@atomic-chat/core 0.5.1 → 0.13.2

package/dist/runtime/environment/descriptor-provider.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Getting a runtime descriptor onto disk and keeping the right one in play (openspec change
+ * `add-tensorrt-llm-linux`, task 2.3; spec `runtime-descriptor-catalog`, "Core получает и кэширует
+ * дескриптор", "Установка закрепляет свой дескриптор", "Минимальные версии соблюдаются"; design D7).
+ *
+ * `descriptor.ts` (task 2.1) only checks shape; this file decides which bytes ever reach it, and
+ * what happens to the result. Two rules shape the whole thing:
+ *
+ *   - A descriptor is accepted only when it parses AND its `minimum_core_version` is no higher than
+ *     this build's own `CORE_VERSION`. An accepted descriptor is cached forever, keyed by its own
+ *     `descriptor_id` — conf's own rule is that a `descriptor_id`'s content never changes, so the
+ *     cached copy is exactly as good as a fresh fetch would be, on every later read.
+ *   - An existing installation is pinned to the `descriptor_id` it was set up with
+ *     (`RuntimeInstallation.active_descriptor_id`). `forInstallation` only ever reads that one
+ *     descriptor back off the cache; it never calls `fetch`, so a new release published in conf
+ *     cannot change, or even touch, an installed engine. `forNewSetup` is the only path that talks
+ *     to the network, and only for a setup that has not pinned anything yet.
+ *
+ * How a document is fetched, accepted and cached — the version gate, the `file://`/`https://`-only
+ * override, the lock-free atomic cache writes, "a failed cache write is not fatal" — is the shared
+ * mechanism in `cached-document.ts` (change `extract-environment-manifest`, design D3), which the
+ * environment manifest uses too. This file only says which document it is and turns the
+ * mechanism's answer into this provider's API and messages. Nothing here ever removes a cache entry,
+ * which is exactly why an installation's pinned descriptor survives a new release.
+ *
+ * One descriptor per engine (change `add-vllm-runtime`, design D2; spec `runtime-descriptor-catalog`,
+ * "Core получает и кэширует дескриптор"): every engine core has an adapter for has its own source
+ * (`runtimes/<engine_id>.json`), its own override `ATOMIC_RUNTIME_DESCRIPTOR_URL_<ENGINE>` (the
+ * legacy `ATOMIC_RUNTIME_DESCRIPTOR_URL` still moves `tensorrt-llm`'s) and its own "last accepted"
+ * pointer `descriptors/latest-<engine_id>.json`. The cache by `descriptor_id` stays one folder, so
+ * `forInstallation(id)` does not need to know the engine. A document whose `engine_id` is not the
+ * engine it was fetched for is rejected on receipt, like any invalid document; one engine's source
+ * being unreachable never touches another's answer.
+ */
+import { AtomicCoreError } from '../../contracts/index.js';
+import type { RuntimeDescriptor } from '../../contracts/index.js';
+import { type DocumentCacheFs, type DocumentFetch } from './cached-document.js';
+/** The legacy override: still moves the `tensorrt-llm` source (e2e, `docs/`, manual checks). */
+export declare const RUNTIME_DESCRIPTOR_URL_ENV = "ATOMIC_RUNTIME_DESCRIPTOR_URL";
+/** `ATOMIC_RUNTIME_DESCRIPTOR_URL_<ENGINE>`: the engine id upper-cased, `-` as `_`. */
+export declare function runtimeDescriptorUrlEnv(engineId: string): string;
+/** The variables that override one engine's source, in the order they win. */
+export declare function runtimeDescriptorUrlEnvs(engineId: string): string[];
+/** The TensorRT-LLM engine: the first managed engine, and the one the legacy pointer and variable mean. */
+export declare const TENSORRT_LLM_ENGINE_ID = "tensorrt-llm";
+/** conf main, the published TensorRT-LLM descriptor (controller ruling for task 2.3). */
+export declare const DEFAULT_TENSORRT_LLM_DESCRIPTOR_URL = "https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/tensorrt-llm.json";
+/** conf main's published descriptor of one engine: `runtimes/<engine_id>.json`. */
+export declare function defaultDescriptorUrl(engineId: string): string;
+/** Where one engine's descriptor comes from: its id, the name messages use, and conf main's file. */
+export interface DescriptorSource {
+    engine_id: string;
+    /** "TensorRT-LLM", "vLLM": the engine in messages. */
+    label: string;
+    url: string;
+}
+export declare const TENSORRT_LLM_DESCRIPTOR_SOURCE: DescriptorSource;
+/** One way of fetching the descriptor document; `timeoutMs` is the hard budget to honour. */
+export type DescriptorFetch = DocumentFetch;
+/** A transport over a `fetch`-compatible function with an abort-on-timeout, matching the manifest's. */
+export declare function descriptorFetchFromFetch(fetchImpl: typeof fetch): DescriptorFetch;
+export interface DescriptorProviderOptions {
+    /** Where the override variables are read from; the real process env in production. */
+    env: Record<string, string | undefined>;
+    fetch: DescriptorFetch;
+    /** Reads a `file://…` override; rejects when the file does not exist or cannot be read. */
+    readFile: (path: string) => Promise<string>;
+    fs?: DocumentCacheFs;
+    /** The shared per-user managed root (`managedSharedRoot`); both scopes share one cache. */
+    root: string;
+    /** This build's own version; defaults to `CORE_VERSION`. A test pins it to check the gate. */
+    coreVersion?: string;
+    /** The engines core has an adapter for, each with its source; defaults to TensorRT-LLM alone. */
+    engines?: readonly DescriptorSource[] | undefined;
+    timeoutMs?: number;
+    /** A rejected source scheme or a failed cache write is never fatal; this is where it is reported. */
+    onWarn?: (message: string) => void;
+}
+export type DescriptorProviderResult = {
+    kind: 'available';
+    descriptor: RuntimeDescriptor;
+    /**
+     * `forNewSetup` only: `remote` — accepted from this fetch; `cache` — the fallback to the last
+     * accepted one. What `POST /engines/versions` reports as its source (change `unify-engine-lifecycle`).
