0.6.2", "resolved": "https://registry.npmjs.org/webpack-virtual-modules/-/webpack-virtual-modules-0.6.2.tgz", @@ -4373,6 +10671,29 @@ "dev": true, "license": "MIT" }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/which-module": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz", + "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==", + "dev": true, + "license": "ISC" + }, "node_modules/why-is-node-running": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz", @@ -4390,6 +10711,128 @@ "node": ">=8" } }, + "node_modules/wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs": { + "name": "wrap-ansi", + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/wrap-ansi-cjs/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi/node_modules/ansi-styles": { + "version": "6.2.3", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz", + "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/wrappy": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/write-file-atomic": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-5.0.1.tgz", + "integrity": "sha512-+QU2zd6OTD8XWIJCbffaiQeH9U73qIqafo1x6V1snCWYGJf6cVE0cDR4D8xRzcEnfI21IFrUPzPGtcPf8AC+Rw==", + "dev": true, + "license": "ISC", + "dependencies": { + "imurmurhash": "^0.1.4", + "signal-exit": "^4.0.1" + }, + "engines": { + "node": "^14.17.0 || ^16.13.0 || >=18.0.0" + } + }, "node_modules/ws": { "version": "8.21.3", "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz", @@ -4428,6 +10871,107 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/xml": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/xml/-/xml-1.0.1.tgz", + "integrity": "sha512-huCv9IH9Tcf95zuYCsQraZtWnJvBtLVE0QHMOs8bWyZAFZNDcYjsPq1nEx8jKA9y+Beo9v+7OBPRisQTjinQMw==", + "dev": true, + "license": "MIT" + }, + "node_modules/y18n": { + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz", + "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=10" + } + }, + "node_modules/yallist": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz", + "integrity": "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==", + "dev": true, + "license": "ISC" + }, + "node_modules/yargs": { + "version": "17.7.3", + "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.3.tgz", + "integrity": "sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==", + "dev": true, + "license": "MIT", + "dependencies": { + "cliui": "^8.0.1", + "escalade": "^3.1.1", + "get-caller-file": "^2.0.5", + "require-directory": "^2.1.1", + "string-width": "^4.2.3", + "y18n": "^5.0.5", + "yargs-parser": "^21.1.1" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/yargs-parser": { + "version": "21.1.1", + "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz", + "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/yargs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/yargs/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/yargs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/yocto-queue": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", + "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/zimmerframe": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/zimmerframe/-/zimmerframe-1.1.4.tgz", diff --git a/package.json b/package.json index 88618a049..c02d54a98 100644 --- a/package.json +++ b/package.json @@ -9,6 +9,7 @@ "build": "npm run verify:release-version && vite build", "storybook": "storybook dev -p 6006", "build-storybook": "storybook build", + "test-storybook": "test-storybook", "preview": "vite preview", "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json", "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch", @@ -24,7 +25,8 @@ "overrides": { "cookie": "^0.7.2", "nanoid": "^3.3.18", - "postcss": "^8.5.18" + "postcss": "^8.5.18", + "uuid": "^11.1.1" }, "dependencies": { "@tauri-apps/api": "^2", @@ -34,6 +36,7 @@ "devDependencies": { "@storybook/addon-a11y": "^10.5.10", "@storybook/sveltekit": "^10.5.10", + "@storybook/test-runner": "^0.24.4", "@sveltejs/adapter-static": "^3.0.6", "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.3.0", diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts index ad4aab8de..207b63c09 100644 --- a/src/lib/ux/ProviderStatusCard.stories.ts +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -28,6 +28,7 @@ export const Clear: Story = { }; export const MaterializationStalled: Story = { + parameters: { viewport: { defaultViewport: "mobile" } }, args: { provider: "iCloud", state: "materialization-stalled", diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index d81cddb49..f7ce0801d 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -38,7 +38,10 @@ describe("UI/UX design and Storybook contract", () => { expect(story).toContain("toBeDisabled"); expect(config).toContain('test: "error"'); expect(config).toContain("mobile"); + expect(config).toContain('defaultViewport: "desktop"'); + expect(story).toContain('defaultViewport: "mobile"'); expect(workflow).toContain("npm run build-storybook"); + expect(workflow).toContain("npm run test-storybook"); }); it("uses release-consumer terminology rather than a shopping-domain actor", () => { From dc5a900e466e00fab90b5c47a96982857f27659c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 18:21:09 +0900 Subject: [PATCH 487/691] ci: install Chromium for Storybook checks --- .github/workflows/test.yml | 1 + docs/product-technical-gap-baseline.md | 2 +- src/lib/uxContract.test.ts | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f10dc16e4..8e30b9870 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -41,6 +41,7 @@ jobs: with: node-version: 20.19.0 - run: npm ci + - run: npx playwright install --with-deps chromium - run: npm test - run: npm run build - run: npm run build-storybook diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 0a262a4e6..108c062eb 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -60,7 +60,7 @@ baseline records the current loop's runtime and integration evidence. evidence, materialization stall, cancel callback, disabled action, mobile viewport, and reduced motion states. The a11y addon is configured to fail a story on detected violations; Storybook is development-only and cannot authorize cloud writes or source eviction. -- Local evidence at this implementation snapshot: `npm test` 30 files/129 tests, `svelte-check` +- Local evidence at this implementation snapshot: `npm test` 32 files/134 tests, `svelte-check` 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and the Storybook test runner passed 4 smoke/interaction stories in Chromium. The production and development dependency audit reported 0 vulnerabilities after the uuid override. The Storybook diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index f7ce0801d..8032bb32b 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -41,6 +41,7 @@ describe("UI/UX design and Storybook contract", () => { expect(config).toContain('defaultViewport: "desktop"'); expect(story).toContain('defaultViewport: "mobile"'); expect(workflow).toContain("npm run build-storybook"); + expect(workflow).toContain("playwright install --with-deps chromium"); expect(workflow).toContain("npm run test-storybook"); }); From 9b7422ab5a2dc2727e5dec9ff74592caf8afc9e8 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 18:24:13 +0900 Subject: [PATCH 488/691] fix: enforce Storybook accessibility edges --- .storybook/test-runner.ts | 12 ++++++++++++ src/lib/ux/ProviderStatusCard.stories.ts | 4 ++++ src/lib/ux/ProviderStatusCard.svelte | 4 ++-- src/lib/uxContract.test.ts | 2 ++ src/routes/+page.svelte | 2 +- 5 files changed, 21 insertions(+), 3 deletions(-) create mode 100644 .storybook/test-runner.ts diff --git a/.storybook/test-runner.ts b/.storybook/test-runner.ts new file mode 100644 index 000000000..dd1bce5fa --- /dev/null +++ b/.storybook/test-runner.ts @@ -0,0 +1,12 @@ +import { getStoryContext, type TestRunnerConfig } from "@storybook/test-runner"; + +const config: TestRunnerConfig = { + async preVisit(page, story) { + const context = await getStoryContext(page, story); + if (context.parameters?.viewport?.defaultViewport === "mobile") { + await page.setViewportSize({ width: 375, height: 812 }); + } + }, +}; + +export default config; diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts index 207b63c09..784c33d8a 100644 --- a/src/lib/ux/ProviderStatusCard.stories.ts +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -20,6 +20,7 @@ type Story = StoryObj; export const Clear: Story = { args: { + statusId: "clear-provider-status", provider: "iCloud", state: "clear", details: "새 복사는 허용할 수 있지만 개별 파일 attestation은 별도로 필요합니다.", @@ -30,6 +31,7 @@ export const Clear: Story = { export const MaterializationStalled: Story = { parameters: { viewport: { defaultViewport: "mobile" } }, args: { + statusId: "stalled-provider-status", provider: "iCloud", state: "materialization-stalled", details: "File Provider 요청이 진행률 없이 만료되어 새 복사와 원본 정리를 차단했습니다.", @@ -48,6 +50,7 @@ export const MaterializationStalled: Story = { export const CheckingWithoutAction: Story = { args: { + statusId: "checking-provider-status", provider: "Google Drive", state: "checking", details: "공급자 전역 증거를 읽기 전용으로 확인하고 있습니다.", @@ -61,6 +64,7 @@ export const CheckingWithoutAction: Story = { export const IncompleteEvidence: Story = { args: { + statusId: "incomplete-provider-status", provider: "OneDrive", state: "provider-sync-incomplete", details: "공급자 상태 증거가 완전하지 않아 기존 목적지를 채택하지 않습니다.", diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte index b98b22477..9aa776714 100644 --- a/src/lib/ux/ProviderStatusCard.svelte +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -10,7 +10,7 @@ canCancel?: boolean; cancelLabel?: string; onCancel?: () => void; - statusId?: string; + statusId: string; }; let { @@ -22,7 +22,7 @@ canCancel = false, cancelLabel = "복사 취소 요청", onCancel, - statusId = "provider-status", + statusId, }: Props = $props(); const stateLabel: Record = { diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index 8032bb32b..51ac5e14c 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -23,6 +23,7 @@ describe("UI/UX design and Storybook contract", () => { expect(page).toContain('id="main-content" tabindex="-1"'); expect(page).toContain('for="scan-root"'); expect(page).toContain('role="alert"'); + expect(page).toContain('role="group" aria-label="스캔 제어"'); expect(page).toContain('aria-live="polite"'); expect(page).not.toContain("alert(`스캔 시작 실패"); }); @@ -43,6 +44,7 @@ describe("UI/UX design and Storybook contract", () => { expect(workflow).toContain("npm run build-storybook"); expect(workflow).toContain("playwright install --with-deps chromium"); expect(workflow).toContain("npm run test-storybook"); + expect(read(".storybook/test-runner.ts")).toContain("setViewportSize"); }); it("uses release-consumer terminology rather than a shopping-domain actor", () => { diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte index 0497efd07..88b3b42b6 100644 --- a/src/routes/+page.svelte +++ b/src/routes/+page.svelte @@ -96,7 +96,7 @@

DiskSage

-
+
{#if scanning} - + {:else} - + {/if} {#if stats} From 9f2644a8a84a399149d6a1b8cc3094096d5f2939 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 03:08:40 -0700 Subject: [PATCH 502/691] fix: opt provider action into design controls --- src/lib/ux/ProviderStatusCard.svelte | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte index 72504e037..820ec6174 100644 --- a/src/lib/ux/ProviderStatusCard.svelte +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -62,6 +62,7 @@ {/if} {#if canCancel}

- npm·pnpm·Adobe·Edge 캐시만 대상으로 하며, 사용 중이거나 증거가 바뀐 항목은 자동으로 건너뜁니다. + npm·pnpm·Adobe·Edge·uv·Trivy 캐시만 대상으로 하며, 사용 중이거나 증거가 바뀐 항목은 자동으로 건너뜁니다.

{#if cacheRetryMessage}

{cacheRetryMessage}

{/if}
    diff --git a/src/lib/cacheCleanupFlowContract.test.ts b/src/lib/cacheCleanupFlowContract.test.ts index 7df716190..842a5cba7 100644 --- a/src/lib/cacheCleanupFlowContract.test.ts +++ b/src/lib/cacheCleanupFlowContract.test.ts @@ -19,6 +19,7 @@ describe("cache cleanup execution boundary", () => { expect(cleanup).toContain("api.cleanCacheContents(candidate.path, targets)"); expect(cleanup).toContain("api.cleanRegenerableCaches()"); expect(cleanup).toContain("객체 지문·크기·수정시각"); + expect(cleanup).toContain("npm·pnpm·Adobe·Edge·uv·Trivy 캐시만 대상으로"); expect(backend).toContain("pub fn clean_cache_contents("); expect(backend).toContain("cache-cleanup-targets-stale"); expect(backend).toContain("trash_delete_if_identity("); From a66c4563a4c5e0c5003d7ac37b857777c8132cb9 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 17:59:19 +0900 Subject: [PATCH 534/691] feat: add accessible Storybook UX contracts --- .github/workflows/test.yml | 1 + .storybook/main.ts | 15 + .storybook/preview.ts | 22 + CHANGELOG.md | 6 +- .../0010-accessible-storybook-ux-contracts.md | 61 + docs/architecture/adr/README.md | 1 + docs/design/storybook-event-inventory.md | 70 + docs/doctoring/release-artifact-provenance.md | 2 +- docs/doctoring/release-version-contract.md | 2 +- docs/doctoring/rust-package-metadata.md | 2 +- docs/product-technical-gap-baseline.md | 22 +- package-lock.json | 2485 ++++++++++++++++- package.json | 6 + scripts/ci/release-version.mjs | 2 +- ...local_eviction_batch_documentation_test.rs | 2 +- src-tauri/tests/package_metadata_contract.rs | 2 +- src/app.html | 4 +- .../releaseArtifactAllowlistContract.test.ts | 2 +- src/lib/releaseProvenanceContract.test.ts | 4 +- src/lib/releaseVersionContract.test.ts | 2 +- src/lib/ui/design-tokens.css | 176 ++ src/lib/ux/ProviderStatusCard.stories.ts | 68 + src/lib/ux/ProviderStatusCard.svelte | 94 + src/lib/uxContract.test.ts | 54 + src/routes/+layout.svelte | 6 + src/routes/+page.svelte | 92 +- 26 files changed, 3059 insertions(+), 144 deletions(-) create mode 100644 .storybook/main.ts create mode 100644 .storybook/preview.ts create mode 100644 docs/architecture/adr/0010-accessible-storybook-ux-contracts.md create mode 100644 docs/design/storybook-event-inventory.md create mode 100644 src/lib/ui/design-tokens.css create mode 100644 src/lib/ux/ProviderStatusCard.stories.ts create mode 100644 src/lib/ux/ProviderStatusCard.svelte create mode 100644 src/lib/uxContract.test.ts create mode 100644 src/routes/+layout.svelte diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 68b93900a..4f45acfaa 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -43,6 +43,7 @@ jobs: - run: npm ci - run: npm test - run: npm run build + - run: npm run build-storybook windows-home-resolution: runs-on: windows-latest diff --git a/.storybook/main.ts b/.storybook/main.ts new file mode 100644 index 000000000..2d4a77bf1 --- /dev/null +++ b/.storybook/main.ts @@ -0,0 +1,15 @@ +import type { StorybookConfig } from "@storybook/sveltekit"; + +const config: StorybookConfig = { + stories: ["../src/**/*.stories.@(js|ts|svelte)"], + addons: ["@storybook/addon-a11y"], + framework: { + name: "@storybook/sveltekit", + options: {}, + }, + docs: { + autodocs: "tag", + }, +}; + +export default config; diff --git a/.storybook/preview.ts b/.storybook/preview.ts new file mode 100644 index 000000000..a523fb47b --- /dev/null +++ b/.storybook/preview.ts @@ -0,0 +1,22 @@ +import type { Preview } from "storybook"; +import "../src/lib/ui/design-tokens.css"; + +const preview: Preview = { + parameters: { + a11y: { + test: "error", + }, + controls: { + expanded: true, + }, + viewport: { + viewports: { + desktop: { name: "Desktop", styles: { width: "1280px", height: "800px" } }, + mobile: { name: "Mobile", styles: { width: "375px", height: "812px" } }, + }, + }, + }, + tags: ["autodocs"], +}; + +export default preview; diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c90bfec2..f65e54027 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,10 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and ### Changed +- Add an accessible, token-driven Svelte shell contract with Storybook scenes for provider-clear, + incomplete-evidence, materialization-stall, checking, keyboard, responsive, and reduced-motion + states. Storybook is development-only; Rust receipts and approval gates remain authoritative. + - Persist bounded, path-free local-volume snapshots from cloud plans with create-only files, content fingerprints, Unix `0400`/`0700` permissions, and shape-limited retention; surface a warning when incident-comparison evidence cannot be written without changing copy authority. @@ -91,7 +95,7 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Catalog the observed Node.js, PyTorch, Prisma, and GitHub CLI cache trees as identity-bound manual-review targets; keep them out of automatic cleanup until their active-use and rebuild contracts are independently established. -- Add buyer-verifiable release artifact provenance with read-only platform build jobs, a tag-only least-privilege attestation job, exact 18-file admission including a source-bound SPDX SBOM, adjacent operational-CLI SHA-256 verification, preserved artifact namespaces, non-regular-entry rejection, and a separate publication job that cannot publish before attestation succeeds. +- Add operator-verifiable release artifact provenance with read-only platform build jobs, a tag-only least-privilege attestation job, exact 18-file admission including a source-bound SPDX SBOM, adjacent operational-CLI SHA-256 verification, preserved artifact namespaces, non-regular-entry rejection, and a separate publication job that cannot publish before attestation succeeds. - Require explicit organization-tenant authority when either the destination account scope is organization-owned or the canonical organization-sensitive review reason is present; fail closed in both frontend projection and durable Rust transfer authorization even when the ordinary review flag is absent, and regression-test contradictory signal combinations. - Enable an explicit fail-closed Tauri Content Security Policy to keep executable scripts and fonts local, grant production network authority only to the Tauri IPC transport, confine Vite WebSocket HMR to a separate development-only CSP, deny object/frame/base-URI authority, deny form submissions with explicit `form-action 'none'`, deny unused worker, media, and web-app-manifest fetch authority with explicit `'none'` directives, and regression-test against null, wildcard, remote-script/style, eval, and development-authority leakage. - Re-verify the installed GGUF immediately before llama.cpp initialization and retain the verified model handle through llama.cpp loading: reject missing, linked, non-regular, identity-raced, short, oversized, unreadable, or SHA-256-mismatched artifacts with stable path-free errors; use a stable descriptor path on Unix and a Windows read-sharing guard so the mutable source pathname cannot be substituted between verification and model parsing. diff --git a/docs/architecture/adr/0010-accessible-storybook-ux-contracts.md b/docs/architecture/adr/0010-accessible-storybook-ux-contracts.md new file mode 100644 index 000000000..213c4cc8e --- /dev/null +++ b/docs/architecture/adr/0010-accessible-storybook-ux-contracts.md @@ -0,0 +1,61 @@ +# ADR-0010: Accessible Storybook UX contracts and design tokens + +**Status:** Proposed +**Date:** 2026-08-21 +**Figma File ID:** N/A — no Figma artifact was supplied for this slice; the token file and +Storybook scenes are the reviewable design source until a Figma handoff is approved. + +## Context + +DiskSage's desktop shell had repeated raw spacing, color, focus, and control styles spread across +Svelte components. The provider-stall incident also needs a stable, testable visual state for +`provider-sync-incomplete`, `materialization-stalled`, and `checking`, not a color-only warning. +The existing cloud and eviction authority must not be moved into the browser layer. + +## Decision + +1. Keep computation, provider evidence, and destructive authority in Rust and existing Tauri + commands. The UI only renders state and emits bounded callbacks. +2. Adopt a three-level CSS token hierarchy (primitive → semantic → component) in + `src/lib/ui/design-tokens.css`, with dark preference, forced-colors focus, reduced-motion, and + 44px control minimums. +3. Add `ProviderStatusCard` as a pure state renderer and maintain one Storybook story per clear, + incomplete, stalled, checking, action, narrow-layout, and feedback edge state. +4. Run Storybook's accessibility addon in error mode. Interaction stories must prove the cancel + callback and the disabled checking state; they do not call providers or mutate user files. +5. Keep Figma optional for this change because no approved Figma file exists. When a visual handoff + is supplied, record its File ID in a superseding ADR and reconcile tokens before implementation. + +## Consequences + +- Every new customer-facing status can be reviewed at desktop and mobile widths before it is wired + to a provider receipt. +- Keyboard, screen-reader, reduced-motion, dark-mode, and forced-colors behavior has one reusable + contract instead of per-component guesses. +- Storybook and its dependencies increase development tooling size; they are dev-only and never + become a runtime cloud or LLM dependency. +- Automated a11y is a first pass, not proof of complete WCAG conformance; VoiceOver, keyboard, + zoom, and real File Provider states remain release acceptance work. + +## Rejected alternatives + +- Adding a UI framework solely for buttons/cards: existing Svelte and CSS custom properties cover + the required surface with less runtime and dependency risk. +- Making the browser decide whether a provider is safe to evict: this would violate the existing + receipt/identity/approval boundary. +- Treating Storybook green output as a substitute for hosted exact-head checks: stories only prove + the rendered UI contract and event wiring. + +## Standards and research basis (APA 7th) + +World Wide Web Consortium. (2024, December 12). *Web Content Accessibility Guidelines (WCAG) 2.2*. +https://www.w3.org/TR/2024/REC-WCAG22-20241212/ + +World Wide Web Consortium. (n.d.). *ARIA Authoring Practices Guide*. Retrieved August 21, 2026, +from https://www.w3.org/WAI/ARIA/apg/ + +Design Tokens Community Group. (2025, October 28). *Design Tokens Format Module 2025.10*. +https://www.w3.org/community/reports/design-tokens/CG-FINAL-format-20251028/ + +Storybook. (n.d.). *Accessibility tests*. Retrieved August 21, 2026, from +https://storybook.js.org/docs/writing-tests/accessibility-testing diff --git a/docs/architecture/adr/README.md b/docs/architecture/adr/README.md index 74fc7467c..1bc9eb003 100644 --- a/docs/architecture/adr/README.md +++ b/docs/architecture/adr/README.md @@ -15,6 +15,7 @@ new numbered record rather than rewriting history. | [0007](0007-pre-copy-evidence-cohort.md) | Gate iCloud plans on a fresh evidence cohort | Accepted | | [0008](0008-hourly-loop-foreign-dependencies-read-only.md) | Keep the hourly loop read-only at foreign dependency boundaries | Accepted | | [0009](0009-path-free-lineage-relation-graph.md) | Export a path-free lineage relation graph | Accepted | +| [0010](0010-accessible-storybook-ux-contracts.md) | Accessible Storybook UX contracts and design tokens | Proposed | New records must state context, decision, consequences, rejected alternatives, and the evidence or standard that led to the decision. A record never grants cloud-write or source-eviction authority; diff --git a/docs/design/storybook-event-inventory.md b/docs/design/storybook-event-inventory.md new file mode 100644 index 000000000..a39ad7060 --- /dev/null +++ b/docs/design/storybook-event-inventory.md @@ -0,0 +1,70 @@ +# DiskSage UI/UX and Storybook event inventory + +**Status:** In progress, exact source head `feat/storybook-ux-contracts` +**Scope:** desktop Svelte shell and provider-status feedback states +**Visual source:** no Figma file was supplied for this product slice; the code token file is the +reviewable source of truth until a Figma handoff exists. + +This inventory turns customer-visible states into repeatable Storybook scenes. It is not cloud or +eviction authority: every destructive action remains behind the Rust evidence and approval gates. + +## Story and event matrix + +| Story | Trigger/event | Expected customer action | Accessibility and edge assertion | +| --- | --- | --- | --- | +| `Clear` | Provider observation is complete and quiet | Continue to per-file review; do not assume eviction | Status is announced politely; no destructive action is shown | +| `IncompleteEvidence` | Provider evidence is missing or stale | Wait for the next bounded observation | State is text, not color alone; evidence time is visible | +| `MaterializationStalled` | `no-progress`, timeout, or materialization failure is observed | Cancel the Finder copy, then recheck; do not retry immediately | Cancel button has an accessible name and invokes one bounded callback | +| `CheckingWithoutAction` | A read-only provider probe is running | Wait; do not cancel an operation that has no cancel authority | Action is disabled and exposes `aria-disabled` | +| Scan start | Scan button activates | Review progress and wait for completion | Root is labelled; unavailable roots disable the action | +| Scan failure | IPC/start or post-scan load fails | Read the error and retry | `role=alert` presents the next action; no `alert()` steals focus | +| Navigation | Breadcrumb or directory button activates | Move to the selected directory | Landmark and button names are keyboard reachable | +| Reduced motion | `prefers-reduced-motion: reduce` is enabled | Use the same controls without animation | Global token contract disables transitions/animations | +| Narrow viewport | 375px viewport | Scroll and operate controls without horizontal clipping | Controls become full width and retain 44px touch targets | + +## Required review dimensions + +- **Accessibility:** WCAG 2.2 AA target; semantic headings, labels, skip link, focus-visible ring, + live regions, keyboard operation, non-color status text, and forced-colors support. +- **Touch & interaction:** controls use the shared minimum size token; every async action has a + disabled/loading state and a bounded, reversible next action. +- **Performance:** the shell does not poll during a scan; provider polling/backoff remains in the + existing CloudArchive state machine; CSS uses no new runtime animation or layout library. +- **Style selection:** primitive, semantic, and component tokens live in one CSS contract; raw + colors are not introduced in the new shell paths. +- **Layout & responsive:** mobile-first wrapping is tested by Storybook's mobile viewport and the + shell has a readable max width. +- **Typography & color:** system font stack, semantic text colors, dark preference, and contrast + review are centralized in `design-tokens.css`. +- **Animation:** reduced-motion media query is a global contract; no status relies on motion. +- **Forms & feedback:** labels precede controls; errors use `role=alert`; progress uses polite + status text and never hides the actionable reason. +- **Navigation patterns:** skip link, `main` landmark, and labelled breadcrumb navigation are + present; directory navigation remains a button rather than a mouse-only gesture. +- **Charts & data:** existing treemap and tabular summaries remain text-backed; future chart + changes must provide a table or equivalent text summary in the same story. + +## Running the review scenes + +```bash +npm run storybook +npm run build-storybook +``` + +The a11y addon is configured with `a11y.test = "error"`. The interaction stories assert the +materialization-stall cancel event and the disabled checking state. A real VoiceOver/keyboard and +375px/200% zoom pass is still required before a release claim. + +## References (APA 7th) + +World Wide Web Consortium. (2024, December 12). *Web Content Accessibility Guidelines (WCAG) 2.2*. +https://www.w3.org/TR/2024/REC-WCAG22-20241212/ + +World Wide Web Consortium. (n.d.). *ARIA Authoring Practices Guide*. Retrieved August 21, 2026, +from https://www.w3.org/WAI/ARIA/apg/ + +Design Tokens Community Group. (2025, October 28). *Design Tokens Format Module 2025.10*. +https://www.w3.org/community/reports/design-tokens/CG-FINAL-format-20251028/ + +Storybook. (n.d.). *Accessibility tests*. Retrieved August 21, 2026, from +https://storybook.js.org/docs/writing-tests/accessibility-testing diff --git a/docs/doctoring/release-artifact-provenance.md b/docs/doctoring/release-artifact-provenance.md index 296a0246d..44460973a 100644 --- a/docs/doctoring/release-artifact-provenance.md +++ b/docs/doctoring/release-artifact-provenance.md @@ -39,7 +39,7 @@ The release contract requires all of the following: GitHub's action emits an in-toto Statement v1 containing a SLSA Provenance v1 predicate. SLSA specification version 1.2 is the current approved framework version, while the stable build-provenance predicate URI remains `https://slsa.dev/provenance/v1`. -## Buyer and operator verification +## Operator and release-consumer verification Download one release artifact without renaming or modifying it, install a current GitHub CLI, authenticate if the repository visibility requires it, and run: diff --git a/docs/doctoring/release-version-contract.md b/docs/doctoring/release-version-contract.md index baf613060..85eb7dbb0 100644 --- a/docs/doctoring/release-version-contract.md +++ b/docs/doctoring/release-version-contract.md @@ -2,7 +2,7 @@ ## Decision -DiskSage fails closed before packaging when its buyer-visible release versions are not identical. `package.json`, `src-tauri/Cargo.toml`, and `src-tauri/tauri.conf.json` must each expose one identical Semantic Versioning value. A tag-triggered release must additionally use the exact tag `v`. +DiskSage fails closed before packaging when its release-consumer-visible versions are not identical. `package.json`, `src-tauri/Cargo.toml`, and `src-tauri/tauri.conf.json` must each expose one identical Semantic Versioning value. A tag-triggered release must additionally use the exact tag `v`. The authoritative executable policy is `scripts/ci/release-version.mjs`. The package `build` command runs that policy before Vite compilation. Tauri executes `npm run build` through `beforeBuildCommand`, so the same check precedes Linux, Windows, and macOS bundle creation without relying on one operating system's shell syntax. Exact production coverage remains an independent CI authority owned by the coverage workflow contract; the release-version gate does not duplicate or weaken it. diff --git a/docs/doctoring/rust-package-metadata.md b/docs/doctoring/rust-package-metadata.md index f0cd67021..afb9ce3cc 100644 --- a/docs/doctoring/rust-package-metadata.md +++ b/docs/doctoring/rust-package-metadata.md @@ -2,7 +2,7 @@ ## Decision -DiskSage's Rust manifest is part of buyer-visible build, SBOM, provenance, incident-response, and acquisition-diligence evidence even though the desktop application is not intended for publication as a crates.io library. The `[package]` metadata therefore identifies the product and its source repository without generator placeholders, records the repository's MIT license identifier, and sets `publish = false` so an ordinary Cargo publication command cannot publish this application package to a registry. +DiskSage's Rust manifest is part of release-visible build, SBOM, provenance, incident-response, and operator-audit evidence even though the desktop application is not intended for publication as a crates.io library. The `[package]` metadata therefore identifies the product and its source repository without generator placeholders, records the repository's MIT license identifier, and sets `publish = false` so an ordinary Cargo publication command cannot publish this application package to a registry. The authoritative metadata is: diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index aad2f5495..6aaa0a7d2 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -14,7 +14,7 @@ baseline records the current loop's runtime and integration evidence. 4. Regenerable caches are a separate reclaim domain. They are per-child, identity-bound, active-use checked, journaled, and moved to OS Trash; they are not uploaded as user data. 5. Deterministic Rust gates own safety. A local model may judge only the fixed maintenance command after dry-run evidence, calibration, and explicit human confirmation. No external LLM or OAuth service is a runtime prerequisite for the standalone product. -## Buyer-observable product gaps +## User-observable product gaps | Priority | Gap / observable symptom | Evidence | Acceptance criterion | | --- | --- | --- | --- | @@ -23,7 +23,7 @@ baseline records the current loop's runtime and integration evidence. | P1 | Personal desktop-client capacity is not the same as API quota; OAuth is unnecessarily implied for a single-user installation. | ADR-0001 permits copy-only desktop-client mode marked `capacity-unverified`; the cloud connection UI defaults to read-only OAuth consent and requires an explicit write-access opt-in. | Settings clearly distinguish local desktop client, API quota, and organization OAuth; no OAuth prompt is required for the local-only path. | | P1 | Users cannot yet see a full lineage graph connecting source, metadata, archive member, provider item, receipt, Goal, and eviction decision. | The candidate UI now exposes a compact source→metadata→archive→provider lineage panel using the stable fingerprint, confidence, and blocker state; provider item/receipt/permit remain explicitly pending until their evidence exists. | Export and UI show stable content IDs, provenance edges, confidence, and blockers without exposing raw private paths. | | P1 | “Orphan”/duplicate cleanup is difficult to trust because relationship evidence is not visible before action. | Ontology and duplicate/orphan PRs are open; current default path remains fail-closed. | Every proposed removal has an explainable parent/child/duplicate relation, identity recheck, reversible Trash action, and a no-candidate result when evidence is incomplete. | -| P2 | Cross-platform behavior and accessibility are not presented as one release contract. | macOS/Linux/Windows release checks exist; several UI accessibility PRs remain open. | Release notes and UI expose platform capability matrix, keyboard/assistive labels, and bounded failure messages for each action. | +| P2 | Cross-platform behavior and accessibility are not presented as one release contract. | macOS/Linux/Windows release checks exist; the Svelte shell now has a token-driven keyboard/live-feedback contract and Storybook provider-state scenes. | Release notes and UI expose platform capability matrix, keyboard/assistive labels, and bounded failure messages for each action; complete VoiceOver/zoom/native-provider acceptance remains open. | ## Technical and operational gaps @@ -50,6 +50,24 @@ baseline records the current loop's runtime and integration evidence. - Dynamic Goal/ADR projections are replaceable views over receipts; they cannot authorize mutation. - Rust remains the computation and security boundary. Noema, contextual-orchestrator, semantic-data-portal, pg-erd-cloud, fast-mlsirm, or Gemma are added only when a measured gap requires them and their boundary is documented first. +## 2026-08-21 accessible Storybook UX contract + +- The Svelte shell now imports a primitive → semantic → component token hierarchy from + `src/lib/ui/design-tokens.css`, including dark preference, forced-colors focus, reduced motion, + and 44px controls. The layout adds a skip link and the scan shell adds labelled controls, + keyboard-safe buttons, live completion feedback, and alert feedback without browser `alert()`. +- `ProviderStatusCard` and Storybook 10.5 scenes cover clear, checking, incomplete provider + evidence, materialization stall, cancel callback, disabled action, mobile viewport, and reduced + motion states. The a11y addon is configured to fail a story on detected violations; Storybook is + development-only and cannot authorize cloud writes or source eviction. +- Local evidence at this implementation snapshot: `npm test` 30 files/128 tests, `svelte-check` + 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and production + dependency audit reported 0 vulnerabilities. The Storybook bundle emits a non-blocking >500 KiB + axe chunk advisory; no runtime bundle includes Storybook. +- Standards adopted for this slice are WCAG 2.2, WAI-ARIA APG, Design Tokens Format Module + 2025.10, and Storybook accessibility testing. No Figma File ID exists for this change; ADR-0010 + records that boundary and requires a superseding ADR when a Figma handoff is approved. + ## 2026-08-21 loop evidence - The exact-head hosted macOS build exposed a compile regression after the sensitive-config safety diff --git a/package-lock.json b/package-lock.json index 723f58f1a..28b1ffbe2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,12 +14,15 @@ "@tauri-apps/plugin-opener": "^2" }, "devDependencies": { + "@storybook/addon-a11y": "^10.5.10", + "@storybook/sveltekit": "^10.5.10", "@sveltejs/adapter-static": "^3.0.6", "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.3.0", "@tauri-apps/cli": "^2", "@types/node": "^26.1.2", "@vitest/coverage-v8": "^4.1.10", + "storybook": "^10.5.10", "svelte": "^5.56.9", "svelte-check": "^4.7.6", "typescript": "~5.6.2", @@ -30,126 +33,1358 @@ "node": "^20.19.0 || >=22.12.0" } }, + "node_modules/@adobe/css-tools": { + "version": "4.5.0", + "resolved": "https://registry.npmjs.org/@adobe/css-tools/-/css-tools-4.5.0.tgz", + "integrity": "sha512-6OzddxPio9UiWTCemp4N8cYLV2ZN1ncRnV1cVGtve7dhPOtRkleRyx32GQCYSwDYgaHU3USMm84tNsvKzRCa1Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/@babel/code-frame": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz", + "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-validator-identifier": "^7.29.7", + "js-tokens": "^4.0.0", + "picocolors": "^1.1.1" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/code-frame/node_modules/js-tokens": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz", + "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==", + "dev": true, + "license": "MIT" + }, "node_modules/@babel/helper-string-parser": { "version": "7.29.7", "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==", "dev": true, "license": "MIT", - "engines": { - "node": ">=6.9.0" - } + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/helper-validator-identifier": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", + "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/parser": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz", + "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/types": "^7.29.8" + }, + "bin": { + "parser": "bin/babel-parser.js" + }, + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@babel/runtime": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz", + "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/types": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz", + "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-string-parser": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@bcoe/v8-coverage": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz", + "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/@emnapi/core": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz", + "integrity": "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.1", + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/runtime": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz", + "integrity": "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/wasi-threads": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz", + "integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@esbuild/aix-ppc64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz", + "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "aix" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz", + "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz", + "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz", + "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz", + "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz", + "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz", + "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz", + "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz", + "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz", + "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ia32": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz", + "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-loong64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz", + "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-mips64el": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz", + "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==", + "cpu": [ + "mips64el" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ppc64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz", + "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-riscv64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz", + "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-s390x": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz", + "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz", + "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz", + "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz", + "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz", + "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz", + "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openharmony-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz", + "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/sunos-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz", + "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "sunos" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz", + "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-ia32": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz", + "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz", + "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@jridgewell/gen-mapping": { + "version": "0.3.13", + "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", + "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.5.0", + "@jridgewell/trace-mapping": "^0.3.24" + } + }, + "node_modules/@jridgewell/remapping": { + "version": "2.3.5", + "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", + "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/gen-mapping": "^0.3.5", + "@jridgewell/trace-mapping": "^0.3.24" + } + }, + "node_modules/@jridgewell/resolve-uri": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", + "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@jridgewell/sourcemap-codec": { + "version": "1.5.5", + "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", + "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", + "dev": true, + "license": "MIT" + }, + "node_modules/@jridgewell/trace-mapping": { + "version": "0.3.31", + "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", + "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/resolve-uri": "^3.1.0", + "@jridgewell/sourcemap-codec": "^1.4.14" + } + }, + "node_modules/@napi-rs/wasm-runtime": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz", + "integrity": "sha512-UMduMbqO5s5zF2NkNacMT/yK5Y5QiKvWr2+50bzIIxFDwVJ2h49b+oyjaCGPhJxd2/gC2x39EHv/gHVuu36x2Q==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@tybys/wasm-util": "^0.10.3" + }, + "engines": { + "node": "^20.19.0 || ^22.13.0 || >=23.5.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/Brooooooklyn" + }, + "peerDependencies": { + "@emnapi/core": "^1.7.1 || ^2.0.0-alpha.4", + "@emnapi/runtime": "^1.7.1 || ^2.0.0-alpha.4" + } + }, + "node_modules/@oxc-parser/binding-android-arm-eabi": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm-eabi/-/binding-android-arm-eabi-0.127.0.tgz", + "integrity": "sha512-0LC7ye4hvqbIKxAzThzvswgHLFu2AURKzYLeSVvLdu2TBOYWQDmHnTqPLeA597BcUCxiLqLsS4CJ5uoI5WYWCQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-android-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm64/-/binding-android-arm64-0.127.0.tgz", + "integrity": "sha512-b5jtVTH6AU5CJXHNdj7Jj9IEiR9yVjjnwHzPJhGyHGPdcsZSzBCkS9GBbV33niRMvKthDwQRFRJfI4a+k4PvYg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-darwin-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-arm64/-/binding-darwin-arm64-0.127.0.tgz", + "integrity": "sha512-obCE8B7ISKkJidjlhv9xRGJPOSDG2Yu6PRga9Ruaz35uintHxbp1Ki/Yc71wx4rj3Edrm0a1kzG1TAwit0wFpg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-darwin-x64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-x64/-/binding-darwin-x64-0.127.0.tgz", + "integrity": "sha512-JL6Xb5IwPQT8rUzlpsX7E+AgfcdNklXNPFp8pjCQQ5MQOQo5rtEB2ui+3Hgg9Sn7Y9Egj6YOLLiHhLpdAe12Aw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-freebsd-x64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-freebsd-x64/-/binding-freebsd-x64-0.127.0.tgz", + "integrity": "sha512-SDQ/3MQFw58fqQz3Z1PhSKFF3JoCF4gmlNjziDm8X02tTahCw0qJbd7FGPDKw1i4VTBZene9JPyC3mHtSvi+wA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm-gnueabihf": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-0.127.0.tgz", + "integrity": "sha512-Av+D1MIqzV0YMGPT9we2SIZaMKD7Cxs4CvXSx/yxaWHewZjYEjScpOf5igc8IILASViw4WTnjlwUdI1KzVtDHQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm-musleabihf": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-0.127.0.tgz", + "integrity": "sha512-Cs2fdJ8cPpFdeebj6p4dag8A4+56hPvZ0AhQQzlaLswGz1tz7bXt1nETLeorrM9+AMcWFFkqxcXwDGfTVidY8g==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-0.127.0.tgz", + "integrity": "sha512-qdOfTcT6SY8gsJrrV92uyEUyjqMGPpIB5JZUG6QN5dukYd+7/j0kX6MwK1DgQj39jtUYixxPiaRUiEN1+0CXgQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-musl/-/binding-linux-arm64-musl-0.127.0.tgz", + "integrity": "sha512-EoTCZneNFU/P2qrpEM+RHmQwt+CvDkyGESG6qhr7KaegXLZwePfbrkCDfAk8/rhxbDUVGsZILX+2tqPzFtoFWA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-ppc64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-0.127.0.tgz", + "integrity": "sha512-zALjmZYgxFLHjXeudcDF0xFGNydTAtkAeXAr2EuC17ywCyFxcmQra4w0BMde0Yi/re4Bi4iwEoEXtYN7l6eBLQ==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-riscv64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-0.127.0.tgz", + "integrity": "sha512-fPP8M6zQLS7Jz7o9d5ArUSuAuSK3e+WCYVrCpdzeCOejidtZExJ9tjhDrAd3HEPqARBCPmdpqxESPFqy44vkBQ==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-riscv64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-0.127.0.tgz", + "integrity": "sha512-7IcC4Ao02oGpfnjt+X/oF4U2mllo2qoSkw5xxiXNKL9MCTsTiAC6616beOuehdxGcnz1bRoPC1RQ2f1GQDdN+g==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-s390x-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-0.127.0.tgz", + "integrity": "sha512-pbXIhiNFHoqWeqDNLiJ9JkpHz1IM9k4DXa66x+1GTWMG7iLxtkXgE53iiuKSXwmk3zIYmaPVfBvgcAhS583K4Q==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-x64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-gnu/-/binding-linux-x64-gnu-0.127.0.tgz", + "integrity": "sha512-MYCguB9RvBvlSd6gbuNI7QwiLoCCAlGnlRJFPrzLI6U1/9wkC/WK6LtBAUln55H1Ctqw45PWmqrobKoMhsYQzQ==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-x64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-musl/-/binding-linux-x64-musl-0.127.0.tgz", + "integrity": "sha512-5eY0B/bxf1xIUxb4NOTvOI3KWtBQfPWYyKAzgcrCt0mDibSZygVpO1Pz8bkeiSZ5Jj9+M09dkggG3H8I5d0Uyg==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-openharmony-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-openharmony-arm64/-/binding-openharmony-arm64-0.127.0.tgz", + "integrity": "sha512-Gld0ajrFTUXNtdw20fVBuTQx66FA75nIVg+//pPfR3sXkuABB4mTBhl3r9JNzrJpgW//qiwxf0nWXUWGJSL3UQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-wasm32-wasi": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-wasm32-wasi/-/binding-wasm32-wasi-0.127.0.tgz", + "integrity": "sha512-T6KVD7rhLzFlwGRXMnxUFfkCZD8FHnb968wVXW1mXzgRFc5RNXOBY2mPPDZ77x5Ln76ltLMgtPg0cOkU1NSrEQ==", + "cpu": [ + "wasm32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/core": "1.9.2", + "@emnapi/runtime": "1.9.2", + "@napi-rs/wasm-runtime": "^1.1.4" + }, + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-arm64-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-0.127.0.tgz", + "integrity": "sha512-Ujvw4X+LD1CCGULcsQcvb4YNVoBGqt+JHgNNzGGaCImELiZLk477ifUH53gIbE7EKd933NdTi25JWEr9K2HwXw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-ia32-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-0.127.0.tgz", + "integrity": "sha512-0cwxKO7KHQQQfo4Uf4B2SQrhgm+cJaP9OvFFhx52Tkg4bezsacu83GB2/In5bC415Ueeym+kXdnge/57rbSfTw==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-x64-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-x64-msvc/-/binding-win32-x64-msvc-0.127.0.tgz", + "integrity": "sha512-rOrnSQSCbhI2kowr9XxE7m9a8oQXnBHjnS6j95LxxAnEZ0+Fz20WlRXG4ondQb+ejjt2KOsa65sE6++L6kUd+w==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-project/types": { + "version": "0.142.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.142.0.tgz", + "integrity": "sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/Boshen" + } + }, + "node_modules/@oxc-resolver/binding-android-arm-eabi": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm-eabi/-/binding-android-arm-eabi-11.21.2.tgz", + "integrity": "sha512-xQoCRv+gKax9KTdwdaQNnAFOai8neay7g3jExDIORzhbrejwGSJaZNTdOJHR5ziLg2joMxOCMOFMo4zuxza2uQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@oxc-resolver/binding-android-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm64/-/binding-android-arm64-11.21.2.tgz", + "integrity": "sha512-HF5oiE2L05yInPYCFD/4uxSrEZW4SuIfn99Y6L1xnJnzl066JR+MJs2rIdstw8A2MPlAKH+13dpFPNycjqzvGg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@oxc-resolver/binding-darwin-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-arm64/-/binding-darwin-arm64-11.21.2.tgz", + "integrity": "sha512-UX4u49CVCAD8QZNELaW8eMGgMAGwFWYEPbvNsh+3r/gs4NX3KfpiACMVwRQT0EuH3uat9hM5Zl+Ppm9pJD8tgg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@oxc-resolver/binding-darwin-x64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-x64/-/binding-darwin-x64-11.21.2.tgz", + "integrity": "sha512-J9xPx7YBkrRmJ+xl561ztnMWEc1aOyjEIxBiGX1dVb3u7bGSnfObfcZk+Pd+uM0HZAPNsQ1xvD8j52A/uOSqNQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@oxc-resolver/binding-freebsd-x64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-freebsd-x64/-/binding-freebsd-x64-11.21.2.tgz", + "integrity": "sha512-fRlt7OvSaQkWj6+EDTVxawVxOlqJB2QSnBfkeCyK4RTvsGctbw3BiH2Tb7DzMs7bikc4BRBpvWP5zF9K8b54Zg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm-gnueabihf": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-11.21.2.tgz", + "integrity": "sha512-gK+vPUcPQITkGwBKpZGrcDHSlU6eDGl7AQacxS2CEKAZIBHWkOVFeJwLZ4tYnA1acJqRM5lt7yYwPCVqGHIJ7A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm-musleabihf": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-11.21.2.tgz", + "integrity": "sha512-L/Rgas7SrOKy/z7IH+HxSFRqVO4PuLDKLEGKvnhoCBBq3UJ0YzGBou3qMzaAGgkJwsIvX2pBF+7ojzfUhLiZxQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-11.21.2.tgz", + "integrity": "sha512-CUEYvlX1Fk7E9kUMzuswru1J9HLxMwnpDeQGjQuI4ZH+iNCoa2X9T+pvyzrbsgl7WnIeTFTlNlHsRfVdf5g9/g==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@babel/helper-validator-identifier": { - "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", - "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", + "node_modules/@oxc-resolver/binding-linux-arm64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-musl/-/binding-linux-arm64-musl-11.21.2.tgz", + "integrity": "sha512-ViN1ZibQyxwC67GpoP33oo+S9UyUnkog13vzQb9+v9bCNvrVzJuk0MRdacjtv/9xfRMVF/eqHFyl8YOeykI10Q==", + "cpu": [ + "arm64" + ], "dev": true, + "libc": [ + "musl" + ], "license": "MIT", - "engines": { - "node": ">=6.9.0" - } + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@babel/parser": { - "version": "7.29.8", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz", - "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==", + "node_modules/@oxc-resolver/binding-linux-ppc64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-11.21.2.tgz", + "integrity": "sha512-CU1sCqWnhGqYD5I1HedHk5pujrn7ssDkNB/AEQd/pd3D/EojVSgJUlpbafwIbyhia3PgIfkvdFpRPWSALzVumA==", + "cpu": [ + "ppc64" + ], "dev": true, + "libc": [ + "glibc" + ], "license": "MIT", - "dependencies": { - "@babel/types": "^7.29.8" - }, - "bin": { - "parser": "bin/babel-parser.js" - }, - "engines": { - "node": ">=6.0.0" - } + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@babel/types": { - "version": "7.29.8", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz", - "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==", + "node_modules/@oxc-resolver/binding-linux-riscv64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-11.21.2.tgz", + "integrity": "sha512-jWVyZtIHca4Gb96x7dag+y69vlei7ffjrsveLkmf2ZhqEAz6ZSBnY1GWvgZUaZlwZP62A3xD092BW97Q5VGc+g==", + "cpu": [ + "riscv64" + ], "dev": true, + "libc": [ + "glibc" + ], "license": "MIT", - "dependencies": { - "@babel/helper-string-parser": "^7.29.7", - "@babel/helper-validator-identifier": "^7.29.7" - }, - "engines": { - "node": ">=6.9.0" - } + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@bcoe/v8-coverage": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz", - "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==", + "node_modules/@oxc-resolver/binding-linux-riscv64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-11.21.2.tgz", + "integrity": "sha512-LF29obFqNgBUgDX7rmUK7M4D0JQG5LxhYzn3xXmECcHU9aQAdWG7NiY052qybtesEdwHQXKNTWYQ7mTsybNvWg==", + "cpu": [ + "riscv64" + ], "dev": true, + "libc": [ + "musl" + ], "license": "MIT", - "engines": { - "node": ">=18" - } + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@jridgewell/gen-mapping": { - "version": "0.3.13", - "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", - "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==", + "node_modules/@oxc-resolver/binding-linux-s390x-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-11.21.2.tgz", + "integrity": "sha512-+NYcm+cCHBbtdQQ3A4phQTSuVRYnNHz7wrl9XRAPEovcdoqi0mb1K5ZOl+jN54ZD+q1zz3V0vltbFJmzecJKmw==", + "cpu": [ + "s390x" + ], "dev": true, + "libc": [ + "glibc" + ], "license": "MIT", - "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.0", - "@jridgewell/trace-mapping": "^0.3.24" - } + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@jridgewell/remapping": { - "version": "2.3.5", - "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", - "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==", + "node_modules/@oxc-resolver/binding-linux-x64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-gnu/-/binding-linux-x64-gnu-11.21.2.tgz", + "integrity": "sha512-UQqZDdG2r2HhAOsZEgufkIWHPQ886IUyuJQkoZByvzhW8j51R4UNzGBJFkTiTnLhQnggwJRdJgFWK4uY6ZVIMw==", + "cpu": [ + "x64" + ], "dev": true, + "libc": [ + "glibc" + ], "license": "MIT", - "dependencies": { - "@jridgewell/gen-mapping": "^0.3.5", - "@jridgewell/trace-mapping": "^0.3.24" - } + "optional": true, + "os": [ + "linux" + ] }, - "node_modules/@jridgewell/resolve-uri": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", - "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", + "node_modules/@oxc-resolver/binding-linux-x64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-musl/-/binding-linux-x64-musl-11.21.2.tgz", + "integrity": "sha512-3Q9PMRjalWkT6NZ4jfujuqTCFwoWErg3y3BnOgb544B8IMw4PktiwWOigMfOHNRLMghZeJ7hpfpZf4CP7rV7Og==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-openharmony-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-openharmony-arm64/-/binding-openharmony-arm64-11.21.2.tgz", + "integrity": "sha512-Eljeq3ndtyKhM+Es8LITi4Zl2htzuRZcrPMF3kMCsrILztvU6AjZ3FuEhHHKobPUB9rMpzLpJP5bDqXI7r+iog==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ] + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-wasm32-wasi/-/binding-wasm32-wasi-11.21.2.tgz", + "integrity": "sha512-HGDbNsIywqc4LxU38+CTJNnB/6BF7rheWOJ259b4eE0aEnelYblC8x+1tEd63bp31fYne63RQz9Jb4yVnC7Yig==", + "cpu": [ + "wasm32" + ], "dev": true, "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/core": "1.11.0", + "@emnapi/runtime": "1.11.0", + "@napi-rs/wasm-runtime": "^1.1.5" + }, "engines": { - "node": ">=6.0.0" + "node": ">=14.0.0" } }, - "node_modules/@jridgewell/sourcemap-codec": { - "version": "1.5.5", - "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", - "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/core": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.0.tgz", + "integrity": "sha512-l9Oo58x0HOP5znGzVhYW9U3e5wVuA4LAZU2AGezTmkhO1CgQRFDhDg4nneHsu/t3WniXg9QrG2nIXL/ZS8ln8Q==", "dev": true, - "license": "MIT" + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.2", + "tslib": "^2.4.0" + } }, - "node_modules/@jridgewell/trace-mapping": { - "version": "0.3.31", - "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", - "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==", + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/runtime": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.0.tgz", + "integrity": "sha512-55coeOFKHv1ywEcUXJtWU5f+Jr/W5tZDvZig8DLKSwUN1JpROQ4rk/SNOQiFWmaR/VKF4zuFyW1B8JduOSv6Pg==", "dev": true, "license": "MIT", + "optional": true, "dependencies": { - "@jridgewell/resolve-uri": "^3.1.0", - "@jridgewell/sourcemap-codec": "^1.4.14" + "tslib": "^2.4.0" } }, - "node_modules/@oxc-project/types": { - "version": "0.142.0", - "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.142.0.tgz", - "integrity": "sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==", + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/wasi-threads": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz", + "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==", "dev": true, "license": "MIT", - "funding": { - "url": "https://github.com/sponsors/Boshen" + "optional": true, + "dependencies": { + "tslib": "^2.4.0" } }, + "node_modules/@oxc-resolver/binding-win32-arm64-msvc": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-11.21.2.tgz", + "integrity": "sha512-iWx25CBEgH49iE9q5coEGI/jb1jl5kkCY9z6U5Og67xCkQ/WFMDc2J5U78+AE91SUxM2NqSLhJC8/PLfWnImww==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@oxc-resolver/binding-win32-x64-msvc": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-x64-msvc/-/binding-win32-x64-msvc-11.21.2.tgz", + "integrity": "sha512-VPoCAhKvCQTlG7vxqaBXcmuvbh77BfnGXj8g0pbvVXpm1F/R8rDVwqIWcEbMzrI1JvJlm8v7T9uMVQb6UctMRg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, "node_modules/@polka/url": { "version": "1.0.0-next.29", "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", @@ -387,27 +1622,180 @@ ], "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": "^20.19.0 || >=22.12.0" + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/pluginutils": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", + "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@standard-schema/spec": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", + "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@storybook/addon-a11y": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/addon-a11y/-/addon-a11y-10.5.10.tgz", + "integrity": "sha512-RpRQV5xUbrl6hCiNrd5FSMIo6pnRZ0VZxWvEW/ASLcreGkKUW5jl2AeLCe5YROE2i80s/dU+6VPzOYKrwWNFbQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/global": "^5.0.0", + "axe-core": "^4.2.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10" + } + }, + "node_modules/@storybook/builder-vite": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-10.5.10.tgz", + "integrity": "sha512-O4GgIP0tKLRueom3EmU3OaBUHKjNYj+jkOvmTIkn3PYTiWVkCuHqSKEs4ADvRyaQuLH+peHhFe4JtkNC9KbtrQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/csf-plugin": "10.5.10", + "ts-dedent": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/csf-plugin": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-10.5.10.tgz", + "integrity": "sha512-TaCLBrqVEr767+w58QDotDUiCTuE5cyRJuRcDlsKQyUIyGBv+lYD3lu8wBiVCYxgIjB/gu9HmqiC+0yx1rHzaw==", + "dev": true, + "license": "MIT", + "dependencies": { + "unplugin": "^2.3.5" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "esbuild": "*", + "rollup": "*", + "storybook": "^10.5.10", + "vite": "*", + "webpack": "*" + }, + "peerDependenciesMeta": { + "esbuild": { + "optional": true + }, + "rollup": { + "optional": true + }, + "vite": { + "optional": true + }, + "webpack": { + "optional": true + } + } + }, + "node_modules/@storybook/global": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/@storybook/global/-/global-5.0.0.tgz", + "integrity": "sha512-FcOqPAXACP0I3oJ/ws6/rrPT9WGhu915Cg8D02a9YxLo0DE9zI+a9A5gRGvmQ09fiWPukqI8ZAEoQEdWUKMQdQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/@storybook/icons": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/@storybook/icons/-/icons-2.1.0.tgz", + "integrity": "sha512-Fxh9vYpX9bQqFeHRiY8h2ApeRGDzRSMLwJwNZ/AIRqnyOKHxRKL+yFe+ctEkVJmuptRE9u1Hrn8ZZNHyfDKKNg==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" + } + }, + "node_modules/@storybook/svelte": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/svelte/-/svelte-10.5.10.tgz", + "integrity": "sha512-jSEv1q5fJYTrhz7/DBYNc5gMmRJ8SyyyMikSvN4S6juuS0eJTZWGd62UpDH3ClfT/TQmTjTJH4HeEnbzJ+VrCA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ts-dedent": "^2.0.0", + "type-fest": "^5.6.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "svelte": "^5.0.0" } }, - "node_modules/@rolldown/pluginutils": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", - "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "node_modules/@storybook/svelte-vite": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/svelte-vite/-/svelte-vite-10.5.10.tgz", + "integrity": "sha512-yLqceMBE89p0L9vf9y6zE0ELeRxwfAU7ci3Hry7NEZkxQ4aYsuClUqCmlCLNrAI7nvoVK8v6fp82KgCcods95A==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@storybook/builder-vite": "10.5.10", + "@storybook/svelte": "10.5.10", + "magic-string": "^0.30.0", + "svelte2tsx": "^0.7.55", + "typescript": "^4.9.4 || ^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "@sveltejs/vite-plugin-svelte": "^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0", + "storybook": "^10.5.10", + "svelte": "^5.0.0", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } }, - "node_modules/@standard-schema/spec": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", - "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "node_modules/@storybook/sveltekit": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/sveltekit/-/sveltekit-10.5.10.tgz", + "integrity": "sha512-sPHfTp1yitR+kftQV/0a7dDw3q4/zTXvBeWjgUC8DKkUY7NuFDRUOf00zE086B4vSXSZukf9484VyO+owBkLCQ==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@storybook/builder-vite": "10.5.10", + "@storybook/svelte": "10.5.10", + "@storybook/svelte-vite": "10.5.10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "svelte": "^5.0.0", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } }, "node_modules/@sveltejs/acorn-typescript": { "version": "1.0.11", @@ -756,6 +2144,95 @@ "@tauri-apps/api": "^2.11.0" } }, + "node_modules/@testing-library/dom": { + "version": "10.4.1", + "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.1.tgz", + "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.10.4", + "@babel/runtime": "^7.12.5", + "@types/aria-query": "^5.0.1", + "aria-query": "5.3.0", + "dom-accessibility-api": "^0.5.9", + "lz-string": "^1.5.0", + "picocolors": "1.1.1", + "pretty-format": "^27.0.2" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@testing-library/dom/node_modules/aria-query": { + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz", + "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "dequal": "^2.0.3" + } + }, + "node_modules/@testing-library/jest-dom": { + "version": "6.9.1", + "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-6.9.1.tgz", + "integrity": "sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@adobe/css-tools": "^4.4.0", + "aria-query": "^5.0.0", + "css.escape": "^1.5.1", + "dom-accessibility-api": "^0.6.3", + "picocolors": "^1.1.1", + "redent": "^3.0.0" + }, + "engines": { + "node": ">=14", + "npm": ">=6", + "yarn": ">=1" + } + }, + "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz", + "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@testing-library/user-event": { + "version": "14.6.5", + "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.5.tgz", + "integrity": "sha512-FhqjldLTpteueBaKflhNFlMT3+PM0O5fiBUivht6b9CZ1eesJyy7+g3Jr7XwJzt/Hip3ZG5hWwK1MX1FuDiE4w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12", + "npm": ">=6" + }, + "peerDependencies": { + "@testing-library/dom": ">=7.21.4" + } + }, + "node_modules/@tybys/wasm-util": { + "version": "0.10.3", + "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz", + "integrity": "sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@types/aria-query": { + "version": "5.0.4", + "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz", + "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==", + "dev": true, + "license": "MIT" + }, "node_modules/@types/chai": { "version": "5.2.3", "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz", @@ -949,6 +2426,13 @@ "url": "https://opencollective.com/vitest" } }, + "node_modules/@webcontainer/env": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/@webcontainer/env/-/env-1.1.1.tgz", + "integrity": "sha512-6aN99yL695Hi9SuIk1oC88l9o0gmxL1nGWWQ/kNy81HigJ0FoaoTXpytCj6ItzgyCEwA9kF1wixsTuv5cjsgng==", + "dev": true, + "license": "MIT" + }, "node_modules/acorn": { "version": "8.18.0", "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz", @@ -962,6 +2446,29 @@ "node": ">=0.4.0" } }, + "node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-styles": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz", + "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, "node_modules/aria-query": { "version": "5.3.1", "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.1.tgz", @@ -982,6 +2489,19 @@ "node": ">=12" } }, + "node_modules/ast-types": { + "version": "0.16.1", + "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.16.1.tgz", + "integrity": "sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==", + "dev": true, + "license": "MIT", + "dependencies": { + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=4" + } + }, "node_modules/ast-v8-to-istanbul": { "version": "1.0.5", "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.5.tgz", @@ -994,6 +2514,16 @@ "js-tokens": "^10.0.0" } }, + "node_modules/axe-core": { + "version": "4.13.0", + "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.13.0.tgz", + "integrity": "sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==", + "dev": true, + "license": "MPL-2.0", + "engines": { + "node": ">=4" + } + }, "node_modules/axobject-query": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz", @@ -1004,6 +2534,22 @@ "node": ">= 0.4" } }, + "node_modules/bundle-name": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz", + "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "run-applescript": "^7.0.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/chai": { "version": "6.2.2", "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", @@ -1014,6 +2560,16 @@ "node": ">=18" } }, + "node_modules/check-error": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/check-error/-/check-error-2.1.3.tgz", + "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 16" + } + }, "node_modules/chokidar": { "version": "4.0.3", "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", @@ -1057,6 +2613,30 @@ "node": ">= 0.6" } }, + "node_modules/css.escape": { + "version": "1.5.1", + "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz", + "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==", + "dev": true, + "license": "MIT" + }, + "node_modules/dedent-js": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dedent-js/-/dedent-js-1.0.1.tgz", + "integrity": "sha512-OUepMozQULMLUmhxS95Vudo0jb0UchLimi3+pQ2plj61Fcy8axbP9hbiD4Sz6DPqn6XG3kfmziVfQ1rSys5AJQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/deep-eql": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-5.0.2.tgz", + "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, "node_modules/deepmerge": { "version": "4.3.1", "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", @@ -1067,6 +2647,59 @@ "node": ">=0.10.0" } }, + "node_modules/default-browser": { + "version": "5.5.1", + "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.1.tgz", + "integrity": "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "bundle-name": "^4.1.0", + "default-browser-id": "^5.0.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/default-browser-id": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz", + "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/define-lazy-prop": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz", + "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/dequal": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", + "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, "node_modules/detect-libc": { "version": "2.1.2", "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", @@ -1084,6 +2717,13 @@ "dev": true, "license": "MIT" }, + "node_modules/dom-accessibility-api": { + "version": "0.5.16", + "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz", + "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==", + "dev": true, + "license": "MIT" + }, "node_modules/es-module-lexer": { "version": "2.3.1", "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.1.tgz", @@ -1091,6 +2731,48 @@ "dev": true, "license": "MIT" }, + "node_modules/esbuild": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz", + "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "bin": { + "esbuild": "bin/esbuild" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "@esbuild/aix-ppc64": "0.28.2", + "@esbuild/android-arm": "0.28.2", + "@esbuild/android-arm64": "0.28.2", + "@esbuild/android-x64": "0.28.2", + "@esbuild/darwin-arm64": "0.28.2", + "@esbuild/darwin-x64": "0.28.2", + "@esbuild/freebsd-arm64": "0.28.2", + "@esbuild/freebsd-x64": "0.28.2", + "@esbuild/linux-arm": "0.28.2", + "@esbuild/linux-arm64": "0.28.2", + "@esbuild/linux-ia32": "0.28.2", + "@esbuild/linux-loong64": "0.28.2", + "@esbuild/linux-mips64el": "0.28.2", + "@esbuild/linux-ppc64": "0.28.2", + "@esbuild/linux-riscv64": "0.28.2", + "@esbuild/linux-s390x": "0.28.2", + "@esbuild/linux-x64": "0.28.2", + "@esbuild/netbsd-arm64": "0.28.2", + "@esbuild/netbsd-x64": "0.28.2", + "@esbuild/openbsd-arm64": "0.28.2", + "@esbuild/openbsd-x64": "0.28.2", + "@esbuild/openharmony-arm64": "0.28.2", + "@esbuild/sunos-x64": "0.28.2", + "@esbuild/win32-arm64": "0.28.2", + "@esbuild/win32-ia32": "0.28.2", + "@esbuild/win32-x64": "0.28.2" + } + }, "node_modules/esm-env": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz", @@ -1098,6 +2780,20 @@ "dev": true, "license": "MIT" }, + "node_modules/esprima": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", + "dev": true, + "license": "BSD-2-Clause", + "bin": { + "esparse": "bin/esparse.js", + "esvalidate": "bin/esvalidate.js" + }, + "engines": { + "node": ">=4" + } + }, "node_modules/esrap": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.3.0.tgz", @@ -1186,6 +2882,51 @@ "dev": true, "license": "MIT" }, + "node_modules/indent-string": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", + "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/is-docker": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz", + "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==", + "dev": true, + "license": "MIT", + "bin": { + "is-docker": "cli.js" + }, + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-inside-container": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz", + "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-docker": "^3.0.0" + }, + "bin": { + "is-inside-container": "cli.js" + }, + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/is-reference": { "version": "3.0.3", "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.3.tgz", @@ -1196,6 +2937,22 @@ "@types/estree": "^1.0.6" } }, + "node_modules/is-wsl": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz", + "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-inside-container": "^1.0.0" + }, + "engines": { + "node": ">=16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/istanbul-lib-coverage": { "version": "3.2.2", "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz", @@ -1242,6 +2999,13 @@ "dev": true, "license": "MIT" }, + "node_modules/jsonc-parser": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz", + "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==", + "dev": true, + "license": "MIT" + }, "node_modules/kleur": { "version": "4.1.5", "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", @@ -1520,6 +3284,23 @@ "dev": true, "license": "MIT" }, + "node_modules/loupe": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz", + "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/lz-string": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz", + "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==", + "dev": true, + "license": "MIT", + "bin": { + "lz-string": "bin/bin.js" + } + }, "node_modules/magic-string": { "version": "0.30.21", "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz", @@ -1558,6 +3339,16 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/min-indent": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz", + "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4" + } + }, "node_modules/mri": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz", @@ -1579,9 +3370,9 @@ } }, "node_modules/nanoid": { - "version": "3.3.17", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz", - "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==", + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", "dev": true, "funding": [ { @@ -1611,6 +3402,104 @@ "node": ">=12.20.0" } }, + "node_modules/open": { + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/open/-/open-10.2.0.tgz", + "integrity": "sha512-YgBpdJHPyQ2UE5x+hlSXcnejzAvD0b22U2OuAP+8OnlJT+PjWPxtgmGqKKc+RgTM63U9gN0YzrYc71R2WT/hTA==", + "dev": true, + "license": "MIT", + "dependencies": { + "default-browser": "^5.2.1", + "define-lazy-prop": "^3.0.0", + "is-inside-container": "^1.0.0", + "wsl-utils": "^0.1.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/oxc-parser": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/oxc-parser/-/oxc-parser-0.127.0.tgz", + "integrity": "sha512-bkgD4qHlN7WxLdX8bLXdaU54TtQtAIg/ZBAfm0aje/mo3MRDo3P0hZSgr4U7O3xfX+fQmR5AP04JS/TGcZLcFA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@oxc-project/types": "^0.127.0" + }, + "engines": { + "node": "^20.19.0 || >=22.12.0" + }, + "funding": { + "url": "https://github.com/sponsors/Boshen" + }, + "optionalDependencies": { + "@oxc-parser/binding-android-arm-eabi": "0.127.0", + "@oxc-parser/binding-android-arm64": "0.127.0", + "@oxc-parser/binding-darwin-arm64": "0.127.0", + "@oxc-parser/binding-darwin-x64": "0.127.0", + "@oxc-parser/binding-freebsd-x64": "0.127.0", + "@oxc-parser/binding-linux-arm-gnueabihf": "0.127.0", + "@oxc-parser/binding-linux-arm-musleabihf": "0.127.0", + "@oxc-parser/binding-linux-arm64-gnu": "0.127.0", + "@oxc-parser/binding-linux-arm64-musl": "0.127.0", + "@oxc-parser/binding-linux-ppc64-gnu": "0.127.0", + "@oxc-parser/binding-linux-riscv64-gnu": "0.127.0", + "@oxc-parser/binding-linux-riscv64-musl": "0.127.0", + "@oxc-parser/binding-linux-s390x-gnu": "0.127.0", + "@oxc-parser/binding-linux-x64-gnu": "0.127.0", + "@oxc-parser/binding-linux-x64-musl": "0.127.0", + "@oxc-parser/binding-openharmony-arm64": "0.127.0", + "@oxc-parser/binding-wasm32-wasi": "0.127.0", + "@oxc-parser/binding-win32-arm64-msvc": "0.127.0", + "@oxc-parser/binding-win32-ia32-msvc": "0.127.0", + "@oxc-parser/binding-win32-x64-msvc": "0.127.0" + } + }, + "node_modules/oxc-parser/node_modules/@oxc-project/types": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.127.0.tgz", + "integrity": "sha512-aIYXQBo4lCbO4z0R3FHeucQHpF46l2LbMdxRvqvuRuW2OxdnSkcng5B8+K12spgLDj93rtN3+J2Vac/TIO+ciQ==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/Boshen" + } + }, + "node_modules/oxc-resolver": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/oxc-resolver/-/oxc-resolver-11.21.2.tgz", + "integrity": "sha512-w5tLwYN3Zo24w5EeWJjJWZOwhYqTtC8PS2B1tIt7BZUuqTIcU07sQValbDw+rq7+AuAGzOHklgK+ifsy4lpXfw==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/Boshen" + }, + "optionalDependencies": { + "@oxc-resolver/binding-android-arm-eabi": "11.21.2", + "@oxc-resolver/binding-android-arm64": "11.21.2", + "@oxc-resolver/binding-darwin-arm64": "11.21.2", + "@oxc-resolver/binding-darwin-x64": "11.21.2", + "@oxc-resolver/binding-freebsd-x64": "11.21.2", + "@oxc-resolver/binding-linux-arm-gnueabihf": "11.21.2", + "@oxc-resolver/binding-linux-arm-musleabihf": "11.21.2", + "@oxc-resolver/binding-linux-arm64-gnu": "11.21.2", + "@oxc-resolver/binding-linux-arm64-musl": "11.21.2", + "@oxc-resolver/binding-linux-ppc64-gnu": "11.21.2", + "@oxc-resolver/binding-linux-riscv64-gnu": "11.21.2", + "@oxc-resolver/binding-linux-riscv64-musl": "11.21.2", + "@oxc-resolver/binding-linux-s390x-gnu": "11.21.2", + "@oxc-resolver/binding-linux-x64-gnu": "11.21.2", + "@oxc-resolver/binding-linux-x64-musl": "11.21.2", + "@oxc-resolver/binding-openharmony-arm64": "11.21.2", + "@oxc-resolver/binding-wasm32-wasi": "11.21.2", + "@oxc-resolver/binding-win32-arm64-msvc": "11.21.2", + "@oxc-resolver/binding-win32-x64-msvc": "11.21.2" + } + }, "node_modules/pathe": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz", @@ -1618,6 +3507,16 @@ "dev": true, "license": "MIT" }, + "node_modules/pathval": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/pathval/-/pathval-2.0.1.tgz", + "integrity": "sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 14.16" + } + }, "node_modules/picocolors": { "version": "1.1.1", "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz", @@ -1667,6 +3566,39 @@ "node": "^10 || ^12 || >=14" } }, + "node_modules/pretty-format": { + "version": "27.5.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-27.5.1.tgz", + "integrity": "sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1", + "ansi-styles": "^5.0.0", + "react-is": "^17.0.1" + }, + "engines": { + "node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0" + } + }, + "node_modules/react": { + "version": "19.2.8", + "resolved": "https://registry.npmjs.org/react/-/react-19.2.8.tgz", + "integrity": "sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==", + "dev": true, + "license": "MIT", + "peer": true, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/react-is": { + "version": "17.0.2", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz", + "integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==", + "dev": true, + "license": "MIT" + }, "node_modules/readdirp": { "version": "4.1.2", "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz", @@ -1681,6 +3613,37 @@ "url": "https://paulmillr.com/funding/" } }, + "node_modules/recast": { + "version": "0.23.21", + "resolved": "https://registry.npmjs.org/recast/-/recast-0.23.21.tgz", + "integrity": "sha512-mFAyJq9vUbSTARLZUvAEf1z3YxlvAwswbmxMx2mPA/MSm4KmpwvwvhsH/NIrZhyOuwD60Lzyw2qh83uCbgTPYw==", + "dev": true, + "license": "MIT", + "dependencies": { + "ast-types": "^0.16.1", + "esprima": "~4.0.0", + "source-map": "~0.6.1", + "tiny-invariant": "^1.3.3", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">= 4" + } + }, + "node_modules/redent": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz", + "integrity": "sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==", + "dev": true, + "license": "MIT", + "dependencies": { + "indent-string": "^4.0.0", + "strip-indent": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, "node_modules/rolldown": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.2.tgz", @@ -1714,6 +3677,19 @@ "@rolldown/binding-win32-x64-msvc": "1.2.2" } }, + "node_modules/run-applescript": { + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/run-applescript/-/run-applescript-7.1.0.tgz", + "integrity": "sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/sade": { "version": "1.8.1", "resolved": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz", @@ -1727,6 +3703,13 @@ "node": ">=6" } }, + "node_modules/scule": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/scule/-/scule-1.3.0.tgz", + "integrity": "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==", + "dev": true, + "license": "MIT" + }, "node_modules/semver": { "version": "7.8.5", "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz", @@ -1769,6 +3752,16 @@ "node": ">=18" } }, + "node_modules/source-map": { + "version": "0.6.1", + "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", + "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, "node_modules/source-map-js": { "version": "1.2.1", "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", @@ -1793,6 +3786,153 @@ "dev": true, "license": "MIT" }, + "node_modules/storybook": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/storybook/-/storybook-10.5.10.tgz", + "integrity": "sha512-Rz8k9ejFHsi7lbtJTaxZlhCUz4GkbJIKEoKDjXeLfr/ZhXip73E6keKxW0KH8iGeKiCqHAbJCV4YIQrxTOLiig==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/global": "^5.0.0", + "@storybook/icons": "^2.0.2", + "@testing-library/dom": "^10.4.1", + "@testing-library/jest-dom": "6.9.1", + "@testing-library/user-event": "^14.6.1", + "@vitest/expect": "3.2.4", + "@vitest/spy": "3.2.4", + "@webcontainer/env": "^1.1.1", + "esbuild": "^0.18.0 || ^0.19.0 || ^0.20.0 || ^0.21.0 || ^0.22.0 || ^0.23.0 || ^0.24.0 || ^0.25.0 || ^0.26.0 || ^0.27.0 || ^0.28.0", + "jsonc-parser": "^3.3.1", + "open": "^10.2.0", + "oxc-parser": "^0.127.0", + "oxc-resolver": "11.21.2", + "recast": "^0.23.5", + "semver": "^7.7.3", + "use-sync-external-store": "^1.5.0", + "ws": "^8.21.1" + }, + "bin": { + "storybook": "dist/bin/dispatcher.js" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0", + "prettier": "^2 || ^3", + "vite-plus": "^0.1.15 || ^0.2.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + }, + "prettier": { + "optional": true + }, + "vite-plus": { + "optional": true + } + } + }, + "node_modules/storybook/node_modules/@vitest/expect": { + "version": "3.2.4", + "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-3.2.4.tgz", + "integrity": "sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/chai": "^5.2.2", + "@vitest/spy": "3.2.4", + "@vitest/utils": "3.2.4", + "chai": "^5.2.0", + "tinyrainbow": "^2.0.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/storybook/node_modules/@vitest/pretty-format": { + "version": "3.2.4", + "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.4.tgz", + "integrity": "sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==", + "dev": true, + "license": "MIT", + "dependencies": { + "tinyrainbow": "^2.0.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/storybook/node_modules/@vitest/spy": { + "version": "3.2.4", + "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-3.2.4.tgz", + "integrity": "sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==", + "dev": true, + "license": "MIT", + "dependencies": { + "tinyspy": "^4.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/storybook/node_modules/@vitest/utils": { + "version": "3.2.4", + "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.4.tgz", + "integrity": "sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "3.2.4", + "loupe": "^3.1.4", + "tinyrainbow": "^2.0.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/storybook/node_modules/chai": { + "version": "5.3.3", + "resolved": "https://registry.npmjs.org/chai/-/chai-5.3.3.tgz", + "integrity": "sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==", + "dev": true, + "license": "MIT", + "dependencies": { + "assertion-error": "^2.0.1", + "check-error": "^2.1.1", + "deep-eql": "^5.0.1", + "loupe": "^3.1.0", + "pathval": "^2.0.0" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/storybook/node_modules/tinyrainbow": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-2.0.0.tgz", + "integrity": "sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/strip-indent": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz", + "integrity": "sha512-laJTa3Jb+VQpaC6DseHhF7dXVqHTfJPCRDaEbid/drOhgitgYku/letMUqOXFoWV0zIIUbjpdH2t+tYj4bQMRQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "min-indent": "^1.0.0" + }, + "engines": { + "node": ">=8" + } + }, "node_modules/supports-color": { "version": "7.2.0", "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", @@ -1859,6 +3999,41 @@ "typescript": "^5.0.0 || ^6.0.0" } }, + "node_modules/svelte2tsx": { + "version": "0.7.61", + "resolved": "https://registry.npmjs.org/svelte2tsx/-/svelte2tsx-0.7.61.tgz", + "integrity": "sha512-EpQ/+UHITBULeUojx/LLD3uTYasZXcX1BrqlrzfLUnT9vdUhaOWK59a3ryWcFU8L0sY1SP+gRhJ2Beiis98+qw==", + "dev": true, + "license": "MIT", + "dependencies": { + "dedent-js": "^1.0.1", + "scule": "^1.3.0" + }, + "peerDependencies": { + "svelte": "^3.55 || ^4.0.0-next.0 || ^4.0 || ^5.0.0-next.0", + "typescript": "^4.9.4 || ^5.0.0 || ^6.0.0" + } + }, + "node_modules/tagged-tag": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/tagged-tag/-/tagged-tag-1.0.0.tgz", + "integrity": "sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=20" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/tiny-invariant": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/tiny-invariant/-/tiny-invariant-1.3.3.tgz", + "integrity": "sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==", + "dev": true, + "license": "MIT" + }, "node_modules/tinybench": { "version": "2.9.0", "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz", @@ -1903,6 +4078,16 @@ "node": ">=14.0.0" } }, + "node_modules/tinyspy": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/tinyspy/-/tinyspy-4.0.4.tgz", + "integrity": "sha512-azl+t0z7pw/z958Gy9svOTuzqIk6xq+NSheJzn5MMWtWTFywIacg2wUlzKFGtt3cthx0r2SxMK0yzJOR0IES7Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=14.0.0" + } + }, "node_modules/totalist": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/totalist/-/totalist-3.0.1.tgz", @@ -1913,6 +4098,39 @@ "node": ">=6" } }, + "node_modules/ts-dedent": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/ts-dedent/-/ts-dedent-2.3.0.tgz", + "integrity": "sha512-JfJeIHke7y2egdGGgRAvpCwYFUsHlM2gPcrVOxFkznt/4uzQ7HFmvE63iFHVLBJNDuyDOQgijDK/tXH/f6Msjg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.10" + } + }, + "node_modules/tslib": { + "version": "2.8.1", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz", + "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==", + "dev": true, + "license": "0BSD" + }, + "node_modules/type-fest": { + "version": "5.8.0", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-5.8.0.tgz", + "integrity": "sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==", + "dev": true, + "license": "(MIT OR CC0-1.0)", + "dependencies": { + "tagged-tag": "^1.0.0" + }, + "engines": { + "node": ">=20" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/typescript": { "version": "5.6.3", "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz", @@ -1934,6 +4152,32 @@ "dev": true, "license": "MIT" }, + "node_modules/unplugin": { + "version": "2.3.11", + "resolved": "https://registry.npmjs.org/unplugin/-/unplugin-2.3.11.tgz", + "integrity": "sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/remapping": "^2.3.5", + "acorn": "^8.15.0", + "picomatch": "^4.0.3", + "webpack-virtual-modules": "^0.6.2" + }, + "engines": { + "node": ">=18.12.0" + } + }, + "node_modules/use-sync-external-store": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.6.0.tgz", + "integrity": "sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" + } + }, "node_modules/vite": { "version": "8.2.1", "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.1.tgz", @@ -2122,6 +4366,13 @@ } } }, + "node_modules/webpack-virtual-modules": { + "version": "0.6.2", + "resolved": "https://registry.npmjs.org/webpack-virtual-modules/-/webpack-virtual-modules-0.6.2.tgz", + "integrity": "sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==", + "dev": true, + "license": "MIT" + }, "node_modules/why-is-node-running": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz", @@ -2139,6 +4390,44 @@ "node": ">=8" } }, + "node_modules/ws": { + "version": "8.21.3", + "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz", + "integrity": "sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10.0.0" + }, + "peerDependencies": { + "bufferutil": "^4.0.1", + "utf-8-validate": ">=5.0.2" + }, + "peerDependenciesMeta": { + "bufferutil": { + "optional": true + }, + "utf-8-validate": { + "optional": true + } + } + }, + "node_modules/wsl-utils": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/wsl-utils/-/wsl-utils-0.1.0.tgz", + "integrity": "sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-wsl": "^3.1.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/zimmerframe": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/zimmerframe/-/zimmerframe-1.1.4.tgz", diff --git a/package.json b/package.json index ee327b30c..88618a049 100644 --- a/package.json +++ b/package.json @@ -7,6 +7,8 @@ "dev": "vite dev", "verify:release-version": "node scripts/ci/release-version.mjs", "build": "npm run verify:release-version && vite build", + "storybook": "storybook dev -p 6006", + "build-storybook": "storybook build", "preview": "vite preview", "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json", "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch", @@ -21,6 +23,7 @@ }, "overrides": { "cookie": "^0.7.2", + "nanoid": "^3.3.18", "postcss": "^8.5.18" }, "dependencies": { @@ -29,12 +32,15 @@ "@tauri-apps/plugin-opener": "^2" }, "devDependencies": { + "@storybook/addon-a11y": "^10.5.10", + "@storybook/sveltekit": "^10.5.10", "@sveltejs/adapter-static": "^3.0.6", "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.3.0", "@tauri-apps/cli": "^2", "@types/node": "^26.1.2", "@vitest/coverage-v8": "^4.1.10", + "storybook": "^10.5.10", "svelte": "^5.56.9", "svelte-check": "^4.7.6", "typescript": "~5.6.2", diff --git a/scripts/ci/release-version.mjs b/scripts/ci/release-version.mjs index 78377d87f..a03f8e81e 100644 --- a/scripts/ci/release-version.mjs +++ b/scripts/ci/release-version.mjs @@ -34,7 +34,7 @@ export function readJsonVersion(manifestPath, readText = readFileSync) { * Read the Cargo package section and return its single literal version. * * Workspace-inherited or duplicated versions are refused because the packaged - * application must expose one buyer-verifiable version before publication. + * application must expose one operator-verifiable version before publication. * * @param {string} manifestPath Repository-relative Cargo manifest path. * @param {(path: string, encoding: BufferEncoding) => string} readText Text reader seam. diff --git a/src-tauri/tests/icloud_local_eviction_batch_documentation_test.rs b/src-tauri/tests/icloud_local_eviction_batch_documentation_test.rs index 84a698ee2..e762c863b 100644 --- a/src-tauri/tests/icloud_local_eviction_batch_documentation_test.rs +++ b/src-tauri/tests/icloud_local_eviction_batch_documentation_test.rs @@ -1,4 +1,4 @@ -//! Contract tests for the buyer-visible iCloud batch safety documentation. +//! Contract tests for the operator-visible iCloud batch safety documentation. //! //! These checks keep the operational claims, evidence boundary, standards mapping, and APA 7th //! references reviewable alongside the Rust behavior they describe. diff --git a/src-tauri/tests/package_metadata_contract.rs b/src-tauri/tests/package_metadata_contract.rs index 3430f6460..b0dabd43a 100644 --- a/src-tauri/tests/package_metadata_contract.rs +++ b/src-tauri/tests/package_metadata_contract.rs @@ -1,4 +1,4 @@ -//! Regression contract for buyer-visible Rust package metadata. +//! Regression contract for release-visible Rust package metadata. //! //! DiskSage is distributed as a desktop product rather than a crates.io library. The Cargo //! manifest still forms part of acquisition, SBOM, provenance, and support evidence, so it must diff --git a/src/app.html b/src/app.html index 92e7e3338..eff2b47fb 100644 --- a/src/app.html +++ b/src/app.html @@ -1,10 +1,10 @@ - + - Tauri + SvelteKit + Typescript App + DiskSage · 로컬 저장공간과 클라우드 증거 %sveltekit.head% diff --git a/src/lib/releaseArtifactAllowlistContract.test.ts b/src/lib/releaseArtifactAllowlistContract.test.ts index 464816126..4bc2090c5 100644 --- a/src/lib/releaseArtifactAllowlistContract.test.ts +++ b/src/lib/releaseArtifactAllowlistContract.test.ts @@ -139,7 +139,7 @@ describe('release artifact exact-set admission', () => { try { writeFileSync( join(fixtureRoot, 'release-artifacts', 'ubuntu', 'unexpected-debug-dump.txt'), - 'buyer-private-or-unreviewed-output', + 'operator-private-or-unreviewed-output', ); const result = runReleaseArtifactVerifier(fixtureRoot); diff --git a/src/lib/releaseProvenanceContract.test.ts b/src/lib/releaseProvenanceContract.test.ts index f3d46120b..758a91113 100644 --- a/src/lib/releaseProvenanceContract.test.ts +++ b/src/lib/releaseProvenanceContract.test.ts @@ -216,7 +216,7 @@ describe('release artifact provenance contract', () => { }, ); - it('keeps buyer verification and authoritative provenance references discoverable', () => { + it('keeps operator verification and authoritative provenance references discoverable', () => { const doctoring = readRepositoryFile('docs/doctoring/release-artifact-provenance.md'); const changelog = readRepositoryFile('CHANGELOG.md'); @@ -226,6 +226,6 @@ describe('release artifact provenance contract', () => { expect(doctoring).toContain('SLSA Provenance v1'); expect(doctoring).toContain('in-toto Statement v1'); expect(doctoring).toContain('APA 7th references'); - expect(changelog).toContain('buyer-verifiable release artifact provenance'); + expect(changelog).toContain('operator-verifiable release artifact provenance'); }); }); diff --git a/src/lib/releaseVersionContract.test.ts b/src/lib/releaseVersionContract.test.ts index f2145bd09..2e89a65ca 100644 --- a/src/lib/releaseVersionContract.test.ts +++ b/src/lib/releaseVersionContract.test.ts @@ -40,7 +40,7 @@ describe('release version contract', () => { expect( readCargoPackageVersion( 'Cargo.toml', - () => '# preamble\n[workspace]\nmembers = []\n\n[package]\nname = "disksage"\nversion = "1.2.3" # buyer-visible\nedition = "2021"\n\n[dependencies]\n', + () => '# preamble\n[workspace]\nmembers = []\n\n[package]\nname = "disksage"\nversion = "1.2.3" # release-visible\nedition = "2021"\n\n[dependencies]\n', ), ).toBe('1.2.3'); }); diff --git a/src/lib/ui/design-tokens.css b/src/lib/ui/design-tokens.css new file mode 100644 index 000000000..9265da83f --- /dev/null +++ b/src/lib/ui/design-tokens.css @@ -0,0 +1,176 @@ +/* + * DiskSage design tokens. + * Primitive -> semantic -> component references keep the desktop shell and + * Storybook states on the same visual contract without a new CSS framework. + */ +:root { + /* Primitive palette */ + --ds-blue-700: #075985; + --ds-blue-600: #0369a1; + --ds-blue-100: #e0f2fe; + --ds-slate-950: #020617; + --ds-slate-800: #1e293b; + --ds-slate-700: #334155; + --ds-slate-600: #475569; + --ds-slate-300: #cbd5e1; + --ds-slate-100: #f1f5f9; + --ds-white: #ffffff; + --ds-green-700: #166534; + --ds-green-100: #dcfce7; + --ds-amber-800: #92400e; + --ds-amber-100: #fef3c7; + --ds-red-700: #b91c1c; + --ds-red-100: #fee2e2; + + --ds-space-1: 0.25rem; + --ds-space-2: 0.5rem; + --ds-space-3: 0.75rem; + --ds-space-4: 1rem; + --ds-space-6: 1.5rem; + --ds-space-8: 2rem; + --ds-radius-sm: 0.375rem; + --ds-radius-md: 0.625rem; + --ds-shadow-focus: 0 0 0 3px color-mix(in srgb, var(--ds-blue-600) 35%, transparent); + + /* Semantic tokens */ + --ds-surface: var(--ds-white); + --ds-surface-muted: var(--ds-slate-100); + --ds-text: var(--ds-slate-950); + --ds-text-muted: var(--ds-slate-600); + --ds-border: var(--ds-slate-300); + --ds-action: var(--ds-blue-700); + --ds-action-hover: var(--ds-blue-600); + --ds-success-surface: var(--ds-green-100); + --ds-success-text: var(--ds-green-700); + --ds-warning-surface: var(--ds-amber-100); + --ds-warning-text: var(--ds-amber-800); + --ds-danger-surface: var(--ds-red-100); + --ds-danger-text: var(--ds-red-700); + + /* Component tokens */ + --ds-control-min-size: 2.75rem; + --ds-control-padding-inline: var(--ds-space-3); + --ds-control-padding-block: var(--ds-space-2); + --ds-panel-gap: var(--ds-space-4); +} + +@media (prefers-color-scheme: dark) { + :root { + --ds-surface: var(--ds-slate-950); + --ds-surface-muted: var(--ds-slate-800); + --ds-text: var(--ds-slate-100); + --ds-text-muted: var(--ds-slate-300); + --ds-border: var(--ds-slate-700); + --ds-action: #7dd3fc; + --ds-action-hover: #bae6fd; + --ds-success-surface: #14532d; + --ds-success-text: #bbf7d0; + --ds-warning-surface: #78350f; + --ds-warning-text: #fde68a; + --ds-danger-surface: #7f1d1d; + --ds-danger-text: #fecaca; + } +} + +*, +*::before, +*::after { + box-sizing: border-box; +} + +html { + color: var(--ds-text); + background: var(--ds-surface); + font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; + line-height: 1.55; +} + +body { + margin: 0; + min-width: 18rem; + background: var(--ds-surface); + color: var(--ds-text); +} + +button, +select, +input, +textarea { + font: inherit; +} + +button, +select, +input, +textarea { + min-height: var(--ds-control-min-size); +} + +button { + border: 1px solid var(--ds-border); + border-radius: var(--ds-radius-sm); + background: var(--ds-surface); + color: var(--ds-text); + cursor: pointer; + padding: var(--ds-control-padding-block) var(--ds-control-padding-inline); +} + +button:hover:not(:disabled) { + border-color: var(--ds-action); +} + +button:focus-visible, +a:focus-visible, +select:focus-visible, +input:focus-visible, +textarea:focus-visible { + outline: 2px solid var(--ds-action); + outline-offset: 2px; + box-shadow: var(--ds-shadow-focus); +} + +button:disabled, +input:disabled, +select:disabled, +textarea:disabled { + cursor: not-allowed; + opacity: 0.65; +} + +.ds-skip-link { + position: absolute; + z-index: 10; + top: var(--ds-space-2); + left: var(--ds-space-2); + transform: translateY(-150%); + border-radius: var(--ds-radius-sm); + background: var(--ds-action); + color: var(--ds-white); + padding: var(--ds-space-2) var(--ds-space-3); +} + +.ds-skip-link:focus { + transform: translateY(0); +} + +@media (prefers-reduced-motion: reduce) { + *, + *::before, + *::after { + scroll-behavior: auto !important; + transition-duration: 0.01ms !important; + animation-duration: 0.01ms !important; + animation-iteration-count: 1 !important; + } +} + +@media (forced-colors: active) { + button:focus-visible, + a:focus-visible, + select:focus-visible, + input:focus-visible, + textarea:focus-visible { + outline: 2px solid CanvasText; + box-shadow: none; + } +} diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts new file mode 100644 index 000000000..ad4aab8de --- /dev/null +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -0,0 +1,68 @@ +import type { Meta, StoryObj } from "@storybook/sveltekit"; +import { expect, fn, userEvent, within } from "storybook/test"; +import ProviderStatusCard from "./ProviderStatusCard.svelte"; + +const meta = { + title: "DiskSage/ProviderStatusCard", + component: ProviderStatusCard, + tags: ["autodocs"], + argTypes: { + state: { + control: "select", + options: ["clear", "checking", "provider-sync-incomplete", "materialization-stalled"], + }, + canCancel: { control: "boolean" }, + }, +} satisfies Meta; + +export default meta; +type Story = StoryObj; + +export const Clear: Story = { + args: { + provider: "iCloud", + state: "clear", + details: "새 복사는 허용할 수 있지만 개별 파일 attestation은 별도로 필요합니다.", + observedAt: "2026-08-21 17:30 KST", + }, +}; + +export const MaterializationStalled: Story = { + args: { + provider: "iCloud", + state: "materialization-stalled", + details: "File Provider 요청이 진행률 없이 만료되어 새 복사와 원본 정리를 차단했습니다.", + observedAt: "2026-08-21 17:07 KST", + blockedFor: "23분", + canCancel: true, + onCancel: fn(), + }, + play: async ({ canvasElement, args }) => { + const canvas = within(canvasElement); + await expect(canvas.getByRole("status")).toHaveTextContent("파일 materialization 정체"); + await userEvent.click(canvas.getByRole("button", { name: "복사 취소 요청" })); + await expect(args.onCancel).toHaveBeenCalledOnce(); + }, +}; + +export const CheckingWithoutAction: Story = { + args: { + provider: "Google Drive", + state: "checking", + details: "공급자 전역 증거를 읽기 전용으로 확인하고 있습니다.", + canCancel: true, + }, + play: async ({ canvasElement }) => { + const canvas = within(canvasElement); + await expect(canvas.getByRole("button", { name: "복사 취소 요청" })).toBeDisabled(); + }, +}; + +export const IncompleteEvidence: Story = { + args: { + provider: "OneDrive", + state: "provider-sync-incomplete", + details: "공급자 상태 증거가 완전하지 않아 기존 목적지를 채택하지 않습니다.", + observedAt: "2026-08-21 17:30 KST", + }, +}; diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte new file mode 100644 index 000000000..b98b22477 --- /dev/null +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -0,0 +1,94 @@ + + +
    +
    +

    {provider} 전역 동기화

    + {stateLabel[state]} +
    +

    {details}

    + {#if observedAt || blockedFor} +

    + {#if observedAt}마지막 관찰 {observedAt}{/if} + {#if observedAt && blockedFor} · {/if} + {#if blockedFor}동일 차단 {blockedFor}{/if} +

