@cuna_labs/cli 0.1.0

package/dist/local-actions/schemas.js

@@ -0,0 +1,314 @@
+import { createHash } from "node:crypto";
+import { admitProviderAuthUrl } from "./browser-action.js";
+const LOCAL_ACTION_SAFE_REASONS = new Set([
+    "unsupported",
+    "denied_by_policy",
+    "denied_by_user",
+    "stale_identity",
+    "cancelled_by_foreground",
+    "foreground_stopped",
+    "terminal_detached",
+    "terminal_binding_changed",
+    "user_interrupt",
+    "execution_timeout",
+    "request_expired",
+    "adapter_failed",
+    "browser_open_failed",
+    "rate_limited",
+    "local_client_unavailable",
+    "outcome_unknown_nonretryable",
+]);
+const DIGEST = /^sha256:[0-9a-f]{64}$/u;
+const IDENTIFIER = /^[A-Za-z0-9._:@/-]{1,256}$/u;
+const EDITORS = new Set(["vscode", "cursor", "windsurf", "zed", "jetbrains-gateway"]);
+export function validateLocalActionArguments(request) {
+    const args = request.arguments;
+    if (workspaceScoped(request.kind) &&
+        (request.identity.workspaceBindingId === null || request.identity.workspaceBindingGeneration === null))
+        invalid();
+    switch (request.kind) {
+        case "browser.open":
+            exactKeys(args, ["url"]);
+            if (request.provider === "opencode")
+                invalid();
+            if (typeof args.url !== "string" || admitProviderAuthUrl(request.provider, args.url) === undefined)
+                invalid();
+            return;
+        case "auth.device.present":
+            if (request.provider === "codex") {
+                exactKeys(args, ["verificationUri", "userCode"]);
+                if (typeof args.verificationUri !== "string" ||
+                    admitProviderAuthUrl("codex", args.verificationUri) === undefined || !boundedString(args.userCode, 256))
+                    invalid();
+                return;
+            }
+            invalid();
+            return;
+        case "auth.callback.relay":
+            exactKeys(args, ["provider", "localPath", "expectedStateDigest", "expectedNonceDigest", "exactLocalPort", "remoteLoopbackPort", "deadlineMs"]);
+            if (args.provider !== "codex" || args.provider !== request.provider ||
+                !exactPath(args.localPath) || !digest(args.expectedStateDigest) || !digest(args.expectedNonceDigest) ||
+                !port(args.exactLocalPort, false) || !port(args.remoteLoopbackPort, false) || !deadline(args.deadlineMs, request))
+                invalid();
+            return;
+        case "auth.result.observe":
+            exactKeys(args, []);
+            return;
+        case "clipboard.write":
+            exactKeys(args, ["text"]);
+            if (!boundedString(args.text, 65_536))
+                invalid();
+            return;
+        case "port.forward":
+            exactKeys(args, ["remoteHost", "remotePort", "requestedLocalPort", "purpose", "deadlineMs"]);
+            if ((args.remoteHost !== "127.0.0.1" && args.remoteHost !== "::1") || !port(args.remotePort, false) ||
+                !port(args.requestedLocalPort, true) || !["preview", "provider_callback", "registered_service"].includes(String(args.purpose)) ||
+                !deadline(args.deadlineMs, request))
+                invalid();
+            return;
+        case "file.select":
+            exactKeys(args, ["purpose", "accept", "multiple", "maximumFiles", "maximumTotalBytes"]);
+            if ((args.purpose !== "attachment" && args.purpose !== "workspace_import") || typeof args.multiple !== "boolean" ||
+                !acceptFilters(args.accept) || !boundedInteger(args.maximumFiles, 1, 1_000) ||
+                !boundedInteger(args.maximumTotalBytes, 1, 1_073_741_824))
+                invalid();
+            return;
+        case "attachment.import":
+            exactKeys(args, ["opaqueId", "expectedSha256"]);
+            if (!identifier(args.opaqueId) || !digest(args.expectedSha256))
+                invalid();
+            return;
+        case "artifact.save":
+            exactKeys(args, ["remoteArtifactId", "expectedSha256", "suggestedName", "maximumBytes"]);
+            if (!identifier(args.remoteArtifactId) || !digest(args.expectedSha256) || !fileName(args.suggestedName) ||
+                !boundedInteger(args.maximumBytes, 1, 1_073_741_824))
+                invalid();
+            return;
+        case "preview.open":
+            exactKeys(args, ["source", "mediaType"]);
+            if (!previewSource(args.source) || !mediaType(args.mediaType))
+                invalid();
+            return;
+        case "diff.open":
+            exactKeys(args, ["leftArtifactId", "rightArtifactId", "expectedDigests"]);
+            if (!identifier(args.leftArtifactId) || !identifier(args.rightArtifactId) || !digestPair(args.expectedDigests))
+                invalid();
+            return;
+        case "editor.open":
+            exactKeys(args, ["editor", "connectionDescriptorId", "workspaceBindingId", "workspaceBindingGeneration"]);
+            if (typeof args.editor !== "string" || !EDITORS.has(args.editor) || !identifier(args.connectionDescriptorId) ||
+                args.workspaceBindingId !== request.identity.workspaceBindingId ||