+     */
+    source?: 'remote' | 'cache';
+} | {
+    kind: 'unsupported';
+    error: AtomicCoreError;
+};
+/** Give the descriptor provider a clear API: one path for a pinned installation, one for a fresh setup. */
+export interface RuntimeDescriptorProvider {
+    /** The engines this provider has a source for, in registration order. */
+    readonly engines: readonly DescriptorSource[];
+    /**
+     * The descriptor a fresh setup of `engineId` (or a probe before one) would use. Fetches from that
+     * engine's source; on any failure to obtain a newly *accepted* descriptor — network failure, an
+     * invalid document, another engine's document, or one that needs a newer core than this build —
+     * falls back to that engine's latest previously accepted descriptor in the cache, without ever
+     * surfacing that fallback as an error. `fetch` is never called by anything else in this provider.
+     */
+    forNewSetup(engineId: string): Promise<DescriptorProviderResult>;
+    /**
+     * The exact descriptor a pinned installation was set up with. Reads the cache only — this never
+     * calls `fetch` or `readFile`, so a release published in conf after this installation exists
+     * cannot change what it resolves to, or even be noticed by this call.
+     */
+    forInstallation(descriptorId: string): Promise<DescriptorProviderResult>;
+    /**
+     * What `forNewSetup(engineId)` would answer if it could not reach the network at all: that
+     * engine's latest previously accepted descriptor in the cache, or `unsupported` when nothing has
+     * ever been accepted for it. Network-free like `forInstallation` — never calls `fetch` or
+     * `readFile` — so a caller that only wants to know "what governs this engine right now" (the
+     * compatibility check, the snapshot's `minimum_app_version`) never pays for, or waits on, a fetch.
+     */
+    cachedForNewSetup(engineId: string): Promise<DescriptorProviderResult>;
+}
+/** `minimum_core_version` no higher than this build's own version (design D7, numeric semver compare). */
+export declare function descriptorMeetsCoreVersion(descriptor: RuntimeDescriptor, coreVersion: string): boolean;
+/** Build the provider. Construction does no I/O; every network or disk access happens per call. */
+export declare function createRuntimeDescriptorProvider(options: DescriptorProviderOptions): RuntimeDescriptorProvider;

package/dist/runtime/environment/descriptor-provider.js

@@ -0,0 +1,159 @@
+/**
+ * Getting a runtime descriptor onto disk and keeping the right one in play (openspec change
+ * `add-tensorrt-llm-linux`, task 2.3; spec `runtime-descriptor-catalog`, "Core получает и кэширует
+ * дескриптор", "Установка закрепляет свой дескриптор", "Минимальные версии соблюдаются"; design D7).
+ *
+ * `descriptor.ts` (task 2.1) only checks shape; this file decides which bytes ever reach it, and
+ * what happens to the result. Two rules shape the whole thing:
+ *
+ *   - A descriptor is accepted only when it parses AND its `minimum_core_version` is no higher than
+ *     this build's own `CORE_VERSION`. An accepted descriptor is cached forever, keyed by its own
+ *     `descriptor_id` — conf's own rule is that a `descriptor_id`'s content never changes, so the
+ *     cached copy is exactly as good as a fresh fetch would be, on every later read.
+ *   - An existing installation is pinned to the `descriptor_id` it was set up with
+ *     (`RuntimeInstallation.active_descriptor_id`). `forInstallation` only ever reads that one
+ *     descriptor back off the cache; it never calls `fetch`, so a new release published in conf
+ *     cannot change, or even touch, an installed engine. `forNewSetup` is the only path that talks
+ *     to the network, and only for a setup that has not pinned anything yet.
+ *
+ * How a document is fetched, accepted and cached — the version gate, the `file://`/`https://`-only
+ * override, the lock-free atomic cache writes, "a failed cache write is not fatal" — is the shared
+ * mechanism in `cached-document.ts` (change `extract-environment-manifest`, design D3), which the
+ * environment manifest uses too. This file only says which document it is and turns the
+ * mechanism's answer into this provider's API and messages. Nothing here ever removes a cache entry,
+ * which is exactly why an installation's pinned descriptor survives a new release.
+ *
+ * One descriptor per engine (change `add-vllm-runtime`, design D2; spec `runtime-descriptor-catalog`,
+ * "Core получает и кэширует дескриптор"): every engine core has an adapter for has its own source
+ * (`runtimes/<engine_id>.json`), its own override `ATOMIC_RUNTIME_DESCRIPTOR_URL_<ENGINE>` (the
+ * legacy `ATOMIC_RUNTIME_DESCRIPTOR_URL` still moves `tensorrt-llm`'s) and its own "last accepted"
+ * pointer `descriptors/latest-<engine_id>.json`. The cache by `descriptor_id` stays one folder, so
+ * `forInstallation(id)` does not need to know the engine. A document whose `engine_id` is not the
+ * engine it was fetched for is rejected on receipt, like any invalid document; one engine's source
+ * being unreachable never touches another's answer.