    + {/if} + {#if canCancel} + + {/if} +
    + + diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts new file mode 100644 index 000000000..d81cddb49 --- /dev/null +++ b/src/lib/uxContract.test.ts @@ -0,0 +1,54 @@ +import { readFileSync } from "node:fs"; +import { resolve } from "node:path"; +import { describe, expect, it } from "vitest"; + +const root = resolve(import.meta.dirname, "../.."); +const read = (relativePath: string) => readFileSync(resolve(root, relativePath), "utf8"); + +describe("UI/UX design and Storybook contract", () => { + it("keeps primitive, semantic, and component tokens with preference fallbacks", () => { + const tokens = read("src/lib/ui/design-tokens.css"); + expect(tokens).toContain("--ds-blue-700"); + expect(tokens).toContain("--ds-text: var(--ds-slate-950)"); + expect(tokens).toContain("--ds-control-min-size: 2.75rem"); + expect(tokens).toContain("prefers-color-scheme: dark"); + expect(tokens).toContain("prefers-reduced-motion: reduce"); + expect(tokens).toContain("forced-colors: active"); + }); + + it("keeps the shell keyboard and live-feedback boundaries explicit", () => { + const layout = read("src/routes/+layout.svelte"); + const page = read("src/routes/+page.svelte"); + expect(layout).toContain('href="#main-content"'); + expect(page).toContain('id="main-content" tabindex="-1"'); + expect(page).toContain('for="scan-root"'); + expect(page).toContain('role="alert"'); + expect(page).toContain('aria-live="polite"'); + expect(page).not.toContain("alert(`스캔 시작 실패"); + }); + + it("registers every provider state and interaction edge in Storybook", () => { + const story = read("src/lib/ux/ProviderStatusCard.stories.ts"); + const config = read(".storybook/preview.ts"); + const workflow = read(".github/workflows/test.yml"); + for (const state of ["clear", "checking", "provider-sync-incomplete", "materialization-stalled"]) { + expect(story).toContain(`state: "${state}"`); + } + expect(story).toContain("toHaveBeenCalledOnce"); + expect(story).toContain("toBeDisabled"); + expect(config).toContain('test: "error"'); + expect(config).toContain("mobile"); + expect(workflow).toContain("npm run build-storybook"); + }); + + it("uses release-consumer terminology rather than a shopping-domain actor", () => { + const files = [ + "CHANGELOG.md", + "docs/product-technical-gap-baseline.md", + "docs/doctoring/release-version-contract.md", + "docs/doctoring/release-artifact-provenance.md", + "scripts/ci/release-version.mjs", + ]; + for (const file of files) expect(read(file).toLowerCase()).not.toMatch(/\bbuyer\b/); + }); +}); diff --git a/src/routes/+layout.svelte b/src/routes/+layout.svelte new file mode 100644 index 000000000..92cb83e22 --- /dev/null +++ b/src/routes/+layout.svelte @@ -0,0 +1,6 @@ + + +본문으로 건너뛰기 + diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte index 4a4254473..0497efd07 100644 --- a/src/routes/+page.svelte +++ b/src/routes/+page.svelte @@ -18,33 +18,46 @@ let crumbs: string[] = $state([]); let top: api.EntryView[] = $state([]); let navSeq = 0; + let loadError = $state(""); + let scanMessage = $state(""); onMount(async () => { - roots = await api.listRoots(); - selectedRoot = roots[0] ?? ""; - await api.onScanProgress((s) => (stats = s)); - await api.onScanDone(async (s) => { - stats = s; - scanning = false; - try { - crumbs = [selectedRoot]; - node = await api.getNode(selectedRoot); - top = await api.topFiles(200); - } catch (e) { - console.error("post-scan load failed:", e); - } - }); + try { + roots = await api.listRoots(); + selectedRoot = roots[0] ?? ""; + await api.onScanProgress((s) => (stats = s)); + await api.onScanDone(async (s) => { + stats = s; + scanning = false; + scanMessage = `스캔 완료: ${s.files.toLocaleString()}개 파일, ${fmtBytes(s.bytes)}`; + try { + crumbs = [selectedRoot]; + node = await api.getNode(selectedRoot); + top = await api.topFiles(200); + } catch (e) { + loadError = String(e); + scanMessage = "스캔 결과를 화면에 불러오지 못했습니다."; + } + }); + } catch (e) { + loadError = String(e); + scanMessage = "스캔할 수 있는 위치를 불러오지 못했습니다."; + } }); async function scan() { + if (!selectedRoot || scanning) return; scanning = true; node = null; top = []; + loadError = ""; + scanMessage = `${selectedRoot} 스캔을 시작했습니다.`; try { await api.startScan(selectedRoot); } catch (e) { scanning = false; - alert(`스캔 시작 실패: ${e}`); + loadError = `스캔 시작 실패: ${e}`; + scanMessage = "스캔을 시작하지 못했습니다."; } } @@ -73,16 +86,25 @@ } -
    + + DiskSage · 로컬 저장공간과 클라우드 증거 + + + +

    DiskSage

    -
    - {#each roots as r}{/each} {#if scanning} - + {:else} - + {/if} {#if stats} @@ -91,11 +113,13 @@ {/if}
    + {#if loadError}{/if} +

