@atomic-chat/core 0.5.1 → 0.13.2

package/dist/host/recipes/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/host/recipes/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EACL,gCAAgC,EAChC,uCAAuC,EACvC,mCAAmC,EACnC,sBAAsB,EACtB,iCAAiC,EACjC,uCAAuC,EACvC,aAAa,EACb,yCAAyC,GAC1C,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AA2DvE,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AACjC,MAAM,oBAAoB,GAAG,MAAM,CAAA;AAEnC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAA;AACvE,kFAAkF;AAClF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CACpC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,KAAK,CAAA;AAE9E;;;GAGG;AACH,MAAM,WAAY,SAAQ,KAAK;IAGlB;IACA;IAHX,YACE,OAAe,EACN,WAA0B,IAAI,EAC9B,SAAS,EAAE;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,WAAM,GAAN,MAAM,CAAK;IAGtB,CAAC;CACF;AAUD,KAAK,UAAU,GAAG,CAChB,OAAmB,EACnB,IAAc,EACd,OAAyD;IAEzD,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AACzC,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAmB,EACnB,IAAc,EACd,OAAmC;IAEnC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QACnB,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;AAC7G,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,OAAmB,EAAE,IAAc,EAAE,OAAiB;IACnF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACvC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAM;IAC7B,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,mGAAmG;IACrG,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,EAAE,CAAA;IAC7F,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACpG,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CAAC,OAAmB,EAAE,IAAc;IAC5D,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAoB,EAAE,CAAoB,EAAW,EAAE,CACzE,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5E,KAAK,UAAU,UAAU,CACvB,OAAmB,EACnB,IAAsD;IAEtD,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QACnD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAA;IAC1E,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YAC5C,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClD,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,sBAAsB,IAAI,CAAC,GAAG,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACvF,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAA;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAClC,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,+BAA+B,QAAQ,GAAG,CAAC,CAAA;IAC9E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,yBAAyB,CAAC,CAAA;IAClF,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAC9B,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,MAAM,4BAA4B,CAAC,CAAA;IAExF,IAAI,MAAkB,CAAA;IACtB,IAAI,YAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7D,YAAY,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/F,CAAC;IACD,qGAAqG;IACrG,IACE,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE5E,MAAM,IAAI,WAAW,CACnB,GAAG,IAAI,CAAC,GAAG,eAAe,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,cAAc,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1G,CAAA;IACH,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,SAAS,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAmB,EACnB,IAAuD;IAEvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,6EAA6E;QAC7E,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;YACjC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,sBAAsB,EAAE;YACrE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,IAAI,mCAAmC,EAAE,CAAA;IACxG,CAAC;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,CAAA;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CACxB,OAAmB,EACnB,KAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACnC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5B,+FAA+F;QAC/F,0EAA0E;QAC1E,IACE,MAAM,CAAC,IAAI,KAAK,CAAC;YACjB,MAAM,KAAK,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC;YAEjE,OAAO,IAAI,CAAA;QACb,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,WAAW,KAAK,CAAC,OAAO,mBAAmB;YAC9F,OAAO,KAAK,CAAA;IAChB,CAAC;SAAM,CAAC;QACN,kGAAkG;QAClG,0FAA0F;QAC1F,wDAAwD;QACxD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,WAAW,CAAA;QACxF,IACE,MAAM,CAAC,IAAI,KAAK,CAAC;YACjB,MAAM,KAAK,EAAE;YACb,MAAM,KAAK,0CAA0C,KAAK,CAAC,OAAO,EAAE;YAEpE,OAAO,KAAK,CAAA;IAChB,CAAC;IACD,MAAM,IAAI,WAAW,CAAC,0BAA0B,KAAK,CAAC,OAAO,eAAe,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;AAC3G,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAmB,EACnB,IAA2D;IAE3D,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAA;IAEzF,6FAA6F;IAC7F,MAAM,EAAE,QAAQ,EAAE,GAAG,gCAAgC,CAAA;IACrD,MAAM,UAAU,GAAG,CAAC,SAAuD,EAAE,EAAE,CAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC1E,MAAM,IAAI,WAAW,CACnB,GAAG,QAAQ,CAAC,OAAO,iCAAiC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;gBAClG,sEAAsE,CACzE,CAAA;IACL,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;QAAE,MAAM,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC5F,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,uBAAuB,CACpC,OAAmB,EACnB,SAA0F,EAC1F,OAAiB;IAEjB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAQ;QAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,uCAAuC,KAAK,CAAC,OAAO,YAAY,EAChE,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,MAAM,CACd,CAAA;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;QAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,OAAO,KAAK,EAAE;gBAAE,SAAQ;YAC5B,4FAA4F;YAC5F,oDAAoD;YACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAA;YACrC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBACtB,MAAM,IAAI,WAAW,CACnB,yBAAyB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,OAAO,+BAA+B,CAClH,CAAA;YACH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrF,MAAM,IAAI,WAAW,CACnB,GAAG,IAAI,iCAAiC,KAAK,CAAC,OAAO,qCAAqC;oBACxF,gDAAgD,CACnD,CAAA;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,KAAwB,EAAW,EAAE;IAC5D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA2C,CAAA;QACtG,OAAO,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAA;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,IAAc;IACnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACvC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA4B,CAAA;QACrE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,IAAI,QAAQ,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAAmB,EACnB,IAA4D;IAE5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACtC,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAA;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,iEAAiE,EAAE;YACpG,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,4EAA4E;aACrF,CAAA;IACP,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,qDAAqD,EAAE;YACxF,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,mBAAmB,IAAI,CAAC,WAAW,sCAAsC;aAClF,CAAA;IACP,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC1D,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC5C,MAAM,EACJ,oHAAoH;SACvH,CAAA;IACH,CAAC;IACD,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;IAC7C,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1D,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,wDAAwD;KAC7D,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,WAAW,CACxB,OAAmB,EACnB,IAAuD;IAEvD,MAAM,QAAQ,GAAG,KAAK,IAAsB,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrE,CAAC,CAAA;IACD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrC,IAAI,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,CACnB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,yEAAyE,CACpG,CAAA;QACH,SAAS,GAAG,IAAI,CAAA;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACrD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,yCAAyC,CAAA;IAC7F,OAAO;QACL,MAAM,EAAE,SAAS,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;QAClF,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;KAClG,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAAmB,EACnB,IAAuD;IAEvD,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC9F,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpG,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI;QAClC,MAAM,IAAI,WAAW,CAAC,8BAA8B,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1F,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACjE,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,SAAS;IACT,iBAAiB;IACjB,QAAQ;IACR,UAAU;IACV,WAAW;IACX,WAAW;IACX,OAAO;CACR,CAAC,CAAA;AACF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE7F,gGAAgG;AAChG,KAAK,UAAU,gBAAgB,CAC7B,OAAmB,EACnB,IAAuD;IAEvD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAA;IAC9B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IACxD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,+DAA+D,EAAE,CAAA;IAC3G,4EAA4E;IAC5E,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAChG,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,eAAe,KAAK,EAAE,EAAE,CAAA;IAC9F,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,OAAO,KAAK,IAAI,qBAAqB,iBAAiB,EAAE,CAAA;IAClG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;IACtD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,GAAG,IAAI,+BAA+B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE;SAC5G,CAAA;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE,EAAE,CAAA;AACrD,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAmB,EACnB,IAAyD;IAEzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAA;IACzF,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;IAC7C,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAA;AAC5E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAmB,EACnB,IAA8D;IAE9D,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA;IAC7F,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC5B,qFAAqF;IACrF,IAAI,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAA;IACxG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAA;IACzC,IAAI,QAAQ,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;QACvC,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,IAAI,WAAW,GAAG,wCAAwC,QAAQ,EAAE,CAAC,CAAA;IACrG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,iCAAiC,EAAE,CAAA;IACvF,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,sBAAsB,EAAE,CAAA;AAChF,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAmB,EAAE,IAAoB;IAC9D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,aAAa;YAChB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAClC,KAAK,cAAc;YACjB,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACnC,KAAK,kBAAkB;YACrB,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACvC,KAAK,mBAAmB;YACtB,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxC,KAAK,cAAc;YACjB,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACnC,KAAK,gBAAgB;YACnB,OAAO,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACrC,KAAK,qBAAqB;YACxB,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAkB,EAAE,QAAkB,EAAE,GAAW;IAClE,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,wCAAwC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,WAAW,EAAE,GAAG;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,2BAA2B;QACvC,KAAK,EAAE,EAAE;KACV,CAAA;AACH,CAAC;AAED,qGAAqG;AACrG,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,QAAgB,EAAE,IAA0B;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,MAAM,IAAI,GAAiB;QACzB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAExE,+FAA+F;IAC/F,IAAI,QAAQ,KAAK,GAAG,OAAO,CAAC,OAAO,eAAe;QAChD,OAAO,MAAM,CAAC,WAAW,OAAO,CAAC,OAAO,yCAAyC,QAAQ,EAAE,CAAC,CAAA;IAC9F,IAAI,OAAO,CAAC,SAAS,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACrF,IAAI,OAAO,CAAC,SAAS,KAAK,mCAAmC;QAC3D,OAAO,MAAM,CAAC,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,mCAAmC;QACxD,OAAO,MAAM,CAAC,UAAU,OAAO,CAAC,MAAM,uBAAuB,OAAO,CAAC,SAAS,OAAO,CAAC,CAAA;IACxF,IAAI,OAAO,CAAC,aAAa,KAAK,uCAAuC;QACnE,OAAO,MAAM,CACX,iBAAiB,OAAO,CAAC,aAAa,wBAAwB,uCAAuC,EAAE,CACxG,CAAA;IACH,MAAM,UAAU,GAAG,yCAAyC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAChF,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACzE,MAAM,gBAAgB,GAAG,uCAAuC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IACvF,IAAI,OAAO,CAAC,iBAAiB,KAAK,gBAAgB;QAChD,OAAO,MAAM,CACX,qBAAqB,OAAO,CAAC,iBAAiB,mCAAmC,gBAAgB,GAAG,CACrG,CAAA;IAEH,MAAM,KAAK,GAAG,iCAAiC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