@claudexor/orchestrator 3.8.0 → 3.8.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/account-resolution.d.ts.map +1 -1
- package/dist/account-resolution.js +17 -1
- package/dist/account-resolution.js.map +1 -1
- package/dist/candidateEvidence.d.ts +3 -3
- package/dist/candidateEvidence.d.ts.map +1 -1
- package/dist/candidateOutputs.d.ts +2 -2
- package/dist/candidateOutputs.d.ts.map +1 -1
- package/dist/candidateOutputs.js +11 -6
- package/dist/candidateOutputs.js.map +1 -1
- package/dist/contract-gates.d.ts +4 -4
- package/dist/contract-gates.d.ts.map +1 -1
- package/dist/contract-gates.js +2 -0
- package/dist/contract-gates.js.map +1 -1
- package/dist/credential-profiles.d.ts +12 -1
- package/dist/credential-profiles.d.ts.map +1 -1
- package/dist/credential-profiles.js +13 -3
- package/dist/credential-profiles.js.map +1 -1
- package/dist/delegatedHome.d.ts +21 -69
- package/dist/delegatedHome.d.ts.map +1 -1
- package/dist/delegatedHome.js +29 -85
- package/dist/delegatedHome.js.map +1 -1
- package/dist/orchestrator.d.ts +5 -6
- package/dist/orchestrator.d.ts.map +1 -1
- package/dist/orchestrator.js +195 -202
- package/dist/orchestrator.js.map +1 -1
- package/dist/planRun.d.ts +5 -5
- package/dist/planRun.d.ts.map +1 -1
- package/dist/planRun.js.map +1 -1
- package/dist/plannerAttempt.d.ts +2 -2
- package/dist/plannerAttempt.d.ts.map +1 -1
- package/dist/requestRequirements.d.ts +3 -15
- package/dist/requestRequirements.d.ts.map +1 -1
- package/dist/requestRequirements.js +11 -21
- package/dist/requestRequirements.js.map +1 -1
- package/dist/runAdmission.d.ts +29 -0
- package/dist/runAdmission.d.ts.map +1 -0
- package/dist/runAdmission.js +63 -0
- package/dist/runAdmission.js.map +1 -0
- package/dist/task-contract-builder.d.ts +2 -2
- package/dist/task-contract-builder.d.ts.map +1 -1
- package/dist/task-contract-builder.js +5 -6
- package/dist/task-contract-builder.js.map +1 -1
- package/package.json +17 -17
package/dist/delegatedHome.js
CHANGED
|
@@ -1,101 +1,51 @@
|
|
|
1
1
|
import { existsSync } from "node:fs";
|
|
2
|
-
import {
|
|
3
|
-
import { confinementBoundaryProven } from "@claudexor/schema";
|
|
4
|
-
import { claudexorOwnedRoot, nativeHarnessStateRoot, userHomeDir } from "@claudexor/util";
|
|
2
|
+
import { DelegatedEvidenceIncompleteError, DelegatedHomeUnavailableError } from "@claudexor/core";
|
|
3
|
+
import { confinementBoundaryProven, DELIBERATE_NO_OUTER_BOUNDARY_REASON } from "@claudexor/schema";
|
|
5
4
|
/** Access profiles under which the harness can modify the filesystem. */
|
|
6
5
|
export function isMutatingAccess(access) {
|
|
7
6
|
return access !== "readonly";
|
|
8
7
|
}
|
|
9
8
|
/**
|
|
10
|
-
*
|
|
11
|
-
*
|
|
12
|
-
* Only a delegated run asks for an engine-provided boundary, and only a host
|
|
13
|
-
* that can actually provide one earns the trade. Telling a harness to drop its
|
|
14
|
-
* native sandbox where Claudexor will NOT replace it is a pure loss — strictly
|
|
15
|
-
* worse than never having asked — so the two conditions are one expression
|
|
16
|
-
* rather than a flag the caller passes and a check nobody makes.
|
|
17
|
-
*/
|
|
18
|
-
export function externallyConfinedLane(delegated, host) {
|
|
19
|
-
return delegated && confinementBoundaryAvailable(host).available;
|
|
20
|
-
}
|
|
21
|
-
export function defaultConfinementRoots() {
|
|
22
|
-
return {
|
|
23
|
-
operatorHome: userHomeDir(),
|
|
24
|
-
runtimeRoot: claudexorOwnedRoot(),
|
|
25
|
-
nativeStateRoot: nativeHarnessStateRoot(),
|
|
26
|
-
};
|
|
27
|
-
}
|
|
28
|
-
/**
|
|
29
|
-
* Decide the harness HOME and the OS boundary one attempt runs under.
