@clossys/launcher 0.3.0 → 0.4.0

package/dist/apply-store.js

@@ -0,0 +1,625 @@
+// The hub's two apply stores (issue #1178): every repository change set (kept
+// append-only, bar the body hash of a set, below) and every apply bundle (the newest computation replacing the
+// last under one digest) this hub has computed, kept by digest under
+// clossys/.state/apply/ so a later step (the ledger, an approval, a resumed
+// apply) can read back the exact document a digest names instead of trusting
+// whatever is passed to it in memory.
+//
+// Both stores are content-addressed: a file's name is its document's own
+// digest. The change-set store is append-only: a name is only ever bound to
+// the first bytes stored under it, and writing over it with different bytes
+// is refused rather than silently replacing history a ledger or an approval
+// may already cite. The bundle store is not, by design (RFC 12.2, 12.3 and
+// 12.7, issue #1693): a bundle's digest covers the plan digest and the
+// change-set digests only, not its authorization, clock, mode or verdicts, so
+// a rerun of `plan` over an unchanged hub yields the same digest with newer
+// bytes. Storing a bundle under a digest that already names a file replaces
+// that file atomically with the newest computation; only that one name is
+// touched, and superseded computations are not recorded. Admission reads a
+// stored bundle for its digest, its plan digest and the change sets it holds,
+// never for its authorization or verdicts, which it re-checks at apply time.
+// A planned bundle is the exception to that replacement (issue #1708): a report
+// never replaces a stored bundle that verifies as planned under the same
+// digest, because a planned file records approvals a report does not, and a
+// rerun with less (an approval no longer committed, an uncommitted plan edit)
+// must not quietly erase them. The refusal names no path. A planned bundle
+// replaces a report or a planned one, and a file that does not verify (any
+// bytes that do not read back as a valid bundle of that digest) is replaced by
+// either, since it protects nothing. Writing the same bytes again is a no-op
+// in both stores. The change-set store has one exception to append-only (issue
+// #1716): bindChangeSetBody records the hash of the pull request body rendered
+// for a stored set as that set's `pullRequest.bodySha256`, the one member the
+// digest excludes, replacing that one file atomically. It never rebinds: a set
+// already bound to another hash is refused, and the same hash is a no-op.
+// Binds of one set are serialised by a per-digest lock file, taken exclusively
+// and never waited for or broken (issue #1738), and a set that changed or was
+// removed while it was being bound is refused, never replaced or recreated.
+// A stored file's recomputed digest proves its integrity, not
+// its provenance: anyone who can write the hub directory can add a set that
+// verifies, the same way anyone who can write a git object store can add a
+// commit. A read never trusts a file
+// merely because it parses: the document must validate against its contract,
+// recompute to the digest the file name claims, and (for a change set) to
+// the digest the document itself carries -- so a renamed or hand-edited file
+// reads as absent rather than as something it no longer is.
+//
+// Every store directory segment, from the hub root down to change-sets/ or
+// bundles/, is walked one lstat at a time (issue #1545 fix 5): a symbolic
+// link anywhere in that chain is refused rather than followed, so a symlinked
+// clossys/, .state/, apply/, change-sets/ or bundles/ can never redirect a
+// write or a read outside the hub. Every filesystem error this module
+// rethrows, other than ENOENT (which a read turns into null, and a write
+// turns into directory creation), names only the failing operation and the
+// error's code -- never a path, digest or other value a `cause` might carry.
+//
+// This module does I/O (mkdirSync, open/write/link/rename/read on the hub
+// directory) and so must never be imported by plan-bundle.ts, which computes
+// change sets and bundles without touching a filesystem.
