@dsh-enhanced/plugin-control-plane 0.1.48 → 0.1.49
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +183 -15
- package/bin/dsh-live-qualification-authority.js +15 -0
- package/bin/dsh-local-release-adapter.js +328 -8
- package/bin/dsh-systemd-host-attestor.js +359 -9
- package/bin/dsh-systemd-host-authority.js +12 -0
- package/lib/adoption-coordinator.d.ts +3 -1
- package/lib/adoption-coordinator.d.ts.map +1 -1
- package/lib/adoption-coordinator.js +24 -9
- package/lib/adoption-coordinator.js.map +1 -1
- package/lib/cli.d.ts.map +1 -1
- package/lib/cli.js +33 -14
- package/lib/cli.js.map +1 -1
- package/lib/creation-capability-feedback.d.ts +23 -0
- package/lib/creation-capability-feedback.d.ts.map +1 -0
- package/lib/creation-capability-feedback.js +132 -0
- package/lib/creation-capability-feedback.js.map +1 -0
- package/lib/creation-capability-journal.d.ts +66 -0
- package/lib/creation-capability-journal.d.ts.map +1 -0
- package/lib/creation-capability-journal.js +751 -0
- package/lib/creation-capability-journal.js.map +1 -0
- package/lib/creation-capability-runtime.d.ts +63 -0
- package/lib/creation-capability-runtime.d.ts.map +1 -0
- package/lib/creation-capability-runtime.js +564 -0
- package/lib/creation-capability-runtime.js.map +1 -0
- package/lib/creation-capability-source.d.ts +37 -0
- package/lib/creation-capability-source.d.ts.map +1 -0
- package/lib/creation-capability-source.js +328 -0
- package/lib/creation-capability-source.js.map +1 -0
- package/lib/creation-capability-types.d.ts +252 -0
- package/lib/creation-capability-types.d.ts.map +1 -0
- package/lib/creation-capability-types.js +2 -0
- package/lib/creation-capability-types.js.map +1 -0
- package/lib/deployment-readiness.d.ts +16 -0
- package/lib/deployment-readiness.d.ts.map +1 -1
- package/lib/deployment-readiness.js +48 -1
- package/lib/deployment-readiness.js.map +1 -1
- package/lib/effect-blocked-replay.js +2 -2
- package/lib/effect-blocked-replay.js.map +1 -1
- package/lib/foreground-deployment-runtime.d.ts +3 -0
- package/lib/foreground-deployment-runtime.d.ts.map +1 -1
- package/lib/foreground-deployment-runtime.js +55 -13
- package/lib/foreground-deployment-runtime.js.map +1 -1
- package/lib/foreground-deployment.d.ts.map +1 -1
- package/lib/foreground-deployment.js +5 -0
- package/lib/foreground-deployment.js.map +1 -1
- package/lib/host-attestor.d.ts +2 -0
- package/lib/host-attestor.d.ts.map +1 -1
- package/lib/host-attestor.js +8 -1
- package/lib/host-attestor.js.map +1 -1
- package/lib/host-inputs.d.ts +13 -0
- package/lib/host-inputs.d.ts.map +1 -0
- package/lib/host-inputs.js +162 -0
- package/lib/host-inputs.js.map +1 -0
- package/lib/host-maintenance.d.ts +61 -0
- package/lib/host-maintenance.d.ts.map +1 -0
- package/lib/host-maintenance.js +158 -0
- package/lib/host-maintenance.js.map +1 -0
- package/lib/host-readiness.d.ts +5 -0
- package/lib/host-readiness.d.ts.map +1 -0
- package/lib/host-readiness.js +22 -0
- package/lib/host-readiness.js.map +1 -0
- package/lib/index.d.ts +16 -0
- package/lib/index.d.ts.map +1 -1
- package/lib/index.js +7 -0
- package/lib/index.js.map +1 -1
- package/lib/live-qualification-authority.d.ts +32 -0
- package/lib/live-qualification-authority.d.ts.map +1 -0
- package/lib/live-qualification-authority.js +280 -0
- package/lib/live-qualification-authority.js.map +1 -0
- package/lib/live-qualification-client.d.ts +4 -0
- package/lib/live-qualification-client.d.ts.map +1 -0
- package/lib/live-qualification-client.js +22 -0
- package/lib/live-qualification-client.js.map +1 -0
- package/lib/live-qualification-runtime.d.ts +78 -0
- package/lib/live-qualification-runtime.d.ts.map +1 -0
- package/lib/live-qualification-runtime.js +367 -0
- package/lib/live-qualification-runtime.js.map +1 -0
- package/lib/live-qualification.d.ts +73 -0
- package/lib/live-qualification.d.ts.map +1 -0