IACtE,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAA;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAA;IACzE,wGAAwG;IACxG,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;QACpD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB;YACnE,OAAO,CAAC,mBAAmB,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAA;IAC1F,CAAC,CAAA;IAED,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,IAAI,OAAO,GAAuB,IAAI,CAAA;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1F,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,mBAAmB,EAAE,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QACvG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,CAAE,KAAe,CAAC,OAAO,CAAC,CAAA;YAC1F,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC5B,MAAM,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;IACjF,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;QACtD,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;QACtD,QAAQ,EACN,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,qBAAqB,QAAQ,CAAC,MAAM,GAAG,OAAO,mBAAmB;YACnG,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,YAAY,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/F,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,QAAQ;KAChB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CACtB,OAAwB,EACxB,IAAkB,EAClB,IAA0B;IAE1B,MAAM,MAAM,GAAG,CAAC,QAAkB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB;QACzC,OAAO,MAAM,CAAC,CAAC,UAAU,OAAO,CAAC,MAAM,uBAAuB,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC,CAAA;IAC1F,IAAI,OAAO,CAAC,aAAa,KAAK,wBAAwB;QACpD,OAAO,MAAM,CAAC,CAAC,iBAAiB,OAAO,CAAC,aAAa,wBAAwB,wBAAwB,EAAE,CAAC,CAAC,CAAA;IAC3G,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAClE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,yBAAyB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IAC/D,IAAI,OAAO,CAAC,iBAAiB,KAAK,MAAM;QACtC,OAAO,MAAM,CAAC;YACZ,qBAAqB,OAAO,CAAC,iBAAiB,mCAAmC,MAAM,GAAG;SAC3F,CAAC,CAAA;IAEJ,MAAM,MAAM,GAAG,CACb,OAAkC,EAClC,QAAuB,EACvB,GAAW,EACX,KAA4B,EACZ,EAAE,CAAC,CAAC;QACpB,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;QACnB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU,EAAE,IAAI;QAChB,KAAK;KACN,CAAC,CAAA;IAEF,uGAAuG;IACvG,gGAAgG;IAChG,MAAM,OAAO,GAAG,KAAK,IAAsB,EAAE,CAC3C,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAA;IAClF,MAAM,aAAa,GAAG,MAAM,OAAO,EAAE,CAAA;IACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE;QAC9D,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KAC7C,CAAC,CAAA;IACF,6EAA6E;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAA;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,yBAAyB,CAAA;IAC/E,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACtC,2FAA2F;QAC3F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;aACxE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,OAAO,MAAM,CACX,QAAQ,EACR,OAAO,CAAC,IAAI,EACZ,iDAAiD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAChF;YACE;gBACE,EAAE,EAAE,aAAa;gBACjB,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,OAAO,CAAC,IAAI;gBACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC5B,MAAM,EAAE,IAAI;aACb;YACD,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SAChF,CACF,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAwB;QACrC,EAAE,EAAE,aAAa;QACjB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,OAAO,CAAC,IAAI;QACvB,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,eAAe;KACtB,CAAA;IACD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,iBAAiB,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,4CAA4C,EAAE;YACpG,SAAS;YACT,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;SACrG,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,uGAAuG;IACvG,8FAA8F;IAC9F,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAA;IACpG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,CAAA;IAClD,OAAO,MAAM,CACX,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,EACvC,CAAC,EACD,KAAK;QACH,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,6BAA6B;QACnD,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,mDAAmD,EAC3E;QACE,SAAS;QACT;YACE,EAAE,EAAE,WAAW;YACf,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,MAAM,CAAC,IAAI;YACtB,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,yDAAyD;SACnG;KACF,CACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,IAA0B;IAE1B,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IAC7C,IAAI,UAAU,KAAK,IAAI;QACrB,MAAM,IAAI,eAAe,CACvB,2BAA2B,EAC3B,kEAAkE,WAAW,EAAE,CAChF,CAAA;IACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CACrD,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAkB,EAAE;QACrE,+EAA+E;QAC/E,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,IAAI;SACxB,CAAA;QACD,OAAO;YACL,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,sCAAuC,KAAe,CAAC,OAAO,EAAE,CAAC;YAChF,UAAU,EAAE,IAAI;SACjB,CAAA;IACH,CAAC,CAAC,EACJ,CAAC,KAAc,EAAE,EAAE;QACjB,MAAM,IAAI,GACR,KAAK,YAAY,eAAe;YAC9B,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,CAAE,KAA+B,CAAC,IAAI,IAAK,KAAe,CAAC,OAAO,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,IAAI;SACxB,CAAA;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,oCAAoC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACpF,CAAC,CACF,CAAA;IACD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/host/recipes/guest-executor.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The Linux install recipe, run inside Atomic Chat's own WSL distribution (change
+ * `add-tensorrt-llm-windows`, task 2.5; design D1, D3): the very executor the Linux host step runs
+ * (`executeHostStep`) — the same refusals, digests, pinned keys, idempotent steps and result — with its
+ * I/O pointed at the guest through the WSL transport instead of at this machine. Every command runs as
+ * the guest's root, as one argv under `env -i` with the recipe's fixed environment (the same clean
+ * environment `nodeHostStepDeps` gives `hostExec`), never through a shell. Nothing here is elevated on
+ * Windows: root in a distribution the user owns gives no rights on Windows (D3).