|
|
9
|
+
* Decide the harness HOME one attempt runs under.
|
|
30
10
|
*
|
|
31
11
|
* Unchanged for ordinary runs: an ISOLATED envelope gets the envelope's scoped
|
|
32
12
|
* home, while an IN-PLACE attempt deliberately inherits the operator's native
|
|
33
13
|
* environment so a harness whose native session store hangs off `$HOME` can
|
|
34
14
|
* resume its vendor conversation.
|
|
35
15
|
*
|
|
36
|
-
* A DELEGATED run (`execution.delegated`) is scoped either way
|
|
37
|
-
*
|
|
38
|
-
*
|
|
39
|
-
*
|
|
40
|
-
*
|
|
41
|
-
* all `~/.claudexor/v3/daemon/token`, which grants the entire control API.
|
|
42
|
-
*
|
|
43
|
-
* THE SCOPED HOME IS NOT THE BOUNDARY. It redirects `~`-relative lookups and
|
|
44
|
-
* nothing more; the token above is one absolute path away, and a live probe
|
|
45
|
-
* read it out of an ordinary `workspace_write` agent run. So a delegated
|
|
46
|
-
* MUTATING attempt additionally gets an OS-ENFORCED boundary
|
|
47
|
-
* (`applyConfinement`), verified against a path it denies before the harness is
|
|
48
|
-
* spawned. A delegated READ-ONLY attempt keeps the harness's own read-only
|
|
49
|
-
* enforcement instead: confinement stands that enforcement down (macOS refuses
|
|
50
|
-
* nested sandboxes), which would be a net loss where there is no shell to
|
|
51
|
-
* confine.
|
|
52
|
-
*
|
|
53
|
-
* WHERE THE HOST HAS NO BOUNDARY the attempt still runs, and says so: the
|
|
54
|
-
* reason travels onto the attempt record, into the child's prompt and into the
|
|
55
|
-
* caller's result. A delegated run that refused on every platform Claudexor has
|
|
56
|
-
* not implemented a mechanism for would be a macOS-only feature wearing a
|
|
57
|
-
* general name.
|
|
16
|
+
* A DELEGATED run (`execution.delegated`) is scoped either way. The scoped HOME
|
|
17
|
+
* redirects native state and profile selection; it is deliberately not called
|
|
18
|
+
* a filesystem boundary. Mutating delegated attempts disclose that Claudexor
|
|
19
|
+
* adds no outer OS boundary and leave the selected harness's native access mode
|
|
20
|
+
* in effect.
|
|
58
21
|
*
|
|
59
22
|
* THE COST of the scoped home, stated plainly: an in-place delegated attempt
|
|
60
23
|
* CANNOT resume a native vendor session whose store lives under the real `$HOME`
|
|
61
24
|
* — cursor (`~/.cursor`) and opencode (XDG data under `$HOME`) lose resume.
|
|
62
25
|
* codex and claude keep it: their native session stores are Claudexor-owned
|
|
63
|
-
* directories that the adapter re-points on top of this env and
|
|
64
|
-
* confinement carves back out, and the macOS login Keychain is reached through
|
|
26
|
+
* directories that the adapter re-points on top of this env, and the macOS login Keychain is reached through
|
|
65
27
|
* the declared scoped-home bridge (INV-067), so subscription auth is unaffected.
|
|
66
28
|
*
|
|
67
|
-
* Never degrades silently: a delegated attempt whose scoped home is not on disk
|
|
68
|
-
* or whose boundary cannot be applied and proven, refuses.
|
|
29
|
+
* Never degrades silently: a delegated attempt whose scoped home is not on disk refuses.
