@determinate-systems/detsys-ts 0.1.0

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["fs","os","exec","exec","actionsExec","correlation.identify","platform.getArchOs","platform.getNixPlatform","stringifyError","os","fsConstants"],"sources":["../src/linux-release-info.ts","../src/actions-core-platform.ts","../src/errors.ts","../src/backtrace.ts","../src/checksums.ts","../src/correlation.ts","../src/ids-host.ts","../src/inputs.ts","../src/platform.ts","../src/sourcedef.ts","../src/index.ts"],"sourcesContent":["/*!\n * linux-release-info\n * Get Linux release info (distribution name, version, arch, release, etc.)\n * from '/etc/os-release' or '/usr/lib/os-release' files and from native os\n * module. On Windows and Darwin platforms it only returns common node os module\n * info (platform, hostname, release, and arch)\n *\n * Licensed under MIT\n * Copyright (c) 2018-2020 [Samuel Carreira]\n */\n// NOTE: we depend on this directly to get around some un-fun issues with mixing CommonJS\n// and ESM in the bundle. We've modified the original logic to improve things like typing\n// and fixing ESLint issues. Originally drawn from:\n// https://github.com/samuelcarreira/linux-release-info/blob/84a91aa5442b47900da03020c590507545d3dc74/src/index.ts\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport { promisify } from \"node:util\";\n\nconst readFileAsync = promisify(fs.readFile);\n\nexport interface LinuxReleaseInfoOptions {\n  /**\n   * read mode, possible values: 'async' and 'sync'\n   *\n   * @default 'async'\n   */\n  mode?: \"async\" | \"sync\";\n  /**\n   * custom complete file path with os info default null/none\n   * if not provided the system will search on the '/etc/os-release'\n   * and  '/usr/lib/os-release' files\n   *\n   * @default null\n   */\n  customFile?: string | null | undefined;\n  /**\n   * if true, show console debug messages\n   *\n   * @default false\n   */\n  debug?: boolean;\n}\n\nconst linuxReleaseInfoOptionsDefaults: LinuxReleaseInfoOptions = {\n  mode: \"async\",\n  customFile: null,\n  debug: false,\n};\n\n/**\n * Get OS release info from 'os-release' file and from native os module\n * on Windows or Darwin it only returns common os module info\n * (uses native fs module)\n * @returns {object} info from the current os\n */\nexport function releaseInfo(infoOptions: LinuxReleaseInfoOptions): object {\n  const options = { ...linuxReleaseInfoOptionsDefaults, ...infoOptions };\n\n  const searchOsReleaseFileList: string[] = osReleaseFileList(\n    options.customFile,\n  );\n\n  if (os.type() !== \"Linux\") {\n    if (options.mode === \"sync\") {\n      return getOsInfo();\n    } else {\n      return Promise.resolve(getOsInfo());\n    }\n  }\n\n  if (options.mode === \"sync\") {\n    return readSyncOsreleaseFile(searchOsReleaseFileList, options);\n  } else {\n    return Promise.resolve(\n      readAsyncOsReleaseFile(searchOsReleaseFileList, options),\n    );\n  }\n}\n\n/**\n * Format file data: convert data to object keys/values\n *\n * @param {object} sourceData Source object to be appended\n * @param {string} srcParseData Input file data to be parsed\n * @returns {object} Formated object\n */\nfunction formatFileData(sourceData: OsInfo, srcParseData: string): OsInfo {\n  const lines: string[] = srcParseData.split(\"\\n\");\n\n  for (const line of lines) {\n    const lineData = line.split(\"=\");\n\n    if (lineData.length === 2) {\n      lineData[1] = lineData[1].replace(/[\"'\\r]/gi, \"\"); // remove quotes and return character\n\n      Object.defineProperty(sourceData, lineData[0].toLowerCase(), {\n        value: lineData[1],\n        writable: true,\n        enumerable: true,\n        configurable: true,\n      });\n    }\n  }\n\n  return sourceData;\n}\n\n/**\n * Export a list of os-release files\n *\n * @param {string} customFile optional custom complete filepath\n * @returns {array} list of os-release files\n */\nfunction osReleaseFileList(customFile: string | null | undefined): string[] {\n  const DEFAULT_OS_RELEASE_FILES = [\"/etc/os-release\", \"/usr/lib/os-release\"];\n\n  if (!customFile) {\n    return DEFAULT_OS_RELEASE_FILES;\n  } else {\n    return Array(customFile);\n  }\n}\n\n/**\n * Operating system info.\n */\ntype OsInfo = {\n  type: string;\n  platform: string;\n  hostname: string;\n  arch: string;\n  release: string;\n};\n\n/**\n * Get OS Basic Info\n * (uses node 'os' native module)\n *\n * @returns {OsInfo} os basic info\n */\nfunction getOsInfo(): OsInfo {\n  return {\n    type: os.type(),\n    platform: os.platform(),\n    hostname: os.hostname(),\n    arch: os.arch(),\n    release: os.release(),\n  };\n}\n\n/* Helper functions */\n\nasync function readAsyncOsReleaseFile(\n  fileList: string[],\n  options: LinuxReleaseInfoOptions,\n): Promise<OsInfo> {\n  let fileData = null;\n\n  for (const osReleaseFile of fileList) {\n    try {\n      if (options.debug) {\n        /* eslint-disable no-console */\n        console.log(`Trying to read '${osReleaseFile}'...`);\n      }\n\n      fileData = await readFileAsync(osReleaseFile, \"binary\");\n\n      if (options.debug) {\n        console.log(`Read data:\\n${fileData}`);\n      }\n\n      break;\n    } catch (error) {\n      if (options.debug) {\n        console.error(error);\n      }\n    }\n  }\n\n  if (fileData === null) {\n    throw new Error(\"Cannot read os-release file!\");\n    //return getOsInfo();\n  }\n\n  return formatFileData(getOsInfo(), fileData);\n}\n\nfunction readSyncOsreleaseFile(\n  releaseFileList: string[],\n  options: LinuxReleaseInfoOptions,\n): OsInfo {\n  let fileData = null;\n\n  for (const osReleaseFile of releaseFileList) {\n    try {\n      if (options.debug) {\n        console.log(`Trying to read '${osReleaseFile}'...`);\n      }\n\n      fileData = fs.readFileSync(osReleaseFile, \"binary\");\n\n      if (options.debug) {\n        console.log(`Read data:\\n${fileData}`);\n      }\n\n      break;\n    } catch (error) {\n      if (options.debug) {\n        console.error(error);\n      }\n    }\n  }\n\n  if (fileData === null) {\n    throw new Error(\"Cannot read os-release file!\");\n    //return getOsInfo();\n  }\n\n  return formatFileData(getOsInfo(), fileData);\n}\n","// MIT, mostly lifted from https://github.com/actions/toolkit/blob/5a736647a123ecf8582376bdaee833fbae5b3847/packages/core/src/platform.ts\n// since it isn't in @actions/core 1.10.1 which is their current release as 2024-04-19.\n// Changes: Replaced the lsb_release call in Linux with `linux-release-info` to parse the os-release file directly.\nimport { releaseInfo } from \"./linux-release-info.js\";\nimport * as actionsCore from \"@actions/core\";\nimport * as exec from \"@actions/exec\";\nimport os from \"os\";\n\n/**\n * The name and version of the Action runner's system.\n */\ntype SystemInfo = {\n  name: string;\n  version: string;\n};\n\n/**\n * Get the name and version of the current Windows system.\n */\nconst getWindowsInfo = async (): Promise<SystemInfo> => {\n  const { stdout: version } = await exec.getExecOutput(\n    'powershell -command \"(Get-CimInstance -ClassName Win32_OperatingSystem).Version\"',\n    undefined,\n    {\n      silent: true,\n    },\n  );\n\n  const { stdout: name } = await exec.getExecOutput(\n    'powershell -command \"(Get-CimInstance -ClassName Win32_OperatingSystem).Caption\"',\n    undefined,\n    {\n      silent: true,\n    },\n  );\n\n  return {\n    name: name.trim(),\n    version: version.trim(),\n  };\n};\n\n/**\n * Get the name and version of the current macOS system.\n */\nconst getMacOsInfo = async (): Promise<SystemInfo> => {\n  const { stdout } = await exec.getExecOutput(\"sw_vers\", undefined, {\n    silent: true,\n  });\n\n  const version = stdout.match(/ProductVersion:\\s*(.+)/)?.[1] ?? \"\";\n  const name = stdout.match(/ProductName:\\s*(.+)/)?.[1] ?? \"\";\n\n  return {\n    name,\n    version,\n  };\n};\n\n/**\n * Get the name and version of the current Linux system.\n */\nconst getLinuxInfo = async (): Promise<SystemInfo> => {\n  let data: object = {};\n\n  try {\n    data = releaseInfo({ mode: \"sync\" });\n    actionsCore.debug(`Identified release info: ${JSON.stringify(data)}`);\n  } catch (e) {\n    actionsCore.debug(`Error collecting release info: ${e}`);\n  }\n\n  return {\n    name: getPropertyViaWithDefault(\n      data,\n      [\"id\", \"name\", \"pretty_name\", \"id_like\"],\n      \"unknown\",\n    ),\n    version: getPropertyViaWithDefault(\n      data,\n      [\"version_id\", \"version\", \"version_codename\"],\n      \"unknown\",\n    ),\n  };\n};\n\nfunction getPropertyViaWithDefault<T, Property extends string>(\n  data: object,\n  names: Property[],\n  defaultValue: T,\n): T {\n  for (const name of names) {\n    const ret: T = getPropertyWithDefault(data, name, defaultValue);\n\n    if (ret !== defaultValue) {\n      return ret;\n    }\n  }\n\n  return defaultValue;\n}\n\nfunction getPropertyWithDefault<T, Property extends string>(\n  data: object,\n  name: Property,\n  defaultValue: T,\n): T {\n  if (!data.hasOwnProperty(name)) {\n    return defaultValue;\n  }\n\n  const value = (data as { [K in Property]: T })[name];\n\n  // NB. this check won't work for object instances\n  if (typeof value !== typeof defaultValue) {\n    return defaultValue;\n  }\n\n  return value;\n}\n\n/**\n * The Action runner's platform.\n */\nexport const platform = os.platform();\n\n/**\n * The Action runner's architecture.\n */\nexport const arch = os.arch();\n\n/**\n * Whether the Action runner is a Windows system.\n */\nexport const isWindows = platform === \"win32\";\n\n/**\n * Whether the Action runner is a macOS system.\n */\nexport const isMacOS = platform === \"darwin\";\n\n/**\n * Whether the Action runner is a Linux system.\n */\nexport const isLinux = platform === \"linux\";\n\n/**\n * System-level information about the current host (platform, architecture, etc.).\n */\ntype SystemDetails = {\n  name: string;\n  platform: string;\n  arch: string;\n  version: string;\n  isWindows: boolean;\n  isMacOS: boolean;\n  isLinux: boolean;\n};\n\n/**\n * Get system-level information about the current host (platform, architecture, etc.).\n */\nexport async function getDetails(): Promise<SystemDetails> {\n  return {\n    ...(await (isWindows\n      ? getWindowsInfo()\n      : isMacOS\n        ? getMacOsInfo()\n        : getLinuxInfo())),\n    platform,\n    arch,\n    isWindows,\n    isMacOS,\n    isLinux,\n  };\n}\n","/**\n * Coerce a value of type `unknown` into a string.\n */\nexport function stringifyError(e: unknown): string {\n  if (e instanceof Error) {\n    return e.message;\n  } else if (typeof e === \"string\") {\n    return e;\n  } else {\n    return JSON.stringify(e);\n  }\n}\n","/**\n * @packageDocumentation\n * Collects backtraces for executables for diagnostics\n */\nimport { isLinux, isMacOS } from \"./actions-core-platform.js\";\nimport { stringifyError } from \"./errors.js\";\nimport * as actionsCore from \"@actions/core\";\nimport * as exec from \"@actions/exec\";\nimport { readFile, readdir, stat } from \"node:fs/promises\";\nimport { promisify } from \"node:util\";\nimport { gzip } from \"node:zlib\";\n\n// Give a few seconds buffer, capturing traces that happened a few seconds earlier.\nconst START_SLOP_SECONDS = 5;\n\nexport async function collectBacktraces(\n  prefixes: string[],\n  programNameDenyList: string[],\n  startTimestampMs: number,\n): Promise<Map<string, string>> {\n  if (isMacOS) {\n    return await collectBacktracesMacOS(\n      prefixes,\n      programNameDenyList,\n      startTimestampMs,\n    );\n  }\n  if (isLinux) {\n    return await collectBacktracesSystemd(\n      prefixes,\n      programNameDenyList,\n      startTimestampMs,\n    );\n  }\n\n  return new Map();\n}\n\nexport async function collectBacktracesMacOS(\n  prefixes: string[],\n  programNameDenyList: string[],\n  startTimestampMs: number,\n): Promise<Map<string, string>> {\n  const backtraces: Map<string, string> = new Map();\n\n  try {\n    const { stdout: logJson } = await exec.getExecOutput(\n      \"log\",\n      [\n        \"show\",\n        \"--style\",\n        \"json\",\n        \"--last\",\n        // Note we collect the last 1m only, because it should only take a few seconds to write the crash log.\n        // Therefore, any crashes before this 1m should be long done by now.\n        \"1m\",\n        \"--no-info\",\n        \"--predicate\",\n        \"sender = 'ReportCrash'\",\n      ],\n      {\n        silent: true,\n      },\n    );\n\n    const sussyArray: unknown = JSON.parse(logJson);\n    if (!Array.isArray(sussyArray)) {\n      throw new Error(`Log json isn't an array: ${logJson}`);\n    }\n\n    if (sussyArray.length > 0) {\n      actionsCore.info(`Collecting crash data...`);\n      const delay = async (ms: number): Promise<void> =>\n        new Promise((resolve) => setTimeout(resolve, ms));\n      await delay(5000);\n    }\n  } catch {\n    actionsCore.debug(\n      \"Failed to check logs for in-progress crash dumps; now proceeding with the assumption that all crash dumps completed.\",\n    );\n  }\n\n  const dirs = [\n    [\"system\", \"/Library/Logs/DiagnosticReports/\"],\n    [\"user\", `${process.env[\"HOME\"]}/Library/Logs/DiagnosticReports/`],\n  ];\n\n  for (const [source, dir] of dirs) {\n    const fileNames = (await readdir(dir))\n      .filter((fileName) => {\n        return prefixes.some((prefix) => fileName.startsWith(prefix));\n      })\n      .filter((fileName) => {\n        return !programNameDenyList.some((programName) =>\n          fileName.startsWith(programName),\n        );\n      })\n      .filter((fileName) => {\n        // macOS creates .diag files periodically, which are called \"microstackshots\".\n        // We don't necessarily want those, and they're definitely not crashes.