+                args.workspaceBindingGeneration !== request.identity.workspaceBindingGeneration)
+                invalid();
+            return;
+        case "notification.show":
+            exactKeys(args, ["category", "title", "body", "focusRequestId"]);
+            if (!["action_required", "task_complete", "task_failed"].includes(String(args.category)) ||
+                !boundedString(args.title, 80) || !boundedString(args.body, 240) || !identifier(args.focusRequestId))
+                invalid();
+            return;
+        case "git.sign":
+            exactKeys(args, ["objectType", "canonicalPayloadBase64url", "decodedLength", "payloadSha256", "keySelectorId"]);
+            if ((args.objectType !== "commit" && args.objectType !== "tag") || !identifier(args.keySelectorId) ||
+                !base64urlDigest(args.canonicalPayloadBase64url, args.decodedLength, args.payloadSha256, 65_536))
+                invalid();
+            return;
+        case "local_service.request":
+            exactKeys(args, ["registrationId", "operationId", "bodyEncoding", "body", "decodedLength", "bodySha256"]);
+            if (!identifier(args.registrationId) || !identifier(args.operationId) ||
+                (args.bodyEncoding !== "canonical_json" && args.bodyEncoding !== "base64url") ||
+                !encodedBody(args.bodyEncoding, args.body, args.decodedLength, args.bodySha256, 65_536))
+                invalid();
+            return;
+        case "device.select":
+            exactKeys(args, ["deviceClass", "purpose", "requestedMetadata"]);
+            if (!["serial", "usb", "camera", "microphone"].includes(String(args.deviceClass)) ||
+                !boundedString(args.purpose, 160) || !enumArray(args.requestedMetadata, ["display_name", "class", "capabilities"], 3))
+                invalid();
+            return;
+    }
+}
+export function validateLocalActionResult(request, status, safeData, safeReason) {
+    if (safeReason !== undefined && !LOCAL_ACTION_SAFE_REASONS.has(safeReason))
+        invalid();
+    if (status !== "succeeded") {
+        if (safeData !== undefined)
+            invalid();
+        return;
+    }
+    if (safeData === undefined)
+        invalid();
+    switch (request.kind) {
+        case "browser.open":
+        case "auth.device.present":
+        case "auth.callback.relay":
+            exactKeys(safeData, ["awaitingProvider"]);
+            if (safeData.awaitingProvider !== true)
+                invalid();
+            return;
+        case "auth.result.observe":
+            exactKeys(safeData, ["authenticated"]);
+            if (typeof safeData.authenticated !== "boolean")
+                invalid();
+            return;
+        case "clipboard.write":
+            exactKeys(safeData, ["written"]);
+            if (safeData.written !== true)
+                invalid();
+            return;
+        case "port.forward":
+            exactKeys(safeData, ["localHost", "localPort", "expiresAt", "streamId"]);
+            if ((safeData.localHost !== "127.0.0.1" && safeData.localHost !== "::1") || !port(safeData.localPort, false) ||
+                !Number.isSafeInteger(safeData.expiresAt) || !identifier(safeData.streamId))
+                invalid();
+            return;
+        case "file.select":
+            exactKeys(safeData, ["selectionId", "count"]);
+            if (!identifier(safeData.selectionId) || !Number.isSafeInteger(safeData.count) || Number(safeData.count) < 1 || Number(safeData.count) > 1_000)
+                invalid();
+            return;
+        case "attachment.import":
+            exactKeys(safeData, ["opaqueArtifactId", "digest"]);
+            if (!identifier(safeData.opaqueArtifactId) || !digest(safeData.digest))
+                invalid();
+            return;
+        case "artifact.save":
+        case "preview.open":
+        case "diff.open":
+        case "editor.open":
+        case "notification.show":
+            exactKeys(safeData, ["completed"]);
+            if (safeData.completed !== true)
+                invalid();
+            return;
+        case "git.sign":
+            exactKeys(safeData, ["signatureBase64url", "decodedLength", "signatureSha256", "algorithm", "publicKeyFingerprint"]);
+            if (!base64urlDigest(safeData.signatureBase64url, safeData.decodedLength, safeData.signatureSha256, 65_536) ||
+                !boundedString(safeData.algorithm, 64) || !boundedString(safeData.publicKeyFingerprint, 256))
+                invalid();
+            return;
+        case "local_service.request":
+            exactKeys(safeData, ["outcome", "bodyEncoding", "body", "decodedLength", "bodySha256"]);
+            if (!["ok", "service_error", "timeout"].includes(String(safeData.outcome)) ||
+                (safeData.bodyEncoding !== "canonical_json" && safeData.bodyEncoding !== "base64url") ||
+                !encodedBody(safeData.bodyEncoding, safeData.body, safeData.decodedLength, safeData.bodySha256, 65_536))
+                invalid();
+            return;
+        case "device.select":
+            exactKeys(safeData, ["opaqueDeviceId", "displayName", "deviceClass", "capabilities"]);
+            if (!identifier(safeData.opaqueDeviceId) || !boundedString(safeData.displayName, 160) ||
