@clossys/launcher 0.3.1 → 0.4.0

package/dist/dry-materialize.js

@@ -0,0 +1,330 @@
+// Dry materialization for `launcher-apply-plan plan` (issue #1178, RFC apply-approved-plan section 7, V6 and V9).
+//
+// The planner is pure and cannot regenerate a lockfile, so it reports every set that changes one as V6 indeterminate
+// (`lockfile-not-run`). This module runs the part it cannot: it writes the base commit's tree and the set's changes into a
+// temporary directory, regenerates the lockfile there with the same runner materialize uses, and, only when that passes,
+// runs the hub's provenance check (V9) on that same tree. It reads the clone through git plumbing at the base commit
+// (`ls-tree` and `cat-file`, see readCommittedFiles) and never writes it: no checkout, worktree, index or ref.
+//
+// Every ambiguity refuses. A rule is one of a fixed set of tokens and never carries tool output, a path, an id or a file
+// name. The temporary tree is a directory of its own under the real operating-system temporary directory, removed before
+// this returns, whatever happened. Nothing here changes a set, its digest or the bundle's digest: only the checks move.
+import { createHash } from "node:crypto";
+import { chmodSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, sep } from "node:path";
+import { canonicalOrder, contentDigest, lockfilePath, validateApplyBundle, validateRepositoryChangeSet, worstVerdict } from "./change-set-contract.js";
+import { JsonEditUnstableError, editJsonPointer } from "./key-editor.js";
+import { regenerateLockfile } from "./lockfile-regen.js";
+import { derivedLockfile, packagesForLockfile, provesReleaseAgeEditWith, refuseReservedSymlinks, removePath, resolveFileText, textsFromChangeSet, writeRegularFile, writeSymlink } from "./materialize.js";
+import { fold, readCommittedFiles } from "./observe-repository.js";
+import { checkSetProvenance } from "./provenance-gate.js";
+/** The rule the planner gives a set that changes a lockfile, and this module replaces. */
+export const LOCKFILE_NOT_RUN = "lockfile-not-run";
+/** The V9 rule of a set whose lockfile step did not pass: the provenance check is not run on a tree that is not the result. */
+export const LOCKFILE_NOT_REGENERATED = "lockfile-not-regenerated";
+/** The V6 rule of a repository whose dry tree could not be built or run, for any reason that is not one of the named ones. */
+export const DRY_TREE_FAILED = "dry-tree-failed";
+/** The V6 rule of a committed tree that is not safe to write: a path segment or a link that could reach outside the tree. */
+export const DRY_TREE_UNSAFE = "tree-unsafe";
+const TOKEN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+const TEMP_PREFIX = "launcher-dry-materialize-";
+const v6 = (verdict, rule) => ({ check: "V6", verdict, rule: TOKEN.test(rule) ? rule : DRY_TREE_FAILED });
+const V6_SATISFIED = { check: "V6", verdict: "satisfied" };
+const isWhole = (file) => !("derived" in file);
+/** The V6 check a materialize step's result is: its exit code 1 is violated, anything else indeterminate; its reason is a fixed id. */
+const fromStep = (step) => v6(step.exitCode === 1 ? "violated" : "indeterminate", step.reason ?? DRY_TREE_FAILED);
+// ---------------------------------------------------------------------------
+// the committed tree, before anything is written
+/** A path segment as a filesystem that folds case, normalization and format characters would read it. */
+const folded = (segment) => segment.normalize("NFKC").replace(/\p{Cf}/gu, "").toLowerCase();
+const CONTROL = /\p{Cc}/u;
+function segmentsSafe(path) {
+    if (path.length === 0 || CONTROL.test(path))
+        return false;
+    return path.split("/").every((segment) => {
+        const key = folded(segment);
+        return segment.length > 0 && key !== "" && key !== "." && key !== ".." && key !== ".git";
+    });
+}
+/**
+ * Whether a link's target stays inside the tree however the links along it resolve: relative, no empty segment, no `..` after a
+ * name, no more leading `..` than the directories above the link, and no `.git` segment.
+ */
+function linkStaysInside(path, target) {
+    if (target.length === 0 || CONTROL.test(target) || target.startsWith("/") || target.includes("\\"))
+        return false;
+    const parts = target.split("/");
+    let up = 0;
+    while (up < parts.length && parts[up] === "..")