\n        // See: https://patents.google.com/patent/US20140237219A1/en\n        return !fileName.endsWith(\".diag\");\n      });\n\n    const doGzip = promisify(gzip);\n    for (const fileName of fileNames) {\n      try {\n        if ((await stat(`${dir}/${fileName}`)).ctimeMs >= startTimestampMs) {\n          const logText = await readFile(`${dir}/${fileName}`);\n          const buf = await doGzip(logText);\n          backtraces.set(\n            `backtrace_value_${source}_${fileName}`,\n            buf.toString(\"base64\"),\n          );\n        }\n      } catch (innerError: unknown) {\n        backtraces.set(\n          `backtrace_failure_${source}_${fileName}`,\n          stringifyError(innerError),\n        );\n      }\n    }\n  }\n\n  return backtraces;\n}\n\ntype SystemdCoreDumpInfo = {\n  exe: string;\n  pid: number;\n};\n\nexport async function collectBacktracesSystemd(\n  prefixes: string[],\n  programNameDenyList: string[],\n  startTimestampMs: number,\n): Promise<Map<string, string>> {\n  const sinceSeconds =\n    Math.ceil((Date.now() - startTimestampMs) / 1000) + START_SLOP_SECONDS;\n  const backtraces: Map<string, string> = new Map();\n\n  const coredumps: SystemdCoreDumpInfo[] = [];\n\n  try {\n    const { stdout: coredumpjson } = await exec.getExecOutput(\n      \"coredumpctl\",\n      [\"--json=pretty\", \"list\", \"--since\", `${sinceSeconds} seconds ago`],\n      {\n        silent: true,\n      },\n    );\n\n    const sussyArray: unknown = JSON.parse(coredumpjson);\n    if (!Array.isArray(sussyArray)) {\n      throw new Error(`Coredump isn't an array: ${coredumpjson}`);\n    }\n\n    for (const sussyObject of sussyArray) {\n      const keys = Object.keys(sussyObject);\n\n      if (keys.includes(\"exe\") && keys.includes(\"pid\")) {\n        if (\n          typeof sussyObject.exe == \"string\" &&\n          typeof sussyObject.pid == \"number\"\n        ) {\n          const execParts = sussyObject.exe.split(\"/\");\n          const binaryName = execParts[execParts.length - 1];\n\n          if (\n            prefixes.some((prefix) => binaryName.startsWith(prefix)) &&\n            !programNameDenyList.includes(binaryName)\n          ) {\n            coredumps.push({\n              exe: sussyObject.exe,\n              pid: sussyObject.pid,\n            });\n          }\n        } else {\n          actionsCore.debug(\n            `Mysterious coredump entry missing exe string and/or pid number: ${JSON.stringify(sussyObject)}`,\n          );\n        }\n      } else {\n        actionsCore.debug(\n          `Mysterious coredump entry missing exe value and/or pid value: ${JSON.stringify(sussyObject)}`,\n        );\n      }\n    }\n  } catch (innerError: unknown) {\n    actionsCore.debug(\n      `Cannot collect backtraces: ${stringifyError(innerError)}`,\n    );\n\n    return backtraces;\n  }\n\n  const doGzip = promisify(gzip);\n  for (const coredump of coredumps) {\n    try {\n      const { stdout: logText } = await exec.getExecOutput(\n        \"coredumpctl\",\n        [\"info\", `${coredump.pid}`],\n        {\n          silent: true,\n        },\n      );\n\n      const buf = await doGzip(logText);\n      backtraces.set(`backtrace_value_${coredump.pid}`, buf.toString(\"base64\"));\n    } catch (innerError: unknown) {\n      backtraces.set(\n        `backtrace_failure_${coredump.pid}`,\n        stringifyError(innerError),\n      );\n    }\n  }\n\n  return backtraces;\n}\n","/**\n * @packageDocumentation\n * Parsing and hashing helpers for `shasum`-format checksum files, used to\n * hash-lock downloaded artifacts.\n */\nimport { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\n\nconst HEX_STRING_RE = /^[0-9a-fA-F]+$/;\n\n/**\n * Parse a `shasum`-format checksums file into a map of filename -> hex digest.\n *\n * Each non-empty line has the shape `<hex-digest><space(s)><filename>`. Lines\n * without a space delimiter are skipped. Invalid hex digests throw, so a\n * malformed file fails loudly rather than silently skipping the entry we\n * care about.\n */\nexport function parseChecksumsFile(text: string): Map<string, string> {\n  const result = new Map<string, string>();\n\n  for (const record of text.split(/\\r\\n|\\n|\\r/).filter(Boolean)) {\n    const delimIndex = record.indexOf(\" \");\n    if (delimIndex === -1) {\n      continue;\n    }\n\n    const digest = record.slice(0, delimIndex);\n    if (!HEX_STRING_RE.test(digest)) {\n      throw new Error(`Invalid digest in checksums file: ${digest}`);\n    }\n\n    const name = record.slice(delimIndex + 1).trim();\n    if (name === \"\") {\n      continue;\n    }\n\n    result.set(name, digest.toLowerCase());\n  }\n\n  return result;\n}\n\n/**\n * Compute the SHA-256 of a file on disk and return its lowercase hex digest.\n * Streams the file so memory use is constant regardless of size.\n */\nexport async function sha256OfFile(filePath: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const hash = createHash(\"sha256\").setEncoding(\"hex\");\n    createReadStream(filePath)\n      .once(\"error\", reject)\n      .pipe(hash)\n      .once(\"finish\", () => resolve(hash.read() as string));\n  });\n}\n\n/**\n * Compute the SHA-256 of an in-memory buffer or string and return its\n * lowercase hex digest.\n */\nexport function sha256OfBuffer(data: Buffer | string): string {\n  return createHash(\"sha256\").update(data).digest(\"hex\");\n}\n","import * as actionsCore from \"@actions/core\";\nimport { createHash, randomUUID } from \"node:crypto\";\n\nconst OPTIONAL_VARIABLES = [\"INVOCATION_ID\"];\n\n/* eslint-disable camelcase */\n/**\n * JSON sent to server.\n */\nexport type CorrelationProperties = {\n  $anon_distinct_id: string;\n  $groups: Record<string, string | undefined>;\n  $session_id?: string;\n  correlation_source: string;\n  github_repository_hash?: string;\n  github_workflow_hash?: string;\n  github_workflow_job_hash?: string;\n  github_workflow_run_differentiator_hash?: string;\n  github_workflow_run_hash?: string;\n  is_ci: boolean;\n};\n\nexport function identify(): CorrelationProperties {\n  const repository = hashEnvironmentVariables(\"GHR\", [\n    \"GITHUB_SERVER_URL\",\n    \"GITHUB_REPOSITORY_OWNER\",\n    \"GITHUB_REPOSITORY_OWNER_ID\",\n    \"GITHUB_REPOSITORY\",\n    \"GITHUB_REPOSITORY_ID\",\n  ]);\n\n  const run_differentiator = hashEnvironmentVariables(\"GHWJA\", [\n    \"GITHUB_SERVER_URL\",\n    \"GITHUB_REPOSITORY_OWNER\",\n    \"GITHUB_REPOSITORY_OWNER_ID\",\n    \"GITHUB_REPOSITORY\",\n    \"GITHUB_REPOSITORY_ID\",\n    \"GITHUB_WORKFLOW\",\n    \"GITHUB_JOB\",\n    \"GITHUB_RUN_ID\",\n    \"GITHUB_RUN_NUMBER\",\n    \"GITHUB_RUN_ATTEMPT\",\n    \"INVOCATION_ID\",\n  ]);\n\n  const ident: CorrelationProperties = {\n    $anon_distinct_id: process.env[\"RUNNER_TRACKING_ID\"] || randomUUID(),\n\n    correlation_source: \"github-actions\",\n\n    github_repository_hash: repository,\n    github_workflow_hash: hashEnvironmentVariables(\"GHW\", [\n      \"GITHUB_SERVER_URL\",\n      \"GITHUB_REPOSITORY_OWNER\",\n      \"GITHUB_REPOSITORY_OWNER_ID\",\n      \"GITHUB_REPOSITORY\",\n      \"GITHUB_REPOSITORY_ID\",\n      \"GITHUB_WORKFLOW\",\n    ]),\n    github_workflow_job_hash: hashEnvironmentVariables(\"GHWJ\", [\n      \"GITHUB_SERVER_URL\",\n      \"GITHUB_REPOSITORY_OWNER\",\n      \"GITHUB_REPOSITORY_OWNER_ID\",\n      \"GITHUB_REPOSITORY\",\n      \"GITHUB_REPOSITORY_ID\",\n      \"GITHUB_WORKFLOW\",\n      \"GITHUB_JOB\",\n    ]),\n    github_workflow_run_hash: hashEnvironmentVariables(\"GHWJR\", [\n      \"GITHUB_SERVER_URL\",\n      \"GITHUB_REPOSITORY_OWNER\",\n      \"GITHUB_REPOSITORY_OWNER_ID\",\n      \"GITHUB_REPOSITORY\",\n      \"GITHUB_REPOSITORY_ID\",\n      \"GITHUB_WORKFLOW\",\n      \"GITHUB_JOB\",\n      \"GITHUB_RUN_ID\",\n    ]),\n    github_workflow_run_differentiator_hash: run_differentiator,\n    $session_id: run_differentiator,\n    $groups: {\n      github_repository: repository,\n      github_organization: hashEnvironmentVariables(\"GHO\", [\n        \"GITHUB_SERVER_URL\",\n        \"GITHUB_REPOSITORY_OWNER\",\n        \"GITHUB_REPOSITORY_OWNER_ID\",\n      ]),\n    },\n    is_ci: true,\n  };\n\n  actionsCore.debug(\"Correlation data:\");\n  actionsCore.debug(JSON.stringify(ident, null, 2));\n\n  return ident;\n}\n\nfunction hashEnvironmentVariables(\n  prefix: string,\n  variables: string[],\n): undefined | string {\n  const hash = createHash(\"sha256\");\n\n  for (const varName of variables) {\n    let value = process.env[varName];\n\n    if (value === undefined) {\n      if (OPTIONAL_VARIABLES.includes(varName)) {\n        actionsCore.debug(\n          `Optional environment variable not set: ${varName} -- substituting with the variable name`,\n        );\n        value = varName;\n      } else {\n        actionsCore.debug(\n          `Environment variable not set: ${varName} -- can't generate the requested identity`,\n        );\n        return undefined;\n      }\n    }\n\n    hash.update(value);\n    hash.update(\"\\0\");\n  }\n\n  return `${prefix}-${hash.digest(\"hex\")}`;\n}\n","/**\n * @packageDocumentation\n * Identifies and discovers backend servers for install.determinate.systems\n */\nimport { stringifyError } from \"./errors.js\";\nimport * as actionsCore from \"@actions/core\";\nimport got, { type Got } from \"got\";\nimport type { SrvRecord } from \"node:dns\";\nimport { resolveSrv } from \"node:dns/promises\";\n\nconst DEFAULT_LOOKUP = \"_detsys_ids._tcp.install.determinate.systems.\";\nconst ALLOWED_SUFFIXES = [\n  \".install.determinate.systems\",\n  \".install.detsys.dev\",\n];\n\nconst DEFAULT_IDS_HOST = \"https://install.determinate.systems\";\nconst LOOKUP = process.env[\"IDS_LOOKUP\"] ?? DEFAULT_LOOKUP;\n\nconst DEFAULT_TIMEOUT = 10_000; // 10 seconds in ms\n\n/**\n * Host information for install.determinate.systems.\n */\nexport class IdsHost {\n  private idsProjectName: string;\n  private diagnosticsSuffix?: string;\n  private runtimeDiagnosticsUrl?: string;\n  private prioritizedURLs?: URL[];\n  private client?: Got;\n  private timeout: number;\n\n  constructor(\n    idsProjectName: string,\n    diagnosticsSuffix: string | undefined,\n    runtimeDiagnosticsUrl: string | undefined,\n    timeout: number = DEFAULT_TIMEOUT,\n  ) {\n    this.idsProjectName = idsProjectName;\n    this.diagnosticsSuffix = diagnosticsSuffix;\n    this.runtimeDiagnosticsUrl = runtimeDiagnosticsUrl;\n    this.client = undefined;\n    this.timeout = timeout;\n  }\n\n  async getGot(\n    recordFailoverCallback?: (\n      incitingError: unknown,\n      prevUrl: URL,\n      nextUrl: URL,\n    ) => void,\n  ): Promise<Got> {\n    if (this.client === undefined) {\n      this.client = got.extend({\n        timeout: {\n          request: this.timeout,\n        },\n\n        retry: {\n          limit: Math.max((await this.getUrlsByPreference()).length, 3),\n          methods: [\"GET\", \"HEAD\"],\n        },\n\n        hooks: {\n          beforeRetry: [\n            async (error, retryCount) => {\n              const prevUrl = await this.getRootUrl();\n              this.markCurrentHostBroken();\n              const nextUrl = await this.getRootUrl();\n\n              if (recordFailoverCallback !== undefined) {\n                recordFailoverCallback(error, prevUrl, nextUrl);\n              }\n\n              actionsCore.info(\n                `Retrying after error ${error.code}, retry #: ${retryCount}`,\n              );\n            },\n          ],\n\n          beforeRequest: [\n            async (options) => {\n              // The getter always returns a URL, even though the setter accepts a string\n              const currentUrl: URL = options.url as URL;\n\n              if (this.isUrlSubjectToDynamicUrls(currentUrl)) {\n                const newUrl: URL = new URL(currentUrl);\n\n                const url: URL = await this.getRootUrl();\n                newUrl.host = url.host;\n\n                options.url = newUrl;\n                actionsCore.debug(`Transmuted ${currentUrl} into ${newUrl}`);\n              } else {\n                actionsCore.debug(`No transmutations on ${currentUrl}`);\n              }\n            },\n          ],\n        },\n      });\n    }\n\n    return this.client;\n  }\n\n  markCurrentHostBroken(): void {\n    this.prioritizedURLs?.shift();\n  }\n\n  setPrioritizedUrls(urls: URL[]): void {\n    this.prioritizedURLs = urls;\n  }\n\n  isUrlSubjectToDynamicUrls(url: URL): boolean {\n    if (url.origin === DEFAULT_IDS_HOST) {\n      return true;\n    }\n\n    for (const suffix of ALLOWED_SUFFIXES) {\n      if (url.host.endsWith(suffix)) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  async getDynamicRootUrl(): Promise<URL | undefined> {\n    const idsHost = process.env[\"IDS_HOST\"];\n    if (idsHost !== undefined) {\n      try {\n        return new URL(idsHost);\n      } catch (err: unknown) {\n        actionsCore.error(\n          `IDS_HOST environment variable is not a valid URL. Ignoring. ${stringifyError(err)}`,\n        );\n      }\n    }\n\n    let url: URL | undefined = undefined;\n    try {\n      const urls = await this.getUrlsByPreference();\n      url = urls[0];\n    } catch (err: unknown) {\n      actionsCore.error(\n        `Error collecting IDS URLs by preference: ${stringifyError(err)}`,\n      );\n    }\n\n    if (url === undefined) {\n      return undefined;\n    } else {\n      // This is a load-bearing `new URL(url)` so that callers can't mutate\n      // getRootUrl's return value.\n      return new URL(url);\n    }\n  }\n\n  async getRootUrl(): Promise<URL> {\n    const url = await this.getDynamicRootUrl();\n\n    if (url === undefined) {\n      return new URL(DEFAULT_IDS_HOST);\n    }\n\n    return url;\n  }\n\n  async getDiagnosticsUrl(): Promise<URL | undefined> {\n    if (this.runtimeDiagnosticsUrl === \"\") {\n      // User specifically set the diagnostics URL to an empty string\n      // so disable diagnostics\n      return undefined;\n    }\n\n    if (\n      this.runtimeDiagnosticsUrl !== \"-\" &&\n      this.runtimeDiagnosticsUrl !