|
|
69
30
|
*/
|
|
70
|
-
export function scopedHarnessHome(wsm, envelope, inPlaceEnvelope, delegated, access = "workspace_write"
|
|
31
|
+
export function scopedHarnessHome(wsm, envelope, inPlaceEnvelope, delegated, access = "workspace_write") {
|
|
71
32
|
if (inPlaceEnvelope && !delegated) {
|
|
72
33
|
return {
|
|
73
34
|
isolated: false,
|
|
74
35
|
homeDir: null,
|
|
75
|
-
|
|
76
|
-
confinementUnavailableReason: null,
|
|
36
|
+
outerBoundaryUnavailableReason: null,
|
|
77
37
|
};
|
|
78
38
|
}
|
|
79
39
|
const env = wsm.envFor(envelope);
|
|
80
40
|
const homeDir = env["HOME"];
|
|
81
41
|
if (delegated && (!homeDir || !existsSync(homeDir))) {
|
|
82
|
-
throw new DelegatedHomeUnavailableError(`delegated run cannot
|
|
42
|
+
throw new DelegatedHomeUnavailableError(`delegated run cannot start: the scoped harness home for attempt ${envelope.attempt_id} is missing (${homeDir || "unset"})`);
|
|
83
43
|
}
|
|
84
|
-
const outcome = delegated && isMutatingAccess(access)
|
|
85
|
-
? applyConfinement({
|
|
86
|
-
operatorHome: roots.operatorHome,
|
|
87
|
-
runtimeRoot: roots.runtimeRoot,
|
|
88
|
-
nativeStateRoot: roots.nativeStateRoot,
|
|
89
|
-
scopedHome: homeDir,
|
|
90
|
-
worktree: envelope.worktree_path,
|
|
91
|
-
}, host)
|
|
92
|
-
: { confinement: null, unavailableReason: null };
|
|
93
44
|
return {
|
|
94
45
|
env,
|
|
95
46
|
isolated: true,
|
|
96
47
|
homeDir: homeDir ?? null,
|
|
97
|
-
|
|
98
|
-
confinementUnavailableReason: outcome.unavailableReason,
|
|
48
|
+
outerBoundaryUnavailableReason: delegated && isMutatingAccess(access) ? DELIBERATE_NO_OUTER_BOUNDARY_REASON : null,
|
|
99
49
|
};
|
|
100
50
|
}
|
|
101
51
|
/**
|
|
@@ -107,16 +57,14 @@ export function scopedHarnessHome(wsm, envelope, inPlaceEnvelope, delegated, acc
|
|
|
107
57
|
* fact, so it is stated to the model in plain words rather than left in an
|
|
108
58
|
* artifact it never reads.
|
|
109
59
|
*/
|
|
110
|
-
export function
|
|
111
|
-
const reason = home?.
|
|
60
|
+
export function outerBoundaryNotice(home) {
|
|
61
|
+
const reason = home?.outerBoundaryUnavailableReason;
|
|
112
62
|
if (!reason)
|
|
113
63
|
return null;
|
|
114
64
|
return [
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
"
|
|
118
|
-
"can reach. Confine yourself to the worktree you were given and the HOME you were given,",
|
|
119
|
-
"and do not read the operator's credential stores or Claudexor's own runtime directory.",
|
|
65
|
+
`Engine disclosure: ${reason}`,
|
|
66
|
+
"The scoped HOME selects native state and credentials; it is not containment. Stay within",
|
|
67
|
+
"the execution workspace and do not access unrelated operator or Claudexor state.",
|
|
120
68
|
].join("\n");
|
|
121
69
|
}
|
|
122
70
|
/**
|
|
@@ -132,22 +80,19 @@ export function appliedAttemptFacts(home, access, credentialProfileId) {
|
|
|
132
80
|
harness_home_dir: home?.homeDir ?? null,
|
|
133
81
|
access_applied: access,
|
|
134
82
|
credential_profile_applied: credentialProfileId,
|
|
135
|
-
confinement_mechanism:
|
|
136
|
-
confinement_profile_digest:
|
|
137
|
-
confinement_verified_denied_path:
|
|
138
|
-
confinement_unavailable_reason: home?.
|
|
83
|
+
confinement_mechanism: null,
|
|
84
|
+
confinement_profile_digest: null,
|
|
85
|
+
confinement_verified_denied_path: null,
|
|
86
|
+
confinement_unavailable_reason: home?.outerBoundaryUnavailableReason ?? null,
|
|
139
87
|
};
|
|
140
88
|
}
|
|
141
89
|
/**
|
|
142
|
-
* Whether an attempt's record is auditable for a delegated
|
|
90
|
+
* Whether an attempt's record is auditable for a delegated mutating run.
|
|
143
91
|
*
|
|
144
92
|
* The distinction this predicate exists to draw: evidence that is MISSING is
|
|
145
93
|
* still a reason to refuse — an attempt that cannot say what it ran under is
|
|
146
94
|
* indistinguishable from one that ran unconfined behind a green terminal.