+ */
+import { AtomicCoreError } from '../../contracts/index.js';
+import { managedSharedPaths } from '../../config/index.js';
+import { createCachedDocuments, documentFetchFromFetch, meetsCoreVersion, } from './cached-document.js';
+import { parseRuntimeDescriptor } from './descriptor.js';
+/** The legacy override: still moves the `tensorrt-llm` source (e2e, `docs/`, manual checks). */
+export const RUNTIME_DESCRIPTOR_URL_ENV = 'ATOMIC_RUNTIME_DESCRIPTOR_URL';
+/** `ATOMIC_RUNTIME_DESCRIPTOR_URL_<ENGINE>`: the engine id upper-cased, `-` as `_`. */
+export function runtimeDescriptorUrlEnv(engineId) {
+    return `${RUNTIME_DESCRIPTOR_URL_ENV}_${engineId.toUpperCase().replace(/-/g, '_')}`;
+}
+/** The variables that override one engine's source, in the order they win. */
+export function runtimeDescriptorUrlEnvs(engineId) {
+    return engineId === TENSORRT_LLM_ENGINE_ID
+        ? [runtimeDescriptorUrlEnv(engineId), RUNTIME_DESCRIPTOR_URL_ENV]
+        : [runtimeDescriptorUrlEnv(engineId)];
+}
+/** The TensorRT-LLM engine: the first managed engine, and the one the legacy pointer and variable mean. */
+export const TENSORRT_LLM_ENGINE_ID = 'tensorrt-llm';
+/** conf main, the published TensorRT-LLM descriptor (controller ruling for task 2.3). */
+export const DEFAULT_TENSORRT_LLM_DESCRIPTOR_URL = 'https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/tensorrt-llm.json';
+/** conf main's published descriptor of one engine: `runtimes/<engine_id>.json`. */
+export function defaultDescriptorUrl(engineId) {
+    return `https://raw.githubusercontent.com/AtomicBot-ai/atomic-chat-conf/main/runtimes/${engineId}.json`;
+}
+export const TENSORRT_LLM_DESCRIPTOR_SOURCE = {
+    engine_id: TENSORRT_LLM_ENGINE_ID,
+    label: 'TensorRT-LLM',
+    url: DEFAULT_TENSORRT_LLM_DESCRIPTOR_URL,
+};
+/** A transport over a `fetch`-compatible function with an abort-on-timeout, matching the manifest's. */
+export function descriptorFetchFromFetch(fetchImpl) {
+    return documentFetchFromFetch(fetchImpl, 'Runtime descriptor');
+}
+const noSource = (engineId) => new AtomicCoreError('MANAGED_METADATA_INVALID', `This core has no runtime descriptor source for ${engineId}.`);
+const noDescriptorAvailable = (label) => new AtomicCoreError('MANAGED_METADATA_INVALID', `No ${label} runtime descriptor is available: the network is unreachable or it is not published yet, and nothing has been cached.`);
+const noCachedDescriptor = (label) => new AtomicCoreError('MANAGED_METADATA_INVALID', `No ${label} runtime descriptor has been cached yet.`);
+const updateRequired = (label, descriptorId) => new AtomicCoreError('MANAGED_METADATA_INVALID', `This ${label} engine release requires a newer version of Atomic Chat; update required.`, descriptorId);
+const missingPinnedDescriptor = (descriptorId) => new AtomicCoreError('MANAGED_METADATA_INVALID', 'The runtime descriptor this installation was set up with is no longer cached.', descriptorId);
+/** `minimum_core_version` no higher than this build's own version (design D7, numeric semver compare). */
+export function descriptorMeetsCoreVersion(descriptor, coreVersion) {
+    return meetsCoreVersion(descriptor.minimum_core_version, coreVersion);
+}
+/** Build the provider. Construction does no I/O; every network or disk access happens per call. */
+export function createRuntimeDescriptorProvider(options) {
+    const paths = managedSharedPaths(options.root);
+    const engines = options.engines ?? [TENSORRT_LLM_DESCRIPTOR_SOURCE];
+    const shared = {
+        env: options.env,
+        fetch: options.fetch,
+        readFile: options.readFile,
+        ...(options.fs === undefined ? {} : { fs: options.fs }),
+        ...(options.coreVersion === undefined ? {} : { coreVersion: options.coreVersion }),
+        ...(options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs }),
+        ...(options.onWarn === undefined ? {} : { onWarn: options.onWarn }),
+    };
+    const documentsOf = (source) => createCachedDocuments({
+        label: `${source.label} runtime descriptor`,
+        urlEnv: runtimeDescriptorUrlEnvs(source.engine_id),
+        parse: (input) => {
+            const descriptor = parseRuntimeDescriptor(input);
+            if (descriptor.engine_id !== source.engine_id) {
+                throw new Error(`descriptor ${descriptor.descriptor_id} is for ${descriptor.engine_id}, not ${source.engine_id}`);
+            }
+            return descriptor;
+        },
+        idField: 'descriptor_id',
+        id: (descriptor) => descriptor.descriptor_id,
+        minimumCoreVersion: (descriptor) => descriptor.minimum_core_version,
+        cacheDir: paths.descriptorsDir,
+        cacheFile: paths.descriptorFile,
+        latestFile: paths.descriptorLatestFileFor(source.engine_id),
+        ...(source.engine_id === TENSORRT_LLM_ENGINE_ID
+            ? { legacyLatestFiles: [paths.descriptorLatestFile] }
+            : {}),
+    }, { ...shared, url: source.url });
+    const byEngine = new Map(engines.map((source) => [source.engine_id, { source, documents: documentsOf(source) }]));
+    // Any engine's parse accepts any descriptor for the cache-by-id read: a pinned installation names
+    // its own descriptor, and `forInstallation` never needs to know which engine that is.
