npm - @determinate-systems/detsys-ts - Versions diffs - 1.0.0 → 2.0.0 - Mend

@determinate-systems/detsys-ts 1.0.0 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/index.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.mjs","names":["fs","os","exec","exec","actionsExec","correlation.identify","platform.getArchOs","platform.getNixPlatform","stringifyError","os","fsConstants"],"sources":["../src/linux-release-info.ts","../src/actions-core-platform.ts","../src/errors.ts","../src/backtrace.ts","../src/checksums.ts","../src/correlation.ts","../src/ids-host.ts","../src/inputs.ts","../src/platform.ts","../src/sourcedef.ts","../src/index.ts"],"sourcesContent":["/!\n linux-release-info\n * Get Linux release info (distribution name, version, arch, release, etc.)\n * from '/etc/os-release' or '/usr/lib/os-release' files and from native os\n * module. On Windows and Darwin platforms it only returns common node os module\n * info (platform, hostname, release, and arch)\n \n Licensed under MIT\n * Copyright (c) 2018-2020 [Samuel Carreira]\n /\n// NOTE: we depend on this directly to get around some un-fun issues with mixing CommonJS\n// and ESM in the bundle. We've modified the original logic to improve things like typing\n// and fixing ESLint issues. Originally drawn from:\n// https://github.com/samuelcarreira/linux-release-info/blob/84a91aa5442b47900da03020c590507545d3dc74/src/index.ts\nimport as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport { promisify } from \"node:util\";\n\nconst readFileAsync = promisify(fs.readFile);\n\nexport interface LinuxReleaseInfoOptions {\n /*\n read mode, possible values: 'async' and 'sync'\n \n @default 'async'\n /\n mode?: \"async\" \| \"sync\";\n /\n custom complete file path with os info default null/none\n * if not provided the system will search on the '/etc/os-release'\n * and '/usr/lib/os-release' files\n \n @default null\n /\n customFile?: string \| null \| undefined;\n /\n if true, show console debug messages\n \n @default false\n /\n debug?: boolean;\n}\n\nconst linuxReleaseInfoOptionsDefaults: LinuxReleaseInfoOptions = {\n mode: \"async\",\n customFile: null,\n debug: false,\n};\n\n/\n Get OS release info from 'os-release' file and from native os module\n * on Windows or Darwin it only returns common os module info\n * (uses native fs module)\n * @returns {object} info from the current os\n /\nexport function releaseInfo(infoOptions: LinuxReleaseInfoOptions): object {\n const options = { ...linuxReleaseInfoOptionsDefaults, ...infoOptions };\n\n const searchOsReleaseFileList: string[] = osReleaseFileList(\n options.customFile,\n );\n\n if (os.type() !== \"Linux\") {\n if (options.mode === \"sync\") {\n return getOsInfo();\n } else {\n return Promise.resolve(getOsInfo());\n }\n }\n\n if (options.mode === \"sync\") {\n return readSyncOsreleaseFile(searchOsReleaseFileList, options);\n } else {\n return Promise.resolve(\n readAsyncOsReleaseFile(searchOsReleaseFileList, options),\n );\n }\n}\n\n/\n Format file data: convert data to object keys/values\n \n @param {object} sourceData Source object to be appended\n * @param {string} srcParseData Input file data to be parsed\n * @returns {object} Formated object\n /\nfunction formatFileData(sourceData: OsInfo, srcParseData: string): OsInfo {\n const lines: string[] = srcParseData.split(\"\\n\");\n\n for (const line of lines) {\n const lineData = line.split(\"=\");\n\n if (lineData.length === 2) {\n lineData[1] = lineData[1].replace(/[\"'\\r]/gi, \"\"); // remove quotes and return character\n\n Object.defineProperty(sourceData, lineData[0].toLowerCase(), {\n value: lineData[1],\n writable: true,\n enumerable: true,\n configurable: true,\n });\n }\n }\n\n return sourceData;\n}\n\n/\n Export a list of os-release files\n \n @param {string} customFile optional custom complete filepath\n * @returns {array} list of os-release files\n /\nfunction osReleaseFileList(customFile: string \| null \| undefined): string[] {\n const DEFAULT_OS_RELEASE_FILES = [\"/etc/os-release\", \"/usr/lib/os-release\"];\n\n if (!customFile) {\n return DEFAULT_OS_RELEASE_FILES;\n } else {\n return Array(customFile);\n }\n}\n\n/\n Operating system info.\n /\ntype OsInfo = {\n type: string;\n platform: string;\n hostname: string;\n arch: string;\n release: string;\n};\n\n/\n Get OS Basic Info\n * (uses node 'os' native module)\n \n @returns {OsInfo} os basic info\n /\nfunction getOsInfo(): OsInfo {\n return {\n type: os.type(),\n platform: os.platform(),\n hostname: os.hostname(),\n arch: os.arch(),\n release: os.release(),\n };\n}\n\n/ Helper functions /\n\nasync function readAsyncOsReleaseFile(\n fileList: string[],\n options: LinuxReleaseInfoOptions,\n): Promise<OsInfo> {\n let fileData = null;\n\n for (const osReleaseFile of fileList) {\n try {\n if (options.debug) {\n / eslint-disable no-console /\n console.log(`Trying to read '${osReleaseFile}'...`);\n }\n\n fileData = await readFileAsync(osReleaseFile, \"binary\");\n\n if (options.debug) {\n console.log(`Read data:\\n${fileData}`);\n }\n\n break;\n } catch (error) {\n if (options.debug) {\n console.error(error);\n }\n }\n }\n\n if (fileData === null) {\n throw new Error(\"Cannot read os-release file!\");\n //return getOsInfo();\n }\n\n return formatFileData(getOsInfo(), fileData);\n}\n\nfunction readSyncOsreleaseFile(\n releaseFileList: string[],\n options: LinuxReleaseInfoOptions,\n): OsInfo {\n let fileData = null;\n\n for (const osReleaseFile of releaseFileList) {\n try {\n if (options.debug) {\n console.log(`Trying to read '${osReleaseFile}'...`);\n }\n\n fileData = fs.readFileSync(osReleaseFile, \"binary\");\n\n if (options.debug) {\n console.log(`Read data:\\n${fileData}`);\n }\n\n break;\n } catch (error) {\n if (options.debug) {\n console.error(error);\n }\n }\n }\n\n if (fileData === null) {\n throw new Error(\"Cannot read os-release file!\");\n //return getOsInfo();\n }\n\n return formatFileData(getOsInfo(), fileData);\n}\n","// MIT, mostly lifted from https://github.com/actions/toolkit/blob/5a736647a123ecf8582376bdaee833fbae5b3847/packages/core/src/platform.ts\n// since it isn't in @actions/core 1.10.1 which is their current release as 2024-04-19.\n// Changes: Replaced the lsb_release call in Linux with `linux-release-info` to parse the os-release file directly.\nimport { releaseInfo } from \"./linux-release-info.js\";\nimport as actionsCore from \"@actions/core\";\nimport * as exec from \"@actions/exec\";\nimport os from \"os\";\n\n/*\n The name and version of the Action runner's system.\n /\ntype SystemInfo = {\n name: string;\n version: string;\n};\n\n/\n Get the name and version of the current Windows system.\n /\nconst getWindowsInfo = async (): Promise<SystemInfo> => {\n const { stdout: version } = await exec.getExecOutput(\n 'powershell -command \"(Get-CimInstance -ClassName Win32_OperatingSystem).Version\"',\n undefined,\n {\n silent: true,\n },\n );\n\n const { stdout: name } = await exec.getExecOutput(\n 'powershell -command \"(Get-CimInstance -ClassName Win32_OperatingSystem).Caption\"',\n undefined,\n {\n silent: true,\n },\n );\n\n return {\n name: name.trim(),\n version: version.trim(),\n };\n};\n\n/\n Get the name and version of the current macOS system.\n /\nconst getMacOsInfo = async (): Promise<SystemInfo> => {\n const { stdout } = await exec.getExecOutput(\"sw_vers\", undefined, {\n silent: true,\n });\n\n const version = stdout.match(/ProductVersion:\\s(.+)/)?.[1] ?? \"\";\n const name = stdout.match(/ProductName:\\s(.+)/)?.[1] ?? \"\";\n\n return {\n name,\n version,\n };\n};\n\n/\n Get the name and version of the current Linux system.\n /\nconst getLinuxInfo = async (): Promise<SystemInfo> => {\n let data: object = {};\n\n try {\n data = releaseInfo({ mode: \"sync\" });\n actionsCore.debug(`Identified release info: ${JSON.stringify(data)}`);\n } catch (e) {\n actionsCore.debug(`Error collecting release info: ${e}`);\n }\n\n return {\n name: getPropertyViaWithDefault(\n data,\n [\"id\", \"name\", \"pretty_name\", \"id_like\"],\n \"unknown\",\n ),\n version: getPropertyViaWithDefault(\n data,\n [\"version_id\", \"version\", \"version_codename\"],\n \"unknown\",\n ),\n };\n};\n\nfunction getPropertyViaWithDefault<T, Property extends string>(\n data: object,\n names: Property[],\n defaultValue: T,\n): T {\n for (const name of names) {\n const ret: T = getPropertyWithDefault(data, name, defaultValue);\n\n if (ret !== defaultValue) {\n return ret;\n }\n }\n\n return defaultValue;\n}\n\nfunction getPropertyWithDefault<T, Property extends string>(\n data: object,\n name: Property,\n defaultValue: T,\n): T {\n if (!data.hasOwnProperty(name)) {\n return defaultValue;\n }\n\n const value = (data as { [K in Property]: T })[name];\n\n // NB. this check won't work for object instances\n if (typeof value !== typeof defaultValue) {\n return defaultValue;\n }\n\n return value;\n}\n\n/\n The Action runner's platform.\n /\nexport const platform = os.platform();\n\n/\n The Action runner's architecture.\n /\nexport const arch = os.arch();\n\n/\n Whether the Action runner is a Windows system.\n /\nexport const isWindows = platform === \"win32\";\n\n/\n Whether the Action runner is a macOS system.\n /\nexport const isMacOS = platform === \"darwin\";\n\n/\n Whether the Action runner is a Linux system.\n /\nexport const isLinux = platform === \"linux\";\n\n/\n System-level information about the current host (platform, architecture, etc.).\n /\ntype SystemDetails = {\n name: string;\n platform: string;\n arch: string;\n version: string;\n isWindows: boolean;\n isMacOS: boolean;\n isLinux: boolean;\n};\n\n/\n Get system-level information about the current host (platform, architecture, etc.).\n /\nexport async function getDetails(): Promise<SystemDetails> {\n return {\n ...(await (isWindows\n ? getWindowsInfo()\n : isMacOS\n ? getMacOsInfo()\n : getLinuxInfo())),\n platform,\n arch,\n isWindows,\n isMacOS,\n isLinux,\n };\n}\n","/\n Coerce a value of type `unknown` into a string.\n /\nexport function stringifyError(e: unknown): string {\n if (e instanceof Error) {\n return e.message;\n } else if (typeof e === \"string\") {\n return e;\n } else {\n return JSON.stringify(e);\n }\n}\n","/\n @packageDocumentation\n * Collects backtraces for executables for diagnostics\n /\nimport { isLinux, isMacOS } from \"./actions-core-platform.js\";\nimport { stringifyError } from \"./errors.js\";\nimport as actionsCore from \"@actions/core\";\nimport * as exec from \"@actions/exec\";\nimport { readFile, readdir, stat } from \"node:fs/promises\";\nimport { promisify } from \"node:util\";\nimport { gzip } from \"node:zlib\";\n\n// Give a few seconds buffer, capturing traces that happened a few seconds earlier.\nconst START_SLOP_SECONDS = 5;\n\nexport async function collectBacktraces(\n prefixes: string[],\n programNameDenyList: string[],\n startTimestampMs: number,\n): Promise<Map<string, string>> {\n if (isMacOS) {\n return await collectBacktracesMacOS(\n prefixes,\n programNameDenyList,\n startTimestampMs,\n );\n }\n if (isLinux) {\n return await collectBacktracesSystemd(\n prefixes,\n programNameDenyList,\n startTimestampMs,\n );\n }\n\n return new Map();\n}\n\nexport async function collectBacktracesMacOS(\n prefixes: string[],\n programNameDenyList: string[],\n startTimestampMs: number,\n): Promise<Map<string, string>> {\n const backtraces: Map<string, string> = new Map();\n\n try {\n const { stdout: logJson } = await exec.getExecOutput(\n \"log\",\n [\n \"show\",\n \"--style\",\n \"json\",\n \"--last\",\n // Note we collect the last 1m only, because it should only take a few seconds to write the crash log.\n // Therefore, any crashes before this 1m should be long done by now.\n \"1m\",\n \"--no-info\",\n \"--predicate\",\n \"sender = 'ReportCrash'\",\n ],\n {\n silent: true,\n },\n );\n\n const sussyArray: unknown = JSON.parse(logJson);\n if (!Array.isArray(sussyArray)) {\n throw new Error(`Log json isn't an array: ${logJson}`);\n }\n\n if (sussyArray.length > 0) {\n actionsCore.info(`Collecting crash data...`);\n const delay = async (ms: number): Promise<void> =>\n new Promise((resolve) => setTimeout(resolve, ms));\n await delay(5000);\n }\n } catch {\n actionsCore.debug(\n \"Failed to check logs for in-progress crash dumps; now proceeding with the assumption that all crash dumps completed.\",\n );\n }\n\n const dirs = [\n [\"system\", \"/Library/Logs/DiagnosticReports/\"],\n [\"user\", `${process.env[\"HOME\"]}/Library/Logs/DiagnosticReports/`],\n ];\n\n for (const [source, dir] of dirs) {\n const fileNames = (await readdir(dir))\n .filter((fileName) => {\n return prefixes.some((prefix) => fileName.startsWith(prefix));\n })\n .filter((fileName) => {\n return !programNameDenyList.some((programName) =>\n fileName.startsWith(programName),\n );\n })\n .filter((fileName) => {\n // macOS creates .diag files periodically, which are called \"microstackshots\".\n // We don't necessarily want those, and they're definitely not crashes.\n // See: https://patents.google.com/patent/US20140237219A1/en\n return !fileName.endsWith(\".diag\");\n });\n\n const doGzip = promisify(gzip);\n for (const fileName of fileNames) {\n try {\n if ((await stat(`${dir}/${fileName}`)).ctimeMs >= startTimestampMs) {\n const logText = await readFile(`${dir}/${fileName}`);\n const buf = await doGzip(logText);\n backtraces.set(\n `backtrace_value_${source}_${fileName}`,\n buf.toString(\"base64\"),\n );\n }\n } catch (innerError: unknown) {\n backtraces.set(\n `backtrace_failure_${source}_${fileName}`,\n stringifyError(innerError),\n );\n }\n }\n }\n\n return backtraces;\n}\n\ntype SystemdCoreDumpInfo = {\n exe: string;\n pid: number;\n};\n\nexport async function collectBacktracesSystemd(\n prefixes: string[],\n programNameDenyList: string[],\n startTimestampMs: number,\n): Promise<Map<string, string>> {\n const sinceSeconds =\n Math.ceil((Date.now() - startTimestampMs) / 1000) + START_SLOP_SECONDS;\n const backtraces: Map<string, string> = new Map();\n\n const coredumps: SystemdCoreDumpInfo[] = [];\n\n try {\n const { stdout: coredumpjson } = await exec.getExecOutput(\n \"coredumpctl\",\n [\"--json=pretty\", \"list\", \"--since\", `${sinceSeconds} seconds ago`],\n {\n silent: true,\n },\n );\n\n const sussyArray: unknown = JSON.parse(coredumpjson);\n if (!Array.isArray(sussyArray)) {\n throw new Error(`Coredump isn't an array: ${coredumpjson}`);\n }\n\n for (const sussyObject of sussyArray) {\n const keys = Object.keys(sussyObject);\n\n if (keys.includes(\"exe\") && keys.includes(\"pid\")) {\n if (\n typeof sussyObject.exe == \"string\" &&\n typeof sussyObject.pid == \"number\"\n ) {\n const execParts = sussyObject.exe.split(\"/\");\n const binaryName = execParts[execParts.length - 1];\n\n if (\n prefixes.some((prefix) => binaryName.startsWith(prefix)) &&\n !programNameDenyList.includes(binaryName)\n ) {\n coredumps.push({\n exe: sussyObject.exe,\n pid: sussyObject.pid,\n });\n }\n } else {\n actionsCore.debug(\n `Mysterious coredump entry missing exe string and/or pid number: ${JSON.stringify(sussyObject)}`,\n );\n }\n } else {\n actionsCore.debug(\n `Mysterious coredump entry missing exe value and/or pid value: ${JSON.stringify(sussyObject)}`,\n );\n }\n }\n } catch (innerError: unknown) {\n actionsCore.debug(\n `Cannot collect backtraces: ${stringifyError(innerError)}`,\n );\n\n return backtraces;\n }\n\n const doGzip = promisify(gzip);\n for (const coredump of coredumps) {\n try {\n const { stdout: logText } = await exec.getExecOutput(\n \"coredumpctl\",\n [\"info\", `${coredump.pid}`],\n {\n silent: true,\n },\n );\n\n const buf = await doGzip(logText);\n backtraces.set(`backtrace_value_${coredump.pid}`, buf.toString(\"base64\"));\n } catch (innerError: unknown) {\n backtraces.set(\n `backtrace_failure_${coredump.pid}`,\n stringifyError(innerError),\n );\n }\n }\n\n return backtraces;\n}\n","/*\n @packageDocumentation\n * Parsing and hashing helpers for `shasum`-format checksum files, used to\n * hash-lock downloaded artifacts.\n /\nimport { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\n\nconst HEX_STRING_RE = /^[0-9a-fA-F]+$/;\n\n/\n Parse a `shasum`-format checksums file into a map of filename -> hex digest.\n \n Each non-empty line has the shape `<hex-digest><space(s)><filename>`. Lines\n * without a space delimiter are skipped. Invalid hex digests throw, so a\n * malformed file fails loudly rather than silently skipping the entry we\n * care about.\n /\nexport function parseChecksumsFile(text: string): Map<string, string> {\n const result = new Map<string, string>();\n\n for (const record of text.split(/\\r\\n\|\\n\|\\r/).filter(Boolean)) {\n const delimIndex = record.indexOf(\" \");\n if (delimIndex === -1) {\n continue;\n }\n\n const digest = record.slice(0, delimIndex);\n if (!HEX_STRING_RE.test(digest)) {\n throw new Error(`Invalid digest in checksums file: ${digest}`);\n }\n\n const name = record.slice(delimIndex + 1).trim();\n if (name === \"\") {\n continue;\n }\n\n result.set(name, digest.toLowerCase());\n }\n\n return result;\n}\n\n/\n Compute the SHA-256 of a file on disk and return its lowercase hex digest.\n * Streams the file so memory use is constant regardless of size.\n /\nexport async function sha256OfFile(filePath: string): Promise<string> {\n return new Promise((resolve, reject) => {\n const hash = createHash(\"sha256\").setEncoding(\"hex\");\n createReadStream(filePath)\n .once(\"error\", reject)\n .pipe(hash)\n .once(\"finish\", () => resolve(hash.read() as string));\n });\n}\n\n/\n Compute the SHA-256 of an in-memory buffer or string and return its\n * lowercase hex digest.\n /\nexport function sha256OfBuffer(data: Buffer \| string): string {\n return createHash(\"sha256\").update(data).digest(\"hex\");\n}\n","import as actionsCore from \"@actions/core\";\nimport { createHash, randomUUID } from \"node:crypto\";\n\nconst OPTIONAL_VARIABLES = [\"INVOCATION_ID\"];\n\n/* eslint-disable camelcase /\n/\n JSON sent to server.\n /\nexport type CorrelationProperties = {\n $anon_distinct_id: string;\n $groups: Record<string, string \| undefined>;\n $session_id?: string;\n correlation_source: string;\n github_repository_hash?: string;\n github_workflow_hash?: string;\n github_workflow_job_hash?: string;\n github_workflow_run_differentiator_hash?: string;\n github_workflow_run_hash?: string;\n is_ci: boolean;\n};\n\nexport function identify(): CorrelationProperties {\n const repository = hashEnvironmentVariables(\"GHR\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n ]);\n\n const run_differentiator = hashEnvironmentVariables(\"GHWJA\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n \"GITHUB_JOB\",\n \"GITHUB_RUN_ID\",\n \"GITHUB_RUN_NUMBER\",\n \"GITHUB_RUN_ATTEMPT\",\n \"INVOCATION_ID\",\n ]);\n\n const ident: CorrelationProperties = {\n $anon_distinct_id: process.env[\"RUNNER_TRACKING_ID\"] \|\| randomUUID(),\n\n correlation_source: \"github-actions\",\n\n github_repository_hash: repository,\n github_workflow_hash: hashEnvironmentVariables(\"GHW\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n ]),\n github_workflow_job_hash: hashEnvironmentVariables(\"GHWJ\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n \"GITHUB_JOB\",\n ]),\n github_workflow_run_hash: hashEnvironmentVariables(\"GHWJR\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n \"GITHUB_JOB\",\n \"GITHUB_RUN_ID\",\n ]),\n github_workflow_run_differentiator_hash: run_differentiator,\n $session_id: run_differentiator,\n $groups: {\n github_repository: repository,\n github_organization: hashEnvironmentVariables(\"GHO\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n ]),\n },\n is_ci: true,\n };\n\n actionsCore.debug(\"Correlation data:\");\n actionsCore.debug(JSON.stringify(ident, null, 2));\n\n return ident;\n}\n\nfunction hashEnvironmentVariables(\n prefix: string,\n variables: string[],\n): undefined \| string {\n const hash = createHash(\"sha256\");\n\n for (const varName of variables) {\n let value = process.env[varName];\n\n if (value === undefined) {\n if (OPTIONAL_VARIABLES.includes(varName)) {\n actionsCore.debug(\n `Optional environment variable not set: ${varName} -- substituting with the variable name`,\n );\n value = varName;\n } else {\n actionsCore.debug(\n `Environment variable not set: ${varName} -- can't generate the requested identity`,\n );\n return undefined;\n }\n }\n\n hash.update(value);\n hash.update(\"\\0\");\n }\n\n return `${prefix}-${hash.digest(\"hex\")}`;\n}\n","/\n @packageDocumentation\n * Identifies and discovers backend servers for install.determinate.systems\n /\nimport { stringifyError } from \"./errors.js\";\nimport as actionsCore from \"@actions/core\";\nimport got, { type Got } from \"got\";\nimport type { SrvRecord } from \"node:dns\";\nimport { resolveSrv } from \"node:dns/promises\";\n\nconst DEFAULT_LOOKUP = \"_detsys_ids._tcp.install.determinate.systems.\";\nconst ALLOWED_SUFFIXES = [\n \".install.determinate.systems\",\n \".install.detsys.dev\",\n];\n\nconst DEFAULT_IDS_HOST = \"https://install.determinate.systems\";\nconst LOOKUP = process.env[\"IDS_LOOKUP\"] ?? DEFAULT_LOOKUP;\n\nconst DEFAULT_TIMEOUT = 10_000; // 10 seconds in ms\n\n/*\n Host information for install.determinate.systems.\n /\nexport class IdsHost {\n private idsProjectName: string;\n private diagnosticsSuffix?: string;\n private runtimeDiagnosticsUrl?: string;\n private prioritizedURLs?: URL[];\n private client?: Got;\n private timeout: number;\n\n constructor(\n idsProjectName: string,\n diagnosticsSuffix: string \| undefined,\n runtimeDiagnosticsUrl: string \| undefined,\n timeout: number = DEFAULT_TIMEOUT,\n ) {\n this.idsProjectName = idsProjectName;\n this.diagnosticsSuffix = diagnosticsSuffix;\n this.runtimeDiagnosticsUrl = runtimeDiagnosticsUrl;\n this.client = undefined;\n this.timeout = timeout;\n }\n\n async getGot(\n recordFailoverCallback?: (\n incitingError: unknown,\n prevUrl: URL,\n nextUrl: URL,\n ) => void,\n ): Promise<Got> {\n if (this.client === undefined) {\n this.client = got.extend({\n timeout: {\n request: this.timeout,\n },\n\n retry: {\n limit: Math.max((await this.getUrlsByPreference()).length, 3),\n methods: [\"GET\", \"HEAD\"],\n },\n\n hooks: {\n beforeRetry: [\n async (error, retryCount) => {\n const prevUrl = await this.getRootUrl();\n this.markCurrentHostBroken();\n const nextUrl = await this.getRootUrl();\n\n if (recordFailoverCallback !== undefined) {\n recordFailoverCallback(error, prevUrl, nextUrl);\n }\n\n actionsCore.info(\n `Retrying after error ${error.code}, retry #: ${retryCount}`,\n );\n },\n ],\n\n beforeRequest: [\n async (options) => {\n // The getter always returns a URL, even though the setter accepts a string\n const currentUrl: URL = options.url as URL;\n\n if (this.isUrlSubjectToDynamicUrls(currentUrl)) {\n const newUrl: URL = new URL(currentUrl);\n\n const url: URL = await this.getRootUrl();\n newUrl.host = url.host;\n\n options.url = newUrl;\n actionsCore.debug(`Transmuted ${currentUrl} into ${newUrl}`);\n } else {\n actionsCore.debug(`No transmutations on ${currentUrl}`);\n }\n },\n ],\n },\n });\n }\n\n return this.client;\n }\n\n markCurrentHostBroken(): void {\n this.prioritizedURLs?.shift();\n }\n\n setPrioritizedUrls(urls: URL[]): void {\n this.prioritizedURLs = urls;\n }\n\n isUrlSubjectToDynamicUrls(url: URL): boolean {\n if (url.origin === DEFAULT_IDS_HOST) {\n return true;\n }\n\n for (const suffix of ALLOWED_SUFFIXES) {\n if (url.host.endsWith(suffix)) {\n return true;\n }\n }\n\n return false;\n }\n\n async getDynamicRootUrl(): Promise<URL \| undefined> {\n const idsHost = process.env[\"IDS_HOST\"];\n if (idsHost !== undefined) {\n try {\n return new URL(idsHost);\n } catch (err: unknown) {\n actionsCore.error(\n `IDS_HOST environment variable is not a valid URL. Ignoring. ${stringifyError(err)}`,\n );\n }\n }\n\n let url: URL \| undefined = undefined;\n try {\n const urls = await this.getUrlsByPreference();\n url = urls[0];\n } catch (err: unknown) {\n actionsCore.error(\n `Error collecting IDS URLs by preference: ${stringifyError(err)}`,\n );\n }\n\n if (url === undefined) {\n return undefined;\n } else {\n // This is a load-bearing `new URL(url)` so that callers can't mutate\n // getRootUrl's return value.\n return new URL(url);\n }\n }\n\n async getRootUrl(): Promise<URL> {\n const url = await this.getDynamicRootUrl();\n\n if (url === undefined) {\n return new URL(DEFAULT_IDS_HOST);\n }\n\n return url;\n }\n\n async getDiagnosticsUrl(): Promise<URL \| undefined> {\n if (this.runtimeDiagnosticsUrl === \"\") {\n // User specifically set the diagnostics URL to an empty string\n // so disable diagnostics\n return undefined;\n }\n\n if (\n this.runtimeDiagnosticsUrl !== \"-\" &&\n this.runtimeDiagnosticsUrl !== undefined\n ) {\n try {\n // Caller specified a specific diagnostics URL\n return new URL(this.runtimeDiagnosticsUrl);\n } catch (err: unknown) {\n actionsCore.info(\n `User-provided diagnostic endpoint ignored: not a valid URL: ${stringifyError(err)}`,\n );\n }\n }\n\n try {\n const diagnosticUrl = await this.getRootUrl();\n diagnosticUrl.pathname += \"events/batch\";\n return diagnosticUrl;\n } catch (err: unknown) {\n actionsCore.info(\n `Generated diagnostic endpoint ignored, and diagnostics are disabled: not a valid URL: ${stringifyError(err)}`,\n );\n return undefined;\n }\n }\n\n private async getUrlsByPreference(): Promise<URL[]> {\n if (this.prioritizedURLs === undefined) {\n this.prioritizedURLs = orderRecordsByPriorityWeight(\n await discoverServiceRecords(),\n ).flatMap((record) => recordToUrl(record) \|\| []);\n }\n\n return this.prioritizedURLs;\n }\n}\n\nexport function recordToUrl(record: SrvRecord): URL \| undefined {\n const urlStr = `https://${record.name}:${record.port}`;\n try {\n return new URL(urlStr);\n } catch (err: unknown) {\n actionsCore.debug(\n `Record ${JSON.stringify(record)} produced an invalid URL: ${urlStr} (${err})`,\n );\n return undefined;\n }\n}\n\nasync function discoverServiceRecords(): Promise<SrvRecord[]> {\n return await discoverServicesStub(resolveSrv(LOOKUP), 1_000);\n}\n\nexport async function discoverServicesStub(\n lookup: Promise<SrvRecord[]>,\n timeout: number,\n): Promise<SrvRecord[]> {\n const defaultFallback: Promise<SrvRecord[]> = new Promise(\n (resolve, _reject) => {\n setTimeout(resolve, timeout, []);\n },\n );\n\n let records: SrvRecord[];\n\n try {\n records = await Promise.race([lookup, defaultFallback]);\n } catch (reason: unknown) {\n actionsCore.debug(`Error resolving SRV records: ${stringifyError(reason)}`);\n records = [];\n }\n\n const acceptableRecords = records.filter((record: SrvRecord): boolean => {\n for (const suffix of ALLOWED_SUFFIXES) {\n if (record.name.endsWith(suffix)) {\n return true;\n }\n }\n\n actionsCore.debug(\n `Unacceptable domain due to an invalid suffix: ${record.name}`,\n );\n\n return false;\n });\n\n if (acceptableRecords.length === 0) {\n actionsCore.debug(`No records found for ${LOOKUP}`);\n } else {\n actionsCore.debug(\n `Resolved ${LOOKUP} to ${JSON.stringify(acceptableRecords)}`,\n );\n }\n\n return acceptableRecords;\n}\n\nexport function orderRecordsByPriorityWeight(\n records: SrvRecord[],\n): SrvRecord[] {\n const byPriorityWeight: Map<number, SrvRecord[]> = new Map();\n for (const record of records) {\n const existing = byPriorityWeight.get(record.priority);\n if (existing) {\n existing.push(record);\n } else {\n byPriorityWeight.set(record.priority, [record]);\n }\n }\n\n const prioritizedRecords: SrvRecord[] = [];\n const keys: number[] = Array.from(byPriorityWeight.keys()).sort(\n (a, b) => a - b,\n );\n\n for (const priority of keys) {\n const recordsByPrio = byPriorityWeight.get(priority);\n if (recordsByPrio === undefined) {\n continue;\n }\n\n prioritizedRecords.push(...weightedRandom(recordsByPrio));\n }\n\n return prioritizedRecords;\n}\n\nexport function weightedRandom(records: SrvRecord[]): SrvRecord[] {\n // Duplicate records so we don't accidentally change our caller's data\n const scratchRecords: SrvRecord[] = records.slice();\n const result: SrvRecord[] = [];\n\n while (scratchRecords.length > 0) {\n const weights: number[] = [];\n\n {\n for (let i = 0; i < scratchRecords.length; i++) {\n weights.push(\n scratchRecords[i].weight + (i > 0 ? scratchRecords[i - 1].weight : 0),\n );\n }\n }\n\n const point = Math.random() weights[weights.length - 1];\n\n for (\n let selectedIndex = 0;\n selectedIndex < weights.length;\n selectedIndex++\n ) {\n if (weights[selectedIndex] > point) {\n // Remove our selected record and add it to the result\n result.push(scratchRecords.splice(selectedIndex, 1)[0]);\n break;\n }\n }\n }\n\n return result;\n}\n","/*\n @packageDocumentation\n * Helpers for getting values from an Action's configuration.\n /\nimport as actionsCore from \"@actions/core\";\n\n/*\n Get a Boolean input from the Action's configuration by name.\n /\nconst getBool = (name: string): boolean => {\n return actionsCore.getBooleanInput(name);\n};\n\n/\n Get a Boolean input from the Action's configuration by name, or undefined if it is unset.\n /\nconst getBoolOrUndefined = (name: string): boolean \| undefined => {\n if (getStringOrUndefined(name) === undefined) {\n return undefined;\n }\n\n return actionsCore.getBooleanInput(name);\n};\n\n/\n The character used to separate values in the input string.\n /\nexport type Separator = \"space\" \| \"comma\";\n\n/\n Convert a comma-separated string input into an array of strings. If `comma` is selected,\n * all whitespace is removed from the string before converting to an array.\n /\nconst getArrayOfStrings = (name: string, separator: Separator): string[] => {\n const original = getString(name);\n return handleString(original, separator);\n};\n\n/\n Convert a string input into an array of strings or `null` if no value is set.\n /\nconst getArrayOfStringsOrNull = (\n name: string,\n separator: Separator,\n): string[] \| null => {\n const original = getStringOrNull(name);\n if (original === null) {\n return null;\n } else {\n return handleString(original, separator);\n }\n};\n\n// Split out this function for use in testing\nexport const handleString = (input: string, separator: Separator): string[] => {\n const sepChar = separator === \"comma\" ? \",\" : /\\s+/;\n const trimmed = input.trim(); // Remove whitespace at the beginning and end\n if (trimmed === \"\") {\n return [];\n }\n\n return trimmed.split(sepChar).map((s: string) => s.trim());\n};\n\n/\n Get a multi-line string input from the Action's configuration by name or return `null` if not set.