    {scanMessage}

    {#if node} -
    From 16c34227337a305cd2885eae19525a34ecd8dea0 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 18:15:37 +0900 Subject: [PATCH 535/691] test: execute Storybook interaction contracts --- .github/workflows/test.yml | 20 + .storybook/preview.ts | 1 + docs/design/storybook-event-inventory.md | 1 + docs/product-technical-gap-baseline.md | 9 +- package-lock.json | 10916 ++++++++++++++++----- package.json | 5 +- src/lib/ux/ProviderStatusCard.stories.ts | 1 + src/lib/uxContract.test.ts | 3 + 8 files changed, 8765 insertions(+), 2191 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 4f45acfaa..f10dc16e4 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -44,6 +44,26 @@ jobs: - run: npm test - run: npm run build - run: npm run build-storybook + - name: Run Storybook interaction and accessibility tests + shell: bash + run: | + set -euo pipefail + npm run storybook -- --ci --no-open --port 6006 > /tmp/disksage-storybook.log 2>&1 & + server_pid=$! + cleanup() { kill "$server_pid" 2>/dev/null || true; } + trap cleanup EXIT + for attempt in $(seq 1 60); do + if curl --fail --silent http://127.0.0.1:6006/iframe.html >/dev/null; then + break + fi + if ! kill -0 "$server_pid" 2>/dev/null; then + cat /tmp/disksage-storybook.log + exit 1 + fi + sleep 1 + done + curl --fail --silent http://127.0.0.1:6006/iframe.html >/dev/null + npm run test-storybook -- --ci --url http://127.0.0.1:6006 --browsers chromium --testTimeout 30000 windows-home-resolution: runs-on: windows-latest diff --git a/.storybook/preview.ts b/.storybook/preview.ts index a523fb47b..7d5ccfd6e 100644 --- a/.storybook/preview.ts +++ b/.storybook/preview.ts @@ -14,6 +14,7 @@ const preview: Preview = { desktop: { name: "Desktop", styles: { width: "1280px", height: "800px" } }, mobile: { name: "Mobile", styles: { width: "375px", height: "812px" } }, }, + defaultViewport: "desktop", }, }, tags: ["autodocs"], diff --git a/docs/design/storybook-event-inventory.md b/docs/design/storybook-event-inventory.md index a39ad7060..bae1227fb 100644 --- a/docs/design/storybook-event-inventory.md +++ b/docs/design/storybook-event-inventory.md @@ -49,6 +49,7 @@ eviction authority: every destructive action remains behind the Rust evidence an ```bash npm run storybook npm run build-storybook +npm run test-storybook -- --ci --url http://127.0.0.1:6006 --browsers chromium --testTimeout 30000 ``` The a11y addon is configured with `a11y.test = "error"`. The interaction stories assert the diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 6aaa0a7d2..360de6c88 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -60,10 +60,11 @@ baseline records the current loop's runtime and integration evidence. evidence, materialization stall, cancel callback, disabled action, mobile viewport, and reduced motion states. The a11y addon is configured to fail a story on detected violations; Storybook is development-only and cannot authorize cloud writes or source eviction. -- Local evidence at this implementation snapshot: `npm test` 30 files/128 tests, `svelte-check` - 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and production - dependency audit reported 0 vulnerabilities. The Storybook bundle emits a non-blocking >500 KiB - axe chunk advisory; no runtime bundle includes Storybook. +- Local evidence at this implementation snapshot: `npm test` 30 files/129 tests, `svelte-check` + 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and the + Storybook test runner passed 4 smoke/interaction stories in Chromium. The production and + development dependency audit reported 0 vulnerabilities after the uuid override. The Storybook + bundle emits a non-blocking >500 KiB axe chunk advisory; no runtime bundle includes Storybook. - Standards adopted for this slice are WCAG 2.2, WAI-ARIA APG, Design Tokens Format Module 2025.10, and Storybook accessibility testing. No Figma File ID exists for this change; ADR-0010 records that boundary and requires a superseding ADR when a Figma handoff is approved. diff --git a/package-lock.json b/package-lock.json index 28b1ffbe2..c517b7a0c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,6 +16,7 @@ "devDependencies": { "@storybook/addon-a11y": "^10.5.10", "@storybook/sveltekit": "^10.5.10", + "@storybook/test-runner": "^0.24.4", "@sveltejs/adapter-static": "^3.0.6", "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.3.0", @@ -62,335 +63,558 @@ "dev": true, "license": "MIT" }, - "node_modules/@babel/helper-string-parser": { + "node_modules/@babel/compat-data": { "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", - "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==", + "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.7.tgz", + "integrity": "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==", "dev": true, "license": "MIT", "engines": { "node": ">=6.9.0" } }, - "node_modules/@babel/helper-validator-identifier": { + "node_modules/@babel/core": { "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", - "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", + "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz", + "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==", "dev": true, "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.29.7", + "@babel/generator": "^7.29.7", + "@babel/helper-compilation-targets": "^7.29.7", + "@babel/helper-module-transforms": "^7.29.7", + "@babel/helpers": "^7.29.7", + "@babel/parser": "^7.29.7", + "@babel/template": "^7.29.7", + "@babel/traverse": "^7.29.7", + "@babel/types": "^7.29.7", + "@jridgewell/remapping": "^2.3.5", + "convert-source-map": "^2.0.0", + "debug": "^4.1.0", + "gensync": "^1.0.0-beta.2", + "json5": "^2.2.3", + "semver": "^6.3.1" + }, "engines": { "node": ">=6.9.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/babel" } }, - "node_modules/@babel/parser": { + "node_modules/@babel/core/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/@babel/generator": { "version": "7.29.8", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz", - "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==", + "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.8.tgz", + "integrity": "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==", "dev": true, "license": "MIT", "dependencies": { - "@babel/types": "^7.29.8" - }, - "bin": { - "parser": "bin/babel-parser.js" + "@babel/parser": "^7.29.8", + "@babel/types": "^7.29.8", + "@jridgewell/gen-mapping": "^0.3.12", + "@jridgewell/trace-mapping": "^0.3.28", + "jsesc": "^3.0.2" }, "engines": { - "node": ">=6.0.0" + "node": ">=6.9.0" } }, - "node_modules/@babel/runtime": { + "node_modules/@babel/helper-compilation-targets": { "version": "7.29.7", - "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz", - "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==", + "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.29.7.tgz", + "integrity": "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==", "dev": true, "license": "MIT", + "dependencies": { + "@babel/compat-data": "^7.29.7", + "@babel/helper-validator-option": "^7.29.7", + "browserslist": "^4.24.0", + "lru-cache": "^5.1.1", + "semver": "^6.3.1" + }, "engines": { "node": ">=6.9.0" } }, - "node_modules/@babel/types": { - "version": "7.29.8", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz", - "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==", + "node_modules/@babel/helper-compilation-targets/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/@babel/helper-globals": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.29.7.tgz", + "integrity": "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==", "dev": true, "license": "MIT", - "dependencies": { - "@babel/helper-string-parser": "^7.29.7", - "@babel/helper-validator-identifier": "^7.29.7" - }, "engines": { "node": ">=6.9.0" } }, - "node_modules/@bcoe/v8-coverage": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz", - "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==", + "node_modules/@babel/helper-module-imports": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.29.7.tgz", + "integrity": "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==", "dev": true, "license": "MIT", + "dependencies": { + "@babel/traverse": "^7.29.7", + "@babel/types": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@emnapi/core": { - "version": "1.9.2", - "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz", - "integrity": "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==", + "node_modules/@babel/helper-module-transforms": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.29.7.tgz", + "integrity": "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==", "dev": true, "license": "MIT", - "optional": true, "dependencies": { - "@emnapi/wasi-threads": "1.2.1", - "tslib": "^2.4.0" + "@babel/helper-module-imports": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7", + "@babel/traverse": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0" } }, - "node_modules/@emnapi/runtime": { - "version": "1.9.2", - "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz", - "integrity": "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==", + "node_modules/@babel/helper-plugin-utils": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.29.7.tgz", + "integrity": "sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==", "dev": true, "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" + "engines": { + "node": ">=6.9.0" } }, - "node_modules/@emnapi/wasi-threads": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz", - "integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==", + "node_modules/@babel/helper-string-parser": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", + "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==", "dev": true, "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" + "engines": { + "node": ">=6.9.0" } }, - "node_modules/@esbuild/aix-ppc64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz", - "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==", - "cpu": [ - "ppc64" - ], + "node_modules/@babel/helper-validator-identifier": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", + "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "aix" - ], "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@esbuild/android-arm": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz", - "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==", - "cpu": [ - "arm" - ], + "node_modules/@babel/helper-validator-option": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.29.7.tgz", + "integrity": "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@esbuild/android-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz", - "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/helpers": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.7.tgz", + "integrity": "sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], + "dependencies": { + "@babel/template": "^7.29.7", + "@babel/types": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" } }, - "node_modules/@esbuild/android-x64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz", - "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==", - "cpu": [ - "x64" - ], + "node_modules/@babel/parser": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz", + "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], + "dependencies": { + "@babel/types": "^7.29.8" + }, + "bin": { + "parser": "bin/babel-parser.js" + }, "engines": { - "node": ">=18" + "node": ">=6.0.0" } }, - "node_modules/@esbuild/darwin-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz", - "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/plugin-syntax-async-generators": { + "version": "7.8.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-async-generators/-/plugin-syntax-async-generators-7.8.4.tgz", + "integrity": "sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": ">=18" + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/darwin-x64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz", - "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==", - "cpu": [ - "x64" - ], + "node_modules/@babel/plugin-syntax-bigint": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-bigint/-/plugin-syntax-bigint-7.8.3.tgz", + "integrity": "sha512-wnTnFlG+YxQm3vDxpGE57Pj0srRU4sHE/mDkt1qv2YJJSeUAec2ma4WLUnUPeKjyrfntVwe/N6dCXpU+zL3Npg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": ">=18" + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/freebsd-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz", - "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/plugin-syntax-class-properties": { + "version": "7.12.13", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-class-properties/-/plugin-syntax-class-properties-7.12.13.tgz", + "integrity": "sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "freebsd" - ], - "engines": { - "node": ">=18" + "dependencies": { + "@babel/helper-plugin-utils": "^7.12.13" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/freebsd-x64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz", - "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==", - "cpu": [ - "x64" - ], + "node_modules/@babel/plugin-syntax-class-static-block": { + "version": "7.14.5", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-class-static-block/-/plugin-syntax-class-static-block-7.14.5.tgz", + "integrity": "sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "freebsd" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.14.5" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-arm": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz", - "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==", - "cpu": [ - "arm" - ], + "node_modules/@babel/plugin-syntax-import-attributes": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-import-attributes/-/plugin-syntax-import-attributes-7.29.7.tgz", + "integrity": "sha512-zGYcYfq/WmZ4V+kBIXQon9dSSc8ircGZqw9ZaNhhGj9nZkeBu1jHLBDQqYYi5WA9uawvA2sIMbry2nCFhf5Djg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-arm64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz", - "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==", - "cpu": [ - "arm64" - ], + "node_modules/@babel/plugin-syntax-import-meta": { + "version": "7.10.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-import-meta/-/plugin-syntax-import-meta-7.10.4.tgz", + "integrity": "sha512-Yqfm+XDx0+Prh3VSeEQCPU81yC+JWZ2pDPFSS4ZdpfZhp4MkFMaDC1UqseovEKwSUpnIL7+vK+Clp7bfh0iD7g==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.10.4" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-json-strings": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-json-strings/-/plugin-syntax-json-strings-7.8.3.tgz", + "integrity": "sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-jsx": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.29.7.tgz", + "integrity": "sha512-TSu8+mHCoEaaCDEZ0I3+6mvTBYR4PCxQwf2z9/r5Tbztv6NaLR3B9thGTTxX2WGuGHJqRiAbKPeGTJ5XWXVg6A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.29.7" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-ia32": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz", - "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==", - "cpu": [ - "ia32" - ], + "node_modules/@babel/plugin-syntax-logical-assignment-operators": { + "version": "7.10.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-logical-assignment-operators/-/plugin-syntax-logical-assignment-operators-7.10.4.tgz", + "integrity": "sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.10.4" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-nullish-coalescing-operator": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-nullish-coalescing-operator/-/plugin-syntax-nullish-coalescing-operator-7.8.3.tgz", + "integrity": "sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-numeric-separator": { + "version": "7.10.4", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-numeric-separator/-/plugin-syntax-numeric-separator-7.10.4.tgz", + "integrity": "sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.10.4" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-object-rest-spread": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz", + "integrity": "sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-optional-catch-binding": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-optional-catch-binding/-/plugin-syntax-optional-catch-binding-7.8.3.tgz", + "integrity": "sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-optional-chaining": { + "version": "7.8.3", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-optional-chaining/-/plugin-syntax-optional-chaining-7.8.3.tgz", + "integrity": "sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.8.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/plugin-syntax-private-property-in-object": { + "version": "7.14.5", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-private-property-in-object/-/plugin-syntax-private-property-in-object-7.14.5.tgz", + "integrity": "sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.14.5" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-loong64": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz", - "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==", - "cpu": [ - "loong64" - ], + "node_modules/@babel/plugin-syntax-top-level-await": { + "version": "7.14.5", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-top-level-await/-/plugin-syntax-top-level-await-7.14.5.tgz", + "integrity": "sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.14.5" + }, "engines": { - "node": ">=18" + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" } }, - "node_modules/@esbuild/linux-mips64el": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz", - "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==", - "cpu": [ - "mips64el" - ], + "node_modules/@babel/plugin-syntax-typescript": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/plugin-syntax-typescript/-/plugin-syntax-typescript-7.29.7.tgz", + "integrity": "sha512-ngr+82Sh0xMz25TPCZi+nC2iTzjfCdWS2ONXTp/PtSCHCgaCNBpdMqgvJ2ccdLlClVZ7sisIgB914j/JFe+RZA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-plugin-utils": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + }, + "peerDependencies": { + "@babel/core": "^7.0.0-0" + } + }, + "node_modules/@babel/runtime": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz", + "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/template": { + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz", + "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.29.7", + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/traverse": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.29.8.tgz", + "integrity": "sha512-I5z7H3bf/41ktsNVLtpN0wAa336HkqIHQ5BuPLEhTkt1jVSyZpeNKIzTgEWmlxjdg81R0IgUCcaE+Ok3NvrfZg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.29.7", + "@babel/generator": "^7.29.8", + "@babel/helper-globals": "^7.29.7", + "@babel/parser": "^7.29.8", + "@babel/template": "^7.29.7", + "@babel/types": "^7.29.8", + "debug": "^4.3.1" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/types": { + "version": "7.29.8", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz", + "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/helper-string-parser": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@bcoe/v8-coverage": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz", + "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-ppc64": { + "node_modules/@emnapi/core": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz", + "integrity": "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.1", + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/runtime": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz", + "integrity": "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/wasi-threads": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz", + "integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@esbuild/aix-ppc64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz", - "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==", + "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz", + "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==", "cpu": [ "ppc64" ], @@ -398,50 +622,50 @@ "license": "MIT", "optional": true, "os": [ - "linux" + "aix" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-riscv64": { + "node_modules/@esbuild/android-arm": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz", - "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz", + "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==", "cpu": [ - "riscv64" + "arm" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "android" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-s390x": { + "node_modules/@esbuild/android-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz", - "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz", + "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==", "cpu": [ - "s390x" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "android" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/linux-x64": { + "node_modules/@esbuild/android-x64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz", - "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==", + "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz", + "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==", "cpu": [ "x64" ], @@ -449,16 +673,16 @@ "license": "MIT", "optional": true, "os": [ - "linux" + "android" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/netbsd-arm64": { + "node_modules/@esbuild/darwin-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz", - "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz", + "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==", "cpu": [ "arm64" ], @@ -466,16 +690,16 @@ "license": "MIT", "optional": true, "os": [ - "netbsd" + "darwin" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/netbsd-x64": { + "node_modules/@esbuild/darwin-x64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz", - "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz", + "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==", "cpu": [ "x64" ], @@ -483,16 +707,16 @@ "license": "MIT", "optional": true, "os": [ - "netbsd" + "darwin" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/openbsd-arm64": { + "node_modules/@esbuild/freebsd-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz", - "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz", + "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==", "cpu": [ "arm64" ], @@ -500,16 +724,16 @@ "license": "MIT", "optional": true, "os": [ - "openbsd" + "freebsd" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/openbsd-x64": { + "node_modules/@esbuild/freebsd-x64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz", - "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz", + "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==", "cpu": [ "x64" ], @@ -517,241 +741,186 @@ "license": "MIT", "optional": true, "os": [ - "openbsd" + "freebsd" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/openharmony-arm64": { + "node_modules/@esbuild/linux-arm": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz", - "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz", + "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==", "cpu": [ - "arm64" + "arm" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "openharmony" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/sunos-x64": { + "node_modules/@esbuild/linux-arm64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz", - "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz", + "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==", "cpu": [ - "x64" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "sunos" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/win32-arm64": { + "node_modules/@esbuild/linux-ia32": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz", - "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz", + "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==", "cpu": [ - "arm64" + "ia32" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "win32" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/win32-ia32": { + "node_modules/@esbuild/linux-loong64": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz", - "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz", + "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==", "cpu": [ - "ia32" + "loong64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "win32" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@esbuild/win32-x64": { + "node_modules/@esbuild/linux-mips64el": { "version": "0.28.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz", - "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==", + "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz", + "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==", "cpu": [ - "x64" + "mips64el" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "win32" + "linux" ], "engines": { "node": ">=18" } }, - "node_modules/@jridgewell/gen-mapping": { - "version": "0.3.13", - "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", - "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.0", - "@jridgewell/trace-mapping": "^0.3.24" - } - }, - "node_modules/@jridgewell/remapping": { - "version": "2.3.5", - "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", - "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/gen-mapping": "^0.3.5", - "@jridgewell/trace-mapping": "^0.3.24" - } - }, - "node_modules/@jridgewell/resolve-uri": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", - "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@jridgewell/sourcemap-codec": { - "version": "1.5.5", - "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", - "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", - "dev": true, - "license": "MIT" - }, - "node_modules/@jridgewell/trace-mapping": { - "version": "0.3.31", - "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", - "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/resolve-uri": "^3.1.0", - "@jridgewell/sourcemap-codec": "^1.4.14" - } - }, - "node_modules/@napi-rs/wasm-runtime": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz", - "integrity": "sha512-UMduMbqO5s5zF2NkNacMT/yK5Y5QiKvWr2+50bzIIxFDwVJ2h49b+oyjaCGPhJxd2/gC2x39EHv/gHVuu36x2Q==", + "node_modules/@esbuild/linux-ppc64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz", + "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==", + "cpu": [ + "ppc64" + ], "dev": true, "license": "MIT", "optional": true, - "dependencies": { - "@tybys/wasm-util": "^0.10.3" - }, + "os": [ + "linux" + ], "engines": { - "node": "^20.19.0 || ^22.13.0 || >=23.5.0" - }, - "funding": { - "type": "github", - "url": "https://github.com/sponsors/Brooooooklyn" - }, - "peerDependencies": { - "@emnapi/core": "^1.7.1 || ^2.0.0-alpha.4", - "@emnapi/runtime": "^1.7.1 || ^2.0.0-alpha.4" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-android-arm-eabi": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm-eabi/-/binding-android-arm-eabi-0.127.0.tgz", - "integrity": "sha512-0LC7ye4hvqbIKxAzThzvswgHLFu2AURKzYLeSVvLdu2TBOYWQDmHnTqPLeA597BcUCxiLqLsS4CJ5uoI5WYWCQ==", + "node_modules/@esbuild/linux-riscv64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz", + "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==", "cpu": [ - "arm" + "riscv64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "android" + "linux" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-android-arm64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm64/-/binding-android-arm64-0.127.0.tgz", - "integrity": "sha512-b5jtVTH6AU5CJXHNdj7Jj9IEiR9yVjjnwHzPJhGyHGPdcsZSzBCkS9GBbV33niRMvKthDwQRFRJfI4a+k4PvYg==", + "node_modules/@esbuild/linux-s390x": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz", + "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==", "cpu": [ - "arm64" + "s390x" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "android" + "linux" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-darwin-arm64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-arm64/-/binding-darwin-arm64-0.127.0.tgz", - "integrity": "sha512-obCE8B7ISKkJidjlhv9xRGJPOSDG2Yu6PRga9Ruaz35uintHxbp1Ki/Yc71wx4rj3Edrm0a1kzG1TAwit0wFpg==", + "node_modules/@esbuild/linux-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz", + "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==", "cpu": [ - "arm64" + "x64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "darwin" + "linux" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-darwin-x64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-x64/-/binding-darwin-x64-0.127.0.tgz", - "integrity": "sha512-JL6Xb5IwPQT8rUzlpsX7E+AgfcdNklXNPFp8pjCQQ5MQOQo5rtEB2ui+3Hgg9Sn7Y9Egj6YOLLiHhLpdAe12Aw==", + "node_modules/@esbuild/netbsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz", + "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==", "cpu": [ - "x64" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "darwin" + "netbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-freebsd-x64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-freebsd-x64/-/binding-freebsd-x64-0.127.0.tgz", - "integrity": "sha512-SDQ/3MQFw58fqQz3Z1PhSKFF3JoCF4gmlNjziDm8X02tTahCw0qJbd7FGPDKw1i4VTBZene9JPyC3mHtSvi+wA==", + "node_modules/@esbuild/netbsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz", + "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==", "cpu": [ "x64" ], @@ -759,377 +928,646 @@ "license": "MIT", "optional": true, "os": [ - "freebsd" + "netbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm-gnueabihf": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-0.127.0.tgz", - "integrity": "sha512-Av+D1MIqzV0YMGPT9we2SIZaMKD7Cxs4CvXSx/yxaWHewZjYEjScpOf5igc8IILASViw4WTnjlwUdI1KzVtDHQ==", + "node_modules/@esbuild/openbsd-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz", + "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==", "cpu": [ - "arm" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "openbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm-musleabihf": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-0.127.0.tgz", - "integrity": "sha512-Cs2fdJ8cPpFdeebj6p4dag8A4+56hPvZ0AhQQzlaLswGz1tz7bXt1nETLeorrM9+AMcWFFkqxcXwDGfTVidY8g==", + "node_modules/@esbuild/openbsd-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz", + "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==", "cpu": [ - "arm" + "x64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" + "openbsd" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-0.127.0.tgz", - "integrity": "sha512-qdOfTcT6SY8gsJrrV92uyEUyjqMGPpIB5JZUG6QN5dukYd+7/j0kX6MwK1DgQj39jtUYixxPiaRUiEN1+0CXgQ==", + "node_modules/@esbuild/openharmony-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz", + "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==", "cpu": [ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "openharmony" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-arm64-musl": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-musl/-/binding-linux-arm64-musl-0.127.0.tgz", - "integrity": "sha512-EoTCZneNFU/P2qrpEM+RHmQwt+CvDkyGESG6qhr7KaegXLZwePfbrkCDfAk8/rhxbDUVGsZILX+2tqPzFtoFWA==", + "node_modules/@esbuild/sunos-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz", + "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==", "cpu": [ - "arm64" + "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "sunos" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-ppc64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-0.127.0.tgz", - "integrity": "sha512-zALjmZYgxFLHjXeudcDF0xFGNydTAtkAeXAr2EuC17ywCyFxcmQra4w0BMde0Yi/re4Bi4iwEoEXtYN7l6eBLQ==", + "node_modules/@esbuild/win32-arm64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz", + "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==", "cpu": [ - "ppc64" + "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "win32" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-riscv64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-0.127.0.tgz", - "integrity": "sha512-fPP8M6zQLS7Jz7o9d5ArUSuAuSK3e+WCYVrCpdzeCOejidtZExJ9tjhDrAd3HEPqARBCPmdpqxESPFqy44vkBQ==", + "node_modules/@esbuild/win32-ia32": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz", + "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==", "cpu": [ - "riscv64" + "ia32" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "win32" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-riscv64-musl": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-0.127.0.tgz", - "integrity": "sha512-7IcC4Ao02oGpfnjt+X/oF4U2mllo2qoSkw5xxiXNKL9MCTsTiAC6616beOuehdxGcnz1bRoPC1RQ2f1GQDdN+g==", + "node_modules/@esbuild/win32-x64": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz", + "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==", "cpu": [ - "riscv64" + "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ - "linux" + "win32" ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=18" } }, - "node_modules/@oxc-parser/binding-linux-s390x-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-0.127.0.tgz", - "integrity": "sha512-pbXIhiNFHoqWeqDNLiJ9JkpHz1IM9k4DXa66x+1GTWMG7iLxtkXgE53iiuKSXwmk3zIYmaPVfBvgcAhS583K4Q==", - "cpu": [ - "s390x" - ], + "node_modules/@hapi/hoek": { + "version": "9.3.0", + "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-9.3.0.tgz", + "integrity": "sha512-/c6rf4UJlmHlC9b5BaNvzAcFv7HZ2QHaV0D4/HNlBdvFnvQq8RI4kYdhyPCl7Xj+oWvTWQ8ujhqS53LIgAe6KQ==", "dev": true, - "libc": [ - "glibc" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "BSD-3-Clause" + }, + "node_modules/@hapi/topo": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/@hapi/topo/-/topo-5.1.0.tgz", + "integrity": "sha512-foQZKJig7Ob0BMAYBfcJk8d77QtOe7Wo4ox7ff1lQYoNNAb6jwcY1ncdoy2e9wQZzvNy7ODZCYJkK8kzmcAnAg==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^9.0.0" + } + }, + "node_modules/@isaacs/cliui": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz", + "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^5.1.2", + "string-width-cjs": "npm:string-width@^4.2.0", + "strip-ansi": "^7.0.1", + "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", + "wrap-ansi": "^8.1.0", + "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=12" } }, - "node_modules/@oxc-parser/binding-linux-x64-gnu": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-gnu/-/binding-linux-x64-gnu-0.127.0.tgz", - "integrity": "sha512-MYCguB9RvBvlSd6gbuNI7QwiLoCCAlGnlRJFPrzLI6U1/9wkC/WK6LtBAUln55H1Ctqw45PWmqrobKoMhsYQzQ==", - "cpu": [ - "x64" - ], + "node_modules/@istanbuljs/load-nyc-config": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz", + "integrity": "sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "camelcase": "^5.3.1", + "find-up": "^4.1.0", + "get-package-type": "^0.1.0", + "js-yaml": "^3.13.1", + "resolve-from": "^5.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/@istanbuljs/schema": { + "version": "0.1.6", + "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.6.tgz", + "integrity": "sha512-+Sg6GCR/wy1oSmQDFq4LQDAhm3ETKnorxN+y5nbLULOR3P0c14f2Wurzj3/xqPXtasLFfHd5iRFQ7AJt4KH2cw==", "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" } }, - "node_modules/@oxc-parser/binding-linux-x64-musl": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-musl/-/binding-linux-x64-musl-0.127.0.tgz", - "integrity": "sha512-5eY0B/bxf1xIUxb4NOTvOI3KWtBQfPWYyKAzgcrCt0mDibSZygVpO1Pz8bkeiSZ5Jj9+M09dkggG3H8I5d0Uyg==", - "cpu": [ - "x64" - ], + "node_modules/@jest/console": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/console/-/console-30.4.1.tgz", + "integrity": "sha512-v3bhyxUh9Hgmo5p6hAOXe14/R3ZxZDOsvHleh4B07z3m/x4/ngPUXEm9XwK4sF4u+f+P2ORb0Ge+MgpaqRMVDA==", "dev": true, - "libc": [ - "musl" - ], "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "jest-message-util": "30.4.1", + "jest-util": "30.4.1", + "slash": "^3.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-openharmony-arm64": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-openharmony-arm64/-/binding-openharmony-arm64-0.127.0.tgz", - "integrity": "sha512-Gld0ajrFTUXNtdw20fVBuTQx66FA75nIVg+//pPfR3sXkuABB4mTBhl3r9JNzrJpgW//qiwxf0nWXUWGJSL3UQ==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/core": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/@jest/core/-/core-30.4.2.tgz", + "integrity": "sha512-TZJA6cPJUFxoWhxaLo8t0VX/MZX2wPWr0uIDvLSHIvN4gu9h02vSzqI2kBADG1ExqQlC+cY09xKMSreivvrChQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "openharmony" - ], + "dependencies": { + "@jest/console": "30.4.1", + "@jest/pattern": "30.4.0", + "@jest/reporters": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "ansi-escapes": "^4.3.2", + "chalk": "^4.1.2", + "ci-info": "^4.2.0", + "exit-x": "^0.2.2", + "fast-json-stable-stringify": "^2.1.0", + "graceful-fs": "^4.2.11", + "jest-changed-files": "30.4.1", + "jest-config": "30.4.2", + "jest-haste-map": "30.4.1", + "jest-message-util": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-resolve": "30.4.1", + "jest-resolve-dependencies": "30.4.2", + "jest-runner": "30.4.2", + "jest-runtime": "30.4.2", + "jest-snapshot": "30.4.1", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "jest-watcher": "30.4.1", + "pretty-format": "30.4.1", + "slash": "^3.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } + } + }, + "node_modules/@jest/core/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-wasm32-wasi": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-wasm32-wasi/-/binding-wasm32-wasi-0.127.0.tgz", - "integrity": "sha512-T6KVD7rhLzFlwGRXMnxUFfkCZD8FHnb968wVXW1mXzgRFc5RNXOBY2mPPDZ77x5Ln76ltLMgtPg0cOkU1NSrEQ==", - "cpu": [ - "wasm32" - ], + "node_modules/@jest/create-cache-key-function": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/create-cache-key-function/-/create-cache-key-function-30.4.1.tgz", + "integrity": "sha512-R+xGEtzA95NIsvpXJSROG4t01956dDOt17KpamguY4XOnGvdHNFFXE7Er0C1OAsRjOwiIxpKqOvGlznIGZIQlQ==", "dev": true, "license": "MIT", - "optional": true, "dependencies": { - "@emnapi/core": "1.9.2", - "@emnapi/runtime": "1.9.2", - "@napi-rs/wasm-runtime": "^1.1.4" + "@jest/types": "30.4.1" }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-win32-arm64-msvc": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-0.127.0.tgz", - "integrity": "sha512-Ujvw4X+LD1CCGULcsQcvb4YNVoBGqt+JHgNNzGGaCImELiZLk477ifUH53gIbE7EKd933NdTi25JWEr9K2HwXw==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/diff-sequences": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/@jest/diff-sequences/-/diff-sequences-30.4.0.tgz", + "integrity": "sha512-zOpzlfUs45l6u7jm39qr87JCHUDsaeCtvL+kQe/Vn9jSnRB4/5IPXISm0h9I1vZW/o00Kn4UTJ2MOlhnUGwv3g==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-win32-ia32-msvc": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-0.127.0.tgz", - "integrity": "sha512-0cwxKO7KHQQQfo4Uf4B2SQrhgm+cJaP9OvFFhx52Tkg4bezsacu83GB2/In5bC415Ueeym+kXdnge/57rbSfTw==", - "cpu": [ - "ia32" - ], + "node_modules/@jest/environment": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/environment/-/environment-30.4.1.tgz", + "integrity": "sha512-AK9yNRqgKxiabqMoe4oW+3/TSSeV8vkdC7BGaxZdU0AFXfOpofTLqdru2GXKZghP3sdgwE9XXpnVwfZ8JnFV4w==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "@jest/fake-timers": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "jest-mock": "30.4.1" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-parser/binding-win32-x64-msvc": { - "version": "0.127.0", - "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-x64-msvc/-/binding-win32-x64-msvc-0.127.0.tgz", - "integrity": "sha512-rOrnSQSCbhI2kowr9XxE7m9a8oQXnBHjnS6j95LxxAnEZ0+Fz20WlRXG4ondQb+ejjt2KOsa65sE6++L6kUd+w==", - "cpu": [ - "x64" - ], + "node_modules/@jest/expect": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/expect/-/expect-30.4.1.tgz", + "integrity": "sha512-ginrj6TMgh2GshLUGCjO94Ptx9HhdZA/I6A9iUfyeLKFtdAjnKzHDgzgP9HYQgbxM1lbXScQ2eUBz2lGeVDPWA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "expect": "30.4.1", + "jest-snapshot": "30.4.1" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-project/types": { - "version": "0.142.0", - "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.142.0.tgz", - "integrity": "sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==", + "node_modules/@jest/expect-utils": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/expect-utils/-/expect-utils-30.4.1.tgz", + "integrity": "sha512-ZBn5CglH8fBsQsvs4VWNzD4aWfUYks+IdOOQU3MEK71ol/BcVm+P+rtb1KpiFBpSWSCE27uOahyyf1vfqOVbcQ==", "dev": true, "license": "MIT", - "funding": { - "url": "https://github.com/sponsors/Boshen" + "dependencies": { + "@jest/get-type": "30.1.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@oxc-resolver/binding-android-arm-eabi": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm-eabi/-/binding-android-arm-eabi-11.21.2.tgz", - "integrity": "sha512-xQoCRv+gKax9KTdwdaQNnAFOai8neay7g3jExDIORzhbrejwGSJaZNTdOJHR5ziLg2joMxOCMOFMo4zuxza2uQ==", - "cpu": [ - "arm" - ], + "node_modules/@jest/fake-timers": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-30.4.1.tgz", + "integrity": "sha512-iW5umdmfPeWzehrVhugFQZqCchSCud5S1l2YT0O9ZhjRR0ExclANDZkiSBwzqtnlOn0J1JXvO+HZ6rkuyOVOgQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ] + "dependencies": { + "@jest/types": "30.4.1", + "@sinonjs/fake-timers": "^15.4.0", + "@types/node": "*", + "jest-message-util": "30.4.1", + "jest-mock": "30.4.1", + "jest-util": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-android-arm64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm64/-/binding-android-arm64-11.21.2.tgz", - "integrity": "sha512-HF5oiE2L05yInPYCFD/4uxSrEZW4SuIfn99Y6L1xnJnzl066JR+MJs2rIdstw8A2MPlAKH+13dpFPNycjqzvGg==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/get-type": { + "version": "30.1.0", + "resolved": "https://registry.npmjs.org/@jest/get-type/-/get-type-30.1.0.tgz", + "integrity": "sha512-eMbZE2hUnx1WV0pmURZY9XoXPkUYjpc55mb0CrhtdWLtzMQPFvu/rZkTLZFTsdaVQa+Tr4eWAteqcUzoawq/uA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ] + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-darwin-arm64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-arm64/-/binding-darwin-arm64-11.21.2.tgz", - "integrity": "sha512-UX4u49CVCAD8QZNELaW8eMGgMAGwFWYEPbvNsh+3r/gs4NX3KfpiACMVwRQT0EuH3uat9hM5Zl+Ppm9pJD8tgg==", - "cpu": [ - "arm64" - ], + "node_modules/@jest/globals": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/globals/-/globals-30.4.1.tgz", + "integrity": "sha512-ZbuY4cmXC8DkxYjfvT2DbcHWL2T6vmsMhXCDcmTB2T0y0gaezBI77ufq5ZAIdcRkYZ7NEQEDg1xFeKbxUJ5v5Q==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ] + "dependencies": { + "@jest/environment": "30.4.1", + "@jest/expect": "30.4.1", + "@jest/types": "30.4.1", + "jest-mock": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-darwin-x64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-x64/-/binding-darwin-x64-11.21.2.tgz", - "integrity": "sha512-J9xPx7YBkrRmJ+xl561ztnMWEc1aOyjEIxBiGX1dVb3u7bGSnfObfcZk+Pd+uM0HZAPNsQ1xvD8j52A/uOSqNQ==", - "cpu": [ - "x64" - ], + "node_modules/@jest/pattern": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/@jest/pattern/-/pattern-30.4.0.tgz", + "integrity": "sha512-RAWn3+f9u8BsHijKJ71uHcFp6vmyEt6VvoWXkl6hKF3qVIuWNmudVjg12DlBPGup/frIl5UcUlH5HfEuvHpEXg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ] + "dependencies": { + "@types/node": "*", + "jest-regex-util": "30.4.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@oxc-resolver/binding-freebsd-x64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-freebsd-x64/-/binding-freebsd-x64-11.21.2.tgz", - "integrity": "sha512-fRlt7OvSaQkWj6+EDTVxawVxOlqJB2QSnBfkeCyK4RTvsGctbw3BiH2Tb7DzMs7bikc4BRBpvWP5zF9K8b54Zg==", - "cpu": [ - "x64" - ], + "node_modules/@jest/reporters": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/reporters/-/reporters-30.4.1.tgz", + "integrity": "sha512-/SnkPCzEQpUaBH81kjdEdDdo2WZl5hxw+BmLDGWjRkm8o7XlhjwsU36cqwe5PGBE5WYpBvDzRSdXx9rbGuJtNA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@bcoe/v8-coverage": "^0.2.3", + "@jest/console": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@jridgewell/trace-mapping": "^0.3.25", + "@types/node": "*", + "chalk": "^4.1.2", + "collect-v8-coverage": "^1.0.2", + "exit-x": "^0.2.2", + "glob": "^10.5.0", + "graceful-fs": "^4.2.11", + "istanbul-lib-coverage": "^3.0.0", + "istanbul-lib-instrument": "^6.0.0", + "istanbul-lib-report": "^3.0.0", + "istanbul-lib-source-maps": "^5.0.0", + "istanbul-reports": "^3.1.3", + "jest-message-util": "30.4.1", + "jest-util": "30.4.1", + "jest-worker": "30.4.1", + "slash": "^3.0.0", + "string-length": "^4.0.2", + "v8-to-istanbul": "^9.0.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } + } + }, + "node_modules/@jest/reporters/node_modules/@bcoe/v8-coverage": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz", + "integrity": "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@jest/schemas": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-30.4.1.tgz", + "integrity": "sha512-i6b4qw5qnP8c5FEeBJg/uZQ4ddrkN6Ca8qISJh0pr7a5hfn3h3v5x60BEbOC7OYAGZNMs1LfFLwnW2CuK8F57Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@sinclair/typebox": "^0.34.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/snapshot-utils": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/snapshot-utils/-/snapshot-utils-30.4.1.tgz", + "integrity": "sha512-ObY4ljvQ95mt6iwKtVLetR/4yXiAgl3H4nJxhztr0MTjrN97TwDYrnCp/kF60Ec9HdhkWTHSu+Hg05aXfngpOA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/types": "30.4.1", + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "natural-compare": "^1.4.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/source-map": { + "version": "30.0.1", + "resolved": "https://registry.npmjs.org/@jest/source-map/-/source-map-30.0.1.tgz", + "integrity": "sha512-MIRWMUUR3sdbP36oyNyhbThLHyJ2eEDClPCiHVbrYAe5g3CHRArIVpBw7cdSB5fr+ofSfIb2Tnsw8iEHL0PYQg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.25", + "callsites": "^3.1.0", + "graceful-fs": "^4.2.11" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/test-result": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/test-result/-/test-result-30.4.1.tgz", + "integrity": "sha512-/ZG7pgEiOmmWkN9TplKbOu4id2N5lh7FHwRwlkgBVAzGdRH+OkkQ8wX/kIxg4zmd3ZQvAL1RwL2yWsvNYYECTw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/console": "30.4.1", + "@jest/types": "30.4.1", + "@types/istanbul-lib-coverage": "^2.0.6", + "collect-v8-coverage": "^1.0.2" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/test-sequencer": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-30.4.1.tgz", + "integrity": "sha512-PeYE+4td5rKjoRPxztObrXU+H8hsjZfxKMXOcmrr34JerSyB/ROOxbbicz8B7A5j9R9VayDnVPvBmedqCsFCdw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/test-result": "30.4.1", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "slash": "^3.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/transform": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/transform/-/transform-30.4.1.tgz", + "integrity": "sha512-Wz0LyktlTvRefoymh+n64hQ84KNXsRGcwdoZ8CSa0Ea+fgYcHZlnk+hDP7v2MS7il2bQ5uTEIxf4/NNfhMN4KQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/core": "^7.27.4", + "@jest/types": "30.4.1", + "@jridgewell/trace-mapping": "^0.3.25", + "babel-plugin-istanbul": "^7.0.1", + "chalk": "^4.1.2", + "convert-source-map": "^2.0.0", + "fast-json-stable-stringify": "^2.1.0", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-util": "30.4.1", + "pirates": "^4.0.7", + "slash": "^3.0.0", + "write-file-atomic": "^5.0.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jest/types": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/@jest/types/-/types-30.4.1.tgz", + "integrity": "sha512-f1x/vJXIfjOlEmejYpbkbgw1gOqpPECwMvMEtBqe47j7H2Hg8h8w3o3ikhSXq3MI15kg+oQ0exWO0uCtTNJLoQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/pattern": "30.4.0", + "@jest/schemas": "30.4.1", + "@types/istanbul-lib-coverage": "^2.0.6", + "@types/istanbul-reports": "^3.0.4", + "@types/node": "*", + "@types/yargs": "^17.0.33", + "chalk": "^4.1.2" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/@jridgewell/gen-mapping": { + "version": "0.3.13", + "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", + "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.5.0", + "@jridgewell/trace-mapping": "^0.3.24" + } + }, + "node_modules/@jridgewell/remapping": { + "version": "2.3.5", + "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", + "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/gen-mapping": "^0.3.5", + "@jridgewell/trace-mapping": "^0.3.24" + } + }, + "node_modules/@jridgewell/resolve-uri": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", + "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@jridgewell/sourcemap-codec": { + "version": "1.5.5", + "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", + "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", + "dev": true, + "license": "MIT" + }, + "node_modules/@jridgewell/trace-mapping": { + "version": "0.3.31", + "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", + "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/resolve-uri": "^3.1.0", + "@jridgewell/sourcemap-codec": "^1.4.14" + } + }, + "node_modules/@napi-rs/wasm-runtime": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz", + "integrity": "sha512-UMduMbqO5s5zF2NkNacMT/yK5Y5QiKvWr2+50bzIIxFDwVJ2h49b+oyjaCGPhJxd2/gC2x39EHv/gHVuu36x2Q==", "dev": true, "license": "MIT", "optional": true, - "os": [ - "freebsd" - ] + "dependencies": { + "@tybys/wasm-util": "^0.10.3" + }, + "engines": { + "node": "^20.19.0 || ^22.13.0 || >=23.5.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/Brooooooklyn" + }, + "peerDependencies": { + "@emnapi/core": "^1.7.1 || ^2.0.0-alpha.4", + "@emnapi/runtime": "^1.7.1 || ^2.0.0-alpha.4" + } }, - "node_modules/@oxc-resolver/binding-linux-arm-gnueabihf": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-11.21.2.tgz", - "integrity": "sha512-gK+vPUcPQITkGwBKpZGrcDHSlU6eDGl7AQacxS2CEKAZIBHWkOVFeJwLZ4tYnA1acJqRM5lt7yYwPCVqGHIJ7A==", + "node_modules/@oxc-parser/binding-android-arm-eabi": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm-eabi/-/binding-android-arm-eabi-0.127.0.tgz", + "integrity": "sha512-0LC7ye4hvqbIKxAzThzvswgHLFu2AURKzYLeSVvLdu2TBOYWQDmHnTqPLeA597BcUCxiLqLsS4CJ5uoI5WYWCQ==", "cpu": [ "arm" ], @@ -1137,78 +1575,178 @@ "license": "MIT", "optional": true, "os": [ - "linux" - ] + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-arm-musleabihf": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-11.21.2.tgz", - "integrity": "sha512-L/Rgas7SrOKy/z7IH+HxSFRqVO4PuLDKLEGKvnhoCBBq3UJ0YzGBou3qMzaAGgkJwsIvX2pBF+7ojzfUhLiZxQ==", + "node_modules/@oxc-parser/binding-android-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-android-arm64/-/binding-android-arm64-0.127.0.tgz", + "integrity": "sha512-b5jtVTH6AU5CJXHNdj7Jj9IEiR9yVjjnwHzPJhGyHGPdcsZSzBCkS9GBbV33niRMvKthDwQRFRJfI4a+k4PvYg==", "cpu": [ - "arm" + "arm64" ], "dev": true, "license": "MIT", "optional": true, "os": [ - "linux" - ] + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-arm64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-11.21.2.tgz", - "integrity": "sha512-CUEYvlX1Fk7E9kUMzuswru1J9HLxMwnpDeQGjQuI4ZH+iNCoa2X9T+pvyzrbsgl7WnIeTFTlNlHsRfVdf5g9/g==", + "node_modules/@oxc-parser/binding-darwin-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-arm64/-/binding-darwin-arm64-0.127.0.tgz", + "integrity": "sha512-obCE8B7ISKkJidjlhv9xRGJPOSDG2Yu6PRga9Ruaz35uintHxbp1Ki/Yc71wx4rj3Edrm0a1kzG1TAwit0wFpg==", "cpu": [ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" - ] + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-arm64-musl": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-musl/-/binding-linux-arm64-musl-11.21.2.tgz", - "integrity": "sha512-ViN1ZibQyxwC67GpoP33oo+S9UyUnkog13vzQb9+v9bCNvrVzJuk0MRdacjtv/9xfRMVF/eqHFyl8YOeykI10Q==", + "node_modules/@oxc-parser/binding-darwin-x64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-darwin-x64/-/binding-darwin-x64-0.127.0.tgz", + "integrity": "sha512-JL6Xb5IwPQT8rUzlpsX7E+AgfcdNklXNPFp8pjCQQ5MQOQo5rtEB2ui+3Hgg9Sn7Y9Egj6YOLLiHhLpdAe12Aw==", "cpu": [ - "arm64" + "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ - "linux" - ] + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-ppc64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-11.21.2.tgz", - "integrity": "sha512-CU1sCqWnhGqYD5I1HedHk5pujrn7ssDkNB/AEQd/pd3D/EojVSgJUlpbafwIbyhia3PgIfkvdFpRPWSALzVumA==", + "node_modules/@oxc-parser/binding-freebsd-x64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-freebsd-x64/-/binding-freebsd-x64-0.127.0.tgz", + "integrity": "sha512-SDQ/3MQFw58fqQz3Z1PhSKFF3JoCF4gmlNjziDm8X02tTahCw0qJbd7FGPDKw1i4VTBZene9JPyC3mHtSvi+wA==", "cpu": [ - "ppc64" + "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ - "linux" - ] + "freebsd" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-riscv64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-11.21.2.tgz", - "integrity": "sha512-jWVyZtIHca4Gb96x7dag+y69vlei7ffjrsveLkmf2ZhqEAz6ZSBnY1GWvgZUaZlwZP62A3xD092BW97Q5VGc+g==", + "node_modules/@oxc-parser/binding-linux-arm-gnueabihf": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-0.127.0.tgz", + "integrity": "sha512-Av+D1MIqzV0YMGPT9we2SIZaMKD7Cxs4CvXSx/yxaWHewZjYEjScpOf5igc8IILASViw4WTnjlwUdI1KzVtDHQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm-musleabihf": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-0.127.0.tgz", + "integrity": "sha512-Cs2fdJ8cPpFdeebj6p4dag8A4+56hPvZ0AhQQzlaLswGz1tz7bXt1nETLeorrM9+AMcWFFkqxcXwDGfTVidY8g==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-0.127.0.tgz", + "integrity": "sha512-qdOfTcT6SY8gsJrrV92uyEUyjqMGPpIB5JZUG6QN5dukYd+7/j0kX6MwK1DgQj39jtUYixxPiaRUiEN1+0CXgQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-arm64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-arm64-musl/-/binding-linux-arm64-musl-0.127.0.tgz", + "integrity": "sha512-EoTCZneNFU/P2qrpEM+RHmQwt+CvDkyGESG6qhr7KaegXLZwePfbrkCDfAk8/rhxbDUVGsZILX+2tqPzFtoFWA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-ppc64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-0.127.0.tgz", + "integrity": "sha512-zALjmZYgxFLHjXeudcDF0xFGNydTAtkAeXAr2EuC17ywCyFxcmQra4w0BMde0Yi/re4Bi4iwEoEXtYN7l6eBLQ==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-linux-riscv64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-0.127.0.tgz", + "integrity": "sha512-fPP8M6zQLS7Jz7o9d5ArUSuAuSK3e+WCYVrCpdzeCOejidtZExJ9tjhDrAd3HEPqARBCPmdpqxESPFqy44vkBQ==", "cpu": [ "riscv64" ], @@ -1220,12 +1758,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-riscv64-musl": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-11.21.2.tgz", - "integrity": "sha512-LF29obFqNgBUgDX7rmUK7M4D0JQG5LxhYzn3xXmECcHU9aQAdWG7NiY052qybtesEdwHQXKNTWYQ7mTsybNvWg==", + "node_modules/@oxc-parser/binding-linux-riscv64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-0.127.0.tgz", + "integrity": "sha512-7IcC4Ao02oGpfnjt+X/oF4U2mllo2qoSkw5xxiXNKL9MCTsTiAC6616beOuehdxGcnz1bRoPC1RQ2f1GQDdN+g==", "cpu": [ "riscv64" ], @@ -1237,12 +1778,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-s390x-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-11.21.2.tgz", - "integrity": "sha512-+NYcm+cCHBbtdQQ3A4phQTSuVRYnNHz7wrl9XRAPEovcdoqi0mb1K5ZOl+jN54ZD+q1zz3V0vltbFJmzecJKmw==", + "node_modules/@oxc-parser/binding-linux-s390x-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-0.127.0.tgz", + "integrity": "sha512-pbXIhiNFHoqWeqDNLiJ9JkpHz1IM9k4DXa66x+1GTWMG7iLxtkXgE53iiuKSXwmk3zIYmaPVfBvgcAhS583K4Q==", "cpu": [ "s390x" ], @@ -1254,12 +1798,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-x64-gnu": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-gnu/-/binding-linux-x64-gnu-11.21.2.tgz", - "integrity": "sha512-UQqZDdG2r2HhAOsZEgufkIWHPQ886IUyuJQkoZByvzhW8j51R4UNzGBJFkTiTnLhQnggwJRdJgFWK4uY6ZVIMw==", + "node_modules/@oxc-parser/binding-linux-x64-gnu": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-gnu/-/binding-linux-x64-gnu-0.127.0.tgz", + "integrity": "sha512-MYCguB9RvBvlSd6gbuNI7QwiLoCCAlGnlRJFPrzLI6U1/9wkC/WK6LtBAUln55H1Ctqw45PWmqrobKoMhsYQzQ==", "cpu": [ "x64" ], @@ -1271,12 +1818,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-linux-x64-musl": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-musl/-/binding-linux-x64-musl-11.21.2.tgz", - "integrity": "sha512-3Q9PMRjalWkT6NZ4jfujuqTCFwoWErg3y3BnOgb544B8IMw4PktiwWOigMfOHNRLMghZeJ7hpfpZf4CP7rV7Og==", + "node_modules/@oxc-parser/binding-linux-x64-musl": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-linux-x64-musl/-/binding-linux-x64-musl-0.127.0.tgz", + "integrity": "sha512-5eY0B/bxf1xIUxb4NOTvOI3KWtBQfPWYyKAzgcrCt0mDibSZygVpO1Pz8bkeiSZ5Jj9+M09dkggG3H8I5d0Uyg==", "cpu": [ "x64" ], @@ -1288,12 +1838,15 @@ "optional": true, "os": [ "linux" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-openharmony-arm64": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-openharmony-arm64/-/binding-openharmony-arm64-11.21.2.tgz", - "integrity": "sha512-Eljeq3ndtyKhM+Es8LITi4Zl2htzuRZcrPMF3kMCsrILztvU6AjZ3FuEhHHKobPUB9rMpzLpJP5bDqXI7r+iog==", + "node_modules/@oxc-parser/binding-openharmony-arm64": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-openharmony-arm64/-/binding-openharmony-arm64-0.127.0.tgz", + "integrity": "sha512-Gld0ajrFTUXNtdw20fVBuTQx66FA75nIVg+//pPfR3sXkuABB4mTBhl3r9JNzrJpgW//qiwxf0nWXUWGJSL3UQ==", "cpu": [ "arm64" ], @@ -1302,12 +1855,15 @@ "optional": true, "os": [ "openharmony" - ] + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } }, - "node_modules/@oxc-resolver/binding-wasm32-wasi": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-wasm32-wasi/-/binding-wasm32-wasi-11.21.2.tgz", - "integrity": "sha512-HGDbNsIywqc4LxU38+CTJNnB/6BF7rheWOJ259b4eE0aEnelYblC8x+1tEd63bp31fYne63RQz9Jb4yVnC7Yig==", + "node_modules/@oxc-parser/binding-wasm32-wasi": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-wasm32-wasi/-/binding-wasm32-wasi-0.127.0.tgz", + "integrity": "sha512-T6KVD7rhLzFlwGRXMnxUFfkCZD8FHnb968wVXW1mXzgRFc5RNXOBY2mPPDZ77x5Ln76ltLMgtPg0cOkU1NSrEQ==", "cpu": [ "wasm32" ], @@ -1315,2077 +1871,6578 @@ "license": "MIT", "optional": true, "dependencies": { - "@emnapi/core": "1.11.0", - "@emnapi/runtime": "1.11.0", - "@napi-rs/wasm-runtime": "^1.1.5" + "@emnapi/core": "1.9.2", + "@emnapi/runtime": "1.9.2", + "@napi-rs/wasm-runtime": "^1.1.4" }, "engines": { - "node": ">=14.0.0" + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-arm64-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-0.127.0.tgz", + "integrity": "sha512-Ujvw4X+LD1CCGULcsQcvb4YNVoBGqt+JHgNNzGGaCImELiZLk477ifUH53gIbE7EKd933NdTi25JWEr9K2HwXw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-ia32-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-0.127.0.tgz", + "integrity": "sha512-0cwxKO7KHQQQfo4Uf4B2SQrhgm+cJaP9OvFFhx52Tkg4bezsacu83GB2/In5bC415Ueeym+kXdnge/57rbSfTw==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-parser/binding-win32-x64-msvc": { + "version": "0.127.0", + "resolved": "https://registry.npmjs.org/@oxc-parser/binding-win32-x64-msvc/-/binding-win32-x64-msvc-0.127.0.tgz", + "integrity": "sha512-rOrnSQSCbhI2kowr9XxE7m9a8oQXnBHjnS6j95LxxAnEZ0+Fz20WlRXG4ondQb+ejjt2KOsa65sE6++L6kUd+w==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@oxc-project/types": { + "version": "0.142.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.142.0.tgz", + "integrity": "sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/Boshen" } }, - "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/core": { - "version": "1.11.0", - "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.0.tgz", - "integrity": "sha512-l9Oo58x0HOP5znGzVhYW9U3e5wVuA4LAZU2AGezTmkhO1CgQRFDhDg4nneHsu/t3WniXg9QrG2nIXL/ZS8ln8Q==", + "node_modules/@oxc-resolver/binding-android-arm-eabi": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm-eabi/-/binding-android-arm-eabi-11.21.2.tgz", + "integrity": "sha512-xQoCRv+gKax9KTdwdaQNnAFOai8neay7g3jExDIORzhbrejwGSJaZNTdOJHR5ziLg2joMxOCMOFMo4zuxza2uQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@oxc-resolver/binding-android-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-android-arm64/-/binding-android-arm64-11.21.2.tgz", + "integrity": "sha512-HF5oiE2L05yInPYCFD/4uxSrEZW4SuIfn99Y6L1xnJnzl066JR+MJs2rIdstw8A2MPlAKH+13dpFPNycjqzvGg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@oxc-resolver/binding-darwin-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-arm64/-/binding-darwin-arm64-11.21.2.tgz", + "integrity": "sha512-UX4u49CVCAD8QZNELaW8eMGgMAGwFWYEPbvNsh+3r/gs4NX3KfpiACMVwRQT0EuH3uat9hM5Zl+Ppm9pJD8tgg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@oxc-resolver/binding-darwin-x64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-darwin-x64/-/binding-darwin-x64-11.21.2.tgz", + "integrity": "sha512-J9xPx7YBkrRmJ+xl561ztnMWEc1aOyjEIxBiGX1dVb3u7bGSnfObfcZk+Pd+uM0HZAPNsQ1xvD8j52A/uOSqNQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@oxc-resolver/binding-freebsd-x64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-freebsd-x64/-/binding-freebsd-x64-11.21.2.tgz", + "integrity": "sha512-fRlt7OvSaQkWj6+EDTVxawVxOlqJB2QSnBfkeCyK4RTvsGctbw3BiH2Tb7DzMs7bikc4BRBpvWP5zF9K8b54Zg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm-gnueabihf": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-11.21.2.tgz", + "integrity": "sha512-gK+vPUcPQITkGwBKpZGrcDHSlU6eDGl7AQacxS2CEKAZIBHWkOVFeJwLZ4tYnA1acJqRM5lt7yYwPCVqGHIJ7A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm-musleabihf": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-11.21.2.tgz", + "integrity": "sha512-L/Rgas7SrOKy/z7IH+HxSFRqVO4PuLDKLEGKvnhoCBBq3UJ0YzGBou3qMzaAGgkJwsIvX2pBF+7ojzfUhLiZxQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-11.21.2.tgz", + "integrity": "sha512-CUEYvlX1Fk7E9kUMzuswru1J9HLxMwnpDeQGjQuI4ZH+iNCoa2X9T+pvyzrbsgl7WnIeTFTlNlHsRfVdf5g9/g==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-arm64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-arm64-musl/-/binding-linux-arm64-musl-11.21.2.tgz", + "integrity": "sha512-ViN1ZibQyxwC67GpoP33oo+S9UyUnkog13vzQb9+v9bCNvrVzJuk0MRdacjtv/9xfRMVF/eqHFyl8YOeykI10Q==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-ppc64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-11.21.2.tgz", + "integrity": "sha512-CU1sCqWnhGqYD5I1HedHk5pujrn7ssDkNB/AEQd/pd3D/EojVSgJUlpbafwIbyhia3PgIfkvdFpRPWSALzVumA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-riscv64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-11.21.2.tgz", + "integrity": "sha512-jWVyZtIHca4Gb96x7dag+y69vlei7ffjrsveLkmf2ZhqEAz6ZSBnY1GWvgZUaZlwZP62A3xD092BW97Q5VGc+g==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-riscv64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-11.21.2.tgz", + "integrity": "sha512-LF29obFqNgBUgDX7rmUK7M4D0JQG5LxhYzn3xXmECcHU9aQAdWG7NiY052qybtesEdwHQXKNTWYQ7mTsybNvWg==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-s390x-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-11.21.2.tgz", + "integrity": "sha512-+NYcm+cCHBbtdQQ3A4phQTSuVRYnNHz7wrl9XRAPEovcdoqi0mb1K5ZOl+jN54ZD+q1zz3V0vltbFJmzecJKmw==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-x64-gnu": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-gnu/-/binding-linux-x64-gnu-11.21.2.tgz", + "integrity": "sha512-UQqZDdG2r2HhAOsZEgufkIWHPQ886IUyuJQkoZByvzhW8j51R4UNzGBJFkTiTnLhQnggwJRdJgFWK4uY6ZVIMw==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-linux-x64-musl": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-linux-x64-musl/-/binding-linux-x64-musl-11.21.2.tgz", + "integrity": "sha512-3Q9PMRjalWkT6NZ4jfujuqTCFwoWErg3y3BnOgb544B8IMw4PktiwWOigMfOHNRLMghZeJ7hpfpZf4CP7rV7Og==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@oxc-resolver/binding-openharmony-arm64": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-openharmony-arm64/-/binding-openharmony-arm64-11.21.2.tgz", + "integrity": "sha512-Eljeq3ndtyKhM+Es8LITi4Zl2htzuRZcrPMF3kMCsrILztvU6AjZ3FuEhHHKobPUB9rMpzLpJP5bDqXI7r+iog==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ] + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-wasm32-wasi/-/binding-wasm32-wasi-11.21.2.tgz", + "integrity": "sha512-HGDbNsIywqc4LxU38+CTJNnB/6BF7rheWOJ259b4eE0aEnelYblC8x+1tEd63bp31fYne63RQz9Jb4yVnC7Yig==", + "cpu": [ + "wasm32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/core": "1.11.0", + "@emnapi/runtime": "1.11.0", + "@napi-rs/wasm-runtime": "^1.1.5" + }, + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/core": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.0.tgz", + "integrity": "sha512-l9Oo58x0HOP5znGzVhYW9U3e5wVuA4LAZU2AGezTmkhO1CgQRFDhDg4nneHsu/t3WniXg9QrG2nIXL/ZS8ln8Q==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.2", + "tslib": "^2.4.0" + } + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/runtime": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.0.tgz", + "integrity": "sha512-55coeOFKHv1ywEcUXJtWU5f+Jr/W5tZDvZig8DLKSwUN1JpROQ4rk/SNOQiFWmaR/VKF4zuFyW1B8JduOSv6Pg==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/wasi-threads": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz", + "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@oxc-resolver/binding-win32-arm64-msvc": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-11.21.2.tgz", + "integrity": "sha512-iWx25CBEgH49iE9q5coEGI/jb1jl5kkCY9z6U5Og67xCkQ/WFMDc2J5U78+AE91SUxM2NqSLhJC8/PLfWnImww==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@oxc-resolver/binding-win32-x64-msvc": { + "version": "11.21.2", + "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-x64-msvc/-/binding-win32-x64-msvc-11.21.2.tgz", + "integrity": "sha512-VPoCAhKvCQTlG7vxqaBXcmuvbh77BfnGXj8g0pbvVXpm1F/R8rDVwqIWcEbMzrI1JvJlm8v7T9uMVQb6UctMRg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@pkgjs/parseargs": { + "version": "0.11.0", + "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz", + "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==", + "dev": true, + "license": "MIT", + "optional": true, + "engines": { + "node": ">=14" + } + }, + "node_modules/@pkgr/core": { + "version": "0.3.6", + "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.3.6.tgz", + "integrity": "sha512-SEeaJLb3qBNF/OaXnaR1NmmBbFYk1zC0ZH/52fATcRPLFg/p791YrcyFFy44Bo9sLaGuSuLp5Q6axbb/O+v/RA==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^14.18.0 || >=16.0.0" + }, + "funding": { + "url": "https://opencollective.com/pkgr" + } + }, + "node_modules/@polka/url": { + "version": "1.0.0-next.29", + "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", + "integrity": "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==", + "dev": true, + "license": "MIT" + }, + "node_modules/@rolldown/binding-android-arm64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.2.tgz", + "integrity": "sha512-l7x215OGvo1s52JWmR8U/DAVzEDWBCIbTm28aeJV/WDTSHgcKXaZTuBT0hJMs5NggilfJTW3clZVvd24yfKJxA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-darwin-arm64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.2.tgz", + "integrity": "sha512-9u9Xv6c1AJZT0FfwH5vrMG5Jjcwhc1MlyrPu0XfTqkzsmqfks2M6W/o5XwAJgVVN/jHpqqngC1WevHKKTIUtIA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-darwin-x64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.2.tgz", + "integrity": "sha512-9W1mbGZAfW3oqd85bhBkmpyHCCzL1TeG/zFFP3vg7b0rlly8cxOcre5nXwz+LHazCwac2MNWgPdPCHndABjpWQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-freebsd-x64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.2.tgz", + "integrity": "sha512-0p1lhiCSCyaerFwtrdZQUx7NqGk6LQnaRKWX7tFQqwQgvX0rjM15cIkm3pax1UpEakK14C4mOxx/jSqCBdBRqQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm-gnueabihf": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.2.tgz", + "integrity": "sha512-e+cOJXrJ2L3zx6YzqPg+f6Wbk3V1cKB8bOhbaYdVYN3DdquzNdRAmrbETz1qnt5yp/c7JNlNjmITiA2cVneQ7w==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm64-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.2.tgz", + "integrity": "sha512-JsSMsj6sNat/MuhG5fnBD7QgbtpHKVe30x5/bAVirDHdhoQRXJkF6xc0Jqk8O4fiCUQAzMOoH9wZi3m60c8wtg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm64-musl": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.2.tgz", + "integrity": "sha512-B5G/zJdHaoJn9vD50eGHWkiWfmq8Uhi3IiLPJTzmZTrAalk1bztUikSXo0qga18ibE0IXboyeMUnhPjhAJ45wQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-ppc64-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.2.tgz", + "integrity": "sha512-6mC/awzKka8W6EoekjegpfGkjz8jXWDX63pqu/HYVpyKtZfu65Jsh4QAH3Kej3CAv/c1oGX7psTmFEbr0mDxLA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-s390x-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.2.tgz", + "integrity": "sha512-412MX9fJLdA1IK28EZnc8jYv2HRTleOZgfLQumJ5zy7OeJLZlg/CETwFaXjNmGVxG51cFHpKLqb5LKvBC+HsHA==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-x64-gnu": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.2.tgz", + "integrity": "sha512-Q/+HI/ToJafZ1iCqGgVQXUEkIjufHCTF0gBQ2a5o3cg7GJ2h0qyq3nvvSmU+bGda2/7ygXpTY4TM6gO9OhQ0ZA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-x64-musl": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.2.tgz", + "integrity": "sha512-ZKp/w41n6wCvxzxQHtQSbuphfX3Y4cCvbjkKHusrLx4lh+JWLTU7StSltO/DKARISzbj368d+qUaCjI8K2wzXw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-openharmony-arm64": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.2.tgz", + "integrity": "sha512-pxE6xD4KS3eAROkKK5yrhB9/3+vhlhVGMvlQLbdpzrBGDbKrnzx3RLwPaHvasLo6jgaiBLn7e04Df9C4tYhjmA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-win32-arm64-msvc": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.2.tgz", + "integrity": "sha512-4MqEue5re+xIZzAWsB8sj0P1kqZySWqIuN4t6QaIO/YA6SFwySOLruvWQFzfmqk8LBK2P30KCSJwf6mJCZZ5/A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-win32-x64-msvc": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.2.tgz", + "integrity": "sha512-NweNxxD0Nf9t8v7kodun45Ijp3EIwYY+uydPP6qBEYvfBqhIjN6dZMzlQja3tqX/aLs3F3Uz+AxDpKgRhpOZQg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/pluginutils": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", + "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@sideway/address": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/@sideway/address/-/address-4.1.5.tgz", + "integrity": "sha512-IqO/DUQHUkPeixNQ8n0JA6102hT9CmaljNTPmQ1u8MEhBo/R4Q8eKLN/vGZxuebwOroDB4cbpjheD4+/sKFK4Q==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^9.0.0" + } + }, + "node_modules/@sideway/formula": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/@sideway/formula/-/formula-3.0.1.tgz", + "integrity": "sha512-/poHZJJVjx3L+zVD6g9KgHfYnb443oi7wLu/XKojDviHy6HOEOA6z1Trk5aR1dGcmPenJEgb2sK2I80LeS3MIg==", + "dev": true, + "license": "BSD-3-Clause" + }, + "node_modules/@sideway/pinpoint": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/@sideway/pinpoint/-/pinpoint-2.0.0.tgz", + "integrity": "sha512-RNiOoTPkptFtSVzQevY/yWtZwf/RxyVnPy/OcA9HBM3MlGDnBEYL5B41H0MTn0Uec8Hi+2qUtTfG2WWZBmMejQ==", + "dev": true, + "license": "BSD-3-Clause" + }, + "node_modules/@sinclair/typebox": { + "version": "0.34.52", + "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.34.52.tgz", + "integrity": "sha512-XiMQh7qqVlxZzcVD+kkGMNGMzcTrDMLWI7S4x7z1MkCkbDPrekpZXEUK0eZqZFMuHQg2a2DZOcDIh9o5v3Gonw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@sinonjs/commons": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/@sinonjs/commons/-/commons-3.0.1.tgz", + "integrity": "sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "type-detect": "4.0.8" + } + }, + "node_modules/@sinonjs/fake-timers": { + "version": "15.4.0", + "resolved": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-15.4.0.tgz", + "integrity": "sha512-DsG+8/LscQIQg68J6Ef3dv10u6nVyetYn923s3/sus5eaGfTo1of5WMZSLf0UJc9KDuKPilPH0UDJCjvNbDNCA==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@sinonjs/commons": "^3.0.1" + } + }, + "node_modules/@standard-schema/spec": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", + "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@storybook/addon-a11y": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/addon-a11y/-/addon-a11y-10.5.10.tgz", + "integrity": "sha512-RpRQV5xUbrl6hCiNrd5FSMIo6pnRZ0VZxWvEW/ASLcreGkKUW5jl2AeLCe5YROE2i80s/dU+6VPzOYKrwWNFbQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/global": "^5.0.0", + "axe-core": "^4.2.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10" + } + }, + "node_modules/@storybook/builder-vite": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-10.5.10.tgz", + "integrity": "sha512-O4GgIP0tKLRueom3EmU3OaBUHKjNYj+jkOvmTIkn3PYTiWVkCuHqSKEs4ADvRyaQuLH+peHhFe4JtkNC9KbtrQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/csf-plugin": "10.5.10", + "ts-dedent": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/csf-plugin": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-10.5.10.tgz", + "integrity": "sha512-TaCLBrqVEr767+w58QDotDUiCTuE5cyRJuRcDlsKQyUIyGBv+lYD3lu8wBiVCYxgIjB/gu9HmqiC+0yx1rHzaw==", + "dev": true, + "license": "MIT", + "dependencies": { + "unplugin": "^2.3.5" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "esbuild": "*", + "rollup": "*", + "storybook": "^10.5.10", + "vite": "*", + "webpack": "*" + }, + "peerDependenciesMeta": { + "esbuild": { + "optional": true + }, + "rollup": { + "optional": true + }, + "vite": { + "optional": true + }, + "webpack": { + "optional": true + } + } + }, + "node_modules/@storybook/global": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/@storybook/global/-/global-5.0.0.tgz", + "integrity": "sha512-FcOqPAXACP0I3oJ/ws6/rrPT9WGhu915Cg8D02a9YxLo0DE9zI+a9A5gRGvmQ09fiWPukqI8ZAEoQEdWUKMQdQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/@storybook/icons": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/@storybook/icons/-/icons-2.1.0.tgz", + "integrity": "sha512-Fxh9vYpX9bQqFeHRiY8h2ApeRGDzRSMLwJwNZ/AIRqnyOKHxRKL+yFe+ctEkVJmuptRE9u1Hrn8ZZNHyfDKKNg==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" + } + }, + "node_modules/@storybook/svelte": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/svelte/-/svelte-10.5.10.tgz", + "integrity": "sha512-jSEv1q5fJYTrhz7/DBYNc5gMmRJ8SyyyMikSvN4S6juuS0eJTZWGd62UpDH3ClfT/TQmTjTJH4HeEnbzJ+VrCA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ts-dedent": "^2.0.0", + "type-fest": "^5.6.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "svelte": "^5.0.0" + } + }, + "node_modules/@storybook/svelte-vite": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/svelte-vite/-/svelte-vite-10.5.10.tgz", + "integrity": "sha512-yLqceMBE89p0L9vf9y6zE0ELeRxwfAU7ci3Hry7NEZkxQ4aYsuClUqCmlCLNrAI7nvoVK8v6fp82KgCcods95A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/builder-vite": "10.5.10", + "@storybook/svelte": "10.5.10", + "magic-string": "^0.30.0", + "svelte2tsx": "^0.7.55", + "typescript": "^4.9.4 || ^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "@sveltejs/vite-plugin-svelte": "^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0", + "storybook": "^10.5.10", + "svelte": "^5.0.0", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/sveltekit": { + "version": "10.5.10", + "resolved": "https://registry.npmjs.org/@storybook/sveltekit/-/sveltekit-10.5.10.tgz", + "integrity": "sha512-sPHfTp1yitR+kftQV/0a7dDw3q4/zTXvBeWjgUC8DKkUY7NuFDRUOf00zE086B4vSXSZukf9484VyO+owBkLCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@storybook/builder-vite": "10.5.10", + "@storybook/svelte": "10.5.10", + "@storybook/svelte-vite": "10.5.10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/storybook" + }, + "peerDependencies": { + "storybook": "^10.5.10", + "svelte": "^5.0.0", + "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/@storybook/test-runner": { + "version": "0.24.4", + "resolved": "https://registry.npmjs.org/@storybook/test-runner/-/test-runner-0.24.4.tgz", + "integrity": "sha512-xm04bba5N7QyHHc+wD4xmPZx0vKK/PIpmTFypy445HrWOj0nFK4pYg5dE6H4ppqMt7qZAnb5GfHTvBwJtywJ4A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/core": "^7.22.5", + "@babel/generator": "^7.22.5", + "@babel/template": "^7.22.5", + "@babel/types": "^7.22.5", + "@jest/types": "^30.0.1", + "@swc/core": "^1.5.22", + "@swc/jest": "^0.2.38", + "expect-playwright": "^0.8.0", + "jest": "^30.0.4", + "jest-circus": "^30.0.4", + "jest-environment-node": "^30.0.4", + "jest-junit": "^16.0.0", + "jest-process-manager": "^0.4.0", + "jest-runner": "^30.0.4", + "jest-serializer-html": "^7.1.0", + "jest-watch-typeahead": "^3.0.1", + "nyc": "^15.1.0", + "playwright": "^1.14.0", + "playwright-core": ">=1.2.0", + "rimraf": "^3.0.2", + "uuid": "^8.3.2" + }, + "bin": { + "test-storybook": "dist/test-storybook.js" + }, + "engines": { + "node": ">=20.0.0" + }, + "peerDependencies": { + "storybook": "^0.0.0-0 || ^10.0.0 || ^10.0.0-0 || ^10.1.0-0 || ^10.2.0-0 || ^10.3.0-0 || ^10.4.0-0 || ^10.5.0-0 || ^10.6.0-0" + } + }, + "node_modules/@sveltejs/acorn-typescript": { + "version": "1.0.11", + "resolved": "https://registry.npmjs.org/@sveltejs/acorn-typescript/-/acorn-typescript-1.0.11.tgz", + "integrity": "sha512-LFuZUkjJ9iF7JZye/aG5XM0SFcQ5VyL0oVX4WJ9dc0Va3R3s0OauX1BESVCb+YN/ol8TAfqGDDAQsTG627Y5kw==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "acorn": "^8.9.0" + } + }, + "node_modules/@sveltejs/adapter-static": { + "version": "3.0.10", + "resolved": "https://registry.npmjs.org/@sveltejs/adapter-static/-/adapter-static-3.0.10.tgz", + "integrity": "sha512-7D9lYFWJmB7zxZyTE/qxjksvMqzMuYrrsyh1f4AlZqeZeACPRySjbC3aFiY55wb1tWUaKOQG9PVbm74JcN2Iew==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "@sveltejs/kit": "^2.0.0" + } + }, + "node_modules/@sveltejs/kit": { + "version": "2.70.2", + "resolved": "https://registry.npmjs.org/@sveltejs/kit/-/kit-2.70.2.tgz", + "integrity": "sha512-RzRoRpuR2KXqc5yMO0akQHDZeT4AslOlznGITURsqHaVbtyYP4Wn3eE3gxj9JcDyNYO0crkxhdwFHc+2vkVm6w==", + "dev": true, + "license": "MIT", + "dependencies": { + "@standard-schema/spec": "^1.0.0", + "@sveltejs/acorn-typescript": "^1.0.9", + "@types/cookie": "^0.6.0", + "acorn": "^8.16.0", + "cookie": "^0.6.0", + "devalue": "^5.8.1", + "esm-env": "^1.2.2", + "kleur": "^4.1.5", + "magic-string": "^0.30.5", + "mrmime": "^2.0.0", + "set-cookie-parser": "^3.0.0", + "sirv": "^3.0.0" + }, + "bin": { + "svelte-kit": "svelte-kit.js" + }, + "engines": { + "node": ">=18.13" + }, + "peerDependencies": { + "@opentelemetry/api": "^1.0.0", + "@sveltejs/vite-plugin-svelte": "^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0 || ^7.0.0", + "svelte": "^4.0.0 || ^5.0.0-next.0", + "typescript": "^5.3.3 || ^6.0.0", + "vite": "^5.0.3 || ^6.0.0 || ^7.0.0-beta.0 || ^8.0.0" + }, + "peerDependenciesMeta": { + "@opentelemetry/api": { + "optional": true + }, + "typescript": { + "optional": true + } + } + }, + "node_modules/@sveltejs/load-config": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/@sveltejs/load-config/-/load-config-0.2.3.tgz", + "integrity": "sha512-VT3qmUb8pRV2QrZjd8iAmtg8lf4W0TIjZbvXtz5MKei/q96teWZgGJyyidJzOjzZzvdq616eSRVeMYIQChUTAQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 18.0.0" + } + }, + "node_modules/@sveltejs/vite-plugin-svelte": { + "version": "7.3.0", + "resolved": "https://registry.npmjs.org/@sveltejs/vite-plugin-svelte/-/vite-plugin-svelte-7.3.0.tgz", + "integrity": "sha512-QbRoJyD92e9R0ufeQIWRHrCC0ObcqSv/aBDdrQMoU+sypav3cDx5wytdQ6GLdXjEMO6xjrXGzfkUygng8JMv0A==", + "dev": true, + "license": "MIT", + "dependencies": { + "deepmerge": "^4.3.1", + "magic-string": "^1.0.0", + "obug": "^2.1.0", + "vitefu": "^1.1.2" + }, + "engines": { + "node": "^20.19 || ^22.12 || >=24" + }, + "peerDependencies": { + "svelte": "^5.46.4", + "vite": "^8.0.0-beta.7 || ^8.0.0" + } + }, + "node_modules/@sveltejs/vite-plugin-svelte/node_modules/magic-string": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.2.0.tgz", + "integrity": "sha512-ptco+HFxTLgjafSLim2LojBSwfg5feBjd+SqyiwdGkzC38UPdZy3zgrHMI2CoTf5fJL38tbHMYWVzIH8BxGqJw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.5.5" + } + }, + "node_modules/@swc/core": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core/-/core-1.16.1.tgz", + "integrity": "sha512-nUaeu91O5QZKrQdaDCHd402ogUIoNOOjpkZNq0UomWK0G6gDaGmLhvddF1/3BXf5O8aLyo6ZPY/aMDWvaJQ/hg==", + "dev": true, + "hasInstallScript": true, + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3", + "@swc/types": "^0.1.28" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/swc" + }, + "optionalDependencies": { + "@swc/core-darwin-arm64": "1.16.1", + "@swc/core-darwin-x64": "1.16.1", + "@swc/core-linux-arm-gnueabihf": "1.16.1", + "@swc/core-linux-arm64-gnu": "1.16.1", + "@swc/core-linux-arm64-musl": "1.16.1", + "@swc/core-linux-ppc64-gnu": "1.16.1", + "@swc/core-linux-s390x-gnu": "1.16.1", + "@swc/core-linux-x64-gnu": "1.16.1", + "@swc/core-linux-x64-musl": "1.16.1", + "@swc/core-win32-arm64-msvc": "1.16.1", + "@swc/core-win32-ia32-msvc": "1.16.1", + "@swc/core-win32-x64-msvc": "1.16.1" + }, + "peerDependencies": { + "@swc/helpers": ">=0.5.17" + }, + "peerDependenciesMeta": { + "@swc/helpers": { + "optional": true + } + } + }, + "node_modules/@swc/core-darwin-arm64": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-darwin-arm64/-/core-darwin-arm64-1.16.1.tgz", + "integrity": "sha512-zlJblJ8ncErD43lKdxjbUaUskJQf+LxiPXYcWXD8/8ZMV+7uuAT+CwjciLXpyZBd5Pq/S726bMpeeAwSeL1hhg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-darwin-x64": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-darwin-x64/-/core-darwin-x64-1.16.1.tgz", + "integrity": "sha512-IN0BmPWb0YAh/17mmlWB/HDBtTw2MfuW4hulf/tQAgTQBRH17l+z499bNJLK6LizSjqs0P7V+jU38Zj+vJC1DA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm-gnueabihf": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-arm-gnueabihf/-/core-linux-arm-gnueabihf-1.16.1.tgz", + "integrity": "sha512-EYgrx2YOCQ2Twz2S793kqNjPkpvYVUPzzR95bIb7by+VQcyaai4lZZ2iz/tZvcFVKSNcN3/JTKwx+aBn2ZL52A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm64-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-arm64-gnu/-/core-linux-arm64-gnu-1.16.1.tgz", + "integrity": "sha512-moyKm0YZlHdHohzm1YwgAyesqnE853rO0REMfJLFAova51wF9BNi+3ZW2PeS7Vqvn6HeJuepLpAHbBdZctxpHA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm64-musl": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-arm64-musl/-/core-linux-arm64-musl-1.16.1.tgz", + "integrity": "sha512-kKGBO9wdapiSzuf5ZzZ2fYtlu1BNSYtIIUxvH1ir/gcelTOREEHGDCLTDFx/2Knf878nU11A40z7LxwasEFxqA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-ppc64-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-ppc64-gnu/-/core-linux-ppc64-gnu-1.16.1.tgz", + "integrity": "sha512-nZ6qahtLxC3PM54cWOQZHxt4lTCF/3J4LIoWWzz6v7A+rLs8Dx54anYQf7mH3eIi8KlNpgKci/ie8ZSqFN8O7A==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-s390x-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-s390x-gnu/-/core-linux-s390x-gnu-1.16.1.tgz", + "integrity": "sha512-4ji5PNzhYq193Z4/4xUaSoNJza6iCkDJSzhetrbB6KOYxsr+kxtQr8ePWhMJUiMt6JUWtXaZ1PYT8FhtED+nGA==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-x64-gnu": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-x64-gnu/-/core-linux-x64-gnu-1.16.1.tgz", + "integrity": "sha512-VJQxqrisHV+B394IgrOu8YsIIXZgffnf5tO+yc9Z/hoUpuZEvuQTjWwlnpZdpyD+0nx6LTD1/3k646JYm43yJA==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-x64-musl": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-linux-x64-musl/-/core-linux-x64-musl-1.16.1.tgz", + "integrity": "sha512-r9oV1mwxxsIGcLV1IQ/tw76MW3doatKze1QFWuC+a7QqJUkhY/bKTSVk6NpKKUGm2LDsE33Va8VqSClfA7vSiQ==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-arm64-msvc": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-win32-arm64-msvc/-/core-win32-arm64-msvc-1.16.1.tgz", + "integrity": "sha512-6huNRessoBLxWEqBm5zJXyCQ27TO7anvkdiuQ5MDO4CJni0nOXEqKtV9RllQ2TdyENKKsUMXVnIfW2hIXx/R5Q==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-ia32-msvc": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-win32-ia32-msvc/-/core-win32-ia32-msvc-1.16.1.tgz", + "integrity": "sha512-OVKJFUzphrGmsh+BGtcZDesx0YryV7/Yvy5XGgTqnrZfjnyfcr5uaqYQugCckdIlupc5Vs3XtDjRAj12z4ZPlw==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-x64-msvc": { + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@swc/core-win32-x64-msvc/-/core-win32-x64-msvc-1.16.1.tgz", + "integrity": "sha512-Bt+VIhWYCGk4urklnkkteLUOeLv1VxigwTCeB/xC6rBZxY6IIKdDwCJf6on3E3SUGsIqmQS6QqtuJQc1VxF4Aw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/counter": { + "version": "0.1.3", + "resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.3.tgz", + "integrity": "sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==", + "dev": true, + "license": "Apache-2.0" + }, + "node_modules/@swc/jest": { + "version": "0.2.39", + "resolved": "https://registry.npmjs.org/@swc/jest/-/jest-0.2.39.tgz", + "integrity": "sha512-eyokjOwYd0Q8RnMHri+8/FS1HIrIUKK/sRrFp8c1dThUOfNeCWbLmBP1P5VsKdvmkd25JaH+OKYwEYiAYg9YAA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/create-cache-key-function": "^30.0.0", + "@swc/counter": "^0.1.3", + "jsonc-parser": "^3.2.0" + }, + "engines": { + "npm": ">= 7.0.0" + }, + "peerDependencies": { + "@swc/core": "*" + } + }, + "node_modules/@swc/types": { + "version": "0.1.28", + "resolved": "https://registry.npmjs.org/@swc/types/-/types-0.1.28.tgz", + "integrity": "sha512-V6Mnml8v09QALx6K0elJ7o9K/MkVDtW3t6L+7Ou/JcWtb3xwId2AH4FeOceySd2JaO87IMw4+6vSZxLm34LPbw==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3" + } + }, + "node_modules/@tauri-apps/api": { + "version": "2.11.1", + "resolved": "https://registry.npmjs.org/@tauri-apps/api/-/api-2.11.1.tgz", + "integrity": "sha512-M2FPuYND2m+wh5hfW9ZpSdxMPdEJovPBWwoHJmwUpysTYNHaOkVFN419m/K0LIgjb/7KU2vBgsUepJWugQCvAA==", + "license": "Apache-2.0 OR MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/tauri" + } + }, + "node_modules/@tauri-apps/cli": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli/-/cli-2.11.4.tgz", + "integrity": "sha512-R8xGtMpwyetawSqm9kYOuMmEqkhUbvcUy8n0aNXIxollKBLESUu5f4Fx+64hgASYm1H+jSWq6jCW6zqTnH6hqQ==", + "dev": true, + "license": "Apache-2.0 OR MIT", + "bin": { + "tauri": "tauri.js" + }, + "engines": { + "node": ">= 10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/tauri" + }, + "optionalDependencies": { + "@tauri-apps/cli-darwin-arm64": "2.11.4", + "@tauri-apps/cli-darwin-x64": "2.11.4", + "@tauri-apps/cli-linux-arm-gnueabihf": "2.11.4", + "@tauri-apps/cli-linux-arm64-gnu": "2.11.4", + "@tauri-apps/cli-linux-arm64-musl": "2.11.4", + "@tauri-apps/cli-linux-riscv64-gnu": "2.11.4", + "@tauri-apps/cli-linux-x64-gnu": "2.11.4", + "@tauri-apps/cli-linux-x64-musl": "2.11.4", + "@tauri-apps/cli-win32-arm64-msvc": "2.11.4", + "@tauri-apps/cli-win32-ia32-msvc": "2.11.4", + "@tauri-apps/cli-win32-x64-msvc": "2.11.4" + } + }, + "node_modules/@tauri-apps/cli-darwin-arm64": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-arm64/-/cli-darwin-arm64-2.11.4.tgz", + "integrity": "sha512-1ryOF3ZhpZ/nemHV5zVwBQBz9jDGKmKPvWPADOhc83ig0P4bMc2iER4NbC6r9sjeIZ6RVQ4g3RZIYvezhcl4TQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-darwin-x64": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-x64/-/cli-darwin-x64-2.11.4.tgz", + "integrity": "sha512-uFsGQAAfuyz1k/yGLmkWfkBlgKAqZfxqlHmLWx81QU27RJWfmbNHCIq8T8w1e+VClleIuZUjpHWfoE4E3DLo3A==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-arm-gnueabihf": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm-gnueabihf/-/cli-linux-arm-gnueabihf-2.11.4.tgz", + "integrity": "sha512-IaHZn5CdBL21oUmjiVOS1ctw6Ip1O0pjp70FwOWmYz1myWe0SY96ZIj2FYf7pT0m8bI2h/hrs5ZbEXXh44/MkQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-arm64-gnu": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-gnu/-/cli-linux-arm64-gnu-2.11.4.tgz", + "integrity": "sha512-N41/ukTRVe6XSuUTESuFdGeOW2i7k62tK+6gHK5Kd5/q5RPvvi19GaWAVPPb9u95HSGmTChSolBfzynUsssFaA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-arm64-musl": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-musl/-/cli-linux-arm64-musl-2.11.4.tgz", + "integrity": "sha512-v277UnT/fB64xAfSroL5N3Km3tLmvATWqJJw/wRI+g6o+HkeD0slyE7gOhNs1MbjE41R7bQOTxMVoL3aomUJmw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-riscv64-gnu": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-riscv64-gnu/-/cli-linux-riscv64-gnu-2.11.4.tgz", + "integrity": "sha512-qqgNkQ2u1yZHxjhxsZaxUtRDW8dIqIYm33rx/mzwQv0SfY9x1B+iraj8vWeFiXjjSVVhEMepXSOts1TqPzvXNQ==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-x64-gnu": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-gnu/-/cli-linux-x64-gnu-2.11.4.tgz", + "integrity": "sha512-2VRNWl84FOH0m2giiDkO2h0QXlcMJeX+zJDpI5kDIQAx6s+geF3v48F4DXfJez4GS/FdoDGnPnw1C2iYGbQ7bQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-linux-x64-musl": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-musl/-/cli-linux-x64-musl-2.11.4.tgz", + "integrity": "sha512-o9GyhYor/nc7xarmwDE3ka2szuW3uuZzXjHWh64Q8YX5AtSgxdQkFWzrY4O8KiGtVNvFBI14H3Q49Qj5TOIP/A==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-win32-arm64-msvc": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-arm64-msvc/-/cli-win32-arm64-msvc-2.11.4.tgz", + "integrity": "sha512-ld5Ehb598m0VkYyylRPNeCFsBe/km0jxis6KgMpl3IGY6I/i1RwQXO05I1AsXUXO2WC6AvB/Lw4qTf/asiuEiQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-win32-ia32-msvc": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-ia32-msvc/-/cli-win32-ia32-msvc-2.11.4.tgz", + "integrity": "sha512-12Hxi0XX/H5VFxO/bGgHkFWhml9VMgEOu9CidjeCeTNQ1l6fpUlbiGgSP7CLI3PFtW9/FfbeHieZ+kyWK5H7CA==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/cli-win32-x64-msvc": { + "version": "2.11.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-x64-msvc/-/cli-win32-x64-msvc-2.11.4.tgz", + "integrity": "sha512-+vDiqBIU5dMISg/wNvX3sF+ZHfgJGJ5T0AcO+EHNXV9GGAG+P5fzodlDXD3QdKCRgZxMoCm5PPvj3BqLNjBthw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 OR MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@tauri-apps/plugin-dialog": { + "version": "2.7.2", + "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-dialog/-/plugin-dialog-2.7.2.tgz", + "integrity": "sha512-pX0IGm1I3I6wc+zeKYcq1GSqogK6okCNX5fOdaNU5ab1AjGS6l1E5wFNjEb7meg7ZFSp0JUs+0jQGQNyOvLrsg==", + "license": "MIT OR Apache-2.0", + "dependencies": { + "@tauri-apps/api": "^2.11.0" + } + }, + "node_modules/@tauri-apps/plugin-opener": { + "version": "2.5.4", + "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-opener/-/plugin-opener-2.5.4.tgz", + "integrity": "sha512-1HnPkb+AmgO29HBazm4uPLKB+r7zzcTBW1d0fyYp1uP+jwtpoiNDGKMMzz58SFp49nOIrxdE3aUJtT57lfO9CQ==", + "license": "MIT OR Apache-2.0", + "dependencies": { + "@tauri-apps/api": "^2.11.0" + } + }, + "node_modules/@testing-library/dom": { + "version": "10.4.1", + "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.1.tgz", + "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.10.4", + "@babel/runtime": "^7.12.5", + "@types/aria-query": "^5.0.1", + "aria-query": "5.3.0", + "dom-accessibility-api": "^0.5.9", + "lz-string": "^1.5.0", + "picocolors": "1.1.1", + "pretty-format": "^27.0.2" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@testing-library/dom/node_modules/aria-query": { + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz", + "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "dequal": "^2.0.3" + } + }, + "node_modules/@testing-library/jest-dom": { + "version": "6.9.1", + "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-6.9.1.tgz", + "integrity": "sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@adobe/css-tools": "^4.4.0", + "aria-query": "^5.0.0", + "css.escape": "^1.5.1", + "dom-accessibility-api": "^0.6.3", + "picocolors": "^1.1.1", + "redent": "^3.0.0" + }, + "engines": { + "node": ">=14", + "npm": ">=6", + "yarn": ">=1" + } + }, + "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz", + "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@testing-library/user-event": { + "version": "14.6.5", + "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.5.tgz", + "integrity": "sha512-FhqjldLTpteueBaKflhNFlMT3+PM0O5fiBUivht6b9CZ1eesJyy7+g3Jr7XwJzt/Hip3ZG5hWwK1MX1FuDiE4w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12", + "npm": ">=6" + }, + "peerDependencies": { + "@testing-library/dom": ">=7.21.4" + } + }, + "node_modules/@tybys/wasm-util": { + "version": "0.10.3", + "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz", + "integrity": "sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@types/aria-query": { + "version": "5.0.4", + "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz", + "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/babel__core": { + "version": "7.20.5", + "resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz", + "integrity": "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/parser": "^7.20.7", + "@babel/types": "^7.20.7", + "@types/babel__generator": "*", + "@types/babel__template": "*", + "@types/babel__traverse": "*" + } + }, + "node_modules/@types/babel__generator": { + "version": "7.27.0", + "resolved": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.27.0.tgz", + "integrity": "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/types": "^7.0.0" + } + }, + "node_modules/@types/babel__template": { + "version": "7.4.4", + "resolved": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz", + "integrity": "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/parser": "^7.1.0", + "@babel/types": "^7.0.0" + } + }, + "node_modules/@types/babel__traverse": { + "version": "7.28.0", + "resolved": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.28.0.tgz", + "integrity": "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/types": "^7.28.2" + } + }, + "node_modules/@types/chai": { + "version": "5.2.3", + "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz", + "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/deep-eql": "*", + "assertion-error": "^2.0.1" + } + }, + "node_modules/@types/cookie": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.6.0.tgz", + "integrity": "sha512-4Kh9a6B2bQciAhf7FSuMRRkUWecJgJu9nPnx3yzpsfXX/c50REIqpHY4C82bXP90qrLtXtkDxTZosYO3UpOwlA==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/deep-eql": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz", + "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/estree": { + "version": "1.0.9", + "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz", + "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/istanbul-lib-coverage": { + "version": "2.0.6", + "resolved": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz", + "integrity": "sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/istanbul-lib-report": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz", + "integrity": "sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/istanbul-lib-coverage": "*" + } + }, + "node_modules/@types/istanbul-reports": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz", + "integrity": "sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/istanbul-lib-report": "*" + } + }, + "node_modules/@types/node": { + "version": "26.1.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz", + "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==", + "dev": true, + "license": "MIT", + "dependencies": { + "undici-types": "~8.3.0" + } + }, + "node_modules/@types/stack-utils": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz", + "integrity": "sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/trusted-types": { + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz", + "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/wait-on": { + "version": "5.3.4", + "resolved": "https://registry.npmjs.org/@types/wait-on/-/wait-on-5.3.4.tgz", + "integrity": "sha512-EBsPjFMrFlMbbUFf9D1Fp+PAB2TwmUn7a3YtHyD9RLuTIk1jDd8SxXVAoez2Ciy+8Jsceo2MYEYZzJ/DvorOKw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/node": "*" + } + }, + "node_modules/@types/yargs": { + "version": "17.0.35", + "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.35.tgz", + "integrity": "sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/yargs-parser": "*" + } + }, + "node_modules/@types/yargs-parser": { + "version": "21.0.3", + "resolved": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz", + "integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/@ungap/structured-clone": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.3.tgz", + "integrity": "sha512-60YRaenCQcVjYEKOcG824+DRGGIQ3VKErcBoAEDJZz5bKIs2ZG+X/H9Nk+Q6EVkwJk5QNApxbrc5QtBSwtrXAg==", + "dev": true, + "license": "ISC" + }, + "node_modules/@unrs/resolver-binding-android-arm-eabi": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm-eabi/-/resolver-binding-android-arm-eabi-1.12.2.tgz", + "integrity": "sha512-g5T90pqg1bo/7mytQx6F4iBNC0Wsh9cu+z9veDbFjc7HjpesJFWD7QMS0NGStXM075+7dJPPVvBbpZlnrdpi/w==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@unrs/resolver-binding-android-arm64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm64/-/resolver-binding-android-arm64-1.12.2.tgz", + "integrity": "sha512-YGCRZv/9GLhwmz6mYDeTsm/92BAyR28l6c2ReweVW5pWgfsitWLY8upvfRlGdoyD8HjeTHSYJWyZGD4KJA/nFQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@unrs/resolver-binding-darwin-arm64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-arm64/-/resolver-binding-darwin-arm64-1.12.2.tgz", + "integrity": "sha512-u9DiNT1auQMO20A9SyTuG3wUgQWB9Z7KjAg0uFuCDR1FsAY8A0CG2S6JpHS1xwm/w1G08bjXZDcyOCjv1WAm2w==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@unrs/resolver-binding-darwin-x64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-x64/-/resolver-binding-darwin-x64-1.12.2.tgz", + "integrity": "sha512-f7rPLi/T1HVKZu/u6t87lroib16n8vrSzcyxI7lg4BGO9UF26KhQL44sd9eOUgrTYhvRXtWOIZT5PejdPyJfUA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@unrs/resolver-binding-freebsd-x64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-freebsd-x64/-/resolver-binding-freebsd-x64-1.12.2.tgz", + "integrity": "sha512-BpcOjWCJub6nRZUS2zA20pmLvjtqAtGejETaIyRLiZiQf++cbrjltLA5NN/xaXfqeOBOSlMFbemIl5/S5tljmg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm-gnueabihf": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-gnueabihf/-/resolver-binding-linux-arm-gnueabihf-1.12.2.tgz", + "integrity": "sha512-vZTDvdSISZjJx66OzJqtsOhzifbqRjbmI1Mnu49fQDwog5GtDI4QidRiEAYbZCRj9C8YZEW+3ZjqsyS9GR4k2A==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm-musleabihf": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-musleabihf/-/resolver-binding-linux-arm-musleabihf-1.12.2.tgz", + "integrity": "sha512-BiPI+IrIlwcW4nLLMM21+B1dFPzd55yAVgVGrdgDjNef+ch03GdxrcyaIz8X9SsQirh/kCQ7mviyWlMxdh2D7g==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-gnu/-/resolver-binding-linux-arm64-gnu-1.12.2.tgz", + "integrity": "sha512-zJc0H99FEPoFfSrNpa91HYfxzfAJCr502oxNK1cfdC9hlaFI43RT+JFCann9JUgZmLzzntChHyn13Sgn9ljHNg==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-arm64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-musl/-/resolver-binding-linux-arm64-musl-1.12.2.tgz", + "integrity": "sha512-KQ3Lki6l+Pz1k/eBipN41ES+YUK30beLGb9YqcB1O542cyLCNE6GaxrfcY3T6EezmGGk84wb5XyO9loTM9tkcA==", + "cpu": [ + "arm64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-loong64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-loong64-gnu/-/resolver-binding-linux-loong64-gnu-1.12.2.tgz", + "integrity": "sha512-3SJGEh1DborhG6pyxvhPzCT4bbSIVihsvgJc13P1bHG7KLdNDaF9T3gsTwFc7Jw/5Y5/iWOjkEx7Zy0NvCGX3Q==", + "cpu": [ + "loong64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-loong64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-loong64-musl/-/resolver-binding-linux-loong64-musl-1.12.2.tgz", + "integrity": "sha512-jiuG/Obbel7uw1PwHNFfrkiKhLAF6mnyZ6aWlOAVN9WqKm8v0OFGnciJIHu8+CMvXLQ8AD51LPzAoUfT21D5Ew==", + "cpu": [ + "loong64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-ppc64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-ppc64-gnu/-/resolver-binding-linux-ppc64-gnu-1.12.2.tgz", + "integrity": "sha512-q7xRvVpmcfeL+LlZg8Pbbo6QaTZwDU5BaGZbwfhkEsXJn3Was8xYfE0RBH266xZt0rM6B7i8xAYIvjthuUIWHg==", + "cpu": [ + "ppc64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-riscv64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-gnu/-/resolver-binding-linux-riscv64-gnu-1.12.2.tgz", + "integrity": "sha512-0CVdx6lcnT3Q9inOH8tsMIOJ6ImndllMjqJHg8RLVdB7Vq4SfkEXl9mCSsVNuNA4MCYycRicCUxPCabVHJRr6A==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-riscv64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-musl/-/resolver-binding-linux-riscv64-musl-1.12.2.tgz", + "integrity": "sha512-iOwlRo9vnp6R6ohHQS11n0NnfdXx/omhkocmIfaPRpQhKZ+3BDMkkdRVh53qjkFkpPddf+FETA28NwGN7l5l+w==", + "cpu": [ + "riscv64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-s390x-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-s390x-gnu/-/resolver-binding-linux-s390x-gnu-1.12.2.tgz", + "integrity": "sha512-HYJtLfXq94q8iZNFT1lknx258wlkkWhZeUXJRqzKBBUJ00CvZ+N33zgbCqimLjsyw5Va6uUxhVa12mI+kaveEw==", + "cpu": [ + "s390x" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-x64-gnu": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-gnu/-/resolver-binding-linux-x64-gnu-1.12.2.tgz", + "integrity": "sha512-mPsUhunKKDih5O96Y6enDQyHc1SqBPlY1E/SfMWDM3EdJ95Z9CArPeCVwCCqbP45ljvivdEk8Fxn+SIb1rDAJQ==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-linux-x64-musl": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-musl/-/resolver-binding-linux-x64-musl-1.12.2.tgz", + "integrity": "sha512-azrt6+5ydLd8Vt210AAFis/lZevSfPw93EJRIJG+xPu4WCJ8K0kppCTpMyLPcKT7H15M4Jnt2tMp5bOvCkRC6A==", + "cpu": [ + "x64" + ], + "dev": true, + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@unrs/resolver-binding-openharmony-arm64": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-openharmony-arm64/-/resolver-binding-openharmony-arm64-1.12.2.tgz", + "integrity": "sha512-YZ9hP4O0X9PQb8eO980qmLNGH4zT3I9+SZTdt0Pr0YyuGQhYKoOZkV02VzrzyOZJ5xIJ3UFIenKkUkGg8GjgWQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ] + }, + "node_modules/@unrs/resolver-binding-wasm32-wasi": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-wasm32-wasi/-/resolver-binding-wasm32-wasi-1.12.2.tgz", + "integrity": "sha512-tYFDIkMxSflfEc/h92ZWNsZlHSwgimbNHSO3PL2JWQHfCuC2q316jMyYU9TIWZsFK2bQwyK5VAdYgn8ygPj69A==", + "cpu": [ + "wasm32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/core": "1.10.0", + "@emnapi/runtime": "1.10.0", + "@napi-rs/wasm-runtime": "^1.1.4" + }, + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/@unrs/resolver-binding-wasm32-wasi/node_modules/@emnapi/core": { + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz", + "integrity": "sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "@emnapi/wasi-threads": "1.2.1", + "tslib": "^2.4.0" + } + }, + "node_modules/@unrs/resolver-binding-wasm32-wasi/node_modules/@emnapi/runtime": { + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz", + "integrity": "sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==", + "dev": true, + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@unrs/resolver-binding-win32-arm64-msvc": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-arm64-msvc/-/resolver-binding-win32-arm64-msvc-1.12.2.tgz", + "integrity": "sha512-qzNyg3xL0VPQmCaUh+N5jSitce6k+uCBfMDesWRnlULOZaqUkaJ0ybdT+UqlAWJoQjuqfIU/0Ptx9bteN4D82g==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@unrs/resolver-binding-win32-ia32-msvc": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-ia32-msvc/-/resolver-binding-win32-ia32-msvc-1.12.2.tgz", + "integrity": "sha512-WD9sY00OfpHVGfsnHZoA8jVT+esS/Bg8z8jzxp5BnDCjjwsuKsPQrzswwpFy4J1AUJbXPRfkpcX0mXrzeXW79g==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@unrs/resolver-binding-win32-x64-msvc": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-x64-msvc/-/resolver-binding-win32-x64-msvc-1.12.2.tgz", + "integrity": "sha512-nAB74NfSNKknqQ1RrYj6uz8FcXEomu/MATJZxh/x+BArzN2U3JbOYC0APYzUIGhVY3m5hRxA8VPNdPBoG8txlA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@vitest/coverage-v8": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.10.tgz", + "integrity": "sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@bcoe/v8-coverage": "^1.0.2", + "@vitest/utils": "4.1.10", + "ast-v8-to-istanbul": "^1.0.0", + "istanbul-lib-coverage": "^3.2.2", + "istanbul-lib-report": "^3.0.1", + "istanbul-reports": "^3.2.0", + "magicast": "^0.5.2", + "obug": "^2.1.1", + "std-env": "^4.0.0-rc.1", + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "@vitest/browser": "4.1.10", + "vitest": "4.1.10" + }, + "peerDependenciesMeta": { + "@vitest/browser": { + "optional": true + } + } + }, + "node_modules/@vitest/expect": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.10.tgz", + "integrity": "sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@standard-schema/spec": "^1.1.0", + "@types/chai": "^5.2.2", + "@vitest/spy": "4.1.10", + "@vitest/utils": "4.1.10", + "chai": "^6.2.2", + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/mocker": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.10.tgz", + "integrity": "sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/spy": "4.1.10", + "estree-walker": "^3.0.3", + "magic-string": "^0.30.21" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "msw": "^2.4.9", + "vite": "^6.0.0 || ^7.0.0 || ^8.0.0" + }, + "peerDependenciesMeta": { + "msw": { + "optional": true + }, + "vite": { + "optional": true + } + } + }, + "node_modules/@vitest/pretty-format": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.10.tgz", + "integrity": "sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/runner": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.10.tgz", + "integrity": "sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/utils": "4.1.10", + "pathe": "^2.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/snapshot": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.10.tgz", + "integrity": "sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "4.1.10", + "@vitest/utils": "4.1.10", + "magic-string": "^0.30.21", + "pathe": "^2.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/spy": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.10.tgz", + "integrity": "sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/utils": { + "version": "4.1.10", + "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.10.tgz", + "integrity": "sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "4.1.10", + "convert-source-map": "^2.0.0", + "tinyrainbow": "^3.1.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@webcontainer/env": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/@webcontainer/env/-/env-1.1.1.tgz", + "integrity": "sha512-6aN99yL695Hi9SuIk1oC88l9o0gmxL1nGWWQ/kNy81HigJ0FoaoTXpytCj6ItzgyCEwA9kF1wixsTuv5cjsgng==", + "dev": true, + "license": "MIT" + }, + "node_modules/acorn": { + "version": "8.18.0", + "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz", + "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==", + "dev": true, + "license": "MIT", + "bin": { + "acorn": "bin/acorn" + }, + "engines": { + "node": ">=0.4.0" + } + }, + "node_modules/agent-base": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "4" + }, + "engines": { + "node": ">= 6.0.0" + } + }, + "node_modules/aggregate-error": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz", + "integrity": "sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==", + "dev": true, + "license": "MIT", + "dependencies": { + "clean-stack": "^2.0.0", + "indent-string": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-escapes": { + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz", + "integrity": "sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "type-fest": "^0.21.3" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/ansi-escapes/node_modules/type-fest": { + "version": "0.21.3", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz", + "integrity": "sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==", + "dev": true, + "license": "(MIT OR CC0-1.0)", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-styles": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz", + "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/anymatch": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz", + "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==", + "dev": true, + "license": "ISC", + "dependencies": { + "normalize-path": "^3.0.0", + "picomatch": "^2.0.4" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/anymatch/node_modules/picomatch": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", + "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8.6" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } + }, + "node_modules/append-transform": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/append-transform/-/append-transform-2.0.0.tgz", + "integrity": "sha512-7yeyCEurROLQJFv5Xj4lEGTy0borxepjFv1g22oAdqFu//SrAlDl1O1Nxx15SH1RoliUml6p8dwJW9jvZughhg==", + "dev": true, + "license": "MIT", + "dependencies": { + "default-require-extensions": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/archy": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz", + "integrity": "sha512-Xg+9RwCg/0p32teKdGMPTPnVXKD0w3DfHnFTficozsAgsvq2XenPJq/MYpzzQ/v8zrOyJn6Ds39VA4JIDwFfqw==", + "dev": true, + "license": "MIT" + }, + "node_modules/argparse": { + "version": "1.0.10", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==", + "dev": true, + "license": "MIT", + "dependencies": { + "sprintf-js": "~1.0.2" + } + }, + "node_modules/aria-query": { + "version": "5.3.1", + "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.1.tgz", + "integrity": "sha512-Z/ZeOgVl7bcSYZ/u/rh0fOpvEpq//LZmdbkXyc7syVzjPAhfOa9ebsdTSjEBDU4vs5nC98Kfduj1uFo0qyET3g==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/assertion-error": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz", + "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + } + }, + "node_modules/ast-types": { + "version": "0.16.1", + "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.16.1.tgz", + "integrity": "sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==", + "dev": true, + "license": "MIT", + "dependencies": { + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/ast-v8-to-istanbul": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.5.tgz", + "integrity": "sha512-UPAgKJFSEGMWSDr3LX4tqnAb4f7KGT8O40Tyx8wbYmmZ/yn58lNCm8h3svs3eXgiGd5AXxz8NDOvXWvicq+rJA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.31", + "estree-walker": "^3.0.3", + "js-tokens": "^10.0.0" + } + }, + "node_modules/asynckit": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", + "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/axe-core": { + "version": "4.13.0", + "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.13.0.tgz", + "integrity": "sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==", + "dev": true, + "license": "MPL-2.0", + "engines": { + "node": ">=4" + } + }, + "node_modules/axios": { + "version": "1.19.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.19.0.tgz", + "integrity": "sha512-ht/iuYZXEjFxLH/Hkezgd7m6JKlHHXEUSneaDz8uZe1Gj5QZtCnpyDsckvAiEnT89OEbCLmnte4R4sn7P0EKFw==", + "dev": true, + "license": "MIT", + "dependencies": { + "follow-redirects": "^1.16.0", + "form-data": "^4.0.6", + "https-proxy-agent": "^5.0.1", + "proxy-from-env": "^2.1.0" + } + }, + "node_modules/axobject-query": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz", + "integrity": "sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/babel-jest": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-30.4.1.tgz", + "integrity": "sha512-fATAbM8piYxkiXQp3RBXmZHxZVNJZAVXXfyeyCN2Tida3+qJ8ea9UxhiJ2y4fLO90ZImKt6k9FlcH2+rLkJGhw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/transform": "30.4.1", + "@types/babel__core": "^7.20.5", + "babel-plugin-istanbul": "^7.0.1", + "babel-preset-jest": "30.4.0", + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "slash": "^3.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "@babel/core": "^7.11.0 || ^8.0.0-0" + } + }, + "node_modules/babel-plugin-istanbul": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-7.0.1.tgz", + "integrity": "sha512-D8Z6Qm8jCvVXtIRkBnqNHX0zJ37rQcFJ9u8WOS6tkYOsRdHBzypCstaxWiu5ZIlqQtviRYbgnRLSoCEvjqcqbA==", + "dev": true, + "license": "BSD-3-Clause", + "workspaces": [ + "test/babel-8" + ], + "dependencies": { + "@babel/helper-plugin-utils": "^7.0.0", + "@istanbuljs/load-nyc-config": "^1.0.0", + "@istanbuljs/schema": "^0.1.3", + "istanbul-lib-instrument": "^6.0.2", + "test-exclude": "^6.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/babel-plugin-jest-hoist": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-30.4.0.tgz", + "integrity": "sha512-9EdtWM/sSfXLOGLwSn+GS6pIXyBnL07/8gyJlwFXjWy4DxMOyItqyUT29d4lQiS380EZwYlX7/At4PgBS+m2aA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/babel__core": "^7.20.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/babel-preset-current-node-syntax": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/babel-preset-current-node-syntax/-/babel-preset-current-node-syntax-1.2.0.tgz", + "integrity": "sha512-E/VlAEzRrsLEb2+dv8yp3bo4scof3l9nR4lrld+Iy5NyVqgVYUJnDAmunkhPMisRI32Qc4iRiz425d8vM++2fg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/plugin-syntax-async-generators": "^7.8.4", + "@babel/plugin-syntax-bigint": "^7.8.3", + "@babel/plugin-syntax-class-properties": "^7.12.13", + "@babel/plugin-syntax-class-static-block": "^7.14.5", + "@babel/plugin-syntax-import-attributes": "^7.24.7", + "@babel/plugin-syntax-import-meta": "^7.10.4", + "@babel/plugin-syntax-json-strings": "^7.8.3", + "@babel/plugin-syntax-logical-assignment-operators": "^7.10.4", + "@babel/plugin-syntax-nullish-coalescing-operator": "^7.8.3", + "@babel/plugin-syntax-numeric-separator": "^7.10.4", + "@babel/plugin-syntax-object-rest-spread": "^7.8.3", + "@babel/plugin-syntax-optional-catch-binding": "^7.8.3", + "@babel/plugin-syntax-optional-chaining": "^7.8.3", + "@babel/plugin-syntax-private-property-in-object": "^7.14.5", + "@babel/plugin-syntax-top-level-await": "^7.14.5" + }, + "peerDependencies": { + "@babel/core": "^7.0.0 || ^8.0.0-0" + } + }, + "node_modules/babel-preset-jest": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-30.4.0.tgz", + "integrity": "sha512-lBY4jxsNmCnSiu7kquw8ZC9F4+XLMOKypT3RnNHPvU2Kpd4W0xaPuLr5ZkRyOsvLYAY4yaW1ZwTW4xB7NIiZzg==", + "dev": true, + "license": "MIT", + "dependencies": { + "babel-plugin-jest-hoist": "30.4.0", + "babel-preset-current-node-syntax": "^1.2.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "@babel/core": "^7.11.0 || ^8.0.0-beta.1" + } + }, + "node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "dev": true, + "license": "MIT" + }, + "node_modules/baseline-browser-mapping": { + "version": "2.11.16", + "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.16.tgz", + "integrity": "sha512-H/bNPUFHewJHyCTdjn1n3Pit5+2GmWT6mmeHImPX+8MA9NA6b67jO4gYmi4jTbCJb2otq34KMZnovndDPqJwhQ==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "baseline-browser-mapping": "dist/cli.cjs" + }, + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/brace-expansion": { + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/browserslist": { + "version": "4.28.8", + "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.8.tgz", + "integrity": "sha512-V2NpofLblG64mfOtSgDhOJESZEGogzDMBv/q+W6oc4LXWP/q75eOXoOaaOu1EOadB9U4Bwx/e0yzbvwKH8zalA==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/browserslist" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "baseline-browser-mapping": "^2.11.12", + "caniuse-lite": "^1.0.30001809", + "electron-to-chromium": "^1.5.402", + "node-releases": "^2.0.53", + "update-browserslist-db": "^1.3.0" + }, + "bin": { + "browserslist": "cli.js" + }, + "engines": { + "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7" + } + }, + "node_modules/bser": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz", + "integrity": "sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "node-int64": "^0.4.0" + } + }, + "node_modules/buffer-from": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz", + "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/bundle-name": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz", + "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "run-applescript": "^7.0.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/caching-transform": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/caching-transform/-/caching-transform-4.0.0.tgz", + "integrity": "sha512-kpqOvwXnjjN44D89K5ccQC+RUrsy7jB/XLlRrx0D7/2HNcTPqzsb6XgYoErwko6QsV184CA2YgS1fxDiiDZMWA==", + "dev": true, + "license": "MIT", + "dependencies": { + "hasha": "^5.0.0", + "make-dir": "^3.0.0", + "package-hash": "^4.0.0", + "write-file-atomic": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/caching-transform/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/caching-transform/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/caching-transform/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/caching-transform/node_modules/write-file-atomic": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz", + "integrity": "sha512-AvHcyZ5JnSfq3ioSyjrBkH9yW4m7Ayk8/9My/DD9onKeu/94fwrMocemO2QAJFAlnnDN+ZDS+ZjAR5ua1/PV/Q==", + "dev": true, + "license": "ISC", + "dependencies": { + "imurmurhash": "^0.1.4", + "is-typedarray": "^1.0.0", + "signal-exit": "^3.0.2", + "typedarray-to-buffer": "^3.1.5" + } + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/callsites": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", + "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/camelcase": { + "version": "5.3.1", + "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz", + "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/caniuse-lite": { + "version": "1.0.30001809", + "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001809.tgz", + "integrity": "sha512-xxWVywk6a6Arlk+hymeycyn/VgqEfLDxupvhH/xiY5SJ/18kmi9o6MiO320DCUzypORHLtvh0I4i04tUhCNHNQ==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/caniuse-lite" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "CC-BY-4.0" + }, + "node_modules/chai": { + "version": "6.2.2", + "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", + "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/chalk": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz", + "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.1.0", + "supports-color": "^7.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" + } + }, + "node_modules/chalk/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/char-regex": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/char-regex/-/char-regex-1.0.2.tgz", + "integrity": "sha512-kWWXztvZ5SBQV+eRgKFeh8q5sLuZY2+8WUIzlxWVTg+oGwY14qylx1KbKzHd8P6ZYkAg0xyIDU9JMHhyJMZ1jw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + } + }, + "node_modules/check-error": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/check-error/-/check-error-2.1.3.tgz", + "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 16" + } + }, + "node_modules/chokidar": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", + "integrity": "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==", + "dev": true, + "license": "MIT", + "dependencies": { + "readdirp": "^4.0.1" + }, + "engines": { + "node": ">= 14.16.0" + }, + "funding": { + "url": "https://paulmillr.com/funding/" + } + }, + "node_modules/ci-info": { + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/ci-info/-/ci-info-4.4.0.tgz", + "integrity": "sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/sibiraj-s" + } + ], + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/cjs-module-lexer": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.2.1.tgz", + "integrity": "sha512-Ca8swihM+/4yKecYHY52kgJd300hi2lADU/a1RxNTRe+RJ9jvqQlESpbz9DnG9mowez8qwXHB8qYdIUw9e+F5Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/clean-stack": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz", + "integrity": "sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/cliui": { + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz", + "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.2.0", + "strip-ansi": "^6.0.1", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/cliui/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/cliui/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/cliui/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/cliui/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/cliui/node_modules/wrap-ansi": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/clsx": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", + "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/co": { + "version": "4.6.0", + "resolved": "https://registry.npmjs.org/co/-/co-4.6.0.tgz", + "integrity": "sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==", + "dev": true, + "license": "MIT", + "engines": { + "iojs": ">= 1.0.0", + "node": ">= 0.12.0" + } + }, + "node_modules/collect-v8-coverage": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/collect-v8-coverage/-/collect-v8-coverage-1.0.3.tgz", + "integrity": "sha512-1L5aqIkwPfiodaMgQunkF1zRhNqifHBmtbbbxcr6yVxxBnliw4TDOW6NxpO8DJLgJ16OT+Y4ztZqP6p/FtXnAw==", + "dev": true, + "license": "MIT" + }, + "node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "dev": true, + "license": "MIT" + }, + "node_modules/combined-stream": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz", + "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==", + "dev": true, + "license": "MIT", + "dependencies": { + "delayed-stream": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/commander": { + "version": "12.1.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz", + "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/commondir": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz", + "integrity": "sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg==", + "dev": true, + "license": "MIT" + }, + "node_modules/concat-map": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==", + "dev": true, + "license": "MIT" + }, + "node_modules/convert-source-map": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", + "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==", + "dev": true, + "license": "MIT" + }, + "node_modules/cookie": { + "version": "0.7.2", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", + "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cross-spawn": { + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.1.0", + "shebang-command": "^2.0.0", + "which": "^2.0.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/css.escape": { + "version": "1.5.1", + "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz", + "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==", + "dev": true, + "license": "MIT" + }, + "node_modules/cwd": { + "version": "0.10.0", + "resolved": "https://registry.npmjs.org/cwd/-/cwd-0.10.0.tgz", + "integrity": "sha512-YGZxdTTL9lmLkCUTpg4j0zQ7IhRB5ZmqNBbGCl3Tg6MP/d5/6sY7L5mmTjzbc6JKgVZYiqTQTNhPFsbXNGlRaA==", + "dev": true, + "license": "MIT", + "dependencies": { + "find-pkg": "^0.1.2", + "fs-exists-sync": "^0.1.0" + }, + "engines": { + "node": ">=0.8" + } + }, + "node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/decamelize": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz", + "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/dedent": { + "version": "1.7.2", + "resolved": "https://registry.npmjs.org/dedent/-/dedent-1.7.2.tgz", + "integrity": "sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "babel-plugin-macros": "^3.1.0" + }, + "peerDependenciesMeta": { + "babel-plugin-macros": { + "optional": true + } + } + }, + "node_modules/dedent-js": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dedent-js/-/dedent-js-1.0.1.tgz", + "integrity": "sha512-OUepMozQULMLUmhxS95Vudo0jb0UchLimi3+pQ2plj61Fcy8axbP9hbiD4Sz6DPqn6XG3kfmziVfQ1rSys5AJQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/deep-eql": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-5.0.2.tgz", + "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/deepmerge": { + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", + "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/default-browser": { + "version": "5.5.1", + "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.1.tgz", + "integrity": "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "bundle-name": "^4.1.0", + "default-browser-id": "^5.0.0" + }, + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/default-browser-id": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz", + "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/default-require-extensions": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-3.0.1.tgz", + "integrity": "sha512-eXTJmRbm2TIt9MgWTsOH1wEuhew6XGZcMeGKCtLedIg/NCsg1iBePXkceTdK4Fii7pzmN9tGsZhKzZ4h7O/fxw==", + "dev": true, + "license": "MIT", + "dependencies": { + "strip-bom": "^4.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/define-lazy-prop": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz", + "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/delayed-stream": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz", + "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.4.0" + } + }, + "node_modules/dequal": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", + "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/detect-libc": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", + "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=8" + } + }, + "node_modules/detect-newline": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz", + "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/devalue": { + "version": "5.9.0", + "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.0.tgz", + "integrity": "sha512-RWrqdArjvPbsATEhOPUo6Wndc/iWnkWKlhIrdlF3zMMYo/c3CVtoaVAyLtWxz5h8nSlkHzxnzV2uLydPXmtF+A==", + "dev": true, + "license": "MIT" + }, + "node_modules/diffable-html": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/diffable-html/-/diffable-html-4.1.0.tgz", + "integrity": "sha512-++kyNek+YBLH8cLXS+iTj/Hiy2s5qkRJEJ8kgu/WHbFrVY2vz9xPFUT+fii2zGF0m1CaojDlQJjkfrCt7YWM1g==", + "dev": true, + "license": "MIT", + "dependencies": { + "htmlparser2": "^3.9.2" + } + }, + "node_modules/dom-accessibility-api": { + "version": "0.5.16", + "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz", + "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==", + "dev": true, + "license": "MIT" + }, + "node_modules/dom-serializer": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz", + "integrity": "sha512-2/xPb3ORsQ42nHYiSunXkDjPLBaEj/xTwUO4B7XCZQTRk7EBtTOPaygh10YAAh2OI1Qrp6NWfpAhzswj0ydt9g==", + "dev": true, + "license": "MIT", + "dependencies": { + "domelementtype": "^2.0.1", + "entities": "^2.0.0" + } + }, + "node_modules/dom-serializer/node_modules/domelementtype": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz", + "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/fb55" + } + ], + "license": "BSD-2-Clause" + }, + "node_modules/dom-serializer/node_modules/entities": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz", + "integrity": "sha512-p92if5Nz619I0w+akJrLZH0MX0Pb5DX39XOwQTtXSdQQOaYH03S1uIQp4mhOZtAXrxq4ViO67YTiLBo2638o9A==", + "dev": true, + "license": "BSD-2-Clause", + "funding": { + "url": "https://github.com/fb55/entities?sponsor=1" + } + }, + "node_modules/domelementtype": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz", + "integrity": "sha512-BSKB+TSpMpFI/HOxCNr1O8aMOTZ8hT3pM3GQ0w/mWRmkhEDSFJkkyzz4XQsBV44BChwGkrDfMyjVD0eA2aFV3w==", + "dev": true, + "license": "BSD-2-Clause" + }, + "node_modules/domhandler": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz", + "integrity": "sha512-JiK04h0Ht5u/80fdLMCEmV4zkNh2BcoMFBmZ/91WtYZ8qVXSKjiw7fXMgFPnHcSZgOo3XdinHvmnDUeMf5R4wA==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "domelementtype": "1" + } + }, + "node_modules/domutils": { + "version": "1.7.0", + "resolved": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz", + "integrity": "sha512-Lgd2XcJ/NjEw+7tFvfKxOzCYKZsdct5lczQ2ZaQY8Djz7pfAD3Gbp8ySJWtreII/vDlMVmxwa6pHmdxIYgttDg==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "dom-serializer": "0", + "domelementtype": "1" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "dev": true, + "license": "MIT" + }, + "node_modules/electron-to-chromium": { + "version": "1.5.412", + "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.412.tgz", + "integrity": "sha512-z4rMe3esBzlzovKHj4gxJnsCGZRK5l4baUvm+gCGJBPE+gsyUMKsuU9tnEUtI1dOebXz1ytAPGjvXhmQ7rIPwA==", + "dev": true, + "license": "ISC" + }, + "node_modules/emittery": { + "version": "0.13.1", + "resolved": "https://registry.npmjs.org/emittery/-/emittery-0.13.1.tgz", + "integrity": "sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sindresorhus/emittery?sponsor=1" + } + }, + "node_modules/emoji-regex": { + "version": "9.2.2", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", + "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", + "dev": true, + "license": "MIT" + }, + "node_modules/entities": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz", + "integrity": "sha512-f2LZMYl1Fzu7YSBKg+RoROelpOaNrcGmE9AZubeDfrCEia483oW4MI4VyFd5VNHIgQ/7qm1I0wUHK1eJnn2y2w==", + "dev": true, + "license": "BSD-2-Clause" + }, + "node_modules/environment": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/environment/-/environment-1.1.0.tgz", + "integrity": "sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/error-ex": { + "version": "1.3.4", + "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz", + "integrity": "sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-arrayish": "^0.2.1" + } + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-module-lexer": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.1.tgz", + "integrity": "sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==", + "dev": true, + "license": "MIT" + }, + "node_modules/es-object-atoms": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz", + "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-set-tostringtag": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz", + "integrity": "sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.6", + "has-tostringtag": "^1.0.2", + "hasown": "^2.0.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es6-error": { + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/es6-error/-/es6-error-4.1.1.tgz", + "integrity": "sha512-Um/+FxMr9CISWh0bi5Zv0iOD+4cFh5qLeks1qhAopKVAJw3drgKbKySikp7wGhDL0HPeaja0P5ULZrxLkniUVg==", + "dev": true, + "license": "MIT" + }, + "node_modules/esbuild": { + "version": "0.28.2", + "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz", + "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "bin": { + "esbuild": "bin/esbuild" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "@esbuild/aix-ppc64": "0.28.2", + "@esbuild/android-arm": "0.28.2", + "@esbuild/android-arm64": "0.28.2", + "@esbuild/android-x64": "0.28.2", + "@esbuild/darwin-arm64": "0.28.2", + "@esbuild/darwin-x64": "0.28.2", + "@esbuild/freebsd-arm64": "0.28.2", + "@esbuild/freebsd-x64": "0.28.2", + "@esbuild/linux-arm": "0.28.2", + "@esbuild/linux-arm64": "0.28.2", + "@esbuild/linux-ia32": "0.28.2", + "@esbuild/linux-loong64": "0.28.2", + "@esbuild/linux-mips64el": "0.28.2", + "@esbuild/linux-ppc64": "0.28.2", + "@esbuild/linux-riscv64": "0.28.2", + "@esbuild/linux-s390x": "0.28.2", + "@esbuild/linux-x64": "0.28.2", + "@esbuild/netbsd-arm64": "0.28.2", + "@esbuild/netbsd-x64": "0.28.2", + "@esbuild/openbsd-arm64": "0.28.2", + "@esbuild/openbsd-x64": "0.28.2", + "@esbuild/openharmony-arm64": "0.28.2", + "@esbuild/sunos-x64": "0.28.2", + "@esbuild/win32-arm64": "0.28.2", + "@esbuild/win32-ia32": "0.28.2", + "@esbuild/win32-x64": "0.28.2" + } + }, + "node_modules/escalade": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz", + "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/escape-string-regexp": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz", + "integrity": "sha512-UpzcLCXolUWcNu5HtVMHYdXJjArjsF9C0aNnquZYY4uW/Vu0miy5YoWvbV345HauVvcAUnpRuhMMcqTcGOY2+w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/esm-env": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz", + "integrity": "sha512-Epxrv+Nr/CaL4ZcFGPJIYLWFom+YeV1DqMLHJoEd9SYRxNbaFruBwfEX/kkHUJf55j2+TUbmDcmuilbP1TmXHA==", + "dev": true, + "license": "MIT" + }, + "node_modules/esprima": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", + "dev": true, + "license": "BSD-2-Clause", + "bin": { + "esparse": "bin/esparse.js", + "esvalidate": "bin/esvalidate.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/esrap": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.3.0.tgz", + "integrity": "sha512-GQ/7RN8uOtEfNpzZzBMTzW9JBcX42oaSVtPzdF+6cEL8pqIL094iUpr9jzYGn4O4P/1S60dJ6izyT8F4LYARng==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.4.15" + }, + "peerDependencies": { + "@typescript-eslint/types": "^8.2.0" + }, + "peerDependenciesMeta": { + "@typescript-eslint/types": { + "optional": true + } + } + }, + "node_modules/estree-walker": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz", + "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0" + } + }, + "node_modules/execa": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz", + "integrity": "sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==", + "dev": true, + "license": "MIT", + "dependencies": { + "cross-spawn": "^7.0.3", + "get-stream": "^6.0.0", + "human-signals": "^2.1.0", + "is-stream": "^2.0.0", + "merge-stream": "^2.0.0", + "npm-run-path": "^4.0.1", + "onetime": "^5.1.2", + "signal-exit": "^3.0.3", + "strip-final-newline": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sindresorhus/execa?sponsor=1" + } + }, + "node_modules/execa/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/exit": { + "version": "0.1.2", + "resolved": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz", + "integrity": "sha512-Zk/eNKV2zbjpKzrsQ+n1G6poVbErQxJ0LBOJXaKZ1EViLzH+hrLu9cdXI4zw9dBQJslwBEpbQ2P1oS7nDxs6jQ==", + "dev": true, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/exit-x": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/exit-x/-/exit-x-0.2.2.tgz", + "integrity": "sha512-+I6B/IkJc1o/2tiURyz/ivu/O0nKNEArIUB5O7zBrlDVJr22SCLH3xTeEry428LvFhRzIA1g8izguxJ/gbNcVQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/expand-tilde": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz", + "integrity": "sha512-rtmc+cjLZqnu9dSYosX9EWmSJhTwpACgJQTfj4hgg2JjOD/6SIQalZrt4a3aQeh++oNxkazcaxrhPUj6+g5G/Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "os-homedir": "^1.0.1" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/expect": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/expect/-/expect-30.4.1.tgz", + "integrity": "sha512-PMARsyh/JtqC20HoGqlFcIlQAyqUtW4PlI1rup1uhYJtKuwAjbvWi3GQMAn+STdHum/dk8xrKfUM1+5SAwpolA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/expect-utils": "30.4.1", + "@jest/get-type": "30.1.0", + "jest-matcher-utils": "30.4.1", + "jest-message-util": "30.4.1", + "jest-mock": "30.4.1", + "jest-util": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/expect-playwright": { + "version": "0.8.0", + "resolved": "https://registry.npmjs.org/expect-playwright/-/expect-playwright-0.8.0.tgz", + "integrity": "sha512-+kn8561vHAY+dt+0gMqqj1oY+g5xWrsuGMk4QGxotT2WS545nVqqjs37z6hrYfIuucwqthzwJfCJUEYqixyljg==", + "deprecated": "⚠️ The 'expect-playwright' package is deprecated. The Playwright core assertions (via @playwright/test) now cover the same functionality. Please migrate to built-in expect. See https://playwright.dev/docs/test-assertions for migration.", + "dev": true, + "license": "MIT" + }, + "node_modules/expect-type": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz", + "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=12.0.0" + } + }, + "node_modules/fast-json-stable-stringify": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz", + "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==", + "dev": true, + "license": "MIT" + }, + "node_modules/fb-watchman": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz", + "integrity": "sha512-p5161BqbuCaSnB8jIbzQHOlpgsPmK5rJVDfDKO91Axs5NC1uu3HRQm6wt9cd9/+GtQQIO53JdGXXoyDpTAsgYA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "bser": "2.1.1" + } + }, + "node_modules/fdir": { + "version": "6.5.0", + "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", + "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12.0.0" + }, + "peerDependencies": { + "picomatch": "^3 || ^4" + }, + "peerDependenciesMeta": { + "picomatch": { + "optional": true + } + } + }, + "node_modules/find-cache-dir": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.2.tgz", + "integrity": "sha512-wXZV5emFEjrridIgED11OoUKLxiYjAcqot/NJdAkOhlJ+vGzwhOAfcG5OX1jP+S0PcjEn8bdMJv+g2jwQ3Onig==", + "dev": true, + "license": "MIT", + "dependencies": { + "commondir": "^1.0.1", + "make-dir": "^3.0.2", + "pkg-dir": "^4.1.