- package/lib/live-qualification.js +164 -0
- package/lib/live-qualification.js.map +1 -0
- package/lib/owner-task-gaps.d.ts +2 -0
- package/lib/owner-task-gaps.d.ts.map +1 -1
- package/lib/owner-task-gaps.js +9 -1
- package/lib/owner-task-gaps.js.map +1 -1
- package/lib/runtime-epoch.d.ts +69 -0
- package/lib/runtime-epoch.d.ts.map +1 -0
- package/lib/runtime-epoch.js +139 -0
- package/lib/runtime-epoch.js.map +1 -0
- package/lib/runtime-observer.d.ts.map +1 -1
- package/lib/runtime-observer.js +42 -6
- package/lib/runtime-observer.js.map +1 -1
- package/lib/service.d.ts +247 -4
- package/lib/service.d.ts.map +1 -1
- package/lib/service.js +1332 -27
- package/lib/service.js.map +1 -1
- package/lib/source-adoption-authority.d.ts +3 -0
- package/lib/source-adoption-authority.d.ts.map +1 -1
- package/lib/source-adoption-authority.js +13 -3
- package/lib/source-adoption-authority.js.map +1 -1
- package/lib/source-adoption-runner.d.ts +3 -0
- package/lib/source-adoption-runner.d.ts.map +1 -1
- package/lib/source-adoption-runner.js +16 -4
- package/lib/source-adoption-runner.js.map +1 -1
- package/lib/source-baseline.d.ts +37 -0
- package/lib/source-baseline.d.ts.map +1 -0
- package/lib/source-baseline.js +250 -0
- package/lib/source-baseline.js.map +1 -0
- package/lib/source-build.d.ts +17 -1
- package/lib/source-build.d.ts.map +1 -1
- package/lib/source-build.js +501 -7
- package/lib/source-build.js.map +1 -1
- package/lib/source-context.d.ts +18 -0
- package/lib/source-context.d.ts.map +1 -1
- package/lib/source-context.js +85 -11
- package/lib/source-context.js.map +1 -1
- package/lib/source-creation.d.ts +106 -0
- package/lib/source-creation.d.ts.map +1 -0
- package/lib/source-creation.js +664 -0
- package/lib/source-creation.js.map +1 -0
- package/lib/source-job-types.d.ts +19 -0
- package/lib/source-job-types.d.ts.map +1 -1
- package/lib/source-jobs.d.ts +30 -3
- package/lib/source-jobs.d.ts.map +1 -1
- package/lib/source-jobs.js +382 -40
- package/lib/source-jobs.js.map +1 -1
- package/lib/source-maintenance.d.ts +66 -0
- package/lib/source-maintenance.d.ts.map +1 -0
- package/lib/source-maintenance.js +177 -0
- package/lib/source-maintenance.js.map +1 -0
- package/lib/source-revision.d.ts +57 -0
- package/lib/source-revision.d.ts.map +1 -0
- package/lib/source-revision.js +175 -0
- package/lib/source-revision.js.map +1 -0
- package/lib/source-workspace.d.ts +19 -14
- package/lib/source-workspace.d.ts.map +1 -1
- package/lib/source-workspace.js +90 -17
- package/lib/source-workspace.js.map +1 -1
- package/lib/sqlite.d.ts +13 -3
- package/lib/sqlite.d.ts.map +1 -1
- package/lib/sqlite.js +362 -1
- package/lib/sqlite.js.map +1 -1
- package/lib/store.d.ts +258 -3
- package/lib/store.d.ts.map +1 -1
- package/lib/store.js +2211 -95
- package/lib/store.js.map +1 -1
- package/lib/systemd-host-authority.d.ts +68 -0
- package/lib/systemd-host-authority.d.ts.map +1 -0
- package/lib/systemd-host-authority.js +424 -0
- package/lib/systemd-host-authority.js.map +1 -0
- package/lib/task-observation-evidence.d.ts +32 -0
- package/lib/task-observation-evidence.d.ts.map +1 -0
- package/lib/task-observation-evidence.js +62 -0
- package/lib/task-observation-evidence.js.map +1 -0
- package/lib/task-observation-runtime.d.ts +2 -3
- package/lib/task-observation-runtime.d.ts.map +1 -1
- package/lib/task-observation-runtime.js +7 -39
- package/lib/task-observation-runtime.js.map +1 -1
- package/lib/task-observation-store.js +1 -1
- package/lib/trust.d.ts.map +1 -1
- package/lib/trust.js +0 -0
- package/lib/trust.js.map +1 -1
- package/lib/types.d.ts +43 -6
- package/lib/types.d.ts.map +1 -1
- package/lib/version.d.ts +1 -1
- package/lib/version.js +1 -1
- package/package.json +21 -14
|
@@ -0,0 +1,328 @@
|
|
|
1
|
+
import { createHash } from 'node:crypto';
|
|
2
|
+
import { lstat, mkdtemp, readdir, realpath, rm } from 'node:fs/promises';