\n /\nconst getMultilineStringOrNull = (name: string): string[] \| null => {\n const value = actionsCore.getMultilineInput(name);\n if (value.length === 0) {\n return null;\n } else {\n return value;\n }\n};\n\n/\n Get a number input from the Action's configuration by name or return `null` if not set.\n /\nconst getNumberOrNull = (name: string): number \| null => {\n const value = actionsCore.getInput(name);\n if (value === \"\") {\n return null;\n } else {\n return Number(value);\n }\n};\n\n/\n Get a Number input from the Action's configuration by name, or undefined if it is unset.\n /\nconst getNumberOrUndefined = (name: string): number \| undefined => {\n const value = getStringOrUndefined(name);\n if (value === undefined) {\n return undefined;\n }\n\n return Number(value);\n};\n\n/\n Get a string input from the Action's configuration.\n /\nconst getString = (name: string): string => {\n return actionsCore.getInput(name);\n};\n\n/\n Get a string input from the Action's configuration by name or return `null` if not set.\n /\nconst getStringOrNull = (name: string): string \| null => {\n const value = actionsCore.getInput(name);\n if (value === \"\") {\n return null;\n } else {\n return value;\n }\n};\n\n/\n Get a string input from the Action's configuration by name or return `undefined` if not set.\n /\nconst getStringOrUndefined = (name: string): string \| undefined => {\n const value = actionsCore.getInput(name);\n if (value === \"\") {\n return undefined;\n } else {\n return value;\n }\n};\n\nexport {\n getBool,\n getBoolOrUndefined,\n getArrayOfStrings,\n getArrayOfStringsOrNull,\n getMultilineStringOrNull,\n getNumberOrNull,\n getNumberOrUndefined,\n getString,\n getStringOrNull,\n getStringOrUndefined,\n};\n","/\n @packageDocumentation\n * Helpers for determining system attributes of the current runner.\n /\nimport as actionsCore from \"@actions/core\";\n\n/*\n Get the current architecture plus OS. Examples include `X64-Linux` and `ARM64-macOS`.\n /\nexport function getArchOs(): string {\n const envArch = process.env.RUNNER_ARCH;\n const envOs = process.env.RUNNER_OS;\n\n if (envArch && envOs) {\n return `${envArch}-${envOs}`;\n } else {\n actionsCore.error(\n `Can't identify the platform: RUNNER_ARCH or RUNNER_OS undefined (${envArch}-${envOs})`,\n );\n throw new Error(\"RUNNER_ARCH and/or RUNNER_OS is not defined\");\n }\n}\n\n/\n Get the current Nix system. Examples include `x86_64-linux` and `aarch64-darwin`.\n /\nexport function getNixPlatform(archOs: string): string {\n const archOsMap: Map<string, string> = new Map([\n [\"X64-macOS\", \"x86_64-darwin\"],\n [\"ARM64-macOS\", \"aarch64-darwin\"],\n [\"X64-Linux\", \"x86_64-linux\"],\n [\"ARM64-Linux\", \"aarch64-linux\"],\n ]);\n\n const mappedTo = archOsMap.get(archOs);\n if (mappedTo) {\n return mappedTo;\n } else {\n actionsCore.error(\n `ArchOs (${archOs}) doesn't map to a supported Nix platform.`,\n );\n throw new Error(\n `Cannot convert ArchOs (${archOs}) to a supported Nix platform.`,\n );\n }\n}\n","import { getStringOrUndefined } from \"./inputs.js\";\nimport as actionsCore from \"@actions/core\";\n\nexport type SourceDef = {\n path?: string;\n url?: string;\n tag?: string;\n pr?: string;\n branch?: string;\n revision?: string;\n};\n\n/*\n Throw if hash-locking is requested against a source that is not pinned to a\n * fixed version. `source-tag`, `source-revision`, and `source-url` are\n * immutable (or caller-controlled); any other selector resolves to a moving\n * target (`branch`, `pr`, or the `stable` fallback) where the pinned checksum\n * would break the moment a new release is published.\n /\nexport function assertChecksumSourceIsPinned(source: SourceDef): void {\n if (\n source.url === undefined &&\n source.tag === undefined &&\n source.revision === undefined\n ) {\n throw new Error(\n \"Hash-locking via `source-checksums-url`/`source-checksums-sha256` requires a pinned source: set `source-tag`, `source-revision`, or `source-url`. Without one the action resolves to a moving target (e.g. `stable`) and the checksum will break the next time a release is published.\",\n );\n }\n}\n\nexport function constructSourceParameters(legacyPrefix?: string): SourceDef {\n return {\n path: noisilyGetInput(\"path\", legacyPrefix),\n url: noisilyGetInput(\"url\", legacyPrefix),\n tag: noisilyGetInput(\"tag\", legacyPrefix),\n pr: noisilyGetInput(\"pr\", legacyPrefix),\n branch: noisilyGetInput(\"branch\", legacyPrefix),\n revision: noisilyGetInput(\"revision\", legacyPrefix),\n };\n}\n\nfunction noisilyGetInput(\n suffix: string,\n legacyPrefix: string \| undefined,\n): string \| undefined {\n const preferredInput = getStringOrUndefined(`source-${suffix}`);\n\n if (!legacyPrefix) {\n return preferredInput;\n }\n\n // Remaining is for handling cases where the legacy prefix\n // should be examined.\n const legacyInput = getStringOrUndefined(`${legacyPrefix}-${suffix}`);\n\n if (preferredInput && legacyInput) {\n actionsCore.warning(\n `The supported option source-${suffix} and the legacy option ${legacyPrefix}-${suffix} are both set. Preferring source-${suffix}. Please stop setting ${legacyPrefix}-${suffix}.`,\n );\n return preferredInput;\n } else if (legacyInput) {\n actionsCore.warning(\n `The legacy option ${legacyPrefix}-${suffix} is set. Please migrate to source-${suffix}.`,\n );\n return legacyInput;\n } else {\n return preferredInput;\n }\n}\n","/\n @packageDocumentation\n * Determinate Systems' TypeScript library for creating GitHub Actions logic.\n /\n// import { version as pkgVersion } from \"../package.json\";\nimport as ghActionsCorePlatform from \"./actions-core-platform.js\";\nimport { collectBacktraces } from \"./backtrace.js\";\nimport type { CheckIn, Feature } from \"./check-in.js\";\nimport {\n parseChecksumsFile,\n sha256OfBuffer,\n sha256OfFile,\n} from \"./checksums.js\";\nimport * as correlation from \"./correlation.js\";\nimport { IdsHost } from \"./ids-host.js\";\nimport {\n getBool,\n getBoolOrUndefined,\n getNumberOrUndefined,\n getStringOrNull,\n} from \"./inputs.js\";\nimport * as platform from \"./platform.js\";\nimport type { SourceDef } from \"./sourcedef.js\";\nimport {\n assertChecksumSourceIsPinned,\n constructSourceParameters,\n} from \"./sourcedef.js\";\nimport * as actionsCache from \"@actions/cache\";\nimport * as actionsCore from \"@actions/core\";\nimport * as actionsExec from \"@actions/exec\";\nimport { type Got, type Request, TimeoutError } from \"got\";\nimport { exec } from \"node:child_process\";\nimport type { UUID } from \"node:crypto\";\nimport { randomUUID } from \"node:crypto\";\nimport {\n PathLike,\n WriteStream,\n createWriteStream,\n constants as fsConstants,\n readFileSync,\n} from \"node:fs\";\nimport fs, { chmod, copyFile, mkdir } from \"node:fs/promises\";\nimport * as os from \"node:os\";\nimport { tmpdir } from \"node:os\";\nimport * as path from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { gzip } from \"node:zlib\";\n\nconst pkgVersion = \"1.0\";\n\nconst EVENT_BACKTRACES = \"backtrace\";\nconst EVENT_EXCEPTION = \"exception\";\nconst EVENT_ARTIFACT_CACHE_HIT = \"artifact_cache_hit\";\nconst EVENT_ARTIFACT_CACHE_MISS = \"artifact_cache_miss\";\nconst EVENT_ARTIFACT_CACHE_PERSIST = \"artifact_cache_persist\";\nconst EVENT_PREFLIGHT_REQUIRE_NIX_DENIED = \"preflight-require-nix-denied\";\nconst EVENT_STORE_IDENTITY_FAILED = \"store_identity_failed\";\n\nconst FACT_ARTIFACT_FETCHED_FROM_CACHE = \"artifact_fetched_from_cache\";\nconst FACT_ENDED_WITH_EXCEPTION = \"ended_with_exception\";\nconst FACT_FINAL_EXCEPTION = \"final_exception\";\nconst FACT_OS = \"$os\";\nconst FACT_OS_VERSION = \"$os_version\";\nconst FACT_SOURCE_URL = \"source_url\";\nconst FACT_SOURCE_URL_ETAG = \"source_url_etag\";\nconst FACT_SOURCE_CHECKSUMS_SHA256 = \"source_checksums_sha256\";\nconst FACT_NIX_VERSION = \"nix_version\";\n\nconst FACT_NIX_LOCATION = \"nix_location\";\nconst FACT_NIX_STORE_TRUST = \"nix_store_trusted\";\nconst FACT_NIX_STORE_VERSION = \"nix_store_version\";\nconst FACT_NIX_STORE_CHECK_METHOD = \"nix_store_check_method\";\nconst FACT_NIX_STORE_CHECK_ERROR = \"nix_store_check_error\";\n\nconst STATE_KEY_EXECUTION_PHASE = \"detsys_action_execution_phase\";\nconst STATE_KEY_NIX_NOT_FOUND = \"detsys_action_nix_not_found\";\nconst STATE_NOT_FOUND = \"not-found\";\nconst STATE_KEY_CROSS_PHASE_ID = \"detsys_cross_phase_id\";\nconst STATE_BACKTRACE_START_TIMESTAMP = \"detsys_backtrace_start_timestamp\";\n\nconst DIAGNOSTIC_ENDPOINT_TIMEOUT_MS = 10_000; // 10 seconds in ms\nconst CHECK_IN_ENDPOINT_TIMEOUT_MS = 1_000; // 1 second in ms\nconst PROGRAM_NAME_CRASH_DENY_LIST = [\n \"nix-expr-tests\",\n \"nix-store-tests\",\n \"nix-util-tests\",\n];\n\n/*\n An enum for describing different \"fetch suffixes\" for i.d.s.\n \n - `nix-style` means that system names like `x86_64-linux` and `aarch64-darwin` are used\n * - `gh-env-style` means that names like `X64-Linux` and `ARM64-macOS` are used\n * - `universal` means that the suffix is the static `universal` (for non-system-specific things)\n /\nexport type FetchSuffixStyle = \"nix-style\" \| \"gh-env-style\" \| \"universal\";\n\n/\n GitHub Actions has two possible execution phases: `main` and `post`.\n /\nexport type ExecutionPhase = \"main\" \| \"post\";\n\n/\n How to handle whether Nix is currently installed on the runner.\n \n - `fail` means that the workflow fails if Nix isn't installed\n * - `warn` means that a warning is logged if Nix isn't installed\n * - `ignore` means that Nix will not be checked\n /\nexport type NixRequirementHandling = \"fail\" \| \"warn\" \| \"ignore\";\n\n/\n Whether the Nix store on the runner is trusted.\n \n - `trusted` means yes\n * - `untrusted` means no\n * - `unknown` means that the status couldn't be determined\n \n This is determined via the output of `nix store info --json`.\n /\nexport type NixStoreTrust = \"trusted\" \| \"untrusted\" \| \"unknown\";\n\nexport type ActionOptions = {\n // Name of the project generally, and the name of the binary on disk.\n name: string;\n\n // Defaults to `name`, Corresponds to the ProjectHost entry on i.d.s.\n idsProjectName?: string;\n\n // Defaults to `action:`\n eventPrefix?: string;\n\n // The \"architecture\" URL component expected by I.D.S. for the ProjectHost.\n fetchStyle: FetchSuffixStyle;\n\n // IdsToolbox assumes the GitHub Action exposes source overrides, like branch/pr/etc. to be named `source-`.\n // This prefix adds a fallback name, prefixed by `${legacySourcePrefix}-`.\n // Users who configure legacySourcePrefix will get warnings asking them to change to `source-`.\n legacySourcePrefix?: string;\n\n // Check if Nix is installed before running this action.\n // If Nix isn't installed, this action will not fail, and will instead do nothing.\n // The action will emit a user-visible warning instructing them to install Nix.\n requireNix: NixRequirementHandling;\n\n // The URL suffix to send diagnostics events to.\n //\n // The final URL is constructed via IDS_HOST/idsProjectName/diagnosticsSuffix.\n //\n // Default: `diagnostics`.\n diagnosticsSuffix?: string;\n\n // Collect backtraces from segfaults and other failures from binaries that start with these names.\n //\n // Default: `[ \"nix\", \"determinate-nixd\", ActionOptions.name ]`.\n binaryNamePrefixes?: string[];\n\n // Do NOT collect backtraces from segfaults and other failures from binaries with exact these names.\n //\n // Default: `[ \"nix-expr-tests\" ]`.\n binaryNamesDenyList?: string[];\n};\n\n/\n A confident version of Options, where defaults have been resolved into final values.\n /\nexport type ConfidentActionOptions = {\n name: string;\n idsProjectName: string;\n eventPrefix: string;\n fetchStyle: FetchSuffixStyle;\n legacySourcePrefix?: string;\n requireNix: NixRequirementHandling;\n providedDiagnosticsUrl?: URL;\n binaryNamePrefixes: string[];\n binaryNamesDenyList: string[];\n};\n\n/\n An event to send to the diagnostic endpoint of i.d.s.\n /\nexport type DiagnosticEvent = {\n // Note: putting a Map in here won't serialize to json properly.\n // It'll just be {} on serialization.\n name: string;\n distinct_id?: string;\n uuid: UUID;\n timestamp: Date;\n\n properties: Record<string, unknown>;\n};\n\nconst determinateStateDir = \"/var/lib/determinate\";\nconst determinateIdentityFile = path.join(determinateStateDir, \"identity.json\");\n\nconst isRoot = typeof process.geteuid === \"function\" && process.geteuid() === 0;\n\n/* Create the Determinate state directory by escalating via sudo /\nasync function sudoEnsureDeterminateStateDir(): Promise<void> {\n const code = await actionsExec.exec(\"sudo\", [\n \"mkdir\",\n \"-p\",\n determinateStateDir,\n ]);\n\n if (code !== 0) {\n throw new Error(`sudo mkdir -p exit: ${code}`);\n }\n}\n\n/* Ensures the Determinate state directory exists, escalating if necessary /\nasync function ensureDeterminateStateDir(): Promise<void> {\n if (isRoot) {\n await mkdir(determinateStateDir, { recursive: true });\n } else {\n return sudoEnsureDeterminateStateDir();\n }\n}\n\n/* Writes correlation hashes to the Determinate state directory by writing to a `sudo tee` pipe /\nasync function sudoWriteCorrelationHashes(hashes: string): Promise<void> {\n const buffer = Buffer.from(hashes);\n\n const code = await actionsExec.exec(\n \"sudo\",\n [\"tee\", determinateIdentityFile],\n {\n input: buffer,\n\n // Ignore output from tee\n outStream: createWriteStream(\"/dev/null\"),\n },\n );\n\n if (code !== 0) {\n throw new Error(`sudo tee exit: ${code}`);\n }\n}\n\n/* Writes correlation hashes to the Determinate state directory, escalating if necessary /\nasync function writeCorrelationHashes(hashes: string): Promise<void> {\n await ensureDeterminateStateDir();\n\n if (isRoot) {\n await fs.writeFile(determinateIdentityFile, hashes, \"utf-8\");\n } else {\n return sudoWriteCorrelationHashes(hashes);\n }\n}\n\nexport abstract class DetSysAction {\n nixStoreTrust: NixStoreTrust;\n strictMode: boolean;\n\n private actionOptions: ConfidentActionOptions;\n private exceptionAttachments: Map<string, PathLike>;\n private archOs: string;\n private executionPhase: ExecutionPhase;\n private nixSystem: string;\n private architectureFetchSuffix: string;\n private sourceParameters: SourceDef;\n private facts: Record<string, string \| boolean \| number>;\n private events: DiagnosticEvent[];\n private identity: correlation.CorrelationProperties;\n private idsHost: IdsHost;\n private features: { [k: string]: Feature };\n private featureEventMetadata: { [k: string]: string \| boolean };\n\n private determineExecutionPhase(): ExecutionPhase {\n const currentPhase = actionsCore.getState(STATE_KEY_EXECUTION_PHASE);\n if (currentPhase === \"\") {\n actionsCore.saveState(STATE_KEY_EXECUTION_PHASE, \"post\");\n return \"main\";\n } else {\n return \"post\";\n }\n }\n\n constructor(actionOptions: ActionOptions) {\n this.actionOptions = makeOptionsConfident(actionOptions);\n this.idsHost = new IdsHost(\n this.actionOptions.idsProjectName,\n actionOptions.diagnosticsSuffix,\n // Note: we don't use actionsCore.getInput('diagnostic-endpoint') on purpose:\n // getInput silently converts absent data to an empty string.\n process.env[\"INPUT_DIAGNOSTIC-ENDPOINT\"],\n getNumberOrUndefined(\"timeout-request\"),\n );\n this.exceptionAttachments = new Map();\n this.nixStoreTrust = \"unknown\";\n this.strictMode = getBool(\"_internal-strict-mode\");\n\n if (\n getBoolOrUndefined(\n \"_internal-obliterate-actions-id-token-request-variables\",\n ) === true\n ) {\n process.env[\"ACTIONS_ID_TOKEN_REQUEST_URL\"] = undefined;\n process.env[\"ACTIONS_ID_TOKEN_REQUEST_TOKEN\"] = undefined;\n }\n\n this.features = {};\n this.featureEventMetadata = {};\n this.events = [];\n\n this.getCrossPhaseId();\n this.collectBacktraceSetup();\n\n // JSON sent to server\n / eslint-disable camelcase /\n this.facts = {\n $lib: \"idslib\",\n $lib_version: pkgVersion,\n project: this.actionOptions.name,\n ids_project: this.actionOptions.idsProjectName,\n };\n\n const params = [\n [\"github_action_ref\", \"GITHUB_ACTION_REF\"],\n [\"github_action_repository\", \"GITHUB_ACTION_REPOSITORY\"],\n [\"github_event_name\", \"GITHUB_EVENT_NAME\"],\n [\"$os\", \"RUNNER_OS\"],\n [\"arch\", \"RUNNER_ARCH\"],\n ];\n for (const [target, env] of params) {\n const value = process.env[env];\n if (value) {\n this.facts[target] = value;\n }\n }\n\n this.identity = correlation.identify();\n this.archOs = platform.getArchOs();\n this.nixSystem = platform.getNixPlatform(this.archOs);\n\n this.facts.$app_name = `${this.actionOptions.name}/action`;\n this.facts.arch_os = this.archOs;\n this.facts.nix_system = this.nixSystem;\n\n {\n ghActionsCorePlatform\n .getDetails()\n // eslint-disable-next-line github/no-then\n .then((details) => {\n if (details.name !== \"unknown\") {\n this.addFact(FACT_OS, details.name);\n }\n if (details.version !== \"unknown\") {\n this.addFact(FACT_OS_VERSION, details.version);\n }\n })\n // eslint-disable-next-line github/no-then\n .catch((e: unknown) => {\n actionsCore.debug(\n `Failure getting platform details: ${stringifyError(e)}`,\n );\n });\n }\n\n this.executionPhase = this.determineExecutionPhase();\n this.facts.execution_phase = this.executionPhase;\n\n if (this.actionOptions.fetchStyle === \"gh-env-style\") {\n this.architectureFetchSuffix = this.archOs;\n } else if (this.actionOptions.fetchStyle === \"nix-style\") {\n this.architectureFetchSuffix = this.nixSystem;\n } else if (this.actionOptions.fetchStyle === \"universal\") {\n this.architectureFetchSuffix = \"universal\";\n } else {\n throw new Error(\n `fetchStyle ${this.actionOptions.fetchStyle} is not a valid style`,\n );\n }\n\n this.sourceParameters = constructSourceParameters(\n this.actionOptions.legacySourcePrefix,\n );\n\n this.recordEvent(`begin_${this.executionPhase}`);\n }\n\n /\n Attach a file to the diagnostics data in error conditions.\n \n The file at `location` doesn't need to exist when stapleFile is called.\n \n If the file doesn't exist or is unreadable when trying to staple the attachments, the JS error will be stored in a context value at `staple_failure_{name}`.\n * If the file is readable, the file's contents will be stored in a context value at `staple_value_{name}`.\n /\n stapleFile(name: string, location: string): void {\n this.exceptionAttachments.set(name, location);\n }\n\n /\n The main execution phase.\n /\n abstract main(): Promise<void>;\n\n /\n The post execution phase.\n /\n abstract post(): Promise<void>;\n\n /\n Execute the Action as defined.\n /\n execute(): void {\n // eslint-disable-next-line github/no-then\n this.executeAsync().catch((error: Error) => {\n // eslint-disable-next-line no-console\n console.log(error);\n process.exitCode = 1;\n });\n }\n\n getTemporaryName(): string {\n const tmpDir = process.env[\"RUNNER_TEMP\"] \|\| tmpdir();\n return path.join(tmpDir, `${this.actionOptions.name}-${randomUUID()}`);\n }\n\n addFact(key: string, value: string \| boolean \| number): void {\n this.facts[key] = value;\n }\n\n async getDiagnosticsUrl(): Promise<URL \| undefined> {\n return await this.idsHost.getDiagnosticsUrl();\n }\n\n getUniqueId(): string {\n return (\n this.identity.github_workflow_run_differentiator_hash \|\|\n process.env.RUNNER_TRACKING_ID \|\|\n randomUUID()\n );\n }\n\n // This ID will be saved in the action's state, to be persisted across phase steps\n getCrossPhaseId(): string {\n let crossPhaseId = actionsCore.getState(STATE_KEY_CROSS_PHASE_ID);\n\n if (crossPhaseId === \"\") {\n crossPhaseId = randomUUID();\n actionsCore.saveState(STATE_KEY_CROSS_PHASE_ID, crossPhaseId);\n }\n\n return crossPhaseId;\n }\n\n getCorrelationHashes(): correlation.CorrelationProperties {\n return this.identity;\n }\n\n recordEvent(\n eventName: string,\n context: Record<\n string,\n \| boolean\n \| string\n \| number\n \| undefined\n \| Record<string, boolean \| string \| number \| undefined>\n > = {},\n ): void {\n const prefixedName =\n eventName === \"$feature_flag_called\" \|\| eventName === \"$groupidentify\"\n ? eventName\n : `${this.actionOptions.eventPrefix}${eventName}`;\n\n this.events.push({\n name: prefixedName,\n\n // Use the anon distinct ID as the distinct ID until we actually have a distinct ID in the future\n distinct_id: this.identity.$anon_distinct_id,\n\n // distinct_id\n uuid: randomUUID(),\n timestamp: new Date(),\n\n properties: {\n ...context,\n ...this.identity,\n ...this.facts,\n ...Object.fromEntries(\n Object.entries(this.featureEventMetadata).map<\n [string, string \| boolean]\n >(([name, variant]) => [`$feature/${name}`, variant]),\n ),\n },\n });\n }\n\n /\n Unpacks the closure returned by `fetchArtifact()`, imports the\n * contents into the Nix store, and returns the path of the executable at\n * `/nix/store/STORE_PATH/bin/${bin}`.\n /\n async unpackClosure(bin: string): Promise<string> {\n const artifact = await this.fetchArtifact();\n const { stdout } = await promisify(exec)(\n `cat \"${artifact}\" \| xz -d \| nix-store --import`,\n );\n const paths = stdout.split(os.EOL);\n const lastPath = paths.at(-2);\n return `${lastPath}/bin/${bin}`;\n }\n\n /\n Fetches the executable at the URL determined by the `source-` inputs and\n other facts, `chmod`s it, and returns the path to the executable on disk.\n /\n async fetchExecutable(): Promise<string> {\n const binaryPath = await this.fetchArtifact();\n await chmod(binaryPath, fsConstants.S_IXUSR \| fsConstants.S_IXGRP);\n return binaryPath;\n }\n\n private get isMain(): boolean {\n return this.executionPhase === \"main\";\n }\n\n private get isPost(): boolean {\n return this.executionPhase === \"post\";\n }\n\n private async executeAsync(): Promise<void> {\n try {\n await this.checkIn();\n\n const correlationHashes = JSON.stringify(this.getCorrelationHashes());\n process.env.DETSYS_CORRELATION = correlationHashes;\n try {\n await writeCorrelationHashes(correlationHashes);\n } catch (error) {\n this.recordEvent(EVENT_STORE_IDENTITY_FAILED, { error: String(error) });\n }\n\n if (!(await this.preflightRequireNix())) {\n this.recordEvent(EVENT_PREFLIGHT_REQUIRE_NIX_DENIED);\n return;\n } else {\n await this.preflightNixStoreInfo();\n await this.preflightNixVersion();\n this.addFact(FACT_NIX_STORE_TRUST, this.nixStoreTrust);\n }\n\n if (this.isMain) {\n this.recordGroup();\n await this.main();\n\n // Run the preflight of the nix version a second time so our \"shutdown\" events have updated version info.\n await this.preflightNixVersion();\n } else if (this.isPost) {\n await this.post();\n }\n this.addFact(FACT_ENDED_WITH_EXCEPTION, false);\n } catch (e: unknown) {\n this.addFact(FACT_ENDED_WITH_EXCEPTION, true);\n\n const reportable = stringifyError(e);\n\n this.addFact(FACT_FINAL_EXCEPTION, reportable);\n\n if (this.isPost) {\n actionsCore.warning(reportable);\n } else {\n actionsCore.setFailed(reportable);\n }\n\n const doGzip = promisify(gzip);\n\n const exceptionContext: Map<string, string> = new Map();\n for (const [attachmentLabel, filePath] of this.exceptionAttachments) {\n try {\n const logText = readFileSync(filePath);\n const buf = await doGzip(logText);\n exceptionContext.set(\n `staple_value_${attachmentLabel}`,\n buf.toString(\"base64\"),\n );\n } catch (innerError: unknown) {\n exceptionContext.set(\n `staple_failure_${attachmentLabel}`,\n stringifyError(innerError),\n );\n }\n }\n\n this.recordEvent(EVENT_EXCEPTION, Object.fromEntries(exceptionContext));\n } finally {\n if (this.isPost) {\n await this.collectBacktraces();\n }\n\n await this.complete();\n }\n }\n\n async getClient(): Promise<Got> {\n return await this.idsHost.getGot(\n (incitingError: unknown, prevUrl: URL, nextUrl: URL) => {\n this.recordPlausibleTimeout(incitingError);\n\n this.recordEvent(\"ids-failover\", {\n previousUrl: prevUrl.toString(),\n nextUrl: nextUrl.toString(),\n });\n },\n );\n }\n\n private async checkIn(): Promise<void> {\n const checkin = await this.requestCheckIn();\n if (checkin === undefined) {\n return;\n }\n\n this.features = checkin.options;\n for (const [key, feature] of Object.entries(this.features)) {\n this.featureEventMetadata[key] = feature.variant;\n }\n\n const impactSymbol: Map<string, string> = new Map([\n [\"none\", \"⚪\"],\n [\"maintenance\", \"🛠️\"],\n [\"minor\", \"🟡\"],\n [\"major\", \"🟠\"],\n [\"critical\", \"🔴\"],\n ]);\n const defaultImpactSymbol = \"🔵\";\n\n if (checkin.status !== null) {\n const summaries: string[] = [];\n\n for (const incident of checkin.status.incidents) {\n summaries.push(\n `${impactSymbol.get(incident.impact) \|\| defaultImpactSymbol} ${incident.status.replace(\"_\", \" \")}: ${incident.name} (${incident.shortlink})`,\n );\n }\n\n for (const maintenance of checkin.status.scheduled_maintenances) {\n summaries.push(\n `${impactSymbol.get(maintenance.impact) \|\| defaultImpactSymbol} ${maintenance.status.replace(\"_\", \" \")}: ${maintenance.name} (${maintenance.shortlink})`,\n );\n }\n\n if (summaries.length > 0) {\n actionsCore.info(\n // Bright red, Bold, Underline\n `${\"\\u001b[0;31m\"}${\"\\u001b[1m\"}${\"\\u001b[4m\"}${checkin.status.page.name} Status`,\n );\n for (const notice of summaries) {\n actionsCore.info(notice);\n }\n actionsCore.info(`See: ${checkin.status.page.url}`);\n actionsCore.info(``);\n }\n }\n }\n\n getFeature(name: string): Feature \| undefined {\n if (!this.features.hasOwnProperty(name)) {\n return undefined;\n }\n\n const result = this.features[name];\n if (result === undefined) {\n return undefined;\n }\n\n this.recordEvent(\"$feature_flag_called\", {\n $feature_flag: name,\n $feature_flag_response: result.variant,\n });\n\n return result;\n }\n\n private recordGroup(): void {\n const ghorg_hash = this.identity.$groups[\"github_organization\"];\n const ghorg_name = process.env[\"GITHUB_REPOSITORY_OWNER\"];\n\n if (ghorg_hash !== undefined && ghorg_name !== undefined) {\n this.recordEvent(\"$groupidentify\", {\n $group_type: \"github_organization\",\n $group_key: ghorg_hash,\n $group_set: {\n name: ghorg_name,\n },\n });\n }\n }\n\n /\n Check in to install.determinate.systems, to accomplish three things:\n \n 1. Preflight the server selected from IdsHost, to increase the chances of success.\n * 2. Fetch any incidents and maintenance events to let users know in case things are weird.\n * 3. Get feature flag data so we can gently roll out new features.\n /\n private async requestCheckIn(): Promise<CheckIn \| undefined> {\n for (\n let attemptsRemaining = 5;\n attemptsRemaining > 0;\n attemptsRemaining--\n ) {\n const checkInUrl = await this.getCheckInUrl();\n if (checkInUrl === undefined) {\n return undefined;\n }\n\n try {\n actionsCore.debug(`Preflighting via ${checkInUrl}`);\n\n const props = {\n // Use a distinct_id when we actually have one\n distinct_id: this.identity.$anon_distinct_id,\n anon_distinct_id: this.identity.$anon_distinct_id,\n groups: this.identity.$groups,\n person_properties: {\n ci: \"github\",\n\n ...this.identity,\n ...this.facts,\n },\n };\n\n return await (\n await this.getClient()\n )\n .post(checkInUrl, {\n json: props,\n timeout: {\n request: CHECK_IN_ENDPOINT_TIMEOUT_MS,\n },\n })\n .json();\n } catch (e: unknown) {\n this.recordPlausibleTimeout(e);\n actionsCore.debug(`Error checking in: ${stringifyError(e)}`);\n this.idsHost.markCurrentHostBroken();\n }\n }\n\n return undefined;\n }\n\n private recordPlausibleTimeout(e: unknown): void {\n // see: https://github.com/sindresorhus/got/blob/895e463fa699d6f2e4b2fc01ceb3b2bb9e157f4c/documentation/8-errors.md\n if (e instanceof TimeoutError && \"timings\" in e && \"request\" in e) {\n const reportContext: {\n [index: string]: string \| number \| undefined;\n } = {\n url: e.request.requestUrl?.toString(),\n retry_count: e.request.retryCount,\n };\n\n for (const [key, value] of Object.entries(e.timings.phases)) {\n if (Number.isFinite(value)) {\n reportContext[`timing_phase_${key}`] = value;\n }\n }\n\n this.recordEvent(\"timeout\", reportContext);\n }\n }\n\n /\n Fetch an artifact, such as a tarball, from the location determined by the\n * `source-` inputs. If `source-binary` is specified, this will return a path\n to a binary on disk; otherwise, the artifact will be downloaded from the\n * URL determined by the other `source-` inputs (`source-url`, `source-pr`,\n etc.).\n \n When `source-checksums-url` and `source-checksums-sha256` are both set,\n * the downloaded artifact is verified against the per-arch hash in the\n * checksums file, which is itself verified against the pinned\n * `source-checksums-sha256`. Both inputs must be set together.\n /\n private async fetchArtifact(): Promise<string> {\n const sourceBinary = getStringOrNull(\"source-binary\");\n\n // If source-binary is set, use that. Otherwise fall back to the source- parameters.\n if (sourceBinary !== null && sourceBinary !== \"\") {\n actionsCore.debug(`Using the provided source binary at ${sourceBinary}`);\n return sourceBinary;\n }\n\n const expectedArtifactHash = await this.resolveExpectedArtifactHash();\n\n actionsCore.startGroup(\n `Downloading ${this.actionOptions.name} for ${this.architectureFetchSuffix}`,\n );\n\n try {\n actionsCore.info(`Fetching from ${await this.getSourceUrl()}`);\n\n const correlatedUrl = await this.getSourceUrl();\n correlatedUrl.searchParams.set(\"ci\", \"github\");\n correlatedUrl.searchParams.set(\n \"correlation\",\n JSON.stringify(this.identity),\n );\n\n const versionCheckup = await (await this.getClient()).head(correlatedUrl);\n if (versionCheckup.headers.etag) {\n const v = versionCheckup.headers.etag;\n this.addFact(FACT_SOURCE_URL_ETAG, v);\n\n actionsCore.debug(\n `Checking the tool cache for ${await this.getSourceUrl()} at ${v}`,\n );\n const cached = await this.getCachedVersion(v, expectedArtifactHash);\n if (cached) {\n this.facts[FACT_ARTIFACT_FETCHED_FROM_CACHE] = true;\n actionsCore.debug(`Tool cache hit.