@bjoernrochel/sevro 1.0.0 → 1.1.0

package/dist/src/runtime/hook-processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-processes.js","sourceRoot":"","sources":["hook-processes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,8BAA2B;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,yBAAyB;AAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACpD,OAAO,EAAE,QAAQ,EAAE,2BAAwB;AAE3C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB;IAEhB,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC1C,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAC7C,CAAC;YACF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,CAAC,MAAM,CAAC;IACnB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI;QACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CACnB,SAAkC,EAClC,QAAgB;IAEhB,OAAO,CACL,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC;QAC7B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;QACrC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC;QAChD,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,KAAK;SAChB,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,EACpB,QAAQ,GAAa,EAAE,CAAC;IAC1B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK;aAChB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;aACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACtB,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,KAAK,MAAM,SAAS,IAAI,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC;YAAE,SAAS;QACjD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,SAAS;YACT,IAAI;YACJ,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;YACrB,IAAI;YACJ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAS;QACnD,MAAM,QAAQ,GAAG,eAAe,CAC9B,MAAM,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,EACtD,SAAS,CAAC,GAAG,CACd,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from \"../runtime-process\";\nimport { readFile, readdir, writeFile } from \"node:fs/promises\";\nimport { basename, dirname, join } from \"node:path\";\nimport { isRecord } from \"../value-guards\";\n\nexport async function hookExecutions(\n  receipts: string,\n): Promise<Record<string, unknown>[]> {\n  return Promise.all(\n    (await readdir(receipts))\n      .filter((name) => name.startsWith(\"call.\"))\n      .map(async (name) => {\n        try {\n          const value: unknown = JSON.parse(\n            await readFile(join(receipts, name), \"utf8\"),\n          );\n          return isRecord(value) ? value : { status: \"unknown\" };\n        } catch {\n          return { status: \"unknown\" };\n        }\n      }),\n  );\n}\n\nasync function processOutput(argv: string[]): Promise<string> {\n  const child = spawn(argv, { stdout: \"pipe\", stderr: \"ignore\" });\n  const output = await new Response(child.stdout).text();\n  await child.exited;\n  if (Buffer.byteLength(output) > 1024 * 1024)\n    throw new Error(\"hook process ownership exceeds size limit\");\n  return output;\n}\n\nfunction ownedWrapper(\n  execution: Record<string, unknown>,\n  receipts: string,\n): execution is Record<string, unknown> & { pid: number; wrapper: string } {\n  return (\n    validProcessId(execution.pid) &&\n    typeof execution.wrapper === \"string\" &&\n    dirname(execution.wrapper) === dirname(receipts) &&\n    /^hook-[0-9]+\\.sh$/.test(basename(execution.wrapper))\n  );\n}\n\nfunction validProcessId(pid: unknown): pid is number {\n  return typeof pid === \"number\" && Number.isSafeInteger(pid) && pid > 1;\n}\n\nfunction processChildren(table: string, root: number): number[] {\n  const pairs = table\n    .trim()\n    .split(\"\\n\")\n    .map((line) => line.trim().split(/\\s+/).map(Number));\n  const pending = [root],\n    children: number[] = [];\n  while (pending.length) {\n    const parent = pending.pop();\n    const found = pairs\n      .filter((pair) => pair[1] === parent)\n      .map((pair) => pair[0])\n      .filter((pid): pid is number => pid !== undefined);\n    pending.push(...found);\n    children.push(...found);\n  }\n  return children;\n}\n\nfunction stopProcess(pid: number): void {\n  try {\n    process.kill(pid, \"SIGKILL\");\n  } catch {\n    /* The owned process may already have exited. */\n  }\n}\n\n/** Stop only processes still bound to a runner-owned private hook wrapper. */\nexport async function releaseHookProcesses(receipts: string): Promise<void> {\n  await writeFile(join(receipts, \"stopped\"), \"stopped\\n\", { mode: 0o600 });\n  for (const execution of await hookExecutions(receipts)) {\n    if (!ownedWrapper(execution, receipts)) continue;\n    const command = await processOutput([\n      \"/bin/ps\",\n      \"-p\",\n      String(execution.pid),\n      \"-o\",\n      \"command=\",\n    ]);\n    if (!command.includes(execution.wrapper)) continue;\n    const children = processChildren(\n      await processOutput([\"/bin/ps\", \"-axo\", \"pid=,ppid=\"]),\n      execution.pid,\n    );\n    children.reverse().forEach(stopProcess);\n    await new Promise((resolve) => setTimeout(resolve, 50));\n    stopProcess(execution.pid);\n  }\n}\n"]}

package/dist/src/runtime/hooks.js

@@ -0,0 +1,304 @@
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { existsSync } from "node:fs";
+import { cp, mkdir, readFile, readdir, realpath, writeFile, } from "node:fs/promises";
+import { join } from "node:path";
+import { shellQuote as quote } from "../shell.js";
+import { insideRuntimeRoot, requireRuntimeReadRoots } from "./paths.js";
+import { runtimeSeedDigest } from "./seeds.js";
+import { prepareRuntimeState } from "./state.js";
+import { sharedCacheDenyRoots, sharedCacheRoots } from "./shared-cache.js";
+import { macSandboxProfile } from "../hosts/mac-sandbox.js";
+import { prepareLinuxSandboxCommand } from "../hosts/linux-sandbox.js";
+import { isRecord, isUnknownArray } from "../value-guards.js";
+import { hookExecutions, releaseHookProcesses } from "./hook-processes.js";
+import { nativeStateParent, requireNativeHookRoots, } from "../native-transcript-state.js";
+export function runtimeHooksEnabled(policy) {
+    const hooks = policy?.hooks;
+    if (!hooks)
+        return false;
+    const plugins = hooks.plugins ?? [];
+    return hooks.nativeGoal === true || plugins.length > 0;
+}