+                !["serial", "usb", "camera", "microphone"].includes(String(safeData.deviceClass)) ||
+                !stringArray(safeData.capabilities, 32, 128))
+                invalid();
+            return;
+    }
+}
+function exactKeys(value, required, optional = []) {
+    const keys = Object.keys(value);
+    const allowed = new Set([...required, ...optional]);
+    if (required.some((key) => !(key in value)) || keys.some((key) => !allowed.has(key)))
+        invalid();
+}
+function boundedString(value, maximum) {
+    return typeof value === "string" && value.length >= 1 && Buffer.byteLength(value, "utf8") <= maximum && !value.includes("\0");
+}
+function identifier(value) {
+    return typeof value === "string" && IDENTIFIER.test(value);
+}
+function digest(value) {
+    return typeof value === "string" && DIGEST.test(value);
+}
+function port(value, allowZero) {
+    return Number.isSafeInteger(value) && Number(value) >= (allowZero ? 0 : 1) && Number(value) <= 65_535;
+}
+function stringArray(value, maximumItems, maximumItemBytes) {
+    return Array.isArray(value) && value.length <= maximumItems && value.every((item) => boundedString(item, maximumItemBytes));
+}
+function fileName(value) {
+    return boundedString(value, 255) && !/[\\/:*?"<>|]/u.test(value) && value !== "." && value !== "..";
+}
+function exactPath(value) {
+    return typeof value === "string" && value.startsWith("/") && value.length <= 2_048 &&
+        !value.includes("\0") && !value.includes("?") && !value.includes("#") && !value.includes("\\") &&
+        !value.split("/").some((part, index) => index > 0 && (part === "" || part === "." || part === ".."));
+}
+function boundedInteger(value, minimum, maximum) {
+    return Number.isSafeInteger(value) && Number(value) >= minimum && Number(value) <= maximum;
+}
+function deadline(value, request) {
+    return Number.isSafeInteger(value) && Number(value) > request.createdAt && Number(value) <= request.expiresAt;
+}
+function acceptFilters(value) {
+    return Array.isArray(value) && value.length <= 32 && value.every((item) => {
+        if (!record(item))
+            return false;
+        exactKeys(item, [], ["extension", "mediaType"]);
+        return (item.extension === undefined || (boundedString(item.extension, 32) && /^\.[A-Za-z0-9]+$/u.test(item.extension))) &&
+            (item.mediaType === undefined || mediaType(item.mediaType)) &&
+            (item.extension !== undefined || item.mediaType !== undefined);
+    });
+}
+function previewSource(value) {
+    if (!record(value))
+        return false;
+    if (value.kind === "artifact") {
+        exactKeys(value, ["kind", "opaqueId", "sha256"]);
+        return identifier(value.opaqueId) && digest(value.sha256);
+    }
+    if (value.kind === "private_forward") {
+        exactKeys(value, ["kind", "streamId"]);
+        return identifier(value.streamId);
+    }
+    return false;
+}
+function digestPair(value) {
+    return Array.isArray(value) && value.length === 2 && digest(value[0]) && digest(value[1]);
+}
+function mediaType(value) {
+    return typeof value === "string" && /^[a-z0-9][a-z0-9!#$&^_.+-]{0,63}\/[a-z0-9][a-z0-9!#$&^_.+-]{0,127}$/u.test(value);
+}
+function enumArray(value, allowed, maximum) {
+    return Array.isArray(value) && value.length <= maximum && new Set(value).size === value.length &&
+        value.every((item) => typeof item === "string" && allowed.includes(item));
+}
+function base64urlDigest(encoded, decodedLength, expectedDigest, maximumBytes) {
+    if (typeof encoded !== "string" || !/^[A-Za-z0-9_-]*$/u.test(encoded) || !boundedInteger(decodedLength, 0, maximumBytes) || !digest(expectedDigest))
+        return false;
+    const bytes = Buffer.from(encoded, "base64url");
+    return bytes.byteLength === decodedLength && bytes.toString("base64url") === encoded &&
+        `sha256:${createHash("sha256").update(bytes).digest("hex")}` === expectedDigest;
+}
+function encodedBody(encoding, body, decodedLength, expectedDigest, maximumBytes) {
+    if (encoding === "base64url")
+        return base64urlDigest(body, decodedLength, expectedDigest, maximumBytes);
+    if (encoding !== "canonical_json" || body === undefined || !boundedInteger(decodedLength, 0, maximumBytes) || !digest(expectedDigest))
+        return false;
+    let bytes;
+    try {
+        bytes = Buffer.from(canonicalJson(body), "utf8");
+    }
+    catch {
+        return false;
+    }
+    return bytes.byteLength === decodedLength && `sha256:${createHash("sha256").update(bytes).digest("hex")}` === expectedDigest;
+}
+function canonicalJson(value) {
+    if (value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    const object = value;
+    return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(object[key])}`).join(",")}}`;
+}
+function workspaceScoped(kind) {
+    return new Set([
+        "attachment.import", "artifact.save", "preview.open", "diff.open", "editor.open", "git.sign",
+    ]).has(kind);
+}
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function invalid() {
+    throw new TypeError("Local action arguments do not match the closed schema for this action kind.");
+}
+//# sourceMappingURL=schemas.js.map

