@agent-vm/agent-vm 0.0.20

package/dist/config/resource-contracts/resource-contract-schemas.js

@@ -0,0 +1,163 @@
+import { z } from 'zod';
+export const resourceNameSchema = z
+    .string()
+    .min(1)
+    .regex(/^[a-z][a-z0-9-]*$/u, 'resource names must use lowercase letters, numbers, and hyphens');
+export const resourceBindingSchema = z
+    .object({
+    host: z.string().min(1),
+    port: z.number().int().min(1).max(65_535),
+})
+    .strict();
+export const RESERVED_RESOURCE_ENV_KEYS = new Set([
+    'HOME',
+    'LD_LIBRARY_PATH',
+    'LD_PRELOAD',
+    'NODE_OPTIONS',
+    'OLDPWD',
+    'OPENCLAW_CONFIG_PATH',
+    'PATH',
+    'PWD',
+    'PYTHONPATH',
+    'SHLVL',
+    'WORKER_CONFIG_PATH',
+    '_',
+]);
+export const resourceEnvSchema = z
+    .record(z.string().min(1), z.string())
+    .superRefine((resourceEnv, context) => {
+    for (const key of Object.keys(resourceEnv)) {
+        if (RESERVED_RESOURCE_ENV_KEYS.has(key)) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [key],
+                message: `Resource env contains reserved environment key '${key}'.`,
+            });
+        }
+    }
+})
+    .default(() => ({}));
+function hasPathTraversal(value) {
+    return value.split('/').includes('..');
+}
+function isRelativeContainedPath(value) {
+    return !value.startsWith('/') && !hasPathTraversal(value);
+}
+export const generatedPathSchema = z
+    .object({
+    kind: z.enum(['file', 'directory']),
+    path: z
+        .string()
+        .min(1)
+        .refine((value) => !value.startsWith('/'), 'path must be relative')
+        .refine((value) => !hasPathTraversal(value), 'path must not contain traversal'),
+    description: z.string().optional(),
+})
+    .strict();
+export const repoResourceRequirementSchema = z
+    .object({
+    binding: resourceBindingSchema,
+    env: resourceEnvSchema,
+})
+    .strict();
+export const composeResourceProviderSchema = z
+    .object({
+    type: z.literal('compose'),
+    service: z.string().min(1),
+})
+    .strict();
+export const repoResourcesDescriptionSchema = z
+    .object({
+    setupCommand: z
+        .string()
+        .min(1)
+        .refine((value) => !value.startsWith('/'), 'setupCommand must be relative')
+        .refine((value) => isRelativeContainedPath(value), 'setupCommand must not contain traversal')
+        .default('.agent-vm/run-setup.sh'),
+    requires: z.record(resourceNameSchema, repoResourceRequirementSchema).default(() => ({})),
+    provides: z.record(resourceNameSchema, composeResourceProviderSchema).default(() => ({})),
+})
+    .strict();
+export const finalizeRepoResourceSetupInputSchema = z
+    .object({
+    repoId: z.string().min(1),
+    repoUrl: z.string().min(1),
+    repoDir: z.string().min(1),
+    outputDir: z.string().min(1),
+    selectedResources: z.record(resourceNameSchema, z
+        .object({
+        binding: resourceBindingSchema,
+        target: resourceBindingSchema,
+    })
+        .strict()),
+})
+    .strict();
+export const finalizedResourceSchema = z
+    .object({
+    binding: resourceBindingSchema,
+    target: resourceBindingSchema,
+    env: resourceEnvSchema,
+})
+    .strict();
+export const repoResourcesFinalSchema = z
+    .object({
+    resources: z.record(resourceNameSchema, finalizedResourceSchema).default(() => ({})),
+    generated: z.array(generatedPathSchema).default(() => []),
+})
+    .strict();
+export const externalResourceSchema = z
+    .object({
+    name: resourceNameSchema,
+    binding: resourceBindingSchema,
+    target: resourceBindingSchema,
+    env: resourceEnvSchema,
+})
+    .strict();
+export const externalResourcesSchema = z
+    .record(resourceNameSchema, externalResourceSchema)
+    .superRefine((resources, context) => {
+    for (const [key, resource] of Object.entries(resources)) {
+        if (resource.name !== key) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [key, 'name'],
+                message: `resource key '${key}' must match resource.name '${resource.name}'`,