+import { randomBytes } from "node:crypto";
+import { closeSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, writeSync } from "node:fs";
+import { isAbsolute, join, relative, sep } from "node:path";
+import { bundleDigest, changeSetDigest } from "./change-set-digest.js";
+import { validateApplyBundle, validateRepositoryChangeSet } from "./change-set-contract.js";
+import { readContractDocument } from "./generated/contract-schema.generated.js";
+/** Where every repository change set this hub has computed is kept, one file per digest, relative to the hub root. */
+export const CHANGE_SET_STORE_REL = "clossys/.state/apply/change-sets";
+/** Where every apply bundle this hub has computed is kept, one file per digest, relative to the hub root. */
+export const BUNDLE_STORE_REL = "clossys/.state/apply/bundles";
+/** A digest as every store file is named for: `sha256:` and exactly 64 lowercase hex digits. */
+const DIGEST_SHAPE = /^sha256:[0-9a-f]{64}$/u;
+/** Throws before any path is built from `digest`, naming no value: only a caller that already holds a well-shaped digest may reach the store. */
+function assertDigestShape(digest) {
+    if (!DIGEST_SHAPE.test(digest))
+        throw new TypeError("a stored digest must match sha256: followed by exactly 64 lowercase hex digits");
+}
+/** The file name a digest is stored under: its 64 hex digits, with no `sha256:` prefix or colon. */
+function digestFileName(digest) {
+    return `${digest.slice("sha256:".length)}.json`;
+}
+/** A document's bytes as every store file holds them: two-space JSON with a final newline. */
+function serializeStoredDocument(value) {
+    return Buffer.from(`${JSON.stringify(value, null, 2)}\n`, "utf8");
+}
+/** Wraps a filesystem error, other than ENOENT (handled by each caller), so its message names only the failing operation and the
+ * error's code -- never a path, digest or other value; the original error is never attached as `cause`. */
+function wrapFsError(operation, cause) {
+    const code = typeof cause === "object" && cause !== null && "code" in cause ? String(cause.code) : "unknown";
+    return new Error(`${operation} failed (${code})`);
+}
+/**
+ * `hubDirectory` must be an absolute path and its own real path: no symbolic
+ * link anywhere in it. Every store operation checks this first, before
+ * building any path under it.
+ */
+function assertHubDirectory(hubDirectory) {
+    if (!isAbsolute(hubDirectory))
+        throw new TypeError("hubDirectory must be an absolute path");
+    let real;
+    try {
+        real = realpathSync(hubDirectory);
+    }
+    catch (cause) {
+        throw wrapFsError("hub directory resolve", cause);
+    }
+    if (real !== hubDirectory)
+        throw new TypeError("hubDirectory must be its own real path, with no symbolic link in it");
+}
+/**
+ * Walks every path segment from `hubDirectory` down to `directory`
+ * (hubDirectory joined with a store's relative path), lstat-ing each one so a
+ * symbolic link anywhere in the chain is refused rather than followed. On a
+ * write (`mode: "write"`), a missing segment is created with a non-recursive
+ * `mkdirSync` and lstat-ed again; on a read (`mode: "read"`), a missing
+ * segment means the file being read is absent, and this returns `false`. A
+ * segment that is a symbolic link, or exists but is not a directory, throws a
+ * TypeError naming no path. Any other filesystem error is rethrown wrapped,
+ * naming only the operation and its code.
+ */
+function ensureRealDirectory(hubDirectory, directory, mode) {
+    const relativePath = relative(hubDirectory, directory);
+    const segments = relativePath === "" ? [] : relativePath.split(sep);
+    let current = hubDirectory;
+    for (const segment of segments) {
+        current = join(current, segment);
+        let info;
+        try {
+            info = lstatSync(current);
+        }
+        catch (cause) {
+            if (cause.code !== "ENOENT")
+                throw wrapFsError("hub store directory stat", cause);
+            if (mode === "read")
+                return false;
+            try {
+                mkdirSync(current);
+            }
+            catch (createCause) {
+                if (createCause.code !== "EEXIST")
+                    throw wrapFsError("hub store directory create", createCause);
+            }
+            try {
+                info = lstatSync(current);
+            }
+            catch (recheckCause) {
+                throw wrapFsError("hub store directory create", recheckCause);
+            }
+        }
+        if (!info.isDirectory())
+            throw new TypeError("a hub store directory segment is a symbolic link or not a directory");
+    }
+    return true;
+}
+/**
+ * Writes `bytes` under `fileName` in `hubDirectory`/`storeRel` without ever
+ * replacing an existing file: the bytes go to a temporary file in the same
+ * directory (created exclusively, flushed to disk), which is then
+ * hard-linked to the final name, so a name already taken fails the link with
+ * EEXIST rather than overwriting it. On EEXIST the existing file is
+ * lstat-ed -- a symbolic link there is refused -- then re-read: identical
+ * bytes is a no-op; when `equivalent` says the existing and incoming
+ * documents validate to the same digest the name claims, that is a no-op
+ * too; and any other different bytes is refused. The temporary file is
+ * always removed. Every store directory segment is a real directory, never a
+ * symbolic link (see `ensureRealDirectory()`). Returns the final path.