package/dist/local-actions/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/local-actions/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,aAAa;IACb,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,yBAAyB;IACzB,oBAAoB;IACpB,mBAAmB;IACnB,0BAA0B;IAC1B,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,cAAc;IACd,0BAA0B;IAC1B,8BAA8B;CAC/B,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,wBAAwB,CAAC;AACxC,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAEtF,MAAM,UAAU,4BAA4B,CAAC,OAA2B;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAC/B,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,0BAA0B,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpH,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,cAAc;YACjB,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,EAAE,CAAC;YAC/C,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC9G,OAAO;QACT,KAAK,qBAAqB;YACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,SAAS,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;gBACjD,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;oBAC1C,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACrH,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;YACV,OAAO;QACT,KAAK,qBAAqB;YACxB,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;YAC/I,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBACjE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACpG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC/H,OAAO;QACT,KAAK,qBAAqB;YACxB,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpB,OAAO;QACT,KAAK,iBAAiB;YACpB,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACjD,OAAO;QACT,KAAK,cAAc;YACjB,SAAS,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7F,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;gBACjG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9H,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC;YACjD,OAAO;QACT,KAAK,aAAa;YAChB,SAAS,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC9G,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,KAAK,CAAC;gBAC3E,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,aAAa,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvE,OAAO;QACT,KAAK,mBAAmB;YACtB,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC1E,OAAO;QACT,KAAK,eAAe;YAClB,SAAS,CAAC,IAAI,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;gBACrG,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,aAAa,CAAC;gBAAE,OAAO,EAAE,CAAC;YAClE,OAAO;QACT,KAAK,cAAc;YACjB,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YACzE,OAAO;QACT,KAAK,WAAW;YACd,SAAS,CAAC,IAAI,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC1H,OAAO;QACT,KAAK,aAAa;YAChB,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAC1G,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC;gBAC1G,IAAI,CAAC,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBAC/D,IAAI,CAAC,0BAA0B,KAAK,OAAO,CAAC,QAAQ,CAAC,0BAA0B;gBAAE,OAAO,EAAE,CAAC;YAC7F,OAAO;QACT,KAAK,mBAAmB;YACtB,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtF,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;gBAAE,OAAO,EAAE,CAAC;YAClH,OAAO;QACT,KAAK,UAAU;YACb,SAAS,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,2BAA2B,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;YAChH,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;gBAChG,CAAC,eAAe,CAAC,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC9G,OAAO;QACT,KAAK,uBAAuB;YAC1B,SAAS,CAAC,IAAI,EAAE,CAAC,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;YAC1G,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBACnE,CAAC,IAAI,CAAC,YAAY,KAAK,gBAAgB,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,CAAC;gBAC7E,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrG,OAAO;QACT,KAAK,eAAe;YAClB,SAAS,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/E,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;YACnI,OAAO;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA2B,EAC3B,MAAmC,EACnC,QAAwC,EACxC,UAAkC;IAElC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACtF,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,cAAc,CAAC;QACpB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,qBAAqB;YACxB,SAAS,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,gBAAgB,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC;YAClD,OAAO;QACT,KAAK,qBAAqB;YACxB,SAAS,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;YACvC,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC3D,OAAO;QACT,KAAK,iBAAiB;YACpB,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC;YACzC,OAAO;QACT,KAAK,cAAc;YACjB,SAAS,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,WAAW,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;gBAC1G,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAC;YACzF,OAAO;QACT,KAAK,aAAa;YAChB,SAAS,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK;gBAAE,OAAO,EAAE,CAAC;YAC1J,OAAO;QACT,KAAK,mBAAmB;YACtB,SAAS,CAAC,QAAQ,EAAE,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YAClF,OAAO;QACT,KAAK,eAAe,CAAC;QACrB,KAAK,cAAc,CAAC;QACpB,KAAK,WAAW,CAAC;QACjB,KAAK,aAAa,CAAC;QACnB,KAAK,mBAAmB;YACtB,SAAS,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC;YAC3C,OAAO;QACT,KAAK,UAAU;YACb,SAAS,CAAC,QAAQ,EAAE,CAAC,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;YACrH,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;gBACzG,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC1G,OAAO;QACT,KAAK,uBAAuB;YAC1B,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACxE,CAAC,QAAQ,CAAC,YAAY,KAAK,gBAAgB,IAAI,QAAQ,CAAC,YAAY,KAAK,WAAW,CAAC;gBACrF,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrH,OAAO;QACT,KAAK,eAAe;YAClB,SAAS,CAAC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;gBACnF,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACjF,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC1D,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,KAAoD,EACpD,QAA2B,EAC3B,WAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,aAAa,CAAC,KAAsC,EAAE,OAAe;IAC5E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChI,CAAC;AAED,SAAS,UAAU,CAAC,KAAsC;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM,CAAC,KAAsC;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,IAAI,CAAC,KAAsC,EAAE,SAAkB;IACtE,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACxG,CAAC;AAED,SAAS,WAAW,CAAC,KAAsC,EAAE,YAAoB,EAAE,gBAAwB;IACzG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsC;IACtD,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC;AACtG,CAAC;AAED,SAAS,SAAS,CAAC,KAAsC;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;QAChF,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9F,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,cAAc,CAAC,KAAsC,EAAE,OAAe,EAAE,OAAe;IAC9F,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;AAC7F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsC,EAAE,OAA2B;IACnF,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC;AAChH,CAAC;AAED,SAAS,aAAa,CAAC,KAAsC;IAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACtH,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3D,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAsC;IAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAsC;IACxD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,KAAsC;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sEAAsE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzH,CAAC;AAED,SAAS,SAAS,CAAC,KAAsC,EAAE,OAA0B,EAAE,OAAe;IACpG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAC5F,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CACtB,OAAwC,EACxC,aAA8C,EAC9C,cAA+C,EAC/C,YAAoB;IAEpB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAClK,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,UAAU,KAAK,aAAa,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO;QAClF,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CAAC;AACpF,CAAC;AAED,SAAS,WAAW,CAClB,QAAyC,EACzC,IAAqC,EACrC,aAA8C,EAC9C,cAA+C,EAC/C,YAAoB;IAEpB,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;IACxG,IAAI,QAAQ,KAAK,gBAAgB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACpJ,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACjF,OAAO,KAAK,CAAC,UAAU,KAAK,aAAa,IAAI,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CAAC;AAC/H,CAAC;AAED,SAAS,aAAa,CAAC,KAA0B;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,KAAsD,CAAC;IACtE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC3H,CAAC;AAED,SAAS,eAAe,CAAC,IAAgC;IACvD,OAAO,IAAI,GAAG,CAA6B;QACzC,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU;KAC7F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAsC;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;AACrG,CAAC"}