== undefined\n    ) {\n      try {\n        // Caller specified a specific diagnostics URL\n        return new URL(this.runtimeDiagnosticsUrl);\n      } catch (err: unknown) {\n        actionsCore.info(\n          `User-provided diagnostic endpoint ignored: not a valid URL: ${stringifyError(err)}`,\n        );\n      }\n    }\n\n    try {\n      const diagnosticUrl = await this.getRootUrl();\n      diagnosticUrl.pathname += \"events/batch\";\n      return diagnosticUrl;\n    } catch (err: unknown) {\n      actionsCore.info(\n        `Generated diagnostic endpoint ignored, and diagnostics are disabled: not a valid URL: ${stringifyError(err)}`,\n      );\n      return undefined;\n    }\n  }\n\n  private async getUrlsByPreference(): Promise<URL[]> {\n    if (this.prioritizedURLs === undefined) {\n      this.prioritizedURLs = orderRecordsByPriorityWeight(\n        await discoverServiceRecords(),\n      ).flatMap((record) => recordToUrl(record) || []);\n    }\n\n    return this.prioritizedURLs;\n  }\n}\n\nexport function recordToUrl(record: SrvRecord): URL | undefined {\n  const urlStr = `https://${record.name}:${record.port}`;\n  try {\n    return new URL(urlStr);\n  } catch (err: unknown) {\n    actionsCore.debug(\n      `Record ${JSON.stringify(record)} produced an invalid URL: ${urlStr} (${err})`,\n    );\n    return undefined;\n  }\n}\n\nasync function discoverServiceRecords(): Promise<SrvRecord[]> {\n  return await discoverServicesStub(resolveSrv(LOOKUP), 1_000);\n}\n\nexport async function discoverServicesStub(\n  lookup: Promise<SrvRecord[]>,\n  timeout: number,\n): Promise<SrvRecord[]> {\n  const defaultFallback: Promise<SrvRecord[]> = new Promise(\n    (resolve, _reject) => {\n      setTimeout(resolve, timeout, []);\n    },\n  );\n\n  let records: SrvRecord[];\n\n  try {\n    records = await Promise.race([lookup, defaultFallback]);\n  } catch (reason: unknown) {\n    actionsCore.debug(`Error resolving SRV records: ${stringifyError(reason)}`);\n    records = [];\n  }\n\n  const acceptableRecords = records.filter((record: SrvRecord): boolean => {\n    for (const suffix of ALLOWED_SUFFIXES) {\n      if (record.name.endsWith(suffix)) {\n        return true;\n      }\n    }\n\n    actionsCore.debug(\n      `Unacceptable domain due to an invalid suffix: ${record.name}`,\n    );\n\n    return false;\n  });\n\n  if (acceptableRecords.length === 0) {\n    actionsCore.debug(`No records found for ${LOOKUP}`);\n  } else {\n    actionsCore.debug(\n      `Resolved ${LOOKUP} to ${JSON.stringify(acceptableRecords)}`,\n    );\n  }\n\n  return acceptableRecords;\n}\n\nexport function orderRecordsByPriorityWeight(\n  records: SrvRecord[],\n): SrvRecord[] {\n  const byPriorityWeight: Map<number, SrvRecord[]> = new Map();\n  for (const record of records) {\n    const existing = byPriorityWeight.get(record.priority);\n    if (existing) {\n      existing.push(record);\n    } else {\n      byPriorityWeight.set(record.priority, [record]);\n    }\n  }\n\n  const prioritizedRecords: SrvRecord[] = [];\n  const keys: number[] = Array.from(byPriorityWeight.keys()).sort(\n    (a, b) => a - b,\n  );\n\n  for (const priority of keys) {\n    const recordsByPrio = byPriorityWeight.get(priority);\n    if (recordsByPrio === undefined) {\n      continue;\n    }\n\n    prioritizedRecords.push(...weightedRandom(recordsByPrio));\n  }\n\n  return prioritizedRecords;\n}\n\nexport function weightedRandom(records: SrvRecord[]): SrvRecord[] {\n  // Duplicate records so we don't accidentally change our caller's data\n  const scratchRecords: SrvRecord[] = records.slice();\n  const result: SrvRecord[] = [];\n\n  while (scratchRecords.length > 0) {\n    const weights: number[] = [];\n\n    {\n      for (let i = 0; i < scratchRecords.length; i++) {\n        weights.push(\n          scratchRecords[i].weight + (i > 0 ? scratchRecords[i - 1].weight : 0),\n        );\n      }\n    }\n\n    const point = Math.random() * weights[weights.length - 1];\n\n    for (\n      let selectedIndex = 0;\n      selectedIndex < weights.length;\n      selectedIndex++\n    ) {\n      if (weights[selectedIndex] > point) {\n        // Remove our selected record and add it to the result\n        result.push(scratchRecords.splice(selectedIndex, 1)[0]);\n        break;\n      }\n    }\n  }\n\n  return result;\n}\n","/**\n * @packageDocumentation\n * Helpers for getting values from an Action's configuration.\n */\nimport * as actionsCore from \"@actions/core\";\n\n/**\n * Get a Boolean input from the Action's configuration by name.\n */\nconst getBool = (name: string): boolean => {\n  return actionsCore.getBooleanInput(name);\n};\n\n/**\n * Get a Boolean input from the Action's configuration by name, or undefined if it is unset.\n */\nconst getBoolOrUndefined = (name: string): boolean | undefined => {\n  if (getStringOrUndefined(name) === undefined) {\n    return undefined;\n  }\n\n  return actionsCore.getBooleanInput(name);\n};\n\n/**\n * The character used to separate values in the input string.\n */\nexport type Separator = \"space\" | \"comma\";\n\n/**\n * Convert a comma-separated string input into an array of strings. If `comma` is selected,\n * all whitespace is removed from the string before converting to an array.\n */\nconst getArrayOfStrings = (name: string, separator: Separator): string[] => {\n  const original = getString(name);\n  return handleString(original, separator);\n};\n\n/**\n * Convert a string input into an array of strings or `null` if no value is set.\n */\nconst getArrayOfStringsOrNull = (\n  name: string,\n  separator: Separator,\n): string[] | null => {\n  const original = getStringOrNull(name);\n  if (original === null) {\n    return null;\n  } else {\n    return handleString(original, separator);\n  }\n};\n\n// Split out this function for use in testing\nexport const handleString = (input: string, separator: Separator): string[] => {\n  const sepChar = separator === \"comma\" ? \",\" : /\\s+/;\n  const trimmed = input.trim(); // Remove whitespace at the beginning and end\n  if (trimmed === \"\") {\n    return [];\n  }\n\n  return trimmed.split(sepChar).map((s: string) => s.trim());\n};\n\n/**\n * Get a multi-line string input from the Action's configuration by name or return `null` if not set.\n */\nconst getMultilineStringOrNull = (name: string): string[] | null => {\n  const value = actionsCore.getMultilineInput(name);\n  if (value.length === 0) {\n    return null;\n  } else {\n    return value;\n  }\n};\n\n/**\n * Get a number input from the Action's configuration by name or return `null` if not set.\n */\nconst getNumberOrNull = (name: string): number | null => {\n  const value = actionsCore.getInput(name);\n  if (value === \"\") {\n    return null;\n  } else {\n    return Number(value);\n  }\n};\n\n/**\n * Get a Number input from the Action's configuration by name, or undefined if it is unset.\n */\nconst getNumberOrUndefined = (name: string): number | undefined => {\n  const value = getStringOrUndefined(name);\n  if (value === undefined) {\n    return undefined;\n  }\n\n  return Number(value);\n};\n\n/**\n * Get a string input from the Action's configuration.\n */\nconst getString = (name: string): string => {\n  return actionsCore.getInput(name);\n};\n\n/**\n * Get a string input from the Action's configuration by name or return `null` if not set.\n */\nconst getStringOrNull = (name: string): string | null => {\n  const value = actionsCore.getInput(name);\n  if (value === \"\") {\n    return null;\n  } else {\n    return value;\n  }\n};\n\n/**\n * Get a string input from the Action's configuration by name or return `undefined` if not set.\n */\nconst getStringOrUndefined = (name: string): string | undefined => {\n  const value = actionsCore.getInput(name);\n  if (value === \"\") {\n    return undefined;\n  } else {\n    return value;\n  }\n};\n\nexport {\n  getBool,\n  getBoolOrUndefined,\n  getArrayOfStrings,\n  getArrayOfStringsOrNull,\n  getMultilineStringOrNull,\n  getNumberOrNull,\n  getNumberOrUndefined,\n  getString,\n  getStringOrNull,\n  getStringOrUndefined,\n};\n","/**\n * @packageDocumentation\n * Helpers for determining system attributes of the current runner.\n */\nimport * as actionsCore from \"@actions/core\";\n\n/**\n * Get the current architecture plus OS. Examples include `X64-Linux` and `ARM64-macOS`.\n */\nexport function getArchOs(): string {\n  const envArch = process.env.RUNNER_ARCH;\n  const envOs = process.env.RUNNER_OS;\n\n  if (envArch && envOs) {\n    return `${envArch}-${envOs}`;\n  } else {\n    actionsCore.error(\n      `Can't identify the platform: RUNNER_ARCH or RUNNER_OS undefined (${envArch}-${envOs})`,\n    );\n    throw new Error(\"RUNNER_ARCH and/or RUNNER_OS is not defined\");\n  }\n}\n\n/**\n * Get the current Nix system. Examples include `x86_64-linux` and `aarch64-darwin`.\n */\nexport function getNixPlatform(archOs: string): string {\n  const archOsMap: Map<string, string> = new Map([\n    [\"X64-macOS\", \"x86_64-darwin\"],\n    [\"ARM64-macOS\", \"aarch64-darwin\"],\n    [\"X64-Linux\", \"x86_64-linux\"],\n    [\"ARM64-Linux\", \"aarch64-linux\"],\n  ]);\n\n  const mappedTo = archOsMap.get(archOs);\n  if (mappedTo) {\n    return mappedTo;\n  } else {\n    actionsCore.error(\n      `ArchOs (${archOs}) doesn't map to a supported Nix platform.`,\n    );\n    throw new Error(\n      `Cannot convert ArchOs (${archOs}) to a supported Nix platform.`,\n    );\n  }\n}\n","import { getStringOrUndefined } from \"./inputs.js\";\nimport * as actionsCore from \"@actions/core\";\n\nexport type SourceDef = {\n  path?: string;\n  url?: string;\n  tag?: string;\n  pr?: string;\n  branch?: string;\n  revision?: string;\n};\n\n/**\n * Throw if hash-locking is requested against a source that is not pinned to a\n * fixed version. `source-tag`, `source-revision`, and `source-url` are\n * immutable (or caller-controlled); any other selector resolves to a moving\n * target (`branch`, `pr`, or the `stable` fallback) where the pinned checksum\n * would break the moment a new release is published.\n */\nexport function assertChecksumSourceIsPinned(source: SourceDef): void {\n  if (\n    source.url === undefined &&\n    source.tag === undefined &&\n    source.revision === undefined\n  ) {\n    throw new Error(\n      \"Hash-locking via `source-checksums-url`/`source-checksums-sha256` requires a pinned source: set `source-tag`, `source-revision`, or `source-url`. Without one the action resolves to a moving target (e.g. `stable`) and the checksum will break the next time a release is published.\",\n    );\n  }\n}\n\nexport function constructSourceParameters(legacyPrefix?: string): SourceDef {\n  return {\n    path: noisilyGetInput(\"path\", legacyPrefix),\n    url: noisilyGetInput(\"url\", legacyPrefix),\n    tag: noisilyGetInput(\"tag\", legacyPrefix),\n    pr: noisilyGetInput(\"pr\", legacyPrefix),\n    branch: noisilyGetInput(\"branch\", legacyPrefix),\n    revision: noisilyGetInput(\"revision\", legacyPrefix),\n  };\n}\n\nfunction noisilyGetInput(\n  suffix: string,\n  legacyPrefix: string | undefined,\n): string | undefined {\n  const preferredInput = getStringOrUndefined(`source-${suffix}`);\n\n  if (!legacyPrefix) {\n    return preferredInput;\n  }\n\n  // Remaining is for handling cases where the legacy prefix\n  // should be examined.\n  const legacyInput = getStringOrUndefined(`${legacyPrefix}-${suffix}`);\n\n  if (preferredInput && legacyInput) {\n    actionsCore.warning(\n      `The supported option source-${suffix} and the legacy option ${legacyPrefix}-${suffix} are both set. Preferring source-${suffix}. Please stop setting ${legacyPrefix}-${suffix}.`,\n    );\n    return preferredInput;\n  } else if (legacyInput) {\n    actionsCore.warning(\n      `The legacy option ${legacyPrefix}-${suffix} is set. Please migrate to source-${suffix}.`,\n    );\n    return legacyInput;\n  } else {\n    return preferredInput;\n  }\n}\n","/**\n * @packageDocumentation\n * Determinate Systems' TypeScript library for creating GitHub Actions logic.\n */\n// import { version as pkgVersion } from \"../package.json\";\nimport * as ghActionsCorePlatform from \"./actions-core-platform.js\";\nimport { collectBacktraces } from \"./backtrace.js\";\nimport type { CheckIn, Feature } from \"./check-in.js\";\nimport {\n  parseChecksumsFile,\n  sha256OfBuffer,\n  sha256OfFile,\n} from \"./checksums.js\";\nimport * as correlation from \"./correlation.js\";\nimport { IdsHost } from \"./ids-host.js\";\nimport {\n  getBool,\n  getBoolOrUndefined,\n  getNumberOrUndefined,\n  getStringOrNull,\n} from \"./inputs.js\";\nimport * as platform from \"./platform.js\";\nimport type { SourceDef } from \"./sourcedef.js\";\nimport {\n  assertChecksumSourceIsPinned,\n  constructSourceParameters,\n} from \"./sourcedef.js\";\nimport * as actionsCache from \"@actions/cache\";\nimport * as actionsCore from \"@actions/core\";\nimport * as actionsExec from \"@actions/exec\";\nimport { type Got, type Request, TimeoutError } from \"got\";\nimport { exec } from \"node:child_process\";\nimport type { UUID } from \"node:crypto\";\nimport { randomUUID } from \"node:crypto\";\nimport {\n  PathLike,\n  WriteStream,\n  createWriteStream,\n  constants as fsConstants,\n  readFileSync,\n} from \"node:fs\";\nimport fs, { chmod, copyFile, mkdir } from \"node:fs/promises\";\nimport * as os from \"node:os\";\nimport { tmpdir } from \"node:os\";\nimport * as path from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { gzip } from \"node:zlib\";\n\nconst pkgVersion = \"1.0\";\n\nconst EVENT_BACKTRACES = \"backtrace\";\nconst EVENT_EXCEPTION = \"exception\";\nconst EVENT_ARTIFACT_CACHE_HIT = \"artifact_cache_hit\";\nconst EVENT_ARTIFACT_CACHE_MISS = \"artifact_cache_miss\";\nconst EVENT_ARTIFACT_CACHE_PERSIST = \"artifact_cache_persist\";\nconst EVENT_PREFLIGHT_REQUIRE_NIX_DENIED = \"preflight-require-nix-denied\";\nconst EVENT_STORE_IDENTITY_FAILED = \"store_identity_failed\";\n\nconst FACT_ARTIFACT_FETCHED_FROM_CACHE = \"artifact_fetched_from_cache\";\nconst FACT_ENDED_WITH_EXCEPTION = \"ended_with_exception\";\nconst FACT_FINAL_EXCEPTION = \"final_exception\";\nconst FACT_OS = \"$os\";\nconst FACT_OS_VERSION = \"$os_version\";\nconst FACT_SOURCE_URL = \"source_url\";\nconst FACT_SOURCE_URL_ETAG = \"source_url_etag\";\nconst FACT_SOURCE_CHECKSUMS_SHA256 = \"source_checksums_sha256\";\nconst FACT_NIX_VERSION = \"nix_version\";\n\nconst FACT_NIX_LOCATION = \"nix_location\";\nconst FACT_NIX_STORE_TRUST = \"nix_store_trusted\";\nconst FACT_NIX_STORE_VERSION = \"nix_store_version\";\nconst FACT_NIX_STORE_CHECK_METHOD = \"nix_store_check_method\";\nconst FACT_NIX_STORE_CHECK_ERROR = \"nix_store_check_error\";\n\nconst STATE_KEY_EXECUTION_PHASE = \"detsys_action_execution_phase\";\nconst STATE_KEY_NIX_NOT_FOUND = \"detsys_action_nix_not_found\";\nconst STATE_NOT_FOUND = \"not-found\";\nconst STATE_KEY_CROSS_PHASE_ID = \"detsys_cross_phase_id\";\nconst STATE_BACKTRACE_START_TIMESTAMP = \"detsys_backtrace_start_timestamp\";\n\nconst DIAGNOSTIC_ENDPOINT_TIMEOUT_MS = 10_000; // 10 seconds in ms\nconst CHECK_IN_ENDPOINT_TIMEOUT_MS = 1_000; // 1 second in ms\nconst PROGRAM_NAME_CRASH_DENY_LIST = [\n  \"nix-expr-tests\",\n  \"nix-store-tests\",\n  \"nix-util-tests\",\n];\n\n/**\n * An enum for describing different \"fetch suffixes\" for i.d.s.