+            });
+        }
+    }
+})
+    .default(() => ({}));
+export const workerTaskResourcesSchema = z
+    .object({
+    externalResources: externalResourcesSchema,
+})
+    .strict()
+    .default(() => ({
+    externalResources: {},
+}));
+export const repoTargetSchema = z
+    .object({
+    repoUrl: z.string().min(1).max(500).url(),
+    baseBranch: z.string().min(1).max(200).default('main'),
+})
+    .strict();
+export const workerTaskRequestSchema = z
+    .object({
+    prompt: z.string().min(1).max(10_000),
+    repos: z
+        .array(repoTargetSchema)
+        .max(20)
+        .default(() => []),
+    context: z.record(z.string(), z.unknown()).default(() => ({})),
+    resources: workerTaskResourcesSchema,
+})
+    .strict();
+export const workerTaskControllerRequestSchema = workerTaskRequestSchema.extend({
+    requestTaskId: z.string().min(1),
+});
+export const zoneResourcesPolicySchema = z
+    .object({
+    allowRepoResources: z.union([z.boolean(), z.array(z.string().min(1))]).default(true),
+})
+    .strict();
+//# sourceMappingURL=resource-contract-schemas.js.map

package/dist/config/resource-contracts/resource-contract-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-contract-schemas.js","sourceRoot":"","sources":["../../../src/config/resource-contracts/resource-contract-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,oBAAoB,EAAE,iEAAiE,CAAC,CAAC;AAEjG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACjD,MAAM;IACN,iBAAiB;IACjB,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,sBAAsB;IACtB,MAAM;IACN,KAAK;IACL,YAAY;IACZ,OAAO;IACP,oBAAoB;IACpB,GAAG;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAChC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;KACrC,WAAW,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,mDAAmD,GAAG,IAAI;aACnE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AACF,CAAC,CAAC;KACD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEtB,SAAS,gBAAgB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC7C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KAClC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;SAClE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,iCAAiC,CAAC;IAChF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACP,OAAO,EAAE,qBAAqB;IAC9B,GAAG,EAAE,iBAAiB;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACP,YAAY,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC;SAC1E,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,yCAAyC,CAAC;SAC5F,OAAO,CAAC,wBAAwB,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CACzF,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC;KACnD,MAAM,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAC1B,kBAAkB,EAClB,CAAC;SACC,MAAM,CAAC;QACP,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,qBAAqB;KAC7B,CAAC;SACD,MAAM,EAAE,CACV;CACD,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC;IACP,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,qBAAqB;IAC7B,GAAG,EAAE,iBAAiB;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACvC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,qBAAqB;IAC7B,GAAG,EAAE,iBAAiB;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;KAClD,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC;gBACnB,OAAO,EAAE,iBAAiB,GAAG,+BAA+B,QAAQ,CAAC,IAAI,GAAG;aAC5E,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AACF,CAAC,CAAC;KACD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEtB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,CAAC;IACP,iBAAiB,EAAE,uBAAuB;CAC1C,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACf,iBAAiB,EAAE,EAAE;CACrB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC;SACN,KAAK,CAAC,gBAAgB,CAAC;SACvB,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9D,SAAS,EAAE,yBAAyB;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,iCAAiC,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC/E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,CAAC;IACP,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACpF,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/config/system-cache-identifier.d.ts