|
|
3
|
+
import { tmpdir } from 'node:os';
|
|
4
|
+
import { join, resolve } from 'node:path';
|
|
5
|
+
import { canonicalGrowthJson } from '@dsh-enhanced/assistant-growth-contract';
|
|
6
|
+
import { ControlPlaneCliError } from './errors.js';
|
|
7
|
+
import { runLocalBuffer, runLocalCommand } from './source-workspace.js';
|
|
8
|
+
const PROTOCOL = 'dsh-created-capability-source/v1';
|
|
9
|
+
const DOMAIN = 'dsh-created-capability-source-v1\0';
|
|
10
|
+
const COMMIT = /^[a-f0-9]{40}$/u;
|
|
11
|
+
const DIGEST = /^[a-f0-9]{64}$/u;
|
|
12
|
+
const NAME = /^(?=.{1,64}$)[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
|
|
13
|
+
const SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/u;
|
|
14
|
+
const MAX_FILES = 64;
|
|
15
|
+
const MAX_FILE_BYTES = 65_536;
|
|
16
|
+
const MAX_TOTAL_BYTES = 262_144;
|
|
17
|
+
const MAX_INDEX_BYTES = 131_072;
|
|
18
|
+
const MAX_PATCH_BYTES = 8_388_608;
|
|
19
|
+
const MAX_JSON_BYTES = 2_097_152;
|
|
20
|
+
const MAX_DIRECTORY_NODES = 256;
|
|
21
|
+
const MAX_DIRECTORY_DEPTH = 32;
|
|
22
|
+
const MAX_PATH_BYTES = 1_024;
|
|
23
|
+
function invalid(reason) {
|
|
24
|
+
throw new ControlPlaneCliError('SOURCE_BOUNDARY', `created capability source ${reason}`);
|
|
25
|
+
}
|
|
26
|
+
function sha256(bytes) { return createHash('sha256').update(bytes).digest('hex'); }
|
|
27
|
+
function exactRecord(value, keys, label) {
|
|
28
|
+
if (value === null || typeof value !== 'object' || Array.isArray(value)
|
|
29
|
+
|| Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length !== 0)
|
|
30
|
+
invalid(label);
|
|
31
|
+
const descriptors = Object.getOwnPropertyDescriptors(value);
|
|
32
|
+
const actual = Object.keys(descriptors).sort();
|
|
33
|
+
if (actual.length !== keys.length || actual.some((key, index) => key !== [...keys].sort()[index])
|
|
34
|
+
|| actual.some(key => !descriptors[key].enumerable || !('value' in descriptors[key])))
|
|
35
|
+
invalid(label);
|
|
36
|
+
return value;
|
|
37
|
+
}
|
|
38
|
+
function exactArray(value, max, label) {
|
|
39
|
+
if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length > max
|
|
40
|
+
|| Object.getOwnPropertySymbols(value).length !== 0
|
|
41
|
+
|| Object.getOwnPropertyNames(value).length !== value.length + 1
|
|
42
|
+
|| !Array.from({ length: value.length }, (_, i) => Object.hasOwn(value, i)).every(Boolean)
|
|
43
|
+
|| Object.entries(Object.getOwnPropertyDescriptors(value)).some(([key, descriptor]) => key !== 'length'
|
|
44
|
+
&& (!/^(0|[1-9][0-9]*)$/u.test(key) || !descriptor.enumerable || !('value' in descriptor))))
|
|
45
|
+
invalid(label);
|
|
46
|
+
return value;
|
|
47
|
+
}
|
|
48
|
+
function certificatePlan(certificate) {
|
|
49
|
+
if (certificate === null || typeof certificate !== 'object' || Object.getPrototypeOf(certificate) !== Object.prototype)
|
|
50
|
+
invalid('certificate');
|
|
51
|
+
const descriptor = Object.getOwnPropertyDescriptor(certificate, 'plan');
|
|
52
|
+
if (!descriptor || !('value' in descriptor) || !descriptor.enumerable)
|
|
53
|
+
invalid('certificate plan');
|
|
54
|
+
return exactRecord(descriptor.value, ['id', 'digest', 'name', 'sourceTreeDigest', 'sourcePatchDigest',
|
|
55
|
+
'artifactSha256', 'artifactBytes', 'generatorDigest'], 'certificate plan');
|
|
56
|
+
}
|
|
57
|
+
function checkedScope(name, scope) {
|
|
58
|
+
if (!NAME.test(name) || name.normalize('NFC') !== name)
|
|
59
|
+
invalid('plugin name');
|
|
60
|
+
const expected = [`plugins/${name}`, 'plugins/README.md', 'pnpm-lock.yaml'].sort();
|
|
61
|
+
const actual = exactArray(scope, 3, 'scope');
|
|
62
|
+
if (actual.length !== 3 || actual.some((value, index) => value !== expected[index]))
|
|
63
|
+
invalid('scope');
|
|
64
|
+
return expected;
|
|
65
|
+
}
|
|
66
|
+
function safePluginPath(path, root) {
|
|
67
|
+
if (path.length > MAX_PATH_BYTES || !path.startsWith(`${root}/`)