\n *\n * - `nix-style` means that system names like `x86_64-linux` and `aarch64-darwin` are used\n * - `gh-env-style` means that names like `X64-Linux` and `ARM64-macOS` are used\n * - `universal` means that the suffix is the static `universal` (for non-system-specific things)\n */\nexport type FetchSuffixStyle = \"nix-style\" | \"gh-env-style\" | \"universal\";\n\n/**\n * GitHub Actions has two possible execution phases: `main` and `post`.\n */\nexport type ExecutionPhase = \"main\" | \"post\";\n\n/**\n * How to handle whether Nix is currently installed on the runner.\n *\n * - `fail` means that the workflow fails if Nix isn't installed\n * - `warn` means that a warning is logged if Nix isn't installed\n * - `ignore` means that Nix will not be checked\n */\nexport type NixRequirementHandling = \"fail\" | \"warn\" | \"ignore\";\n\n/**\n * Whether the Nix store on the runner is trusted.\n *\n * - `trusted` means yes\n * - `untrusted` means no\n * - `unknown` means that the status couldn't be determined\n *\n * This is determined via the output of `nix store info --json`.\n */\nexport type NixStoreTrust = \"trusted\" | \"untrusted\" | \"unknown\";\n\nexport type ActionOptions = {\n  // Name of the project generally, and the name of the binary on disk.\n  name: string;\n\n  // Defaults to `name`, Corresponds to the ProjectHost entry on i.d.s.\n  idsProjectName?: string;\n\n  // Defaults to `action:`\n  eventPrefix?: string;\n\n  // The \"architecture\" URL component expected by I.D.S. for the ProjectHost.\n  fetchStyle: FetchSuffixStyle;\n\n  // IdsToolbox assumes the GitHub Action exposes source overrides, like branch/pr/etc. to be named `source-*`.\n  // This prefix adds a fallback name, prefixed by `${legacySourcePrefix}-`.\n  // Users who configure legacySourcePrefix will get warnings asking them to change to `source-*`.\n  legacySourcePrefix?: string;\n\n  // Check if Nix is installed before running this action.\n  // If Nix isn't installed, this action will not fail, and will instead do nothing.\n  // The action will emit a user-visible warning instructing them to install Nix.\n  requireNix: NixRequirementHandling;\n\n  // The URL suffix to send diagnostics events to.\n  //\n  // The final URL is constructed via IDS_HOST/idsProjectName/diagnosticsSuffix.\n  //\n  // Default: `diagnostics`.\n  diagnosticsSuffix?: string;\n\n  // Collect backtraces from segfaults and other failures from binaries that start with these names.\n  //\n  // Default: `[ \"nix\", \"determinate-nixd\", ActionOptions.name ]`.\n  binaryNamePrefixes?: string[];\n\n  // Do NOT collect backtraces from segfaults and other failures from binaries with exact these names.\n  //\n  // Default: `[ \"nix-expr-tests\" ]`.\n  binaryNamesDenyList?: string[];\n};\n\n/**\n * A confident version of Options, where defaults have been resolved into final values.\n */\nexport type ConfidentActionOptions = {\n  name: string;\n  idsProjectName: string;\n  eventPrefix: string;\n  fetchStyle: FetchSuffixStyle;\n  legacySourcePrefix?: string;\n  requireNix: NixRequirementHandling;\n  providedDiagnosticsUrl?: URL;\n  binaryNamePrefixes: string[];\n  binaryNamesDenyList: string[];\n};\n\n/**\n * An event to send to the diagnostic endpoint of i.d.s.\n */\nexport type DiagnosticEvent = {\n  // Note: putting a Map in here won't serialize to json properly.\n  // It'll just be {} on serialization.\n  name: string;\n  distinct_id?: string;\n  uuid: UUID;\n  timestamp: Date;\n\n  properties: Record<string, unknown>;\n};\n\nconst determinateStateDir = \"/var/lib/determinate\";\nconst determinateIdentityFile = path.join(determinateStateDir, \"identity.json\");\n\nconst isRoot = typeof process.geteuid === \"function\" && process.geteuid() === 0;\n\n/** Create the Determinate state directory by escalating via sudo */\nasync function sudoEnsureDeterminateStateDir(): Promise<void> {\n  const code = await actionsExec.exec(\"sudo\", [\n    \"mkdir\",\n    \"-p\",\n    determinateStateDir,\n  ]);\n\n  if (code !== 0) {\n    throw new Error(`sudo mkdir -p exit: ${code}`);\n  }\n}\n\n/** Ensures the Determinate state directory exists, escalating if necessary */\nasync function ensureDeterminateStateDir(): Promise<void> {\n  if (isRoot) {\n    await mkdir(determinateStateDir, { recursive: true });\n  } else {\n    return sudoEnsureDeterminateStateDir();\n  }\n}\n\n/** Writes correlation hashes to the Determinate state directory by writing to a `sudo tee` pipe */\nasync function sudoWriteCorrelationHashes(hashes: string): Promise<void> {\n  const buffer = Buffer.from(hashes);\n\n  const code = await actionsExec.exec(\n    \"sudo\",\n    [\"tee\", determinateIdentityFile],\n    {\n      input: buffer,\n\n      // Ignore output from tee\n      outStream: createWriteStream(\"/dev/null\"),\n    },\n  );\n\n  if (code !== 0) {\n    throw new Error(`sudo tee exit: ${code}`);\n  }\n}\n\n/** Writes correlation hashes to the Determinate state directory, escalating if necessary */\nasync function writeCorrelationHashes(hashes: string): Promise<void> {\n  await ensureDeterminateStateDir();\n\n  if (isRoot) {\n    await fs.writeFile(determinateIdentityFile, hashes, \"utf-8\");\n  } else {\n    return sudoWriteCorrelationHashes(hashes);\n  }\n}\n\nexport abstract class DetSysAction {\n  nixStoreTrust: NixStoreTrust;\n  strictMode: boolean;\n\n  private actionOptions: ConfidentActionOptions;\n  private exceptionAttachments: Map<string, PathLike>;\n  private archOs: string;\n  private executionPhase: ExecutionPhase;\n  private nixSystem: string;\n  private architectureFetchSuffix: string;\n  private sourceParameters: SourceDef;\n  private facts: Record<string, string | boolean | number>;\n  private events: DiagnosticEvent[];\n  private identity: correlation.CorrelationProperties;\n  private idsHost: IdsHost;\n  private features: { [k: string]: Feature };\n  private featureEventMetadata: { [k: string]: string | boolean };\n\n  private determineExecutionPhase(): ExecutionPhase {\n    const currentPhase = actionsCore.getState(STATE_KEY_EXECUTION_PHASE);\n    if (currentPhase === \"\") {\n      actionsCore.saveState(STATE_KEY_EXECUTION_PHASE, \"post\");\n      return \"main\";\n    } else {\n      return \"post\";\n    }\n  }\n\n  constructor(actionOptions: ActionOptions) {\n    this.actionOptions = makeOptionsConfident(actionOptions);\n    this.idsHost = new IdsHost(\n      this.actionOptions.idsProjectName,\n      actionOptions.diagnosticsSuffix,\n      // Note: we don't use actionsCore.getInput('diagnostic-endpoint') on purpose:\n      // getInput silently converts absent data to an empty string.\n      process.env[\"INPUT_DIAGNOSTIC-ENDPOINT\"],\n      getNumberOrUndefined(\"timeout-request\"),\n    );\n    this.exceptionAttachments = new Map();\n    this.nixStoreTrust = \"unknown\";\n    this.strictMode = getBool(\"_internal-strict-mode\");\n\n    if (\n      getBoolOrUndefined(\n        \"_internal-obliterate-actions-id-token-request-variables\",\n      ) === true\n    ) {\n      process.env[\"ACTIONS_ID_TOKEN_REQUEST_URL\"] = undefined;\n      process.env[\"ACTIONS_ID_TOKEN_REQUEST_TOKEN\"] = undefined;\n    }\n\n    this.features = {};\n    this.featureEventMetadata = {};\n    this.events = [];\n\n    this.getCrossPhaseId();\n    this.collectBacktraceSetup();\n\n    // JSON sent to server\n    /* eslint-disable camelcase */\n    this.facts = {\n      $lib: \"idslib\",\n      $lib_version: pkgVersion,\n      project: this.actionOptions.name,\n      ids_project: this.actionOptions.idsProjectName,\n    };\n\n    const params = [\n      [\"github_action_ref\", \"GITHUB_ACTION_REF\"],\n      [\"github_action_repository\", \"GITHUB_ACTION_REPOSITORY\"],\n      [\"github_event_name\", \"GITHUB_EVENT_NAME\"],\n      [\"$os\", \"RUNNER_OS\"],\n      [\"arch\", \"RUNNER_ARCH\"],\n    ];\n    for (const [target, env] of params) {\n      const value = process.env[env];\n      if (value) {\n        this.facts[target] = value;\n      }\n    }\n\n    this.identity = correlation.identify();\n    this.archOs = platform.getArchOs();\n    this.nixSystem = platform.getNixPlatform(this.archOs);\n\n    this.facts.$app_name = `${this.actionOptions.name}/action`;\n    this.facts.arch_os = this.archOs;\n    this.facts.nix_system = this.nixSystem;\n\n    {\n      ghActionsCorePlatform\n        .getDetails()\n        // eslint-disable-next-line github/no-then\n        .then((details) => {\n          if (details.name !== \"unknown\") {\n            this.addFact(FACT_OS, details.name);\n          }\n          if (details.version !== \"unknown\") {\n            this.addFact(FACT_OS_VERSION, details.version);\n          }\n        })\n        // eslint-disable-next-line github/no-then\n        .catch((e: unknown) => {\n          actionsCore.debug(\n            `Failure getting platform details: ${stringifyError(e)}`,\n          );\n        });\n    }\n\n    this.executionPhase = this.determineExecutionPhase();\n    this.facts.execution_phase = this.executionPhase;\n\n    if (this.actionOptions.fetchStyle === \"gh-env-style\") {\n      this.architectureFetchSuffix = this.archOs;\n    } else if (this.actionOptions.fetchStyle === \"nix-style\") {\n      this.architectureFetchSuffix = this.nixSystem;\n    } else if (this.actionOptions.fetchStyle === \"universal\") {\n      this.architectureFetchSuffix = \"universal\";\n    } else {\n      throw new Error(\n        `fetchStyle ${this.actionOptions.fetchStyle} is not a valid style`,\n      );\n    }\n\n    this.sourceParameters = constructSourceParameters(\n      this.actionOptions.legacySourcePrefix,\n    );\n\n    this.recordEvent(`begin_${this.executionPhase}`);\n  }\n\n  /**\n   * Attach a file to the diagnostics data in error conditions.\n   *\n   * The file at `location` doesn't need to exist when stapleFile is called.\n   *\n   * If the file doesn't exist or is unreadable when trying to staple the attachments, the JS error will be stored in a context value at `staple_failure_{name}`.\n   * If the file is readable, the file's contents will be stored in a context value at `staple_value_{name}`.\n   */\n  stapleFile(name: string, location: string): void {\n    this.exceptionAttachments.set(name, location);\n  }\n\n  /**\n   * The main execution phase.\n   */\n  abstract main(): Promise<void>;\n\n  /**\n   * The post execution phase.\n   */\n  abstract post(): Promise<void>;\n\n  /**\n   * Execute the Action as defined.\n   */\n  execute(): void {\n    // eslint-disable-next-line github/no-then\n    this.executeAsync().catch((error: Error) => {\n      // eslint-disable-next-line no-console\n      console.log(error);\n      process.exitCode = 1;\n    });\n  }\n\n  getTemporaryName(): string {\n    const tmpDir = process.env[\"RUNNER_TEMP\"] || tmpdir();\n    return path.join(tmpDir, `${this.actionOptions.name}-${randomUUID()}`);\n  }\n\n  addFact(key: string, value: string | boolean | number): void {\n    this.facts[key] = value;\n  }\n\n  async getDiagnosticsUrl(): Promise<URL | undefined> {\n    return await this.idsHost.getDiagnosticsUrl();\n  }\n\n  getUniqueId(): string {\n    return (\n      this.identity.github_workflow_run_differentiator_hash ||\n      process.env.RUNNER_TRACKING_ID ||\n      randomUUID()\n    );\n  }\n\n  // This ID will be saved in the action's state, to be persisted across phase steps\n  getCrossPhaseId(): string {\n    let crossPhaseId = actionsCore.getState(STATE_KEY_CROSS_PHASE_ID);\n\n    if (crossPhaseId === \"\") {\n      crossPhaseId = randomUUID();\n      actionsCore.saveState(STATE_KEY_CROSS_PHASE_ID, crossPhaseId);\n    }\n\n    return crossPhaseId;\n  }\n\n  getCorrelationHashes(): correlation.CorrelationProperties {\n    return this.identity;\n  }\n\n  recordEvent(\n    eventName: string,\n    context: Record<\n      string,\n      | boolean\n      | string\n      | number\n      | undefined\n      | Record<string, boolean | string | number | undefined>\n    > = {},\n  ): void {\n    const prefixedName =\n      eventName === \"$feature_flag_called\" || eventName === \"$groupidentify\"\n        ? eventName\n        : `${this.actionOptions.eventPrefix}${eventName}`;\n\n    this.events.push({\n      name: prefixedName,\n\n      // Use the anon distinct ID as the distinct ID until we actually have a distinct ID in the future\n      distinct_id: this.identity.$anon_distinct_id,\n\n      // distinct_id\n      uuid: randomUUID(),\n      timestamp: new Date(),\n\n      properties: {\n        ...context,\n        ...this.identity,\n        ...this.facts,\n        ...Object.fromEntries(\n          Object.entries(this.featureEventMetadata).map<\n            [string, string | boolean]\n          >(([name, variant]) => [`$feature/${name}`, variant]),\n        ),\n      },\n    });\n  }\n\n  /**\n   * Unpacks the closure returned by `fetchArtifact()`, imports the\n   * contents into the Nix store, and returns the path of the executable at\n   * `/nix/store/STORE_PATH/bin/${bin}`.\n   */\n  async unpackClosure(bin: string): Promise<string> {\n    const artifact = await this.fetchArtifact();\n    const { stdout } = await promisify(exec)(\n      `cat \"${artifact}\" | xz -d | nix-store --import`,\n    );\n    const paths = stdout.split(os.EOL);\n    const lastPath = paths.at(-2);\n    return `${lastPath}/bin/${bin}`;\n  }\n\n  /**\n   * Fetches the executable at the URL determined by the `source-*` inputs and\n   * other facts, `chmod`s it, and returns the path to the executable on disk.