@@ -0,0 +1,22 @@
+export declare const SYSTEM_CACHE_IDENTIFIER_FILENAME = "systemCacheIdentifier.json";
+export interface LoadSystemCacheIdentifierOptions {
+    readonly filePath: string;
+}
+export interface SystemCacheIdentifierPlatformDependencies {
+    readonly hostSystemType?: HostSystemType;
+    readonly platform?: () => string;
+}
+export type SystemCacheOs = 'darwin' | 'linux' | 'unknown';
+export type HostSystemType = 'bare-metal' | 'container';
+export interface DefaultSystemCacheIdentifier {
+    readonly $comment: string;
+    readonly schemaVersion: 1;
+    readonly os: SystemCacheOs;
+    readonly hostSystemType: HostSystemType;
+    readonly gitSha: string;
+}
+export declare function resolveSystemCacheIdentifierPath(systemConfigPath: string): string;
+export declare function captureSystemOsName(platform: string): SystemCacheOs;
+export declare function buildDefaultSystemCacheIdentifier(dependencies?: SystemCacheIdentifierPlatformDependencies): DefaultSystemCacheIdentifier;
+export declare function loadSystemCacheIdentifier(options: LoadSystemCacheIdentifierOptions): Promise<unknown>;
+//# sourceMappingURL=system-cache-identifier.d.ts.map

package/dist/config/system-cache-identifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-cache-identifier.d.ts","sourceRoot":"","sources":["../../src/config/system-cache-identifier.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,gCAAgC,+BAA+B,CAAC;AAE7E,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yCAAyC;IACzD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AAExD,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAaD,wBAAgB,gCAAgC,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAKnE;AAED,wBAAgB,iCAAiC,CAChD,YAAY,GAAE,yCAA8C,GAC1D,4BAA4B,CAS9B;AAED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,OAAO,CAAC,CAsBlB"}

package/dist/config/system-cache-identifier.js

@@ -0,0 +1,49 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+export const SYSTEM_CACHE_IDENTIFIER_FILENAME = 'systemCacheIdentifier.json';
+const systemCacheIdentifierComment = "System cache identifier. Contents hash into every Gondolin image fingerprint. gitSha='local' is the intentional sentinel for bare-metal dev. Container-host builds usually replace gitSha with a build provenance string such as a commit SHA.";
+function getErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function isMissingFileError(error) {
+    return typeof error === 'object' && error !== null && 'code' in error && error.code === 'ENOENT';
+}
+export function resolveSystemCacheIdentifierPath(systemConfigPath) {
+    return path.join(path.dirname(path.resolve(systemConfigPath)), SYSTEM_CACHE_IDENTIFIER_FILENAME);
+}
+export function captureSystemOsName(platform) {
+    if (platform === 'darwin' || platform === 'linux') {
+        return platform;
+    }
+    return 'unknown';
+}
+export function buildDefaultSystemCacheIdentifier(dependencies = {}) {
+    const platform = dependencies.platform?.() ?? os.platform();
+    return {
+        $comment: systemCacheIdentifierComment,
+        schemaVersion: 1,
+        os: captureSystemOsName(platform),
+        hostSystemType: dependencies.hostSystemType ?? 'bare-metal',
+        gitSha: 'local',
+    };
+}
+export async function loadSystemCacheIdentifier(options) {
+    let rawContents;
+    try {
+        rawContents = await fs.readFile(options.filePath, 'utf8');
+    }
+    catch (error) {
+        if (isMissingFileError(error)) {
+            throw new Error(`Missing system cache identifier '${options.filePath}'.`, { cause: error });
+        }
+        throw new Error(`Failed to read system cache identifier '${options.filePath}': ${getErrorMessage(error)}`, { cause: error });
+    }
+    try {
+        return JSON.parse(rawContents);
+    }
+    catch (error) {
+        throw new Error(`Failed to parse system cache identifier '${options.filePath}': ${getErrorMessage(error)}`, { cause: error });
+    }
+}