+    const anyDocuments = createCachedDocuments({
+        label: 'Runtime descriptor',
+        urlEnv: [],
+        parse: parseRuntimeDescriptor,
+        idField: 'descriptor_id',
+        id: (descriptor) => descriptor.descriptor_id,
+        minimumCoreVersion: (descriptor) => descriptor.minimum_core_version,
+        cacheDir: paths.descriptorsDir,
+        cacheFile: paths.descriptorFile,
+        latestFile: paths.descriptorLatestFile,
+    }, { ...shared, url: '' });
+    return {
+        engines,
+        async forNewSetup(engineId) {
+            const entry = byEngine.get(engineId);
+            if (entry === undefined)
+                return { kind: 'unsupported', error: noSource(engineId) };
+            const latest = await entry.documents.latest();
+            switch (latest.kind) {
+                case 'fresh':
+                    return { kind: 'available', descriptor: latest.document, source: 'remote' };
+                case 'cached':
+                    return { kind: 'available', descriptor: latest.document, source: 'cache' };
+                case 'too-new':
+                    return { kind: 'unsupported', error: updateRequired(entry.source.label, latest.id) };
+                case 'none':
+                    return { kind: 'unsupported', error: noDescriptorAvailable(entry.source.label) };
+            }
+        },
+        async forInstallation(descriptorId) {
+            const cached = await anyDocuments.cached(descriptorId);
+            if (cached !== null)
+                return { kind: 'available', descriptor: cached };
+            return { kind: 'unsupported', error: missingPinnedDescriptor(descriptorId) };
+        },
+        async cachedForNewSetup(engineId) {
+            const entry = byEngine.get(engineId);
+            if (entry === undefined)
+                return { kind: 'unsupported', error: noSource(engineId) };
+            const previous = await entry.documents.latestCached();
+            if (previous !== null)
+                return { kind: 'available', descriptor: previous };
+            return { kind: 'unsupported', error: noCachedDescriptor(entry.source.label) };
+        },
+    };
+}
+//# sourceMappingURL=descriptor-provider.js.map

package/dist/runtime/environment/descriptor-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor-provider.js","sourceRoot":"","sources":["../../../src/runtime/environment/descriptor-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,GAIjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAExD,gGAAgG;AAChG,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAA;AAEzE,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO,GAAG,0BAA0B,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAA;AACrF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,OAAO,QAAQ,KAAK,sBAAsB;QACxC,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC;QACjE,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAA;AAEpD,yFAAyF;AACzF,MAAM,CAAC,MAAM,mCAAmC,GAC9C,iGAAiG,CAAA;AAEnG,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,OAAO,iFAAiF,QAAQ,OAAO,CAAA;AACzG,CAAC;AAUD,MAAM,CAAC,MAAM,8BAA8B,GAAqB;IAC9D,SAAS,EAAE,sBAAsB;IACjC,KAAK,EAAE,cAAc;IACrB,GAAG,EAAE,mCAAmC;CACzC,CAAA;AAKD,wGAAwG;AACxG,MAAM,UAAU,wBAAwB,CAAC,SAAuB;IAC9D,OAAO,sBAAsB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;AAChE,CAAC;AA4DD,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAmB,EAAE,CACrD,IAAI,eAAe,CACjB,0BAA0B,EAC1B,kDAAkD,QAAQ,GAAG,CAC9D,CAAA;AAEH,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAmB,EAAE,CAC/D,IAAI,eAAe,CACjB,0BAA0B,EAC1B,MAAM,KAAK,uHAAuH,CACnI,CAAA;AAEH,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAmB,EAAE,CAC5D,IAAI,eAAe,CAAC,0BAA0B,EAAE,MAAM,KAAK,0CAA0C,CAAC,CAAA;AAExG,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,YAAoB,EAAmB,EAAE,CAC9E,IAAI,eAAe,CACjB,0BAA0B,EAC1B,QAAQ,KAAK,2EAA2E,EACxF,YAAY,CACb,CAAA;AAEH,MAAM,uBAAuB,GAAG,CAAC,YAAoB,EAAmB,EAAE,CACxE,IAAI,eAAe,CACjB,0BAA0B,EAC1B,+EAA+E,EAC/E,YAAY,CACb,CAAA;AAEH,0GAA0G;AAC1G,MAAM,UAAU,0BAA0B,CAAC,UAA6B,EAAE,WAAmB;IAC3F,OAAO,gBAAgB,CAAC,UAAU,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAA;AACvE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,+BAA+B,CAC7C,OAAkC;IAElC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAEnE,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAA;IACD,MAAM,WAAW,GAAG,CAAC,MAAwB,EAAsC,EAAE,CACnF,qBAAqB,CACnB;QACE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,qBAAqB;QAC3C,MAAM,EAAE,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC;QAClD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;YAChD,IAAI,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,CAAC,aAAa,WAAW,UAAU,CAAC,SAAS,SAAS,MAAM,CAAC,SAAS,EAAE,CACjG,CAAA;YACH,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,OAAO,EAAE,eAAe;QACxB,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa;QAC5C,kBAAkB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB;QACnE,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,SAAS,EAAE,KAAK,CAAC,cAAc;QAC/B,UAAU,EAAE,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,sBAAsB;YAC7C,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,EACD,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAC/B,CAAA;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAU,CAAC,CACjG,CAAA;IACD,kGAAkG;IAClG,sFAAsF;IACtF,MAAM,YAAY,GAAG,qBAAqB,CACxC;QACE,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,eAAe;QACxB,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa;QAC5C,kBAAkB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB;QACnE,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,SAAS,EAAE,KAAK,CAAC,cAAc;QAC/B,UAAU,EAAE,KAAK,CAAC,oBAAoB;KACvC,EACD,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CACvB,CAAA;IAED,OAAO;QACL,OAAO;QAEP,KAAK,CAAC,WAAW,CAAC,QAAgB;YAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACpC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;YAClF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAA;YAC7C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,OAAO;oBACV,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;gBAC7E,KAAK,QAAQ;oBACX,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;gBAC5E,KAAK,SAAS;oBACZ,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;gBACtF,KAAK,MAAM;oBACT,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;YACpF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,YAAoB;YACxC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YACtD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;YACrE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAA;QAC9E,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB;YACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACpC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;YAClF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,CAAA;YACrD,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;YACzE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QAC/E,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/environment/descriptor.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Reading a runtime descriptor: the metadata that says which container image an engine runs, what
+ * the host needs first, and what that release can load. Shape follows
+ * `atomic-chat-conf/runtimes/schema.json`, the source of truth for what a published descriptor
+ * contains; this parser is the core's own trust boundary for it (conf CI enforces the schema, this
+ * enforces it again on the wire, since a descriptor arrives over HTTPS and is never trusted blind).