|
|
68
|
+
|| path !== path.normalize('NFC') || Buffer.byteLength(path, 'utf8') > MAX_PATH_BYTES)
|
|
69
|
+
return false;
|
|
70
|
+
const relative = path.slice(root.length + 1);
|
|
71
|
+
const segments = relative.split('/');
|
|
72
|
+
return segments.every(segment => SEGMENT.test(segment) && !['.git', '.gitattributes', '.gitmodules', 'node_modules', 'lib'].includes(segment))
|
|
73
|
+
&& !relative.includes('\\');
|
|
74
|
+
}
|
|
75
|
+
function strictUtf8(bytes, label, allowNul = false) {
|
|
76
|
+
if (!allowNul && bytes.includes(0))
|
|
77
|
+
invalid(`${label} contains NUL`);
|
|
78
|
+
let decoded;
|
|
79
|
+
try {
|
|
80
|
+
decoded = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
|
|
81
|
+
}
|
|
82
|
+
catch {
|
|
83
|
+
invalid(`${label} is not UTF-8`);
|
|
84
|
+
}
|
|
85
|
+
if (!Buffer.from(decoded, 'utf8').equals(bytes))
|
|
86
|
+
invalid(`${label} is not canonical UTF-8`);
|
|
87
|
+
return decoded;
|
|
88
|
+
}
|
|
89
|
+
export function creationCapabilitySourceDigest(payload) {
|
|
90
|
+
// Bound strings and aggregate worst-case JSON escaping before allocating encoded JSON.
|
|
91
|
+
let nodes = 0, maximumEncodedBytes = 0;
|
|
92
|
+
const seen = new Set();
|
|
93
|
+
const bound = (value, depth) => {
|
|
94
|
+
if (++nodes > 8192 || depth > 16)
|
|
95
|
+
invalid('JSON complexity');
|
|
96
|
+
if (typeof value === 'string') {
|
|
97
|
+
if (value.length > MAX_FILE_BYTES)
|
|
98
|
+
invalid('JSON string exceeds bound');
|
|
99
|
+
maximumEncodedBytes += 6 * Buffer.byteLength(value) + 2;
|
|
100
|
+
}
|
|
101
|
+
else if (value === null || typeof value === 'boolean' || typeof value === 'number') {
|
|
102
|
+
maximumEncodedBytes += 24;
|
|
103
|
+
}
|
|
104
|
+
else {
|
|
105
|
+
if (!value || typeof value !== 'object' || seen.has(value))
|
|
106
|
+
invalid('JSON value');
|
|
107
|
+
seen.add(value);
|
|
108
|
+
if (Array.isArray(value)) {
|
|
109
|
+
for (const item of exactArray(value, MAX_FILES + 2, 'JSON array'))
|
|
110
|
+
bound(item, depth + 1);
|
|
111
|
+
maximumEncodedBytes += value.length + 2;
|
|
112
|
+
}
|
|
113
|
+
else {
|
|
114
|
+
if (Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).length > 16)
|
|
115
|
+
invalid('JSON object');
|
|
116
|
+
const descriptors = Object.getOwnPropertyDescriptors(value);
|
|
117
|
+
for (const key of Reflect.ownKeys(value)) {
|
|
118
|
+
if (typeof key !== 'string' || key.length > 256)
|
|
119
|
+
invalid('JSON key');
|
|
120
|
+
const descriptor = descriptors[key];
|
|
121
|
+
if (!descriptor.enumerable || !('value' in descriptor))
|
|
122
|
+
invalid('JSON descriptor');
|
|
123
|
+
bound(key, depth + 1);
|
|
124
|
+
bound(descriptor.value, depth + 1);
|
|
125
|
+
maximumEncodedBytes += 2;
|
|
126
|
+
}
|
|
127
|
+
maximumEncodedBytes += 2;
|
|
128
|
+
}
|
|
129
|
+
seen.delete(value);
|
|
130
|
+
}
|
|
131
|
+
if (maximumEncodedBytes > MAX_JSON_BYTES)
|
|
132
|
+
invalid('JSON exceeds bound');
|
|
133
|
+
};
|
|
134
|
+
bound(payload, 0);
|
|
135
|
+
const encoded = canonicalGrowthJson(payload);
|
|
136
|
+
if (Buffer.byteLength(encoded, 'utf8') > MAX_JSON_BYTES)
|
|
137
|
+
invalid('JSON exceeds bound');
|
|
138
|
+
return sha256(`${DOMAIN}${encoded}`);
|
|
139
|
+
}
|
|
140
|
+
function indexText(entries) {
|
|
141
|
+
return entries.map(entry => `${entry.mode} ${entry.oid} 0\t${entry.path}\0`).join('');
|
|
142
|
+
}
|
|
143
|
+
function treeDigest(baseCommit, scope, text) {
|
|
144
|
+
return sha256(`dsh-source-tree-v2\0${baseCommit}\0${JSON.stringify(scope)}\0${text}`);
|
|
145
|
+
}
|
|
146
|
+
function patchDigest(baseCommit, scope, patch) {
|
|
147
|
+
return createHash('sha256').update(`dsh-source-patch-v2\0${baseCommit}\0${JSON.stringify(scope)}\0`).update(patch).digest('hex');
|
|
148
|
+
}
|
|
149
|
+
function inspectEntry(value, root, plugin) {
|
|
150
|
+