+//# sourceMappingURL=system-cache-identifier.js.map

package/dist/config/system-cache-identifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-cache-identifier.js","sourceRoot":"","sources":["../../src/config/system-cache-identifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,gCAAgC,GAAG,4BAA4B,CAAC;AAsB7E,MAAM,4BAA4B,GACjC,gPAAgP,CAAC;AAElP,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,gBAAwB;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IACnD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAChD,eAA0D,EAAE;IAE5D,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC5D,OAAO;QACN,QAAQ,EAAE,4BAA4B;QACtC,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,mBAAmB,CAAC,QAAQ,CAAC;QACjC,cAAc,EAAE,YAAY,CAAC,cAAc,IAAI,YAAY;QAC3D,MAAM,EAAE,OAAO;KACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAyC;IAEzC,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACJ,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,IAAI,KAAK,CACd,2CAA2C,OAAO,CAAC,QAAQ,MAAM,eAAe,CAAC,KAAK,CAAC,EAAE,EACzF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,4CAA4C,OAAO,CAAC,QAAQ,MAAM,eAAe,CAAC,KAAK,CAAC,EAAE,EAC1F,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/config/system-config.d.ts

@@ -0,0 +1,111 @@
+import { z } from 'zod';
+declare const systemConfigSchema: z.ZodObject<{
+    host: z.ZodObject<{
+        controllerPort: z.ZodNumber;
+        projectNamespace: z.ZodString;
+        secretsProvider: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"1password">;
+            tokenSource: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"op-cli">;
+                ref: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"env">;
+                envVar: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"keychain">;
+                service: z.ZodString;
+                account: z.ZodString;
+            }, z.core.$strip>], "type">;
+        }, z.core.$strip>>;
+        githubToken: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"1password">;
+            ref: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            source: z.ZodLiteral<"environment">;
+            envVar: z.ZodString;
+        }, z.core.$strip>], "source">>;
+    }, z.core.$strip>;
+    cacheDir: z.ZodDefault<z.ZodString>;
+    imageProfiles: z.ZodObject<{
+        gateways: z.ZodRecord<z.ZodString, z.ZodObject<{
+            buildConfig: z.ZodString;
+            dockerfile: z.ZodOptional<z.ZodString>;
+            type: z.ZodEnum<{
+                openclaw: "openclaw";
+                worker: "worker";
+            }>;
+        }, z.core.$strict>>;
+        toolVms: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            buildConfig: z.ZodString;
+            dockerfile: z.ZodOptional<z.ZodString>;
+            type: z.ZodLiteral<"toolVm">;
+        }, z.core.$strict>>>;
+    }, z.core.$strip>;
+    zones: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        gateway: z.ZodObject<{
+            type: z.ZodDefault<z.ZodEnum<{
+                openclaw: "openclaw";
+                worker: "worker";
+            }>>;
+            imageProfile: z.ZodString;
+            memory: z.ZodString;
+            cpus: z.ZodNumber;
+            port: z.ZodNumber;
+            config: z.ZodString;
+            stateDir: z.ZodString;
+            workspaceDir: z.ZodString;
+            authProfilesRef: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"1password">;
+                ref: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                source: z.ZodLiteral<"environment">;
+                envVar: z.ZodString;
+            }, z.core.$strip>], "source">>;
+        }, z.core.$strip>;
+        resources: z.ZodOptional<z.ZodObject<{
+            allowRepoResources: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+        }, z.core.$strict>>;
+        secrets: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"1password">;
+            ref: z.ZodString;
+            injection: z.ZodDefault<z.ZodEnum<{
+                env: "env";