|
|
147
|
-
* Evidence that honestly says "no boundary
|
|
148
|
-
* the absence of a boundary is a fact about the host, not a gap in the record,
|
|
149
|
-
* and refusing on it would make a delegated mutating run impossible wherever
|
|
150
|
-
* Claudexor has not implemented a mechanism.
|
|
95
|
+
* Evidence that honestly says "no additional boundary, by design" is complete.
|
|
151
96
|
*
|
|
152
97
|
* A named mechanism is a claim, and only `verified_denied_path` discharges it —
|
|
153
98
|
* so a record carrying the name without the proof is NOT complete, and neither
|
|
@@ -162,12 +107,11 @@ export function appliedEvidenceComplete(facts) {
|
|
|
162
107
|
return Boolean(facts.confinement_unavailable_reason);
|
|
163
108
|
}
|
|
164
109
|
/**
|
|
165
|
-
* The terminal gate, shared by every lane that assembles attempts.
|
|
110
|
+
* The terminal evidence gate, shared by every lane that assembles attempts.
|
|
166
111
|
*
|
|
167
112
|
* A delegated MUTATING run may only reach a terminal when EVERY attempt it ran
|
|
168
|
-
* can state what it ran under
|
|
169
|
-
*
|
|
170
|
-
* and both callers spend it.
|
|
113
|
+
* can state what it ran under, including the deliberate absence of an outer
|
|
114
|
+
* boundary, so the rule lives here and both callers spend it.
|
|
171
115
|
*/
|
|
172
116
|
export function assertDelegatedEvidence(delegated, access, attempts) {
|
|
173
117
|
if (!delegated || !isMutatingAccess(access))
|
|
@@ -175,6 +119,6 @@ export function assertDelegatedEvidence(delegated, access, attempts) {
|
|
|
175
119
|
const unauditable = attempts.filter((attempt) => !appliedEvidenceComplete(attempt.applied));
|
|
176
120
|
if (unauditable.length === 0)
|
|
177
121
|
return;
|
|
178
|
-
throw new DelegatedEvidenceIncompleteError(`delegated mutating run cannot terminalize: ${unauditable.length} attempt(s) state neither a proven
|
|
122
|
+
throw new DelegatedEvidenceIncompleteError(`delegated mutating run cannot terminalize: ${unauditable.length} attempt(s) state neither a historical proven boundary nor the deliberate no-outer-boundary reason (${unauditable.map((attempt) => attempt.attemptId).join(", ")})`);
|
|
179
123
|
}
|
|
180
124
|
//# sourceMappingURL=delegatedHome.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegatedHome.js","sourceRoot":"","sources":["../src/delegatedHome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"delegatedHome.js","sourceRoot":"","sources":["../src/delegatedHome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,gCAAgC,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAMlG,OAAO,EAAE,yBAAyB,EAAE,mCAAmC,EAAE,MAAM,mBAAmB,CAAC;AAenG,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,KAAK,UAAU,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAqB,EACrB,QAA2B,EAC3B,eAAwB,EACxB,SAAkB,EAClB,MAAM,GAAkB,iBAAiB;IAEzC,IAAI,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,8BAA8B,EAAE,IAAI;SACrC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,6BAA6B,CACrC,mEAAmE,QAAQ,CAAC,UAAU,gBAAgB,OAAO,IAAI,OAAO,GAAG,CAC5H,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG;QACH,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,8BAA8B,EAC5B,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI;KACrF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA0C;IAC5E,MAAM,MAAM,GAAG,IAAI,EAAE,8BAA8B,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,sBAAsB,MAAM,EAAE;QAC9B,0FAA0F;QAC1F,kFAAkF;KACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAqCD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA0C,EAC1C,MAAqB,EACrB,mBAAkC;IAElC,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,gBAAgB,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;QACvC,cAAc,EAAE,MAAM;QACtB,0BAA0B,EAAE,mBAAmB;QAC/C,qBAAqB,EAAE,IAAI;QAC3B,0BAA0B,EAAE,IAAI;QAChC,gCAAgC,EAAE,IAAI;QACtC,8BAA8B,EAAE,IAAI,EAAE,8BAA8B,IAAI,IAAI;KAC7E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA6E;IAE7E,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAChC,OAAO,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAkB,EAClB,MAAqB,EACrB,QAAyE;IAEzE,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,IAAI,gCAAgC,CACxC,8CAA8C,WAAW,CAAC,MAAM,uGAAuG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrO,CAAC;AACJ,CAAC"}
|
package/dist/orchestrator.d.ts
CHANGED
|
@@ -80,6 +80,8 @@ export interface RunInput {
|
|
|
80
80
|
* Defaults to `repoRoot` (in-place threads and ordinary runs).