package/dist/local-actions/sensitive-consent.d.ts

@@ -0,0 +1,32 @@
+export type SensitiveLocalActionKind = "git.sign" | "local_service.request" | "device.select";
+export interface SensitiveOperationContext {
+    readonly requestId: string;
+    readonly identityFingerprint: string;
+    readonly isIdentityCurrent: () => boolean | Promise<boolean>;
+    readonly isForegroundAlive: () => boolean;
+}
+export interface SensitiveConsentPrompt {
+    readonly action: SensitiveLocalActionKind;
+    readonly requestId: string;
+    readonly identityFingerprint: string;
+    readonly operationDigest: `sha256:${string}`;
+    readonly summary: string;
+    readonly persistentChoiceAllowed: false;
+}
+export interface PerOperationConsent {
+    approveOnce(prompt: SensitiveConsentPrompt, signal?: AbortSignal): Promise<boolean>;
+}
+export declare function validateSensitiveContext(context: SensitiveOperationContext): void;
+export declare function assertSensitiveAuthority(context: SensitiveOperationContext, signal?: AbortSignal): Promise<void>;
+export declare function requireConsentOnce(consent: PerOperationConsent, context: SensitiveOperationContext, input: {
+    readonly action: SensitiveLocalActionKind;
+    readonly operationDigest: `sha256:${string}`;
+    readonly summary: string;
+}, signal?: AbortSignal): Promise<void>;
+export declare function throwIfAborted(signal?: AbortSignal): void;
+export declare function identifier(value: string): boolean;
+export declare class SensitiveAuthorityError extends Error {
+    readonly code: "cancelled" | "consent_denied" | "foreground_inactive" | "identity_changed";
+    constructor(code: "cancelled" | "consent_denied" | "foreground_inactive" | "identity_changed");
+}
+//# sourceMappingURL=sensitive-consent.d.ts.map

package/dist/local-actions/sensitive-consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-consent.d.ts","sourceRoot":"","sources":["../../src/local-actions/sensitive-consent.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,uBAAuB,GAAG,eAAe,CAAC;AAE9F,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,OAAO,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAC;CACzC;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAKjF;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,yBAAyB,EAClC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,mBAAmB,EAC5B,OAAO,EAAE,yBAAyB,EAClC,KAAK,EAAE;IACL,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,EACD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAEzD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjD;AAMD,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,GAAG,qBAAqB,GAAG,kBAAkB;gBAAjF,IAAI,EAAE,WAAW,GAAG,gBAAgB,GAAG,qBAAqB,GAAG,kBAAkB;CAIvG"}