\n   */\n  async fetchExecutable(): Promise<string> {\n    const binaryPath = await this.fetchArtifact();\n    await chmod(binaryPath, fsConstants.S_IXUSR | fsConstants.S_IXGRP);\n    return binaryPath;\n  }\n\n  private get isMain(): boolean {\n    return this.executionPhase === \"main\";\n  }\n\n  private get isPost(): boolean {\n    return this.executionPhase === \"post\";\n  }\n\n  private async executeAsync(): Promise<void> {\n    try {\n      await this.checkIn();\n\n      const correlationHashes = JSON.stringify(this.getCorrelationHashes());\n      process.env.DETSYS_CORRELATION = correlationHashes;\n      try {\n        await writeCorrelationHashes(correlationHashes);\n      } catch (error) {\n        this.recordEvent(EVENT_STORE_IDENTITY_FAILED, { error: String(error) });\n      }\n\n      if (!(await this.preflightRequireNix())) {\n        this.recordEvent(EVENT_PREFLIGHT_REQUIRE_NIX_DENIED);\n        return;\n      } else {\n        await this.preflightNixStoreInfo();\n        await this.preflightNixVersion();\n        this.addFact(FACT_NIX_STORE_TRUST, this.nixStoreTrust);\n      }\n\n      if (this.isMain) {\n        this.recordGroup();\n        await this.main();\n\n        // Run the preflight of the nix version a second time so our \"shutdown\" events have updated version info.\n        await this.preflightNixVersion();\n      } else if (this.isPost) {\n        await this.post();\n      }\n      this.addFact(FACT_ENDED_WITH_EXCEPTION, false);\n    } catch (e: unknown) {\n      this.addFact(FACT_ENDED_WITH_EXCEPTION, true);\n\n      const reportable = stringifyError(e);\n\n      this.addFact(FACT_FINAL_EXCEPTION, reportable);\n\n      if (this.isPost) {\n        actionsCore.warning(reportable);\n      } else {\n        actionsCore.setFailed(reportable);\n      }\n\n      const doGzip = promisify(gzip);\n\n      const exceptionContext: Map<string, string> = new Map();\n      for (const [attachmentLabel, filePath] of this.exceptionAttachments) {\n        try {\n          const logText = readFileSync(filePath);\n          const buf = await doGzip(logText);\n          exceptionContext.set(\n            `staple_value_${attachmentLabel}`,\n            buf.toString(\"base64\"),\n          );\n        } catch (innerError: unknown) {\n          exceptionContext.set(\n            `staple_failure_${attachmentLabel}`,\n            stringifyError(innerError),\n          );\n        }\n      }\n\n      this.recordEvent(EVENT_EXCEPTION, Object.fromEntries(exceptionContext));\n    } finally {\n      if (this.isPost) {\n        await this.collectBacktraces();\n      }\n\n      await this.complete();\n    }\n  }\n\n  async getClient(): Promise<Got> {\n    return await this.idsHost.getGot(\n      (incitingError: unknown, prevUrl: URL, nextUrl: URL) => {\n        this.recordPlausibleTimeout(incitingError);\n\n        this.recordEvent(\"ids-failover\", {\n          previousUrl: prevUrl.toString(),\n          nextUrl: nextUrl.toString(),\n        });\n      },\n    );\n  }\n\n  private async checkIn(): Promise<void> {\n    const checkin = await this.requestCheckIn();\n    if (checkin === undefined) {\n      return;\n    }\n\n    this.features = checkin.options;\n    for (const [key, feature] of Object.entries(this.features)) {\n      this.featureEventMetadata[key] = feature.variant;\n    }\n\n    const impactSymbol: Map<string, string> = new Map([\n      [\"none\", \"⚪\"],\n      [\"maintenance\", \"🛠️\"],\n      [\"minor\", \"🟡\"],\n      [\"major\", \"🟠\"],\n      [\"critical\", \"🔴\"],\n    ]);\n    const defaultImpactSymbol = \"🔵\";\n\n    if (checkin.status !== null) {\n      const summaries: string[] = [];\n\n      for (const incident of checkin.status.incidents) {\n        summaries.push(\n          `${impactSymbol.get(incident.impact) || defaultImpactSymbol} ${incident.status.replace(\"_\", \" \")}: ${incident.name} (${incident.shortlink})`,\n        );\n      }\n\n      for (const maintenance of checkin.status.scheduled_maintenances) {\n        summaries.push(\n          `${impactSymbol.get(maintenance.impact) || defaultImpactSymbol} ${maintenance.status.replace(\"_\", \" \")}: ${maintenance.name} (${maintenance.shortlink})`,\n        );\n      }\n\n      if (summaries.length > 0) {\n        actionsCore.info(\n          // Bright red, Bold, Underline\n          `${\"\\u001b[0;31m\"}${\"\\u001b[1m\"}${\"\\u001b[4m\"}${checkin.status.page.name} Status`,\n        );\n        for (const notice of summaries) {\n          actionsCore.info(notice);\n        }\n        actionsCore.info(`See: ${checkin.status.page.url}`);\n        actionsCore.info(``);\n      }\n    }\n  }\n\n  getFeature(name: string): Feature | undefined {\n    if (!this.features.hasOwnProperty(name)) {\n      return undefined;\n    }\n\n    const result = this.features[name];\n    if (result === undefined) {\n      return undefined;\n    }\n\n    this.recordEvent(\"$feature_flag_called\", {\n      $feature_flag: name,\n      $feature_flag_response: result.variant,\n    });\n\n    return result;\n  }\n\n  private recordGroup(): void {\n    const ghorg_hash = this.identity.$groups[\"github_organization\"];\n    const ghorg_name = process.env[\"GITHUB_REPOSITORY_OWNER\"];\n\n    if (ghorg_hash !== undefined && ghorg_name !== undefined) {\n      this.recordEvent(\"$groupidentify\", {\n        $group_type: \"github_organization\",\n        $group_key: ghorg_hash,\n        $group_set: {\n          name: ghorg_name,\n        },\n      });\n    }\n  }\n\n  /**\n   * Check in to install.determinate.systems, to accomplish three things:\n   *\n   * 1. Preflight the server selected from IdsHost, to increase the chances of success.\n   * 2. Fetch any incidents and maintenance events to let users know in case things are weird.\n   * 3. Get feature flag data so we can gently roll out new features.\n   */\n  private async requestCheckIn(): Promise<CheckIn | undefined> {\n    for (\n      let attemptsRemaining = 5;\n      attemptsRemaining > 0;\n      attemptsRemaining--\n    ) {\n      const checkInUrl = await this.getCheckInUrl();\n      if (checkInUrl === undefined) {\n        return undefined;\n      }\n\n      try {\n        actionsCore.debug(`Preflighting via ${checkInUrl}`);\n\n        const props = {\n          // Use a distinct_id when we actually have one\n          distinct_id: this.identity.$anon_distinct_id,\n          anon_distinct_id: this.identity.$anon_distinct_id,\n          groups: this.identity.$groups,\n          person_properties: {\n            ci: \"github\",\n\n            ...this.identity,\n            ...this.facts,\n          },\n        };\n\n        return await (\n          await this.getClient()\n        )\n          .post(checkInUrl, {\n            json: props,\n            timeout: {\n              request: CHECK_IN_ENDPOINT_TIMEOUT_MS,\n            },\n          })\n          .json();\n      } catch (e: unknown) {\n        this.recordPlausibleTimeout(e);\n        actionsCore.debug(`Error checking in: ${stringifyError(e)}`);\n        this.idsHost.markCurrentHostBroken();\n      }\n    }\n\n    return undefined;\n  }\n\n  private recordPlausibleTimeout(e: unknown): void {\n    // see: https://github.com/sindresorhus/got/blob/895e463fa699d6f2e4b2fc01ceb3b2bb9e157f4c/documentation/8-errors.md\n    if (e instanceof TimeoutError && \"timings\" in e && \"request\" in e) {\n      const reportContext: {\n        [index: string]: string | number | undefined;\n      } = {\n        url: e.request.requestUrl?.toString(),\n        retry_count: e.request.retryCount,\n      };\n\n      for (const [key, value] of Object.entries(e.timings.phases)) {\n        if (Number.isFinite(value)) {\n          reportContext[`timing_phase_${key}`] = value;\n        }\n      }\n\n      this.recordEvent(\"timeout\", reportContext);\n    }\n  }\n\n  /**\n   * Fetch an artifact, such as a tarball, from the location determined by the\n   * `source-*` inputs. If `source-binary` is specified, this will return a path\n   * to a binary on disk; otherwise, the artifact will be downloaded from the\n   * URL determined by the other `source-*` inputs (`source-url`, `source-pr`,\n   * etc.).\n   *\n   * When `source-checksums-url` and `source-checksums-sha256` are both set,\n   * the downloaded artifact is verified against the per-arch hash in the\n   * checksums file, which is itself verified against the pinned\n   * `source-checksums-sha256`. Both inputs must be set together.\n   */\n  private async fetchArtifact(): Promise<string> {\n    const sourceBinary = getStringOrNull(\"source-binary\");\n\n    // If source-binary is set, use that. Otherwise fall back to the source-* parameters.\n    if (sourceBinary !== null && sourceBinary !== \"\") {\n      actionsCore.debug(`Using the provided source binary at ${sourceBinary}`);\n      return sourceBinary;\n    }\n\n    const expectedArtifactHash = await this.resolveExpectedArtifactHash();\n\n    actionsCore.startGroup(\n      `Downloading ${this.actionOptions.name} for ${this.architectureFetchSuffix}`,\n    );\n\n    try {\n      actionsCore.info(`Fetching from ${await this.getSourceUrl()}`);\n\n      const correlatedUrl = await this.getSourceUrl();\n      correlatedUrl.searchParams.set(\"ci\", \"github\");\n      correlatedUrl.searchParams.set(\n        \"correlation\",\n        JSON.stringify(this.identity),\n      );\n\n      const versionCheckup = await (await this.getClient()).head(correlatedUrl);\n      if (versionCheckup.headers.etag) {\n        const v = versionCheckup.headers.etag;\n        this.addFact(FACT_SOURCE_URL_ETAG, v);\n\n        actionsCore.debug(\n          `Checking the tool cache for ${await this.getSourceUrl()} at ${v}`,\n        );\n        const cached = await this.getCachedVersion(v, expectedArtifactHash);\n        if (cached) {\n          this.facts[FACT_ARTIFACT_FETCHED_FROM_CACHE] = true;\n          actionsCore.debug(`Tool cache hit.`);\n          await this.verifyArtifactHash(cached, expectedArtifactHash);\n          return cached;\n        }\n      }\n\n      this.facts[FACT_ARTIFACT_FETCHED_FROM_CACHE] = false;\n\n      actionsCore.debug(\n        `No match from the cache, re-fetching from the redirect: ${versionCheckup.url}`,\n      );\n\n      const destFile = this.getTemporaryName();\n\n      const fetchStream = await this.downloadFile(\n        new URL(versionCheckup.url),\n        destFile,\n      );\n\n      await this.verifyArtifactHash(destFile, expectedArtifactHash);\n\n      if (fetchStream.response?.headers.etag) {\n        const v = fetchStream.response.headers.etag;\n\n        try {\n          await this.saveCachedVersion(v, destFile, expectedArtifactHash);\n        } catch (e: unknown) {\n          actionsCore.debug(`Error caching the artifact: ${stringifyError(e)}`);\n        }\n      }\n\n      return destFile;\n    } catch (e: unknown) {\n      this.recordPlausibleTimeout(e);\n      throw e;\n    } finally {\n      actionsCore.endGroup();\n    }\n  }\n\n  /**\n   * Read the `source-checksums-url` and `source-checksums-sha256` inputs and,\n   * if both are set, fetch the checksums file, verify its hash matches the\n   * pin, parse it, and return the expected hash for the artifact matching\n   * this runner's `${name}-${architectureFetchSuffix}`. Returns `null` when\n   * verification is opted out (both inputs unset).\n   */\n  private async resolveExpectedArtifactHash(): Promise<string | null> {\n    const checksumsUrl = getStringOrNull(\"source-checksums-url\");\n    const checksumsSha256 = getStringOrNull(\"source-checksums-sha256\");\n\n    if (checksumsUrl === null && checksumsSha256 === null) {\n      return null;\n    }\n    if (checksumsUrl === null || checksumsSha256 === null) {\n      throw new Error(\n        \"`source-checksums-url` and `source-checksums-sha256` must be set together\",\n      );\n    }\n\n    assertChecksumSourceIsPinned(this.sourceParameters);\n\n    const expectedFileHash = checksumsSha256.toLowerCase();\n    this.addFact(FACT_SOURCE_CHECKSUMS_SHA256, expectedFileHash);\n\n    const parsedUrl = new URL(checksumsUrl);\n    const safeUrl = parsedUrl.origin + parsedUrl.pathname;\n\n    actionsCore.info(`Fetching checksums file from ${safeUrl}`);\n    const response = await (await this.getClient()).get(checksumsUrl);\n    const body = response.body;\n\n    const actualFileHash = sha256OfBuffer(body);\n    if (actualFileHash !== expectedFileHash) {\n      throw new Error(\n        `Checksums file hash mismatch at ${safeUrl}: expected ${expectedFileHash}, got ${actualFileHash}`,\n      );\n    }\n\n    const wanted = `${this.actionOptions.name}-${this.architectureFetchSuffix}`;\n    const hashes = parseChecksumsFile(body);\n    const artifactHash = hashes.get(wanted);\n    if (artifactHash === undefined) {\n      throw new Error(`No entry for ${wanted} in checksums file at ${safeUrl}`);\n    }\n    return artifactHash;\n  }\n\n  /**\n   * Verify a downloaded artifact's SHA-256 matches the expected hash. No-op\n   * when `expected` is `null` (verification disabled).\n   */\n  private async verifyArtifactHash(\n    filePath: string,\n    expected: string | null,\n  ): Promise<void> {\n    if (expected === null) {\n      return;\n    }\n    const actual = await sha256OfFile(filePath);\n    if (actual !== expected) {\n      throw new Error(\n        `Artifact hash mismatch for ${this.architectureFetchSuffix}: expected ${expected}, got ${actual}`,\n      );\n    }\n  }\n\n  /**\n   * A helper function for failing on error only if strict mode is enabled.\n   * This is intended only for CI environments testing Actions themselves.