+ *
+ * The request never touches a disk: it is built in memory from the parameters the plan validated, and
+ * the result comes back to the caller. Keys are fetched on the Windows side and written into the guest.
+ * A guest file is read with `cat` — text only, which is all the recipe compares (sources, `daemon.json`);
+ * a binary key is only ever checked for existence.
+ */
+import type { GuestRecipeRunner } from '../../runtime/environment/index.js';
+import type { WslDistributionTransport } from '../../runtime/wsl/index.js';
+import { type HostStepExecutorDeps } from './executor.js';
+export interface GuestHostStepOptions {
+    fetch: typeof fetch;
+    signal: AbortSignal;
+    now?: () => number;
+}
+/** `HostStepExecutorDeps` over the guest, for an in-memory request (`readRequest`/`writeResult` are the caller's). */
+export declare function guestHostStepDeps(transport: WslDistributionTransport, options: GuestHostStepOptions): HostStepExecutorDeps;
+/** The `GuestRecipeRunner` the Windows provisioner is given. */
+export declare function createGuestRecipeRunner(options: {
+    fetch: typeof fetch;
+    now?: () => number;
+}): GuestRecipeRunner;

package/dist/host/recipes/guest-executor.js

@@ -0,0 +1,76 @@
+import { executeHostStep } from './executor.js';
+import { INSTALL_CONTAINER_RUNTIME_RECIPE } from './install-container-runtime.js';
+/** Package installs: hours, as on Linux; everything else: minutes. */
+const LONG_TIMEOUT_MS = 2 * 60 * 60_000;
+const COMMAND_TIMEOUT_MS = 10 * 60_000;
+const GUEST_ROOT = 'root';
+const ENV = Object.entries(INSTALL_CONTAINER_RUNTIME_RECIPE.environment).map(([key, value]) => `${key}=${value}`);
+/** `HostStepExecutorDeps` over the guest, for an in-memory request (`readRequest`/`writeResult` are the caller's). */
+export function guestHostStepDeps(transport, options) {
+    const run = (argv, timeoutMs = COMMAND_TIMEOUT_MS, input) => transport.exec(argv, {
+        user: GUEST_ROOT,
+        timeoutMs,
+        signal: options.signal,
+        ...(input === undefined ? {} : { input }),
+    });
+    const must = async (argv, input) => {
+        const output = await run(argv, COMMAND_TIMEOUT_MS, input);
+        if (output.code !== 0)
+            throw new Error(`${argv.join(' ')} exited with ${String(output.code)}: ${output.stderr.trim()}`);
+    };
+    return {
+        readRequest: async () => {
+            throw new Error('the guest runner supplies the request itself');
+        },
+        writeResult: async () => undefined,
+        readFile: async (path) => {
+            if ((await run(['test', '-e', path])).code !== 0)
+                return null;
+            const read = await run(['cat', '--', path]);
+            if (read.code !== 0)
+                throw new Error(`could not read ${path} in the distribution: ${read.stderr.trim()}`);
+            return new Uint8Array(Buffer.from(read.stdout, 'utf8'));
+        },
+        writeFile: async (path, data, mode) => {
+            const temp = `${path}.atomic-tmp`;
+            await must(['mkdir', '-p', path.slice(0, path.lastIndexOf('/')) || '/']);
+            await must(['tee', temp], Buffer.from(data));
+            await must(['chmod', mode.toString(8), temp]);
+            await must(['mv', '-f', temp, path]);
+        },
+        exec: (argv, call) => run(['env', '-i', ...ENV, ...argv], call?.longRunning === true ? LONG_TIMEOUT_MS : COMMAND_TIMEOUT_MS),
+        fetch: options.fetch,
+        now: options.now ?? Date.now,
+        invokingUid: null,
+    };
+}
+/** The `GuestRecipeRunner` the Windows provisioner is given. */
+export function createGuestRecipeRunner(options) {
+    return async (transport, request, signal) => {
+        const text = JSON.stringify({
+            schema_version: 1,
+            step_id: 'guest-recipe',
+            operation_id: 'guest',
+            action: request.recipe_id,
+            recipe_id: request.recipe_id,
+            recipe_digest: request.recipe_digest,
+            parameters_digest: request.parameters_digest,
+            nonce: 'guest',
+            expected_operation_revision: 0,
+            data_folder: '/',
+            parameters: request.parameters,
+        });
+        const deps = {
+            ...guestHostStepDeps(transport, {
+                fetch: options.fetch,
+                signal,
+                ...(options.now === undefined ? {} : { now: options.now }),
+            }),
+            readRequest: async () => text,
+            writeResult: async () => undefined,
+        };
+        const result = await executeHostStep('guest/guest-recipe.request.json', deps);
+        return { outcome: result.outcome, log_tail: result.log_tail };
+    };
+}
+//# sourceMappingURL=guest-executor.js.map