package/dist/local-actions/sensitive-consent.js

@@ -0,0 +1,47 @@
+export function validateSensitiveContext(context) {
+    if (!identifier(context.requestId) || !fingerprint(context.identityFingerprint) ||
+        typeof context.isIdentityCurrent !== "function" || typeof context.isForegroundAlive !== "function") {
+        throw new TypeError("Sensitive operation context is invalid.");
+    }
+}
+export async function assertSensitiveAuthority(context, signal) {
+    throwIfAborted(signal);
+    if (!context.isForegroundAlive())
+        throw new SensitiveAuthorityError("foreground_inactive");
+    if (!await context.isIdentityCurrent())
+        throw new SensitiveAuthorityError("identity_changed");
+}
+export async function requireConsentOnce(consent, context, input, signal) {
+    await assertSensitiveAuthority(context, signal);
+    const approved = await consent.approveOnce(Object.freeze({
+        action: input.action,
+        requestId: context.requestId,
+        identityFingerprint: context.identityFingerprint,
+        operationDigest: input.operationDigest,
+        summary: input.summary,
+        persistentChoiceAllowed: false,
+    }), signal);
+    throwIfAborted(signal);
+    if (!approved)
+        throw new SensitiveAuthorityError("consent_denied");
+    await assertSensitiveAuthority(context, signal);
+}
+export function throwIfAborted(signal) {
+    if (signal?.aborted === true)
+        throw new SensitiveAuthorityError("cancelled");
+}
+export function identifier(value) {
+    return /^[A-Za-z0-9._:@/-]{1,256}$/u.test(value);
+}
+function fingerprint(value) {
+    return /^[A-Za-z0-9._:@/-]{1,512}$/u.test(value);
+}
+export class SensitiveAuthorityError extends Error {
+    code;
+    constructor(code) {
+        super(`Cuna sensitive action rejected: ${code}.`);
+        this.code = code;
+        this.name = "SensitiveAuthorityError";
+    }
+}
+//# sourceMappingURL=sensitive-consent.js.map

package/dist/local-actions/sensitive-consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-consent.js","sourceRoot":"","sources":["../../src/local-actions/sensitive-consent.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC7E,OAAO,OAAO,CAAC,iBAAiB,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QACrG,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAkC,EAClC,MAAoB;IAEpB,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE;QAAE,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE;QAAE,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4B,EAC5B,OAAkC,EAClC,KAIC,EACD,MAAoB;IAEpB,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QACvD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,EAAE,MAAM,CAAC,CAAC;IACZ,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACnE,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,uBAAuB,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,IAAiF;QACpG,KAAK,CAAC,mCAAmC,IAAI,GAAG,CAAC,CAAC;QAD/B,SAAI,GAAJ,IAAI,CAA6E;QAEpG,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/machines/command-launch.d.ts

@@ -0,0 +1,17 @@
+import { type CunaApiClient } from "../api/client.js";
+import type { ManagedCommandResult } from "../api/managed-executions.js";
+import type { MachineDefaultWorkspace } from "../api/remote-workspace.js";
+import type { PlatformAdapter } from "../platform/adapter.js";
+export interface CommandLaunchEnvironment {
+    readonly platform: PlatformAdapter;
+    readonly baseUrl: string;
+    readonly profile: string;
+}
+export interface PreparedCommand {
+    readonly operationId: string;
+    readonly workspace: MachineDefaultWorkspace;
+    run(command: string, onRecorded: (path: string) => Promise<void>, signal: AbortSignal): Promise<ManagedCommandResult>;
+}
+/** Preparation is read-only; confirmation rechecks authority before recording and sending once. */
+export declare function prepareManagedCommand(client: CunaApiClient, machineId: string, environment: CommandLaunchEnvironment, signal: AbortSignal): Promise<PreparedCommand>;
+//# sourceMappingURL=command-launch.d.ts.map

package/dist/machines/command-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-launch.d.ts","sourceRoot":"","sources":["../../src/machines/command-launch.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAI9D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvH;AAED,mGAAmG;AACnG,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAClF,WAAW,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CA+CtF"}