+ *
+ * Two rules shape this file, both from the schema's own description. A descriptor carries data and
+ * only data — no command, no argv, no script — because the argv belongs to the compiled adapter
+ * inside this binary; the descriptor may only name an adapter id. (Which distributions core may
+ * install a container runtime on is the environment manifest's, `environment-manifest.ts`.) And every image is pinned by digest: a descriptor that names a tag is
+ * refused, because a tag can be repointed by whoever owns the registry and a qualification result
+ * is about exact bytes.
+ *
+ * Scope for this task (openspec change `add-tensorrt-llm-linux`, task 2.1): only the pure shape
+ * validator that proves the parser accepts the real `runtimes/tensorrt-llm.json` fixture. It does
+ * not yet check a descriptor's `adapter_id` against a compiled adapter registry (design D9's
+ * `ManagedTextAdapter` registry does not exist until task 2.12) — that check, HTTPS fetching,
+ * on-disk caching and `descriptor_id` pinning are task 2.2's `src/runtime/environment/*`.
+ */
+import type { RuntimeDescriptor, RuntimeDescriptorSummary } from '../../contracts/index.js';
+/**
+ * Validate one descriptor's shape against `atomic-chat-conf/runtimes/schema.json`. Throws
+ * `AtomicCoreError('MANAGED_METADATA_INVALID', ...)` naming the first field that does not fit.
+ *
+ * Does not check `adapter_id` against a compiled adapter registry. A descriptor carrying `recipes`
+ * is refused as an unknown field: install recipes are the environment manifest's.
+ */
+export declare function parseRuntimeDescriptor(input: unknown): RuntimeDescriptor;
+/**
+ * The client-facing part of a descriptor (task 2.22): its id and engine, the notices exactly as
+ * published, the curated checkpoints and the supported architectures. Fresh copies, so nothing that
+ * holds the summary can reach into the descriptor it came from.
+ */
+export declare function summarizeRuntimeDescriptor(descriptor: RuntimeDescriptor): RuntimeDescriptorSummary;

package/dist/runtime/environment/descriptor.js

@@ -0,0 +1,239 @@
+/**
+ * Reading a runtime descriptor: the metadata that says which container image an engine runs, what
+ * the host needs first, and what that release can load. Shape follows
+ * `atomic-chat-conf/runtimes/schema.json`, the source of truth for what a published descriptor
+ * contains; this parser is the core's own trust boundary for it (conf CI enforces the schema, this
+ * enforces it again on the wire, since a descriptor arrives over HTTPS and is never trusted blind).
+ *
+ * Two rules shape this file, both from the schema's own description. A descriptor carries data and
+ * only data — no command, no argv, no script — because the argv belongs to the compiled adapter
+ * inside this binary; the descriptor may only name an adapter id. (Which distributions core may
+ * install a container runtime on is the environment manifest's, `environment-manifest.ts`.) And every image is pinned by digest: a descriptor that names a tag is
+ * refused, because a tag can be repointed by whoever owns the registry and a qualification result
+ * is about exact bytes.
+ *
+ * Scope for this task (openspec change `add-tensorrt-llm-linux`, task 2.1): only the pure shape
+ * validator that proves the parser accepts the real `runtimes/tensorrt-llm.json` fixture. It does
+ * not yet check a descriptor's `adapter_id` against a compiled adapter registry (design D9's
+ * `ManagedTextAdapter` registry does not exist until task 2.12) — that check, HTTPS fetching,
+ * on-disk caching and `descriptor_id` pinning are task 2.2's `src/runtime/environment/*`.
+ */
+import { DOCUMENT_ID, DOCUMENT_ID_LABEL, DOCUMENT_SEMVER, documentFields } from './document-fields.js';
+const DIGEST = /^sha256:[0-9a-f]{64}$/;
+/** NVML's `major.minor`, e.g. `8.9` or `12.0`. */
+const CAPABILITY = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/;
+/** NVIDIA display driver version: 2 or 3 dot-separated components, e.g. `590.44.01`. */
+const DRIVER_VERSION = /^[0-9]+\.[0-9]+(\.[0-9]+)?$/;
+/** HF `config.json` `architectures` entries and `model_families` keys, e.g. `LlamaForCausalLM` or
+ *  `Qwen3_5ForConditionalGeneration` (Qwen3.5 and later spell the version with an underscore). */
+const ARCHITECTURE_NAME = /^[A-Z][A-Za-z0-9_]*$/;
+/** A bare parser name: no flags, no paths, no leading dash — the adapter passes it as one argv value. */
+const PARSER_NAME = /^[a-z0-9][a-z0-9_.-]*$/;
+// The patterns below are copied character-for-character from
+// `atomic-chat-conf/runtimes/schema.json`'s `definitions`, so this parser's trust boundary is at
+// least as strict as what conf CI already enforced on the published document. Do not relax one of
+// these without updating the schema first — the descriptor is untrusted network input, and a field
+// like a repository ends up in `docker` argv (task 2.8), so a pattern miss here is not cosmetic.
+// `id` and `semver` are shared with the environment manifest (`document-fields.ts`).