package/dist/host/recipes/guest-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-executor.js","sourceRoot":"","sources":["../../../src/host/recipes/guest-executor.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,eAAe,EAA6B,MAAM,eAAe,CAAA;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAA;AAEjF,sEAAsE;AACtE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;AACvC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAA;AACtC,MAAM,UAAU,GAAG,MAAM,CAAA;AAQzB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC,GAAG,CAC1E,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CACpC,CAAA;AAED,sHAAsH;AACtH,MAAM,UAAU,iBAAiB,CAC/B,SAAmC,EACnC,OAA6B;IAE7B,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,SAAS,GAAG,kBAAkB,EAAE,KAAc,EAAE,EAAE,CAC7E,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;QACnB,IAAI,EAAE,UAAU;QAChB,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAA;IACJ,MAAM,IAAI,GAAG,KAAK,EAAE,IAAc,EAAE,KAAc,EAAiB,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACpG,CAAC,CAAA;IACD,OAAO;QACL,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAClC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;YAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,yBAAyB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACtF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,GAAG,IAAI,aAAa,CAAA;YACjC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;YACxE,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5C,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7C,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACnB,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACxG,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QAC5B,WAAW,EAAE,IAAI;KAClB,CAAA;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,uBAAuB,CAAC,OAGvC;IACC,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,cAAc;YACvB,YAAY,EAAE,OAAO;YACrB,MAAM,EAAE,OAAO,CAAC,SAAS;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,KAAK,EAAE,OAAO;YACd,2BAA2B,EAAE,CAAC;YAC9B,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAA;QACF,MAAM,IAAI,GAAyB;YACjC,GAAG,iBAAiB,CAAC,SAAS,EAAE;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM;gBACN,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aAC3D,CAAC;YACF,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;YAC7B,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;SACnC,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAA;QAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC/D,CAAC,CAAA;AACH,CAAC"}

package/dist/host/recipes/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Privileged host recipes and the executor that runs them (design D2/D3). `linux.install-container-
+ * runtime` is the only recipe: pure step builders in `install-container-runtime.ts`, the request and
+ * result file protocol in `request-file.ts`, the run itself in `executor.ts` over injected I/O, and
+ * the real I/O for a root process in `executor-io.ts`. Both the core binary (`host-step exec`) and
+ * `atc host-step exec` call `executeHostStep` from here, through `@atomic-chat/core/host`.
+ *
+ * Public API of this module is exported from this file only.
+ */
+export * from './install-container-runtime.js';
+export * from './enable-wsl.js';
+export * from './request-file.js';
+export * from './executor.js';
+export * from './executor-io.js';
+export * from './executor-io-windows.js';
+export * from './guest-executor.js';

package/dist/host/recipes/index.js

@@ -0,0 +1,17 @@
+/**
+ * Privileged host recipes and the executor that runs them (design D2/D3). `linux.install-container-
+ * runtime` is the only recipe: pure step builders in `install-container-runtime.ts`, the request and
+ * result file protocol in `request-file.ts`, the run itself in `executor.ts` over injected I/O, and
+ * the real I/O for a root process in `executor-io.ts`. Both the core binary (`host-step exec`) and
+ * `atc host-step exec` call `executeHostStep` from here, through `@atomic-chat/core/host`.
+ *
+ * Public API of this module is exported from this file only.
+ */
+export * from './install-container-runtime.js';
+export * from './enable-wsl.js';
+export * from './request-file.js';
+export * from './executor.js';
+export * from './executor-io.js';
+export * from './executor-io-windows.js';
+export * from './guest-executor.js';
+//# sourceMappingURL=index.js.map

package/dist/host/recipes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/host/recipes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,0BAA0B,CAAA;AACxC,cAAc,qBAAqB,CAAA"}

package/dist/host/recipes/install-container-runtime.d.ts

@@ -0,0 +1,389 @@
+/**
+ * The `linux.install-container-runtime` recipe (design D2/D3): Docker Engine and the NVIDIA
+ * Container Toolkit from the vendors' own apt or dnf repositories, the NVIDIA runtime registered
+ * with Docker, the NVIDIA CDI spec generated (task 2.23, F-5: Docker 28.2+ passes `--gpus` through
+ * it), `docker.service` enabled, and the user added to the `docker` group. This is the one
+ * piece of code in the product that runs as root on a user's machine, so its shape is deliberate:
+ *
+ * - **Data in, argv out.** `buildInstallContainerRuntimeSteps` is pure. Every command is an argv
+ *   array taken from `INSTALL_CONTAINER_RUNTIME_RECIPE` with validated values substituted into whole
+ *   arguments; nothing is ever handed to a shell.
+ * - **The recipe is its own digest.** Every command, path, URL, key fingerprint and file body lives
+ *   in the frozen `INSTALL_CONTAINER_RUNTIME_RECIPE`, and `INSTALL_CONTAINER_RUNTIME_RECIPE_DIGEST`
+ *   is its canonical hash. A change to any of them changes the digest, which a test pins.
+ * - **Only what is missing.** Parameters name components, never packages or commands. The executor
+ *   re-checks each one on the machine and skips what is already there, so a replay is a no-op.