|
|
81
81
|
*/
|
|
82
82
|
executionRoot?: string;
|
|
83
|
+
/** Frozen retry provenance: historical replay may omit workspaceRoot; fresh writes may not. */
|
|
84
|
+
retryOf?: string | null;
|
|
83
85
|
/** Project Git initialization that had to happen before an isolated thread
|
|
84
86
|
* worktree could be materialized. Announced immediately after run.created. */
|
|
85
87
|
projectGitInitialization?: EnsureGitRepositoryResult | null;
|
|
@@ -241,12 +243,9 @@ export interface RunInput {
|
|
|
241
243
|
* is the deliverable. Only honored by convergence modes.
|
|
242
244
|
*/
|
|
243
245
|
inPlace?: boolean;
|
|
244
|
-
/**
|
|
245
|
-
*
|
|
246
|
-
*
|
|
247
|
-
* even in-place, trading native-session resume for confinement (see
|
|
248
|
-
* `scopedHarnessHome`), and refusing rather than degrading when it cannot be.
|
|
249
|
-
*/
|
|
246
|
+
/** External-orchestrator run: every attempt uses a scoped harness HOME even
|
|
247
|
+
* in-place, keeping profile and writable vendor state explicit. This is not
|
|
248
|
+
* an OS boundary. */
|
|
250
249
|
delegated?: boolean;
|
|
251
250
|
/**
|
|
252
251
|
* Per-run globs no candidate may touch (create/modify/delete/rename). Unlike
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EACV,aAAa,EAKb,UAAU,EACV,yBAAyB,EACzB,UAAU,EACV,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,YAAY,EAEZ,wBAAwB,EACxB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,6BAA6B,EAC7B,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EAErB,4BAA4B,EAE5B,QAAQ,EACR,YAAY,EACZ,eAAe,EAEf,qBAAqB,EACrB,cAAc,EAEd,iBAAiB,EACjB,uBAAuB,EAEvB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAEL,KAAK,cAAc,
|
|
1
|
+
{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EACV,aAAa,EAKb,UAAU,EACV,yBAAyB,EACzB,UAAU,EACV,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,YAAY,EAEZ,wBAAwB,EACxB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,6BAA6B,EAC7B,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EAErB,4BAA4B,EAE5B,QAAQ,EACR,YAAY,EACZ,eAAe,EAEf,qBAAqB,EACrB,cAAc,EAEd,iBAAiB,EACjB,uBAAuB,EAEvB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAEL,KAAK,cAAc,EAQpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAsB,MAAM,iBAAiB,CAAC;AAe3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAsDpE,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAiB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAgD7F,OAAO,EAQL,KAAK,yBAAyB,EAC/B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAEL,KAAK,YAAY,EAOlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,aAAa,EAAuC,MAAM,sBAAsB,CAAC;AA6B/F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,wDAAwD;IACxD,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,SAAS,aAAa,EAAE,CAAC;IAChD;;oEAEgE;IAChE,aAAa,CAAC,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;IAC9C,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE;qEACiE;IACjE,kBAAkB,CAAC,EAAE,MAAM,SAAS,6BAA6B,EAAE,CAAC;IACpE,iEAAiE;IACjE,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,6BAA6B,KAAK,IAAI,CAAC;IACxE;sFACkF;IAClF,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzE;;2DAEuD;IACvD,aAAa,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC5C;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACxE,4EAA4E;IAC5E,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;kFAC8E;IAC9E,wBAAwB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf;;mDAE+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;iCAC6B;IAC7B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mFAAmF;IACnF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;qDAEiD;IACjD,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,sEAAsE;IACtE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;2CAEuC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;0DAGsD;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kEAAkE;IAClE,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;6DACyD;IACzD,yBAAyB,CAAC,EAAE,MAAM,IAAI,CAAC;IACvC,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;;kEAI8D;IAC9D,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,sFAAsF;IACtF,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kGAAkG;IAClG,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;qFACiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