+ */
+/** When both buffers are valid stored change sets for `digest`, true; when existing bytes do not validate to that digest, false. */
+function storedChangeSetsShareDigest(existing, incoming, digest) {
+    const digestOf = (buf) => {
+        try {
+            const document = readContractDocument(buf);
+            if (!validateRepositoryChangeSet(document).valid)
+                return null;
+            const set = document;
+            const recomputed = changeSetDigest(set);
+            if (recomputed !== set.changeSetDigest || recomputed !== digest)
+                return null;
+            return recomputed;
+        }
+        catch {
+            return null;
+        }
+    };
+    const left = digestOf(existing);
+    const right = digestOf(incoming);
+    return left !== null && right !== null && left === right;
+}
+function writeAppendOnly(hubDirectory, storeRel, fileName, bytes, equivalent) {
+    assertHubDirectory(hubDirectory);
+    const directory = join(hubDirectory, storeRel);
+    ensureRealDirectory(hubDirectory, directory, "write");
+    const finalPath = join(directory, fileName);
+    const temporaryPath = join(directory, `.${fileName}.${randomBytes(8).toString("hex")}.tmp`);
+    let descriptor;
+    try {
+        try {
+            descriptor = openSync(temporaryPath, "wx", 0o644);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+        let written = 0;
+        try {
+            while (written < bytes.length)
+                written += writeSync(descriptor, bytes, written, bytes.length - written);
+            fsyncSync(descriptor);
+            closeSync(descriptor);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+        descriptor = undefined;
+        try {
+            linkSync(temporaryPath, finalPath);
+        }
+        catch (cause) {
+            if (cause.code !== "EEXIST")
+                throw wrapFsError("hub store write", cause);
+            let info;
+            try {
+                info = lstatSync(finalPath);
+            }
+            catch (statCause) {
+                throw wrapFsError("hub store write", statCause);
+            }
+            if (!info.isFile())
+                throw new TypeError("a hub store file name is occupied by a symbolic link or a non-regular file");
+            let existing;
+            try {
+                existing = readFileSync(finalPath);
+            }
+            catch (readCause) {
+                throw wrapFsError("hub store write", readCause);
+            }
+            if (!existing.equals(bytes) && !equivalent?.(existing, bytes)) {
+                throw new TypeError("this digest already names a stored document with different bytes; the store is append-only");
+            }
+        }
+    }
+    finally {
+        if (descriptor !== undefined) {
+            try {
+                closeSync(descriptor);
+            }
+            catch {
+                // Already failing; the original error is the one reported.
+            }
+        }
+        try {
+            rmSync(temporaryPath, { force: true });
+        }
+        catch {
+            // Best-effort cleanup; the original error (or success) is what is reported.
+        }
+    }
+    return finalPath;
+}
+/**
+ * Stores `bytes` under `fileName` in `hubDirectory`/`storeRel`, replacing
+ * whatever regular file already holds that one name (unless `refuseOver` says
+ * the file as it is now must not be replaced, which throws its message; with
+ * `refuseOver.whenMissing` a name that holds no file is refused the same way
+ * instead of being created, for a caller that read the file first and must not
+ * recreate one removed since): the bytes go to a
+ * temporary file in the same real directory (created exclusively, flushed to
+ * disk), which is then renamed over the final name, so a reader sees the old
+ * file or the new one and never a partial file, and an interrupted write
+ * leaves at most a temporary file under another name. Identical existing
+ * bytes are a no-op and write nothing. A name held by a symbolic link or any
+ * other non-regular file is refused before anything is written. Every store
+ * directory segment is a real directory, never a symbolic link (see
+ * `ensureRealDirectory()`). The temporary file is always removed. Returns the
+ * final path.