+ * - **Nothing removed, nothing upgraded.** No step removes a package or a file, or upgrades the
+ *   system. `assertPermittedCommand` is an allowlist the executor applies to every argv before it
+ *   runs, and a test scans every step this module can build for the forbidden words. `apt-get
+ *   install` always carries `--no-remove`: without it apt's resolver may remove a conflicting
+ *   package to satisfy the install. `dnf install` has two ways to take a package away:
+ *   `--allowerasing` (forbidden) and RPM `Obsoletes`, which a plain install always honours — no
+ *   dnf option turns that off (libdnf and libdnf5 set `SOLVER_FLAG_YUM_OBSOLETES` unconditionally;
+ *   `obsoletes=False` only changes candidate selection). containerd.io obsoletes `containerd` and
+ *   `runc`, older docker-ce releases obsolete `docker-ce-selinux`, and nvidia-container-toolkit
+ *   obsoletes old `nvidia-container-runtime` and `nvidia-container-runtime-hook`. So two checks run
+ *   before any dnf install, and either refuses it: a static per-component conflict list, and a live
+ *   one — `dnf repoquery --obsoletes <package>` for each package still to install, then
+ *   `rpm --query <name>` for each name it obsoletes. Both ask rpm by package name only, because
+ *   libsolv matches Obsoletes against names, not against what a package provides. An installed
+ *   package of such a name is refused, never replaced. Only the packages the recipe names are
+ *   queried, not the dependencies the install pulls in (nvidia-container-toolkit-base, which the
+ *   toolkit requires, repeats the toolkit's Obsoletes).
+ * - **A package query fails closed.** A package counts as absent only when `rpm` or `dpkg-query`
+ *   says so in its own words; a database it cannot open, a lock or any other reply fails the step,
+ *   so a broken query can never make a conflict look absent.
+ *
+ * What `recipe_digest` covers: everything in `INSTALL_CONTAINER_RUNTIME_RECIPE` — argv templates,
+ * paths, URLs, key fingerprints, file bodies, modes, the environment, the conflict lists. What it
+ * does not cover: the code in this file and in `executor.ts` (how steps are ordered and named,
+ * `PERMITTED`, the check-then-act logic, the restart rule). A change there is a code change like
+ * any other; it does not by itself invalidate plans users have already approved.
+ */
+import type { Sha256Digest } from '../../contracts/index.js';
+import type { HostRecipeBinding, LinuxInstallPlan } from '../../runtime/environment/index.js';
+export declare const INSTALL_CONTAINER_RUNTIME_RECIPE_ID = "linux.install-container-runtime";
+/**
+ * What a plan can ask the recipe for, in the order the recipe applies them. `docker-restart` is not
+ * a step of its own: it is the user's consent (design D5) to restart a Docker that was already
+ * running when `nvidia-runtime` changes its configuration. `nvidia-cdi` (task 2.23, F-5) generates
+ * the CDI spec after the runtime is configured, and needs no restart.
+ */
+export declare const CONTAINER_RUNTIME_COMPONENTS: readonly ["docker-engine", "nvidia-container-toolkit", "nvidia-runtime", "nvidia-cdi", "docker-restart", "docker-service", "docker-group"];
+export type ContainerRuntimeComponent = (typeof CONTAINER_RUNTIME_COMPONENTS)[number];
+/** Every value the privileged step takes from outside. Nothing else reaches it. */
+export interface InstallContainerRuntimeParameters {
+    /** The account to add to the `docker` group. Never `root` when `docker-group` is asked for. */
+    user: string;
+    arch: 'x86_64' | 'aarch64';
+    family: 'apt' | 'dnf';
+    distro_id: string;
+    version_id: string;
+    components: ContainerRuntimeComponent[];
+}
+/**
+ * The whole recipe as data. `{{name}}` marks a whole-argument or in-file substitution of a
+ * validated parameter; there is no other kind of template.
+ */
+export declare const INSTALL_CONTAINER_RUNTIME_RECIPE: {
+    recipe_id: string;
+    revision: number;
+    /**
+     * The environment every command runs with, instead of the caller's. `sudo` and `pkexec` already
+     * scrub most of it, but a variable like `APT_CONFIG` or `LD_PRELOAD` must never reach a root
+     * package manager, whoever started us.
+     */
+    environment: {
+        PATH: string;
+        LANG: string;
+        LC_ALL: string;
+        DEBIAN_FRONTEND: string;
+    };
+    packages: {
+        'docker-engine': string[];
+        'nvidia-container-toolkit': string[];
+    };
+    apt: {
+        /** Release → suite. Only these releases are buildable; `VERSION_CODENAME` is never trusted. */
+        suites: Record<string, Record<string, string>>;
+        architectures: {
+            x86_64: string;
+            aarch64: string;
+        };
+        repositories: {
+            'docker-engine': {
+                key: {
+                    url: string;
+                    path: string;
+                    encoding: string;
+                    fingerprints: string[];
+                };
+                source: {
+                    path: string;
+                    content: string;
+                };
+            };
+            'nvidia-container-toolkit': {
+                key: {
+                    url: string;
+                    path: string;
+                    encoding: string;
+                    fingerprints: string[];
+                };
+                source: {
+                    path: string;
+                    content: string;
+                };
+            };
+        };
+        /** Refresh one source list only: no other repository is fetched, no list is cleaned up. */
+        refresh: string[];
+        installed: string[];
+        /**
+         * Missing packages are appended. `--no-remove` makes apt fail rather than remove a package its
+         * resolver finds in the way; `confold` keeps the user's config on a dependency's upgrade; the
+         * lock timeout waits out unattended-upgrades instead of failing on dpkg's lock.