+/** `#/definitions/imageRepository`: no `@digest`, no `:tag` after the last path segment. */
+const IMAGE_REPOSITORY = /^[a-z0-9.-]+(:[0-9]+)?(\/[a-z0-9._-]+)+$/;
+/** `curatedModel.repository`: a Hugging Face `owner/name`. */
+const CURATED_REPOSITORY = /^[A-Za-z0-9][A-Za-z0-9._-]*\/[A-Za-z0-9][A-Za-z0-9._-]*$/;
+/** `curatedModel.revision`: an immutable 40-character Hugging Face commit sha. */
+const REVISION = /^[0-9a-f]{40}$/;
+/** `quantizationEntry.format`: lowercase with underscores, e.g. `fp8_block_scales`. */
+const QUANTIZATION_FORMAT = /^[a-z0-9_]+$/;
+// A newer catalog announces itself with `schema_version`, never with a field this build would
+// ignore: silently dropping a field could mean ignoring an exclusion that matters. That is also why
+// a descriptor still carrying `recipes` (the `r1` shape) is refused outright, not read around: the
+// distribution list moved to the environment manifest (change `extract-environment-manifest`, D6).
+const { fail, object, known, text, boolean, pattern, list, strings, unique, bytes } = documentFields('runtime descriptor');
+const digest = (value, at) => pattern(DIGEST, 'a sha256 digest')(value, at);
+const capability = pattern(CAPABILITY, 'a major.minor compute capability');
+const driverVersion = pattern(DRIVER_VERSION, 'a driver version');
+const architectureName = pattern(ARCHITECTURE_NAME, 'an architecture class name');
+const id = pattern(DOCUMENT_ID, DOCUMENT_ID_LABEL);
+const semver = pattern(DOCUMENT_SEMVER, 'a semver version (major.minor.patch)');
+const imageRepository = pattern(IMAGE_REPOSITORY, 'a bare image repository');
+const curatedRepository = pattern(CURATED_REPOSITORY, 'a Hugging Face owner/name repository');
+const revision = pattern(REVISION, 'a 40-character hex commit sha');
+const quantizationFormat = pattern(QUANTIZATION_FORMAT, 'a lowercase quantization format');
+const parserName = (value, at) => {
+    if (value === null)
+        return null;
+    return pattern(PARSER_NAME, 'a bare parser name')(value, at);
+};
+const PLATFORM_IMAGE_KEYS = ['repository', 'digest'];
+const PLATFORMS = ['linux/amd64', 'linux/arm64'];
+/**
+ * `imageRepository` (schema): a bare repository — no `:tag`, no `@digest`, lowercase, one or more
+ * `/`-separated path segments, an optional `:port` right after the host. The digest field pins the
+ * bytes; the pattern alone is what stops a value like `-v /:/host` from reaching `docker` argv
+ * (task 2.8) disguised as a repository — the old ad hoc "does it contain `@`/`:`" check missed it.
+ */
+const platformImage = (value, at) => {
+    const entry = object(value, at);
+    known(entry, at, PLATFORM_IMAGE_KEYS);
+    return {
+        repository: imageRepository(entry['repository'], `${at}.repository`),
+        digest: digest(entry['digest'], `${at}.digest`),
+    };
+};
+/** Required for every platform this release supports: `linux/amd64` and `linux/arm64`, no more. */
+const platformImageMap = (value, at) => {
+    const map = object(value, at);
+    known(map, at, PLATFORMS);
+    for (const platform of PLATFORMS) {
+        if (!(platform in map))
+            fail(`${at} is missing ${platform}`);
+    }
+    return {
+        'linux/amd64': platformImage(map['linux/amd64'], `${at}["linux/amd64"]`),
+        'linux/arm64': platformImage(map['linux/arm64'], `${at}["linux/arm64"]`),
+    };
+};
+/**
+ * A compute-capability string as an `[major, minor]` tuple, comparable with `<`/`>` the way the
+ * schema's own driver-version comparison is defined: componentwise, not lexicographically (`"9.0"`
+ * must sort below `"12.0"`).
+ */
+const capabilityTuple = (value) => {
+    const [major = '0', minor = '0'] = value.split('.');
+    return [Number(major), Number(minor)];
+};
+const capabilityBelowOrEqual = (a, b) => a[0] < b[0] || (a[0] === b[0] && a[1] <= b[1]);
+const QUANTIZATION_KEYS = ['format', 'min_compute_capability', 'excluded_compute_capabilities'];
+const quantizationEntry = (value, at) => {
+    const entry = object(value, at);
+    known(entry, at, QUANTIZATION_KEYS);
+    const format = quantizationFormat(entry['format'], `${at}.format`);
+    const minCapability = capability(entry['min_compute_capability'], `${at}.min_compute_capability`);
+    const excluded = strings(entry['excluded_compute_capabilities'], `${at}.excluded_compute_capabilities`).map((value, i) => capability(value, `${at}.excluded_compute_capabilities[${i}]`));
+    unique(excluded, `${at}.excluded_compute_capabilities`, 'a compute capability');
+    const min = capabilityTuple(minCapability);
+    for (const excludedValue of excluded) {
+        // design D17 / conf task 1.4: an excluded capability that is not above the format's own
+        // minimum is not a gap in the support matrix, it is a contradiction — the format would need to
+        // be unsupported at its own floor.