`);\n await this.verifyArtifactHash(cached, expectedArtifactHash);\n return cached;\n }\n }\n\n this.facts[FACT_ARTIFACT_FETCHED_FROM_CACHE] = false;\n\n actionsCore.debug(\n `No match from the cache, re-fetching from the redirect: ${versionCheckup.url}`,\n );\n\n const destFile = this.getTemporaryName();\n\n const fetchStream = await this.downloadFile(\n new URL(versionCheckup.url),\n destFile,\n );\n\n await this.verifyArtifactHash(destFile, expectedArtifactHash);\n\n if (fetchStream.response?.headers.etag) {\n const v = fetchStream.response.headers.etag;\n\n try {\n await this.saveCachedVersion(v, destFile, expectedArtifactHash);\n } catch (e: unknown) {\n actionsCore.debug(`Error caching the artifact: ${stringifyError(e)}`);\n }\n }\n\n return destFile;\n } catch (e: unknown) {\n this.recordPlausibleTimeout(e);\n throw e;\n } finally {\n actionsCore.endGroup();\n }\n }\n\n /*\n Read the `source-checksums-url` and `source-checksums-sha256` inputs and,\n * if both are set, fetch the checksums file, verify its hash matches the\n * pin, parse it, and return the expected hash for the artifact matching\n * this runner's `${name}-${architectureFetchSuffix}`. Returns `null` when\n * verification is opted out (both inputs unset).\n /\n private async resolveExpectedArtifactHash(): Promise<string \| null> {\n const checksumsUrl = getStringOrNull(\"source-checksums-url\");\n const checksumsSha256 = getStringOrNull(\"source-checksums-sha256\");\n\n if (checksumsUrl === null && checksumsSha256 === null) {\n return null;\n }\n if (checksumsUrl === null \|\| checksumsSha256 === null) {\n throw new Error(\n \"`source-checksums-url` and `source-checksums-sha256` must be set together\",\n );\n }\n\n assertChecksumSourceIsPinned(this.sourceParameters);\n\n const expectedFileHash = checksumsSha256.toLowerCase();\n this.addFact(FACT_SOURCE_CHECKSUMS_SHA256, expectedFileHash);\n\n const parsedUrl = new URL(checksumsUrl);\n const safeUrl = parsedUrl.origin + parsedUrl.pathname;\n\n actionsCore.info(`Fetching checksums file from ${safeUrl}`);\n const response = await (await this.getClient()).get(checksumsUrl);\n const body = response.body;\n\n const actualFileHash = sha256OfBuffer(body);\n if (actualFileHash !== expectedFileHash) {\n throw new Error(\n `Checksums file hash mismatch at ${safeUrl}: expected ${expectedFileHash}, got ${actualFileHash}`,\n );\n }\n\n const wanted = `${this.actionOptions.name}-${this.architectureFetchSuffix}`;\n const hashes = parseChecksumsFile(body);\n const artifactHash = hashes.get(wanted);\n if (artifactHash === undefined) {\n throw new Error(`No entry for ${wanted} in checksums file at ${safeUrl}`);\n }\n return artifactHash;\n }\n\n /\n Verify a downloaded artifact's SHA-256 matches the expected hash. No-op\n * when `expected` is `null` (verification disabled).\n /\n private async verifyArtifactHash(\n filePath: string,\n expected: string \| null,\n ): Promise<void> {\n if (expected === null) {\n return;\n }\n const actual = await sha256OfFile(filePath);\n if (actual !== expected) {\n throw new Error(\n `Artifact hash mismatch for ${this.architectureFetchSuffix}: expected ${expected}, got ${actual}`,\n );\n }\n }\n\n /\n A helper function for failing on error only if strict mode is enabled.\n * This is intended only for CI environments testing Actions themselves.\n /\n failOnError(msg: string): void {\n if (this.strictMode) {\n actionsCore.setFailed(`strict mode failure: ${msg}`);\n }\n }\n\n private async downloadFile(\n url: URL,\n destination: PathLike,\n ): Promise<Request> {\n const client = await this.getClient();\n\n return new Promise((resolve, reject) => {\n // Current stream handle\n let writeStream: WriteStream \| undefined;\n\n // Sentinel condition in case we want to abort retrying due to FS issues\n let failed = false;\n\n const retry = (stream: Request): void => {\n if (writeStream) {\n writeStream.destroy();\n }\n\n writeStream = createWriteStream(destination, {\n encoding: \"binary\",\n mode: 0o755,\n });\n\n writeStream.once(\"error\", (error) => {\n // Set failed here since promise rejections don't impact control flow\n failed = true;\n reject(error);\n });\n\n writeStream.on(\"finish\", () => {\n if (!failed) {\n resolve(stream);\n }\n });\n\n stream.once(\"retry\", (_count, _error, createRetryStream) => {\n // Optional: check `failed' here in case you want to stop retrying\n retry(createRetryStream());\n });\n\n // Now that all the handlers have been set up we can pipe from the HTTP\n // stream to disk\n stream.pipe(writeStream);\n };\n\n // Begin the retry logic by giving it a fresh got.Request\n retry(client.stream(url));\n });\n }\n\n private async complete(): Promise<void> {\n this.recordEvent(`complete_${this.executionPhase}`);\n await this.submitEvents();\n }\n\n private async getCheckInUrl(): Promise<URL \| undefined> {\n const checkInUrl = await this.idsHost.getDynamicRootUrl();\n\n if (checkInUrl === undefined) {\n return undefined;\n }\n\n checkInUrl.pathname += \"check-in\";\n return checkInUrl;\n }\n\n private async getSourceUrl(): Promise<URL> {\n const p = this.sourceParameters;\n\n if (p.url) {\n this.addFact(FACT_SOURCE_URL, p.url);\n return new URL(p.url);\n }\n\n const fetchUrl = await this.idsHost.getRootUrl();\n fetchUrl.pathname += this.actionOptions.idsProjectName;\n\n if (p.tag) {\n fetchUrl.pathname += `/tag/${p.tag}`;\n } else if (p.pr) {\n fetchUrl.pathname += `/pr/${p.pr}`;\n } else if (p.branch) {\n fetchUrl.pathname += `/branch/${p.branch}`;\n } else if (p.revision) {\n fetchUrl.pathname += `/rev/${p.revision}`;\n } else {\n fetchUrl.pathname += `/stable`;\n }\n\n fetchUrl.pathname += `/${this.architectureFetchSuffix}`;\n\n this.addFact(FACT_SOURCE_URL, fetchUrl.toString());\n\n return fetchUrl;\n }\n\n private cacheKey(version: string, expectedHash: string \| null): string {\n const cleanedVersion = version.replace(/[^a-zA-Z0-9-+.]/g, \"\");\n const hashSuffix = expectedHash ? `-h${expectedHash}` : \"\";\n return `determinatesystem-${this.actionOptions.name}-${this.architectureFetchSuffix}-${cleanedVersion}${hashSuffix}`;\n }\n\n private async getCachedVersion(\n version: string,\n expectedHash: string \| null,\n ): Promise<undefined \| string> {\n const startCwd = process.cwd();\n\n try {\n const tempDir = this.getTemporaryName();\n await mkdir(tempDir);\n process.chdir(tempDir);\n\n // extremely evil shit right here:\n process.env.GITHUB_WORKSPACE_BACKUP = process.env.GITHUB_WORKSPACE;\n delete process.env.GITHUB_WORKSPACE;\n\n if (\n await actionsCache.restoreCache(\n [this.actionOptions.name],\n this.cacheKey(version, expectedHash),\n [],\n undefined,\n true,\n )\n ) {\n this.recordEvent(EVENT_ARTIFACT_CACHE_HIT);\n return `${tempDir}/${this.actionOptions.name}`;\n }\n\n this.recordEvent(EVENT_ARTIFACT_CACHE_MISS);\n return undefined;\n } finally {\n process.env.GITHUB_WORKSPACE = process.env.GITHUB_WORKSPACE_BACKUP;\n delete process.env.GITHUB_WORKSPACE_BACKUP;\n process.chdir(startCwd);\n }\n }\n\n private async saveCachedVersion(\n version: string,\n toolPath: string,\n expectedHash: string \| null,\n ): Promise<void> {\n const startCwd = process.cwd();\n\n try {\n const tempDir = this.getTemporaryName();\n await mkdir(tempDir);\n process.chdir(tempDir);\n await copyFile(toolPath, `${tempDir}/${this.actionOptions.name}`);\n\n // extremely evil shit right here:\n process.env.GITHUB_WORKSPACE_BACKUP = process.env.GITHUB_WORKSPACE;\n delete process.env.GITHUB_WORKSPACE;\n\n await actionsCache.saveCache(\n [this.actionOptions.name],\n this.cacheKey(version, expectedHash),\n undefined,\n true,\n );\n this.recordEvent(EVENT_ARTIFACT_CACHE_PERSIST);\n } finally {\n process.env.GITHUB_WORKSPACE = process.env.GITHUB_WORKSPACE_BACKUP;\n delete process.env.GITHUB_WORKSPACE_BACKUP;\n process.chdir(startCwd);\n }\n }\n\n private collectBacktraceSetup(): void {\n if (!process.env.DETSYS_BACKTRACE_COLLECTOR) {\n actionsCore.exportVariable(\n \"DETSYS_BACKTRACE_COLLECTOR\",\n this.getCrossPhaseId(),\n );\n\n actionsCore.saveState(STATE_BACKTRACE_START_TIMESTAMP, Date.now());\n }\n }\n\n private async collectBacktraces(): Promise<void> {\n try {\n if (process.env.DETSYS_BACKTRACE_COLLECTOR !== this.getCrossPhaseId()) {\n return;\n }\n\n const backtraces = await collectBacktraces(\n this.actionOptions.binaryNamePrefixes,\n this.actionOptions.binaryNamesDenyList,\n parseInt(actionsCore.getState(STATE_BACKTRACE_START_TIMESTAMP)),\n );\n actionsCore.debug(`Backtraces identified: ${backtraces.size}`);\n if (backtraces.size > 0) {\n this.recordEvent(EVENT_BACKTRACES, Object.fromEntries(backtraces));\n }\n } catch (innerError: unknown) {\n actionsCore.debug(\n `Error collecting backtraces: ${stringifyError(innerError)}`,\n );\n }\n }\n\n private async preflightRequireNix(): Promise<boolean> {\n let nixLocation: string \| undefined;\n\n const pathParts = (process.env[\"PATH\"] \|\| \"\").split(\":\");\n for (const location of pathParts) {\n const candidateNix = path.join(location, \"nix\");\n\n try {\n await fs.access(candidateNix, fs.constants.X_OK);\n actionsCore.debug(`Found Nix at ${candidateNix}`);\n nixLocation = candidateNix;\n break;\n } catch {\n actionsCore.debug(`Nix not at ${candidateNix}`);\n }\n }\n this.addFact(FACT_NIX_LOCATION, nixLocation \|\| \"\");\n\n if (this.actionOptions.requireNix === \"ignore\") {\n return true;\n }\n\n const currentNotFoundState = actionsCore.getState(STATE_KEY_NIX_NOT_FOUND);\n if (currentNotFoundState === STATE_NOT_FOUND) {\n // It was previously not found, so don't run subsequent actions\n return false;\n }\n\n if (nixLocation !== undefined) {\n return true;\n }\n actionsCore.saveState(STATE_KEY_NIX_NOT_FOUND, STATE_NOT_FOUND);\n\n switch (this.actionOptions.requireNix) {\n case \"fail\":\n actionsCore.setFailed(\n [\n \"This action can only be used when Nix is installed.\",\n \"Add `- uses: DeterminateSystems/determinate-nix-action@v3` earlier in your workflow.\",\n ].join(\" \"),\n );\n break;\n case \"warn\":\n actionsCore.warning(\n [\n \"This action is in no-op mode because Nix is not installed.\",\n \"Add `- uses: DeterminateSystems/determinate-nix-action@v3` earlier in your workflow.\",\n ].join(\" \"),\n );\n break;\n }\n\n return false;\n }\n\n private async preflightNixStoreInfo(): Promise<void> {\n let output = \"\";\n\n const options: actionsExec.ExecOptions = {};\n options.silent = true;\n options.listeners = {\n stdout: (data) => {\n output += data.toString();\n },\n };\n\n try {\n output = \"\";\n await actionsExec.exec(\"nix\", [\"store\", \"info\", \"--json\"], options);\n this.addFact(FACT_NIX_STORE_CHECK_METHOD, \"info\");\n } catch {\n try {\n // reset output\n output = \"\";\n await actionsExec.exec(\"nix\", [\"store\", \"ping\", \"--json\"], options);\n this.addFact(FACT_NIX_STORE_CHECK_METHOD, \"ping\");\n } catch {\n this.addFact(FACT_NIX_STORE_CHECK_METHOD, \"none\");\n return;\n }\n }\n\n try {\n const parsed = JSON.parse(output);\n if (parsed.trusted === true \|\| parsed.trusted === 1) {\n this.nixStoreTrust = \"trusted\";\n } else if (parsed.trusted === false \|\| parsed.trusted === 0) {\n this.nixStoreTrust = \"untrusted\";\n } else if (parsed.trusted !== undefined) {\n this.addFact(\n FACT_NIX_STORE_CHECK_ERROR,\n `Mysterious trusted value: ${JSON.stringify(parsed.trusted)}`,\n );\n }\n\n this.addFact(FACT_NIX_STORE_VERSION, JSON.stringify(parsed.version));\n } catch (e: unknown) {\n this.addFact(FACT_NIX_STORE_CHECK_ERROR, stringifyError(e));\n }\n }\n\n private async preflightNixVersion(): Promise<void> {\n let output = \"unknown\";\n\n try {\n ({ stdout: output } = await actionsExec.getExecOutput(\n \"nix\",\n [\"--version\"],\n {\n silent: true,\n },\n ));\n output = output.trim() \|\| \"unknown\";\n } catch {\n // That's fine.\n }\n\n this.addFact(FACT_NIX_VERSION, output);\n }\n\n private async submitEvents(): Promise<void> {\n const diagnosticsUrl = await this.idsHost.getDiagnosticsUrl();\n if (diagnosticsUrl === undefined) {\n actionsCore.debug(\n \"Diagnostics are disabled. Not sending the following events:\",\n );\n actionsCore.debug(JSON.stringify(this.events, undefined, 2));\n return;\n }\n\n const batch = {\n sent_at: new Date(),\n batch: this.events,\n };\n\n try {\n await (\n await this.getClient()\n ).post(diagnosticsUrl, {\n json: batch,\n timeout: {\n request: DIAGNOSTIC_ENDPOINT_TIMEOUT_MS,\n },\n });\n } catch (err: unknown) {\n this.recordPlausibleTimeout(err);\n\n actionsCore.debug(\n `Error submitting diagnostics event to ${diagnosticsUrl}: ${stringifyError(err)}`,\n );\n }\n this.events = [];\n }\n}\n\nfunction stringifyError(error: unknown): string {\n return error instanceof Error \|\| typeof error == \"string\"\n ? error.toString()\n : JSON.stringify(error);\n}\n\nfunction makeOptionsConfident(\n actionOptions: ActionOptions,\n): ConfidentActionOptions {\n const idsProjectName = actionOptions.idsProjectName ?? actionOptions.name;\n\n const finalOpts: ConfidentActionOptions = {\n name: actionOptions.name,\n idsProjectName,\n eventPrefix: actionOptions.eventPrefix \|\| \"action:\",\n fetchStyle: actionOptions.fetchStyle,\n legacySourcePrefix: actionOptions.legacySourcePrefix,\n requireNix: actionOptions.requireNix,\n binaryNamePrefixes: actionOptions.binaryNamePrefixes ?? [\n \"nix\",\n \"determinate-nixd\",\n actionOptions.name,\n ],\n binaryNamesDenyList:\n actionOptions.binaryNamesDenyList ?? PROGRAM_NAME_CRASH_DENY_LIST,\n };\n\n actionsCore.debug(\"idslib options:\");\n actionsCore.debug(JSON.stringify(finalOpts, undefined, 2));\n\n return finalOpts;\n}\n\n// Public exports from other files\nexport type {\n CheckIn,\n Feature,\n Incident,\n Maintenance,\n Page,\n StatusSummary,\n} from \"./check-in.js\";\nexport type { CorrelationProperties } from \"./correlation.js\";\nexport { stringifyError } from \"./errors.js\";\nexport { IdsHost } from \"./ids-host.js\";\nexport type { SourceDef } from \"./sourcedef.js\";\nexport as inputs from \"./inputs.js\";\nexport * as platform from \"./platform.js\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,MAAM,gBAAgB,UAAUA,KAAG,QAAQ;AAyB3C,MAAM,kCAA2D;CAC/D,MAAM;CACN,YAAY;CACZ,OAAO;AACT;;;;;;;AAQA,SAAgB,YAAY,aAA8C;CACxE,MAAM,UAAU;EAAE,GAAG;EAAiC,GAAG;CAAY;CAErE,MAAM,0BAAoC,kBACxC,QAAQ,UACV;CAEA,IAAIC,KAAG,KAAK,MAAM,SAAS;EACzB,IAAI,QAAQ,SAAS,QACnB,OAAO,UAAU;OAEjB,OAAO,QAAQ,QAAQ,UAAU,CAAC;CAEtC;CAEA,IAAI,QAAQ,SAAS,QACnB,OAAO,sBAAsB,yBAAyB,OAAO;MAE7D,OAAO,QAAQ,QACb,uBAAuB,yBAAyB,OAAO,CACzD;AAEJ;;;;;;;;AASA,SAAS,eAAe,YAAoB,cAA8B;CACxE,MAAM,QAAkB,aAAa,MAAM,IAAI;CAE/C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,KAAK,MAAM,GAAG;EAE/B,IAAI,SAAS,WAAW,GAAG;GACzB,SAAS,KAAK,SAAS,EAAE,CAAC,QAAQ,YAAY,EAAE;GAEhD,OAAO,eAAe,YAAY,SAAS,EAAE,CAAC,YAAY,GAAG;IAC3D,OAAO,SAAS;IAChB,UAAU;IACV,YAAY;IACZ,cAAc;GAChB,CAAC;EACH;CACF;CAEA,OAAO;AACT;;;;;;;AAQA,SAAS,kBAAkB,YAAiD;CAC1E,MAAM,2BAA2B,CAAC,mBAAmB,qBAAqB;CAE1E,IAAI,CAAC,YACH,OAAO;MAEP,OAAO,MAAM,UAAU;AAE3B;;;;;;;AAmBA,SAAS,YAAoB;CAC3B,OAAO;EACL,MAAMA,KAAG,KAAK;EACd,UAAUA,KAAG,SAAS;EACtB,UAAUA,KAAG,SAAS;EACtB,MAAMA,KAAG,KAAK;EACd,SAASA,KAAG,QAAQ;CACtB;AACF;AAIA,eAAe,uBACb,UACA,SACiB;CACjB,IAAI,WAAW;CAEf,KAAK,MAAM,iBAAiB,UAC1B,IAAI;EACF,IAAI,QAAQ,OAEV,QAAQ,IAAI,mBAAmB,cAAc,KAAK;EAGpD,WAAW,MAAM,cAAc,eAAe,QAAQ;EAEtD,IAAI,QAAQ,OACV,QAAQ,IAAI,eAAe,UAAU;EAGvC;CACF,SAAS,OAAO;EACd,IAAI,QAAQ,OACV,QAAQ,MAAM,KAAK;CAEvB;CAGF,IAAI,aAAa,MACf,MAAM,IAAI,MAAM,8BAA8B;CAIhD,OAAO,eAAe,UAAU,GAAG,QAAQ;AAC7C;AAEA,SAAS,sBACP,iBACA,SACQ;CACR,IAAI,WAAW;CAEf,KAAK,MAAM,iBAAiB,iBAC1B,IAAI;EACF,IAAI,QAAQ,OACV,QAAQ,IAAI,mBAAmB,cAAc,KAAK;EAGpD,WAAWD,KAAG,aAAa,eAAe,QAAQ;EAElD,IAAI,QAAQ,OACV,QAAQ,IAAI,eAAe,UAAU;EAGvC;CACF,SAAS,OAAO;EACd,IAAI,QAAQ,OACV,QAAQ,MAAM,KAAK;CAEvB;CAGF,IAAI,aAAa,MACf,MAAM,IAAI,MAAM,8BAA8B;CAIhD,OAAO,eAAe,UAAU,GAAG,QAAQ;AAC7C;;;;;;ACxMA,MAAM,iBAAiB,YAAiC;CACtD,MAAM,EAAE,QAAQ,YAAY,MAAME,OAAK,cACrC,sFACA,KAAA,GACA,EACE,QAAQ,KACV,CACF;CAEA,MAAM,EAAE,QAAQ,SAAS,MAAMA,OAAK,cAClC,sFACA,KAAA,GACA,EACE,QAAQ,KACV,CACF;CAEA,OAAO;EACL,MAAM,KAAK,KAAK;EAChB,SAAS,QAAQ,KAAK;CACxB;AACF;;;;AAKA,MAAM,eAAe,YAAiC;CACpD,MAAM,EAAE,WAAW,MAAMA,OAAK,cAAc,WAAW,KAAA,GAAW,EAChE,QAAQ,KACV,CAAC;CAED,MAAM,UAAU,OAAO,MAAM,wBAAwB,CAAC,GAAG,MAAM;CAG/D,OAAO;EACL,MAHW,OAAO,MAAM,qBAAqB,CAAC,GAAG,MAAM;EAIvD;CACF;AACF;;;;AAKA,MAAM,eAAe,YAAiC;CACpD,IAAI,OAAe,CAAC;CAEpB,IAAI;EACF,OAAO,YAAY,EAAE,MAAM,OAAO,CAAC;EACnC,YAAY,MAAM,4BAA4B,KAAK,UAAU,IAAI,GAAG;CACtE,SAAS,GAAG;EACV,YAAY,MAAM,kCAAkC,GAAG;CACzD;CAEA,OAAO;EACL,MAAM,0BACJ,MACA;GAAC;GAAM;GAAQ;GAAe;EAAS,GACvC,SACF;EACA,SAAS,0BACP,MACA;GAAC;GAAc;GAAW;EAAkB,GAC5C,SACF;CACF;AACF;AAEA,SAAS,0BACP,MACA,OACA,cACG;CACH,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAS,uBAAuB,MAAM,MAAM,YAAY;EAE9D,IAAI,QAAQ,cACV,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,SAAS,uBACP,MACA,MACA,cACG;CACH,IAAI,CAAC,KAAK,eAAe,IAAI,GAC3B,OAAO;CAGT,MAAM,QAAS,KAAgC;CAG/C,IAAI,OAAO,UAAU,OAAO,cAC1B,OAAO;CAGT,OAAO;AACT;;;;AAKA,MAAa,WAAW,GAAG,SAAS;;;;AAKpC,MAAa,OAAO,GAAG,KAAK;;;;AAK5B,MAAa,YAAY,aAAa;;;;AAKtC,MAAa,UAAU,aAAa;;;;AAKpC,MAAa,UAAU,aAAa;;;;AAkBpC,eAAsB,aAAqC;CACzD,OAAO;EACL,GAAI,OAAO,YACP,eAAe,IACf,UACE,aAAa,IACb,aAAa;EACnB;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;AC5KA,SAAgB,eAAe,GAAoB;CACjD,IAAI,aAAa,OACf,OAAO,EAAE;MACJ,IAAI,OAAO,MAAM,UACtB,OAAO;MAEP,OAAO,KAAK,UAAU,CAAC;AAE3B;;;;;;;ACEA,MAAM,qBAAqB;AAE3B,eAAsB,kBACpB,UACA,qBACA,kBAC8B;CAC9B,IAAI,SACF,OAAO,MAAM,uBACX,UACA,qBACA,gBACF;CAEF,IAAI,SACF,OAAO,MAAM,yBACX,UACA,qBACA,gBACF;CAGF,uBAAO,IAAI,IAAI;AACjB;AAEA,eAAsB,uBACpB,UACA,qBACA,kBAC8B;CAC9B,MAAM,6BAAkC,IAAI,IAAI;CAEhD,IAAI;EACF,MAAM,EAAE,QAAQ,YAAY,MAAMC,OAAK,cACrC,OACA;GACE;GACA;GACA;GACA;GAGA;GACA;GACA;GACA;EACF,GACA,EACE,QAAQ,KACV,CACF;EAEA,MAAM,aAAsB,KAAK,MAAM,OAAO;EAC9C,IAAI,CAAC,MAAM,QAAQ,UAAU,GAC3B,MAAM,IAAI,MAAM,4BAA4B,SAAS;EAGvD,IAAI,WAAW,SAAS,GAAG;GACzB,YAAY,KAAK,0BAA0B;GAC3C,MAAM,QAAQ,OAAO,OACnB,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;GAClD,MAAM,MAAM,GAAI;EAClB;CACF,QAAQ;EACN,YAAY,MACV,sHACF;CACF;CAEA,MAAM,OAAO,CACX,CAAC,UAAU,kCAAkC,GAC7C,CAAC,QAAQ,GAAG,QAAQ,IAAI,QAAQ,iCAAiC,CACnE;CAEA,KAAK,MAAM,CAAC,QAAQ,QAAQ,MAAM;EAChC,MAAM,aAAa,MAAM,QAAQ,GAAG,EAAA,CACjC,QAAQ,aAAa;GACpB,OAAO,SAAS,MAAM,WAAW,SAAS,WAAW,MAAM,CAAC;EAC9D,CAAC,CAAC,CACD,QAAQ,aAAa;GACpB,OAAO,CAAC,oBAAoB,MAAM,gBAChC,SAAS,WAAW,WAAW,CACjC;EACF,CAAC,CAAC,CACD,QAAQ,aAAa;GAIpB,OAAO,CAAC,SAAS,SAAS,OAAO;EACnC,CAAC;EAEH,MAAM,SAAS,UAAU,IAAI;EAC7B,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,KAAK,MAAM,KAAK,GAAG,IAAI,GAAG,UAAU,EAAA,CAAG,WAAW,kBAAkB;IAElE,MAAM,MAAM,MAAM,OAAO,MADH,SAAS,GAAG,IAAI,GAAG,UAAU,CACnB;IAChC,WAAW,IACT,mBAAmB,OAAO,GAAG,YAC7B,IAAI,SAAS,QAAQ,CACvB;GACF;EACF,SAAS,YAAqB;GAC5B,WAAW,IACT,qBAAqB,OAAO,GAAG,YAC/B,eAAe,UAAU,CAC3B;EACF;CAEJ;CAEA,OAAO;AACT;AAOA,eAAsB,yBACpB,UACA,qBACA,kBAC8B;CAC9B,MAAM,eACJ,KAAK,MAAM,KAAK,IAAI,IAAI,oBAAoB,GAAI,IAAI;CACtD,MAAM,6BAAkC,IAAI,IAAI;CAEhD,MAAM,YAAmC,CAAC;CAE1C,IAAI;EACF,MAAM,EAAE,QAAQ,iBAAiB,MAAMA,OAAK,cAC1C,eACA;GAAC;GAAiB;GAAQ;GAAW,GAAG,aAAa;EAAa,GAClE,EACE,QAAQ,KACV,CACF;EAEA,MAAM,aAAsB,KAAK,MAAM,YAAY;EACnD,IAAI,CAAC,MAAM,QAAQ,UAAU,GAC3B,MAAM,IAAI,MAAM,4BAA4B,cAAc;EAG5D,KAAK,MAAM,eAAe,YAAY;GACpC,MAAM,OAAO,OAAO,KAAK,WAAW;GAEpC,IAAI,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,GAAG;IAChD,IACE,OAAO,YAAY,OAAO,YAC1B,OAAO,YAAY,OAAO,UAC1B;KACA,MAAM,YAAY,YAAY,IAAI,MAAM,GAAG;KAC3C,MAAM,aAAa,UAAU,UAAU,SAAS;KAEhD,IACE,SAAS,MAAM,WAAW,WAAW,WAAW,MAAM,CAAC,KACvD,CAAC,oBAAoB,SAAS,UAAU,GAExC,UAAU,KAAK;MACb,KAAK,YAAY;MACjB,KAAK,YAAY;KACnB,CAAC;IAEL,OACE,YAAY,MACV,mEAAmE,KAAK,UAAU,WAAW,GAC/F;GAEJ,OACE,YAAY,MACV,iEAAiE,KAAK,UAAU,WAAW,GAC7F;EAEJ;CACF,SAAS,YAAqB;EAC5B,YAAY,MACV,8BAA8B,eAAe,UAAU,GACzD;EAEA,OAAO;CACT;CAEA,MAAM,SAAS,UAAU,IAAI;CAC7B,KAAK,MAAM,YAAY,WACrB,IAAI;EACF,MAAM,EAAE,QAAQ,YAAY,MAAMA,OAAK,cACrC,eACA,CAAC,QAAQ,GAAG,SAAS,KAAK,GAC1B,EACE,QAAQ,KACV,CACF;EAEA,MAAM,MAAM,MAAM,OAAO,OAAO;EAChC,WAAW,IAAI,mBAAmB,SAAS,OAAO,IAAI,SAAS,QAAQ,CAAC;CAC1E,SAAS,YAAqB;EAC5B,WAAW,IACT,qBAAqB,SAAS,OAC9B,eAAe,UAAU,CAC3B;CACF;CAGF,OAAO;AACT;;;;;;;;AClNA,MAAM,gBAAgB;;;;;;;;;AAUtB,SAAgB,mBAAmB,MAAmC;CACpE,MAAM,yBAAS,IAAI,IAAoB;CAEvC,KAAK,MAAM,UAAU,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO,OAAO,GAAG;EAC7D,MAAM,aAAa,OAAO,QAAQ,GAAG;EACrC,IAAI,eAAe,IACjB;EAGF,MAAM,SAAS,OAAO,MAAM,GAAG,UAAU;EACzC,IAAI,CAAC,cAAc,KAAK,MAAM,GAC5B,MAAM,IAAI,MAAM,qCAAqC,QAAQ;EAG/D,MAAM,OAAO,OAAO,MAAM,aAAa,CAAC,CAAC,CAAC,KAAK;EAC/C,IAAI,SAAS,IACX;EAGF,OAAO,IAAI,MAAM,OAAO,YAAY,CAAC;CACvC;CAEA,OAAO;AACT;;;;;AAMA,eAAsB,aAAa,UAAmC;CACpE,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,YAAY,KAAK;EACnD,iBAAiB,QAAQ,CAAC,CACvB,KAAK,SAAS,MAAM,CAAC,CACrB,KAAK,IAAI,CAAC,CACV,KAAK,gBAAgB,QAAQ,KAAK,KAAK,CAAW,CAAC;CACxD,CAAC;AACH;;;;;AAMA,SAAgB,eAAe,MAA+B;CAC5D,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK;AACvD;;;AC5DA,MAAM,qBAAqB,CAAC,eAAe;AAmB3C,SAAgB,WAAkC;CAChD,MAAM,aAAa,yBAAyB,OAAO;EACjD;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,qBAAqB,yBAAyB,SAAS;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,QAA+B;EACnC,mBAAmB,QAAQ,IAAI,yBAAyB,WAAW;EAEnE,oBAAoB;EAEpB,wBAAwB;EACxB,sBAAsB,yBAAyB,OAAO;GACpD;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,0BAA0B,yBAAyB,QAAQ;GACzD;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,0BAA0B,yBAAyB,SAAS;GAC1D;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,yCAAyC;EACzC,aAAa;EACb,SAAS;GACP,mBAAmB;GACnB,qBAAqB,yBAAyB,OAAO;IACnD;IACA;IACA;GACF,CAAC;EACH;EACA,OAAO;CACT;CAEA,YAAY,MAAM,mBAAmB;CACrC,YAAY,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;CAEhD,OAAO;AACT;AAEA,SAAS,yBACP,QACA,WACoB;CACpB,MAAM,OAAO,WAAW,QAAQ;CAEhC,KAAK,MAAM,WAAW,WAAW;EAC/B,IAAI,QAAQ,QAAQ,IAAI;EAExB,IAAI,UAAU,KAAA,GAAW;GACvB,IAAI,mBAAmB,SAAS,OAAO,GAAG;IACxC,YAAY,MACV,0CAA0C,QAAQ,wCACpD;IACA,QAAQ;GACV,OAAO;IACL,YAAY,MACV,iCAAiC,QAAQ,0CAC3C;IACA;GACF;EACF;EAEA,KAAK,OAAO,KAAK;EACjB,KAAK,OAAO,IAAI;CAClB;CAEA,OAAO,GAAG,OAAO,GAAG,KAAK,OAAO,KAAK;AACvC;;;;;;;ACnHA,MAAM,iBAAiB;AACvB,MAAM,mBAAmB,CACvB,gCACA,qBACF;AAEA,MAAM,mBAAmB;AACzB,MAAM,SAAS,QAAQ,IAAI,iBAAiB;AAE5C,MAAM,kBAAkB;;;;AAKxB,IAAa,UAAb,MAAqB;CAQnB,YACE,gBACA,mBACA,uBACA,UAAkB,iBAClB;EACA,KAAK,iBAAiB;EACtB,KAAK,oBAAoB;EACzB,KAAK,wBAAwB;EAC7B,KAAK,SAAS,KAAA;EACd,KAAK,UAAU;CACjB;CAEA,MAAM,OACJ,wBAKc;EACd,IAAI,KAAK,WAAW,KAAA,GAClB,KAAK,SAAS,IAAI,OAAO;GACvB,SAAS,EACP,SAAS,KAAK,QAChB;GAEA,OAAO;IACL,OAAO,KAAK,KAAK,MAAM,KAAK,oBAAoB,EAAA,CAAG,QAAQ,CAAC;IAC5D,SAAS,CAAC,OAAO,MAAM;GACzB;GAEA,OAAO;IACL,aAAa,CACX,OAAO,OAAO,eAAe;KAC3B,MAAM,UAAU,MAAM,KAAK,WAAW;KACtC,KAAK,sBAAsB;KAC3B,MAAM,UAAU,MAAM,KAAK,WAAW;KAEtC,IAAI,2BAA2B,KAAA,GAC7B,uBAAuB,OAAO,SAAS,OAAO;KAGhD,YAAY,KACV,wBAAwB,MAAM,KAAK,aAAa,YAClD;IACF,CACF;IAEA,eAAe,CACb,OAAO,YAAY;KAEjB,MAAM,aAAkB,QAAQ;KAEhC,IAAI,KAAK,0BAA0B,UAAU,GAAG;MAC9C,MAAM,SAAc,IAAI,IAAI,UAAU;MAGtC,OAAO,QAAO,MADS,KAAK,WAAW,EAAA,CACrB;MAElB,QAAQ,MAAM;MACd,YAAY,MAAM,cAAc,WAAW,QAAQ,QAAQ;KAC7D,OACE,YAAY,MAAM,wBAAwB,YAAY;IAE1D,CACF;GACF;EACF,CAAC;EAGH,OAAO,KAAK;CACd;CAEA,wBAA8B;EAC5B,KAAK,iBAAiB,MAAM;CAC9B;CAEA,mBAAmB,MAAmB;EACpC,KAAK,kBAAkB;CACzB;CAEA,0BAA0B,KAAmB;EAC3C,IAAI,IAAI,WAAW,kBACjB,OAAO;EAGT,KAAK,MAAM,UAAU,kBACnB,IAAI,IAAI,KAAK,SAAS,MAAM,GAC1B,OAAO;EAIX,OAAO;CACT;CAEA,MAAM,oBAA8C;EAClD,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GACd,IAAI;GACF,OAAO,IAAI,IAAI,OAAO;EACxB,SAAS,KAAc;GACrB,YAAY,MACV,+DAA+D,eAAe,GAAG,GACnF;EACF;EAGF,IAAI,MAAuB,KAAA;EAC3B,IAAI;GAEF,OAAM,MADa,KAAK,oBAAoB,EAAA,CACjC;EACb,SAAS,KAAc;GACrB,YAAY,MACV,4CAA4C,eAAe,GAAG,GAChE;EACF;EAEA,IAAI,QAAQ,KAAA,GACV;OAIA,OAAO,IAAI,IAAI,GAAG;CAEtB;CAEA,MAAM,aAA2B;EAC/B,MAAM,MAAM,MAAM,KAAK,kBAAkB;EAEzC,IAAI,QAAQ,KAAA,GACV,OAAO,IAAI,IAAI,gBAAgB;EAGjC,OAAO;CACT;CAEA,MAAM,oBAA8C;EAClD,IAAI,KAAK,0BAA0B,IAGjC;EAGF,IACE,KAAK,0BAA0B,OAC/B,KAAK,0BAA0B,KAAA,GAE/B,IAAI;GAEF,OAAO,IAAI,IAAI,KAAK,qBAAqB;EAC3C,SAAS,KAAc;GACrB,YAAY,KACV,+DAA+D,eAAe,GAAG,GACnF;EACF;EAGF,IAAI;GACF,MAAM,gBAAgB,MAAM,KAAK,WAAW;GAC5C,cAAc,YAAY;GAC1B,OAAO;EACT,SAAS,KAAc;GACrB,YAAY,KACV,yFAAyF,eAAe,GAAG,GAC7G;GACA;EACF;CACF;CAEA,MAAc,sBAAsC;EAClD,IAAI,KAAK,oBAAoB,KAAA,GAC3B,KAAK,kBAAkB,6BACrB,MAAM,uBAAuB,CAC/B,CAAC,CAAC,SAAS,WAAW,YAAY,MAAM,KAAK,CAAC,CAAC;EAGjD,OAAO,KAAK;CACd;AACF;AAEA,SAAgB,YAAY,QAAoC;CAC9D,MAAM,SAAS,WAAW,OAAO,KAAK,GAAG,OAAO;CAChD,IAAI;EACF,OAAO,IAAI,IAAI,MAAM;CACvB,SAAS,KAAc;EACrB,YAAY,MACV,UAAU,KAAK,UAAU,MAAM,EAAE,4BAA4B,OAAO,IAAI,IAAI,EAC9E;EACA;CACF;AACF;AAEA,eAAe,yBAA+C;CAC5D,OAAO,MAAM,qBAAqB,WAAW,MAAM,GAAG,GAAK;AAC7D;AAEA,eAAsB,qBACpB,QACA,SACsB;CACtB,MAAM,kBAAwC,IAAI,SAC/C,SAAS,YAAY;EACpB,WAAW,SAAS,SAAS,CAAC,CAAC;CACjC,CACF;CAEA,IAAI;CAEJ,IAAI;EACF,UAAU,MAAM,QAAQ,KAAK,CAAC,QAAQ,eAAe,CAAC;CACxD,SAAS,QAAiB;EACxB,YAAY,MAAM,gCAAgC,eAAe,MAAM,GAAG;EAC1E,UAAU,CAAC;CACb;CAEA,MAAM,oBAAoB,QAAQ,QAAQ,WAA+B;EACvE,KAAK,MAAM,UAAU,kBACnB,IAAI,OAAO,KAAK,SAAS,MAAM,GAC7B,OAAO;EAIX,YAAY,MACV,iDAAiD,OAAO,MAC1D;EAEA,OAAO;CACT,CAAC;CAED,IAAI,kBAAkB,WAAW,GAC/B,YAAY,MAAM,wBAAwB,QAAQ;MAElD,YAAY,MACV,YAAY,OAAO,MAAM,KAAK,UAAU,iBAAiB,GAC3D;CAGF,OAAO;AACT;AAEA,SAAgB,6BACd,SACa;CACb,MAAM,mCAA6C,IAAI,IAAI;CAC3D,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,WAAW,iBAAiB,IAAI,OAAO,QAAQ;EACrD,IAAI,UACF,SAAS,KAAK,MAAM;OAEpB,iBAAiB,IAAI,OAAO,UAAU,CAAC,MAAM,CAAC;CAElD;CAEA,MAAM,qBAAkC,CAAC;CACzC,MAAM,OAAiB,MAAM,KAAK,iBAAiB,KAAK,CAAC,CAAC,CAAC,MACxD,GAAG,MAAM,IAAI,CAChB;CAEA,KAAK,MAAM,YAAY,MAAM;EAC3B,MAAM,gBAAgB,iBAAiB,IAAI,QAAQ;EACnD,IAAI,kBAAkB,KAAA,GACpB;EAGF,mBAAmB,KAAK,GAAG,eAAe,aAAa,CAAC;CAC1D;CAEA,OAAO;AACT;AAEA,SAAgB,eAAe,SAAmC;CAEhE,MAAM,iBAA8B,QAAQ,MAAM;CAClD,MAAM,SAAsB,CAAC;CAE7B,OAAO,eAAe,SAAS,GAAG;EAChC,MAAM,UAAoB,CAAC;EAGzB,KAAK,IAAI,IAAI,GAAG,IAAI,eAAe,QAAQ,KACzC,QAAQ,KACN,eAAe,EAAE,CAAC,UAAU,IAAI,IAAI,eAAe,IAAI,EAAE,CAAC,SAAS,EACrE;EAIJ,MAAM,QAAQ,KAAK,OAAO,IAAI,QAAQ,QAAQ,SAAS;EAEvD,KACE,IAAI,gBAAgB,GACpB,gBAAgB,QAAQ,QACxB,iBAEA,IAAI,QAAQ,iBAAiB,OAAO;GAElC,OAAO,KAAK,eAAe,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE;GACtD;EACF;CAEJ;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;ACrUA,MAAM,WAAW,SAA0B;CACzC,OAAO,YAAY,gBAAgB,IAAI;AACzC;;;;AAKA,MAAM,sBAAsB,SAAsC;CAChE,IAAI,qBAAqB,IAAI,MAAM,KAAA,GACjC;CAGF,OAAO,YAAY,gBAAgB,IAAI;AACzC;;;;;AAWA,MAAM,qBAAqB,MAAc,cAAmC;CAC1E,MAAM,WAAW,UAAU,IAAI;CAC/B,OAAO,aAAa,UAAU,SAAS;AACzC;;;;AAKA,MAAM,2BACJ,MACA,cACoB;CACpB,MAAM,WAAW,gBAAgB,IAAI;CACrC,IAAI,aAAa,MACf,OAAO;MAEP,OAAO,aAAa,UAAU,SAAS;AAE3C;AAGA,MAAa,gBAAgB,OAAe,cAAmC;CAC7E,MAAM,UAAU,cAAc,UAAU,MAAM;CAC9C,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,YAAY,IACd,OAAO,CAAC;CAGV,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,MAAc,EAAE,KAAK,CAAC;AAC3D;;;;AAKA,MAAM,4BAA4B,SAAkC;CAClE,MAAM,QAAQ,YAAY,kBAAkB,IAAI;CAChD,IAAI,MAAM,WAAW,GACnB,OAAO;MAEP,OAAO;AAEX;;;;AAKA,MAAM,mBAAmB,SAAgC;CACvD,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ,OAAO;MAEP,OAAO,OAAO,KAAK;AAEvB;;;;AAKA,MAAM,wBAAwB,SAAqC;CACjE,MAAM,QAAQ,qBAAqB,IAAI;CACvC,IAAI,UAAU,KAAA,GACZ;CAGF,OAAO,OAAO,KAAK;AACrB;;;;AAKA,MAAM,aAAa,SAAyB;CAC1C,OAAO,YAAY,SAAS,IAAI;AAClC;;;;AAKA,MAAM,mBAAmB,SAAgC;CACvD,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ,OAAO;MAEP,OAAO;AAEX;;;;AAKA,MAAM,wBAAwB,SAAqC;CACjE,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ;MAEA,OAAO;AAEX;;;;;;;;;;;;;;ACxHA,SAAgB,YAAoB;CAClC,MAAM,UAAU,QAAQ,IAAI;CAC5B,MAAM,QAAQ,QAAQ,IAAI;CAE1B,IAAI,WAAW,OACb,OAAO,GAAG,QAAQ,GAAG;MAChB;EACL,YAAY,MACV,oEAAoE,QAAQ,GAAG,MAAM,EACvF;EACA,MAAM,IAAI,MAAM,6CAA6C;CAC/D;AACF;;;;AAKA,SAAgB,eAAe,QAAwB;CAQrD,MAAM,4BAAW,IAP0B,IAAI;EAC7C,CAAC,aAAa,eAAe;EAC7B,CAAC,eAAe,gBAAgB;EAChC,CAAC,aAAa,cAAc;EAC5B,CAAC,eAAe,eAAe;CACjC,CAEyB,EAAA,CAAE,IAAI,MAAM;CACrC,IAAI,UACF,OAAO;MACF;EACL,YAAY,MACV,WAAW,OAAO,2CACpB;EACA,MAAM,IAAI,MACR,0BAA0B,OAAO,+BACnC;CACF;AACF;;;;;;;;;;AC1BA,SAAgB,6BAA6B,QAAyB;CACpE,IACE,OAAO,QAAQ,KAAA,KACf,OAAO,QAAQ,KAAA,KACf,OAAO,aAAa,KAAA,GAEpB,MAAM,IAAI,MACR,wRACF;AAEJ;AAEA,SAAgB,0BAA0B,cAAkC;CAC1E,OAAO;EACL,MAAM,gBAAgB,QAAQ,YAAY;EAC1C,KAAK,gBAAgB,OAAO,YAAY;EACxC,KAAK,gBAAgB,OAAO,YAAY;EACxC,IAAI,gBAAgB,MAAM,YAAY;EACtC,QAAQ,gBAAgB,UAAU,YAAY;EAC9C,UAAU,gBAAgB,YAAY,YAAY;CACpD;AACF;AAEA,SAAS,gBACP,QACA,cACoB;CACpB,MAAM,iBAAiB,qBAAqB,UAAU,QAAQ;CAE9D,IAAI,CAAC,cACH,OAAO;CAKT,MAAM,cAAc,qBAAqB,GAAG,aAAa,GAAG,QAAQ;CAEpE,IAAI,kBAAkB,aAAa;EACjC,YAAY,QACV,+BAA+B,OAAO,yBAAyB,aAAa,GAAG,OAAO,mCAAmC,OAAO,wBAAwB,aAAa,GAAG,OAAO,EACjL;EACA,OAAO;CACT,OAAO,IAAI,aAAa;EACtB,YAAY,QACV,qBAAqB,aAAa,GAAG,OAAO,oCAAoC,OAAO,EACzF;EACA,OAAO;CACT,OACE,OAAO;AAEX;;;;;;;ACrBA,MAAM,aAAa;AAEnB,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAClC,MAAM,+BAA+B;AACrC,MAAM,qCAAqC;AAC3C,MAAM,8BAA8B;AAEpC,MAAM,mCAAmC;AACzC,MAAM,4BAA4B;AAClC,MAAM,uBAAuB;AAC7B,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,+BAA+B;AACrC,MAAM,mBAAmB;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AAEnC,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAChC,MAAM,kBAAkB;AACxB,MAAM,2BAA2B;AACjC,MAAM,kCAAkC;AAExC,MAAM,iCAAiC;AACvC,MAAM,+BAA+B;AACrC,MAAM,+BAA+B;CACnC;CACA;CACA;AACF;AA0GA,MAAM,sBAAsB;AAC5B,MAAM,0BAA0B,KAAK,KAAK,qBAAqB,eAAe;AAE9E,MAAM,SAAS,OAAO,QAAQ,YAAY,cAAc,QAAQ,QAAQ,MAAM;;AAG9E,eAAe,gCAA+C;CAC5D,MAAM,OAAO,MAAMC,OAAY,KAAK,QAAQ;EAC1C;EACA;EACA;CACF,CAAC;CAED,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,uBAAuB,MAAM;AAEjD;;AAGA,eAAe,4BAA2C;CACxD,IAAI,QACF,MAAM,MAAM,qBAAqB,EAAE,WAAW,KAAK,CAAC;MAEpD,OAAO,8BAA8B;AAEzC;;AAGA,eAAe,2BAA2B,QAA+B;CACvE,MAAM,SAAS,OAAO,KAAK,MAAM;CAEjC,MAAM,OAAO,MAAMA,OAAY,KAC7B,QACA,CAAC,OAAO,uBAAuB,GAC/B;EACE,OAAO;EAGP,WAAW,kBAAkB,WAAW;CAC1C,CACF;CAEA,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,kBAAkB,MAAM;AAE5C;;AAGA,eAAe,uBAAuB,QAA+B;CACnE,MAAM,0BAA0B;CAEhC,IAAI,QACF,MAAM,GAAG,UAAU,yBAAyB,QAAQ,OAAO;MAE3D,OAAO,2BAA2B,MAAM;AAE5C;AAEA,IAAsB,eAAtB,MAAmC;CAkBjC,0BAAkD;EAEhD,IADqB,YAAY,SAAS,yBAC3B,MAAM,IAAI;GACvB,YAAY,UAAU,2BAA2B,MAAM;GACvD,OAAO;EACT,OACE,OAAO;CAEX;CAEA,YAAY,eAA8B;EACxC,KAAK,gBAAgB,qBAAqB,aAAa;EACvD,KAAK,UAAU,IAAI,QACjB,KAAK,cAAc,gBACnB,cAAc,mBAGd,QAAQ,IAAI,8BACZ,qBAAqB,iBAAiB,CACxC;EACA,KAAK,uCAAuB,IAAI,IAAI;EACpC,KAAK,gBAAgB;EACrB,KAAK,aAAa,QAAQ,uBAAuB;EAEjD,IACE,mBACE,yDACF,MAAM,MACN;GACA,QAAQ,IAAI,kCAAkC,KAAA;GAC9C,QAAQ,IAAI,oCAAoC,KAAA;EAClD;EAEA,KAAK,WAAW,CAAC;EACjB,KAAK,uBAAuB,CAAC;EAC7B,KAAK,SAAS,CAAC;EAEf,KAAK,gBAAgB;EACrB,KAAK,sBAAsB;EAI3B,KAAK,QAAQ;GACX,MAAM;GACN,cAAc;GACd,SAAS,KAAK,cAAc;GAC5B,aAAa,KAAK,cAAc;EAClC;EASA,KAAK,MAAM,CAAC,QAAQ,QAAQ;GAN1B,CAAC,qBAAqB,mBAAmB;GACzC,CAAC,4BAA4B,0BAA0B;GACvD,CAAC,qBAAqB,mBAAmB;GACzC,CAAC,OAAO,WAAW;GACnB,CAAC,QAAQ,aAAa;EAES,GAAG;GAClC,MAAM,QAAQ,QAAQ,IAAI;GAC1B,IAAI,OACF,KAAK,MAAM,UAAU;EAEzB;EAEA,KAAK,WAAWC,SAAqB;EACrC,KAAK,SAASC,UAAmB;EACjC,KAAK,YAAYC,eAAwB,KAAK,MAAM;EAEpD,KAAK,MAAM,YAAY,GAAG,KAAK,cAAc,KAAK;EAClD,KAAK,MAAM,UAAU,KAAK;EAC1B,KAAK,MAAM,aAAa,KAAK;EAG3B,WACc,CAAC,CAEZ,MAAM,YAAY;GACjB,IAAI,QAAQ,SAAS,WACnB,KAAK,QAAQ,SAAS,QAAQ,IAAI;GAEpC,IAAI,QAAQ,YAAY,WACtB,KAAK,QAAQ,iBAAiB,QAAQ,OAAO;EAEjD,CAAC,CAAC,CAED,OAAO,MAAe;GACrB,YAAY,MACV,qCAAqCC,iBAAe,CAAC,GACvD;EACF,CAAC;EAGL,KAAK,iBAAiB,KAAK,wBAAwB;EACnD,KAAK,MAAM,kBAAkB,KAAK;EAElC,IAAI,KAAK,cAAc,eAAe,gBACpC,KAAK,0BAA0B,KAAK;OAC/B,