+        up += 1;
+    if (up > path.split("/").length - 1)
+        return false;
+    return parts.slice(up).every((segment) => {
+        const key = folded(segment);
+        return segment.length > 0 && key !== ".." && key !== ".git";
+    });
+}
+/**
+ * Whether every path, and every link, of the committed tree is one the dry tree may hold. A filesystem that folds case or
+ * normalization reads two spellings as one name, so a link and a directory kept apart only by spelling would be the same entry
+ * there and a later write would go through the link. Every entry (link or file) is therefore folded as observeRepository folds
+ * it, and the tree is refused when that fold repeats, or is a proper prefix of another entry's fold.
+ */
+export function treeIsSafe(files) {
+    const seen = [new Set(), new Set()];
+    const entries = [];
+    for (const file of files) {
+        if (!segmentsSafe(file.path))
+            return false;
+        // A tree that keeps two paths apart only by case or normalization would be one path on a filesystem that folds them.
+        const keys = [file.path.normalize("NFC").toLowerCase(), fold(file.path)];
+        for (const [index, key] of keys.entries()) {
+            if (seen[index].has(key))
+                return false;
+            seen[index].add(key);
+        }
+        entries.push(fold(file.path));
+        if (file.mode === "120000" && !linkStaysInside(file.path, file.bytes.toString("utf8")))
+            return false;
+    }
+    const named = new Set(entries);
+    for (const entry of entries) {
+        const segments = entry.split("/");
+        for (let length = 1; length < segments.length; length += 1)
+            if (named.has(segments.slice(0, length).join("/")))
+                return false;
+    }
+    return true;
+}
+/** Whether `directory`'s real path is `root` or inside it. */
+function insideRoot(root, directory) {
+    const real = realpathSync(directory);
+    return real === root || real.startsWith(`${root}${sep}`);
+}
+/**
+ * Makes each directory of `relative` (a path inside `root`) one segment at a time, and throws when a segment already exists as
+ * anything but a real directory: nothing is created through a link, and nothing is created before the segment is looked at.
+ */
+function ensureDirectory(root, relative) {
+    let current = root;
+    if (relative === "")
+        return current;
+    for (const segment of relative.split("/")) {
+        current = join(current, segment);
+        let stat = null;
+        try {
+            stat = lstatSync(current);
+        }
+        catch (cause) {
+            if (cause.code !== "ENOENT")
+                throw cause;
+        }
+        if (stat === null)
+            mkdirSync(current);
+        else if (!stat.isDirectory())
+            throw new Error("a directory of the base tree is not a directory");
+    }
+    return current;
+}
+/**
+ * Writes the committed tree under `root` (a real path of its own): directories and regular files first and links last, so no
+ * write of a file goes through a link, and before each write the real path of its parent must be inside `root`.
+ */
+export function writeBaseTree(root, files) {
+    const ordered = [...files.filter((file) => file.mode !== "120000"), ...files.filter((file) => file.mode === "120000")];
+    for (const file of ordered) {
+        const path = join(root, file.path);
+        ensureDirectory(root, dirname(file.path) === "." ? "" : dirname(file.path));
+        if (!insideRoot(root, dirname(path)))
+            throw new Error("a path of the base tree resolves outside the temporary directory");
+        if (file.mode === "120000") {
+            symlinkSync(file.bytes.toString("utf8"), path);
+            continue;
+        }
+        writeFileSync(path, file.bytes, { flag: "wx" });
+        chmodSync(path, file.mode === "100755" ? 0o755 : 0o644);
+    }
+}
+// ---------------------------------------------------------------------------
+// one repository
+const digestOfBytes = (bytes) => contentDigest(bytes.toString("utf8"));
+const sha256Hex = (bytes) => createHash("sha256").update(bytes).digest("hex");
+/**
+ * V6 and V9 for a set that changes a lockfile, or null when it changes none. V6 is the result of writing the set into a
+ * temporary copy of the base tree and regenerating the lockfile there; V9 is run on that same copy, and only when V6 is
+ * satisfied. The ledger is not written: it is bound by an approval that does not exist yet, and nothing here reads it.