+function object(value) {
+    if (!isRecord(value))
+        throw new Error("invalid runtime hook declaration");
+    return value;
+}
+/** Materialize immutable mounts; only declared plugin hooks reach the host. */
+export async function prepareHookMounts(options) {
+    let mountRoot = join(options.stateRoot, "runtime-plugins");
+    const receipts = join(options.privateRoot, "hook-receipts");
+    await Promise.all([mountRoot, receipts].map((path) => mkdir(path, { recursive: true, mode: 0o700 })));
+    mountRoot = await realpath(mountRoot);
+    let runtime;
+    const prepareRuntime = () => (runtime ??= prepareRuntimeState(options.workspace, options.policy, "hooks", join(options.privateRoot, "hook-runtime")));
+    const selected = selectedPlugins(options.policy);
+    const plugins = [], isolation = [], directories = [];
+    for (const [index, source] of options.pluginRoots.entries()) {
+        const root = join(mountRoot, `plugin-${index}`);
+        const sourceDigest = await runtimeSeedDigest(source);
+        await cp(source, root, {
+            recursive: true,
+            dereference: true,
+            force: false,
+            errorOnExist: true,
+        });
+        const manifest = object(JSON.parse(await readFile(join(root, ".claude-plugin/plugin.json"), "utf8")));
+        const name = uniquePluginName(manifest, plugins);
+        const allowed = selected.delete(name);
+        const readRoots = await hookReadRoots(options, root);
+        const rewrite = {
+            root,
+            allowed,
+            privateRoot: options.privateRoot,
+            ordinal: index * 10000,
+            files: new Set(),
+            execution: lazyHookExecution(options, index, root, readRoots, prepareRuntime, isolation),
+        };
+        await rewritePlugin(manifest, rewrite);
+        plugins.push({
+            name,
+            allowed,
+            sourceDigest,
+            effectiveDigest: await runtimeSeedDigest(root),
+        });
+        directories.push(root);
+    }
+    if (selected.size)
+        throw new Error("runtime hook policy selects an unavailable plugin");
+    return { directories, receipts, plugins, isolation };
+}
+function lazyHookExecution(options, index, root, readRoots, prepareRuntime, isolation) {
+    let execution;
+    return () => (execution ??= (async () => {
+        const runtime = await prepareRuntime();
+        const boundary = await prepareHookIsolation(options, index, readRoots, runtime);
+        if (boundary.isolation)
+            isolation.push(boundary.isolation);
+        return {
+            ...boundary,
+            environment: {
+                ...runtime.environment,
+                PATH: hookPath(runtime.environment),
+                CLAUDE_PLUGIN_ROOT: root,
+                PLUGIN_ROOT: root,
+            },
+        };
+    })());
+}
+async function prepareHookIsolation(options, index, roots, runtime) {
+    const cacheRoots = await sharedCacheRoots(options.policy, "hooks", options.protectedRoots);
+    const protectedRoots = [
+        ...options.protectedRoots,
+        ...sharedCacheDenyRoots(options.policy, "hooks"),
+    ];
+    if (process.platform === "linux")
+        return {
+            isolation: await prepareLinuxSandboxCommand({
+                argv: ["/bin/true"],
+                workspace: options.workspace,
+                protectedRoots,
+                privateStateRoot: options.privateRoot,
+                denyNetwork: true,
+                readOnlyRoots: roots.ordinary,
+                hookReadRoots: roots.curated,
+                writableRuntimeRoot: runtime.root,
+                writableCacheRoots: cacheRoots,
+            }),
+        };
+    const profile = join(options.privateRoot, `hooks-${index}.sb`);
+    await writeFile(profile, macSandboxProfile(protectedRoots, true, roots.ordinary, runtime.root, roots.curated, options.workspace, undefined, cacheRoots) + "\n(deny process-info* (require-not (target self)))\n", { mode: 0o600 });
+    return { profile };
+}
+async function hookReadRoots(options, root) {
+    const trusted = insideRuntimeRoot(await nativeStateParent(), root);
+    const ordinary = [
+        ...options.policy.readOnlyRoots,
+        ...(trusted ? [] : [root]),
+    ];
+    const curated = trusted ? [root] : [];
+    requireRuntimeReadRoots(ordinary, options.protectedRoots);
+    await requireNativeHookRoots(curated, options.privateRoot);
+    return { ordinary, curated };
+}
+function hookPath(environment) {
+    return environment.PATH ?? "/usr/bin:/bin:/usr/sbin:/sbin";
+}
+function selectedPlugins(policy) {
+    return new Set(policy.hooks?.plugins ?? []);
+}
+function uniquePluginName(manifest, plugins) {
+    if (typeof manifest.name !== "string")
+        throw new Error("runtime hook plugin has no name");
+    const name = manifest.name;
+    if (plugins.some((plugin) => plugin.name === name))
+        throw new Error("runtime hook plugin names overlap");
+    return name;
+}
+async function rewritePlugin(manifest, state) {
+    requireHookOnlyPlugin(state.root);
+    await rewriteManifest(manifest, state, ".claude-plugin/plugin.json");
+    const native = join(state.root, ".codex-plugin/plugin.json");
+    if (existsSync(native))
+        await rewriteManifest(object(JSON.parse(await readFile(native, "utf8"))), state, ".codex-plugin/plugin.json");
+    const standard = join(state.root, "hooks/hooks.json");
+    if (existsSync(standard))
+        await hookFile(standard, state);
+    await rewriteFrontmatter(state.root, state);
+}
+function requireHookOnlyPlugin(root) {
+    for (const name of [".mcp.json", ".lsp.json"])
+        if (existsSync(join(root, name)))
+            throw new Error("runtime auxiliary plugin execution is unsupported");
+}
+async function rewriteManifest(manifest, state, path) {
+    if (manifest.mods !== undefined)
+        throw new Error("runtime plugin mods are unsupported");
+    delete manifest.mcpServers;
+    delete manifest.lspServers;
+    if (manifest.hooks !== undefined)
+        manifest.hooks = await hookSource(manifest.hooks, state);
+    await writeFile(join(state.root, path), JSON.stringify(manifest));
+}
+async function hookSource(value, state) {
+    if (typeof value === "string") {
+        const path = await realpath(join(state.root, value));
+        if (!insideRuntimeRoot(state.root, path))
+            throw new Error("runtime hook file escapes its plugin");
+        await hookFile(path, state);
+        return value;
+    }
+    if (isUnknownArray(value))
+        return Promise.all(value.map((source) => hookSource(source, state)));
+    const configuration = object(value);
+    if (configuration.hooks !== undefined)
+        return {
+            ...configuration,
+            hooks: await hookMap(configuration.hooks, state),
+        };
+    return hookMap(configuration, state);
+}
+async function hookFile(path, state) {
+    if (state.files.has(path))
+        return;
+    state.files.add(path);
+    const value = object(JSON.parse(await readFile(path, "utf8")));
+    value.hooks = await hookMap(value.hooks, state);
+    await writeFile(path, JSON.stringify(value));
+}
+async function hookMap(value, state) {
+    if (!state.allowed)
+        return {};
+    const entries = [];
+    for (const [event, groups] of Object.entries(object(value))) {
+        if (!isUnknownArray(groups))
+            throw new Error("runtime hook groups must be arrays");
+        entries.push([
+            event,
+            await Promise.all(groups.map(async (group) => {
+                const definition = object(group);
+                if (!isUnknownArray(definition.hooks))
+                    throw new Error("runtime hook handlers must be arrays");
+                return {
+                    ...definition,
+                    hooks: await Promise.all(definition.hooks.map((handler) => commandHook(handler, state))),
+                };
+            })),
+        ]);
+    }
+    return Object.fromEntries(entries);
+}
+async function commandHook(value, state) {
+    const handler = commandHandler(value);
+    if (handler.command.includes("\0") || handler.command.length > 65536)
+        throw new Error("runtime hook command is invalid or oversized");
+    const wrapper = join(state.privateRoot, `hook-${state.ordinal++}.sh`);
+    const execution = await state.execution();
+    const environment = Object.entries(execution.environment).map(([name, content]) => `${name}=${content}`);
+    const receipts = join(state.privateRoot, "hook-receipts");
+    const command = isolatedHookCommand(execution, environment, handler.command);
+    await writeFile(wrapper, `#!/bin/sh
+set -u
+receipt=$(/usr/bin/mktemp ${quote(join(receipts, "call.XXXXXX"))}) || exit 125
+test ! -f ${quote(join(receipts, "stopped"))} || exit 125
+printf '{"status":"running","pid":%s,"wrapper":%s}\\n' "$$" ${quote(JSON.stringify(wrapper))} > "$receipt"
+${command}
+code=$?
+printf '{"status":"completed","pid":%s,"exitCode":%s,"wrapper":%s}\\n' "$$" "$code" ${quote(JSON.stringify(wrapper))} > "$receipt"
+exit "$code"
+`, { mode: 0o700 });
+    return { ...handler, command: `/bin/sh ${quote(wrapper)}` };
+}
+function isolatedHookCommand(state, environment, command) {
+    const prefix = state.isolation
+        ? state.isolation.argv.slice(0, -1)
+        : ["/usr/bin/sandbox-exec", "-f", state.profile ?? ""];
+    return [
+        ...prefix,
+        "/usr/bin/env",
+        "-i",
+        ...environment,
+        "/bin/sh",
+        "-c",
+        command,
+    ]
+        .map(quote)
+        .join(" ");
+}
+function commandHandler(value) {
+    const handler = object(value);
+    if (handler.type !== "command" || typeof handler.command !== "string")
+        throw new Error("runtime policy supports command plugin hooks only");
+    if (handler.args !== undefined)
+        throw new Error("runtime exec-form hook arguments are unsupported");
+    return { ...handler, command: handler.command };
+}
+async function rewriteFrontmatter(directory, state) {
+    for (const entry of await readdir(directory, { withFileTypes: true })) {
+        const path = join(directory, entry.name);
+        if (entry.isDirectory())
+            await rewriteFrontmatter(path, state);
+        else if (entry.name.endsWith(".md"))
+            await rewriteMarkdown(path, state);
+    }
+}
+async function rewriteMarkdown(path, state) {
+    const body = await readFile(path, "utf8");
+    const header = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(body);
+    const metadata = hookFrontmatter(header?.[1]);
+    if (!metadata || !header)
+        return;
+    if (state.allowed)
+        metadata.hooks = await hookMap(metadata.hooks, state);
+    else
+        delete metadata.hooks;
+    await writeFile(path, `---\n${stringifyYaml(metadata)}\n---\n${body.slice(header[0].length)}`);
+}
+function hookFrontmatter(header) {
+    if (!header?.includes("hooks"))
+        return undefined;
+    const metadata = object(parseYaml(header));
+    return metadata.hooks === undefined ? undefined : metadata;
+}
+export async function runtimeHookObservation(mounts) {
+    await releaseHookProcesses(mounts.receipts);
+    const executions = (await hookExecutions(mounts.receipts)).map((execution) => ({
+        status: execution.status,
+        pid: execution.pid,
+        exitCode: execution.exitCode,
+    }));
+    return {
+        id: "sevro.host.hooks",
+        completeness: executions.every((execution) => execution.status === "completed")
+            ? "complete"
+            : "partial",
+        data: { plugins: mounts.plugins, executions },
+    };
+}
+export async function releaseRuntimeHooks(mounts) {
+    if (!mounts)
+        return;
+    await releaseHookProcesses(mounts.receipts);
+    await Promise.all(mounts.isolation.map((item) => item.release()));
+}
+//# sourceMappingURL=hooks.js.map