+        if (capabilityBelowOrEqual(capabilityTuple(excludedValue), min)) {
+            fail(`${at}.excluded_compute_capabilities has an entry not above min_compute_capability`, `${excludedValue} <= ${minCapability}`);
+        }
+    }
+    return { format, min_compute_capability: minCapability, excluded_compute_capabilities: excluded };
+};
+const MODEL_FAMILY_KEYS = ['tool_parser', 'reasoning_parser', 'structured_output'];
+const modelFamilyEntry = (value, at) => {
+    const entry = object(value, at);
+    known(entry, at, MODEL_FAMILY_KEYS);
+    return {
+        tool_parser: parserName(entry['tool_parser'], `${at}.tool_parser`),
+        reasoning_parser: parserName(entry['reasoning_parser'], `${at}.reasoning_parser`),
+        structured_output: boolean(entry['structured_output'], `${at}.structured_output`),
+    };
+};
+const modelFamilies = (value, at) => {
+    const map = object(value, at);
+    const result = {};
+    for (const [key, entry] of Object.entries(map)) {
+        architectureName(key, `${at} key "${key}"`);
+        result[key] = modelFamilyEntry(entry, `${at}["${key}"]`);
+    }
+    return result;
+};
+const CURATED_MODEL_KEYS = ['repository', 'revision', 'inventory_digest', 'vram_tier_bytes', 'note'];
+const curatedModel = (value, at) => {
+    const entry = object(value, at);
+    known(entry, at, CURATED_MODEL_KEYS);
+    return {
+        repository: curatedRepository(entry['repository'], `${at}.repository`),
+        revision: revision(entry['revision'], `${at}.revision`),
+        inventory_digest: digest(entry['inventory_digest'], `${at}.inventory_digest`),
+        // Schema minimum is 1: a curated entry with 0 would claim every card, however small, fits it.
+        vram_tier_bytes: bytes(entry['vram_tier_bytes'], `${at}.vram_tier_bytes`, 1),
+        note: text(entry['note'], `${at}.note`),
+    };
+};
+const DESCRIPTOR_KEYS = [
+    'schema_version',
+    'descriptor_id',
+    'engine_id',
+    'adapter_id',
+    'adapter_contract_version',
+    'image',
+    'probe_image',
+    'minimum_core_version',
+    'minimum_app_version',
+    'minimum_driver_version',
+    'minimum_compute_capability',
+    'supported_architectures',
+    'quantization',
+    'model_families',
+    'curated_models',
+    'download_bytes',
+    'required_disk_bytes',
+    'notices',
+    'exclusions',
+];
+/**
+ * Validate one descriptor's shape against `atomic-chat-conf/runtimes/schema.json`. Throws
+ * `AtomicCoreError('MANAGED_METADATA_INVALID', ...)` naming the first field that does not fit.
+ *
+ * Does not check `adapter_id` against a compiled adapter registry. A descriptor carrying `recipes`
+ * is refused as an unknown field: install recipes are the environment manifest's.
+ */
+export function parseRuntimeDescriptor(input) {
+    const raw = object(input, 'the descriptor');
+    known(raw, 'the descriptor', DESCRIPTOR_KEYS);
+    if (raw['schema_version'] !== 1) {
+        fail('schema_version is not 1', JSON.stringify(raw['schema_version']));
+    }
+    if (raw['adapter_contract_version'] !== 1) {
+        fail('adapter_contract_version is not 1', JSON.stringify(raw['adapter_contract_version']));
+    }
+    const architectures = strings(raw['supported_architectures'], 'supported_architectures').map((value, i) => architectureName(value, `supported_architectures[${i}]`));
+    if (architectures.length === 0)
+        fail('supported_architectures is empty');
+    unique(architectures, 'supported_architectures', 'an architecture');
+    const quantization = list(raw['quantization'], 'quantization').map((item, i) => quantizationEntry(item, `quantization[${i}]`));
+    if (quantization.length === 0)
+        fail('quantization is empty');
+    unique(quantization.map((q) => q.format), 'quantization', 'a format');
+    const curated = list(raw['curated_models'], 'curated_models').map((item, i) => curatedModel(item, `curated_models[${i}]`));
+    unique(curated.map((m) => `${m.repository}@${m.revision}`), 'curated_models', 'a model revision');
+    return {
+        schema_version: 1,
+        descriptor_id: id(raw['descriptor_id'], 'descriptor_id'),
+        engine_id: id(raw['engine_id'], 'engine_id'),
+        adapter_id: id(raw['adapter_id'], 'adapter_id'),
+        adapter_contract_version: 1,
+        image: platformImageMap(raw['image'], 'image'),
+        probe_image: platformImageMap(raw['probe_image'], 'probe_image'),
+        minimum_core_version: semver(raw['minimum_core_version'], 'minimum_core_version'),
+        minimum_app_version: semver(raw['minimum_app_version'], 'minimum_app_version'),
+        minimum_driver_version: driverVersion(raw['minimum_driver_version'], 'minimum_driver_version'),
+        minimum_compute_capability: capability(raw['minimum_compute_capability'], 'minimum_compute_capability'),
+        supported_architectures: architectures,
+        quantization,
+        model_families: modelFamilies(raw['model_families'], 'model_families'),
+        curated_models: curated,
+        download_bytes: bytes(raw['download_bytes'], 'download_bytes'),
+        required_disk_bytes: bytes(raw['required_disk_bytes'], 'required_disk_bytes'),
+        notices: strings(raw['notices'], 'notices'),
+        exclusions: strings(raw['exclusions'], 'exclusions'),
+    };
+}
+/**
+ * The client-facing part of a descriptor (task 2.22): its id and engine, the notices exactly as
+ * published, the curated checkpoints and the supported architectures. Fresh copies, so nothing that
+ * holds the summary can reach into the descriptor it came from.