package/dist/machines/command-launch.js

@@ -0,0 +1,52 @@
+import { randomUUID } from "node:crypto";
+import { requireCapability } from "../api/client.js";
+import { assertMachineId } from "../core/validation.js";
+import { saveExecutionReceipt } from "./execution-receipt.js";
+/** Preparation is read-only; confirmation rechecks authority before recording and sending once. */
+export async function prepareManagedCommand(client, machineId, environment, signal) {
+    assertMachineId(machineId);
+    const gate = async (id, readOnly, activeSignal) => {
+        activeSignal.throwIfAborted();
+        await requireCapability({ client, scope: "machine", resourceId: machineId, capabilityId: id,
+            allowedInteractions: [readOnly ? "read_only" : "native"], signal: activeSignal });
+    };
+    await gate("machines.default_workspace.read", true, signal);
+    const identity = Object.freeze({ ...await client.getIdentity(signal) });
+    const workspace = Object.freeze({ ...await client.getMachineDefaultWorkspace(machineId, signal) });
+    const verify = (value) => {
+        if (!identity.workspaceId || value.machineId !== machineId || value.workspaceId !== identity.workspaceId ||
+            value.publicationStatus !== "ready" || value.executionWorkspaceId !== workspace.executionWorkspaceId ||
+            value.remoteRoot !== workspace.remoteRoot || value.workspaceGeneration !== workspace.workspaceGeneration ||
+            value.machineGeneration !== workspace.machineGeneration) {
+            throw new Error("The remote Workspace is not ready or changed. Return and prepare the command again.");
+        }
+    };
+    verify(workspace);
+    await gate("machines.exec", false, signal);
+    const operationId = randomUUID();
+    let attempted = false;
+    return Object.freeze({ operationId, workspace,
+        async run(command, onRecorded, activeSignal) {
+            if (attempted)
+                throw new Error("This command attempt cannot be repeated. Inspect its execution ID.");
+            if (!command.trim() || command.includes("\0") || Buffer.byteLength(command, "utf8") > 65536) {
+                throw new Error("Enter a command of at most 64 KiB without NUL characters.");
+            }
+            attempted = true;
+            await gate("machines.default_workspace.read", true, activeSignal);
+            const currentIdentity = await client.getIdentity(activeSignal);
+            if (currentIdentity.id !== identity.id || currentIdentity.workspaceId !== identity.workspaceId) {
+                throw new Error("The signed-in account changed. Prepare the command again.");
+            }
+            verify(await client.getMachineDefaultWorkspace(machineId, activeSignal));
+            await gate("machines.exec", false, activeSignal);
+            activeSignal.throwIfAborted();
+            const path = await saveExecutionReceipt(environment.platform, { baseUrl: environment.baseUrl, profile: environment.profile, userId: identity.id }, machineId, workspace.executionWorkspaceId, operationId);
+            await onRecorded(path);
+            activeSignal.throwIfAborted();
+            // Shell interpretation happens only on the selected remote Machine.
+            return await client.executeManagedCommand(machineId, operationId, { command: "/bin/sh", args: ["-c", command], cwd: workspace.remoteRoot }, activeSignal);
+        },
+    });
+}
+//# sourceMappingURL=command-launch.js.map

package/dist/machines/command-launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-launch.js","sourceRoot":"","sources":["../../src/machines/command-launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAsB,MAAM,kBAAkB,CAAC;AAIzE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAa9D,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAqB,EAAE,SAAiB,EAClF,WAAqC,EAAE,MAAmB;IAC1D,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,EAAE,EAAU,EAAE,QAAiB,EAAE,YAAyB,EAAE,EAAE;QAC9E,YAAY,CAAC,cAAc,EAAE,CAAC;QAC9B,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE;YACzF,mBAAmB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,iCAAiC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,CAAC,KAA8B,EAAE,EAAE;QAChD,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YACtG,KAAK,CAAC,iBAAiB,KAAK,OAAO,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB;YACpG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB;YACxG,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,SAAS,CAAC,CAAC;IAClB,MAAM,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS;QAC3C,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,UAA2C,EAAE,YAAyB;YAC/F,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;YACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC/E,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,IAAI,CAAC,iCAAiC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAClE,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC/D,IAAI,eAAe,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,eAAe,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,CAAC,MAAM,MAAM,CAAC,0BAA0B,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YACjD,YAAY,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,QAAQ,EAC1D,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,EACnF,SAAS,EAAE,SAAS,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;YAC1D,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,YAAY,CAAC,cAAc,EAAE,CAAC;YAC9B,oEAAoE;YACpE,OAAO,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,WAAW,EAC9D,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC;QAC5F,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/machines/execution-receipt.d.ts

@@ -0,0 +1,18 @@
+import type { PlatformAdapter } from "../platform/adapter.js";
+export interface ExecutionReceiptScope {
+    readonly baseUrl: string;
+    readonly profile: string;
+    readonly userId: string;
+}
+export interface ExecutionReceipt {
+    readonly version: 1;
+    readonly scope: string;
+    readonly operationId: string;
+    readonly machineId: string;
+    readonly executionWorkspaceId: string;
+}
+/** One immutable identity per file avoids cross-terminal read/modify/write loss. */
+export declare function saveExecutionReceipt(platform: PlatformAdapter, scope: ExecutionReceiptScope, machineId: string, executionWorkspaceId: string, operationId: string): Promise<string>;
+/** Local attempts are discovery hints; only server readback establishes execution state. */
+export declare function listExecutionReceipts(platform: PlatformAdapter, scope: ExecutionReceiptScope, machineId: string, signal?: AbortSignal): Promise<readonly ExecutionReceipt[]>;
+//# sourceMappingURL=execution-receipt.d.ts.map