+ */
+function writeReplacing(hubDirectory, storeRel, fileName, bytes, refuseOver) {
+    assertHubDirectory(hubDirectory);
+    const directory = join(hubDirectory, storeRel);
+    ensureRealDirectory(hubDirectory, directory, "write");
+    const finalPath = join(directory, fileName);
+    let occupied = true;
+    try {
+        const info = lstatSync(finalPath);
+        if (!info.isFile())
+            throw new TypeError("a hub store file name is occupied by a symbolic link or a non-regular file");
+    }
+    catch (cause) {
+        if (cause instanceof TypeError)
+            throw cause;
+        if (cause.code !== "ENOENT")
+            throw wrapFsError("hub store write", cause);
+        if (refuseOver?.whenMissing === true)
+            throw new TypeError(refuseOver.message);
+        occupied = false;
+    }
+    if (occupied) {
+        let existing;
+        try {
+            existing = readFileSync(finalPath);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+        if (refuseOver?.when(existing) === true)
+            throw new TypeError(refuseOver.message);
+        if (existing.equals(bytes))
+            return finalPath;
+    }
+    const temporaryPath = join(directory, `.${fileName}.${randomBytes(8).toString("hex")}.tmp`);
+    let descriptor;
+    try {
+        try {
+            descriptor = openSync(temporaryPath, "wx", 0o644);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+        let written = 0;
+        try {
+            while (written < bytes.length)
+                written += writeSync(descriptor, bytes, written, bytes.length - written);
+            fsyncSync(descriptor);
+            closeSync(descriptor);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+        descriptor = undefined;
+        try {
+            renameSync(temporaryPath, finalPath);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+    }
+    finally {
+        if (descriptor !== undefined) {
+            try {
+                closeSync(descriptor);
+            }
+            catch {
+                // Already failing; the original error is the one reported.
+            }
+        }
+        try {
+            rmSync(temporaryPath, { force: true });
+        }
+        catch {
+            // Best-effort cleanup; the original error (or success) is what is reported.
+        }
+    }
+    return finalPath;
+}
+/**
+ * Reads and re-reads bytes stored at `hubDirectory`/`storeRel`/`fileName`,
+ * strictly: a missing store directory or a missing file reads as `null`, and
+ * bytes that are not exactly one strict-JSON value also read as `null`
+ * (never thrown), because a store read never trusts a file merely because
+ * something is there. Every store directory segment down to `storeRel` is
+ * checked to be a real directory, never a symbolic link (see
+ * `ensureRealDirectory()`); a symbolic link found there throws rather than
+ * being followed.
+ */
+function readStoredBytes(hubDirectory, storeRel, fileName) {
+    assertHubDirectory(hubDirectory);
+    const directory = join(hubDirectory, storeRel);
+    if (!ensureRealDirectory(hubDirectory, directory, "read"))
+        return null;
+    const path = join(directory, fileName);
+    let bytes;
+    try {
+        bytes = readFileSync(path);
+    }
+    catch (cause) {
+        if (cause.code === "ENOENT")
+            return null;
+        throw wrapFsError("hub store read", cause);
+    }
+    try {
+        return readContractDocument(bytes);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Stores `set` under `hubDirectory`/CHANGE_SET_STORE_REL, named for its own
+ * `changeSetDigest`. Throws a TypeError, naming no path, id or value, when
+ * the set does not validate against the change-set contract, when its
+ * `changeSetDigest` is not `changeSetDigest(set)`, or when that name is
+ * already taken by different bytes (the store is append-only). Storing the
+ * same set again, byte for byte, is a no-op; so is storing another document
+ * that validates to the same changeSetDigest. Returns the file's path.