+ */
+export function summarizeRuntimeDescriptor(descriptor) {
+    return {
+        descriptor_id: descriptor.descriptor_id,
+        engine_id: descriptor.engine_id,
+        notices: [...descriptor.notices],
+        curated_models: descriptor.curated_models.map((model) => ({ ...model })),
+        supported_architectures: [...descriptor.supported_architectures],
+    };
+}
+//# sourceMappingURL=descriptor.js.map

package/dist/runtime/environment/descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.js","sourceRoot":"","sources":["../../../src/runtime/environment/descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAEtG,MAAM,MAAM,GAAG,uBAAuB,CAAA;AACtC,kDAAkD;AAClD,MAAM,UAAU,GAAG,oCAAoC,CAAA;AACvD,wFAAwF;AACxF,MAAM,cAAc,GAAG,6BAA6B,CAAA;AACpD;kGACkG;AAClG,MAAM,iBAAiB,GAAG,sBAAsB,CAAA;AAChD,yGAAyG;AACzG,MAAM,WAAW,GAAG,wBAAwB,CAAA;AAE5C,6DAA6D;AAC7D,iGAAiG;AACjG,kGAAkG;AAClG,mGAAmG;AACnG,iGAAiG;AACjG,qFAAqF;AAErF,4FAA4F;AAC5F,MAAM,gBAAgB,GAAG,0CAA0C,CAAA;AACnE,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG,0DAA0D,CAAA;AACrF,kFAAkF;AAClF,MAAM,QAAQ,GAAG,gBAAgB,CAAA;AACjC,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAE1C,8FAA8F;AAC9F,oGAAoG;AACpG,mGAAmG;AACnG,mGAAmG;AACnG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GACjF,cAAc,CAAC,oBAAoB,CAAC,CAAA;AAEtC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAU,EAAgB,EAAE,CAC1D,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAiB,CAAA;AAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAA;AAC1E,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;AACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAA;AACjF,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;AAClD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAA;AAC/E,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAA;AAC5E,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAA;AAC7F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAA;AACnE,MAAM,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAA;AAE1F,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,EAAU,EAAiB,EAAE;IAC/D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC9D,CAAC,CAAA;AAED,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAU,CAAA;AAC7D,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,aAAa,CAAU,CAAA;AAEzD;;;;;GAKG;AACH,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAU,EAAiB,EAAE;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/B,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAA;IACrC,OAAO;QACL,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC;QACpE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC;KAChD,CAAA;AACH,CAAC,CAAA;AAED,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,EAAU,EAAoB,EAAE;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC7B,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;IACzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,eAAe,QAAQ,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO;QACL,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC;QACxE,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC;KACzE,CAAA;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,KAAa,EAAoB,EAAE;IAC1D,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AACvC,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAC,CAAmB,EAAE,CAAmB,EAAW,EAAE,CACnF,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEhD,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,wBAAwB,EAAE,+BAA+B,CAAU,CAAA;AAExG,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAE,EAAU,EAAuB,EAAE;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/B,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAClE,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAA;IACjG,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAC,GAAG,CACzG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,kCAAkC,CAAC,GAAG,CAAC,CAC7E,CAAA;IACD,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,gCAAgC,EAAE,sBAAsB,CAAC,CAAA;IAC/E,MAAM,GAAG,GAAG,eAAe,CAAC,aAAa,CAAC,CAAA;IAC1C,KAAK,MAAM,aAAa,IAAI,QAAQ,EAAE,CAAC;QACrC,wFAAwF;QACxF,+FAA+F;QAC/F,mCAAmC;QACnC,IAAI,sBAAsB,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAChE,IAAI,CACF,GAAG,EAAE,8EAA8E,EACnF,GAAG,aAAa,OAAO,aAAa,EAAE,CACvC,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAA;AACnG,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,kBAAkB,EAAE,mBAAmB,CAAU,CAAA;AAE3F,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,EAAU,EAAsB,EAAE;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/B,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAA;IACnC,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC;QAClE,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC;QACjF,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,oBAAoB,CAAC;KAClF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAU,EAAsC,EAAE;IACvF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAuC,EAAE,CAAA;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,GAAG,GAAG,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,CAAU,CAAA;AAE7G,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAU,EAAgB,EAAE;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/B,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAA;IACpC,OAAO;QACL,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC;QACtE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC;QACvD,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC;QAC7E,8FAA8F;QAC9F,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5E,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC;KACxC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,eAAe,GAAG;IACtB,gBAAgB;IAChB,eAAe;IACf,WAAW;IACX,YAAY;IACZ,0BAA0B;IAC1B,OAAO;IACP,aAAa;IACb,sBAAsB;IACtB,qBAAqB;IACrB,wBAAwB;IACxB,4BAA4B;IAC5B,yBAAyB;IACzB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,SAAS;IACT,YAAY;CACJ,CAAA;AAEV;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;IAC3C,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAA;IAE7C,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,GAAG,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CACxG,gBAAgB,CAAC,KAAK,EAAE,2BAA2B,CAAC,GAAG,CAAC,CACzD,CAAA;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACxE,MAAM,CAAC,aAAa,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAA;IAEnE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC7E,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAC9C,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAA;IAC5D,MAAM,CACJ,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EACjC,cAAc,EACd,UAAU,CACX,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC5E,YAAY,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAC3C,CAAA;IACD,MAAM,CACJ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,EACnD,gBAAgB,EAChB,kBAAkB,CACnB,CAAA;IAED,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;QACxD,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAC5C,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;QAC/C,wBAAwB,EAAE,CAAC;QAC3B,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAC9C,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;QAChE,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QACjF,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;QAC9E,sBAAsB,EAAE,aAAa,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;QAC9F,0BAA0B,EAAE,UAAU,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,4BAA4B,CAAC;QACvG,uBAAuB,EAAE,aAAa;QACtC,YAAY;QACZ,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;QACtE,cAAc,EAAE,OAAO;QACvB,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;QAC9D,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;QAC7E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;QAC3C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;KACrD,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA6B;IACtE,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC;QAChC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACxE,uBAAuB,EAAE,CAAC,GAAG,UAAU,CAAC,uBAAuB,CAAC;KACjE,CAAA;AACH,CAAC"}