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/avajs/find-cache-dir?sponsor=1" + } + }, + "node_modules/find-cache-dir/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/find-cache-dir/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/find-file-up": { + "version": "0.1.3", + "resolved": "https://registry.npmjs.org/find-file-up/-/find-file-up-0.1.3.tgz", + "integrity": "sha512-mBxmNbVyjg1LQIIpgO8hN+ybWBgDQK8qjht+EbrTCGmmPV/sc7RF1i9stPTD6bpvXZywBdrwRYxhSdJv867L6A==", + "dev": true, + "license": "MIT", + "dependencies": { + "fs-exists-sync": "^0.1.0", + "resolve-dir": "^0.1.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/find-pkg": { + "version": "0.1.2", + "resolved": "https://registry.npmjs.org/find-pkg/-/find-pkg-0.1.2.tgz", + "integrity": "sha512-0rnQWcFwZr7eO0513HahrWafsc3CTFioEB7DRiEYCUM/70QXSY8f3mCST17HXLcPvEhzH/Ty/Bxd72ZZsr/yvw==", + "dev": true, + "license": "MIT", + "dependencies": { + "find-file-up": "^0.1.2" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/find-process": { + "version": "1.4.11", + "resolved": "https://registry.npmjs.org/find-process/-/find-process-1.4.11.tgz", + "integrity": "sha512-mAOh9gGk9WZ4ip5UjV0o6Vb4SrfnAmtsFNzkMRH9HQiFXVQnDyQFrSHTK5UoG6E+KV+s+cIznbtwpfN41l2nFA==", + "dev": true, + "license": "MIT", + "dependencies": { + "chalk": "~4.1.2", + "commander": "^12.1.0", + "loglevel": "^1.9.2" + }, + "bin": { + "find-process": "bin/find-process.js" + } + }, + "node_modules/find-up": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz", + "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==", + "dev": true, + "license": "MIT", + "dependencies": { + "locate-path": "^5.0.0", + "path-exists": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/follow-redirects": { + "version": "1.16.0", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz", + "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==", + "dev": true, + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/RubenVerborgh" + } + ], + "license": "MIT", + "engines": { + "node": ">=4.0" + }, + "peerDependenciesMeta": { + "debug": { + "optional": true + } + } + }, + "node_modules/foreground-child": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz", + "integrity": "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==", + "dev": true, + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.6", + "signal-exit": "^4.0.1" + }, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/form-data": { + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", + "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "asynckit": "^0.4.0", + "combined-stream": "^1.0.8", + "es-set-tostringtag": "^2.1.0", + "hasown": "^2.0.4", + "mime-types": "^2.1.35" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/fromentries": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/fromentries/-/fromentries-1.3.2.tgz", + "integrity": "sha512-cHEpEQHUg0f8XdtZCc2ZAhrHzKzT0MrFUTcvx+hfxYu7rGMDc5SKoXFh+n4YigxsHXRzc6OrCshdR1bWH6HHyg==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/fs-exists-sync": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz", + "integrity": "sha512-cR/vflFyPZtrN6b38ZyWxpWdhlXrzZEBawlpBQMq7033xVY7/kg0GDMBK5jg8lDYQckdJ5x/YC88lM3C7VMsLg==", "dev": true, "license": "MIT", - "optional": true, - "dependencies": { - "@emnapi/wasi-threads": "1.2.2", - "tslib": "^2.4.0" + "engines": { + "node": ">=0.10.0" } }, - "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/runtime": { - "version": "1.11.0", - "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.0.tgz", - "integrity": "sha512-55coeOFKHv1ywEcUXJtWU5f+Jr/W5tZDvZig8DLKSwUN1JpROQ4rk/SNOQiFWmaR/VKF4zuFyW1B8JduOSv6Pg==", + "node_modules/fs.realpath": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==", "dev": true, - "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" - } + "license": "ISC" }, - "node_modules/@oxc-resolver/binding-wasm32-wasi/node_modules/@emnapi/wasi-threads": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz", - "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==", + "node_modules/fsevents": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", + "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", "dev": true, + "hasInstallScript": true, "license": "MIT", "optional": true, - "dependencies": { - "tslib": "^2.4.0" + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" } }, - "node_modules/@oxc-resolver/binding-win32-arm64-msvc": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-11.21.2.tgz", - "integrity": "sha512-iWx25CBEgH49iE9q5coEGI/jb1jl5kkCY9z6U5Og67xCkQ/WFMDc2J5U78+AE91SUxM2NqSLhJC8/PLfWnImww==", - "cpu": [ - "arm64" - ], + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ] + "funding": { + "url": "https://github.com/sponsors/ljharb" + } }, - "node_modules/@oxc-resolver/binding-win32-x64-msvc": { - "version": "11.21.2", - "resolved": "https://registry.npmjs.org/@oxc-resolver/binding-win32-x64-msvc/-/binding-win32-x64-msvc-11.21.2.tgz", - "integrity": "sha512-VPoCAhKvCQTlG7vxqaBXcmuvbh77BfnGXj8g0pbvVXpm1F/R8rDVwqIWcEbMzrI1JvJlm8v7T9uMVQb6UctMRg==", - "cpu": [ - "x64" - ], + "node_modules/gensync": { + "version": "1.0.0-beta.2", + "resolved": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz", + "integrity": "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ] + "engines": { + "node": ">=6.9.0" + } }, - "node_modules/@polka/url": { - "version": "1.0.0-next.29", - "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", - "integrity": "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==", + "node_modules/get-caller-file": { + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz", + "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==", "dev": true, - "license": "MIT" + "license": "ISC", + "engines": { + "node": "6.* || 8.* || >= 10.*" + } }, - "node_modules/@rolldown/binding-android-arm64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.2.tgz", - "integrity": "sha512-l7x215OGvo1s52JWmR8U/DAVzEDWBCIbTm28aeJV/WDTSHgcKXaZTuBT0hJMs5NggilfJTW3clZVvd24yfKJxA==", - "cpu": [ - "arm64" - ], + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "android" - ], + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-darwin-arm64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.2.tgz", - "integrity": "sha512-9u9Xv6c1AJZT0FfwH5vrMG5Jjcwhc1MlyrPu0XfTqkzsmqfks2M6W/o5XwAJgVVN/jHpqqngC1WevHKKTIUtIA==", - "cpu": [ - "arm64" - ], + "node_modules/get-package-type": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz", + "integrity": "sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8.0.0" } }, - "node_modules/@rolldown/binding-darwin-x64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.2.tgz", - "integrity": "sha512-9W1mbGZAfW3oqd85bhBkmpyHCCzL1TeG/zFFP3vg7b0rlly8cxOcre5nXwz+LHazCwac2MNWgPdPCHndABjpWQ==", - "cpu": [ - "x64" - ], + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" } }, - "node_modules/@rolldown/binding-freebsd-x64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.2.tgz", - "integrity": "sha512-0p1lhiCSCyaerFwtrdZQUx7NqGk6LQnaRKWX7tFQqwQgvX0rjM15cIkm3pax1UpEakK14C4mOxx/jSqCBdBRqQ==", - "cpu": [ - "x64" - ], + "node_modules/get-stream": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz", + "integrity": "sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "freebsd" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@rolldown/binding-linux-arm-gnueabihf": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.2.tgz", - "integrity": "sha512-e+cOJXrJ2L3zx6YzqPg+f6Wbk3V1cKB8bOhbaYdVYN3DdquzNdRAmrbETz1qnt5yp/c7JNlNjmITiA2cVneQ7w==", - "cpu": [ - "arm" - ], + "node_modules/glob": { + "version": "10.5.0", + "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz", + "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "foreground-child": "^3.1.0", + "jackspeak": "^3.1.2", + "minimatch": "^9.0.4", + "minipass": "^7.1.2", + "package-json-from-dist": "^1.0.0", + "path-scurry": "^1.11.1" + }, + "bin": { + "glob": "dist/esm/bin.mjs" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/global-modules": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz", + "integrity": "sha512-JeXuCbvYzYXcwE6acL9V2bAOeSIGl4dD+iwLY9iUx2VBJJ80R18HCn+JCwHM9Oegdfya3lEkGCdaRkSyc10hDA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "global-prefix": "^0.1.4", + "is-windows": "^0.2.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=0.10.0" } }, - "node_modules/@rolldown/binding-linux-arm64-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.2.tgz", - "integrity": "sha512-JsSMsj6sNat/MuhG5fnBD7QgbtpHKVe30x5/bAVirDHdhoQRXJkF6xc0Jqk8O4fiCUQAzMOoH9wZi3m60c8wtg==", - "cpu": [ - "arm64" - ], + "node_modules/global-prefix": { + "version": "0.1.5", + "resolved": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz", + "integrity": "sha512-gOPiyxcD9dJGCEArAhF4Hd0BAqvAe/JzERP7tYumE4yIkmIedPUVXcJFWbV3/p/ovIIvKjkrTk+f1UVkq7vvbw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "homedir-polyfill": "^1.0.0", + "ini": "^1.3.4", + "is-windows": "^0.2.0", + "which": "^1.2.12" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=0.10.0" } }, - "node_modules/@rolldown/binding-linux-arm64-musl": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.2.tgz", - "integrity": "sha512-B5G/zJdHaoJn9vD50eGHWkiWfmq8Uhi3IiLPJTzmZTrAalk1bztUikSXo0qga18ibE0IXboyeMUnhPjhAJ45wQ==", - "cpu": [ - "arm64" - ], + "node_modules/global-prefix/node_modules/which": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz", + "integrity": "sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "which": "bin/which" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-linux-ppc64-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.2.tgz", - "integrity": "sha512-6mC/awzKka8W6EoekjegpfGkjz8jXWDX63pqu/HYVpyKtZfu65Jsh4QAH3Kej3CAv/c1oGX7psTmFEbr0mDxLA==", - "cpu": [ - "ppc64" - ], + "node_modules/graceful-fs": { + "version": "4.2.11", + "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", + "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/has-flag": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", + "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" } }, - "node_modules/@rolldown/binding-linux-s390x-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.2.tgz", - "integrity": "sha512-412MX9fJLdA1IK28EZnc8jYv2HRTleOZgfLQumJ5zy7OeJLZlg/CETwFaXjNmGVxG51cFHpKLqb5LKvBC+HsHA==", - "cpu": [ - "s390x" - ], + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-linux-x64-gnu": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.2.tgz", - "integrity": "sha512-Q/+HI/ToJafZ1iCqGgVQXUEkIjufHCTF0gBQ2a5o3cg7GJ2h0qyq3nvvSmU+bGda2/7ygXpTY4TM6gO9OhQ0ZA==", - "cpu": [ - "x64" - ], + "node_modules/has-tostringtag": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz", + "integrity": "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "has-symbols": "^1.0.3" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/@rolldown/binding-linux-x64-musl": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.2.tgz", - "integrity": "sha512-ZKp/w41n6wCvxzxQHtQSbuphfX3Y4cCvbjkKHusrLx4lh+JWLTU7StSltO/DKARISzbj368d+qUaCjI8K2wzXw==", - "cpu": [ - "x64" - ], + "node_modules/hasha": { + "version": "5.2.2", + "resolved": "https://registry.npmjs.org/hasha/-/hasha-5.2.2.tgz", + "integrity": "sha512-Hrp5vIK/xr5SkeN2onO32H0MgNZ0f17HRNH39WfL0SYUNOTZ5Lz1TJ8Pajo/87dYGEFlLMm7mIc/k/s6Bvz9HQ==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "linux" - ], + "dependencies": { + "is-stream": "^2.0.0", + "type-fest": "^0.8.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@rolldown/binding-openharmony-arm64": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.2.tgz", - "integrity": "sha512-pxE6xD4KS3eAROkKK5yrhB9/3+vhlhVGMvlQLbdpzrBGDbKrnzx3RLwPaHvasLo6jgaiBLn7e04Df9C4tYhjmA==", - "cpu": [ - "arm64" - ], + "node_modules/hasha/node_modules/type-fest": { + "version": "0.8.1", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz", + "integrity": "sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==", "dev": true, - "license": "MIT", - "optional": true, - "os": [ - "openharmony" - ], + "license": "(MIT OR CC0-1.0)", "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=8" } }, - "node_modules/@rolldown/binding-win32-arm64-msvc": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.2.tgz", - "integrity": "sha512-4MqEue5re+xIZzAWsB8sj0P1kqZySWqIuN4t6QaIO/YA6SFwySOLruvWQFzfmqk8LBK2P30KCSJwf6mJCZZ5/A==", - "cpu": [ - "arm64" - ], + "node_modules/hasown": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "function-bind": "^1.1.2" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">= 0.4" } }, - "node_modules/@rolldown/binding-win32-x64-msvc": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.2.tgz", - "integrity": "sha512-NweNxxD0Nf9t8v7kodun45Ijp3EIwYY+uydPP6qBEYvfBqhIjN6dZMzlQja3tqX/aLs3F3Uz+AxDpKgRhpOZQg==", - "cpu": [ - "x64" - ], + "node_modules/homedir-polyfill": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.3.tgz", + "integrity": "sha512-eSmmWE5bZTK2Nou4g0AI3zZ9rswp7GRKoKXS1BLUkvPviOqs4YTN1djQIqrXy9k5gEtdLPy86JjRwsNM9tnDcA==", "dev": true, "license": "MIT", - "optional": true, - "os": [ - "win32" - ], + "dependencies": { + "parse-passwd": "^1.0.0" + }, "engines": { - "node": "^20.19.0 || >=22.12.0" + "node": ">=0.10.0" } }, - "node_modules/@rolldown/pluginutils": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", - "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "node_modules/html-escaper": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz", + "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==", "dev": true, "license": "MIT" }, - "node_modules/@standard-schema/spec": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz", - "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "node_modules/htmlparser2": { + "version": "3.10.1", + "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz", + "integrity": "sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "domelementtype": "^1.3.1", + "domhandler": "^2.3.0", + "domutils": "^1.5.1", + "entities": "^1.1.1", + "inherits": "^2.0.1", + "readable-stream": "^3.1.1" + } }, - "node_modules/@storybook/addon-a11y": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/addon-a11y/-/addon-a11y-10.5.10.tgz", - "integrity": "sha512-RpRQV5xUbrl6hCiNrd5FSMIo6pnRZ0VZxWvEW/ASLcreGkKUW5jl2AeLCe5YROE2i80s/dU+6VPzOYKrwWNFbQ==", + "node_modules/https-proxy-agent": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==", "dev": true, "license": "MIT", "dependencies": { - "@storybook/global": "^5.0.0", - "axe-core": "^4.2.0" + "agent-base": "6", + "debug": "4" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" - }, - "peerDependencies": { - "storybook": "^10.5.10" + "engines": { + "node": ">= 6" } }, - "node_modules/@storybook/builder-vite": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-10.5.10.tgz", - "integrity": "sha512-O4GgIP0tKLRueom3EmU3OaBUHKjNYj+jkOvmTIkn3PYTiWVkCuHqSKEs4ADvRyaQuLH+peHhFe4JtkNC9KbtrQ==", + "node_modules/human-signals": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz", + "integrity": "sha512-B4FFZ6q/T2jhhksgkbEW3HBvWIfDW85snkQgawt07S7J5QXTk6BkNV+0yAeZrM5QpMAdYlocGoljn0sJ/WQkFw==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=10.17.0" + } + }, + "node_modules/import-local": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/import-local/-/import-local-3.2.0.tgz", + "integrity": "sha512-2SPlun1JUPWoM6t3F0dw0FkCF/jWY8kttcY4f599GLTSjh2OCuuhdTkJQsEcZzBqbXZGKMK2OqW1oZsjtf/gQA==", "dev": true, "license": "MIT", "dependencies": { - "@storybook/csf-plugin": "10.5.10", - "ts-dedent": "^2.0.0" + "pkg-dir": "^4.2.0", + "resolve-cwd": "^3.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" + "bin": { + "import-local-fixture": "fixtures/cli.js" }, - "peerDependencies": { - "storybook": "^10.5.10", - "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@storybook/csf-plugin": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-10.5.10.tgz", - "integrity": "sha512-TaCLBrqVEr767+w58QDotDUiCTuE5cyRJuRcDlsKQyUIyGBv+lYD3lu8wBiVCYxgIjB/gu9HmqiC+0yx1rHzaw==", + "node_modules/imurmurhash": { + "version": "0.1.4", + "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz", + "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.8.19" + } + }, + "node_modules/indent-string": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", + "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", "dev": true, "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/inflight": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==", + "deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.", + "dev": true, + "license": "ISC", "dependencies": { - "unplugin": "^2.3.5" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" + "once": "^1.3.0", + "wrappy": "1" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/ini": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", + "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", + "dev": true, + "license": "ISC" + }, + "node_modules/is-arrayish": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz", + "integrity": "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==", + "dev": true, + "license": "MIT" + }, + "node_modules/is-docker": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz", + "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==", + "dev": true, + "license": "MIT", + "bin": { + "is-docker": "cli.js" }, - "peerDependencies": { - "esbuild": "*", - "rollup": "*", - "storybook": "^10.5.10", - "vite": "*", - "webpack": "*" + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" }, - "peerDependenciesMeta": { - "esbuild": { - "optional": true - }, - "rollup": { - "optional": true - }, - "vite": { - "optional": true - }, - "webpack": { - "optional": true - } + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@storybook/global": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/@storybook/global/-/global-5.0.0.tgz", - "integrity": "sha512-FcOqPAXACP0I3oJ/ws6/rrPT9WGhu915Cg8D02a9YxLo0DE9zI+a9A5gRGvmQ09fiWPukqI8ZAEoQEdWUKMQdQ==", + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", "dev": true, - "license": "MIT" + "license": "MIT", + "engines": { + "node": ">=8" + } }, - "node_modules/@storybook/icons": { + "node_modules/is-generator-fn": { "version": "2.1.0", - "resolved": "https://registry.npmjs.org/@storybook/icons/-/icons-2.1.0.tgz", - "integrity": "sha512-Fxh9vYpX9bQqFeHRiY8h2ApeRGDzRSMLwJwNZ/AIRqnyOKHxRKL+yFe+ctEkVJmuptRE9u1Hrn8ZZNHyfDKKNg==", + "resolved": "https://registry.npmjs.org/is-generator-fn/-/is-generator-fn-2.1.0.tgz", + "integrity": "sha512-cTIB4yPYL/Grw0EaSzASzg6bBy9gqCofvWN8okThAYIxKJZC+udlRAmGbM0XLeniEJSs8uEgHPGuHSe1XsOLSQ==", "dev": true, "license": "MIT", - "peerDependencies": { - "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" + "engines": { + "node": ">=6" } }, - "node_modules/@storybook/svelte": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/svelte/-/svelte-10.5.10.tgz", - "integrity": "sha512-jSEv1q5fJYTrhz7/DBYNc5gMmRJ8SyyyMikSvN4S6juuS0eJTZWGd62UpDH3ClfT/TQmTjTJH4HeEnbzJ+VrCA==", + "node_modules/is-inside-container": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz", + "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==", "dev": true, "license": "MIT", "dependencies": { - "ts-dedent": "^2.0.0", - "type-fest": "^5.6.0" + "is-docker": "^3.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" + "bin": { + "is-inside-container": "cli.js" }, - "peerDependencies": { - "storybook": "^10.5.10", - "svelte": "^5.0.0" + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@storybook/svelte-vite": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/svelte-vite/-/svelte-vite-10.5.10.tgz", - "integrity": "sha512-yLqceMBE89p0L9vf9y6zE0ELeRxwfAU7ci3Hry7NEZkxQ4aYsuClUqCmlCLNrAI7nvoVK8v6fp82KgCcods95A==", + "node_modules/is-reference": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.3.tgz", + "integrity": "sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==", "dev": true, "license": "MIT", "dependencies": { - "@storybook/builder-vite": "10.5.10", - "@storybook/svelte": "10.5.10", - "magic-string": "^0.30.0", - "svelte2tsx": "^0.7.55", - "typescript": "^4.9.4 || ^5.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" - }, - "peerDependencies": { - "@sveltejs/vite-plugin-svelte": "^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0", - "storybook": "^10.5.10", - "svelte": "^5.0.0", - "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + "@types/estree": "^1.0.6" } - }, - "node_modules/@storybook/sveltekit": { - "version": "10.5.10", - "resolved": "https://registry.npmjs.org/@storybook/sveltekit/-/sveltekit-10.5.10.tgz", - "integrity": "sha512-sPHfTp1yitR+kftQV/0a7dDw3q4/zTXvBeWjgUC8DKkUY7NuFDRUOf00zE086B4vSXSZukf9484VyO+owBkLCQ==", + }, + "node_modules/is-stream": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz", + "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==", "dev": true, "license": "MIT", - "dependencies": { - "@storybook/builder-vite": "10.5.10", - "@storybook/svelte": "10.5.10", - "@storybook/svelte-vite": "10.5.10" + "engines": { + "node": ">=8" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/storybook" - }, - "peerDependencies": { - "storybook": "^10.5.10", - "svelte": "^5.0.0", - "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@sveltejs/acorn-typescript": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@sveltejs/acorn-typescript/-/acorn-typescript-1.0.11.tgz", - "integrity": "sha512-LFuZUkjJ9iF7JZye/aG5XM0SFcQ5VyL0oVX4WJ9dc0Va3R3s0OauX1BESVCb+YN/ol8TAfqGDDAQsTG627Y5kw==", + "node_modules/is-typedarray": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz", + "integrity": "sha512-cyA56iCMHAh5CdzjJIa4aohJyeO1YbwLi3Jc35MmRU6poroFjIGZzUzupGiRPOjgHg9TLu43xbpwXk523fMxKA==", "dev": true, - "license": "MIT", - "peerDependencies": { - "acorn": "^8.9.0" - } + "license": "MIT" }, - "node_modules/@sveltejs/adapter-static": { - "version": "3.0.10", - "resolved": "https://registry.npmjs.org/@sveltejs/adapter-static/-/adapter-static-3.0.10.tgz", - "integrity": "sha512-7D9lYFWJmB7zxZyTE/qxjksvMqzMuYrrsyh1f4AlZqeZeACPRySjbC3aFiY55wb1tWUaKOQG9PVbm74JcN2Iew==", + "node_modules/is-windows": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz", + "integrity": "sha512-n67eJYmXbniZB7RF4I/FTjK1s6RPOCTxhYrVYLRaCt3lF0mpWZPKr3T2LSZAqyjQsxR2qMmGYXXzK0YWwcPM1Q==", "dev": true, "license": "MIT", - "peerDependencies": { - "@sveltejs/kit": "^2.0.0" + "engines": { + "node": ">=0.10.0" } }, - "node_modules/@sveltejs/kit": { - "version": "2.70.2", - "resolved": "https://registry.npmjs.org/@sveltejs/kit/-/kit-2.70.2.tgz", - "integrity": "sha512-RzRoRpuR2KXqc5yMO0akQHDZeT4AslOlznGITURsqHaVbtyYP4Wn3eE3gxj9JcDyNYO0crkxhdwFHc+2vkVm6w==", + "node_modules/is-wsl": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz", + "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==", "dev": true, "license": "MIT", "dependencies": { - "@standard-schema/spec": "^1.0.0", - "@sveltejs/acorn-typescript": "^1.0.9", - "@types/cookie": "^0.6.0", - "acorn": "^8.16.0", - "cookie": "^0.6.0", - "devalue": "^5.8.1", - "esm-env": "^1.2.2", - "kleur": "^4.1.5", - "magic-string": "^0.30.5", - "mrmime": "^2.0.0", - "set-cookie-parser": "^3.0.0", - "sirv": "^3.0.0" - }, - "bin": { - "svelte-kit": "svelte-kit.js" + "is-inside-container": "^1.0.0" }, "engines": { - "node": ">=18.13" - }, - "peerDependencies": { - "@opentelemetry/api": "^1.0.0", - "@sveltejs/vite-plugin-svelte": "^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0 || ^7.0.0", - "svelte": "^4.0.0 || ^5.0.0-next.0", - "typescript": "^5.3.3 || ^6.0.0", - "vite": "^5.0.3 || ^6.0.0 || ^7.0.0-beta.0 || ^8.0.0" + "node": ">=16" }, - "peerDependenciesMeta": { - "@opentelemetry/api": { - "optional": true - }, - "typescript": { - "optional": true - } + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@sveltejs/load-config": { - "version": "0.2.3", - "resolved": "https://registry.npmjs.org/@sveltejs/load-config/-/load-config-0.2.3.tgz", - "integrity": "sha512-VT3qmUb8pRV2QrZjd8iAmtg8lf4W0TIjZbvXtz5MKei/q96teWZgGJyyidJzOjzZzvdq616eSRVeMYIQChUTAQ==", + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", "dev": true, - "license": "MIT", + "license": "ISC" + }, + "node_modules/istanbul-lib-coverage": { + "version": "3.2.2", + "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz", + "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==", + "dev": true, + "license": "BSD-3-Clause", "engines": { - "node": ">= 18.0.0" + "node": ">=8" } }, - "node_modules/@sveltejs/vite-plugin-svelte": { - "version": "7.3.0", - "resolved": "https://registry.npmjs.org/@sveltejs/vite-plugin-svelte/-/vite-plugin-svelte-7.3.0.tgz", - "integrity": "sha512-QbRoJyD92e9R0ufeQIWRHrCC0ObcqSv/aBDdrQMoU+sypav3cDx5wytdQ6GLdXjEMO6xjrXGzfkUygng8JMv0A==", + "node_modules/istanbul-lib-hook": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-3.0.0.tgz", + "integrity": "sha512-Pt/uge1Q9s+5VAZ+pCo16TYMWPBIl+oaNIjgLQxcX0itS6ueeaA+pEfThZpH8WxhFgCiEb8sAJY6MdUKgiIWaQ==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "deepmerge": "^4.3.1", - "magic-string": "^1.0.0", - "obug": "^2.1.0", - "vitefu": "^1.1.2" + "append-transform": "^2.0.0" }, "engines": { - "node": "^20.19 || ^22.12 || >=24" - }, - "peerDependencies": { - "svelte": "^5.46.4", - "vite": "^8.0.0-beta.7 || ^8.0.0" + "node": ">=8" } }, - "node_modules/@sveltejs/vite-plugin-svelte/node_modules/magic-string": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.2.0.tgz", - "integrity": "sha512-ptco+HFxTLgjafSLim2LojBSwfg5feBjd+SqyiwdGkzC38UPdZy3zgrHMI2CoTf5fJL38tbHMYWVzIH8BxGqJw==", + "node_modules/istanbul-lib-instrument": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-6.0.3.tgz", + "integrity": "sha512-Vtgk7L/R2JHyyGW07spoFlB8/lpjiOLTjMdms6AFMraYt3BaJauod/NGrfnVG/y4Ix1JEuMRPDPEj2ua+zz1/Q==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.5" - } - }, - "node_modules/@tauri-apps/api": { - "version": "2.11.1", - "resolved": "https://registry.npmjs.org/@tauri-apps/api/-/api-2.11.1.tgz", - "integrity": "sha512-M2FPuYND2m+wh5hfW9ZpSdxMPdEJovPBWwoHJmwUpysTYNHaOkVFN419m/K0LIgjb/7KU2vBgsUepJWugQCvAA==", - "license": "Apache-2.0 OR MIT", - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/tauri" + "@babel/core": "^7.23.9", + "@babel/parser": "^7.23.9", + "@istanbuljs/schema": "^0.1.3", + "istanbul-lib-coverage": "^3.2.0", + "semver": "^7.5.4" + }, + "engines": { + "node": ">=10" } }, - "node_modules/@tauri-apps/cli": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli/-/cli-2.11.4.tgz", - "integrity": "sha512-R8xGtMpwyetawSqm9kYOuMmEqkhUbvcUy8n0aNXIxollKBLESUu5f4Fx+64hgASYm1H+jSWq6jCW6zqTnH6hqQ==", + "node_modules/istanbul-lib-processinfo": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/istanbul-lib-processinfo/-/istanbul-lib-processinfo-2.0.3.tgz", + "integrity": "sha512-NkwHbo3E00oybX6NGJi6ar0B29vxyvNwoC7eJ4G4Yq28UfY758Hgn/heV8VRFhevPED4LXfFz0DQ8z/0kw9zMg==", "dev": true, - "license": "Apache-2.0 OR MIT", - "bin": { - "tauri": "tauri.js" + "license": "ISC", + "dependencies": { + "archy": "^1.0.0", + "cross-spawn": "^7.0.3", + "istanbul-lib-coverage": "^3.2.0", + "p-map": "^3.0.0", + "rimraf": "^3.0.0", + "uuid": "^8.3.2" }, "engines": { - "node": ">= 10" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/tauri" - }, - "optionalDependencies": { - "@tauri-apps/cli-darwin-arm64": "2.11.4", - "@tauri-apps/cli-darwin-x64": "2.11.4", - "@tauri-apps/cli-linux-arm-gnueabihf": "2.11.4", - "@tauri-apps/cli-linux-arm64-gnu": "2.11.4", - "@tauri-apps/cli-linux-arm64-musl": "2.11.4", - "@tauri-apps/cli-linux-riscv64-gnu": "2.11.4", - "@tauri-apps/cli-linux-x64-gnu": "2.11.4", - "@tauri-apps/cli-linux-x64-musl": "2.11.4", - "@tauri-apps/cli-win32-arm64-msvc": "2.11.4", - "@tauri-apps/cli-win32-ia32-msvc": "2.11.4", - "@tauri-apps/cli-win32-x64-msvc": "2.11.4" + "node": ">=8" } }, - "node_modules/@tauri-apps/cli-darwin-arm64": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-arm64/-/cli-darwin-arm64-2.11.4.tgz", - "integrity": "sha512-1ryOF3ZhpZ/nemHV5zVwBQBz9jDGKmKPvWPADOhc83ig0P4bMc2iER4NbC6r9sjeIZ6RVQ4g3RZIYvezhcl4TQ==", - "cpu": [ - "arm64" - ], + "node_modules/istanbul-lib-report": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz", + "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "darwin" - ], + "license": "BSD-3-Clause", + "dependencies": { + "istanbul-lib-coverage": "^3.0.0", + "make-dir": "^4.0.0", + "supports-color": "^7.1.0" + }, "engines": { - "node": ">= 10" + "node": ">=10" } }, - "node_modules/@tauri-apps/cli-darwin-x64": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-darwin-x64/-/cli-darwin-x64-2.11.4.tgz", - "integrity": "sha512-uFsGQAAfuyz1k/yGLmkWfkBlgKAqZfxqlHmLWx81QU27RJWfmbNHCIq8T8w1e+VClleIuZUjpHWfoE4E3DLo3A==", - "cpu": [ - "x64" - ], + "node_modules/istanbul-lib-source-maps": { + "version": "5.0.6", + "resolved": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-5.0.6.tgz", + "integrity": "sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "darwin" - ], + "license": "BSD-3-Clause", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.23", + "debug": "^4.1.1", + "istanbul-lib-coverage": "^3.0.0" + }, "engines": { - "node": ">= 10" + "node": ">=10" } }, - "node_modules/@tauri-apps/cli-linux-arm-gnueabihf": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm-gnueabihf/-/cli-linux-arm-gnueabihf-2.11.4.tgz", - "integrity": "sha512-IaHZn5CdBL21oUmjiVOS1ctw6Ip1O0pjp70FwOWmYz1myWe0SY96ZIj2FYf7pT0m8bI2h/hrs5ZbEXXh44/MkQ==", - "cpu": [ - "arm" - ], + "node_modules/istanbul-reports": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz", + "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "BSD-3-Clause", + "dependencies": { + "html-escaper": "^2.0.0", + "istanbul-lib-report": "^3.0.0" + }, "engines": { - "node": ">= 10" + "node": ">=8" } }, - "node_modules/@tauri-apps/cli-linux-arm64-gnu": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-gnu/-/cli-linux-arm64-gnu-2.11.4.tgz", - "integrity": "sha512-N41/ukTRVe6XSuUTESuFdGeOW2i7k62tK+6gHK5Kd5/q5RPvvi19GaWAVPPb9u95HSGmTChSolBfzynUsssFaA==", - "cpu": [ - "arm64" - ], + "node_modules/jackspeak": { + "version": "3.4.3", + "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz", + "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">= 10" + "license": "BlueOak-1.0.0", + "dependencies": { + "@isaacs/cliui": "^8.0.2" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + }, + "optionalDependencies": { + "@pkgjs/parseargs": "^0.11.0" } }, - "node_modules/@tauri-apps/cli-linux-arm64-musl": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-arm64-musl/-/cli-linux-arm64-musl-2.11.4.tgz", - "integrity": "sha512-v277UnT/fB64xAfSroL5N3Km3tLmvATWqJJw/wRI+g6o+HkeD0slyE7gOhNs1MbjE41R7bQOTxMVoL3aomUJmw==", - "cpu": [ - "arm64" - ], + "node_modules/jest": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest/-/jest-30.4.2.tgz", + "integrity": "sha512-Yi1jqNC/Oq0N4hBgNH/YvBpP1P57QqundgytzYqy3yqAa7NZPNjSoi4SGbRAXDMdBzNE6xBCi5U7RgfrvMEUVQ==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "@jest/core": "30.4.2", + "@jest/types": "30.4.1", + "import-local": "^3.2.0", + "jest-cli": "30.4.2" + }, + "bin": { + "jest": "bin/jest.js" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } } }, - "node_modules/@tauri-apps/cli-linux-riscv64-gnu": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-riscv64-gnu/-/cli-linux-riscv64-gnu-2.11.4.tgz", - "integrity": "sha512-qqgNkQ2u1yZHxjhxsZaxUtRDW8dIqIYm33rx/mzwQv0SfY9x1B+iraj8vWeFiXjjSVVhEMepXSOts1TqPzvXNQ==", - "cpu": [ - "riscv64" - ], + "node_modules/jest-changed-files": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-30.4.1.tgz", + "integrity": "sha512-IuctmYrxi21iOSOaIXpJWalHyPAsVv0GeBHKDn8C1CA4W5htHn7INL+wdnL4Bo0+olEndvAFkmb++tIQJG+vvg==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "execa": "^5.1.1", + "jest-util": "30.4.1", + "p-limit": "^3.1.0" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/cli-linux-x64-gnu": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-gnu/-/cli-linux-x64-gnu-2.11.4.tgz", - "integrity": "sha512-2VRNWl84FOH0m2giiDkO2h0QXlcMJeX+zJDpI5kDIQAx6s+geF3v48F4DXfJez4GS/FdoDGnPnw1C2iYGbQ7bQ==", - "cpu": [ - "x64" - ], + "node_modules/jest-circus": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-circus/-/jest-circus-30.4.2.tgz", + "integrity": "sha512-rvHH7VlY6LgbJXJTQ87GW62g1FntOtbhh0zT+v04kC+pgL6aBKyYINXxWukCpj3dcIBMw5/XUbtDS9dU9JTXeQ==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "@jest/environment": "30.4.1", + "@jest/expect": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "co": "^4.6.0", + "dedent": "^1.6.0", + "is-generator-fn": "^2.1.0", + "jest-each": "30.4.1", + "jest-matcher-utils": "30.4.1", + "jest-message-util": "30.4.1", + "jest-runtime": "30.4.2", + "jest-snapshot": "30.4.1", + "jest-util": "30.4.1", + "p-limit": "^3.1.0", + "pretty-format": "30.4.1", + "pure-rand": "^7.0.0", + "slash": "^3.0.0", + "stack-utils": "^2.0.6" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-circus/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/cli-linux-x64-musl": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-linux-x64-musl/-/cli-linux-x64-musl-2.11.4.tgz", - "integrity": "sha512-o9GyhYor/nc7xarmwDE3ka2szuW3uuZzXjHWh64Q8YX5AtSgxdQkFWzrY4O8KiGtVNvFBI14H3Q49Qj5TOIP/A==", - "cpu": [ - "x64" - ], + "node_modules/jest-cli": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-cli/-/jest-cli-30.4.2.tgz", + "integrity": "sha512-jfA2ocvVHMXS2QijrJ0d31ektP+d/W0T5RpcTX2Pq+3sVqHlsXVCM2+FmwpL+bdY8OfHpIg9xMxLF17Zg0U49Q==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "dependencies": { + "@jest/core": "30.4.2", + "@jest/test-result": "30.4.1", + "@jest/types": "30.4.1", + "chalk": "^4.1.2", + "exit-x": "^0.2.2", + "import-local": "^3.2.0", + "jest-config": "30.4.2", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "yargs": "^17.7.2" + }, + "bin": { + "jest": "bin/jest.js" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0" + }, + "peerDependenciesMeta": { + "node-notifier": { + "optional": true + } } }, - "node_modules/@tauri-apps/cli-win32-arm64-msvc": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-arm64-msvc/-/cli-win32-arm64-msvc-2.11.4.tgz", - "integrity": "sha512-ld5Ehb598m0VkYyylRPNeCFsBe/km0jxis6KgMpl3IGY6I/i1RwQXO05I1AsXUXO2WC6AvB/Lw4qTf/asiuEiQ==", - "cpu": [ - "arm64" - ], + "node_modules/jest-config": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-config/-/jest-config-30.4.2.tgz", + "integrity": "sha512-rNHAShJQqQwFNoL0hbf3BphSBOWnpOUAKvidLS/AjNVLPfoj5mSf4jQMfW3cYOs6hXeZC7nF7mDHaBnbxELOzg==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">= 10" + "license": "MIT", + "dependencies": { + "@babel/core": "^7.27.4", + "@jest/get-type": "30.1.0", + "@jest/pattern": "30.4.0", + "@jest/test-sequencer": "30.4.1", + "@jest/types": "30.4.1", + "babel-jest": "30.4.1", + "chalk": "^4.1.2", + "ci-info": "^4.2.0", + "deepmerge": "^4.3.1", + "glob": "^10.5.0", + "graceful-fs": "^4.2.11", + "jest-circus": "30.4.2", + "jest-docblock": "30.4.0", + "jest-environment-node": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-resolve": "30.4.1", + "jest-runner": "30.4.2", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "parse-json": "^5.2.0", + "pretty-format": "30.4.1", + "slash": "^3.0.0", + "strip-json-comments": "^3.1.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "peerDependencies": { + "@types/node": "*", + "esbuild-register": ">=3.4.0", + "ts-node": ">=9.0.0" + }, + "peerDependenciesMeta": { + "@types/node": { + "optional": true + }, + "esbuild-register": { + "optional": true + }, + "ts-node": { + "optional": true + } } }, - "node_modules/@tauri-apps/cli-win32-ia32-msvc": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-ia32-msvc/-/cli-win32-ia32-msvc-2.11.4.tgz", - "integrity": "sha512-12Hxi0XX/H5VFxO/bGgHkFWhml9VMgEOu9CidjeCeTNQ1l6fpUlbiGgSP7CLI3PFtW9/FfbeHieZ+kyWK5H7CA==", - "cpu": [ - "ia32" - ], + "node_modules/jest-config/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "win32" - ], + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/cli-win32-x64-msvc": { - "version": "2.11.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/cli-win32-x64-msvc/-/cli-win32-x64-msvc-2.11.4.tgz", - "integrity": "sha512-+vDiqBIU5dMISg/wNvX3sF+ZHfgJGJ5T0AcO+EHNXV9GGAG+P5fzodlDXD3QdKCRgZxMoCm5PPvj3BqLNjBthw==", - "cpu": [ - "x64" - ], + "node_modules/jest-diff": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-diff/-/jest-diff-30.4.1.tgz", + "integrity": "sha512-CRpFK0RtLriVDGcPPAnR6HMVI8bSR2jnUIgralhauzYQZIb4RH9AtEInTuQr65LmmGggGcRT6HIASxwqsVsmlA==", "dev": true, - "license": "Apache-2.0 OR MIT", - "optional": true, - "os": [ - "win32" - ], + "license": "MIT", + "dependencies": { + "@jest/diff-sequences": "30.4.0", + "@jest/get-type": "30.1.0", + "chalk": "^4.1.2", + "pretty-format": "30.4.1" + }, "engines": { - "node": ">= 10" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/plugin-dialog": { - "version": "2.7.2", - "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-dialog/-/plugin-dialog-2.7.2.tgz", - "integrity": "sha512-pX0IGm1I3I6wc+zeKYcq1GSqogK6okCNX5fOdaNU5ab1AjGS6l1E5wFNjEb7meg7ZFSp0JUs+0jQGQNyOvLrsg==", - "license": "MIT OR Apache-2.0", + "node_modules/jest-diff/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", "dependencies": { - "@tauri-apps/api": "^2.11.0" + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@tauri-apps/plugin-opener": { - "version": "2.5.4", - "resolved": "https://registry.npmjs.org/@tauri-apps/plugin-opener/-/plugin-opener-2.5.4.tgz", - "integrity": "sha512-1HnPkb+AmgO29HBazm4uPLKB+r7zzcTBW1d0fyYp1uP+jwtpoiNDGKMMzz58SFp49nOIrxdE3aUJtT57lfO9CQ==", - "license": "MIT OR Apache-2.0", + "node_modules/jest-docblock": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-30.4.0.tgz", + "integrity": "sha512-ZPMabUZCx5MpbZ2eBYSvZ0J8fvo3dR9oM+eeUpb3aKNQFuS2tu3Duw1TNlMoP8k3WQgKGJuhcMFvwcVuq6T7oA==", + "dev": true, + "license": "MIT", "dependencies": { - "@tauri-apps/api": "^2.11.0" + "detect-newline": "^3.1.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/dom": { - "version": "10.4.1", - "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.1.tgz", - "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==", + "node_modules/jest-each": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-each/-/jest-each-30.4.1.tgz", + "integrity": "sha512-/8MJbH6fuj48TstjrMf+u/pd06Qezz5xOXvZA6442heNOWr8bdeoGZX2d9fCn028CoMgYmroH9//zky5GfyYmA==", "dev": true, "license": "MIT", "dependencies": { - "@babel/code-frame": "^7.10.4", - "@babel/runtime": "^7.12.5", - "@types/aria-query": "^5.0.1", - "aria-query": "5.3.0", - "dom-accessibility-api": "^0.5.9", - "lz-string": "^1.5.0", - "picocolors": "1.1.1", - "pretty-format": "^27.0.2" + "@jest/get-type": "30.1.0", + "@jest/types": "30.4.1", + "chalk": "^4.1.2", + "jest-util": "30.4.1", + "pretty-format": "30.4.1" }, "engines": { - "node": ">=18" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/dom/node_modules/aria-query": { - "version": "5.3.0", - "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz", - "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==", + "node_modules/jest-each/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "Apache-2.0", + "license": "MIT", "dependencies": { - "dequal": "^2.0.3" + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/jest-dom": { - "version": "6.9.1", - "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-6.9.1.tgz", - "integrity": "sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==", + "node_modules/jest-environment-node": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-30.4.1.tgz", + "integrity": "sha512-4FZYVOk85hz2AyT6BbarKy9u37g6DbrDyCdFhsnDdXqyrueYQvB+0zO4f/kqLCRD0BsPRXPMNJeQwihKZV8naw==", "dev": true, "license": "MIT", "dependencies": { - "@adobe/css-tools": "^4.4.0", - "aria-query": "^5.0.0", - "css.escape": "^1.5.1", - "dom-accessibility-api": "^0.6.3", - "picocolors": "^1.1.1", - "redent": "^3.0.0" + "@jest/environment": "30.4.1", + "@jest/fake-timers": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "jest-mock": "30.4.1", + "jest-util": "30.4.1", + "jest-validate": "30.4.1" }, "engines": { - "node": ">=14", - "npm": ">=6", - "yarn": ">=1" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": { - "version": "0.6.3", - "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz", - "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==", - "dev": true, - "license": "MIT" - }, - "node_modules/@testing-library/user-event": { - "version": "14.6.5", - "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.5.tgz", - "integrity": "sha512-FhqjldLTpteueBaKflhNFlMT3+PM0O5fiBUivht6b9CZ1eesJyy7+g3Jr7XwJzt/Hip3ZG5hWwK1MX1FuDiE4w==", + "node_modules/jest-haste-map": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-30.4.1.tgz", + "integrity": "sha512-rFrcONd8jeFsyw+Z9CrScJgglRf2+NFmNam8dKu7n+SoHqNYT47mn0DdEcVUZJpvh7Iz6/si7f7yUH7GJHVgnw==", "dev": true, "license": "MIT", + "dependencies": { + "@jest/types": "30.4.1", + "@types/node": "*", + "anymatch": "^3.1.3", + "fb-watchman": "^2.0.2", + "graceful-fs": "^4.2.11", + "jest-regex-util": "30.4.0", + "jest-util": "30.4.1", + "jest-worker": "30.4.1", + "picomatch": "^4.0.3", + "walker": "^1.0.8" + }, "engines": { - "node": ">=12", - "npm": ">=6" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" }, - "peerDependencies": { - "@testing-library/dom": ">=7.21.4" + "optionalDependencies": { + "fsevents": "^2.3.3" } }, - "node_modules/@tybys/wasm-util": { - "version": "0.10.3", - "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz", - "integrity": "sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==", + "node_modules/jest-junit": { + "version": "16.0.0", + "resolved": "https://registry.npmjs.org/jest-junit/-/jest-junit-16.0.0.tgz", + "integrity": "sha512-A94mmw6NfJab4Fg/BlvVOUXzXgF0XIH6EmTgJ5NDPp4xoKq0Kr7sErb+4Xs9nZvu58pJojz5RFGpqnZYJTrRfQ==", "dev": true, - "license": "MIT", - "optional": true, + "license": "Apache-2.0", "dependencies": { - "tslib": "^2.4.0" + "mkdirp": "^1.0.4", + "strip-ansi": "^6.0.1", + "uuid": "^8.3.2", + "xml": "^1.0.1" + }, + "engines": { + "node": ">=10.12.0" } }, - "node_modules/@types/aria-query": { - "version": "5.0.4", - "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz", - "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==", + "node_modules/jest-junit/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } }, - "node_modules/@types/chai": { - "version": "5.2.3", - "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz", - "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==", + "node_modules/jest-leak-detector": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-leak-detector/-/jest-leak-detector-30.4.1.tgz", + "integrity": "sha512-IpmyiioeHxiWDhesHnUFmOxcTzwCwKpgACgWajtAP+nYQXiY7DakTxB6Bx9JFiRMljr0AX1PvnQdaU1KFoz6NQ==", "dev": true, "license": "MIT", "dependencies": { - "@types/deep-eql": "*", - "assertion-error": "^2.0.1" + "@jest/get-type": "30.1.0", + "pretty-format": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@types/cookie": { - "version": "0.6.0", - "resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.6.0.tgz", - "integrity": "sha512-4Kh9a6B2bQciAhf7FSuMRRkUWecJgJu9nPnx3yzpsfXX/c50REIqpHY4C82bXP90qrLtXtkDxTZosYO3UpOwlA==", + "node_modules/jest-leak-detector/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@types/deep-eql": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz", - "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==", + "node_modules/jest-matcher-utils": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-30.4.1.tgz", + "integrity": "sha512-zvYfX5CaeEkFrrLS9suWe9rvJrm9J1Iv3ua8kIBv9GEPzcnsfBf0bob37la7s67fs0nlBC3EuvkOLnXQKxtx4A==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/get-type": "30.1.0", + "chalk": "^4.1.2", + "jest-diff": "30.4.1", + "pretty-format": "30.4.1" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@types/estree": { - "version": "1.0.9", - "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz", - "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==", + "node_modules/jest-matcher-utils/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@types/node": { - "version": "26.1.2", - "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz", - "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==", + "node_modules/jest-message-util": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-30.4.1.tgz", + "integrity": "sha512-kwCKIvq0MCW1HzLoGola9Te6JUdzgV0loyKJ3Qghrkz9i5/RRIHsL95BMQc2HBBhlBKC4j22K9p11TGHH8RBpQ==", "dev": true, "license": "MIT", "dependencies": { - "undici-types": "~8.3.0" + "@babel/code-frame": "^7.27.1", + "@jest/types": "30.4.1", + "@types/stack-utils": "^2.0.3", + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "jest-util": "30.4.1", + "picomatch": "^4.0.3", + "pretty-format": "30.4.1", + "slash": "^3.0.0", + "stack-utils": "^2.0.6" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@types/trusted-types": { - "version": "2.0.7", - "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz", - "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==", + "node_modules/jest-message-util/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } }, - "node_modules/@vitest/coverage-v8": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.10.tgz", - "integrity": "sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==", + "node_modules/jest-mock": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-mock/-/jest-mock-30.4.1.tgz", + "integrity": "sha512-/i8SVb8/NSB7RfNi8gfqu8gxLV23KaL5EpAttyb9iz8qWRIqXRLflycz/32wXsYkOnaUlx8NAKnJYtpsmXUmfw==", "dev": true, "license": "MIT", "dependencies": { - "@bcoe/v8-coverage": "^1.0.2", - "@vitest/utils": "4.1.10", - "ast-v8-to-istanbul": "^1.0.0", - "istanbul-lib-coverage": "^3.2.2", - "istanbul-lib-report": "^3.0.1", - "istanbul-reports": "^3.2.0", - "magicast": "^0.5.2", - "obug": "^2.1.1", - "std-env": "^4.0.0-rc.1", - "tinyrainbow": "^3.1.0" + "@jest/types": "30.4.1", + "@types/node": "*", + "jest-util": "30.4.1" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-pnp-resolver": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz", + "integrity": "sha512-+3NpwQEnRoIBtx4fyhblQDPgJI0H1IEIkX7ShLUjPGA7TtUTvI1oiKi3SR4oBR0hQhQR80l4WAe5RrXBwWMA8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" }, "peerDependencies": { - "@vitest/browser": "4.1.10", - "vitest": "4.1.10" + "jest-resolve": "*" }, "peerDependenciesMeta": { - "@vitest/browser": { + "jest-resolve": { "optional": true } } }, - "node_modules/@vitest/expect": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.10.tgz", - "integrity": "sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==", + "node_modules/jest-process-manager": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/jest-process-manager/-/jest-process-manager-0.4.0.tgz", + "integrity": "sha512-80Y6snDyb0p8GG83pDxGI/kQzwVTkCxc7ep5FPe/F6JYdvRDhwr6RzRmPSP7SEwuLhxo80lBS/NqOdUIbHIfhw==", + "deprecated": "⚠️ The 'jest-process-manager' package is deprecated. Please migrate to Playwright's built-in test runner (@playwright/test) which now includes full Jest-style features and parallel testing. See https://playwright.dev/docs/intro for details.", "dev": true, "license": "MIT", "dependencies": { - "@standard-schema/spec": "^1.1.0", - "@types/chai": "^5.2.2", - "@vitest/spy": "4.1.10", - "@vitest/utils": "4.1.10", - "chai": "^6.2.2", - "tinyrainbow": "^3.1.0" - }, - "funding": { - "url": "https://opencollective.com/vitest" + "@types/wait-on": "^5.2.0", + "chalk": "^4.1.0", + "cwd": "^0.10.0", + "exit": "^0.1.2", + "find-process": "^1.4.4", + "prompts": "^2.4.1", + "signal-exit": "^3.0.3", + "spawnd": "^5.0.0", + "tree-kill": "^1.2.2", + "wait-on": "^7.0.0" + } + }, + "node_modules/jest-process-manager/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/jest-regex-util": { + "version": "30.4.0", + "resolved": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-30.4.0.tgz", + "integrity": "sha512-mWlvLviKIgIQ8VCuM1xRdD0TWp3zlzionlmDBjuXVBs+VkmXq6FgW9T4Emr7oGz/Rk6feDCGyiugolcQEyp3mg==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/mocker": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.10.tgz", - "integrity": "sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==", + "node_modules/jest-resolve": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-30.4.1.tgz", + "integrity": "sha512-Zry8Yq/yJcNAZ7dJ5F2heic8AheXvbFZ7XI5V+h28nrYZ7Qoyy4dItq8OodjnYD270mvX+ZudmrNV9cysqhW5Q==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/spy": "4.1.10", - "estree-walker": "^3.0.3", - "magic-string": "^0.30.21" + "chalk": "^4.1.2", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "jest-pnp-resolver": "^1.2.3", + "jest-util": "30.4.1", + "jest-validate": "30.4.1", + "slash": "^3.0.0", + "unrs-resolver": "^1.7.11" }, - "funding": { - "url": "https://opencollective.com/vitest" - }, - "peerDependencies": { - "msw": "^2.4.9", - "vite": "^6.0.0 || ^7.0.0 || ^8.0.0" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-resolve-dependencies": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-30.4.2.tgz", + "integrity": "sha512-gDiVh1I+GxYzz9oXlyw+1wv6VOYX1WYxMOfjsA3iGKePV2oxmbHhwxfkALxNxYy1ciw6APWwkW2zZONwP97aEQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "jest-regex-util": "30.4.0", + "jest-snapshot": "30.4.1" }, - "peerDependenciesMeta": { - "msw": { - "optional": true - }, - "vite": { - "optional": true - } + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/pretty-format": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.10.tgz", - "integrity": "sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==", + "node_modules/jest-runner": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-runner/-/jest-runner-30.4.2.tgz", + "integrity": "sha512-2dw0PslVYXxffXGpLo+Ejad+KcI1Qkjn7f4X4619gf21oCUmL+SPfjqIa/losUem3yEOvfNZe/F1HWUcNpODcg==", "dev": true, "license": "MIT", "dependencies": { - "tinyrainbow": "^3.1.0" + "@jest/console": "30.4.1", + "@jest/environment": "30.4.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "emittery": "^0.13.1", + "exit-x": "^0.2.2", + "graceful-fs": "^4.2.11", + "jest-docblock": "30.4.0", + "jest-environment-node": "30.4.1", + "jest-haste-map": "30.4.1", + "jest-leak-detector": "30.4.1", + "jest-message-util": "30.4.1", + "jest-resolve": "30.4.1", + "jest-runtime": "30.4.2", + "jest-util": "30.4.1", + "jest-watcher": "30.4.1", + "jest-worker": "30.4.1", + "p-limit": "^3.1.0", + "source-map-support": "0.5.13" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-runtime": { + "version": "30.4.2", + "resolved": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-30.4.2.tgz", + "integrity": "sha512-3/5e8iPz2k/VLqlr8DgTftYyLUv8Su3FkCAO2/Od81UsUTpSxOrS6O5x5KkoQwyUjmpYyDJKeyAvg2T2nvpNkQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/environment": "30.4.1", + "@jest/fake-timers": "30.4.1", + "@jest/globals": "30.4.1", + "@jest/source-map": "30.0.1", + "@jest/test-result": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "cjs-module-lexer": "^2.1.0", + "collect-v8-coverage": "^1.0.2", + "glob": "^10.5.0", + "graceful-fs": "^4.2.11", + "jest-haste-map": "30.4.1", + "jest-message-util": "30.4.1", + "jest-mock": "30.4.1", + "jest-regex-util": "30.4.0", + "jest-resolve": "30.4.1", + "jest-snapshot": "30.4.1", + "jest-util": "30.4.1", + "slash": "^3.0.0", + "strip-bom": "^4.0.0" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-serializer-html": { + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/jest-serializer-html/-/jest-serializer-html-7.1.0.tgz", + "integrity": "sha512-xYL2qC7kmoYHJo8MYqJkzrl/Fdlx+fat4U1AqYg+kafqwcKPiMkOcjWHPKhueuNEgr+uemhGc+jqXYiwCyRyLA==", + "dev": true, + "license": "MIT", + "dependencies": { + "diffable-html": "^4.1.0" + } + }, + "node_modules/jest-snapshot": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-30.4.1.tgz", + "integrity": "sha512-tEOkkfOMppUyeiHwjZswOQ3lcnoTnws/q5FnGIaeIh/jmoU0ZlgMYRR8sTlTj+nNGCoJ0RDq6SfxGxCsyMTPmw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/core": "^7.27.4", + "@babel/generator": "^7.27.5", + "@babel/plugin-syntax-jsx": "^7.27.1", + "@babel/plugin-syntax-typescript": "^7.27.1", + "@babel/types": "^7.27.3", + "@jest/expect-utils": "30.4.1", + "@jest/get-type": "30.1.0", + "@jest/snapshot-utils": "30.4.1", + "@jest/transform": "30.4.1", + "@jest/types": "30.4.1", + "babel-preset-current-node-syntax": "^1.2.0", + "chalk": "^4.1.2", + "expect": "30.4.1", + "graceful-fs": "^4.2.11", + "jest-diff": "30.4.1", + "jest-matcher-utils": "30.4.1", + "jest-message-util": "30.4.1", + "jest-util": "30.4.1", + "pretty-format": "30.4.1", + "semver": "^7.7.2", + "synckit": "^0.11.8" + }, + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" + } + }, + "node_modules/jest-snapshot/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/runner": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.10.tgz", - "integrity": "sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==", + "node_modules/jest-util": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-util/-/jest-util-30.4.1.tgz", + "integrity": "sha512-vjQb1sACEiv13DKJMDToJpzVW0joCsIQrmbg0fi7CyOOt+g9jTuQl2A216pWRBYhOVt53XbL/2LbMKg1BECWOw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/utils": "4.1.10", - "pathe": "^2.0.3" + "@jest/types": "30.4.1", + "@types/node": "*", + "chalk": "^4.1.2", + "ci-info": "^4.2.0", + "graceful-fs": "^4.2.11", + "picomatch": "^4.0.3" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/snapshot": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.10.tgz", - "integrity": "sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==", + "node_modules/jest-validate": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-validate/-/jest-validate-30.4.1.tgz", + "integrity": "sha512-PDWi4SOwLnwqNDfHZjOcsEFyZ4fc/2W2gVL3DEoyqnB6jCQMLRtfBong8s6omIw3lI0HWOus12xfnFmQtjW3fw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/pretty-format": "4.1.10", - "@vitest/utils": "4.1.10", - "magic-string": "^0.30.21", - "pathe": "^2.0.3" + "@jest/get-type": "30.1.0", + "@jest/types": "30.4.1", + "camelcase": "^6.3.0", + "chalk": "^4.1.2", + "leven": "^3.1.0", + "pretty-format": "30.4.1" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@vitest/spy": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.10.tgz", - "integrity": "sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==", + "node_modules/jest-validate/node_modules/camelcase": { + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz", + "integrity": "sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==", "dev": true, "license": "MIT", + "engines": { + "node": ">=10" + }, "funding": { - "url": "https://opencollective.com/vitest" + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/@vitest/utils": { - "version": "4.1.10", - "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.10.tgz", - "integrity": "sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==", + "node_modules/jest-validate/node_modules/pretty-format": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz", + "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/pretty-format": "4.1.10", - "convert-source-map": "^2.0.0", - "tinyrainbow": "^3.1.0" + "@jest/schemas": "30.4.1", + "ansi-styles": "^5.2.0", + "react-is-18": "npm:react-is@^18.3.1", + "react-is-19": "npm:react-is@^19.2.5" }, - "funding": { - "url": "https://opencollective.com/vitest" + "engines": { + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/@webcontainer/env": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/@webcontainer/env/-/env-1.1.1.tgz", - "integrity": "sha512-6aN99yL695Hi9SuIk1oC88l9o0gmxL1nGWWQ/kNy81HigJ0FoaoTXpytCj6ItzgyCEwA9kF1wixsTuv5cjsgng==", + "node_modules/jest-watch-typeahead": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/jest-watch-typeahead/-/jest-watch-typeahead-3.0.1.tgz", + "integrity": "sha512-SFmHcvdueTswZlVhPCWfLXMazvwZlA2UZTrcE7MC3NwEVeWvEcOx6HUe+igMbnmA6qowuBSW4in8iC6J2EYsgQ==", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "ansi-escapes": "^7.0.0", + "chalk": "^5.2.0", + "jest-regex-util": "^30.0.0", + "jest-watcher": "^30.0.0", + "slash": "^5.0.0", + "string-length": "^6.0.0", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=18.0.0" + }, + "peerDependencies": { + "jest": "^30.0.0" + } }, - "node_modules/acorn": { - "version": "8.18.0", - "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz", - "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==", + "node_modules/jest-watch-typeahead/node_modules/ansi-escapes": { + "version": "7.3.0", + "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-7.3.0.tgz", + "integrity": "sha512-BvU8nYgGQBxcmMuEeUEmNTvrMVjJNSH7RgW24vXexN4Ven6qCvy4TntnvlnwnMLTVlcRQQdbRY8NKnaIoeWDNg==", "dev": true, "license": "MIT", - "bin": { - "acorn": "bin/acorn" + "dependencies": { + "environment": "^1.0.0" }, "engines": { - "node": ">=0.4.0" + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/ansi-regex": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", - "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "node_modules/jest-watch-typeahead/node_modules/chalk": { + "version": "5.6.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.6.2.tgz", + "integrity": "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==", "dev": true, "license": "MIT", "engines": { - "node": ">=8" + "node": "^12.17.0 || ^14.13 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" } }, - "node_modules/ansi-styles": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz", - "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==", + "node_modules/jest-watch-typeahead/node_modules/slash": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz", + "integrity": "sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg==", "dev": true, "license": "MIT", "engines": { - "node": ">=10" + "node": ">=14.16" }, "funding": { - "url": "https://github.com/chalk/ansi-styles?sponsor=1" + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/aria-query": { - "version": "5.3.1", - "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.1.tgz", - "integrity": "sha512-Z/ZeOgVl7bcSYZ/u/rh0fOpvEpq//LZmdbkXyc7syVzjPAhfOa9ebsdTSjEBDU4vs5nC98Kfduj1uFo0qyET3g==", + "node_modules/jest-watch-typeahead/node_modules/string-length": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/string-length/-/string-length-6.0.0.tgz", + "integrity": "sha512-1U361pxZHEQ+FeSjzqRpV+cu2vTzYeWeafXFLykiFlv4Vc0n3njgU8HrMbyik5uwm77naWMuVG8fhEF+Ovb1Kg==", "dev": true, - "license": "Apache-2.0", + "license": "MIT", + "dependencies": { + "strip-ansi": "^7.1.0" + }, "engines": { - "node": ">= 0.4" + "node": ">=16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/assertion-error": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz", - "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==", + "node_modules/jest-watcher": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-30.4.1.tgz", + "integrity": "sha512-/l9UonmvCwjHH7d2h3iAwIloLc1H0S8mJZ/LNK3i86hqwPAz8otUJjP9MfYtz9Tt77Su5FD2xGjZn8d31IZHlw==", "dev": true, "license": "MIT", + "dependencies": { + "@jest/test-result": "30.4.1", + "@jest/types": "30.4.1", + "@types/node": "*", + "ansi-escapes": "^4.3.2", + "chalk": "^4.1.2", + "emittery": "^0.13.1", + "jest-util": "30.4.1", + "string-length": "^4.0.2" + }, "engines": { - "node": ">=12" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/ast-types": { - "version": "0.16.1", - "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.16.1.tgz", - "integrity": "sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==", + "node_modules/jest-worker": { + "version": "30.4.1", + "resolved": "https://registry.npmjs.org/jest-worker/-/jest-worker-30.4.1.tgz", + "integrity": "sha512-SHynN/q/QD++iNyvMdy+WMmbCGk8jIsNcRxycXbWubSOhvo6T+j2afcfUSl+3hYsiBebOTo0cT7c2H7CXugu1g==", "dev": true, "license": "MIT", "dependencies": { - "tslib": "^2.0.1" + "@types/node": "*", + "@ungap/structured-clone": "^1.3.0", + "jest-util": "30.4.1", + "merge-stream": "^2.0.0", + "supports-color": "^8.1.1" }, "engines": { - "node": ">=4" + "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0" } }, - "node_modules/ast-v8-to-istanbul": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.5.tgz", - "integrity": "sha512-UPAgKJFSEGMWSDr3LX4tqnAb4f7KGT8O40Tyx8wbYmmZ/yn58lNCm8h3svs3eXgiGd5AXxz8NDOvXWvicq+rJA==", + "node_modules/jest-worker/node_modules/supports-color": { + "version": "8.1.1", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz", + "integrity": "sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==", "dev": true, "license": "MIT", "dependencies": { - "@jridgewell/trace-mapping": "^0.3.31", - "estree-walker": "^3.0.3", - "js-tokens": "^10.0.0" + "has-flag": "^4.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/supports-color?sponsor=1" + } + }, + "node_modules/joi": { + "version": "17.13.6", + "resolved": "https://registry.npmjs.org/joi/-/joi-17.13.6.tgz", + "integrity": "sha512-ImNZaq/LSysofih+xIGYfR0WUXMA9GLUNB//YTCSrZptoRmVgaNAdJyi6K1kXi9pkLEoSkoI8I4UwtNiu/D7nw==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^9.3.0", + "@hapi/topo": "^5.1.0", + "@sideway/address": "^4.1.5", + "@sideway/formula": "^3.0.1", + "@sideway/pinpoint": "^2.0.0" + } + }, + "node_modules/js-tokens": { + "version": "10.0.0", + "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz", + "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/js-yaml": { + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "dev": true, + "license": "MIT", + "dependencies": { + "argparse": "^1.0.7", + "esprima": "^4.0.0" + }, + "bin": { + "js-yaml": "bin/js-yaml.js" } }, - "node_modules/axe-core": { - "version": "4.13.0", - "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.13.0.tgz", - "integrity": "sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==", + "node_modules/jsesc": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz", + "integrity": "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==", "dev": true, - "license": "MPL-2.0", + "license": "MIT", + "bin": { + "jsesc": "bin/jsesc" + }, "engines": { - "node": ">=4" + "node": ">=6" } }, - "node_modules/axobject-query": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz", - "integrity": "sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==", + "node_modules/json-parse-even-better-errors": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz", + "integrity": "sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==", "dev": true, - "license": "Apache-2.0", - "engines": { - "node": ">= 0.4" - } + "license": "MIT" }, - "node_modules/bundle-name": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz", - "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==", + "node_modules/json5": { + "version": "2.2.3", + "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz", + "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==", "dev": true, "license": "MIT", - "dependencies": { - "run-applescript": "^7.0.0" + "bin": { + "json5": "lib/cli.js" }, "engines": { - "node": ">=18" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "node": ">=6" } }, - "node_modules/chai": { - "version": "6.2.2", - "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", - "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", + "node_modules/jsonc-parser": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz", + "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/kleur": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", + "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==", "dev": true, "license": "MIT", "engines": { - "node": ">=18" + "node": ">=6" } }, - "node_modules/check-error": { - "version": "2.1.3", - "resolved": "https://registry.npmjs.org/check-error/-/check-error-2.1.3.tgz", - "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==", + "node_modules/leven": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz", + "integrity": "sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A==", "dev": true, "license": "MIT", "engines": { - "node": ">= 16" + "node": ">=6" } }, - "node_modules/chokidar": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", - "integrity": "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==", + "node_modules/lightningcss": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz", + "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==", "dev": true, - "license": "MIT", + "license": "MPL-2.0", "dependencies": { - "readdirp": "^4.0.1" + "detect-libc": "^2.0.3" }, "engines": { - "node": ">= 14.16.0" + "node": ">= 12.0.0" }, "funding": { - "url": "https://paulmillr.com/funding/" + "type": "opencollective", + "url": "https://opencollective.com/parcel" + }, + "optionalDependencies": { + "lightningcss-android-arm64": "1.33.0", + "lightningcss-darwin-arm64": "1.33.0", + "lightningcss-darwin-x64": "1.33.0", + "lightningcss-freebsd-x64": "1.33.0", + "lightningcss-linux-arm-gnueabihf": "1.33.0", + "lightningcss-linux-arm64-gnu": "1.33.0", + "lightningcss-linux-arm64-musl": "1.33.0", + "lightningcss-linux-x64-gnu": "1.33.0", + "lightningcss-linux-x64-musl": "1.33.0", + "lightningcss-win32-arm64-msvc": "1.33.0", + "lightningcss-win32-x64-msvc": "1.33.0" } }, - "node_modules/clsx": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", - "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==", + "node_modules/lightningcss-android-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz", + "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "android" + ], "engines": { - "node": ">=6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/convert-source-map": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", - "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==", - "dev": true, - "license": "MIT" - }, - "node_modules/cookie": { - "version": "0.7.2", - "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", - "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "node_modules/lightningcss-darwin-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz", + "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], "engines": { - "node": ">= 0.6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/css.escape": { - "version": "1.5.1", - "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz", - "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==", - "dev": true, - "license": "MIT" - }, - "node_modules/dedent-js": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/dedent-js/-/dedent-js-1.0.1.tgz", - "integrity": "sha512-OUepMozQULMLUmhxS95Vudo0jb0UchLimi3+pQ2plj61Fcy8axbP9hbiD4Sz6DPqn6XG3kfmziVfQ1rSys5AJQ==", + "node_modules/lightningcss-darwin-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz", + "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT" + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } }, - "node_modules/deep-eql": { - "version": "5.0.2", - "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-5.0.2.tgz", - "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==", + "node_modules/lightningcss-freebsd-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz", + "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "freebsd" + ], "engines": { - "node": ">=6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/deepmerge": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", - "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==", + "node_modules/lightningcss-linux-arm-gnueabihf": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz", + "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==", + "cpu": [ + "arm" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=0.10.0" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/default-browser": { - "version": "5.5.1", - "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.1.tgz", - "integrity": "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw==", + "node_modules/lightningcss-linux-arm64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz", + "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", - "dependencies": { - "bundle-name": "^4.1.0", - "default-browser-id": "^5.0.0" - }, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=18" + "node": ">= 12.0.0" }, "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/default-browser-id": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz", - "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==", + "node_modules/lightningcss-linux-arm64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz", + "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=18" + "node": ">= 12.0.0" }, "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/define-lazy-prop": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz", - "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==", + "node_modules/lightningcss-linux-x64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz", + "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=12" + "node": ">= 12.0.0" }, "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/dequal": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", - "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "node_modules/lightningcss-linux-x64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz", + "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==", + "cpu": [ + "x64" + ], "dev": true, - "license": "MIT", + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], "engines": { - "node": ">=6" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/detect-libc": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", - "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "node_modules/lightningcss-win32-arm64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz", + "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==", + "cpu": [ + "arm64" + ], "dev": true, - "license": "Apache-2.0", + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], "engines": { - "node": ">=8" + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/devalue": { - "version": "5.9.0", - "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.0.tgz", - "integrity": "sha512-RWrqdArjvPbsATEhOPUo6Wndc/iWnkWKlhIrdlF3zMMYo/c3CVtoaVAyLtWxz5h8nSlkHzxnzV2uLydPXmtF+A==", - "dev": true, - "license": "MIT" - }, - "node_modules/dom-accessibility-api": { - "version": "0.5.16", - "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz", - "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==", - "dev": true, - "license": "MIT" - }, - "node_modules/es-module-lexer": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.1.tgz", - "integrity": "sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==", - "dev": true, - "license": "MIT" - }, - "node_modules/esbuild": { - "version": "0.28.2", - "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz", - "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==", + "node_modules/lightningcss-win32-x64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz", + "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==", + "cpu": [ + "x64" + ], "dev": true, - "hasInstallScript": true, - "license": "MIT", - "bin": { - "esbuild": "bin/esbuild" - }, + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], "engines": { - "node": ">=18" + "node": ">= 12.0.0" }, - "optionalDependencies": { - "@esbuild/aix-ppc64": "0.28.2", - "@esbuild/android-arm": "0.28.2", - "@esbuild/android-arm64": "0.28.2", - "@esbuild/android-x64": "0.28.2", - "@esbuild/darwin-arm64": "0.28.2", - "@esbuild/darwin-x64": "0.28.2", - "@esbuild/freebsd-arm64": "0.28.2", - "@esbuild/freebsd-x64": "0.28.2", - "@esbuild/linux-arm": "0.28.2", - "@esbuild/linux-arm64": "0.28.2", - "@esbuild/linux-ia32": "0.28.2", - "@esbuild/linux-loong64": "0.28.2", - "@esbuild/linux-mips64el": "0.28.2", - "@esbuild/linux-ppc64": "0.28.2", - "@esbuild/linux-riscv64": "0.28.2", - "@esbuild/linux-s390x": "0.28.2", - "@esbuild/linux-x64": "0.28.2", - "@esbuild/netbsd-arm64": "0.28.2", - "@esbuild/netbsd-x64": "0.28.2", - "@esbuild/openbsd-arm64": "0.28.2", - "@esbuild/openbsd-x64": "0.28.2", - "@esbuild/openharmony-arm64": "0.28.2", - "@esbuild/sunos-x64": "0.28.2", - "@esbuild/win32-arm64": "0.28.2", - "@esbuild/win32-ia32": "0.28.2", - "@esbuild/win32-x64": "0.28.2" + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" } }, - "node_modules/esm-env": { - "version": "1.2.2", - "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz", - "integrity": "sha512-Epxrv+Nr/CaL4ZcFGPJIYLWFom+YeV1DqMLHJoEd9SYRxNbaFruBwfEX/kkHUJf55j2+TUbmDcmuilbP1TmXHA==", + "node_modules/lines-and-columns": { + "version": "1.2.4", + "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz", + "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==", "dev": true, "license": "MIT" }, - "node_modules/esprima": { - "version": "4.0.1", - "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", - "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", + "node_modules/locate-character": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/locate-character/-/locate-character-3.0.0.tgz", + "integrity": "sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==", "dev": true, - "license": "BSD-2-Clause", - "bin": { - "esparse": "bin/esparse.js", - "esvalidate": "bin/esvalidate.js" - }, - "engines": { - "node": ">=4" - } + "license": "MIT" }, - "node_modules/esrap": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.3.0.tgz", - "integrity": "sha512-GQ/7RN8uOtEfNpzZzBMTzW9JBcX42oaSVtPzdF+6cEL8pqIL094iUpr9jzYGn4O4P/1S60dJ6izyT8F4LYARng==", + "node_modules/locate-path": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz", + "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==", "dev": true, "license": "MIT", "dependencies": { - "@jridgewell/sourcemap-codec": "^1.4.15" - }, - "peerDependencies": { - "@typescript-eslint/types": "^8.2.0" + "p-locate": "^4.1.0" }, - "peerDependenciesMeta": { - "@typescript-eslint/types": { - "optional": true - } - } - }, - "node_modules/estree-walker": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz", - "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", - "dev": true, - "license": "MIT", - "dependencies": { - "@types/estree": "^1.0.0" - } - }, - "node_modules/expect-type": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz", - "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==", - "dev": true, - "license": "Apache-2.0", "engines": { - "node": ">=12.0.0" + "node": ">=8" } }, - "node_modules/fdir": { - "version": "6.5.0", - "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", - "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", + "node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", "dev": true, - "license": "MIT", - "engines": { - "node": ">=12.0.0" - }, - "peerDependencies": { - "picomatch": "^3 || ^4" - }, - "peerDependenciesMeta": { - "picomatch": { - "optional": true - } - } + "license": "MIT" }, - "node_modules/fsevents": { - "version": "2.3.3", - "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", - "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", + "node_modules/lodash.flattendeep": { + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz", + "integrity": "sha512-uHaJFihxmJcEX3kT4I23ABqKKalJ/zDrDg0lsFtc1h+3uw49SIJ5beyhx5ExVRti3AvKoOJngIj7xz3oylPdWQ==", "dev": true, - "hasInstallScript": true, - "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": "^8.16.0 || ^10.6.0 || >=11.0.0" - } + "license": "MIT" }, - "node_modules/has-flag": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", - "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", + "node_modules/loglevel": { + "version": "1.9.2", + "resolved": "https://registry.npmjs.org/loglevel/-/loglevel-1.9.2.tgz", + "integrity": "sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==", "dev": true, "license": "MIT", "engines": { - "node": ">=8" + "node": ">= 0.6.0" + }, + "funding": { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/loglevel" } }, - "node_modules/html-escaper": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz", - "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==", + "node_modules/loupe": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz", + "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==", "dev": true, "license": "MIT" - }, - "node_modules/indent-string": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", - "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", + }, + "node_modules/lru-cache": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz", + "integrity": "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==", "dev": true, - "license": "MIT", - "engines": { - "node": ">=8" + "license": "ISC", + "dependencies": { + "yallist": "^3.0.2" } }, - "node_modules/is-docker": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz", - "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==", + "node_modules/lz-string": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz", + "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==", "dev": true, "license": "MIT", "bin": { - "is-docker": "cli.js" - }, - "engines": { - "node": "^12.20.0 || ^14.13.1 || >=16.0.0" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "lz-string": "bin/bin.js" } }, - "node_modules/is-inside-container": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz", - "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==", + "node_modules/magic-string": { + "version": "0.30.21", + "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz", + "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==", "dev": true, "license": "MIT", "dependencies": { - "is-docker": "^3.0.0" - }, - "bin": { - "is-inside-container": "cli.js" - }, - "engines": { - "node": ">=14.16" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "@jridgewell/sourcemap-codec": "^1.5.5" } }, - "node_modules/is-reference": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.3.tgz", - "integrity": "sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==", + "node_modules/magicast": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.4.tgz", + "integrity": "sha512-llBEhWm1SacoRwgHUoQJYtwp4PBLF4faQi5TCpIGyGs9n4y5+juI0tDgyKIfpqxckRHaHzouUEph3THklWh03w==", "dev": true, "license": "MIT", "dependencies": { - "@types/estree": "^1.0.6" + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7", + "source-map-js": "^1.2.1" } }, - "node_modules/is-wsl": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz", - "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==", + "node_modules/make-dir": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz", + "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==", "dev": true, "license": "MIT", "dependencies": { - "is-inside-container": "^1.0.0" + "semver": "^7.5.3" }, "engines": { - "node": ">=16" + "node": ">=10" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/istanbul-lib-coverage": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz", - "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==", + "node_modules/makeerror": { + "version": "1.0.12", + "resolved": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.12.tgz", + "integrity": "sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==", "dev": true, "license": "BSD-3-Clause", + "dependencies": { + "tmpl": "1.0.5" + } + }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "dev": true, + "license": "MIT", "engines": { - "node": ">=8" + "node": ">= 0.4" } }, - "node_modules/istanbul-lib-report": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz", - "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==", + "node_modules/merge-stream": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz", + "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==", "dev": true, - "license": "BSD-3-Clause", - "dependencies": { - "istanbul-lib-coverage": "^3.0.0", - "make-dir": "^4.0.0", - "supports-color": "^7.1.0" - }, + "license": "MIT" + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "dev": true, + "license": "MIT", "engines": { - "node": ">=10" + "node": ">= 0.6" } }, - "node_modules/istanbul-reports": { - "version": "3.2.0", - "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz", - "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==", + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", "dev": true, - "license": "BSD-3-Clause", + "license": "MIT", "dependencies": { - "html-escaper": "^2.0.0", - "istanbul-lib-report": "^3.0.0" + "mime-db": "1.52.0" }, "engines": { - "node": ">=8" + "node": ">= 0.6" } }, - "node_modules/js-tokens": { - "version": "10.0.0", - "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz", - "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==", - "dev": true, - "license": "MIT" - }, - "node_modules/jsonc-parser": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz", - "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==", + "node_modules/mimic-fn": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz", + "integrity": "sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==", "dev": true, - "license": "MIT" + "license": "MIT", + "engines": { + "node": ">=6" + } }, - "node_modules/kleur": { - "version": "4.1.5", - "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", - "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==", + "node_modules/min-indent": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz", + "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==", "dev": true, "license": "MIT", "engines": { - "node": ">=6" + "node": ">=4" } }, - "node_modules/lightningcss": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz", - "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==", + "node_modules/minimatch": { + "version": "9.0.9", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", + "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "dev": true, - "license": "MPL-2.0", + "license": "ISC", "dependencies": { - "detect-libc": "^2.0.3" + "brace-expansion": "^2.0.2" }, "engines": { - "node": ">= 12.0.0" + "node": ">=16 || 14 >=14.17" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" - }, - "optionalDependencies": { - "lightningcss-android-arm64": "1.33.0", - "lightningcss-darwin-arm64": "1.33.0", - "lightningcss-darwin-x64": "1.33.0", - "lightningcss-freebsd-x64": "1.33.0", - "lightningcss-linux-arm-gnueabihf": "1.33.0", - "lightningcss-linux-arm64-gnu": "1.33.0", - "lightningcss-linux-arm64-musl": "1.33.0", - "lightningcss-linux-x64-gnu": "1.33.0", - "lightningcss-linux-x64-musl": "1.33.0", - "lightningcss-win32-arm64-msvc": "1.33.0", - "lightningcss-win32-x64-msvc": "1.33.0" + "url": "https://github.com/sponsors/isaacs" } }, - "node_modules/lightningcss-android-arm64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz", - "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==", - "cpu": [ - "arm64" - ], + "node_modules/minimist": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", + "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "android" - ], - "engines": { - "node": ">= 12.0.0" - }, + "license": "MIT", "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/lightningcss-darwin-arm64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz", - "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==", - "cpu": [ - "arm64" - ], + "node_modules/minipass": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz", + "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "darwin" - ], + "license": "BlueOak-1.0.0", "engines": { - "node": ">= 12.0.0" + "node": ">=16 || 14 >=14.17" + } + }, + "node_modules/mkdirp": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==", + "dev": true, + "license": "MIT", + "bin": { + "mkdirp": "bin/cmd.js" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": ">=10" } }, - "node_modules/lightningcss-darwin-x64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz", - "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==", - "cpu": [ - "x64" - ], + "node_modules/mri": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz", + "integrity": "sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "darwin" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "node": ">=4" } }, - "node_modules/lightningcss-freebsd-x64": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz", - "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==", - "cpu": [ - "x64" - ], + "node_modules/mrmime": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz", + "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "freebsd" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" + "node": ">=10" + } + }, + "node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "dev": true, + "license": "MIT" + }, + "node_modules/nanoid": { + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "bin": { + "nanoid": "bin/nanoid.cjs" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" } }, - "node_modules/lightningcss-linux-arm-gnueabihf": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz", - "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==", - "cpu": [ - "arm" - ], + "node_modules/napi-postinstall": { + "version": "0.3.4", + "resolved": "https://registry.npmjs.org/napi-postinstall/-/napi-postinstall-0.3.4.tgz", + "integrity": "sha512-PHI5f1O0EP5xJ9gQmFGMS6IZcrVvTjpXjz7Na41gTE7eE2hK11lg04CECCYEEjdc17EV4DO+fkGEtt7TpTaTiQ==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", + "bin": { + "napi-postinstall": "lib/cli.js" + }, "engines": { - "node": ">= 12.0.0" + "node": "^12.20.0 || ^14.18.0 || >=16.0.0" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "url": "https://opencollective.com/napi-postinstall" } }, - "node_modules/lightningcss-linux-arm64-gnu": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz", - "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==", - "cpu": [ - "arm64" - ], + "node_modules/natural-compare": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz", + "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">= 12.0.0" + "license": "MIT" + }, + "node_modules/node-int64": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz", + "integrity": "sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==", + "dev": true, + "license": "MIT" + }, + "node_modules/node-preload": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/node-preload/-/node-preload-0.2.1.tgz", + "integrity": "sha512-RM5oyBy45cLEoHqCeh+MNuFAxO0vTFBLskvQbOKnEE7YTTSN4tbN8QWDIPQ6L+WvKsB/qLEGpYe2ZZ9d4W9OIQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "process-on-spawn": "^1.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": ">=8" } }, - "node_modules/lightningcss-linux-arm64-musl": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz", - "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==", - "cpu": [ - "arm64" - ], + "node_modules/node-releases": { + "version": "2.0.53", + "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.53.tgz", + "integrity": "sha512-D9UOmYG3UH1V+ENW56t5QXBwJw1YEY18ruVeus89Rw+SyIgjPkCO84bRzO3uNIYosJbNwiabWVn48o3uJLjxFQ==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "node": ">=18" } }, - "node_modules/lightningcss-linux-x64-gnu": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz", - "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==", - "cpu": [ - "x64" - ], + "node_modules/normalize-path": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz", + "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], + "license": "MIT", "engines": { - "node": ">= 12.0.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "node": ">=0.10.0" } }, - "node_modules/lightningcss-linux-x64-musl": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz", - "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==", - "cpu": [ - "x64" - ], + "node_modules/npm-run-path": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz", + "integrity": "sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">= 12.0.0" + "license": "MIT", + "dependencies": { + "path-key": "^3.0.0" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "engines": { + "node": ">=8" } }, - "node_modules/lightningcss-win32-arm64-msvc": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz", - "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==", - "cpu": [ - "arm64" - ], + "node_modules/nyc": { + "version": "15.1.0", + "resolved": "https://registry.npmjs.org/nyc/-/nyc-15.1.0.tgz", + "integrity": "sha512-jMW04n9SxKdKi1ZMGhvUTHBN0EICCRkHemEoE5jm6mTYcqcdas0ATzgUgejlQUHMvpnOZqGB5Xxsv9KxJW1j8A==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">= 12.0.0" + "license": "ISC", + "dependencies": { + "@istanbuljs/load-nyc-config": "^1.0.0", + "@istanbuljs/schema": "^0.1.2", + "caching-transform": "^4.0.0", + "convert-source-map": "^1.7.0", + "decamelize": "^1.2.0", + "find-cache-dir": "^3.2.0", + "find-up": "^4.1.0", + "foreground-child": "^2.0.0", + "get-package-type": "^0.1.0", + "glob": "^7.1.6", + "istanbul-lib-coverage": "^3.0.0", + "istanbul-lib-hook": "^3.0.0", + "istanbul-lib-instrument": "^4.0.0", + "istanbul-lib-processinfo": "^2.0.2", + "istanbul-lib-report": "^3.0.0", + "istanbul-lib-source-maps": "^4.0.0", + "istanbul-reports": "^3.0.2", + "make-dir": "^3.0.0", + "node-preload": "^0.2.1", + "p-map": "^3.0.0", + "process-on-spawn": "^1.0.0", + "resolve-from": "^5.0.0", + "rimraf": "^3.0.0", + "signal-exit": "^3.0.2", + "spawn-wrap": "^2.0.0", + "test-exclude": "^6.0.0", + "yargs": "^15.0.2" }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "bin": { + "nyc": "bin/nyc.js" + }, + "engines": { + "node": ">=8.9" } }, - "node_modules/lightningcss-win32-x64-msvc": { - "version": "1.33.0", - "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz", - "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==", - "cpu": [ - "x64" - ], + "node_modules/nyc/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", "dev": true, - "license": "MPL-2.0", - "optional": true, - "os": [ - "win32" - ], + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, "engines": { - "node": ">= 12.0.0" + "node": ">=8" }, "funding": { - "type": "opencollective", - "url": "https://opencollective.com/parcel" + "url": "https://github.com/chalk/ansi-styles?sponsor=1" } }, - "node_modules/locate-character": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/locate-character/-/locate-character-3.0.0.tgz", - "integrity": "sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==", + "node_modules/nyc/node_modules/brace-expansion": { + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/nyc/node_modules/cliui": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz", + "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.2.0", + "strip-ansi": "^6.0.0", + "wrap-ansi": "^6.2.0" + } + }, + "node_modules/nyc/node_modules/convert-source-map": { + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz", + "integrity": "sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A==", "dev": true, "license": "MIT" }, - "node_modules/loupe": { - "version": "3.2.1", - "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz", - "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==", + "node_modules/nyc/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", "dev": true, "license": "MIT" }, - "node_modules/lz-string": { - "version": "1.5.0", - "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz", - "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==", + "node_modules/nyc/node_modules/foreground-child": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz", + "integrity": "sha512-dCIq9FpEcyQyXKCkyzmlPTFNgrCzPudOe+mhvJU5zAtlBnGVy2yKxtfsxK2tQBThwq225jcvBjpw1Gr40uzZCA==", "dev": true, - "license": "MIT", - "bin": { - "lz-string": "bin/bin.js" + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.0", + "signal-exit": "^3.0.2" + }, + "engines": { + "node": ">=8.0.0" } }, - "node_modules/magic-string": { - "version": "0.30.21", - "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz", - "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==", + "node_modules/nyc/node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", "dev": true, - "license": "MIT", + "license": "ISC", "dependencies": { - "@jridgewell/sourcemap-codec": "^1.5.5" + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" } }, - "node_modules/magicast": { - "version": "0.5.4", - "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.4.tgz", - "integrity": "sha512-llBEhWm1SacoRwgHUoQJYtwp4PBLF4faQi5TCpIGyGs9n4y5+juI0tDgyKIfpqxckRHaHzouUEph3THklWh03w==", + "node_modules/nyc/node_modules/istanbul-lib-instrument": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-4.0.3.tgz", + "integrity": "sha512-BXgQl9kf4WTCPCCpmFGoJkz/+uhvm7h7PFKUYxh7qarQd3ER33vHG//qaE8eN25l07YqZPpHXU9I09l/RD5aGQ==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "@babel/parser": "^7.29.7", - "@babel/types": "^7.29.7", - "source-map-js": "^1.2.1" + "@babel/core": "^7.7.5", + "@istanbuljs/schema": "^0.1.2", + "istanbul-lib-coverage": "^3.0.0", + "semver": "^6.3.0" + }, + "engines": { + "node": ">=8" } }, - "node_modules/make-dir": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz", - "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==", + "node_modules/nyc/node_modules/istanbul-lib-source-maps": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz", + "integrity": "sha512-n3s8EwkdFIJCG3BPKBYvskgXGoy88ARzvegkitk60NxRdwltLOTaH7CUiMRXvwYorl0Q712iEjcWB+fK/MrWVw==", "dev": true, - "license": "MIT", + "license": "BSD-3-Clause", "dependencies": { - "semver": "^7.5.3" + "debug": "^4.1.1", + "istanbul-lib-coverage": "^3.0.0", + "source-map": "^0.6.1" }, "engines": { "node": ">=10" + } + }, + "node_modules/nyc/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/min-indent": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz", - "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==", + "node_modules/nyc/node_modules/minimatch": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz", + "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, + "node_modules/nyc/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/nyc/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/nyc/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/nyc/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", "dev": true, "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, "engines": { - "node": ">=4" + "node": ">=8" } }, - "node_modules/mri": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz", - "integrity": "sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==", + "node_modules/nyc/node_modules/wrap-ansi": { + "version": "6.2.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz", + "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==", "dev": true, "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, "engines": { - "node": ">=4" + "node": ">=8" } }, - "node_modules/mrmime": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz", - "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==", + "node_modules/nyc/node_modules/y18n": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz", + "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/nyc/node_modules/yargs": { + "version": "15.4.1", + "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz", + "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==", "dev": true, "license": "MIT", + "dependencies": { + "cliui": "^6.0.0", + "decamelize": "^1.2.0", + "find-up": "^4.1.0", + "get-caller-file": "^2.0.1", + "require-directory": "^2.1.1", + "require-main-filename": "^2.0.0", + "set-blocking": "^2.0.0", + "string-width": "^4.2.0", + "which-module": "^2.0.0", + "y18n": "^4.0.0", + "yargs-parser": "^18.1.2" + }, "engines": { - "node": ">=10" + "node": ">=8" } }, - "node_modules/nanoid": { - "version": "3.3.18", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", - "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", + "node_modules/nyc/node_modules/yargs-parser": { + "version": "18.1.3", + "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz", + "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==", "dev": true, - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "license": "MIT", - "bin": { - "nanoid": "bin/nanoid.cjs" + "license": "ISC", + "dependencies": { + "camelcase": "^5.0.0", + "decamelize": "^1.2.0" }, "engines": { - "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" + "node": ">=6" } }, "node_modules/obug": { @@ -3402,6 +8459,32 @@ "node": ">=12.20.0" } }, + "node_modules/once": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", + "dev": true, + "license": "ISC", + "dependencies": { + "wrappy": "1" + } + }, + "node_modules/onetime": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz", + "integrity": "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "mimic-fn": "^2.1.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/open": { "version": "10.2.0", "resolved": "https://registry.npmjs.org/open/-/open-10.2.0.tgz", @@ -3421,6 +8504,16 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/os-homedir": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz", + "integrity": "sha512-B5JU3cabzk8c67mRRd3ECmROafjYMXbuzlwtqdM8IbS8ktlTix8aFGb2bAGKrSRIlnfKwovGUUr72JUPyOb6kQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, "node_modules/oxc-parser": { "version": "0.127.0", "resolved": "https://registry.npmjs.org/oxc-parser/-/oxc-parser-0.127.0.tgz", @@ -3500,6 +8593,180 @@ "@oxc-resolver/binding-win32-x64-msvc": "11.21.2" } }, + "node_modules/p-limit": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz", + "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "yocto-queue": "^0.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/p-locate": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz", + "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==", + "dev": true, + "license": "MIT", + "dependencies": { + "p-limit": "^2.2.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/p-locate/node_modules/p-limit": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz", + "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==", + "dev": true, + "license": "MIT", + "dependencies": { + "p-try": "^2.0.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/p-map": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/p-map/-/p-map-3.0.0.tgz", + "integrity": "sha512-d3qXVTF/s+W+CdJ5A29wywV2n8CQQYahlgz2bFiA+4eVNJbHJodPZ+/gXwPGh0bOqA+j8S+6+ckmvLGPk1QpxQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "aggregate-error": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/p-try": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz", + "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/package-hash": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/package-hash/-/package-hash-4.0.0.tgz", + "integrity": "sha512-whdkPIooSu/bASggZ96BWVvZTRMOFxnyUG5PnTSGKoJE2gd5mbVNmR2Nj20QFzxYYgAXpoqC+AiXzl+UMRh7zQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "graceful-fs": "^4.1.15", + "hasha": "^5.0.0", + "lodash.flattendeep": "^4.4.0", + "release-zalgo": "^1.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/package-json-from-dist": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz", + "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==", + "dev": true, + "license": "BlueOak-1.0.0" + }, + "node_modules/parse-json": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz", + "integrity": "sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.0.0", + "error-ex": "^1.3.1", + "json-parse-even-better-errors": "^2.3.0", + "lines-and-columns": "^1.1.6" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/parse-passwd": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz", + "integrity": "sha512-1Y1A//QUXEZK7YKz+rD9WydcE1+EuPr6ZBgKecAB8tmoW6UFv0NREVJe1p+jRxtThkcbbKkfwIbWJe/IeE6m2Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/path-exists": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz", + "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-is-absolute": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/path-key": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", + "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-scurry": { + "version": "1.11.1", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz", + "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "lru-cache": "^10.2.0", + "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" + }, + "engines": { + "node": ">=16 || 14 >=14.18" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/path-scurry/node_modules/lru-cache": { + "version": "10.4.3", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz", + "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==", + "dev": true, + "license": "ISC" + }, "node_modules/pathe": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz", @@ -3537,6 +8804,76 @@ "url": "https://github.com/sponsors/jonschlinkert" } }, + "node_modules/pirates": { + "version": "4.0.7", + "resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz", + "integrity": "sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 6" + } + }, + "node_modules/pkg-dir": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz", + "integrity": "sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "find-up": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/playwright": { + "version": "1.62.1", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.62.1.tgz", + "integrity": "sha512-0M+L3LAD8/nm554LOla9Ayx0j0tmFZ0FBcoQ7F1VuVHpM/XpiC8RcDzBQB8W5+hA8L22THxELzeF+2WcUzvcLg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright-core": "1.62.1" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=20" + }, + "optionalDependencies": { + "fsevents": "2.3.2" + } + }, + "node_modules/playwright-core": { + "version": "1.62.1", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.62.1.tgz", + "integrity": "sha512-wPYSwEBJY9GHraISXqyqtx0na0LpO3XEX7jNDhntbex7tzUS7kLnZsOlFruFJB4Hi/rhDMjXGqHewDZ68nYZVw==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "playwright-core": "cli.js" + }, + "engines": { + "node": ">=20" + } + }, + "node_modules/playwright/node_modules/fsevents": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz", + "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, "node_modules/postcss": { "version": "8.5.25", "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz", @@ -3581,6 +8918,70 @@ "node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0" } }, + "node_modules/process-on-spawn": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/process-on-spawn/-/process-on-spawn-1.1.0.tgz", + "integrity": "sha512-JOnOPQ/8TZgjs1JIH/m9ni7FfimjNa/PRx7y/Wb5qdItsnhO0jE4AT7fC0HjC28DUQWDr50dwSYZLdRMlqDq3Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "fromentries": "^1.2.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/prompts": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz", + "integrity": "sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "kleur": "^3.0.3", + "sisteransi": "^1.0.5" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/prompts/node_modules/kleur": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz", + "integrity": "sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/proxy-from-env": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz", + "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + } + }, + "node_modules/pure-rand": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-7.0.1.tgz", + "integrity": "sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==", + "dev": true, + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/dubzzz" + }, + { + "type": "opencollective", + "url": "https://opencollective.com/fast-check" + } + ], + "license": "MIT" + }, "node_modules/react": { "version": "19.2.8", "resolved": "https://registry.npmjs.org/react/-/react-19.2.8.tgz", @@ -3599,6 +9000,37 @@ "dev": true, "license": "MIT" }, + "node_modules/react-is-18": { + "name": "react-is", + "version": "18.3.1", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz", + "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==", + "dev": true, + "license": "MIT" + }, + "node_modules/react-is-19": { + "name": "react-is", + "version": "19.2.8", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-19.2.8.tgz", + "integrity": "sha512-s5un28nYxKJw5gvUHyW5PCC28CvBqLu9r3cWgzHT4Vo/5fqqkFcdRYsGcKf50WMPpjjFZS5d76fn3YCo2njKwQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/readable-stream": { + "version": "3.6.2", + "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", + "dev": true, + "license": "MIT", + "dependencies": { + "inherits": "^2.0.3", + "string_decoder": "^1.1.1", + "util-deprecate": "^1.0.1" + }, + "engines": { + "node": ">= 6" + } + }, "node_modules/readdirp": { "version": "4.1.2", "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz", @@ -3644,6 +9076,136 @@ "node": ">=8" } }, + "node_modules/release-zalgo": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/release-zalgo/-/release-zalgo-1.0.0.tgz", + "integrity": "sha512-gUAyHVHPPC5wdqX/LG4LWtRYtgjxyX78oanFNTMMyFEfOqdC54s3eE82imuWKbOeqYht2CrNf64Qb8vgmmtZGA==", + "dev": true, + "license": "ISC", + "dependencies": { + "es6-error": "^4.0.1" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/require-directory": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz", + "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/require-main-filename": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz", + "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==", + "dev": true, + "license": "ISC" + }, + "node_modules/resolve-cwd": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz", + "integrity": "sha512-OrZaX2Mb+rJCpH/6CpSqt9xFVpN++x01XnN2ie9g6P5/3xelLAkXWVADpdz1IHD/KFfEXyE6V0U01OQ3UO2rEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "resolve-from": "^5.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/resolve-dir": { + "version": "0.1.1", + "resolved": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz", + "integrity": "sha512-QxMPqI6le2u0dCLyiGzgy92kjkkL6zO0XyvHzjdTNH3zM6e5Hz3BwG6+aEyNgiQ5Xz6PwTwgQEj3U50dByPKIA==", + "dev": true, + "license": "MIT", + "dependencies": { + "expand-tilde": "^1.2.2", + "global-modules": "^0.2.3" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/resolve-from": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz", + "integrity": "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/rimraf": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "integrity": "sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==", + "deprecated": "Rimraf versions prior to v4 are no longer supported", + "dev": true, + "license": "ISC", + "dependencies": { + "glob": "^7.1.3" + }, + "bin": { + "rimraf": "bin.js" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/rimraf/node_modules/brace-expansion": { + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/rimraf/node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/rimraf/node_modules/minimatch": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz", + "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, "node_modules/rolldown": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.2.tgz", @@ -3690,86 +9252,303 @@ "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/sade": { - "version": "1.8.1", - "resolved": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz", - "integrity": "sha512-xal3CZX1Xlo/k4ApwCFrHVACi9fBqJ7V+mwhBsuf/1IOKbBy098Fex+Wa/5QMubw09pSZ/u8EY8PWgevJsXp1A==", + "node_modules/rxjs": { + "version": "7.8.2", + "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz", + "integrity": "sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "tslib": "^2.1.0" + } + }, + "node_modules/sade": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz", + "integrity": "sha512-xal3CZX1Xlo/k4ApwCFrHVACi9fBqJ7V+mwhBsuf/1IOKbBy098Fex+Wa/5QMubw09pSZ/u8EY8PWgevJsXp1A==", + "dev": true, + "license": "MIT", + "dependencies": { + "mri": "^1.1.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/scule": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/scule/-/scule-1.3.0.tgz", + "integrity": "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==", + "dev": true, + "license": "MIT" + }, + "node_modules/semver": { + "version": "7.8.5", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz", + "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/set-blocking": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==", + "dev": true, + "license": "ISC" + }, + "node_modules/set-cookie-parser": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-3.1.2.tgz", + "integrity": "sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==", + "dev": true, + "license": "MIT" + }, + "node_modules/shebang-command": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", + "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", + "dev": true, + "license": "MIT", + "dependencies": { + "shebang-regex": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/shebang-regex": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", + "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/siginfo": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz", + "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==", + "dev": true, + "license": "ISC" + }, + "node_modules/signal-exit": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz", + "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/sirv": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/sirv/-/sirv-3.0.2.tgz", + "integrity": "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@polka/url": "^1.0.0-next.24", + "mrmime": "^2.0.0", + "totalist": "^3.0.0" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/sisteransi": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz", + "integrity": "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==", + "dev": true, + "license": "MIT" + }, + "node_modules/slash": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz", + "integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/source-map": { + "version": "0.6.1", + "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", + "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/source-map-js": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", + "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/source-map-support": { + "version": "0.5.13", + "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.13.tgz", + "integrity": "sha512-SHSKFHadjVA5oR4PPqhtAVdcBWwRYVd6g6cAXnIbRiIwc2EhPrTuKUBdSLvlEKyIP3GCf89fltvcZiP9MMFA1w==", + "dev": true, + "license": "MIT", + "dependencies": { + "buffer-from": "^1.0.0", + "source-map": "^0.6.0" + } + }, + "node_modules/spawn-wrap": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-2.0.0.tgz", + "integrity": "sha512-EeajNjfN9zMnULLwhZZQU3GWBoFNkbngTUPfaawT4RkMiviTxcX0qfhVbGey39mfctfDHkWtuecgQ8NJcyQWHg==", + "dev": true, + "license": "ISC", + "dependencies": { + "foreground-child": "^2.0.0", + "is-windows": "^1.0.2", + "make-dir": "^3.0.0", + "rimraf": "^3.0.0", + "signal-exit": "^3.0.2", + "which": "^2.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/spawn-wrap/node_modules/foreground-child": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz", + "integrity": "sha512-dCIq9FpEcyQyXKCkyzmlPTFNgrCzPudOe+mhvJU5zAtlBnGVy2yKxtfsxK2tQBThwq225jcvBjpw1Gr40uzZCA==", + "dev": true, + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.0", + "signal-exit": "^3.0.2" + }, + "engines": { + "node": ">=8.0.0" + } + }, + "node_modules/spawn-wrap/node_modules/is-windows": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz", + "integrity": "sha512-eXK1UInq2bPmjyX6e3VHIzMLobc4J94i4AWn+Hpq3OU5KkrRC96OAcR3PRJ/pGu6m8TRnBHP9dkXQVsT/COVIA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/spawn-wrap/node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", "dev": true, "license": "MIT", "dependencies": { - "mri": "^1.1.0" + "semver": "^6.0.0" }, "engines": { - "node": ">=6" + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/scule": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/scule/-/scule-1.3.0.tgz", - "integrity": "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==", - "dev": true, - "license": "MIT" - }, - "node_modules/semver": { - "version": "7.8.5", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz", - "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==", + "node_modules/spawn-wrap/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", "dev": true, "license": "ISC", "bin": { "semver": "bin/semver.js" - }, - "engines": { - "node": ">=10" } }, - "node_modules/set-cookie-parser": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-3.1.2.tgz", - "integrity": "sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==", - "dev": true, - "license": "MIT" - }, - "node_modules/siginfo": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz", - "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==", + "node_modules/spawn-wrap/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", "dev": true, "license": "ISC" }, - "node_modules/sirv": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/sirv/-/sirv-3.0.2.tgz", - "integrity": "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==", + "node_modules/spawnd": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/spawnd/-/spawnd-5.0.0.tgz", + "integrity": "sha512-28+AJr82moMVWolQvlAIv3JcYDkjkFTEmfDc503wxrF5l2rQ3dFz6DpbXp3kD4zmgGGldfM4xM4v1sFj/ZaIOA==", "dev": true, "license": "MIT", "dependencies": { - "@polka/url": "^1.0.0-next.24", - "mrmime": "^2.0.0", - "totalist": "^3.0.0" - }, - "engines": { - "node": ">=18" + "exit": "^0.1.2", + "signal-exit": "^3.0.3", + "tree-kill": "^1.2.2", + "wait-port": "^0.2.9" } }, - "node_modules/source-map": { - "version": "0.6.1", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", - "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", + "node_modules/spawnd/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", "dev": true, - "license": "BSD-3-Clause", - "engines": { - "node": ">=0.10.0" - } + "license": "ISC" }, - "node_modules/source-map-js": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", - "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "node_modules/sprintf-js": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==", "dev": true, - "license": "BSD-3-Clause", + "license": "BSD-3-Clause" + }, + "node_modules/stack-utils": { + "version": "2.0.6", + "resolved": "https://registry.npmjs.org/stack-utils/-/stack-utils-2.0.6.tgz", + "integrity": "sha512-XlkWvfIm6RmsWtNJx+uqtKLS8eqFbxUg0ZzLXqY0caEy9l7hruX8IpiDnjsLavoBgqCCR71TqWO8MaXYheJ3RQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "escape-string-regexp": "^2.0.0" + }, "engines": { - "node": ">=0.10.0" + "node": ">=10" } }, "node_modules/stackback": { @@ -3920,6 +9699,160 @@ "node": ">=14.0.0" } }, + "node_modules/string_decoder": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", + "dev": true, + "license": "MIT", + "dependencies": { + "safe-buffer": "~5.2.0" + } + }, + "node_modules/string-length": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/string-length/-/string-length-4.0.2.tgz", + "integrity": "sha512-+l6rNN5fYHNhZZy41RXsYptCjA2Igmq4EG7kZAYFQI1E1VTXarr6ZPXBg6eq7Y6eK4FEhY6AJlyuFIb/v/S0VQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "char-regex": "^1.0.2", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/string-length/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/string-width-cjs": { + "name": "string-width", + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/string-width-cjs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz", + "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^6.2.2" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, + "node_modules/strip-ansi-cjs": { + "name": "strip-ansi", + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi/node_modules/ansi-regex": { + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.3.0.tgz", + "integrity": "sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/strip-bom": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz", + "integrity": "sha512-3xurFv5tEgii33Zi8Jtp55wEIILR9eh34FAW00PZf+JnSsTmV/ioewSgQl97JHvgjoRGwPShsWm+IdrxB35d0w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-final-newline": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz", + "integrity": "sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, "node_modules/strip-indent": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz", @@ -3933,6 +9866,19 @@ "node": ">=8" } }, + "node_modules/strip-json-comments": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz", + "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/supports-color": { "version": "7.2.0", "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", @@ -4014,6 +9960,22 @@ "typescript": "^4.9.4 || ^5.0.0 || ^6.0.0" } }, + "node_modules/synckit": { + "version": "0.11.13", + "resolved": "https://registry.npmjs.org/synckit/-/synckit-0.11.13.tgz", + "integrity": "sha512-eNRKgb3z66Yp3D2CixVujOUvXLFUTij/zVnV8KRyvFdQwpz7I5DS8UfRkTeLzb64u+dkzDSdelE24izu+zSSUg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@pkgr/core": "^0.3.6" + }, + "engines": { + "node": "^14.18.0 || >=16.0.0" + }, + "funding": { + "url": "https://opencollective.com/synckit" + } + }, "node_modules/tagged-tag": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/tagged-tag/-/tagged-tag-1.0.0.tgz", @@ -4027,6 +9989,67 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/test-exclude": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz", + "integrity": "sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==", + "dev": true, + "license": "ISC", + "dependencies": { + "@istanbuljs/schema": "^0.1.2", + "glob": "^7.1.4", + "minimatch": "^3.0.4" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/test-exclude/node_modules/brace-expansion": { + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/test-exclude/node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/test-exclude/node_modules/minimatch": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz", + "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, "node_modules/tiny-invariant": { "version": "1.3.3", "resolved": "https://registry.npmjs.org/tiny-invariant/-/tiny-invariant-1.3.3.tgz", @@ -4088,6 +10111,13 @@ "node": ">=14.0.0" } }, + "node_modules/tmpl": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz", + "integrity": "sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==", + "dev": true, + "license": "BSD-3-Clause" + }, "node_modules/totalist": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/totalist/-/totalist-3.0.1.tgz", @@ -4098,6 +10128,16 @@ "node": ">=6" } }, + "node_modules/tree-kill": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz", + "integrity": "sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==", + "dev": true, + "license": "MIT", + "bin": { + "tree-kill": "cli.js" + } + }, "node_modules/ts-dedent": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/ts-dedent/-/ts-dedent-2.3.0.tgz", @@ -4115,6 +10155,16 @@ "dev": true, "license": "0BSD" }, + "node_modules/type-detect": { + "version": "4.0.8", + "resolved": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz", + "integrity": "sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4" + } + }, "node_modules/type-fest": { "version": "5.8.0", "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-5.8.0.tgz", @@ -4131,6 +10181,16 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/typedarray-to-buffer": { + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz", + "integrity": "sha512-zdu8XMNEDepKKR+XYOXAVPtWui0ly0NtohUscw+UmaHiAWT8hrV1rr//H6V+0DvJ3OQ19S979M0laLfX8rm82Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-typedarray": "^1.0.0" + } + }, "node_modules/typescript": { "version": "5.6.3", "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz", @@ -4159,13 +10219,82 @@ "dev": true, "license": "MIT", "dependencies": { - "@jridgewell/remapping": "^2.3.5", - "acorn": "^8.15.0", - "picomatch": "^4.0.3", - "webpack-virtual-modules": "^0.6.2" + "@jridgewell/remapping": "^2.3.5", + "acorn": "^8.15.0", + "picomatch": "^4.0.3", + "webpack-virtual-modules": "^0.6.2" + }, + "engines": { + "node": ">=18.12.0" + } + }, + "node_modules/unrs-resolver": { + "version": "1.12.2", + "resolved": "https://registry.npmjs.org/unrs-resolver/-/unrs-resolver-1.12.2.tgz", + "integrity": "sha512-dmlRxBJJayXjqTwC+JtF1HhJmgf3ftQ3YejFcZrf4+KKtJv0qDsK1pjqaaVjG7wJ5NJ6UVP1OqRMQ71Z4C3rxQ==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "dependencies": { + "napi-postinstall": "^0.3.4" + }, + "funding": { + "url": "https://opencollective.com/unrs-resolver" + }, + "optionalDependencies": { + "@unrs/resolver-binding-android-arm-eabi": "1.12.2", + "@unrs/resolver-binding-android-arm64": "1.12.2", + "@unrs/resolver-binding-darwin-arm64": "1.12.2", + "@unrs/resolver-binding-darwin-x64": "1.12.2", + "@unrs/resolver-binding-freebsd-x64": "1.12.2", + "@unrs/resolver-binding-linux-arm-gnueabihf": "1.12.2", + "@unrs/resolver-binding-linux-arm-musleabihf": "1.12.2", + "@unrs/resolver-binding-linux-arm64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-arm64-musl": "1.12.2", + "@unrs/resolver-binding-linux-loong64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-loong64-musl": "1.12.2", + "@unrs/resolver-binding-linux-ppc64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-riscv64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-riscv64-musl": "1.12.2", + "@unrs/resolver-binding-linux-s390x-gnu": "1.12.2", + "@unrs/resolver-binding-linux-x64-gnu": "1.12.2", + "@unrs/resolver-binding-linux-x64-musl": "1.12.2", + "@unrs/resolver-binding-openharmony-arm64": "1.12.2", + "@unrs/resolver-binding-wasm32-wasi": "1.12.2", + "@unrs/resolver-binding-win32-arm64-msvc": "1.12.2", + "@unrs/resolver-binding-win32-ia32-msvc": "1.12.2", + "@unrs/resolver-binding-win32-x64-msvc": "1.12.2" + } + }, + "node_modules/update-browserslist-db": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.1.tgz", + "integrity": "sha512-ZZ61DsRsOnakl74HAmp3oSN4aXUmEWXf+i/yv0h7tIBfICc3VdrFErQKUUKPgu3AMsTUMbcongALEN4l6GSUrQ==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/browserslist" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "escalade": "^3.2.0", + "picocolors": "^1.1.1" }, - "engines": { - "node": ">=18.12.0" + "bin": { + "update-browserslist-db": "cli.js" + }, + "peerDependencies": { + "browserslist": ">= 4.21.0" } }, "node_modules/use-sync-external-store": { @@ -4178,6 +10307,42 @@ "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, + "node_modules/util-deprecate": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==", + "dev": true, + "license": "MIT" + }, + "node_modules/uuid": { + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "dev": true, + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], + "license": "MIT", + "bin": { + "uuid": "dist/esm/bin/uuid" + } + }, + "node_modules/v8-to-istanbul": { + "version": "9.3.0", + "resolved": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz", + "integrity": "sha512-kiGUalWN+rgBJ/1OHZsBtU4rXZOfj/7rKQxULKlIzwzQSvMJUUNgPwJEEh7gU6xEVxC0ahoOBvN2YI8GH6FNgA==", + "dev": true, + "license": "ISC", + "dependencies": { + "@jridgewell/trace-mapping": "^0.3.12", + "@types/istanbul-lib-coverage": "^2.0.1", + "convert-source-map": "^2.0.0" + }, + "engines": { + "node": ">=10.12.0" + } + }, "node_modules/vite": { "version": "8.2.1", "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.1.tgz", @@ -4366,6 +10531,139 @@ } } }, + "node_modules/wait-on": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/wait-on/-/wait-on-7.2.0.tgz", + "integrity": "sha512-wCQcHkRazgjG5XoAq9jbTMLpNIjoSlZslrJ2+N9MxDsGEv1HnFoVjOCexL0ESva7Y9cu350j+DWADdk54s4AFQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "axios": "^1.6.1", + "joi": "^17.11.0", + "lodash": "^4.17.21", + "minimist": "^1.2.8", + "rxjs": "^7.8.1" + }, + "bin": { + "wait-on": "bin/wait-on" + }, + "engines": { + "node": ">=12.0.0" + } + }, + "node_modules/wait-port": { + "version": "0.2.14", + "resolved": "https://registry.npmjs.org/wait-port/-/wait-port-0.2.14.tgz", + "integrity": "sha512-kIzjWcr6ykl7WFbZd0TMae8xovwqcqbx6FM9l+7agOgUByhzdjfzZBPK2CPufldTOMxbUivss//Sh9MFawmPRQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "chalk": "^2.4.2", + "commander": "^3.0.2", + "debug": "^4.1.1" + }, + "bin": { + "wait-port": "bin/wait-port.js" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wait-port/node_modules/ansi-styles": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz", + "integrity": "sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^1.9.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/wait-port/node_modules/chalk": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz", + "integrity": "sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^3.2.1", + "escape-string-regexp": "^1.0.5", + "supports-color": "^5.3.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/wait-port/node_modules/color-convert": { + "version": "1.9.3", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz", + "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "1.1.3" + } + }, + "node_modules/wait-port/node_modules/color-name": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz", + "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==", + "dev": true, + "license": "MIT" + }, + "node_modules/wait-port/node_modules/commander": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/commander/-/commander-3.0.2.tgz", + "integrity": "sha512-Gar0ASD4BDyKC4hl4DwHqDrmvjoxWKZigVnAbn5H1owvm4CxCPdb0HQDehwNYMJpla5+M2tPmPARzhtYuwpHow==", + "dev": true, + "license": "MIT" + }, + "node_modules/wait-port/node_modules/escape-string-regexp": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz", + "integrity": "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.8.0" + } + }, + "node_modules/wait-port/node_modules/has-flag": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz", + "integrity": "sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/wait-port/node_modules/supports-color": { + "version": "5.5.0", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz", + "integrity": "sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==", + "dev": true, + "license": "MIT", + "dependencies": { + "has-flag": "^3.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/walker": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/walker/-/walker-1.0.8.tgz", + "integrity": "sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "makeerror": "1.0.12" + } + }, "node_modules/webpack-virtual-modules": { "version": "0.6.2", "resolved": "https://registry.npmjs.org/webpack-virtual-modules/-/webpack-virtual-modules-0.6.2.tgz", @@ -4373,6 +10671,29 @@ "dev": true, "license": "MIT" }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/which-module": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz", + "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==", + "dev": true, + "license": "ISC" + }, "node_modules/why-is-node-running": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz", @@ -4390,6 +10711,128 @@ "node": ">=8" } }, + "node_modules/wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs": { + "name": "wrap-ansi", + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/wrap-ansi-cjs/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi/node_modules/ansi-styles": { + "version": "6.2.3", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz", + "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/wrappy": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/write-file-atomic": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-5.0.1.tgz", + "integrity": "sha512-+QU2zd6OTD8XWIJCbffaiQeH9U73qIqafo1x6V1snCWYGJf6cVE0cDR4D8xRzcEnfI21IFrUPzPGtcPf8AC+Rw==", + "dev": true, + "license": "ISC", + "dependencies": { + "imurmurhash": "^0.1.4", + "signal-exit": "^4.0.1" + }, + "engines": { + "node": "^14.17.0 || ^16.13.0 || >=18.0.0" + } + }, "node_modules/ws": { "version": "8.21.3", "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz", @@ -4428,6 +10871,107 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/xml": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/xml/-/xml-1.0.1.tgz", + "integrity": "sha512-huCv9IH9Tcf95zuYCsQraZtWnJvBtLVE0QHMOs8bWyZAFZNDcYjsPq1nEx8jKA9y+Beo9v+7OBPRisQTjinQMw==", + "dev": true, + "license": "MIT" + }, + "node_modules/y18n": { + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz", + "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=10" + } + }, + "node_modules/yallist": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz", + "integrity": "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==", + "dev": true, + "license": "ISC" + }, + "node_modules/yargs": { + "version": "17.7.3", + "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.3.tgz", + "integrity": "sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==", + "dev": true, + "license": "MIT", + "dependencies": { + "cliui": "^8.0.1", + "escalade": "^3.1.1", + "get-caller-file": "^2.0.5", + "require-directory": "^2.1.1", + "string-width": "^4.2.3", + "y18n": "^5.0.5", + "yargs-parser": "^21.1.1" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/yargs-parser": { + "version": "21.1.1", + "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz", + "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/yargs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/yargs/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/yargs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/yocto-queue": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", + "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/zimmerframe": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/zimmerframe/-/zimmerframe-1.1.4.tgz", diff --git a/package.json b/package.json index 88618a049..c02d54a98 100644 --- a/package.json +++ b/package.json @@ -9,6 +9,7 @@ "build": "npm run verify:release-version && vite build", "storybook": "storybook dev -p 6006", "build-storybook": "storybook build", + "test-storybook": "test-storybook", "preview": "vite preview", "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json", "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch", @@ -24,7 +25,8 @@ "overrides": { "cookie": "^0.7.2", "nanoid": "^3.3.18", - "postcss": "^8.5.18" + "postcss": "^8.5.18", + "uuid": "^11.1.1" }, "dependencies": { "@tauri-apps/api": "^2", @@ -34,6 +36,7 @@ "devDependencies": { "@storybook/addon-a11y": "^10.5.10", "@storybook/sveltekit": "^10.5.10", + "@storybook/test-runner": "^0.24.4", "@sveltejs/adapter-static": "^3.0.6", "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.3.0", diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts index ad4aab8de..207b63c09 100644 --- a/src/lib/ux/ProviderStatusCard.stories.ts +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -28,6 +28,7 @@ export const Clear: Story = { }; export const MaterializationStalled: Story = { + parameters: { viewport: { defaultViewport: "mobile" } }, args: { provider: "iCloud", state: "materialization-stalled", diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index d81cddb49..f7ce0801d 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -38,7 +38,10 @@ describe("UI/UX design and Storybook contract", () => { expect(story).toContain("toBeDisabled"); expect(config).toContain('test: "error"'); expect(config).toContain("mobile"); + expect(config).toContain('defaultViewport: "desktop"'); + expect(story).toContain('defaultViewport: "mobile"'); expect(workflow).toContain("npm run build-storybook"); + expect(workflow).toContain("npm run test-storybook"); }); it("uses release-consumer terminology rather than a shopping-domain actor", () => { From 3ac4e421a61f44d69e772dd612cb5c8eb58749bf Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 18:21:09 +0900 Subject: [PATCH 536/691] ci: install Chromium for Storybook checks --- .github/workflows/test.yml | 1 + docs/product-technical-gap-baseline.md | 2 +- src/lib/uxContract.test.ts | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f10dc16e4..8e30b9870 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -41,6 +41,7 @@ jobs: with: node-version: 20.19.0 - run: npm ci + - run: npx playwright install --with-deps chromium - run: npm test - run: npm run build - run: npm run build-storybook diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 360de6c88..caa324602 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -60,7 +60,7 @@ baseline records the current loop's runtime and integration evidence. evidence, materialization stall, cancel callback, disabled action, mobile viewport, and reduced motion states. The a11y addon is configured to fail a story on detected violations; Storybook is development-only and cannot authorize cloud writes or source eviction. -- Local evidence at this implementation snapshot: `npm test` 30 files/129 tests, `svelte-check` +- Local evidence at this implementation snapshot: `npm test` 32 files/134 tests, `svelte-check` 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and the Storybook test runner passed 4 smoke/interaction stories in Chromium. The production and development dependency audit reported 0 vulnerabilities after the uuid override. The Storybook diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index f7ce0801d..8032bb32b 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -41,6 +41,7 @@ describe("UI/UX design and Storybook contract", () => { expect(config).toContain('defaultViewport: "desktop"'); expect(story).toContain('defaultViewport: "mobile"'); expect(workflow).toContain("npm run build-storybook"); + expect(workflow).toContain("playwright install --with-deps chromium"); expect(workflow).toContain("npm run test-storybook"); }); From fc497ada2d1e07bb1fcf6dca053e17421a9fb7e9 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 18:24:13 +0900 Subject: [PATCH 537/691] fix: enforce Storybook accessibility edges --- .storybook/test-runner.ts | 12 ++++++++++++ src/lib/ux/ProviderStatusCard.stories.ts | 4 ++++ src/lib/ux/ProviderStatusCard.svelte | 4 ++-- src/lib/uxContract.test.ts | 2 ++ src/routes/+page.svelte | 2 +- 5 files changed, 21 insertions(+), 3 deletions(-) create mode 100644 .storybook/test-runner.ts diff --git a/.storybook/test-runner.ts b/.storybook/test-runner.ts new file mode 100644 index 000000000..dd1bce5fa --- /dev/null +++ b/.storybook/test-runner.ts @@ -0,0 +1,12 @@ +import { getStoryContext, type TestRunnerConfig } from "@storybook/test-runner"; + +const config: TestRunnerConfig = { + async preVisit(page, story) { + const context = await getStoryContext(page, story); + if (context.parameters?.viewport?.defaultViewport === "mobile") { + await page.setViewportSize({ width: 375, height: 812 }); + } + }, +}; + +export default config; diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts index 207b63c09..784c33d8a 100644 --- a/src/lib/ux/ProviderStatusCard.stories.ts +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -20,6 +20,7 @@ type Story = StoryObj; export const Clear: Story = { args: { + statusId: "clear-provider-status", provider: "iCloud", state: "clear", details: "새 복사는 허용할 수 있지만 개별 파일 attestation은 별도로 필요합니다.", @@ -30,6 +31,7 @@ export const Clear: Story = { export const MaterializationStalled: Story = { parameters: { viewport: { defaultViewport: "mobile" } }, args: { + statusId: "stalled-provider-status", provider: "iCloud", state: "materialization-stalled", details: "File Provider 요청이 진행률 없이 만료되어 새 복사와 원본 정리를 차단했습니다.", @@ -48,6 +50,7 @@ export const MaterializationStalled: Story = { export const CheckingWithoutAction: Story = { args: { + statusId: "checking-provider-status", provider: "Google Drive", state: "checking", details: "공급자 전역 증거를 읽기 전용으로 확인하고 있습니다.", @@ -61,6 +64,7 @@ export const CheckingWithoutAction: Story = { export const IncompleteEvidence: Story = { args: { + statusId: "incomplete-provider-status", provider: "OneDrive", state: "provider-sync-incomplete", details: "공급자 상태 증거가 완전하지 않아 기존 목적지를 채택하지 않습니다.", diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte index b98b22477..9aa776714 100644 --- a/src/lib/ux/ProviderStatusCard.svelte +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -10,7 +10,7 @@ canCancel?: boolean; cancelLabel?: string; onCancel?: () => void; - statusId?: string; + statusId: string; }; let { @@ -22,7 +22,7 @@ canCancel = false, cancelLabel = "복사 취소 요청", onCancel, - statusId = "provider-status", + statusId, }: Props = $props(); const stateLabel: Record = { diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index 8032bb32b..51ac5e14c 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -23,6 +23,7 @@ describe("UI/UX design and Storybook contract", () => { expect(page).toContain('id="main-content" tabindex="-1"'); expect(page).toContain('for="scan-root"'); expect(page).toContain('role="alert"'); + expect(page).toContain('role="group" aria-label="스캔 제어"'); expect(page).toContain('aria-live="polite"'); expect(page).not.toContain("alert(`스캔 시작 실패"); }); @@ -43,6 +44,7 @@ describe("UI/UX design and Storybook contract", () => { expect(workflow).toContain("npm run build-storybook"); expect(workflow).toContain("playwright install --with-deps chromium"); expect(workflow).toContain("npm run test-storybook"); + expect(read(".storybook/test-runner.ts")).toContain("setViewportSize"); }); it("uses release-consumer terminology rather than a shopping-domain actor", () => { diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte index 0497efd07..88b3b42b6 100644 --- a/src/routes/+page.svelte +++ b/src/routes/+page.svelte @@ -96,7 +96,7 @@