+ */
+export async function dryMaterialize(input, ports = {}) {
+    const { set } = input;
+    const lock = derivedLockfile(set);
+    if (lock === null)
+        return null;
+    const held = { root: null };
+    try {
+        const outcome = await runDry(input, ports, lock, held);
+        if ("checks" in outcome)
+            return outcome.checks;
+        return [outcome.v6, { check: "V9", verdict: "indeterminate", rule: LOCKFILE_NOT_REGENERATED }];
+    }
+    catch {
+        return [v6("indeterminate", DRY_TREE_FAILED), { check: "V9", verdict: "indeterminate", rule: LOCKFILE_NOT_REGENERATED }];
+    }
+    finally {
+        if (held.root !== null) {
+            try {
+                rmSync(held.root, { recursive: true, force: true });
+            }
+            catch {
+                // The verdict does not depend on the removal, and the tree is under the operating-system temporary directory.
+            }
+        }
+    }
+}
+async function runDry(input, ports, lock, held) {
+    const { set } = input;
+    if (!validateRepositoryChangeSet(set).valid)
+        return { v6: v6("indeterminate", "change-set-invalid") };
+    const lockpath = lockfilePath({ packageManager: set.observed.packageManager, lockfile: set.observed.lockfile });
+    if (lockpath === null || lockpath !== lock.path)
+        return { v6: v6("indeterminate", "lockfile-format-unsupported") };
+    const packages = packagesForLockfile(set, lock.invariants);
+    if (packages === null)
+        return { v6: v6("indeterminate", "lockfile-invariants") };
+    const committed = readCommittedFiles(input.clone, set.repository.baseCommit);
+    if (!committed.ok)
+        return { v6: v6("indeterminate", committed.reason) };
+    if (!treeIsSafe(committed.files))
+        return { v6: v6("indeterminate", DRY_TREE_UNSAFE) };
+    const base = new Map(committed.files.map((file) => [file.path, file]));
+    const baseText = (path) => base.get(path)?.bytes.toString("utf8") ?? null;
+    // The set's own claim about the base: every file it replaces is, at the base commit, the bytes it names as `before`.
+    const whole = set.files.filter(isWhole);
+    for (const file of whole) {
+        const at = base.get(file.path);
+        if ((at === undefined ? null : digestOfBytes(at.bytes)) !== file.before)
+            return { v6: v6("violated", "base-mismatch") };
+    }
+    const parent = ports.tempRoot === undefined ? realpathSync(tmpdir()) : realpathSync(ports.tempRoot);
+    const root = mkdtempSync(join(parent, TEMP_PREFIX));
+    held.root = root;
+    // The runner and the provenance check both need a directory that is its own real path.
+    if (realpathSync(root) !== root)
+        return { v6: v6("indeterminate", DRY_TREE_FAILED) };
+    writeBaseTree(root, committed.files);
+    // What every change writes is resolved and proved before the first write, from the tree as the base has it.
+    const texts = textsFromChangeSet(set);
+    const toWrite = whole.filter((file) => file.before !== file.after);
+    const resolved = new Map();
+    for (const file of toWrite) {
+        const text = resolveFileText(root, set, file, texts);
+        if (typeof text !== "string")
+            return { v6: fromStep(text) };
+        if (file.after !== null && contentDigest(text) !== file.after)
+            return { v6: v6("violated", "content-mismatch") };
+        if (!provesReleaseAgeEditWith(baseText, set, file, text))
+            return { v6: v6("violated", "content-mismatch") };
+        resolved.set(file.path, text);
+    }
+    let packageText;
+    if (set.keys.length > 0) {
+        const existing = baseText("package.json");
+        if (existing === null)
+            return { v6: v6("indeterminate", "manifest-absent") };
+        try {
+            packageText = editJsonPointer(existing, set.keys.map((key) => (key.after === null ? { pointer: key.pointer, remove: true } : { pointer: key.pointer, value: key.after })));
+        }
+        catch (cause) {
+            if (cause instanceof JsonEditUnstableError)
+                return { v6: v6("indeterminate", "json-edit-unstable") };
+            throw cause;
+        }
+    }
+    const touched = [...toWrite.map((file) => file.path), ...(packageText === undefined ? [] : ["package.json"])];
+    const symlinked = refuseReservedSymlinks(root, touched);
+    if (symlinked !== null)
+        return { v6: fromStep(symlinked) };
+    for (const file of toWrite) {
+        if (file.after === null) {
+            const removed = removePath(root, file.path);
+            if (removed !== null)
+                return { v6: fromStep(removed) };
+        }
+        else if (file.mode === "120000") {
+            const linked = writeSymlink(root, file.path, resolved.get(file.path), file.after);
+            if (linked !== null)
+                return { v6: fromStep(linked) };
+        }
+        else {
+            const written = writeRegularFile(root, file.path, resolved.get(file.path), file.after);
+            if (written !== null)
+                return { v6: fromStep(written) };
+        }
+    }
+    if (packageText !== undefined) {
+        const written = writeRegularFile(root, "package.json", packageText, contentDigest(packageText));
+        if (written !== null)
+            return { v6: fromStep(written) };
+    }
+    // The lockfile step, as materialize runs it: the tool version is not supplied here, so pnpm and Yarn are refused by the runner.