package/dist/src/runtime/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,aAAa;AACtE,OAAO,EAAE,UAAU,EAAE,gBAAgB;AACrC,OAAO,EACL,EAAE,EACF,KAAK,EACL,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,SAAS,GACV,yBAAyB;AAC1B,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,oBAAiB;AAE/C,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,mBAAgB;AACrE,OAAO,EAAE,iBAAiB,EAAE,mBAAgB;AAC5C,OAAO,EAAE,mBAAmB,EAAE,mBAAgB;AAC9C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,0BAAuB;AACxE,OAAO,EAAE,iBAAiB,EAAE,gCAA6B;AAEzD,OAAO,EAAE,0BAA0B,EAAE,kCAA+B;AACpE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,2BAAwB;AAC3D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,4BAAyB;AACxE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,GACvB,sCAAmC;AA4BpC,MAAM,UAAU,mBAAmB,CACjC,MAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAOvC;IACC,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC9C,CACF,CAAC;IACF,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAA2D,CAAC;IAChE,MAAM,cAAc,GAAG,GAAG,EAAE,CAC1B,CAAC,OAAO,KAAK,mBAAmB,CAC9B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,EACP,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAC1C,CAAC,CAAC;IACL,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAA0B,EAAE,EACvC,SAAS,GAAsB,EAAE,EACjC,WAAW,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CACrB,IAAI,CAAC,KAAK,CACR,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,EAAE,MAAM,CAAC,CACjE,CACF,CAAC;QACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,OAAO,GAAgB;YAC3B,IAAI;YACJ,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,KAAK,GAAG,KAAK;YACtB,KAAK,EAAE,IAAI,GAAG,EAAE;YAChB,SAAS,EAAE,iBAAiB,CAC1B,OAAO,EACP,KAAK,EACL,IAAI,EACJ,SAAS,EACT,cAAc,EACd,SAAS,CACV;SACF,CAAC;QACF,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,OAAO;YACP,YAAY;YACZ,eAAe,EAAE,MAAM,iBAAiB,CAAC,IAAI,CAAC;SAC/C,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI;QACf,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAgD,EAChD,KAAa,EACb,IAAY,EACZ,SAAoD,EACpD,cAA4D,EAC5D,SAA4B;IAE5B,IAAI,SAA6C,CAAC;IAClD,OAAO,GAAG,EAAE,CACV,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CACzC,OAAO,EACP,KAAK,EACL,SAAS,EACT,OAAO,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3D,OAAO;YACL,GAAG,QAAQ;YACX,WAAW,EAAE;gBACX,GAAG,OAAO,CAAC,WAAW;gBACtB,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;gBACnC,kBAAkB,EAAE,IAAI;gBACxB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC;IACJ,CAAC,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAgD,EAChD,KAAa,EACb,KAAgD,EAChD,OAAwD;IAExD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,OAAO,CAAC,MAAM,EACd,OAAO,EACP,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,GAAG,OAAO,CAAC,cAAc;QACzB,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;KACjD,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC9B,OAAO;YACL,SAAS,EAAE,MAAM,0BAA0B,CAAC;gBAC1C,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc;gBACd,gBAAgB,EAAE,OAAO,CAAC,WAAW;gBACrC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,KAAK,CAAC,QAAQ;gBAC7B,aAAa,EAAE,KAAK,CAAC,OAAO;gBAC5B,mBAAmB,EAAE,OAAO,CAAC,IAAI;gBACjC,kBAAkB,EAAE,UAAU;aAC/B,CAAC;SACH,CAAC;IACJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC;IAC/D,MAAM,SAAS,CACb,OAAO,EACP,iBAAiB,CACf,cAAc,EACd,IAAI,EACJ,KAAK,CAAC,QAAQ,EACd,OAAO,CAAC,IAAI,EACZ,KAAK,CAAC,OAAO,EACb,OAAO,CAAC,SAAS,EACjB,SAAS,EACT,UAAU,CACX,GAAG,sDAAsD,EAC1D,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAgD,EAChD,IAAY;IAEZ,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG;QACf,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa;QAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KAC3B,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,WAAmC;IACnD,OAAO,WAAW,CAAC,IAAI,IAAI,+BAA+B,CAAC;AAC7D,CAAC;AACD,SAAS,eAAe,CAAC,MAAqB;IAC5C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,gBAAgB,CACvB,QAAiC,EACjC,OAA8B;IAE9B,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAiC,EACjC,KAAkB;IAElB,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,CAAC;QACpB,MAAM,eAAe,CACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAClD,KAAK,EACL,2BAA2B,CAC5B,CAAC;IACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;QAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAiC,EACjC,KAAkB,EAClB,IAAY;IAEZ,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC3B,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC3B,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAC9B,QAAQ,CAAC,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,KAAc,EACd,KAAkB;IAElB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,cAAc,CAAC,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,aAAa,CAAC,KAAK,KAAK,SAAS;QACnC,OAAO;YACL,GAAG,aAAa;YAChB,KAAK,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC;SACjD,CAAC;IACJ,OAAO,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAkB;IACtD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,KAAc,EACd,KAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACzB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC1D,OAAO;oBACL,GAAG,UAAU;oBACb,KAAK,EAAE,MAAM,OAAO,CAAC,GAAG,CACtB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAC/D;iBACF,CAAC;YACJ,CAAC,CAAC,CACH;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAc,EACd,KAAkB;IAElB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK;QAClE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAC3D,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAC1C,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,SAAS,CACb,OAAO,EACP;;4BAEwB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;8DACkB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;EAC1F,OAAO;;sFAE6E,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;;CAEnH,EACG,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAoB,EACpB,WAAqB,EACrB,OAAe;IAEf,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS;QAC5B,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC,uBAAuB,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,MAAM;QACT,cAAc;QACd,IAAI;QACJ,GAAG,WAAW;QACd,SAAS;QACT,IAAI;QACJ,OAAO;KACR;SACE,GAAG,CAAC,KAAK,CAAC;SACV,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,KAAc;IAEd,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACnE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,KAAkB;IAElB,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,KAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO;IACjC,IAAI,KAAK,CAAC,OAAO;QAAE,QAAQ,CAAC,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;;QACpE,OAAO,QAAQ,CAAC,KAAK,CAAC;IAC3B,MAAM,SAAS,CACb,IAAI,EACJ,QAAQ,aAAa,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAA0B;IAE1B,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAkB;IAC7D,MAAM,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAC5D,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACd,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,QAAQ,EAAE,SAAS,CAAC,QAAQ;KAC7B,CAAC,CACH,CAAC;IACF,OAAO;QACL,EAAE,EAAE,kBAAkB;QACtB,YAAY,EAAE,UAAU,CAAC,KAAK,CAC5B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,CAChD;YACC,CAAC,CAAE,UAAoB;YACvB,CAAC,CAAE,SAAmB;QACxB,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA8B;IAE9B,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC","sourcesContent":["import { parse as parseYaml, stringify as stringifyYaml } from \"yaml\";\nimport { existsSync } from \"node:fs\";\nimport {\n  cp,\n  mkdir,\n  readFile,\n  readdir,\n  realpath,\n  writeFile,\n} from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { shellQuote as quote } from \"../shell\";\nimport type { RuntimePolicy } from \"./config\";\nimport { insideRuntimeRoot, requireRuntimeReadRoots } from \"./paths\";\nimport { runtimeSeedDigest } from \"./seeds\";\nimport { prepareRuntimeState } from \"./state\";\nimport { sharedCacheDenyRoots, sharedCacheRoots } from \"./shared-cache\";\nimport { macSandboxProfile } from \"../hosts/mac-sandbox\";\nimport type { IsolatedCommand } from \"../hosts/mac-sandbox\";\nimport { prepareLinuxSandboxCommand } from \"../hosts/linux-sandbox\";\nimport { isRecord, isUnknownArray } from \"../value-guards\";\nimport { hookExecutions, releaseHookProcesses } from \"./hook-processes\";\nimport {\n  nativeStateParent,\n  requireNativeHookRoots,\n} from \"../native-transcript-state\";\n\nexport interface HookMounts {\n  directories: string[];\n  receipts: string;\n  isolation: IsolatedCommand[];\n  plugins: {\n    name: string;\n    allowed: boolean;\n    sourceDigest: string;\n    effectiveDigest: string;\n  }[];\n}\ninterface HookRewrite {\n  allowed: boolean;\n  root: string;\n  privateRoot: string;\n  execution: () => Promise<HookExecution>;\n  ordinal: number;\n  files: Set<string>;\n}\n\ninterface HookExecution {\n  environment: Record<string, string>;\n  profile?: string;\n  isolation?: IsolatedCommand;\n}\n\nexport function runtimeHooksEnabled(\n  policy: RuntimePolicy | undefined,\n): boolean {\n  const hooks = policy?.hooks;\n  if (!hooks) return false;\n  const plugins = hooks.plugins ?? [];\n  return hooks.nativeGoal === true || plugins.length > 0;\n}\n\nfunction object(value: unknown): Record<string, unknown> {\n  if (!isRecord(value)) throw new Error(\"invalid runtime hook declaration\");\n  return value;\n}\n\n/** Materialize immutable mounts; only declared plugin hooks reach the host. */\nexport async function prepareHookMounts(options: {\n  workspace: string;\n  stateRoot: string;\n  privateRoot: string;\n  pluginRoots: string[];\n  protectedRoots: string[];\n  policy: RuntimePolicy;\n}): Promise<HookMounts> {\n  let mountRoot = join(options.stateRoot, \"runtime-plugins\");\n  const receipts = join(options.privateRoot, \"hook-receipts\");\n  await Promise.all(\n    [mountRoot, receipts].map((path) =>\n      mkdir(path, { recursive: true, mode: 0o700 }),\n    ),\n  );\n  mountRoot = await realpath(mountRoot);\n  let runtime: ReturnType<typeof prepareRuntimeState> | undefined;\n  const prepareRuntime = () =>\n    (runtime ??= prepareRuntimeState(\n      options.workspace,\n      options.policy,\n      \"hooks\",\n      join(options.privateRoot, \"hook-runtime\"),\n    ));\n  const selected = selectedPlugins(options.policy);\n  const plugins: HookMounts[\"plugins\"] = [],\n    isolation: IsolatedCommand[] = [],\n    directories: string[] = [];\n  for (const [index, source] of options.pluginRoots.entries()) {\n    const root = join(mountRoot, `plugin-${index}`);\n    const sourceDigest = await runtimeSeedDigest(source);\n    await cp(source, root, {\n      recursive: true,\n      dereference: true,\n      force: false,\n      errorOnExist: true,\n    });\n    const manifest = object(\n      JSON.parse(\n        await readFile(join(root, \".claude-plugin/plugin.json\"), \"utf8\"),\n      ),\n    );\n    const name = uniquePluginName(manifest, plugins);\n    const allowed = selected.delete(name);\n    const readRoots = await hookReadRoots(options, root);\n    const rewrite: HookRewrite = {\n      root,\n      allowed,\n      privateRoot: options.privateRoot,\n      ordinal: index * 10000,\n      files: new Set(),\n      execution: lazyHookExecution(\n        options,\n        index,\n        root,\n        readRoots,\n        prepareRuntime,\n        isolation,\n      ),\n    };\n    await rewritePlugin(manifest, rewrite);\n    plugins.push({\n      name,\n      allowed,\n      sourceDigest,\n      effectiveDigest: await runtimeSeedDigest(root),\n    });\n    directories.push(root);\n  }\n  if (selected.size)\n    throw new Error(\"runtime hook policy selects an unavailable plugin\");\n  return { directories, receipts, plugins, isolation };\n}\n\nfunction lazyHookExecution(\n  options: Parameters<typeof prepareHookMounts>[0],\n  index: number,\n  root: string,\n  readRoots: { ordinary: string[]; curated: string[] },\n  prepareRuntime: () => ReturnType<typeof prepareRuntimeState>,\n  isolation: IsolatedCommand[],\n): () => Promise<HookExecution> {\n  let execution: Promise<HookExecution> | undefined;\n  return () =>\n    (execution ??