    DiskSage

    -
    +
    {#if scanning} - + {:else} - + {/if} {#if stats} From f771c1b9fec3fc0888c601b372d9f1c5151d664f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 03:08:40 -0700 Subject: [PATCH 550/691] fix: opt provider action into design controls --- src/lib/ux/ProviderStatusCard.svelte | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte index 72504e037..820ec6174 100644 --- a/src/lib/ux/ProviderStatusCard.svelte +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -62,6 +62,7 @@ {/if} {#if canCancel}
    {/if} {#if reconciliationError}{/if} + {#if selectedRootDetails()?.provider === "icloud"} + 0, + icloudHealthBlockedSinceMs, + Boolean(icloudHealthError), + )} + details={icloudStatusDetails()} + observedAt={icloudHealth ? evidenceObservedAt(icloudHealth.observed_at_ms) : undefined} + blockedFor={icloudHealthBlockedSinceMs > 0 ? duration(Math.max(0, Date.now() - icloudHealthBlockedSinceMs)) : undefined} + canCancel={Boolean(icloudHealth?.file_provider_activity && ( + icloudHealth.file_provider_activity.no_progress_fetch_count > 0 + || icloudHealth.file_provider_activity.no_progress_create_count > 0 + || icloudHealth.file_provider_activity.materialization_failure_count > 0 + || icloudHealth.file_provider_activity.staged_item_missing_count > 0 + || icloudHealth.file_provider_activity.sync_excluded_filename_count > 0 + || icloudHealth.file_provider_activity.sync_excluded_root_count > 0 + || (icloudHealth.file_provider_activity.pending_indexable_count ?? 0) > 0 + || icloudHealth.file_provider_activity.timed_out + || icloudHealth.file_provider_activity.active_upload_count > 0 + || icloudHealth.file_provider_activity.active_download_count > 0 + ))} + cancelLabel={cancellingFinderCopy ? "Finder 복사 취소 요청 중…" : "Finder 복사 취소 요청"} + onCancel={cancelFinderCopy} + statusId="icloud-provider-status" + /> + {/if} {#if icloudHealth}
    iCloud 새 복사 admission @@ -1033,6 +1095,21 @@

    {/if} {#if providerGlobalSync} + 0, + providerGlobalSyncBlockedSinceMs, + )} + details={providerGlobalStatusDetails()} + observedAt={evidenceObservedAt(providerGlobalSyncObservedAtMs)} + blockedFor={providerGlobalSyncBlockedSinceMs > 0 ? duration(Math.max(0, Date.now() - providerGlobalSyncBlockedSinceMs)) : undefined} + canCancel={canCancelFinderCopyForProviderGlobalSync(providerGlobalSync)} + cancelLabel={cancellingFinderCopy ? "Finder 복사 취소 요청 중…" : "Finder 복사 취소 요청"} + onCancel={cancelFinderCopy} + statusId="provider-global-sync-status" + />
    {providerGlobalSync.provider} 전역 동기화 admission From 94ecd077fdf565e463945c720e4612f58946681c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:13:39 +0900 Subject: [PATCH 581/691] docs: bind provider stall UX amendment --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 0eba47076..c30fd327e 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -536,5 +536,5 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `provider-sync-incomplete`, a repeated blocker lasting at least 15 minutes to `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and -does not grant copy, attestation, or eviction authority. This is implemented at UX head -`9c4d67964d2c3572e4109f624f5a63a6d4fb2d12`; `svelte-check` and the CloudArchive contract suite pass. +does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up +commits `9c4d679` and `52a0c22`; `svelte-check` and the CloudArchive contract suite pass. From b24549c44f6527b1ba08914fa596d521844d5f66 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:15:31 +0900 Subject: [PATCH 582/691] test: cover provider stall status rendering --- src/lib/cloudArchiveAdmissionContract.test.ts | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index f809d9774..79800e73d 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -58,6 +58,10 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("provider-global-sync-item-not-found"); expect(source).toContain("cancellingFinderCopy || checkingProviderGlobalSync"); expect(source).toContain("finderCopyCancelStatus = \"Finder 복사 취소 요청을 보냈습니다. 상태를 다시 확인하십시오.\""); + expect(source).toContain('import ProviderStatusCard from "./ux/ProviderStatusCard.svelte";'); + expect(source).toContain('state={providerStatusState('); + expect(source).toContain('"materialization-stalled"'); + expect(source).toContain('statusId="icloud-provider-status"'); }); it("does not run the heavy iCloud probe for non-iCloud selected roots", () => { From 278b62bd127a9afee7a9f5c3b34894f0945e494d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:16:04 +0900 Subject: [PATCH 583/691] docs: bind UX implementation head --- docs/product-technical-gap-baseline.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index d56e658f7..06f286359 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -674,7 +674,7 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 exact implementation head is `9c4d67964d2c3572e4109f624f5a63a6d4fb2d12`; the +- DiskSage PR #246 exact implementation head is `52a0c22d083de38b35b5e94723044c782c6df114`; the branch remains open with `UNSTABLE` checks queued and no qualifying approval. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel From 32e5222d31179906d62d05940a2efdeca1facdc0 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:21:39 +0900 Subject: [PATCH 584/691] docs: refresh exact-head provider and PR audit --- docs/product-technical-gap-baseline.md | 23 +++++++++++++---------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 06f286359..d378f632d 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -1,8 +1,10 @@ # DiskSage product and technical gap baseline **Snapshot:** 2026-08-21 (Asia/Seoul) -**Repository heads at snapshot:** `feat/provider-sync-dynamic-goals` source through `6f424af`; this -baseline records the current loop's runtime and integration evidence. +**Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head +`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 is at `278b62bd127a9afee7a9f5c3b34894f0945e494d`. +The local provider follow-up `a394ba2` is not published because the active PR-only ruleset rejects +direct branch updates; this baseline records the current loop's runtime and integration evidence. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. **Evidence rule:** this document is a dated baseline, not an authority for transfer or deletion. Runtime receipts, provider attestations, object identity, and current GitHub checks remain authoritative. @@ -18,8 +20,8 @@ baseline records the current loop's runtime and integration evidence. | Priority | Gap / observable symptom | Evidence | Acceptance criterion | | --- | --- | --- | --- | -| P0 | Cloud offload can remain blocked while a provider is syncing or reports `local-current`/`is_uploaded=false`; the user sees no safe reclaim despite free cloud capacity. | Existing provider-global and iCloud native-state gates; `bird`/`fileproviderd` remain active during the current incident, with about 3.8 GiB available at the latest observation. | UI explains the exact blocker, last evidence time, and next bounded retry; a verified provider attestation alone can advance a candidate, never a stale projection. | -| P0 | A long Finder/provider copy can appear hung and consume the remaining local headroom. | The `real_datasets` Finder copy remained at “준비 중” for hours; the latest bounded iCloud dump retained 125 no-progress fetch/create markers, a 95.24% upload, and a zero-progress 1.06GB download while scheduling was `running`. Bounded `/bin/cp`/`mkdir` and global probes use private process groups and headroom gates. | Preview shows required bytes + staging reserve; timeout cleans only the child-created destination and leaves a durable receipt. | +| P0 | Cloud offload can remain blocked while a provider is syncing or reports `local-current`/`is_uploaded=false`; the user sees no safe reclaim despite free cloud capacity. | Existing provider-global and iCloud native-state gates; the latest bounded iCloud evidence reported complete native status but 12,474 pending indexable items, active transfer markers, and filename/root exclusions. | UI explains the exact blocker, last evidence time, and next bounded retry; a verified provider attestation alone can advance a candidate, never a stale projection. | +| P0 | A long Finder/provider copy can appear hung and consume the remaining local headroom. | The `real_datasets` Finder copy remained at “준비 중” for hours; the latest bounded iCloud observation retained `pending-indexable-count=12474`, active upload/download markers, and 18 filename plus 2 root exclusions. | Preview shows required bytes + staging reserve; the running UX shows stable blocker duration and a cancel-only escape; timeout cleans only the child-created destination and leaves a durable receipt. | | P1 | Personal desktop-client capacity is not the same as API quota; OAuth is unnecessarily implied for a single-user installation. | ADR-0001 permits copy-only desktop-client mode marked `capacity-unverified`; the cloud connection UI defaults to read-only OAuth consent and requires an explicit write-access opt-in. | Settings clearly distinguish local desktop client, API quota, and organization OAuth; no OAuth prompt is required for the local-only path. | | P1 | Users cannot yet see a full lineage graph connecting source, metadata, archive member, provider item, receipt, Goal, and eviction decision. | The candidate UI now exposes a compact source→metadata→archive→provider lineage panel using the stable fingerprint, confidence, and blocker state; provider item/receipt/permit remain explicitly pending until their evidence exists. | Export and UI show stable content IDs, provenance edges, confidence, and blockers without exposing raw private paths. | | P1 | “Orphan”/duplicate cleanup is difficult to trust because relationship evidence is not visible before action. | Ontology and duplicate/orphan PRs are open; current default path remains fail-closed. | Every proposed removal has an explainable parent/child/duplicate relation, identity recheck, reversible Trash action, and a no-candidate result when evidence is incomplete. | @@ -32,7 +34,7 @@ baseline records the current loop's runtime and integration evidence. | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | At this loop capture PR #213 is exact head `6f424af` on `feat/provider-sync-dynamic-goals`; its required checks reset after the provider-dump pipe repair and the prior review decision remains stale `CHANGES_REQUESTED`. The orphan cleanup follow-up is PR #245, initially implemented at `3d2406c` and subsequently extended with provider-sync and cleanup-refresh safety fixes. Both remain protected and unmerged pending exact-head review. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 is exact head `278b62b`, `UNSTABLE`, with build jobs in progress/queued and no qualifying approval. Local provider follow-up `a394ba2` cannot be published under the active PR-only ruleset. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -674,17 +676,18 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 exact implementation head is `52a0c22d083de38b35b5e94723044c782c6df114`; the - branch remains open with `UNSTABLE` checks queued and no qualifying approval. The UX now renders +- DiskSage PR #246 current exact head is `278b62bd127a9afee7a9f5c3b34894f0945e494d`; the branch + remains open with `UNSTABLE` checks in progress/queued and no qualifying approval. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel request. This is cancellation guidance only; it grants no copy, attestation, or eviction authority. - The iCloud UX exposes `pending_indexable_count` and labels the corresponding admission blocker; the bounded live observation recorded 12,474 pending indexable items, active transfer markers, and filename/root exclusions. The displayed action remains read-only/cancel-only. -- Naruon PR #1434 remains open at `c05fb102ff2f099e9bb6513dd541ec3d0496c472`; substantive - security, frontend, backend, Noema, and CodeQL checks are successful, but coverage evidence is - queued and the metadata-only gate is still in progress. Its protected merge state is blocked. +- Naruon PR #1443 remains open at `d61d316f67e130f951ef8d769c6d148b9bf7b9d0`; backend, security, + frontend, Noema, and CodeQL checks are successful, but coverage is queued and the metadata-only + gate is failing. A local multiline-head parser repair exists but cannot be published under the + current PR-only ruleset; its protected merge state remains blocked. - semantic-data-portal PR #59 remains open at `65e4fd770c69192daafe51854eb73eb2f06f0bf4` with completed substantive checks successful, but protected review is still required. PR #61 remains open at `0c248d288be4ef9a01cd498b7311157b053a63e1`; its CodeQL failures came from the hosted From 67fa7ed3ca17555594b0acd80948cb4ed10cbfdd Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:24:41 +0900 Subject: [PATCH 585/691] docs: refresh current iCloud backlog evidence --- docs/product-technical-gap-baseline.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index d378f632d..d098ad7ef 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -20,8 +20,8 @@ direct branch updates; this baseline records the current loop's runtime and inte | Priority | Gap / observable symptom | Evidence | Acceptance criterion | | --- | --- | --- | --- | -| P0 | Cloud offload can remain blocked while a provider is syncing or reports `local-current`/`is_uploaded=false`; the user sees no safe reclaim despite free cloud capacity. | Existing provider-global and iCloud native-state gates; the latest bounded iCloud evidence reported complete native status but 12,474 pending indexable items, active transfer markers, and filename/root exclusions. | UI explains the exact blocker, last evidence time, and next bounded retry; a verified provider attestation alone can advance a candidate, never a stale projection. | -| P0 | A long Finder/provider copy can appear hung and consume the remaining local headroom. | The `real_datasets` Finder copy remained at “준비 중” for hours; the latest bounded iCloud observation retained `pending-indexable-count=12474`, active upload/download markers, and 18 filename plus 2 root exclusions. | Preview shows required bytes + staging reserve; the running UX shows stable blocker duration and a cancel-only escape; timeout cleans only the child-created destination and leaves a durable receipt. | +| P0 | Cloud offload can remain blocked while a provider is syncing or reports `local-current`/`is_uploaded=false`; the user sees no safe reclaim despite free cloud capacity. | Existing provider-global and iCloud native-state gates; the latest bounded iCloud evidence reported 13,737 pending indexable items, a 12,449-entry reconciliation backlog, active transfer markers, and filename/root exclusions. | UI explains the exact blocker, last evidence time, and next bounded retry; a verified provider attestation alone can advance a candidate, never a stale projection. | +| P0 | A long Finder/provider copy can appear hung and consume the remaining local headroom. | The `real_datasets` Finder copy remained at “준비 중” for hours; the latest bounded iCloud observation retained `pending-indexable-count=13737`, one no-progress fetch, active upload/download markers, and 18 filename plus 2 root exclusions. | Preview shows required bytes + staging reserve; the running UX shows stable blocker duration and a cancel-only escape; timeout cleans only the child-created destination and leaves a durable receipt. | | P1 | Personal desktop-client capacity is not the same as API quota; OAuth is unnecessarily implied for a single-user installation. | ADR-0001 permits copy-only desktop-client mode marked `capacity-unverified`; the cloud connection UI defaults to read-only OAuth consent and requires an explicit write-access opt-in. | Settings clearly distinguish local desktop client, API quota, and organization OAuth; no OAuth prompt is required for the local-only path. | | P1 | Users cannot yet see a full lineage graph connecting source, metadata, archive member, provider item, receipt, Goal, and eviction decision. | The candidate UI now exposes a compact source→metadata→archive→provider lineage panel using the stable fingerprint, confidence, and blocker state; provider item/receipt/permit remain explicitly pending until their evidence exists. | Export and UI show stable content IDs, provenance edges, confidence, and blockers without exposing raw private paths. | | P1 | “Orphan”/duplicate cleanup is difficult to trust because relationship evidence is not visible before action. | Ontology and duplicate/orphan PRs are open; current default path remains fail-closed. | Every proposed removal has an explainable parent/child/duplicate relation, identity recheck, reversible Trash action, and a no-candidate result when evidence is incomplete. | @@ -682,8 +682,9 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel request. This is cancellation guidance only; it grants no copy, attestation, or eviction authority. - The iCloud UX exposes `pending_indexable_count` and labels the corresponding admission blocker; - the bounded live observation recorded 12,474 pending indexable items, active transfer markers, - and filename/root exclusions. The displayed action remains read-only/cancel-only. + the latest bounded live observation recorded 13,737 pending indexable items, a 12,449-entry + reconciliation backlog, one no-progress fetch, active transfer markers, and filename/root + exclusions `18/2`. The displayed action remains read-only/cancel-only. - Naruon PR #1443 remains open at `d61d316f67e130f951ef8d769c6d148b9bf7b9d0`; backend, security, frontend, Noema, and CodeQL checks are successful, but coverage is queued and the metadata-only gate is failing. A local multiline-head parser repair exists but cannot be published under the From 5126c8760ba7f117b8fd3dbc1e077092b881c1d4 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:25:14 +0900 Subject: [PATCH 586/691] docs: bind latest iCloud runtime receipt --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index c30fd327e..335c4bac2 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -538,3 +538,11 @@ provider-global observations, not only in Storybook. It maps a missing/error obs and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up commits `9c4d679` and `52a0c22`; `svelte-check` and the CloudArchive contract suite pass. + +## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) + +The latest bounded iCloud receipt observed pending indexable `13,737`, a `12,449`-entry +reconciliation backlog, active upload/download markers, one no-progress fetch, and filename/root +exclusions `18/2`. CloudArchive displays these aggregate blockers and the elapsed provider-stall +state; it does not expose raw provider paths or grant mutation authority. The bounded observation +completed without provider or source mutation. From 3a8ee6563560c12534cc23501be2fe97ffb59443 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:27:46 +0900 Subject: [PATCH 587/691] docs: distinguish implementation and binding heads --- docs/product-technical-gap-baseline.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index d098ad7ef..25bd3efde 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -2,7 +2,8 @@ **Snapshot:** 2026-08-21 (Asia/Seoul) **Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head -`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 is at `278b62bd127a9afee7a9f5c3b34894f0945e494d`. +`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 implementation remains at `52a0c22`, with +latest docs/test binding head `5126c8760ba7f117b8fd3dbc1e077092b881c1d4`. The local provider follow-up `a394ba2` is not published because the active PR-only ruleset rejects direct branch updates; this baseline records the current loop's runtime and integration evidence. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. @@ -676,8 +677,8 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 current exact head is `278b62bd127a9afee7a9f5c3b34894f0945e494d`; the branch - remains open with `UNSTABLE` checks in progress/queued and no qualifying approval. The UX now renders +- DiskSage PR #246 implementation head remains `52a0c22`; later test/documentation commits keep the + branch open with `UNSTABLE` checks in progress/queued and no qualifying approval. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel request. This is cancellation guidance only; it grants no copy, attestation, or eviction authority. From 64b067d27dc919b0e4e4e380ad633e570c74e558 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:30:59 +0900 Subject: [PATCH 588/691] fix: align provider stall duration with evidence time --- .../adr/0001-cloud-offload-goal-state.md | 8 ++++++++ src/lib/CloudArchive.svelte | 20 ++++++++++++++++--- src/lib/cloudArchiveAdmissionContract.test.ts | 3 +++ 3 files changed, 28 insertions(+), 3 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 335c4bac2..081e944fc 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -546,3 +546,11 @@ reconciliation backlog, active upload/download markers, one no-progress fetch, a exclusions `18/2`. CloudArchive displays these aggregate blockers and the elapsed provider-stall state; it does not expose raw provider paths or grant mutation authority. The bounded observation completed without provider or source mutation. + +## Amendment: provider stall duration uses receipt time (2026-08-21) + +The running status card now derives both its stall threshold and displayed duration from the +provider observation timestamp, matching the detail panel and avoiding wall-clock drift during the +five-minute blocked-probe backoff. A missing observation remains `checking` or +`provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction +authority. diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 4a1e1a9fb..387498dad 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -829,15 +829,27 @@ hasObservation: boolean, blocked: boolean, blockedSinceMs: number, + observedAtMs: number, error = false, ): "clear" | "checking" | "provider-sync-incomplete" | "materialization-stalled" { if (!hasObservation && !error) return "checking"; if (!blocked && !error) return "clear"; - return blockedSinceMs > 0 && Date.now() - blockedSinceMs >= PROVIDER_STALL_WARNING_MS + return observedAtMs > 0 + && blockedSinceMs > 0 + && observedAtMs - blockedSinceMs >= PROVIDER_STALL_WARNING_MS ? "materialization-stalled" : "provider-sync-incomplete"; } + function blockedDuration( + blockedSinceMs: number, + observedAtMs: number, + ): string | undefined { + return blockedSinceMs > 0 && observedAtMs > 0 + ? duration(Math.max(0, observedAtMs - blockedSinceMs)) + : undefined; + } + function icloudStatusDetails(): string { if (!icloudHealth) return icloudHealthError || "iCloud File Provider 상태 증거를 확인하는 중입니다."; const activity = icloudHealth.file_provider_activity; @@ -951,11 +963,12 @@ Boolean(icloudHealth), (icloudHealth?.new_copy_admission_blockers.length ?? 0) > 0, icloudHealthBlockedSinceMs, + icloudHealth?.observed_at_ms ?? 0, Boolean(icloudHealthError), )} details={icloudStatusDetails()} observedAt={icloudHealth ? evidenceObservedAt(icloudHealth.observed_at_ms) : undefined} - blockedFor={icloudHealthBlockedSinceMs > 0 ? duration(Math.max(0, Date.now() - icloudHealthBlockedSinceMs)) : undefined} + blockedFor={blockedDuration(icloudHealthBlockedSinceMs, icloudHealth?.observed_at_ms ?? 0)} canCancel={Boolean(icloudHealth?.file_provider_activity && ( icloudHealth.file_provider_activity.no_progress_fetch_count > 0 || icloudHealth.file_provider_activity.no_progress_create_count > 0 @@ -1101,10 +1114,11 @@ true, providerGlobalSync.blockers.length > 0, providerGlobalSyncBlockedSinceMs, + providerGlobalSyncObservedAtMs, )} details={providerGlobalStatusDetails()} observedAt={evidenceObservedAt(providerGlobalSyncObservedAtMs)} - blockedFor={providerGlobalSyncBlockedSinceMs > 0 ? duration(Math.max(0, Date.now() - providerGlobalSyncBlockedSinceMs)) : undefined} + blockedFor={blockedDuration(providerGlobalSyncBlockedSinceMs, providerGlobalSyncObservedAtMs)} canCancel={canCancelFinderCopyForProviderGlobalSync(providerGlobalSync)} cancelLabel={cancellingFinderCopy ? "Finder 복사 취소 요청 중…" : "Finder 복사 취소 요청"} onCancel={cancelFinderCopy} diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index 79800e73d..c18529288 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -60,6 +60,9 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("finderCopyCancelStatus = \"Finder 복사 취소 요청을 보냈습니다. 상태를 다시 확인하십시오.\""); expect(source).toContain('import ProviderStatusCard from "./ux/ProviderStatusCard.svelte";'); expect(source).toContain('state={providerStatusState('); + expect(source).toContain("observedAtMs: number"); + expect(source).toContain("blockedDuration(icloudHealthBlockedSinceMs, icloudHealth?.observed_at_ms ?? 0)"); + expect(source).toContain("blockedDuration(providerGlobalSyncBlockedSinceMs, providerGlobalSyncObservedAtMs)"); expect(source).toContain('"materialization-stalled"'); expect(source).toContain('statusId="icloud-provider-status"'); }); From 768c750bdbf9a603277f0f3d523e83c582a5f0b6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:34:26 +0900 Subject: [PATCH 589/691] docs: record provider status card clock fix --- CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index f65e54027..0d8df8dce 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,9 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Add an accessible, token-driven Svelte shell contract with Storybook scenes for provider-clear, incomplete-evidence, materialization-stall, checking, keyboard, responsive, and reduced-motion states. Storybook is development-only; Rust receipts and approval gates remain authoritative. +- Render the provider status card in the running CloudArchive view, including the path-free iCloud + indexing backlog and a bounded Finder-cancel escape; the card remains informational and cannot + authorize cloud writes, attestation, or source eviction. - Persist bounded, path-free local-volume snapshots from cloud plans with create-only files, content fingerprints, Unix `0400`/`0700` permissions, and shape-limited retention; surface a @@ -48,6 +51,9 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and ### Fixed +- Use the provider observation timestamp consistently for stall thresholds and durations so the + summary card and detailed evidence panel cannot disagree during blocked-probe backoff. + - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety boundary is enabled. From 97533ad6c3f14770ec48091221c2d7a9e562976f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:46:47 +0900 Subject: [PATCH 590/691] fix(ux): keep provider status safe during probe and dark mode --- CHANGELOG.md | 3 +++ .../adr/0001-cloud-offload-goal-state.md | 8 +++++++ docs/product-technical-gap-baseline.md | 3 ++- src/lib/CloudArchive.svelte | 22 ++++++++++++++++++- src/lib/cloudArchiveAdmissionContract.test.ts | 4 ++++ src/lib/ui/design-tokens.css | 18 +-------------- src/lib/ux/ProviderStatusCard.stories.ts | 19 ++++++++++++++++ src/lib/ux/ProviderStatusCard.svelte | 6 +++-- src/lib/uxContract.test.ts | 2 +- 9 files changed, 63 insertions(+), 22 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0d8df8dce..847c591b1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -53,6 +53,9 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Use the provider observation timestamp consistently for stall thresholds and durations so the summary card and detailed evidence panel cannot disagree during blocked-probe backoff. +- Keep legacy light-only panels readable by deferring automatic dark-scheme surface inversion; + disable provider cancel actions during in-flight probes and show non-iCloud probe errors in the + shared status card without changing copy or eviction authority. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 081e944fc..93450afe3 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -554,3 +554,11 @@ provider observation timestamp, matching the detail panel and avoiding wall-cloc five-minute blocked-probe backoff. A missing observation remains `checking` or `provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction authority. + +## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) + +Automatic dark-scheme surface inversion remains deferred because pre-existing cleanup and cloud +panels still use light-only backgrounds; this keeps OS dark mode readable instead of producing +light text on light panels. The running provider card now keeps its cancel action disabled during an +in-flight probe and remains visible when a non-iCloud provider probe fails, while retaining the +same observation-time stall clock and fail-closed mutation boundary. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 25bd3efde..398b7d46c 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -56,7 +56,8 @@ direct branch updates; this baseline records the current loop's runtime and inte ## 2026-08-21 accessible Storybook UX contract - The Svelte shell now imports a primitive → semantic → component token hierarchy from - `src/lib/ui/design-tokens.css`, including dark preference, forced-colors focus, reduced motion, + `src/lib/ui/design-tokens.css`, including forced-colors focus and reduced motion, + with automatic dark-scheme surface inversion deferred until legacy light-only panels are migrated, and 44px controls. The layout adds a skip link and the scan shell adds labelled controls, keyboard-safe buttons, live completion feedback, and alert feedback without browser `alert()`. - `ProviderStatusCard` and Storybook 10.5 scenes cover clear, checking, incomplete provider diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 387498dad..d0af0d6dd 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -514,7 +514,7 @@ icloudHealthBlockedSinceMs = 0; icloudHealthFingerprint = ""; } else if (icloudHealthFingerprint !== fingerprint) { - icloudHealthBlockedSinceMs = observedAtMs; + icloudHealthBlockedSinceMs = next.observed_at_ms; icloudHealthFingerprint = fingerprint; } icloudHealth = next; @@ -981,6 +981,7 @@ || icloudHealth.file_provider_activity.active_upload_count > 0 || icloudHealth.file_provider_activity.active_download_count > 0 ))} + cancelDisabled={checkingIcloudHealth} cancelLabel={cancellingFinderCopy ? "Finder 복사 취소 요청 중…" : "Finder 복사 취소 요청"} onCancel={cancelFinderCopy} statusId="icloud-provider-status" @@ -1107,6 +1108,24 @@ 로컬 여유공간을 확보한 뒤 DiskSage에서 상태를 다시 확인하십시오.