+ */
+export function storeChangeSet(hubDirectory, set) {
+    const validation = validateRepositoryChangeSet(set);
+    if (!validation.valid)
+        throw new TypeError(`a change set must validate against its contract before it can be stored: ${validation.reason}`);
+    if (set.changeSetDigest !== changeSetDigest(set))
+        throw new TypeError("a change set's changeSetDigest must equal changeSetDigest(set) before it can be stored");
+    assertDigestShape(set.changeSetDigest);
+    const digest = set.changeSetDigest;
+    return writeAppendOnly(hubDirectory, CHANGE_SET_STORE_REL, digestFileName(digest), serializeStoredDocument(set), (existing, incoming) => storedChangeSetsShareDigest(existing, incoming, digest));
+}
+/** Thrown by bindChangeSetBody when the stored set is already bound to another body. Names no path, digest or hash. */
+export class BodyBoundError extends TypeError {
+    constructor() {
+        super("this stored change set is already bound to another pull request body");
+    }
+}
+/**
+ * Records `bodySha256`, the hash of the pull request body rendered for the
+ * change set stored under `digest` (issue #1716), as that set's
+ * `pullRequest.bodySha256` -- the one member it changes. The digest excludes
+ * that member, so the file's name and every digest stay as they were. The set
+ * is read here, from the store, and must verify exactly as readStoredChangeSet
+ * verifies it; a set that is not stored, or does not verify, is a TypeError.
+ * A set already bound to the same hash is a no-op that writes nothing; one
+ * bound to another hash throws BodyBoundError and is left as it was: a bound
+ * body is never rebound, and storeChangeSet never replaces a stored set, so it
+ * cannot unbind one either. The write replaces only that one file, atomically
+ * (a temporary file in the same directory, renamed over the name), and is
+ * refused when the file is not the bytes that were read, a symbolic link or not
+ * a regular file, or when a store directory segment is a symbolic link. Every
+ * error names no path, digest or hash, and no other file is touched. Returns
+ * the file's path.
+ *
+ * Two binds of one set are serialised by a per-digest lock (issue #1738): a
+ * dot-prefixed file in the change-sets directory, created exclusively before
+ * the set is first read and removed once this call is done, only by the call
+ * that created it. A bind that finds the lock already held throws a TypeError
+ * and changes nothing, so of two binds with different hashes exactly one
+ * renames; it never waits and never breaks a lock. A crash mid-bind leaves the
+ * lock, and later binds of that set then refuse (fails closed). A set removed
+ * after this call read it is refused rather than written again already bound.
+ */
+export function bindChangeSetBody(hubDirectory, digest, bodySha256) {
+    assertDigestShape(digest);
+    if (typeof bodySha256 !== "string" || !DIGEST_SHAPE.test(bodySha256))
+        throw new TypeError("a body hash must match sha256: followed by exactly 64 lowercase hex digits");
+    assertHubDirectory(hubDirectory);
+    const directory = join(hubDirectory, CHANGE_SET_STORE_REL);
+    const absent = () => new TypeError("no verified change set is stored under this digest");
+    if (!ensureRealDirectory(hubDirectory, directory, "read"))
+        throw absent();
+    const fileName = digestFileName(digest);
+    const path = join(directory, fileName);
+    const lockPath = join(directory, `.${fileName}.bind.lock`);
+    let lockDescriptor;
+    try {
+        lockDescriptor = openSync(lockPath, "wx", 0o600);
+    }
+    catch (cause) {
+        if (cause.code === "EEXIST")
+            throw new TypeError("this stored change set is being bound by another call, or an earlier bind of it did not finish");
+        throw wrapFsError("hub store write", cause);
+    }
+    try {
+        try {
+            closeSync(lockDescriptor);
+        }
+        catch (cause) {
+            throw wrapFsError("hub store write", cause);
+        }
+        return bindLocked(hubDirectory, digest, bodySha256, directory, fileName, path, absent);
+    }
+    finally {
+        try {
+            rmSync(lockPath, { force: true });
+        }
+        catch {
+            // Best-effort; a lock left behind makes later binds of this set refuse, which fails closed.