+         */
+        install: string[];
+        /**
+         * Installed packages that installing a component would have removed or replaced, per component.
+         * Docker's guide has these removed first; we never remove anything, so we refuse instead. With
+         * `--no-remove`, apt fails rather than removing; the check gives the clearer answer first.
+         */
+        conflicts: {
+            'docker-engine': string[];
+            'nvidia-container-toolkit': string[];
+        };
+    };
+    dnf: {
+        /** Fedora's `VERSION_ID` is a plain release number; the descriptor decides which ones qualify. */
+        versions: Record<string, string>;
+        repositories: {
+            'docker-engine': {
+                key: {
+                    url: string;
+                    path: string;
+                    encoding: string;
+                    fingerprints: string[];
+                };
+                source: {
+                    path: string;
+                    content: string;
+                };
+            };
+            'nvidia-container-toolkit': {
+                key: {
+                    url: string;
+                    path: string;
+                    encoding: string;
+                    fingerprints: string[];
+                };
+                source: {
+                    path: string;
+                    content: string;
+                };
+            };
+        };
+        /**
+         * Whether a package of exactly this name is installed: its name once per installed version, or
+         * exit 1 and "package <name> is not installed" (no `--quiet`, which would hide that answer). The
+         * `\\n` is the two characters rpm's query format expands itself, as a shell would pass `'%{NAME}\\n'`.
+         */
+        installed: string[];
+        /** No option here stops RPM `Obsoletes`; the two checks above the install do (see header). */
+        install: string[];
+        /**
+         * What a package from the configured repos `Obsoletes`, one per line. It installs and removes
+         * nothing, but it is not free of effects: it refreshes dnf's metadata cache, and `-y` accepts the
+         * import of the signing key of every enabled repository that has `repo_gpgcheck` on — the same
+         * keys, and the same prompt, the install itself would answer. `skip_if_unavailable=False`: a
+         * repository that cannot be read fails the query instead of being skipped into an empty answer.
+         */
+        obsoletes: string[];
+        /**
+         * Per component: Docker's Fedora guide has the first twelve removed first; the rest are what the
+         * component's packages `Obsolete` (containerd.io: containerd, runc; older docker-ce releases:
+         * docker-ce-selinux; nvidia-container-toolkit: nvidia-container-runtime ≤ 3.5.0-1,
+         * nvidia-container-runtime-hook ≤ 1.4.0-2). The live check covers anything else they obsolete.
+         */
+        conflicts: {
+            'docker-engine': string[];
+            'nvidia-container-toolkit': string[];
+        };
+    };
+    file_mode: number;
+    runtime: {
+        daemon_json: string;
+        configure: string[];
+        docker_active: string[];
+        /** Which runtimes the running daemon actually loaded, as opposed to what daemon.json says. */
+        loaded: string[];
+        restart: string[];
+        reset_failed: string[];
+        journal: string[];
+    };
+    /**
+     * The NVIDIA CDI spec (task 2.23, F-5; ruling R-core-8): `nvidia-ctk cdi list` says whether a
+     * `nvidia.com/gpu` device is already defined — the same check the core's probe makes — and only
+     * when none is does `generate` write the spec, to the fixed path, never another. Where the toolkit
+     * ships `nvidia-cdi-refresh.path` (NVIDIA Container Toolkit 1.18+), it is enabled so the spec is
+     * rewritten after a driver update or a reboot (`/var/run` is a tmpfs); where it does not, nothing
+     * fails, and the next probe after a reboot plans the spec again.
+     */
+    cdi: {
+        spec: string;
+        list: string[];
+        generate: string[];
+        /**
+         * The core's probe runs `nvidia-ctk cdi list` as the user, so the spec must be world-readable.
+         * Whether `generate` leaves it `0644` differs across toolkit releases (the CDI library writes a
+         * `0600` temporary file and renames it), so the step reads the mode and fixes it only when the
+         * file is not readable by others (task 2.23, review round 1).
+         */
+        mode: string[];
+        make_readable: string[];
+        refresh_unit: string;
+        refresh_present: string[];
+        refresh_enabled: string[];
+        refresh_enable: string[];
+    };
+    service: {
+        enabled: string[];
+        active: string[];
+        reset_failed: string[];
+        enable: string[];
+        journal: string[];
+    };
+    group: {
+        uid: string[];
+        groups: string[];
+        add: string[];
+    };
+};
+export declare const INSTALL_CONTAINER_RUNTIME_RECIPE_DIGEST: Sha256Digest;
+export type ParametersValidation = {
+    ok: true;
+    parameters: InstallContainerRuntimeParameters;
+} | {
+    ok: false;
+    problems: string[];
+};
+/**
+ * Checks untrusted parameters against what this recipe can build, and returns them normalised
+ * (components in recipe order). The descriptor's distribution list is the core's business; this
+ * only refuses what the compiled recipe has no commands for.