= (async () => {\n      const runtime = await prepareRuntime();\n      const boundary = await prepareHookIsolation(\n        options,\n        index,\n        readRoots,\n        runtime,\n      );\n      if (boundary.isolation) isolation.push(boundary.isolation);\n      return {\n        ...boundary,\n        environment: {\n          ...runtime.environment,\n          PATH: hookPath(runtime.environment),\n          CLAUDE_PLUGIN_ROOT: root,\n          PLUGIN_ROOT: root,\n        },\n      };\n    })());\n}\n\nasync function prepareHookIsolation(\n  options: Parameters<typeof prepareHookMounts>[0],\n  index: number,\n  roots: { ordinary: string[]; curated: string[] },\n  runtime: Awaited<ReturnType<typeof prepareRuntimeState>>,\n): Promise<{ profile?: string; isolation?: IsolatedCommand }> {\n  const cacheRoots = await sharedCacheRoots(\n    options.policy,\n    \"hooks\",\n    options.protectedRoots,\n  );\n  const protectedRoots = [\n    ...options.protectedRoots,\n    ...sharedCacheDenyRoots(options.policy, \"hooks\"),\n  ];\n  if (process.platform === \"linux\")\n    return {\n      isolation: await prepareLinuxSandboxCommand({\n        argv: [\"/bin/true\"],\n        workspace: options.workspace,\n        protectedRoots,\n        privateStateRoot: options.privateRoot,\n        denyNetwork: true,\n        readOnlyRoots: roots.ordinary,\n        hookReadRoots: roots.curated,\n        writableRuntimeRoot: runtime.root,\n        writableCacheRoots: cacheRoots,\n      }),\n    };\n  const profile = join(options.privateRoot, `hooks-${index}.sb`);\n  await writeFile(\n    profile,\n    macSandboxProfile(\n      protectedRoots,\n      true,\n      roots.ordinary,\n      runtime.root,\n      roots.curated,\n      options.workspace,\n      undefined,\n      cacheRoots,\n    ) + \"\\n(deny process-info* (require-not (target self)))\\n\",\n    { mode: 0o600 },\n  );\n  return { profile };\n}\n\nasync function hookReadRoots(\n  options: Parameters<typeof prepareHookMounts>[0],\n  root: string,\n) {\n  const trusted = insideRuntimeRoot(await nativeStateParent(), root);\n  const ordinary = [\n    ...options.policy.readOnlyRoots,\n    ...(trusted ? [] : [root]),\n  ];\n  const curated = trusted ? [root] : [];\n  requireRuntimeReadRoots(ordinary, options.protectedRoots);\n  await requireNativeHookRoots(curated, options.privateRoot);\n  return { ordinary, curated };\n}\n\nfunction hookPath(environment: Record<string, string>): string {\n  return environment.PATH ?? \"/usr/bin:/bin:/usr/sbin:/sbin\";\n}\nfunction selectedPlugins(policy: RuntimePolicy): Set<string> {\n  return new Set(policy.hooks?.plugins ?? []);\n}\nfunction uniquePluginName(\n  manifest: Record<string, unknown>,\n  plugins: HookMounts[\"plugins\"],\n): string {\n  if (typeof manifest.name !== \"string\")\n    throw new Error(\"runtime hook plugin has no name\");\n  const name = manifest.name;\n  if (plugins.some((plugin) => plugin.name === name))\n    throw new Error(\"runtime hook plugin names overlap\");\n  return name;\n}\n\nasync function rewritePlugin(\n  manifest: Record<string, unknown>,\n  state: HookRewrite,\n): Promise<void> {\n  requireHookOnlyPlugin(state.root);\n  await rewriteManifest(manifest, state, \".claude-plugin/plugin.json\");\n  const native = join(state.root, \".codex-plugin/plugin.json\");\n  if (existsSync(native))\n    await rewriteManifest(\n      object(JSON.parse(await readFile(native, \"utf8\"))),\n      state,\n      \".codex-plugin/plugin.json\",\n    );\n  const standard = join(state.root, \"hooks/hooks.json\");\n  if (existsSync(standard)) await hookFile(standard, state);\n  await rewriteFrontmatter(state.root, state);\n}\n\nfunction requireHookOnlyPlugin(root: string): void {\n  for (const name of [\".mcp.json\", \".lsp.json\"])\n    if (existsSync(join(root, name)))\n      throw new Error(\"runtime auxiliary plugin execution is unsupported\");\n}\n\nasync function rewriteManifest(\n  manifest: Record<string, unknown>,\n  state: HookRewrite,\n  path: string,\n): Promise<void> {\n  if (manifest.mods !== undefined)\n    throw new Error(\"runtime plugin mods are unsupported\");\n  delete manifest.mcpServers;\n  delete manifest.lspServers;\n  if (manifest.hooks !== undefined)\n    manifest.hooks = await hookSource(manifest.hooks, state);\n  await writeFile(join(state.root, path), JSON.stringify(manifest));\n}\n\nasync function hookSource(\n  value: unknown,\n  state: HookRewrite,\n): Promise<unknown> {\n  if (typeof value === \"string\") {\n    const path = await realpath(join(state.root, value));\n    if (!insideRuntimeRoot(state.root, path))\n      throw new Error(\"runtime hook file escapes its plugin\");\n    await hookFile(path, state);\n    return value;\n  }\n  if (isUnknownArray(value))\n    return Promise.all(value.map((source) => hookSource(source, state)));\n  const configuration = object(value);\n  if (configuration.hooks !== undefined)\n    return {\n      ...configuration,\n      hooks: await hookMap(configuration.hooks, state),\n    };\n  return hookMap(configuration, state);\n}\n\nasync function hookFile(path: string, state: HookRewrite): Promise<void> {\n  if (state.files.has(path)) return;\n  state.files.add(path);\n  const value = object(JSON.parse(await readFile(path, \"utf8\")));\n  value.hooks = await hookMap(value.hooks, state);\n  await writeFile(path, JSON.stringify(value));\n}\n\nasync function hookMap(\n  value: unknown,\n  state: HookRewrite,\n): Promise<Record<string, unknown>> {\n  if (!state.allowed) return {};\n  const entries: [string, unknown][] = [];\n  for (const [event, groups] of Object.entries(object(value))) {\n    if (!isUnknownArray(groups))\n      throw new Error(\"runtime hook groups must be arrays\");\n    entries.push([\n      event,\n      await Promise.all(\n        groups.map(async (group) => {\n          const definition = object(group);\n          if (!isUnknownArray(definition.hooks))\n            throw new Error(\"runtime hook handlers must be arrays\");\n          return {\n            ...definition,\n            hooks: await Promise.all(\n              definition.hooks.map((handler) => commandHook(handler, state)),\n            ),\n          };\n        }),\n      ),\n    ]);\n  }\n  return Object.fromEntries(entries);\n}\n\nasync function commandHook(\n  value: unknown,\n  state: HookRewrite,\n): Promise<Record<string, unknown>> {\n  const handler = commandHandler(value);\n  if (handler.command.includes(\"\\0\") || handler.command.length > 65536)\n    throw new Error(\"runtime hook command is invalid or oversized\");\n  const wrapper = join(state.privateRoot, `hook-${state.ordinal++}.sh`);\n  const execution = await state.execution();\n  const environment = Object.entries(execution.environment).map(\n    ([name, content]) => `${name}=${content}`,\n  );\n  const receipts = join(state.privateRoot, \"hook-receipts\");\n  const command = isolatedHookCommand(execution, environment, handler.command);\n  await writeFile(\n    wrapper,\n    `#!