+                "http-mediation": "http-mediation";
+            }>>;
+            hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>, z.ZodObject<{
+            source: z.ZodLiteral<"environment">;
+            envVar: z.ZodString;
+            injection: z.ZodDefault<z.ZodEnum<{
+                env: "env";
+                "http-mediation": "http-mediation";
+            }>>;
+            hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>], "source">>;
+        allowedHosts: z.ZodArray<z.ZodString>;
+        websocketBypass: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        toolProfile: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    toolProfiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        memory: z.ZodString;
+        cpus: z.ZodNumber;
+        workspaceRoot: z.ZodString;
+        imageProfile: z.ZodString;
+    }, z.core.$strip>>>;
+    tcpPool: z.ZodObject<{
+        basePort: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type SystemConfig = z.infer<typeof systemConfigSchema>;
+export type LoadedSystemConfig = SystemConfig & {
+    readonly systemConfigPath: string;
+    readonly systemCacheIdentifierPath: string;
+};
+export declare function createLoadedSystemConfig(config: z.infer<typeof systemConfigSchema>, options: {
+    readonly systemConfigPath: string;
+}): LoadedSystemConfig;
+export declare function loadSystemConfig(configPath: string): Promise<LoadedSystemConfig>;
+export {};
+//# sourceMappingURL=system-config.d.ts.map

package/dist/config/system-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config.d.ts","sourceRoot":"","sources":["../../src/config/system-config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgHxB,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+GrB,CAAC;AAEJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;CAC3C,CAAC;AAEF,wBAAgB,wBAAwB,CACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,EAC1C,OAAO,EAAE;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAC5C,kBAAkB,CAMpB;AAwDD,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiBtF"}

package/dist/config/system-config.js

@@ -0,0 +1,267 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { z } from 'zod';
+import { zoneResourcesPolicySchema } from './resource-contracts/index.js';
+import { resolveSystemCacheIdentifierPath } from './system-cache-identifier.js';
+const gatewayTypeValues = ['openclaw', 'worker'];
+const secretInjectionSchema = z.enum(['env', 'http-mediation']);
+const onePasswordSecretSchema = z.object({
+    source: z.literal('1password'),
+    ref: z.string().min(1),
+    injection: secretInjectionSchema.default('http-mediation'),
+    hosts: z.array(z.string().min(1)).optional(),
+});
+const environmentSecretSchema = z.object({
+    source: z.literal('environment'),
+    envVar: z.string().min(1),
+    injection: secretInjectionSchema.default('http-mediation'),
+    hosts: z.array(z.string().min(1)).optional(),
+});
+const secretReferenceSchema = z
+    .discriminatedUnion('source', [onePasswordSecretSchema, environmentSecretSchema])
+    .superRefine((secret, context) => {
+    if (secret.injection === 'http-mediation' && (!secret.hosts || secret.hosts.length === 0)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "Injection 'http-mediation' requires at least one host.",
+            path: ['hosts'],
+        });
+    }
+});
+const tokenSourceSchema = z.discriminatedUnion('type', [
+    z.object({
+        type: z.literal('op-cli'),
+        ref: z.string().min(1),
+    }),
+    z.object({
+        type: z.literal('env'),
+        envVar: z.string().min(1).optional(),
+    }),
+    z.object({
+        type: z.literal('keychain'),
+        service: z.string().min(1),
+        account: z.string().min(1),
+    }),
+]);
+const authProfilesSecretSchema = z.discriminatedUnion('source', [
+    z.object({
+        source: z.literal('1password'),
+        ref: z.string().min(1),
+    }),
+    z.object({
+        source: z.literal('environment'),
+        envVar: z.string().min(1),