const entry = exactRecord(value, plugin ? ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'] : ['path', 'mode', 'oid'], 'entry');
|
|
151
|
+
if (typeof entry.path !== 'string' || typeof entry.mode !== 'string' || typeof entry.oid !== 'string'
|
|
152
|
+
|| !COMMIT.test(entry.oid) || !['100644', '100755'].includes(entry.mode)
|
|
153
|
+
|| !(safePluginPath(entry.path, root) || entry.path === 'plugins/README.md' || entry.path === 'pnpm-lock.yaml'))
|
|
154
|
+
invalid('entry metadata');
|
|
155
|
+
return entry;
|
|
156
|
+
}
|
|
157
|
+
/** Offline structural and byte verification; signature, owner and current authority belong to the journal. */
|
|
158
|
+
export function validateCreationCapabilitySource(snapshot, certificate) {
|
|
159
|
+
const plan = certificatePlan(certificate);
|
|
160
|
+
const value = exactRecord(snapshot, ['protocol', 'baseCommit', 'scope', 'treeDigest', 'patchDigest', 'entries', 'files', 'digest'], 'snapshot');
|
|
161
|
+
if (value.protocol !== PROTOCOL || typeof value.baseCommit !== 'string' || !COMMIT.test(value.baseCommit)
|
|
162
|
+
|| typeof value.treeDigest !== 'string' || !DIGEST.test(value.treeDigest)
|
|
163
|
+
|| typeof value.patchDigest !== 'string' || !DIGEST.test(value.patchDigest)
|
|
164
|
+
|| typeof value.digest !== 'string' || !DIGEST.test(value.digest))
|
|
165
|
+
invalid('header');
|
|
166
|
+
const name = plan.name;
|
|
167
|
+
const scope = checkedScope(name, value.scope);
|
|
168
|
+
const root = `plugins/${name}`;
|
|
169
|
+
const entries = exactArray(value.entries, MAX_FILES + 2, 'entries');
|
|
170
|
+
const files = exactArray(value.files, MAX_FILES, 'files');
|
|
171
|
+
if (entries.length < 3 || files.length < 1)
|
|
172
|
+
invalid('empty source');
|
|
173
|
+
const seen = new Set();
|
|
174
|
+
const expectedFiles = [];
|
|
175
|
+
let previous = Buffer.alloc(0);
|
|
176
|
+
for (const unknownEntry of entries) {
|
|
177
|
+
const entry = inspectEntry(unknownEntry, root, false);
|
|
178
|
+
const order = Buffer.from(entry.path, 'utf8');
|
|
179
|
+
if (seen.has(entry.path) || previous.length && Buffer.compare(previous, order) >= 0)
|
|
180
|
+
invalid('index order or duplicate');
|
|
181
|
+
previous = order;
|
|
182
|
+
seen.add(entry.path);
|
|
183
|
+
if (entry.path.startsWith(`${root}/`))
|
|
184
|
+
expectedFiles.push(entry);
|
|
185
|
+
}
|
|
186
|
+
if (!seen.has('plugins/README.md') || !seen.has('pnpm-lock.yaml') || expectedFiles.length !== files.length)
|
|
187
|
+
invalid('index scope');
|
|
188
|
+
const text = indexText(entries);
|
|
189
|
+
if (Buffer.byteLength(text, 'utf8') > MAX_INDEX_BYTES || treeDigest(value.baseCommit, scope, text) !== value.treeDigest)
|
|
190
|
+
invalid('tree digest');
|
|
191
|
+
let total = 0;
|
|
192
|
+
for (let index = 0; index < files.length; index++) {
|
|
193
|
+
const file = exactRecord(files[index], ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'], 'file');
|
|
194
|
+
const expected = expectedFiles[index];
|
|
195
|
+
if (file.path !== expected.path || file.mode !== expected.mode || file.oid !== expected.oid
|
|
196
|
+
|| typeof file.content !== 'string' || file.content.length > MAX_FILE_BYTES
|
|
197
|
+
|| typeof file.sha256 !== 'string' || !DIGEST.test(file.sha256)
|
|
198
|
+
|| typeof file.bytes !== 'number' || !Number.isSafeInteger(file.bytes) || file.bytes < 0 || file.bytes > MAX_FILE_BYTES)
|
|
199
|
+
invalid('file metadata');
|
|
200
|
+
const bytes = Buffer.from(file.content, 'utf8');
|
|
201
|
+
if (bytes.length !== file.bytes || bytes.includes(0) || strictUtf8(bytes, String(file.path)) !== file.content
|
|
202
|
+
|| sha256(bytes) !== file.sha256
|
|
203
|
+
|| createHash('sha1').update(`blob ${bytes.length}\0`).update(bytes).digest('hex') !== file.oid)
|
|
204
|
+
invalid('file bytes');
|
|
205
|
+
total += bytes.length;
|
|
206
|
+
if (total > MAX_TOTAL_BYTES)
|
|
207
|
+
invalid('total bytes');