+        }
+    }
+}
+/** The body of bindChangeSetBody once the per-digest lock is held: read, verify, and replace the one file. */
+function bindLocked(hubDirectory, digest, bodySha256, directory, fileName, path, absent) {
+    let info;
+    try {
+        info = lstatSync(path);
+    }
+    catch (cause) {
+        if (cause.code === "ENOENT")
+            throw absent();
+        throw wrapFsError("hub store read", cause);
+    }
+    if (!info.isFile())
+        throw new TypeError("a hub store file name is occupied by a symbolic link or a non-regular file");
+    let existing;
+    try {
+        existing = readFileSync(path);
+    }
+    catch (cause) {
+        throw wrapFsError("hub store read", cause);
+    }
+    let document;
+    try {
+        document = readContractDocument(existing);
+    }
+    catch {
+        throw absent();
+    }
+    if (!validateRepositoryChangeSet(document).valid)
+        throw absent();
+    const set = document;
+    const recomputed = changeSetDigest(set);
+    if (recomputed !== set.changeSetDigest || recomputed !== digest)
+        throw absent();
+    const current = set.pullRequest.bodySha256;
+    if (current === bodySha256)
+        return path;
+    if (current !== undefined)
+        throw new BodyBoundError();
+    const next = { ...set, pullRequest: { ...set.pullRequest, bodySha256 } };
+    if (!validateRepositoryChangeSet(next).valid || changeSetDigest(next) !== digest)
+        throw new TypeError("a change set must still validate, under its own digest, once its body is bound");
+    return writeReplacing(hubDirectory, CHANGE_SET_STORE_REL, fileName, serializeStoredDocument(next), {
+        when: (now) => !now.equals(existing),
+        message: "the stored change set changed while its body was being bound",
+        whenMissing: true,
+    });
+}
+/**
+ * Stores `bundle` under `hubDirectory`/BUNDLE_STORE_REL, named for its own
+ * `bundleDigest`. Throws a TypeError, naming no path, id or value, when the
+ * bundle does not validate against the apply-bundle contract, when the
+ * digest is malformed, or when a store directory segment or the file name is
+ * a symbolic link; nothing is written or replaced in those cases. The digest
+ * excludes the authorization, the clock, the mode and the verdicts (RFC
+ * 12.3), so a bundle whose digest already names a stored file replaces that
+ * one file atomically with these bytes, the newest computation; the same
+ * bytes again are a no-op. A report bundle never replaces a stored file that
+ * verifies as a planned bundle of this digest (a TypeError, naming no path);
+ * a planned bundle replaces anything. A bundle with any other digest never
+ * touches another file. Superseded computations are not recorded. Returns the
+ * file's path.
+ */
+export function storeApplyBundle(hubDirectory, bundle) {
+    const validation = validateApplyBundle(bundle);
+    if (!validation.valid)
+        throw new TypeError(`an apply bundle must validate against its contract before it can be stored: ${validation.reason}`);
+    assertDigestShape(bundle.bundleDigest);
+    const digest = bundle.bundleDigest;
+    return writeReplacing(hubDirectory, BUNDLE_STORE_REL, digestFileName(digest), serializeStoredDocument(bundle), bundle.mode === "report" ? { when: (existing) => verifiesAsPlanned(existing, digest), message: "a stored planned apply bundle is never replaced by a report of the same digest" } : undefined);
+}
+/** Whether `bytes` read back as a valid, digest-verified apply bundle of `digest` whose mode is planned: exactly what a read would return. */
+function verifiesAsPlanned(bytes, digest) {
+    let document;
+    try {
+        document = readContractDocument(bytes);
+    }
+    catch {
+        return false;
+    }
+    return verifiedBundle(document, digest)?.mode === "planned";
+}
+/** The document as a bundle when it validates and its digest, recomputed from the plan digest and each computed repository, is `digest` and its own. */
+function verifiedBundle(document, digest) {
+    if (!validateApplyBundle(document).valid)
+        return null;
+    const bundle = document;
+    const computed = bundle.repositories.flatMap((entry) => "changeSet" in entry ? [{ id: entry.id, changeSetDigest: entry.changeSet }] : []);
+    const recomputed = bundleDigest(bundle.plan.digest, computed);
+    return recomputed === bundle.bundleDigest && recomputed === digest ? bundle : null;
+}
+/**
+ * Reads the change set stored for `digest` under `hubDirectory`/CHANGE_SET_STORE_REL.