+    }),
+]);
+const hostSecretReferenceSchema = z.discriminatedUnion('source', [
+    z.object({
+        source: z.literal('1password'),
+        ref: z.string().min(1),
+    }),
+    z.object({
+        source: z.literal('environment'),
+        envVar: z.string().min(1),
+    }),
+]);
+const zoneGatewaySchema = z.object({
+    type: z.enum(gatewayTypeValues).default('openclaw'),
+    imageProfile: z.string().min(1),
+    memory: z.string().min(1),
+    cpus: z.number().int().positive(),
+    port: z.number().int().positive(),
+    config: z.string().min(1),
+    stateDir: z.string().min(1),
+    workspaceDir: z.string().min(1),
+    authProfilesRef: authProfilesSecretSchema.optional(),
+});
+const toolProfileSchema = z.object({
+    memory: z.string().min(1),
+    cpus: z.number().int().positive(),
+    workspaceRoot: z.string().min(1),
+    imageProfile: z.string().min(1),
+});
+const imageConfigSchema = z
+    .object({
+    buildConfig: z.string().min(1),
+    dockerfile: z.string().min(1).optional(),
+})
+    .strict();
+const gatewayImageProfileSchema = imageConfigSchema.extend({
+    type: z.enum(gatewayTypeValues),
+});
+const toolVmImageProfileSchema = imageConfigSchema.extend({
+    type: z.literal('toolVm'),
+});
+const imageProfilesSchema = z.object({
+    gateways: z.record(z.string().min(1), gatewayImageProfileSchema),
+    toolVms: z.record(z.string().min(1), toolVmImageProfileSchema).default({}),
+});
+const systemConfigSchema = z
+    .object({
+    host: z.object({
+        controllerPort: z.number().int().positive(),
+        projectNamespace: z
+            .string()
+            .min(1)
+            .regex(/^[a-z0-9][a-z0-9-]*$/u, 'projectNamespace must use lowercase letters, numbers, and hyphens only'),
+        secretsProvider: z
+            .object({
+            type: z.literal('1password'),
+            tokenSource: tokenSourceSchema,
+        })
+            .optional(),
+        githubToken: hostSecretReferenceSchema.optional(),
+    }),
+    cacheDir: z.string().min(1).default('./cache'),
+    imageProfiles: imageProfilesSchema,
+    zones: z
+        .array(z.object({
+        id: z.string().min(1),
+        gateway: zoneGatewaySchema,
+        resources: zoneResourcesPolicySchema.optional(),
+        secrets: z.record(z.string(), secretReferenceSchema),
+        allowedHosts: z.array(z.string().min(1)).min(1),
+        websocketBypass: z.array(z.string().min(1)).default([]),
+        toolProfile: z.string().min(1).optional(),
+    }))
+        .min(1, 'system config must define at least one zone'),
+    toolProfiles: z.record(z.string(), toolProfileSchema).default({}),
+    tcpPool: z.object({
+        basePort: z.number().int().positive(),
+        size: z.number().int().positive(),
+    }),
+})
+    .superRefine((config, context) => {
+    const hasOnePasswordSecrets = config.zones.some((zone) => Object.values(zone.secrets).some((secret) => secret.source === '1password') ||
+        zone.gateway.authProfilesRef?.source === '1password');
+    const hasOnePasswordGithubToken = config.host.githubToken?.source === '1password';
+    if ((hasOnePasswordSecrets || hasOnePasswordGithubToken) && !config.host.secretsProvider) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "host.secretsProvider is required when any zone secret or host credential uses source '1password'.",
+            path: ['host', 'secretsProvider'],
+        });
+    }
+    if (Object.keys(config.imageProfiles.gateways).length === 0) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'system config must define at least one gateway image profile.',
+            path: ['imageProfiles', 'gateways'],
+        });
+    }
+    for (const [zoneIndex, zone] of config.zones.entries()) {
+        // Keep zone gateway type readable at the use site while image profiles
+        // remain the source of boot-image details. This cross-check prevents
+        // a worker lifecycle from accidentally booting an OpenClaw image, or
+        // vice versa.