|
|
208
|
+
}
|
|
209
|
+
if (value.treeDigest !== plan.sourceTreeDigest || value.patchDigest !== plan.sourcePatchDigest)
|
|
210
|
+
invalid('certificate digest');
|
|
211
|
+
const payload = { protocol: PROTOCOL, baseCommit: value.baseCommit, scope: value.scope,
|
|
212
|
+
treeDigest: value.treeDigest, patchDigest: value.patchDigest, entries: value.entries, files: value.files };
|
|
213
|
+
if (creationCapabilitySourceDigest(payload) !== value.digest)
|
|
214
|
+
invalid('source digest');
|
|
215
|
+
}
|
|
216
|
+
async function listedPluginPaths(worktree, root, signal) {
|
|
217
|
+
const target = resolve(worktree, root);
|
|
218
|
+
const metadata = await lstat(target);
|
|
219
|
+
if (!metadata.isDirectory() || metadata.isSymbolicLink() || await realpath(target) !== target)
|
|
220
|
+
invalid('plugin root');
|
|
221
|
+
const paths = [];
|
|
222
|
+
let nodes = 0;
|
|
223
|
+
const visit = async (directory, prefix, depth) => {
|
|
224
|
+
signal?.throwIfAborted();
|
|
225
|
+
if (depth > MAX_DIRECTORY_DEPTH)
|
|
226
|
+
invalid('directory depth');
|
|
227
|
+
for (const entry of await readdir(directory, { withFileTypes: true })) {
|
|
228
|
+
signal?.throwIfAborted();
|
|
229
|
+
if (++nodes > MAX_DIRECTORY_NODES)
|
|
230
|
+
invalid('directory entries');
|
|
231
|
+
const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
|
|
232
|
+
const path = `${root}/${relative}`;
|
|
233
|
+
if (!safePluginPath(path, root))
|
|
234
|
+
invalid('plugin path');
|
|
235
|
+
if (entry.isDirectory()) {
|
|
236
|
+
const parent = join(directory, entry.name);
|
|
237
|
+
const stat = await lstat(parent);
|
|
238
|
+
if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(parent) !== parent)
|
|
239
|
+
invalid('plugin directory');
|
|
240
|
+
await visit(parent, relative, depth + 1);
|
|
241
|
+
}
|
|
242
|
+
else if (entry.isFile()) {
|
|
243
|
+
const stat = await lstat(join(directory, entry.name));
|
|
244
|
+
if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_FILE_BYTES)
|
|
245
|
+
invalid('non-regular or oversized file');
|
|
246
|
+
paths.push(path);
|
|
247
|
+
}
|
|
248
|
+
else
|
|
249
|
+
invalid('non-regular plugin entry');
|
|
250
|
+
if (paths.length > MAX_FILES)
|
|
251
|
+
invalid('file count');
|
|
252
|
+
}
|
|
253
|
+
};
|
|
254
|
+
await visit(target, '', 0);
|
|
255
|
+
return paths.sort();
|
|
256
|
+
}
|
|
257
|
+
/** Capture exactly the same temporary-index digest domain as checkedSourceSnapshot. */
|
|
258
|
+
export async function captureCreationCapabilitySource(input) {
|
|
259
|
+
const plan = certificatePlan(input.certificate);
|
|
260
|
+
const scope = checkedScope(plan.name, input.scope);
|
|
261
|
+
if (!COMMIT.test(input.baseCommit))
|
|
262
|
+
invalid('base commit');
|
|
263
|
+
const root = `plugins/${plan.name}`;
|
|
264
|
+
const temporary = await mkdtemp(join(tmpdir(), 'dsh-created-source-index-'));
|
|
265
|
+
try {
|
|
266
|
+
const environment = { ...input.environment, GIT_INDEX_FILE: join(temporary, 'index') };
|
|
267
|
+
const run = (args, maximumOutput) => runLocalBuffer('git', args, input.worktree, environment, { maximumOutput, ...(input.signal ? { signal: input.signal } : {}) });
|
|
268
|
+
const head = (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim();
|
|
269
|
+
if (head !== input.baseCommit)
|
|
270
|
+
invalid('worktree HEAD drift');
|
|
271
|
+
const stage = async () => {
|
|
272
|
+
await runLocalCommand('git', ['read-tree', input.baseCommit], input.worktree, environment, input.signal ? { signal: input.signal } : {});
|
|
273
|
+
await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], input.worktree, environment, input.signal ? { signal: input.signal } : {});
|
|
274
|
+
const index = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'ls-files', '--stage', '-z', '--', ...scope], MAX_INDEX_BYTES);
|
|
275
|
+