+    const regen = await regenerateLockfile({
+        root,
+        packageManager: set.observed.packageManager,
+        lockfile: set.observed.lockfile,
+        toolVersion: null,
+        baseLockfile: baseText(lock.path) ?? "",
+        packages,
+        now: input.now,
+    }, { spawn: ports.lockfileSpawn });
+    // Only the runner's fixed rule or reason is kept, never its tool output or paths.
+    if (regen.verdict === "violated")
+        return { v6: v6("violated", regen.rule) };
+    if (regen.verdict === "indeterminate")
+        return { v6: v6("indeterminate", regen.reason) };
+    let onDisk;
+    try {
+        onDisk = readFileSync(join(root, regen.path));
+    }
+    catch {
+        return { v6: v6("violated", "lockfile-invariants") };
+    }
+    if (sha256Hex(onDisk) !== regen.after)
+        return { v6: v6("violated", "lockfile-invariants") };
+    const provenance = await checkSetProvenance({ tree: root, hubRoot: input.hubRoot, items: set.items }, { spawn: ports.provenanceSpawn });
+    return { checks: [V6_SATISFIED, ...provenance] };
+}
+const sortChecks = (checks) => canonicalOrder(checks, (check) => [check.check, check.rule ?? ""]);
+/**
+ * The planner's result with each dry-materializable repository's `lockfile-not-run` replaced by V6 and V9 as this module
+ * computes them. A repository is dry-materialized only when its set changes a lockfile, has no refused path or key, and every
+ * other check is already satisfied: a repository that cannot be applied anyway launches nothing. The sets, their digests and
+ * the bundle digest are unchanged (the digest does not cover checks); each repository's verdict is recomputed as the worst of
+ * its checks, and the bundle is validated again. Throws when it does not validate.
+ */
+export async function dryMaterializeBundle(result, options) {
+    const repositories = [];
+    for (const entry of result.bundle.repositories) {
+        if (!("changeSet" in entry)) {
+            repositories.push(entry);
+            continue;
+        }
+        const others = entry.checks.filter((check) => !(check.check === "V6" && check.rule === LOCKFILE_NOT_RUN));
+        const set = result.changeSets.find((candidate) => candidate.changeSetDigest === entry.changeSet);
+        if (others.length === entry.checks.length || set === undefined || set.refused.length > 0 || others.some((check) => check.verdict !== "satisfied")) {
+            repositories.push(entry);
+            continue;
+        }
+        const replaced = await dryMaterialize({ clone: options.cloneFor(set.repository.id), hubRoot: options.hub, set, now: options.now }, options.ports);
+        if (replaced === null) {
+            repositories.push(entry);
+            continue;
+        }
+        const checks = sortChecks([...others, ...replaced]);
+        repositories.push({ ...entry, verdict: worstVerdict(checks.map((check) => check.verdict)), checks });
+    }
+    const bundle = { ...result.bundle, repositories };
+    if (!validateApplyBundle(bundle).valid)
+        throw new Error("the bundle with its dry-materialization checks does not validate");
+    return { bundle, changeSets: result.changeSets };
+}
+//# sourceMappingURL=dry-materialize.js.map

package/dist/dry-materialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-materialize.js","sourceRoot":"","sources":["../src/dry-materialize.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,EAAE;AACF,qHAAqH;AACrH,2HAA2H;AAC3H,yHAAyH;AACzH,qHAAqH;AACrH,+GAA+G;AAC/G,EAAE;AACF,yHAAyH;AACzH,yHAAyH;AACzH,wHAAwH;AAExH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvI,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEvJ,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE3M,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,+HAA+H;AAC/H,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AACnE,8HAA8H;AAC9H,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,6HAA6H;AAC7H,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AAoB7C,MAAM,KAAK,GAAG,6BAA6B,CAAC;AAC5C,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD,MAAM,EAAE,GAAG,CAAC,OAAqC,EAAE,IAAY,EAAc,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;AAC5J,MAAM,YAAY,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvE,MAAM,OAAO,GAAG,CAAC,IAA0C,EAA2B,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AAE9G,uIAAuI;AACvI,MAAM,QAAQ,GAAG,CAAC,IAAqB,EAAc,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;AAE/I,8EAA8E;AAC9E,iDAAiD;AAEjD,yGAAyG;AACzG,MAAM,MAAM,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5G,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;QAAE,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAA+B;IACxD,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,EAAU,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,qHAAqH;QACrH,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,IAAI,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACvG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;YAAE,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;IAC/H,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB;IACjD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB;IACrD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,GAAwC,IAAI,CAAC;QACrD,IAAI,CAAC;YACH,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,OAAO,CAAC,CAAC;aACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAA+B;IACzE,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;IACvH,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AAEjB,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACvF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B,EAAE,QAA6B,EAAE;IAC9F,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,QAAQ,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QAC/C,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC3H,CAAC;YAAS,CAAC;QACT,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,8GAA8G;YAChH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,KAA0B,EAC1B,KAA0B,EAC1B,IAAqD,EACrD,IAA6B;IAE7B,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC,EAAE,CAAC;IACtG,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChH,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,6BAA6B,CAAC,EAAE,CAAC;IACnH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,qBAAqB,CAAC,EAAE,CAAC;IAEjF,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7E,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAiB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAEjG,qHAAqH;IACrH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;IAC1H,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACjB,uFAAuF;IACvF,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;IACrF,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAErC,4GAA4G;IAC5G,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjH,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC5G,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,WAA+B,CAAC;IACpC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7K,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB;gBAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC,EAAE,CAAC;YACrG,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;IAE3D,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACnF,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACxF,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;QAChG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,gIAAgI;IAChI,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC;QACE,IAAI;QACJ,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,cAAc;QAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;QAC/B,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACvC,QAAQ;QACR,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,EACD,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,CAC/B,CAAC;IACF,kFAAkF;IAClF,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IACxF,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;IAE5F,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IACxI,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;AACnD,CAAC;AAcD,MAAM,UAAU,GAAG,CAAC,MAA6B,EAAgB,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAEvI;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAA6B,EAAE,OAAoC;IAC5G,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QACjG,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,EAAE,CAAC;YAClJ,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAClJ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;QACpD,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;IAC/D,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC5H,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/dist/generated/contract-schema.generated.d.ts

@@ -0,0 +1,97 @@
+/**
+ * A minimal JSON Schema (draft-07) checker for this repository's shared
+ * contracts (issue #1475): the plan record and the engagement brief, which
+ * two packages validate against without either depending on the other.
+ *
+ * It implements exactly the keywords those contracts use, and throws on any
+ * other keyword, or keyword form, it meets instead of half-checking it.
+ * `assertImplementedContract()` walks a whole contract, so a test can prove
+ * every subschema is implemented, visited by a value or not. Property
+ * lookups use Object.hasOwn, so an inherited name (toString, constructor,
+ * __proto__) is never mistaken for a declared or present property.
+ *
+ * Messages, paths and errors never echo text from the document under test
+ * -- neither a value nor a key. A brief can carry founder text, a refusal
+ * can end up in a log, and these messages are read by agents: a hostile
+ * document can put prompt-injection text in a key name as easily as in a
+ * value. A path names only fields the contract declares (schema text, not
+ * document text) and array indices. A field the contract does not declare,
+ * or a repeated key, is reported at the object that holds it, by the key's
+ * 1-based position in that object ("key 3 of this object"), never by name.
+ *
+ * Every string, and every object key, must be well-formed Unicode: a lone
+ * surrogate is refused whatever the contract says, because it has no UTF-8
+ * encoding and so no canonical form. A document this checker accepts can
+ * always be digested.
+ *
+ * `readContractDocument()` is the one way to turn a plan or brief FILE into
+ * a value: it refuses bytes that are not valid UTF-8 and any object that
+ * repeats a key, at any depth. `JSON.parse` alone would silently keep the
+ * last of two duplicate keys, so a reviewer reading the file could see a
+ * value that is not the one validated and digested.