+ * `digest` must match `sha256:` and 64 lowercase hex digits before any path
+ * is built from it; a malformed digest throws a TypeError naming no value,
+ * before touching the filesystem. Otherwise: a missing file, bytes that are
+ * not strict JSON, a document that does not validate against the change-set
+ * contract, or one whose `changeSetDigest` -- recomputed and read from the
+ * document -- does not equal both `digest` and the document's own
+ * `changeSetDigest`, all read as `null`. A file can therefore never be read
+ * back under a name, or with content, other than its own digest.
+ */
+/**
+ * Every change set stored under `hubDirectory`/CHANGE_SET_STORE_REL whose file
+ * name is 64 lowercase hex digits and `.json`, in directory listing order.
+ * Entries that do not read back as a valid stored set are omitted.
+ */
+export function listStoredChangeSets(hubDirectory) {
+    assertHubDirectory(hubDirectory);
+    const directory = join(hubDirectory, CHANGE_SET_STORE_REL);
+    if (!ensureRealDirectory(hubDirectory, directory, "read"))
+        return [];
+    const sets = [];
+    for (const name of readdirSync(directory)) {
+        if (!/^[0-9a-f]{64}\.json$/u.test(name))
+            continue;
+        const set = readStoredChangeSet(hubDirectory, `sha256:${name.slice(0, 64)}`);
+        if (set !== null)
+            sets.push(set);
+    }
+    return sets;
+}
+export function readStoredChangeSet(hubDirectory, digest) {
+    assertDigestShape(digest);
+    const document = readStoredBytes(hubDirectory, CHANGE_SET_STORE_REL, digestFileName(digest));
+    if (document === null)
+        return null;
+    if (!validateRepositoryChangeSet(document).valid)
+        return null;
+    const set = document;
+    const recomputed = changeSetDigest(set);
+    if (recomputed !== set.changeSetDigest || recomputed !== digest)
+        return null;
+    return set;
+}
+/**
+ * Reads the apply bundle stored for `digest` under `hubDirectory`/BUNDLE_STORE_REL.
+ * `digest` must match `sha256:` and 64 lowercase hex digits before any path
+ * is built from it; a malformed digest throws a TypeError naming no value,
+ * before touching the filesystem. Otherwise: a missing file, bytes that are
+ * not strict JSON, a document that does not validate against the
+ * apply-bundle contract, or one whose bundle digest -- recomputed from its
+ * `plan.digest` and each repository that carries a change set, in the same
+ * order applyBundleRuleViolations' A2 rule computes it -- does not equal
+ * both `digest` and the document's own `bundleDigest`, all read as `null`.
+ */
+export function readStoredApplyBundle(hubDirectory, digest) {
+    assertDigestShape(digest);
+    const document = readStoredBytes(hubDirectory, BUNDLE_STORE_REL, digestFileName(digest));
+    if (document === null)
+        return null;
+    return verifiedBundle(document, digest);
+}
+//# sourceMappingURL=apply-store.js.map

package/dist/apply-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-store.js","sourceRoot":"","sources":["../src/apply-store.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+GAA+G;AAC/G,qEAAqE;AACrE,4EAA4E;AAC5E,6EAA6E;AAC7E,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,yEAAyE;AACzE,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,8DAA8D;AAC9D,4EAA4E;AAC5E,2EAA2E;AAC3E,qCAAqC;AACrC,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,4DAA4D;AAC5D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,yEAAyE;AACzE,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,yDAAyD;AAEzD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjK,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAE5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAEhF,sHAAsH;AACtH,MAAM,CAAC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEvE,6GAA6G;AAC7G,MAAM,CAAC,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AAE/D,gGAAgG;AAChG,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C,iJAAiJ;AACjJ,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gFAAgF,CAAC,CAAC;AACxI,CAAC;AAED,oGAAoG;AACpG,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;AAClD,CAAC;AAED,8FAA8F;AAC9F,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED;2GAC2G;AAC3G,SAAS,WAAW,CAAC,SAAiB,EAAE,KAAc;IACpD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxI,OAAO,IAAI,KAAK,CAAC,GAAG,SAAS,YAAY,IAAI,GAAG,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC5F,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;AACxH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,YAAoB,EAAE,SAAiB,EAAE,IAAsB;IAC1F,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,OAAO,GAAG,YAAY,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,WAAW,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC7G,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAClC,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,IAAK,WAAqC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,WAAW,CAAC,4BAA4B,EAAE,WAAW,CAAC,CAAC;YAC7H,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,oIAAoI;AACpI,SAAS,2BAA2B,CAAC,QAAgB,EAAE,QAAgB,EAAE,MAAc;IACrF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAiB,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9D,MAAM,GAAG,GAAG,QAA+B,CAAC;YAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,GAAG,CAAC,eAAe,IAAI,UAAU,