    {/if} + {#if selectedRootDetails()?.provider !== "icloud" && providerGlobalSyncError && !providerGlobalSync} + 0 + ? evidenceObservedAt(providerGlobalSyncObservedAtMs) + : undefined} + blockedFor={blockedDuration(providerGlobalSyncBlockedSinceMs, providerGlobalSyncObservedAtMs)} + statusId="provider-global-sync-error-status" + /> + {/if} {#if providerGlobalSync} { expect(source).toContain("icloudHealthBlockedSinceMs"); expect(source).toContain("icloudHealthFingerprint"); expect(source).toContain("const admissionClear = next.new_copy_admission_state === \"clear\""); + expect(source).toContain("icloudHealthBlockedSinceMs = next.observed_at_ms;"); expect(source).toContain("동일한 iCloud 차단 상태가 15분 이상 지속되었습니다."); expect(source).toContain("refreshIcloudHealth(true)"); expect(source).toContain("refreshProviderGlobalSync(true)"); @@ -65,6 +66,9 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("blockedDuration(providerGlobalSyncBlockedSinceMs, providerGlobalSyncObservedAtMs)"); expect(source).toContain('"materialization-stalled"'); expect(source).toContain('statusId="icloud-provider-status"'); + expect(source).toContain("cancelDisabled={checkingIcloudHealth}"); + expect(source).toContain('selectedRootDetails()?.provider !== "icloud" && providerGlobalSyncError && !providerGlobalSync'); + expect(source).toContain("cancelDisabled={checkingProviderGlobalSync}"); }); it("does not run the heavy iCloud probe for non-iCloud selected roots", () => { diff --git a/src/lib/ui/design-tokens.css b/src/lib/ui/design-tokens.css index d89fdc457..1ca146b4a 100644 --- a/src/lib/ui/design-tokens.css +++ b/src/lib/ui/design-tokens.css @@ -54,23 +54,7 @@ --ds-panel-gap: var(--ds-space-4); } -@media (prefers-color-scheme: dark) { - :root { - --ds-surface: var(--ds-slate-950); - --ds-surface-muted: var(--ds-slate-800); - --ds-text: var(--ds-slate-100); - --ds-text-muted: var(--ds-slate-300); - --ds-border: var(--ds-slate-700); - --ds-action: #7dd3fc; - --ds-action-hover: #bae6fd; - --ds-success-surface: #14532d; - --ds-success-text: #bbf7d0; - --ds-warning-surface: #78350f; - --ds-warning-text: #fde68a; - --ds-danger-surface: #7f1d1d; - --ds-danger-text: #fecaca; - } -} +/* Dark semantic values remain opt-in until legacy light-only panels are migrated. */ *, *::before, diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts index e7223e241..b101808f9 100644 --- a/src/lib/ux/ProviderStatusCard.stories.ts +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -69,6 +69,25 @@ export const CheckingWithoutAction: Story = { }, }; +export const ProbeInFlight: Story = { + args: { + statusId: "in-flight-provider-status", + headingLevel: "h1", + provider: "OneDrive", + state: "provider-sync-incomplete", + details: "새 관찰을 기다리는 동안 이전 차단 증거를 표시합니다.", + canCancel: true, + cancelDisabled: true, + onCancel: fn(), + }, + play: async ({ canvasElement, args }) => { + const canvas = within(canvasElement); + await expect(canvas.getByRole("button", { name: "복사 취소 요청" })).toBeDisabled(); + await userEvent.click(canvas.getByRole("button", { name: "복사 취소 요청" })); + await expect(args.onCancel).not.toHaveBeenCalled(); + }, +}; + export const IncompleteEvidence: Story = { args: { statusId: "incomplete-provider-status", diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte index 75aad5a1c..df911797f 100644 --- a/src/lib/ux/ProviderStatusCard.svelte +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -8,6 +8,7 @@ observedAt?: string; blockedFor?: string; canCancel?: boolean; + cancelDisabled?: boolean; cancelLabel?: string; onCancel?: () => void; statusId: string; @@ -21,6 +22,7 @@ observedAt = "", blockedFor = "", canCancel = false, + cancelDisabled = false, cancelLabel = "복사 취소 요청", onCancel, statusId, @@ -65,8 +67,8 @@ class="ds-control" type="button" onclick={onCancel} - disabled={state === "checking" || !onCancel} - aria-disabled={state === "checking" || !onCancel} + disabled={state === "checking" || cancelDisabled || !onCancel} + aria-disabled={state === "checking" || cancelDisabled || !onCancel} > {cancelLabel} diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index d6d79f1de..0ba527151 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -25,7 +25,7 @@ describe("UI/UX design and Storybook contract", () => { expect(tokens).toContain("--ds-blue-700"); expect(tokens).toContain("--ds-text: var(--ds-slate-950)"); expect(tokens).toContain("--ds-control-min-size: 2.75rem"); - expect(tokens).toContain("prefers-color-scheme: dark"); + expect(tokens).toContain("Dark semantic values remain opt-in"); expect(tokens).toContain("prefers-reduced-motion: reduce"); expect(tokens).toContain("forced-colors: active"); }); From 14e99fc170a8140c785bb69425cea72be4b3312c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:47:56 +0900 Subject: [PATCH 591/691] docs: bind UX and governance heads --- .../adr/0001-cloud-offload-goal-state.md | 4 ++-- docs/product-technical-gap-baseline.md | 22 ++++++++++--------- 2 files changed, 14 insertions(+), 12 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 93450afe3..0885cd86f 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -537,7 +537,7 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up -commits `9c4d679` and `52a0c22`; `svelte-check` and the CloudArchive contract suite pass. +head `97533ad`; `svelte-check` and the CloudArchive contract suite pass. ## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) @@ -553,7 +553,7 @@ The running status card now derives both its stall threshold and displayed durat provider observation timestamp, matching the detail panel and avoiding wall-clock drift during the five-minute blocked-probe backoff. A missing observation remains `checking` or `provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction -authority. +authority. The latest UX safety follow-up is tracked at DiskSage PR #246 head `97533ad`. ## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 398b7d46c..335d46e06 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -2,10 +2,11 @@ **Snapshot:** 2026-08-21 (Asia/Seoul) **Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head -`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 implementation remains at `52a0c22`, with -latest docs/test binding head `5126c8760ba7f117b8fd3dbc1e077092b881c1d4`. -The local provider follow-up `a394ba2` is not published because the active PR-only ruleset rejects -direct branch updates; this baseline records the current loop's runtime and integration evidence. +`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 is at `97533ad6c3f14770ec48091221c2d7a9e562976f`, +with required checks queued and no qualifying approval. Provider evidence changes are published as +follow-up PR #247 at `d6aa2ebb1da7117b18d5c96a1c93c3cbc320f355`; Naruon follow-up PR #1448 is at +`0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`. This baseline records the current loop's runtime and +integration evidence. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. **Evidence rule:** this document is a dated baseline, not an authority for transfer or deletion. Runtime receipts, provider attestations, object identity, and current GitHub checks remain authoritative. @@ -35,7 +36,7 @@ direct branch updates; this baseline records the current loop's runtime and inte | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 is exact head `278b62b`, `UNSTABLE`, with build jobs in progress/queued and no qualifying approval. Local provider follow-up `a394ba2` cannot be published under the active PR-only ruleset. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 is exact head `97533ad`, `UNSTABLE`, with required checks queued and no qualifying approval; PR #247 is exact head `d6aa2eb` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -678,8 +679,8 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 implementation head remains `52a0c22`; later test/documentation commits keep the - branch open with `UNSTABLE` checks in progress/queued and no qualifying approval. The UX now renders +- DiskSage PR #246 is at `97533ad`; required checks are queued and no qualifying approval exists. The + follow-up provider evidence PR #247 is at `d6aa2eb`. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel request. This is cancellation guidance only; it grants no copy, attestation, or eviction authority. @@ -687,10 +688,11 @@ At each scheduled or operator loop, update this file only with new dated evidenc the latest bounded live observation recorded 13,737 pending indexable items, a 12,449-entry reconciliation backlog, one no-progress fetch, active transfer markers, and filename/root exclusions `18/2`. The displayed action remains read-only/cancel-only. -- Naruon PR #1443 remains open at `d61d316f67e130f951ef8d769c6d148b9bf7b9d0`; backend, security, +- Naruon PR #1443 remains open at `d61d316f67e130f951ef8d769c6d148b9bf7b9d0`; follow-up PR #1448 + is published at `0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`; backend, security, frontend, Noema, and CodeQL checks are successful, but coverage is queued and the metadata-only - gate is failing. A local multiline-head parser repair exists but cannot be published under the - current PR-only ruleset; its protected merge state remains blocked. + gate is failing. Both PRs remain blocked by current-head hosted checks/review gates; no bypass or + self-approval was used. - semantic-data-portal PR #59 remains open at `65e4fd770c69192daafe51854eb73eb2f06f0bf4` with completed substantive checks successful, but protected review is still required. PR #61 remains open at `0c248d288be4ef9a01cd498b7311157b053a63e1`; its CodeQL failures came from the hosted From 58db694f0c01333115024045190fba0453534564 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:51:34 +0900 Subject: [PATCH 592/691] fix(ux): apply dark tokens to legacy panels --- CHANGELOG.md | 6 +- .../adr/0001-cloud-offload-goal-state.md | 10 +- docs/product-technical-gap-baseline.md | 4 +- src/lib/ui/design-tokens.css | 91 ++++++++++++++++++- src/lib/uxContract.test.ts | 4 +- 5 files changed, 103 insertions(+), 12 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 847c591b1..a5d8c8342 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -53,9 +53,9 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Use the provider observation timestamp consistently for stall thresholds and durations so the summary card and detailed evidence panel cannot disagree during blocked-probe backoff. -- Keep legacy light-only panels readable by deferring automatic dark-scheme surface inversion; - disable provider cancel actions during in-flight probes and show non-iCloud probe errors in the - shared status card without changing copy or eviction authority. +- Keep legacy light-only panels readable with dark-scheme token overrides; disable provider cancel + actions during in-flight probes and show non-iCloud probe errors in the shared status card without + changing copy or eviction authority. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 0885cd86f..87ceba25b 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -557,8 +557,8 @@ authority. The latest UX safety follow-up is tracked at DiskSage PR #246 head `9 ## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) -Automatic dark-scheme surface inversion remains deferred because pre-existing cleanup and cloud -panels still use light-only backgrounds; this keeps OS dark mode readable instead of producing -light text on light panels. The running provider card now keeps its cancel action disabled during an -in-flight probe and remains visible when a non-iCloud provider probe fails, while retaining the -same observation-time stall clock and fail-closed mutation boundary. +Automatic dark-scheme surface inversion is enabled with global overrides for the pre-existing +light-only cleanup and cloud panels, preserving readable foreground/background pairs in both +schemes. The running provider card now keeps its cancel action disabled during an in-flight probe +and remains visible when a non-iCloud provider probe fails, while retaining the same +observation-time stall clock and fail-closed mutation boundary. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 335d46e06..3a9b4f335 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -57,8 +57,8 @@ integration evidence. ## 2026-08-21 accessible Storybook UX contract - The Svelte shell now imports a primitive → semantic → component token hierarchy from - `src/lib/ui/design-tokens.css`, including forced-colors focus and reduced motion, - with automatic dark-scheme surface inversion deferred until legacy light-only panels are migrated, + `src/lib/ui/design-tokens.css`, including dark-scheme panel overrides, forced-colors focus, + and reduced motion, and 44px controls. The layout adds a skip link and the scan shell adds labelled controls, keyboard-safe buttons, live completion feedback, and alert feedback without browser `alert()`. - `ProviderStatusCard` and Storybook 10.5 scenes cover clear, checking, incomplete provider diff --git a/src/lib/ui/design-tokens.css b/src/lib/ui/design-tokens.css index 1ca146b4a..6781f7bd5 100644 --- a/src/lib/ui/design-tokens.css +++ b/src/lib/ui/design-tokens.css @@ -54,7 +54,96 @@ --ds-panel-gap: var(--ds-space-4); } -/* Dark semantic values remain opt-in until legacy light-only panels are migrated. */ +@media (prefers-color-scheme: dark) { + :root { + --ds-surface: var(--ds-slate-950); + --ds-surface-muted: var(--ds-slate-800); + --ds-text: var(--ds-slate-100); + --ds-text-muted: var(--ds-slate-300); + --ds-border: var(--ds-slate-700); + --ds-action: #7dd3fc; + --ds-action-hover: #bae6fd; + --ds-success-surface: #14532d; + --ds-success-text: #bbf7d0; + --ds-warning-surface: #78350f; + --ds-warning-text: #fde68a; + --ds-danger-surface: #7f1d1d; + --ds-danger-text: #fecaca; + } + + /* Legacy Svelte panels keep their readable foreground/background pairing. */ + .report, + .oauth-panel, + .receipt-reconciliation, + .review-queue, + .dataset-profile, + .copy-approval, + .podman-evidence { + border-color: var(--ds-border); + background: var(--ds-surface-muted); + color: var(--ds-text); + } + + .approval, + .approval-controls, + .eviction-controls { + border-color: var(--ds-warning-text); + background: var(--ds-warning-surface); + color: var(--ds-text); + } + + .blocked, + .candidates li.blocked { + border-color: var(--ds-danger-text); + background: var(--ds-danger-surface); + color: var(--ds-text); + } + + .receipt, + .plan, + .candidates li.adoptable { + border-color: var(--ds-success-text); + background: var(--ds-success-surface); + color: var(--ds-text); + } + + .muted, + .context, + .path, + .metadata, + .fingerprint, + .oid, + .review-counts, + .arrow, + .size { + color: var(--ds-text-muted); + } + + .warning { + color: var(--ds-warning-text); + } + + .safe, + .success, + .approved { + color: var(--ds-success-text); + } + + .error, + .errors { + color: var(--ds-danger-text); + } + + pre { + background: var(--ds-slate-700); + color: var(--ds-text); + } + + th { + background: var(--ds-slate-800); + color: var(--ds-text); + } +} *, *::before, diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index 0ba527151..5b9f3217c 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -25,7 +25,9 @@ describe("UI/UX design and Storybook contract", () => { expect(tokens).toContain("--ds-blue-700"); expect(tokens).toContain("--ds-text: var(--ds-slate-950)"); expect(tokens).toContain("--ds-control-min-size: 2.75rem"); - expect(tokens).toContain("Dark semantic values remain opt-in"); + expect(tokens).toContain("prefers-color-scheme: dark"); + expect(tokens).toContain(".receipt-reconciliation"); + expect(tokens).toContain(".approval-controls"); expect(tokens).toContain("prefers-reduced-motion: reduce"); expect(tokens).toContain("forced-colors: active"); }); From b0c71f0d8315d9c5dd4ee857d1f72b1cd73c9021 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:53:04 +0900 Subject: [PATCH 593/691] docs: record UX coverage evidence --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 3 ++- docs/product-technical-gap-baseline.md | 5 +++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 87ceba25b..18eb8da86 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -537,7 +537,8 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up -head `97533ad`; `svelte-check` and the CloudArchive contract suite pass. +head `97533ad`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y +scenes pass. ## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 3a9b4f335..a0d3223b2 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -65,9 +65,10 @@ integration evidence. evidence, materialization stall, cancel callback, disabled action, mobile viewport, and reduced motion states. The a11y addon is configured to fail a story on detected violations; Storybook is development-only and cannot authorize cloud writes or source eviction. -- Local evidence at this implementation snapshot: `npm test` 33 files/136 tests, `svelte-check` +- Local evidence at this implementation snapshot: `npm test` 34 files/138 tests, `npm run coverage` + 100% statements/branches/functions/lines, `svelte-check` 0 errors/0 warnings, `npm run build` passed, `npm run build-storybook` passed, and the - Storybook test runner passed 4 smoke/interaction stories in Chromium. The production and + Storybook test runner passed 5 smoke/interaction stories in Chromium. The production and development dependency audit reported 0 vulnerabilities after the uuid override. The Storybook bundle emits a non-blocking >500 KiB axe chunk advisory; no runtime bundle includes Storybook. - Standards adopted for this slice are WCAG 2.2, WAI-ARIA APG, Design Tokens Format Module From 6281ea353938e3d96480b5b5b4153fb431c1a5d1 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 22:54:24 +0900 Subject: [PATCH 594/691] docs: distinguish functional and documentation heads --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 4 ++-- docs/product-technical-gap-baseline.md | 10 ++++++---- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 18eb8da86..195de9494 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -537,7 +537,7 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up -head `97533ad`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y +head `58db694`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y scenes pass. ## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) @@ -554,7 +554,7 @@ The running status card now derives both its stall threshold and displayed durat provider observation timestamp, matching the detail panel and avoiding wall-clock drift during the five-minute blocked-probe backoff. A missing observation remains `checking` or `provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction -authority. The latest UX safety follow-up is tracked at DiskSage PR #246 head `97533ad`. +authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `58db694`. ## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index a0d3223b2..652bad742 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -2,8 +2,9 @@ **Snapshot:** 2026-08-21 (Asia/Seoul) **Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head -`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 is at `97533ad6c3f14770ec48091221c2d7a9e562976f`, -with required checks queued and no qualifying approval. Provider evidence changes are published as +`108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 functional UX changes are at +`58db694f0c01333115024045190fba0453534564` (later tip commits are documentation-only), with +required checks queued and no qualifying approval. Provider evidence changes are published as follow-up PR #247 at `d6aa2ebb1da7117b18d5c96a1c93c3cbc320f355`; Naruon follow-up PR #1448 is at `0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`. This baseline records the current loop's runtime and integration evidence. @@ -36,7 +37,7 @@ integration evidence. | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 is exact head `97533ad`, `UNSTABLE`, with required checks queued and no qualifying approval; PR #247 is exact head `d6aa2eb` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `58db694`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `d6aa2eb` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -680,7 +681,8 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 is at `97533ad`; required checks are queued and no qualifying approval exists. The +- DiskSage PR #246 functional head is `58db694`; later tip commits are documentation-only, required + checks are queued, and no qualifying approval exists. The follow-up provider evidence PR #247 is at `d6aa2eb`. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel From 117432f112fe880b7638522460e16568b2a6fa56 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 06:59:34 -0700 Subject: [PATCH 595/691] test: protect newly written provider evidence during retention --- .../tests/provider_evidence_retention.rs | 42 +++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/src-tauri/tests/provider_evidence_retention.rs b/src-tauri/tests/provider_evidence_retention.rs index 2804378ce..3a8c76060 100644 --- a/src-tauri/tests/provider_evidence_retention.rs +++ b/src-tauri/tests/provider_evidence_retention.rs @@ -59,3 +59,45 @@ fn recurring_attestation_retains_a_bounded_receipt_history() { EXPECTED_MAX_RECORDS_PER_RECEIPT as u64 + 2 ); } + +#[test] +fn clock_regression_never_prunes_the_record_just_written() { + let directory = tempfile::tempdir().expect("temporary evidence directory"); + + for confirmed_at_ms in 100..(100 + EXPECTED_MAX_RECORDS_PER_RECEIPT as u64) { + write_immutable_sync_evidence(directory.path(), &evidence(confirmed_at_ms)) + .expect("seed bounded evidence history"); + } + + let (written_record, written_path) = + write_immutable_sync_evidence(directory.path(), &evidence(1)) + .expect("clock-regressed evidence write"); + + assert!( + written_path.exists(), + "a successful immutable evidence write must not return a path that retention deleted" + ); + let reread = read_immutable_sync_evidence(&written_path) + .expect("the just-written evidence must remain readable after retention"); + assert_eq!(reread.record_id, written_record.record_id); + assert_eq!(reread.evidence.confirmed_at_ms, 1); + + let mut retained_times = std::fs::read_dir(directory.path()) + .expect("read evidence directory") + .map(|entry| entry.expect("evidence directory entry").path()) + .filter(|path| path.extension().and_then(|value| value.to_str()) == Some("json")) + .map(|path| { + read_immutable_sync_evidence(&path) + .expect("retained evidence must remain valid") + .evidence + .confirmed_at_ms + }) + .collect::>(); + retained_times.sort_unstable(); + + assert_eq!(retained_times.len(), EXPECTED_MAX_RECORDS_PER_RECEIPT); + assert_eq!(retained_times[0], 1); + assert!(!retained_times.contains(&100)); + assert!(retained_times.contains(&101)); + assert!(retained_times.contains(&227)); +} From 76ab80ae9c6fc443332151bad2525c9681f5f761 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 07:02:15 -0700 Subject: [PATCH 596/691] fix: preserve newly written provider evidence during retention --- src-tauri/src/provider_evidence.rs | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/src-tauri/src/provider_evidence.rs b/src-tauri/src/provider_evidence.rs index 1dbdfe195..705772121 100644 --- a/src-tauri/src/provider_evidence.rs +++ b/src-tauri/src/provider_evidence.rs @@ -179,7 +179,11 @@ fn remove_retained_evidence_file(path: &Path) -> Result<(), String> { } #[cfg(not(coverage))] -fn prune_receipt_evidence_history(directory: &Path, receipt_id: &str) -> Result<(), String> { +fn prune_receipt_evidence_history( + directory: &Path, + receipt_id: &str, + protected_record_id: &str, +) -> Result<(), String> { let prefix = format!("{receipt_id}-"); let mut records = Vec::<(u64, String, PathBuf)>::new(); for entry in std::fs::read_dir(directory) @@ -212,7 +216,11 @@ fn prune_receipt_evidence_history(directory: &Path, receipt_id: &str) -> Result< } records.sort_by(|left, right| (left.0, left.1.as_str()).cmp(&(right.0, right.1.as_str()))); let prune_count = records.len() - MAX_PROVIDER_EVIDENCE_RECORDS_PER_RECEIPT; - for (_, _, path) in records.into_iter().take(prune_count) { + for (_, _, path) in records + .into_iter() + .filter(|(_, record_id, _)| record_id.as_str() != protected_record_id) + .take(prune_count) + { remove_retained_evidence_file(&path)?; } #[cfg(unix)] @@ -225,8 +233,9 @@ fn prune_receipt_evidence_history(directory: &Path, receipt_id: &str) -> Result< /// Persist the full provider claim before it is used to authorize source eviction. /// /// The file is create-only, read-only, fsynced, and named by the receipt, observation time, and -/// integrity digest. Existing evidence is never overwritten. Repeated attestations retain the -/// newest bounded per-receipt history so background reconciliation cannot grow storage forever. +/// integrity digest. Existing evidence is never overwritten. Repeated attestations retain a +/// bounded per-receipt history while preserving the just-written immutable record even if the +/// local clock moves backwards. #[cfg(not(coverage))] pub fn write_immutable_sync_evidence( directory: &Path, @@ -279,7 +288,11 @@ pub fn write_immutable_sync_evidence( return Err(error); } drop(file); - if let Err(_error) = prune_receipt_evidence_history(directory, &record.evidence.receipt_id) { + if let Err(_error) = prune_receipt_evidence_history( + directory, + &record.evidence.receipt_id, + &record.record_id, + ) { // Retention is maintenance, not part of the attestation's authority. Keep the // fsynced record so a transient directory/read/delete failure cannot discard valid proof; // the next reconciliation pass can retry bounded pruning. From 33160c22b99e9de1f51e9e7e5fe84e8b0bdbe61e Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:06:06 +0900 Subject: [PATCH 597/691] fix(ux): preserve iCloud admission blocker duration --- src/lib/CloudArchive.svelte | 4 ++-- src/lib/api.ts | 1 + src/lib/cloudArchiveAdmissionContract.test.ts | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index d0af0d6dd..46224fff1 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -513,8 +513,8 @@ if (admissionClear) { icloudHealthBlockedSinceMs = 0; icloudHealthFingerprint = ""; - } else if (icloudHealthFingerprint !== fingerprint) { - icloudHealthBlockedSinceMs = next.observed_at_ms; + } else { + icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? observedAtMs; icloudHealthFingerprint = fingerprint; } icloudHealth = next; diff --git a/src/lib/api.ts b/src/lib/api.ts index 5a84b5103..88b3ee2d0 100644 --- a/src/lib/api.ts +++ b/src/lib/api.ts @@ -826,6 +826,7 @@ export interface LocalVolumeSnapshot { export interface IcloudSyncHealthReport { observed_at_ms: number; + admission_blocked_since_ms?: number | null; evidence_complete: boolean; managed_database_allocated_bytes?: number; upload_queue: { diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index b8dde2c6f..494de1137 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -30,7 +30,7 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloudHealthBlockedSinceMs"); expect(source).toContain("icloudHealthFingerprint"); expect(source).toContain("const admissionClear = next.new_copy_admission_state === \"clear\""); - expect(source).toContain("icloudHealthBlockedSinceMs = next.observed_at_ms;"); + expect(source).toContain("icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? observedAtMs;"); expect(source).toContain("동일한 iCloud 차단 상태가 15분 이상 지속되었습니다."); expect(source).toContain("refreshIcloudHealth(true)"); expect(source).toContain("refreshProviderGlobalSync(true)"); From afce9f3a1baca038cd8b2b4ef611f0c5491629f7 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:07:17 +0900 Subject: [PATCH 598/691] docs: record restart-safe iCloud UX duration --- CHANGELOG.md | 2 ++ .../adr/0001-cloud-offload-goal-state.md | 13 +++++++++++-- docs/product-technical-gap-baseline.md | 10 +++++----- 3 files changed, 18 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index a5d8c8342..3881dd3b0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -56,6 +56,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Keep legacy light-only panels readable with dark-scheme token overrides; disable provider cancel actions during in-flight probes and show non-iCloud probe errors in the shared status card without changing copy or eviction authority. +- Preserve the backend-provided iCloud admission-blocker start time across app restarts, with a + current-observation fallback for older reports; the running card remains diagnostic/cancel-only. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 195de9494..280c2a9de 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -537,7 +537,7 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up -head `58db694`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y +head `33160c2`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y scenes pass. ## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) @@ -554,7 +554,7 @@ The running status card now derives both its stall threshold and displayed durat provider observation timestamp, matching the detail panel and avoiding wall-clock drift during the five-minute blocked-probe backoff. A missing observation remains `checking` or `provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction -authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `58db694`. +authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `33160c2`. ## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) @@ -563,3 +563,12 @@ light-only cleanup and cloud panels, preserving readable foreground/background p schemes. The running provider card now keeps its cancel action disabled during an in-flight probe and remains visible when a non-iCloud provider probe fails, while retaining the same observation-time stall clock and fail-closed mutation boundary. + +## Amendment: restart-safe iCloud admission duration (2026-08-21) + +CloudArchive now consumes the backend's `admission_blocked_since_ms` when it is available, falling +back to the current observation time for older reports. The backend derives that timestamp from +the earliest contiguous, integrity-checked, bounded iCloud evidence record with the same blocker +set, so an application restart cannot reset a multi-hour Finder stall to zero. This remains a +diagnostic/cancel-only display; copy, provider attestation, and local eviction stay fail-closed. +The UX implementation is at functional head `33160c2`. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 652bad742..fc5460339 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -3,9 +3,9 @@ **Snapshot:** 2026-08-21 (Asia/Seoul) **Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head `108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 functional UX changes are at -`58db694f0c01333115024045190fba0453534564` (later tip commits are documentation-only), with +`33160c22b99e9de1f51e9e7e5fe84e8b0bdbe61e` (later tip commits are documentation-only), with required checks queued and no qualifying approval. Provider evidence changes are published as -follow-up PR #247 at `d6aa2ebb1da7117b18d5c96a1c93c3cbc320f355`; Naruon follow-up PR #1448 is at +follow-up PR #247 at `b9268bf85fd0fde7bbebeaf9cc11616cba659ef8`; Naruon follow-up PR #1448 is at `0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`. This baseline records the current loop's runtime and integration evidence. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. @@ -37,7 +37,7 @@ integration evidence. | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `58db694`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `d6aa2eb` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `33160c2`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `b9268bf` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -681,9 +681,9 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 functional head is `58db694`; later tip commits are documentation-only, required +- DiskSage PR #246 functional head is `33160c2`; later tip commits are documentation-only, required checks are queued, and no qualifying approval exists. The - follow-up provider evidence PR #247 is at `d6aa2eb`. The UX now renders + follow-up provider evidence PR #247 is at `b9268bf`. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel request. This is cancellation guidance only; it grants no copy, attestation, or eviction authority. From 7e3c28a47613ae029cb4a0d3bbc24e5ca3f15e35 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:08:51 +0900 Subject: [PATCH 599/691] fix(ux): use provider observation time fallback --- src/lib/CloudArchive.svelte | 2 +- src/lib/cloudArchiveAdmissionContract.test.ts | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 46224fff1..bad3f2311 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -514,7 +514,7 @@ icloudHealthBlockedSinceMs = 0; icloudHealthFingerprint = ""; } else { - icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? observedAtMs; + icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? next.observed_at_ms; icloudHealthFingerprint = fingerprint; } icloudHealth = next; diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index 494de1137..de02abb05 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -30,7 +30,7 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloudHealthBlockedSinceMs"); expect(source).toContain("icloudHealthFingerprint"); expect(source).toContain("const admissionClear = next.new_copy_admission_state === \"clear\""); - expect(source).toContain("icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? observedAtMs;"); + expect(source).toContain("icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? next.observed_at_ms;"); expect(source).toContain("동일한 iCloud 차단 상태가 15분 이상 지속되었습니다."); expect(source).toContain("refreshIcloudHealth(true)"); expect(source).toContain("refreshProviderGlobalSync(true)"); From eb553ed69713f0a71910a2ac729670e144e91402 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:09:26 +0900 Subject: [PATCH 600/691] docs: bind UX fallback to current head --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 6 +++--- docs/product-technical-gap-baseline.md | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 280c2a9de..e7dd74c99 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -537,7 +537,7 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up -head `33160c2`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y +head `7e3c28a`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y scenes pass. ## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) @@ -554,7 +554,7 @@ The running status card now derives both its stall threshold and displayed durat provider observation timestamp, matching the detail panel and avoiding wall-clock drift during the five-minute blocked-probe backoff. A missing observation remains `checking` or `provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction -authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `33160c2`. +authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `7e3c28a`. ## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) @@ -571,4 +571,4 @@ back to the current observation time for older reports. The backend derives that the earliest contiguous, integrity-checked, bounded iCloud evidence record with the same blocker set, so an application restart cannot reset a multi-hour Finder stall to zero. This remains a diagnostic/cancel-only display; copy, provider attestation, and local eviction stay fail-closed. -The UX implementation is at functional head `33160c2`. +The UX implementation is at functional head `7e3c28a`. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index fc5460339..d0a4330b5 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -3,7 +3,7 @@ **Snapshot:** 2026-08-21 (Asia/Seoul) **Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head `108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 functional UX changes are at -`33160c22b99e9de1f51e9e7e5fe84e8b0bdbe61e` (later tip commits are documentation-only), with +`7e3c28a47613ae029cb4a0d3bbc24e5ca3f15e35` (later tip commits are documentation-only), with required checks queued and no qualifying approval. Provider evidence changes are published as follow-up PR #247 at `b9268bf85fd0fde7bbebeaf9cc11616cba659ef8`; Naruon follow-up PR #1448 is at `0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`. This baseline records the current loop's runtime and @@ -37,7 +37,7 @@ integration evidence. | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `33160c2`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `b9268bf` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `7e3c28a`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `b9268bf` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -681,7 +681,7 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 functional head is `33160c2`; later tip commits are documentation-only, required +- DiskSage PR #246 functional head is `7e3c28a`; later tip commits are documentation-only, required checks are queued, and no qualifying approval exists. The follow-up provider evidence PR #247 is at `b9268bf`. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a From 56de7f5b29d74ca30355895b23110c44164bbf80 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:14:29 +0900 Subject: [PATCH 601/691] docs: refresh provider follow-up head --- docs/product-technical-gap-baseline.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index d0a4330b5..d4c94afa5 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -5,7 +5,7 @@ `108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 functional UX changes are at `7e3c28a47613ae029cb4a0d3bbc24e5ca3f15e35` (later tip commits are documentation-only), with required checks queued and no qualifying approval. Provider evidence changes are published as -follow-up PR #247 at `b9268bf85fd0fde7bbebeaf9cc11616cba659ef8`; Naruon follow-up PR #1448 is at +follow-up PR #247 at `347f699fa14fcbf7c94a7586b26e2ce00ec28359`; Naruon follow-up PR #1448 is at `0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`. This baseline records the current loop's runtime and integration evidence. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. @@ -37,7 +37,7 @@ integration evidence. | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `7e3c28a`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `b9268bf` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `7e3c28a`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `347f699` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -683,7 +683,7 @@ At each scheduled or operator loop, update this file only with new dated evidenc - DiskSage PR #246 functional head is `7e3c28a`; later tip commits are documentation-only, required checks are queued, and no qualifying approval exists. The - follow-up provider evidence PR #247 is at `b9268bf`. The UX now renders + follow-up provider evidence PR #247 is at `347f699`. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a provider-sync-incomplete/materialization-stalled state with elapsed time and a bounded cancel request. This is cancellation guidance only; it grants no copy, attestation, or eviction authority. From bda817d9d395ee97bfe6e5ca7bff158d4e28ec10 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:18:29 +0900 Subject: [PATCH 602/691] fix(ux): retain iCloud stall clock for legacy reports --- src/lib/CloudArchive.svelte | 4 +++- src/lib/cloudArchiveAdmissionContract.test.ts | 2 ++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index bad3f2311..8b6f9a8e5 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -513,9 +513,11 @@ if (admissionClear) { icloudHealthBlockedSinceMs = 0; icloudHealthFingerprint = ""; - } else { + } else if (icloudHealthFingerprint !== fingerprint) { icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? next.observed_at_ms; icloudHealthFingerprint = fingerprint; + } else if (next.admission_blocked_since_ms != null) { + icloudHealthBlockedSinceMs = next.admission_blocked_since_ms; } icloudHealth = next; icloudHealthNextCheckAt = observedAtMs diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index de02abb05..fec43faad 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -30,7 +30,9 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloudHealthBlockedSinceMs"); expect(source).toContain("icloudHealthFingerprint"); expect(source).toContain("const admissionClear = next.new_copy_admission_state === \"clear\""); + expect(source).toContain("} else if (icloudHealthFingerprint !== fingerprint) {"); expect(source).toContain("icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? next.observed_at_ms;"); + expect(source).toContain("} else if (next.admission_blocked_since_ms != null) {"); expect(source).toContain("동일한 iCloud 차단 상태가 15분 이상 지속되었습니다."); expect(source).toContain("refreshIcloudHealth(true)"); expect(source).toContain("refreshProviderGlobalSync(true)"); From d6d3142ed0a9b61f7401b97f99022fe1a3202a83 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:19:01 +0900 Subject: [PATCH 603/691] docs: record legacy iCloud stall compatibility --- CHANGELOG.md | 2 ++ .../architecture/adr/0001-cloud-offload-goal-state.md | 11 ++++++++--- docs/product-technical-gap-baseline.md | 6 +++--- 3 files changed, 13 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3881dd3b0..dc2df01cd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -58,6 +58,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and changing copy or eviction authority. - Preserve the backend-provided iCloud admission-blocker start time across app restarts, with a current-observation fallback for older reports; the running card remains diagnostic/cancel-only. +- Retain the existing iCloud blocker fingerprint clock when older backends omit the persisted + start-time field, so legacy responses still reach the 15-minute stalled-copy warning. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index e7dd74c99..4573f13f2 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -537,7 +537,7 @@ provider-global observations, not only in Storybook. It maps a missing/error obs `materialization-stalled`, and a quiet observation to `clear`; elapsed time, bounded evidence time, and the existing Finder-cancel request remain visible. The card is informational/cancel-only and does not grant copy, attestation, or eviction authority. This is implemented by the UX follow-up -head `7e3c28a`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y +head `bda817d`; `svelte-check`, the CloudArchive contract suite, and the Storybook interaction/a11y scenes pass. ## Amendment: latest runtime evidence surfaced by the UX (2026-08-21 22:22 +0900) @@ -554,7 +554,7 @@ The running status card now derives both its stall threshold and displayed durat provider observation timestamp, matching the detail panel and avoiding wall-clock drift during the five-minute blocked-probe backoff. A missing observation remains `checking` or `provider-sync-incomplete`; no UI clock can promote a provider to copy, attestation, or eviction -authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `7e3c28a`. +authority. The latest UX safety follow-up is tracked at DiskSage PR #246 functional head `bda817d`. ## Amendment: legacy panel contrast and probe-action consistency (2026-08-21) @@ -571,4 +571,9 @@ back to the current observation time for older reports. The backend derives that the earliest contiguous, integrity-checked, bounded iCloud evidence record with the same blocker set, so an application restart cannot reset a multi-hour Finder stall to zero. This remains a diagnostic/cancel-only display; copy, provider attestation, and local eviction stay fail-closed. -The UX implementation is at functional head `7e3c28a`. +The UX implementation is at functional head `bda817d`. + +Legacy backend responses without `admission_blocked_since_ms` now keep the existing blocker +fingerprint clock on repeated polls; a newly supplied persisted timestamp still takes precedence. +This preserves the 15-minute stalled-copy warning during a staged rollout of the backend field. +The compatibility repair is at functional head `bda817d`. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index d4c94afa5..bd2da5b5f 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -3,7 +3,7 @@ **Snapshot:** 2026-08-21 (Asia/Seoul) **Repository heads at snapshot:** DiskSage PR #213 remains at protected remote head `108bba0e4737b09b1c09f6c3b5a86a43be22223e`; PR #246 functional UX changes are at -`7e3c28a47613ae029cb4a0d3bbc24e5ca3f15e35` (later tip commits are documentation-only), with +`bda817d9d395ee97bfe6e5ca7bff158d4e28ec10` (later tip commits are documentation-only), with required checks queued and no qualifying approval. Provider evidence changes are published as follow-up PR #247 at `347f699fa14fcbf7c94a7586b26e2ce00ec28359`; Naruon follow-up PR #1448 is at `0b1b1773130acdf472ed168b5d6a26e6ec11e1cb`. This baseline records the current loop's runtime and @@ -37,7 +37,7 @@ integration evidence. | P0 | Provider end-to-end receipt is absent for the current iCloud incident. | Global probe can time out and CloudDocs state is intentionally not force-killed or deleted; the native copy boundary now requires an integrity-checked three-stream pre-copy cohort before mutation. | Capture a bounded fresh provider evidence receipt after sync settles; keep transfer/eviction disabled until it is complete. | | P0 | Disk pressure telemetry and provider queue evidence must remain comparable across loops without retaining raw provider output. | Cloud plans and explicit iCloud health refreshes persist bounded, path-free `LocalVolumeSnapshot`, `ProviderClientRuntimeSnapshot`, and `IcloudSyncHealthEvidenceSnapshot` records under `volume-pressure-evidence`, `provider-client-runtime-evidence`, and `icloud-sync-health-evidence`; iCloud plans now combine them into a timestamp/fingerprint-bound cohort. | Missing, incomplete, malformed, or more-than-five-minute-skewed cohort observations remain blocked; a fresh exact-head native incident plan is still needed to compare the emitted cohort with the live incident. | | P1 | Hourly product-development/review loop is not yet live in this repository environment. | The repository-local `.github/workflows/hourly-product-loop.yml` is intentionally `workflow_dispatch`-only because its direct contextual-orchestrator HTTP call is advisory and not a pinned OpenCode worker. The trusted central [`disksage-hourly-review-repair.yml`](https://github.com/ContextualWisdomLab/.github/blob/main/.github/workflows/disksage-hourly-review-repair.yml) runs at `37 * * * *` and dispatches the pinned scheduler `a3fdaa1aacaba9443a18573f3c309fe1841fc2f0`, which performs the OpenCode OIDC exchange. The local workflow still uploads a seven-day path-free receipt when manually configured; no external endpoint or deployment receipt is available here. | Verify one central scheduler receipt and one local manual advisory receipt; preserve read-only permissions, exact-head binding, and no provider-secret import or mutation. | -| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `7e3c28a`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `347f699` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | +| P1 | Open PR queue prevents a clean protected release line. | PR #213 is exact remote head `108bba0`, `CHANGES_REQUESTED`, with required checks queued; PR #246 functional head is `bda817d`, with later documentation-only tip commits, required checks queued, and no qualifying approval; PR #247 is exact head `347f699` with checks queued. | Process one PR at a time: current-head review → fix → required checks → fresh approval → normal protected merge; never bypass or self-approve. | | P1 | Current UI coverage is contract-heavy rather than runtime E2E for native File Provider states. | The UI now displays `로컬 최신본·업로드 미확인` and maps blockers without backend detail; provider operations are not safely reproducible on this full disk. Rust fixtures now cover `local-current + is_uploaded=false`, provider timeout, timeliness transitions, and receipt/evidence invalidation; native runtime E2E remains unavailable while the provider is unhealthy. | Keep the fixture-backed state machine green and add a bounded native E2E receipt only after a quiet provider observation is authoritative. | | P1 | Ontology/catalog integrations are export boundaries, not deployed services. | Naruon/semantic catalog and Zotero local API docs/contracts exist; no Noema/contextual-orchestrator runtime dependency is required. | Keep integrations optional and path-free; add live service tests only when a concrete consumer and secret boundary exist. | | P2 | 100% documentation/docstring and edge-case coverage is not yet evidenced. | Existing checks cover core Rust/TS behavior, not a repository-wide percentage claim. | Publish measured coverage per language and close high-risk edge paths before claiming 100%. | @@ -681,7 +681,7 @@ At each scheduled or operator loop, update this file only with new dated evidenc provider-index backlog from the earlier low-space pressure incident. ## 2026-08-21 exact-head ecosystem audit -- DiskSage PR #246 functional head is `7e3c28a`; later tip commits are documentation-only, required +- DiskSage PR #246 functional head is `bda817d`; later tip commits are documentation-only, required checks are queued, and no qualifying approval exists. The follow-up provider evidence PR #247 is at `347f699`. The UX now renders `ProviderStatusCard` in the running CloudArchive screen, so a stuck Finder copy is visible as a From 8002e2c735b17e1452db7431aa4874f813f64edb Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 07:29:14 -0700 Subject: [PATCH 604/691] test: preserve active-use signal after slow lsof --- .../cloud_local_eviction_lsof_warning.rs | 50 ++++++++++++++++++- 1 file changed, 49 insertions(+), 1 deletion(-) diff --git a/src-tauri/tests/cloud_local_eviction_lsof_warning.rs b/src-tauri/tests/cloud_local_eviction_lsof_warning.rs index fa9e40fba..69d9bfee0 100644 --- a/src-tauri/tests/cloud_local_eviction_lsof_warning.rs +++ b/src-tauri/tests/cloud_local_eviction_lsof_warning.rs @@ -1,11 +1,12 @@ #![cfg(all(unix, not(coverage)))] -use disksage_lib::cloud_local_eviction::observe_path_active_use; +use disksage_lib::cloud_local_eviction::{observe_path_active_use, observe_path_active_use_until}; use std::ffi::OsString; use std::fs; use std::os::unix::fs::PermissionsExt; use std::path::Path; use std::sync::Mutex; +use std::time::{Duration, Instant}; static ENV_LOCK: Mutex<()> = Mutex::new(()); @@ -43,6 +44,28 @@ fn with_fake_tools(lsof_body: &str, target: &Path) -> disksage_lib::cloud_local_ observe_path_active_use(target) } +fn with_fake_tools_until( + lsof_body: &str, + ps_body: &str, + target: &Path, + timeout: Duration, +) -> disksage_lib::cloud_local_eviction::ActiveUseEvidence { + let _lock = ENV_LOCK.lock().expect("serialize PATH mutation"); + let tools = tempfile::tempdir().expect("fake tool directory"); + write_executable(&tools.path().join("lsof"), lsof_body); + write_executable(&tools.path().join("ps"), ps_body); + + let previous = std::env::var_os("PATH"); + let _guard = PathGuard(previous.clone()); + let mut paths = vec![tools.path().to_path_buf()]; + if let Some(previous) = previous { + paths.extend(std::env::split_paths(&previous)); + } + std::env::set_var("PATH", std::env::join_paths(paths).expect("compose PATH")); + + observe_path_active_use_until(target, Instant::now() + timeout) +} + #[test] fn unrelated_lsof_mount_warning_does_not_invalidate_target_observation() { let temp = tempfile::tempdir().expect("target fixture"); @@ -74,3 +97,28 @@ fn lsof_warning_for_target_directory_remains_fail_closed() { assert!(!evidence.active); assert!(evidence.error.is_some()); } + +#[test] +fn slow_lsof_does_not_starve_the_process_command_probe() { + let temp = tempfile::tempdir().expect("target fixture"); + let target = temp.path().join("cache-artifact-under-active-use"); + fs::create_dir(&target).expect("create target directory"); + let ps_script = format!( + "#!/bin/sh\nsleep 0.05\nprintf '4242 1 /usr/bin/cat {}\\n'\n", + target.display() + ); + + let evidence = with_fake_tools_until( + "#!/bin/sh\nsleep 2\nexit 1\n", + &ps_script, + &target, + Duration::from_millis(600), + ); + + assert!(evidence.active, "{evidence:?}"); + assert_eq!(evidence.observed_pids, vec![4242]); + assert!( + !evidence.evidence_complete, + "the timed-out lsof probe must still make the combined evidence fail closed" + ); +} From d267ee9d49609ac8d5ec239590ed361d76201002 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 07:35:09 -0700 Subject: [PATCH 605/691] fix: reserve active-use probe deadline slices --- src-tauri/src/cloud_local_eviction.rs | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/src-tauri/src/cloud_local_eviction.rs b/src-tauri/src/cloud_local_eviction.rs index cf176c09a..4b4121097 100644 --- a/src-tauri/src/cloud_local_eviction.rs +++ b/src-tauri/src/cloud_local_eviction.rs @@ -256,7 +256,7 @@ fn hash_optional_string(hasher: &mut blake3::Hasher, value: Option<&str>) { hasher.update(value.as_bytes()); hasher.update(&[0]); } - }; + } } fn plan_fingerprint( @@ -715,8 +715,20 @@ fn observe_process_command_use(path: &Path, deadline: Instant) -> ActiveUseEvide #[cfg(all(unix, not(coverage)))] fn observe_active_use_until(path: &Path, deadline: Instant) -> ActiveUseEvidence { - let lsof = observe_lsof_active_use(path, deadline); - let process_commands = observe_process_command_use(path, deadline); + let started = Instant::now(); + let remaining = deadline.saturating_duration_since(started); + let per_probe_budget = std::cmp::min( + remaining / 2, + Duration::from_millis(ACTIVE_USE_TIMEOUT_MS), + ); + // Reserve an independent bounded slice for each source. A recursive `lsof +D` may consume its + // entire allocation; it must not starve the process-command probe and hide an active PID. + let lsof = observe_lsof_active_use(path, started + per_probe_budget); + let ps_started = Instant::now(); + let process_commands = observe_process_command_use( + path, + std::cmp::min(deadline, ps_started + per_probe_budget), + ); let mut pids = lsof.observed_pids; pids.extend(process_commands.observed_pids); pids.sort_unstable(); From e4c4e1100975f2b5bf7f5a5957bbf507cf628750 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 07:39:27 -0700 Subject: [PATCH 606/691] test: bound provider disk-full numeric markers --- ..._global_sync_disk_full_numeric_boundary.rs | 37 +++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs diff --git a/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs b/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs new file mode 100644 index 000000000..809bc6b5b --- /dev/null +++ b/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs @@ -0,0 +1,37 @@ +use disksage_lib::cloud::CloudProvider; +use disksage_lib::provider_global_sync::{parse_dump, ProviderGlobalSyncState}; + +fn dump(marker: &str) -> String { + format!( + "com.google.drivefs.fpext\nsync engine state:\n error:'{marker}'\n" + ) +} + +#[test] +fn longer_errno_and_osstatus_codes_do_not_impersonate_disk_full() { + for marker in ["NSError: errno 280", "NSError: OSStatus -3400"] { + let report = parse_dump(CloudProvider::GoogleDrive, &dump(marker)).unwrap(); + assert!( + !report + .blockers + .iter() + .any(|blocker| blocker == "provider-global-sync-local-disk-full"), + "{marker}: {report:?}" + ); + } +} + +#[test] +fn exact_errno_and_osstatus_disk_full_codes_remain_classified() { + for marker in ["NSError: errno 28", "NSError: OSStatus -34"] { + let report = parse_dump(CloudProvider::GoogleDrive, &dump(marker)).unwrap(); + assert_eq!(report.state, ProviderGlobalSyncState::Error, "{marker}"); + assert!( + report + .blockers + .iter() + .any(|blocker| blocker == "provider-global-sync-local-disk-full"), + "{marker}: {report:?}" + ); + } +} From fc9f4a4c465fc5ef355f7fbf552ff4295cf4f609 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:39:38 +0900 Subject: [PATCH 607/691] fix(ux): reset stall clock when iCloud progress changes --- CHANGELOG.md | 2 ++ .../adr/0001-cloud-offload-goal-state.md | 10 ++++++++++ docs/product-technical-gap-baseline.md | 11 +++++++++++ src/lib/CloudArchive.svelte | 15 +++++++++++++-- src/lib/cloudArchiveAdmissionContract.test.ts | 5 ++++- 5 files changed, 40 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index dc2df01cd..389bc2432 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Render the provider status card in the running CloudArchive view, including the path-free iCloud indexing backlog and a bounded Finder-cancel escape; the card remains informational and cannot authorize cloud writes, attestation, or source eviction. +- Reset the UX stall clock when a blocked iCloud transfer's progress fingerprint changes, while + retaining the persisted blocker-set timestamp only for the first observation after restart. - Persist bounded, path-free local-volume snapshots from cloud plans with create-only files, content fingerprints, Unix `0400`/`0700` permissions, and shape-limited retention; surface a diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 4573f13f2..a800f39c9 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -577,3 +577,13 @@ Legacy backend responses without `admission_blocked_since_ms` now keep the exist fingerprint clock on repeated polls; a newly supplied persisted timestamp still takes precedence. This preserves the 15-minute stalled-copy warning during a staged rollout of the backend field. The compatibility repair is at functional head `bda817d`. + +## Amendment: progress-aware iCloud stall clock (2026-08-21 23:38 +0900) + +The UX stall clock now distinguishes an admission-blocker run from transfer progress. After an +application restart, the first blocked observation may restore the backend's persisted +`admission_blocked_since_ms`; while the admission blocker set is unchanged, any changed upload, +download, indexing, or materialization fingerprint starts a new observation interval. This prevents +a healthy progressing transfer from being mislabeled as a 15-minute Finder stall merely because the +backend's blocker-set duration spans the whole sync run. The behavior is diagnostic/cancel-only and +does not grant copy, attestation, or eviction authority. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index bd2da5b5f..e8055e418 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -710,3 +710,14 @@ At each scheduled or operator loop, update this file only with new dated evidenc off blocked or failed global-sync probes for five minutes. Explicit Finder-copy cancellation and provider-client recovery force a fresh read; no provider data, cloud object, or source file is mutated by this UI-only scheduling change. + +## 2026-08-21 23:38 +0900 progress-aware Finder-stall clock + +- UX exact head now resets the iCloud stall interval when the blocked observation's upload, + download, indexing, or materialization fingerprint changes. Only the first observation after an + application restart may restore the backend's persisted blocker-set timestamp. This prevents an + actively progressing transfer from being mislabeled as a long-lived Finder stall; the cancel-only + action and fail-closed copy/attestation/eviction gates are unchanged. +- `npm run check` passed with 0 errors/0 warnings, Vitest passed 34 files/138 tests, production + build passed, and Storybook Chromium interaction/a11y passed 5/5. Generated Storybook output was + removed after validation; no provider or user data was touched. diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 8b6f9a8e5..8955b7d16 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -494,9 +494,18 @@ const observedAtMs = Date.now(); const next = await api.inspectIcloudNewCopyAdmission(); const activity = next.file_provider_activity; - const fingerprint = [ + const admissionFingerprint = [ next.new_copy_admission_state, next.new_copy_admission_blockers.join(","), + ].join("|"); + const previousAdmissionFingerprint = icloudHealth + ? [ + icloudHealth.new_copy_admission_state, + icloudHealth.new_copy_admission_blockers.join(","), + ].join("|") + : ""; + const fingerprint = [ + admissionFingerprint, activity?.no_progress_fetch_count ?? 0, activity?.no_progress_create_count ?? 0, activity?.materialization_failure_count ?? 0, @@ -514,7 +523,9 @@ icloudHealthBlockedSinceMs = 0; icloudHealthFingerprint = ""; } else if (icloudHealthFingerprint !== fingerprint) { - icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? next.observed_at_ms; + icloudHealthBlockedSinceMs = previousAdmissionFingerprint === admissionFingerprint + ? observedAtMs + : next.admission_blocked_since_ms ?? next.observed_at_ms; icloudHealthFingerprint = fingerprint; } else if (next.admission_blocked_since_ms != null) { icloudHealthBlockedSinceMs = next.admission_blocked_since_ms; diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index fec43faad..2933d2696 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -31,8 +31,11 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloudHealthFingerprint"); expect(source).toContain("const admissionClear = next.new_copy_admission_state === \"clear\""); expect(source).toContain("} else if (icloudHealthFingerprint !== fingerprint) {"); - expect(source).toContain("icloudHealthBlockedSinceMs = next.admission_blocked_since_ms ?? next.observed_at_ms;"); expect(source).toContain("} else if (next.admission_blocked_since_ms != null) {"); + expect(source).toContain("const admissionFingerprint = ["); + expect(source).toContain("const previousAdmissionFingerprint = icloudHealth"); + expect(source).toContain("previousAdmissionFingerprint === admissionFingerprint"); + expect(source).toContain("? observedAtMs"); expect(source).toContain("동일한 iCloud 차단 상태가 15분 이상 지속되었습니다."); expect(source).toContain("refreshIcloudHealth(true)"); expect(source).toContain("refreshProviderGlobalSync(true)"); From a37a1df1ef52d87f7496068db291407a61e93160 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 07:40:48 -0700 Subject: [PATCH 608/691] test: cover all provider disk-full numeric forms --- ...rovider_global_sync_disk_full_numeric_boundary.rs | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs b/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs index 809bc6b5b..ae1ea34ea 100644 --- a/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs +++ b/src-tauri/tests/provider_global_sync_disk_full_numeric_boundary.rs @@ -9,7 +9,11 @@ fn dump(marker: &str) -> String { #[test] fn longer_errno_and_osstatus_codes_do_not_impersonate_disk_full() { - for marker in ["NSError: errno 280", "NSError: OSStatus -3400"] { + for marker in [ + "NSError: ODResult_Errno 280", + "NSError: errno 280", + "NSError: OSStatus -3400", + ] { let report = parse_dump(CloudProvider::GoogleDrive, &dump(marker)).unwrap(); assert!( !report @@ -23,7 +27,11 @@ fn longer_errno_and_osstatus_codes_do_not_impersonate_disk_full() { #[test] fn exact_errno_and_osstatus_disk_full_codes_remain_classified() { - for marker in ["NSError: errno 28", "NSError: OSStatus -34"] { + for marker in [ + "NSError: ODResult_Errno 28", + "NSError: errno 28", + "NSError: OSStatus -34", + ] { let report = parse_dump(CloudProvider::GoogleDrive, &dump(marker)).unwrap(); assert_eq!(report.state, ProviderGlobalSyncState::Error, "{marker}"); assert!( From 76479ed749f09ae22c279c30c62deebab30eb73d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 07:42:11 -0700 Subject: [PATCH 609/691] fix: bound provider disk-full numeric markers --- src-tauri/src/provider_global_sync.rs | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src-tauri/src/provider_global_sync.rs b/src-tauri/src/provider_global_sync.rs index 32f84b2e1..a4f4e45ce 100644 --- a/src-tauri/src/provider_global_sync.rs +++ b/src-tauri/src/provider_global_sync.rs @@ -167,12 +167,12 @@ pub fn parse_dump( has_item_not_found |= marker_lower.contains("code=-1005") || marker_lower.contains("itemnotfound") || marker.contains("파일이 존재하지 않습니다"); - has_local_disk_full |= marker_lower.contains("odresult_errno 28") - || marker_lower.contains("errno 28") + has_local_disk_full |= contains_bounded_numeric_marker(&marker_lower, "odresult_errno ", "28") + || contains_bounded_numeric_marker(&marker_lower, "errno ", "28") || marker_lower.contains("enospc") || contains_bounded_numeric_marker(&marker_lower, "code=", "28") || contains_bounded_numeric_marker(&marker_lower, "code ", "28") - || marker_lower.contains("osstatus -34") + || contains_bounded_numeric_marker(&marker_lower, "osstatus ", "-34") || marker_lower.contains("no space left on device") || marker_lower.contains("disk full"); if has_filename_too_long From fa5fbfce5e1031de1e716388b6db97e1931fb711 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 00:17:42 +0900 Subject: [PATCH 610/691] fix(ux): keep iCloud stall warnings through counter churn --- CHANGELOG.md | 3 + .../adr/0001-cloud-offload-goal-state.md | 11 ++ docs/product-technical-gap-baseline.md | 9 ++ src/lib/CloudArchive.svelte | 50 ++------ src/lib/cloudArchiveAdmissionContract.test.ts | 12 +- src/lib/icloudHealthStallClock.test.ts | 121 ++++++++++++++++++ src/lib/icloudHealthStallClock.ts | 60 +++++++++ 7 files changed, 220 insertions(+), 46 deletions(-) create mode 100644 src/lib/icloudHealthStallClock.test.ts create mode 100644 src/lib/icloudHealthStallClock.ts diff --git a/CHANGELOG.md b/CHANGELOG.md index 389bc2432..3fb979600 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -62,6 +62,9 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and current-observation fallback for older reports; the running card remains diagnostic/cancel-only. - Retain the existing iCloud blocker fingerprint clock when older backends omit the persisted start-time field, so legacy responses still reach the 15-minute stalled-copy warning. +- Keep iCloud stall-counter changes (`no progress`, materialization failures, and timeouts) out of + the progress fingerprint, so a blocked Finder copy still reaches the 15-minute warning; retain + a real transfer/indexing progress reset across subsequent polls. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index a800f39c9..52f6d7d6b 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -578,6 +578,17 @@ fingerprint clock on repeated polls; a newly supplied persisted timestamp still This preserves the 15-minute stalled-copy warning during a staged rollout of the backend field. The compatibility repair is at functional head `bda817d`. +## Amendment: stall counters do not reset the iCloud progress clock (2026-08-22) + +The UX now fingerprints only admission blockers and genuine transfer/indexing progress: pending +indexable count, active upload/download counts, and their progress counters. No-progress counters, +materialization failures, staged-item misses, and timeout flags remain diagnostic evidence and cannot +restart the stall interval. A real progress change resets the interval and that reset is retained on +the following poll; a newly blocked admission still uses the backend timestamp when present. This +keeps a Finder preparation dialog from hiding behind fluctuating error counters while preserving the +fail-closed copy, attestation, and eviction boundary. The implementation and regression tests are +tracked in DiskSage PR #246. + ## Amendment: progress-aware iCloud stall clock (2026-08-21 23:38 +0900) The UX stall clock now distinguishes an admission-blocker run from transfer progress. After an diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index e8055e418..7fb215c6d 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -721,3 +721,12 @@ At each scheduled or operator loop, update this file only with new dated evidenc - `npm run check` passed with 0 errors/0 warnings, Vitest passed 34 files/138 tests, production build passed, and Storybook Chromium interaction/a11y passed 5/5. Generated Storybook output was removed after validation; no provider or user data was touched. + +## 2026-08-22 iCloud stall-counter clock regression + +- Current-head review found that the UX combined genuine progress fields with fluctuating + no-progress/materialization/timeout counters. A long-lived Finder preparation could therefore + reset its 15-minute warning on every diagnostic poll. The fix isolates the progress fingerprint, + preserves a real-progress reset on the next poll, and keeps the existing provider timestamp for a + newly blocked admission. Four focused clock tests and the CloudArchive contract suite pass locally; + PR #246 remains subject to fresh hosted checks and approval. diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 8955b7d16..c9e844ab2 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -16,6 +16,7 @@ } from "./cloudReviewQueue"; import { boundedCloudArchiveErrorMessage } from "./cloudArchiveErrorFeedback"; import { fmtBytes } from "./fmt"; + import { updateIcloudHealthStallClock } from "./icloudHealthStallClock"; import IcloudLocalEviction from "./IcloudLocalEviction.svelte"; import ProviderStatusCard from "./ux/ProviderStatusCard.svelte"; @@ -493,46 +494,19 @@ try { const observedAtMs = Date.now(); const next = await api.inspectIcloudNewCopyAdmission(); - const activity = next.file_provider_activity; - const admissionFingerprint = [ - next.new_copy_admission_state, - next.new_copy_admission_blockers.join(","), - ].join("|"); - const previousAdmissionFingerprint = icloudHealth - ? [ - icloudHealth.new_copy_admission_state, - icloudHealth.new_copy_admission_blockers.join(","), - ].join("|") - : ""; - const fingerprint = [ - admissionFingerprint, - activity?.no_progress_fetch_count ?? 0, - activity?.no_progress_create_count ?? 0, - activity?.materialization_failure_count ?? 0, - activity?.staged_item_missing_count ?? 0, - activity?.pending_indexable_count ?? "", - activity?.active_upload_count ?? 0, - activity?.active_download_count ?? 0, - activity?.active_upload_progress_millionths ?? "", - activity?.active_download_progress_millionths ?? "", - activity?.timed_out ?? false, - ].join("|"); - const admissionClear = next.new_copy_admission_state === "clear" - && next.new_copy_admission_blockers.length === 0; - if (admissionClear) { - icloudHealthBlockedSinceMs = 0; - icloudHealthFingerprint = ""; - } else if (icloudHealthFingerprint !== fingerprint) { - icloudHealthBlockedSinceMs = previousAdmissionFingerprint === admissionFingerprint - ? observedAtMs - : next.admission_blocked_since_ms ?? next.observed_at_ms; - icloudHealthFingerprint = fingerprint; - } else if (next.admission_blocked_since_ms != null) { - icloudHealthBlockedSinceMs = next.admission_blocked_since_ms; - } + const stallClock = updateIcloudHealthStallClock( + icloudHealth, + { blockedSinceMs: icloudHealthBlockedSinceMs, fingerprint: icloudHealthFingerprint }, + next, + observedAtMs, + ); + icloudHealthBlockedSinceMs = stallClock.blockedSinceMs; + icloudHealthFingerprint = stallClock.fingerprint; icloudHealth = next; icloudHealthNextCheckAt = observedAtMs - + (admissionClear ? RECONCILIATION_INTERVAL_MS : ICLOUD_HEALTH_BLOCKED_RETRY_INTERVAL_MS); + + (stallClock.fingerprint === "" + ? RECONCILIATION_INTERVAL_MS + : ICLOUD_HEALTH_BLOCKED_RETRY_INTERVAL_MS); } catch (e) { icloudHealth = null; icloudHealthError = boundedCloudArchiveErrorMessage("icloud-health", e); diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index 2933d2696..d13c552b3 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -15,7 +15,6 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloud-item-error-octagon-not-signed-in"); expect(source).toContain("동기화 진단:"); expect(source).toContain("iCloud File Provider 증거를 확인하지 못했습니다."); - expect(source).toContain("no_progress_create_count"); expect(source).toContain("pending_indexable_count"); expect(source).toContain("icloud-file-provider-indexing-pending"); expect(source).toContain("Finder에 남은 복사 대기는 취소"); @@ -29,13 +28,10 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("icloudHealthNextCheckAt"); expect(source).toContain("icloudHealthBlockedSinceMs"); expect(source).toContain("icloudHealthFingerprint"); - expect(source).toContain("const admissionClear = next.new_copy_admission_state === \"clear\""); - expect(source).toContain("} else if (icloudHealthFingerprint !== fingerprint) {"); - expect(source).toContain("} else if (next.admission_blocked_since_ms != null) {"); - expect(source).toContain("const admissionFingerprint = ["); - expect(source).toContain("const previousAdmissionFingerprint = icloudHealth"); - expect(source).toContain("previousAdmissionFingerprint === admissionFingerprint"); - expect(source).toContain("? observedAtMs"); + expect(source).toContain('import { updateIcloudHealthStallClock } from "./icloudHealthStallClock";'); + expect(source).toContain("const stallClock = updateIcloudHealthStallClock("); + expect(source).toContain("icloudHealthBlockedSinceMs = stallClock.blockedSinceMs;"); + expect(source).toContain("icloudHealthFingerprint = stallClock.fingerprint;"); expect(source).toContain("동일한 iCloud 차단 상태가 15분 이상 지속되었습니다."); expect(source).toContain("refreshIcloudHealth(true)"); expect(source).toContain("refreshProviderGlobalSync(true)"); diff --git a/src/lib/icloudHealthStallClock.test.ts b/src/lib/icloudHealthStallClock.test.ts new file mode 100644 index 000000000..d2f712ec3 --- /dev/null +++ b/src/lib/icloudHealthStallClock.test.ts @@ -0,0 +1,121 @@ +import { describe, expect, it } from "vitest"; +import type { IcloudSyncHealthReport } from "./api"; +import { + icloudHealthStallClockFingerprint, + updateIcloudHealthStallClock, +} from "./icloudHealthStallClock"; + +function report( + activity: IcloudSyncHealthReport["file_provider_activity"], + overrides: Partial = {}, +): IcloudSyncHealthReport { + return { + observed_at_ms: 1_000, + admission_blocked_since_ms: 500, + evidence_complete: true, + upload_queue: { + scheduled_waiting_count: 0, + scheduled_active_count: 0, + blocked_on_sync_up_count: 0, + out_of_quota_count: 0, + item_error_count: 0, + }, + file_provider_activity: activity, + sync_backlog_present: true, + new_copy_admission_state: "blocked", + new_copy_admission_blockers: ["icloud-new-copy-admission-blocked"], + blockers: ["icloud-new-copy-admission-blocked"], + notices: [], + local_eviction_authorized: false, + ...overrides, + }; +} + +function activity(overrides: Partial> = {}) { + return { + command_succeeded: true, + timed_out: false, + output_truncated: false, + no_progress_fetch_count: 1, + no_progress_create_count: 0, + materialization_failure_count: 0, + staged_item_missing_count: 0, + sync_excluded_filename_count: 0, + sync_excluded_root_count: 0, + pending_indexable_count: 12, + active_upload_count: 1, + active_download_count: 0, + active_upload_progress_millionths: 100, + active_download_progress_millionths: 0, + notices: [], + ...overrides, + }; +} + +describe("iCloud health stall clock", () => { + it("does not reset when only no-progress counters change", () => { + const previous = report(activity()); + const next = report(activity({ no_progress_fetch_count: 9 }), { observed_at_ms: 2_000 }); + const fingerprint = icloudHealthStallClockFingerprint(previous); + + expect(icloudHealthStallClockFingerprint(next)).toBe(fingerprint); + expect(updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint }, + next, + 2_000, + )).toEqual({ blockedSinceMs: 1_200, fingerprint }); + }); + + it("resets on real transfer progress and keeps that reset on the next poll", () => { + const previous = report(activity()); + const previousFingerprint = icloudHealthStallClockFingerprint(previous); + const progressed = report(activity({ active_upload_progress_millionths: 200 }), { + observed_at_ms: 2_000, + }); + const reset = updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint: previousFingerprint }, + progressed, + 2_000, + ); + const unchanged = updateIcloudHealthStallClock( + progressed, + reset, + report(activity({ active_upload_progress_millionths: 200 }), { observed_at_ms: 3_000 }), + 3_000, + ); + + expect(reset.blockedSinceMs).toBe(2_000); + expect(unchanged.blockedSinceMs).toBe(2_000); + }); + + it("uses the provider blocker timestamp when the blocker first appears", () => { + const next = report(activity(), { admission_blocked_since_ms: 700 }); + + expect(updateIcloudHealthStallClock( + null, + { blockedSinceMs: 0, fingerprint: "" }, + next, + 2_000, + ).blockedSinceMs).toBe(700); + }); + + it("clears the clock when admission becomes clear", () => { + const blocked = report(activity()); + const fingerprint = icloudHealthStallClockFingerprint(blocked); + const clear = report(null, { + new_copy_admission_state: "clear", + new_copy_admission_blockers: [], + blockers: [], + sync_backlog_present: false, + }); + + expect(updateIcloudHealthStallClock( + blocked, + { blockedSinceMs: 1_200, fingerprint }, + clear, + 2_000, + )).toEqual({ blockedSinceMs: 0, fingerprint: "" }); + }); +}); diff --git a/src/lib/icloudHealthStallClock.ts b/src/lib/icloudHealthStallClock.ts new file mode 100644 index 000000000..76c0e3f52 --- /dev/null +++ b/src/lib/icloudHealthStallClock.ts @@ -0,0 +1,60 @@ +import type { IcloudSyncHealthReport } from "./api"; + +export interface IcloudHealthStallClock { + blockedSinceMs: number; + fingerprint: string; +} + +function admissionFingerprint(report: IcloudSyncHealthReport): string { + return [ + report.new_copy_admission_state, + report.new_copy_admission_blockers.join(","), + ].join("|"); +} + +function progressFingerprint(report: IcloudSyncHealthReport): string { + const activity = report.file_provider_activity; + return [ + activity?.pending_indexable_count ?? "", + activity?.active_upload_count ?? 0, + activity?.active_download_count ?? 0, + activity?.active_upload_progress_millionths ?? "", + activity?.active_download_progress_millionths ?? "", + ].join("|"); +} + +export function icloudHealthStallClockFingerprint(report: IcloudSyncHealthReport): string { + return [admissionFingerprint(report), progressFingerprint(report)].join("|"); +} + +export function updateIcloudHealthStallClock( + previousReport: IcloudSyncHealthReport | null, + previousClock: IcloudHealthStallClock, + next: IcloudSyncHealthReport, + observedAtMs: number, +): IcloudHealthStallClock { + const fingerprint = icloudHealthStallClockFingerprint(next); + const admissionClear = next.new_copy_admission_state === "clear" + && next.new_copy_admission_blockers.length === 0; + if (admissionClear) return { blockedSinceMs: 0, fingerprint: "" }; + + const admissionChanged = !previousReport + || admissionFingerprint(previousReport) !== admissionFingerprint(next); + if (admissionChanged) { + return { + blockedSinceMs: next.admission_blocked_since_ms ?? next.observed_at_ms, + fingerprint, + }; + } + + if (previousClock.fingerprint !== fingerprint) { + return { blockedSinceMs: observedAtMs, fingerprint }; + } + + return { + blockedSinceMs: previousClock.blockedSinceMs > 0 + ? previousClock.blockedSinceMs + : next.admission_blocked_since_ms ?? next.observed_at_ms, + fingerprint, + }; +} From 0b77490e735d4643003c519c901a632b7b3db0b2 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 00:24:59 +0900 Subject: [PATCH 611/691] fix(scan): prefer local roots before filesystem root --- CHANGELOG.md | 2 ++ .../adr/0001-cloud-offload-goal-state.md | 9 ++++++ docs/product-technical-gap-baseline.md | 8 +++++ src-tauri/src/commands.rs | 32 +++++++++++++++++-- 4 files changed, 48 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3fb979600..da0c958d2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -65,6 +65,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Keep iCloud stall-counter changes (`no progress`, materialization failures, and timeouts) out of the progress fingerprint, so a blocked Finder copy still reaches the 15-minute warning; retain a real transfer/indexing progress reset across subsequent polls. +- Prefer `~/Downloads` and then the home directory over `/` for the initial macOS scan root, so a + first scan does not recursively enumerate iCloud/OneDrive File Provider trees by accident. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 52f6d7d6b..7742d8a0b 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -589,6 +589,15 @@ keeps a Finder preparation dialog from hiding behind fluctuating error counters fail-closed copy, attestation, and eviction boundary. The implementation and regression tests are tracked in DiskSage PR #246. +## Amendment: safe default scan root avoids provider enumeration (2026-08-22) + +On macOS the generic scanner now offers `~/Downloads` first when it exists, then the home directory, +and the filesystem root last. This preserves explicit access to `/` while preventing a first click on +“scan” from recursively enumerating iCloud, OneDrive, or Google Drive File Provider trees. Cloud +provider roots remain discovered separately by the metadata/provider evidence flow; this UI default +does not grant copy, attestation, eviction, or provider-write authority. The root-order contract is +covered by the Rust command test and is tracked in DiskSage PR #246. + ## Amendment: progress-aware iCloud stall clock (2026-08-21 23:38 +0900) The UX stall clock now distinguishes an admission-blocker run from transfer progress. After an diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 7fb215c6d..d3295e969 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -730,3 +730,11 @@ At each scheduled or operator loop, update this file only with new dated evidenc preserves a real-progress reset on the next poll, and keeps the existing provider timestamp for a newly blocked admission. Four focused clock tests and the CloudArchive contract suite pass locally; PR #246 remains subject to fresh hosted checks and approval. + +## 2026-08-22 safe default scan root + +- The generic macOS scan previously offered `/` first, allowing an accidental initial scan to + enumerate cloud-provider placeholder trees and amplify FileProvider reconciliation. The command + now orders an existing `~/Downloads`, then `$HOME`, then `/`; explicit root selection remains + available. The focused Rust root-order test passes, and cloud copy/eviction authority remains + unchanged. diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index c079633dc..6b0618a8d 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -253,8 +253,20 @@ pub fn list_roots() -> Vec { } #[cfg(not(windows))] { - let mut roots = vec!["/".to_string()]; - roots.extend(std::env::var("HOME").ok()); + let mut roots = Vec::new(); + if let Ok(home) = std::env::var("HOME") { + let home_path = Path::new(&home); + let downloads = home_path.join("Downloads"); + if downloads.is_dir() { + roots.push(downloads.to_string_lossy().into_owned()); + } + if home != "/" { + roots.push(home); + } + } + if !roots.iter().any(|root| root == "/") { + roots.push("/".to_string()); + } roots } } @@ -3395,7 +3407,21 @@ dm:Image a owl:Class ; rdfs:label "이미지"@ko . #[cfg(windows)] assert!(roots.iter().any(|r| r.ends_with(":\\"))); #[cfg(not(windows))] - assert!(roots.contains(&"/".to_string())); + { + assert!(roots.contains(&"/".to_string())); + if let Ok(home) = std::env::var("HOME") { + let downloads = Path::new(&home).join("Downloads"); + if downloads.is_dir() { + let expected = downloads.to_string_lossy().into_owned(); + assert_eq!(roots.first(), Some(&expected)); + } + if home != "/" { + let home_index = roots.iter().position(|root| root == &home).unwrap(); + let filesystem_index = roots.iter().position(|root| root == "/").unwrap(); + assert!(home_index < filesystem_index); + } + } + } } #[test] From 76d21894b320b0f7905103775b9b2775c65ebf90 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 00:42:17 +0900 Subject: [PATCH 612/691] fix(ux): keep iCloud admission card fail closed --- CHANGELOG.md | 2 ++ docs/architecture/adr/0001-cloud-offload-goal-state.md | 7 +++++++ docs/product-technical-gap-baseline.md | 6 ++++++ src/lib/CloudArchive.svelte | 3 ++- src/lib/cloudArchiveAdmissionContract.test.ts | 3 +++ 5 files changed, 20 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index da0c958d2..d48ab122c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -67,6 +67,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and a real transfer/indexing progress reset across subsequent polls. - Prefer `~/Downloads` and then the home directory over `/` for the initial macOS scan root, so a first scan does not recursively enumerate iCloud/OneDrive File Provider trees by accident. +- Keep the iCloud status card blocked when the admission state is `blocked` even if a malformed or + partially populated provider report temporarily has no blocker codes. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 7742d8a0b..42d2df3c6 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -598,6 +598,13 @@ provider roots remain discovered separately by the metadata/provider evidence fl does not grant copy, attestation, eviction, or provider-write authority. The root-order contract is covered by the Rust command test and is tracked in DiskSage PR #246. +## Amendment: iCloud admission state remains fail-closed in the status card (2026-08-22) + +The iCloud status card treats `new_copy_admission_state != clear` as blocked independently of the +blocker-code list. The backend currently validates state/code consistency, but the UI remains +fail-closed if a provider report is partial or malformed. This keeps copy, attestation, and eviction +guidance conservative and is tracked in DiskSage PR #246. + ## Amendment: progress-aware iCloud stall clock (2026-08-21 23:38 +0900) The UX stall clock now distinguishes an admission-blocker run from transfer progress. After an diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index d3295e969..18625519d 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -738,3 +738,9 @@ At each scheduled or operator loop, update this file only with new dated evidenc now orders an existing `~/Downloads`, then `$HOME`, then `/`; explicit root selection remains available. The focused Rust root-order test passes, and cloud copy/eviction authority remains unchanged. + +## 2026-08-22 iCloud admission card fail-closed guard + +- The iCloud card now uses the explicit admission state as a blocker signal in addition to blocker + codes. This prevents a partial provider report with `blocked` and an empty code list from showing + a misleading clear status; copy, attestation, and eviction gates remain unchanged. diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index c9e844ab2..bab869d23 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -948,7 +948,8 @@ provider="iCloud" state={providerStatusState( Boolean(icloudHealth), - (icloudHealth?.new_copy_admission_blockers.length ?? 0) > 0, + icloudHealth?.new_copy_admission_state !== "clear" + || (icloudHealth?.new_copy_admission_blockers.length ?? 0) > 0, icloudHealthBlockedSinceMs, icloudHealth?.observed_at_ms ?? 0, Boolean(icloudHealthError), diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index d13c552b3..16c9640ca 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -10,6 +10,9 @@ describe("CloudArchive iCloud admission contract", () => { const source = readFileSync(resolve(repositoryRoot, "src/lib/CloudArchive.svelte"), "utf8"); expect(source).toContain("icloudHealth = null;"); expect(source).toContain("icloudHealth?.new_copy_admission_state !== \"clear\""); + expect(source).toContain( + 'icloudHealth?.new_copy_admission_state !== "clear"\n || (icloudHealth?.new_copy_admission_blockers.length ?? 0) > 0', + ); expect(source).toContain("managed_database_allocated_bytes"); expect(source).toContain("시스템 관리 데이터를 삭제하지 않습니다"); expect(source).toContain("icloud-item-error-octagon-not-signed-in"); From 6b01f6f180da62d2e065ee4602b20edbe536f16c Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 00:55:58 +0900 Subject: [PATCH 613/691] fix(ci): keep readiness verifier includable --- CHANGELOG.md | 2 ++ docs/architecture/adr/0001-cloud-offload-goal-state.md | 7 +++++++ docs/product-technical-gap-baseline.md | 6 ++++++ src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs | 2 +- 4 files changed, 16 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d48ab122c..381d6929e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -69,6 +69,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and first scan does not recursively enumerate iCloud/OneDrive File Provider trees by accident. - Keep the iCloud status card blocked when the admission state is `blocked` even if a malformed or partially populated provider report temporarily has no blocker codes. +- Keep the shipped Naruon readiness verifier source includable by its integration boundary test; + the terminal parser contract now compiles in both the binary and test-module contexts. - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 42d2df3c6..dad573806 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -605,6 +605,13 @@ blocker-code list. The backend currently validates state/code consistency, but t fail-closed if a provider report is partial or malformed. This keeps copy, attestation, and eviction guidance conservative and is tracked in DiskSage PR #246. +## Amendment: keep the readiness verifier boundary testable (2026-08-22) + +The shipped Naruon readiness verifier uses a plain source comment rather than a crate-inner doc +comment so the same parser can be included by its integration boundary test module. This is a +compile-boundary repair only; the verifier's path-redacted output and readiness authority do not +change. + ## Amendment: progress-aware iCloud stall clock (2026-08-21 23:38 +0900) The UX stall clock now distinguishes an admission-blocker run from transfer progress. After an diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 18625519d..e79f86776 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -744,3 +744,9 @@ At each scheduled or operator loop, update this file only with new dated evidenc - The iCloud card now uses the explicit admission state as a blocker signal in addition to blocker codes. This prevents a partial provider report with `blocked` and an empty code list from showing a misleading clear status; copy, attestation, and eviction gates remain unchanged. + +## 2026-08-22 readiness verifier integration boundary + +- The Naruon readiness verifier's source comment is now valid both as a standalone binary and when + included by the integration test that locks its `--help`/absolute-path parser boundary. This + repairs the exact-head Rust test failure without changing readiness, copy, or eviction authority. diff --git a/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs b/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs index b5bd41a90..523362547 100644 --- a/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs +++ b/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs @@ -1,4 +1,4 @@ -//! Offline, path-redacted verification of one Naruon cloud-copy readiness envelope. +// Offline, path-redacted verification of one Naruon cloud-copy readiness envelope. use std::ffi::{OsStr, OsString}; use std::path::{Path, PathBuf}; From 51973c3e9835d83213b75b05451867253a10af12 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 01:11:59 +0900 Subject: [PATCH 614/691] fix(ci): keep readiness verifier includable --- CHANGELOG.md | 3 +++ docs/architecture/adr/0001-cloud-offload-goal-state.md | 7 +++++++ docs/product-technical-gap-baseline.md | 6 ++++++ src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs | 2 +- 4 files changed, 17 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c90bfec2..32f31fd54 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -44,6 +44,9 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and ### Fixed +- Keep the shipped Naruon readiness verifier source includable by its integration boundary test; + the terminal parser contract now compiles in both the binary and test-module contexts. + - Cover the `sensitive-config` archive-kind wire label in the generated cloud-plan implementation, so the macOS/Linux/Windows cloud-plan binaries compile after the sensitive-config safety boundary is enabled. diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 9e54dd90b..e7c9d1276 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -528,3 +528,10 @@ new-copy admission blocker (`icloud-file-provider-filename-excluded` or `icloud-file-provider-root-excluded`) in addition to any transfer or materialization blocker. The Finder preparation dialog therefore remains an incomplete provider operation, not a successful copy receipt, and copy, attestation, and eviction stay fail-closed until the provider is quiet. + +## Amendment: keep the readiness verifier boundary testable (2026-08-22) + +The shipped Naruon readiness verifier uses a plain source comment rather than a crate-inner doc +comment so the same parser can be included by its integration boundary test module. This is a +compile-boundary repair only; the verifier's path-redacted output and readiness authority do not +change. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 5c2c7ea74..0dfb4984c 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -653,3 +653,9 @@ At each scheduled or operator loop, update this file only with new dated evidenc and retained SQLite `databaseInitError` code 11. The provider is therefore still not quiet or complete; DiskSage keeps copy, attestation, and eviction fail-closed. This separates the active provider-index backlog from the earlier low-space pressure incident. + +## 2026-08-22 readiness verifier integration boundary + +- The Naruon readiness verifier's source comment is now valid both as a standalone binary and when + included by the integration test that locks its `--help`/absolute-path parser boundary. This + repairs the exact-head Rust test failure without changing readiness, copy, or eviction authority. diff --git a/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs b/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs index b5bd41a90..523362547 100644 --- a/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs +++ b/src-tauri/src/bin/disksage-naruon-copy-readiness-verify.rs @@ -1,4 +1,4 @@ -//! Offline, path-redacted verification of one Naruon cloud-copy readiness envelope. +// Offline, path-redacted verification of one Naruon cloud-copy readiness envelope. use std::ffi::{OsStr, OsString}; use std::path::{Path, PathBuf}; From 3e72277099cb825aa238ee62133c38acaf96f869 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 01:46:21 +0900 Subject: [PATCH 615/691] test: use production cloud copy approval boundary --- .../naruon_lineage_unknown_sync_state.rs | 31 +++++++++++++------ 1 file changed, 22 insertions(+), 9 deletions(-) diff --git a/src-tauri/tests/naruon_lineage_unknown_sync_state.rs b/src-tauri/tests/naruon_lineage_unknown_sync_state.rs index 4270e9f3b..49858b018 100644 --- a/src-tauri/tests/naruon_lineage_unknown_sync_state.rs +++ b/src-tauri/tests/naruon_lineage_unknown_sync_state.rs @@ -4,7 +4,8 @@ use disksage_lib::cloud::{ }; use disksage_lib::cloud_review::{create_attributed_decision, CloudReviewDisposition}; use disksage_lib::cloud_transfer::{ - prepare_cloud_copy_with_review, ProviderSyncEvidence, ProviderSyncState, SyncEvidenceKind, + cloud_copy_approval_phrase, create_cloud_copy_approval, prepare_cloud_copy_with_approval, + CloudCopyApprovalAction, ProviderSyncEvidence, ProviderSyncState, SyncEvidenceKind, }; use disksage_lib::naruon_lineage::export_naruon_file_lineage; use disksage_lib::provider_evidence::create_sync_evidence_record; @@ -79,12 +80,26 @@ fn legacy_unknown_sync_state_never_exports_confirmed_provider_sync() { access_issue: None, }; - let receipt = prepare_cloud_copy_with_review( + let approval_time = std::time::SystemTime::now() + .duration_since(std::time::UNIX_EPOCH) + .unwrap() + .as_millis() as u64; + let copy_approval = create_cloud_copy_approval( + &candidate, + &root, + CloudCopyApprovalAction::CopyOnly, + approval_time, + "human:local:test", + "authorize exact test cloud copy", + &cloud_copy_approval_phrase(&candidate, CloudCopyApprovalAction::CopyOnly), + ) + .unwrap(); + let receipt = prepare_cloud_copy_with_approval( &candidate, &root, &tmp.path().join("receipts"), - 30, Some(&decision), + ©_approval, ) .unwrap() .0; @@ -103,11 +118,9 @@ fn legacy_unknown_sync_state_never_exports_confirmed_provider_sync() { }) .unwrap(); - let envelope = export_naruon_file_lineage(&receipt, Some(&record)).unwrap(); - - assert_eq!(envelope.cloud_copy.provider_sync_state, ProviderSyncState::Unknown); - assert!( - !envelope.cloud_copy.provider_sync_confirmed, - "legacy evidence without an explicit complete sync state must remain unconfirmed" + let error = export_naruon_file_lineage(&receipt, Some(&record)).unwrap_err(); + assert_eq!( + error, "provider-sync-incomplete", + "legacy evidence without an explicit complete sync state must fail closed" ); } From 741ab30f9e47f0ab6c926dc02d2758922fd573ed Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 02:19:31 +0900 Subject: [PATCH 616/691] fix: kill timed-out lsof process groups --- src-tauri/src/cloud_local_eviction.rs | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/src-tauri/src/cloud_local_eviction.rs b/src-tauri/src/cloud_local_eviction.rs index 4b4121097..870b42a61 100644 --- a/src-tauri/src/cloud_local_eviction.rs +++ b/src-tauri/src/cloud_local_eviction.rs @@ -460,6 +460,17 @@ fn observe_lsof_active_use(path: &Path, deadline: Instant) -> ActiveUseEvidence // for a cache directory whose open files live below the directory entry. command.arg("+D"); } + // A bounded lsof probe may be a shell wrapper in tests or on user systems. Kill its process + // group on timeout so descendants cannot keep the stdout pipe alive and starve the ps probe. + unsafe { + use std::os::unix::process::CommandExt; + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } let mut child = match command .arg(path) .stdin(Stdio::null()) @@ -503,6 +514,10 @@ fn observe_lsof_active_use(path: &Path, deadline: Instant) -> ActiveUseEvidence }; let reader = drain_bounded(stdout); let error_reader = drain_bounded(stderr); + let child_pid = child.id(); + let kill_group = || unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + }; let status = loop { match child.try_wait() { Ok(Some(status)) => break Some(status), @@ -510,6 +525,7 @@ fn observe_lsof_active_use(path: &Path, deadline: Instant) -> ActiveUseEvidence std::thread::sleep(Duration::from_millis(25)); } Ok(None) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); break None; From a6ec6e299afcbf4a23b4c7ccaa387e6a12120e8f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 02:19:31 +0900 Subject: [PATCH 617/691] fix: kill timed-out lsof process groups --- src-tauri/src/cloud_local_eviction.rs | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/src-tauri/src/cloud_local_eviction.rs b/src-tauri/src/cloud_local_eviction.rs index 4b4121097..870b42a61 100644 --- a/src-tauri/src/cloud_local_eviction.rs +++ b/src-tauri/src/cloud_local_eviction.rs @@ -460,6 +460,17 @@ fn observe_lsof_active_use(path: &Path, deadline: Instant) -> ActiveUseEvidence // for a cache directory whose open files live below the directory entry. command.arg("+D"); } + // A bounded lsof probe may be a shell wrapper in tests or on user systems. Kill its process + // group on timeout so descendants cannot keep the stdout pipe alive and starve the ps probe. + unsafe { + use std::os::unix::process::CommandExt; + command.pre_exec(|| { + if libc::setpgid(0, 0) == -1 { + return Err(std::io::Error::last_os_error()); + } + Ok(()) + }); + } let mut child = match command .arg(path) .stdin(Stdio::null()) @@ -503,6 +514,10 @@ fn observe_lsof_active_use(path: &Path, deadline: Instant) -> ActiveUseEvidence }; let reader = drain_bounded(stdout); let error_reader = drain_bounded(stderr); + let child_pid = child.id(); + let kill_group = || unsafe { + let _ = libc::kill(-(child_pid as libc::pid_t), libc::SIGKILL); + }; let status = loop { match child.try_wait() { Ok(Some(status)) => break Some(status), @@ -510,6 +525,7 @@ fn observe_lsof_active_use(path: &Path, deadline: Instant) -> ActiveUseEvidence std::thread::sleep(Duration::from_millis(25)); } Ok(None) => { + kill_group(); let _ = child.kill(); let _ = child.wait(); break None; From 2b9833c63e01298453985af416d65e26ffbeddfc Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 02:31:11 +0900 Subject: [PATCH 618/691] docs: record current Finder stall evidence --- .../adr/0001-cloud-offload-goal-state.md | 11 ++++++++ docs/product-technical-gap-baseline.md | 26 ++++++++++++++++--- 2 files changed, 34 insertions(+), 3 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index e7c9d1276..cfc9a10ce 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -535,3 +535,14 @@ The shipped Naruon readiness verifier uses a plain source comment rather than a comment so the same parser can be included by its integration boundary test module. This is a compile-boundary repair only; the verifier's path-redacted output and readiness authority do not change. + +## Amendment: bound active-use probes without touching provider state (2026-08-22) + +The exact-head macOS fix `a6ec6e2` starts the bounded `lsof` active-use probe in its own Unix +process group. On timeout, the group is killed before bounded stdout/stderr readers are joined, +so a shell wrapper or descendant cannot keep a pipe open and starve the independent `ps` probe. +Only the command group created for the diagnostic is terminated; Finder, `bird`, `fileproviderd`, +File Provider databases, cloud objects, and user files remain outside the mutation boundary. The +focused Rust regression test passed 3/3. A timeout remains incomplete active-use evidence and +keeps cache cleanup and cloud eviction fail-closed; this process-group cleanup is not a provider +recovery or copy-cancellation operation. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index 0dfb4984c..3091870aa 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -1,8 +1,9 @@ # DiskSage product and technical gap baseline -**Snapshot:** 2026-08-21 (Asia/Seoul) -**Repository heads at snapshot:** `feat/provider-sync-dynamic-goals` source through `6f424af`; this -baseline records the current loop's runtime and integration evidence. +**Snapshot:** 2026-08-22 (Asia/Seoul) +**Repository heads at snapshot:** PR #213 `a6ec6e2`, PR #247 `a0fa7bc`, PR #246 `741ab30`, +supporting PR #156 `39a08a7`, and PR #192 `30ceea2`; hosted checks and protected review remain +authoritative, and no merge is claimed from queued or stale status. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. **Evidence rule:** this document is a dated baseline, not an authority for transfer or deletion. Runtime receipts, provider attestations, object identity, and current GitHub checks remain authoritative. @@ -659,3 +660,22 @@ At each scheduled or operator loop, update this file only with new dated evidenc - The Naruon readiness verifier's source comment is now valid both as a standalone binary and when included by the integration test that locks its `--help`/absolute-path parser boundary. This repairs the exact-head Rust test failure without changing readiness, copy, or eviction authority. + +## 2026-08-22 current Finder/iCloud stall and exact-head repair evidence + +- The user-visible Finder operation still reports `real_datasets` as “복사 준비 중” after hours. + A bounded, read-only iCloud File Provider observation at about `02:08 +0900` found an active + upload of `4,170,552,115 / 5,462,125,152` bytes (76.35%), 28,694 pending indexable items, + `scheduling=running`, active materialization, and sync-exclusion notices for filenames and roots. + The dump exceeded its wall-clock bound and was truncated; these are incomplete provider-global + markers, not a per-item upload receipt. No retained marker binds an exclusion to `real_datasets`. +- The data volume measured about 926 GiB total, 873 GiB used, 12 GiB available (99%). Finder, + `fileproviderd`, and `bird` remained alive. DiskSage did not kill a process, touch a CloudDocs + database, materialize a placeholder, cancel Finder, or mutate a source/cloud object. Its own + admission remains `provider-sync-incomplete`; only the existing operator-visible Finder Escape + action may request cancellation, followed by a fresh complete and quiet observation. +- The exact-head fix `a6ec6e2` starts the bounded `lsof` active-use probe in a private process group + and kills that group before joining output readers on timeout. This closes the shell-descendant + pipe leak that could starve the independent `ps` probe and report a false active-use timeout. + The focused Rust test passed 3/3. The same patch is present on stacked PR heads `a0fa7bc` (#247) + and `741ab30` (#246); hosted checks are rerunning and protected merge/review is still pending. From 44756d1da9271abefcdd9a79e726d6bd7289fc73 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 02:51:24 +0900 Subject: [PATCH 619/691] fix: keep indexing backlog growth in stall clock --- src/lib/icloudHealthStallClock.test.ts | 42 ++++++++++++++++++++++++++ src/lib/icloudHealthStallClock.ts | 29 +++++++++++++++++- 2 files changed, 70 insertions(+), 1 deletion(-) diff --git a/src/lib/icloudHealthStallClock.test.ts b/src/lib/icloudHealthStallClock.test.ts index d2f712ec3..542919c52 100644 --- a/src/lib/icloudHealthStallClock.test.ts +++ b/src/lib/icloudHealthStallClock.test.ts @@ -90,6 +90,48 @@ describe("iCloud health stall clock", () => { expect(unchanged.blockedSinceMs).toBe(2_000); }); + it("does not reset when the indexing backlog grows", () => { + const previous = report(activity({ pending_indexable_count: 12 })); + const previousFingerprint = icloudHealthStallClockFingerprint(previous); + const next = report(activity({ pending_indexable_count: 20 }), { observed_at_ms: 2_000 }); + + const clock = updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint: previousFingerprint }, + next, + 2_000, + ); + + expect(clock.blockedSinceMs).toBe(1_200); + expect(clock.fingerprint).toBe(icloudHealthStallClockFingerprint(next)); + }); + + it("resets when the indexing backlog drains", () => { + const previous = report(activity({ pending_indexable_count: 20 })); + const previousFingerprint = icloudHealthStallClockFingerprint(previous); + const next = report(activity({ pending_indexable_count: 12 }), { observed_at_ms: 2_000 }); + + expect(updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint: previousFingerprint }, + next, + 2_000, + ).blockedSinceMs).toBe(2_000); + }); + + it("does not treat an unknown indexing backlog as progress", () => { + const previous = report(activity({ pending_indexable_count: 12 })); + const previousFingerprint = icloudHealthStallClockFingerprint(previous); + const next = report(activity({ pending_indexable_count: null }), { observed_at_ms: 2_000 }); + + expect(updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint: previousFingerprint }, + next, + 2_000, + ).blockedSinceMs).toBe(1_200); + }); + it("uses the provider blocker timestamp when the blocker first appears", () => { const next = report(activity(), { admission_blocked_since_ms: 700 }); diff --git a/src/lib/icloudHealthStallClock.ts b/src/lib/icloudHealthStallClock.ts index 76c0e3f52..65bcbb97b 100644 --- a/src/lib/icloudHealthStallClock.ts +++ b/src/lib/icloudHealthStallClock.ts @@ -23,6 +23,33 @@ function progressFingerprint(report: IcloudSyncHealthReport): string { ].join("|"); } +function activeTransferFingerprint(report: IcloudSyncHealthReport): string { + const activity = report.file_provider_activity; + return [ + activity?.active_upload_count ?? 0, + activity?.active_download_count ?? 0, + activity?.active_upload_progress_millionths ?? "", + activity?.active_download_progress_millionths ?? "", + ].join("|"); +} + +function indexingBacklogDrained( + previousReport: IcloudSyncHealthReport, + next: IcloudSyncHealthReport, +): boolean { + const previous = previousReport.file_provider_activity?.pending_indexable_count; + const current = next.file_provider_activity?.pending_indexable_count; + return previous != null && current != null && current < previous; +} + +function hasRealProgress( + previousReport: IcloudSyncHealthReport, + next: IcloudSyncHealthReport, +): boolean { + return activeTransferFingerprint(previousReport) !== activeTransferFingerprint(next) + || indexingBacklogDrained(previousReport, next); +} + export function icloudHealthStallClockFingerprint(report: IcloudSyncHealthReport): string { return [admissionFingerprint(report), progressFingerprint(report)].join("|"); } @@ -47,7 +74,7 @@ export function updateIcloudHealthStallClock( }; } - if (previousClock.fingerprint !== fingerprint) { + if (previousClock.fingerprint !== fingerprint && hasRealProgress(previousReport, next)) { return { blockedSinceMs: observedAtMs, fingerprint }; } From b4bca2f9983d9293d1f31b37c56a9e28a17a6934 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 02:52:15 +0900 Subject: [PATCH 620/691] docs: record backlog stall clock semantics --- .../adr/0001-cloud-offload-goal-state.md | 10 ++++++++++ docs/product-technical-gap-baseline.md | 12 ++++++++++-- 2 files changed, 20 insertions(+), 2 deletions(-) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index 3c2bb5899..e7e46740f 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -632,3 +632,13 @@ File Provider databases, cloud objects, and user files remain outside the mutati focused Rust regression test passed 3/3. A timeout remains incomplete active-use evidence and keeps cache cleanup and cloud eviction fail-closed; this process-group cleanup is not a provider recovery or copy-cancellation operation. + +## Amendment: indexing backlog growth does not reset the stall clock (2026-08-22) + +The UX stall clock now treats a smaller pending-indexable count as progress, while an increasing or +unknown count only refreshes the displayed fingerprint and preserves the existing blocked duration. +Active upload/download counters and progress markers retain their existing progress semantics. This +prevents a growing provider queue from postponing the 15-minute Finder-stall guidance indefinitely; +the clock remains diagnostic/cancel-only and never grants copy, attestation, or eviction authority. +The implementation at source head `44756d1` is covered by seven focused Vitest cases and a clean +`svelte-check` run. diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md index e375d0286..875aff031 100644 --- a/docs/product-technical-gap-baseline.md +++ b/docs/product-technical-gap-baseline.md @@ -1,7 +1,7 @@ # DiskSage product and technical gap baseline **Snapshot:** 2026-08-22 (Asia/Seoul) -**Repository heads at snapshot:** PR #213 `2b9833c`, PR #247 `67873b2`, PR #246 `741ab30`, +**Repository heads at snapshot:** PR #213 `2b9833c`, PR #247 `67873b2`, PR #246 `44756d1`, supporting PR #156 `39a08a7`, and PR #192 `30ceea2`; hosted checks and protected review remain authoritative, and no merge is claimed from queued or stale status. **Product boundary:** local-first macOS disk pressure relief with iCloud, OneDrive, and Google Drive destinations. @@ -764,4 +764,12 @@ At each scheduled or operator loop, update this file only with new dated evidenc and kills that group before joining output readers on timeout. This closes the shell-descendant pipe leak that could starve the independent `ps` probe and report a false active-use timeout. The focused Rust test passed 3/3. The same patch is present on stacked PR heads `67873b2` (#247) - and `741ab30` (#246); hosted checks are rerunning and protected merge/review is still pending. + and `44756d1` (#246); hosted checks are rerunning and protected merge/review is still pending. + +## 2026-08-22 indexing backlog stall-clock correction + +- A rising `pending_indexable_count` no longer resets the UX stall interval; only a drained backlog + or actual upload/download progress does. Unknown backlog values remain non-progress evidence. + This keeps the “몇 시간째 준비 중” warning actionable when File Provider keeps adding work. + Seven focused Vitest tests pass and `svelte-check` reports 0 errors/0 warnings at source head + `44756d1`. From 09a63910c5e4bbb90bb6a7845de89f4dcef5af43 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 02:53:50 +0900 Subject: [PATCH 621/691] docs: describe backlog stall semantics --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 381d6929e..49556e98e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -65,6 +65,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and - Keep iCloud stall-counter changes (`no progress`, materialization failures, and timeouts) out of the progress fingerprint, so a blocked Finder copy still reaches the 15-minute warning; retain a real transfer/indexing progress reset across subsequent polls. +- Do not treat a growing or unknown iCloud pending-indexable backlog as progress; only a drained + backlog or actual transfer progress resets the stalled-copy interval. - Prefer `~/Downloads` and then the home directory over `/` for the initial macOS scan root, so a first scan does not recursively enumerate iCloud/OneDrive File Provider trees by accident. - Keep the iCloud status card blocked when the admission state is `blocked` even if a malformed or From 992894af92b57aa0ad437388e60e419452361cdb Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 11:33:46 -0700 Subject: [PATCH 622/691] test: require destination-volume copy headroom --- ...loud_copy_headroom_destination_contract.rs | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 src-tauri/tests/cloud_copy_headroom_destination_contract.rs diff --git a/src-tauri/tests/cloud_copy_headroom_destination_contract.rs b/src-tauri/tests/cloud_copy_headroom_destination_contract.rs new file mode 100644 index 000000000..5049170ed --- /dev/null +++ b/src-tauri/tests/cloud_copy_headroom_destination_contract.rs @@ -0,0 +1,26 @@ +//! Regression contract for the native cloud-copy local-capacity authority. +//! +//! A native File Provider copy stages under the destination parent, so the mutation-time +//! headroom probe must be bound to that destination filesystem rather than to the source volume. + +#[test] +fn native_copy_headroom_is_bound_to_the_destination_staging_volume() { + let commands = include_str!("../src/commands.rs"); + let start = commands + .find("fn require_local_copy_headroom") + .expect("native copy headroom gate must remain explicit"); + let tail = &commands[start..]; + let end = tail + .find("\n}\n\n#[cfg(not(coverage))]\n#[tauri::command(async)]") + .expect("headroom helper must remain bounded before the next command"); + let helper = &tail[..end]; + + assert!( + helper.contains("candidate.dst"), + "headroom must be measured on the destination/staging filesystem" + ); + assert!( + !helper.contains("candidate.src"), + "source-volume free space must not authorize or veto destination staging" + ); +} From 06421c8618c78ed538ef4403eee6aadb24605271 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 11:35:41 -0700 Subject: [PATCH 623/691] feat: bind copy headroom to destination filesystem --- src-tauri/src/copy_headroom.rs | 97 ++++++++++++++++++++++++++++++++++ 1 file changed, 97 insertions(+) create mode 100644 src-tauri/src/copy_headroom.rs diff --git a/src-tauri/src/copy_headroom.rs b/src-tauri/src/copy_headroom.rs new file mode 100644 index 000000000..bf5731a38 --- /dev/null +++ b/src-tauri/src/copy_headroom.rs @@ -0,0 +1,97 @@ +//! Destination-filesystem headroom authority for native cloud copies. +//! +//! DiskSage stages native File Provider copies below the final destination parent. A source file +//! may live on a different filesystem, so source-volume capacity cannot authorize or veto that +//! staging mutation. The probe therefore resolves the nearest existing destination ancestor; any +//! missing descendants will be created on that same filesystem before the staging file exists. + +use std::path::{Path, PathBuf}; + +fn destination_volume_probe_path(destination: &Path) -> Result { + let mut probe = destination + .parent() + .ok_or_else(|| "local-volume-headroom-destination-parent-missing".to_string())?; + loop { + match std::fs::symlink_metadata(probe) { + Ok(metadata) => { + if metadata.file_type().is_symlink() || !metadata.is_dir() { + return Err("local-volume-headroom-destination-parent-unsafe".into()); + } + return Ok(probe.to_path_buf()); + } + Err(error) if error.kind() == std::io::ErrorKind::NotFound => { + probe = probe + .parent() + .ok_or_else(|| "local-volume-headroom-destination-parent-missing".to_string())?; + } + Err(_) => return Err("local-volume-headroom-destination-parent-unavailable".into()), + } + } +} + +pub(crate) fn require_destination_copy_headroom( + destination: &Path, + candidate_bytes: u64, + observed_at_ms: u64, +) -> Result<(), String> { + let probe = destination_volume_probe_path(destination)?; + let snapshot = crate::volume_pressure::snapshot_volume(&probe, observed_at_ms)?; + if crate::volume_pressure::has_copy_headroom(snapshot.available_bytes, candidate_bytes) { + Ok(()) + } else { + Err("local-volume-headroom-insufficient".into()) + } +} + +#[cfg(test)] +mod tests { + use super::*; + + #[test] + fn missing_destination_descendants_probe_the_existing_destination_filesystem() { + let root = tempfile::tempdir().unwrap(); + let destination = root + .path() + .join("DiskSage Archive") + .join("documents") + .join("report.pdf"); + + assert_eq!(destination_volume_probe_path(&destination).unwrap(), root.path()); + } + + #[test] + fn nearest_existing_destination_parent_is_authoritative() { + let root = tempfile::tempdir().unwrap(); + let existing = root.path().join("DiskSage Archive"); + std::fs::create_dir(&existing).unwrap(); + let destination = existing.join("documents").join("report.pdf"); + + assert_eq!(destination_volume_probe_path(&destination).unwrap(), existing); + } + + #[test] + fn real_destination_statvfs_preserves_the_bounded_headroom_error() { + let root = tempfile::tempdir().unwrap(); + let destination = root.path().join("archive").join("report.pdf"); + + assert_eq!( + require_destination_copy_headroom(&destination, u64::MAX, 1), + Err("local-volume-headroom-insufficient".into()) + ); + } + + #[cfg(unix)] + #[test] + fn existing_symlink_destination_parent_is_not_capacity_authority() { + let root = tempfile::tempdir().unwrap(); + let actual = root.path().join("actual"); + std::fs::create_dir(&actual).unwrap(); + let linked = root.path().join("linked"); + std::os::unix::fs::symlink(&actual, &linked).unwrap(); + + assert_eq!( + destination_volume_probe_path(&linked.join("report.pdf")), + Err("local-volume-headroom-destination-parent-unsafe".into()) + ); + } +} From 3a925a9671f6eb449346706e9578634a96fd376a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 11:36:48 -0700 Subject: [PATCH 624/691] fix: probe cloud copy destination headroom --- src-tauri/src/commands.rs | 3319 +------------------------------------ 1 file changed, 4 insertions(+), 3315 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index c079633dc..66d0d15ae 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -30,6 +30,9 @@ use crate::{ #[path = "home_resolution.rs"] mod home_resolution; +#[path = "copy_headroom.rs"] +mod copy_headroom; + #[derive(Default)] pub struct AppState { pub result: Arc>>, @@ -298,3320 +301,6 @@ fn bundled_ontology_ttl(app: &AppHandle) -> Result { #[cfg(not(coverage))] #[tauri::command] pub fn get_ontology(app: AppHandle) -> Result { + load_ontology_from(&bundled_ontology_ttl(&app)?)?; load_ontology_from(&bundled_ontology_ttl(&app)?) } - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn disk_inventory( - root: String, - app: AppHandle, -) -> Result { - let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; - let files = crate::dupes::collect_files(std::path::Path::new(&root)); - Ok(crate::inventory::build_inventory(&files, &onto)) -} - -/// 번들/오버라이드 온톨로지의 정합성 검사(advisory) — 불충족 클래스 목록. 로직은 Task 2의 Reasoner::check_coherence에 이미 있음. -#[cfg(not(coverage))] -#[tauri::command] -pub fn ontology_coherence(app: AppHandle) -> Result, String> { - let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; - Ok(crate::ontology::Reasoner::build(&onto).check_coherence()) -} - -#[cfg(not(coverage))] -fn settings_file_path(app: &AppHandle) -> Result { - use tauri::Manager; - let dir = app.path().app_config_dir().map_err(|e| e.to_string())?; - std::fs::create_dir_all(&dir).map_err(|e| e.to_string())?; - Ok(dir.join("settings.json")) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn get_settings(app: AppHandle) -> Result { - let path = settings_file_path(&app)?; - match std::fs::read_to_string(&path) { - Ok(s) => Ok(crate::settings::parse_settings(&s)), - Err(_) => Ok(crate::settings::Settings::default()), - } -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn set_settings( - online_mode: bool, - app: AppHandle, -) -> Result { - let s = crate::settings::Settings { online_mode }; - let path = settings_file_path(&app)?; - std::fs::write(&path, crate::settings::serialize_settings(&s)).map_err(|e| e.to_string())?; - Ok(s) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn start_scan(root: String, app: AppHandle, state: State) -> Result<(), String> { - if state.scanning.swap(true, Ordering::SeqCst) { - return Err("scan already running".into()); - } - state.cancel.store(false, Ordering::SeqCst); - let cancel = state.cancel.clone(); - let slot = state.result.clone(); - let scanning = state.scanning.clone(); - std::thread::spawn(move || { - struct ScanningReset(Arc); - impl Drop for ScanningReset { - fn drop(&mut self) { - self.0.store(false, Ordering::SeqCst); - } - } - let _reset = ScanningReset(scanning); - let res = scanner::scan_dir(Path::new(&root), &cancel, |s| { - let _ = app.emit("scan://progress", s.clone()); - }); - let stats = res.stats.clone(); - *slot.lock().unwrap() = Some(res); - drop(_reset); - let _ = app.emit("scan://done", stats); - }); - Ok(()) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn cancel_scan(state: State) { - state.cancel.store(true, Ordering::SeqCst); -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn get_node(path: String, state: State) -> Result { - let guard = state.result.lock().unwrap(); - let res = guard.as_ref().ok_or("no scan result")?; - node_view(res, &PathBuf::from(path)) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn top_files(limit: usize, state: State) -> Result, String> { - let guard = state.result.lock().unwrap(); - let res = guard.as_ref().ok_or("no scan result")?; - Ok(res - .top_files - .iter() - .take(limit) - .map(|(p, size)| EntryView { - name: p - .file_name() - .map(|n| n.to_string_lossy().into_owned()) - .unwrap_or_default(), - path: p.to_string_lossy().into_owned(), - size: *size, - is_dir: false, - }) - .collect()) -} - -#[cfg(not(coverage))] -pub(crate) fn journal_file_path(app: &AppHandle) -> Result { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - std::fs::create_dir_all(&dir).map_err(|e| e.to_string())?; - Ok(dir.join("journal.jsonl")) -} - -#[cfg(not(coverage))] -pub(crate) fn now_ms() -> u64 { - std::time::SystemTime::now() - .duration_since(std::time::UNIX_EPOCH) - .map(|d| d.as_millis() as u64) - .unwrap_or(0) -} - -fn valid_brew_fingerprint(value: &str) -> bool { - value.len() == 64 && value.bytes().all(|byte| byte.is_ascii_hexdigit()) -} - -fn valid_brew_rationale(value: &str) -> bool { - let trimmed = value.trim(); - value == trimmed - && !trimmed.is_empty() - && trimmed.chars().count() <= 1_000 - && !trimmed.chars().any(char::is_control) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn plan_brew_cleanup() -> Result { - brew_cleanup::plan(now_ms()) -} - -fn podman_binary() -> PathBuf { - [ - "/opt/homebrew/bin/podman", - "/usr/local/bin/podman", - "/usr/bin/podman", - ] - .into_iter() - .map(PathBuf::from) - .find(|path| { - std::fs::symlink_metadata(path) - .is_ok_and(|metadata| metadata.is_file() && !metadata.file_type().is_symlink()) - }) - .unwrap_or_else(|| PathBuf::from("podman")) -} - -/// Read-only Podman VM/store evidence. The command never prunes, removes, trims, or stops. -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn inspect_podman_reclaim() -> podman_reclaim::PodmanReclaimPlan { - podman_reclaim::probe_podman_reclaim( - &podman_binary(), - podman_reclaim::DEFAULT_PODMAN_MACHINE, - podman_reclaim::DEFAULT_PROBE_TIMEOUT, - ) -} - -/// Freshly revalidates and removes only untagged, unreferenced Podman images. -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn execute_podman_dangling_image_prune( - confirmation_phrase: String, - rationale: String, -) -> Result { - if !valid_brew_rationale(&rationale) { - return Err("podman-prune-rationale-invalid".into()); - } - podman_reclaim::prune_dangling_images( - &podman_binary(), - podman_reclaim::DEFAULT_PODMAN_MACHINE, - &confirmation_phrase, - &rationale, - now_ms(), - ) -} - -#[cfg(not(coverage))] -#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] -#[tauri::command(async)] -pub fn judge_brew_cleanup( - app: AppHandle, - state: State, -) -> Result { - let plan = brew_cleanup::plan(now_ms())?; - - #[cfg(feature = "llm-engine")] - { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - if !model_status_for(&model_file_path(&dir)).present { - return Err("brew-cleanup-llm-model-unavailable".into()); - } - let mut guard = state - .engine - .lock() - .map_err(|_| "brew-cleanup-llm-engine-lock-poisoned".to_string())?; - if guard.is_none() { - let engine = crate::llm::LlamaEngine::new(&model_file_path(&dir)) - .map_err(|_| "brew-cleanup-llm-engine-init-failed".to_string())?; - *guard = Some(engine); - } - let engine = guard - .as_ref() - .ok_or_else(|| "brew-cleanup-llm-engine-unavailable".to_string())?; - let judgment = brew_cleanup::judge(engine, &plan, now_ms()); - let mut judgment = judgment; - judgment.calibration = state - .judge_calibration - .lock() - .map_err(|_| "brew-cleanup-calibration-lock-poisoned".to_string())? - .as_ref() - .filter(|calibration| calibration.judgment_id == judgment.judgment_id) - .cloned(); - drop(guard); - *state - .brew_cleanup_judgment - .lock() - .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())? = - (judgment.verdict == crate::llm::Verdict::Safe).then_some(judgment.clone()); - return Ok(judgment); - } - - #[cfg(not(feature = "llm-engine"))] - { - let _ = (app, state); - Err("brew-cleanup-llm-engine-disabled".into()) - } -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn validate_judge_calibration( - evidence: crate::judge_calibration::JudgeCalibrationEvidence, - state: State, -) -> Result { - let result = crate::judge_calibration::validate(&evidence)?; - *state - .judge_calibration - .lock() - .map_err(|_| "judge-calibration-lock-poisoned".to_string())? = Some(result.clone()); - if let Some(judgment) = state - .brew_cleanup_judgment - .lock() - .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())? - .as_mut() - .filter(|judgment| judgment.judgment_id == result.judgment_id) - { - judgment.calibration = Some(result.clone()); - } - Ok(result) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn execute_brew_cleanup( - app: AppHandle, - state: State, - plan_fingerprint: String, - judgment_id: String, - confirmation_phrase: String, - rationale: String, -) -> Result { - if !valid_brew_fingerprint(&plan_fingerprint) || !valid_brew_fingerprint(&judgment_id) { - return Err("brew-cleanup-fingerprint-invalid".into()); - } - if !valid_brew_rationale(&rationale) { - return Err("brew-cleanup-rationale-invalid".into()); - } - let plan = brew_cleanup::plan(now_ms())?; - if plan.plan_fingerprint != plan_fingerprint { - return Err("brew-cleanup-plan-stale".into()); - } - if plan.approval_phrase() != confirmation_phrase { - return Err("brew-cleanup-confirmation-mismatch".into()); - } - - let mut stored = state - .brew_cleanup_judgment - .lock() - .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())?; - let judgment = stored - .as_ref() - .ok_or_else(|| "brew-cleanup-llm-judgment-missing".to_string())? - .clone(); - if judgment.judgment_id != judgment_id - || judgment.plan_fingerprint != plan_fingerprint - || judgment.exact_approval_phrase != plan.exact_approval_phrase - || judgment.verdict != crate::llm::Verdict::Safe - || !judgment.has_successful_calibration() - || now_ms().saturating_sub(judgment.judged_at_ms) > brew_cleanup::MAX_JUDGMENT_AGE_MS - { - return Err("brew-cleanup-llm-judgment-stale-or-not-safe".into()); - } - - let executed_at_ms = now_ms(); - let mut execution = match brew_cleanup::execute(&plan, &judgment, executed_at_ms) { - Ok(execution) => execution, - Err(error) => { - *stored = None; - drop(stored); - return Err(error); - } - }; - *stored = None; - drop(stored); - - let audit = brew_cleanup::BrewCleanupAuditRecord { - schema_version: brew_cleanup::SCHEMA_VERSION, - plan, - judgment_id: judgment.judgment_id, - verdict: judgment.verdict, - reason: judgment.reason, - model_name: judgment.model_name, - judged_at_ms: judgment.judged_at_ms, - executed_at_ms, - approved_by: local_human_reviewer(), - command: execution.command.clone(), - status_code: execution.status_code, - stdout: execution.stdout.clone(), - stderr: execution.stderr.clone(), - output_truncated: execution.output_truncated, - rationale, - }; - let audit_result = (|| -> Result { - use tauri::Manager; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - brew_cleanup::write_audit_record(&app_data_dir, &audit) - })(); - match audit_result { - Ok(path) => execution.record_path = Some(path.to_string_lossy().into_owned()), - Err(error) => execution.record_error = Some(error), - } - Ok(execution) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn list_cache_candidates() -> Result, String> { - let bases = rules::BaseDirs::from_env().ok_or("환경변수에서 기본 경로를 찾지 못함")?; - Ok(rules::cache_candidates(&bases)) -} - -#[cfg(not(coverage))] -fn clean_regenerable_caches_inner( - bases: &rules::BaseDirs, - journal_path: &Path, - now_ms: u64, -) -> Vec { - crate::cache_cleanup::clean_regenerable_caches_inner(bases, journal_path, now_ms) -} - -/// Move only observed, regenerable macOS cache children to Trash without an extra approval step. -/// Identity and active-use checks remain mandatory for every child, and the cache roots remain. -#[cfg(not(coverage))] -#[tauri::command] -pub fn clean_regenerable_caches(app: AppHandle) -> Result, String> { - let bases = rules::BaseDirs::from_env().ok_or("환경변수에서 기본 경로를 찾지 못함")?; - let journal_path = journal_file_path(&app)?; - Ok(clean_regenerable_caches_inner( - &bases, - &journal_path, - now_ms(), - )) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn list_dev_artifacts( - root: String, - min_age_days: u64, -) -> Result, String> { - Ok(dev_artifacts::find_artifacts( - Path::new(&root), - min_age_days, - now_ms(), - )) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn clean_paths(paths: Vec, app: AppHandle) -> Result, String> { - let jp = journal_file_path(&app)?; - let pbufs: Vec = paths.into_iter().map(PathBuf::from).collect(); - Ok(clean_paths_inner(&pbufs, &jp, now_ms())) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn clean_dev_artifacts( - root: String, - min_age_days: u64, - artifacts: Vec, - app: AppHandle, -) -> Result, String> { - let jp = journal_file_path(&app)?; - Ok(clean_dev_artifacts_inner( - &artifacts, - Path::new(&root), - min_age_days, - &jp, - now_ms(), - )) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn recent_operations( - limit: usize, - app: AppHandle, -) -> Result, String> { - Ok(safety::journal_recent(&journal_file_path(&app)?, limit)) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn expand_clean_targets(dir: String) -> Vec { - let Some(bases) = rules::BaseDirs::from_env() else { - return Vec::new(); - }; - let d = Path::new(&dir); - if !rules::is_catalog_path(&bases, d) { - return Vec::new(); - } - rules::clean_targets(d) - .into_iter() - .map(|p| p.to_string_lossy().into_owned()) - .collect() -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn find_duplicate_files(root: String) -> Result, String> { - let files = dupes::collect_files(Path::new(&root)); - Ok(dupes::find_duplicates(files, 4096)) -} - -/// Resolve a real absolute home directory or fail closed. Relative environment values are never -/// accepted as path authority because they would make `~/...` destinations depend on the process -/// working directory. -#[cfg(not(coverage))] -fn resolve_home(app: &AppHandle) -> Result { - use tauri::Manager; - let app_home = app.path().home_dir().ok(); - let home_env = std::env::var_os("HOME").map(PathBuf::from); - let user_profile = std::env::var_os("USERPROFILE").map(PathBuf::from); - #[cfg(windows)] - let drive_home = home_resolution::windows_home_drive_path(); - #[cfg(not(windows))] - let drive_home: Option = None; - - home_resolution::select_absolute_home([app_home, home_env, user_profile, drive_home]) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn list_cloud_roots(app: AppHandle) -> Result, String> { - let home = resolve_home(&app)?; - Ok(cloud::discover_cloud_roots(&home)) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn inspect_cloud_roots(app: AppHandle) -> Result { - let home = resolve_home(&app)?; - Ok(cloud::discover_cloud_roots_report(&home)) -} - -#[cfg(not(coverage))] -fn selected_cloud_root(app: &AppHandle, cloud_root: &str) -> Result { - let home = resolve_home(app)?; - let matches: Vec<_> = cloud::discover_cloud_roots(&home) - .into_iter() - .filter(|candidate| { - cloud::cloud_root_path_matches(Path::new(&candidate.path), Path::new(cloud_root)) - }) - .collect(); - match matches.as_slice() { - [only] => Ok(only.clone()), - [] => Err("탐지된 클라우드 루트가 아님".into()), - _ => Err("정규화 후 클라우드 루트가 여러 개와 일치함".into()), - } -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn plan_icloud_local_copy_eviction( - cloud_root: String, - path: String, - app: AppHandle, -) -> Result { - let selected = selected_cloud_root(&app, &cloud_root)?; - if selected.provider != cloud::CloudProvider::Icloud { - return Err("icloud-local-eviction-root-required".into()); - } - cloud::validate_cloud_root_readable(&selected)?; - let path = PathBuf::from(path); - tauri::async_runtime::spawn_blocking(move || { - cloud_local_eviction::plan_icloud_local_eviction(&selected, &path, cloud::system_now_ms()) - }) - .await - .map_err(|_| "icloud-local-eviction-plan-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[derive(serde::Serialize)] -pub struct IcloudLocalCopyEvictionOutput { - pub action: &'static str, - pub plan: cloud_local_eviction::IcloudLocalEvictionPlan, - pub approval: cloud_local_eviction::IcloudLocalEvictionApproval, - pub approval_path: String, - pub result: cloud_local_eviction::IcloudLocalEvictionResult, - pub result_path: Option, - pub result_record_error: Option, -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn evict_icloud_local_copy( - cloud_root: String, - path: String, - approved_plan_fingerprint: String, - confirm_plan_fingerprint: String, - rationale: String, - app: AppHandle, -) -> Result { - if approved_plan_fingerprint != confirm_plan_fingerprint { - return Err("icloud-local-eviction-double-confirmation-mismatch".into()); - } - let selected = selected_cloud_root(&app, &cloud_root)?; - if selected.provider != cloud::CloudProvider::Icloud { - return Err("icloud-local-eviction-root-required".into()); - } - cloud::validate_cloud_root_readable(&selected)?; - let path = PathBuf::from(path); - use tauri::Manager; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let record_dir = app_data_dir.join("icloud-local-evictions"); - if record_dir.starts_with(Path::new(&selected.path)) || path.starts_with(&record_dir) { - return Err("icloud-local-eviction-record-dir-overlaps-cloud-data".into()); - } - let approved_by = local_human_reviewer(); - tauri::async_runtime::spawn_blocking(move || { - let record_dir = cloud_local_eviction::prepare_immutable_record_directory( - &app_data_dir, - Path::new(&selected.path), - "icloud-local-evictions", - )?; - let plan = cloud_local_eviction::plan_icloud_local_eviction( - &selected, - &path, - cloud::system_now_ms(), - )?; - let approval = cloud_local_eviction::approve_icloud_local_eviction( - &plan, - &approved_plan_fingerprint, - cloud::system_now_ms(), - &approved_by, - &rationale, - )?; - let approval_path = cloud_local_eviction::write_immutable_record( - &record_dir, - &format!("{}.approval.json", approval.approval_id), - &approval, - )?; - let result = cloud_local_eviction::execute_icloud_local_eviction( - &selected, - &plan, - &approval, - &confirm_plan_fingerprint, - cloud::system_now_ms(), - )?; - let result_record = cloud_local_eviction::write_immutable_record( - &record_dir, - &format!("{}.result.json", result.result_id), - &result, - ); - let (result_path, result_record_error) = match result_record { - Ok(path) => (Some(path.to_string_lossy().into_owned()), None), - Err(error) => (None, Some(error)), - }; - Ok(IcloudLocalCopyEvictionOutput { - action: "evict-icloud-local-copy", - plan, - approval, - approval_path: approval_path.to_string_lossy().into_owned(), - result, - result_path, - result_record_error, - }) - }) - .await - .map_err(|_| "icloud-local-eviction-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn plan_stale_git_worktrees( - repository_root: String, - retention_references: Vec, -) -> Result { - tauri::async_runtime::spawn_blocking(move || { - git_worktree::audit_git_worktrees( - Path::new(&repository_root), - &retention_references, - git_worktree::GitWorktreeAuditOptions::default(), - cloud::system_now_ms(), - ) - }) - .await - .map_err(|_| "git-worktree-audit-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[derive(serde::Serialize)] -pub struct StaleGitWorktreeRemovalOutput { - pub action: &'static str, - pub report: git_worktree::GitWorktreeAuditReport, - pub approval: git_worktree::GitWorktreeRemovalApproval, - pub approval_path: String, - pub result: git_worktree::GitWorktreeRemovalResult, - pub result_path: Option, - pub result_record_error: Option, -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn remove_stale_git_worktrees( - repository_root: String, - retention_references: Vec, - approved_removal_plan_fingerprint: String, - confirmation_exact_approval_phrase: String, - rationale: String, - app: AppHandle, -) -> Result { - use tauri::Manager; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let approved_by = local_human_reviewer(); - tauri::async_runtime::spawn_blocking(move || { - let options = git_worktree::GitWorktreeAuditOptions::default(); - let report = git_worktree::audit_git_worktrees( - Path::new(&repository_root), - &retention_references, - options, - cloud::system_now_ms(), - )?; - if report.removal_plan_fingerprint != approved_removal_plan_fingerprint { - return Err("git-worktree-removal-plan-fingerprint-mismatch".into()); - } - let approval = git_worktree::approve_stale_worktree_removal( - &report, - &confirmation_exact_approval_phrase, - cloud::system_now_ms(), - &approved_by, - &rationale, - )?; - let record_dir = git_worktree::prepare_worktree_record_directory( - &app_data_dir, - &report, - "git-worktree-removals", - )?; - let approval_path = git_worktree::write_immutable_worktree_record( - &record_dir, - &format!("{}.approval.json", approval.approval_id), - &approval, - )?; - let result = git_worktree::execute_stale_worktree_removal( - &report, - &approval, - &confirmation_exact_approval_phrase, - options, - cloud::system_now_ms(), - )?; - let result_record = git_worktree::write_immutable_worktree_record( - &record_dir, - &format!("{}.result.json", result.result_id), - &result, - ); - let (result_path, result_record_error) = match result_record { - Ok(path) => (Some(path.to_string_lossy().into_owned()), None), - Err(error) => (None, Some(error)), - }; - Ok(StaleGitWorktreeRemovalOutput { - action: "remove-stale-git-worktrees", - report, - approval, - approval_path: approval_path.to_string_lossy().into_owned(), - result, - result_path, - result_record_error, - }) - }) - .await - .map_err(|_| "git-worktree-removal-task-failed".to_string())? -} - -/// Build a bounded, path-free ontology plan for uninstalled macOS application data. -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn plan_orphan_cleanup(app: AppHandle) -> Result { - let home = resolve_home(&app)?; - tauri::async_runtime::spawn_blocking(move || orphan::plan(&home, now_ms())) - .await - .map_err(|_| "orphan-plan-task-failed".to_string())? -} - -/// Re-plan immediately before moving only fully scanned, unused cache candidates to OS Trash. -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn clean_orphan_candidates( - plan_fingerprint: String, - requests: Vec, - confirmation_phrase: String, - rationale: String, - app: AppHandle, -) -> Result { - if !valid_brew_fingerprint(&plan_fingerprint) { - return Err("orphan-plan-fingerprint-invalid".into()); - } - let home = resolve_home(&app)?; - let plan = tauri::async_runtime::spawn_blocking({ - let home = home.clone(); - move || orphan::plan(&home, now_ms()) - }) - .await - .map_err(|_| "orphan-clean-plan-task-failed".to_string())??; - if plan.plan_fingerprint != plan_fingerprint { - return Err("orphan-plan-stale".into()); - } - let journal = journal_file_path(&app)?; - tauri::async_runtime::spawn_blocking(move || { - orphan::move_to_trash( - &plan, - &requests, - &confirmation_phrase, - &rationale, - &journal, - now_ms(), - ) - }) - .await - .map_err(|_| "orphan-clean-task-failed".to_string())? -} - -#[cfg(not(coverage))] -fn oauth_connections_path(app: &AppHandle) -> Result { - use tauri::Manager; - app.path() - .app_data_dir() - .map(|directory| provider_oauth::connections_path(&directory)) - .map_err(|_| "app-data-directory-unavailable".to_string()) -} - -#[cfg(not(coverage))] -fn cloud_review_directory(app: &AppHandle) -> Result { - use tauri::Manager; - app.path() - .app_data_dir() - .map(|directory| directory.join("cloud-review-decisions")) - .map_err(|_| "app-data-directory-unavailable".to_string()) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn list_cloud_provider_connections( - app: AppHandle, -) -> Result, String> { - provider_oauth::load_connections(&oauth_connections_path(&app)?) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn list_cloud_review_decisions( - app: AppHandle, -) -> Result, String> { - cloud_review::load_latest_decisions(&cloud_review_directory(&app)?) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn connect_cloud_provider( - cloud_root: String, - client_id: String, - write_access: bool, - app: AppHandle, -) -> Result { - let selected = selected_cloud_root(&app, &cloud_root)?; - cloud::validate_cloud_root_readable(&selected)?; - if selected.provider == cloud::CloudProvider::Icloud { - return Err("icloud-oauth-not-supported".into()); - } - let pending = provider_oauth::prepare_authorization_with_write_access( - selected.provider, - &client_id, - write_access, - )?; - use tauri_plugin_opener::OpenerExt; - app.opener() - .open_url(pending.authorization_url(), None::<&str>) - .map_err(|_| "oauth-system-browser-open-failed".to_string())?; - let connection_path = oauth_connections_path(&app)?; - let connected_at_ms = cloud::system_now_ms(); - tauri::async_runtime::spawn_blocking(move || { - provider_oauth::finish_authorization(pending, &selected, &connection_path, connected_at_ms) - }) - .await - .map_err(|_| "provider-oauth-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn disconnect_cloud_provider(cloud_root: String, app: AppHandle) -> Result<(), String> { - let selected = selected_cloud_root(&app, &cloud_root)?; - if selected.provider == cloud::CloudProvider::Icloud { - return Err("icloud-oauth-not-supported".into()); - } - let connection_path = oauth_connections_path(&app)?; - tauri::async_runtime::spawn_blocking(move || { - provider_oauth::disconnect(&connection_path, &selected) - }) - .await - .map_err(|_| "provider-oauth-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn verify_cloud_provider_capacity( - cloud_root: String, - app: AppHandle, -) -> Result { - let selected = selected_cloud_root(&app, &cloud_root)?; - cloud::validate_cloud_root_readable(&selected)?; - let observed_at_ms = cloud::system_now_ms(); - if selected.provider == cloud::CloudProvider::Icloud { - let result = tauri::async_runtime::spawn_blocking(move || { - provider_capacity::collect_icloud_native_capacity(observed_at_ms) - }) - .await - .map_err(|_| "icloud-native-quota-task-failed".to_string()); - return Ok(match result { - Ok(Ok(snapshot)) => snapshot, - Ok(Err(error)) | Err(error) => provider_capacity::unavailable_capacity_from_error( - cloud::CloudProvider::Icloud, - observed_at_ms, - &error, - ), - }); - } - let provider = selected.provider; - let connection_path = match oauth_connections_path(&app) { - Ok(path) => path, - Err(error) => { - return Ok(provider_capacity::unavailable_capacity_from_error( - provider, - observed_at_ms, - &error, - )) - } - }; - let result = tauri::async_runtime::spawn_blocking(move || { - let access_token = provider_oauth::refreshed_access_token(&connection_path, &selected)?; - provider_capacity::collect_authenticated_capacity( - provider, - access_token.as_str(), - observed_at_ms, - &provider_capacity::FixedHostProviderCapacityClient::default(), - ) - }) - .await - .map_err(|_| "provider-oauth-task-failed".to_string()); - let snapshot = match result { - Ok(Ok(snapshot)) => snapshot, - Ok(Err(error)) | Err(error) => { - provider_capacity::unavailable_capacity_from_error(provider, observed_at_ms, &error) - } - }; - Ok(snapshot) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn inspect_cloud_provider_client_runtime( - cloud_root: String, - app: AppHandle, -) -> Result { - let selected = selected_cloud_root(&app, &cloud_root)?; - // Runtime observation must remain available while a File Provider root is temporarily - // disconnected; this command reads the fixed provider client state, not the destination. - Ok(provider_client_runtime::collect_provider_client_runtime( - selected.provider, - cloud::system_now_ms(), - )) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn recover_cloud_provider_client( - cloud_root: String, - app: AppHandle, -) -> Result { - let selected = selected_cloud_root(&app, &cloud_root)?; - // Recovery targets only the verified, fixed desktop client. A disconnected root is the - // condition recovery is meant to repair, so destination readability is not a precondition. - provider_recovery::recover_provider_client(selected.provider, cloud::system_now_ms()) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn inspect_icloud_new_copy_admission( - app: AppHandle, -) -> Result { - let home = resolve_home(&app)?; - let mut report = icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms())?; - if !persist_icloud_health_evidence(&app, &report) { - report - .notices - .push("icloud-sync-health-evidence-persistence-failed".into()); - } - Ok(report) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn inspect_cloud_provider_global_sync( - cloud_root: String, - app: AppHandle, -) -> Result { - let selected = selected_cloud_root(&app, &cloud_root)?; - // The read-only provider dump is the evidence needed to explain an unreadable/disconnected - // root; requiring directory access first would hide the very blocker we need to report. - if selected.provider == cloud::CloudProvider::Icloud { - return Err("provider-global-sync-icloud-specialized".into()); - } - provider_global_sync::inspect_new_copy_admission(selected.provider) -} - -#[cfg(not(coverage))] -struct CloudPlanningOutput { - selected: cloud::CloudRoot, - report: cloud::CloudPlanReport, - icloud_health: Option, - provider_global_sync: Option, -} - -#[cfg(not(coverage))] -fn persist_icloud_health_evidence( - app: &AppHandle, - report: &icloud_sync_health::IcloudSyncHealthReport, -) -> bool { - app.path() - .app_data_dir() - .ok() - .and_then(|app_data_dir| { - icloud_sync_health::write_icloud_sync_health_evidence(&app_data_dir, report).ok() - }) - .is_some() -} - -#[cfg(not(coverage))] -fn attach_pre_copy_evidence_cohort( - report: &mut cloud::CloudPlanReport, - runtime: &provider_client_runtime::ProviderClientRuntimeSnapshot, - health: Option<&icloud_sync_health::IcloudSyncHealthReport>, -) { - let local = report - .local_volume - .as_ref() - .map(|snapshot| cloud::PreCopyEvidenceObservation { - stream: "volume-pressure-evidence".into(), - observed_at_ms: snapshot.observed_at_ms, - evidence_complete: crate::volume_pressure::validate_snapshot(snapshot).is_ok(), - fingerprint: snapshot.evidence_fingerprint.clone(), - }) - .unwrap_or_else(|| cloud::PreCopyEvidenceObservation { - stream: "volume-pressure-evidence".into(), - observed_at_ms: 0, - evidence_complete: false, - fingerprint: "0".repeat(64), - }); - let runtime = cloud::PreCopyEvidenceObservation { - stream: "provider-client-runtime-evidence".into(), - observed_at_ms: runtime.observed_at_ms, - evidence_complete: runtime.process_observation_complete, - fingerprint: runtime.snapshot_fingerprint_sha256.clone(), - }; - let health = health - .and_then(|value| icloud_sync_health::health_evidence_snapshot_from_report(value).ok()) - .map(|snapshot| cloud::PreCopyEvidenceObservation { - stream: "icloud-sync-health-evidence".into(), - observed_at_ms: snapshot.observed_at_ms, - evidence_complete: snapshot.evidence_complete, - fingerprint: snapshot.evidence_fingerprint_sha256, - }) - .unwrap_or_else(|| cloud::PreCopyEvidenceObservation { - stream: "icloud-sync-health-evidence".into(), - observed_at_ms: 0, - evidence_complete: false, - fingerprint: "0".repeat(64), - }); - let cohort = cloud::compare_pre_copy_evidence(vec![local, runtime, health]); - if cohort.complete { - report.notices.push("pre-copy-evidence-cohort-complete".into()); - } else { - report.notices.push("pre-copy-evidence-cohort-blocked".into()); - report.notices.extend(cohort.blockers.iter().cloned()); - } - report.pre_copy_evidence = Some(cohort); -} - -#[cfg(not(coverage))] -fn cloud_plan_for_inputs( - root: &str, - cloud_root: &str, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - app: &AppHandle, -) -> Result { - let root_path = PathBuf::from(root); - cloud::validate_source_root_readable(&root_path)?; - let home = resolve_home(app)?; - let discovered = cloud::discover_cloud_roots(&home); - let selected = discovered - .iter() - .find(|candidate| candidate.path == cloud_root) - .cloned() - .ok_or_else(|| "탐지된 클라우드 루트가 아님".to_string())?; - cloud::validate_cloud_root_readable(&selected)?; - let excluded: Vec = discovered - .iter() - .map(|root| PathBuf::from(&root.path)) - .collect(); - if excluded.iter().any(|cloud| root_path.starts_with(cloud)) { - return Err("이미 클라우드 안에 있는 경로는 오프로드 원본으로 사용할 수 없음".into()); - } - let collection = cloud::collect_archive_files_bounded( - &root_path, - &excluded, - cloud::ARCHIVE_SCAN_MAX_ENTRIES, - cloud::ARCHIVE_SCAN_MAX_DURATION, - ); - let observed_at_ms = cloud::system_now_ms(); - let capacity_snapshot = match authenticated_capacity_snapshot(&selected, app, observed_at_ms) { - Ok(snapshot) => snapshot, - Err(error) => provider_capacity::unavailable_capacity_from_error( - selected.provider, - observed_at_ms, - &error, - ), - }; - let selected = - provider_capacity::root_with_verified_capacity_scope(&selected, &capacity_snapshot)?; - let snapshot = cloud::prepare_cloud_archive_source_from_collection( - &collection, - &root_path, - observed_at_ms, - cloud::CloudPlanOptions { - min_size_bytes: min_size_mib.saturating_mul(1024 * 1024), - min_age_days, - limit: limit.clamp(1, 1_000), - }, - ); - let mut report = cloud::plan_cloud_archive_from_snapshot(&snapshot, &selected); - if let Some(local_volume) = report.local_volume.as_ref() { - let evidence_persisted = app - .path() - .app_data_dir() - .map_err(|error| error.to_string()) - .and_then(|app_data_dir| { - crate::volume_pressure::write_snapshot_evidence(&app_data_dir, local_volume) - .map(|_| ()) - }) - .is_ok(); - if !evidence_persisted { - report - .notices - .push("local-volume-evidence-persistence-failed".into()); - } - } - attach_capacity_assessment(&mut report, capacity_snapshot)?; - let runtime = provider_client_runtime::collect_provider_client_runtime( - selected.provider, - cloud::system_now_ms(), - ); - let runtime_evidence_persisted = app - .path() - .app_data_dir() - .ok() - .and_then(|app_data_dir| { - provider_client_runtime::write_runtime_snapshot_evidence(&app_data_dir, &runtime).ok() - }) - .is_some(); - if !runtime_evidence_persisted { - report - .notices - .push("provider-client-runtime-evidence-persistence-failed".into()); - } - provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); - let native_client_mode = report.capacity.as_ref().is_some_and(|assessment| { - provider_capacity::native_personal_client_copy_capacity_exception( - selected.provider, - selected.account_scope, - runtime.copy_prerequisite_met, - &assessment.snapshot, - ) - }); - if native_client_mode { - report.notices.push("native-client-copy-capacity-unverified".into()); - } - let (icloud_health, provider_global_sync) = if selected.provider == cloud::CloudProvider::Icloud - { - let health = icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()).ok(); - if let Some(health) = health.as_ref() { - if !persist_icloud_health_evidence(app, health) { - report - .notices - .push("icloud-sync-health-evidence-persistence-failed".into()); - } - } - icloud_sync_health::attach_new_copy_admission_notice(&mut report.notices, health.as_ref()); - (health, None) - } else { - let global_sync = provider_global_sync::inspect_new_copy_admission(selected.provider).ok(); - provider_global_sync::attach_new_copy_admission_notice( - &mut report.notices, - global_sync.as_ref(), - ); - (None, global_sync) - }; - if selected.provider == cloud::CloudProvider::Icloud { - attach_pre_copy_evidence_cohort(&mut report, &runtime, icloud_health.as_ref()); - } - Ok(CloudPlanningOutput { - selected, - report, - icloud_health, - provider_global_sync, - }) -} - -#[cfg(not(coverage))] -fn authenticated_capacity_snapshot( - selected: &cloud::CloudRoot, - app: &AppHandle, - observed_at_ms: u64, -) -> Result { - if selected.provider == cloud::CloudProvider::Icloud { - return provider_capacity::collect_icloud_native_capacity(observed_at_ms); - } - let access_token = - provider_oauth::refreshed_access_token(&oauth_connections_path(app)?, selected)?; - provider_capacity::collect_authenticated_capacity( - selected.provider, - access_token.as_str(), - observed_at_ms, - &provider_capacity::FixedHostProviderCapacityClient::default(), - ) -} - -#[cfg(not(coverage))] -fn attach_capacity_assessment( - report: &mut cloud::CloudPlanReport, - snapshot: provider_capacity::CloudCapacitySnapshot, -) -> Result<(), String> { - if snapshot.provider != report.cloud_root.provider - || snapshot.account_scope.is_some_and(|scope| { - report.cloud_root.account_scope != cloud::CloudAccountScope::Unknown - && report.cloud_root.account_scope != scope - }) - { - return Err("cloud-capacity-root-binding-mismatch".into()); - } - let largest_candidate_bytes = report - .candidates - .iter() - .filter(|candidate| candidate.blocked_reason.is_none()) - .map(|candidate| candidate.bytes) - .max() - .unwrap_or_default(); - let assessment = provider_capacity::assess_capacity( - snapshot, - report.potentially_reclaimable_bytes, - largest_candidate_bytes, - provider_capacity::DEFAULT_CAPACITY_RESERVE_BYTES, - ); - report - .notices - .retain(|notice| notice != "cloud-quota-unverified"); - report.notices.push( - match assessment.can_fit { - Some(true) - if assessment.snapshot.evidence_kind - == provider_capacity::CapacityEvidenceKind::ProviderNativeStatus => - { - "cloud-quota-provider-native-verified" - } - Some(true) => "cloud-quota-provider-api-verified", - Some(false) => "cloud-quota-insufficient-or-blocked", - None => "cloud-quota-unavailable", - } - .into(), - ); - report.capacity = Some(assessment); - Ok(()) -} - -#[cfg(not(coverage))] -fn require_capacity_for_copy( - candidate: &cloud::CloudCandidate, - snapshot: &provider_capacity::CloudCapacitySnapshot, - allow_native_personal_client_exception: bool, -) -> Result<(), String> { - let assessment = provider_capacity::assess_capacity( - snapshot.clone(), - candidate.bytes, - candidate.bytes, - provider_capacity::DEFAULT_CAPACITY_RESERVE_BYTES, - ); - if assessment.can_fit == Some(true) - || (allow_native_personal_client_exception - && provider_capacity::native_personal_client_copy_capacity_exception( - candidate.provider, - candidate.destination_account_scope, - true, - snapshot, - )) - { - Ok(()) - } else { - Err(if assessment.blockers.is_empty() { - "cloud-capacity-verification-required".into() - } else { - assessment.blockers.join(",") - }) - } -} - -#[cfg(not(coverage))] -fn require_local_copy_headroom(candidate: &cloud::CloudCandidate) -> Result<(), String> { - let snapshot = crate::volume_pressure::snapshot_volume( - Path::new(&candidate.src), - cloud::system_now_ms(), - )?; - if crate::volume_pressure::has_copy_headroom(snapshot.available_bytes, candidate.bytes) { - Ok(()) - } else { - Err("local-volume-headroom-insufficient".into()) - } -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn plan_cloud_archive( - root: String, - cloud_root: String, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - app: AppHandle, -) -> Result { - tauri::async_runtime::spawn_blocking(move || { - let planning = - cloud_plan_for_inputs(&root, &cloud_root, min_size_mib, min_age_days, limit, &app)?; - Ok(planning.report.into()) - }) - .await - .map_err(|_| "cloud-plan-task-failed".to_string())? -} - -#[cfg(not(coverage))] -fn local_human_reviewer() -> String { - let raw = std::env::var(if cfg!(windows) { "USERNAME" } else { "USER" }) - .unwrap_or_else(|_| "unknown".into()); - let bounded: String = raw - .chars() - .filter(|character| { - character.is_ascii_alphanumeric() || matches!(character, '-' | '_' | '.') - }) - .take(64) - .collect(); - format!( - "human:local:{}", - if bounded.is_empty() { - "unknown" - } else { - &bounded - } - ) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn review_cloud_candidate( - root: String, - cloud_root: String, - metadata_fingerprint: String, - review_fingerprint: String, - disposition: cloud_review::CloudReviewDisposition, - rationale: String, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - app: AppHandle, - state: State<'_, AppState>, -) -> Result { - for fingerprint in [&metadata_fingerprint, &review_fingerprint] { - if fingerprint.len() != 64 || !fingerprint.bytes().all(|byte| byte.is_ascii_hexdigit()) { - return Err("cloud-review-fingerprint-invalid".into()); - } - } - let cloud_review = Arc::clone(&state.cloud_review); - tauri::async_runtime::spawn_blocking(move || { - let _guard = cloud_review - .lock() - .map_err(|_| "cloud-review-lock-poisoned".to_string())?; - let planning = - cloud_plan_for_inputs(&root, &cloud_root, min_size_mib, min_age_days, limit, &app)?; - let matches: Vec<_> = planning - .report - .candidates - .iter() - .filter(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) - .collect(); - let candidate = match matches.as_slice() { - [only] => *only, - [] => return Err("fresh-plan-candidate-not-found".into()), - _ => return Err("fresh-plan-candidate-ambiguous".into()), - }; - if candidate.review_fingerprint != review_fingerprint { - return Err("fresh-plan-review-fingerprint-mismatch".into()); - } - let decision = cloud_review::create_attributed_decision( - candidate, - disposition, - cloud::system_now_ms(), - &local_human_reviewer(), - &rationale, - )?; - cloud_review::write_immutable_decision(&cloud_review_directory(&app)?, &decision)?; - Ok(decision) - }) - .await - .map_err(|_| "cloud-review-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[derive(serde::Serialize)] -pub struct CloudCopyOutput { - pub action: &'static str, - pub goal_state: cloud_transfer::CloudOffloadGoalState, - pub goal_status: Option, - pub receipt: cloud_transfer::CloudCopyReceipt, - pub receipt_path: String, - pub adr_path: Option, - pub goal_path: Option, - pub projection_warnings: Vec, - pub provider_object_id: Option, -} - -#[cfg(not(coverage))] -fn create_cloud_candidate_receipt( - root: &str, - cloud_root: &str, - metadata_fingerprint: &str, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - exact_confirmation_phrase: &str, - approval_rationale: &str, - app: &AppHandle, - adopt_existing: bool, -) -> Result { - use tauri::Manager; - if metadata_fingerprint.len() != 64 - || !metadata_fingerprint - .bytes() - .all(|byte| byte.is_ascii_hexdigit()) - { - return Err("metadata-fingerprint-invalid".into()); - } - let planning = - cloud_plan_for_inputs(root, cloud_root, min_size_mib, min_age_days, limit, app)?; - let CloudPlanningOutput { - selected, - report, - icloud_health, - provider_global_sync, - } = planning; - let matches: Vec<_> = report - .candidates - .iter() - .filter(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) - .collect(); - let candidate = match matches.as_slice() { - [only] => *only, - [] => return Err("fresh-plan-candidate-not-found".into()), - _ => return Err("fresh-plan-candidate-ambiguous".into()), - }; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let receipt_dir = app_data_dir.join("cloud-receipts"); - let review_decision = if candidate.requires_review { - cloud_review::load_latest_decisions(&cloud_review_directory(&app)?)? - .into_iter() - .