;2EAGuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IACrD;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;8DAE0D;IAC1D,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACjF,sFAAsF;IACtF;4EACwE;IACxE,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KACtB,IAAI,CAAC;IACV;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;+EAC2E;IAC3E,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,KAAK,IAAI,CAAC;IACxF,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,gFAAgF;IAChF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,oFAAoF;IACpF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAC/C,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/E;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,yBAAyB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,mFAAmF;IACnF,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;yBAEqB;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,SAAS,EAAE,YAAY,CAAC;IACxB,kEAAkE;IAClE,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;gCAE4B;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,sFAAsF;AACtF,UAAU,oBAAoB;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,4BAA4B,CAAC;IACjD;0CACsC;IACtC,eAAe,EAAE,4BAA4B,CAAC;IAC9C,mDAAmD;IACnD,qBAAqB,EAAE,4BAA4B,CAAC;IACpD;4FACwF;IACxF,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC;IACpC,gFAAgF;IAChF,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACxC;qFACiF;IACjF,iBAAiB,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC;IACtD;;yDAEqD;IACrD,cAAc,EAAE;QACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAClC,KAAK,EAAE,eAAe,GAAG,iBAAiB,GAAG,IAAI,CAAC;KACnD,CAAC;IACF;gFAC4E;IAC5E,kBAAkB,EAAE,OAAO,CAAC;IAC5B;oCACgC;IAChC,mBAAmB,EAAE,OAAO,CAAC;IAC7B;+EAC2E;IAC3E,wBAAwB,EAAE,OAAO,CAAC;IAClC;;6CAEyC;IACzC,mBAAmB,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAClE;;2BAEuB;IACvB,uBAAuB,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IAC1E;;qEAEiE;IACjE,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;0DAGsD;IACtD,8BAA8B,EAAE,OAAO,CAAC;IACxC,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACvC;AAQD,qBAAa,YAAY;IAaX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAZjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqC;IACzE;;;qFAGiF;IACjF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA4C;IAClF;;kDAE8C;IAC9C,MAAM,CAAC,QAAQ,CAAC,sBAAsB,QAAQ;IAE9C,YAA6B,IAAI,EAAE,gBAAgB,EAElD;IAED,2EAA2E;IACrE,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAOlE;IAEK,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA2GtD;YAEa,gBAAgB;IAqB9B;;;;;;OAMG;YACW,6BAA6B;YAsD7B,4BAA4B;IAgB1C,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,aAAa;IAOrB,oGAAoG;IACpG,OAAO,CAAC,eAAe;IAIvB;;;;OAIG;IACH;wFACoF;IACpF,wDAAwD;IACxD,OAAO,CAAC,gBAAgB;IAIxB;6EACyE;IACzE,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,UAAU;YAIJ,iBAAiB;IAqC/B;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAetB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAWzB;IAEH;;;;;OAKG;IACH,OAAO,CAAC,eAAe;YAQT,wBAAwB;IA6iBtC;;;;OAIG;IACH,OAAO,CAAC,SAAS;IA6HjB;;8EAE0E;IAC1E,OAAO,CAAC,eAAe;IA8CvB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAyB5B;;;;;;OAMG;YACW,kBAAkB;IA0ChC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,kBAAkB;IAmB1B,gGAAgG;IAChG,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH;;;;;;;;;OASG;IACH;;;;6DAIyD;IACzD,OAAO,CAAC,iBAAiB;IAsCzB,OAAO,CAAC,gBAAgB;IA0CxB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,cAAc;IAuEtB;;;;;;;;OAQG;YACW,iBAAiB;IA4G/B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;YAgBR,sBAAsB;IA4kBpC,OAAO,CAAC,qBAAqB;IAwB7B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,wBAAwB;YAiBlB,OAAO;IAm9CrB,oGAAoG;IACpG,OAAO,CAAC,iBAAiB;IA+BzB,uGAAuG;IAEvG;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;YAaN,UAAU;IAsKxB,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,2BAA2B;YAoBrB,cAAc;IA0hC5B,2EAA2E;IAC3E,OAAO,CAAC,kBAAkB;IAkF1B,sFAAsF;IAChF,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAEhF;YACa,OAAO;IAiVrB;;6EAEyE;IACzE,OAAO,CAAC,WAAW;IAmBnB,sFAAsF;YACxE,MAAM;IAkBpB;gDAC4C;YAC9B,WAAW;IAmBzB,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,qBAAqB;IAgB7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;YAiEb,iBAAiB;CAwzChC"}
|