+        const gatewayImageProfile = config.imageProfiles.gateways[zone.gateway.imageProfile];
+        if (!gatewayImageProfile) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `Zone '${zone.id}' references unknown gateway imageProfile '${zone.gateway.imageProfile}'.`,
+                path: ['zones', zoneIndex, 'gateway', 'imageProfile'],
+            });
+        }
+        else if (gatewayImageProfile.type !== zone.gateway.type) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `Zone '${zone.id}' gateway type '${zone.gateway.type}' does not match imageProfile '${zone.gateway.imageProfile}' type '${gatewayImageProfile.type}'.`,
+                path: ['zones', zoneIndex, 'gateway', 'imageProfile'],
+            });
+        }
+        if (zone.gateway.type === 'openclaw' && zone.toolProfile === undefined) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `OpenClaw zone '${zone.id}' must declare a toolProfile.`,
+                path: ['zones', zoneIndex, 'toolProfile'],
+            });
+            continue;
+        }
+        if (zone.toolProfile !== undefined && !config.toolProfiles[zone.toolProfile]) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `Zone '${zone.id}' references unknown toolProfile '${zone.toolProfile}'.`,
+                path: ['zones', zoneIndex, 'toolProfile'],
+            });
+        }
+    }
+    for (const [profileId, profile] of Object.entries(config.toolProfiles)) {
+        if (config.imageProfiles.toolVms[profile.imageProfile]) {
+            continue;
+        }
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: `Tool profile '${profileId}' references unknown tool VM imageProfile '${profile.imageProfile}'.`,
+            path: ['toolProfiles', profileId, 'imageProfile'],
+        });
+    }
+});
+export function createLoadedSystemConfig(config, options) {
+    return {
+        ...config,
+        systemConfigPath: options.systemConfigPath,
+        systemCacheIdentifierPath: resolveSystemCacheIdentifierPath(options.systemConfigPath),
+    };
+}
+/**
+ * Resolve all relative paths in a system config relative to the config file's directory.
+ * This ensures paths like "./state/shravan" work regardless of the process CWD.
+ */
+function resolveRelativePaths(config, configDir) {
+    const resolvePath = (relativePath) => path.isAbsolute(relativePath) ? relativePath : path.resolve(configDir, relativePath);
+    return {
+        ...config,
+        cacheDir: resolvePath(config.cacheDir),
+        imageProfiles: {
+            gateways: Object.fromEntries(Object.entries(config.imageProfiles.gateways).map(([profileId, profile]) => [
+                profileId,
+                {
+                    ...profile,
+                    buildConfig: resolvePath(profile.buildConfig),
+                    ...(profile.dockerfile ? { dockerfile: resolvePath(profile.dockerfile) } : {}),
+                },
+            ])),
+            toolVms: Object.fromEntries(Object.entries(config.imageProfiles.toolVms).map(([profileId, profile]) => [
+                profileId,
+                {
+                    ...profile,
+                    buildConfig: resolvePath(profile.buildConfig),
+                    ...(profile.dockerfile ? { dockerfile: resolvePath(profile.dockerfile) } : {}),
+                },
+            ])),
+        },
+        zones: config.zones.map((zone) => ({
+            ...zone,
+            gateway: {
+                ...zone.gateway,
+                config: resolvePath(zone.gateway.config),
+                stateDir: resolvePath(zone.gateway.stateDir),
+                workspaceDir: resolvePath(zone.gateway.workspaceDir),
+            },
+        })),
+        toolProfiles: Object.fromEntries(Object.entries(config.toolProfiles).map(([profileId, profile]) => [
+            profileId,
+            { ...profile, workspaceRoot: resolvePath(profile.workspaceRoot) },
+        ])),
+    };
+}
+export async function loadSystemConfig(configPath) {
+    const absoluteConfigPath = path.resolve(configPath);
+    const configDir = path.dirname(absoluteConfigPath);
+    const rawConfig = await fs.readFile(absoluteConfigPath, 'utf8');
+    let parsedConfig;
+    try {
+        parsedConfig = JSON.parse(rawConfig);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to parse system config '${absoluteConfigPath}': ${message}`, {
+            cause: error,
+        });
+    }
+    const config = systemConfigSchema.parse(parsedConfig);
+    return createLoadedSystemConfig(resolveRelativePaths(config, configDir), {
+        systemConfigPath: absoluteConfigPath,
+    });
+}
+//# sourceMappingURL=system-config.js.map