IAAI,KAAK,cAAc,eAAe,aAC3C,KAAK,0BAA0B,KAAK;OAC/B,IAAI,KAAK,cAAc,eAAe,aAC3C,KAAK,0BAA0B;OAE/B,MAAM,IAAI,MACR,cAAc,KAAK,cAAc,WAAW,sBAC9C;EAGF,KAAK,mBAAmB,0BACtB,KAAK,cAAc,kBACrB;EAEA,KAAK,YAAY,SAAS,KAAK,gBAAgB;CACjD;;;;;;;;;CAUA,WAAW,MAAc,UAAwB;EAC/C,KAAK,qBAAqB,IAAI,MAAM,QAAQ;CAC9C;;;;CAeA,UAAgB;EAEd,KAAK,aAAa,CAAC,CAAC,OAAO,UAAiB;GAE1C,QAAQ,IAAI,KAAK;GACjB,QAAQ,WAAW;EACrB,CAAC;CACH;CAEA,mBAA2B;EACzB,MAAM,SAAS,QAAQ,IAAI,kBAAkB,OAAO;EACpD,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,cAAc,KAAK,GAAG,WAAW,GAAG;CACvE;CAEA,QAAQ,KAAa,OAAwC;EAC3D,KAAK,MAAM,OAAO;CACpB;CAEA,MAAM,oBAA8C;EAClD,OAAO,MAAM,KAAK,QAAQ,kBAAkB;CAC9C;CAEA,cAAsB;EACpB,OACE,KAAK,SAAS,2CACd,QAAQ,IAAI,sBACZ,WAAW;CAEf;CAGA,kBAA0B;EACxB,IAAI,eAAe,YAAY,SAAS,wBAAwB;EAEhE,IAAI,iBAAiB,IAAI;GACvB,eAAe,WAAW;GAC1B,YAAY,UAAU,0BAA0B,YAAY;EAC9D;EAEA,OAAO;CACT;CAEA,uBAA0D;EACxD,OAAO,KAAK;CACd;CAEA,YACE,WACA,UAOI,CAAC,GACC;EACN,MAAM,eACJ,cAAc,0BAA0B,cAAc,mBAClD,YACA,GAAG,KAAK,cAAc,cAAc;EAE1C,KAAK,OAAO,KAAK;GACf,MAAM;GAGN,aAAa,KAAK,SAAS;GAG3B,MAAM,WAAW;GACjB,2BAAW,IAAI,KAAK;GAEpB,YAAY;IACV,GAAG;IACH,GAAG,KAAK;IACR,GAAG,KAAK;IACR,GAAG,OAAO,YACR,OAAO,QAAQ,KAAK,oBAAoB,CAAC,CAAC,KAEvC,CAAC,MAAM,aAAa,CAAC,YAAY,QAAQ,OAAO,CAAC,CACtD;GACF;EACF,CAAC;CACH;;;;;;CAOA,MAAM,cAAc,KAA8B;EAChD,MAAM,WAAW,MAAM,KAAK,cAAc;EAC1C,MAAM,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC,CACtC,QAAQ,SAAS,+BACnB;EAGA,OAAO,GAFO,OAAO,MAAMC,KAAG,GACT,CAAC,CAAC,GAAG,EACT,EAAE,OAAO;CAC5B;;;;;CAMA,MAAM,kBAAmC;EACvC,MAAM,aAAa,MAAM,KAAK,cAAc;EAC5C,MAAM,MAAM,YAAYC,UAAY,UAAUA,UAAY,OAAO;EACjE,OAAO;CACT;CAEA,IAAY,SAAkB;EAC5B,OAAO,KAAK,mBAAmB;CACjC;CAEA,IAAY,SAAkB;EAC5B,OAAO,KAAK,mBAAmB;CACjC;CAEA,MAAc,eAA8B;EAC1C,IAAI;GACF,MAAM,KAAK,QAAQ;GAEnB,MAAM,oBAAoB,KAAK,UAAU,KAAK,qBAAqB,CAAC;GACpE,QAAQ,IAAI,qBAAqB;GACjC,IAAI;IACF,MAAM,uBAAuB,iBAAiB;GAChD,SAAS,OAAO;IACd,KAAK,YAAY,6BAA6B,EAAE,OAAO,OAAO,KAAK,EAAE,CAAC;GACxE;GAEA,IAAI,CAAE,MAAM,KAAK,oBAAoB,GAAI;IACvC,KAAK,YAAY,kCAAkC;IACnD;GACF,OAAO;IACL,MAAM,KAAK,sBAAsB;IACjC,MAAM,KAAK,oBAAoB;IAC/B,KAAK,QAAQ,sBAAsB,KAAK,aAAa;GACvD;GAEA,IAAI,KAAK,QAAQ;IACf,KAAK,YAAY;IACjB,MAAM,KAAK,KAAK;IAGhB,MAAM,KAAK,oBAAoB;GACjC,OAAO,IAAI,KAAK,QACd,MAAM,KAAK,KAAK;GAElB,KAAK,QAAQ,2BAA2B,KAAK;EAC/C,SAAS,GAAY;GACnB,KAAK,QAAQ,2BAA2B,IAAI;GAE5C,MAAM,aAAaF,iBAAe,CAAC;GAEnC,KAAK,QAAQ,sBAAsB,UAAU;GAE7C,IAAI,KAAK,QACP,YAAY,QAAQ,UAAU;QAE9B,YAAY,UAAU,UAAU;GAGlC,MAAM,SAAS,UAAU,IAAI;GAE7B,MAAM,mCAAwC,IAAI,IAAI;GACtD,KAAK,MAAM,CAAC,iBAAiB,aAAa,KAAK,sBAC7C,IAAI;IAEF,MAAM,MAAM,MAAM,OADF,aAAa,QACE,CAAC;IAChC,iBAAiB,IACf,gBAAgB,mBAChB,IAAI,SAAS,QAAQ,CACvB;GACF,SAAS,YAAqB;IAC5B,iBAAiB,IACf,kBAAkB,mBAClBA,iBAAe,UAAU,CAC3B;GACF;GAGF,KAAK,YAAY,iBAAiB,OAAO,YAAY,gBAAgB,CAAC;EACxE,UAAU;GACR,IAAI,KAAK,QACP,MAAM,KAAK,kBAAkB;GAG/B,MAAM,KAAK,SAAS;EACtB;CACF;CAEA,MAAM,YAA0B;EAC9B,OAAO,MAAM,KAAK,QAAQ,QACvB,eAAwB,SAAc,YAAiB;GACtD,KAAK,uBAAuB,aAAa;GAEzC,KAAK,YAAY,gBAAgB;IAC/B,aAAa,QAAQ,SAAS;IAC9B,SAAS,QAAQ,SAAS;GAC5B,CAAC;EACH,CACF;CACF;CAEA,MAAc,UAAyB;EACrC,MAAM,UAAU,MAAM,KAAK,eAAe;EAC1C,IAAI,YAAY,KAAA,GACd;EAGF,KAAK,WAAW,QAAQ;EACxB,KAAK,MAAM,CAAC,KAAK,YAAY,OAAO,QAAQ,KAAK,QAAQ,GACvD,KAAK,qBAAqB,OAAO,QAAQ;EAG3C,MAAM,+BAAoC,IAAI,IAAI;GAChD,CAAC,QAAQ,GAAG;GACZ,CAAC,eAAe,KAAK;GACrB,CAAC,SAAS,IAAI;GACd,CAAC,SAAS,IAAI;GACd,CAAC,YAAY,IAAI;EACnB,CAAC;EACD,MAAM,sBAAsB;EAE5B,IAAI,QAAQ,WAAW,MAAM;GAC3B,MAAM,YAAsB,CAAC;GAE7B,KAAK,MAAM,YAAY,QAAQ,OAAO,WACpC,UAAU,KACR,GAAG,aAAa,IAAI,SAAS,MAAM,KAAK,oBAAoB,GAAG,SAAS,OAAO,QAAQ,KAAK,GAAG,EAAE,IAAI,SAAS,KAAK,IAAI,SAAS,UAAU,EAC5I;GAGF,KAAK,MAAM,eAAe,QAAQ,OAAO,wBACvC,UAAU,KACR,GAAG,aAAa,IAAI,YAAY,MAAM,KAAK,oBAAoB,GAAG,YAAY,OAAO,QAAQ,KAAK,GAAG,EAAE,IAAI,YAAY,KAAK,IAAI,YAAY,UAAU,EACxJ;GAGF,IAAI,UAAU,SAAS,GAAG;IACxB,YAAY,KAEV,kBAAgD,QAAQ,OAAO,KAAK,KAAK,QAC3E;IACA,KAAK,MAAM,UAAU,WACnB,YAAY,KAAK,MAAM;IAEzB,YAAY,KAAK,QAAQ,QAAQ,OAAO,KAAK,KAAK;IAClD,YAAY,KAAK,EAAE;GACrB;EACF;CACF;CAEA,WAAW,MAAmC;EAC5C,IAAI,CAAC,KAAK,SAAS,eAAe,IAAI,GACpC;EAGF,MAAM,SAAS,KAAK,SAAS;EAC7B,IAAI,WAAW,KAAA,GACb;EAGF,KAAK,YAAY,wBAAwB;GACvC,eAAe;GACf,wBAAwB,OAAO;EACjC,CAAC;EAED,OAAO;CACT;CAEA,cAA4B;EAC1B,MAAM,aAAa,KAAK,SAAS,QAAQ;EACzC,MAAM,aAAa,QAAQ,IAAI;EAE/B,IAAI,eAAe,KAAA,KAAa,eAAe,KAAA,GAC7C,KAAK,YAAY,kBAAkB;GACjC,aAAa;GACb,YAAY;GACZ,YAAY,EACV,MAAM,WACR;EACF,CAAC;CAEL;;;;;;;;CASA,MAAc,iBAA+C;EAC3D,KACE,IAAI,oBAAoB,GACxB,oBAAoB,GACpB,qBACA;GACA,MAAM,aAAa,MAAM,KAAK,cAAc;GAC5C,IAAI,eAAe,KAAA,GACjB;GAGF,IAAI;IACF,YAAY,MAAM,oBAAoB,YAAY;IAElD,MAAM,QAAQ;KAEZ,aAAa,KAAK,SAAS;KAC3B,kBAAkB,KAAK,SAAS;KAChC,QAAQ,KAAK,SAAS;KACtB,mBAAmB;MACjB,IAAI;MAEJ,GAAG,KAAK;MACR,GAAG,KAAK;KACV;IACF;IAEA,OAAO,OACL,MAAM,KAAK,UAAU,EAAA,CAEpB,KAAK,YAAY;KAChB,MAAM;KACN,SAAS,EACP,SAAS,6BACX;IACF,CAAC,CAAC,CACD,KAAK;GACV,SAAS,GAAY;IACnB,KAAK,uBAAuB,CAAC;IAC7B,YAAY,MAAM,sBAAsBA,iBAAe,CAAC,GAAG;IAC3D,KAAK,QAAQ,sBAAsB;GACrC;EACF;CAGF;CAEA,uBAA+B,GAAkB;EAE/C,IAAI,aAAa,gBAAgB,aAAa,KAAK,aAAa,GAAG;GACjE,MAAM,gBAEF;IACF,KAAK,EAAE,QAAQ,YAAY,SAAS;IACpC,aAAa,EAAE,QAAQ;GACzB;GAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,EAAE,QAAQ,MAAM,GACxD,IAAI,OAAO,SAAS,KAAK,GACvB,cAAc,gBAAgB,SAAS;GAI3C,KAAK,YAAY,WAAW,aAAa;EAC3C;CACF;;;;;;;;;;;;;CAcA,MAAc,gBAAiC;EAC7C,MAAM,eAAe,gBAAgB,eAAe;EAGpD,IAAI,iBAAiB,QAAQ,iBAAiB,IAAI;GAChD,YAAY,MAAM,uCAAuC,cAAc;GACvE,OAAO;EACT;EAEA,MAAM,uBAAuB,MAAM,KAAK,4BAA4B;EAEpE,YAAY,WACV,eAAe,KAAK,cAAc,KAAK,OAAO,KAAK,yBACrD;EAEA,IAAI;GACF,YAAY,KAAK,iBAAiB,MAAM,KAAK,aAAa,GAAG;GAE7D,MAAM,gBAAgB,MAAM,KAAK,aAAa;GAC9C,cAAc,aAAa,IAAI,MAAM,QAAQ;GAC7C,cAAc,aAAa,IACzB,eACA,KAAK,UAAU,KAAK,QAAQ,CAC9B;GAEA,MAAM,iBAAiB,OAAO,MAAM,KAAK,UAAU,EAAA,CAAG,KAAK,aAAa;GACxE,IAAI,eAAe,QAAQ,MAAM;IAC/B,MAAM,IAAI,eAAe,QAAQ;IACjC,KAAK,QAAQ,sBAAsB,CAAC;IAEpC,YAAY,MACV,+BAA+B,MAAM,KAAK,aAAa,EAAE,MAAM,GACjE;IACA,MAAM,SAAS,MAAM,KAAK,iBAAiB,GAAG,oBAAoB;IAClE,IAAI,QAAQ;KACV,KAAK,MAAM,oCAAoC;KAC/C,YAAY,MAAM,iBAAiB;KACnC,MAAM,KAAK,mBAAmB,QAAQ,oBAAoB;KAC1D,OAAO;IACT;GACF;GAEA,KAAK,MAAM,oCAAoC;GAE/C,YAAY,MACV,2DAA2D,eAAe,KAC5E;GAEA,MAAM,WAAW,KAAK,iBAAiB;GAEvC,MAAM,cAAc,MAAM,KAAK,aAC7B,IAAI,IAAI,eAAe,GAAG,GAC1B,QACF;GAEA,MAAM,KAAK,mBAAmB,UAAU,oBAAoB;GAE5D,IAAI,YAAY,UAAU,QAAQ,MAAM;IACtC,MAAM,IAAI,YAAY,SAAS,QAAQ;IAEvC,IAAI;KACF,MAAM,KAAK,kBAAkB,GAAG,UAAU,oBAAoB;IAChE,SAAS,GAAY;KACnB,YAAY,MAAM,+BAA+BA,iBAAe,CAAC,GAAG;IACtE;GACF;GAEA,OAAO;EACT,SAAS,GAAY;GACnB,KAAK,uBAAuB,CAAC;GAC7B,MAAM;EACR,UAAU;GACR,YAAY,SAAS;EACvB;CACF;;;;;;;;CASA,MAAc,8BAAsD;EAClE,MAAM,eAAe,gBAAgB,sBAAsB;EAC3D,MAAM,kBAAkB,gBAAgB,yBAAyB;EAEjE,IAAI,iBAAiB,QAAQ,oBAAoB,MAC/C,OAAO;EAET,IAAI,iBAAiB,QAAQ,oBAAoB,MAC/C,MAAM,IAAI,MACR,2EACF;EAGF,6BAA6B,KAAK,gBAAgB;EAElD,MAAM,mBAAmB,gBAAgB,YAAY;EACrD,KAAK,QAAQ,8BAA8B,gBAAgB;EAE3D,MAAM,YAAY,IAAI,IAAI,YAAY;EACtC,MAAM,UAAU,UAAU,SAAS,UAAU;EAE7C,YAAY,KAAK,gCAAgC,SAAS;EAE1D,MAAM,QAAO,OADW,MAAM,KAAK,UAAU,EAAA,CAAG,IAAI,YAAY,EAAA,CAC1C;EAEtB,MAAM,iBAAiB,eAAe,IAAI;EAC1C,IAAI,mBAAmB,kBACrB,MAAM,IAAI,MACR,mCAAmC,QAAQ,aAAa,iBAAiB,QAAQ,gBACnF;EAGF,MAAM,SAAS,GAAG,KAAK,cAAc,KAAK,GAAG,KAAK;EAElD,MAAM,eADS,mBAAmB,IACR,CAAC,CAAC,IAAI,MAAM;EACtC,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,MAAM,gBAAgB,OAAO,wBAAwB,SAAS;EAE1E,OAAO;CACT;;;;;CAMA,MAAc,mBACZ,UACA,UACe;EACf,IAAI,aAAa,MACf;EAEF,MAAM,SAAS,MAAM,aAAa,QAAQ;EAC1C,IAAI,WAAW,UACb,MAAM,IAAI,MACR,8BAA8B,KAAK,wBAAwB,aAAa,SAAS,QAAQ,QAC3F;CAEJ;;;;;CAMA,YAAY,KAAmB;EAC7B,IAAI,KAAK,YACP,YAAY,UAAU,wBAAwB,KAAK;CAEvD;CAEA,MAAc,aACZ,KACA,aACkB;EAClB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,OAAO,IAAI,SAAS,SAAS,WAAW;GAEtC,IAAI;GAGJ,IAAI,SAAS;GAEb,MAAM,SAAS,WAA0B;IACvC,IAAI,aACF,YAAY,QAAQ;IAGtB,cAAc,kBAAkB,aAAa;KAC3C,UAAU;KACV,MAAM;IACR,CAAC;IAED,YAAY,KAAK,UAAU,UAAU;KAEnC,SAAS;KACT,OAAO,KAAK;IACd,CAAC;IAED,YAAY,GAAG,gBAAgB;KAC7B,IAAI,CAAC,QACH,QAAQ,MAAM;IAElB,CAAC;IAED,OAAO,KAAK,UAAU,QAAQ,QAAQ,sBAAsB;KAE1D,MAAM,kBAAkB,CAAC;IAC3B,CAAC;IAID,OAAO,KAAK,WAAW;GACzB;GAGA,MAAM,OAAO,OAAO,GAAG,CAAC;EAC1B,CAAC;CACH;CAEA,MAAc,WAA0B;EACtC,KAAK,YAAY,YAAY,KAAK,gBAAgB;EAClD,MAAM,KAAK,aAAa;CAC1B;CAEA,MAAc,gBAA0C;EACtD,MAAM,aAAa,MAAM,KAAK,QAAQ,kBAAkB;EAExD,IAAI,eAAe,KAAA,GACjB;EAGF,WAAW,YAAY;EACvB,OAAO;CACT;CAEA,MAAc,eAA6B;EACzC,MAAM,IAAI,KAAK;EAEf,IAAI,EAAE,KAAK;GACT,KAAK,QAAQ,iBAAiB,EAAE,GAAG;GACnC,OAAO,IAAI,IAAI,EAAE,GAAG;EACtB;EAEA,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW;EAC/C,SAAS,YAAY,KAAK,cAAc;EAExC,IAAI,EAAE,KACJ,SAAS,YAAY,QAAQ,EAAE;OAC1B,IAAI,EAAE,IACX,SAAS,YAAY,OAAO,EAAE;OACzB,IAAI,EAAE,QACX,SAAS,YAAY,WAAW,EAAE;OAC7B,IAAI,EAAE,UACX,SAAS,YAAY,QAAQ,EAAE;OAE/B,SAAS,YAAY;EAGvB,SAAS,YAAY,IAAI,KAAK;EAE9B,KAAK,QAAQ,iBAAiB,SAAS,SAAS,CAAC;EAEjD,OAAO;CACT;CAEA,SAAiB,SAAiB,cAAqC;EACrE,MAAM,iBAAiB,QAAQ,QAAQ,oBAAoB,EAAE;EAC7D,MAAM,aAAa,eAAe,KAAK,iBAAiB;EACxD,OAAO,qBAAqB,KAAK,cAAc,KAAK,GAAG,KAAK,wBAAwB,GAAG,iBAAiB;CAC1G;CAEA,MAAc,iBACZ,SACA,cAC6B;EAC7B,MAAM,WAAW,QAAQ,IAAI;EAE7B,IAAI;GACF,MAAM,UAAU,KAAK,iBAAiB;GACtC,MAAM,MAAM,OAAO;GACnB,QAAQ,MAAM,OAAO;GAGrB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI;GAClD,OAAO,QAAQ,IAAI;GAEnB,IACE,MAAM,aAAa,aACjB,CAAC,KAAK,cAAc,IAAI,GACxB,KAAK,SAAS,SAAS,YAAY,GACnC,CAAC,GACD,KAAA,GACA,IACF,GACA;IACA,KAAK,YAAY,wBAAwB;IACzC,OAAO,GAAG,QAAQ,GAAG,KAAK,cAAc;GAC1C;GAEA,KAAK,YAAY,yBAAyB;GAC1C;EACF,UAAU;GACR,QAAQ,IAAI,mBAAmB,QAAQ,IAAI;GAC3C,OAAO,QAAQ,IAAI;GACnB,QAAQ,MAAM,QAAQ;EACxB;CACF;CAEA,MAAc,kBACZ,SACA,UACA,cACe;EACf,MAAM,WAAW,QAAQ,IAAI;EAE7B,IAAI;GACF,MAAM,UAAU,KAAK,iBAAiB;GACtC,MAAM,MAAM,OAAO;GACnB,QAAQ,MAAM,OAAO;GACrB,MAAM,SAAS,UAAU,GAAG,QAAQ,GAAG,KAAK,cAAc,MAAM;GAGhE,QAAQ,IAAI,0BAA0B,QAAQ,IAAI;GAClD,OAAO,QAAQ,IAAI;GAEnB,MAAM,aAAa,UACjB,CAAC,KAAK,cAAc,IAAI,GACxB,KAAK,SAAS,SAAS,YAAY,GACnC,KAAA,GACA,IACF;GACA,KAAK,YAAY,4BAA4B;EAC/C,UAAU;GACR,QAAQ,IAAI,mBAAmB,QAAQ,IAAI;GAC3C,OAAO,QAAQ,IAAI;GACnB,QAAQ,MAAM,QAAQ;EACxB;CACF;CAEA,wBAAsC;EACpC,IAAI,CAAC,QAAQ,IAAI,4BAA4B;GAC3C,YAAY,eACV,8BACA,KAAK,gBAAgB,CACvB;GAEA,YAAY,UAAU,iCAAiC,KAAK,IAAI,CAAC;EACnE;CACF;CAEA,MAAc,oBAAmC;EAC/C,IAAI;GACF,IAAI,QAAQ,IAAI,+BAA+B,KAAK,gBAAgB,GAClE;GAGF,MAAM,aAAa,MAAM,kBACvB,KAAK,cAAc,oBACnB,KAAK,cAAc,qBACnB,SAAS,YAAY,SAAS,+BAA+B,CAAC,CAChE;GACA,YAAY,MAAM,0BAA0B,WAAW,MAAM;GAC7D,IAAI,WAAW,OAAO,GACpB,KAAK,YAAY,kBAAkB,OAAO,YAAY,UAAU,CAAC;EAErE,SAAS,YAAqB;GAC5B,YAAY,MACV,gCAAgCA,iBAAe,UAAU,GAC3D;EACF;CACF;CAEA,MAAc,sBAAwC;EACpD,IAAI;EAEJ,MAAM,aAAa,QAAQ,IAAI,WAAW,GAAA,CAAI,MAAM,GAAG;EACvD,KAAK,MAAM,YAAY,WAAW;GAChC,MAAM,eAAe,KAAK,KAAK,UAAU,KAAK;GAE9C,IAAI;IACF,MAAM,GAAG,OAAO,cAAc,GAAG,UAAU,IAAI;IAC/C,YAAY,MAAM,gBAAgB,cAAc;IAChD,cAAc;IACd;GACF,QAAQ;IACN,YAAY,MAAM,cAAc,cAAc;GAChD;EACF;EACA,KAAK,QAAQ,mBAAmB,eAAe,EAAE;EAEjD,IAAI,KAAK,cAAc,eAAe,UACpC,OAAO;EAIT,IAD6B,YAAY,SAAS,uBAC3B,MAAM,iBAE3B,OAAO;EAGT,IAAI,gBAAgB,KAAA,GAClB,OAAO;EAET,YAAY,UAAU,yBAAyB,eAAe;EAE9D,QAAQ,KAAK,cAAc,YAA3B;GACE,KAAK;IACH,YAAY,UACV,CACE,uDACA,sFACF,CAAC,CAAC,KAAK,GAAG,CACZ;IACA;GACF,KAAK,QACH,YAAY,QACV,CACE,8DACA,sFACF,CAAC,CAAC,KAAK,GAAG,CACZ;EAEJ;EAEA,OAAO;CACT;CAEA,MAAc,wBAAuC;EACnD,IAAI,SAAS;EAEb,MAAM,UAAmC,CAAC;EAC1C,QAAQ,SAAS;EACjB,QAAQ,YAAY,EAClB,SAAS,SAAS;GAChB,UAAU,KAAK,SAAS;EAC1B,EACF;EAEA,IAAI;GACF,SAAS;GACT,MAAMJ,OAAY,KAAK,OAAO;IAAC;IAAS;IAAQ;GAAQ,GAAG,OAAO;GAClE,KAAK,QAAQ,6BAA6B,MAAM;EAClD,QAAQ;GACN,IAAI;IAEF,SAAS;IACT,MAAMA,OAAY,KAAK,OAAO;KAAC;KAAS;KAAQ;IAAQ,GAAG,OAAO;IAClE,KAAK,QAAQ,6BAA6B,MAAM;GAClD,QAAQ;IACN,KAAK,QAAQ,6BAA6B,MAAM;IAChD;GACF;EACF;EAEA,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,MAAM;GAChC,IAAI,OAAO,YAAY,QAAQ,OAAO,YAAY,GAChD,KAAK,gBAAgB;QAChB,IAAI,OAAO,YAAY,SAAS,OAAO,YAAY,GACxD,KAAK,gBAAgB;QAChB,IAAI,OAAO,YAAY,KAAA,GAC5B,KAAK,QACH,4BACA,6BAA6B,KAAK,UAAU,OAAO,OAAO,GAC5D;GAGF,KAAK,QAAQ,wBAAwB,KAAK,UAAU,OAAO,OAAO,CAAC;EACrE,SAAS,GAAY;GACnB,KAAK,QAAQ,4BAA4BI,iBAAe,CAAC,CAAC;EAC5D;CACF;CAEA,MAAc,sBAAqC;EACjD,IAAI,SAAS;EAEb,IAAI;GACF,CAAC,CAAE,QAAQ,UAAW,MAAMJ,OAAY,cACtC,OACA,CAAC,WAAW,GACZ,EACE,QAAQ,KACV,CACF;GACA,SAAS,OAAO,KAAK,KAAK;EAC5B,QAAQ,CAER;EAEA,KAAK,QAAQ,kBAAkB,MAAM;CACvC;CAEA,MAAc,eAA8B;EAC1C,MAAM,iBAAiB,MAAM,KAAK,QAAQ,kBAAkB;EAC5D,IAAI,mBAAmB,KAAA,GAAW;GAChC,YAAY,MACV,6DACF;GACA,YAAY,MAAM,KAAK,UAAU,KAAK,QAAQ,KAAA,GAAW,CAAC,CAAC;GAC3D;EACF;EAEA,MAAM,QAAQ;GACZ,yBAAS,IAAI,KAAK;GAClB,OAAO,KAAK;EACd;EAEA,IAAI;GACF,OACE,MAAM,KAAK,UAAU,EAAA,CACrB,KAAK,gBAAgB;IACrB,MAAM;IACN,SAAS,EACP,SAAS,+BACX;GACF,CAAC;EACH,SAAS,KAAc;GACrB,KAAK,uBAAuB,GAAG;GAE/B,YAAY,MACV,yCAAyC,eAAe,IAAII,iBAAe,GAAG,GAChF;EACF;EACA,KAAK,SAAS,CAAC;CACjB;AACF;AAEA,SAASA,iBAAe,OAAwB;CAC9C,OAAO,iBAAiB,SAAS,OAAO,SAAS,WAC7C,MAAM,SAAS,IACf,KAAK,UAAU,KAAK;AAC1B;AAEA,SAAS,qBACP,eACwB;CACxB,MAAM,iBAAiB,cAAc,kBAAkB,cAAc;CAErE,MAAM,YAAoC;EACxC,MAAM,cAAc;EACpB;EACA,aAAa,cAAc,eAAe;EAC1C,YAAY,cAAc;EAC1B,oBAAoB,cAAc;EAClC,YAAY,cAAc;EAC1B,oBAAoB,cAAc,sBAAsB;GACtD;GACA;GACA,cAAc;EAChB;EACA,qBACE,cAAc,uBAAuB;CACzC;CAEA,YAAY,MAAM,iBAAiB;CACnC,YAAY,MAAM,KAAK,UAAU,WAAW,KAAA,GAAW,CAAC,CAAC;CAEzD,OAAO;AACT"}
1	+ {"version":3,"file":"index.mjs","names":["exec","os","actionsExec","fs","inputs.getNumberOrUndefined","otel.Telemetry","inputs.getBool","inputs.getBoolOrUndefined","correlation.identify","platform.getArchOs","platform.getNixPlatform","ghActionsCorePlatform\n .getDetails","stringifyError","sourcedef.constructSourceParameters","otel.withSpan","otel.exportEnabled","otel.newTraceparent","otel\n .getTracer","otel.contextFromTraceparent","otel.traceparentOf","otel.otlpExportEnvironment","inputs.getStringOrNull","checksums.sha256OfBuffer","checksums.parseChecksumsFile","checksums.sha256OfFile","ghActionsCorePlatform.platform","ghActionsCorePlatform.arch"],"sources":["../src/linux-release-info.ts","../src/actions-core-platform.ts","../src/checksums.ts","../src/correlation.ts","../src/errors.ts","../src/telemetry.ts","../src/ids-host.ts","../src/inputs.ts","../src/log.ts","../src/platform.ts","../src/sourcedef.ts","../src/index.ts"],"sourcesContent":["/!\n linux-release-info\n * Get Linux release info (distribution name, version, arch, release, etc.)\n * from '/etc/os-release' or '/usr/lib/os-release' files and from native os\n * module. On Windows and Darwin platforms it only returns common node os module\n * info (platform, hostname, release, and arch)\n \n Licensed under MIT\n * Copyright (c) 2018-2020 [Samuel Carreira]\n /\n// NOTE: we depend on this directly to get around some un-fun issues with mixing CommonJS\n// and ESM in the bundle. We've modified the original logic to improve things like typing\n// and fixing ESLint issues. Originally drawn from:\n// https://github.com/samuelcarreira/linux-release-info/blob/84a91aa5442b47900da03020c590507545d3dc74/src/index.ts\nimport fs from \"node:fs\";\nimport os from \"node:os\";\nimport { promisify } from \"node:util\";\n\nconst readFileAsync = promisify(fs.readFile);\n\nexport interface LinuxReleaseInfoOptions {\n /\n read mode, possible values: 'async' and 'sync'\n \n @default 'async'\n /\n mode?: \"async\" \| \"sync\";\n /\n custom complete file path with os info default null/none\n * if not provided the system will search on the '/etc/os-release'\n * and '/usr/lib/os-release' files\n \n @default null\n /\n customFile?: string \| null \| undefined;\n /\n if true, show console debug messages\n \n @default false\n /\n debug?: boolean;\n}\n\nconst linuxReleaseInfoOptionsDefaults: LinuxReleaseInfoOptions = {\n mode: \"async\",\n customFile: null,\n debug: false,\n};\n\n/\n Get OS release info from 'os-release' file and from native os module\n * on Windows or Darwin it only returns common os module info\n * (uses native fs module)\n * @returns {object} info from the current os\n /\nexport function releaseInfo(infoOptions: LinuxReleaseInfoOptions): object {\n const options = { ...linuxReleaseInfoOptionsDefaults, ...infoOptions };\n\n const searchOsReleaseFileList: string[] = osReleaseFileList(\n options.customFile,\n );\n\n if (os.type() !== \"Linux\") {\n if (options.mode === \"sync\") {\n return getOsInfo();\n } else {\n return Promise.resolve(getOsInfo());\n }\n }\n\n if (options.mode === \"sync\") {\n return readSyncOsreleaseFile(searchOsReleaseFileList, options);\n } else {\n return Promise.resolve(\n readAsyncOsReleaseFile(searchOsReleaseFileList, options),\n );\n }\n}\n\n/\n Format file data: convert data to object keys/values\n \n @param {object} sourceData Source object to be appended\n * @param {string} srcParseData Input file data to be parsed\n * @returns {object} Formated object\n /\nfunction formatFileData(sourceData: OsInfo, srcParseData: string): OsInfo {\n const lines: string[] = srcParseData.split(\"\\n\");\n\n for (const line of lines) {\n const lineData = line.split(\"=\");\n\n if (lineData.length === 2) {\n lineData[1] = lineData[1].replace(/[\"'\\r]/gi, \"\"); // remove quotes and return character\n\n Object.defineProperty(sourceData, lineData[0].toLowerCase(), {\n value: lineData[1],\n writable: true,\n enumerable: true,\n configurable: true,\n });\n }\n }\n\n return sourceData;\n}\n\n/\n Export a list of os-release files\n \n @param {string} customFile optional custom complete filepath\n * @returns {array} list of os-release files\n /\nfunction osReleaseFileList(customFile: string \| null \| undefined): string[] {\n const DEFAULT_OS_RELEASE_FILES = [\"/etc/os-release\", \"/usr/lib/os-release\"];\n\n if (!customFile) {\n return DEFAULT_OS_RELEASE_FILES;\n } else {\n return Array(customFile);\n }\n}\n\n/\n Operating system info.\n /\ntype OsInfo = {\n type: string;\n platform: string;\n hostname: string;\n arch: string;\n release: string;\n};\n\n/\n Get OS Basic Info\n * (uses node 'os' native module)\n \n @returns {OsInfo} os basic info\n /\nfunction getOsInfo(): OsInfo {\n return {\n type: os.type(),\n platform: os.platform(),\n hostname: os.hostname(),\n arch: os.arch(),\n release: os.release(),\n };\n}\n\n/ Helper functions /\n\nasync function readAsyncOsReleaseFile(\n fileList: string[],\n options: LinuxReleaseInfoOptions,\n): Promise<OsInfo> {\n let fileData = null;\n\n for (const osReleaseFile of fileList) {\n try {\n if (options.debug) {\n / eslint-disable no-console /\n console.log(`Trying to read '${osReleaseFile}'...`);\n }\n\n fileData = await readFileAsync(osReleaseFile, \"binary\");\n\n if (options.debug) {\n console.log(`Read data:\\n${fileData}`);\n }\n\n break;\n } catch (error) {\n if (options.debug) {\n console.error(error);\n }\n }\n }\n\n if (fileData === null) {\n throw new Error(\"Cannot read os-release file!\");\n //return getOsInfo();\n }\n\n return formatFileData(getOsInfo(), fileData);\n}\n\nfunction readSyncOsreleaseFile(\n releaseFileList: string[],\n options: LinuxReleaseInfoOptions,\n): OsInfo {\n let fileData = null;\n\n for (const osReleaseFile of releaseFileList) {\n try {\n if (options.debug) {\n console.log(`Trying to read '${osReleaseFile}'...`);\n }\n\n fileData = fs.readFileSync(osReleaseFile, \"binary\");\n\n if (options.debug) {\n console.log(`Read data:\\n${fileData}`);\n }\n\n break;\n } catch (error) {\n if (options.debug) {\n console.error(error);\n }\n }\n }\n\n if (fileData === null) {\n throw new Error(\"Cannot read os-release file!\");\n //return getOsInfo();\n }\n\n return formatFileData(getOsInfo(), fileData);\n}\n","// MIT, mostly lifted from https://github.com/actions/toolkit/blob/5a736647a123ecf8582376bdaee833fbae5b3847/packages/core/src/platform.ts\n// since it isn't in @actions/core 1.10.1 which is their current release as 2024-04-19.\n// Changes: Replaced the lsb_release call in Linux with `linux-release-info` to parse the os-release file directly.\nimport { releaseInfo } from \"./linux-release-info.js\";\nimport as actionsCore from \"@actions/core\";\nimport * as exec from \"@actions/exec\";\nimport os from \"os\";\n\n/*\n The name and version of the Action runner's system.\n /\ntype SystemInfo = {\n name: string;\n version: string;\n};\n\n/\n Get the name and version of the current Windows system.\n /\nconst getWindowsInfo = async (): Promise<SystemInfo> => {\n const { stdout: version } = await exec.getExecOutput(\n 'powershell -command \"(Get-CimInstance -ClassName Win32_OperatingSystem).Version\"',\n undefined,\n {\n silent: true,\n },\n );\n\n const { stdout: name } = await exec.getExecOutput(\n 'powershell -command \"(Get-CimInstance -ClassName Win32_OperatingSystem).Caption\"',\n undefined,\n {\n silent: true,\n },\n );\n\n return {\n name: name.trim(),\n version: version.trim(),\n };\n};\n\n/\n Get the name and version of the current macOS system.\n /\nconst getMacOsInfo = async (): Promise<SystemInfo> => {\n const { stdout } = await exec.getExecOutput(\"sw_vers\", undefined, {\n silent: true,\n });\n\n const version = stdout.match(/ProductVersion:\\s(.+)/)?.[1] ?? \"\";\n const name = stdout.match(/ProductName:\\s(.+)/)?.[1] ?? \"\";\n\n return {\n name,\n version,\n };\n};\n\n/\n Get the name and version of the current Linux system.\n /\nconst getLinuxInfo = async (): Promise<SystemInfo> => {\n let data: object = {};\n\n try {\n data = releaseInfo({ mode: \"sync\" });\n actionsCore.debug(`Identified release info: ${JSON.stringify(data)}`);\n } catch (e) {\n actionsCore.debug(`Error collecting release info: ${e}`);\n }\n\n return {\n name: getPropertyViaWithDefault(\n data,\n [\"id\", \"name\", \"pretty_name\", \"id_like\"],\n \"unknown\",\n ),\n version: getPropertyViaWithDefault(\n data,\n [\"version_id\", \"version\", \"version_codename\"],\n \"unknown\",\n ),\n };\n};\n\nfunction getPropertyViaWithDefault<T, Property extends string>(\n data: object,\n names: Property[],\n defaultValue: T,\n): T {\n for (const name of names) {\n const ret: T = getPropertyWithDefault(data, name, defaultValue);\n\n if (ret !== defaultValue) {\n return ret;\n }\n }\n\n return defaultValue;\n}\n\nfunction getPropertyWithDefault<T, Property extends string>(\n data: object,\n name: Property,\n defaultValue: T,\n): T {\n if (!data.hasOwnProperty(name)) {\n return defaultValue;\n }\n\n const value = (data as { [K in Property]: T })[name];\n\n // NB. this check won't work for object instances\n if (typeof value !== typeof defaultValue) {\n return defaultValue;\n }\n\n return value;\n}\n\n/\n The Action runner's platform.\n /\nexport const platform = os.platform();\n\n/\n The Action runner's architecture.\n /\nexport const arch = os.arch();\n\n/\n Whether the Action runner is a Windows system.\n /\nexport const isWindows = platform === \"win32\";\n\n/\n Whether the Action runner is a macOS system.\n /\nexport const isMacOS = platform === \"darwin\";\n\n/\n Whether the Action runner is a Linux system.\n /\nexport const isLinux = platform === \"linux\";\n\n/\n System-level information about the current host (platform, architecture, etc.).\n /\ntype SystemDetails = {\n name: string;\n platform: string;\n arch: string;\n version: string;\n isWindows: boolean;\n isMacOS: boolean;\n isLinux: boolean;\n};\n\n/\n Get system-level information about the current host (platform, architecture, etc.).\n /\nexport async function getDetails(): Promise<SystemDetails> {\n return {\n ...(await (isWindows\n ? getWindowsInfo()\n : isMacOS\n ? getMacOsInfo()\n : getLinuxInfo())),\n platform,\n arch,\n isWindows,\n isMacOS,\n isLinux,\n };\n}\n","/\n @packageDocumentation\n * Parsing and hashing helpers for `shasum`-format checksum files, used to\n * hash-lock downloaded artifacts.\n /\nimport { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\n\nconst HEX_STRING_RE = /^[0-9a-fA-F]+$/;\n\n/\n Parse a `shasum`-format checksums file into a map of filename -> hex digest.\n \n Each non-empty line has the shape `<hex-digest><space(s)><filename>`. Lines\n * without a space delimiter are skipped. Invalid hex digests throw, so a\n * malformed file fails loudly rather than silently skipping the entry we\n * care about.\n /\nexport function parseChecksumsFile(text: string): Map<string, string> {\n const result = new Map<string, string>();\n\n for (const record of text.split(/\\r\\n\|\\n\|\\r/).filter(Boolean)) {\n const delimIndex = record.indexOf(\" \");\n if (delimIndex === -1) {\n continue;\n }\n\n const digest = record.slice(0, delimIndex);\n if (!HEX_STRING_RE.test(digest)) {\n throw new Error(`Invalid digest in checksums file: ${digest}`);\n }\n\n const name = record.slice(delimIndex + 1).trim();\n if (name === \"\") {\n continue;\n }\n\n result.set(name, digest.toLowerCase());\n }\n\n return result;\n}\n\n/\n Compute the SHA-256 of a file on disk and return its lowercase hex digest.\n * Streams the file so memory use is constant regardless of size.\n /\nexport async function sha256OfFile(filePath: string): Promise<string> {\n return new Promise((resolve, reject) => {\n const hash = createHash(\"sha256\").setEncoding(\"hex\");\n createReadStream(filePath)\n .once(\"error\", reject)\n .pipe(hash)\n .once(\"finish\", () => resolve(hash.read() as string));\n });\n}\n\n/\n Compute the SHA-256 of an in-memory buffer or string and return its\n * lowercase hex digest.\n /\nexport function sha256OfBuffer(data: Buffer \| string): string {\n return createHash(\"sha256\").update(data).digest(\"hex\");\n}\n","import as actionsCore from \"@actions/core\";\nimport { createHash, randomUUID } from \"node:crypto\";\n\nconst OPTIONAL_VARIABLES = [\"INVOCATION_ID\"];\n\n/* eslint-disable camelcase /\n/\n The hashed, non-identifying description of this run.\n \n Two consumers fix these names. The check-in evaluates feature flags against\n * them, and the programs an Action runs read them from\n * `$DETSYS_CORRELATION`. The OpenTelemetry data carries the same values under\n * `detsys.` attribute names.\n /\nexport type CorrelationProperties = {\n $anon_distinct_id: string;\n $groups: Record<string, string \| undefined>;\n $session_id?: string;\n correlation_source: string;\n github_repository_hash?: string;\n github_workflow_hash?: string;\n github_workflow_job_hash?: string;\n github_workflow_run_differentiator_hash?: string;\n github_workflow_run_hash?: string;\n is_ci: boolean;\n};\n\nexport function identify(): CorrelationProperties {\n const repository = hashEnvironmentVariables(\"GHR\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n ]);\n\n const run_differentiator = hashEnvironmentVariables(\"GHWJA\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n \"GITHUB_JOB\",\n \"GITHUB_RUN_ID\",\n \"GITHUB_RUN_NUMBER\",\n \"GITHUB_RUN_ATTEMPT\",\n \"INVOCATION_ID\",\n ]);\n\n const ident: CorrelationProperties = {\n $anon_distinct_id: process.env[\"RUNNER_TRACKING_ID\"] \|\| randomUUID(),\n\n correlation_source: \"github-actions\",\n\n github_repository_hash: repository,\n github_workflow_hash: hashEnvironmentVariables(\"GHW\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n ]),\n github_workflow_job_hash: hashEnvironmentVariables(\"GHWJ\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n \"GITHUB_JOB\",\n ]),\n github_workflow_run_hash: hashEnvironmentVariables(\"GHWJR\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n \"GITHUB_REPOSITORY\",\n \"GITHUB_REPOSITORY_ID\",\n \"GITHUB_WORKFLOW\",\n \"GITHUB_JOB\",\n \"GITHUB_RUN_ID\",\n ]),\n github_workflow_run_differentiator_hash: run_differentiator,\n $session_id: run_differentiator,\n $groups: {\n github_repository: repository,\n github_organization: hashEnvironmentVariables(\"GHO\", [\n \"GITHUB_SERVER_URL\",\n \"GITHUB_REPOSITORY_OWNER\",\n \"GITHUB_REPOSITORY_OWNER_ID\",\n ]),\n },\n is_ci: true,\n };\n\n actionsCore.debug(\"Correlation data:\");\n actionsCore.debug(JSON.stringify(ident, null, 2));\n\n return ident;\n}\n\nfunction hashEnvironmentVariables(\n prefix: string,\n variables: string[],\n): undefined \| string {\n const hash = createHash(\"sha256\");\n\n for (const varName of variables) {\n let value = process.env[varName];\n\n if (value === undefined) {\n if (OPTIONAL_VARIABLES.includes(varName)) {\n actionsCore.debug(\n `Optional environment variable not set: ${varName} -- substituting with the variable name`,\n );\n value = varName;\n } else {\n actionsCore.debug(\n `Environment variable not set: ${varName} -- can't generate the requested identity`,\n );\n return undefined;\n }\n }\n\n hash.update(value);\n hash.update(\"\\0\");\n }\n\n return `${prefix}-${hash.digest(\"hex\")}`;\n}\n","/\n Coerce a value of type `unknown` into a string.\n /\nexport function stringifyError(e: unknown): string {\n if (e instanceof Error) {\n return e.message;\n } else if (typeof e === \"string\") {\n return e;\n } else {\n return JSON.stringify(e);\n }\n}\n","/\n @packageDocumentation\n * OpenTelemetry traces and logs for Determinate Systems' GitHub Actions.\n \n The OpenTelemetry API is a no-op until a provider is registered globally.\n * That means instrumentation call sites -- spans, log records -- can be\n * written unconditionally: when export is disabled they cost nothing and no\n * branching is needed at the call site.\n \n The SDK configures itself from the standard `OTEL_` environment variables.\n This module only supplies defaults for the variables the user has not set,\n * so every documented OpenTelemetry knob works here as it does anywhere else.\n /\nimport { stringifyError } from \"./errors.js\";\nimport as actionsCore from \"@actions/core\";\nimport * as otelApi from \"@opentelemetry/api\";\nimport { type Logger, SeverityNumber, logs } from \"@opentelemetry/api-logs\";\nimport { AsyncLocalStorageContextManager } from \"@opentelemetry/context-async-hooks\";\nimport * as otelCore from \"@opentelemetry/core\";\nimport { OTLPLogExporter } from \"@opentelemetry/exporter-logs-otlp-http\";\nimport { OTLPTraceExporter } from \"@opentelemetry/exporter-trace-otlp-http\";\nimport * as otelResources from \"@opentelemetry/resources\";\nimport * as sdkLogs from \"@opentelemetry/sdk-logs\";\nimport * as sdkTrace from \"@opentelemetry/sdk-trace-base\";\nimport * as semconv from \"@opentelemetry/semantic-conventions\";\nimport { randomBytes } from \"node:crypto\";\n\n/** The instrumentation scope name for everything this library emits. /\nexport const SCOPE_NAME = \"detsys-ts\";\n\n/* The version reported as the instrumentation scope's version. /\nexport const LIBRARY_VERSION = \"1.0\";\n\n/\n The OTLP/HTTP collector for all Actions.\n * The exporters add `/v1/traces` and `/v1/logs` to this URL.\n \n This collector is a fixed service.\n * It is not one of the install.determinate.systems backends.\n * Thus it does not use their SRV failover.\n /\nconst DEFAULT_OTLP_ENDPOINT = \"https://otel.determinate.systems\";\n\n/\n The token for {@link DEFAULT_OTLP_ENDPOINT}.\n * The exporters send it as `Authorization: Bearer <token>`.\n * That is the default scheme of the collector's `bearertokenauth` extension.\n \n This token is public.\n * It ships in `dist/`, on npm, and in each workflow that uses this library.\n * It permits telemetry writes and no other operation.\n * Change it in the collector configuration and in this file at the same time.