\n   */\n  failOnError(msg: string): void {\n    if (this.strictMode) {\n      actionsCore.setFailed(`strict mode failure: ${msg}`);\n    }\n  }\n\n  private async downloadFile(\n    url: URL,\n    destination: PathLike,\n  ): Promise<Request> {\n    const client = await this.getClient();\n\n    return new Promise((resolve, reject) => {\n      // Current stream handle\n      let writeStream: WriteStream | undefined;\n\n      // Sentinel condition in case we want to abort retrying due to FS issues\n      let failed = false;\n\n      const retry = (stream: Request): void => {\n        if (writeStream) {\n          writeStream.destroy();\n        }\n\n        writeStream = createWriteStream(destination, {\n          encoding: \"binary\",\n          mode: 0o755,\n        });\n\n        writeStream.once(\"error\", (error) => {\n          // Set failed here since promise rejections don't impact control flow\n          failed = true;\n          reject(error);\n        });\n\n        writeStream.on(\"finish\", () => {\n          if (!failed) {\n            resolve(stream);\n          }\n        });\n\n        stream.once(\"retry\", (_count, _error, createRetryStream) => {\n          // Optional: check `failed' here in case you want to stop retrying\n          retry(createRetryStream());\n        });\n\n        // Now that all the handlers have been set up we can pipe from the HTTP\n        // stream to disk\n        stream.pipe(writeStream);\n      };\n\n      // Begin the retry logic by giving it a fresh got.Request\n      retry(client.stream(url));\n    });\n  }\n\n  private async complete(): Promise<void> {\n    this.recordEvent(`complete_${this.executionPhase}`);\n    await this.submitEvents();\n  }\n\n  private async getCheckInUrl(): Promise<URL | undefined> {\n    const checkInUrl = await this.idsHost.getDynamicRootUrl();\n\n    if (checkInUrl === undefined) {\n      return undefined;\n    }\n\n    checkInUrl.pathname += \"check-in\";\n    return checkInUrl;\n  }\n\n  private async getSourceUrl(): Promise<URL> {\n    const p = this.sourceParameters;\n\n    if (p.url) {\n      this.addFact(FACT_SOURCE_URL, p.url);\n      return new URL(p.url);\n    }\n\n    const fetchUrl = await this.idsHost.getRootUrl();\n    fetchUrl.pathname += this.actionOptions.idsProjectName;\n\n    if (p.tag) {\n      fetchUrl.pathname += `/tag/${p.tag}`;\n    } else if (p.pr) {\n      fetchUrl.pathname += `/pr/${p.pr}`;\n    } else if (p.branch) {\n      fetchUrl.pathname += `/branch/${p.branch}`;\n    } else if (p.revision) {\n      fetchUrl.pathname += `/rev/${p.revision}`;\n    } else {\n      fetchUrl.pathname += `/stable`;\n    }\n\n    fetchUrl.pathname += `/${this.architectureFetchSuffix}`;\n\n    this.addFact(FACT_SOURCE_URL, fetchUrl.toString());\n\n    return fetchUrl;\n  }\n\n  private cacheKey(version: string, expectedHash: string | null): string {\n    const cleanedVersion = version.replace(/[^a-zA-Z0-9-+.]/g, \"\");\n    const hashSuffix = expectedHash ? `-h${expectedHash}` : \"\";\n    return `determinatesystem-${this.actionOptions.name}-${this.architectureFetchSuffix}-${cleanedVersion}${hashSuffix}`;\n  }\n\n  private async getCachedVersion(\n    version: string,\n    expectedHash: string | null,\n  ): Promise<undefined | string> {\n    const startCwd = process.cwd();\n\n    try {\n      const tempDir = this.getTemporaryName();\n      await mkdir(tempDir);\n      process.chdir(tempDir);\n\n      // extremely evil shit right here:\n      process.env.GITHUB_WORKSPACE_BACKUP = process.env.GITHUB_WORKSPACE;\n      delete process.env.GITHUB_WORKSPACE;\n\n      if (\n        await actionsCache.restoreCache(\n          [this.actionOptions.name],\n          this.cacheKey(version, expectedHash),\n          [],\n          undefined,\n          true,\n        )\n      ) {\n        this.recordEvent(EVENT_ARTIFACT_CACHE_HIT);\n        return `${tempDir}/${this.actionOptions.name}`;\n      }\n\n      this.recordEvent(EVENT_ARTIFACT_CACHE_MISS);\n      return undefined;\n    } finally {\n      process.env.GITHUB_WORKSPACE = process.env.GITHUB_WORKSPACE_BACKUP;\n      delete process.env.GITHUB_WORKSPACE_BACKUP;\n      process.chdir(startCwd);\n    }\n  }\n\n  private async saveCachedVersion(\n    version: string,\n    toolPath: string,\n    expectedHash: string | null,\n  ): Promise<void> {\n    const startCwd = process.cwd();\n\n    try {\n      const tempDir = this.getTemporaryName();\n      await mkdir(tempDir);\n      process.chdir(tempDir);\n      await copyFile(toolPath, `${tempDir}/${this.actionOptions.name}`);\n\n      // extremely evil shit right here:\n      process.env.GITHUB_WORKSPACE_BACKUP = process.env.GITHUB_WORKSPACE;\n      delete process.env.GITHUB_WORKSPACE;\n\n      await actionsCache.saveCache(\n        [this.actionOptions.name],\n        this.cacheKey(version, expectedHash),\n        undefined,\n        true,\n      );\n      this.recordEvent(EVENT_ARTIFACT_CACHE_PERSIST);\n    } finally {\n      process.env.GITHUB_WORKSPACE = process.env.GITHUB_WORKSPACE_BACKUP;\n      delete process.env.GITHUB_WORKSPACE_BACKUP;\n      process.chdir(startCwd);\n    }\n  }\n\n  private collectBacktraceSetup(): void {\n    if (!process.env.DETSYS_BACKTRACE_COLLECTOR) {\n      actionsCore.exportVariable(\n        \"DETSYS_BACKTRACE_COLLECTOR\",\n        this.getCrossPhaseId(),\n      );\n\n      actionsCore.saveState(STATE_BACKTRACE_START_TIMESTAMP, Date.now());\n    }\n  }\n\n  private async collectBacktraces(): Promise<void> {\n    try {\n      if (process.env.DETSYS_BACKTRACE_COLLECTOR !== this.getCrossPhaseId()) {\n        return;\n      }\n\n      const backtraces = await collectBacktraces(\n        this.actionOptions.binaryNamePrefixes,\n        this.actionOptions.binaryNamesDenyList,\n        parseInt(actionsCore.getState(STATE_BACKTRACE_START_TIMESTAMP)),\n      );\n      actionsCore.debug(`Backtraces identified: ${backtraces.size}`);\n      if (backtraces.size > 0) {\n        this.recordEvent(EVENT_BACKTRACES, Object.fromEntries(backtraces));\n      }\n    } catch (innerError: unknown) {\n      actionsCore.debug(\n        `Error collecting backtraces: ${stringifyError(innerError)}`,\n      );\n    }\n  }\n\n  private async preflightRequireNix(): Promise<boolean> {\n    let nixLocation: string | undefined;\n\n    const pathParts = (process.env[\"PATH\"] || \"\").split(\":\");\n    for (const location of pathParts) {\n      const candidateNix = path.join(location, \"nix\");\n\n      try {\n        await fs.access(candidateNix, fs.constants.X_OK);\n        actionsCore.debug(`Found Nix at ${candidateNix}`);\n        nixLocation = candidateNix;\n        break;\n      } catch {\n        actionsCore.debug(`Nix not at ${candidateNix}`);\n      }\n    }\n    this.addFact(FACT_NIX_LOCATION, nixLocation || \"\");\n\n    if (this.actionOptions.requireNix === \"ignore\") {\n      return true;\n    }\n\n    const currentNotFoundState = actionsCore.getState(STATE_KEY_NIX_NOT_FOUND);\n    if (currentNotFoundState === STATE_NOT_FOUND) {\n      // It was previously not found, so don't run subsequent actions\n      return false;\n    }\n\n    if (nixLocation !== undefined) {\n      return true;\n    }\n    actionsCore.saveState(STATE_KEY_NIX_NOT_FOUND, STATE_NOT_FOUND);\n\n    switch (this.actionOptions.requireNix) {\n      case \"fail\":\n        actionsCore.setFailed(\n          [\n            \"This action can only be used when Nix is installed.\",\n            \"Add `- uses: DeterminateSystems/determinate-nix-action@v3` earlier in your workflow.\",\n          ].join(\" \"),\n        );\n        break;\n      case \"warn\":\n        actionsCore.warning(\n          [\n            \"This action is in no-op mode because Nix is not installed.\",\n            \"Add `- uses: DeterminateSystems/determinate-nix-action@v3` earlier in your workflow.\",\n          ].join(\" \"),\n        );\n        break;\n    }\n\n    return false;\n  }\n\n  private async preflightNixStoreInfo(): Promise<void> {\n    let output = \"\";\n\n    const options: actionsExec.ExecOptions = {};\n    options.silent = true;\n    options.listeners = {\n      stdout: (data) => {\n        output += data.toString();\n      },\n    };\n\n    try {\n      output = \"\";\n      await actionsExec.exec(\"nix\", [\"store\", \"info\", \"--json\"], options);\n      this.addFact(FACT_NIX_STORE_CHECK_METHOD, \"info\");\n    } catch {\n      try {\n        // reset output\n        output = \"\";\n        await actionsExec.exec(\"nix\", [\"store\", \"ping\", \"--json\"], options);\n        this.addFact(FACT_NIX_STORE_CHECK_METHOD, \"ping\");\n      } catch {\n        this.addFact(FACT_NIX_STORE_CHECK_METHOD, \"none\");\n        return;\n      }\n    }\n\n    try {\n      const parsed = JSON.parse(output);\n      if (parsed.trusted === true || parsed.trusted === 1) {\n        this.nixStoreTrust = \"trusted\";\n      } else if (parsed.trusted === false || parsed.trusted === 0) {\n        this.nixStoreTrust = \"untrusted\";\n      } else if (parsed.trusted !== undefined) {\n        this.addFact(\n          FACT_NIX_STORE_CHECK_ERROR,\n          `Mysterious trusted value: ${JSON.stringify(parsed.trusted)}`,\n        );\n      }\n\n      this.addFact(FACT_NIX_STORE_VERSION, JSON.stringify(parsed.version));\n    } catch (e: unknown) {\n      this.addFact(FACT_NIX_STORE_CHECK_ERROR, stringifyError(e));\n    }\n  }\n\n  private async preflightNixVersion(): Promise<void> {\n    let output = \"unknown\";\n\n    try {\n      ({ stdout: output } = await actionsExec.getExecOutput(\n        \"nix\",\n        [\"--version\"],\n        {\n          silent: true,\n        },\n      ));\n      output = output.trim() || \"unknown\";\n    } catch {\n      // That's fine.\n    }\n\n    this.addFact(FACT_NIX_VERSION, output);\n  }\n\n  private async submitEvents(): Promise<void> {\n    const diagnosticsUrl = await this.idsHost.getDiagnosticsUrl();\n    if (diagnosticsUrl === undefined) {\n      actionsCore.debug(\n        \"Diagnostics are disabled. Not sending the following events:\",\n      );\n      actionsCore.debug(JSON.stringify(this.events, undefined, 2));\n      return;\n    }\n\n    const batch = {\n      sent_at: new Date(),\n      batch: this.events,\n    };\n\n    try {\n      await (\n        await this.getClient()\n      ).post(diagnosticsUrl, {\n        json: batch,\n        timeout: {\n          request: DIAGNOSTIC_ENDPOINT_TIMEOUT_MS,\n        },\n      });\n    } catch (err: unknown) {\n      this.recordPlausibleTimeout(err);\n\n      actionsCore.debug(\n        `Error submitting diagnostics event to ${diagnosticsUrl}: ${stringifyError(err)}`,\n      );\n    }\n    this.events = [];\n  }\n}\n\nfunction stringifyError(error: unknown): string {\n  return error instanceof Error || typeof error == \"string\"\n    ? error.toString()\n    : JSON.stringify(error);\n}\n\nfunction makeOptionsConfident(\n  actionOptions: ActionOptions,\n): ConfidentActionOptions {\n  const idsProjectName = actionOptions.idsProjectName ?? actionOptions.name;\n\n  const finalOpts: ConfidentActionOptions = {\n    name: actionOptions.name,\n    idsProjectName,\n    eventPrefix: actionOptions.eventPrefix || \"action:\",\n    fetchStyle: actionOptions.fetchStyle,\n    legacySourcePrefix: actionOptions.legacySourcePrefix,\n    requireNix: actionOptions.requireNix,\n    binaryNamePrefixes: actionOptions.binaryNamePrefixes ?? [\n      \"nix\",\n      \"determinate-nixd\",\n      actionOptions.name,\n    ],\n    binaryNamesDenyList:\n      actionOptions.binaryNamesDenyList ?? PROGRAM_NAME_CRASH_DENY_LIST,\n  };\n\n  actionsCore.debug(\"idslib options:\");\n  actionsCore.debug(JSON.stringify(finalOpts, undefined, 2));\n\n  return finalOpts;\n}\n\n// Public exports from other files\nexport type {\n  CheckIn,\n  Feature,\n  Incident,\n  Maintenance,\n  Page,\n  StatusSummary,\n} from \"./check-in.js\";\nexport type { CorrelationProperties } from \"./correlation.js\";\nexport { stringifyError } from \"./errors.js\";\nexport { IdsHost } from \"./ids-host.js\";\nexport type { SourceDef } from \"./sourcedef.js\";\nexport * as inputs from \"./inputs.js\";\nexport * as platform from \"./platform.js\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,MAAM,gBAAgB,UAAUA,KAAG,QAAQ;AAyB3C,MAAM,kCAA2D;CAC/D,MAAM;CACN,YAAY;CACZ,OAAO;AACT;;;;;;;AAQA,SAAgB,YAAY,aAA8C;CACxE,MAAM,UAAU;EAAE,GAAG;EAAiC,GAAG;CAAY;CAErE,MAAM,0BAAoC,kBACxC,QAAQ,UACV;CAEA,IAAIC,KAAG,KAAK,MAAM,SAAS;EACzB,IAAI,QAAQ,SAAS,QACnB,OAAO,UAAU;OAEjB,OAAO,QAAQ,QAAQ,UAAU,CAAC;CAEtC;CAEA,IAAI,QAAQ,SAAS,QACnB,OAAO,sBAAsB,yBAAyB,OAAO;MAE7D,OAAO,QAAQ,QACb,uBAAuB,yBAAyB,OAAO,CACzD;AAEJ;;;;;;;;AASA,SAAS,eAAe,YAAoB,cAA8B;CACxE,MAAM,QAAkB,aAAa,MAAM,IAAI;CAE/C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,KAAK,MAAM,GAAG;EAE/B,IAAI,SAAS,WAAW,GAAG;GACzB,SAAS,KAAK,SAAS,EAAE,CAAC,QAAQ,YAAY,EAAE;GAEhD,OAAO,eAAe,YAAY,SAAS,EAAE,CAAC,YAAY,GAAG;IAC3D,OAAO,SAAS;IAChB,UAAU;IACV,YAAY;IACZ,cAAc;GAChB,CAAC;EACH;CACF;CAEA,OAAO;AACT;;;;;;;AAQA,SAAS,kBAAkB,YAAiD;CAC1E,MAAM,2BAA2B,CAAC,mBAAmB,qBAAqB;CAE1E,IAAI,CAAC,YACH,OAAO;MAEP,OAAO,MAAM,UAAU;AAE3B;;;;;;;AAmBA,SAAS,YAAoB;CAC3B,OAAO;EACL,MAAMA,KAAG,KAAK;EACd,UAAUA,KAAG,SAAS;EACtB,UAAUA,KAAG,SAAS;EACtB,MAAMA,KAAG,KAAK;EACd,SAASA,KAAG,QAAQ;CACtB;AACF;AAIA,eAAe,uBACb,UACA,SACiB;CACjB,IAAI,WAAW;CAEf,KAAK,MAAM,iBAAiB,UAC1B,IAAI;EACF,IAAI,QAAQ,OAEV,QAAQ,IAAI,mBAAmB,cAAc,KAAK;EAGpD,WAAW,MAAM,cAAc,eAAe,QAAQ;EAEtD,IAAI,QAAQ,OACV,QAAQ,IAAI,eAAe,UAAU;EAGvC;CACF,SAAS,OAAO;EACd,IAAI,QAAQ,OACV,QAAQ,MAAM,KAAK;CAEvB;CAGF,IAAI,aAAa,MACf,MAAM,IAAI,MAAM,8BAA8B;CAIhD,OAAO,eAAe,UAAU,GAAG,QAAQ;AAC7C;AAEA,SAAS,sBACP,iBACA,SACQ;CACR,IAAI,WAAW;CAEf,KAAK,MAAM,iBAAiB,iBAC1B,IAAI;EACF,IAAI,QAAQ,OACV,QAAQ,IAAI,mBAAmB,cAAc,KAAK;EAGpD,WAAWD,KAAG,aAAa,eAAe,QAAQ;EAElD,IAAI,QAAQ,OACV,QAAQ,IAAI,eAAe,UAAU;EAGvC;CACF,SAAS,OAAO;EACd,IAAI,QAAQ,OACV,QAAQ,MAAM,KAAK;CAEvB;CAGF,IAAI,aAAa,MACf,MAAM,IAAI,MAAM,8BAA8B;CAIhD,OAAO,eAAe,UAAU,GAAG,QAAQ;AAC7C;;;;;;ACxMA,MAAM,iBAAiB,YAAiC;CACtD,MAAM,EAAE,QAAQ,YAAY,MAAME,OAAK,cACrC,sFACA,KAAA,GACA,EACE,QAAQ,KACV,CACF;CAEA,MAAM,EAAE,QAAQ,SAAS,MAAMA,OAAK,cAClC,sFACA,KAAA,GACA,EACE,QAAQ,KACV,CACF;CAEA,OAAO;EACL,MAAM,KAAK,KAAK;EAChB,SAAS,QAAQ,KAAK;CACxB;AACF;;;;AAKA,MAAM,eAAe,YAAiC;CACpD,MAAM,EAAE,WAAW,MAAMA,OAAK,cAAc,WAAW,KAAA,GAAW,EAChE,QAAQ,KACV,CAAC;CAED,MAAM,UAAU,OAAO,MAAM,wBAAwB,CAAC,GAAG,MAAM;CAG/D,OAAO;EACL,MAHW,OAAO,MAAM,qBAAqB,CAAC,GAAG,MAAM;EAIvD;CACF;AACF;;;;AAKA,MAAM,eAAe,YAAiC;CACpD,IAAI,OAAe,CAAC;CAEpB,IAAI;EACF,OAAO,YAAY,EAAE,MAAM,OAAO,CAAC;EACnC,YAAY,MAAM,4BAA4B,KAAK,UAAU,IAAI,GAAG;CACtE,SAAS,GAAG;EACV,YAAY,MAAM,kCAAkC,GAAG;CACzD;CAEA,OAAO;EACL,MAAM,0BACJ,MACA;GAAC;GAAM;GAAQ;GAAe;EAAS,GACvC,SACF;EACA,SAAS,0BACP,MACA;GAAC;GAAc;GAAW;EAAkB,GAC5C,SACF;CACF;AACF;AAEA,SAAS,0BACP,MACA,OACA,cACG;CACH,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAS,uBAAuB,MAAM,MAAM,YAAY;EAE9D,IAAI,QAAQ,cACV,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,SAAS,uBACP,MACA,MACA,cACG;CACH,IAAI,CAAC,KAAK,eAAe,IAAI,GAC3B,OAAO;CAGT,MAAM,QAAS,KAAgC;CAG/C,IAAI,OAAO,UAAU,OAAO,cAC1B,OAAO;CAGT,OAAO;AACT;;;;AAKA,MAAa,WAAW,GAAG,SAAS;;;;AAKpC,MAAa,OAAO,GAAG,KAAK;;;;AAK5B,MAAa,YAAY,aAAa;;;;AAKtC,MAAa,UAAU,aAAa;;;;AAKpC,MAAa,UAAU,aAAa;;;;AAkBpC,eAAsB,aAAqC;CACzD,OAAO;EACL,GAAI,OAAO,YACP,eAAe,IACf,UACE,aAAa,IACb,aAAa;EACnB;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;AC5KA,SAAgB,eAAe,GAAoB;CACjD,IAAI,aAAa,OACf,OAAO,EAAE;MACJ,IAAI,OAAO,MAAM,UACtB,OAAO;MAEP,OAAO,KAAK,UAAU,CAAC;AAE3B;;;;;;;ACEA,MAAM,qBAAqB;AAE3B,eAAsB,kBACpB,UACA,qBACA,kBAC8B;CAC9B,IAAI,SACF,OAAO,MAAM,uBACX,UACA,qBACA,gBACF;CAEF,IAAI,SACF,OAAO,MAAM,yBACX,UACA,qBACA,gBACF;CAGF,uBAAO,IAAI,IAAI;AACjB;AAEA,eAAsB,uBACpB,UACA,qBACA,kBAC8B;CAC9B,MAAM,6BAAkC,IAAI,IAAI;CAEhD,IAAI;EACF,MAAM,EAAE,QAAQ,YAAY,MAAMC,OAAK,cACrC,OACA;GACE;GACA;GACA;GACA;GAGA;GACA;GACA;GACA;EACF,GACA,EACE,QAAQ,KACV,CACF;EAEA,MAAM,aAAsB,KAAK,MAAM,OAAO;EAC9C,IAAI,CAAC,MAAM,QAAQ,UAAU,GAC3B,MAAM,IAAI,MAAM,4BAA4B,SAAS;EAGvD,IAAI,WAAW,SAAS,GAAG;GACzB,YAAY,KAAK,0BAA0B;GAC3C,MAAM,QAAQ,OAAO,OACnB,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;GAClD,MAAM,MAAM,GAAI;EAClB;CACF,QAAQ;EACN,YAAY,MACV,sHACF;CACF;CAEA,MAAM,OAAO,CACX,CAAC,UAAU,kCAAkC,GAC7C,CAAC,QAAQ,GAAG,QAAQ,IAAI,QAAQ,iCAAiC,CACnE;CAEA,KAAK,MAAM,CAAC,QAAQ,QAAQ,MAAM;EAChC,MAAM,aAAa,MAAM,QAAQ,GAAG,EAAA,CACjC,QAAQ,aAAa;GACpB,OAAO,SAAS,MAAM,WAAW,SAAS,WAAW,MAAM,CAAC;EAC9D,CAAC,CAAC,CACD,QAAQ,aAAa;GACpB,OAAO,CAAC,oBAAoB,MAAM,gBAChC,SAAS,WAAW,WAAW,CACjC;EACF,CAAC,CAAC,CACD,QAAQ,aAAa;GAIpB,OAAO,CAAC,SAAS,SAAS,OAAO;EACnC,CAAC;EAEH,MAAM,SAAS,UAAU,IAAI;EAC7B,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,KAAK,MAAM,KAAK,GAAG,IAAI,GAAG,UAAU,EAAA,CAAG,WAAW,kBAAkB;IAElE,MAAM,MAAM,MAAM,OAAO,MADH,SAAS,GAAG,IAAI,GAAG,UAAU,CACnB;IAChC,WAAW,IACT,mBAAmB,OAAO,GAAG,YAC7B,IAAI,SAAS,QAAQ,CACvB;GACF;EACF,SAAS,YAAqB;GAC5B,WAAW,IACT,qBAAqB,OAAO,GAAG,YAC/B,eAAe,UAAU,CAC3B;EACF;CAEJ;CAEA,OAAO;AACT;AAOA,eAAsB,yBACpB,UACA,qBACA,kBAC8B;CAC9B,MAAM,eACJ,KAAK,MAAM,KAAK,IAAI,IAAI,oBAAoB,GAAI,IAAI;CACtD,MAAM,6BAAkC,IAAI,IAAI;CAEhD,MAAM,YAAmC,CAAC;CAE1C,IAAI;EACF,MAAM,EAAE,QAAQ,iBAAiB,MAAMA,OAAK,cAC1C,eACA;GAAC;GAAiB;GAAQ;GAAW,GAAG,aAAa;EAAa,GAClE,EACE,QAAQ,KACV,CACF;EAEA,MAAM,aAAsB,KAAK,MAAM,YAAY;EACnD,IAAI,CAAC,MAAM,QAAQ,UAAU,GAC3B,MAAM,IAAI,MAAM,4BAA4B,cAAc;EAG5D,KAAK,MAAM,eAAe,YAAY;GACpC,MAAM,OAAO,OAAO,KAAK,WAAW;GAEpC,IAAI,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,GAAG;IAChD,IACE,OAAO,YAAY,OAAO,YAC1B,OAAO,YAAY,OAAO,UAC1B;KACA,MAAM,YAAY,YAAY,IAAI,MAAM,GAAG;KAC3C,MAAM,aAAa,UAAU,UAAU,SAAS;KAEhD,IACE,SAAS,MAAM,WAAW,WAAW,WAAW,MAAM,CAAC,KACvD,CAAC,oBAAoB,SAAS,UAAU,GAExC,UAAU,KAAK;MACb,KAAK,YAAY;MACjB,KAAK,YAAY;KACnB,CAAC;IAEL,OACE,YAAY,MACV,mEAAmE,KAAK,UAAU,WAAW,GAC/F;GAEJ,OACE,YAAY,MACV,iEAAiE,KAAK,UAAU,WAAW,GAC7F;EAEJ;CACF,SAAS,YAAqB;EAC5B,YAAY,MACV,8BAA8B,eAAe,UAAU,GACzD;EAEA,OAAO;CACT;CAEA,MAAM,SAAS,UAAU,IAAI;CAC7B,KAAK,MAAM,YAAY,WACrB,IAAI;EACF,MAAM,EAAE,QAAQ,YAAY,MAAMA,OAAK,cACrC,eACA,CAAC,QAAQ,GAAG,SAAS,KAAK,GAC1B,EACE,QAAQ,KACV,CACF;EAEA,MAAM,MAAM,MAAM,OAAO,OAAO;EAChC,WAAW,IAAI,mBAAmB,SAAS,OAAO,IAAI,SAAS,QAAQ,CAAC;CAC1E,SAAS,YAAqB;EAC5B,WAAW,IACT,qBAAqB,SAAS,OAC9B,eAAe,UAAU,CAC3B;CACF;CAGF,OAAO;AACT;;;;;;;;AClNA,MAAM,gBAAgB;;;;;;;;;AAUtB,SAAgB,mBAAmB,MAAmC;CACpE,MAAM,yBAAS,IAAI,IAAoB;CAEvC,KAAK,MAAM,UAAU,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO,OAAO,GAAG;EAC7D,MAAM,aAAa,OAAO,QAAQ,GAAG;EACrC,IAAI,eAAe,IACjB;EAGF,MAAM,SAAS,OAAO,MAAM,GAAG,UAAU;EACzC,IAAI,CAAC,cAAc,KAAK,MAAM,GAC5B,MAAM,IAAI,MAAM,qCAAqC,QAAQ;EAG/D,MAAM,OAAO,OAAO,MAAM,aAAa,CAAC,CAAC,CAAC,KAAK;EAC/C,IAAI,SAAS,IACX;EAGF,OAAO,IAAI,MAAM,OAAO,YAAY,CAAC;CACvC;CAEA,OAAO;AACT;;;;;AAMA,eAAsB,aAAa,UAAmC;CACpE,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,YAAY,KAAK;EACnD,iBAAiB,QAAQ,CAAC,CACvB,KAAK,SAAS,MAAM,CAAC,CACrB,KAAK,IAAI,CAAC,CACV,KAAK,gBAAgB,QAAQ,KAAK,KAAK,CAAW,CAAC;CACxD,CAAC;AACH;;;;;AAMA,SAAgB,eAAe,MAA+B;CAC5D,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK;AACvD;;;AC5DA,MAAM,qBAAqB,CAAC,eAAe;AAmB3C,SAAgB,WAAkC;CAChD,MAAM,aAAa,yBAAyB,OAAO;EACjD;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,qBAAqB,yBAAyB,SAAS;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,QAA+B;EACnC,mBAAmB,QAAQ,IAAI,yBAAyB,WAAW;EAEnE,oBAAoB;EAEpB,wBAAwB;EACxB,sBAAsB,yBAAyB,OAAO;GACpD;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,0BAA0B,yBAAyB,QAAQ;GACzD;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,0BAA0B,yBAAyB,SAAS;GAC1D;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,yCAAyC;EACzC,aAAa;EACb,SAAS;GACP,mBAAmB;GACnB,qBAAqB,yBAAyB,OAAO;IACnD;IACA;IACA;GACF,CAAC;EACH;EACA,OAAO;CACT;CAEA,YAAY,MAAM,mBAAmB;CACrC,YAAY,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;CAEhD,OAAO;AACT;AAEA,SAAS,yBACP,QACA,WACoB;CACpB,MAAM,OAAO,WAAW,QAAQ;CAEhC,KAAK,MAAM,WAAW,WAAW;EAC/B,IAAI,QAAQ,QAAQ,IAAI;EAExB,IAAI,UAAU,KAAA,GAAW;GACvB,IAAI,mBAAmB,SAAS,OAAO,GAAG;IACxC,YAAY,MACV,0CAA0C,QAAQ,wCACpD;IACA,QAAQ;GACV,OAAO;IACL,YAAY,MACV,iCAAiC,QAAQ,0CAC3C;IACA;GACF;EACF;EAEA,KAAK,OAAO,KAAK;EACjB,KAAK,OAAO,IAAI;CAClB;CAEA,OAAO,GAAG,OAAO,GAAG,KAAK,OAAO,KAAK;AACvC;;;;;;;ACnHA,MAAM,iBAAiB;AACvB,MAAM,mBAAmB,CACvB,gCACA,qBACF;AAEA,MAAM,mBAAmB;AACzB,MAAM,SAAS,QAAQ,IAAI,iBAAiB;AAE5C,MAAM,kBAAkB;;;;AAKxB,IAAa,UAAb,MAAqB;CAQnB,YACE,gBACA,mBACA,uBACA,UAAkB,iBAClB;EACA,KAAK,iBAAiB;EACtB,KAAK,oBAAoB;EACzB,KAAK,wBAAwB;EAC7B,KAAK,SAAS,KAAA;EACd,KAAK,UAAU;CACjB;CAEA,MAAM,OACJ,wBAKc;EACd,IAAI,KAAK,WAAW,KAAA,GAClB,KAAK,SAAS,IAAI,OAAO;GACvB,SAAS,EACP,SAAS,KAAK,QAChB;GAEA,OAAO;IACL,OAAO,KAAK,KAAK,MAAM,KAAK,oBAAoB,EAAA,CAAG,QAAQ,CAAC;IAC5D,SAAS,CAAC,OAAO,MAAM;GACzB;GAEA,OAAO;IACL,aAAa,CACX,OAAO,OAAO,eAAe;KAC3B,MAAM,UAAU,MAAM,KAAK,WAAW;KACtC,KAAK,sBAAsB;KAC3B,MAAM,UAAU,MAAM,KAAK,WAAW;KAEtC,IAAI,2BAA2B,KAAA,GAC7B,uBAAuB,OAAO,SAAS,OAAO;KAGhD,YAAY,KACV,wBAAwB,MAAM,KAAK,aAAa,YAClD;IACF,CACF;IAEA,eAAe,CACb,OAAO,YAAY;KAEjB,MAAM,aAAkB,QAAQ;KAEhC,IAAI,KAAK,0BAA0B,UAAU,GAAG;MAC9C,MAAM,SAAc,IAAI,IAAI,UAAU;MAGtC,OAAO,QAAO,MADS,KAAK,WAAW,EAAA,CACrB;MAElB,QAAQ,MAAM;MACd,YAAY,MAAM,cAAc,WAAW,QAAQ,QAAQ;KAC7D,OACE,YAAY,MAAM,wBAAwB,YAAY;IAE1D,CACF;GACF;EACF,CAAC;EAGH,OAAO,KAAK;CACd;CAEA,wBAA8B;EAC5B,KAAK,iBAAiB,MAAM;CAC9B;CAEA,mBAAmB,MAAmB;EACpC,KAAK,kBAAkB;CACzB;CAEA,0BAA0B,KAAmB;EAC3C,IAAI,IAAI,WAAW,kBACjB,OAAO;EAGT,KAAK,MAAM,UAAU,kBACnB,IAAI,IAAI,KAAK,SAAS,MAAM,GAC1B,OAAO;EAIX,OAAO;CACT;CAEA,MAAM,oBAA8C;EAClD,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GACd,IAAI;GACF,OAAO,IAAI,IAAI,OAAO;EACxB,SAAS,KAAc;GACrB,YAAY,MACV,+DAA+D,eAAe,GAAG,GACnF;EACF;EAGF,IAAI,MAAuB,KAAA;EAC3B,IAAI;GAEF,OAAM,MADa,KAAK,oBAAoB,EAAA,CACjC;EACb,SAAS,KAAc;GACrB,YAAY,MACV,4CAA4C,eAAe,GAAG,GAChE;EACF;EAEA,IAAI,QAAQ,KAAA,GACV;OAIA,OAAO,IAAI,IAAI,GAAG;CAEtB;CAEA,MAAM,aAA2B;EAC/B,MAAM,MAAM,MAAM,KAAK,kBAAkB;EAEzC,IAAI,QAAQ,KAAA,GACV,OAAO,IAAI,IAAI,gBAAgB;EAGjC,OAAO;CACT;CAEA,MAAM,oBAA8C;EAClD,IAAI,KAAK,0BAA0B,IAGjC;EAGF,IACE,KAAK,0BAA0B,OAC/B,KAAK,0BAA0B,KAAA,GAE/B,IAAI;GAEF,OAAO,IAAI,IAAI,KAAK,qBAAqB;EAC3C,SAAS,KAAc;GACrB,YAAY,KACV,+DAA+D,eAAe,GAAG,GACnF;EACF;EAGF,IAAI;GACF,MAAM,gBAAgB,MAAM,KAAK,WAAW;GAC5C,cAAc,YAAY;GAC1B,OAAO;EACT,SAAS,KAAc;GACrB,YAAY,KACV,yFAAyF,eAAe,GAAG,GAC7G;GACA;EACF;CACF;CAEA,MAAc,sBAAsC;EAClD,IAAI,KAAK,oBAAoB,KAAA,GAC3B,KAAK,kBAAkB,6BACrB,MAAM,uBAAuB,CAC/B,CAAC,CAAC,SAAS,WAAW,YAAY,MAAM,KAAK,CAAC,CAAC;EAGjD,OAAO,KAAK;CACd;AACF;AAEA,SAAgB,YAAY,QAAoC;CAC9D,MAAM,SAAS,WAAW,OAAO,KAAK,GAAG,OAAO;CAChD,IAAI;EACF,OAAO,IAAI,IAAI,MAAM;CACvB,SAAS,KAAc;EACrB,YAAY,MACV,UAAU,KAAK,UAAU,MAAM,EAAE,4BAA4B,OAAO,IAAI,IAAI,EAC9E;EACA;CACF;AACF;AAEA,eAAe,yBAA+C;CAC5D,OAAO,MAAM,qBAAqB,WAAW,MAAM,GAAG,GAAK;AAC7D;AAEA,eAAsB,qBACpB,QACA,SACsB;CACtB,MAAM,kBAAwC,IAAI,SAC/C,SAAS,YAAY;EACpB,WAAW,SAAS,SAAS,CAAC,CAAC;CACjC,CACF;CAEA,IAAI;CAEJ,IAAI;EACF,UAAU,MAAM,QAAQ,KAAK,CAAC,QAAQ,eAAe,CAAC;CACxD,SAAS,QAAiB;EACxB,YAAY,MAAM,gCAAgC,eAAe,MAAM,GAAG;EAC1E,UAAU,CAAC;CACb;CAEA,MAAM,oBAAoB,QAAQ,QAAQ,WAA+B;EACvE,KAAK,MAAM,UAAU,kBACnB,IAAI,OAAO,KAAK,SAAS,MAAM,GAC7B,OAAO;EAIX,YAAY,MACV,iDAAiD,OAAO,MAC1D;EAEA,OAAO;CACT,CAAC;CAED,IAAI,kBAAkB,WAAW,GAC/B,YAAY,MAAM,wBAAwB,QAAQ;MAElD,YAAY,MACV,YAAY,OAAO,MAAM,KAAK,UAAU,iBAAiB,GAC3D;CAGF,OAAO;AACT;AAEA,SAAgB,6BACd,SACa;CACb,MAAM,mCAA6C,IAAI,IAAI;CAC3D,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,WAAW,iBAAiB,IAAI,OAAO,QAAQ;EACrD,IAAI,UACF,SAAS,KAAK,MAAM;OAEpB,iBAAiB,IAAI,OAAO,UAAU,CAAC,MAAM,CAAC;CAElD;CAEA,MAAM,qBAAkC,CAAC;CACzC,MAAM,OAAiB,MAAM,KAAK,iBAAiB,KAAK,CAAC,CAAC,CAAC,MACxD,GAAG,MAAM,IAAI,CAChB;CAEA,KAAK,MAAM,YAAY,MAAM;EAC3B,MAAM,gBAAgB,iBAAiB,IAAI,QAAQ;EACnD,IAAI,kBAAkB,KAAA,GACpB;EAGF,mBAAmB,KAAK,GAAG,eAAe,aAAa,CAAC;CAC1D;CAEA,OAAO;AACT;AAEA,SAAgB,eAAe,SAAmC;CAEhE,MAAM,iBAA8B,QAAQ,MAAM;CAClD,MAAM,SAAsB,CAAC;CAE7B,OAAO,eAAe,SAAS,GAAG;EAChC,MAAM,UAAoB,CAAC;EAGzB,KAAK,IAAI,IAAI,GAAG,IAAI,eAAe,QAAQ,KACzC,QAAQ,KACN,eAAe,EAAE,CAAC,UAAU,IAAI,IAAI,eAAe,IAAI,EAAE,CAAC,SAAS,EACrE;EAIJ,MAAM,QAAQ,KAAK,OAAO,IAAI,QAAQ,QAAQ,SAAS;EAEvD,KACE,IAAI,gBAAgB,GACpB,gBAAgB,QAAQ,QACxB,iBAEA,IAAI,QAAQ,iBAAiB,OAAO;GAElC,OAAO,KAAK,eAAe,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE;GACtD;EACF;CAEJ;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;ACrUA,MAAM,WAAW,SAA0B;CACzC,OAAO,YAAY,gBAAgB,IAAI;AACzC;;;;AAKA,MAAM,sBAAsB,SAAsC;CAChE,IAAI,qBAAqB,IAAI,MAAM,KAAA,GACjC;CAGF,OAAO,YAAY,gBAAgB,IAAI;AACzC;;;;;AAWA,MAAM,qBAAqB,MAAc,cAAmC;CAC1E,MAAM,WAAW,UAAU,IAAI;CAC/B,OAAO,aAAa,UAAU,SAAS;AACzC;;;;AAKA,MAAM,2BACJ,MACA,cACoB;CACpB,MAAM,WAAW,gBAAgB,IAAI;CACrC,IAAI,aAAa,MACf,OAAO;MAEP,OAAO,aAAa,UAAU,SAAS;AAE3C;AAGA,MAAa,gBAAgB,OAAe,cAAmC;CAC7E,MAAM,UAAU,cAAc,UAAU,MAAM;CAC9C,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,YAAY,IACd,OAAO,CAAC;CAGV,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,MAAc,EAAE,KAAK,CAAC;AAC3D;;;;AAKA,MAAM,4BAA4B,SAAkC;CAClE,MAAM,QAAQ,YAAY,kBAAkB,IAAI;CAChD,IAAI,MAAM,WAAW,GACnB,OAAO;MAEP,OAAO;AAEX;;;;AAKA,MAAM,mBAAmB,SAAgC;CACvD,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ,OAAO;MAEP,OAAO,OAAO,KAAK;AAEvB;;;;AAKA,MAAM,wBAAwB,SAAqC;CACjE,MAAM,QAAQ,qBAAqB,IAAI;CACvC,IAAI,UAAU,KAAA,GACZ;CAGF,OAAO,OAAO,KAAK;AACrB;;;;AAKA,MAAM,aAAa,SAAyB;CAC1C,OAAO,YAAY,SAAS,IAAI;AAClC;;;;AAKA,MAAM,mBAAmB,SAAgC;CACvD,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ,OAAO;MAEP,OAAO;AAEX;;;;AAKA,MAAM,wBAAwB,SAAqC;CACjE,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ;MAEA,OAAO;AAEX;;;;;;;;;;;;;;ACxHA,SAAgB,YAAoB;CAClC,MAAM,UAAU,QAAQ,IAAI;CAC5B,MAAM,QAAQ,QAAQ,IAAI;CAE1B,IAAI,WAAW,OACb,OAAO,GAAG,QAAQ,GAAG;MAChB;EACL,YAAY,MACV,oEAAoE,QAAQ,GAAG,MAAM,EACvF;EACA,MAAM,IAAI,MAAM,6CAA6C;CAC/D;AACF;;;;AAKA,SAAgB,eAAe,QAAwB;CAQrD,MAAM,4BAAW,IAP0B,IAAI;EAC7C,CAAC,aAAa,eAAe;EAC7B,CAAC,eAAe,gBAAgB;EAChC,CAAC,aAAa,cAAc;EAC5B,CAAC,eAAe,eAAe;CACjC,CAEyB,EAAA,CAAE,IAAI,MAAM;CACrC,IAAI,UACF,OAAO;MACF;EACL,YAAY,MACV,WAAW,OAAO,2CACpB;EACA,MAAM,IAAI,MACR,0BAA0B,OAAO,+BACnC;CACF;AACF;;;;;;;;;;AC1BA,SAAgB,6BAA6B,QAAyB;CACpE,IACE,OAAO,QAAQ,KAAA,KACf,OAAO,QAAQ,KAAA,KACf,OAAO,aAAa,KAAA,GAEpB,MAAM,IAAI,MACR,wRACF;AAEJ;AAEA,SAAgB,0BAA0B,cAAkC;CAC1E,OAAO;EACL,MAAM,gBAAgB,QAAQ,YAAY;EAC1C,KAAK,gBAAgB,OAAO,YAAY;EACxC,KAAK,gBAAgB,OAAO,YAAY;EACxC,IAAI,gBAAgB,MAAM,YAAY;EACtC,QAAQ,gBAAgB,UAAU,YAAY;EAC9C,UAAU,gBAAgB,YAAY,YAAY;CACpD;AACF;AAEA,SAAS,gBACP,QACA,cACoB;CACpB,MAAM,iBAAiB,qBAAqB,UAAU,QAAQ;CAE9D,IAAI,CAAC,cACH,OAAO;CAKT,MAAM,cAAc,qBAAqB,GAAG,aAAa,GAAG,QAAQ;CAEpE,IAAI,kBAAkB,aAAa;EACjC,YAAY,QACV,+BAA+B,OAAO,yBAAyB,aAAa,GAAG,OAAO,mCAAmC,OAAO,wBAAwB,aAAa,GAAG,OAAO,EACjL;EACA,OAAO;CACT,OAAO,IAAI,aAAa;EACtB,YAAY,QACV,qBAAqB,aAAa,GAAG,OAAO,oCAAoC,OAAO,EACzF;EACA,OAAO;CACT,OACE,OAAO;AAEX;;;;;;;ACrBA,MAAM,aAAa;AAEnB,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAClC,MAAM,+BAA+B;AACrC,MAAM,qCAAqC;AAC3C,MAAM,8BAA8B;AAEpC,MAAM,mCAAmC;AACzC,MAAM,4BAA4B;AAClC,MAAM,uBAAuB;AAC7B,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,+BAA+B;AACrC,MAAM,mBAAmB;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AAEnC,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAChC,MAAM,kBAAkB;AACxB,MAAM,2BAA2B;AACjC,MAAM,kCAAkC;AAExC,MAAM,iCAAiC;AACvC,MAAM,+BAA+B;AACrC,MAAM,+BAA+B;CACnC;CACA;CACA;AACF;AA0GA,MAAM,sBAAsB;AAC5B,MAAM,0BAA0B,KAAK,KAAK,qBAAqB,eAAe;AAE9E,MAAM,SAAS,OAAO,QAAQ,YAAY,cAAc,QAAQ,QAAQ,MAAM;;AAG9E,eAAe,gCAA+C;CAC5D,MAAM,OAAO,MAAMC,OAAY,KAAK,QAAQ;EAC1C;EACA;EACA;CACF,CAAC;CAED,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,uBAAuB,MAAM;AAEjD;;AAGA,eAAe,4BAA2C;CACxD,IAAI,QACF,MAAM,MAAM,qBAAqB,EAAE,WAAW,KAAK,CAAC;MAEpD,OAAO,8BAA8B;AAEzC;;AAGA,eAAe,2BAA2B,QAA+B;CACvE,MAAM,SAAS,OAAO,KAAK,MAAM;CAEjC,MAAM,OAAO,MAAMA,OAAY,KAC7B,QACA,CAAC,OAAO,uBAAuB,GAC/B;EACE,OAAO;EAGP,WAAW,kBAAkB,WAAW;CAC1C,CACF;CAEA,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,kBAAkB,MAAM;AAE5C;;AAGA,eAAe,uBAAuB,QAA+B;CACnE,MAAM,0BAA0B;CAEhC,IAAI,QACF,MAAM,GAAG,UAAU,yBAAyB,QAAQ,OAAO;MAE3D,OAAO,2BAA2B,MAAM;AAE5C;AAEA,IAAsB,eAAtB,MAAmC;CAkBjC,0BAAkD;EAEhD,IADqB,YAAY,SAAS,yBAC3B,MAAM,IAAI;GACvB,YAAY,UAAU,2BAA2B,MAAM;GACvD,OAAO;EACT,OACE,OAAO;CAEX;CAEA,YAAY,eAA8B;EACxC,KAAK,gBAAgB,qBAAqB,aAAa;EACvD,KAAK,UAAU,IAAI,QACjB,KAAK,cAAc,gBACnB,cAAc,mBAGd,QAAQ,IAAI,8BACZ,qBAAqB,iBAAiB,CACxC;EACA,KAAK,uCAAuB,IAAI,IAAI;EACpC,KAAK,gBAAgB;EACrB,KAAK,aAAa,QAAQ,uBAAuB;EAEjD,IACE,mBACE,yDACF,MAAM,MACN;GACA,QAAQ,IAAI,kCAAkC,KAAA;GAC9C,QAAQ,IAAI,oCAAoC,KAAA;EAClD;EAEA,KAAK,WAAW,CAAC;EACjB,KAAK,uBAAuB,CAAC;EAC7B,KAAK,SAAS,CAAC;EAEf,KAAK,gBAAgB;EACrB,KAAK,sBAAsB;EAI3B,KAAK,QAAQ;GACX,MAAM;GACN,cAAc;GACd,SAAS,KAAK,cAAc;GAC5B,aAAa,KAAK,cAAc;EAClC;EASA,KAAK,MAAM,CAAC,QAAQ,QAAQ;GAN1B,CAAC,qBAAqB,mBAAmB;GACzC,CAAC,4BAA4B,0BAA0B;GACvD,CAAC,qBAAqB,mBAAmB;GACzC,CAAC,OAAO,WAAW;GACnB,CAAC,QAAQ,aAAa;EAES,GAAG;GAClC,MAAM,QAAQ,QAAQ,IAAI;GAC1B,IAAI,OACF,KAAK,MAAM,UAAU;EAEzB;EAEA,KAAK,WAAWC,SAAqB;EACrC,KAAK,SAASC,UAAmB;EACjC,KAAK,YAAYC,eAAwB,KAAK,MAAM;EAEpD,KAAK,MAAM,YAAY,GAAG,KAAK,cAAc,KAAK;EAClD,KAAK,MAAM,UAAU,KAAK;EAC1B,KAAK,MAAM,aAAa,KAAK;EAG3B,WACc,CAAC,CAEZ,MAAM,YAAY;GACjB,IAAI,QAAQ,SAAS,WACnB,KAAK,QAAQ,SAAS,QAAQ,IAAI;GAEpC,IAAI,QAAQ,YAAY,WACtB,KAAK,QAAQ,iBAAiB,QAAQ,OAAO;EAEjD,CAAC,CAAC,CAED,OAAO,MAAe;GACrB,YAAY,MACV,qCAAqCC,iBAAe,CAAC,GACvD;EACF,CAAC;EAGL,KAAK,iBAAiB,KAAK,wBAAwB;EACnD,KAAK,MAAM,kBAAkB,KAAK;EAElC,IAAI,KAAK,cAAc,eAAe,gBACpC,KAAK,0BAA0B,KAAK;OAC/B