package/dist/config/system-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config.js","sourceRoot":"","sources":["../../src/config/system-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAU,CAAC;AAE1D,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEhE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC;KAC7B,kBAAkB,CAAC,QAAQ,EAAE,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;KAChF,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,MAAM,CAAC,SAAS,KAAK,gBAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,CAAC,OAAO,CAAC;SACf,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACtB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1B,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAC/D,CAAC,CAAC,MAAM,CAAC;QACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACtB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAChE,CAAC,CAAC,MAAM,CAAC;QACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACtB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,eAAe,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC;KACzB,MAAM,CAAC;IACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,yBAAyB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC3C,gBAAgB,EAAE,CAAC;aACjB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,KAAK,CACL,uBAAuB,EACvB,wEAAwE,CACxE;QACF,eAAe,EAAE,CAAC;aAChB,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;YAC5B,WAAW,EAAE,iBAAiB;SAC9B,CAAC;aACD,QAAQ,EAAE;QACZ,WAAW,EAAE,yBAAyB,CAAC,QAAQ,EAAE;KACjD,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC9C,aAAa,EAAE,mBAAmB;IAClC,KAAK,EAAE,CAAC;SACN,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE,yBAAyB,CAAC,QAAQ,EAAE;QAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC;QACpD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC,CACF;SACA,GAAG,CAAC,CAAC,EAAE,6CAA6C,CAAC;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;CACF,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAChC,MAAM,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAC9C,CAAC,IAAI,EAAE,EAAE,CACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,KAAK,WAAW,CACrD,CAAC;IACF,MAAM,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,WAAW,CAAC;IAClF,IAAI,CAAC,qBAAqB,IAAI,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1F,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACN,mGAAmG;YACpG,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC;SACjC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,cAAc;QACd,MAAM,mBAAmB,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACrF,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,8CAA8C,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI;gBACpG,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC;aACrD,CAAC,CAAC;QACJ,CAAC;aAAM,IAAI,mBAAmB,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3D,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,mBAAmB,IAAI,CAAC,OAAO,CAAC,IAAI,kCAAkC,IAAI,CAAC,OAAO,CAAC,YAAY,WAAW,mBAAmB,CAAC,IAAI,IAAI;gBAC/J,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC;aACrD,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACxE,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,kBAAkB,IAAI,CAAC,EAAE,+BAA+B;gBACjE,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC;aACzC,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,qCAAqC,IAAI,CAAC,WAAW,IAAI;gBAClF,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACxD,SAAS;QACV,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iBAAiB,SAAS,8CAA8C,OAAO,CAAC,YAAY,IAAI;YACzG,IAAI,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,cAAc,CAAC;SACjD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AASJ,MAAM,UAAU,wBAAwB,CACvC,MAA0C,EAC1C,OAA8C;IAE9C,OAAO;QACN,GAAG,MAAM;QACT,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,yBAAyB,EAAE,gCAAgC,CAAC,OAAO,CAAC,gBAAgB,CAAC;KACrF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAC5B,MAA0C,EAC1C,SAAiB;IAEjB,MAAM,WAAW,GAAG,CAAC,YAAoB,EAAU,EAAE,CACpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEtF,OAAO;QACN,GAAG,MAAM;QACT,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,aAAa,EAAE;YACd,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBAC3E,SAAS;gBACT;oBACC,GAAG,OAAO;oBACV,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC7C,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9E;aACD,CAAC,CACF;YACD,OAAO,EAAE,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBAC1E,SAAS;gBACT;oBACC,GAAG,OAAO;oBACV,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC7C,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9E;aACD,CAAC,CACF;SACD;QACD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI;YACP,OAAO,EAAE;gBACR,GAAG,IAAI,CAAC,OAAO;gBACf,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC5C,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;aACpD;SACD,CAAC,CAAC;QACH,YAAY,EAAE,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YACjE,SAAS;YACT,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;SACjE,CAAC,CACF;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,kCAAkC,kBAAkB,MAAM,OAAO,EAAE,EAAE;YACpF,KAAK,EAAE,KAAK;SACZ,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtD,OAAO,wBAAwB,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;QACxE,gBAAgB,EAAE,kBAAkB;KACpC,CAAC,CAAC;AACJ,CAAC"}