+ */
+export declare function validateInstallContainerRuntimeParameters(raw: unknown): ParametersValidation;
+/** Canonical-JSON sha256 of the normalised parameters: what `parameters_digest` must equal. */
+export declare function installContainerRuntimeParametersDigest(parameters: InstallContainerRuntimeParameters): Sha256Digest;
+/**
+ * The parameters for an install plan from `assessLinux` (task 2.4), for the core to put behind a
+ * `pending_host_step` (task 2.6). Each system change maps to one component; anything the recipe
+ * cannot do, or a group line for an account other than the host's user, is refused.
+ */
+export declare function parametersFromPlan(plan: LinuxInstallPlan, host: Omit<InstallContainerRuntimeParameters, 'components'>): InstallContainerRuntimeParameters;
+/**
+ * This recipe as the core's Linux provisioner consumes it (task 2.6): it builds the parameters of a
+ * pending host step from the plan and their digest, with the same functions the executor checks
+ * them against. The provisioner cannot import this module itself (it imports the environment
+ * module), so the core passes it in.
+ */
+export declare const INSTALL_CONTAINER_RUNTIME_BINDING: HostRecipeBinding;
+/**
+ * One unit of work, with everything the executor needs to decide whether it is already done and,
+ * if not, to do it. Every command in it is already a complete argv.
+ */
+export type HostRecipeStep = {
+    id: string;
+    kind: 'install-key';
+    url: string;
+    path: string;
+    /** `armored` writes the text as served; `binary` writes the dearmored key (apt `.gpg`). */
+    encoding: 'armored' | 'binary';
+    fingerprints: string[];
+    mode: number;
+} | {
+    id: string;
+    kind: 'write-source';
+    path: string;
+    content: string;
+    mode: number;
+} | {
+    id: string;
+    kind: 'install-packages';
+    packages: string[];
+    queries: {
+        package: string;
+        argv: string[];
+    }[];
+    /**
+     * Installed packages that installing `component` would remove or replace. Checked whenever
+     * that component still has a package to install.
+     */
+    conflicts: {
+        package: string;
+        argv: string[];
+        component: 'docker-engine' | 'nvidia-container-toolkit';
+    }[];
+    /**
+     * dnf only (null on apt, where `--no-remove` makes apt fail instead): per package still to
+     * install, the query for what it obsoletes, and the prefix that asks whether a package of an
+     * obsoleted name is installed (the name is appended).
+     */
+    obsoletes: {
+        queries: {
+            package: string;
+            argv: string[];
+        }[];
+        installed: string[];
+    } | null;
+    refresh: string[][];
+    /** Without package names: the executor appends only the ones still missing. */
+    install: string[];
+} | {
+    id: string;
+    kind: 'configure-runtime';
+    daemon_json: string;
+    configure: string[];
+    docker_active: string[];
+    loaded: string[];
+    restart: string[];
+    /** Run right before `restart`, its exit status ignored (F-6). */
+    reset_failed: string[];
+    /** Read only when `restart` fails, to say why Docker did not come back. */
+    journal: string[];
+    /** The plan listed the restart and the user consented to it (design D5). */
+    restart_approved: boolean;
+} | {
+    id: string;
+    kind: 'generate-cdi';
+    spec: string;
+    /** Whether a `nvidia.com/gpu` device is defined: before (satisfied?) and after generating. */
+    list: string[];
+    generate: string[];
+    /** `stat --format=%a` of the spec: its octal mode, read before deciding to change it. */
+    mode: string[];
+    /** `chmod 0644` of the spec, only when `mode` shows it is not readable by others. */
+    make_readable: string[];
+    refresh_unit: string;
+    refresh_present: string[];
+    refresh_enabled: string[];
+    refresh_enable: string[];
+} | {
+    id: string;
+    kind: 'enable-service';
+    enabled: string[];
+    active: string[];
+    /** Run right before `enable`, its exit status ignored (F-6). */
+    reset_failed: string[];
+    enable: string[];
+    /** Read only when `enable` fails, to say why Docker did not start. */
+    journal: string[];
+} | {
+    id: string;
+    kind: 'add-to-docker-group';
+    user: string;
+    uid: string[];
+    groups: string[];
+    add: string[];
+};
+/** The ordered steps for these parameters. Throws on parameters that do not validate. */
+export declare function buildInstallContainerRuntimeSteps(input: InstallContainerRuntimeParameters): HostRecipeStep[];
+/** Every argv a step can run, checks included — what the forbidden-word scan reads. */
+export declare function commandsOf(step: HostRecipeStep): string[][];
+/** Every package the recipe itself installs: the only ones `dnf repoquery` is asked about. */
+export declare const RECIPE_PACKAGES: ReadonlySet<string>;
+/**
+ * A package name — what an RPM `Obsoletes` names, as `dnf repoquery` prints it without its version
+ * constraint. Never an option, a path or any other kind of capability.
+ */
+export declare function isPackageName(value: string): boolean;
+/** Words that remove or upgrade. None may appear in any argument of any command. */
+export declare const FORBIDDEN_WORDS: readonly string[];
+/** The same argv: the same length, and every argument equal in its own position. */
+export declare function sameArgv(a: readonly string[], b: readonly string[]): boolean;
+/**
+ * Throws unless `argv` is one of the command shapes this recipe runs. The executor calls it on
+ * every command, so even a bug in step building cannot reach a shell, a removal or an upgrade.
+ */
+export declare function assertPermittedCommand(argv: readonly string[]): void;