/bin/sh\nset -u\nreceipt=$(/usr/bin/mktemp ${quote(join(receipts, \"call.XXXXXX\"))}) || exit 125\ntest ! -f ${quote(join(receipts, \"stopped\"))} || exit 125\nprintf '{\"status\":\"running\",\"pid\":%s,\"wrapper\":%s}\\\\n' \"$$\" ${quote(JSON.stringify(wrapper))} > \"$receipt\"\n${command}\ncode=$?\nprintf '{\"status\":\"completed\",\"pid\":%s,\"exitCode\":%s,\"wrapper\":%s}\\\\n' \"$$\" \"$code\" ${quote(JSON.stringify(wrapper))} > \"$receipt\"\nexit \"$code\"\n`,\n    { mode: 0o700 },\n  );\n  return { ...handler, command: `/bin/sh ${quote(wrapper)}` };\n}\n\nfunction isolatedHookCommand(\n  state: HookExecution,\n  environment: string[],\n  command: string,\n): string {\n  const prefix = state.isolation\n    ? state.isolation.argv.slice(0, -1)\n    : [\"/usr/bin/sandbox-exec\", \"-f\", state.profile ?? \"\"];\n  return [\n    ...prefix,\n    \"/usr/bin/env\",\n    \"-i\",\n    ...environment,\n    \"/bin/sh\",\n    \"-c\",\n    command,\n  ]\n    .map(quote)\n    .join(\" \");\n}\n\nfunction commandHandler(\n  value: unknown,\n): Record<string, unknown> & { command: string } {\n  const handler = object(value);\n  if (handler.type !== \"command\" || typeof handler.command !== \"string\")\n    throw new Error(\"runtime policy supports command plugin hooks only\");\n  if (handler.args !== undefined)\n    throw new Error(\"runtime exec-form hook arguments are unsupported\");\n  return { ...handler, command: handler.command };\n}\n\nasync function rewriteFrontmatter(\n  directory: string,\n  state: HookRewrite,\n): Promise<void> {\n  for (const entry of await readdir(directory, { withFileTypes: true })) {\n    const path = join(directory, entry.name);\n    if (entry.isDirectory()) await rewriteFrontmatter(path, state);\n    else if (entry.name.endsWith(\".md\")) await rewriteMarkdown(path, state);\n  }\n}\n\nasync function rewriteMarkdown(\n  path: string,\n  state: HookRewrite,\n): Promise<void> {\n  const body = await readFile(path, \"utf8\");\n  const header = /^---\\r?\\n([\\s\\S]*?)\\r?\\n---(?:\\r?\\n|$)/.exec(body);\n  const metadata = hookFrontmatter(header?.[1]);\n  if (!metadata || !header) return;\n  if (state.allowed) metadata.hooks = await hookMap(metadata.hooks, state);\n  else delete metadata.hooks;\n  await writeFile(\n    path,\n    `---\\n${stringifyYaml(metadata)}\\n---\\n${body.slice(header[0].length)}`,\n  );\n}\n\nfunction hookFrontmatter(\n  header: string | undefined,\n): Record<string, unknown> | undefined {\n  if (!header?.includes(\"hooks\")) return undefined;\n  const metadata = object(parseYaml(header));\n  return metadata.hooks === undefined ? undefined : metadata;\n}\n\nexport async function runtimeHookObservation(mounts: HookMounts) {\n  await releaseHookProcesses(mounts.receipts);\n  const executions = (await hookExecutions(mounts.receipts)).map(\n    (execution) => ({\n      status: execution.status,\n      pid: execution.pid,\n      exitCode: execution.exitCode,\n    }),\n  );\n  return {\n    id: \"sevro.host.hooks\",\n    completeness: executions.every(\n      (execution) => execution.status === \"completed\",\n    )\n      ? (\"complete\" as const)\n      : (\"partial\" as const),\n    data: { plugins: mounts.plugins, executions },\n  };\n}\n\nexport async function releaseRuntimeHooks(\n  mounts: HookMounts | undefined,\n): Promise<void> {\n  if (!mounts) return;\n  await releaseHookProcesses(mounts.receipts);\n  await Promise.all(mounts.isolation.map((item) => item.release()));\n}\n"]}

package/dist/src/runtime/paths.js

@@ -0,0 +1,244 @@
+import { access, lstat, readdir, readlink, realpath, stat, } from "node:fs/promises";
+import { constants, lstatSync, readlinkSync, realpathSync } from "node:fs";
+import { homedir, userInfo } from "node:os";
+import { nativeStateProtectedRoots } from "../native-transcript-state.js";
+import { workspaceStatePath } from "../fixtures/workspace-state.js";
+import { insideRoot as insideRuntimeRoot } from "../paths.js";
+import { containsControl } from "../value-guards.js";
+export { insideRoot as insideRuntimeRoot } from "../paths.js";
+import { basename, delimiter, dirname, isAbsolute, join, resolve, } from "node:path";
+export function isRuntimeHomeRoot(root) {
+    return [homedir(), userInfo().homedir]
+        .map((home) => resolve(home))
+        .includes(root);
+}
+export function requireRuntimeReadRoots(readRoots, protectedRoots) {
+    const hardRoots = [
+        ...protectedRoots.filter((root) => !isRuntimeHomeRoot(root)),
+        ...runtimeCredentialRoots(),
+        ...nativeStateProtectedRoots(),
+        workspaceStatePath(),
+    ];
+    for (const root of readRoots) {
+        if (root === "/" || isRuntimeHomeRoot(root))
+            throw new Error("runtime read root is too broad");
+        if (overlapsRuntimeRoots([root], hardRoots))
+            throw new Error("runtime read root overlaps protected data");
+    }
+}
+function runtimeCredentialRoots() {
+    return credentialRoots().flatMap((root) => [
+        root,
+        canonicalCredentialRoot(root),
+    ]);
+}
+function overlapsRuntimeRoots(roots, deniedRoots) {
+    return roots.some((root) => deniedRoots.some((denied) => insideRuntimeRoot(denied, root) || insideRuntimeRoot(root, denied)));
+}
+function canonicalCredentialRoot(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch (cause) {
+        if (cause.code !== "ENOENT")
+            throw cause;
+        const target = missingCredentialLink(path);
+        if (target)
+            return canonicalCredentialRoot(target);
+        return join(canonicalCredentialRoot(dirname(path)), basename(path));
+    }
+}
+function missingCredentialLink(path) {
+    try {
+        return lstatSync(path).isSymbolicLink()
+            ? resolve(dirname(path), readlinkSync(path))
+            : null;
+    }
+    catch (cause) {
+        if (cause.code === "ENOENT")
+            return null;
+        throw cause;
+    }
+}
+export function runtimeExecutableProtection(readRoots, protectedRoots, allowHomeRuntime) {
+    if (!allowHomeRuntime)
+        return protectedRoots;
+    requireRuntimeReadRoots(readRoots, []);
+    return protectedRoots.filter((root) => !isRuntimeHomeRoot(root));
+}
+function credentialRoots() {