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) - } else { - None - }; - let action = if adopt_existing { - cloud_transfer::CloudCopyApprovalAction::AdoptExistingCopy - } else { - cloud_transfer::CloudCopyApprovalAction::CopyOnly - }; - let action_at_ms = cloud::system_now_ms(); - let copy_approval = cloud_transfer::create_cloud_copy_approval( - candidate, - &selected, - action, - action_at_ms, - &local_human_reviewer(), - approval_rationale.trim(), - exact_confirmation_phrase, - )?; - if !adopt_existing { - // Native File Provider copies can materialize placeholders and stage more than the source - // bytes. Re-check local headroom immediately before any mutation; adoption only verifies - // an existing destination and does not create a local staging file. - require_local_copy_headroom(candidate)?; - let runtime = provider_client_runtime::require_provider_client_runtime( - selected.provider, - cloud::system_now_ms(), - )?; - if selected.provider == cloud::CloudProvider::Icloud { - cloud::require_pre_copy_evidence_cohort(report.pre_copy_evidence.as_ref())?; - let health = icloud_health - .as_ref() - .ok_or_else(|| "icloud-new-copy-admission-evidence-unavailable".to_string())?; - icloud_sync_health::require_new_copy_admission(&health)?; - } else { - let global_sync = provider_global_sync - .as_ref() - .ok_or_else(|| "provider-global-sync-evidence-unavailable".to_string())?; - provider_global_sync::require_new_copy_admission(global_sync)?; - } - let snapshot = report - .capacity - .as_ref() - .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; - let native_client_mode = - provider_capacity::native_personal_client_copy_capacity_exception( - selected.provider, - selected.account_scope, - runtime.copy_prerequisite_met, - &snapshot.snapshot, - ); - require_capacity_for_copy(candidate, &snapshot.snapshot, native_client_mode)?; - } - let (receipt, receipt_path) = if adopt_existing { - cloud_transfer::adopt_existing_cloud_copy_with_approval( - candidate, - &selected, - &receipt_dir, - review_decision.as_ref(), - ©_approval, - )? - } else { - cloud_transfer::prepare_cloud_copy_with_approval( - candidate, - &selected, - &receipt_dir, - review_decision.as_ref(), - ©_approval, - )? - }; - let mut projection_warnings = Vec::new(); - let (adr_path, goal_path) = match app.path().app_data_dir() { - Ok(app_data_dir) => { - let projection_updated_at_ms = cloud::system_now_ms(); - let adr = cloud_adr::initial_adr_snapshot(&receipt, projection_updated_at_ms); - let goal = cloud_adr::initial_goal_snapshot(&receipt, projection_updated_at_ms); - let (adr_path, goal_path, warnings) = cloud_adr::write_projection_pair( - &app_data_dir.join("cloud-adr"), - &adr, - &app_data_dir.join("cloud-goals"), - &goal, - ); - projection_warnings.extend(warnings); - ( - adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path.map(|path| path.to_string_lossy().into_owned()), - ) - } - Err(_) => { - projection_warnings.push("app-data-directory-unavailable".to_string()); - (None, None) - } - }; - let goal_status = cloud_adr::read_goal_status( - &app_data_dir.join("cloud-goals"), - &receipt.receipt_id, - ) - .ok() - .flatten(); - Ok(CloudCopyOutput { - action: if adopt_existing { - "adopt-existing-copy" - } else { - "copy-only" - }, - goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, - goal_status, - receipt, - receipt_path: receipt_path.to_string_lossy().into_owned(), - adr_path, - goal_path, - projection_warnings, - provider_object_id: None, - }) -} - -#[cfg(not(coverage))] -fn create_cloud_candidate_provider_api_receipt( - root: &str, - cloud_root: &str, - metadata_fingerprint: &str, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - exact_confirmation_phrase: &str, - approval_rationale: &str, - app: &AppHandle, -) -> Result { - use tauri::Manager; - if metadata_fingerprint.len() != 64 - || !metadata_fingerprint - .bytes() - .all(|byte| byte.is_ascii_hexdigit()) - { - return Err("metadata-fingerprint-invalid".into()); - } - let planning = - cloud_plan_for_inputs(root, cloud_root, min_size_mib, min_age_days, limit, app)?; - let CloudPlanningOutput { - selected, - report, - .. - } = planning; - if selected.provider == cloud::CloudProvider::Icloud { - return Err("provider-api-icloud-unsupported".into()); - } - let candidate = report - .candidates - .iter() - .find(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) - .ok_or_else(|| "fresh-plan-candidate-not-found".to_string())?; - if report - .candidates - .iter() - .filter(|entry| entry.metadata_fingerprint == metadata_fingerprint) - .count() - != 1 - { - return Err("fresh-plan-candidate-ambiguous".into()); - } - let connection_path = oauth_connections_path(app)?; - let connection = provider_oauth::connection_for_root( - &provider_oauth::load_connections(&connection_path)?, - &selected, - )?; - if !provider_oauth::scope_allows_write(&connection) { - return Err("provider-oauth-write-scope-required".into()); - } - let capacity = report - .capacity - .as_ref() - .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; - require_capacity_for_copy(candidate, &capacity.snapshot, false)?; - let review_decision = if candidate.requires_review { - cloud_review::load_latest_decisions(&cloud_review_directory(app)?)? - .into_iter() - .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) - } else { - None - }; - let copy_approval = cloud_transfer::create_cloud_copy_approval( - candidate, - &selected, - cloud_transfer::CloudCopyApprovalAction::CopyOnly, - cloud::system_now_ms(), - &local_human_reviewer(), - approval_rationale.trim(), - exact_confirmation_phrase, - )?; - let copied_at_ms = cloud::system_now_ms(); - let (receipt, source_hashes) = cloud_transfer::prepare_provider_api_source_receipt( - candidate, - &selected, - review_decision.as_ref(), - ©_approval, - copied_at_ms, - )?; - let access_token = provider_oauth::refreshed_access_token(&connection_path, &selected)?; - let upload = provider_api_write::upload_file( - selected.provider, - Path::new(&selected.path), - Path::new(&candidate.dst), - Path::new(&candidate.src), - candidate.bytes, - access_token.as_str(), - )?; - if let Err(error) = cloud_transfer::verify_provider_api_source_unchanged(candidate, &source_hashes) - { - let cleanup = provider_api_write::delete_uploaded_object( - selected.provider, - &upload.object_id, - access_token.as_str(), - ); - return Err(match cleanup { - Ok(()) => error, - Err(cleanup_error) => format!( - "{error},provider-api-upload-cleanup-failed:{cleanup_error}" - ), - }); - } - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let receipt_dir = app_data_dir.join("cloud-receipts"); - let receipt_path = match cloud_transfer::write_provider_api_receipt(&receipt, &receipt_dir) { - Ok(path) => path, - Err(error) => { - let cleanup = provider_api_write::delete_uploaded_object( - selected.provider, - &upload.object_id, - access_token.as_str(), - ); - return Err(match cleanup { - Ok(()) => error, - Err(cleanup_error) => format!( - "{error},provider-api-upload-cleanup-failed:{cleanup_error}" - ), - }); - } - }; - let mut projection_warnings = Vec::new(); - let (mut adr_path, mut goal_path) = match app.path().app_data_dir() { - Ok(app_data_dir) => { - let updated_at_ms = cloud::system_now_ms(); - let adr = cloud_adr::initial_adr_snapshot(&receipt, updated_at_ms); - let goal = cloud_adr::initial_goal_snapshot(&receipt, updated_at_ms); - let (adr_path, goal_path, warnings) = cloud_adr::write_projection_pair( - &app_data_dir.join("cloud-adr"), - &adr, - &app_data_dir.join("cloud-goals"), - &goal, - ); - projection_warnings.extend(warnings); - ( - adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path.map(|path| path.to_string_lossy().into_owned()), - ) - } - Err(_) => { - projection_warnings.push("app-data-directory-unavailable".to_string()); - (None, None) - } - }; - let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; - let home = resolve_home(app)?; - let cloud_roots = cloud::discover_cloud_roots(&home); - let attestation_object_id = (selected.provider == cloud::CloudProvider::GoogleDrive) - .then(|| upload.object_id.clone()); - match collect_cloud_attestation_for_receipt( - &receipt, - attestation_object_id, - &app_data_dir.join("cloud-provider-evidence"), - &app_data_dir.join("cloud-adr"), - &app_data_dir.join("cloud-goals"), - &connection_path, - &cloud_roots, - true, - ) { - Ok(attestation) => { - goal_state = attestation.goal_state; - adr_path = attestation.adr_path; - goal_path = attestation.goal_path; - projection_warnings.extend(attestation.projection_warnings); - } - Err(error) => { - let provider_blocker = stable_reconciliation_error(&error); - let projection_outcome = - cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( - &receipt, - &app_data_dir.join("cloud-adr"), - &app_data_dir.join("cloud-goals"), - cloud::system_now_ms(), - &provider_blocker, - ); - if let Some(path) = projection_outcome.adr_path { - adr_path = Some(path.to_string_lossy().into_owned()); - } - if let Some(path) = projection_outcome.goal_path { - goal_path = Some(path.to_string_lossy().into_owned()); - } - projection_warnings.extend(projection_outcome.warnings); - projection_warnings.push(format!( - "provider-attestation-incomplete:{provider_blocker}" - )); - } - } - let goal_status = cloud_adr::read_goal_status( - &app_data_dir.join("cloud-goals"), - &receipt.receipt_id, - ) - .ok() - .flatten(); - Ok(CloudCopyOutput { - action: "copy-only", - goal_state, - goal_status, - receipt, - receipt_path: receipt_path.to_string_lossy().into_owned(), - adr_path, - goal_path, - projection_warnings, - provider_object_id: Some(upload.object_id), - }) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn copy_cloud_candidate( - root: String, - cloud_root: String, - metadata_fingerprint: String, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - exact_confirmation_phrase: String, - approval_rationale: String, - app: AppHandle, - state: State<'_, AppState>, -) -> Result { - let cloud_review = Arc::clone(&state.cloud_review); - tauri::async_runtime::spawn_blocking(move || { - let _guard = cloud_review - .lock() - .map_err(|_| "cloud-review-lock-poisoned".to_string())?; - create_cloud_candidate_receipt( - &root, - &cloud_root, - &metadata_fingerprint, - min_size_mib, - min_age_days, - limit, - &exact_confirmation_phrase, - &approval_rationale, - &app, - false, - ) - }) - .await - .map_err(|_| "cloud-copy-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn copy_cloud_candidate_via_provider_api( - root: String, - cloud_root: String, - metadata_fingerprint: String, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - exact_confirmation_phrase: String, - approval_rationale: String, - app: AppHandle, - state: State<'_, AppState>, -) -> Result { - let cloud_review = Arc::clone(&state.cloud_review); - tauri::async_runtime::spawn_blocking(move || { - let _guard = cloud_review - .lock() - .map_err(|_| "cloud-review-lock-poisoned".to_string())?; - create_cloud_candidate_provider_api_receipt( - &root, - &cloud_root, - &metadata_fingerprint, - min_size_mib, - min_age_days, - limit, - &exact_confirmation_phrase, - &approval_rationale, - &app, - ) - }) - .await - .map_err(|_| "cloud-provider-api-copy-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn adopt_existing_cloud_candidate( - root: String, - cloud_root: String, - metadata_fingerprint: String, - min_size_mib: u64, - min_age_days: u64, - limit: usize, - exact_confirmation_phrase: String, - approval_rationale: String, - app: AppHandle, - state: State<'_, AppState>, -) -> Result { - let cloud_review = Arc::clone(&state.cloud_review); - tauri::async_runtime::spawn_blocking(move || { - let _guard = cloud_review - .lock() - .map_err(|_| "cloud-review-lock-poisoned".to_string())?; - create_cloud_candidate_receipt( - &root, - &cloud_root, - &metadata_fingerprint, - min_size_mib, - min_age_days, - limit, - &exact_confirmation_phrase, - &approval_rationale, - &app, - true, - ) - }) - .await - .map_err(|_| "cloud-adopt-existing-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[derive(serde::Serialize)] -pub struct CloudAttestationOutput { - pub goal_state: cloud_transfer::CloudOffloadGoalState, - pub goal_status: Option, - pub evidence: cloud_transfer::ProviderSyncEvidence, - pub assessment: provider_sync::ProviderSyncTimelinessAssessment, - pub evidence_record: provider_evidence::ProviderSyncEvidenceRecord, - pub evidence_path: String, - pub adr_path: Option, - pub goal_path: Option, - pub projection_warnings: Vec, - pub permit: Option, - pub blockers: Vec, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -pub struct CloudReceiptReconciliationEntry { - pub receipt_id: Option, - pub provider: Option, - pub goal_status: Option, - pub goal_state: Option, - pub provider_sync_state: Option, - pub eviction_permit: bool, - pub blockers: Vec, - pub error: Option, -} - -#[cfg(not(coverage))] -#[derive(Debug, serde::Serialize)] -pub struct CloudReceiptReconciliationOutput { - pub schema_version: u32, - pub observed_at_ms: u64, - pub receipts_seen: u64, - pub attested_count: u64, - pub pending_count: u64, - pub eviction_ready_count: u64, - pub error_count: u64, - pub provider_evidence_written: u64, - pub unprocessed_count: u64, - pub incomplete_reconciliation: bool, - pub entries: Vec, - pub cloud_write_executed: bool, - pub source_eviction_authorized: bool, -} - -#[cfg(not(coverage))] -const MAX_CLOUD_RECEIPT_RECONCILIATION_ENTRIES: usize = 10_000; -#[cfg(not(coverage))] -const MAX_CLOUD_RECEIPTS_PER_RECONCILIATION: usize = 256; -#[cfg(not(coverage))] -const CLOUD_RECONCILIATION_MAX_DURATION: Duration = Duration::from_secs(30); - -#[cfg(not(coverage))] -fn stable_reconciliation_error(error: &str) -> String { - let token = error.split(',').next().unwrap_or_default(); - if !token.is_empty() - && token.len() <= 128 - && token - .bytes() - .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') - { - token.to_string() - } else { - "provider-attestation-failed".into() - } -} - -#[cfg(not(coverage))] -fn reconcile_cloud_receipts_inner( - receipt_dir: &Path, - evidence_dir: &Path, - adr_dir: &Path, - goal_dir: &Path, - connection_path: &Path, - cloud_roots: &[cloud::CloudRoot], -) -> Result { - let reconciliation_started = Instant::now(); - let receipt_metadata = match std::fs::symlink_metadata(receipt_dir) { - Ok(metadata) => metadata, - Err(error) if error.kind() == std::io::ErrorKind::NotFound => { - return Ok(CloudReceiptReconciliationOutput { - schema_version: 1, - observed_at_ms: cloud::system_now_ms(), - receipts_seen: 0, - attested_count: 0, - pending_count: 0, - eviction_ready_count: 0, - error_count: 0, - provider_evidence_written: 0, - unprocessed_count: 0, - incomplete_reconciliation: false, - entries: Vec::new(), - cloud_write_executed: false, - source_eviction_authorized: false, - }); - } - Err(_) => return Err("cloud-receipt-directory-unavailable".into()), - }; - if receipt_metadata.file_type().is_symlink() || !receipt_metadata.is_dir() { - return Err("cloud-receipt-directory-unsafe".into()); - } - let mut paths = std::fs::read_dir(receipt_dir) - .map_err(|_| "cloud-receipt-directory-read-failed".to_string())? - .filter_map(Result::ok) - .map(|entry| entry.path()) - .collect::>(); - paths.sort(); - if paths.len() > MAX_CLOUD_RECEIPT_RECONCILIATION_ENTRIES { - return Err("cloud-receipt-directory-entry-limit-exceeded".into()); - } - let receipt_paths = paths - .into_iter() - .filter(|path| { - let Ok(metadata) = std::fs::symlink_metadata(path) else { - return false; - }; - metadata.is_file() - && !metadata.file_type().is_symlink() - && path.extension().and_then(|value| value.to_str()) == Some("json") - }) - .collect::>(); - let mut output = CloudReceiptReconciliationOutput { - schema_version: 1, - observed_at_ms: cloud::system_now_ms(), - receipts_seen: 0, - attested_count: 0, - pending_count: 0, - eviction_ready_count: 0, - error_count: 0, - provider_evidence_written: 0, - unprocessed_count: 0, - incomplete_reconciliation: false, - entries: Vec::new(), - cloud_write_executed: false, - source_eviction_authorized: false, - }; - for (index, path) in receipt_paths.iter().enumerate() { - if index >= MAX_CLOUD_RECEIPTS_PER_RECONCILIATION - || reconciliation_started.elapsed() >= CLOUD_RECONCILIATION_MAX_DURATION - { - output.unprocessed_count = receipt_paths.len().saturating_sub(index) as u64; - output.incomplete_reconciliation = output.unprocessed_count > 0; - break; - } - output.receipts_seen = output.receipts_seen.saturating_add(1); - let receipt = match cloud_transfer::read_immutable_receipt(path) { - Ok(receipt) => receipt, - Err(error) => { - output.error_count = output.error_count.saturating_add(1); - output.entries.push(CloudReceiptReconciliationEntry { - receipt_id: None, - provider: None, - goal_status: None, - goal_state: None, - provider_sync_state: None, - eviction_permit: false, - blockers: Vec::new(), - error: Some(stable_reconciliation_error(&error)), - }); - continue; - } - }; - match collect_cloud_attestation_for_receipt( - &receipt, - None, - evidence_dir, - adr_dir, - goal_dir, - connection_path, - cloud_roots, - false, - ) { - Ok(attestation) => { - output.attested_count = output.attested_count.saturating_add(1); - output.provider_evidence_written = - output.provider_evidence_written.saturating_add(1); - if attestation.goal_state - == cloud_transfer::CloudOffloadGoalState::PendingProviderSync - { - output.pending_count = output.pending_count.saturating_add(1); - } - if attestation.permit.is_some() { - output.eviction_ready_count = output.eviction_ready_count.saturating_add(1); - } - output.entries.push(CloudReceiptReconciliationEntry { - receipt_id: Some(receipt.receipt_id.clone()), - provider: Some(receipt.provider), - goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) - .ok() - .flatten(), - goal_state: Some(attestation.goal_state), - provider_sync_state: Some(attestation.evidence.sync_state), - eviction_permit: attestation.permit.is_some(), - blockers: attestation.blockers, - error: None, - }); - } - Err(error) => { - output.error_count = output.error_count.saturating_add(1); - let attestation_error = stable_reconciliation_error(&error); - let projection_warnings = - cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( - &receipt, - adr_dir, - goal_dir, - output.observed_at_ms, - &attestation_error, - ) - .warnings; - let mut blockers = vec!["provider-attestation-incomplete".into()]; - if let Some(blocker) = - cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) - { - blockers.push(blocker.into()); - } - if !projection_warnings.is_empty() { - blockers.push("dynamic-projection-update-incomplete".into()); - } - let projection = - cloud_adr::read_projection_state(&receipt.receipt_id, adr_dir, goal_dir); - let (goal_state, provider_sync_state) = match projection { - Ok(Some(state)) => { - blockers.push("projection-state-not-revalidated".into()); - (Some(state.goal_state), Some(state.provider_sync_state)) - } - Ok(None) => (None, None), - Err(_) => { - blockers.push("dynamic-projection-state-unavailable".into()); - (None, None) - } - }; - if goal_state == Some(cloud_transfer::CloudOffloadGoalState::PendingProviderSync) { - output.pending_count = output.pending_count.saturating_add(1); - } - output.entries.push(CloudReceiptReconciliationEntry { - receipt_id: Some(receipt.receipt_id.clone()), - provider: Some(receipt.provider), - goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) - .ok() - .flatten(), - goal_state, - provider_sync_state, - eviction_permit: false, - blockers, - error: Some(attestation_error), - }); - } - } - } - Ok(output) -} - -#[cfg(not(coverage))] -fn collect_cloud_attestation_for_receipt( - receipt: &cloud_transfer::CloudCopyReceipt, - object_id: Option, - evidence_dir: &Path, - adr_dir: &Path, - goal_dir: &Path, - connection_path: &Path, - cloud_roots: &[cloud::CloudRoot], - force_provider_api: bool, -) -> Result { - let confirmed_at_ms = cloud::system_now_ms(); - let evidence = match receipt.provider { - cloud::CloudProvider::Icloud => { - if object_id - .as_deref() - .is_some_and(|value| !value.trim().is_empty()) - { - return Err("icloud-provider-object-id-not-accepted".into()); - } - provider_sync::collect_icloud_sync_evidence(receipt, confirmed_at_ms)? - } - cloud::CloudProvider::Onedrive | cloud::CloudProvider::GoogleDrive => { - let destination = Path::new(&receipt.destination); - let selected_root = cloud_roots - .iter() - .filter(|root| { - root.provider == receipt.provider - && destination.starts_with(Path::new(&root.path)) - }) - .max_by_key(|root| Path::new(&root.path).components().count()) - .cloned() - .ok_or_else(|| "receipt-cloud-root-unavailable".to_string())?; - let object_id = object_id - .filter(|value| !value.trim().is_empty()) - .or_else(|| { - if receipt.provider == cloud::CloudProvider::GoogleDrive { - provider_evidence::latest_api_object_id( - evidence_dir, - &receipt.receipt_id, - receipt.provider, - ) - } else { - None - } - }); - let fallback_requested = - receipt.provider == cloud::CloudProvider::Onedrive || object_id.is_some(); - let native_evidence = if force_provider_api { - Err("provider-api-forced".to_string()) - } else { - provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) - }; - match native_evidence { - Ok(evidence) if evidence.sync_complete || !fallback_requested => evidence, - Err(error) if !fallback_requested => return Err(error), - Ok(_) | Err(_) => { - let access_token = - provider_oauth::refreshed_access_token(connection_path, &selected_root)?; - let client = provider_api_client::FixedHostProviderMetadataClient::default(); - match receipt.provider { - cloud::CloudProvider::Onedrive => { - if object_id.is_some() { - return Err("onedrive-provider-object-id-not-accepted".into()); - } - let locator = provider_api_client::onedrive_path_locator( - Path::new(&selected_root.path), - Path::new(&receipt.destination), - )?; - provider_api_client::collect_authenticated_provider_api_evidence_from_source( - receipt, - &locator, - access_token.as_str(), - &client, - confirmed_at_ms, - )? - } - cloud::CloudProvider::GoogleDrive => { - let locator = provider_api_client::google_drive_path_locator( - Path::new(&selected_root.path), - Path::new(&receipt.destination), - object_id - .as_deref() - .ok_or_else(|| "provider-object-id-missing".to_string())?, - )?; - provider_api_client::collect_authenticated_google_drive_path_evidence_from_source( - receipt, - &locator, - access_token.as_str(), - &client, - confirmed_at_ms, - )? - } - cloud::CloudProvider::Icloud => unreachable!(), - } - } - } - } - }; - let assessment = provider_sync::assess_provider_sync_timeliness(receipt, &evidence)?; - let (evidence_record, evidence_path) = - provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; - let source_blocker = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); - let (mut permit, mut blockers) = - match cloud_transfer::approve_local_eviction(receipt, &evidence_record) { - Ok(permit) => (Some(permit), Vec::new()), - Err(blockers) => (None, blockers), - }; - if let Some(blocker) = source_blocker { - permit = None; - if !blockers.iter().any(|existing| existing == blocker) { - blockers.push(blocker.into()); - } - } - let goal_state = - cloud_transfer::CloudOffloadGoalState::after_attestation(&evidence, permit.is_some()); - let mut adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); - let mut goal = cloud_adr::goal_snapshot_from_evidence( - receipt, - &evidence_record, - goal_state, - confirmed_at_ms, - ); - if let Some(blocker) = source_blocker { - goal.status = "blocked".into(); - goal.completion_gates.insert("source-present".into(), false); - adr.decision = format!("{}-source-state-unverified", adr.decision); - adr.consequences - .push(format!("source-state-blocked:{blocker}")); - } - let provider_blocker = blockers - .iter() - .find(|existing| Some(existing.as_str()) != source_blocker) - .map(String::as_str); - let projection = cloud_adr::write_projection_pair_with_state_blockers_outcome( - adr_dir, - &adr, - goal_dir, - &goal, - source_blocker, - provider_blocker, - ); - Ok(CloudAttestationOutput { - goal_state, - goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) - .ok() - .flatten(), - evidence, - assessment, - evidence_record, - evidence_path: evidence_path.to_string_lossy().into_owned(), - adr_path: projection - .adr_path - .map(|path| path.to_string_lossy().into_owned()), - goal_path: projection - .goal_path - .map(|path| path.to_string_lossy().into_owned()), - projection_warnings: projection.warnings, - permit, - blockers, - }) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn attest_cloud_copy( - receipt_id: String, - object_id: Option, - app: AppHandle, -) -> Result { - if receipt_id.len() != 64 || !receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) { - return Err("receipt-id-invalid".into()); - } - use tauri::Manager; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let receipt_path = app_data_dir - .join("cloud-receipts") - .join(format!("{receipt_id}.json")); - let evidence_dir = app_data_dir.join("cloud-provider-evidence"); - let adr_dir = app_data_dir.join("cloud-adr"); - let goal_dir = app_data_dir.join("cloud-goals"); - let connection_path = oauth_connections_path(&app)?; - let home = resolve_home(&app)?; - let cloud_roots = cloud::discover_cloud_roots(&home); - tauri::async_runtime::spawn_blocking(move || { - let receipt = cloud_transfer::read_immutable_receipt(&receipt_path)?; - if receipt.receipt_id != receipt_id { - return Err("receipt-id-mismatch".into()); - } - let result = collect_cloud_attestation_for_receipt( - &receipt, - object_id, - &evidence_dir, - &adr_dir, - &goal_dir, - &connection_path, - &cloud_roots, - false, - ); - if let Err(error) = &result { - let provider_blocker = stable_reconciliation_error(error); - let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( - &receipt, - &adr_dir, - &goal_dir, - cloud::system_now_ms(), - &provider_blocker, - ); - } - result - }) - .await - .map_err(|_| "cloud-attestation-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn reconcile_cloud_receipts( - app: AppHandle, -) -> Result { - use tauri::Manager; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let receipt_dir = app_data_dir.join("cloud-receipts"); - let evidence_dir = app_data_dir.join("cloud-provider-evidence"); - let adr_dir = app_data_dir.join("cloud-adr"); - let goal_dir = app_data_dir.join("cloud-goals"); - let connection_path = oauth_connections_path(&app)?; - let home = resolve_home(&app)?; - let cloud_roots = cloud::discover_cloud_roots(&home); - tauri::async_runtime::spawn_blocking(move || { - reconcile_cloud_receipts_inner( - &receipt_dir, - &evidence_dir, - &adr_dir, - &goal_dir, - &connection_path, - &cloud_roots, - ) - }) - .await - .map_err(|_| "cloud-reconciliation-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[derive(serde::Serialize)] -pub struct CloudSourceEvictionOutput { - pub action: &'static str, - pub goal_state: cloud_transfer::CloudOffloadGoalState, - pub attestation: CloudAttestationOutput, - pub approval: cloud_eviction::CloudSourceEvictionApproval, - pub approval_path: String, - pub eviction: cloud_eviction::CloudEvictionResult, - pub adr_path: Option, - pub goal_path: Option, - pub projection_warnings: Vec, -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub async fn trash_verified_cloud_source( - receipt_id: String, - confirmation_receipt_id: String, - rationale: String, - object_id: Option, - app: AppHandle, -) -> Result { - for value in [&receipt_id, &confirmation_receipt_id] { - if value.len() != 64 || !value.bytes().all(|byte| byte.is_ascii_hexdigit()) { - return Err("receipt-id-invalid".into()); - } - } - use tauri::Manager; - let app_data_dir = app - .path() - .app_data_dir() - .map_err(|_| "app-data-directory-unavailable".to_string())?; - let receipt_path = app_data_dir - .join("cloud-receipts") - .join(format!("{receipt_id}.json")); - let evidence_dir = app_data_dir.join("cloud-provider-evidence"); - let adr_dir = app_data_dir.join("cloud-adr"); - let goal_dir = app_data_dir.join("cloud-goals"); - let approval_dir = app_data_dir.join("cloud-source-eviction-approvals"); - let eviction_dir = app_data_dir.join("cloud-source-evictions"); - let journal_path = journal_file_path(&app)?; - let connection_path = oauth_connections_path(&app)?; - let home = resolve_home(&app)?; - let cloud_roots = cloud::discover_cloud_roots(&home); - let approved_by = local_human_reviewer(); - tauri::async_runtime::spawn_blocking(move || { - let receipt = cloud_transfer::read_immutable_receipt(&receipt_path)?; - if receipt.receipt_id != receipt_id { - return Err("receipt-id-mismatch".into()); - } - let attestation = match collect_cloud_attestation_for_receipt( - &receipt, - object_id, - &evidence_dir, - &adr_dir, - &goal_dir, - &connection_path, - &cloud_roots, - false, - ) { - Ok(attestation) => attestation, - Err(error) => { - let provider_blocker = stable_reconciliation_error(&error); - let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( - &receipt, - &adr_dir, - &goal_dir, - cloud::system_now_ms(), - &provider_blocker, - ); - return Err(error); - } - }; - let permit = attestation.permit.as_ref().ok_or_else(|| { - if attestation.blockers.is_empty() { - "source-eviction-permit-unavailable".to_string() - } else { - attestation.blockers.join(",") - } - })?; - let active_use_observed_at_ms = cloud::system_now_ms(); - let active_use = cloud_local_eviction::observe_path_active_use(Path::new(&receipt.source)); - let approved_at_ms = cloud::system_now_ms(); - let approval = cloud_eviction::create_source_eviction_approval( - &receipt, - permit, - &confirmation_receipt_id, - approved_at_ms, - &approved_by, - &rationale, - active_use_observed_at_ms, - active_use, - )?; - let approval_path = - cloud_eviction::write_immutable_source_eviction_approval(&approval_dir, &approval)?; - let eviction = cloud_eviction::evict_source_with_human_approval( - &receipt, - permit, - &approval, - &confirmation_receipt_id, - &eviction_dir, - &journal_path, - cloud::system_now_ms(), - )?; - let updated_at_ms = cloud::system_now_ms(); - let adr = cloud_adr::snapshot_from_evidence( - &attestation.evidence_record, - cloud_transfer::CloudOffloadGoalState::SourceEvicted, - updated_at_ms, - ); - let goal = cloud_adr::goal_snapshot_from_evidence( - &receipt, - &attestation.evidence_record, - cloud_transfer::CloudOffloadGoalState::SourceEvicted, - updated_at_ms, - ); - let (adr_path, goal_path, projection_warnings) = - cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); - Ok(CloudSourceEvictionOutput { - action: "attest-approve-and-trash-verified-cloud-source", - goal_state: cloud_transfer::CloudOffloadGoalState::SourceEvicted, - attestation, - approval, - approval_path: approval_path.to_string_lossy().into_owned(), - eviction, - adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), - goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), - projection_warnings, - }) - }) - .await - .map_err(|_| "cloud-source-eviction-task-failed".to_string())? -} - -#[cfg(not(coverage))] -#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] -#[tauri::command(async)] -pub fn plan_organize( - root: String, - app: AppHandle, - state: State, -) -> Result, String> { - let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; - let rules = crate::userrules::parse_rules(&user_rules_json(&app))?; - let files = dupes::collect_files_bounded(Path::new(&root), 10_000, Duration::from_secs(10))?; - let home = resolve_home(&app)?; - #[cfg(feature = "llm-engine")] - { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - if model_status_for(&model_file_path(&dir)).present { - let mut guard = state.engine.lock().unwrap(); - if guard.is_none() { - if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { - *guard = Some(e); - } - } - if let Some(engine) = guard.as_ref() { - let lineage_probe_count = std::cell::Cell::new(0usize); - let pick = |p: &Path, cands: &[&str]| { - let mut meta = file_meta_at(p, 0, 0); - if lineage_probe_count.get() < organize::MAX_LINEAGE_PROBES { - lineage_probe_count.set(lineage_probe_count.get() + 1); - if let Some(lineage) = organize::lineage_metadata_for_path(p) { - meta.production_time_ms = lineage.production_time_ms; - meta.production_time_source = lineage.production_time_source; - meta.production_time_confidence = lineage.production_time_confidence; - } - } - crate::llm::pick_class(engine, &meta, cands) - }; - return Ok(organize::plan_moves_with_metadata( - &files, - &onto, - &home, - now_ms(), - &rules, - &pick, - &organize::lineage_metadata_for_path, - )); - } - } - } - Ok(organize::plan_moves_with_metadata( - &files, - &onto, - &home, - now_ms(), - &rules, - &|_, _| None, - &organize::lineage_metadata_for_path, - )) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn export_organization_lineage( - plans: Vec, -) -> Result { - organization_lineage::export_move_plans(&plans, now_ms()) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn user_rules(app: AppHandle) -> Result, String> { - crate::userrules::parse_rules(&user_rules_json(&app)) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn execute_moves( - plans: Vec, - app: AppHandle, -) -> Result, String> { - let jp = journal_file_path(&app)?; - Ok(execute_moves_inner(&plans, &jp, now_ms())) -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn undo_last_moves(limit: usize, app: AppHandle) -> Result, String> { - let jp = journal_file_path(&app)?; - Ok(undo_last_moves_inner(limit, &jp, now_ms())) -} - -#[derive(serde::Serialize)] -pub struct ModelStatus { - pub present: bool, - pub name: String, -} - -pub fn model_file_path(app_data_dir: &Path) -> PathBuf { - app_data_dir - .join("models") - .join(format!("{}.gguf", crate::llm::DEFAULT.name)) -} - -pub fn model_status_for(model_path: &Path) -> ModelStatus { - ModelStatus { - present: model_path.exists(), - name: crate::llm::DEFAULT.name.to_string(), - } -} - -pub fn file_meta_at(path: &Path, size: u64, mtime_days: u64) -> crate::llm::FileMeta { - let name = path - .file_name() - .map(|n| n.to_string_lossy().into_owned()) - .unwrap_or_default(); - let parent = path - .parent() - .and_then(|p| p.file_name()) - .map(|n| n.to_string_lossy().into_owned()) - .unwrap_or_default(); - crate::llm::FileMeta { - path: path.to_string_lossy().into_owned(), - name, - size, - mtime_days, - parent, - production_time_ms: None, - production_time_source: None, - production_time_confidence: None, - } -} - -pub fn verdicts_with( - engine: &dyn crate::llm::InferenceEngine, - cache: &mut crate::llm::VerdictCache, - items: &[(crate::llm::FileMeta, u64)], -) -> Vec { - let mut out = Vec::with_capacity(items.len()); - for (meta, mtime_ms) in items { - let key = crate::llm::VerdictCache::key(&meta.path, meta.size, *mtime_ms); - if let Some(v) = cache.get(&key) { - out.push(crate::llm::FileVerdict { - path: meta.path.clone(), - verdict: v, - reason: String::new(), - }); - } else { - let fv = crate::llm::verdict_for(engine, meta); - cache.put(key, fv.verdict); - out.push(fv); - } - } - out -} - -#[cfg(not(coverage))] -fn meta_items(paths: &[String]) -> Vec<(crate::llm::FileMeta, u64)> { - paths - .iter() - .filter_map(|p| { - let path = std::path::Path::new(p); - let md = std::fs::metadata(path).ok()?; - let mtime_ms = md - .modified() - .ok() - .and_then(|t| t.duration_since(std::time::UNIX_EPOCH).ok()) - .map(|d| d.as_millis() as u64) - .unwrap_or(0); - let age_days = now_ms().saturating_sub(mtime_ms) / 86_400_000; - Some((file_meta_at(path, md.len(), age_days), mtime_ms)) - }) - .collect() -} - -#[cfg(not(coverage))] -#[tauri::command] -pub fn model_status(app: AppHandle) -> Result { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - Ok(model_status_for(&model_file_path(&dir))) -} - -#[cfg(not(coverage))] -#[tauri::command(async)] -pub fn download_model(app: AppHandle) -> Result<(), String> { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - let path = model_file_path(&dir); - if let Some(parent) = path.parent() { - std::fs::create_dir_all(parent).map_err(|e| e.to_string())?; - } - crate::llm::download_to(&crate::llm::DEFAULT, &path) -} - -#[cfg(not(coverage))] -#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] -#[tauri::command(async)] -pub fn file_verdicts( - paths: Vec, - app: AppHandle, - state: State, -) -> Result, String> { - let items = meta_items(&paths); - - #[cfg(feature = "llm-engine")] - { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - if model_status_for(&model_file_path(&dir)).present { - let mut guard = state.engine.lock().unwrap(); - if guard.is_none() { - if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { - *guard = Some(e); - } - } - if let Some(engine) = guard.as_ref() { - let mut cache = state.verdict_cache.lock().unwrap(); - return Ok(verdicts_with(engine, &mut cache, &items)); - } - } - } - - Ok(items - .iter() - .map(|(meta, _)| crate::llm::FileVerdict { - path: meta.path.clone(), - verdict: crate::llm::Verdict::Unrated, - reason: String::new(), - }) - .collect()) -} - -#[cfg(not(coverage))] -#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] -#[tauri::command(async)] -pub fn summarize_unknown_bucket( - paths: Vec, - app: AppHandle, - state: State, -) -> Result, String> { - if paths.is_empty() { - return Ok(None); - } - let metas: Vec = meta_items(&paths).into_iter().map(|(m, _)| m).collect(); - - #[cfg(feature = "llm-engine")] - { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - if model_status_for(&model_file_path(&dir)).present { - let mut guard = state.engine.lock().unwrap(); - if guard.is_none() { - if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { - *guard = Some(e); - } - } - if let Some(engine) = guard.as_ref() { - return Ok(crate::llm::summarize_unknown(engine, &metas)); - } - } - } - - Ok(None) -} - -#[cfg(not(coverage))] -#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] -#[tauri::command(async)] -pub fn reason_unknown_extensions( - samples: Vec, - app: AppHandle, - state: State, -) -> Result, String> { - let exts = crate::reasoning::distinct_extensions(&samples); - let settings = get_settings(app.clone())?; - let ddg = crate::web::DdgLookup; - let web_fn = |ext: &str| -> Option { - crate::web::WebLookup::file_type(&ddg, ext).ok().flatten() - }; - let web: Option<&dyn Fn(&str) -> Option> = if settings.online_mode { - Some(&web_fn) - } else { - None - }; - - #[cfg(feature = "llm-engine")] - { - use tauri::Manager; - let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; - if model_status_for(&model_file_path(&dir)).present { - let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; - let candidates: Vec = onto - .classes - .iter() - .map(|c| c.id.rsplit(['#', '/']).next().unwrap_or(&c.id).to_string()) - .collect(); - let cand_refs: Vec<&str> = candidates.iter().map(|s| s.as_str()).collect(); - let mut guard = state.engine.lock().unwrap(); - if guard.is_none() { - if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { - *guard = Some(e); - } - } - if let Some(engine) = guard.as_ref() { - let reason = |ext: &str| crate::llm::reason_extension(engine, ext, &cand_refs); - return Ok(crate::reasoning::build_insights(&exts, &reason, web)); - } - } - } - - let reason = |_: &str| -> Option { None }; - Ok(crate::reasoning::build_insights(&exts, &reason, web)) -} - -#[cfg(test)] -mod tests { - use super::*; - use crate::scanner::scan_dir_with_interval; - use std::fs; - use std::sync::atomic::AtomicBool; - - use crate::llm::{InferenceEngine, Verdict, VerdictCache}; - - struct CountingFake { - out: String, - calls: std::cell::Cell, - } - impl InferenceEngine for CountingFake { - fn infer(&self, _p: &str) -> Result { - self.calls.set(self.calls.get() + 1); - Ok(self.out.clone()) - } - } - - #[test] - fn model_file_path_is_under_models_dir() { - let p = model_file_path(std::path::Path::new("/data")); - assert!(p.ends_with(format!("{}.gguf", crate::llm::DEFAULT.name))); - assert!(p.to_string_lossy().contains("models")); - } - - #[cfg(not(coverage))] - #[test] - fn reconciliation_error_output_is_stable_and_path_free() { - assert_eq!( - stable_reconciliation_error("provider-oauth-refresh-failed,secret/path"), - "provider-oauth-refresh-failed" - ); - assert_eq!( - stable_reconciliation_error("No such file or directory (os error 2)"), - "provider-attestation-failed" - ); - } - - #[cfg(not(coverage))] - #[test] - fn reconciliation_without_receipts_is_read_only() { - let temporary = tempfile::tempdir().unwrap(); - let output = reconcile_cloud_receipts_inner( - &temporary.path().join("missing-receipts"), - &temporary.path().join("evidence"), - &temporary.path().join("adr"), - &temporary.path().join("goals"), - &temporary.path().join("oauth.json"), - &[], - ) - .unwrap(); - assert_eq!(output.receipts_seen, 0); - assert_eq!(output.attested_count, 0); - assert!(!output.cloud_write_executed); - assert!(!output.source_eviction_authorized); - } - - #[cfg(not(coverage))] - #[test] - fn reconciliation_reports_receipts_left_after_entry_budget() { - let temporary = tempfile::tempdir().unwrap(); - let receipts = temporary.path().join("receipts"); - std::fs::create_dir(&receipts).unwrap(); - for index in 0..=MAX_CLOUD_RECEIPTS_PER_RECONCILIATION { - std::fs::write(receipts.join(format!("{index:04}.json")), b"{}").unwrap(); - } - let output = reconcile_cloud_receipts_inner( - &receipts, - &temporary.path().join("evidence"), - &temporary.path().join("adr"), - &temporary.path().join("goals"), - &temporary.path().join("oauth.json"), - &[], - ) - .unwrap(); - assert_eq!(output.receipts_seen, MAX_CLOUD_RECEIPTS_PER_RECONCILIATION as u64); - assert_eq!(output.unprocessed_count, 1); - assert!(output.incomplete_reconciliation); - assert_eq!(output.error_count, MAX_CLOUD_RECEIPTS_PER_RECONCILIATION as u64); - } - - #[cfg(not(coverage))] - #[test] - fn missing_source_blocks_eviction_permit() { - let temporary = tempfile::tempdir().unwrap(); - let missing = temporary.path().join("missing.bin"); - assert_eq!( - cloud_transfer::source_eviction_blocker(&missing), - Some("source-not-present") - ); - std::fs::write(&missing, b"source").unwrap(); - assert_eq!(cloud_transfer::source_eviction_blocker(&missing), None); - } - - #[test] - fn model_status_reflects_presence() { - let tmp = tempfile::tempdir().unwrap(); - let missing = tmp.path().join("no.gguf"); - assert!(!model_status_for(&missing).present); - let there = tmp.path().join("m.gguf"); - std::fs::write(&there, b"x").unwrap(); - assert!(model_status_for(&there).present); - assert_eq!(model_status_for(&there).name, crate::llm::DEFAULT.name); - } - - #[test] - fn brew_cleanup_inputs_are_bounded_and_exact() { - assert!(valid_brew_fingerprint(&"a".repeat(64))); - assert!(!valid_brew_fingerprint(&"a".repeat(63))); - assert!(!valid_brew_fingerprint(&format!("{}g", "a".repeat(63)))); - assert!(valid_brew_rationale("reviewed dry-run output")); - assert!(!valid_brew_rationale(" leading-space")); - assert!(!valid_brew_rationale("control\ncharacter")); - } - - #[test] - fn file_meta_at_extracts_name_and_parent() { - let m = file_meta_at(std::path::Path::new("/downloads/report.pdf"), 42, 7); - assert_eq!(m.name, "report.pdf"); - assert_eq!(m.parent, "downloads"); - assert_eq!(m.size, 42); - assert_eq!(m.mtime_days, 7); - let root = file_meta_at(std::path::Path::new("/"), 0, 0); - assert_eq!(root.name, ""); - assert_eq!(root.parent, ""); - } - - #[test] - fn verdicts_with_caches_and_avoids_reinference() { - let engine = CountingFake { - out: r#"{"verdict":"safe","reason":"r"}"#.into(), - calls: std::cell::Cell::new(0), - }; - let mut cache = VerdictCache::new(); - let meta = file_meta_at(std::path::Path::new("/x/a.bin"), 100, 1); - let items = vec![(meta.clone(), 1700u64), (meta, 1700u64)]; - let out = verdicts_with(&engine, &mut cache, &items); - assert_eq!(out.len(), 2); - assert!(out.iter().all(|fv| fv.verdict == Verdict::Safe)); - assert_eq!(engine.calls.get(), 1); - } - - #[test] - fn verdicts_with_distinct_items_infer_each() { - let engine = CountingFake { - out: r#"{"verdict":"keep"}"#.into(), - calls: std::cell::Cell::new(0), - }; - let mut cache = VerdictCache::new(); - let a = (file_meta_at(std::path::Path::new("/x/a"), 1, 1), 10u64); - let b = (file_meta_at(std::path::Path::new("/x/b"), 2, 2), 20u64); - let out = verdicts_with(&engine, &mut cache, &[a, b]); - assert_eq!(out.len(), 2); - assert_eq!(engine.calls.get(), 2); - let _ = out; - } - - fn scan(root: &Path) -> ScanResult { - scan_dir_with_interval(root, &AtomicBool::new(false), 1, |_| {}) - } - - #[test] - fn load_ontology_from_valid_ttl_ok() { - let ttl = r#" -@prefix owl: . -@prefix rdfs: . -@prefix dm: . -dm:Image a owl:Class ; rdfs:label "이미지"@ko . -"#; - let onto = load_ontology_from(ttl).unwrap(); - assert_eq!(onto.classes.len(), 1); - } - - #[test] - fn load_ontology_from_garbage_is_err() { - assert!(load_ontology_from("@@@ not turtle").is_err()); - } - - #[test] - fn node_view_lists_entries_sorted_by_size_desc() { - let tmp = tempfile::tempdir().unwrap(); - let root = tmp.path(); - fs::create_dir(root.join("sub")).unwrap(); - fs::write(root.join("sub").join("inner.bin"), vec![0u8; 500]).unwrap(); - fs::write(root.join("small.txt"), vec![0u8; 10]).unwrap(); - let res = scan(root); - let view = node_view(&res, root).unwrap(); - assert_eq!(view.size, 510); - assert_eq!(view.entries.len(), 2); - assert_eq!(view.entries[0].name, "sub"); - assert!(view.entries[0].is_dir); - assert_eq!(view.entries[0].size, 500); - assert_eq!(view.entries[1].name, "small.txt"); - assert!(!view.entries[1].is_dir); - } - - #[test] - fn node_view_rejects_path_outside_root() { - let tmp = tempfile::tempdir().unwrap(); - let res = scan(tmp.path()); - assert!(node_view(&res, &std::env::temp_dir().join("..")).is_err()); - } - - #[test] - fn node_view_rejects_parent_dir_components() { - let tmp = tempfile::tempdir().unwrap(); - let res = scan(tmp.path()); - let sneaky = tmp.path().join(".."); - assert!(node_view(&res, &sneaky).is_err()); - } - - #[test] - fn node_view_rejects_sibling_path_outside_root() { - let tmp = tempfile::tempdir().unwrap(); - let other = tempfile::tempdir().unwrap(); - let res = scan(tmp.path()); - assert!(node_view(&res, other.path()).is_err()); - } - - #[cfg(windows)] - #[test] - fn node_view_skips_junctions() { - let tmp = tempfile::tempdir().unwrap(); - let root = tmp.path(); - fs::create_dir(root.join("real")).unwrap(); - let junction = root.join("junc"); - let status = std::process::Command::new("cmd") - .args(["/C", "mklink", "/J"]) - .arg(&junction) - .arg(root.join("real")) - .status() - .unwrap(); - assert!(status.success(), "mklink /J failed"); - let res = scan(root); - let view = node_view(&res, root).unwrap(); - assert!(view.entries.iter().all(|e| e.name != "junc")); - } - - #[test] - fn node_view_errors_on_unreadable_dir() { - let tmp = tempfile::tempdir().unwrap(); - let res = scan(tmp.path()); - assert!(node_view(&res, &tmp.path().join("missing")).is_err()); - } - - #[cfg(unix)] - #[test] - fn node_view_skips_symlinks() { - let tmp = tempfile::tempdir().unwrap(); - let root = tmp.path(); - fs::write(root.join("real.bin"), vec![0u8; 5]).unwrap(); - std::os::unix::fs::symlink(root.join("real.bin"), root.join("link.bin")).unwrap(); - let res = scan(root); - let view = node_view(&res, root).unwrap(); - assert!(view.entries.iter().all(|e| e.name != "link.bin")); - } - - #[test] - fn parse_move_entry_splits_valid_entry() { - assert_eq!( - parse_move_entry("/a/b -> /c/d"), - Some(("/a/b".to_string(), "/c/d".to_string())) - ); - } - - #[test] - fn parse_move_entry_malformed_is_none() { - assert_eq!(parse_move_entry("no arrow here"), None); - } - - #[test] - fn list_roots_returns_platform_roots() { - let roots = list_roots(); - assert!(!roots.is_empty()); - #[cfg(windows)] - assert!(roots.iter().any(|r| r.ends_with(":\\"))); - #[cfg(not(windows))] - assert!(roots.contains(&"/".to_string())); - } - - #[test] - fn clean_paths_inner_reports_per_item_results() { - let tmp = tempfile::tempdir().unwrap(); - let jp = tmp.path().join("j.jsonl"); - let ok_dir = tmp.path().join("disksage-clean-fixture-dir"); - fs::create_dir(&ok_dir).unwrap(); - fs::write(ok_dir.join("inner.bin"), vec![0u8; 32]).unwrap(); - let ok_file = tmp.path().join("disksage-clean-fixture-file.bin"); - fs::write(&ok_file, vec![0u8; 16]).unwrap(); - let missing = tmp.path().join("ghost"); - let protected = - std::path::PathBuf::from(if cfg!(windows) { "C:\\Windows" } else { "/usr" }); - - let results = clean_paths_inner( - &[ok_dir.clone(), ok_file.clone(), missing, protected], - &jp, - 7, - ); - - assert_eq!(results.len(), 4); - assert!(results[0].ok); - assert!(results[1].ok); - assert!(!results[2].ok && results[2].error.contains("휴지통")); - assert!(!results[3].ok && results[3].error.contains("보호")); - assert!(!ok_dir.exists()); - assert!(!ok_file.exists()); - - let recent = crate::safety::journal_recent(&jp, 10); - let ok_entry = recent - .iter() - .find(|e| e.outcome == "ok" && e.path.contains("disksage-clean-fixture-dir")) - .unwrap(); - assert_eq!(ok_entry.bytes, 32); - let ok_file_entry = recent - .iter() - .find(|e| e.outcome == "ok" && e.path.contains("disksage-clean-fixture-file")) - .unwrap(); - assert_eq!(ok_file_entry.bytes, 16); - - #[cfg(any(windows, target_os = "linux"))] - { - let items: Vec<_> = trash::os_limited::list() - .unwrap() - .into_iter() - .filter(|i| { - let n = i.name.to_string_lossy(); - n.contains("disksage-clean-fixture-dir") - || n.contains("disksage-clean-fixture-file") - }) - .collect(); - trash::os_limited::purge_all(items).unwrap(); - } - } - - #[cfg(all(not(coverage), target_os = "macos"))] - #[test] - fn automatic_cache_cleanup_uses_only_observed_macos_cache_ids() { - assert_eq!( - crate::cache_cleanup::AUTO_REGENERABLE_CACHE_IDS, - [ - "npm-cache", - "pnpm-cache", - "adobe-cache", - "edge-cache", - "uv-cache", - "trivy-cache", - ] - ); - let tmp = tempfile::tempdir().unwrap(); - let bases = crate::rules::BaseDirs { - temp: tmp.path().join("tmp"), - local_data: tmp.path().join("local"), - home: tmp.path().join("home"), - }; - for id in crate::cache_cleanup::AUTO_REGENERABLE_CACHE_IDS { - let path = match id { - "npm-cache" => bases.home.join(".npm"), - "pnpm-cache" => bases.home.join("Library/Caches/pnpm"), - "adobe-cache" => bases.home.join("Library/Caches/Adobe"), - "edge-cache" => bases.home.join("Library/Caches/Microsoft Edge"), - "uv-cache" => bases.local_data.join("uv"), - "trivy-cache" => bases.home.join("Library/Caches/trivy"), - _ => unreachable!(), - }; - fs::create_dir_all(&path).unwrap(); - fs::write(path.join("fixture.bin"), b"regenerable").unwrap(); - } - let results = clean_regenerable_caches_inner(&bases, &tmp.path().join("journal.jsonl"), 7); - assert_eq!(results.len(), 6); - assert!(results.iter().all(|result| result.ok)); - } - - #[test] - fn dev_artifact_cleanup_rejects_a_stale_metadata_fingerprint() { - let tmp = tempfile::tempdir().unwrap(); - let project = tmp.path().join("webapp"); - let artifact = project.join("node_modules"); - fs::create_dir_all(&artifact).unwrap(); - fs::write(project.join("package.json"), b"{}").unwrap(); - fs::write(artifact.join("payload.bin"), b"old").unwrap(); - let now = std::time::SystemTime::now() - .duration_since(std::time::UNIX_EPOCH) - .unwrap() - .as_millis() as u64; - let observed = crate::dev_artifacts::find_artifacts(tmp.path(), 0, now); - assert_eq!(observed.len(), 1); - fs::write(artifact.join("payload.bin"), b"recreated-with-different-size").unwrap(); - let results = clean_dev_artifacts_inner( - &observed, - tmp.path(), - 0, - &tmp.path().join("journal.jsonl"), - now, - ); - assert_eq!(results.len(), 1); - assert!(!results[0].ok); - assert!(results[0].error.contains("다시 스캔")); - assert!(artifact.join("payload.bin").exists()); - } - - #[test] - fn execute_moves_inner_reports_per_item_and_isolates_failures() { - let tmp = tempfile::tempdir().unwrap(); - let jp = tmp.path().join("j.jsonl"); - let src_ok = tmp.path().join("a.bin"); - std::fs::write(&src_ok, vec![1u8; 16]).unwrap(); - let dst_ok = tmp.path().join("sub").join("a.bin"); - let plans = vec![ - organize::MovePlan { - src: src_ok.to_string_lossy().into(), - dst: dst_ok.to_string_lossy().into(), - class_id: "x".into(), - ..Default::default() - }, - organize::MovePlan { - src: tmp.path().join("ghost").to_string_lossy().into(), - dst: tmp.path().join("g2").to_string_lossy().into(), - class_id: "x".into(), - ..Default::default() - }, - ]; - let results = execute_moves_inner(&plans, &jp, 1); - assert_eq!(results.len(), 2); - assert!(results[0].ok); - assert!(!results[1].ok); - assert!(!src_ok.exists()); - assert!(dst_ok.exists()); - } - - #[test] - fn undo_last_moves_inner_reverses_recent_moves_newest_first() { - let tmp = tempfile::tempdir().unwrap(); - let jp = tmp.path().join("j.jsonl"); - let a = tmp.path().join("a.bin"); - std::fs::write(&a, vec![2u8; 8]).unwrap(); - let a_moved = tmp.path().join("dest").join("a.bin"); - let plans = vec![organize::MovePlan { - src: a.to_string_lossy().into(), - dst: a_moved.to_string_lossy().into(), - class_id: "x".into(), - ..Default::default() - }]; - execute_moves_inner(&plans, &jp, 5); - assert!(!a.exists()); - assert!(a_moved.exists()); - let undone = undo_last_moves_inner(10, &jp, 6); - assert_eq!(undone.len(), 1); - assert!(undone[0].ok); - assert!(a.exists()); - assert!(!a_moved.exists()); - } - - #[test] - fn undo_last_moves_inner_respects_limit_after_filtering() { - let tmp = tempfile::tempdir().unwrap(); - let jp = tmp.path().join("j.jsonl"); - for name in ["x.bin", "y.bin"] { - let s = tmp.path().join(name); - std::fs::write(&s, b"z").unwrap(); - let d = tmp.path().join("d").join(name); - execute_moves_inner( - &[organize::MovePlan { - src: s.to_string_lossy().into(), - dst: d.to_string_lossy().into(), - class_id: "x".into(), - ..Default::default() - }], - &jp, - 1, - ); - } - let undone = undo_last_moves_inner(1, &jp, 9); - assert_eq!(undone.len(), 1); - } - - #[test] - fn undo_last_moves_inner_reports_failure_when_original_path_reoccupied() { - let tmp = tempfile::tempdir().unwrap(); - let jp = tmp.path().join("j.jsonl"); - let a = tmp.path().join("a.bin"); - std::fs::write(&a, vec![3u8; 4]).unwrap(); - let a_moved = tmp.path().join("dest").join("a.bin"); - let plans = vec![organize::MovePlan { - src: a.to_string_lossy().into(), - dst: a_moved.to_string_lossy().into(), - class_id: "x".into(), - ..Default::default() - }]; - execute_moves_inner(&plans, &jp, 1); - assert!(a_moved.exists()); - std::fs::write(&a, b"blocker").unwrap(); - let undone = undo_last_moves_inner(1, &jp, 2); - assert_eq!(undone.len(), 1); - assert!(!undone[0].ok); - assert!(a_moved.exists()); - } -} From 70a3ff6d190cf2566bb28257cf64e9286301f193 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 11:37:21 -0700 Subject: [PATCH 625/691] repair: restore complete commands module --- src-tauri/src/commands.rs | 3319 ++++++++++++++++++++++++++++++++++++- 1 file changed, 3315 insertions(+), 4 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index 66d0d15ae..c079633dc 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -30,9 +30,6 @@ use crate::{ #[path = "home_resolution.rs"] mod home_resolution; -#[path = "copy_headroom.rs"] -mod copy_headroom; - #[derive(Default)] pub struct AppState { pub result: Arc>>, @@ -301,6 +298,3320 @@ fn bundled_ontology_ttl(app: &AppHandle) -> Result { #[cfg(not(coverage))] #[tauri::command] pub fn get_ontology(app: AppHandle) -> Result { - load_ontology_from(&bundled_ontology_ttl(&app)?)?; load_ontology_from(&bundled_ontology_ttl(&app)?) } + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn disk_inventory( + root: String, + app: AppHandle, +) -> Result { + let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; + let files = crate::dupes::collect_files(std::path::Path::new(&root)); + Ok(crate::inventory::build_inventory(&files, &onto)) +} + +/// 번들/오버라이드 온톨로지의 정합성 검사(advisory) — 불충족 클래스 목록. 로직은 Task 2의 Reasoner::check_coherence에 이미 있음. +#[cfg(not(coverage))] +#[tauri::command] +pub fn ontology_coherence(app: AppHandle) -> Result, String> { + let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; + Ok(crate::ontology::Reasoner::build(&onto).check_coherence()) +} + +#[cfg(not(coverage))] +fn settings_file_path(app: &AppHandle) -> Result { + use tauri::Manager; + let dir = app.path().app_config_dir().map_err(|e| e.to_string())?; + std::fs::create_dir_all(&dir).map_err(|e| e.to_string())?; + Ok(dir.join("settings.json")) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn get_settings(app: AppHandle) -> Result { + let path = settings_file_path(&app)?; + match std::fs::read_to_string(&path) { + Ok(s) => Ok(crate::settings::parse_settings(&s)), + Err(_) => Ok(crate::settings::Settings::default()), + } +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn set_settings( + online_mode: bool, + app: AppHandle, +) -> Result { + let s = crate::settings::Settings { online_mode }; + let path = settings_file_path(&app)?; + std::fs::write(&path, crate::settings::serialize_settings(&s)).map_err(|e| e.to_string())?; + Ok(s) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn start_scan(root: String, app: AppHandle, state: State) -> Result<(), String> { + if state.scanning.swap(true, Ordering::SeqCst) { + return Err("scan already running".into()); + } + state.cancel.store(false, Ordering::SeqCst); + let cancel = state.cancel.clone(); + let slot = state.result.clone(); + let scanning = state.scanning.clone(); + std::thread::spawn(move || { + struct ScanningReset(Arc); + impl Drop for ScanningReset { + fn drop(&mut self) { + self.0.store(false, Ordering::SeqCst); + } + } + let _reset = ScanningReset(scanning); + let res = scanner::scan_dir(Path::new(&root), &cancel, |s| { + let _ = app.emit("scan://progress", s.clone()); + }); + let stats = res.stats.clone(); + *slot.lock().unwrap() = Some(res); + drop(_reset); + let _ = app.emit("scan://done", stats); + }); + Ok(()) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn cancel_scan(state: State) { + state.cancel.store(true, Ordering::SeqCst); +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn get_node(path: String, state: State) -> Result { + let guard = state.result.lock().unwrap(); + let res = guard.as_ref().ok_or("no scan result")?; + node_view(res, &PathBuf::from(path)) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn top_files(limit: usize, state: State) -> Result, String> { + let guard = state.result.lock().unwrap(); + let res = guard.as_ref().ok_or("no scan result")?; + Ok(res + .top_files + .iter() + .take(limit) + .map(|(p, size)| EntryView { + name: p + .file_name() + .map(|n| n.to_string_lossy().into_owned()) + .unwrap_or_default(), + path: p.to_string_lossy().into_owned(), + size: *size, + is_dir: false, + }) + .collect()) +} + +#[cfg(not(coverage))] +pub(crate) fn journal_file_path(app: &AppHandle) -> Result { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + std::fs::create_dir_all(&dir).map_err(|e| e.to_string())?; + Ok(dir.join("journal.jsonl")) +} + +#[cfg(not(coverage))] +pub(crate) fn now_ms() -> u64 { + std::time::SystemTime::now() + .duration_since(std::time::UNIX_EPOCH) + .map(|d| d.as_millis() as u64) + .unwrap_or(0) +} + +fn valid_brew_fingerprint(value: &str) -> bool { + value.len() == 64 && value.bytes().all(|byte| byte.is_ascii_hexdigit()) +} + +fn valid_brew_rationale(value: &str) -> bool { + let trimmed = value.trim(); + value == trimmed + && !trimmed.is_empty() + && trimmed.chars().count() <= 1_000 + && !trimmed.chars().any(char::is_control) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn plan_brew_cleanup() -> Result { + brew_cleanup::plan(now_ms()) +} + +fn podman_binary() -> PathBuf { + [ + "/opt/homebrew/bin/podman", + "/usr/local/bin/podman", + "/usr/bin/podman", + ] + .into_iter() + .map(PathBuf::from) + .find(|path| { + std::fs::symlink_metadata(path) + .is_ok_and(|metadata| metadata.is_file() && !metadata.file_type().is_symlink()) + }) + .unwrap_or_else(|| PathBuf::from("podman")) +} + +/// Read-only Podman VM/store evidence. The command never prunes, removes, trims, or stops. +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn inspect_podman_reclaim() -> podman_reclaim::PodmanReclaimPlan { + podman_reclaim::probe_podman_reclaim( + &podman_binary(), + podman_reclaim::DEFAULT_PODMAN_MACHINE, + podman_reclaim::DEFAULT_PROBE_TIMEOUT, + ) +} + +/// Freshly revalidates and removes only untagged, unreferenced Podman images. +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn execute_podman_dangling_image_prune( + confirmation_phrase: String, + rationale: String, +) -> Result { + if !valid_brew_rationale(&rationale) { + return Err("podman-prune-rationale-invalid".into()); + } + podman_reclaim::prune_dangling_images( + &podman_binary(), + podman_reclaim::DEFAULT_PODMAN_MACHINE, + &confirmation_phrase, + &rationale, + now_ms(), + ) +} + +#[cfg(not(coverage))] +#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] +#[tauri::command(async)] +pub fn judge_brew_cleanup( + app: AppHandle, + state: State, +) -> Result { + let plan = brew_cleanup::plan(now_ms())?; + + #[cfg(feature = "llm-engine")] + { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + if !model_status_for(&model_file_path(&dir)).present { + return Err("brew-cleanup-llm-model-unavailable".into()); + } + let mut guard = state + .engine + .lock() + .map_err(|_| "brew-cleanup-llm-engine-lock-poisoned".to_string())?; + if guard.is_none() { + let engine = crate::llm::LlamaEngine::new(&model_file_path(&dir)) + .map_err(|_| "brew-cleanup-llm-engine-init-failed".to_string())?; + *guard = Some(engine); + } + let engine = guard + .as_ref() + .ok_or_else(|| "brew-cleanup-llm-engine-unavailable".to_string())?; + let judgment = brew_cleanup::judge(engine, &plan, now_ms()); + let mut judgment = judgment; + judgment.calibration = state + .judge_calibration + .lock() + .map_err(|_| "brew-cleanup-calibration-lock-poisoned".to_string())? + .as_ref() + .filter(|calibration| calibration.judgment_id == judgment.judgment_id) + .cloned(); + drop(guard); + *state + .brew_cleanup_judgment + .lock() + .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())? = + (judgment.verdict == crate::llm::Verdict::Safe).then_some(judgment.clone()); + return Ok(judgment); + } + + #[cfg(not(feature = "llm-engine"))] + { + let _ = (app, state); + Err("brew-cleanup-llm-engine-disabled".into()) + } +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn validate_judge_calibration( + evidence: crate::judge_calibration::JudgeCalibrationEvidence, + state: State, +) -> Result { + let result = crate::judge_calibration::validate(&evidence)?; + *state + .judge_calibration + .lock() + .map_err(|_| "judge-calibration-lock-poisoned".to_string())? = Some(result.clone()); + if let Some(judgment) = state + .brew_cleanup_judgment + .lock() + .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())? + .as_mut() + .filter(|judgment| judgment.judgment_id == result.judgment_id) + { + judgment.calibration = Some(result.clone()); + } + Ok(result) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn execute_brew_cleanup( + app: AppHandle, + state: State, + plan_fingerprint: String, + judgment_id: String, + confirmation_phrase: String, + rationale: String, +) -> Result { + if !valid_brew_fingerprint(&plan_fingerprint) || !valid_brew_fingerprint(&judgment_id) { + return Err("brew-cleanup-fingerprint-invalid".into()); + } + if !valid_brew_rationale(&rationale) { + return Err("brew-cleanup-rationale-invalid".into()); + } + let plan = brew_cleanup::plan(now_ms())?; + if plan.plan_fingerprint != plan_fingerprint { + return Err("brew-cleanup-plan-stale".into()); + } + if plan.approval_phrase() != confirmation_phrase { + return Err("brew-cleanup-confirmation-mismatch".into()); + } + + let mut stored = state + .brew_cleanup_judgment + .lock() + .map_err(|_| "brew-cleanup-judgment-lock-poisoned".to_string())?; + let judgment = stored + .as_ref() + .ok_or_else(|| "brew-cleanup-llm-judgment-missing".to_string())? + .clone(); + if judgment.judgment_id != judgment_id + || judgment.plan_fingerprint != plan_fingerprint + || judgment.exact_approval_phrase != plan.exact_approval_phrase + || judgment.verdict != crate::llm::Verdict::Safe + || !judgment.has_successful_calibration() + || now_ms().saturating_sub(judgment.judged_at_ms) > brew_cleanup::MAX_JUDGMENT_AGE_MS + { + return Err("brew-cleanup-llm-judgment-stale-or-not-safe".into()); + } + + let executed_at_ms = now_ms(); + let mut execution = match brew_cleanup::execute(&plan, &judgment, executed_at_ms) { + Ok(execution) => execution, + Err(error) => { + *stored = None; + drop(stored); + return Err(error); + } + }; + *stored = None; + drop(stored); + + let audit = brew_cleanup::BrewCleanupAuditRecord { + schema_version: brew_cleanup::SCHEMA_VERSION, + plan, + judgment_id: judgment.judgment_id, + verdict: judgment.verdict, + reason: judgment.reason, + model_name: judgment.model_name, + judged_at_ms: judgment.judged_at_ms, + executed_at_ms, + approved_by: local_human_reviewer(), + command: execution.command.clone(), + status_code: execution.status_code, + stdout: execution.stdout.clone(), + stderr: execution.stderr.clone(), + output_truncated: execution.output_truncated, + rationale, + }; + let audit_result = (|| -> Result { + use tauri::Manager; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + brew_cleanup::write_audit_record(&app_data_dir, &audit) + })(); + match audit_result { + Ok(path) => execution.record_path = Some(path.to_string_lossy().into_owned()), + Err(error) => execution.record_error = Some(error), + } + Ok(execution) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn list_cache_candidates() -> Result, String> { + let bases = rules::BaseDirs::from_env().ok_or("환경변수에서 기본 경로를 찾지 못함")?; + Ok(rules::cache_candidates(&bases)) +} + +#[cfg(not(coverage))] +fn clean_regenerable_caches_inner( + bases: &rules::BaseDirs, + journal_path: &Path, + now_ms: u64, +) -> Vec { + crate::cache_cleanup::clean_regenerable_caches_inner(bases, journal_path, now_ms) +} + +/// Move only observed, regenerable macOS cache children to Trash without an extra approval step. +/// Identity and active-use checks remain mandatory for every child, and the cache roots remain. +#[cfg(not(coverage))] +#[tauri::command] +pub fn clean_regenerable_caches(app: AppHandle) -> Result, String> { + let bases = rules::BaseDirs::from_env().ok_or("환경변수에서 기본 경로를 찾지 못함")?; + let journal_path = journal_file_path(&app)?; + Ok(clean_regenerable_caches_inner( + &bases, + &journal_path, + now_ms(), + )) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn list_dev_artifacts( + root: String, + min_age_days: u64, +) -> Result, String> { + Ok(dev_artifacts::find_artifacts( + Path::new(&root), + min_age_days, + now_ms(), + )) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn clean_paths(paths: Vec, app: AppHandle) -> Result, String> { + let jp = journal_file_path(&app)?; + let pbufs: Vec = paths.into_iter().map(PathBuf::from).collect(); + Ok(clean_paths_inner(&pbufs, &jp, now_ms())) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn clean_dev_artifacts( + root: String, + min_age_days: u64, + artifacts: Vec, + app: AppHandle, +) -> Result, String> { + let jp = journal_file_path(&app)?; + Ok(clean_dev_artifacts_inner( + &artifacts, + Path::new(&root), + min_age_days, + &jp, + now_ms(), + )) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn recent_operations( + limit: usize, + app: AppHandle, +) -> Result, String> { + Ok(safety::journal_recent(&journal_file_path(&app)?, limit)) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn expand_clean_targets(dir: String) -> Vec { + let Some(bases) = rules::BaseDirs::from_env() else { + return Vec::new(); + }; + let d = Path::new(&dir); + if !rules::is_catalog_path(&bases, d) { + return Vec::new(); + } + rules::clean_targets(d) + .into_iter() + .map(|p| p.to_string_lossy().into_owned()) + .collect() +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn find_duplicate_files(root: String) -> Result, String> { + let files = dupes::collect_files(Path::new(&root)); + Ok(dupes::find_duplicates(files, 4096)) +} + +/// Resolve a real absolute home directory or fail closed. Relative environment values are never +/// accepted as path authority because they would make `~/...` destinations depend on the process +/// working directory. +#[cfg(not(coverage))] +fn resolve_home(app: &AppHandle) -> Result { + use tauri::Manager; + let app_home = app.path().home_dir().ok(); + let home_env = std::env::var_os("HOME").map(PathBuf::from); + let user_profile = std::env::var_os("USERPROFILE").map(PathBuf::from); + #[cfg(windows)] + let drive_home = home_resolution::windows_home_drive_path(); + #[cfg(not(windows))] + let drive_home: Option = None; + + home_resolution::select_absolute_home([app_home, home_env, user_profile, drive_home]) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn list_cloud_roots(app: AppHandle) -> Result, String> { + let home = resolve_home(&app)?; + Ok(cloud::discover_cloud_roots(&home)) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn inspect_cloud_roots(app: AppHandle) -> Result { + let home = resolve_home(&app)?; + Ok(cloud::discover_cloud_roots_report(&home)) +} + +#[cfg(not(coverage))] +fn selected_cloud_root(app: &AppHandle, cloud_root: &str) -> Result { + let home = resolve_home(app)?; + let matches: Vec<_> = cloud::discover_cloud_roots(&home) + .into_iter() + .filter(|candidate| { + cloud::cloud_root_path_matches(Path::new(&candidate.path), Path::new(cloud_root)) + }) + .collect(); + match matches.as_slice() { + [only] => Ok(only.clone()), + [] => Err("탐지된 클라우드 루트가 아님".into()), + _ => Err("정규화 후 클라우드 루트가 여러 개와 일치함".into()), + } +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn plan_icloud_local_copy_eviction( + cloud_root: String, + path: String, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + if selected.provider != cloud::CloudProvider::Icloud { + return Err("icloud-local-eviction-root-required".into()); + } + cloud::validate_cloud_root_readable(&selected)?; + let path = PathBuf::from(path); + tauri::async_runtime::spawn_blocking(move || { + cloud_local_eviction::plan_icloud_local_eviction(&selected, &path, cloud::system_now_ms()) + }) + .await + .map_err(|_| "icloud-local-eviction-plan-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[derive(serde::Serialize)] +pub struct IcloudLocalCopyEvictionOutput { + pub action: &'static str, + pub plan: cloud_local_eviction::IcloudLocalEvictionPlan, + pub approval: cloud_local_eviction::IcloudLocalEvictionApproval, + pub approval_path: String, + pub result: cloud_local_eviction::IcloudLocalEvictionResult, + pub result_path: Option, + pub result_record_error: Option, +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn evict_icloud_local_copy( + cloud_root: String, + path: String, + approved_plan_fingerprint: String, + confirm_plan_fingerprint: String, + rationale: String, + app: AppHandle, +) -> Result { + if approved_plan_fingerprint != confirm_plan_fingerprint { + return Err("icloud-local-eviction-double-confirmation-mismatch".into()); + } + let selected = selected_cloud_root(&app, &cloud_root)?; + if selected.provider != cloud::CloudProvider::Icloud { + return Err("icloud-local-eviction-root-required".into()); + } + cloud::validate_cloud_root_readable(&selected)?; + let path = PathBuf::from(path); + use tauri::Manager; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let record_dir = app_data_dir.join("icloud-local-evictions"); + if record_dir.starts_with(Path::new(&selected.path)) || path.starts_with(&record_dir) { + return Err("icloud-local-eviction-record-dir-overlaps-cloud-data".into()); + } + let approved_by = local_human_reviewer(); + tauri::async_runtime::spawn_blocking(move || { + let record_dir = cloud_local_eviction::prepare_immutable_record_directory( + &app_data_dir, + Path::new(&selected.path), + "icloud-local-evictions", + )?; + let plan = cloud_local_eviction::plan_icloud_local_eviction( + &selected, + &path, + cloud::system_now_ms(), + )?; + let approval = cloud_local_eviction::approve_icloud_local_eviction( + &plan, + &approved_plan_fingerprint, + cloud::system_now_ms(), + &approved_by, + &rationale, + )?; + let approval_path = cloud_local_eviction::write_immutable_record( + &record_dir, + &format!("{}.approval.json", approval.approval_id), + &approval, + )?; + let result = cloud_local_eviction::execute_icloud_local_eviction( + &selected, + &plan, + &approval, + &confirm_plan_fingerprint, + cloud::system_now_ms(), + )?; + let result_record = cloud_local_eviction::write_immutable_record( + &record_dir, + &format!("{}.result.json", result.result_id), + &result, + ); + let (result_path, result_record_error) = match result_record { + Ok(path) => (Some(path.to_string_lossy().into_owned()), None), + Err(error) => (None, Some(error)), + }; + Ok(IcloudLocalCopyEvictionOutput { + action: "evict-icloud-local-copy", + plan, + approval, + approval_path: approval_path.to_string_lossy().into_owned(), + result, + result_path, + result_record_error, + }) + }) + .await + .map_err(|_| "icloud-local-eviction-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn plan_stale_git_worktrees( + repository_root: String, + retention_references: Vec, +) -> Result { + tauri::async_runtime::spawn_blocking(move || { + git_worktree::audit_git_worktrees( + Path::new(&repository_root), + &retention_references, + git_worktree::GitWorktreeAuditOptions::default(), + cloud::system_now_ms(), + ) + }) + .await + .map_err(|_| "git-worktree-audit-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[derive(serde::Serialize)] +pub struct StaleGitWorktreeRemovalOutput { + pub action: &'static str, + pub report: git_worktree::GitWorktreeAuditReport, + pub approval: git_worktree::GitWorktreeRemovalApproval, + pub approval_path: String, + pub result: git_worktree::GitWorktreeRemovalResult, + pub result_path: Option, + pub result_record_error: Option, +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn remove_stale_git_worktrees( + repository_root: String, + retention_references: Vec, + approved_removal_plan_fingerprint: String, + confirmation_exact_approval_phrase: String, + rationale: String, + app: AppHandle, +) -> Result { + use tauri::Manager; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let approved_by = local_human_reviewer(); + tauri::async_runtime::spawn_blocking(move || { + let options = git_worktree::GitWorktreeAuditOptions::default(); + let report = git_worktree::audit_git_worktrees( + Path::new(&repository_root), + &retention_references, + options, + cloud::system_now_ms(), + )?; + if report.removal_plan_fingerprint != approved_removal_plan_fingerprint { + return Err("git-worktree-removal-plan-fingerprint-mismatch".into()); + } + let approval = git_worktree::approve_stale_worktree_removal( + &report, + &confirmation_exact_approval_phrase, + cloud::system_now_ms(), + &approved_by, + &rationale, + )?; + let record_dir = git_worktree::prepare_worktree_record_directory( + &app_data_dir, + &report, + "git-worktree-removals", + )?; + let approval_path = git_worktree::write_immutable_worktree_record( + &record_dir, + &format!("{}.approval.json", approval.approval_id), + &approval, + )?; + let result = git_worktree::execute_stale_worktree_removal( + &report, + &approval, + &confirmation_exact_approval_phrase, + options, + cloud::system_now_ms(), + )?; + let result_record = git_worktree::write_immutable_worktree_record( + &record_dir, + &format!("{}.result.json", result.result_id), + &result, + ); + let (result_path, result_record_error) = match result_record { + Ok(path) => (Some(path.to_string_lossy().into_owned()), None), + Err(error) => (None, Some(error)), + }; + Ok(StaleGitWorktreeRemovalOutput { + action: "remove-stale-git-worktrees", + report, + approval, + approval_path: approval_path.to_string_lossy().into_owned(), + result, + result_path, + result_record_error, + }) + }) + .await + .map_err(|_| "git-worktree-removal-task-failed".to_string())? +} + +/// Build a bounded, path-free ontology plan for uninstalled macOS application data. +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn plan_orphan_cleanup(app: AppHandle) -> Result { + let home = resolve_home(&app)?; + tauri::async_runtime::spawn_blocking(move || orphan::plan(&home, now_ms())) + .await + .map_err(|_| "orphan-plan-task-failed".to_string())? +} + +/// Re-plan immediately before moving only fully scanned, unused cache candidates to OS Trash. +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn clean_orphan_candidates( + plan_fingerprint: String, + requests: Vec, + confirmation_phrase: String, + rationale: String, + app: AppHandle, +) -> Result { + if !valid_brew_fingerprint(&plan_fingerprint) { + return Err("orphan-plan-fingerprint-invalid".into()); + } + let home = resolve_home(&app)?; + let plan = tauri::async_runtime::spawn_blocking({ + let home = home.clone(); + move || orphan::plan(&home, now_ms()) + }) + .await + .map_err(|_| "orphan-clean-plan-task-failed".to_string())??; + if plan.plan_fingerprint != plan_fingerprint { + return Err("orphan-plan-stale".into()); + } + let journal = journal_file_path(&app)?; + tauri::async_runtime::spawn_blocking(move || { + orphan::move_to_trash( + &plan, + &requests, + &confirmation_phrase, + &rationale, + &journal, + now_ms(), + ) + }) + .await + .map_err(|_| "orphan-clean-task-failed".to_string())? +} + +#[cfg(not(coverage))] +fn oauth_connections_path(app: &AppHandle) -> Result { + use tauri::Manager; + app.path() + .app_data_dir() + .map(|directory| provider_oauth::connections_path(&directory)) + .map_err(|_| "app-data-directory-unavailable".to_string()) +} + +#[cfg(not(coverage))] +fn cloud_review_directory(app: &AppHandle) -> Result { + use tauri::Manager; + app.path() + .app_data_dir() + .map(|directory| directory.join("cloud-review-decisions")) + .map_err(|_| "app-data-directory-unavailable".to_string()) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn list_cloud_provider_connections( + app: AppHandle, +) -> Result, String> { + provider_oauth::load_connections(&oauth_connections_path(&app)?) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn list_cloud_review_decisions( + app: AppHandle, +) -> Result, String> { + cloud_review::load_latest_decisions(&cloud_review_directory(&app)?) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn connect_cloud_provider( + cloud_root: String, + client_id: String, + write_access: bool, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + cloud::validate_cloud_root_readable(&selected)?; + if selected.provider == cloud::CloudProvider::Icloud { + return Err("icloud-oauth-not-supported".into()); + } + let pending = provider_oauth::prepare_authorization_with_write_access( + selected.provider, + &client_id, + write_access, + )?; + use tauri_plugin_opener::OpenerExt; + app.opener() + .open_url(pending.authorization_url(), None::<&str>) + .map_err(|_| "oauth-system-browser-open-failed".to_string())?; + let connection_path = oauth_connections_path(&app)?; + let connected_at_ms = cloud::system_now_ms(); + tauri::async_runtime::spawn_blocking(move || { + provider_oauth::finish_authorization(pending, &selected, &connection_path, connected_at_ms) + }) + .await + .map_err(|_| "provider-oauth-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn disconnect_cloud_provider(cloud_root: String, app: AppHandle) -> Result<(), String> { + let selected = selected_cloud_root(&app, &cloud_root)?; + if selected.provider == cloud::CloudProvider::Icloud { + return Err("icloud-oauth-not-supported".into()); + } + let connection_path = oauth_connections_path(&app)?; + tauri::async_runtime::spawn_blocking(move || { + provider_oauth::disconnect(&connection_path, &selected) + }) + .await + .map_err(|_| "provider-oauth-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn verify_cloud_provider_capacity( + cloud_root: String, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + cloud::validate_cloud_root_readable(&selected)?; + let observed_at_ms = cloud::system_now_ms(); + if selected.provider == cloud::CloudProvider::Icloud { + let result = tauri::async_runtime::spawn_blocking(move || { + provider_capacity::collect_icloud_native_capacity(observed_at_ms) + }) + .await + .map_err(|_| "icloud-native-quota-task-failed".to_string()); + return Ok(match result { + Ok(Ok(snapshot)) => snapshot, + Ok(Err(error)) | Err(error) => provider_capacity::unavailable_capacity_from_error( + cloud::CloudProvider::Icloud, + observed_at_ms, + &error, + ), + }); + } + let provider = selected.provider; + let connection_path = match oauth_connections_path(&app) { + Ok(path) => path, + Err(error) => { + return Ok(provider_capacity::unavailable_capacity_from_error( + provider, + observed_at_ms, + &error, + )) + } + }; + let result = tauri::async_runtime::spawn_blocking(move || { + let access_token = provider_oauth::refreshed_access_token(&connection_path, &selected)?; + provider_capacity::collect_authenticated_capacity( + provider, + access_token.as_str(), + observed_at_ms, + &provider_capacity::FixedHostProviderCapacityClient::default(), + ) + }) + .await + .map_err(|_| "provider-oauth-task-failed".to_string()); + let snapshot = match result { + Ok(Ok(snapshot)) => snapshot, + Ok(Err(error)) | Err(error) => { + provider_capacity::unavailable_capacity_from_error(provider, observed_at_ms, &error) + } + }; + Ok(snapshot) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn inspect_cloud_provider_client_runtime( + cloud_root: String, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + // Runtime observation must remain available while a File Provider root is temporarily + // disconnected; this command reads the fixed provider client state, not the destination. + Ok(provider_client_runtime::collect_provider_client_runtime( + selected.provider, + cloud::system_now_ms(), + )) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn recover_cloud_provider_client( + cloud_root: String, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + // Recovery targets only the verified, fixed desktop client. A disconnected root is the + // condition recovery is meant to repair, so destination readability is not a precondition. + provider_recovery::recover_provider_client(selected.provider, cloud::system_now_ms()) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn inspect_icloud_new_copy_admission( + app: AppHandle, +) -> Result { + let home = resolve_home(&app)?; + let mut report = icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms())?; + if !persist_icloud_health_evidence(&app, &report) { + report + .notices + .push("icloud-sync-health-evidence-persistence-failed".into()); + } + Ok(report) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn inspect_cloud_provider_global_sync( + cloud_root: String, + app: AppHandle, +) -> Result { + let selected = selected_cloud_root(&app, &cloud_root)?; + // The read-only provider dump is the evidence needed to explain an unreadable/disconnected + // root; requiring directory access first would hide the very blocker we need to report. + if selected.provider == cloud::CloudProvider::Icloud { + return Err("provider-global-sync-icloud-specialized".into()); + } + provider_global_sync::inspect_new_copy_admission(selected.provider) +} + +#[cfg(not(coverage))] +struct CloudPlanningOutput { + selected: cloud::CloudRoot, + report: cloud::CloudPlanReport, + icloud_health: Option, + provider_global_sync: Option, +} + +#[cfg(not(coverage))] +fn persist_icloud_health_evidence( + app: &AppHandle, + report: &icloud_sync_health::IcloudSyncHealthReport, +) -> bool { + app.path() + .app_data_dir() + .ok() + .and_then(|app_data_dir| { + icloud_sync_health::write_icloud_sync_health_evidence(&app_data_dir, report).ok() + }) + .is_some() +} + +#[cfg(not(coverage))] +fn attach_pre_copy_evidence_cohort( + report: &mut cloud::CloudPlanReport, + runtime: &provider_client_runtime::ProviderClientRuntimeSnapshot, + health: Option<&icloud_sync_health::IcloudSyncHealthReport>, +) { + let local = report + .local_volume + .as_ref() + .map(|snapshot| cloud::PreCopyEvidenceObservation { + stream: "volume-pressure-evidence".into(), + observed_at_ms: snapshot.observed_at_ms, + evidence_complete: crate::volume_pressure::validate_snapshot(snapshot).is_ok(), + fingerprint: snapshot.evidence_fingerprint.clone(), + }) + .unwrap_or_else(|| cloud::PreCopyEvidenceObservation { + stream: "volume-pressure-evidence".into(), + observed_at_ms: 0, + evidence_complete: false, + fingerprint: "0".repeat(64), + }); + let runtime = cloud::PreCopyEvidenceObservation { + stream: "provider-client-runtime-evidence".into(), + observed_at_ms: runtime.observed_at_ms, + evidence_complete: runtime.process_observation_complete, + fingerprint: runtime.snapshot_fingerprint_sha256.clone(), + }; + let health = health + .and_then(|value| icloud_sync_health::health_evidence_snapshot_from_report(value).ok()) + .map(|snapshot| cloud::PreCopyEvidenceObservation { + stream: "icloud-sync-health-evidence".into(), + observed_at_ms: snapshot.observed_at_ms, + evidence_complete: snapshot.evidence_complete, + fingerprint: snapshot.evidence_fingerprint_sha256, + }) + .unwrap_or_else(|| cloud::PreCopyEvidenceObservation { + stream: "icloud-sync-health-evidence".into(), + observed_at_ms: 0, + evidence_complete: false, + fingerprint: "0".repeat(64), + }); + let cohort = cloud::compare_pre_copy_evidence(vec![local, runtime, health]); + if cohort.complete { + report.notices.push("pre-copy-evidence-cohort-complete".into()); + } else { + report.notices.push("pre-copy-evidence-cohort-blocked".into()); + report.notices.extend(cohort.blockers.iter().cloned()); + } + report.pre_copy_evidence = Some(cohort); +} + +#[cfg(not(coverage))] +fn cloud_plan_for_inputs( + root: &str, + cloud_root: &str, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + app: &AppHandle, +) -> Result { + let root_path = PathBuf::from(root); + cloud::validate_source_root_readable(&root_path)?; + let home = resolve_home(app)?; + let discovered = cloud::discover_cloud_roots(&home); + let selected = discovered + .iter() + .find(|candidate| candidate.path == cloud_root) + .cloned() + .ok_or_else(|| "탐지된 클라우드 루트가 아님".to_string())?; + cloud::validate_cloud_root_readable(&selected)?; + let excluded: Vec = discovered + .iter() + .map(|root| PathBuf::from(&root.path)) + .collect(); + if excluded.iter().any(|cloud| root_path.starts_with(cloud)) { + return Err("이미 클라우드 안에 있는 경로는 오프로드 원본으로 사용할 수 없음".into()); + } + let collection = cloud::collect_archive_files_bounded( + &root_path, + &excluded, + cloud::ARCHIVE_SCAN_MAX_ENTRIES, + cloud::ARCHIVE_SCAN_MAX_DURATION, + ); + let observed_at_ms = cloud::system_now_ms(); + let capacity_snapshot = match authenticated_capacity_snapshot(&selected, app, observed_at_ms) { + Ok(snapshot) => snapshot, + Err(error) => provider_capacity::unavailable_capacity_from_error( + selected.provider, + observed_at_ms, + &error, + ), + }; + let selected = + provider_capacity::root_with_verified_capacity_scope(&selected, &capacity_snapshot)?; + let snapshot = cloud::prepare_cloud_archive_source_from_collection( + &collection, + &root_path, + observed_at_ms, + cloud::CloudPlanOptions { + min_size_bytes: min_size_mib.saturating_mul(1024 * 1024), + min_age_days, + limit: limit.clamp(1, 1_000), + }, + ); + let mut report = cloud::plan_cloud_archive_from_snapshot(&snapshot, &selected); + if let Some(local_volume) = report.local_volume.as_ref() { + let evidence_persisted = app + .path() + .app_data_dir() + .map_err(|error| error.to_string()) + .and_then(|app_data_dir| { + crate::volume_pressure::write_snapshot_evidence(&app_data_dir, local_volume) + .map(|_| ()) + }) + .is_ok(); + if !evidence_persisted { + report + .notices + .push("local-volume-evidence-persistence-failed".into()); + } + } + attach_capacity_assessment(&mut report, capacity_snapshot)?; + let runtime = provider_client_runtime::collect_provider_client_runtime( + selected.provider, + cloud::system_now_ms(), + ); + let runtime_evidence_persisted = app + .path() + .app_data_dir() + .ok() + .and_then(|app_data_dir| { + provider_client_runtime::write_runtime_snapshot_evidence(&app_data_dir, &runtime).ok() + }) + .is_some(); + if !runtime_evidence_persisted { + report + .notices + .push("provider-client-runtime-evidence-persistence-failed".into()); + } + provider_client_runtime::attach_runtime_notice(&mut report.notices, &runtime); + let native_client_mode = report.capacity.as_ref().is_some_and(|assessment| { + provider_capacity::native_personal_client_copy_capacity_exception( + selected.provider, + selected.account_scope, + runtime.copy_prerequisite_met, + &assessment.snapshot, + ) + }); + if native_client_mode { + report.notices.push("native-client-copy-capacity-unverified".into()); + } + let (icloud_health, provider_global_sync) = if selected.provider == cloud::CloudProvider::Icloud + { + let health = icloud_sync_health::inspect_new_copy_admission(&home, cloud::system_now_ms()).ok(); + if let Some(health) = health.as_ref() { + if !persist_icloud_health_evidence(app, health) { + report + .notices + .push("icloud-sync-health-evidence-persistence-failed".into()); + } + } + icloud_sync_health::attach_new_copy_admission_notice(&mut report.notices, health.as_ref()); + (health, None) + } else { + let global_sync = provider_global_sync::inspect_new_copy_admission(selected.provider).ok(); + provider_global_sync::attach_new_copy_admission_notice( + &mut report.notices, + global_sync.as_ref(), + ); + (None, global_sync) + }; + if selected.provider == cloud::CloudProvider::Icloud { + attach_pre_copy_evidence_cohort(&mut report, &runtime, icloud_health.as_ref()); + } + Ok(CloudPlanningOutput { + selected, + report, + icloud_health, + provider_global_sync, + }) +} + +#[cfg(not(coverage))] +fn authenticated_capacity_snapshot( + selected: &cloud::CloudRoot, + app: &AppHandle, + observed_at_ms: u64, +) -> Result { + if selected.provider == cloud::CloudProvider::Icloud { + return provider_capacity::collect_icloud_native_capacity(observed_at_ms); + } + let access_token = + provider_oauth::refreshed_access_token(&oauth_connections_path(app)?, selected)?; + provider_capacity::collect_authenticated_capacity( + selected.provider, + access_token.as_str(), + observed_at_ms, + &provider_capacity::FixedHostProviderCapacityClient::default(), + ) +} + +#[cfg(not(coverage))] +fn attach_capacity_assessment( + report: &mut cloud::CloudPlanReport, + snapshot: provider_capacity::CloudCapacitySnapshot, +) -> Result<(), String> { + if snapshot.provider != report.cloud_root.provider + || snapshot.account_scope.is_some_and(|scope| { + report.cloud_root.account_scope != cloud::CloudAccountScope::Unknown + && report.cloud_root.account_scope != scope + }) + { + return Err("cloud-capacity-root-binding-mismatch".into()); + } + let largest_candidate_bytes = report + .candidates + .iter() + .filter(|candidate| candidate.blocked_reason.is_none()) + .map(|candidate| candidate.bytes) + .max() + .unwrap_or_default(); + let assessment = provider_capacity::assess_capacity( + snapshot, + report.potentially_reclaimable_bytes, + largest_candidate_bytes, + provider_capacity::DEFAULT_CAPACITY_RESERVE_BYTES, + ); + report + .notices + .retain(|notice| notice != "cloud-quota-unverified"); + report.notices.push( + match assessment.can_fit { + Some(true) + if assessment.snapshot.evidence_kind + == provider_capacity::CapacityEvidenceKind::ProviderNativeStatus => + { + "cloud-quota-provider-native-verified" + } + Some(true) => "cloud-quota-provider-api-verified", + Some(false) => "cloud-quota-insufficient-or-blocked", + None => "cloud-quota-unavailable", + } + .into(), + ); + report.capacity = Some(assessment); + Ok(()) +} + +#[cfg(not(coverage))] +fn require_capacity_for_copy( + candidate: &cloud::CloudCandidate, + snapshot: &provider_capacity::CloudCapacitySnapshot, + allow_native_personal_client_exception: bool, +) -> Result<(), String> { + let assessment = provider_capacity::assess_capacity( + snapshot.clone(), + candidate.bytes, + candidate.bytes, + provider_capacity::DEFAULT_CAPACITY_RESERVE_BYTES, + ); + if assessment.can_fit == Some(true) + || (allow_native_personal_client_exception + && provider_capacity::native_personal_client_copy_capacity_exception( + candidate.provider, + candidate.destination_account_scope, + true, + snapshot, + )) + { + Ok(()) + } else { + Err(if assessment.blockers.is_empty() { + "cloud-capacity-verification-required".into() + } else { + assessment.blockers.join(",") + }) + } +} + +#[cfg(not(coverage))] +fn require_local_copy_headroom(candidate: &cloud::CloudCandidate) -> Result<(), String> { + let snapshot = crate::volume_pressure::snapshot_volume( + Path::new(&candidate.src), + cloud::system_now_ms(), + )?; + if crate::volume_pressure::has_copy_headroom(snapshot.available_bytes, candidate.bytes) { + Ok(()) + } else { + Err("local-volume-headroom-insufficient".into()) + } +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn plan_cloud_archive( + root: String, + cloud_root: String, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + app: AppHandle, +) -> Result { + tauri::async_runtime::spawn_blocking(move || { + let planning = + cloud_plan_for_inputs(&root, &cloud_root, min_size_mib, min_age_days, limit, &app)?; + Ok(planning.report.into()) + }) + .await + .map_err(|_| "cloud-plan-task-failed".to_string())? +} + +#[cfg(not(coverage))] +fn local_human_reviewer() -> String { + let raw = std::env::var(if cfg!(windows) { "USERNAME" } else { "USER" }) + .unwrap_or_else(|_| "unknown".into()); + let bounded: String = raw + .chars() + .filter(|character| { + character.is_ascii_alphanumeric() || matches!(character, '-' | '_' | '.') + }) + .take(64) + .collect(); + format!( + "human:local:{}", + if bounded.is_empty() { + "unknown" + } else { + &bounded + } + ) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn review_cloud_candidate( + root: String, + cloud_root: String, + metadata_fingerprint: String, + review_fingerprint: String, + disposition: cloud_review::CloudReviewDisposition, + rationale: String, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + app: AppHandle, + state: State<'_, AppState>, +) -> Result { + for fingerprint in [&metadata_fingerprint, &review_fingerprint] { + if fingerprint.len() != 64 || !fingerprint.bytes().all(|byte| byte.is_ascii_hexdigit()) { + return Err("cloud-review-fingerprint-invalid".into()); + } + } + let cloud_review = Arc::clone(&state.cloud_review); + tauri::async_runtime::spawn_blocking(move || { + let _guard = cloud_review + .lock() + .map_err(|_| "cloud-review-lock-poisoned".to_string())?; + let planning = + cloud_plan_for_inputs(&root, &cloud_root, min_size_mib, min_age_days, limit, &app)?; + let matches: Vec<_> = planning + .report + .candidates + .iter() + .filter(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) + .collect(); + let candidate = match matches.as_slice() { + [only] => *only, + [] => return Err("fresh-plan-candidate-not-found".into()), + _ => return Err("fresh-plan-candidate-ambiguous".into()), + }; + if candidate.review_fingerprint != review_fingerprint { + return Err("fresh-plan-review-fingerprint-mismatch".into()); + } + let decision = cloud_review::create_attributed_decision( + candidate, + disposition, + cloud::system_now_ms(), + &local_human_reviewer(), + &rationale, + )?; + cloud_review::write_immutable_decision(&cloud_review_directory(&app)?, &decision)?; + Ok(decision) + }) + .await + .map_err(|_| "cloud-review-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[derive(serde::Serialize)] +pub struct CloudCopyOutput { + pub action: &'static str, + pub goal_state: cloud_transfer::CloudOffloadGoalState, + pub goal_status: Option, + pub receipt: cloud_transfer::CloudCopyReceipt, + pub receipt_path: String, + pub adr_path: Option, + pub goal_path: Option, + pub projection_warnings: Vec, + pub provider_object_id: Option, +} + +#[cfg(not(coverage))] +fn create_cloud_candidate_receipt( + root: &str, + cloud_root: &str, + metadata_fingerprint: &str, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: &str, + approval_rationale: &str, + app: &AppHandle, + adopt_existing: bool, +) -> Result { + use tauri::Manager; + if metadata_fingerprint.len() != 64 + || !metadata_fingerprint + .bytes() + .all(|byte| byte.is_ascii_hexdigit()) + { + return Err("metadata-fingerprint-invalid".into()); + } + let planning = + cloud_plan_for_inputs(root, cloud_root, min_size_mib, min_age_days, limit, app)?; + let CloudPlanningOutput { + selected, + report, + icloud_health, + provider_global_sync, + } = planning; + let matches: Vec<_> = report + .candidates + .iter() + .filter(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) + .collect(); + let candidate = match matches.as_slice() { + [only] => *only, + [] => return Err("fresh-plan-candidate-not-found".into()), + _ => return Err("fresh-plan-candidate-ambiguous".into()), + }; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_dir = app_data_dir.join("cloud-receipts"); + let review_decision = if candidate.requires_review { + cloud_review::load_latest_decisions(&cloud_review_directory(&app)?)? + .into_iter() + .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) + } else { + None + }; + let action = if adopt_existing { + cloud_transfer::CloudCopyApprovalAction::AdoptExistingCopy + } else { + cloud_transfer::CloudCopyApprovalAction::CopyOnly + }; + let action_at_ms = cloud::system_now_ms(); + let copy_approval = cloud_transfer::create_cloud_copy_approval( + candidate, + &selected, + action, + action_at_ms, + &local_human_reviewer(), + approval_rationale.trim(), + exact_confirmation_phrase, + )?; + if !adopt_existing { + // Native File Provider copies can materialize placeholders and stage more than the source + // bytes. Re-check local headroom immediately before any mutation; adoption only verifies + // an existing destination and does not create a local staging file. + require_local_copy_headroom(candidate)?; + let runtime = provider_client_runtime::require_provider_client_runtime( + selected.provider, + cloud::system_now_ms(), + )?; + if selected.provider == cloud::CloudProvider::Icloud { + cloud::require_pre_copy_evidence_cohort(report.pre_copy_evidence.as_ref())?; + let health = icloud_health + .as_ref() + .ok_or_else(|| "icloud-new-copy-admission-evidence-unavailable".to_string())?; + icloud_sync_health::require_new_copy_admission(&health)?; + } else { + let global_sync = provider_global_sync + .as_ref() + .ok_or_else(|| "provider-global-sync-evidence-unavailable".to_string())?; + provider_global_sync::require_new_copy_admission(global_sync)?; + } + let snapshot = report + .capacity + .as_ref() + .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; + let native_client_mode = + provider_capacity::native_personal_client_copy_capacity_exception( + selected.provider, + selected.account_scope, + runtime.copy_prerequisite_met, + &snapshot.snapshot, + ); + require_capacity_for_copy(candidate, &snapshot.snapshot, native_client_mode)?; + } + let (receipt, receipt_path) = if adopt_existing { + cloud_transfer::adopt_existing_cloud_copy_with_approval( + candidate, + &selected, + &receipt_dir, + review_decision.as_ref(), + ©_approval, + )? + } else { + cloud_transfer::prepare_cloud_copy_with_approval( + candidate, + &selected, + &receipt_dir, + review_decision.as_ref(), + ©_approval, + )? + }; + let mut projection_warnings = Vec::new(); + let (adr_path, goal_path) = match app.path().app_data_dir() { + Ok(app_data_dir) => { + let projection_updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, projection_updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, projection_updated_at_ms); + let (adr_path, goal_path, warnings) = cloud_adr::write_projection_pair( + &app_data_dir.join("cloud-adr"), + &adr, + &app_data_dir.join("cloud-goals"), + &goal, + ); + projection_warnings.extend(warnings); + ( + adr_path.map(|path| path.to_string_lossy().into_owned()), + goal_path.map(|path| path.to_string_lossy().into_owned()), + ) + } + Err(_) => { + projection_warnings.push("app-data-directory-unavailable".to_string()); + (None, None) + } + }; + let goal_status = cloud_adr::read_goal_status( + &app_data_dir.join("cloud-goals"), + &receipt.receipt_id, + ) + .ok() + .flatten(); + Ok(CloudCopyOutput { + action: if adopt_existing { + "adopt-existing-copy" + } else { + "copy-only" + }, + goal_state: cloud_transfer::CloudOffloadGoalState::CopyVerified, + goal_status, + receipt, + receipt_path: receipt_path.to_string_lossy().into_owned(), + adr_path, + goal_path, + projection_warnings, + provider_object_id: None, + }) +} + +#[cfg(not(coverage))] +fn create_cloud_candidate_provider_api_receipt( + root: &str, + cloud_root: &str, + metadata_fingerprint: &str, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: &str, + approval_rationale: &str, + app: &AppHandle, +) -> Result { + use tauri::Manager; + if metadata_fingerprint.len() != 64 + || !metadata_fingerprint + .bytes() + .all(|byte| byte.is_ascii_hexdigit()) + { + return Err("metadata-fingerprint-invalid".into()); + } + let planning = + cloud_plan_for_inputs(root, cloud_root, min_size_mib, min_age_days, limit, app)?; + let CloudPlanningOutput { + selected, + report, + .. + } = planning; + if selected.provider == cloud::CloudProvider::Icloud { + return Err("provider-api-icloud-unsupported".into()); + } + let candidate = report + .candidates + .iter() + .find(|candidate| candidate.metadata_fingerprint == metadata_fingerprint) + .ok_or_else(|| "fresh-plan-candidate-not-found".to_string())?; + if report + .candidates + .iter() + .filter(|entry| entry.metadata_fingerprint == metadata_fingerprint) + .count() + != 1 + { + return Err("fresh-plan-candidate-ambiguous".into()); + } + let connection_path = oauth_connections_path(app)?; + let connection = provider_oauth::connection_for_root( + &provider_oauth::load_connections(&connection_path)?, + &selected, + )?; + if !provider_oauth::scope_allows_write(&connection) { + return Err("provider-oauth-write-scope-required".into()); + } + let capacity = report + .capacity + .as_ref() + .ok_or_else(|| "cloud-capacity-verification-required".to_string())?; + require_capacity_for_copy(candidate, &capacity.snapshot, false)?; + let review_decision = if candidate.requires_review { + cloud_review::load_latest_decisions(&cloud_review_directory(app)?)? + .into_iter() + .find(|decision| decision.candidate_fingerprint == candidate.metadata_fingerprint) + } else { + None + }; + let copy_approval = cloud_transfer::create_cloud_copy_approval( + candidate, + &selected, + cloud_transfer::CloudCopyApprovalAction::CopyOnly, + cloud::system_now_ms(), + &local_human_reviewer(), + approval_rationale.trim(), + exact_confirmation_phrase, + )?; + let copied_at_ms = cloud::system_now_ms(); + let (receipt, source_hashes) = cloud_transfer::prepare_provider_api_source_receipt( + candidate, + &selected, + review_decision.as_ref(), + ©_approval, + copied_at_ms, + )?; + let access_token = provider_oauth::refreshed_access_token(&connection_path, &selected)?; + let upload = provider_api_write::upload_file( + selected.provider, + Path::new(&selected.path), + Path::new(&candidate.dst), + Path::new(&candidate.src), + candidate.bytes, + access_token.as_str(), + )?; + if let Err(error) = cloud_transfer::verify_provider_api_source_unchanged(candidate, &source_hashes) + { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => format!( + "{error},provider-api-upload-cleanup-failed:{cleanup_error}" + ), + }); + } + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_dir = app_data_dir.join("cloud-receipts"); + let receipt_path = match cloud_transfer::write_provider_api_receipt(&receipt, &receipt_dir) { + Ok(path) => path, + Err(error) => { + let cleanup = provider_api_write::delete_uploaded_object( + selected.provider, + &upload.object_id, + access_token.as_str(), + ); + return Err(match cleanup { + Ok(()) => error, + Err(cleanup_error) => format!( + "{error},provider-api-upload-cleanup-failed:{cleanup_error}" + ), + }); + } + }; + let mut projection_warnings = Vec::new(); + let (mut adr_path, mut goal_path) = match app.path().app_data_dir() { + Ok(app_data_dir) => { + let updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::initial_adr_snapshot(&receipt, updated_at_ms); + let goal = cloud_adr::initial_goal_snapshot(&receipt, updated_at_ms); + let (adr_path, goal_path, warnings) = cloud_adr::write_projection_pair( + &app_data_dir.join("cloud-adr"), + &adr, + &app_data_dir.join("cloud-goals"), + &goal, + ); + projection_warnings.extend(warnings); + ( + adr_path.map(|path| path.to_string_lossy().into_owned()), + goal_path.map(|path| path.to_string_lossy().into_owned()), + ) + } + Err(_) => { + projection_warnings.push("app-data-directory-unavailable".to_string()); + (None, None) + } + }; + let mut goal_state = cloud_transfer::CloudOffloadGoalState::CopyVerified; + let home = resolve_home(app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); + let attestation_object_id = (selected.provider == cloud::CloudProvider::GoogleDrive) + .then(|| upload.object_id.clone()); + match collect_cloud_attestation_for_receipt( + &receipt, + attestation_object_id, + &app_data_dir.join("cloud-provider-evidence"), + &app_data_dir.join("cloud-adr"), + &app_data_dir.join("cloud-goals"), + &connection_path, + &cloud_roots, + true, + ) { + Ok(attestation) => { + goal_state = attestation.goal_state; + adr_path = attestation.adr_path; + goal_path = attestation.goal_path; + projection_warnings.extend(attestation.projection_warnings); + } + Err(error) => { + let provider_blocker = stable_reconciliation_error(&error); + let projection_outcome = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &app_data_dir.join("cloud-adr"), + &app_data_dir.join("cloud-goals"), + cloud::system_now_ms(), + &provider_blocker, + ); + if let Some(path) = projection_outcome.adr_path { + adr_path = Some(path.to_string_lossy().into_owned()); + } + if let Some(path) = projection_outcome.goal_path { + goal_path = Some(path.to_string_lossy().into_owned()); + } + projection_warnings.extend(projection_outcome.warnings); + projection_warnings.push(format!( + "provider-attestation-incomplete:{provider_blocker}" + )); + } + } + let goal_status = cloud_adr::read_goal_status( + &app_data_dir.join("cloud-goals"), + &receipt.receipt_id, + ) + .ok() + .flatten(); + Ok(CloudCopyOutput { + action: "copy-only", + goal_state, + goal_status, + receipt, + receipt_path: receipt_path.to_string_lossy().into_owned(), + adr_path, + goal_path, + projection_warnings, + provider_object_id: Some(upload.object_id), + }) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn copy_cloud_candidate( + root: String, + cloud_root: String, + metadata_fingerprint: String, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: String, + approval_rationale: String, + app: AppHandle, + state: State<'_, AppState>, +) -> Result { + let cloud_review = Arc::clone(&state.cloud_review); + tauri::async_runtime::spawn_blocking(move || { + let _guard = cloud_review + .lock() + .map_err(|_| "cloud-review-lock-poisoned".to_string())?; + create_cloud_candidate_receipt( + &root, + &cloud_root, + &metadata_fingerprint, + min_size_mib, + min_age_days, + limit, + &exact_confirmation_phrase, + &approval_rationale, + &app, + false, + ) + }) + .await + .map_err(|_| "cloud-copy-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn copy_cloud_candidate_via_provider_api( + root: String, + cloud_root: String, + metadata_fingerprint: String, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: String, + approval_rationale: String, + app: AppHandle, + state: State<'_, AppState>, +) -> Result { + let cloud_review = Arc::clone(&state.cloud_review); + tauri::async_runtime::spawn_blocking(move || { + let _guard = cloud_review + .lock() + .map_err(|_| "cloud-review-lock-poisoned".to_string())?; + create_cloud_candidate_provider_api_receipt( + &root, + &cloud_root, + &metadata_fingerprint, + min_size_mib, + min_age_days, + limit, + &exact_confirmation_phrase, + &approval_rationale, + &app, + ) + }) + .await + .map_err(|_| "cloud-provider-api-copy-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn adopt_existing_cloud_candidate( + root: String, + cloud_root: String, + metadata_fingerprint: String, + min_size_mib: u64, + min_age_days: u64, + limit: usize, + exact_confirmation_phrase: String, + approval_rationale: String, + app: AppHandle, + state: State<'_, AppState>, +) -> Result { + let cloud_review = Arc::clone(&state.cloud_review); + tauri::async_runtime::spawn_blocking(move || { + let _guard = cloud_review + .lock() + .map_err(|_| "cloud-review-lock-poisoned".to_string())?; + create_cloud_candidate_receipt( + &root, + &cloud_root, + &metadata_fingerprint, + min_size_mib, + min_age_days, + limit, + &exact_confirmation_phrase, + &approval_rationale, + &app, + true, + ) + }) + .await + .map_err(|_| "cloud-adopt-existing-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[derive(serde::Serialize)] +pub struct CloudAttestationOutput { + pub goal_state: cloud_transfer::CloudOffloadGoalState, + pub goal_status: Option, + pub evidence: cloud_transfer::ProviderSyncEvidence, + pub assessment: provider_sync::ProviderSyncTimelinessAssessment, + pub evidence_record: provider_evidence::ProviderSyncEvidenceRecord, + pub evidence_path: String, + pub adr_path: Option, + pub goal_path: Option, + pub projection_warnings: Vec, + pub permit: Option, + pub blockers: Vec, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +pub struct CloudReceiptReconciliationEntry { + pub receipt_id: Option, + pub provider: Option, + pub goal_status: Option, + pub goal_state: Option, + pub provider_sync_state: Option, + pub eviction_permit: bool, + pub blockers: Vec, + pub error: Option, +} + +#[cfg(not(coverage))] +#[derive(Debug, serde::Serialize)] +pub struct CloudReceiptReconciliationOutput { + pub schema_version: u32, + pub observed_at_ms: u64, + pub receipts_seen: u64, + pub attested_count: u64, + pub pending_count: u64, + pub eviction_ready_count: u64, + pub error_count: u64, + pub provider_evidence_written: u64, + pub unprocessed_count: u64, + pub incomplete_reconciliation: bool, + pub entries: Vec, + pub cloud_write_executed: bool, + pub source_eviction_authorized: bool, +} + +#[cfg(not(coverage))] +const MAX_CLOUD_RECEIPT_RECONCILIATION_ENTRIES: usize = 10_000; +#[cfg(not(coverage))] +const MAX_CLOUD_RECEIPTS_PER_RECONCILIATION: usize = 256; +#[cfg(not(coverage))] +const CLOUD_RECONCILIATION_MAX_DURATION: Duration = Duration::from_secs(30); + +#[cfg(not(coverage))] +fn stable_reconciliation_error(error: &str) -> String { + let token = error.split(',').next().unwrap_or_default(); + if !token.is_empty() + && token.len() <= 128 + && token + .bytes() + .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-') + { + token.to_string() + } else { + "provider-attestation-failed".into() + } +} + +#[cfg(not(coverage))] +fn reconcile_cloud_receipts_inner( + receipt_dir: &Path, + evidence_dir: &Path, + adr_dir: &Path, + goal_dir: &Path, + connection_path: &Path, + cloud_roots: &[cloud::CloudRoot], +) -> Result { + let reconciliation_started = Instant::now(); + let receipt_metadata = match std::fs::symlink_metadata(receipt_dir) { + Ok(metadata) => metadata, + Err(error) if error.kind() == std::io::ErrorKind::NotFound => { + return Ok(CloudReceiptReconciliationOutput { + schema_version: 1, + observed_at_ms: cloud::system_now_ms(), + receipts_seen: 0, + attested_count: 0, + pending_count: 0, + eviction_ready_count: 0, + error_count: 0, + provider_evidence_written: 0, + unprocessed_count: 0, + incomplete_reconciliation: false, + entries: Vec::new(), + cloud_write_executed: false, + source_eviction_authorized: false, + }); + } + Err(_) => return Err("cloud-receipt-directory-unavailable".into()), + }; + if receipt_metadata.file_type().is_symlink() || !receipt_metadata.is_dir() { + return Err("cloud-receipt-directory-unsafe".into()); + } + let mut paths = std::fs::read_dir(receipt_dir) + .map_err(|_| "cloud-receipt-directory-read-failed".to_string())? + .filter_map(Result::ok) + .map(|entry| entry.path()) + .collect::>(); + paths.sort(); + if paths.len() > MAX_CLOUD_RECEIPT_RECONCILIATION_ENTRIES { + return Err("cloud-receipt-directory-entry-limit-exceeded".into()); + } + let receipt_paths = paths + .into_iter() + .filter(|path| { + let Ok(metadata) = std::fs::symlink_metadata(path) else { + return false; + }; + metadata.is_file() + && !metadata.file_type().is_symlink() + && path.extension().and_then(|value| value.to_str()) == Some("json") + }) + .collect::>(); + let mut output = CloudReceiptReconciliationOutput { + schema_version: 1, + observed_at_ms: cloud::system_now_ms(), + receipts_seen: 0, + attested_count: 0, + pending_count: 0, + eviction_ready_count: 0, + error_count: 0, + provider_evidence_written: 0, + unprocessed_count: 0, + incomplete_reconciliation: false, + entries: Vec::new(), + cloud_write_executed: false, + source_eviction_authorized: false, + }; + for (index, path) in receipt_paths.iter().enumerate() { + if index >= MAX_CLOUD_RECEIPTS_PER_RECONCILIATION + || reconciliation_started.elapsed() >= CLOUD_RECONCILIATION_MAX_DURATION + { + output.unprocessed_count = receipt_paths.len().saturating_sub(index) as u64; + output.incomplete_reconciliation = output.unprocessed_count > 0; + break; + } + output.receipts_seen = output.receipts_seen.saturating_add(1); + let receipt = match cloud_transfer::read_immutable_receipt(path) { + Ok(receipt) => receipt, + Err(error) => { + output.error_count = output.error_count.saturating_add(1); + output.entries.push(CloudReceiptReconciliationEntry { + receipt_id: None, + provider: None, + goal_status: None, + goal_state: None, + provider_sync_state: None, + eviction_permit: false, + blockers: Vec::new(), + error: Some(stable_reconciliation_error(&error)), + }); + continue; + } + }; + match collect_cloud_attestation_for_receipt( + &receipt, + None, + evidence_dir, + adr_dir, + goal_dir, + connection_path, + cloud_roots, + false, + ) { + Ok(attestation) => { + output.attested_count = output.attested_count.saturating_add(1); + output.provider_evidence_written = + output.provider_evidence_written.saturating_add(1); + if attestation.goal_state + == cloud_transfer::CloudOffloadGoalState::PendingProviderSync + { + output.pending_count = output.pending_count.saturating_add(1); + } + if attestation.permit.is_some() { + output.eviction_ready_count = output.eviction_ready_count.saturating_add(1); + } + output.entries.push(CloudReceiptReconciliationEntry { + receipt_id: Some(receipt.receipt_id.clone()), + provider: Some(receipt.provider), + goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) + .ok() + .flatten(), + goal_state: Some(attestation.goal_state), + provider_sync_state: Some(attestation.evidence.sync_state), + eviction_permit: attestation.permit.is_some(), + blockers: attestation.blockers, + error: None, + }); + } + Err(error) => { + output.error_count = output.error_count.saturating_add(1); + let attestation_error = stable_reconciliation_error(&error); + let projection_warnings = + cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + adr_dir, + goal_dir, + output.observed_at_ms, + &attestation_error, + ) + .warnings; + let mut blockers = vec!["provider-attestation-incomplete".into()]; + if let Some(blocker) = + cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)) + { + blockers.push(blocker.into()); + } + if !projection_warnings.is_empty() { + blockers.push("dynamic-projection-update-incomplete".into()); + } + let projection = + cloud_adr::read_projection_state(&receipt.receipt_id, adr_dir, goal_dir); + let (goal_state, provider_sync_state) = match projection { + Ok(Some(state)) => { + blockers.push("projection-state-not-revalidated".into()); + (Some(state.goal_state), Some(state.provider_sync_state)) + } + Ok(None) => (None, None), + Err(_) => { + blockers.push("dynamic-projection-state-unavailable".into()); + (None, None) + } + }; + if goal_state == Some(cloud_transfer::CloudOffloadGoalState::PendingProviderSync) { + output.pending_count = output.pending_count.saturating_add(1); + } + output.entries.push(CloudReceiptReconciliationEntry { + receipt_id: Some(receipt.receipt_id.clone()), + provider: Some(receipt.provider), + goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) + .ok() + .flatten(), + goal_state, + provider_sync_state, + eviction_permit: false, + blockers, + error: Some(attestation_error), + }); + } + } + } + Ok(output) +} + +#[cfg(not(coverage))] +fn collect_cloud_attestation_for_receipt( + receipt: &cloud_transfer::CloudCopyReceipt, + object_id: Option, + evidence_dir: &Path, + adr_dir: &Path, + goal_dir: &Path, + connection_path: &Path, + cloud_roots: &[cloud::CloudRoot], + force_provider_api: bool, +) -> Result { + let confirmed_at_ms = cloud::system_now_ms(); + let evidence = match receipt.provider { + cloud::CloudProvider::Icloud => { + if object_id + .as_deref() + .is_some_and(|value| !value.trim().is_empty()) + { + return Err("icloud-provider-object-id-not-accepted".into()); + } + provider_sync::collect_icloud_sync_evidence(receipt, confirmed_at_ms)? + } + cloud::CloudProvider::Onedrive | cloud::CloudProvider::GoogleDrive => { + let destination = Path::new(&receipt.destination); + let selected_root = cloud_roots + .iter() + .filter(|root| { + root.provider == receipt.provider + && destination.starts_with(Path::new(&root.path)) + }) + .max_by_key(|root| Path::new(&root.path).components().count()) + .cloned() + .ok_or_else(|| "receipt-cloud-root-unavailable".to_string())?; + let object_id = object_id + .filter(|value| !value.trim().is_empty()) + .or_else(|| { + if receipt.provider == cloud::CloudProvider::GoogleDrive { + provider_evidence::latest_api_object_id( + evidence_dir, + &receipt.receipt_id, + receipt.provider, + ) + } else { + None + } + }); + let fallback_requested = + receipt.provider == cloud::CloudProvider::Onedrive || object_id.is_some(); + let native_evidence = if force_provider_api { + Err("provider-api-forced".to_string()) + } else { + provider_sync::collect_file_provider_sync_evidence(receipt, confirmed_at_ms) + }; + match native_evidence { + Ok(evidence) if evidence.sync_complete || !fallback_requested => evidence, + Err(error) if !fallback_requested => return Err(error), + Ok(_) | Err(_) => { + let access_token = + provider_oauth::refreshed_access_token(connection_path, &selected_root)?; + let client = provider_api_client::FixedHostProviderMetadataClient::default(); + match receipt.provider { + cloud::CloudProvider::Onedrive => { + if object_id.is_some() { + return Err("onedrive-provider-object-id-not-accepted".into()); + } + let locator = provider_api_client::onedrive_path_locator( + Path::new(&selected_root.path), + Path::new(&receipt.destination), + )?; + provider_api_client::collect_authenticated_provider_api_evidence_from_source( + receipt, + &locator, + access_token.as_str(), + &client, + confirmed_at_ms, + )? + } + cloud::CloudProvider::GoogleDrive => { + let locator = provider_api_client::google_drive_path_locator( + Path::new(&selected_root.path), + Path::new(&receipt.destination), + object_id + .as_deref() + .ok_or_else(|| "provider-object-id-missing".to_string())?, + )?; + provider_api_client::collect_authenticated_google_drive_path_evidence_from_source( + receipt, + &locator, + access_token.as_str(), + &client, + confirmed_at_ms, + )? + } + cloud::CloudProvider::Icloud => unreachable!(), + } + } + } + } + }; + let assessment = provider_sync::assess_provider_sync_timeliness(receipt, &evidence)?; + let (evidence_record, evidence_path) = + provider_evidence::write_immutable_sync_evidence(evidence_dir, &evidence)?; + let source_blocker = cloud_transfer::source_eviction_blocker(Path::new(&receipt.source)); + let (mut permit, mut blockers) = + match cloud_transfer::approve_local_eviction(receipt, &evidence_record) { + Ok(permit) => (Some(permit), Vec::new()), + Err(blockers) => (None, blockers), + }; + if let Some(blocker) = source_blocker { + permit = None; + if !blockers.iter().any(|existing| existing == blocker) { + blockers.push(blocker.into()); + } + } + let goal_state = + cloud_transfer::CloudOffloadGoalState::after_attestation(&evidence, permit.is_some()); + let mut adr = cloud_adr::snapshot_from_evidence(&evidence_record, goal_state, confirmed_at_ms); + let mut goal = cloud_adr::goal_snapshot_from_evidence( + receipt, + &evidence_record, + goal_state, + confirmed_at_ms, + ); + if let Some(blocker) = source_blocker { + goal.status = "blocked".into(); + goal.completion_gates.insert("source-present".into(), false); + adr.decision = format!("{}-source-state-unverified", adr.decision); + adr.consequences + .push(format!("source-state-blocked:{blocker}")); + } + let provider_blocker = blockers + .iter() + .find(|existing| Some(existing.as_str()) != source_blocker) + .map(String::as_str); + let projection = cloud_adr::write_projection_pair_with_state_blockers_outcome( + adr_dir, + &adr, + goal_dir, + &goal, + source_blocker, + provider_blocker, + ); + Ok(CloudAttestationOutput { + goal_state, + goal_status: cloud_adr::read_goal_status(goal_dir, &receipt.receipt_id) + .ok() + .flatten(), + evidence, + assessment, + evidence_record, + evidence_path: evidence_path.to_string_lossy().into_owned(), + adr_path: projection + .adr_path + .map(|path| path.to_string_lossy().into_owned()), + goal_path: projection + .goal_path + .map(|path| path.to_string_lossy().into_owned()), + projection_warnings: projection.warnings, + permit, + blockers, + }) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn attest_cloud_copy( + receipt_id: String, + object_id: Option, + app: AppHandle, +) -> Result { + if receipt_id.len() != 64 || !receipt_id.bytes().all(|byte| byte.is_ascii_hexdigit()) { + return Err("receipt-id-invalid".into()); + } + use tauri::Manager; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_path = app_data_dir + .join("cloud-receipts") + .join(format!("{receipt_id}.json")); + let evidence_dir = app_data_dir.join("cloud-provider-evidence"); + let adr_dir = app_data_dir.join("cloud-adr"); + let goal_dir = app_data_dir.join("cloud-goals"); + let connection_path = oauth_connections_path(&app)?; + let home = resolve_home(&app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); + tauri::async_runtime::spawn_blocking(move || { + let receipt = cloud_transfer::read_immutable_receipt(&receipt_path)?; + if receipt.receipt_id != receipt_id { + return Err("receipt-id-mismatch".into()); + } + let result = collect_cloud_attestation_for_receipt( + &receipt, + object_id, + &evidence_dir, + &adr_dir, + &goal_dir, + &connection_path, + &cloud_roots, + false, + ); + if let Err(error) = &result { + let provider_blocker = stable_reconciliation_error(error); + let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + cloud::system_now_ms(), + &provider_blocker, + ); + } + result + }) + .await + .map_err(|_| "cloud-attestation-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn reconcile_cloud_receipts( + app: AppHandle, +) -> Result { + use tauri::Manager; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_dir = app_data_dir.join("cloud-receipts"); + let evidence_dir = app_data_dir.join("cloud-provider-evidence"); + let adr_dir = app_data_dir.join("cloud-adr"); + let goal_dir = app_data_dir.join("cloud-goals"); + let connection_path = oauth_connections_path(&app)?; + let home = resolve_home(&app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); + tauri::async_runtime::spawn_blocking(move || { + reconcile_cloud_receipts_inner( + &receipt_dir, + &evidence_dir, + &adr_dir, + &goal_dir, + &connection_path, + &cloud_roots, + ) + }) + .await + .map_err(|_| "cloud-reconciliation-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[derive(serde::Serialize)] +pub struct CloudSourceEvictionOutput { + pub action: &'static str, + pub goal_state: cloud_transfer::CloudOffloadGoalState, + pub attestation: CloudAttestationOutput, + pub approval: cloud_eviction::CloudSourceEvictionApproval, + pub approval_path: String, + pub eviction: cloud_eviction::CloudEvictionResult, + pub adr_path: Option, + pub goal_path: Option, + pub projection_warnings: Vec, +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub async fn trash_verified_cloud_source( + receipt_id: String, + confirmation_receipt_id: String, + rationale: String, + object_id: Option, + app: AppHandle, +) -> Result { + for value in [&receipt_id, &confirmation_receipt_id] { + if value.len() != 64 || !value.bytes().all(|byte| byte.is_ascii_hexdigit()) { + return Err("receipt-id-invalid".into()); + } + } + use tauri::Manager; + let app_data_dir = app + .path() + .app_data_dir() + .map_err(|_| "app-data-directory-unavailable".to_string())?; + let receipt_path = app_data_dir + .join("cloud-receipts") + .join(format!("{receipt_id}.json")); + let evidence_dir = app_data_dir.join("cloud-provider-evidence"); + let adr_dir = app_data_dir.join("cloud-adr"); + let goal_dir = app_data_dir.join("cloud-goals"); + let approval_dir = app_data_dir.join("cloud-source-eviction-approvals"); + let eviction_dir = app_data_dir.join("cloud-source-evictions"); + let journal_path = journal_file_path(&app)?; + let connection_path = oauth_connections_path(&app)?; + let home = resolve_home(&app)?; + let cloud_roots = cloud::discover_cloud_roots(&home); + let approved_by = local_human_reviewer(); + tauri::async_runtime::spawn_blocking(move || { + let receipt = cloud_transfer::read_immutable_receipt(&receipt_path)?; + if receipt.receipt_id != receipt_id { + return Err("receipt-id-mismatch".into()); + } + let attestation = match collect_cloud_attestation_for_receipt( + &receipt, + object_id, + &evidence_dir, + &adr_dir, + &goal_dir, + &connection_path, + &cloud_roots, + false, + ) { + Ok(attestation) => attestation, + Err(error) => { + let provider_blocker = stable_reconciliation_error(&error); + let _ = cloud_adr::ensure_initial_projection_pair_with_provider_state_outcome( + &receipt, + &adr_dir, + &goal_dir, + cloud::system_now_ms(), + &provider_blocker, + ); + return Err(error); + } + }; + let permit = attestation.permit.as_ref().ok_or_else(|| { + if attestation.blockers.is_empty() { + "source-eviction-permit-unavailable".to_string() + } else { + attestation.blockers.join(",") + } + })?; + let active_use_observed_at_ms = cloud::system_now_ms(); + let active_use = cloud_local_eviction::observe_path_active_use(Path::new(&receipt.source)); + let approved_at_ms = cloud::system_now_ms(); + let approval = cloud_eviction::create_source_eviction_approval( + &receipt, + permit, + &confirmation_receipt_id, + approved_at_ms, + &approved_by, + &rationale, + active_use_observed_at_ms, + active_use, + )?; + let approval_path = + cloud_eviction::write_immutable_source_eviction_approval(&approval_dir, &approval)?; + let eviction = cloud_eviction::evict_source_with_human_approval( + &receipt, + permit, + &approval, + &confirmation_receipt_id, + &eviction_dir, + &journal_path, + cloud::system_now_ms(), + )?; + let updated_at_ms = cloud::system_now_ms(); + let adr = cloud_adr::snapshot_from_evidence( + &attestation.evidence_record, + cloud_transfer::CloudOffloadGoalState::SourceEvicted, + updated_at_ms, + ); + let goal = cloud_adr::goal_snapshot_from_evidence( + &receipt, + &attestation.evidence_record, + cloud_transfer::CloudOffloadGoalState::SourceEvicted, + updated_at_ms, + ); + let (adr_path, goal_path, projection_warnings) = + cloud_adr::write_projection_pair(&adr_dir, &adr, &goal_dir, &goal); + Ok(CloudSourceEvictionOutput { + action: "attest-approve-and-trash-verified-cloud-source", + goal_state: cloud_transfer::CloudOffloadGoalState::SourceEvicted, + attestation, + approval, + approval_path: approval_path.to_string_lossy().into_owned(), + eviction, + adr_path: adr_path.map(|path| path.to_string_lossy().into_owned()), + goal_path: goal_path.map(|path| path.to_string_lossy().into_owned()), + projection_warnings, + }) + }) + .await + .map_err(|_| "cloud-source-eviction-task-failed".to_string())? +} + +#[cfg(not(coverage))] +#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] +#[tauri::command(async)] +pub fn plan_organize( + root: String, + app: AppHandle, + state: State, +) -> Result, String> { + let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; + let rules = crate::userrules::parse_rules(&user_rules_json(&app))?; + let files = dupes::collect_files_bounded(Path::new(&root), 10_000, Duration::from_secs(10))?; + let home = resolve_home(&app)?; + #[cfg(feature = "llm-engine")] + { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + if model_status_for(&model_file_path(&dir)).present { + let mut guard = state.engine.lock().unwrap(); + if guard.is_none() { + if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { + *guard = Some(e); + } + } + if let Some(engine) = guard.as_ref() { + let lineage_probe_count = std::cell::Cell::new(0usize); + let pick = |p: &Path, cands: &[&str]| { + let mut meta = file_meta_at(p, 0, 0); + if lineage_probe_count.get() < organize::MAX_LINEAGE_PROBES { + lineage_probe_count.set(lineage_probe_count.get() + 1); + if let Some(lineage) = organize::lineage_metadata_for_path(p) { + meta.production_time_ms = lineage.production_time_ms; + meta.production_time_source = lineage.production_time_source; + meta.production_time_confidence = lineage.production_time_confidence; + } + } + crate::llm::pick_class(engine, &meta, cands) + }; + return Ok(organize::plan_moves_with_metadata( + &files, + &onto, + &home, + now_ms(), + &rules, + &pick, + &organize::lineage_metadata_for_path, + )); + } + } + } + Ok(organize::plan_moves_with_metadata( + &files, + &onto, + &home, + now_ms(), + &rules, + &|_, _| None, + &organize::lineage_metadata_for_path, + )) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn export_organization_lineage( + plans: Vec, +) -> Result { + organization_lineage::export_move_plans(&plans, now_ms()) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn user_rules(app: AppHandle) -> Result, String> { + crate::userrules::parse_rules(&user_rules_json(&app)) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn execute_moves( + plans: Vec, + app: AppHandle, +) -> Result, String> { + let jp = journal_file_path(&app)?; + Ok(execute_moves_inner(&plans, &jp, now_ms())) +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn undo_last_moves(limit: usize, app: AppHandle) -> Result, String> { + let jp = journal_file_path(&app)?; + Ok(undo_last_moves_inner(limit, &jp, now_ms())) +} + +#[derive(serde::Serialize)] +pub struct ModelStatus { + pub present: bool, + pub name: String, +} + +pub fn model_file_path(app_data_dir: &Path) -> PathBuf { + app_data_dir + .join("models") + .join(format!("{}.gguf", crate::llm::DEFAULT.name)) +} + +pub fn model_status_for(model_path: &Path) -> ModelStatus { + ModelStatus { + present: model_path.exists(), + name: crate::llm::DEFAULT.name.to_string(), + } +} + +pub fn file_meta_at(path: &Path, size: u64, mtime_days: u64) -> crate::llm::FileMeta { + let name = path + .file_name() + .map(|n| n.to_string_lossy().into_owned()) + .unwrap_or_default(); + let parent = path + .parent() + .and_then(|p| p.file_name()) + .map(|n| n.to_string_lossy().into_owned()) + .unwrap_or_default(); + crate::llm::FileMeta { + path: path.to_string_lossy().into_owned(), + name, + size, + mtime_days, + parent, + production_time_ms: None, + production_time_source: None, + production_time_confidence: None, + } +} + +pub fn verdicts_with( + engine: &dyn crate::llm::InferenceEngine, + cache: &mut crate::llm::VerdictCache, + items: &[(crate::llm::FileMeta, u64)], +) -> Vec { + let mut out = Vec::with_capacity(items.len()); + for (meta, mtime_ms) in items { + let key = crate::llm::VerdictCache::key(&meta.path, meta.size, *mtime_ms); + if let Some(v) = cache.get(&key) { + out.push(crate::llm::FileVerdict { + path: meta.path.clone(), + verdict: v, + reason: String::new(), + }); + } else { + let fv = crate::llm::verdict_for(engine, meta); + cache.put(key, fv.verdict); + out.push(fv); + } + } + out +} + +#[cfg(not(coverage))] +fn meta_items(paths: &[String]) -> Vec<(crate::llm::FileMeta, u64)> { + paths + .iter() + .filter_map(|p| { + let path = std::path::Path::new(p); + let md = std::fs::metadata(path).ok()?; + let mtime_ms = md + .modified() + .ok() + .and_then(|t| t.duration_since(std::time::UNIX_EPOCH).ok()) + .map(|d| d.as_millis() as u64) + .unwrap_or(0); + let age_days = now_ms().saturating_sub(mtime_ms) / 86_400_000; + Some((file_meta_at(path, md.len(), age_days), mtime_ms)) + }) + .collect() +} + +#[cfg(not(coverage))] +#[tauri::command] +pub fn model_status(app: AppHandle) -> Result { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + Ok(model_status_for(&model_file_path(&dir))) +} + +#[cfg(not(coverage))] +#[tauri::command(async)] +pub fn download_model(app: AppHandle) -> Result<(), String> { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + let path = model_file_path(&dir); + if let Some(parent) = path.parent() { + std::fs::create_dir_all(parent).map_err(|e| e.to_string())?; + } + crate::llm::download_to(&crate::llm::DEFAULT, &path) +} + +#[cfg(not(coverage))] +#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] +#[tauri::command(async)] +pub fn file_verdicts( + paths: Vec, + app: AppHandle, + state: State, +) -> Result, String> { + let items = meta_items(&paths); + + #[cfg(feature = "llm-engine")] + { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + if model_status_for(&model_file_path(&dir)).present { + let mut guard = state.engine.lock().unwrap(); + if guard.is_none() { + if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { + *guard = Some(e); + } + } + if let Some(engine) = guard.as_ref() { + let mut cache = state.verdict_cache.lock().unwrap(); + return Ok(verdicts_with(engine, &mut cache, &items)); + } + } + } + + Ok(items + .iter() + .map(|(meta, _)| crate::llm::FileVerdict { + path: meta.path.clone(), + verdict: crate::llm::Verdict::Unrated, + reason: String::new(), + }) + .collect()) +} + +#[cfg(not(coverage))] +#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] +#[tauri::command(async)] +pub fn summarize_unknown_bucket( + paths: Vec, + app: AppHandle, + state: State, +) -> Result, String> { + if paths.is_empty() { + return Ok(None); + } + let metas: Vec = meta_items(&paths).into_iter().map(|(m, _)| m).collect(); + + #[cfg(feature = "llm-engine")] + { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + if model_status_for(&model_file_path(&dir)).present { + let mut guard = state.engine.lock().unwrap(); + if guard.is_none() { + if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { + *guard = Some(e); + } + } + if let Some(engine) = guard.as_ref() { + return Ok(crate::llm::summarize_unknown(engine, &metas)); + } + } + } + + Ok(None) +} + +#[cfg(not(coverage))] +#[cfg_attr(not(feature = "llm-engine"), allow(unused_variables))] +#[tauri::command(async)] +pub fn reason_unknown_extensions( + samples: Vec, + app: AppHandle, + state: State, +) -> Result, String> { + let exts = crate::reasoning::distinct_extensions(&samples); + let settings = get_settings(app.clone())?; + let ddg = crate::web::DdgLookup; + let web_fn = |ext: &str| -> Option { + crate::web::WebLookup::file_type(&ddg, ext).ok().flatten() + }; + let web: Option<&dyn Fn(&str) -> Option> = if settings.online_mode { + Some(&web_fn) + } else { + None + }; + + #[cfg(feature = "llm-engine")] + { + use tauri::Manager; + let dir = app.path().app_data_dir().map_err(|e| e.to_string())?; + if model_status_for(&model_file_path(&dir)).present { + let onto = load_ontology_from(&bundled_ontology_ttl(&app)?)?; + let candidates: Vec = onto + .classes + .iter() + .map(|c| c.id.rsplit(['#', '/']).next().unwrap_or(&c.id).to_string()) + .collect(); + let cand_refs: Vec<&str> = candidates.iter().map(|s| s.as_str()).collect(); + let mut guard = state.engine.lock().unwrap(); + if guard.is_none() { + if let Ok(e) = crate::llm::LlamaEngine::new(&model_file_path(&dir)) { + *guard = Some(e); + } + } + if let Some(engine) = guard.as_ref() { + let reason = |ext: &str| crate::llm::reason_extension(engine, ext, &cand_refs); + return Ok(crate::reasoning::build_insights(&exts, &reason, web)); + } + } + } + + let reason = |_: &str| -> Option { None }; + Ok(crate::reasoning::build_insights(&exts, &reason, web)) +} + +#[cfg(test)] +mod tests { + use super::*; + use crate::scanner::scan_dir_with_interval; + use std::fs; + use std::sync::atomic::AtomicBool; + + use crate::llm::{InferenceEngine, Verdict, VerdictCache}; + + struct CountingFake { + out: String, + calls: std::cell::Cell, + } + impl InferenceEngine for CountingFake { + fn infer(&self, _p: &str) -> Result { + self.calls.set(self.calls.get() + 1); + Ok(self.out.clone()) + } + } + + #[test] + fn model_file_path_is_under_models_dir() { + let p = model_file_path(std::path::Path::new("/data")); + assert!(p.ends_with(format!("{}.gguf", crate::llm::DEFAULT.name))); + assert!(p.to_string_lossy().contains("models")); + } + + #[cfg(not(coverage))] + #[test] + fn reconciliation_error_output_is_stable_and_path_free() { + assert_eq!( + stable_reconciliation_error("provider-oauth-refresh-failed,secret/path"), + "provider-oauth-refresh-failed" + ); + assert_eq!( + stable_reconciliation_error("No such file or directory (os error 2)"), + "provider-attestation-failed" + ); + } + + #[cfg(not(coverage))] + #[test] + fn reconciliation_without_receipts_is_read_only() { + let temporary = tempfile::tempdir().unwrap(); + let output = reconcile_cloud_receipts_inner( + &temporary.path().join("missing-receipts"), + &temporary.path().join("evidence"), + &temporary.path().join("adr"), + &temporary.path().join("goals"), + &temporary.path().join("oauth.json"), + &[], + ) + .unwrap(); + assert_eq!(output.receipts_seen, 0); + assert_eq!(output.attested_count, 0); + assert!(!output.cloud_write_executed); + assert!(!output.source_eviction_authorized); + } + + #[cfg(not(coverage))] + #[test] + fn reconciliation_reports_receipts_left_after_entry_budget() { + let temporary = tempfile::tempdir().unwrap(); + let receipts = temporary.path().join("receipts"); + std::fs::create_dir(&receipts).unwrap(); + for index in 0..=MAX_CLOUD_RECEIPTS_PER_RECONCILIATION { + std::fs::write(receipts.join(format!("{index:04}.json")), b"{}").unwrap(); + } + let output = reconcile_cloud_receipts_inner( + &receipts, + &temporary.path().join("evidence"), + &temporary.path().join("adr"), + &temporary.path().join("goals"), + &temporary.path().join("oauth.json"), + &[], + ) + .unwrap(); + assert_eq!(output.receipts_seen, MAX_CLOUD_RECEIPTS_PER_RECONCILIATION as u64); + assert_eq!(output.unprocessed_count, 1); + assert!(output.incomplete_reconciliation); + assert_eq!(output.error_count, MAX_CLOUD_RECEIPTS_PER_RECONCILIATION as u64); + } + + #[cfg(not(coverage))] + #[test] + fn missing_source_blocks_eviction_permit() { + let temporary = tempfile::tempdir().unwrap(); + let missing = temporary.path().join("missing.bin"); + assert_eq!( + cloud_transfer::source_eviction_blocker(&missing), + Some("source-not-present") + ); + std::fs::write(&missing, b"source").unwrap(); + assert_eq!(cloud_transfer::source_eviction_blocker(&missing), None); + } + + #[test] + fn model_status_reflects_presence() { + let tmp = tempfile::tempdir().unwrap(); + let missing = tmp.path().join("no.gguf"); + assert!(!model_status_for(&missing).present); + let there = tmp.path().join("m.gguf"); + std::fs::write(&there, b"x").unwrap(); + assert!(model_status_for(&there).present); + assert_eq!(model_status_for(&there).name, crate::llm::DEFAULT.name); + } + + #[test] + fn brew_cleanup_inputs_are_bounded_and_exact() { + assert!(valid_brew_fingerprint(&"a".repeat(64))); + assert!(!valid_brew_fingerprint(&"a".repeat(63))); + assert!(!valid_brew_fingerprint(&format!("{}g", "a".repeat(63)))); + assert!(valid_brew_rationale("reviewed dry-run output")); + assert!(!valid_brew_rationale(" leading-space")); + assert!(!valid_brew_rationale("control\ncharacter")); + } + + #[test] + fn file_meta_at_extracts_name_and_parent() { + let m = file_meta_at(std::path::Path::new("/downloads/report.pdf"), 42, 7); + assert_eq!(m.name, "report.pdf"); + assert_eq!(m.parent, "downloads"); + assert_eq!(m.size, 42); + assert_eq!(m.mtime_days, 7); + let root = file_meta_at(std::path::Path::new("/"), 0, 0); + assert_eq!(root.name, ""); + assert_eq!(root.parent, ""); + } + + #[test] + fn verdicts_with_caches_and_avoids_reinference() { + let engine = CountingFake { + out: r#"{"verdict":"safe","reason":"r"}"#.into(), + calls: std::cell::Cell::new(0), + }; + let mut cache = VerdictCache::new(); + let meta = file_meta_at(std::path::Path::new("/x/a.bin"), 100, 1); + let items = vec![(meta.clone(), 1700u64), (meta, 1700u64)]; + let out = verdicts_with(&engine, &mut cache, &items); + assert_eq!(out.len(), 2); + assert!(out.iter().all(|fv| fv.verdict == Verdict::Safe)); + assert_eq!(engine.calls.get(), 1); + } + + #[test] + fn verdicts_with_distinct_items_infer_each() { + let engine = CountingFake { + out: r#"{"verdict":"keep"}"#.into(), + calls: std::cell::Cell::new(0), + }; + let mut cache = VerdictCache::new(); + let a = (file_meta_at(std::path::Path::new("/x/a"), 1, 1), 10u64); + let b = (file_meta_at(std::path::Path::new("/x/b"), 2, 2), 20u64); + let out = verdicts_with(&engine, &mut cache, &[a, b]); + assert_eq!(out.len(), 2); + assert_eq!(engine.calls.get(), 2); + let _ = out; + } + + fn scan(root: &Path) -> ScanResult { + scan_dir_with_interval(root, &AtomicBool::new(false), 1, |_| {}) + } + + #[test] + fn load_ontology_from_valid_ttl_ok() { + let ttl = r#" +@prefix owl: . +@prefix rdfs: . +@prefix dm: . +dm:Image a owl:Class ; rdfs:label "이미지"@ko . +"#; + let onto = load_ontology_from(ttl).unwrap(); + assert_eq!(onto.classes.len(), 1); + } + + #[test] + fn load_ontology_from_garbage_is_err() { + assert!(load_ontology_from("@@@ not turtle").is_err()); + } + + #[test] + fn node_view_lists_entries_sorted_by_size_desc() { + let tmp = tempfile::tempdir().unwrap(); + let root = tmp.path(); + fs::create_dir(root.join("sub")).unwrap(); + fs::write(root.join("sub").join("inner.bin"), vec![0u8; 500]).unwrap(); + fs::write(root.join("small.txt"), vec![0u8; 10]).unwrap(); + let res = scan(root); + let view = node_view(&res, root).unwrap(); + assert_eq!(view.size, 510); + assert_eq!(view.entries.len(), 2); + assert_eq!(view.entries[0].name, "sub"); + assert!(view.entries[0].is_dir); + assert_eq!(view.entries[0].size, 500); + assert_eq!(view.entries[1].name, "small.txt"); + assert!(!view.entries[1].is_dir); + } + + #[test] + fn node_view_rejects_path_outside_root() { + let tmp = tempfile::tempdir().unwrap(); + let res = scan(tmp.path()); + assert!(node_view(&res, &std::env::temp_dir().join("..")).is_err()); + } + + #[test] + fn node_view_rejects_parent_dir_components() { + let tmp = tempfile::tempdir().unwrap(); + let res = scan(tmp.path()); + let sneaky = tmp.path().join(".."); + assert!(node_view(&res, &sneaky).is_err()); + } + + #[test] + fn node_view_rejects_sibling_path_outside_root() { + let tmp = tempfile::tempdir().unwrap(); + let other = tempfile::tempdir().unwrap(); + let res = scan(tmp.path()); + assert!(node_view(&res, other.path()).is_err()); + } + + #[cfg(windows)] + #[test] + fn node_view_skips_junctions() { + let tmp = tempfile::tempdir().unwrap(); + let root = tmp.path(); + fs::create_dir(root.join("real")).unwrap(); + let junction = root.join("junc"); + let status = std::process::Command::new("cmd") + .args(["/C", "mklink", "/J"]) + .arg(&junction) + .arg(root.join("real")) + .status() + .unwrap(); + assert!(status.success(), "mklink /J failed"); + let res = scan(root); + let view = node_view(&res, root).unwrap(); + assert!(view.entries.iter().all(|e| e.name != "junc")); + } + + #[test] + fn node_view_errors_on_unreadable_dir() { + let tmp = tempfile::tempdir().unwrap(); + let res = scan(tmp.path()); + assert!(node_view(&res, &tmp.path().join("missing")).is_err()); + } + + #[cfg(unix)] + #[test] + fn node_view_skips_symlinks() { + let tmp = tempfile::tempdir().unwrap(); + let root = tmp.path(); + fs::write(root.join("real.bin"), vec![0u8; 5]).unwrap(); + std::os::unix::fs::symlink(root.join("real.bin"), root.join("link.bin")).unwrap(); + let res = scan(root); + let view = node_view(&res, root).unwrap(); + assert!(view.entries.iter().all(|e| e.name != "link.bin")); + } + + #[test] + fn parse_move_entry_splits_valid_entry() { + assert_eq!( + parse_move_entry("/a/b -> /c/d"), + Some(("/a/b".to_string(), "/c/d".to_string())) + ); + } + + #[test] + fn parse_move_entry_malformed_is_none() { + assert_eq!(parse_move_entry("no arrow here"), None); + } + + #[test] + fn list_roots_returns_platform_roots() { + let roots = list_roots(); + assert!(!roots.is_empty()); + #[cfg(windows)] + assert!(roots.iter().any(|r| r.ends_with(":\\"))); + #[cfg(not(windows))] + assert!(roots.contains(&"/".to_string())); + } + + #[test] + fn clean_paths_inner_reports_per_item_results() { + let tmp = tempfile::tempdir().unwrap(); + let jp = tmp.path().join("j.jsonl"); + let ok_dir = tmp.path().join("disksage-clean-fixture-dir"); + fs::create_dir(&ok_dir).unwrap(); + fs::write(ok_dir.join("inner.bin"), vec![0u8; 32]).unwrap(); + let ok_file = tmp.path().join("disksage-clean-fixture-file.bin"); + fs::write(&ok_file, vec![0u8; 16]).unwrap(); + let missing = tmp.path().join("ghost"); + let protected = + std::path::PathBuf::from(if cfg!(windows) { "C:\\Windows" } else { "/usr" }); + + let results = clean_paths_inner( + &[ok_dir.clone(), ok_file.clone(), missing, protected], + &jp, + 7, + ); + + assert_eq!(results.len(), 4); + assert!(results[0].ok); + assert!(results[1].ok); + assert!(!results[2].ok && results[2].error.contains("휴지통")); + assert!(!results[3].ok && results[3].error.contains("보호")); + assert!(!ok_dir.exists()); + assert!(!ok_file.exists()); + + let recent = crate::safety::journal_recent(&jp, 10); + let ok_entry = recent + .iter() + .find(|e| e.outcome == "ok" && e.path.contains("disksage-clean-fixture-dir")) + .unwrap(); + assert_eq!(ok_entry.bytes, 32); + let ok_file_entry = recent + .iter() + .find(|e| e.outcome == "ok" && e.path.contains("disksage-clean-fixture-file")) + .unwrap(); + assert_eq!(ok_file_entry.bytes, 16); + + #[cfg(any(windows, target_os = "linux"))] + { + let items: Vec<_> = trash::os_limited::list() + .unwrap() + .into_iter() + .filter(|i| { + let n = i.name.to_string_lossy(); + n.contains("disksage-clean-fixture-dir") + || n.contains("disksage-clean-fixture-file") + }) + .collect(); + trash::os_limited::purge_all(items).unwrap(); + } + } + + #[cfg(all(not(coverage), target_os = "macos"))] + #[test] + fn automatic_cache_cleanup_uses_only_observed_macos_cache_ids() { + assert_eq!( + crate::cache_cleanup::AUTO_REGENERABLE_CACHE_IDS, + [ + "npm-cache", + "pnpm-cache", + "adobe-cache", + "edge-cache", + "uv-cache", + "trivy-cache", + ] + ); + let tmp = tempfile::tempdir().unwrap(); + let bases = crate::rules::BaseDirs { + temp: tmp.path().join("tmp"), + local_data: tmp.path().join("local"), + home: tmp.path().join("home"), + }; + for id in crate::cache_cleanup::AUTO_REGENERABLE_CACHE_IDS { + let path = match id { + "npm-cache" => bases.home.join(".npm"), + "pnpm-cache" => bases.home.join("Library/Caches/pnpm"), + "adobe-cache" => bases.home.join("Library/Caches/Adobe"), + "edge-cache" => bases.home.join("Library/Caches/Microsoft Edge"), + "uv-cache" => bases.local_data.join("uv"), + "trivy-cache" => bases.home.join("Library/Caches/trivy"), + _ => unreachable!(), + }; + fs::create_dir_all(&path).unwrap(); + fs::write(path.join("fixture.bin"), b"regenerable").unwrap(); + } + let results = clean_regenerable_caches_inner(&bases, &tmp.path().join("journal.jsonl"), 7); + assert_eq!(results.len(), 6); + assert!(results.iter().all(|result| result.ok)); + } + + #[test] + fn dev_artifact_cleanup_rejects_a_stale_metadata_fingerprint() { + let tmp = tempfile::tempdir().unwrap(); + let project = tmp.path().join("webapp"); + let artifact = project.join("node_modules"); + fs::create_dir_all(&artifact).unwrap(); + fs::write(project.join("package.json"), b"{}").unwrap(); + fs::write(artifact.join("payload.bin"), b"old").unwrap(); + let now = std::time::SystemTime::now() + .duration_since(std::time::UNIX_EPOCH) + .unwrap() + .as_millis() as u64; + let observed = crate::dev_artifacts::find_artifacts(tmp.path(), 0, now); + assert_eq!(observed.len(), 1); + fs::write(artifact.join("payload.bin"), b"recreated-with-different-size").unwrap(); + let results = clean_dev_artifacts_inner( + &observed, + tmp.path(), + 0, + &tmp.path().join("journal.jsonl"), + now, + ); + assert_eq!(results.len(), 1); + assert!(!results[0].ok); + assert!(results[0].error.contains("다시 스캔")); + assert!(artifact.join("payload.bin").exists()); + } + + #[test] + fn execute_moves_inner_reports_per_item_and_isolates_failures() { + let tmp = tempfile::tempdir().unwrap(); + let jp = tmp.path().join("j.jsonl"); + let src_ok = tmp.path().join("a.bin"); + std::fs::write(&src_ok, vec![1u8; 16]).unwrap(); + let dst_ok = tmp.path().join("sub").join("a.bin"); + let plans = vec![ + organize::MovePlan { + src: src_ok.to_string_lossy().into(), + dst: dst_ok.to_string_lossy().into(), + class_id: "x".into(), + ..Default::default() + }, + organize::MovePlan { + src: tmp.path().join("ghost").to_string_lossy().into(), + dst: tmp.path().join("g2").to_string_lossy().into(), + class_id: "x".into(), + ..Default::default() + }, + ]; + let results = execute_moves_inner(&plans, &jp, 1); + assert_eq!(results.len(), 2); + assert!(results[0].ok); + assert!(!results[1].ok); + assert!(!src_ok.exists()); + assert!(dst_ok.exists()); + } + + #[test] + fn undo_last_moves_inner_reverses_recent_moves_newest_first() { + let tmp = tempfile::tempdir().unwrap(); + let jp = tmp.path().join("j.jsonl"); + let a = tmp.path().join("a.bin"); + std::fs::write(&a, vec![2u8; 8]).unwrap(); + let a_moved = tmp.path().join("dest").join("a.bin"); + let plans = vec![organize::MovePlan { + src: a.to_string_lossy().into(), + dst: a_moved.to_string_lossy().into(), + class_id: "x".into(), + ..Default::default() + }]; + execute_moves_inner(&plans, &jp, 5); + assert!(!a.exists()); + assert!(a_moved.exists()); + let undone = undo_last_moves_inner(10, &jp, 6); + assert_eq!(undone.len(), 1); + assert!(undone[0].ok); + assert!(a.exists()); + assert!(!a_moved.exists()); + } + + #[test] + fn undo_last_moves_inner_respects_limit_after_filtering() { + let tmp = tempfile::tempdir().unwrap(); + let jp = tmp.path().join("j.jsonl"); + for name in ["x.bin", "y.bin"] { + let s = tmp.path().join(name); + std::fs::write(&s, b"z").unwrap(); + let d = tmp.path().join("d").join(name); + execute_moves_inner( + &[organize::MovePlan { + src: s.to_string_lossy().into(), + dst: d.to_string_lossy().into(), + class_id: "x".into(), + ..Default::default() + }], + &jp, + 1, + ); + } + let undone = undo_last_moves_inner(1, &jp, 9); + assert_eq!(undone.len(), 1); + } + + #[test] + fn undo_last_moves_inner_reports_failure_when_original_path_reoccupied() { + let tmp = tempfile::tempdir().unwrap(); + let jp = tmp.path().join("j.jsonl"); + let a = tmp.path().join("a.bin"); + std::fs::write(&a, vec![3u8; 4]).unwrap(); + let a_moved = tmp.path().join("dest").join("a.bin"); + let plans = vec![organize::MovePlan { + src: a.to_string_lossy().into(), + dst: a_moved.to_string_lossy().into(), + class_id: "x".into(), + ..Default::default() + }]; + execute_moves_inner(&plans, &jp, 1); + assert!(a_moved.exists()); + std::fs::write(&a, b"blocker").unwrap(); + let undone = undo_last_moves_inner(1, &jp, 2); + assert_eq!(undone.len(), 1); + assert!(!undone[0].ok); + assert!(a_moved.exists()); + } +} From f40bd901bb8206e7051790dcd0e4a129548cda34 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 11:46:03 -0700 Subject: [PATCH 626/691] fix: probe native copy destination headroom --- src-tauri/src/commands.rs | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/src-tauri/src/commands.rs b/src-tauri/src/commands.rs index c079633dc..3f2f9bffd 100644 --- a/src-tauri/src/commands.rs +++ b/src-tauri/src/commands.rs @@ -30,6 +30,9 @@ use crate::{ #[path = "home_resolution.rs"] mod home_resolution; +#[path = "copy_headroom.rs"] +mod copy_headroom; + #[derive(Default)] pub struct AppState { pub result: Arc>>, @@ -1564,15 +1567,11 @@ fn require_capacity_for_copy( #[cfg(not(coverage))] fn require_local_copy_headroom(candidate: &cloud::CloudCandidate) -> Result<(), String> { - let snapshot = crate::volume_pressure::snapshot_volume( - Path::new(&candidate.src), + copy_headroom::require_destination_copy_headroom( + Path::new(&candidate.dst), + candidate.bytes, cloud::system_now_ms(), - )?; - if crate::volume_pressure::has_copy_headroom(snapshot.available_bytes, candidate.bytes) { - Ok(()) - } else { - Err("local-volume-headroom-insufficient".into()) - } + ) } #[cfg(not(coverage))] @@ -1752,8 +1751,8 @@ fn create_cloud_candidate_receipt( )?; if !adopt_existing { // Native File Provider copies can materialize placeholders and stage more than the source - // bytes. Re-check local headroom immediately before any mutation; adoption only verifies - // an existing destination and does not create a local staging file. + // bytes. Re-check destination/staging headroom immediately before any mutation; adoption + // only verifies an existing destination and does not create a local staging file. require_local_copy_headroom(candidate)?; let runtime = provider_client_runtime::require_provider_client_runtime( selected.provider, From 894624ff4f9e56af0c558c24226c044e4873be60 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 15:10:36 -0700 Subject: [PATCH 627/691] test: run active-use probes under coverage --- src-tauri/tests/cloud_local_eviction_lsof_warning.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/tests/cloud_local_eviction_lsof_warning.rs b/src-tauri/tests/cloud_local_eviction_lsof_warning.rs index 69d9bfee0..15451f395 100644 --- a/src-tauri/tests/cloud_local_eviction_lsof_warning.rs +++ b/src-tauri/tests/cloud_local_eviction_lsof_warning.rs @@ -1,4 +1,4 @@ -#![cfg(all(unix, not(coverage)))] +#![cfg(unix)] use disksage_lib::cloud_local_eviction::{observe_path_active_use, observe_path_active_use_until}; use std::ffi::OsString; From 0584bcc600e037d564a4ff254b6e8570361d9218 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 15:12:29 -0700 Subject: [PATCH 628/691] revert: keep coverage fix in canonical evidence owner --- src-tauri/tests/cloud_local_eviction_lsof_warning.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/tests/cloud_local_eviction_lsof_warning.rs b/src-tauri/tests/cloud_local_eviction_lsof_warning.rs index 15451f395..69d9bfee0 100644 --- a/src-tauri/tests/cloud_local_eviction_lsof_warning.rs +++ b/src-tauri/tests/cloud_local_eviction_lsof_warning.rs @@ -1,4 +1,4 @@ -#![cfg(unix)] +#![cfg(all(unix, not(coverage)))] use disksage_lib::cloud_local_eviction::{observe_path_active_use, observe_path_active_use_until}; use std::ffi::OsString; From 1a4e3e1d6e409787e9a9b9d5ecaf68044cbceba5 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:08:53 -0700 Subject: [PATCH 629/691] test: carry destination headroom authority into UX stack --- src-tauri/src/copy_headroom.rs | 97 ++++++++++++++++++++++++++++++++++ 1 file changed, 97 insertions(+) create mode 100644 src-tauri/src/copy_headroom.rs diff --git a/src-tauri/src/copy_headroom.rs b/src-tauri/src/copy_headroom.rs new file mode 100644 index 000000000..bf5731a38 --- /dev/null +++ b/src-tauri/src/copy_headroom.rs @@ -0,0 +1,97 @@ +//! Destination-filesystem headroom authority for native cloud copies. +//! +//! DiskSage stages native File Provider copies below the final destination parent. A source file +//! may live on a different filesystem, so source-volume capacity cannot authorize or veto that +//! staging mutation. The probe therefore resolves the nearest existing destination ancestor; any +//! missing descendants will be created on that same filesystem before the staging file exists. + +use std::path::{Path, PathBuf}; + +fn destination_volume_probe_path(destination: &Path) -> Result { + let mut probe = destination + .parent() + .ok_or_else(|| "local-volume-headroom-destination-parent-missing".to_string())?; + loop { + match std::fs::symlink_metadata(probe) { + Ok(metadata) => { + if metadata.file_type().is_symlink() || !metadata.is_dir() { + return Err("local-volume-headroom-destination-parent-unsafe".into()); + } + return Ok(probe.to_path_buf()); + } + Err(error) if error.kind() == std::io::ErrorKind::NotFound => { + probe = probe + .parent() + .ok_or_else(|| "local-volume-headroom-destination-parent-missing".to_string())?; + } + Err(_) => return Err("local-volume-headroom-destination-parent-unavailable".into()), + } + } +} + +pub(crate) fn require_destination_copy_headroom( + destination: &Path, + candidate_bytes: u64, + observed_at_ms: u64, +) -> Result<(), String> { + let probe = destination_volume_probe_path(destination)?; + let snapshot = crate::volume_pressure::snapshot_volume(&probe, observed_at_ms)?; + if crate::volume_pressure::has_copy_headroom(snapshot.available_bytes, candidate_bytes) { + Ok(()) + } else { + Err("local-volume-headroom-insufficient".into()) + } +} + +#[cfg(test)] +mod tests { + use super::*; + + #[test] + fn missing_destination_descendants_probe_the_existing_destination_filesystem() { + let root = tempfile::tempdir().unwrap(); + let destination = root + .path() + .join("DiskSage Archive") + .join("documents") + .join("report.pdf"); + + assert_eq!(destination_volume_probe_path(&destination).unwrap(), root.path()); + } + + #[test] + fn nearest_existing_destination_parent_is_authoritative() { + let root = tempfile::tempdir().unwrap(); + let existing = root.path().join("DiskSage Archive"); + std::fs::create_dir(&existing).unwrap(); + let destination = existing.join("documents").join("report.pdf"); + + assert_eq!(destination_volume_probe_path(&destination).unwrap(), existing); + } + + #[test] + fn real_destination_statvfs_preserves_the_bounded_headroom_error() { + let root = tempfile::tempdir().unwrap(); + let destination = root.path().join("archive").join("report.pdf"); + + assert_eq!( + require_destination_copy_headroom(&destination, u64::MAX, 1), + Err("local-volume-headroom-insufficient".into()) + ); + } + + #[cfg(unix)] + #[test] + fn existing_symlink_destination_parent_is_not_capacity_authority() { + let root = tempfile::tempdir().unwrap(); + let actual = root.path().join("actual"); + std::fs::create_dir(&actual).unwrap(); + let linked = root.path().join("linked"); + std::os::unix::fs::symlink(&actual, &linked).unwrap(); + + assert_eq!( + destination_volume_probe_path(&linked.join("report.pdf")), + Err("local-volume-headroom-destination-parent-unsafe".into()) + ); + } +} From 2bf1dd2c09d51052124f335a430ededb155ec965 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:09:04 -0700 Subject: [PATCH 630/691] test: preserve destination headroom regression in UX stack --- ...loud_copy_headroom_destination_contract.rs | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 src-tauri/tests/cloud_copy_headroom_destination_contract.rs diff --git a/src-tauri/tests/cloud_copy_headroom_destination_contract.rs b/src-tauri/tests/cloud_copy_headroom_destination_contract.rs new file mode 100644 index 000000000..5049170ed --- /dev/null +++ b/src-tauri/tests/cloud_copy_headroom_destination_contract.rs @@ -0,0 +1,26 @@ +//! Regression contract for the native cloud-copy local-capacity authority. +//! +//! A native File Provider copy stages under the destination parent, so the mutation-time +//! headroom probe must be bound to that destination filesystem rather than to the source volume. + +#[test] +fn native_copy_headroom_is_bound_to_the_destination_staging_volume() { + let commands = include_str!("../src/commands.rs"); + let start = commands + .find("fn require_local_copy_headroom") + .expect("native copy headroom gate must remain explicit"); + let tail = &commands[start..]; + let end = tail + .find("\n}\n\n#[cfg(not(coverage))]\n#[tauri::command(async)]") + .expect("headroom helper must remain bounded before the next command"); + let helper = &tail[..end]; + + assert!( + helper.contains("candidate.dst"), + "headroom must be measured on the destination/staging filesystem" + ); + assert!( + !helper.contains("candidate.src"), + "source-volume free space must not authorize or veto destination staging" + ); +} From e869ba2b98cfa12029ce1d501e52a2c98895d6c8 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:14:36 -0700 Subject: [PATCH 631/691] test: reject cancel affordance on clear provider state --- src/lib/ux/ProviderStatusCard.stories.ts | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/lib/ux/ProviderStatusCard.stories.ts b/src/lib/ux/ProviderStatusCard.stories.ts index b101808f9..df443962d 100644 --- a/src/lib/ux/ProviderStatusCard.stories.ts +++ b/src/lib/ux/ProviderStatusCard.stories.ts @@ -26,6 +26,13 @@ export const Clear: Story = { state: "clear", details: "새 복사는 허용할 수 있지만 개별 파일 attestation은 별도로 필요합니다.", observedAt: "2026-08-21 17:30 KST", + canCancel: true, + onCancel: fn(), + }, + play: async ({ canvasElement, args }) => { + const canvas = within(canvasElement); + await expect(canvas.queryByRole("button", { name: "복사 취소 요청" })).not.toBeInTheDocument(); + await expect(args.onCancel).not.toHaveBeenCalled(); }, }; From a8220337306697e16929e5133f5d5a5e55bbeb59 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 23:14:58 -0700 Subject: [PATCH 632/691] fix: suppress cancel action on clear provider state --- src/lib/ux/ProviderStatusCard.svelte | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/ux/ProviderStatusCard.svelte b/src/lib/ux/ProviderStatusCard.svelte index df911797f..f87282c0d 100644 --- a/src/lib/ux/ProviderStatusCard.svelte +++ b/src/lib/ux/ProviderStatusCard.svelte @@ -62,7 +62,7 @@ {#if blockedFor}동일 차단 {blockedFor}{/if}