package/dist/machines/execution-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-receipt.d.ts","sourceRoot":"","sources":["../../src/machines/execution-receipt.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAmBD,oFAAoF;AACpF,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB,EAChG,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAWvF;AAED,4FAA4F;AAC5F,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB,EACjG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAmC/E"}

package/dist/machines/execution-receipt.js

@@ -0,0 +1,87 @@
+import { createHash } from "node:crypto";
+import { lstat, opendir } from "node:fs/promises";
+import { join } from "node:path";
+import { assertCanonicalUuid } from "../core/validation.js";
+const maximumBytes = 2048;
+const receiptName = /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.json$/u;
+function scopeDigest(scope) {
+    const url = new URL(scope.baseUrl);
+    if (url.username || url.password || url.search || url.hash || !["https:", "http:"].includes(url.protocol) ||
+        !scope.profile || !scope.userId)
+        throw new Error("Invalid execution recovery scope.");
+    return createHash("sha256").update(JSON.stringify([url.href, scope.profile, scope.userId])).digest("hex");
+}
+function receipt(scope, machineId, executionWorkspaceId, operationId) {
+    for (const [label, value] of Object.entries({ machineId, executionWorkspaceId, operationId }))
+        assertCanonicalUuid(value, label);
+    // No endpoint query, credential, command, output, or command digest is persisted.
+    const identity = scopeDigest(scope);
+    return Object.freeze({ version: 1, scope: identity, machineId, executionWorkspaceId, operationId });
+}
+/** One immutable identity per file avoids cross-terminal read/modify/write loss. */
+export async function saveExecutionReceipt(platform, scope, machineId, executionWorkspaceId, operationId) {
+    const value = receipt(scope, machineId, executionWorkspaceId, operationId);
+    const filename = join(platform.paths.stateDirectory, "executions", value.scope, `${operationId}.json`);
+    const text = JSON.stringify(value) + "\n";
+    const previous = await platform.readSafeConfig(filename, maximumBytes);
+    // A receipt is an attempt marker, not permission to replay a prior operation.
+    if (previous.exists)
+        throw new Error("This execution ID already has a recovery record. Inspect it before starting another command.");
+    await platform.writeSafeConfig(filename, text, maximumBytes);
+    const saved = await platform.readSafeConfig(filename, maximumBytes);
+    if (!saved.exists || saved.text !== text)
+        throw new Error("Execution recovery record could not be verified. No command was sent.");
+    return filename;
+}
+/** Local attempts are discovery hints; only server readback establishes execution state. */
+export async function listExecutionReceipts(platform, scope, machineId, signal) {
+    signal?.throwIfAborted();
+    assertCanonicalUuid(machineId, "machine ID");
+    const digest = scopeDigest(scope);
+    const root = join(platform.paths.stateDirectory, "executions"), directory = join(root, digest);
+    const items = [];
+    try {
+        for (const target of [root, directory]) {
+            const metadata = await lstat(target);
+            if (!metadata.isDirectory() || metadata.isSymbolicLink())
+                throw new Error("Unsafe execution recovery directory.");
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return Object.freeze([]);
+        throw new Error("Local execution recovery records cannot be read safely.");
+    }
+    let scanned = 0;
+    for await (const entry of await opendir(directory)) {
+        signal?.throwIfAborted();
+        if (++scanned > 8192)
+            throw new Error("Too many local recovery files to list safely. No partial result is shown.");
+        const match = receiptName.exec(entry.name);
+        if (match === null)
+            continue;
+        if (!entry.isFile() || entry.isSymbolicLink())
+            throw new Error("Unsafe execution recovery record.");
+        const snapshot = await platform.readSafeConfig(join(directory, entry.name), maximumBytes);
+        let value;
+        try {
+            value = JSON.parse(snapshot.text ?? "");
+        }
+        catch {
+            throw new Error("A local execution recovery record is unreadable.");
+        }
+        if (typeof value !== "object" || value === null || Array.isArray(value))
+            throw new Error("Invalid local execution recovery record.");
+        const row = value;
+        if (Object.keys(row).sort().join(",") !== "executionWorkspaceId,machineId,operationId,scope,version" ||
+            row.version !== 1 || row.scope !== digest || row.operationId !== match[1] ||
+            typeof row.machineId !== "string" || typeof row.executionWorkspaceId !== "string")
+            throw new Error("Invalid local execution recovery record.");
+        const checked = receipt(scope, row.machineId, row.executionWorkspaceId, match[1]);
+        if (checked.machineId === machineId)
+            items.push(checked);
+    }
+    signal?.throwIfAborted();
+    return Object.freeze(items.sort((a, b) => a.operationId.localeCompare(b.operationId)));
+}
+//# sourceMappingURL=execution-receipt.js.map