const patch = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'diff', '--cached', '--binary',
|
|
276
|
+
'--full-index', '--no-color', input.baseCommit, '--', ...scope], MAX_PATCH_BYTES);
|
|
277
|
+
return { index, patch };
|
|
278
|
+
};
|
|
279
|
+
const first = await stage();
|
|
280
|
+
const raw = strictUtf8(first.index, 'index', true);
|
|
281
|
+
const rows = raw.split('\0');
|
|
282
|
+
if (rows.pop() !== '' || rows.length < 3 || rows.length > MAX_FILES + 2)
|
|
283
|
+
invalid('index size');
|
|
284
|
+
const entries = rows.map(row => {
|
|
285
|
+
const match = /^(100644|100755) ([a-f0-9]{40}) 0\t(.+)$/u.exec(row);
|
|
286
|
+
if (!match)
|
|
287
|
+
invalid('index record');
|
|
288
|
+
return { path: match[3], mode: match[1], oid: match[2] };
|
|
289
|
+
});
|
|
290
|
+
if (indexText(entries) !== raw)
|
|
291
|
+
invalid('index roundtrip');
|
|
292
|
+
const paths = await listedPluginPaths(input.worktree, root, input.signal);
|
|
293
|
+
const indexPluginPaths = entries.filter(entry => entry.path.startsWith(`${root}/`)).map(entry => entry.path).sort();
|
|
294
|
+
if (paths.length !== indexPluginPaths.length || paths.some((path, index) => path !== indexPluginPaths[index]))
|
|
295
|
+
invalid('plugin file set');
|
|
296
|
+
const files = [];
|
|
297
|
+
let total = 0;
|
|
298
|
+
for (const entry of entries) {
|
|
299
|
+
if (!entry.path.startsWith(`${root}/`))
|
|
300
|
+
continue;
|
|
301
|
+
const bytes = await run(['cat-file', 'blob', entry.oid], MAX_FILE_BYTES);
|
|
302
|
+
if (bytes.length > MAX_FILE_BYTES)
|
|
303
|
+
invalid('file bytes');
|
|
304
|
+
total += bytes.length;
|
|
305
|
+
if (total > MAX_TOTAL_BYTES)
|
|
306
|
+
invalid('total bytes');
|
|
307
|
+
const content = strictUtf8(bytes, entry.path);
|
|
308
|
+
files.push({ ...entry, bytes: bytes.length, sha256: sha256(bytes), content });
|
|
309
|
+
}
|
|
310
|
+
const second = await stage();
|
|
311
|
+
if (!second.index.equals(first.index) || !second.patch.equals(first.patch)
|
|
312
|
+
|| (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim() !== input.baseCommit)
|
|
313
|
+
invalid('worktree drift');
|
|
314
|
+
const payload = { protocol: PROTOCOL, baseCommit: input.baseCommit, scope, treeDigest: treeDigest(input.baseCommit, scope, raw),
|
|
315
|
+
patchDigest: patchDigest(input.baseCommit, scope, first.patch), entries, files };
|
|
316
|
+
const snapshot = { ...payload, digest: creationCapabilitySourceDigest(payload) };
|
|
317
|
+
validateCreationCapabilitySource(snapshot, input.certificate);
|
|
318
|
+
for (const entry of entries)
|
|
319
|
+
Object.freeze(entry);
|
|
320
|
+
for (const file of files)
|
|
321
|
+
Object.freeze(file);
|
|
322
|
+
return Object.freeze({ ...snapshot, scope: Object.freeze(scope), entries: Object.freeze(entries), files: Object.freeze(files) });
|
|
323
|
+
}
|
|
324
|
+
finally {
|
|
325
|
+
await rm(temporary, { recursive: true, force: true });
|
|
326
|
+
}
|
|
327
|
+
}
|
|
328
|
+
//# sourceMappingURL=creation-capability-source.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"creation-capability-source.js","sourceRoot":"","sources":["../src/creation-capability-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAA8C,MAAM,yCAAyC,CAAA;AACzH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvE,MAAM,QAAQ,GAAG,kCAA2C,CAAA;AAC5D,MAAM,MAAM,GAAG,oCAAoC,CAAA;AACnD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,IAAI,GAAG,8CAA8C,CAAA;AAC3D,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,cAAc,GAAG,MAAM,CAAA;AAC7B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,SAAS,CAAA;AACjC,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAC/B,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAA;AA0B5B,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE3G,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1H,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;WAC5F