+ *
+ * This file imports nothing. It is the one implementation: a package that
+ * cannot import it carries a generated, byte-identical copy.
+ */
+export type ContractSchema = Readonly<Record<string, unknown>>;
+/**
+ * One place a value breaks its contract. `path` is `""` for the document
+ * itself, else like `blockers[0].nextAction.who`: only names the contract
+ * declares, and array indices. Neither `path` nor `message` ever carries
+ * document text.
+ */
+export interface ContractViolation {
+    readonly path: string;
+    readonly message: string;
+}
+/** Resolves a file-level `$ref` (for example `engagement-context.json`) to that contract. Throws when it cannot. */
+export type ContractLoader = (name: string) => ContractSchema;
+/** Walks every subschema of `schema`, visited by a value or not, and throws on the first keyword this checker does not implement. */
+export declare function assertImplementedContract(schema: ContractSchema, at?: string): void;
+/**
+ * Every violation of `value` against `contract`; empty when it conforms. A
+ * type mismatch stops there and returns alone, since every other keyword
+ * assumes the value is already the right type. Otherwise, on an object, any
+ * `const` or `enum` violation of the object itself comes before a missing
+ * required field, which comes before each present key's violations in the
+ * order the keys were written (see `keyOrder()`), then any from `oneOf`,
+ * `allOf` and `not`. Never throws for a bad value. Throws only when the
+ * contract itself uses a keyword this checker does not implement, or a
+ * `$ref` it cannot resolve -- a defect in the contract, not in the value.
+ */
+export declare function validateAgainstContract(contract: ContractSchema, value: unknown, load: ContractLoader): ContractViolation[];
+/** `label.path message` (for example `plan.blockers[0].capabilityId is required`), or `label message` for the document itself. */
+export declare function formatContractViolation(label: string, violation: ContractViolation): string;
+/**
+ * Why `readContractDocument()` refused a file, as data a caller can act on
+ * without parsing the message: `reason` says which rule failed, and
+ * `position` (never file text) is set only for a syntax error or a leading
+ * byte order mark. The message carries no file text either: a repeated key
+ * is named by its 1-based position in its object, and that object as the
+ * top-level object or by its position, never by any key.
+ *
+ * A position, here and in every message, is a 0-based index into the
+ * decoded text in UTF-16 code units: JavaScript's string index. It equals
+ * the byte offset only for ASCII text; a character outside the Basic
+ * Multilingual Plane (an emoji, say) counts as two.
+ */
+export declare class ContractDocumentError extends Error {
+    readonly reason: "encoding" | "syntax" | "repeated-key";
+    readonly position?: number | undefined;
+    constructor(message: string, reason: "encoding" | "syntax" | "repeated-key", position?: number | undefined);
+}
+/**
+ * Reads a plan or brief file's bytes as strict JSON: UTF-8 that decodes
+ * without error (never silently replaced with U+FFFD) and does not start
+ * with a byte order mark, exactly one JSON value, and no object that repeats a key at any depth -- the I-JSON rules
+ * RFC 8785 canonicalization assumes. Refuses bytes that break a rule with a
+ * ContractDocumentError whose message says which rule, by position only: a
+ * syntax error by its position (a UTF-16 code-unit index, see
+ * ContractDocumentError), a repeated key by its 1-based position in its
+ * object and that object's position (or "the top-level object") -- never
+ * any text from the file. It does not validate the value against a contract; call
+ * `validateAgainstContract()` next, which then numbers an undeclared field
+ * by its position as written in the file.
+ */
+export declare function readContractDocument(bytes: Uint8Array): unknown;
+//# sourceMappingURL=contract-schema.generated.d.ts.map

package/dist/generated/contract-schema.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-schema.generated.d.ts","sourceRoot":"","sources":["../../src/generated/contract-schema.generated.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,oHAAoH;AACpH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,cAAc,CAAC;AAkE9D,qIAAqI;AACrI,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,SAAM,GAAG,IAAI,CAShF;AA+LD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAE3H;AAED,kIAAkI;AAClI,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,GAAG,MAAM,CAG3F;AAQD;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,cAAc;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM;gBAF1B,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,cAAc,EAC9C,QAAQ,CAAC,EAAE,MAAM,YAAA;CAI7B;AA2HD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAY/D"}