    {/if} - {#if canCancel} + {#if canCancel && state !== "clear"} - {#if finderCopyCancelStatus}

    {finderCopyCancelStatus}

    {/if} - {/if} + {#if finderCopyCancelStatus}

    {finderCopyCancelStatus}

    {/if} {#if icloudHealth.file_provider_activity && (icloudHealth.file_provider_activity.no_progress_fetch_count > 0 || icloudHealth.file_provider_activity.no_progress_create_count > 0)}

    File Provider의 복사 요청이 진행률 없이 만료되었습니다. Finder에 남은 복사 대기는 취소하고, diff --git a/src/lib/icloudHealthStallClock.test.ts b/src/lib/icloudHealthStallClock.test.ts index 42d2aa219..c101dc290 100644 --- a/src/lib/icloudHealthStallClock.test.ts +++ b/src/lib/icloudHealthStallClock.test.ts @@ -132,7 +132,7 @@ describe("iCloud health stall clock", () => { ).blockedSinceMs).toBe(1_200); }); - it("starts a fresh clock after a restart instead of showing stale blocker age", () => { + it("restores the persisted blocker age after a restart", () => { const next = report(activity(), { admission_blocked_since_ms: 700 }); expect(updateIcloudHealthStallClock( @@ -140,7 +140,7 @@ describe("iCloud health stall clock", () => { { blockedSinceMs: 0, fingerprint: "" }, next, 2_000, - ).blockedSinceMs).toBe(2_000); + ).blockedSinceMs).toBe(700); }); it("clears the clock when admission becomes clear", () => { diff --git a/src/lib/icloudHealthStallClock.ts b/src/lib/icloudHealthStallClock.ts index 0e4783f25..823419966 100644 --- a/src/lib/icloudHealthStallClock.ts +++ b/src/lib/icloudHealthStallClock.ts @@ -71,7 +71,7 @@ export function updateIcloudHealthStallClock( return { blockedSinceMs: previousReport ? next.admission_blocked_since_ms ?? next.observed_at_ms - : observedAtMs, + : next.admission_blocked_since_ms ?? next.observed_at_ms ?? observedAtMs, fingerprint, }; } From cf005f18c237fc60c611f95b30f42d5a5307d0cf Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 25 Aug 2026 16:12:36 +0900 Subject: [PATCH 644/691] docs(adr): record persisted iCloud stall recovery --- docs/architecture/adr/0001-cloud-offload-goal-state.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/architecture/adr/0001-cloud-offload-goal-state.md b/docs/architecture/adr/0001-cloud-offload-goal-state.md index e7e46740f..6a42ed323 100644 --- a/docs/architecture/adr/0001-cloud-offload-goal-state.md +++ b/docs/architecture/adr/0001-cloud-offload-goal-state.md @@ -642,3 +642,12 @@ prevents a growing provider queue from postponing the 15-minute Finder-stall gui the clock remains diagnostic/cancel-only and never grants copy, attestation, or eviction authority. The implementation at source head `44756d1` is covered by seven focused Vitest cases and a clean `svelte-check` run. + +## Amendment: restore persisted stall age after probe errors (2026-08-25) + +The UX stall clock now restores `admission_blocked_since_ms` when the first blocked report arrives +after restart or a failed probe, then falls back to the backend observation timestamp and finally +the local observation time. This keeps an ongoing Finder stall's 15-minute diagnostic warning from +resetting to zero without granting copy, attestation, or eviction authority. The iCloud status card +is the single Finder-cancel control; the duplicate detail-panel button was removed. Exact functional +head `74f9f3ff73ac18c9e61f6cf1f63b3fcb8237e76e` carries the regression test. From 2d39135253e7c7bb20e8f0886e5be12591a80f8b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 25 Aug 2026 16:21:11 +0900 Subject: [PATCH 645/691] fix(ui): keep one provider cancel control --- src/lib/CloudArchive.svelte | 7 +------ src/lib/cloudArchiveAdmissionContract.test.ts | 3 ++- 2 files changed, 3 insertions(+), 7 deletions(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 51405d366..e923f7ab4 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -1149,12 +1149,7 @@ - {#if canCancelFinderCopyForProviderGlobalSync(providerGlobalSync)} - - {#if finderCopyCancelStatus}

    {finderCopyCancelStatus}

    {/if} - {/if} + {#if finderCopyCancelStatus}

    {finderCopyCancelStatus}

    {/if} {/if} {:else}

    공급자 전역 동기화 대기열이 비어 있습니다. 개별 파일은 별도 provider 증거가 필요합니다.

    diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index a5254ac6a..3248e4cb5 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -62,7 +62,8 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("provider-global-sync-indexing-pending"); expect(source).toContain("provider-global-sync-local-disk-full"); expect(source).toContain("provider-global-sync-item-not-found"); - expect(source).toContain("cancellingFinderCopy || checkingProviderGlobalSync"); + expect(source.match(/onCancel={cancelFinderCopy}/g)?.length).toBe(2); + expect(source).not.toContain(" - {#if finderCopyCancelStatus}

    {finderCopyCancelStatus}

    {/if} {/if} {:else}

    공급자 전역 동기화 대기열이 비어 있습니다. 개별 파일은 별도 provider 증거가 필요합니다.

    diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index 3248e4cb5..ceddfc52b 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -56,7 +56,8 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("!selectedRootDetails()?.readable"); expect(source).toContain("async function cancelFinderCopy()"); expect(source).toContain("await api.cancelFinderCopy();"); - expect(source).toContain("cancellingFinderCopy || checkingIcloudHealth"); + expect(source).toContain("cancelDisabled={checkingIcloudHealth}"); + expect(source).toContain("cancelLabel={cancellingFinderCopy ?"); expect(source).toContain("canCancelFinderCopyForProviderGlobalSync"); expect(source).toContain("provider-global-sync-reconciliation-pending"); expect(source).toContain("provider-global-sync-indexing-pending"); @@ -88,6 +89,23 @@ describe("CloudArchive iCloud admission contract", () => { expect(probeCall).toBeGreaterThan(providerGuard); }); + it("keeps cancel confirmation visible after a refresh clears admission", () => { + const source = readFileSync(resolve(repositoryRoot, "src/lib/CloudArchive.svelte"), "utf8"); + const icloudStart = source.indexOf("iCloud 새 복사 admission"); + const icloudEnd = source.indexOf("{providerGlobalSync.provider} 전역 동기화 admission"); + const icloudReceipt = source.slice(icloudStart, icloudEnd); + const providerStart = icloudEnd; + const providerReceipt = source.slice(providerStart); + + expect(icloudReceipt.indexOf("finderCopyCancelStatus")).toBeGreaterThanOrEqual(0); + expect(icloudReceipt.indexOf("finderCopyCancelStatus")).toBeLessThan( + icloudReceipt.indexOf("icloudHealth.new_copy_admission_blockers.length > 0"), + ); + expect(providerReceipt.indexOf("finderCopyCancelStatus")).toBeLessThan( + providerReceipt.indexOf("providerGlobalSync.blockers.length > 0"), + ); + }); + it("defaults provider OAuth consent to read-only until write access is explicitly selected", () => { const source = readFileSync(resolve(repositoryRoot, "src/lib/CloudArchive.svelte"), "utf8"); expect(source).toContain("let oauthWriteAccess = $state(false);"); diff --git a/src/lib/icloudHealthStallClock.ts b/src/lib/icloudHealthStallClock.ts index 823419966..d49f690ae 100644 --- a/src/lib/icloudHealthStallClock.ts +++ b/src/lib/icloudHealthStallClock.ts @@ -71,7 +71,7 @@ export function updateIcloudHealthStallClock( return { blockedSinceMs: previousReport ? next.admission_blocked_since_ms ?? next.observed_at_ms - : next.admission_blocked_since_ms ?? next.observed_at_ms ?? observedAtMs, + : next.admission_blocked_since_ms ?? next.observed_at_ms, fingerprint, }; } From cbb9dc0f5b1eba52e76f23f673381a3ebcdc132f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 25 Aug 2026 18:28:43 +0900 Subject: [PATCH 649/691] fix: adopt late iCloud blocker timestamps --- src/lib/icloudHealthStallClock.test.ts | 19 +++++++++++++++++++ src/lib/icloudHealthStallClock.ts | 9 +++++++++ src/routes/+page.svelte | 4 ++-- 3 files changed, 30 insertions(+), 2 deletions(-) diff --git a/src/lib/icloudHealthStallClock.test.ts b/src/lib/icloudHealthStallClock.test.ts index c101dc290..7f61da96b 100644 --- a/src/lib/icloudHealthStallClock.test.ts +++ b/src/lib/icloudHealthStallClock.test.ts @@ -143,6 +143,25 @@ describe("iCloud health stall clock", () => { ).blockedSinceMs).toBe(700); }); + it("adopts a persisted blocker age supplied after the first poll", () => { + const previous = report(activity(), { admission_blocked_since_ms: null }); + const fingerprint = icloudHealthStallClockFingerprint(previous); + const next = report(activity(), { + observed_at_ms: 2_000, + admission_blocked_since_ms: 700, + }); + + expect(updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint }, + next, + 2_000, + )).toEqual({ + blockedSinceMs: 700, + fingerprint: icloudHealthStallClockFingerprint(next), + }); + }); + it("clears the clock when admission becomes clear", () => { const blocked = report(activity()); const fingerprint = icloudHealthStallClockFingerprint(blocked); diff --git a/src/lib/icloudHealthStallClock.ts b/src/lib/icloudHealthStallClock.ts index d49f690ae..f137f6cf7 100644 --- a/src/lib/icloudHealthStallClock.ts +++ b/src/lib/icloudHealthStallClock.ts @@ -76,6 +76,15 @@ export function updateIcloudHealthStallClock( }; } + const newlySuppliedBlockedSinceMs = next.admission_blocked_since_ms; + if ( + newlySuppliedBlockedSinceMs != null + && newlySuppliedBlockedSinceMs > 0 + && newlySuppliedBlockedSinceMs !== previousReport.admission_blocked_since_ms + ) { + return { blockedSinceMs: newlySuppliedBlockedSinceMs, fingerprint }; + } + if (previousClock.fingerprint !== fingerprint && hasRealProgress(previousReport, next)) { return { blockedSinceMs: observedAtMs, fingerprint }; } diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte index 009700e4c..7753015c8 100644 --- a/src/routes/+page.svelte +++ b/src/routes/+page.svelte @@ -159,10 +159,10 @@ .stats { color: var(--ds-text-muted); font-size: 0.9rem; } .error { color: var(--ds-danger-text); background: var(--ds-danger-surface); padding: var(--ds-space-2); border-radius: var(--ds-radius-sm); } .crumbs { margin: var(--ds-space-3) 0; display: flex; gap: var(--ds-space-1); flex-wrap: wrap; align-items: center; } - .crumb { background: transparent; border-color: transparent; color: var(--ds-action); cursor: pointer; } + .crumb { background: transparent; border: none; color: var(--ds-action); cursor: pointer; } .entries { list-style: none; padding: 0; max-height: 40vh; overflow-y: auto; } .entries li { display: flex; justify-content: space-between; gap: var(--ds-space-3); padding: var(--ds-space-1) 0; } - .dir { background: transparent; border-color: transparent; cursor: pointer; font: inherit; text-align: left; } + .dir { background: transparent; border: none; cursor: pointer; font: inherit; text-align: left; } .size { color: var(--ds-text-muted); font-variant-numeric: tabular-nums; } .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; border: 0; } @media (max-width: 40rem) { From 9ef6d21068c9a3b03c0044567ac258a49309c2f5 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 26 Aug 2026 03:10:01 +0900 Subject: [PATCH 650/691] fix: disable repeated provider cancel requests --- src/lib/CloudArchive.svelte | 4 ++-- src/lib/cloudArchiveAdmissionContract.test.ts | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index b4afba06d..a9f374f3f 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -973,7 +973,7 @@ || icloudHealth.file_provider_activity.active_upload_count > 0 || icloudHealth.file_provider_activity.active_download_count > 0 ))} - cancelDisabled={checkingIcloudHealth} + cancelDisabled={checkingIcloudHealth || cancellingFinderCopy} cancelLabel={cancellingFinderCopy ? "Finder 복사 취소 요청 중…" : "Finder 복사 취소 요청"} onCancel={cancelFinderCopy} statusId="icloud-provider-status" @@ -1115,7 +1115,7 @@ observedAt={evidenceObservedAt(providerGlobalSyncObservedAtMs)} blockedFor={blockedDuration(providerGlobalSyncBlockedSinceMs, providerGlobalSyncObservedAtMs)} canCancel={canCancelFinderCopyForProviderGlobalSync(providerGlobalSync)} - cancelDisabled={checkingProviderGlobalSync} + cancelDisabled={checkingProviderGlobalSync || cancellingFinderCopy} cancelLabel={cancellingFinderCopy ? "Finder 복사 취소 요청 중…" : "Finder 복사 취소 요청"} onCancel={cancelFinderCopy} statusId="provider-global-sync-status" diff --git a/src/lib/cloudArchiveAdmissionContract.test.ts b/src/lib/cloudArchiveAdmissionContract.test.ts index ceddfc52b..6c379b4e3 100644 --- a/src/lib/cloudArchiveAdmissionContract.test.ts +++ b/src/lib/cloudArchiveAdmissionContract.test.ts @@ -56,7 +56,7 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("!selectedRootDetails()?.readable"); expect(source).toContain("async function cancelFinderCopy()"); expect(source).toContain("await api.cancelFinderCopy();"); - expect(source).toContain("cancelDisabled={checkingIcloudHealth}"); + expect(source).toContain("cancelDisabled={checkingIcloudHealth || cancellingFinderCopy}"); expect(source).toContain("cancelLabel={cancellingFinderCopy ?"); expect(source).toContain("canCancelFinderCopyForProviderGlobalSync"); expect(source).toContain("provider-global-sync-reconciliation-pending"); @@ -73,9 +73,9 @@ describe("CloudArchive iCloud admission contract", () => { expect(source).toContain("blockedDuration(providerGlobalSyncBlockedSinceMs, providerGlobalSyncObservedAtMs)"); expect(source).toContain('"materialization-stalled"'); expect(source).toContain('statusId="icloud-provider-status"'); - expect(source).toContain("cancelDisabled={checkingIcloudHealth}"); + expect(source).toContain("cancelDisabled={checkingIcloudHealth || cancellingFinderCopy}"); expect(source).toContain('selectedRootDetails()?.provider !== "icloud" && providerGlobalSyncError && !providerGlobalSync'); - expect(source).toContain("cancelDisabled={checkingProviderGlobalSync}"); + expect(source).toContain("cancelDisabled={checkingProviderGlobalSync || cancellingFinderCopy}"); }); it("does not run the heavy iCloud probe for non-iCloud selected roots", () => { From 64a255bc2afa95f7cdbdde7eb1803978a1c93792 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 26 Aug 2026 03:35:18 +0900 Subject: [PATCH 651/691] fix: apply dark-mode text tokens to legacy panels --- src/lib/BrewCleanup.svelte | 4 ++-- src/lib/Cleanup.svelte | 2 +- src/lib/CloudArchive.svelte | 10 +++++----- src/lib/Duplicates.svelte | 2 +- src/lib/GitWorktreeCleanup.svelte | 6 +++--- src/lib/IcloudLocalEviction.svelte | 4 ++-- src/lib/Organize.svelte | 4 ++-- src/lib/OrphanCleanup.svelte | 2 +- src/lib/TopFiles.svelte | 2 +- 9 files changed, 18 insertions(+), 18 deletions(-) diff --git a/src/lib/BrewCleanup.svelte b/src/lib/BrewCleanup.svelte index 905a36adb..7ef4d8855 100644 --- a/src/lib/BrewCleanup.svelte +++ b/src/lib/BrewCleanup.svelte @@ -162,13 +162,13 @@ From 9124e01e82474e2c579be102c77694838215acb5 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 26 Aug 2026 03:45:03 +0900 Subject: [PATCH 652/691] fix: distinguish transfer completion from progress --- src/lib/CloudArchive.svelte | 2 +- src/lib/icloudHealthStallClock.test.ts | 13 +++++++++++++ src/lib/icloudHealthStallClock.ts | 17 ++++++++++------- 3 files changed, 24 insertions(+), 8 deletions(-) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index 128394115..d7a775bea 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -852,7 +852,7 @@ } function providerGlobalStatusDetails(): string { - if (!providerGlobalSync) return providerGlobalSyncError || "공급자 전역 동기화 상태를 확인하는 중입니다."; + if (!providerGlobalSync) return "공급자 전역 동기화 상태 확인에 실패했습니다. 아래 오류를 확인하십시오."; const blockers = providerGlobalSync.blockers.map(providerGlobalSyncBlockerLabel); const pending = providerGlobalSync.pending_indexable_count ?? 0; return blockers.length > 0 diff --git a/src/lib/icloudHealthStallClock.test.ts b/src/lib/icloudHealthStallClock.test.ts index 7f61da96b..e462b2aca 100644 --- a/src/lib/icloudHealthStallClock.test.ts +++ b/src/lib/icloudHealthStallClock.test.ts @@ -106,6 +106,19 @@ describe("iCloud health stall clock", () => { expect(clock.fingerprint).toBe(icloudHealthStallClockFingerprint(next)); }); + it("does not treat a transfer count dropping to zero as progress", () => { + const previous = report(activity({ active_upload_count: 1 })); + const previousFingerprint = icloudHealthStallClockFingerprint(previous); + const next = report(activity({ active_upload_count: 0 }), { observed_at_ms: 2_000 }); + + expect(updateIcloudHealthStallClock( + previous, + { blockedSinceMs: 1_200, fingerprint: previousFingerprint }, + next, + 2_000, + ).blockedSinceMs).toBe(1_200); + }); + it("resets when the indexing backlog drains", () => { const previous = report(activity({ pending_indexable_count: 20 })); const previousFingerprint = icloudHealthStallClockFingerprint(previous); diff --git a/src/lib/icloudHealthStallClock.ts b/src/lib/icloudHealthStallClock.ts index f137f6cf7..1540df58f 100644 --- a/src/lib/icloudHealthStallClock.ts +++ b/src/lib/icloudHealthStallClock.ts @@ -23,14 +23,12 @@ function progressFingerprint(report: IcloudSyncHealthReport): string { ].join("|"); } -function activeTransferFingerprint(report: IcloudSyncHealthReport): string { +function transferProgressFingerprint(report: IcloudSyncHealthReport): readonly [number | null, number | null] { const activity = report.file_provider_activity; return [ - activity?.active_upload_count ?? 0, - activity?.active_download_count ?? 0, - activity?.active_upload_progress_millionths ?? "", - activity?.active_download_progress_millionths ?? "", - ].join("|"); + activity?.active_upload_progress_millionths ?? null, + activity?.active_download_progress_millionths ?? null, + ]; } function indexingBacklogDrained( @@ -46,7 +44,12 @@ function hasRealProgress( previousReport: IcloudSyncHealthReport, next: IcloudSyncHealthReport, ): boolean { - return activeTransferFingerprint(previousReport) !== activeTransferFingerprint(next) + const [previousUpload, previousDownload] = transferProgressFingerprint(previousReport); + const [nextUpload, nextDownload] = transferProgressFingerprint(next); + const transferProgressed = (previous: number | null, current: number | null): boolean => + previous != null && current != null && current > previous; + return transferProgressed(previousUpload, nextUpload) + || transferProgressed(previousDownload, nextDownload) || indexingBacklogDrained(previousReport, next); } From 1ae5a3517f80aeda79c3e77fe540ccb2ce1f4ccb Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 26 Aug 2026 03:58:32 +0900 Subject: [PATCH 653/691] fix: show provider sync checking state --- src/lib/CloudArchive.svelte | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/lib/CloudArchive.svelte b/src/lib/CloudArchive.svelte index d7a775bea..9795561be 100644 --- a/src/lib/CloudArchive.svelte +++ b/src/lib/CloudArchive.svelte @@ -1084,6 +1084,14 @@ 로컬 여유공간을 확보한 뒤 DiskSage에서 상태를 다시 확인하십시오.

    {/if} + {#if selectedRootDetails()?.provider !== "icloud" && checkingProviderGlobalSync && !providerGlobalSync && !providerGlobalSyncError} + + {/if} {#if selectedRootDetails()?.provider !== "icloud" && providerGlobalSyncError && !providerGlobalSync} Date: Wed, 26 Aug 2026 01:19:51 -0700 Subject: [PATCH 654/691] docs: assign Storybook UX decision ADR-0012 --- ...ontracts.md => 0012-accessible-storybook-ux-contracts.md} | 4 ++-- docs/architecture/adr/README.md | 5 ++--- 2 files changed, 4 insertions(+), 5 deletions(-) rename docs/architecture/adr/{0010-accessible-storybook-ux-contracts.md => 0012-accessible-storybook-ux-contracts.md} (96%) diff --git a/docs/architecture/adr/0010-accessible-storybook-ux-contracts.md b/docs/architecture/adr/0012-accessible-storybook-ux-contracts.md similarity index 96% rename from docs/architecture/adr/0010-accessible-storybook-ux-contracts.md rename to docs/architecture/adr/0012-accessible-storybook-ux-contracts.md index 1f6e126ee..dd5893179 100644 --- a/docs/architecture/adr/0010-accessible-storybook-ux-contracts.md +++ b/docs/architecture/adr/0012-accessible-storybook-ux-contracts.md @@ -1,4 +1,4 @@ -# ADR-0010: Accessible Storybook UX contracts and design tokens +# ADR-0012: Accessible Storybook UX contracts and design tokens **Status:** Proposed **Date:** 2026-08-21 @@ -66,4 +66,4 @@ https://storybook.js.org/docs/writing-tests/accessibility-testing The provider status contract includes `provider-global-sync-indexing-pending` in the existing bounded Finder-cancel event path. This keeps the Storybook event model aligned with the runtime provider-global blocker set without granting the browser cloud-write or source-eviction authority. -The exact-head contract and Svelte checks pass at `b67ea3be`. +The exact-head contract and Svelte checks pass at `b67ea3be`. \ No newline at end of file diff --git a/docs/architecture/adr/README.md b/docs/architecture/adr/README.md index 17bd8d471..20b5366d5 100644 --- a/docs/architecture/adr/README.md +++ b/docs/architecture/adr/README.md @@ -15,11 +15,10 @@ new numbered record rather than rewriting history. | [0007](0007-pre-copy-evidence-cohort.md) | Gate iCloud plans on a fresh evidence cohort | Accepted | | [0008](0008-hourly-loop-foreign-dependencies-read-only.md) | Keep the hourly loop read-only at foreign dependency boundaries | Accepted | | [0009](0009-path-free-lineage-relation-graph.md) | Export a path-free lineage relation graph | Accepted | -| [0010](0010-accessible-storybook-ux-contracts.md) | Accessible Storybook UX contracts and design tokens | Proposed | - | [0010](0010-rooted-organize-destinations.md) | Require rooted, process-independent organize destinations | Accepted | | [0011](0011-cloud-transfer-failure-and-materialization.md) | Durable failed-copy evidence and placeholder-safe adoption | Accepted | +| [0012](0012-accessible-storybook-ux-contracts.md) | Accessible Storybook UX contracts and design tokens | Proposed | New records must state context, decision, consequences, rejected alternatives, and the evidence or standard that led to the decision. A record never grants cloud-write or source-eviction authority; -those remain bound to current Rust evidence and explicit approvals. +those remain bound to current Rust evidence and explicit approvals. \ No newline at end of file From 3349f830accead6149e5286b90862b2b04a3be74 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 26 Aug 2026 17:41:04 +0900 Subject: [PATCH 655/691] fix: enforce customer-safe action copy contract --- src/lib/BrewCleanup.svelte | 62 ++- src/lib/Cleanup.svelte | 68 +-- src/lib/CloudArchive.svelte | 430 ++++++++++-------- src/lib/Duplicates.svelte | 10 +- src/lib/GitWorktreeCleanup.svelte | 54 ++- src/lib/IcloudLocalEviction.svelte | 31 +- src/lib/Inventory.svelte | 31 +- src/lib/Organize.svelte | 36 +- src/lib/OrphanCleanup.svelte | 17 +- src/lib/brewCleanupSafetyUiContract.test.ts | 2 +- src/lib/cleanupCustomerCopyContract.test.ts | 90 ++++ src/lib/cloudArchiveAdmissionContract.test.ts | 34 +- src/lib/ux/ProviderStatusCard.svelte | 8 +- 13 files changed, 506 insertions(+), 367 deletions(-) create mode 100644 src/lib/cleanupCustomerCopyContract.test.ts diff --git a/src/lib/BrewCleanup.svelte b/src/lib/BrewCleanup.svelte index 7ef4d8855..c25a3dcaf 100644 --- a/src/lib/BrewCleanup.svelte +++ b/src/lib/BrewCleanup.svelte @@ -25,8 +25,8 @@ reset(); try { judgment = await api.judgeBrewCleanup(); - } catch (e) { - error = String(e); + } catch { + error = "Homebrew 정리 범위를 확인하지 못했습니다. 다시 시도하십시오."; } finally { planning = false; } @@ -35,10 +35,10 @@ function approvalGuidance(): string { if (!judgment || judgment.verdict !== "safe") return ""; if (!judgment.calibration || judgment.calibration.judgment_id !== judgment.judgment_id) { - return "이 정확한 LLM 판정에 연결된 fast-mlsirm calibration이 필요합니다."; + return "추가 안전 확인이 끝나지 않아 실행할 수 없습니다. 정리 계획을 다시 확인하십시오."; } if (!judgment.calibration.passed) { - return "fast-mlsirm Judge calibration이 통과하지 않아 실행할 수 없습니다."; + return "안전 확인을 통과하지 않아 실행할 수 없습니다. 정리 계획을 다시 확인하십시오."; } if (confirmationPhrase.trim() !== judgment.exact_approval_phrase) { return "승인 문구가 일치하지 않습니다."; @@ -64,9 +64,8 @@ async function executeCleanup() { if (!judgment || !executionReady()) return; const okay = await confirm( - "LLM이 안전하다고 판단한 고정 명령을 실행합니다.\n\n" - + "brew cleanup --prune-prefix\n\n" - + "Homebrew prefix 안의 끊어진 심볼릭 링크와 빈 디렉터리만 정리하며, 실행 전 dry-run 계획을 다시 검증합니다.", + "Homebrew의 끊어진 심볼릭 링크와 빈 디렉터리만 정리합니다.\n\n" + + "실행 전에 정리 범위를 다시 확인합니다.", { title: "DiskSage Homebrew 정리", kind: "warning" }, ); if (!okay) return; @@ -81,8 +80,8 @@ confirmationPhrase.trim(), rationale.trim(), ); - } catch (e) { - error = String(e); + } catch { + error = "Homebrew 정리를 실행하지 못했습니다. 상태를 확인한 뒤 다시 시도하십시오."; } finally { judgment = null; confirmationPhrase = ""; @@ -95,10 +94,10 @@
    Homebrew 정리 (macOS)

    - 읽기 전용 dry-run 결과를 로컬 LLM이 판단합니다. 실행 범위는 Homebrew prefix 안의 끊어진 심볼릭 링크와 빈 디렉터리로 제한되며, Safe여도 사람의 승인 문구와 사유를 입력해야 고정 명령만 실행됩니다. + Homebrew 안의 끊어진 심볼릭 링크와 빈 디렉터리만 확인합니다. 정리 범위를 확인하고 승인 문구와 사유를 입력해야 실행됩니다.

    {#if error}{/if} @@ -106,23 +105,25 @@ {#if judgment || completedJudgment} {@const report = (judgment ?? completedJudgment)!}
    -
    LLM 판정: {report.verdict} · {report.model_name}
    -

    {report.reason || "모델이 설명을 반환하지 않았습니다."}

    -

    계획 지문: {report.plan_fingerprint}

    -

    실행 예정: brew cleanup --prune-prefix

    +
    {report.verdict === "safe" ? "정리 가능" : "정리 보류"}
    +

    + {report.verdict === "safe" + ? "확인된 Homebrew 정리 범위를 검토한 뒤 승인하십시오." + : "안전 조건을 충족하지 않아 정리할 수 없습니다. Homebrew 상태를 확인한 뒤 다시 시도하십시오."} +

    +

    정리 범위: Homebrew의 끊어진 심볼릭 링크와 빈 디렉터리

    {#if report.calibration}

    - Judge calibration ({report.calibration.engine}): {report.calibration.passed ? "통과" : "실패"} - · 표본 {report.calibration.sample_count}개 · 일치율 {Math.round(report.calibration.exact_agreement * 100)}% + 추가 안전 확인: {report.calibration.passed ? "완료" : "미완료"}

    {:else} -

    fast-mlsirm calibration 증거가 없어 독립적인 사람 승인 문구가 계속 필요합니다.

    +

    추가 안전 확인이 없어 사람의 승인 문구가 계속 필요합니다.

    {/if} - 
    {report.plan.dry_run_output || "dry-run에서 정리 대상이 보고되지 않았습니다."}
    +

    정리 대상은 Homebrew 상태를 다시 확인한 뒤에만 처리됩니다.

    {#if judgment && judgment.verdict === "safe" && !execution}
    -

    아래 승인 문구 전체를 직접 입력해야 합니다. 실행 직전에 dry-run 계획과 LLM 판단을 다시 대조합니다.

    +

    아래 승인 문구 전체와 실행 사유를 입력해야 합니다. 실행 직전에 정리 범위를 다시 확인합니다.

    {judgment.exact_approval_phrase} {#if approvalGuidance()}

    {approvalGuidance()}

    {/if}
    {:else if judgment && judgment.verdict !== "safe"} -

    Safe가 아니므로 실행 권한을 만들지 않았습니다.

    +

    안전 조건을 충족하지 않아 실행할 수 없습니다. 계획을 다시 확인하십시오.

    {/if} {#if execution} -

    - {execution.executed ? `실행 완료 (종료 코드 ${execution.status_code})` : "실행되지 않음"} +

    + {execution.executed && execution.status_code === 0 + ? "Homebrew 정리를 완료했습니다." + : "Homebrew 정리를 완료하지 못했습니다. 상태를 확인한 뒤 다시 시도하십시오."}

    - {#if execution.stdout}
    {execution.stdout}
    {/if} - {#if execution.stderr}
    {execution.stderr}
    {/if} - {#if execution.record_path} -

    감사 기록: {execution.record_path}

    - {:else} - - {/if} {/if}
    {/if} @@ -162,12 +158,10 @@ + \ No newline at end of file From 591c57023c6145677e2a7702c44cbcb541888854 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 00:14:57 -0700 Subject: [PATCH 673/691] test(ux): keep terminology checks with canonical docs owner --- src/lib/uxContract.test.ts | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index 5ae6ceb9a..f7ed48c19 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -123,16 +123,4 @@ textarea { expect(workflow).toContain("npm run test-storybook"); expect(read(".storybook/test-runner.ts")).toContain("setViewportSize"); }); - - it("uses release-consumer terminology rather than a shopping-domain actor", () => { - const files = [ - "CHANGELOG.md", - "docs/product-technical-gap-baseline.md", - "docs/doctoring/release-version-contract.md", - "docs/doctoring/release-artifact-provenance.md", - "scripts/ci/release-version.mjs", - "src-tauri/src/preferred_scan_roots.rs", - ]; - for (const file of files) expect(read(file).toLowerCase()).not.toMatch(/\bbuyer\b/); - }); }); From 07333d49988f9ee450be85059f484baaca4ae7f6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 01:07:27 -0700 Subject: [PATCH 674/691] test: scope customer copy contract to UX owner --- src/lib/cleanupCustomerCopyContract.test.ts | 30 +++++++++++---------- 1 file changed, 16 insertions(+), 14 deletions(-) diff --git a/src/lib/cleanupCustomerCopyContract.test.ts b/src/lib/cleanupCustomerCopyContract.test.ts index de3a189ce..d9106fbba 100644 --- a/src/lib/cleanupCustomerCopyContract.test.ts +++ b/src/lib/cleanupCustomerCopyContract.test.ts @@ -1,21 +1,23 @@ -import { readdirSync, readFileSync } from "node:fs"; +import { readFileSync } from "node:fs"; import { dirname, resolve } from "node:path"; import { fileURLToPath } from "node:url"; import { describe, expect, it } from "vitest"; const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../.."); -function svelteFiles(directory: string): string[] { - return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => { - const entryPath = resolve(directory, entry.name); - if (entry.isDirectory()) return svelteFiles(entryPath); - return entry.isFile() && entry.name.endsWith(".svelte") ? [entryPath] : []; - }); -} - -const screenFiles = ["src/lib", "src/routes"].flatMap((directory) => - svelteFiles(resolve(repositoryRoot, directory)), -); +// Keep this contract scoped to customer surfaces this Storybook/UX owner actually changes. +// CloudArchive and the primary scan page have separate canonical PR owners; asserting their +// current-main copy here would turn unrelated dependency movement into a false-negative gate. +const screenFiles = [ + "src/lib/BrewCleanup.svelte", + "src/lib/Cleanup.svelte", + "src/lib/Duplicates.svelte", + "src/lib/GitWorktreeCleanup.svelte", + "src/lib/IcloudLocalEviction.svelte", + "src/lib/Inventory.svelte", + "src/lib/Organize.svelte", + "src/lib/OrphanCleanup.svelte", +].map((path) => resolve(repositoryRoot, path)); function visibleText(filePath: string): string { const source = readFileSync(filePath, "utf8"); @@ -53,7 +55,7 @@ function staticActionParagraphs(filePath: string): string[] { } describe("customer copy contract", () => { - it("does not expose implementation boundaries in any customer screen", () => { + it("does not expose implementation boundaries in Storybook UX-owned customer screens", () => { const forbidden = [ "온톨로지", "계보", "attestation", "File Provider", "OAuth", "active-use", "APFS 공유 블록", "메타데이터 스캔", "dangling 이미지", "VM 저장소", "증거 공백", @@ -99,4 +101,4 @@ describe("customer copy contract", () => { expect(source).toContain("다시 시도하십시오"); } }); -}); \ No newline at end of file +}); From 9b9f0edb76106731ef5a933d52e32fe72a96a0e5 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 01:07:56 -0700 Subject: [PATCH 675/691] test: keep Storybook contracts inside UX ownership --- src/lib/uxContract.test.ts | 20 ++++---------------- 1 file changed, 4 insertions(+), 16 deletions(-) diff --git a/src/lib/uxContract.test.ts b/src/lib/uxContract.test.ts index f7ed48c19..e8e1f9c32 100644 --- a/src/lib/uxContract.test.ts +++ b/src/lib/uxContract.test.ts @@ -34,7 +34,6 @@ describe("UI/UX design and Storybook contract", () => { it("keeps visual control styling opt-in instead of restyling every legacy button", () => { const tokens = read("src/lib/ui/design-tokens.css"); - const page = read("src/routes/+page.svelte"); const providerStatus = read("src/lib/ux/ProviderStatusCard.svelte"); const bareControlRules = cssRules(tokens).filter(ruleHasBareControlSelector); @@ -48,14 +47,12 @@ describe("UI/UX design and Storybook contract", () => { expect(tokens).toMatch(/\.ds-control\s*\{[\s\S]*?min-height:\s*var\(--ds-control-min-size\)/); expect(tokens).toMatch(/\.ds-control\s*\{[\s\S]*?border:\s*1px solid var\(--ds-border\)/); expect(tokens).toMatch(/\.ds-control:hover:not\(:disabled\)/); - expect(page).toContain('class="ds-control scan-action"'); expect(providerStatus).toContain('class="ds-control"'); expect(providerStatus).toContain("h1, h2 { margin: 0; font-size: 1.1rem; }"); }); it("keeps form labels and notices readable in dark mode", () => { for (const relativePath of [ - "src/lib/CloudArchive.svelte", "src/lib/BrewCleanup.svelte", "src/lib/GitWorktreeCleanup.svelte", "src/lib/Cleanup.svelte", @@ -88,26 +85,17 @@ textarea { expect(unsafeBareRules.some(({ body }) => /\bmin-height\s*:/.test(body))).toBe(true); }); - it("keeps the shell keyboard and live-feedback boundaries explicit", () => { + it("keeps the Storybook-owned shell skip-link boundary explicit", () => { const layout = read("src/routes/+layout.svelte"); - const page = read("src/routes/+page.svelte"); + expect(layout).toContain('class="ds-skip-link"'); expect(layout).toContain('href="#main-content"'); - expect(page).toContain('id="main-content" tabindex="-1"'); - expect(page).toContain('for="scan-root"'); - expect(page).toContain('role="alert"'); - expect(page).toContain('role="group" aria-label="스캔 제어"'); - expect(page).toContain('aria-live="polite"'); - expect(page).not.toContain("alert(`스캔 시작 실패"); - expect(page).toContain("onMount(() => {"); - expect(page).toContain("return () => {"); - expect(page).toContain("unlistenProgress?.();"); - expect(page).toContain("unlistenDone?.();"); + expect(layout).toContain('import "$lib/ui/design-tokens.css"'); }); it("registers every provider state and interaction edge in Storybook", () => { const story = read("src/lib/ux/ProviderStatusCard.stories.ts"); const config = read(".storybook/preview.ts"); - const workflow = read(".github/workflows/test.yml"); + const workflow = read(".github/workflows/storybook-accessibility.yml"); for (const state of ["clear", "checking", "provider-sync-incomplete", "materialization-stalled"]) { expect(story).toContain(`state: "${state}"`); } From c958c0bfcab407cb385c8021f7a31aab8425de15 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 01:08:19 -0700 Subject: [PATCH 676/691] ci: exercise Storybook accessibility contract --- .github/workflows/storybook-accessibility.yml | 51 +++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 .github/workflows/storybook-accessibility.yml diff --git a/.github/workflows/storybook-accessibility.yml b/.github/workflows/storybook-accessibility.yml new file mode 100644 index 000000000..6043a66e2 --- /dev/null +++ b/.github/workflows/storybook-accessibility.yml @@ -0,0 +1,51 @@ +name: Storybook Accessibility + +on: + push: + branches: [main] + pull_request: + +permissions: + contents: read + +concurrency: + group: storybook-accessibility-${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + +jobs: + storybook-accessibility: + runs-on: ubuntu-latest + timeout-minutes: 15 + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + with: + node-version: 20.19.0 + cache: npm + - run: npm ci + - name: Build static Storybook + run: npm run build-storybook + - name: Install Chromium for Storybook interaction tests + run: npx playwright install --with-deps chromium + - name: Run Storybook accessibility and interaction tests + shell: bash + run: | + set -euo pipefail + python3 -m http.server 6006 --directory storybook-static >/tmp/disksage-storybook.log 2>&1 & + server_pid=$! + trap 'kill "$server_pid" 2>/dev/null || true' EXIT + + for attempt in {1..30}; do + if curl --fail --silent --show-error http://127.0.0.1:6006/ >/dev/null; then + break + fi + if [[ "$attempt" == "30" ]]; then + cat /tmp/disksage-storybook.log + exit 1 + fi + sleep 1 + done + + npm run test-storybook -- --url http://127.0.0.1:6006 From b085f9e2a0c95dbaadcd3d2b924e082734862e7b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 01:33:38 -0700 Subject: [PATCH 677/691] test(ci): require exact-head Storybook accessibility evidence --- ...ybookAccessibilityWorkflowContract.test.ts | 39 +++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 src/lib/storybookAccessibilityWorkflowContract.test.ts diff --git a/src/lib/storybookAccessibilityWorkflowContract.test.ts b/src/lib/storybookAccessibilityWorkflowContract.test.ts new file mode 100644 index 000000000..b4d4d0ee4 --- /dev/null +++ b/src/lib/storybookAccessibilityWorkflowContract.test.ts @@ -0,0 +1,39 @@ +import { readFileSync } from "node:fs"; +import { dirname, resolve } from "node:path"; +import { fileURLToPath } from "node:url"; +import { describe, expect, it } from "vitest"; + +const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../.."); + +describe("Storybook accessibility workflow contract", () => { + it("binds pull-request execution to the submitted exact head before exercising Storybook", () => { + const workflow = readFileSync( + resolve(repositoryRoot, ".github/workflows/storybook-accessibility.yml"), + "utf8", + ); + + expect(workflow).toContain( + "EXPECTED_HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}", + ); + expect(workflow).toContain( + "SOURCE_REPOSITORY: ${{ github.event.pull_request.head.repo.full_name || github.repository }}", + ); + + const checkoutIndex = workflow.indexOf("uses: actions/checkout@"); + const verifyIndex = workflow.indexOf("name: Verify exact source checkout"); + const dependencyInstallIndex = workflow.indexOf("run: npm ci"); + + expect(checkoutIndex).toBeGreaterThanOrEqual(0); + expect(verifyIndex).toBeGreaterThan(checkoutIndex); + expect(dependencyInstallIndex).toBeGreaterThan(verifyIndex); + + const checkoutBlock = workflow.slice(checkoutIndex, verifyIndex); + expect(checkoutBlock).toContain("repository: ${{ env.SOURCE_REPOSITORY }}"); + expect(checkoutBlock).toContain("ref: ${{ env.EXPECTED_HEAD_SHA }}"); + expect(checkoutBlock).toContain("persist-credentials: false"); + + const verifyBlock = workflow.slice(verifyIndex, dependencyInstallIndex); + expect(verifyBlock).toContain('actual_head="$(git rev-parse HEAD)"'); + expect(verifyBlock).toContain('test "$actual_head" = "$EXPECTED_HEAD_SHA"'); + }); +}); From fbe72f6852b77e08e21edcde48b469474de8a3af Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 01:39:26 -0700 Subject: [PATCH 678/691] fix(ci): bind Storybook evidence to exact PR head --- .github/workflows/storybook-accessibility.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.github/workflows/storybook-accessibility.yml b/.github/workflows/storybook-accessibility.yml index 6043a66e2..1d2a0e89e 100644 --- a/.github/workflows/storybook-accessibility.yml +++ b/.github/workflows/storybook-accessibility.yml @@ -16,10 +16,21 @@ jobs: storybook-accessibility: runs-on: ubuntu-latest timeout-minutes: 15 + env: + EXPECTED_HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }} + SOURCE_REPOSITORY: ${{ github.event.pull_request.head.repo.full_name || github.repository }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: + repository: ${{ env.SOURCE_REPOSITORY }} + ref: ${{ env.EXPECTED_HEAD_SHA }} persist-credentials: false + - name: Verify exact source checkout + shell: bash + run: | + set -euo pipefail + actual_head="$(git rev-parse HEAD)" + test "$actual_head" = "$EXPECTED_HEAD_SHA" - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20.19.0 From 5f17cadeccf8a7cac689d0f1a78b8fab5a47797f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 09:39:13 -0700 Subject: [PATCH 679/691] chore(ux): return duplicates privacy to canonical owner --- src/lib/Duplicates.svelte | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/src/lib/Duplicates.svelte b/src/lib/Duplicates.svelte index e809e26c0..29d0c27a3 100644 --- a/src/lib/Duplicates.svelte +++ b/src/lib/Duplicates.svelte @@ -38,8 +38,8 @@ } toDelete = next; loadVerdicts(groups.flatMap((g) => g.paths)); - } catch { - loadError = "중복 파일을 확인하지 못했습니다. 경로와 권한을 확인한 뒤 다시 시도하십시오."; + } catch (e) { + loadError = String(e); } finally { busy = false; } @@ -68,7 +68,7 @@ } const okay = await confirm( `${paths.length}개 중복 파일을 휴지통으로 보냅니다 (논리 크기 ${fmtBytes(reclaimable)}, 실제 회수량 미검증).\n` + - `각 그룹의 사본 1개는 보존됩니다. 실제 저장 공간을 회수하려면 휴지통을 비운 뒤 저장 공간을 새로고침하십시오.`, + `각 그룹의 사본 1개는 보존됩니다. 휴지통을 비우기 전에는 물리 공간이 회수되지 않으며, APFS 공유 블록 때문에 실제 회수량은 더 작을 수 있습니다.`, { title: "DiskSage", kind: "warning" }, ); if (!okay) return; @@ -77,8 +77,8 @@ const r = await api.cleanPaths(paths); await scan(); results = r; - } catch { - loadError = "선택한 중복 파일을 휴지통으로 이동하지 못했습니다. 상태를 확인한 뒤 다시 시도하십시오."; + } catch (e) { + loadError = String(e); } finally { busy = false; } @@ -137,7 +137,7 @@ {#if results.some((r) => !r.ok)}
      {#each results.filter((r) => !r.ok) as r (r.path)} -
    • ⚠ {r.path} — 휴지통으로 이동하지 못했습니다. 원래 위치를 확인한 뒤 다시 시도하십시오.
      • +
    • ⚠ {r.path} — {r.error}
      • {/each}
    {/if} @@ -153,7 +153,7 @@ .group li { padding: 1px 0; } .path { overflow-wrap: anywhere; } .keep { color: #080; margin-left: 0.5rem; font-size: 0.8rem; } - .muted { color: var(--ds-text-muted); } + .muted { color: #999; } .error { color: #b00; } .errors { color: #b00; font-size: 0.85rem; list-style: none; padding: 0; } .badge-safe, .badge-caution, .badge-keep, .badge-unrated { @@ -164,4 +164,4 @@ .badge-caution { background: #b8860b; } .badge-keep { background: #b03030; } .badge-unrated { background: #888; } - \ No newline at end of file + From eb5c2481f2fc450e6f4b1f4410fa44edf7011101 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 09:40:04 -0700 Subject: [PATCH 680/691] chore(ux): return inventory privacy to canonical owner --- src/lib/Inventory.svelte | 31 +++++++++++++++++-------------- 1 file changed, 17 insertions(+), 14 deletions(-) diff --git a/src/lib/Inventory.svelte b/src/lib/Inventory.svelte index e70a7635e..9c4388500 100644 --- a/src/lib/Inventory.svelte +++ b/src/lib/Inventory.svelte @@ -37,9 +37,9 @@ const rules = await api.getUserRules(); userRulesCount = rules.length; userRulesError = ""; - } catch { + } catch (e) { userRulesCount = null; - userRulesError = "사용자 규칙을 불러오지 못했습니다. 설정을 확인한 뒤 다시 시도하십시오."; + userRulesError = String(e); } } @@ -54,8 +54,8 @@ await loadUserRules(); // 미분류 확장자 인사이트: 비차단(fire-and-forget) — 실패해도 인벤토리 표시를 막지 않음 api.reasonUnknownExtensions(report.unknown_samples).then((r) => (insights = r)).catch(() => {}); - } catch { - loadError = "인벤토리를 불러오지 못했습니다. 경로와 권한을 확인한 뒤 다시 시도하십시오."; + } catch (e) { + loadError = String(e); } finally { busy = false; } @@ -74,8 +74,8 @@ try { await api.downloadModel(); await loadModel(); - } catch { - loadError = "모델을 다운로드하지 못했습니다. 연결 상태를 확인한 뒤 다시 시도하십시오."; + } catch (e) { + loadError = String(e); } finally { modelBusy = false; } @@ -87,8 +87,8 @@ summaryBusy = true; try { summary = await api.summarizeUnknownBucket(report?.unknown_samples ?? []); - } catch { - summary = "요약을 만들지 못했습니다. 인벤토리를 다시 확인한 뒤 시도하십시오."; + } catch (e) { + summary = String(e); } finally { summaryLoaded = true; summaryBusy = false; @@ -118,11 +118,11 @@
    {#if model?.present} - 분류 보조 기능 활성화 ✓ + 모델: {model.name} ✓ {:else} - + {/if} - 분류 결과는 참고용입니다. 결과를 확인한 뒤 정리 작업을 선택하십시오. + 판정은 참고용(자문)입니다 — 모델 없이도 규칙 기반으로 전체 기능이 동작합니다.
    @@ -148,7 +148,7 @@
    {#if summaryLoaded} - {summary ?? "분류 보조 기능을 사용할 수 없습니다."} + {summary ?? "미판정 (모델 없음)"} {/if}
    {#if insights.length > 0} @@ -168,11 +168,14 @@ {#if issues !== null}
    {#if issues.length === 0} - 파일 분류 정합 ✓ + 온톨로지 정합 ✓ {:else}
      {#each issues as i} -
    • 파일 분류 충돌이 발견되었습니다. 설정을 확인한 뒤 다시 집계하십시오.
      • +
    • + 불충족 클래스: {i.UnsatisfiableClass.class} + (분리 공리: {i.UnsatisfiableClass.via_disjoint[0]} ↔ {i.UnsatisfiableClass.via_disjoint[1]}) +
      • {/each}
    {/if} From fc0fa9ff2da1223f03dfacb5ca43ac286a41f77b Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 09:40:36 -0700 Subject: [PATCH 681/691] test(ux): scope customer copy contract to owned screens --- src/lib/cleanupCustomerCopyContract.test.ts | 15 ++------------- 1 file changed, 2 insertions(+), 13 deletions(-) diff --git a/src/lib/cleanupCustomerCopyContract.test.ts b/src/lib/cleanupCustomerCopyContract.test.ts index d9106fbba..b99a8042a 100644 --- a/src/lib/cleanupCustomerCopyContract.test.ts +++ b/src/lib/cleanupCustomerCopyContract.test.ts @@ -6,15 +6,13 @@ import { describe, expect, it } from "vitest"; const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../.."); // Keep this contract scoped to customer surfaces this Storybook/UX owner actually changes. -// CloudArchive and the primary scan page have separate canonical PR owners; asserting their -// current-main copy here would turn unrelated dependency movement into a false-negative gate. +// Other product surfaces have separate canonical PR owners; asserting their current-main copy here +// would turn unrelated dependency movement into a false-negative gate. const screenFiles = [ "src/lib/BrewCleanup.svelte", "src/lib/Cleanup.svelte", - "src/lib/Duplicates.svelte", "src/lib/GitWorktreeCleanup.svelte", "src/lib/IcloudLocalEviction.svelte", - "src/lib/Inventory.svelte", "src/lib/Organize.svelte", "src/lib/OrphanCleanup.svelte", ].map((path) => resolve(repositoryRoot, path)); @@ -92,13 +90,4 @@ describe("customer copy contract", () => { } } }); - - it("does not render raw caught or per-item errors in inventory or duplicate views", () => { - for (const fileName of ["Inventory.svelte", "Duplicates.svelte"]) { - const source = readFileSync(resolve(repositoryRoot, "src/lib", fileName), "utf8"); - expect(source).not.toContain("String(e)"); - expect(source).not.toContain("{r.error}"); - expect(source).toContain("다시 시도하십시오"); - } - }); }); From 04352bc6509629fd4179af2184df3cbf3b70b761 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 09:42:05 -0700 Subject: [PATCH 682/691] chore(ux): return Homebrew feedback to canonical owner --- src/lib/BrewCleanup.svelte | 66 +++++++++++++++++++++----------------- 1 file changed, 36 insertions(+), 30 deletions(-) diff --git a/src/lib/BrewCleanup.svelte b/src/lib/BrewCleanup.svelte index 7e23c7fba..905a36adb 100644 --- a/src/lib/BrewCleanup.svelte +++ b/src/lib/BrewCleanup.svelte @@ -25,8 +25,8 @@ reset(); try { judgment = await api.judgeBrewCleanup(); - } catch { - error = "Homebrew 정리 범위를 확인하지 못했습니다. 다시 시도하십시오."; + } catch (e) { + error = String(e); } finally { planning = false; } @@ -35,10 +35,10 @@ function approvalGuidance(): string { if (!judgment || judgment.verdict !== "safe") return ""; if (!judgment.calibration || judgment.calibration.judgment_id !== judgment.judgment_id) { - return "추가 안전 확인이 끝나지 않아 실행할 수 없습니다. 정리 계획을 다시 확인하십시오."; + return "이 정확한 LLM 판정에 연결된 fast-mlsirm calibration이 필요합니다."; } if (!judgment.calibration.passed) { - return "안전 확인을 통과하지 않아 실행할 수 없습니다. 정리 계획을 다시 확인하십시오."; + return "fast-mlsirm Judge calibration이 통과하지 않아 실행할 수 없습니다."; } if (confirmationPhrase.trim() !== judgment.exact_approval_phrase) { return "승인 문구가 일치하지 않습니다."; @@ -64,8 +64,9 @@ async function executeCleanup() { if (!judgment || !executionReady()) return; const okay = await confirm( - "Homebrew의 끊어진 심볼릭 링크와 빈 디렉터리만 정리합니다.\n\n" - + "실행 전에 정리 범위를 다시 확인합니다.", + "LLM이 안전하다고 판단한 고정 명령을 실행합니다.\n\n" + + "brew cleanup --prune-prefix\n\n" + + "Homebrew prefix 안의 끊어진 심볼릭 링크와 빈 디렉터리만 정리하며, 실행 전 dry-run 계획을 다시 검증합니다.", { title: "DiskSage Homebrew 정리", kind: "warning" }, ); if (!okay) return; @@ -80,8 +81,8 @@ confirmationPhrase.trim(), rationale.trim(), ); - } catch { - error = "Homebrew 정리를 실행하지 못했습니다. 상태를 확인한 뒤 다시 시도하십시오."; + } catch (e) { + error = String(e); } finally { judgment = null; confirmationPhrase = ""; @@ -94,10 +95,10 @@
    Homebrew 정리 (macOS)

    - Homebrew 안의 끊어진 심볼릭 링크와 빈 디렉터리만 확인합니다. 정리 범위를 확인하고 승인 문구와 사유를 입력해야 실행됩니다. + 읽기 전용 dry-run 결과를 로컬 LLM이 판단합니다. 실행 범위는 Homebrew prefix 안의 끊어진 심볼릭 링크와 빈 디렉터리로 제한되며, Safe여도 사람의 승인 문구와 사유를 입력해야 고정 명령만 실행됩니다.

    {#if error}{/if} @@ -105,25 +106,23 @@ {#if judgment || completedJudgment} {@const report = (judgment ?? completedJudgment)!}
    -
    {report.verdict === "safe" ? "정리 가능" : "정리 보류"}
    -

    - {report.verdict === "safe" - ? "확인된 Homebrew 정리 범위를 검토한 뒤 승인하십시오." - : "안전 조건을 충족하지 않아 정리할 수 없습니다. Homebrew 상태를 확인한 뒤 다시 시도하십시오."} -

    -

    정리 범위: Homebrew의 끊어진 심볼릭 링크와 빈 디렉터리

    +
    LLM 판정: {report.verdict} · {report.model_name}
    +

    {report.reason || "모델이 설명을 반환하지 않았습니다."}

    +

    계획 지문: {report.plan_fingerprint}

    +

    실행 예정: brew cleanup --prune-prefix

    {#if report.calibration}

    - 추가 안전 확인: {report.calibration.passed ? "완료" : "미완료"} + Judge calibration ({report.calibration.engine}): {report.calibration.passed ? "통과" : "실패"} + · 표본 {report.calibration.sample_count}개 · 일치율 {Math.round(report.calibration.exact_agreement * 100)}%

    {:else} -

    추가 안전 확인이 없어 사람의 승인 문구가 계속 필요합니다.

    +

    fast-mlsirm calibration 증거가 없어 독립적인 사람 승인 문구가 계속 필요합니다.

    {/if} -

    정리 대상은 Homebrew 상태를 다시 확인한 뒤에만 처리됩니다.

    + 
    {report.plan.dry_run_output || "dry-run에서 정리 대상이 보고되지 않았습니다."}
    {#if judgment && judgment.verdict === "safe" && !execution}
    -

    아래 승인 문구 전체와 실행 사유를 입력해야 합니다. 실행 직전에 정리 범위를 다시 확인합니다.

    +

    아래 승인 문구 전체를 직접 입력해야 합니다. 실행 직전에 dry-run 계획과 LLM 판단을 다시 대조합니다.

    {judgment.exact_approval_phrase} {#if approvalGuidance()}

    {approvalGuidance()}

    {/if}
    {:else if judgment && judgment.verdict !== "safe"} -

    안전 조건을 충족하지 않아 실행할 수 없습니다. 계획을 다시 확인하십시오.

    +

    Safe가 아니므로 실행 권한을 만들지 않았습니다.

    {/if} {#if execution} -

    - {execution.executed && execution.status_code === 0 - ? "Homebrew 정리를 완료했습니다." - : "Homebrew 정리를 완료하지 못했습니다. 상태를 확인한 뒤 다시 시도하십시오."} +

    + {execution.executed ? `실행 완료 (종료 코드 ${execution.status_code})` : "실행되지 않음"}

    + {#if execution.stdout}
    {execution.stdout}
    {/if} + {#if execution.stderr}
    {execution.stderr}
    {/if} + {#if execution.record_path} +

    감사 기록: {execution.record_path}

    + {:else} + + {/if} {/if}
    {/if} @@ -158,11 +162,13 @@