\n /\nconst OTLP_INGEST_TOKEN =\n \"8bfa2d8b689352981286f0149c4e55cc0dff30a4f7a735b560e31479904a74e1\";\n\n/\n How long to wait for buffered spans and logs to reach the collector before\n * giving up. The Action's process exits immediately afterward, so this is a\n * hard ceiling on how much a slow collector can delay a workflow.\n /\nconst SHUTDOWN_TIMEOUT_MS = 5_000;\n\n/\n The default for `OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT`.\n \n The SDK's own default is unlimited. Attributes here can carry pasted\n * command output and other unbounded text, which the collector should not\n * have to absorb, so cap them. File-sized payloads go out as log records\n * instead: a log record's body is not an attribute and is not truncated.\n /\nconst DEFAULT_ATTRIBUTE_VALUE_LENGTH_LIMIT = 8_192;\n\n/* The OTLP environment variables a child process inherits from this run. /\nconst OTLP_EXPORT_VARIABLES = [\n \"OTEL_EXPORTER_OTLP_ENDPOINT\",\n \"OTEL_EXPORTER_OTLP_HEADERS\",\n \"OTEL_EXPORTER_OTLP_COMPRESSION\",\n] as const;\n\n/\n Our own propagator instance, rather than the global one.\n \n The global propagator only exists once {@link Telemetry.start} has\n * registered it, which would make traceparent handling silently depend on\n * start-up ordering. Owning an instance keeps {@link traceparentOf} and {@link\n * contextFromTraceparent} correct no matter when they're called.\n /\nconst PROPAGATOR = new otelCore.W3CTraceContextPropagator();\n\n/* The severities we map GitHub Actions' log levels onto. /\nexport type LogLevel = \"debug\" \| \"info\" \| \"notice\" \| \"warning\" \| \"error\";\n\nconst SEVERITY: Record<LogLevel, SeverityNumber> = {\n debug: SeverityNumber.DEBUG,\n info: SeverityNumber.INFO,\n notice: SeverityNumber.INFO2,\n warning: SeverityNumber.WARN,\n error: SeverityNumber.ERROR,\n};\n\nexport type TelemetryOptions = {\n /* The `service.name` for this run, unless `OTEL_SERVICE_NAME` overrides it. /\n serviceName: string;\n\n /* The `service.version` for this run, when it is known. /\n serviceVersion?: string;\n\n /* Resource attributes for this run, added to each span and log record. /\n resourceAttributes: otelApi.Attributes;\n};\n\n/\n Whether this run exports telemetry at all.\n \n `OTEL_SDK_DISABLED=true` is the standard way to turn the export off. An\n * empty `OTEL_EXPORTER_OTLP_ENDPOINT` does the same, which is what this\n * library documented before `OTEL_SDK_DISABLED` was in the specification.\n /\nexport function exportEnabled(): boolean {\n if (otelCore.getBooleanFromEnv(\"OTEL_SDK_DISABLED\")) {\n return false;\n }\n\n const endpoint = process.env[\"OTEL_EXPORTER_OTLP_ENDPOINT\"];\n if (endpoint !== undefined && endpoint.trim() === \"\") {\n return false;\n }\n\n return true;\n}\n\n/\n Fill in the `OTEL_` variables this run needs and the user has not set.\n \n * From here on the exporters read their whole configuration from the\n * environment, exactly as they would in any other OpenTelemetry program.\n * Child processes inherit the same variables, so their telemetry reaches the\n * same collector without any further arrangement.\n /\nexport function applyOtlpEnvironmentDefaults(): void {\n if (otelCore.getStringFromEnv(\"OTEL_EXPORTER_OTLP_ENDPOINT\") === undefined) {\n process.env[\"OTEL_EXPORTER_OTLP_ENDPOINT\"] = DEFAULT_OTLP_ENDPOINT;\n }\n\n if (exportsToDefaultCollector()) {\n // The collector refuses data that carries no token. Leave a token the\n // user supplied alone: theirs is the one they meant to use.\n const headers = otelCore.parseKeyPairsIntoRecord(\n otelCore.getStringFromEnv(\"OTEL_EXPORTER_OTLP_HEADERS\"),\n );\n\n const authorized = Object.keys(headers).some(\n (name) => name.toLowerCase() === \"authorization\",\n );\n\n if (!authorized) {\n headers[\"Authorization\"] = `Bearer ${OTLP_INGEST_TOKEN}`;\n process.env[\"OTEL_EXPORTER_OTLP_HEADERS\"] = encodeOtlpHeaders(headers);\n }\n }\n\n if (\n otelCore.getStringFromEnv(\"OTEL_EXPORTER_OTLP_COMPRESSION\") === undefined\n ) {\n // Installer logs go out as log records, so the bodies are large and\n // highly compressible.\n process.env[\"OTEL_EXPORTER_OTLP_COMPRESSION\"] = \"gzip\";\n }\n\n if (\n otelCore.getNumberFromEnv(\"OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT\") === undefined\n ) {\n process.env[\"OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT\"] =\n `${DEFAULT_ATTRIBUTE_VALUE_LENGTH_LIMIT}`;\n }\n}\n\n/\n Whether this run sends its data to {@link DEFAULT_OTLP_ENDPOINT}.\n \n Only that collector gets {@link OTLP_INGEST_TOKEN}. A collector the user\n * chose must not receive our credentials.\n /\nfunction exportsToDefaultCollector(): boolean {\n const endpoint = otelCore.getStringFromEnv(\"OTEL_EXPORTER_OTLP_ENDPOINT\");\n\n if (endpoint === undefined) {\n return false;\n }\n\n try {\n return (\n new URL(endpoint).toString() === new URL(DEFAULT_OTLP_ENDPOINT).toString()\n );\n } catch {\n return false;\n }\n}\n\n/\n The OTLP variables in the environment, for a child process that does not\n * inherit ours.\n /\nexport function otlpExportEnvironment(): Record<string, string> {\n const environment: Record<string, string> = {};\n\n for (const name of OTLP_EXPORT_VARIABLES) {\n const value = otelCore.getStringFromEnv(name);\n if (value !== undefined) {\n environment[name] = value;\n }\n }\n\n return environment;\n}\n\n/\n Make the value of `OTEL_EXPORTER_OTLP_HEADERS`.\n \n The variable uses the W3C baggage format.\n * The reader decodes each percent-encoded value.\n * Thus you must encode the space in `Bearer <token>`.\n * If you do not encode it, the scheme and the token become two entries.\n /\nexport function encodeOtlpHeaders(headers: Record<string, string>): string {\n return Object.entries(headers)\n .map(\n ([name, value]) =>\n `${encodeURIComponent(name)}=${encodeURIComponent(value)}`,\n )\n .join(\",\");\n}\n\n/\n The generator of the trace and span IDs of this run.\n \n It makes random IDs, as the default generator does.\n * It can also give one span an identity that you supply.\n * That is how a span that one process announces starts in a different process.\n * See {@link Telemetry.startAnnouncedSpan}.\n /\nclass PinnedIdGenerator implements sdkTrace.IdGenerator {\n private traceId?: string;\n private spanId?: string;\n\n /* Give the next span this identity. /\n pin(traceId: string, spanId: string): void {\n this.traceId = traceId;\n this.spanId = spanId;\n }\n\n /* Give each subsequent span a random identity again. /\n unpin(): void {\n this.traceId = undefined;\n this.spanId = undefined;\n }\n\n generateTraceId(): string {\n return this.traceId ?? randomHex(16);\n }\n\n generateSpanId(): string {\n return this.spanId ?? randomHex(8);\n }\n}\n\n/\n Owns the OpenTelemetry SDK's lifecycle. Constructing this does nothing on\n * its own; `start()` registers the global providers and `shutdown()` flushes\n * whatever is buffered.\n /\nexport class Telemetry {\n private tracerProvider?: sdkTrace.BasicTracerProvider;\n private loggerProvider?: sdkLogs.LoggerProvider;\n private idGenerator?: PinnedIdGenerator;\n\n /* Whether OTLP export is actually running. /\n get enabled(): boolean {\n return this.tracerProvider !== undefined;\n }\n\n /\n Register the global tracer and logger providers.\n \n Safe to call at most once. If it throws, telemetry stays disabled and the\n * Action carries on: instrumentation degrades to the API's no-ops rather\n * than failing the workflow.\n /\n start(options: TelemetryOptions): void {\n if (this.enabled \|\| !exportEnabled()) {\n return;\n }\n\n try {\n applyOtlpEnvironmentDefaults();\n\n // `envDetector` comes last, so `OTEL_SERVICE_NAME` and\n // `OTEL_RESOURCE_ATTRIBUTES` win over what the Action decided.\n const resource = otelResources\n .defaultResource()\n .merge(\n otelResources.resourceFromAttributes({\n [semconv.ATTR_SERVICE_NAME]: options.serviceName,\n ...(options.serviceVersion === undefined\n ? {}\n : { [semconv.ATTR_SERVICE_VERSION]: options.serviceVersion }),\n ...options.resourceAttributes,\n }),\n )\n .merge(\n otelResources.detectResources({\n detectors: [otelResources.envDetector],\n }),\n );\n\n this.idGenerator = new PinnedIdGenerator();\n\n // The exporters read the endpoint, the headers, the compression, and\n // the timeouts from the environment.\n this.tracerProvider = new sdkTrace.BasicTracerProvider({\n resource,\n idGenerator: this.idGenerator,\n spanProcessors: [\n new sdkTrace.BatchSpanProcessor(new OTLPTraceExporter()),\n ],\n });\n\n this.loggerProvider = new sdkLogs.LoggerProvider({\n resource,\n // Unlike the tracer provider, this one does not read the limit from\n // the environment itself.\n logRecordLimits: {\n attributeValueLengthLimit: otelCore.getNumberFromEnv(\n \"OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT\",\n ),\n },\n processors: [\n new sdkLogs.BatchLogRecordProcessor({\n exporter: new OTLPLogExporter(),\n }),\n ],\n });\n\n // AsyncLocalStorage keeps the active span attached across `await`s, so\n // nested spans parent themselves correctly without threading a Context\n // argument through every function.\n otelApi.context.setGlobalContextManager(\n new AsyncLocalStorageContextManager().enable(),\n );\n otelApi.propagation.setGlobalPropagator(PROPAGATOR);\n otelApi.trace.setGlobalTracerProvider(this.tracerProvider);\n logs.setGlobalLoggerProvider(this.loggerProvider);\n\n actionsCore.debug(\n `OpenTelemetry export enabled to ${otelCore.getStringFromEnv(\"OTEL_EXPORTER_OTLP_ENDPOINT\")}`,\n );\n } catch (e: unknown) {\n this.tracerProvider = undefined;\n this.loggerProvider = undefined;\n this.idGenerator = undefined;\n actionsCore.debug(\n `Failed to start OpenTelemetry export, continuing without it: ${stringifyError(e)}`,\n );\n }\n }\n\n /\n Start the span that {@link newTraceparent} announced.\n \n A workflow job runs each Action as a process of its own.\n * Thus a span that covers more than one Action can only start in one of them.\n * The Action that announces such a span makes its identity known first, and\n * starts the span itself last, in the process that runs at the end.\n * The spans that already point at that identity then find their parent.\n \n The span starts at `startTime`, which is the moment of the announcement.\n * It is a child of the span in `parentContext`, and a root span if that\n * context holds no span.\n \n Returns undefined if the export is off, or if `traceparent` does not name a\n * usable span.\n /\n startAnnouncedSpan(\n name: string,\n traceparent: string,\n startTime: Date,\n parentContext: otelApi.Context = otelApi.ROOT_CONTEXT,\n ): otelApi.Span \| undefined {\n const generator = this.idGenerator;\n const spanContext = otelApi.trace.getSpanContext(\n contextFromTraceparent(traceparent),\n );\n\n if (\n generator === undefined \|\|\n this.tracerProvider === undefined \|\|\n spanContext === undefined \|\|\n !otelApi.isSpanContextValid(spanContext)\n ) {\n return undefined;\n }\n\n // The tracer comes from this provider, and not from the global one,\n // because the identity is pinned in this provider's ID generator.\n const tracer = this.tracerProvider.getTracer(SCOPE_NAME, LIBRARY_VERSION);\n\n try {\n generator.pin(spanContext.traceId, spanContext.spanId);\n return tracer.startSpan(name, { startTime }, parentContext);\n } finally {\n generator.unpin();\n }\n }\n\n /\n Flush buffered spans and logs and tear the SDK down.\n \n Never throws and never hangs: the Action calls this on its way out, so a\n * broken or slow collector must not be able to fail or stall the workflow.\n /\n async shutdown(): Promise<void> {\n const providers = [this.tracerProvider, this.loggerProvider].flatMap(\n (p) => p ?? [],\n );\n\n if (providers.length === 0) {\n return;\n }\n\n try {\n await withTimeout(\n Promise.all(providers.map(async (p) => p.shutdown())),\n SHUTDOWN_TIMEOUT_MS,\n );\n } catch (e: unknown) {\n actionsCore.debug(\n `Error flushing OpenTelemetry data: ${stringifyError(e)}`,\n );\n } finally {\n this.tracerProvider = undefined;\n this.loggerProvider = undefined;\n this.idGenerator = undefined;\n }\n }\n}\n\n/\n The tracer for this library. Returns a no-op tracer until {@link\n * Telemetry.start} has run, so this is always safe to call.\n /\nexport function getTracer(): otelApi.Tracer {\n return otelApi.trace.getTracer(SCOPE_NAME, LIBRARY_VERSION);\n}\n\n/\n The logger for this library. Returns a no-op logger until {@link\n * Telemetry.start} has run, so this is always safe to call.\n /\nexport function getLogger(): Logger {\n return logs.getLogger(SCOPE_NAME, LIBRARY_VERSION);\n}\n\n/\n Emit a log record at `level`, correlated to whatever span is currently\n * active.\n /\nexport function emitLogRecord(\n level: LogLevel,\n message: string,\n attributes?: otelApi.Attributes,\n): void {\n getLogger().emit({\n severityNumber: SEVERITY[level],\n severityText: level.toUpperCase(),\n body: message,\n attributes,\n context: otelApi.context.active(),\n });\n}\n\n/\n Serialize a span as a W3C `traceparent` header value, suitable for stashing\n * in the Action's state or handing to a child process.\n \n Returns undefined when telemetry is disabled, since the no-op span's context\n * is all zeroes and would not be a valid parent.\n /\nexport function traceparentOf(\n span: otelApi.Span \| undefined,\n): string \| undefined {\n if (span === undefined \|\| !otelApi.isSpanContextValid(span.spanContext())) {\n return undefined;\n }\n\n const carrier: Record<string, string> = {};\n PROPAGATOR.inject(\n otelApi.trace.setSpan(otelApi.ROOT_CONTEXT, span),\n carrier,\n otelApi.defaultTextMapSetter,\n );\n\n return carrier[\"traceparent\"];\n}\n\n/\n Make the identity of a span, but do not start the span.\n \n Announce the result to whatever must point at the span before it starts:\n * a different process, or a request this process makes too early to record.\n * Start the span itself with {@link Telemetry.startAnnouncedSpan}.\n \n The span is in the trace of `parent`, or in a new trace of its own if there\n * is no usable parent.\n * A new trace is sampled, because a process that only forwards an identity\n * cannot ask the sampler, and an unsampled parent would discard the work of\n * each process that joins.\n /\nexport function newTraceparent(parent?: string): string {\n const parentContext = otelApi.trace.getSpanContext(\n contextFromTraceparent(parent),\n );\n\n if (\n parentContext !== undefined &&\n otelApi.isSpanContextValid(parentContext)\n ) {\n const flags = parentContext.traceFlags.toString(16).padStart(2, \"0\");\n return `00-${parentContext.traceId}-${randomHex(8)}-${flags}`;\n }\n\n return `00-${randomHex(16)}-${randomHex(8)}-01`;\n}\n\n/\n The W3C trace context headers of the operation in progress, for an outgoing\n * HTTP request.\n \n Put these headers on the request.\n * The service that answers it can then put its own work in this trace.\n \n The headers describe the span that is active now.\n * When no span is active yet -- a request the Action makes before it starts a\n * span of its own -- they describe the span that `$TRACEPARENT` names, which is\n * the span the Action announced, or the span of the workflow job.\n \n The result is empty when the export is off.\n * A no-op span's context is all zeroes, and is not a valid parent.\n /\nexport function traceContextHeaders(): Record<string, string> {\n const active = otelApi.context.active();\n const context =\n otelApi.trace.getSpanContext(active) === undefined\n ? contextFromTraceparent(process.env[\"TRACEPARENT\"])\n : active;\n\n const carrier: Record<string, string> = {};\n PROPAGATOR.inject(context, carrier, otelApi.defaultTextMapSetter);\n\n return carrier;\n}\n\n/\n Rebuild a Context from a W3C `traceparent` value, so a span started in one\n * process can parent spans started in another. Falls back to the root context\n * when `traceparent` is absent or unparseable.\n /\nexport function contextFromTraceparent(\n traceparent: string \| undefined,\n): otelApi.Context {\n if (traceparent === undefined \|\| traceparent === \"\") {\n return otelApi.ROOT_CONTEXT;\n }\n\n return PROPAGATOR.extract(\n otelApi.ROOT_CONTEXT,\n { traceparent },\n otelApi.defaultTextMapGetter,\n );\n}\n\n/\n Mark `span` as failed and attach the exception to it.\n /\nexport function recordSpanError(span: otelApi.Span, error: unknown): void {\n span.recordException(\n error instanceof Error ? error : new Error(stringifyError(error)),\n );\n span.setStatus({\n code: otelApi.SpanStatusCode.ERROR,\n message: stringifyError(error),\n });\n}\n\n/\n Run `fn` inside a new active span, ending the span when it settles and\n * marking it failed if it throws. The error is always re-thrown: this records,\n * it does not swallow.\n /\nexport async function withSpan<T>(\n name: string,\n fn: (span: otelApi.Span) => Promise<T>,\n attributes?: otelApi.Attributes,\n): Promise<T> {\n return await getTracer().startActiveSpan(\n name,\n { attributes },\n async (span) => {\n try {\n return await fn(span);\n } catch (e: unknown) {\n recordSpanError(span, e);\n throw e;\n } finally {\n span.end();\n }\n },\n );\n}\n\n/* A random ID of `bytes` bytes, in the lowercase hex the W3C format uses. /\nfunction randomHex(bytes: number): string {\n return randomBytes(bytes).toString(\"hex\");\n}\n\n/* Reject if `promise` has not settled within `timeoutMs`. /\nasync function withTimeout<T>(\n promise: Promise<T>,\n timeoutMs: number,\n): Promise<T> {\n let timer: ReturnType<typeof setTimeout> \| undefined;\n\n try {\n return await Promise.race([\n promise,\n new Promise<never>((_resolve, reject) => {\n timer = setTimeout(\n () => reject(new Error(`timed out after ${timeoutMs}ms`)),\n timeoutMs,\n );\n }),\n ]);\n } finally {\n if (timer !== undefined) {\n clearTimeout(timer);\n }\n }\n}\n","/\n @packageDocumentation\n * Identifies and discovers backend servers for install.determinate.systems\n /\nimport { stringifyError } from \"./errors.js\";\nimport { traceContextHeaders } from \"./telemetry.js\";\nimport as actionsCore from \"@actions/core\";\nimport got, { type Got } from \"got\";\nimport type { SrvRecord } from \"node:dns\";\nimport { resolveSrv } from \"node:dns/promises\";\n\nconst DEFAULT_LOOKUP = \"_detsys_ids._tcp.install.determinate.systems.\";\nconst ALLOWED_SUFFIXES = [\n \".install.determinate.systems\",\n \".install.detsys.dev\",\n];\n\nconst DEFAULT_IDS_HOST = \"https://install.determinate.systems\";\nconst LOOKUP = process.env[\"IDS_LOOKUP\"] ?? DEFAULT_LOOKUP;\n\nconst DEFAULT_TIMEOUT = 10_000; // 10 seconds in ms\n\n/*\n Host information for install.determinate.systems.\n /\nexport class IdsHost {\n private idsProjectName: string;\n private diagnosticsSuffix?: string;\n private runtimeDiagnosticsUrl?: string;\n private prioritizedURLs?: URL[];\n private client?: Got;\n private timeout: number;\n\n constructor(\n idsProjectName: string,\n diagnosticsSuffix: string \| undefined,\n runtimeDiagnosticsUrl: string \| undefined,\n timeout: number = DEFAULT_TIMEOUT,\n ) {\n this.idsProjectName = idsProjectName;\n this.diagnosticsSuffix = diagnosticsSuffix;\n this.runtimeDiagnosticsUrl = runtimeDiagnosticsUrl;\n this.client = undefined;\n this.timeout = timeout;\n }\n\n async getGot(\n recordFailoverCallback?: (\n incitingError: unknown,\n prevUrl: URL,\n nextUrl: URL,\n ) => void,\n ): Promise<Got> {\n if (this.client === undefined) {\n this.client = got.extend({\n timeout: {\n request: this.timeout,\n },\n\n retry: {\n limit: Math.max((await this.getUrlsByPreference()).length, 3),\n methods: [\"GET\", \"HEAD\"],\n },\n\n hooks: {\n beforeRetry: [\n async (error, retryCount) => {\n const prevUrl = await this.getRootUrl();\n this.markCurrentHostBroken();\n const nextUrl = await this.getRootUrl();\n\n if (recordFailoverCallback !== undefined) {\n recordFailoverCallback(error, prevUrl, nextUrl);\n }\n\n actionsCore.info(\n `Retrying after error ${error.code}, retry #: ${retryCount}`,\n );\n },\n ],\n\n beforeRequest: [\n async (options) => {\n // Send the trace context, so the service puts the work it does\n // for this request in this Action's trace.\n for (const [name, value] of Object.entries(\n traceContextHeaders(),\n )) {\n options.headers[name] = value;\n }\n\n // The getter always returns a URL, even though the setter accepts a string\n const currentUrl: URL = options.url as URL;\n\n if (this.isUrlSubjectToDynamicUrls(currentUrl)) {\n const newUrl: URL = new URL(currentUrl);\n\n const url: URL = await this.getRootUrl();\n newUrl.host = url.host;\n\n options.url = newUrl;\n actionsCore.debug(`Transmuted ${currentUrl} into ${newUrl}`);\n } else {\n actionsCore.debug(`No transmutations on ${currentUrl}`);\n }\n },\n ],\n },\n });\n }\n\n return this.client;\n }\n\n markCurrentHostBroken(): void {\n this.prioritizedURLs?.shift();\n }\n\n setPrioritizedUrls(urls: URL[]): void {\n this.prioritizedURLs = urls;\n }\n\n isUrlSubjectToDynamicUrls(url: URL): boolean {\n if (url.origin === DEFAULT_IDS_HOST) {\n return true;\n }\n\n for (const suffix of ALLOWED_SUFFIXES) {\n if (url.host.endsWith(suffix)) {\n return true;\n }\n }\n\n return false;\n }\n\n async getDynamicRootUrl(): Promise<URL \| undefined> {\n const idsHost = process.env[\"IDS_HOST\"];\n if (idsHost !== undefined) {\n try {\n return new URL(idsHost);\n } catch (err: unknown) {\n actionsCore.error(\n `IDS_HOST environment variable is not a valid URL. Ignoring. ${stringifyError(err)}`,\n );\n }\n }\n\n let url: URL \| undefined = undefined;\n try {\n const urls = await this.getUrlsByPreference();\n url = urls[0];\n } catch (err: unknown) {\n actionsCore.error(\n `Error collecting IDS URLs by preference: ${stringifyError(err)}`,\n );\n }\n\n if (url === undefined) {\n return undefined;\n } else {\n // This is a load-bearing `new URL(url)` so that callers can't mutate\n // getRootUrl's return value.\n return new URL(url);\n }\n }\n\n async getRootUrl(): Promise<URL> {\n const url = await this.getDynamicRootUrl();\n\n if (url === undefined) {\n return new URL(DEFAULT_IDS_HOST);\n }\n\n return url;\n }\n\n /\n The diagnostics endpoint of the current backend.\n \n This library reports nothing there: its telemetry is OpenTelemetry. The\n * URL is for the programs an Action runs, which have diagnostics of their\n * own.\n /\n async getDiagnosticsUrl(): Promise<URL \| undefined> {\n if (this.runtimeDiagnosticsUrl === \"\") {\n // User specifically set the diagnostics URL to an empty string\n // so disable diagnostics\n return undefined;\n }\n\n if (\n this.runtimeDiagnosticsUrl !== \"-\" &&\n this.runtimeDiagnosticsUrl !== undefined\n ) {\n try {\n // Caller specified a specific diagnostics URL\n return new URL(this.runtimeDiagnosticsUrl);\n } catch (err: unknown) {\n actionsCore.info(\n `User-provided diagnostic endpoint ignored: not a valid URL: ${stringifyError(err)}`,\n );\n }\n }\n\n try {\n const diagnosticUrl = await this.getRootUrl();\n diagnosticUrl.pathname += \"events/batch\";\n return diagnosticUrl;\n } catch (err: unknown) {\n actionsCore.info(\n `Generated diagnostic endpoint ignored, and diagnostics are disabled: not a valid URL: ${stringifyError(err)}`,\n );\n return undefined;\n }\n }\n\n private async getUrlsByPreference(): Promise<URL[]> {\n if (this.prioritizedURLs === undefined) {\n this.prioritizedURLs = orderRecordsByPriorityWeight(\n await discoverServiceRecords(),\n ).flatMap((record) => recordToUrl(record) \|\| []);\n }\n\n return this.prioritizedURLs;\n }\n}\n\nexport function recordToUrl(record: SrvRecord): URL \| undefined {\n const urlStr = `https://${record.name}:${record.port}`;\n try {\n return new URL(urlStr);\n } catch (err: unknown) {\n actionsCore.debug(\n `Record ${JSON.stringify(record)} produced an invalid URL: ${urlStr} (${err})`,\n );\n return undefined;\n }\n}\n\nasync function discoverServiceRecords(): Promise<SrvRecord[]> {\n return await discoverServicesStub(resolveSrv(LOOKUP), 1_000);\n}\n\nexport async function discoverServicesStub(\n lookup: Promise<SrvRecord[]>,\n timeout: number,\n): Promise<SrvRecord[]> {\n const defaultFallback: Promise<SrvRecord[]> = new Promise(\n (resolve, _reject) => {\n setTimeout(resolve, timeout, []);\n },\n );\n\n let records: SrvRecord[];\n\n try {\n records = await Promise.race([lookup, defaultFallback]);\n } catch (reason: unknown) {\n actionsCore.debug(`Error resolving SRV records: ${stringifyError(reason)}`);\n records = [];\n }\n\n const acceptableRecords = records.filter((record: SrvRecord): boolean => {\n for (const suffix of ALLOWED_SUFFIXES) {\n if (record.name.endsWith(suffix)) {\n return true;\n }\n }\n\n actionsCore.debug(\n `Unacceptable domain due to an invalid suffix: ${record.name}`,\n );\n\n return false;\n });\n\n if (acceptableRecords.length === 0) {\n actionsCore.debug(`No records found for ${LOOKUP}`);\n } else {\n actionsCore.debug(\n `Resolved ${LOOKUP} to ${JSON.stringify(acceptableRecords)}`,\n );\n }\n\n return acceptableRecords;\n}\n\nexport function orderRecordsByPriorityWeight(\n records: SrvRecord[],\n): SrvRecord[] {\n const byPriorityWeight: Map<number, SrvRecord[]> = new Map();\n for (const record of records) {\n const existing = byPriorityWeight.get(record.priority);\n if (existing) {\n existing.push(record);\n } else {\n byPriorityWeight.set(record.priority, [record]);\n }\n }\n\n const prioritizedRecords: SrvRecord[] = [];\n const keys: number[] = Array.from(byPriorityWeight.keys()).sort(\n (a, b) => a - b,\n );\n\n for (const priority of keys) {\n const recordsByPrio = byPriorityWeight.get(priority);\n if (recordsByPrio === undefined) {\n continue;\n }\n\n prioritizedRecords.push(...weightedRandom(recordsByPrio));\n }\n\n return prioritizedRecords;\n}\n\nexport function weightedRandom(records: SrvRecord[]): SrvRecord[] {\n // Duplicate records so we don't accidentally change our caller's data\n const scratchRecords: SrvRecord[] = records.slice();\n const result: SrvRecord[] = [];\n\n while (scratchRecords.length > 0) {\n const weights: number[] = [];\n\n {\n for (let i = 0; i < scratchRecords.length; i++) {\n weights.push(\n scratchRecords[i].weight + (i > 0 ? scratchRecords[i - 1].weight : 0),\n );\n }\n }\n\n const point = Math.random() weights[weights.length - 1];\n\n for (\n let selectedIndex = 0;\n selectedIndex < weights.length;\n selectedIndex++\n ) {\n if (weights[selectedIndex] > point) {\n // Remove our selected record and add it to the result\n result.push(scratchRecords.splice(selectedIndex, 1)[0]);\n break;\n }\n }\n }\n\n return result;\n}\n","/*\n @packageDocumentation\n * Helpers for getting values from an Action's configuration.\n /\nimport as actionsCore from \"@actions/core\";\n\n/*\n Get a Boolean input from the Action's configuration by name.\n /\nconst getBool = (name: string): boolean => {\n return actionsCore.getBooleanInput(name);\n};\n\n/\n Get a Boolean input from the Action's configuration by name, or undefined if it is unset.\n /\nconst getBoolOrUndefined = (name: string): boolean \| undefined => {\n if (getStringOrUndefined(name) === undefined) {\n return undefined;\n }\n\n return actionsCore.getBooleanInput(name);\n};\n\n/\n The character used to separate values in the input string.\n /\nexport type Separator = \"space\" \| \"comma\";\n\n/\n Convert a comma-separated string input into an array of strings. If `comma` is selected,\n * all whitespace is removed from the string before converting to an array.\n /\nconst getArrayOfStrings = (name: string, separator: Separator): string[] => {\n const original = getString(name);\n return handleString(original, separator);\n};\n\n/\n Convert a string input into an array of strings or `null` if no value is set.\n /\nconst getArrayOfStringsOrNull = (\n name: string,\n separator: Separator,\n): string[] \| null => {\n const original = getStringOrNull(name);\n if (original === null) {\n return null;\n } else {\n return handleString(original, separator);\n }\n};\n\n// Split out this function for use in testing\nexport const handleString = (input: string, separator: Separator): string[] => {\n const sepChar = separator === \"comma\" ? \",\" : /\\s+/;\n const trimmed = input.trim(); // Remove whitespace at the beginning and end\n if (trimmed === \"\") {\n return [];\n }\n\n return trimmed.split(sepChar).map((s: string) => s.trim());\n};\n\n/\n Get a multi-line string input from the Action's configuration by name or return `null` if not set.\n /\nconst getMultilineStringOrNull = (name: string): string[] \| null => {\n const value = actionsCore.getMultilineInput(name);\n if (value.length === 0) {\n return null;\n } else {\n return value;\n }\n};\n\n/\n Get a number input from the Action's configuration by name or return `null` if not set.\n /\nconst getNumberOrNull = (name: string): number \| null => {\n const value = actionsCore.getInput(name);\n if (value === \"\") {\n return null;\n } else {\n return Number(value);\n }\n};\n\n/\n Get a Number input from the Action's configuration by name, or undefined if it is unset.\n /\nconst getNumberOrUndefined = (name: string): number \| undefined => {\n const value = getStringOrUndefined(name);\n if (value === undefined) {\n return undefined;\n }\n\n return Number(value);\n};\n\n/\n Get a string input from the Action's configuration.\n /\nconst getString = (name: string): string => {\n return actionsCore.getInput(name);\n};\n\n/\n Get a string input from the Action's configuration by name or return `null` if not set.\n /\nconst getStringOrNull = (name: string): string \| null => {\n const value = actionsCore.getInput(name);\n if (value === \"\") {\n return null;\n } else {\n return value;\n }\n};\n\n/\n Get a string input from the Action's configuration by name or return `undefined` if not set.\n /\nconst getStringOrUndefined = (name: string): string \| undefined => {\n const value = actionsCore.getInput(name);\n if (value === \"\") {\n return undefined;\n } else {\n return value;\n }\n};\n\nexport {\n getBool,\n getBoolOrUndefined,\n getArrayOfStrings,\n getArrayOfStringsOrNull,\n getMultilineStringOrNull,\n getNumberOrNull,\n getNumberOrUndefined,\n getString,\n getStringOrNull,\n getStringOrUndefined,\n};\n","/\n @packageDocumentation\n * Logging that tees to both the GitHub Actions console and OpenTelemetry.\n \n These are drop-in replacements for the `@actions/core` logging functions.