+    return [homedir(), userInfo().homedir].flatMap((home) => [
+        ".ssh",
+        ".aws",
+        ".codex",
+        ".claude",
+        ".config/gcloud",
+        ".local/share/keyrings",
+    ].map((path) => join(home, path)));
+}
+export async function canonicalRuntimeRoot(path) {
+    try {
+        return await realpath(path);
+    }
+    catch (cause) {
+        if (cause.code !== "ENOENT")
+            throw cause;
+        const target = await missingRuntimeLink(path);
+        if (target)
+            return canonicalRuntimeRoot(target);
+        return join(await canonicalRuntimeRoot(dirname(path)), basename(path));
+    }
+}
+async function missingRuntimeLink(path) {
+    try {
+        return (await lstat(path)).isSymbolicLink()
+            ? resolve(dirname(path), await readlink(path))
+            : null;
+    }
+    catch (cause) {
+        if (cause.code === "ENOENT")
+            return null;
+        throw cause;
+    }
+}
+function installationRoot(directory) {
+    if (basename(directory) !== "bin")
+        return null;
+    const root = dirname(directory);
+    const broad = [
+        "/",
+        "/usr",
+        "/usr/local",
+        "/opt/homebrew",
+        ...[homedir(), userInfo().homedir].flatMap((home) => [
+            home,
+            join(home, ".local"),
+        ]),
+    ];
+    return broad.includes(root) ? null : root;
+}
+async function linkedToolRoots(directory) {
+    const entries = await readdir(directory, { withFileTypes: true });
+    if (entries.length > 4096)
+        throw new Error("runtime PATH directory exceeds entry limit");
+    const roots = [];
+    for (const entry of entries.filter((entry) => entry.isSymbolicLink())) {
+        const target = await linkedTarget(join(directory, entry.name));
+        if (!target)
+            continue;
+        const bin = dirname(target);
+        roots.push(bin);
+        const installation = installationRoot(bin);
+        if (installation)
+            roots.push(installation);
+    }
+    return roots;
+}
+async function linkedTarget(path) {
+    try {
+        const target = await realpath(path);
+        return (await stat(target)).isFile() ? target : null;
+    }
+    catch (cause) {
+        if (["EACCES", "EPERM", "ENOENT"].includes(cause.code ?? ""))
+            return null;
+        throw cause;
+    }
+}
+/** Missing PATH entries are inert; relative entries cannot grant host access. */
+export async function runtimePathDirectories(path) {
+    if (path === undefined)
+        return [];
+    const roots = [];
+    for (const entry of path.split(delimiter)) {
+        roots.push(...(await pathEntryRoots(entry)));
+    }
+    return [...new Set(roots)].sort();
+}
+function requirePathEntry(entry) {
+    if (!isAbsolute(entry) || containsControl(entry))
+        throw new Error("runtime PATH entries must be absolute and nonempty");
+}
+/** Ambient tool discovery must not grant access to the operator's credentials. */
+export async function runtimeInheritedPath(path) {
+    const deniedRoots = runtimeCredentialRoots();
+    const selected = [];
+    for (const entry of path.split(delimiter)) {
+        requirePathEntry(entry);
+        const paths = [resolve(entry), await canonicalRuntimeRoot(entry)];
+        if (overlapsRuntimeRoots(paths, deniedRoots))
+            continue;
+        if (overlapsRuntimeRoots(await pathEntryRoots(entry), deniedRoots))
+            continue;
+        selected.push(entry);
+    }
+    if (selected.length === 0)
+        throw new Error("runtime inherited PATH has no unprotected entries");
+    return selected.join(delimiter);
+}
+async function pathEntryRoots(entry) {
+    requirePathEntry(entry);
+    const directory = await existingDirectory(entry);
+    if (!directory)
+        return [];
+    const installation = installationRoot(directory);
+    return [
+        resolve(entry),
+        directory,
+        ...(installation ? [installation] : []),
+        ...(await linkedToolRoots(directory)),
+    ];
+}
+async function existingDirectory(path) {
+    try {
+        const canonical = await realpath(path);
+        if (!(await stat(canonical)).isDirectory())
+            throw new Error("runtime PATH entry is not a directory");
+        await access(canonical, constants.R_OK | constants.X_OK);
+        return canonical;
+    }
+    catch (cause) {
+        if (cause.code === "ENOENT")
+            return null;
+        throw cause;
+    }
+}
+export function runtimeDeclaredPath(path, environment, base) {
+    const expanded = path.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_match, name) => {
+        const value = environment[name];
+        if (value === undefined)
+            throw new Error(`runtime path variable is undeclared: ${name}`);
+        return value;
+    });
+    if (containsControl(expanded) || expanded.includes("${"))
+        throw new Error("runtime path contains invalid characters");
+    return expanded.startsWith("~/")
+        ? join(homedir(), expanded.slice(2))
+        : resolve(base, expanded);
+}
+export async function declaredRuntimeRoots(paths, environment, base) {
+    const roots = await Promise.all(paths.map(async (path) => {
+        const directory = await existingDirectory(runtimeDeclaredPath(path, environment, base));
+        if (!directory)
+            throw new Error("declared runtime read root is missing");
+        return [directory, runtimeDeclaredPath(path, environment, base)];
+    }));
+    return [...new Set(roots.flat())];
+}
+export async function optionalRuntimeRoots(paths, environment, base, protectedRoots = []) {
+    const roots = [], skipped = [];
+    for (const path of paths) {
+        const declared = runtimeDeclaredPath(path, environment, base);
+        requireRuntimeReadRoots([declared, await canonicalRuntimeRoot(declared)], protectedRoots);
+        const directory = await existingDirectory(declared);
+        if (directory)
+            roots.push(directory, declared);
+        else
+            skipped.push(declared);
+    }
+    return {
+        roots: [...new Set(roots)].sort(),
+        skipped: [...new Set(skipped)].sort(),
+    };
+}
+//# sourceMappingURL=paths.js.map