,IAAI,KAAK,cAAc,eAAe,aAC3C,KAAK,0BAA0B,KAAK;OAC/B,IAAI,KAAK,cAAc,eAAe,aAC3C,KAAK,0BAA0B;OAE/B,MAAM,IAAI,MACR,cAAc,KAAK,cAAc,WAAW,sBAC9C;EAGF,KAAK,mBAAmB,0BACtB,KAAK,cAAc,kBACrB;EAEA,KAAK,YAAY,SAAS,KAAK,gBAAgB;CACjD;;;;;;;;;CAUA,WAAW,MAAc,UAAwB;EAC/C,KAAK,qBAAqB,IAAI,MAAM,QAAQ;CAC9C;;;;CAeA,UAAgB;EAEd,KAAK,aAAa,CAAC,CAAC,OAAO,UAAiB;GAE1C,QAAQ,IAAI,KAAK;GACjB,QAAQ,WAAW;EACrB,CAAC;CACH;CAEA,mBAA2B;EACzB,MAAM,SAAS,QAAQ,IAAI,kBAAkB,OAAO;EACpD,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,cAAc,KAAK,GAAG,WAAW,GAAG;CACvE;CAEA,QAAQ,KAAa,OAAwC;EAC3D,KAAK,MAAM,OAAO;CACpB;CAEA,MAAM,oBAA8C;EAClD,OAAO,MAAM,KAAK,QAAQ,kBAAkB;CAC9C;CAEA,cAAsB;EACpB,OACE,KAAK,SAAS,2CACd,QAAQ,IAAI,sBACZ,WAAW;CAEf;CAGA,kBAA0B;EACxB,IAAI,eAAe,YAAY,SAAS,wBAAwB;EAEhE,IAAI,iBAAiB,IAAI;GACvB,eAAe,WAAW;GAC1B,YAAY,UAAU,0BAA0B,YAAY;EAC9D;EAEA,OAAO;CACT;CAEA,uBAA0D;EACxD,OAAO,KAAK;CACd;CAEA,YACE,WACA,UAOI,CAAC,GACC;EACN,MAAM,eACJ,cAAc,0BAA0B,cAAc,mBAClD,YACA,GAAG,KAAK,cAAc,cAAc;EAE1C,KAAK,OAAO,KAAK;GACf,MAAM;GAGN,aAAa,KAAK,SAAS;GAG3B,MAAM,WAAW;GACjB,2BAAW,IAAI,KAAK;GAEpB,YAAY;IACV,GAAG;IACH,GAAG,KAAK;IACR,GAAG,KAAK;IACR,GAAG,OAAO,YACR,OAAO,QAAQ,KAAK,oBAAoB,CAAC,CAAC,KAEvC,CAAC,MAAM,aAAa,CAAC,YAAY,QAAQ,OAAO,CAAC,CACtD;GACF;EACF,CAAC;CACH;;;;;;CAOA,MAAM,cAAc,KAA8B;EAChD,MAAM,WAAW,MAAM,KAAK,cAAc;EAC1C,MAAM,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC,CACtC,QAAQ,SAAS,+BACnB;EAGA,OAAO,GAFO,OAAO,MAAMC,KAAG,GACT,CAAC,CAAC,GAAG,EACT,EAAE,OAAO;CAC5B;;;;;CAMA,MAAM,kBAAmC;EACvC,MAAM,aAAa,MAAM,KAAK,cAAc;EAC5C,MAAM,MAAM,YAAYC,UAAY,UAAUA,UAAY,OAAO;EACjE,OAAO;CACT;CAEA,IAAY,SAAkB;EAC5B,OAAO,KAAK,mBAAmB;CACjC;CAEA,IAAY,SAAkB;EAC5B,OAAO,KAAK,mBAAmB;CACjC;CAEA,MAAc,eAA8B;EAC1C,IAAI;GACF,MAAM,KAAK,QAAQ;GAEnB,MAAM,oBAAoB,KAAK,UAAU,KAAK,qBAAqB,CAAC;GACpE,QAAQ,IAAI,qBAAqB;GACjC,IAAI;IACF,MAAM,uBAAuB,iBAAiB;GAChD,SAAS,OAAO;IACd,KAAK,YAAY,6BAA6B,EAAE,OAAO,OAAO,KAAK,EAAE,CAAC;GACxE;GAEA,IAAI,CAAE,MAAM,KAAK,oBAAoB,GAAI;IACvC,KAAK,YAAY,kCAAkC;IACnD;GACF,OAAO;IACL,MAAM,KAAK,sBAAsB;IACjC,MAAM,KAAK,oBAAoB;IAC/B,KAAK,QAAQ,sBAAsB,KAAK,aAAa;GACvD;GAEA,IAAI,KAAK,QAAQ;IACf,KAAK,YAAY;IACjB,MAAM,KAAK,KAAK;IAGhB,MAAM,KAAK,oBAAoB;GACjC,OAAO,IAAI,KAAK,QACd,MAAM,KAAK,KAAK;GAElB,KAAK,QAAQ,2BAA2B,KAAK;EAC/C,SAAS,GAAY;GACnB,KAAK,QAAQ,2BAA2B,IAAI;GAE5C,MAAM,aAAaF,iBAAe,CAAC;GAEnC,KAAK,QAAQ,sBAAsB,UAAU;GAE7C,IAAI,KAAK,QACP,YAAY,QAAQ,UAAU;QAE9B,YAAY,UAAU,UAAU;GAGlC,MAAM,SAAS,UAAU,IAAI;GAE7B,MAAM,mCAAwC,IAAI,IAAI;GACtD,KAAK,MAAM,CAAC,iBAAiB,aAAa,KAAK,sBAC7C,IAAI;IAEF,MAAM,MAAM,MAAM,OADF,aAAa,QACE,CAAC;IAChC,iBAAiB,IACf,gBAAgB,mBAChB,IAAI,SAAS,QAAQ,CACvB;GACF,SAAS,YAAqB;IAC5B,iBAAiB,IACf,kBAAkB,mBAClBA,iBAAe,UAAU,CAC3B;GACF;GAGF,KAAK,YAAY,iBAAiB,OAAO,YAAY,gBAAgB,CAAC;EACxE,UAAU;GACR,IAAI,KAAK,QACP,MAAM,KAAK,kBAAkB;GAG/B,MAAM,KAAK,SAAS;EACtB;CACF;CAEA,MAAM,YAA0B;EAC9B,OAAO,MAAM,KAAK,QAAQ,QACvB,eAAwB,SAAc,YAAiB;GACtD,KAAK,uBAAuB,aAAa;GAEzC,KAAK,YAAY,gBAAgB;IAC/B,aAAa,QAAQ,SAAS;IAC9B,SAAS,QAAQ,SAAS;GAC5B,CAAC;EACH,CACF;CACF;CAEA,MAAc,UAAyB;EACrC,MAAM,UAAU,MAAM,KAAK,eAAe;EAC1C,IAAI,YAAY,KAAA,GACd;EAGF,KAAK,WAAW,QAAQ;EACxB,KAAK,MAAM,CAAC,KAAK,YAAY,OAAO,QAAQ,KAAK,QAAQ,GACvD,KAAK,qBAAqB,OAAO,QAAQ;EAG3C,MAAM,+BAAoC,IAAI,IAAI;GAChD,CAAC,QAAQ,GAAG;GACZ,CAAC,eAAe,KAAK;GACrB,CAAC,SAAS,IAAI;GACd,CAAC,SAAS,IAAI;GACd,CAAC,YAAY,IAAI;EACnB,CAAC;EACD,MAAM,sBAAsB;EAE5B,IAAI,QAAQ,WAAW,MAAM;GAC3B,MAAM,YAAsB,CAAC;GAE7B,KAAK,MAAM,YAAY,QAAQ,OAAO,WACpC,UAAU,KACR,GAAG,aAAa,IAAI,SAAS,MAAM,KAAK,oBAAoB,GAAG,SAAS,OAAO,QAAQ,KAAK,GAAG,EAAE,IAAI,SAAS,KAAK,IAAI,SAAS,UAAU,EAC5I;GAGF,KAAK,MAAM,eAAe,QAAQ,OAAO,wBACvC,UAAU,KACR,GAAG,aAAa,IAAI,YAAY,MAAM,KAAK,oBAAoB,GAAG,YAAY,OAAO,QAAQ,KAAK,GAAG,EAAE,IAAI,YAAY,KAAK,IAAI,YAAY,UAAU,EACxJ;GAGF,IAAI,UAAU,SAAS,GAAG;IACxB,YAAY,KAEV,kBAAgD,QAAQ,OAAO,KAAK,KAAK,QAC3E;IACA,KAAK,MAAM,UAAU,WACnB,YAAY,KAAK,MAAM;IAEzB,YAAY,KAAK,QAAQ,QAAQ,OAAO,KAAK,KAAK;IAClD,YAAY,KAAK,EAAE;GACrB;EACF;CACF;CAEA,WAAW,MAAmC;EAC5C,IAAI,CAAC,KAAK,SAAS,eAAe,IAAI,GACpC;EAGF,MAAM,SAAS,KAAK,SAAS;EAC7B,IAAI,WAAW,KAAA,GACb;EAGF,KAAK,YAAY,wBAAwB;GACvC,eAAe;GACf,wBAAwB,OAAO;EACjC,CAAC;EAED,OAAO;CACT;CAEA,cAA4B;EAC1B,MAAM,aAAa,KAAK,SAAS,QAAQ;EACzC,MAAM,aAAa,QAAQ,IAAI;EAE/B,IAAI,eAAe,KAAA,KAAa,eAAe,KAAA,GAC7C,KAAK,YAAY,kBAAkB;GACjC,aAAa;GACb,YAAY;GACZ,YAAY,EACV,MAAM,WACR;EACF,CAAC;CAEL;;;;;;;;CASA,MAAc,iBAA+C;EAC3D,KACE,IAAI,oBAAoB,GACxB,oBAAoB,GACpB,qBACA;GACA,MAAM,aAAa,MAAM,KAAK,cAAc;GAC5C,IAAI,eAAe,KAAA,GACjB;GAGF,IAAI;IACF,YAAY,MAAM,oBAAoB,YAAY;IAElD,MAAM,QAAQ;KAEZ,aAAa,KAAK,SAAS;KAC3B,kBAAkB,KAAK,SAAS;KAChC,QAAQ,KAAK,SAAS;KACtB,mBAAmB;MACjB,IAAI;MAEJ,GAAG,KAAK;MACR,GAAG,KAAK;KACV;IACF;IAEA,OAAO,OACL,MAAM,KAAK,UAAU,EAAA,CAEpB,KAAK,YAAY;KAChB,MAAM;KACN,SAAS,EACP,SAAS,6BACX;IACF,CAAC,CAAC,CACD,KAAK;GACV,SAAS,GAAY;IACnB,KAAK,uBAAuB,CAAC;IAC7B,YAAY,MAAM,sBAAsBA,iBAAe,CAAC,GAAG;IAC3D,KAAK,QAAQ,sBAAsB;GACrC;EACF;CAGF;CAEA,uBAA+B,GAAkB;EAE/C,IAAI,aAAa,gBAAgB,aAAa,KAAK,aAAa,GAAG;GACjE,MAAM,gBAEF;IACF,KAAK,EAAE,QAAQ,YAAY,SAAS;IACpC,aAAa,EAAE,QAAQ;GACzB;GAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,EAAE,QAAQ,MAAM,GACxD,IAAI,OAAO,SAAS,KAAK,GACvB,cAAc,gBAAgB,SAAS;GAI3C,KAAK,YAAY,WAAW,aAAa;EAC3C;CACF;;;;;;;;;;;;;CAcA,MAAc,gBAAiC;EAC7C,MAAM,eAAe,gBAAgB,eAAe;EAGpD,IAAI,iBAAiB,QAAQ,iBAAiB,IAAI;GAChD,YAAY,MAAM,uCAAuC,cAAc;GACvE,OAAO;EACT;EAEA,MAAM,uBAAuB,MAAM,KAAK,4BAA4B;EAEpE,YAAY,WACV,eAAe,KAAK,cAAc,KAAK,OAAO,KAAK,yBACrD;EAEA,IAAI;GACF,YAAY,KAAK,iBAAiB,MAAM,KAAK,aAAa,GAAG;GAE7D,MAAM,gBAAgB,MAAM,KAAK,aAAa;GAC9C,cAAc,aAAa,IAAI,MAAM,QAAQ;GAC7C,cAAc,aAAa,IACzB,eACA,KAAK,UAAU,KAAK,QAAQ,CAC9B;GAEA,MAAM,iBAAiB,OAAO,MAAM,KAAK,UAAU,EAAA,CAAG,KAAK,aAAa;GACxE,IAAI,eAAe,QAAQ,MAAM;IAC/B,MAAM,IAAI,eAAe,QAAQ;IACjC,KAAK,QAAQ,sBAAsB,CAAC;IAEpC,YAAY,MACV,+BAA+B,MAAM,KAAK,aAAa,EAAE,MAAM,GACjE;IACA,MAAM,SAAS,MAAM,KAAK,iBAAiB,GAAG,oBAAoB;IAClE,IAAI,QAAQ;KACV,KAAK,MAAM,oCAAoC;KAC/C,YAAY,MAAM,iBAAiB;KACnC,MAAM,KAAK,mBAAmB,QAAQ,oBAAoB;KAC1D,OAAO;IACT;GACF;GAEA,KAAK,MAAM,oCAAoC;GAE/C,YAAY,MACV,2DAA2D,eAAe,KAC5E;GAEA,MAAM,WAAW,KAAK,iBAAiB;GAEvC,MAAM,cAAc,MAAM,KAAK,aAC7B,IAAI,IAAI,eAAe,GAAG,GAC1B,QACF;GAEA,MAAM,KAAK,mBAAmB,UAAU,oBAAoB;GAE5D,IAAI,YAAY,UAAU,QAAQ,MAAM;IACtC,MAAM,IAAI,YAAY,SAAS,QAAQ;IAEvC,IAAI;KACF,MAAM,KAAK,kBAAkB,GAAG,UAAU,oBAAoB;IAChE,SAAS,GAAY;KACnB,YAAY,MAAM,+BAA+BA,iBAAe,CAAC,GAAG;IACtE;GACF;GAEA,OAAO;EACT,SAAS,GAAY;GACnB,KAAK,uBAAuB,CAAC;GAC7B,MAAM;EACR,UAAU;GACR,YAAY,SAAS;EACvB;CACF;;;;;;;;CASA,MAAc,8BAAsD;EAClE,MAAM,eAAe,gBAAgB,sBAAsB;EAC3D,MAAM,kBAAkB,gBAAgB,yBAAyB;EAEjE,IAAI,iBAAiB,QAAQ,oBAAoB,MAC/C,OAAO;EAET,IAAI,iBAAiB,QAAQ,oBAAoB,MAC/C,MAAM,IAAI,MACR,2EACF;EAGF,6BAA6B,KAAK,gBAAgB;EAElD,MAAM,mBAAmB,gBAAgB,YAAY;EACrD,KAAK,QAAQ,8BAA8B,gBAAgB;EAE3D,MAAM,YAAY,IAAI,IAAI,YAAY;EACtC,MAAM,UAAU,UAAU,SAAS,UAAU;EAE7C,YAAY,KAAK,gCAAgC,SAAS;EAE1D,MAAM,QAAO,OADW,MAAM,KAAK,UAAU,EAAA,CAAG,IAAI,YAAY,EAAA,CAC1C;EAEtB,MAAM,iBAAiB,eAAe,IAAI;EAC1C,IAAI,mBAAmB,kBACrB,MAAM,IAAI,MACR,mCAAmC,QAAQ,aAAa,iBAAiB,QAAQ,gBACnF;EAGF,MAAM,SAAS,GAAG,KAAK,cAAc,KAAK,GAAG,KAAK;EAElD,MAAM,eADS,mBAAmB,IACR,CAAC,CAAC,IAAI,MAAM;EACtC,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,MAAM,gBAAgB,OAAO,wBAAwB,SAAS;EAE1E,OAAO;CACT;;;;;CAMA,MAAc,mBACZ,UACA,UACe;EACf,IAAI,aAAa,MACf;EAEF,MAAM,SAAS,MAAM,aAAa,QAAQ;EAC1C,IAAI,WAAW,UACb,MAAM,IAAI,MACR,8BAA8B,KAAK,wBAAwB,aAAa,SAAS,QAAQ,QAC3F;CAEJ;;;;;CAMA,YAAY,KAAmB;EAC7B,IAAI,KAAK,YACP,YAAY,UAAU,wBAAwB,KAAK;CAEvD;CAEA,MAAc,aACZ,KACA,aACkB;EAClB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,OAAO,IAAI,SAAS,SAAS,WAAW;GAEtC,IAAI;GAGJ,IAAI,SAAS;GAEb,MAAM,SAAS,WAA0B;IACvC,IAAI,aACF,YAAY,QAAQ;IAGtB,cAAc,kBAAkB,aAAa;KAC3C,UAAU;KACV,MAAM;IACR,CAAC;IAED,YAAY,KAAK,UAAU,UAAU;KAEnC,SAAS;KACT,OAAO,KAAK;IACd,CAAC;IAED,YAAY,GAAG,gBAAgB;KAC7B,IAAI,CAAC,QACH,QAAQ,MAAM;IAElB,CAAC;IAED,OAAO,KAAK,UAAU,QAAQ,QAAQ,sBAAsB;KAE1D,MAAM,kBAAkB,CAAC;IAC3B,CAAC;IAID,OAAO,KAAK,WAAW;GACzB;GAGA,MAAM,OAAO,OAAO,GAAG,CAAC;EAC1B,CAAC;CACH;CAEA,MAAc,WAA0B;EACtC,KAAK,YAAY,YAAY,KAAK,gBAAgB;EAClD,MAAM,KAAK,aAAa;CAC1B;CAEA,MAAc,gBAA0C;EACtD,MAAM,aAAa,MAAM,KAAK,QAAQ,kBAAkB;EAExD,IAAI,eAAe,KAAA,GACjB;EAGF,WAAW,YAAY;EACvB,OAAO;CACT;CAEA,MAAc,eAA6B;EACzC,MAAM,IAAI,KAAK;EAEf,IAAI,EAAE,KAAK;GACT,KAAK,QAAQ,iBAAiB,EAAE,GAAG;GACnC,OAAO,IAAI,IAAI,EAAE,GAAG;EACtB;EAEA,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW;EAC/C,SAAS,YAAY,KAAK,cAAc;EAExC,IAAI,EAAE,KACJ,SAAS,YAAY,QAAQ,EAAE;OAC1B,IAAI,EAAE,IACX,SAAS,YAAY,OAAO,EAAE;OACzB,IAAI,EAAE,QACX,SAAS,YAAY,WAAW,EAAE;OAC7B,IAAI,EAAE,UACX,SAAS,YAAY,QAAQ,EAAE;OAE/B,SAAS,YAAY;EAGvB,SAAS,YAAY,IAAI,KAAK;EAE9B,KAAK,QAAQ,iBAAiB,SAAS,SAAS,CAAC;EAEjD,OAAO;CACT;CAEA,SAAiB,SAAiB,cAAqC;EACrE,MAAM,iBAAiB,QAAQ,QAAQ,oBAAoB,EAAE;EAC7D,MAAM,aAAa,eAAe,KAAK,iBAAiB;EACxD,OAAO,qBAAqB,KAAK,cAAc,KAAK,GAAG,KAAK,wBAAwB,GAAG,iBAAiB;CAC1G;CAEA,MAAc,iBACZ,SACA,cAC6B;EAC7B,MAAM,WAAW,QAAQ,IAAI;EAE7B,IAAI;GACF,MAAM,UAAU,KAAK,iBAAiB;GACtC,MAAM,MAAM,OAAO;GACnB,QAAQ,MAAM,OAAO;GAGrB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI;GAClD,OAAO,QAAQ,IAAI;GAEnB,IACE,MAAM,aAAa,aACjB,CAAC,KAAK,cAAc,IAAI,GACxB,KAAK,SAAS,SAAS,YAAY,GACnC,CAAC,GACD,KAAA,GACA,IACF,GACA;IACA,KAAK,YAAY,wBAAwB;IACzC,OAAO,GAAG,QAAQ,GAAG,KAAK,cAAc;GAC1C;GAEA,KAAK,YAAY,yBAAyB;GAC1C;EACF,UAAU;GACR,QAAQ,IAAI,mBAAmB,QAAQ,IAAI;GAC3C,OAAO,QAAQ,IAAI;GACnB,QAAQ,MAAM,QAAQ;EACxB;CACF;CAEA,MAAc,kBACZ,SACA,UACA,cACe;EACf,MAAM,WAAW,QAAQ,IAAI;EAE7B,IAAI;GACF,MAAM,UAAU,KAAK,iBAAiB;GACtC,MAAM,MAAM,OAAO;GACnB,QAAQ,MAAM,OAAO;GACrB,MAAM,SAAS,UAAU,GAAG,QAAQ,GAAG,KAAK,cAAc,MAAM;GAGhE,QAAQ,IAAI,0BAA0B,QAAQ,IAAI;GAClD,OAAO,QAAQ,IAAI;GAEnB,MAAM,aAAa,UACjB,CAAC,KAAK,cAAc,IAAI,GACxB,KAAK,SAAS,SAAS,YAAY,GACnC,KAAA,GACA,IACF;GACA,KAAK,YAAY,4BAA4B;EAC/C,UAAU;GACR,QAAQ,IAAI,mBAAmB,QAAQ,IAAI;GAC3C,OAAO,QAAQ,IAAI;GACnB,QAAQ,MAAM,QAAQ;EACxB;CACF;CAEA,wBAAsC;EACpC,IAAI,CAAC,QAAQ,IAAI,4BAA4B;GAC3C,YAAY,eACV,8BACA,KAAK,gBAAgB,CACvB;GAEA,YAAY,UAAU,iCAAiC,KAAK,IAAI,CAAC;EACnE;CACF;CAEA,MAAc,oBAAmC;EAC/C,IAAI;GACF,IAAI,QAAQ,IAAI,+BAA+B,KAAK,gBAAgB,GAClE;GAGF,MAAM,aAAa,MAAM,kBACvB,KAAK,cAAc,oBACnB,KAAK,cAAc,qBACnB,SAAS,YAAY,SAAS,+BAA+B,CAAC,CAChE;GACA,YAAY,MAAM,0BAA0B,WAAW,MAAM;GAC7D,IAAI,WAAW,OAAO,GACpB,KAAK,YAAY,kBAAkB,OAAO,YAAY,UAAU,CAAC;EAErE,SAAS,YAAqB;GAC5B,YAAY,MACV,gCAAgCA,iBAAe,UAAU,GAC3D;EACF;CACF;CAEA,MAAc,sBAAwC;EACpD,IAAI;EAEJ,MAAM,aAAa,QAAQ,IAAI,WAAW,GAAA,CAAI,MAAM,GAAG;EACvD,KAAK,MAAM,YAAY,WAAW;GAChC,MAAM,eAAe,KAAK,KAAK,UAAU,KAAK;GAE9C,IAAI;IACF,MAAM,GAAG,OAAO,cAAc,GAAG,UAAU,IAAI;IAC/C,YAAY,MAAM,gBAAgB,cAAc;IAChD,cAAc;IACd;GACF,QAAQ;IACN,YAAY,MAAM,cAAc,cAAc;GAChD;EACF;EACA,KAAK,QAAQ,mBAAmB,eAAe,EAAE;EAEjD,IAAI,KAAK,cAAc,eAAe,UACpC,OAAO;EAIT,IAD6B,YAAY,SAAS,uBAC3B,MAAM,iBAE3B,OAAO;EAGT,IAAI,gBAAgB,KAAA,GAClB,OAAO;EAET,YAAY,UAAU,yBAAyB,eAAe;EAE9D,QAAQ,KAAK,cAAc,YAA3B;GACE,KAAK;IACH,YAAY,UACV,CACE,uDACA,sFACF,CAAC,CAAC,KAAK,GAAG,CACZ;IACA;GACF,KAAK,QACH,YAAY,QACV,CACE,8DACA,sFACF,CAAC,CAAC,KAAK,GAAG,CACZ;EAEJ;EAEA,OAAO;CACT;CAEA,MAAc,wBAAuC;EACnD,IAAI,SAAS;EAEb,MAAM,UAAmC,CAAC;EAC1C,QAAQ,SAAS;EACjB,QAAQ,YAAY,EAClB,SAAS,SAAS;GAChB,UAAU,KAAK,SAAS;EAC1B,EACF;EAEA,IAAI;GACF,SAAS;GACT,MAAMJ,OAAY,KAAK,OAAO;IAAC;IAAS;IAAQ;GAAQ,GAAG,OAAO;GAClE,KAAK,QAAQ,6BAA6B,MAAM;EAClD,QAAQ;GACN,IAAI;IAEF,SAAS;IACT,MAAMA,OAAY,KAAK,OAAO;KAAC;KAAS;KAAQ;IAAQ,GAAG,OAAO;IAClE,KAAK,QAAQ,6BAA6B,MAAM;GAClD,QAAQ;IACN,KAAK,QAAQ,6BAA6B,MAAM;IAChD;GACF;EACF;EAEA,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,MAAM;GAChC,IAAI,OAAO,YAAY,QAAQ,OAAO,YAAY,GAChD,KAAK,gBAAgB;QAChB,IAAI,OAAO,YAAY,SAAS,OAAO,YAAY,GACxD,KAAK,gBAAgB;QAChB,IAAI,OAAO,YAAY,KAAA,GAC5B,KAAK,QACH,4BACA,6BAA6B,KAAK,UAAU,OAAO,OAAO,GAC5D;GAGF,KAAK,QAAQ,wBAAwB,KAAK,UAAU,OAAO,OAAO,CAAC;EACrE,SAAS,GAAY;GACnB,KAAK,QAAQ,4BAA4BI,iBAAe,CAAC,CAAC;EAC5D;CACF;CAEA,MAAc,sBAAqC;EACjD,IAAI,SAAS;EAEb,IAAI;GACF,CAAC,CAAE,QAAQ,UAAW,MAAMJ,OAAY,cACtC,OACA,CAAC,WAAW,GACZ,EACE,QAAQ,KACV,CACF;GACA,SAAS,OAAO,KAAK,KAAK;EAC5B,QAAQ,CAER;EAEA,KAAK,QAAQ,kBAAkB,MAAM;CACvC;CAEA,MAAc,eAA8B;EAC1C,MAAM,iBAAiB,MAAM,KAAK,QAAQ,kBAAkB;EAC5D,IAAI,mBAAmB,KAAA,GAAW;GAChC,YAAY,MACV,6DACF;GACA,YAAY,MAAM,KAAK,UAAU,KAAK,QAAQ,KAAA,GAAW,CAAC,CAAC;GAC3D;EACF;EAEA,MAAM,QAAQ;GACZ,yBAAS,IAAI,KAAK;GAClB,OAAO,KAAK;EACd;EAEA,IAAI;GACF,OACE,MAAM,KAAK,UAAU,EAAA,CACrB,KAAK,gBAAgB;IACrB,MAAM;IACN,SAAS,EACP,SAAS,+BACX;GACF,CAAC;EACH,SAAS,KAAc;GACrB,KAAK,uBAAuB,GAAG;GAE/B,YAAY,MACV,yCAAyC,eAAe,IAAII,iBAAe,GAAG,GAChF;EACF;EACA,KAAK,SAAS,CAAC;CACjB;AACF;AAEA,SAASA,iBAAe,OAAwB;CAC9C,OAAO,iBAAiB,SAAS,OAAO,SAAS,WAC7C,MAAM,SAAS,IACf,KAAK,UAAU,KAAK;AAC1B;AAEA,SAAS,qBACP,eACwB;CACxB,MAAM,iBAAiB,cAAc,kBAAkB,cAAc;CAErE,MAAM,YAAoC;EACxC,MAAM,cAAc;EACpB;EACA,aAAa,cAAc,eAAe;EAC1C,YAAY,cAAc;EAC1B,oBAAoB,cAAc;EAClC,YAAY,cAAc;EAC1B,oBAAoB,cAAc,sBAAsB;GACtD;GACA;GACA,cAAc;EAChB;EACA,qBACE,cAAc,uBAAuB;CACzC;CAEA,YAAY,MAAM,iBAAiB;CACnC,YAAY,MAAM,KAAK,UAAU,WAAW,KAAA,GAAW,CAAC,CAAC;CAEzD,OAAO;AACT"}

package/dist/rolldown-runtime-D7D4PA-g.mjs

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll as t };

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@determinate-systems/detsys-ts",
+  "version": "0.1.0",
+  "description": "TypeScript goodies for DetSys projects",
+  "main": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "type": "module",
+  "files": [
+    "dist/"
+  ],
+  "scripts": {
+    "build": "tsdown",
+    "prepare": "tsdown",
+    "check-fmt": "prettier --check .",
+    "format": "prettier --write .",
+    "lint": "eslint src/**/*.ts",
+    "docs": "typedoc",
+    "test": "vitest --watch false",
+    "test-dev": "vitest",
+    "all": "rm -rf dist && npm run format && npm run lint && npm run build"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/DeterminateSystems/detsys-ts.git"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/DeterminateSystems/detsys-ts/issues"
+  },
+  "homepage": "https://github.com/DeterminateSystems/detsys-ts#readme",
+  "dependencies": {
+    "@actions/cache": "^6.0.0",
+    "@actions/core": "^3.0.0",
+    "@actions/exec": "^3.0.0",
+    "got": "^15.1.0",
+    "type-fest": "^5.5.0"
+  },
+  "devDependencies": {
+    "@trivago/prettier-plugin-sort-imports": "^6.0.2",
+    "@types/node": "^26.2.0",
+    "@typescript-eslint/eslint-plugin": "^8.57.1",
+    "@typescript-eslint/parser": "^8.57.1",
+    "eslint": "^10.8.1",
+    "eslint-import-resolver-typescript": "^4.4.4",
+    "eslint-plugin-github": "^6.0.0",
+    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-prettier": "^5.5.5",
+    "globals": "^17.4.0",
+    "prettier": "^3.8.1",
+    "tsdown": "^0.22.14",
+    "typedoc": "^0.28.17",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.57.1",
+    "vitest": "^4.1.0"
+  }
+}