\n * Every call still writes to the workflow log exactly as it did before -- the\n * user-visible output is unchanged -- and additionally emits an OpenTelemetry\n * LogRecord correlated to the currently active span.\n \n When telemetry is disabled the OpenTelemetry half is a no-op, so these\n * behave identically to calling `@actions/core` directly.\n /\nimport { stringifyError } from \"./errors.js\";\nimport { type LogLevel, emitLogRecord, withSpan } from \"./telemetry.js\";\nimport as actionsCore from \"@actions/core\";\nimport type { Attributes } from \"@opentelemetry/api\";\n\n/*\n `@actions/core` accepts an Error in place of a message for the annotation\n * functions, and renders it via `toString()`.\n /\ntype Message = string \| Error;\n\nfunction tee(\n level: LogLevel,\n message: Message,\n attributes?: Attributes,\n): string {\n const text = typeof message === \"string\" ? message : stringifyError(message);\n\n emitLogRecord(level, text, attributes);\n\n return text;\n}\n\n/\n Write a debug message. Only visible in the workflow log when the user has\n * enabled step debug logging, but always exported to OpenTelemetry.\n /\nexport function debug(message: string, attributes?: Attributes): void {\n actionsCore.debug(tee(\"debug\", message, attributes));\n}\n\n/* Write an informational message to the workflow log. /\nexport function info(message: string, attributes?: Attributes): void {\n actionsCore.info(tee(\"info\", message, attributes));\n}\n\n/* Write a notice annotation to the workflow log. /\nexport function notice(\n message: Message,\n properties?: actionsCore.AnnotationProperties,\n attributes?: Attributes,\n): void {\n tee(\"notice\", message, attributes);\n actionsCore.notice(message, properties);\n}\n\n/* Write a warning annotation to the workflow log. /\nexport function warning(\n message: Message,\n properties?: actionsCore.AnnotationProperties,\n attributes?: Attributes,\n): void {\n tee(\"warning\", message, attributes);\n actionsCore.warning(message, properties);\n}\n\n/* Write an error annotation to the workflow log. /\nexport function error(\n message: Message,\n properties?: actionsCore.AnnotationProperties,\n attributes?: Attributes,\n): void {\n tee(\"error\", message, attributes);\n actionsCore.error(message, properties);\n}\n\n/\n Fail the workflow step, recording the reason as an OpenTelemetry error log.\n /\nexport function setFailed(message: Message, attributes?: Attributes): void {\n tee(\"error\", message, attributes);\n actionsCore.setFailed(message);\n}\n\n/\n Run `fn` inside both a collapsible group in the workflow log and an active\n * OpenTelemetry span of the same name.\n \n This is the replacement for a `startGroup`/`endGroup` pair: the group closes\n * and the span ends even if `fn` throws, and a throwing `fn` marks the span\n * failed before re-throwing.\n /\nexport async function group<T>(\n name: string,\n fn: () => Promise<T>,\n attributes?: Attributes,\n): Promise<T> {\n return await withSpan(\n name,\n async () => {\n actionsCore.startGroup(name);\n try {\n return await fn();\n } finally {\n actionsCore.endGroup();\n }\n },\n attributes,\n );\n}\n","/\n @packageDocumentation\n * Helpers for determining system attributes of the current runner.\n /\nimport as actionsCore from \"@actions/core\";\n\n/*\n Get the current architecture plus OS. Examples include `X64-Linux` and `ARM64-macOS`.\n /\nexport function getArchOs(): string {\n const envArch = process.env.RUNNER_ARCH;\n const envOs = process.env.RUNNER_OS;\n\n if (envArch && envOs) {\n return `${envArch}-${envOs}`;\n } else {\n actionsCore.error(\n `Can't identify the platform: RUNNER_ARCH or RUNNER_OS undefined (${envArch}-${envOs})`,\n );\n throw new Error(\"RUNNER_ARCH and/or RUNNER_OS is not defined\");\n }\n}\n\n/\n Get the current Nix system. Examples include `x86_64-linux` and `aarch64-darwin`.\n /\nexport function getNixPlatform(archOs: string): string {\n const archOsMap: Map<string, string> = new Map([\n [\"X64-macOS\", \"x86_64-darwin\"],\n [\"ARM64-macOS\", \"aarch64-darwin\"],\n [\"X64-Linux\", \"x86_64-linux\"],\n [\"ARM64-Linux\", \"aarch64-linux\"],\n ]);\n\n const mappedTo = archOsMap.get(archOs);\n if (mappedTo) {\n return mappedTo;\n } else {\n actionsCore.error(\n `ArchOs (${archOs}) doesn't map to a supported Nix platform.`,\n );\n throw new Error(\n `Cannot convert ArchOs (${archOs}) to a supported Nix platform.`,\n );\n }\n}\n","import { getStringOrUndefined } from \"./inputs.js\";\nimport as actionsCore from \"@actions/core\";\n\nexport type SourceDef = {\n path?: string;\n url?: string;\n tag?: string;\n pr?: string;\n branch?: string;\n revision?: string;\n};\n\n/*\n Throw if hash-locking is requested against a source that is not pinned to a\n * fixed version. `source-tag`, `source-revision`, and `source-url` are\n * immutable (or caller-controlled); any other selector resolves to a moving\n * target (`branch`, `pr`, or the `stable` fallback) where the pinned checksum\n * would break the moment a new release is published.\n /\nexport function assertChecksumSourceIsPinned(source: SourceDef): void {\n if (\n source.url === undefined &&\n source.tag === undefined &&\n source.revision === undefined\n ) {\n throw new Error(\n \"Hash-locking via `source-checksums-url`/`source-checksums-sha256` requires a pinned source: set `source-tag`, `source-revision`, or `source-url`. Without one the action resolves to a moving target (e.g. `stable`) and the checksum will break the next time a release is published.\",\n );\n }\n}\n\nexport function constructSourceParameters(legacyPrefix?: string): SourceDef {\n return {\n path: noisilyGetInput(\"path\", legacyPrefix),\n url: noisilyGetInput(\"url\", legacyPrefix),\n tag: noisilyGetInput(\"tag\", legacyPrefix),\n pr: noisilyGetInput(\"pr\", legacyPrefix),\n branch: noisilyGetInput(\"branch\", legacyPrefix),\n revision: noisilyGetInput(\"revision\", legacyPrefix),\n };\n}\n\nfunction noisilyGetInput(\n suffix: string,\n legacyPrefix: string \| undefined,\n): string \| undefined {\n const preferredInput = getStringOrUndefined(`source-${suffix}`);\n\n if (!legacyPrefix) {\n return preferredInput;\n }\n\n // Remaining is for handling cases where the legacy prefix\n // should be examined.\n const legacyInput = getStringOrUndefined(`${legacyPrefix}-${suffix}`);\n\n if (preferredInput && legacyInput) {\n actionsCore.warning(\n `The supported option source-${suffix} and the legacy option ${legacyPrefix}-${suffix} are both set. Preferring source-${suffix}. Please stop setting ${legacyPrefix}-${suffix}.`,\n );\n return preferredInput;\n } else if (legacyInput) {\n actionsCore.warning(\n `The legacy option ${legacyPrefix}-${suffix} is set. Please migrate to source-${suffix}.`,\n );\n return legacyInput;\n } else {\n return preferredInput;\n }\n}\n","/\n @packageDocumentation\n * Determinate Systems' TypeScript library for creating GitHub Actions logic.\n /\n// import { version as pkgVersion } from \"../package.json\";\nimport as ghActionsCorePlatform from \"./actions-core-platform.js\";\nimport type { CheckIn, Feature } from \"./check-in.js\";\nimport * as checksums from \"./checksums.js\";\nimport * as correlation from \"./correlation.js\";\nimport { IdsHost } from \"./ids-host.js\";\nimport * as inputs from \"./inputs.js\";\nimport * as log from \"./log.js\";\nimport * as platform from \"./platform.js\";\nimport type { SourceDef } from \"./sourcedef.js\";\nimport * as sourcedef from \"./sourcedef.js\";\nimport * as otel from \"./telemetry.js\";\nimport * as actionsCache from \"@actions/cache\";\nimport * as actionsCore from \"@actions/core\";\nimport * as actionsExec from \"@actions/exec\";\nimport * as otelApi from \"@opentelemetry/api\";\nimport * as semconv from \"@opentelemetry/semantic-conventions\";\nimport * as semconvIncubating from \"@opentelemetry/semantic-conventions/incubating\";\nimport { type Got, type Request, TimeoutError } from \"got\";\nimport { exec } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport * as nodeFs from \"node:fs\";\nimport fs, { chmod, copyFile, mkdir, readFile } from \"node:fs/promises\";\nimport os, { tmpdir } from \"node:os\";\nimport path from \"node:path\";\nimport { promisify } from \"node:util\";\n\n// Span events this library records itself. Names a caller passes to\n// `addEvent` are used as given.\nconst EVENT_IDS_FAILOVER = \"detsys.ids_failover\";\nconst EVENT_PREFLIGHT_REQUIRE_NIX_DENIED =\n \"detsys.preflight_require_nix_denied\";\nconst EVENT_REQUEST_TIMEOUT = \"detsys.request_timeout\";\nconst EVENT_STORE_IDENTITY_FAILED = \"detsys.store_identity_failed\";\n\n// Attributes describing the run. Where the OpenTelemetry semantic conventions\n// already name a value, they win; everything else lives under `detsys.`.\nconst ATTR_PROJECT = \"detsys.project\";\nconst ATTR_IDS_PROJECT = \"detsys.ids_project\";\nconst ATTR_EXECUTION_PHASE = \"detsys.execution_phase\";\nconst ATTR_CROSS_PHASE_ID = \"detsys.cross_phase_id\";\nconst ATTR_ANONYMOUS_ID = \"detsys.anonymous_id\";\nconst ATTR_CORRELATION_SOURCE = \"detsys.correlation_source\";\nconst ATTR_ARCH_OS = \"detsys.arch_os\";\nconst ATTR_NIX_SYSTEM = \"detsys.nix_system\";\nconst ATTR_FEATURE_PREFIX = \"detsys.feature.\";\n\nconst ATTR_GITHUB_EVENT_NAME = \"detsys.github.event_name\";\nconst ATTR_GITHUB_ACTION_REPOSITORY = \"detsys.github.action_repository\";\nconst ATTR_GITHUB_REPOSITORY_HASH = \"detsys.github.repository_hash\";\nconst ATTR_GITHUB_ORGANIZATION_HASH = \"detsys.github.organization_hash\";\nconst ATTR_GITHUB_WORKFLOW_HASH = \"detsys.github.workflow_hash\";\nconst ATTR_GITHUB_WORKFLOW_JOB_HASH = \"detsys.github.workflow_job_hash\";\nconst ATTR_GITHUB_WORKFLOW_RUN_HASH = \"detsys.github.workflow_run_hash\";\nconst ATTR_GITHUB_WORKFLOW_RUN_DIFFERENTIATOR_HASH =\n \"detsys.github.workflow_run_differentiator_hash\";\n\nconst ATTR_ARTIFACT_NAME = \"detsys.artifact.name\";\nconst ATTR_ARTIFACT_FETCH_SUFFIX = \"detsys.artifact.fetch_suffix\";\nconst ATTR_ARTIFACT_CACHE_HIT = \"detsys.artifact.cache_hit\";\nconst ATTR_SOURCE_URL = \"detsys.source.url\";\nconst ATTR_SOURCE_ETAG = \"detsys.source.etag\";\nconst ATTR_SOURCE_CHECKSUMS_SHA256 = \"detsys.source.checksums_sha256\";\n\nconst ATTR_NIX_LOCATION = \"detsys.nix.location\";\nconst ATTR_NIX_VERSION = \"detsys.nix.version\";\nconst ATTR_NIX_STORE_TRUST = \"detsys.nix.store_trust\";\nconst ATTR_NIX_STORE_VERSION = \"detsys.nix.store_version\";\nconst ATTR_NIX_STORE_CHECK_METHOD = \"detsys.nix.store_check_method\";\nconst ATTR_NIX_STORE_CHECK_ERROR = \"detsys.nix.store_check_error\";\n\n// Log records, not span attributes, carry stapled files: a record's body is\n// not truncated the way an attribute value is.\nconst ATTR_ATTACHMENT_NAME = \"detsys.attachment.name\";\nconst ATTR_ATTACHMENT_PATH = \"detsys.attachment.path\";\n\nconst STATE_KEY_EXECUTION_PHASE = \"detsys_action_execution_phase\";\nconst STATE_KEY_NIX_NOT_FOUND = \"detsys_action_nix_not_found\";\nconst STATE_NOT_FOUND = \"not-found\";\nconst STATE_KEY_CROSS_PHASE_ID = \"detsys_cross_phase_id\";\nconst STATE_KEY_TRACEPARENT = \"detsys_otel_traceparent\";\nconst STATE_KEY_JOB_TRACEPARENT = \"detsys_otel_job_traceparent\";\nconst STATE_KEY_JOB_SPAN_START = \"detsys_otel_job_span_start\";\n\n// The standard variable that carries the trace context between programs.\n// Every step of the job reads it, and so does each program the steps run.\nconst ENV_TRACEPARENT = \"TRACEPARENT\";\n\n// The span that covers the whole workflow job, and thus every Action in it.\nconst SPAN_JOB = \"github_actions_job\";\n\n// The check-in, which is the first thing each phase does.\nconst SPAN_CHECK_IN = \"check_in\";\n\nconst CHECK_IN_ENDPOINT_TIMEOUT_MS = 1_000; // 1 second in ms\n\n/*\n An enum for describing different \"fetch suffixes\" for i.d.s.\n \n - `nix-style` means that system names like `x86_64-linux` and `aarch64-darwin` are used\n * - `gh-env-style` means that names like `X64-Linux` and `ARM64-macOS` are used\n * - `universal` means that the suffix is the static `universal` (for non-system-specific things)\n /\nexport type FetchSuffixStyle = \"nix-style\" \| \"gh-env-style\" \| \"universal\";\n\n/\n GitHub Actions has two possible execution phases: `main` and `post`.\n /\nexport type ExecutionPhase = \"main\" \| \"post\";\n\n/\n How to handle whether Nix is currently installed on the runner.\n \n - `fail` means that the workflow fails if Nix isn't installed\n * - `warn` means that a warning is logged if Nix isn't installed\n * - `ignore` means that Nix will not be checked\n /\nexport type NixRequirementHandling = \"fail\" \| \"warn\" \| \"ignore\";\n\n/\n Whether the Nix store on the runner is trusted.\n \n - `trusted` means yes\n * - `untrusted` means no\n * - `unknown` means that the status couldn't be determined\n \n This is determined via the output of `nix store info --json`.\n /\nexport type NixStoreTrust = \"trusted\" \| \"untrusted\" \| \"unknown\";\n\nexport type ActionOptions = {\n // Name of the project generally, and the name of the binary on disk.\n name: string;\n\n // Defaults to `name`, Corresponds to the ProjectHost entry on i.d.s.\n idsProjectName?: string;\n\n // The \"architecture\" URL component expected by I.D.S. for the ProjectHost.\n fetchStyle: FetchSuffixStyle;\n\n // IdsToolbox assumes the GitHub Action exposes source overrides, like branch/pr/etc. to be named `source-`.\n // This prefix adds a fallback name, prefixed by `${legacySourcePrefix}-`.\n // Users who configure legacySourcePrefix will get warnings asking them to change to `source-`.\n legacySourcePrefix?: string;\n\n // Check if Nix is installed before running this action.\n // If Nix isn't installed, this action will not fail, and will instead do nothing.\n // The action will emit a user-visible warning instructing them to install Nix.\n requireNix: NixRequirementHandling;\n\n // The URL suffix of the diagnostics endpoint this project's own binaries\n // report to. This library does not report there: its telemetry is\n // OpenTelemetry, and this only supplies `getDiagnosticsUrl()` for the\n // programs an Action runs.\n //\n // The final URL is constructed via IDS_HOST/idsProjectName/diagnosticsSuffix.\n //\n // Default: `diagnostics`.\n diagnosticsSuffix?: string;\n};\n\n/\n A confident version of Options, where defaults have been resolved into final values.\n /\nexport type ConfidentActionOptions = {\n name: string;\n idsProjectName: string;\n fetchStyle: FetchSuffixStyle;\n legacySourcePrefix?: string;\n requireNix: NixRequirementHandling;\n providedDiagnosticsUrl?: URL;\n};\n\nconst determinateStateDir = \"/var/lib/determinate\";\nconst determinateIdentityFile = path.join(determinateStateDir, \"identity.json\");\n\nconst isRoot = typeof process.geteuid === \"function\" && process.geteuid() === 0;\n\n/* Create the Determinate state directory by escalating via sudo /\nasync function sudoEnsureDeterminateStateDir(): Promise<void> {\n const code = await actionsExec.exec(\"sudo\", [\n \"mkdir\",\n \"-p\",\n determinateStateDir,\n ]);\n\n if (code !== 0) {\n throw new Error(`sudo mkdir -p exit: ${code}`);\n }\n}\n\n/* Ensures the Determinate state directory exists, escalating if necessary /\nasync function ensureDeterminateStateDir(): Promise<void> {\n if (isRoot) {\n await mkdir(determinateStateDir, { recursive: true });\n } else {\n return sudoEnsureDeterminateStateDir();\n }\n}\n\n/* Writes correlation hashes to the Determinate state directory by writing to a `sudo tee` pipe /\nasync function sudoWriteCorrelationHashes(hashes: string): Promise<void> {\n const buffer = Buffer.from(hashes);\n\n const code = await actionsExec.exec(\n \"sudo\",\n [\"tee\", determinateIdentityFile],\n {\n input: buffer,\n\n // Ignore output from tee\n outStream: nodeFs.createWriteStream(\"/dev/null\"),\n },\n );\n\n if (code !== 0) {\n throw new Error(`sudo tee exit: ${code}`);\n }\n}\n\n/* Writes correlation hashes to the Determinate state directory, escalating if necessary /\nasync function writeCorrelationHashes(hashes: string): Promise<void> {\n await ensureDeterminateStateDir();\n\n if (isRoot) {\n await fs.writeFile(determinateIdentityFile, hashes, \"utf-8\");\n } else {\n return sudoWriteCorrelationHashes(hashes);\n }\n}\n\nexport abstract class DetSysAction {\n nixStoreTrust: NixStoreTrust;\n strictMode: boolean;\n\n private actionOptions: ConfidentActionOptions;\n private exceptionAttachments: Map<string, nodeFs.PathLike>;\n private archOs: string;\n private executionPhase: ExecutionPhase;\n private nixSystem: string;\n private architectureFetchSuffix: string;\n private sourceParameters: SourceDef;\n private identity: correlation.CorrelationProperties;\n private idsHost: IdsHost;\n private features: { [k: string]: Feature };\n private telemetry: otel.Telemetry;\n\n // The name and version of the runner's operating system, in flight from the\n // moment the Action is constructed so that it is ready by the time the\n // resource attributes are assembled.\n private systemDetails: Promise<{ name: string; version: string } \| undefined>;\n\n // The root span for this execution phase. Undefined until the phase span is\n // opened, and when OpenTelemetry export is disabled.\n private phaseSpan?: otelApi.Span;\n\n // Attributes set before the phase span exists, replayed onto it when it\n // opens.\n private pendingAttributes: otelApi.Attributes;\n\n private determineExecutionPhase(): ExecutionPhase {\n const currentPhase = actionsCore.getState(STATE_KEY_EXECUTION_PHASE);\n if (currentPhase === \"\") {\n actionsCore.saveState(STATE_KEY_EXECUTION_PHASE, \"post\");\n return \"main\";\n } else {\n return \"post\";\n }\n }\n\n constructor(actionOptions: ActionOptions) {\n this.actionOptions = makeOptionsConfident(actionOptions);\n this.idsHost = new IdsHost(\n this.actionOptions.idsProjectName,\n actionOptions.diagnosticsSuffix,\n // Note: we don't use actionsCore.getInput('diagnostic-endpoint') on purpose:\n // getInput silently converts absent data to an empty string.\n process.env[\"INPUT_DIAGNOSTIC-ENDPOINT\"],\n inputs.getNumberOrUndefined(\"timeout-request\"),\n );\n this.telemetry = new otel.Telemetry();\n this.exceptionAttachments = new Map();\n this.nixStoreTrust = \"unknown\";\n this.strictMode = inputs.getBool(\"_internal-strict-mode\");\n\n if (\n inputs.getBoolOrUndefined(\n \"_internal-obliterate-actions-id-token-request-variables\",\n ) === true\n ) {\n process.env[\"ACTIONS_ID_TOKEN_REQUEST_URL\"] = undefined;\n process.env[\"ACTIONS_ID_TOKEN_REQUEST_TOKEN\"] = undefined;\n }\n\n this.features = {};\n this.pendingAttributes = {};\n\n this.getCrossPhaseId();\n\n this.identity = correlation.identify();\n this.archOs = platform.getArchOs();\n this.nixSystem = platform.getNixPlatform(this.archOs);\n\n this.systemDetails = ghActionsCorePlatform\n .getDetails()\n // eslint-disable-next-line github/no-then\n .then((details) => ({ name: details.name, version: details.version }))\n // eslint-disable-next-line github/no-then\n .catch((e: unknown) => {\n actionsCore.debug(\n `Failure getting platform details: ${stringifyError(e)}`,\n );\n return undefined;\n });\n\n this.executionPhase = this.determineExecutionPhase();\n\n if (this.actionOptions.fetchStyle === \"gh-env-style\") {\n this.architectureFetchSuffix = this.archOs;\n } else if (this.actionOptions.fetchStyle === \"nix-style\") {\n this.architectureFetchSuffix = this.nixSystem;\n } else if (this.actionOptions.fetchStyle === \"universal\") {\n this.architectureFetchSuffix = \"universal\";\n } else {\n throw new Error(\n `fetchStyle ${this.actionOptions.fetchStyle} is not a valid style`,\n );\n }\n\n this.sourceParameters = sourcedef.constructSourceParameters(\n this.actionOptions.legacySourcePrefix,\n );\n }\n\n /\n Attach a file to the telemetry for this run, to be emitted if the Action\n * fails.\n \n The file at `location` doesn't need to exist when stapleFile is called.\n \n Each attachment becomes one OpenTelemetry log record, correlated to the\n * phase's span: the file's contents as the body if it can be read, the\n * reason it could not be read otherwise.\n /\n stapleFile(name: string, location: string): void {\n this.exceptionAttachments.set(name, location);\n }\n\n /\n The main execution phase.\n /\n abstract main(): Promise<void>;\n\n /\n The post execution phase.\n /\n abstract post(): Promise<void>;\n\n /\n Execute the Action as defined.\n /\n execute(): void {\n // eslint-disable-next-line github/no-then\n this.executeAsync().catch((error: Error) => {\n // eslint-disable-next-line no-console\n console.log(error);\n process.exitCode = 1;\n });\n }\n\n getTemporaryName(): string {\n const tmpDir = process.env[\"RUNNER_TEMP\"] \|\| tmpdir();\n return path.join(tmpDir, `${this.actionOptions.name}-${randomUUID()}`);\n }\n\n /\n Describe this run with an attribute.\n \n The attribute lands on the phase's root span, not on whichever span\n * happens to be active, because it describes the run as a whole. Set it\n * whenever the value becomes known: attributes set before the span opens\n * are replayed onto it.\n \n Namespace your keys, as OpenTelemetry expects: `detsys.nix.version`, not\n * `nix_version`.\n /\n setAttribute(key: string, value: otelApi.AttributeValue): void {\n if (this.phaseSpan === undefined) {\n this.pendingAttributes[key] = value;\n } else {\n this.phaseSpan.setAttribute(key, value);\n }\n }\n\n /\n The diagnostics endpoint for the programs this Action runs, such as\n * `nix-installer` and `magic-nix-cache`.\n \n This library reports nothing there. Its own telemetry is OpenTelemetry;\n * see {@link getTelemetryEnvironment} for putting a child process's\n * telemetry in this run's trace.\n /\n async getDiagnosticsUrl(): Promise<URL \| undefined> {\n return await this.idsHost.getDiagnosticsUrl();\n }\n\n getUniqueId(): string {\n return (\n this.identity.github_workflow_run_differentiator_hash \|\|\n process.env.RUNNER_TRACKING_ID \|\|\n randomUUID()\n );\n }\n\n // This ID will be saved in the action's state, to be persisted across phase steps\n getCrossPhaseId(): string {\n let crossPhaseId = actionsCore.getState(STATE_KEY_CROSS_PHASE_ID);\n\n if (crossPhaseId === \"\") {\n crossPhaseId = randomUUID();\n actionsCore.saveState(STATE_KEY_CROSS_PHASE_ID, crossPhaseId);\n }\n\n return crossPhaseId;\n }\n\n getCorrelationHashes(): correlation.CorrelationProperties {\n return this.identity;\n }\n\n /\n Record that something happened, as a span event.\n \n The event lands on whichever span is active, so that it sits on the\n * operation that produced it, and on the phase's root span when there is no\n * nested span in progress.\n \n Namespace your attribute keys, as OpenTelemetry expects.\n /\n addEvent(name: string, attributes?: otelApi.Attributes): void {\n const span = otelApi.trace.getActiveSpan() ?? this.phaseSpan;\n span?.addEvent(name, attributes);\n }\n\n /\n Unpacks the closure returned by `fetchArtifact()`, imports the\n * contents into the Nix store, and returns the path of the executable at\n * `/nix/store/STORE_PATH/bin/${bin}`.\n /\n async unpackClosure(bin: string): Promise<string> {\n const artifact = await this.fetchArtifact();\n const { stdout } = await promisify(exec)(\n `cat \"${artifact}\" \| xz -d \| nix-store --import`,\n );\n const paths = stdout.split(os.EOL);\n const lastPath = paths.at(-2);\n return `${lastPath}/bin/${bin}`;\n }\n\n /\n Fetches the executable at the URL determined by the `source-` inputs and\n other facts, `chmod`s it, and returns the path to the executable on disk.\n /\n async fetchExecutable(): Promise<string> {\n const binaryPath = await this.fetchArtifact();\n await chmod(\n binaryPath,\n nodeFs.constants.S_IXUSR \| nodeFs.constants.S_IXGRP,\n );\n return binaryPath;\n }\n\n private get isMain(): boolean {\n return this.executionPhase === \"main\";\n }\n\n private get isPost(): boolean {\n return this.executionPhase === \"post\";\n }\n\n private async executeAsync(): Promise<void> {\n // The SDK starts after this moment, thus record the true start time here\n // and backdate the phase's span to it.\n const phaseStartTime = new Date();\n\n try {\n // The job's span covers each Action of the job, thus the first Action to\n // run announces it before it does anything else.\n this.announceJobTrace(phaseStartTime);\n\n await this.startTelemetry();\n this.startPhaseSpan(phaseStartTime);\n\n await this.withPhaseSpanActive(async () => {\n await otel.withSpan(SPAN_CHECK_IN, async () => {\n await this.checkIn();\n });\n\n const correlationHashes = JSON.stringify(this.getCorrelationHashes());\n process.env.DETSYS_CORRELATION = correlationHashes;\n try {\n await writeCorrelationHashes(correlationHashes);\n } catch (error) {\n this.addEvent(EVENT_STORE_IDENTITY_FAILED, {\n [semconv.ATTR_EXCEPTION_MESSAGE]: stringifyError(error),\n });\n }\n\n if (!(await this.preflightRequireNix())) {\n this.addEvent(EVENT_PREFLIGHT_REQUIRE_NIX_DENIED);\n return;\n } else {\n await this.preflightNixStoreInfo();\n await this.preflightNixVersion();\n this.setAttribute(ATTR_NIX_STORE_TRUST, this.nixStoreTrust);\n }\n\n if (this.isMain) {\n await this.main();\n\n // Run the preflight of the nix version a second time so our final\n // telemetry has updated version info.\n await this.preflightNixVersion();\n } else if (this.isPost) {\n await this.post();\n }\n });\n } catch (e: unknown) {\n const reportable = stringifyError(e);\n\n // The span's status and its `exception` event say the phase failed.\n if (this.phaseSpan !== undefined) {\n otel.recordSpanError(this.phaseSpan, e);\n }\n\n if (this.isPost) {\n log.warning(reportable);\n } else {\n log.setFailed(reportable);\n }\n\n await this.withPhaseSpanActive(async () => {\n await this.emitAttachments();\n });\n } finally {\n await this.complete();\n }\n }\n\n /\n Run `fn` with the phase's root span as the active span, so anything it\n * starts is parented into this phase's trace.\n /\n private async withPhaseSpanActive<T>(fn: () => Promise<T>): Promise<T> {\n const span = this.phaseSpan;\n\n if (span === undefined) {\n return await fn();\n }\n\n return await otelApi.context.with(\n otelApi.trace.setSpan(otelApi.context.active(), span),\n fn,\n );\n }\n\n /\n Start the OpenTelemetry export.\n \n All runs export their data.\n * To stop the export, set `OTEL_SDK_DISABLED` to `true`, or set\n * `OTEL_EXPORTER_OTLP_ENDPOINT` to an empty value.\n * The SDK then does not start.\n * The OpenTelemetry API stays in its no-op state.\n * Each span and log record then does nothing.\n * Thus the call sites do not test if the export is on.\n /\n private async startTelemetry(): Promise<void> {\n this.telemetry.start({\n // The `-action` suffix says this service is the Action, not the tool it runs.\n serviceName: `${this.actionOptions.name}-action`,\n // The Action's own version, which is the ref the workflow pinned.\n serviceVersion: process.env[\"GITHUB_ACTION_REF\"],\n resourceAttributes: await this.telemetryResourceAttributes(),\n });\n }\n\n /\n Put every Action of this workflow job in one trace.\n \n A job runs each Action as a process of its own.\n * Thus the Actions can only agree on a trace through the job's environment.\n * The first Action to run makes the identity of the job's span and exports it\n * as `$TRACEPARENT`.\n * Each later step finds it there: the other Actions, and the programs the\n * workflow runs, such as Nix.\n \n The span itself starts and ends in the post phase of the Action that\n * announced it.\n * GitHub Actions runs the post phases in the reverse of the order of the main\n * phases, thus that phase is the last one of the job.\n * The span then covers the whole job.\n * See {@link endJobSpan}.\n \n A `$TRACEPARENT` that is already set belongs to an earlier Action, or to the\n * system that started the workflow.\n * Do not change it, and join that trace.\n /\n private announceJobTrace(startTime: Date): void {\n if (!this.isMain \|\| !otel.exportEnabled()) {\n return;\n }\n\n if (process.env[ENV_TRACEPARENT]) {\n return;\n }\n\n const traceparent = otel.newTraceparent();\n\n // `exportVariable` sets the variable in this process, and in each\n // subsequent step of the job.\n actionsCore.exportVariable(ENV_TRACEPARENT, traceparent);\n\n actionsCore.saveState(STATE_KEY_JOB_TRACEPARENT, traceparent);\n actionsCore.saveState(STATE_KEY_JOB_SPAN_START, `${startTime.getTime()}`);\n }\n\n /\n End the job's span, if this Action is the one that announced it.\n \n The span also starts here.\n * A span belongs to the process that ends it, and the process that made the\n * announcement stopped long ago.\n * See {@link announceJobTrace}.\n /\n private endJobSpan(): void {\n if (!this.isPost) {\n return;\n }\n\n const traceparent = actionsCore.getState(STATE_KEY_JOB_TRACEPARENT);\n if (traceparent === \"\") {\n return;\n }\n\n const startTime = parseInt(\n actionsCore.getState(STATE_KEY_JOB_SPAN_START),\n 10,\n );\n\n this.telemetry\n .startAnnouncedSpan(\n SPAN_JOB,\n traceparent,\n new Date(Number.isFinite(startTime) ? startTime : Date.now()),\n )\n ?.end();\n }\n\n /\n Start the root span of this execution phase.\n \n The span starts at the moment the phase did, and thus covers the start of\n * the SDK, which comes before it.\n \n `main` and `post` are separate processes.\n * Thus the main phase saves the identity of its span in the Action's state,\n * and the post phase makes its span a child of it.\n * A `$TRACEPARENT` in the environment is the span of the workflow job, or of\n * the system that started the workflow.\n /\n private startPhaseSpan(startTime: Date): void {\n if (!this.telemetry.enabled) {\n return;\n }\n\n const parent =\n actionsCore.getState(STATE_KEY_TRACEPARENT) \|\|\n process.env[ENV_TRACEPARENT] \|\|\n undefined;\n\n const span = otel\n .getTracer()\n .startSpan(\n `${this.actionOptions.name}:${this.executionPhase}`,\n { startTime },\n otel.contextFromTraceparent(parent),\n );\n\n span.setAttributes(this.pendingAttributes);\n this.pendingAttributes = {};\n\n const traceparent = otel.traceparentOf(span);\n if (traceparent !== undefined) {\n // Each program this Action runs is part of this phase, and not of the\n // workflow job. The variable changes in this process only: the later\n // steps of the job keep the identity of the job's span.\n process.env[ENV_TRACEPARENT] = traceparent;\n\n if (this.isMain) {\n actionsCore.saveState(STATE_KEY_TRACEPARENT, traceparent);\n }\n }\n\n this.phaseSpan = span;\n }\n\n /\n The stable, run-scoped attributes attached to every span and log record.