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC7E,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAa,EAAE,UAA4D;IAC5J,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5F,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,OAAO,GAAG,KAAK,CAAC,MAAM;gBAAE,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YACxG,SAAS,CAAC,UAAU,CAAC,CAAC;YACtB,SAAS,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,UAAU,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACpG,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,MAAM,WAAW,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;YACtH,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,MAAM,WAAW,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,SAAS,CAAC,4FAA4F,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,cAAc,CAAC,YAAoB,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAa,EAAE,UAAuH;IACtN,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;IACxH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACpG,IAAI,UAAU,EAAE,WAAW,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9E,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;IAC/C,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5F,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,OAAO,GAAG,KAAK,CAAC,MAAM;gBAAE,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YACxG,SAAS,CAAC,UAAU,CAAC,CAAC;YACtB,SAAS,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,UAAU,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,YAAoB,EAAE,QAAgB,EAAE,QAAgB;IAC/E,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,WAAW,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,GAAwB;IAC3E,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,4EAA4E,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5I,IAAI,GAAG,CAAC,eAAe,KAAK,eAAe,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wFAAwF,CAAC,CAAC;IAChK,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,OAAO,eAAe,CACpB,YAAY,EACZ,oBAAoB,EACpB,cAAc,CAAC,MAAM,CAAC,EACtB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAChF,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,MAAM,OAAO,cAAe,SAAQ,SAAS;IAC3C;QACE,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAChF,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,MAAc,EAAE,UAAkB;IACxF,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;IACxK,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAc,EAAE,CAAC,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IACpG,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC;QAAE,MAAM,MAAM,EAAE,CAAC;IAC1E,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,YAAY,CAAC,CAAC;IAC3D,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,gGAAgG,CAAC,CAAC;QAC9K,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC;YACH,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,4FAA4F;QAC9F,CAAC;IACH,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,SAAS,UAAU,CAAC,YAAoB,EAAE,MAAc,EAAE,UAAkB,EAAE,SAAiB,EAAE,QAAgB,EAAE,IAAY,EAAE,MAAuB;IACtJ,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,MAAM,EAAE,CAAC;QACvE,MAAM,WAAW,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;IACtH,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,KAAK;QAAE,MAAM,MAAM,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,QAA+B,CAAC;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,GAAG,CAAC,eAAe,IAAI,UAAU,KAAK,MAAM;QAAE,MAAM,MAAM,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC;IAC3C,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,cAAc,EAAE,CAAC;IACtD,MAAM,IAAI,GAAwB,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC;IAC9F,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,gFAAgF,CAAC,CAAC;IACxL,OAAO,cAAc,CAAC,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE;QACjG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;QACpC,OAAO,EAAE,8DAA8D;QACvE,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB,EAAE,MAAmB;IACxE,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,+EAA+E,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/I,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;IACnC,OAAO,cAAc,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,gFAAgF,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAChT,CAAC;AAED,8IAA8I;AAC9I,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAc;IACtD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC;AAC9D,CAAC;AAED,wJAAwJ;AACxJ,SAAS,cAAc,CAAC,QAAiB,EAAE,MAAc;IACvD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,QAAuB,CAAC;IACvC,MAAM,QAAQ,GAAgE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAA4B,EAAE,EAAE,CACzI,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACjF,CAAC;IACF,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,UAAU,KAAK,MAAM,CAAC,YAAY,IAAI,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED;;;;;;;;;;GAUG;AACH;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,IAAI,GAA0B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,MAAM,GAAG,GAAG,mBAAmB,CAAC,YAAY,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,MAAc;IACtE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,EAAE,oBAAoB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,QAA+B,CAAC;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,GAAG,CAAC,eAAe,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAoB,EAAE,MAAc;IACxE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC"}