\n \n The correlation data here is hashed and does not identify a repository,\n * an organization, or a person.\n /\n private async telemetryResourceAttributes(): Promise<otelApi.Attributes> {\n const details = await this.systemDetails;\n\n return {\n [semconvIncubating.ATTR_OS_TYPE]: osType(),\n [semconvIncubating.ATTR_HOST_ARCH]: hostArch(),\n ...(details?.name === undefined \|\| details.name === \"unknown\"\n ? {}\n : { [semconvIncubating.ATTR_OS_NAME]: details.name }),\n ...(details?.version === undefined \|\| details.version === \"unknown\"\n ? {}\n : { [semconvIncubating.ATTR_OS_VERSION]: details.version }),\n\n [ATTR_PROJECT]: this.actionOptions.name,\n [ATTR_IDS_PROJECT]: this.actionOptions.idsProjectName,\n [ATTR_EXECUTION_PHASE]: this.executionPhase,\n [ATTR_CROSS_PHASE_ID]: this.getCrossPhaseId(),\n [ATTR_ANONYMOUS_ID]: this.identity.$anon_distinct_id,\n [ATTR_CORRELATION_SOURCE]: this.identity.correlation_source,\n [ATTR_ARCH_OS]: this.archOs,\n [ATTR_NIX_SYSTEM]: this.nixSystem,\n\n [ATTR_GITHUB_EVENT_NAME]: process.env[\"GITHUB_EVENT_NAME\"],\n [ATTR_GITHUB_ACTION_REPOSITORY]: process.env[\"GITHUB_ACTION_REPOSITORY\"],\n [ATTR_GITHUB_REPOSITORY_HASH]: this.identity.github_repository_hash,\n [ATTR_GITHUB_ORGANIZATION_HASH]:\n this.identity.$groups[\"github_organization\"],\n [ATTR_GITHUB_WORKFLOW_HASH]: this.identity.github_workflow_hash,\n [ATTR_GITHUB_WORKFLOW_JOB_HASH]: this.identity.github_workflow_job_hash,\n [ATTR_GITHUB_WORKFLOW_RUN_HASH]: this.identity.github_workflow_run_hash,\n [ATTR_GITHUB_WORKFLOW_RUN_DIFFERENTIATOR_HASH]:\n this.identity.github_workflow_run_differentiator_hash,\n };\n }\n\n /\n The W3C `traceparent` identifying the span currently in progress.\n \n Hand this to a child process -- as `$TRACEPARENT` -- so that its own\n * OpenTelemetry data joins this Action's trace. Returns undefined when\n * OpenTelemetry export is disabled for this run.\n /\n getTraceparent(): string \| undefined {\n return otel.traceparentOf(otelApi.trace.getActiveSpan() ?? this.phaseSpan);\n }\n\n /\n The environment variables that let a child process add data to this\n * Action's trace: the current `$TRACEPARENT` and the OTLP export settings.\n \n Add these variables to the environment of each child process to trace.\n * A child that inherits this process's environment already has the OTLP\n * settings; only `$TRACEPARENT` changes as the run proceeds.\n \n The result is empty if the OpenTelemetry export is off.\n * Thus it is always safe to add them.\n /\n async getTelemetryEnvironment(): Promise<Record<string, string>> {\n if (!this.telemetry.enabled) {\n return {};\n }\n\n const environment: Record<string, string> = otel.otlpExportEnvironment();\n\n const traceparent = this.getTraceparent();\n if (traceparent !== undefined) {\n environment[ENV_TRACEPARENT] = traceparent;\n }\n\n return environment;\n }\n\n async getClient(): Promise<Got> {\n return await this.idsHost.getGot(\n (incitingError: unknown, prevUrl: URL, nextUrl: URL) => {\n this.recordPlausibleTimeout(incitingError);\n\n this.addEvent(EVENT_IDS_FAILOVER, {\n \"detsys.ids.previous_url\": prevUrl.toString(),\n \"detsys.ids.next_url\": nextUrl.toString(),\n });\n },\n );\n }\n\n /\n Check in, and tell the user about the incidents and the maintenance the\n * check-in reports.\n /\n private async checkIn(): Promise<void> {\n const checkin = await this.requestCheckIn();\n if (checkin === undefined) {\n return;\n }\n\n this.features = checkin.options;\n\n const impactSymbol: Map<string, string> = new Map([\n [\"none\", \"⚪\"],\n [\"maintenance\", \"🛠️\"],\n [\"minor\", \"🟡\"],\n [\"major\", \"🟠\"],\n [\"critical\", \"🔴\"],\n ]);\n const defaultImpactSymbol = \"🔵\";\n\n if (checkin.status !== null) {\n const summaries: string[] = [];\n\n for (const incident of checkin.status.incidents) {\n summaries.push(\n `${impactSymbol.get(incident.impact) \|\| defaultImpactSymbol} ${incident.status.replace(\"_\", \" \")}: ${incident.name} (${incident.shortlink})`,\n );\n }\n\n for (const maintenance of checkin.status.scheduled_maintenances) {\n summaries.push(\n `${impactSymbol.get(maintenance.impact) \|\| defaultImpactSymbol} ${maintenance.status.replace(\"_\", \" \")}: ${maintenance.name} (${maintenance.shortlink})`,\n );\n }\n\n if (summaries.length > 0) {\n actionsCore.info(\n // Bright red, Bold, Underline\n `${\"\\u001b[0;31m\"}${\"\\u001b[1m\"}${\"\\u001b[4m\"}${checkin.status.page.name} Status`,\n );\n for (const notice of summaries) {\n actionsCore.info(notice);\n }\n actionsCore.info(`See: ${checkin.status.page.url}`);\n actionsCore.info(``);\n }\n }\n }\n\n /\n The variant of a feature flag this run resolved, if the check-in returned\n * one.\n \n Each variant this Action asks for becomes an attribute of the run, under\n * `detsys.feature.`, so the telemetry can be sliced by the flags that\n * changed what the run did.\n /\n getFeature(name: string): Feature \| undefined {\n if (!this.features.hasOwnProperty(name)) {\n return undefined;\n }\n\n const feature = this.features[name];\n this.setAttribute(`${ATTR_FEATURE_PREFIX}${name}`, feature.variant);\n\n return feature;\n }\n\n /\n The person properties the check-in evaluates feature flags against.\n \n These names are the flag-targeting contract with the feature flag\n * service, which is why they keep their `$`-prefixed spelling. They are not\n * telemetry: nothing here is reported anywhere. The telemetry for this run\n * is OpenTelemetry, and it names the same values the way OpenTelemetry\n * does.\n /\n private async checkInPersonProperties(): Promise<Record<string, unknown>> {\n / eslint-disable camelcase /\n const properties: Record<string, string \| boolean \| number> = {\n ci: \"github\",\n $lib: \"idslib\",\n $lib_version: otel.LIBRARY_VERSION,\n $app_name: `${this.actionOptions.name}/action`,\n project: this.actionOptions.name,\n ids_project: this.actionOptions.idsProjectName,\n arch_os: this.archOs,\n nix_system: this.nixSystem,\n execution_phase: this.executionPhase,\n };\n\n const fromEnvironment = [\n [\"github_action_ref\", \"GITHUB_ACTION_REF\"],\n [\"github_action_repository\", \"GITHUB_ACTION_REPOSITORY\"],\n [\"github_event_name\", \"GITHUB_EVENT_NAME\"],\n [\"$os\", \"RUNNER_OS\"],\n [\"arch\", \"RUNNER_ARCH\"],\n ];\n for (const [target, variable] of fromEnvironment) {\n const value = process.env[variable];\n if (value) {\n properties[target] = value;\n }\n }\n\n const details = await this.systemDetails;\n if (details !== undefined) {\n if (details.name !== \"unknown\") {\n properties.$os = details.name;\n }\n if (details.version !== \"unknown\") {\n properties.$os_version = details.version;\n }\n }\n / eslint-enable camelcase /\n\n return { ...properties, ...this.identity };\n }\n\n /\n Check in to install.determinate.systems, to accomplish three things:\n \n 1. Preflight the server selected from IdsHost, to increase the chances of success.\n * 2. Fetch any incidents and maintenance events to let users know in case things are weird.\n * 3. Get feature flag data so we can gently roll out new features.\n /\n private async requestCheckIn(): Promise<CheckIn \| undefined> {\n for (\n let attemptsRemaining = 5;\n attemptsRemaining > 0;\n attemptsRemaining--\n ) {\n const checkInUrl = await this.getCheckInUrl();\n if (checkInUrl === undefined) {\n return undefined;\n }\n\n try {\n actionsCore.debug(`Preflighting via ${checkInUrl}`);\n\n / eslint-disable camelcase /\n const props = {\n // Use a distinct_id when we actually have one\n distinct_id: this.identity.$anon_distinct_id,\n anon_distinct_id: this.identity.$anon_distinct_id,\n groups: this.identity.$groups,\n person_properties: await this.checkInPersonProperties(),\n };\n / eslint-enable camelcase /\n\n return await (\n await this.getClient()\n )\n .post(checkInUrl, {\n json: props,\n timeout: {\n request: CHECK_IN_ENDPOINT_TIMEOUT_MS,\n },\n })\n .json();\n } catch (e: unknown) {\n this.recordPlausibleTimeout(e);\n actionsCore.debug(`Error checking in: ${stringifyError(e)}`);\n this.idsHost.markCurrentHostBroken();\n }\n }\n\n return undefined;\n }\n\n private recordPlausibleTimeout(e: unknown): void {\n // see: https://github.com/sindresorhus/got/blob/895e463fa699d6f2e4b2fc01ceb3b2bb9e157f4c/documentation/8-errors.md\n if (e instanceof TimeoutError && \"timings\" in e && \"request\" in e) {\n const attributes: otelApi.Attributes = {\n [semconv.ATTR_URL_FULL]: e.request.requestUrl?.toString(),\n [semconv.ATTR_HTTP_REQUEST_RESEND_COUNT]: e.request.retryCount,\n };\n\n for (const [key, value] of Object.entries(e.timings.phases)) {\n if (Number.isFinite(value)) {\n attributes[`detsys.http.timing.${key}`] = value;\n }\n }\n\n this.addEvent(EVENT_REQUEST_TIMEOUT, attributes);\n }\n }\n\n /\n Fetch an artifact, such as a tarball, from the location determined by the\n * `source-` inputs. If `source-binary` is specified, this will return a path\n to a binary on disk; otherwise, the artifact will be downloaded from the\n * URL determined by the other `source-` inputs (`source-url`, `source-pr`,\n etc.).\n \n When `source-checksums-url` and `source-checksums-sha256` are both set,\n * the downloaded artifact is verified against the per-arch hash in the\n * checksums file, which is itself verified against the pinned\n * `source-checksums-sha256`. Both inputs must be set together.\n /\n private async fetchArtifact(): Promise<string> {\n const sourceBinary = inputs.getStringOrNull(\"source-binary\");\n\n // If source-binary is set, use that. Otherwise fall back to the source- parameters.\n if (sourceBinary !== null && sourceBinary !== \"\") {\n log.debug(`Using the provided source binary at ${sourceBinary}`);\n return sourceBinary;\n }\n\n return await otel.withSpan(\n \"fetch_artifact\",\n async (span) => {\n const expectedArtifactHash = await this.resolveExpectedArtifactHash();\n\n actionsCore.startGroup(\n `Downloading ${this.actionOptions.name} for ${this.architectureFetchSuffix}`,\n );\n\n try {\n log.info(`Fetching from ${await this.getSourceUrl()}`);\n\n const correlatedUrl = await this.getSourceUrl();\n correlatedUrl.searchParams.set(\"ci\", \"github\");\n correlatedUrl.searchParams.set(\n \"correlation\",\n JSON.stringify(this.identity),\n );\n\n const versionCheckup = await (\n await this.getClient()\n ).head(correlatedUrl);\n if (versionCheckup.headers.etag) {\n const v = versionCheckup.headers.etag;\n this.setAttribute(ATTR_SOURCE_ETAG, v);\n\n log.debug(\n `Checking the tool cache for ${await this.getSourceUrl()} at ${v}`,\n );\n const cached = await this.getCachedVersion(v, expectedArtifactHash);\n if (cached) {\n span.setAttribute(ATTR_ARTIFACT_CACHE_HIT, true);\n log.debug(`Tool cache hit.`);\n await this.verifyArtifactHash(cached, expectedArtifactHash);\n return cached;\n }\n }\n\n span.setAttribute(ATTR_ARTIFACT_CACHE_HIT, false);\n\n log.debug(\n `No match from the cache, re-fetching from the redirect: ${versionCheckup.url}`,\n );\n\n const destFile = this.getTemporaryName();\n\n const fetchStream = await this.downloadFile(\n new URL(versionCheckup.url),\n destFile,\n );\n\n await this.verifyArtifactHash(destFile, expectedArtifactHash);\n\n if (fetchStream.response?.headers.etag) {\n const v = fetchStream.response.headers.etag;\n\n try {\n await this.saveCachedVersion(v, destFile, expectedArtifactHash);\n } catch (e: unknown) {\n log.debug(`Error caching the artifact: ${stringifyError(e)}`);\n }\n }\n\n return destFile;\n } catch (e: unknown) {\n this.recordPlausibleTimeout(e);\n throw e;\n } finally {\n actionsCore.endGroup();\n }\n },\n {\n [ATTR_ARTIFACT_NAME]: this.actionOptions.name,\n [ATTR_ARTIFACT_FETCH_SUFFIX]: this.architectureFetchSuffix,\n },\n );\n }\n\n /*\n Read the `source-checksums-url` and `source-checksums-sha256` inputs and,\n * if both are set, fetch the checksums file, verify its hash matches the\n * pin, parse it, and return the expected hash for the artifact matching\n * this runner's `${name}-${architectureFetchSuffix}`. Returns `null` when\n * verification is opted out (both inputs unset).\n /\n private async resolveExpectedArtifactHash(): Promise<string \| null> {\n const checksumsUrl = inputs.getStringOrNull(\"source-checksums-url\");\n const checksumsSha256 = inputs.getStringOrNull(\"source-checksums-sha256\");\n\n if (checksumsUrl === null && checksumsSha256 === null) {\n return null;\n }\n if (checksumsUrl === null \|\| checksumsSha256 === null) {\n throw new Error(\n \"`source-checksums-url` and `source-checksums-sha256` must be set together\",\n );\n }\n\n sourcedef.assertChecksumSourceIsPinned(this.sourceParameters);\n\n const expectedFileHash = checksumsSha256.toLowerCase();\n this.setAttribute(ATTR_SOURCE_CHECKSUMS_SHA256, expectedFileHash);\n\n const parsedUrl = new URL(checksumsUrl);\n const safeUrl = parsedUrl.origin + parsedUrl.pathname;\n\n actionsCore.info(`Fetching checksums file from ${safeUrl}`);\n const response = await (await this.getClient()).get(checksumsUrl);\n const body = response.body;\n\n const actualFileHash = checksums.sha256OfBuffer(body);\n if (actualFileHash !== expectedFileHash) {\n throw new Error(\n `Checksums file hash mismatch at ${safeUrl}: expected ${expectedFileHash}, got ${actualFileHash}`,\n );\n }\n\n const wanted = `${this.actionOptions.name}-${this.architectureFetchSuffix}`;\n const hashes = checksums.parseChecksumsFile(body);\n const artifactHash = hashes.get(wanted);\n if (artifactHash === undefined) {\n throw new Error(`No entry for ${wanted} in checksums file at ${safeUrl}`);\n }\n return artifactHash;\n }\n\n /\n Verify a downloaded artifact's SHA-256 matches the expected hash. No-op\n * when `expected` is `null` (verification disabled).\n /\n private async verifyArtifactHash(\n filePath: string,\n expected: string \| null,\n ): Promise<void> {\n if (expected === null) {\n return;\n }\n const actual = await checksums.sha256OfFile(filePath);\n if (actual !== expected) {\n throw new Error(\n `Artifact hash mismatch for ${this.architectureFetchSuffix}: expected ${expected}, got ${actual}`,\n );\n }\n }\n\n /\n A helper function for failing on error only if strict mode is enabled.\n * This is intended only for CI environments testing Actions themselves.\n /\n failOnError(msg: string): void {\n if (this.strictMode) {\n actionsCore.setFailed(`strict mode failure: ${msg}`);\n }\n }\n\n private async downloadFile(\n url: URL,\n destination: nodeFs.PathLike,\n ): Promise<Request> {\n return await otel.withSpan(\"download_file\", async () =>\n this.download(url, destination),\n );\n }\n\n private async download(\n url: URL,\n destination: nodeFs.PathLike,\n ): Promise<Request> {\n const client = await this.getClient();\n\n return new Promise((resolve, reject) => {\n // Current stream handle\n let writeStream: nodeFs.WriteStream \| undefined;\n\n // Sentinel condition in case we want to abort retrying due to FS issues\n let failed = false;\n\n const retry = (stream: Request): void => {\n if (writeStream) {\n writeStream.destroy();\n }\n\n writeStream = nodeFs.createWriteStream(destination, {\n encoding: \"binary\",\n mode: 0o755,\n });\n\n writeStream.once(\"error\", (error) => {\n // Set failed here since promise rejections don't impact control flow\n failed = true;\n reject(error);\n });\n\n writeStream.on(\"finish\", () => {\n if (!failed) {\n resolve(stream);\n }\n });\n\n stream.once(\"retry\", (_count, _error, createRetryStream) => {\n // Optional: check `failed' here in case you want to stop retrying\n retry(createRetryStream());\n });\n\n // Now that all the handlers have been set up we can pipe from the HTTP\n // stream to disk\n stream.pipe(writeStream);\n };\n\n // Begin the retry logic by giving it a fresh got.Request\n retry(client.stream(url));\n });\n }\n\n private async complete(): Promise<void> {\n this.phaseSpan?.end();\n this.phaseSpan = undefined;\n\n // The job's span contains this phase, so it ends after this phase does.\n this.endJobSpan();\n\n // The process exits as soon as we return, so anything still buffered has\n // to go out now.\n await this.telemetry.shutdown();\n }\n\n private async getCheckInUrl(): Promise<URL \| undefined> {\n const checkInUrl = await this.idsHost.getDynamicRootUrl();\n\n if (checkInUrl === undefined) {\n return undefined;\n }\n\n checkInUrl.pathname += \"check-in\";\n return checkInUrl;\n }\n\n private async getSourceUrl(): Promise<URL> {\n const p = this.sourceParameters;\n\n if (p.url) {\n this.setAttribute(ATTR_SOURCE_URL, p.url);\n return new URL(p.url);\n }\n\n const fetchUrl = await this.idsHost.getRootUrl();\n fetchUrl.pathname += this.actionOptions.idsProjectName;\n\n if (p.tag) {\n fetchUrl.pathname += `/tag/${p.tag}`;\n } else if (p.pr) {\n fetchUrl.pathname += `/pr/${p.pr}`;\n } else if (p.branch) {\n fetchUrl.pathname += `/branch/${p.branch}`;\n } else if (p.revision) {\n fetchUrl.pathname += `/rev/${p.revision}`;\n } else {\n fetchUrl.pathname += `/stable`;\n }\n\n fetchUrl.pathname += `/${this.architectureFetchSuffix}`;\n\n this.setAttribute(ATTR_SOURCE_URL, fetchUrl.toString());\n\n return fetchUrl;\n }\n\n private cacheKey(version: string, expectedHash: string \| null): string {\n const cleanedVersion = version.replace(/[^a-zA-Z0-9-+.]/g, \"\");\n const hashSuffix = expectedHash ? `-h${expectedHash}` : \"\";\n return `determinatesystem-${this.actionOptions.name}-${this.architectureFetchSuffix}-${cleanedVersion}${hashSuffix}`;\n }\n\n private async getCachedVersion(\n version: string,\n expectedHash: string \| null,\n ): Promise<undefined \| string> {\n return await otel.withSpan(\"artifact_cache_restore\", async (span) => {\n const startCwd = process.cwd();\n\n try {\n const tempDir = this.getTemporaryName();\n await mkdir(tempDir);\n process.chdir(tempDir);\n\n // extremely evil shit right here:\n process.env.GITHUB_WORKSPACE_BACKUP = process.env.GITHUB_WORKSPACE;\n delete process.env.GITHUB_WORKSPACE;\n\n if (\n await actionsCache.restoreCache(\n [this.actionOptions.name],\n this.cacheKey(version, expectedHash),\n [],\n undefined,\n true,\n )\n ) {\n span.setAttribute(ATTR_ARTIFACT_CACHE_HIT, true);\n return `${tempDir}/${this.actionOptions.name}`;\n }\n\n span.setAttribute(ATTR_ARTIFACT_CACHE_HIT, false);\n return undefined;\n } finally {\n process.env.GITHUB_WORKSPACE = process.env.GITHUB_WORKSPACE_BACKUP;\n delete process.env.GITHUB_WORKSPACE_BACKUP;\n process.chdir(startCwd);\n }\n });\n }\n\n private async saveCachedVersion(\n version: string,\n toolPath: string,\n expectedHash: string \| null,\n ): Promise<void> {\n return await otel.withSpan(\"artifact_cache_persist\", async () => {\n const startCwd = process.cwd();\n\n try {\n const tempDir = this.getTemporaryName();\n await mkdir(tempDir);\n process.chdir(tempDir);\n await copyFile(toolPath, `${tempDir}/${this.actionOptions.name}`);\n\n // extremely evil shit right here:\n process.env.GITHUB_WORKSPACE_BACKUP = process.env.GITHUB_WORKSPACE;\n delete process.env.GITHUB_WORKSPACE;\n\n await actionsCache.saveCache(\n [this.actionOptions.name],\n this.cacheKey(version, expectedHash),\n undefined,\n true,\n );\n } finally {\n process.env.GITHUB_WORKSPACE = process.env.GITHUB_WORKSPACE_BACKUP;\n delete process.env.GITHUB_WORKSPACE_BACKUP;\n process.chdir(startCwd);\n }\n });\n }\n\n /\n Emit the files `stapleFile` collected, as log records correlated to this\n * phase's span. The Action has already failed by the time this runs.\n /\n private async emitAttachments(): Promise<void> {\n for (const [name, location] of this.exceptionAttachments) {\n const attributes: otelApi.Attributes = {\n [ATTR_ATTACHMENT_NAME]: name,\n [ATTR_ATTACHMENT_PATH]: location.toString(),\n };\n\n try {\n otel.emitLogRecord(\n \"error\",\n await readFile(location, \"utf-8\"),\n attributes,\n );\n } catch (innerError: unknown) {\n otel.emitLogRecord(\"error\", `Attachment unavailable`, {\n ...attributes,\n [semconv.ATTR_EXCEPTION_MESSAGE]: stringifyError(innerError),\n });\n }\n }\n }\n\n private async preflightRequireNix(): Promise<boolean> {\n return await otel.withSpan(\"preflight_require_nix\", async () => {\n let nixLocation: string \| undefined;\n\n const pathParts = (process.env[\"PATH\"] \|\| \"\").split(\":\");\n for (const location of pathParts) {\n const candidateNix = path.join(location, \"nix\");\n\n try {\n await fs.access(candidateNix, fs.constants.X_OK);\n log.debug(`Found Nix at ${candidateNix}`);\n nixLocation = candidateNix;\n break;\n } catch {\n actionsCore.debug(`Nix not at ${candidateNix}`);\n }\n }\n this.setAttribute(ATTR_NIX_LOCATION, nixLocation \|\| \"\");\n\n if (this.actionOptions.requireNix === \"ignore\") {\n return true;\n }\n\n const currentNotFoundState = actionsCore.getState(\n STATE_KEY_NIX_NOT_FOUND,\n );\n if (currentNotFoundState === STATE_NOT_FOUND) {\n // It was previously not found, so don't run subsequent actions\n return false;\n }\n\n if (nixLocation !== undefined) {\n return true;\n }\n actionsCore.saveState(STATE_KEY_NIX_NOT_FOUND, STATE_NOT_FOUND);\n\n switch (this.actionOptions.requireNix) {\n case \"fail\":\n log.setFailed(\n [\n \"This action can only be used when Nix is installed.\",\n \"Add `- uses: DeterminateSystems/determinate-nix-action@v3` earlier in your workflow.\",\n ].join(\" \"),\n );\n break;\n case \"warn\":\n log.warning(\n [\n \"This action is in no-op mode because Nix is not installed.\",\n \"Add `- uses: DeterminateSystems/determinate-nix-action@v3` earlier in your workflow.\",\n ].join(\" \"),\n );\n break;\n }\n\n return false;\n });\n }\n\n private async preflightNixStoreInfo(): Promise<void> {\n return await otel.withSpan(\"preflight_nix_store_info\", async (span) => {\n let output = \"\";\n\n const options: actionsExec.ExecOptions = {};\n options.silent = true;\n options.listeners = {\n stdout: (data) => {\n output += data.toString();\n },\n };\n\n try {\n output = \"\";\n await actionsExec.exec(\"nix\", [\"store\", \"info\", \"--json\"], options);\n this.setAttribute(ATTR_NIX_STORE_CHECK_METHOD, \"info\");\n } catch {\n try {\n // reset output\n output = \"\";\n await actionsExec.exec(\"nix\", [\"store\", \"ping\", \"--json\"], options);\n this.setAttribute(ATTR_NIX_STORE_CHECK_METHOD, \"ping\");\n } catch {\n this.setAttribute(ATTR_NIX_STORE_CHECK_METHOD, \"none\");\n return;\n }\n }\n\n try {\n const parsed = JSON.parse(output);\n if (parsed.trusted === true \|\| parsed.trusted === 1) {\n this.nixStoreTrust = \"trusted\";\n } else if (parsed.trusted === false \|\| parsed.trusted === 0) {\n this.nixStoreTrust = \"untrusted\";\n } else if (parsed.trusted !== undefined) {\n this.setAttribute(\n ATTR_NIX_STORE_CHECK_ERROR,\n `Mysterious trusted value: ${JSON.stringify(parsed.trusted)}`,\n );\n }\n\n this.setAttribute(\n ATTR_NIX_STORE_VERSION,\n JSON.stringify(parsed.version),\n );\n } catch (e: unknown) {\n this.setAttribute(ATTR_NIX_STORE_CHECK_ERROR, stringifyError(e));\n }\n\n span.setAttribute(ATTR_NIX_STORE_TRUST, this.nixStoreTrust);\n });\n }\n\n private async preflightNixVersion(): Promise<void> {\n return await otel.withSpan(\"preflight_nix_version\", async (span) => {\n let output = \"unknown\";\n\n try {\n ({ stdout: output } = await actionsExec.getExecOutput(\n \"nix\",\n [\"--version\"],\n {\n silent: true,\n },\n ));\n output = output.trim() \|\| \"unknown\";\n } catch {\n // That's fine.\n }\n\n this.setAttribute(ATTR_NIX_VERSION, output);\n span.setAttribute(ATTR_NIX_VERSION, output);\n });\n }\n}\n\nfunction stringifyError(error: unknown): string {\n return error instanceof Error \|\| typeof error == \"string\"\n ? error.toString()\n : JSON.stringify(error);\n}\n\n/\n The runner's operating system, as `os.type` spells it.\n /\nfunction osType(): string {\n switch (ghActionsCorePlatform.platform) {\n case \"win32\":\n return semconvIncubating.OS_TYPE_VALUE_WINDOWS;\n case \"darwin\":\n return semconvIncubating.OS_TYPE_VALUE_DARWIN;\n case \"linux\":\n return semconvIncubating.OS_TYPE_VALUE_LINUX;\n default:\n return ghActionsCorePlatform.platform;\n }\n}\n\n/\n The runner's architecture, as `host.arch` spells it.\n /\nfunction hostArch(): string {\n switch (ghActionsCorePlatform.arch) {\n case \"x64\":\n return semconvIncubating.HOST_ARCH_VALUE_AMD64;\n case \"arm64\":\n return semconvIncubating.HOST_ARCH_VALUE_ARM64;\n case \"ia32\":\n return semconvIncubating.HOST_ARCH_VALUE_X86;\n case \"arm\":\n return semconvIncubating.HOST_ARCH_VALUE_ARM32;\n default:\n return ghActionsCorePlatform.arch;\n }\n}\n\nfunction makeOptionsConfident(\n actionOptions: ActionOptions,\n): ConfidentActionOptions {\n const idsProjectName = actionOptions.idsProjectName ?? actionOptions.name;\n\n const finalOpts: ConfidentActionOptions = {\n name: actionOptions.name,\n idsProjectName,\n fetchStyle: actionOptions.fetchStyle,\n legacySourcePrefix: actionOptions.legacySourcePrefix,\n requireNix: actionOptions.requireNix,\n };\n\n actionsCore.debug(\"idslib options:\");\n actionsCore.debug(JSON.stringify(finalOpts, undefined, 2));\n\n return finalOpts;\n}\n\n// Public exports from other files\nexport type {\n CheckIn,\n Feature,\n Incident,\n Maintenance,\n Page,\n StatusSummary,\n} from \"./check-in.js\";\nexport type { CorrelationProperties } from \"./correlation.js\";\nexport { stringifyError } from \"./errors.js\";\nexport { IdsHost } from \"./ids-host.js\";\nexport type { SourceDef } from \"./sourcedef.js\";\nexport as inputs from \"./inputs.js\";\n\n/*\n Logging that tees to both the GitHub Actions console and OpenTelemetry.\n * A drop-in replacement for the `@actions/core` logging functions.\n /\nexport as log from \"./log.js\";\nexport * as platform from \"./platform.js\";\nexport type { LogLevel } from \"./telemetry.js\";\nexport {\n SCOPE_NAME,\n contextFromTraceparent,\n getLogger,\n getTracer,\n recordSpanError,\n traceContextHeaders,\n traceparentOf,\n withSpan,\n} from \"./telemetry.js\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,MAAM,gBAAgB,UAAU,GAAG,QAAQ;AAyB3C,MAAM,kCAA2D;CAC/D,MAAM;CACN,YAAY;CACZ,OAAO;AACT;;;;;;;AAQA,SAAgB,YAAY,aAA8C;CACxE,MAAM,UAAU;EAAE,GAAG;EAAiC,GAAG;CAAY;CAErE,MAAM,0BAAoC,kBACxC,QAAQ,UACV;CAEA,IAAI,GAAG,KAAK,MAAM,SAAS;EACzB,IAAI,QAAQ,SAAS,QACnB,OAAO,UAAU;OAEjB,OAAO,QAAQ,QAAQ,UAAU,CAAC;CAEtC;CAEA,IAAI,QAAQ,SAAS,QACnB,OAAO,sBAAsB,yBAAyB,OAAO;MAE7D,OAAO,QAAQ,QACb,uBAAuB,yBAAyB,OAAO,CACzD;AAEJ;;;;;;;;AASA,SAAS,eAAe,YAAoB,cAA8B;CACxE,MAAM,QAAkB,aAAa,MAAM,IAAI;CAE/C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,WAAW,KAAK,MAAM,GAAG;EAE/B,IAAI,SAAS,WAAW,GAAG;GACzB,SAAS,KAAK,SAAS,EAAE,CAAC,QAAQ,YAAY,EAAE;GAEhD,OAAO,eAAe,YAAY,SAAS,EAAE,CAAC,YAAY,GAAG;IAC3D,OAAO,SAAS;IAChB,UAAU;IACV,YAAY;IACZ,cAAc;GAChB,CAAC;EACH;CACF;CAEA,OAAO;AACT;;;;;;;AAQA,SAAS,kBAAkB,YAAiD;CAC1E,MAAM,2BAA2B,CAAC,mBAAmB,qBAAqB;CAE1E,IAAI,CAAC,YACH,OAAO;MAEP,OAAO,MAAM,UAAU;AAE3B;;;;;;;AAmBA,SAAS,YAAoB;CAC3B,OAAO;EACL,MAAM,GAAG,KAAK;EACd,UAAU,GAAG,SAAS;EACtB,UAAU,GAAG,SAAS;EACtB,MAAM,GAAG,KAAK;EACd,SAAS,GAAG,QAAQ;CACtB;AACF;AAIA,eAAe,uBACb,UACA,SACiB;CACjB,IAAI,WAAW;CAEf,KAAK,MAAM,iBAAiB,UAC1B,IAAI;EACF,IAAI,QAAQ,OAEV,QAAQ,IAAI,mBAAmB,cAAc,KAAK;EAGpD,WAAW,MAAM,cAAc,eAAe,QAAQ;EAEtD,IAAI,QAAQ,OACV,QAAQ,IAAI,eAAe,UAAU;EAGvC;CACF,SAAS,OAAO;EACd,IAAI,QAAQ,OACV,QAAQ,MAAM,KAAK;CAEvB;CAGF,IAAI,aAAa,MACf,MAAM,IAAI,MAAM,8BAA8B;CAIhD,OAAO,eAAe,UAAU,GAAG,QAAQ;AAC7C;AAEA,SAAS,sBACP,iBACA,SACQ;CACR,IAAI,WAAW;CAEf,KAAK,MAAM,iBAAiB,iBAC1B,IAAI;EACF,IAAI,QAAQ,OACV,QAAQ,IAAI,mBAAmB,cAAc,KAAK;EAGpD,WAAW,GAAG,aAAa,eAAe,QAAQ;EAElD,IAAI,QAAQ,OACV,QAAQ,IAAI,eAAe,UAAU;EAGvC;CACF,SAAS,OAAO;EACd,IAAI,QAAQ,OACV,QAAQ,MAAM,KAAK;CAEvB;CAGF,IAAI,aAAa,MACf,MAAM,IAAI,MAAM,8BAA8B;CAIhD,OAAO,eAAe,UAAU,GAAG,QAAQ;AAC7C;;;;;;ACxMA,MAAM,iBAAiB,YAAiC;CACtD,MAAM,EAAE,QAAQ,YAAY,MAAMA,OAAK,cACrC,sFACA,KAAA,GACA,EACE,QAAQ,KACV,CACF;CAEA,MAAM,EAAE,QAAQ,SAAS,MAAMA,OAAK,cAClC,sFACA,KAAA,GACA,EACE,QAAQ,KACV,CACF;CAEA,OAAO;EACL,MAAM,KAAK,KAAK;EAChB,SAAS,QAAQ,KAAK;CACxB;AACF;;;;AAKA,MAAM,eAAe,YAAiC;CACpD,MAAM,EAAE,WAAW,MAAMA,OAAK,cAAc,WAAW,KAAA,GAAW,EAChE,QAAQ,KACV,CAAC;CAED,MAAM,UAAU,OAAO,MAAM,wBAAwB,CAAC,GAAG,MAAM;CAG/D,OAAO;EACL,MAHW,OAAO,MAAM,qBAAqB,CAAC,GAAG,MAAM;EAIvD;CACF;AACF;;;;AAKA,MAAM,eAAe,YAAiC;CACpD,IAAI,OAAe,CAAC;CAEpB,IAAI;EACF,OAAO,YAAY,EAAE,MAAM,OAAO,CAAC;EACnC,YAAY,MAAM,4BAA4B,KAAK,UAAU,IAAI,GAAG;CACtE,SAAS,GAAG;EACV,YAAY,MAAM,kCAAkC,GAAG;CACzD;CAEA,OAAO;EACL,MAAM,0BACJ,MACA;GAAC;GAAM;GAAQ;GAAe;EAAS,GACvC,SACF;EACA,SAAS,0BACP,MACA;GAAC;GAAc;GAAW;EAAkB,GAC5C,SACF;CACF;AACF;AAEA,SAAS,0BACP,MACA,OACA,cACG;CACH,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAS,uBAAuB,MAAM,MAAM,YAAY;EAE9D,IAAI,QAAQ,cACV,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,SAAS,uBACP,MACA,MACA,cACG;CACH,IAAI,CAAC,KAAK,eAAe,IAAI,GAC3B,OAAO;CAGT,MAAM,QAAS,KAAgC;CAG/C,IAAI,OAAO,UAAU,OAAO,cAC1B,OAAO;CAGT,OAAO;AACT;;;;AAKA,MAAa,WAAWC,KAAG,SAAS;;;;AAKpC,MAAa,OAAOA,KAAG,KAAK;;;;AAK5B,MAAa,YAAY,aAAa;;;;AAKtC,MAAa,UAAU,aAAa;;;;AAKpC,MAAa,UAAU,aAAa;;;;AAkBpC,eAAsB,aAAqC;CACzD,OAAO;EACL,GAAI,OAAO,YACP,eAAe,IACf,UACE,aAAa,IACb,aAAa;EACnB;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;;ACvKA,MAAM,gBAAgB;;;;;;;;;AAUtB,SAAgB,mBAAmB,MAAmC;CACpE,MAAM,yBAAS,IAAI,IAAoB;CAEvC,KAAK,MAAM,UAAU,KAAK,MAAM,YAAY,CAAC,CAAC,OAAO,OAAO,GAAG;EAC7D,MAAM,aAAa,OAAO,QAAQ,GAAG;EACrC,IAAI,eAAe,IACjB;EAGF,MAAM,SAAS,OAAO,MAAM,GAAG,UAAU;EACzC,IAAI,CAAC,cAAc,KAAK,MAAM,GAC5B,MAAM,IAAI,MAAM,qCAAqC,QAAQ;EAG/D,MAAM,OAAO,OAAO,MAAM,aAAa,CAAC,CAAC,CAAC,KAAK;EAC/C,IAAI,SAAS,IACX;EAGF,OAAO,IAAI,MAAM,OAAO,YAAY,CAAC;CACvC;CAEA,OAAO;AACT;;;;;AAMA,eAAsB,aAAa,UAAmC;CACpE,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,YAAY,KAAK;EACnD,iBAAiB,QAAQ,CAAC,CACvB,KAAK,SAAS,MAAM,CAAC,CACrB,KAAK,IAAI,CAAC,CACV,KAAK,gBAAgB,QAAQ,KAAK,KAAK,CAAW,CAAC;CACxD,CAAC;AACH;;;;;AAMA,SAAgB,eAAe,MAA+B;CAC5D,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK;AACvD;;;AC5DA,MAAM,qBAAqB,CAAC,eAAe;AAwB3C,SAAgB,WAAkC;CAChD,MAAM,aAAa,yBAAyB,OAAO;EACjD;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,qBAAqB,yBAAyB,SAAS;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,QAA+B;EACnC,mBAAmB,QAAQ,IAAI,yBAAyB,WAAW;EAEnE,oBAAoB;EAEpB,wBAAwB;EACxB,sBAAsB,yBAAyB,OAAO;GACpD;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,0BAA0B,yBAAyB,QAAQ;GACzD;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,0BAA0B,yBAAyB,SAAS;GAC1D;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,yCAAyC;EACzC,aAAa;EACb,SAAS;GACP,mBAAmB;GACnB,qBAAqB,yBAAyB,OAAO;IACnD;IACA;IACA;GACF,CAAC;EACH;EACA,OAAO;CACT;CAEA,YAAY,MAAM,mBAAmB;CACrC,YAAY,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;CAEhD,OAAO;AACT;AAEA,SAAS,yBACP,QACA,WACoB;CACpB,MAAM,OAAO,WAAW,QAAQ;CAEhC,KAAK,MAAM,WAAW,WAAW;EAC/B,IAAI,QAAQ,QAAQ,IAAI;EAExB,IAAI,UAAU,KAAA,GAAW;GACvB,IAAI,mBAAmB,SAAS,OAAO,GAAG;IACxC,YAAY,MACV,0CAA0C,QAAQ,wCACpD;IACA,QAAQ;GACV,OAAO;IACL,YAAY,MACV,iCAAiC,QAAQ,0CAC3C;IACA;GACF;EACF;EAEA,KAAK,OAAO,KAAK;EACjB,KAAK,OAAO,IAAI;CAClB;CAEA,OAAO,GAAG,OAAO,GAAG,KAAK,OAAO,KAAK;AACvC;;;;;;AC/HA,SAAgB,eAAe,GAAoB;CACjD,IAAI,aAAa,OACf,OAAO,EAAE;MACJ,IAAI,OAAO,MAAM,UACtB,OAAO;MAEP,OAAO,KAAK,UAAU,CAAC;AAE3B;;;;;;;;;;;;;;;;;ACiBA,MAAa,aAAa;;;;;;;;;AAa1B,MAAM,wBAAwB;;;;;;;;;;;AAY9B,MAAM,oBACJ;;;;;;AAOF,MAAM,sBAAsB;;;;;;;;;AAU5B,MAAM,uCAAuC;;AAG7C,MAAM,wBAAwB;CAC5B;CACA;CACA;AACF;;;;;;;;;AAUA,MAAM,aAAa,IAAI,SAAS,0BAA0B;AAK1D,MAAM,WAA6C;CACjD,OAAO,eAAe;CACtB,MAAM,eAAe;CACrB,QAAQ,eAAe;CACvB,SAAS,eAAe;CACxB,OAAO,eAAe;AACxB;;;;;;;;AAoBA,SAAgB,gBAAyB;CACvC,IAAI,SAAS,kBAAkB,mBAAmB,GAChD,OAAO;CAGT,MAAM,WAAW,QAAQ,IAAI;CAC7B,IAAI,aAAa,KAAA,KAAa,SAAS,KAAK,MAAM,IAChD,OAAO;CAGT,OAAO;AACT;;;;;;;;;AAUA,SAAgB,+BAAqC;CACnD,IAAI,SAAS,iBAAiB,6BAA6B,MAAM,KAAA,GAC/D,QAAQ,IAAI,iCAAiC;CAG/C,IAAI,0BAA0B,GAAG;EAG/B,MAAM,UAAU,SAAS,wBACvB,SAAS,iBAAiB,4BAA4B,CACxD;EAMA,IAAI,CAJe,OAAO,KAAK,OAAO,CAAC,CAAC,MACrC,SAAS,KAAK,YAAY,MAAM,eAGrB,GAAG;GACf,QAAQ,mBAAmB,UAAU;GACrC,QAAQ,IAAI,gCAAgC,kBAAkB,OAAO;EACvE;CACF;CAEA,IACE,SAAS,iBAAiB,gCAAgC,MAAM,KAAA,GAIhE,QAAQ,IAAI,oCAAoC;CAGlD,IACE,SAAS,iBAAiB,mCAAmC,MAAM,KAAA,GAEnE,QAAQ,IAAI,uCACV,GAAG;AAET;;;;;;;AAQA,SAAS,4BAAqC;CAC5C,MAAM,WAAW,SAAS,iBAAiB,6BAA6B;CAExE,IAAI,aAAa,KAAA,GACf,OAAO;CAGT,IAAI;EACF,OACE,IAAI,IAAI,QAAQ,CAAC,CAAC,SAAS,MAAM,IAAI,IAAI,qBAAqB,CAAC,CAAC,SAAS;CAE7E,QAAQ;EACN,OAAO;CACT;AACF;;;;;AAMA,SAAgB,wBAAgD;CAC9D,MAAM,cAAsC,CAAC;CAE7C,KAAK,MAAM,QAAQ,uBAAuB;EACxC,MAAM,QAAQ,SAAS,iBAAiB,IAAI;EAC5C,IAAI,UAAU,KAAA,GACZ,YAAY,QAAQ;CAExB;CAEA,OAAO;AACT;;;;;;;;;AAUA,SAAgB,kBAAkB,SAAyC;CACzE,OAAO,OAAO,QAAQ,OAAO,CAAC,CAC3B,KACE,CAAC,MAAM,WACN,GAAG,mBAAmB,IAAI,EAAE,GAAG,mBAAmB,KAAK,GAC3D,CAAC,CACA,KAAK,GAAG;AACb;;;;;;;;;AAUA,IAAM,oBAAN,MAAwD;;CAKtD,IAAI,SAAiB,QAAsB;EACzC,KAAK,UAAU;EACf,KAAK,SAAS;CAChB;;CAGA,QAAc;EACZ,KAAK,UAAU,KAAA;EACf,KAAK,SAAS,KAAA;CAChB;CAEA,kBAA0B;EACxB,OAAO,KAAK,WAAW,UAAU,EAAE;CACrC;CAEA,iBAAyB;EACvB,OAAO,KAAK,UAAU,UAAU,CAAC;CACnC;AACF;;;;;;AAOA,IAAa,YAAb,MAAuB;;CAMrB,IAAI,UAAmB;EACrB,OAAO,KAAK,mBAAmB,KAAA;CACjC;;;;;;;;CASA,MAAM,SAAiC;EACrC,IAAI,KAAK,WAAW,CAAC,cAAc,GACjC;EAGF,IAAI;GACF,6BAA6B;GAI7B,MAAM,WAAW,cACd,gBAAgB,CAAC,CACjB,MACC,cAAc,uBAAuB;KAClC,QAAQ,oBAAoB,QAAQ;IACrC,GAAI,QAAQ,mBAAmB,KAAA,IAC3B,CAAC,IACD,GAAG,QAAQ,uBAAuB,QAAQ,eAAe;IAC7D,GAAG,QAAQ;GACb,CAAC,CACH,CAAC,CACA,MACC,cAAc,gBAAgB,EAC5B,WAAW,CAAC,cAAc,WAAW,EACvC,CAAC,CACH;GAEF,KAAK,cAAc,IAAI,kBAAkB;GAIzC,KAAK,iBAAiB,IAAI,SAAS,oBAAoB;IACrD;IACA,aAAa,KAAK;IAClB,gBAAgB,CACd,IAAI,SAAS,mBAAmB,IAAI,kBAAkB,CAAC,CACzD;GACF,CAAC;GAED,KAAK,iBAAiB,IAAI,QAAQ,eAAe;IAC/C;IAGA,iBAAiB,EACf,2BAA2B,SAAS,iBAClC,mCACF,EACF;IACA,YAAY,CACV,IAAI,QAAQ,wBAAwB,EAClC,UAAU,IAAI,gBAAgB,EAChC,CAAC,CACH;GACF,CAAC;GAKD,QAAQ,QAAQ,wBACd,IAAI,gCAAgC,CAAC,CAAC,OAAO,CAC/C;GACA,QAAQ,YAAY,oBAAoB,UAAU;GAClD,QAAQ,MAAM,wBAAwB,KAAK,cAAc;GACzD,KAAK,wBAAwB,KAAK,cAAc;GAEhD,YAAY,MACV,mCAAmC,SAAS,iBAAiB,6BAA6B,GAC5F;EACF,SAAS,GAAY;GACnB,KAAK,iBAAiB,KAAA;GACtB,KAAK,iBAAiB,KAAA;GACtB,KAAK,cAAc,KAAA;GACnB,YAAY,MACV,gEAAgE,eAAe,CAAC,GAClF;EACF;CACF;;;;;;;;;;;;;;;;;CAkBA,mBACE,MACA,aACA,WACA,gBAAiC,QAAQ,cACf;EAC1B,MAAM,YAAY,KAAK;EACvB,MAAM,cAAc,QAAQ,MAAM,eAChC,uBAAuB,WAAW,CACpC;EAEA,IACE,cAAc,KAAA,KACd,KAAK,mBAAmB,KAAA,KACxB,gBAAgB,KAAA,KAChB,CAAC,QAAQ,mBAAmB,WAAW,GAEvC;EAKF,MAAM,SAAS,KAAK,eAAe,UAAU,YAAA,KAA2B;EAExE,IAAI;GACF,UAAU,IAAI,YAAY,SAAS,YAAY,MAAM;GACrD,OAAO,OAAO,UAAU,MAAM,EAAE,UAAU,GAAG,aAAa;EAC5D,UAAU;GACR,UAAU,MAAM;EAClB;CACF;;;;;;;CAQA,MAAM,WAA0B;EAC9B,MAAM,YAAY,CAAC,KAAK,gBAAgB,KAAK,cAAc,CAAC,CAAC,SAC1D,MAAM,KAAK,CAAC,CACf;EAEA,IAAI,UAAU,WAAW,GACvB;EAGF,IAAI;GACF,MAAM,YACJ,QAAQ,IAAI,UAAU,IAAI,OAAO,MAAM,EAAE,SAAS,CAAC,CAAC,GACpD,mBACF;EACF,SAAS,GAAY;GACnB,YAAY,MACV,sCAAsC,eAAe,CAAC,GACxD;EACF,UAAU;GACR,KAAK,iBAAiB,KAAA;GACtB,KAAK,iBAAiB,KAAA;GACtB,KAAK,cAAc,KAAA;EACrB;CACF;AACF;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAO,QAAQ,MAAM,UAAU,YAAA,KAA2B;AAC5D;;;;;AAMA,SAAgB,YAAoB;CAClC,OAAO,KAAK,UAAU,YAAA,KAA2B;AACnD;;;;;AAMA,SAAgB,cACd,OACA,SACA,YACM;CACN,UAAU,CAAC,CAAC,KAAK;EACf,gBAAgB,SAAS;EACzB,cAAc,MAAM,YAAY;EAChC,MAAM;EACN;EACA,SAAS,QAAQ,QAAQ,OAAO;CAClC,CAAC;AACH;;;;;;;;AASA,SAAgB,cACd,MACoB;CACpB,IAAI,SAAS,KAAA,KAAa,CAAC,QAAQ,mBAAmB,KAAK,YAAY,CAAC,GACtE;CAGF,MAAM,UAAkC,CAAC;CACzC,WAAW,OACT,QAAQ,MAAM,QAAQ,QAAQ,cAAc,IAAI,GAChD,SACA,QAAQ,oBACV;CAEA,OAAO,QAAQ;AACjB;;;;;;;;;;;;;;AAeA,SAAgB,eAAe,QAAyB;CACtD,MAAM,gBAAgB,QAAQ,MAAM,eAClC,uBAAuB,MAAM,CAC/B;CAEA,IACE,kBAAkB,KAAA,KAClB,QAAQ,mBAAmB,aAAa,GACxC;EACA,MAAM,QAAQ,cAAc,WAAW,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;EACnE,OAAO,MAAM,cAAc,QAAQ,GAAG,UAAU,CAAC,EAAE,GAAG;CACxD;CAEA,OAAO,MAAM,UAAU,EAAE,EAAE,GAAG,UAAU,CAAC,EAAE;AAC7C;;;;;;;;;;;;;;;;AAiBA,SAAgB,sBAA8C;CAC5D,MAAM,SAAS,QAAQ,QAAQ,OAAO;CACtC,MAAM,UACJ,QAAQ,MAAM,eAAe,MAAM,MAAM,KAAA,IACrC,uBAAuB,QAAQ,IAAI,cAAc,IACjD;CAEN,MAAM,UAAkC,CAAC;CACzC,WAAW,OAAO,SAAS,SAAS,QAAQ,oBAAoB;CAEhE,OAAO;AACT;;;;;;AAOA,SAAgB,uBACd,aACiB;CACjB,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,IAC/C,OAAO,QAAQ;CAGjB,OAAO,WAAW,QAChB,QAAQ,cACR,EAAE,YAAY,GACd,QAAQ,oBACV;AACF;;;;AAKA,SAAgB,gBAAgB,MAAoB,OAAsB;CACxE,KAAK,gBACH,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,eAAe,KAAK,CAAC,CAClE;CACA,KAAK,UAAU;EACb,MAAM,QAAQ,eAAe;EAC7B,SAAS,eAAe,KAAK;CAC/B,CAAC;AACH;;;;;;AAOA,eAAsB,SACpB,MACA,IACA,YACY;CACZ,OAAO,MAAM,UAAU,CAAC,CAAC,gBACvB,MACA,EAAE,WAAW,GACb,OAAO,SAAS;EACd,IAAI;GACF,OAAO,MAAM,GAAG,IAAI;EACtB,SAAS,GAAY;GACnB,gBAAgB,MAAM,CAAC;GACvB,MAAM;EACR,UAAU;GACR,KAAK,IAAI;EACX;CACF,CACF;AACF;;AAGA,SAAS,UAAU,OAAuB;CACxC,OAAO,YAAY,KAAK,CAAC,CAAC,SAAS,KAAK;AAC1C;;AAGA,eAAe,YACb,SACA,WACY;CACZ,IAAI;CAEJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAgB,UAAU,WAAW;GACvC,QAAQ,iBACA,uBAAO,IAAI,MAAM,mBAAmB,UAAU,GAAG,CAAC,GACxD,SACF;EACF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,UAAU,KAAA,GACZ,aAAa,KAAK;CAEtB;AACF;;;;;;;AC5nBA,MAAM,iBAAiB;AACvB,MAAM,mBAAmB,CACvB,gCACA,qBACF;AAEA,MAAM,mBAAmB;AACzB,MAAM,SAAS,QAAQ,IAAI,iBAAiB;AAE5C,MAAM,kBAAkB;;;;AAKxB,IAAa,UAAb,MAAqB;CAQnB,YACE,gBACA,mBACA,uBACA,UAAkB,iBAClB;EACA,KAAK,iBAAiB;EACtB,KAAK,oBAAoB;EACzB,KAAK,wBAAwB;EAC7B,KAAK,SAAS,KAAA;EACd,KAAK,UAAU;CACjB;CAEA,MAAM,OACJ,wBAKc;EACd,IAAI,KAAK,WAAW,KAAA,GAClB,KAAK,SAAS,IAAI,OAAO;GACvB,SAAS,EACP,SAAS,KAAK,QAChB;GAEA,OAAO;IACL,OAAO,KAAK,KAAK,MAAM,KAAK,oBAAoB,EAAA,CAAG,QAAQ,CAAC;IAC5D,SAAS,CAAC,OAAO,MAAM;GACzB;GAEA,OAAO;IACL,aAAa,CACX,OAAO,OAAO,eAAe;KAC3B,MAAM,UAAU,MAAM,KAAK,WAAW;KACtC,KAAK,sBAAsB;KAC3B,MAAM,UAAU,MAAM,KAAK,WAAW;KAEtC,IAAI,2BAA2B,KAAA,GAC7B,uBAAuB,OAAO,SAAS,OAAO;KAGhD,YAAY,KACV,wBAAwB,MAAM,KAAK,aAAa,YAClD;IACF,CACF;IAEA,eAAe,CACb,OAAO,YAAY;KAGjB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QACjC,oBAAoB,CACtB,GACE,QAAQ,QAAQ,QAAQ;KAI1B,MAAM,aAAkB,QAAQ;KAEhC,IAAI,KAAK,0BAA0B,UAAU,GAAG;MAC9C,MAAM,SAAc,IAAI,IAAI,UAAU;MAGtC,OAAO,QAAO,MADS,KAAK,WAAW,EAAA,CACrB;MAElB,QAAQ,MAAM;MACd,YAAY,MAAM,cAAc,WAAW,QAAQ,QAAQ;KAC7D,OACE,YAAY,MAAM,wBAAwB,YAAY;IAE1D,CACF;GACF;EACF,CAAC;EAGH,OAAO,KAAK;CACd;CAEA,wBAA8B;EAC5B,KAAK,iBAAiB,MAAM;CAC9B;CAEA,mBAAmB,MAAmB;EACpC,KAAK,kBAAkB;CACzB;CAEA,0BAA0B,KAAmB;EAC3C,IAAI,IAAI,WAAW,kBACjB,OAAO;EAGT,KAAK,MAAM,UAAU,kBACnB,IAAI,IAAI,KAAK,SAAS,MAAM,GAC1B,OAAO;EAIX,OAAO;CACT;CAEA,MAAM,oBAA8C;EAClD,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GACd,IAAI;GACF,OAAO,IAAI,IAAI,OAAO;EACxB,SAAS,KAAc;GACrB,YAAY,MACV,+DAA+D,eAAe,GAAG,GACnF;EACF;EAGF,IAAI,MAAuB,KAAA;EAC3B,IAAI;GAEF,OAAM,MADa,KAAK,oBAAoB,EAAA,CACjC;EACb,SAAS,KAAc;GACrB,YAAY,MACV,4CAA4C,eAAe,GAAG,GAChE;EACF;EAEA,IAAI,QAAQ,KAAA,GACV;OAIA,OAAO,IAAI,IAAI,GAAG;CAEtB;CAEA,MAAM,aAA2B;EAC/B,MAAM,MAAM,MAAM,KAAK,kBAAkB;EAEzC,IAAI,QAAQ,KAAA,GACV,OAAO,IAAI,IAAI,gBAAgB;EAGjC,OAAO;CACT;;;;;;;;CASA,MAAM,oBAA8C;EAClD,IAAI,KAAK,0BAA0B,IAGjC;EAGF,IACE,KAAK,0BAA0B,OAC/B,KAAK,0BAA0B,KAAA,GAE/B,IAAI;GAEF,OAAO,IAAI,IAAI,KAAK,qBAAqB;EAC3C,SAAS,KAAc;GACrB,YAAY,KACV,+DAA+D,eAAe,GAAG,GACnF;EACF;EAGF,IAAI;GACF,MAAM,gBAAgB,MAAM,KAAK,WAAW;GAC5C,cAAc,YAAY;GAC1B,OAAO;EACT,SAAS,KAAc;GACrB,YAAY,KACV,yFAAyF,eAAe,GAAG,GAC7G;GACA;EACF;CACF;CAEA,MAAc,sBAAsC;EAClD,IAAI,KAAK,oBAAoB,KAAA,GAC3B,KAAK,kBAAkB,6BACrB,MAAM,uBAAuB,CAC/B,CAAC,CAAC,SAAS,WAAW,YAAY,MAAM,KAAK,CAAC,CAAC;EAGjD,OAAO,KAAK;CACd;AACF;AAEA,SAAgB,YAAY,QAAoC;CAC9D,MAAM,SAAS,WAAW,OAAO,KAAK,GAAG,OAAO;CAChD,IAAI;EACF,OAAO,IAAI,IAAI,MAAM;CACvB,SAAS,KAAc;EACrB,YAAY,MACV,UAAU,KAAK,UAAU,MAAM,EAAE,4BAA4B,OAAO,IAAI,IAAI,EAC9E;EACA;CACF;AACF;AAEA,eAAe,yBAA+C;CAC5D,OAAO,MAAM,qBAAqB,WAAW,MAAM,GAAG,GAAK;AAC7D;AAEA,eAAsB,qBACpB,QACA,SACsB;CACtB,MAAM,kBAAwC,IAAI,SAC/C,SAAS,YAAY;EACpB,WAAW,SAAS,SAAS,CAAC,CAAC;CACjC,CACF;CAEA,IAAI;CAEJ,IAAI;EACF,UAAU,MAAM,QAAQ,KAAK,CAAC,QAAQ,eAAe,CAAC;CACxD,SAAS,QAAiB;EACxB,YAAY,MAAM,gCAAgC,eAAe,MAAM,GAAG;EAC1E,UAAU,CAAC;CACb;CAEA,MAAM,oBAAoB,QAAQ,QAAQ,WAA+B;EACvE,KAAK,MAAM,UAAU,kBACnB,IAAI,OAAO,KAAK,SAAS,MAAM,GAC7B,OAAO;EAIX,YAAY,MACV,iDAAiD,OAAO,MAC1D;EAEA,OAAO;CACT,CAAC;CAED,IAAI,kBAAkB,WAAW,GAC/B,YAAY,MAAM,wBAAwB,QAAQ;MAElD,YAAY,MACV,YAAY,OAAO,MAAM,KAAK,UAAU,iBAAiB,GAC3D;CAGF,OAAO;AACT;AAEA,SAAgB,6BACd,SACa;CACb,MAAM,mCAA6C,IAAI,IAAI;CAC3D,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,WAAW,iBAAiB,IAAI,OAAO,QAAQ;EACrD,IAAI,UACF,SAAS,KAAK,MAAM;OAEpB,iBAAiB,IAAI,OAAO,UAAU,CAAC,MAAM,CAAC;CAElD;CAEA,MAAM,qBAAkC,CAAC;CACzC,MAAM,OAAiB,MAAM,KAAK,iBAAiB,KAAK,CAAC,CAAC,CAAC,MACxD,GAAG,MAAM,IAAI,CAChB;CAEA,KAAK,MAAM,YAAY,MAAM;EAC3B,MAAM,gBAAgB,iBAAiB,IAAI,QAAQ;EACnD,IAAI,kBAAkB,KAAA,GACpB;EAGF,mBAAmB,KAAK,GAAG,eAAe,aAAa,CAAC;CAC1D;CAEA,OAAO;AACT;AAEA,SAAgB,eAAe,SAAmC;CAEhE,MAAM,iBAA8B,QAAQ,MAAM;CAClD,MAAM,SAAsB,CAAC;CAE7B,OAAO,eAAe,SAAS,GAAG;EAChC,MAAM,UAAoB,CAAC;EAGzB,KAAK,IAAI,IAAI,GAAG,IAAI,eAAe,QAAQ,KACzC,QAAQ,KACN,eAAe,EAAE,CAAC,UAAU,IAAI,IAAI,eAAe,IAAI,EAAE,CAAC,SAAS,EACrE;EAIJ,MAAM,QAAQ,KAAK,OAAO,IAAI,QAAQ,QAAQ,SAAS;EAEvD,KACE,IAAI,gBAAgB,GACpB,gBAAgB,QAAQ,QACxB,iBAEA,IAAI,QAAQ,iBAAiB,OAAO;GAElC,OAAO,KAAK,eAAe,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE;GACtD;EACF;CAEJ;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;ACrVA,MAAM,WAAW,SAA0B;CACzC,OAAO,YAAY,gBAAgB,IAAI;AACzC;;;;AAKA,MAAM,sBAAsB,SAAsC;CAChE,IAAI,qBAAqB,IAAI,MAAM,KAAA,GACjC;CAGF,OAAO,YAAY,gBAAgB,IAAI;AACzC;;;;;AAWA,MAAM,qBAAqB,MAAc,cAAmC;CAC1E,MAAM,WAAW,UAAU,IAAI;CAC/B,OAAO,aAAa,UAAU,SAAS;AACzC;;;;AAKA,MAAM,2BACJ,MACA,cACoB;CACpB,MAAM,WAAW,gBAAgB,IAAI;CACrC,IAAI,aAAa,MACf,OAAO;MAEP,OAAO,aAAa,UAAU,SAAS;AAE3C;AAGA,MAAa,gBAAgB,OAAe,cAAmC;CAC7E,MAAM,UAAU,cAAc,UAAU,MAAM;CAC9C,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,YAAY,IACd,OAAO,CAAC;CAGV,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC,KAAK,MAAc,EAAE,KAAK,CAAC;AAC3D;;;;AAKA,MAAM,4BAA4B,SAAkC;CAClE,MAAM,QAAQ,YAAY,kBAAkB,IAAI;CAChD,IAAI,MAAM,WAAW,GACnB,OAAO;MAEP,OAAO;AAEX;;;;AAKA,MAAM,mBAAmB,SAAgC;CACvD,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ,OAAO;MAEP,OAAO,OAAO,KAAK;AAEvB;;;;AAKA,MAAM,wBAAwB,SAAqC;CACjE,MAAM,QAAQ,qBAAqB,IAAI;CACvC,IAAI,UAAU,KAAA,GACZ;CAGF,OAAO,OAAO,KAAK;AACrB;;;;AAKA,MAAM,aAAa,SAAyB;CAC1C,OAAO,YAAY,SAAS,IAAI;AAClC;;;;AAKA,MAAM,mBAAmB,SAAgC;CACvD,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ,OAAO;MAEP,OAAO;AAEX;;;;AAKA,MAAM,wBAAwB,SAAqC;CACjE,MAAM,QAAQ,YAAY,SAAS,IAAI;CACvC,IAAI,UAAU,IACZ;MAEA,OAAO;AAEX;;;;;;;;;;;;;;;;;;;;;;;;AC1GA,SAAS,IACP,OACA,SACA,YACQ;CACR,MAAM,OAAO,OAAO,YAAY,WAAW,UAAU,eAAe,OAAO;CAE3E,cAAc,OAAO,MAAM,UAAU;CAErC,OAAO;AACT;;;;;AAMA,SAAgB,MAAM,SAAiB,YAA+B;CACpE,YAAY,MAAM,IAAI,SAAS,SAAS,UAAU,CAAC;AACrD;;AAGA,SAAgB,KAAK,SAAiB,YAA+B;CACnE,YAAY,KAAK,IAAI,QAAQ,SAAS,UAAU,CAAC;AACnD;;AAGA,SAAgB,OACd,SACA,YACA,YACM;CACN,IAAI,UAAU,SAAS,UAAU;CACjC,YAAY,OAAO,SAAS,UAAU;AACxC;;AAGA,SAAgB,QACd,SACA,YACA,YACM;CACN,IAAI,WAAW,SAAS,UAAU;CAClC,YAAY,QAAQ,SAAS,UAAU;AACzC;;AAGA,SAAgB,MACd,SACA,YACA,YACM;CACN,IAAI,SAAS,SAAS,UAAU;CAChC,YAAY,MAAM,SAAS,UAAU;AACvC;;;;AAKA,SAAgB,UAAU,SAAkB,YAA+B;CACzE,IAAI,SAAS,SAAS,UAAU;CAChC,YAAY,UAAU,OAAO;AAC/B;;;;;;;;;AAUA,eAAsB,MACpB,MACA,IACA,YACY;CACZ,OAAO,MAAM,SACX,MACA,YAAY;EACV,YAAY,WAAW,IAAI;EAC3B,IAAI;GACF,OAAO,MAAM,GAAG;EAClB,UAAU;GACR,YAAY,SAAS;EACvB;CACF,GACA,UACF;AACF;;;;;;;;;;;;;;ACtGA,SAAgB,YAAoB;CAClC,MAAM,UAAU,QAAQ,IAAI;CAC5B,MAAM,QAAQ,QAAQ,IAAI;CAE1B,IAAI,WAAW,OACb,OAAO,GAAG,QAAQ,GAAG;MAChB;EACL,YAAY,MACV,oEAAoE,QAAQ,GAAG,MAAM,EACvF;EACA,MAAM,IAAI,MAAM,6CAA6C;CAC/D;AACF;;;;AAKA,SAAgB,eAAe,QAAwB;CAQrD,MAAM,4BAAW,IAP0B,IAAI;EAC7C,CAAC,aAAa,eAAe;EAC7B,CAAC,eAAe,gBAAgB;EAChC,CAAC,aAAa,cAAc;EAC5B,CAAC,eAAe,eAAe;CACjC,CAEyB,EAAA,CAAE,IAAI,MAAM;CACrC,IAAI,UACF,OAAO;MACF;EACL,YAAY,MACV,WAAW,OAAO,2CACpB;EACA,MAAM,IAAI,MACR,0BAA0B,OAAO,+BACnC;CACF;AACF;;;;;;;;;;AC1BA,SAAgB,6BAA6B,QAAyB;CACpE,IACE,OAAO,QAAQ,KAAA,KACf,OAAO,QAAQ,KAAA,KACf,OAAO,aAAa,KAAA,GAEpB,MAAM,IAAI,MACR,wRACF;AAEJ;AAEA,SAAgB,0BAA0B,cAAkC;CAC1E,OAAO;EACL,MAAM,gBAAgB,QAAQ,YAAY;EAC1C,KAAK,gBAAgB,OAAO,YAAY;EACxC,KAAK,gBAAgB,OAAO,YAAY;EACxC,IAAI,gBAAgB,MAAM,YAAY;EACtC,QAAQ,gBAAgB,UAAU,YAAY;EAC9C,UAAU,gBAAgB,YAAY,YAAY;CACpD;AACF;AAEA,SAAS,gBACP,QACA,cACoB;CACpB,MAAM,iBAAiB,qBAAqB,UAAU,QAAQ;CAE9D,IAAI,CAAC,cACH,OAAO;CAKT,MAAM,cAAc,qBAAqB,GAAG,aAAa,GAAG,QAAQ;CAEpE,IAAI,kBAAkB,aAAa;EACjC,YAAY,QACV,+BAA+B,OAAO,yBAAyB,aAAa,GAAG,OAAO,mCAAmC,OAAO,wBAAwB,aAAa,GAAG,OAAO,EACjL;EACA,OAAO;CACT,OAAO,IAAI,aAAa;EACtB,YAAY,QACV,qBAAqB,aAAa,GAAG,OAAO,oCAAoC,OAAO,EACzF;EACA,OAAO;CACT,OACE,OAAO;AAEX;;;;;;;ACpCA,MAAM,qBAAqB;AAC3B,MAAM,qCACJ;AACF,MAAM,wBAAwB;AAC9B,MAAM,8BAA8B;AAIpC,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAC7B,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,0BAA0B;AAChC,MAAM,eAAe;AACrB,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAE5B,MAAM,yBAAyB;AAC/B,MAAM,gCAAgC;AACtC,MAAM,8BAA8B;AACpC,MAAM,gCAAgC;AACtC,MAAM,4BAA4B;AAClC,MAAM,gCAAgC;AACtC,MAAM,gCAAgC;AACtC,MAAM,+CACJ;AAEF,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AACnC,MAAM,0BAA0B;AAChC,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;AACzB,MAAM,+BAA+B;AAErC,MAAM,oBAAoB;AAC1B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AAInC,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAE7B,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAChC,MAAM,kBAAkB;AACxB,MAAM,2BAA2B;AACjC,MAAM,wBAAwB;AAC9B,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;AAIjC,MAAM,kBAAkB;AAGxB,MAAM,WAAW;AAGjB,MAAM,gBAAgB;AAEtB,MAAM,+BAA+B;AA+ErC,MAAM,sBAAsB;AAC5B,MAAM,0BAA0B,KAAK,KAAK,qBAAqB,eAAe;AAE9E,MAAM,SAAS,OAAO,QAAQ,YAAY,cAAc,QAAQ,QAAQ,MAAM;;AAG9E,eAAe,gCAA+C;CAC5D,MAAM,OAAO,MAAMC,OAAY,KAAK,QAAQ;EAC1C;EACA;EACA;CACF,CAAC;CAED,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,uBAAuB,MAAM;AAEjD;;AAGA,eAAe,4BAA2C;CACxD,IAAI,QACF,MAAM,MAAM,qBAAqB,EAAE,WAAW,KAAK,CAAC;MAEpD,OAAO,8BAA8B;AAEzC;;AAGA,eAAe,2BAA2B,QAA+B;CACvE,MAAM,SAAS,OAAO,KAAK,MAAM;CAEjC,MAAM,OAAO,MAAMA,OAAY,KAC7B,QACA,CAAC,OAAO,uBAAuB,GAC/B;EACE,OAAO;EAGP,WAAW,OAAO,kBAAkB,WAAW;CACjD,CACF;CAEA,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,kBAAkB,MAAM;AAE5C;;AAGA,eAAe,uBAAuB,QAA+B;CACnE,MAAM,0BAA0B;CAEhC,IAAI,QACF,MAAMC,KAAG,UAAU,yBAAyB,QAAQ,OAAO;MAE3D,OAAO,2BAA2B,MAAM;AAE5C;AAEA,IAAsB,eAAtB,MAAmC;CA6BjC,0BAAkD;EAEhD,IADqB,YAAY,SAAS,yBAC3B,MAAM,IAAI;GACvB,YAAY,UAAU,2BAA2B,MAAM;GACvD,OAAO;EACT,OACE,OAAO;CAEX;CAEA,YAAY,eAA8B;EACxC,KAAK,gBAAgB,qBAAqB,aAAa;EACvD,KAAK,UAAU,IAAI,QACjB,KAAK,cAAc,gBACnB,cAAc,mBAGd,QAAQ,IAAI,8BACZC,qBAA4B,iBAAiB,CAC/C;EACA,KAAK,YAAY,IAAIC,UAAe;EACpC,KAAK,uCAAuB,IAAI,IAAI;EACpC,KAAK,gBAAgB;EACrB,KAAK,aAAaC,QAAe,uBAAuB;EAExD,IACEC,mBACE,yDACF,MAAM,MACN;GACA,QAAQ,IAAI,kCAAkC,KAAA;GAC9C,QAAQ,IAAI,oCAAoC,KAAA;EAClD;EAEA,KAAK,WAAW,CAAC;EACjB,KAAK,oBAAoB,CAAC;EAE1B,KAAK,gBAAgB;EAErB,KAAK,WAAWC,SAAqB;EACrC,KAAK,SAASC,UAAmB;EACjC,KAAK,YAAYC,eAAwB,KAAK,MAAM;EAEpD,KAAK,gBAAgBC,WACP,CAAC,CAEZ,MAAM,aAAa;GAAE,MAAM,QAAQ;GAAM,SAAS,QAAQ;EAAQ,EAAE,CAAC,CAErE,OAAO,MAAe;GACrB,YAAY,MACV,qCAAqCC,iBAAe,CAAC,GACvD;EAEF,CAAC;EAEH,KAAK,iBAAiB,KAAK,wBAAwB;EAEnD,IAAI,KAAK,cAAc,eAAe,gBACpC,KAAK,0BAA0B,KAAK;OAC/B,IAAI,KAAK,cAAc,eAAe,aAC3C,KAAK,0BAA0B,KAAK;OAC/B,IAAI,KAAK,cAAc,eAAe,aAC3C,KAAK,0BAA0B;OAE/B,MAAM,IAAI,MACR,cAAc,KAAK,cAAc,WAAW,sBAC9C;EAGF,KAAK,mBAAmBC,0BACtB,KAAK,cAAc,kBACrB;CACF;;;;;;;;;;;CAYA,WAAW,MAAc,UAAwB;EAC/C,KAAK,qBAAqB,IAAI,MAAM,QAAQ;CAC9C;;;;CAeA,UAAgB;EAEd,KAAK,aAAa,CAAC,CAAC,OAAO,UAAiB;GAE1C,QAAQ,IAAI,KAAK;GACjB,QAAQ,WAAW;EACrB,CAAC;CACH;CAEA,mBAA2B;EACzB,MAAM,SAAS,QAAQ,IAAI,kBAAkB,OAAO;EACpD,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,cAAc,KAAK,GAAG,WAAW,GAAG;CACvE;;;;;;;;;;;;CAaA,aAAa,KAAa,OAAqC;EAC7D,IAAI,KAAK,cAAc,KAAA,GACrB,KAAK,kBAAkB,OAAO;OAE9B,KAAK,UAAU,aAAa,KAAK,KAAK;CAE1C;;;;;;;;;CAUA,MAAM,oBAA8C;EAClD,OAAO,MAAM,KAAK,QAAQ,kBAAkB;CAC9C;CAEA,cAAsB;EACpB,OACE,KAAK,SAAS,2CACd,QAAQ,IAAI,sBACZ,WAAW;CAEf;CAGA,kBAA0B;EACxB,IAAI,eAAe,YAAY,SAAS,wBAAwB;EAEhE,IAAI,iBAAiB,IAAI;GACvB,eAAe,WAAW;GAC1B,YAAY,UAAU,0BAA0B,YAAY;EAC9D;EAEA,OAAO;CACT;CAEA,uBAA0D;EACxD,OAAO,KAAK;CACd;;;;;;;;;;CAWA,SAAS,MAAc,YAAuC;EAE5D,CADa,QAAQ,MAAM,cAAc,KAAK,KAAK,UAAA,EAC7C,SAAS,MAAM,UAAU;CACjC;;;;;;CAOA,MAAM,cAAc,KAA8B;EAChD,MAAM,WAAW,MAAM,KAAK,cAAc;EAC1C,MAAM,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC,CACtC,QAAQ,SAAS,+BACnB;EAGA,OAAO,GAFO,OAAO,MAAM,GAAG,GACT,CAAC,CAAC,GAAG,EACT,EAAE,OAAO;CAC5B;;;;;CAMA,MAAM,kBAAmC;EACvC,MAAM,aAAa,MAAM,KAAK,cAAc;EAC5C,MAAM,MACJ,YACA,OAAO,UAAU,UAAU,OAAO,UAAU,OAC9C;EACA,OAAO;CACT;CAEA,IAAY,SAAkB;EAC5B,OAAO,KAAK,mBAAmB;CACjC;CAEA,IAAY,SAAkB;EAC5B,OAAO,KAAK,mBAAmB;CACjC;CAEA,MAAc,eAA8B;EAG1C,MAAM,iCAAiB,IAAI,KAAK;EAEhC,IAAI;GAGF,KAAK,iBAAiB,cAAc;GAEpC,MAAM,KAAK,eAAe;GAC1B,KAAK,eAAe,cAAc;GAElC,MAAM,KAAK,oBAAoB,YAAY;IACzC,MAAMC,SAAc,eAAe,YAAY;KAC7C,MAAM,KAAK,QAAQ;IACrB,CAAC;IAED,MAAM,oBAAoB,KAAK,UAAU,KAAK,qBAAqB,CAAC;IACpE,QAAQ,IAAI,qBAAqB;IACjC,IAAI;KACF,MAAM,uBAAuB,iBAAiB;IAChD,SAAS,OAAO;KACd,KAAK,SAAS,6BAA6B,GACxC,QAAQ,yBAAyBF,iBAAe,KAAK,EACxD,CAAC;IACH;IAEA,IAAI,CAAE,MAAM,KAAK,oBAAoB,GAAI;KACvC,KAAK,SAAS,kCAAkC;KAChD;IACF,OAAO;KACL,MAAM,KAAK,sBAAsB;KACjC,MAAM,KAAK,oBAAoB;KAC/B,KAAK,aAAa,sBAAsB,KAAK,aAAa;IAC5D;IAEA,IAAI,KAAK,QAAQ;KACf,MAAM,KAAK,KAAK;KAIhB,MAAM,KAAK,oBAAoB;IACjC,OAAO,IAAI,KAAK,QACd,MAAM,KAAK,KAAK;GAEpB,CAAC;EACH,SAAS,GAAY;GACnB,MAAM,aAAaA,iBAAe,CAAC;GAGnC,IAAI,KAAK,cAAc,KAAA,GACrB,gBAAqB,KAAK,WAAW,CAAC;GAGxC,IAAI,KAAK,QACP,QAAY,UAAU;QAEtB,UAAc,UAAU;GAG1B,MAAM,KAAK,oBAAoB,YAAY;IACzC,MAAM,KAAK,gBAAgB;GAC7B,CAAC;EACH,UAAU;GACR,MAAM,KAAK,SAAS;EACtB;CACF;;;;;CAMA,MAAc,oBAAuB,IAAkC;EACrE,MAAM,OAAO,KAAK;EAElB,IAAI,SAAS,KAAA,GACX,OAAO,MAAM,GAAG;EAGlB,OAAO,MAAM,QAAQ,QAAQ,KAC3B,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,OAAO,GAAG,IAAI,GACpD,EACF;CACF;;;;;;;;;;;;CAaA,MAAc,iBAAgC;EAC5C,KAAK,UAAU,MAAM;GAEnB,aAAa,GAAG,KAAK,cAAc,KAAK;GAExC,gBAAgB,QAAQ,IAAI;GAC5B,oBAAoB,MAAM,KAAK,4BAA4B;EAC7D,CAAC;CACH;;;;;;;;;;;;;;;;;;;;;;CAuBA,iBAAyB,WAAuB;EAC9C,IAAI,CAAC,KAAK,UAAU,CAACG,cAAmB,GACtC;EAGF,IAAI,QAAQ,IAAI,kBACd;EAGF,MAAM,cAAcC,eAAoB;EAIxC,YAAY,eAAe,iBAAiB,WAAW;EAEvD,YAAY,UAAU,2BAA2B,WAAW;EAC5D,YAAY,UAAU,0BAA0B,GAAG,UAAU,QAAQ,GAAG;CAC1E;;;;;;;;;CAUA,aAA2B;EACzB,IAAI,CAAC,KAAK,QACR;EAGF,MAAM,cAAc,YAAY,SAAS,yBAAyB;EAClE,IAAI,gBAAgB,IAClB;EAGF,MAAM,YAAY,SAChB,YAAY,SAAS,wBAAwB,GAC7C,EACF;EAEA,KAAK,UACF,mBACC,UACA,aACA,IAAI,KAAK,OAAO,SAAS,SAAS,IAAI,YAAY,KAAK,IAAI,CAAC,CAC9D,CAAC,EACC,IAAI;CACV;;;;;;;;;;;;;CAcA,eAAuB,WAAuB;EAC5C,IAAI,CAAC,KAAK,UAAU,SAClB;EAGF,MAAM,SACJ,YAAY,SAAS,qBAAqB,KAC1C,QAAQ,IAAI,oBACZ,KAAA;EAEF,MAAM,OAAOC,UACA,CAAC,CACX,UACC,GAAG,KAAK,cAAc,KAAK,GAAG,KAAK,kBACnC,EAAE,UAAU,GACZC,uBAA4B,MAAM,CACpC;EAEF,KAAK,cAAc,KAAK,iBAAiB;EACzC,KAAK,oBAAoB,CAAC;EAE1B,MAAM,cAAcC,cAAmB,IAAI;EAC3C,IAAI,gBAAgB,KAAA,GAAW;GAI7B,QAAQ,IAAI,mBAAmB;GAE/B,IAAI,KAAK,QACP,YAAY,UAAU,uBAAuB,WAAW;EAE5D;EAEA,KAAK,YAAY;CACnB;;;;;;;CAQA,MAAc,8BAA2D;EACvE,MAAM,UAAU,MAAM,KAAK;EAE3B,OAAO;IACJ,kBAAkB,eAAe,OAAO;IACxC,kBAAkB,iBAAiB,SAAS;GAC7C,GAAI,SAAS,SAAS,KAAA,KAAa,QAAQ,SAAS,YAChD,CAAC,IACD,GAAG,kBAAkB,eAAe,QAAQ,KAAK;GACrD,GAAI,SAAS,YAAY,KAAA,KAAa,QAAQ,YAAY,YACtD,CAAC,IACD,GAAG,kBAAkB,kBAAkB,QAAQ,QAAQ;IAE1D,eAAe,KAAK,cAAc;IAClC,mBAAmB,KAAK,cAAc;IACtC,uBAAuB,KAAK;IAC5B,sBAAsB,KAAK,gBAAgB;IAC3C,oBAAoB,KAAK,SAAS;IAClC,0BAA0B,KAAK,SAAS;IACxC,eAAe,KAAK;IACpB,kBAAkB,KAAK;IAEvB,yBAAyB,QAAQ,IAAI;IACrC,gCAAgC,QAAQ,IAAI;IAC5C,8BAA8B,KAAK,SAAS;IAC5C,gCACC,KAAK,SAAS,QAAQ;IACvB,4BAA4B,KAAK,SAAS;IAC1C,gCAAgC,KAAK,SAAS;IAC9C,gCAAgC,KAAK,SAAS;IAC9C,+CACC,KAAK,SAAS;EAClB;CACF;;;;;;;;CASA,iBAAqC;EACnC,OAAOA,cAAmB,QAAQ,MAAM,cAAc,KAAK,KAAK,SAAS;CAC3E;;;;;;;;;;;;CAaA,MAAM,0BAA2D;EAC/D,IAAI,CAAC,KAAK,UAAU,SAClB,OAAO,CAAC;EAGV,MAAM,cAAsCC,sBAA2B;EAEvE,MAAM,cAAc,KAAK,eAAe;EACxC,IAAI,gBAAgB,KAAA,GAClB,YAAY,mBAAmB;EAGjC,OAAO;CACT;CAEA,MAAM,YAA0B;EAC9B,OAAO,MAAM,KAAK,QAAQ,QACvB,eAAwB,SAAc,YAAiB;GACtD,KAAK,uBAAuB,aAAa;GAEzC,KAAK,SAAS,oBAAoB;IAChC,2BAA2B,QAAQ,SAAS;IAC5C,uBAAuB,QAAQ,SAAS;GAC1C,CAAC;EACH,CACF;CACF;;;;;CAMA,MAAc,UAAyB;EACrC,MAAM,UAAU,MAAM,KAAK,eAAe;EAC1C,IAAI,YAAY,KAAA,GACd;EAGF,KAAK,WAAW,QAAQ;EAExB,MAAM,+BAAoC,IAAI,IAAI;GAChD,CAAC,QAAQ,GAAG;GACZ,CAAC,eAAe,KAAK;GACrB,CAAC,SAAS,IAAI;GACd,CAAC,SAAS,IAAI;GACd,CAAC,YAAY,IAAI;EACnB,CAAC;EACD,MAAM,sBAAsB;EAE5B,IAAI,QAAQ,WAAW,MAAM;GAC3B,MAAM,YAAsB,CAAC;GAE7B,KAAK,MAAM,YAAY,QAAQ,OAAO,WACpC,UAAU,KACR,GAAG,aAAa,IAAI,SAAS,MAAM,KAAK,oBAAoB,GAAG,SAAS,OAAO,QAAQ,KAAK,GAAG,EAAE,IAAI,SAAS,KAAK,IAAI,SAAS,UAAU,EAC5I;GAGF,KAAK,MAAM,eAAe,QAAQ,OAAO,wBACvC,UAAU,KACR,GAAG,aAAa,IAAI,YAAY,MAAM,KAAK,oBAAoB,GAAG,YAAY,OAAO,QAAQ,KAAK,GAAG,EAAE,IAAI,YAAY,KAAK,IAAI,YAAY,UAAU,EACxJ;GAGF,IAAI,UAAU,SAAS,GAAG;IACxB,YAAY,KAEV,kBAAgD,QAAQ,OAAO,KAAK,KAAK,QAC3E;IACA,KAAK,MAAM,UAAU,WACnB,YAAY,KAAK,MAAM;IAEzB,YAAY,KAAK,QAAQ,QAAQ,OAAO,KAAK,KAAK;IAClD,YAAY,KAAK,EAAE;GACrB;EACF;CACF;;;;;;;;;CAUA,WAAW,MAAmC;EAC5C,IAAI,CAAC,KAAK,SAAS,eAAe,IAAI,GACpC;EAGF,MAAM,UAAU,KAAK,SAAS;EAC9B,KAAK,aAAa,GAAG,sBAAsB,QAAQ,QAAQ,OAAO;EAElE,OAAO;CACT;;;;;;;;;;CAWA,MAAc,0BAA4D;EAExE,MAAM,aAAwD;GAC5D,IAAI;GACJ,MAAM;GACN,cAAc;GACd,WAAW,GAAG,KAAK,cAAc,KAAK;GACtC,SAAS,KAAK,cAAc;GAC5B,aAAa,KAAK,cAAc;GAChC,SAAS,KAAK;GACd,YAAY,KAAK;GACjB,iBAAiB,KAAK;EACxB;EASA,KAAK,MAAM,CAAC,QAAQ,aAAa;GAN/B,CAAC,qBAAqB,mBAAmB;GACzC,CAAC,4BAA4B,0BAA0B;GACvD,CAAC,qBAAqB,mBAAmB;GACzC,CAAC,OAAO,WAAW;GACnB,CAAC,QAAQ,aAAa;EAEuB,GAAG;GAChD,MAAM,QAAQ,QAAQ,IAAI;GAC1B,IAAI,OACF,WAAW,UAAU;EAEzB;EAEA,MAAM,UAAU,MAAM,KAAK;EAC3B,IAAI,YAAY,KAAA,GAAW;GACzB,IAAI,QAAQ,SAAS,WACnB,WAAW,MAAM,QAAQ;GAE3B,IAAI,QAAQ,YAAY,WACtB,WAAW,cAAc,QAAQ;EAErC;EAGA,OAAO;GAAE,GAAG;GAAY,GAAG,KAAK;EAAS;CAC3C;;;;;;;;CASA,MAAc,iBAA+C;EAC3D,KACE,IAAI,oBAAoB,GACxB,oBAAoB,GACpB,qBACA;GACA,MAAM,aAAa,MAAM,KAAK,cAAc;GAC5C,IAAI,eAAe,KAAA,GACjB;GAGF,IAAI;IACF,YAAY,MAAM,oBAAoB,YAAY;IAGlD,MAAM,QAAQ;KAEZ,aAAa,KAAK,SAAS;KAC3B,kBAAkB,KAAK,SAAS;KAChC,QAAQ,KAAK,SAAS;KACtB,mBAAmB,MAAM,KAAK,wBAAwB;IACxD;IAGA,OAAO,OACL,MAAM,KAAK,UAAU,EAAA,CAEpB,KAAK,YAAY;KAChB,MAAM;KACN,SAAS,EACP,SAAS,6BACX;IACF,CAAC,CAAC,CACD,KAAK;GACV,SAAS,GAAY;IACnB,KAAK,uBAAuB,CAAC;IAC7B,YAAY,MAAM,sBAAsBR,iBAAe,CAAC,GAAG;IAC3D,KAAK,QAAQ,sBAAsB;GACrC;EACF;CAGF;CAEA,uBAA+B,GAAkB;EAE/C,IAAI,aAAa,gBAAgB,aAAa,KAAK,aAAa,GAAG;GACjE,MAAM,aAAiC;KACpC,QAAQ,gBAAgB,EAAE,QAAQ,YAAY,SAAS;KACvD,QAAQ,iCAAiC,EAAE,QAAQ;GACtD;GAEA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,EAAE,QAAQ,MAAM,GACxD,IAAI,OAAO,SAAS,KAAK,GACvB,WAAW,sBAAsB,SAAS;GAI9C,KAAK,SAAS,uBAAuB,UAAU;EACjD;CACF;;;;;;;;;;;;;CAcA,MAAc,gBAAiC;EAC7C,MAAM,eAAeS,gBAAuB,eAAe;EAG3D,IAAI,iBAAiB,QAAQ,iBAAiB,IAAI;GAChD,MAAU,uCAAuC,cAAc;GAC/D,OAAO;EACT;EAEA,OAAO,MAAMP,SACX,kBACA,OAAO,SAAS;GACd,MAAM,uBAAuB,MAAM,KAAK,4BAA4B;GAEpE,YAAY,WACV,eAAe,KAAK,cAAc,KAAK,OAAO,KAAK,yBACrD;GAEA,IAAI;IACF,KAAS,iBAAiB,MAAM,KAAK,aAAa,GAAG;IAErD,MAAM,gBAAgB,MAAM,KAAK,aAAa;IAC9C,cAAc,aAAa,IAAI,MAAM,QAAQ;IAC7C,cAAc,aAAa,IACzB,eACA,KAAK,UAAU,KAAK,QAAQ,CAC9B;IAEA,MAAM,iBAAiB,OACrB,MAAM,KAAK,UAAU,EAAA,CACrB,KAAK,aAAa;IACpB,IAAI,eAAe,QAAQ,MAAM;KAC/B,MAAM,IAAI,eAAe,QAAQ;KACjC,KAAK,aAAa,kBAAkB,CAAC;KAErC,MACE,+BAA+B,MAAM,KAAK,aAAa,EAAE,MAAM,GACjE;KACA,MAAM,SAAS,MAAM,KAAK,iBAAiB,GAAG,oBAAoB;KAClE,IAAI,QAAQ;MACV,KAAK,aAAa,yBAAyB,IAAI;MAC/C,MAAU,iBAAiB;MAC3B,MAAM,KAAK,mBAAmB,QAAQ,oBAAoB;MAC1D,OAAO;KACT;IACF;IAEA,KAAK,aAAa,yBAAyB,KAAK;IAEhD,MACE,2DAA2D,eAAe,KAC5E;IAEA,MAAM,WAAW,KAAK,iBAAiB;IAEvC,MAAM,cAAc,MAAM,KAAK,aAC7B,IAAI,IAAI,eAAe,GAAG,GAC1B,QACF;IAEA,MAAM,KAAK,mBAAmB,UAAU,oBAAoB;IAE5D,IAAI,YAAY,UAAU,QAAQ,MAAM;KACtC,MAAM,IAAI,YAAY,SAAS,QAAQ;KAEvC,IAAI;MACF,MAAM,KAAK,kBAAkB,GAAG,UAAU,oBAAoB;KAChE,SAAS,GAAY;MACnB,MAAU,+BAA+BF,iBAAe,CAAC,GAAG;KAC9D;IACF;IAEA,OAAO;GACT,SAAS,GAAY;IACnB,KAAK,uBAAuB,CAAC;IAC7B,MAAM;GACR,UAAU;IACR,YAAY,SAAS;GACvB;EACF,GACA;IACG,qBAAqB,KAAK,cAAc;IACxC,6BAA6B,KAAK;EACrC,CACF;CACF;;;;;;;;CASA,MAAc,8BAAsD;EAClE,MAAM,eAAeS,gBAAuB,sBAAsB;EAClE,MAAM,kBAAkBA,gBAAuB,yBAAyB;EAExE,IAAI,iBAAiB,QAAQ,oBAAoB,MAC/C,OAAO;EAET,IAAI,iBAAiB,QAAQ,oBAAoB,MAC/C,MAAM,IAAI,MACR,2EACF;EAGF,6BAAuC,KAAK,gBAAgB;EAE5D,MAAM,mBAAmB,gBAAgB,YAAY;EACrD,KAAK,aAAa,8BAA8B,gBAAgB;EAEhE,MAAM,YAAY,IAAI,IAAI,YAAY;EACtC,MAAM,UAAU,UAAU,SAAS,UAAU;EAE7C,YAAY,KAAK,gCAAgC,SAAS;EAE1D,MAAM,QAAO,OADW,MAAM,KAAK,UAAU,EAAA,CAAG,IAAI,YAAY,EAAA,CAC1C;EAEtB,MAAM,iBAAiBC,eAAyB,IAAI;EACpD,IAAI,mBAAmB,kBACrB,MAAM,IAAI,MACR,mCAAmC,QAAQ,aAAa,iBAAiB,QAAQ,gBACnF;EAGF,MAAM,SAAS,GAAG,KAAK,cAAc,KAAK,GAAG,KAAK;EAElD,MAAM,eADSC,mBAA6B,IAClB,CAAC,CAAC,IAAI,MAAM;EACtC,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,MAAM,gBAAgB,OAAO,wBAAwB,SAAS;EAE1E,OAAO;CACT;;;;;CAMA,MAAc,mBACZ,UACA,UACe;EACf,IAAI,aAAa,MACf;EAEF,MAAM,SAAS,MAAMC,aAAuB,QAAQ;EACpD,IAAI,WAAW,UACb,MAAM,IAAI,MACR,8BAA8B,KAAK,wBAAwB,aAAa,SAAS,QAAQ,QAC3F;CAEJ;;;;;CAMA,YAAY,KAAmB;EAC7B,IAAI,KAAK,YACP,YAAY,UAAU,wBAAwB,KAAK;CAEvD;CAEA,MAAc,aACZ,KACA,aACkB;EAClB,OAAO,MAAMV,SAAc,iBAAiB,YAC1C,KAAK,SAAS,KAAK,WAAW,CAChC;CACF;CAEA,MAAc,SACZ,KACA,aACkB;EAClB,MAAM,SAAS,MAAM,KAAK,UAAU;EAEpC,OAAO,IAAI,SAAS,SAAS,WAAW;GAEtC,IAAI;GAGJ,IAAI,SAAS;GAEb,MAAM,SAAS,WAA0B;IACvC,IAAI,aACF,YAAY,QAAQ;IAGtB,cAAc,OAAO,kBAAkB,aAAa;KAClD,UAAU;KACV,MAAM;IACR,CAAC;IAED,YAAY,KAAK,UAAU,UAAU;KAEnC,SAAS;KACT,OAAO,KAAK;IACd,CAAC;IAED,YAAY,GAAG,gBAAgB;KAC7B,IAAI,CAAC,QACH,QAAQ,MAAM;IAElB,CAAC;IAED,OAAO,KAAK,UAAU,QAAQ,QAAQ,sBAAsB;KAE1D,MAAM,kBAAkB,CAAC;IAC3B,CAAC;IAID,OAAO,KAAK,WAAW;GACzB;GAGA,MAAM,OAAO,OAAO,GAAG,CAAC;EAC1B,CAAC;CACH;CAEA,MAAc,WAA0B;EACtC,KAAK,WAAW,IAAI;EACpB,KAAK,YAAY,KAAA;EAGjB,KAAK,WAAW;EAIhB,MAAM,KAAK,UAAU,SAAS;CAChC;CAEA,MAAc,gBAA0C;EACtD,MAAM,aAAa,MAAM,KAAK,QAAQ,kBAAkB;EAExD,IAAI,eAAe,KAAA,GACjB;EAGF,WAAW,YAAY;EACvB,OAAO;CACT;CAEA,MAAc,eAA6B;EACzC,MAAM,IAAI,KAAK;EAEf,IAAI,EAAE,KAAK;GACT,KAAK,aAAa,iBAAiB,EAAE,GAAG;GACxC,OAAO,IAAI,IAAI,EAAE,GAAG;EACtB;EAEA,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW;EAC/C,SAAS,YAAY,KAAK,cAAc;EAExC,IAAI,EAAE,KACJ,SAAS,YAAY,QAAQ,EAAE;OAC1B,IAAI,EAAE,IACX,SAAS,YAAY,OAAO,EAAE;OACzB,IAAI,EAAE,QACX,SAAS,YAAY,WAAW,EAAE;OAC7B,IAAI,EAAE,UACX,SAAS,YAAY,QAAQ,EAAE;OAE/B,SAAS,YAAY;EAGvB,SAAS,YAAY,IAAI,KAAK;EAE9B,KAAK,aAAa,iBAAiB,SAAS,SAAS,CAAC;EAEtD,OAAO;CACT;CAEA,SAAiB,SAAiB,cAAqC;EACrE,MAAM,iBAAiB,QAAQ,QAAQ,oBAAoB,EAAE;EAC7D,MAAM,aAAa,eAAe,KAAK,iBAAiB;EACxD,OAAO,qBAAqB,KAAK,cAAc,KAAK,GAAG,KAAK,wBAAwB,GAAG,iBAAiB;CAC1G;CAEA,MAAc,iBACZ,SACA,cAC6B;EAC7B,OAAO,MAAMA,SAAc,0BAA0B,OAAO,SAAS;GACnE,MAAM,WAAW,QAAQ,IAAI;GAE7B,IAAI;IACF,MAAM,UAAU,KAAK,iBAAiB;IACtC,MAAM,MAAM,OAAO;IACnB,QAAQ,MAAM,OAAO;IAGrB,QAAQ,IAAI,0BAA0B,QAAQ,IAAI;IAClD,OAAO,QAAQ,IAAI;IAEnB,IACE,MAAM,aAAa,aACjB,CAAC,KAAK,cAAc,IAAI,GACxB,KAAK,SAAS,SAAS,YAAY,GACnC,CAAC,GACD,KAAA,GACA,IACF,GACA;KACA,KAAK,aAAa,yBAAyB,IAAI;KAC/C,OAAO,GAAG,QAAQ,GAAG,KAAK,cAAc;IAC1C;IAEA,KAAK,aAAa,yBAAyB,KAAK;IAChD;GACF,UAAU;IACR,QAAQ,IAAI,mBAAmB,QAAQ,IAAI;IAC3C,OAAO,QAAQ,IAAI;IACnB,QAAQ,MAAM,QAAQ;GACxB;EACF,CAAC;CACH;CAEA,MAAc,kBACZ,SACA,UACA,cACe;EACf,OAAO,MAAMA,SAAc,0BAA0B,YAAY;GAC/D,MAAM,WAAW,QAAQ,IAAI;GAE7B,IAAI;IACF,MAAM,UAAU,KAAK,iBAAiB;IACtC,MAAM,MAAM,OAAO;IACnB,QAAQ,MAAM,OAAO;IACrB,MAAM,SAAS,UAAU,GAAG,QAAQ,GAAG,KAAK,cAAc,MAAM;IAGhE,QAAQ,IAAI,0BAA0B,QAAQ,IAAI;IAClD,OAAO,QAAQ,IAAI;IAEnB,MAAM,aAAa,UACjB,CAAC,KAAK,cAAc,IAAI,GACxB,KAAK,SAAS,SAAS,YAAY,GACnC,KAAA,GACA,IACF;GACF,UAAU;IACR,QAAQ,IAAI,mBAAmB,QAAQ,IAAI;IAC3C,OAAO,QAAQ,IAAI;IACnB,QAAQ,MAAM,QAAQ;GACxB;EACF,CAAC;CACH;;;;;CAMA,MAAc,kBAAiC;EAC7C,KAAK,MAAM,CAAC,MAAM,aAAa,KAAK,sBAAsB;GACxD,MAAM,aAAiC;KACpC,uBAAuB;KACvB,uBAAuB,SAAS,SAAS;GAC5C;GAEA,IAAI;IACF,cACE,SACA,MAAM,SAAS,UAAU,OAAO,GAChC,UACF;GACF,SAAS,YAAqB;IAC5B,cAAmB,SAAS,0BAA0B;KACpD,GAAG;MACF,QAAQ,yBAAyBF,iBAAe,UAAU;IAC7D,CAAC;GACH;EACF;CACF;CAEA,MAAc,sBAAwC;EACpD,OAAO,MAAME,SAAc,yBAAyB,YAAY;GAC9D,IAAI;GAEJ,MAAM,aAAa,QAAQ,IAAI,WAAW,GAAA,CAAI,MAAM,GAAG;GACvD,KAAK,MAAM,YAAY,WAAW;IAChC,MAAM,eAAe,KAAK,KAAK,UAAU,KAAK;IAE9C,IAAI;KACF,MAAMX,KAAG,OAAO,cAAcA,KAAG,UAAU,IAAI;KAC/C,MAAU,gBAAgB,cAAc;KACxC,cAAc;KACd;IACF,QAAQ;KACN,YAAY,MAAM,cAAc,cAAc;IAChD;GACF;GACA,KAAK,aAAa,mBAAmB,eAAe,EAAE;GAEtD,IAAI,KAAK,cAAc,eAAe,UACpC,OAAO;GAMT,IAH6B,YAAY,SACvC,uBAEqB,MAAM,iBAE3B,OAAO;GAGT,IAAI,gBAAgB,KAAA,GAClB,OAAO;GAET,YAAY,UAAU,yBAAyB,eAAe;GAE9D,QAAQ,KAAK,cAAc,YAA3B;IACE,KAAK;KACH,UACE,CACE,uDACA,sFACF,CAAC,CAAC,KAAK,GAAG,CACZ;KACA;IACF,KAAK,QACH,QACE,CACE,8DACA,sFACF,CAAC,CAAC,KAAK,GAAG,CACZ;GAEJ;GAEA,OAAO;EACT,CAAC;CACH;CAEA,MAAc,wBAAuC;EACnD,OAAO,MAAMW,SAAc,4BAA4B,OAAO,SAAS;GACrE,IAAI,SAAS;GAEb,MAAM,UAAmC,CAAC;GAC1C,QAAQ,SAAS;GACjB,QAAQ,YAAY,EAClB,SAAS,SAAS;IAChB,UAAU,KAAK,SAAS;GAC1B,EACF;GAEA,IAAI;IACF,SAAS;IACT,MAAMZ,OAAY,KAAK,OAAO;KAAC;KAAS;KAAQ;IAAQ,GAAG,OAAO;IAClE,KAAK,aAAa,6BAA6B,MAAM;GACvD,QAAQ;IACN,IAAI;KAEF,SAAS;KACT,MAAMA,OAAY,KAAK,OAAO;MAAC;MAAS;MAAQ;KAAQ,GAAG,OAAO;KAClE,KAAK,aAAa,6BAA6B,MAAM;IACvD,QAAQ;KACN,KAAK,aAAa,6BAA6B,MAAM;KACrD;IACF;GACF;GAEA,IAAI;IACF,MAAM,SAAS,KAAK,MAAM,MAAM;IAChC,IAAI,OAAO,YAAY,QAAQ,OAAO,YAAY,GAChD,KAAK,gBAAgB;SAChB,IAAI,OAAO,YAAY,SAAS,OAAO,YAAY,GACxD,KAAK,gBAAgB;SAChB,IAAI,OAAO,YAAY,KAAA,GAC5B,KAAK,aACH,4BACA,6BAA6B,KAAK,UAAU,OAAO,OAAO,GAC5D;IAGF,KAAK,aACH,wBACA,KAAK,UAAU,OAAO,OAAO,CAC/B;GACF,SAAS,GAAY;IACnB,KAAK,aAAa,4BAA4BU,iBAAe,CAAC,CAAC;GACjE;GAEA,KAAK,aAAa,sBAAsB,KAAK,aAAa;EAC5D,CAAC;CACH;CAEA,MAAc,sBAAqC;EACjD,OAAO,MAAME,SAAc,yBAAyB,OAAO,SAAS;GAClE,IAAI,SAAS;GAEb,IAAI;IACF,CAAC,CAAE,QAAQ,UAAW,MAAMZ,OAAY,cACtC,OACA,CAAC,WAAW,GACZ,EACE,QAAQ,KACV,CACF;IACA,SAAS,OAAO,KAAK,KAAK;GAC5B,QAAQ,CAER;GAEA,KAAK,aAAa,kBAAkB,MAAM;GAC1C,KAAK,aAAa,kBAAkB,MAAM;EAC5C,CAAC;CACH;AACF;AAEA,SAASU,iBAAe,OAAwB;CAC9C,OAAO,iBAAiB,SAAS,OAAO,SAAS,WAC7C,MAAM,SAAS,IACf,KAAK,UAAU,KAAK;AAC1B;;;;AAKA,SAAS,SAAiB;CACxB,QAAQa,UAAR;EACE,KAAK,SACH,OAAO,kBAAkB;EAC3B,KAAK,UACH,OAAO,kBAAkB;EAC3B,KAAK,SACH,OAAO,kBAAkB;EAC3B,SACE,OAAOA;CACX;AACF;;;;AAKA,SAAS,WAAmB;CAC1B,QAAQC,MAAR;EACE,KAAK,OACH,OAAO,kBAAkB;EAC3B,KAAK,SACH,OAAO,kBAAkB;EAC3B,KAAK,QACH,OAAO,kBAAkB;EAC3B,KAAK,OACH,OAAO,kBAAkB;EAC3B,SACE,OAAOA;CACX;AACF;AAEA,SAAS,qBACP,eACwB;CACxB,MAAM,iBAAiB,cAAc,kBAAkB,cAAc;CAErE,MAAM,YAAoC;EACxC,MAAM,cAAc;EACpB;EACA,YAAY,cAAc;EAC1B,oBAAoB,cAAc;EAClC,YAAY,cAAc;CAC5B;CAEA,YAAY,MAAM,iBAAiB;CACnC,YAAY,MAAM,KAAK,UAAU,WAAW,KAAA,GAAW,CAAC,CAAC;CAEzD,OAAO;AACT"}