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAE,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAE,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACzG,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,GAAW,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WAC9F,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;WAChD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;WAC7D,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;WACvF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ;eAClG,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/G,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,WAAgE;IACvF,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9I,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAClG,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,mBAAmB;QACnG,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,kBAAkB,CAA6D,CAAA;AAC1I,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAwB;IAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrG,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;WAC3D,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,KAAK,CAAA;IACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;WACzI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IAChE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IACpE,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IAC1F,MAAM,CAAC;QAAC,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;IAC3F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAyD;IACtG,uFAAuF;IACvF,IAAI,KAAK,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;YACvE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrF,mBAAmB,IAAI,EAAE,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,EAAE,YAAY,CAAC;oBAAE,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzF,mBAAmB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YACzC,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;gBACnH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;gBAC3D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;wBAAE,OAAO,CAAC,UAAU,CAAC,CAAA;oBACpE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAE,CAAA;oBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;wBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;oBAClF,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;oBACzD,mBAAmB,IAAI,CAAC,CAAA;gBAC1B,CAAC;gBACD,mBAAmB,IAAI,CAAC,CAAA;YAC1B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,IAAI,mBAAmB,GAAG,cAAc;YAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACzE,CAAC,CAAA;IACD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACtF,OAAO,MAAM,CAAC,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,OAAiD;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,KAAwB,EAAE,IAAY;IAC5E,OAAO,MAAM,CAAC,uBAAuB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,KAAwB,EAAE,KAAa;IAC9E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClI,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,MAAe;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;IACnI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;WAChG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;WACrE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5I,OAAO,KAAiD,CAAA;AAC1D,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,gCAAgC,CAAC,QAAiB,EAChE,WAAgE;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAA;IAC/I,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACpG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACtE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WACxE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,KAA0B,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,aAAa,GAAoC,EAAE,CAAA;IACzD,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9B,KAAK,MAAM,YAAY,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;QACxH,QAAQ,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAClI,MAAM,IAAI,GAAG,SAAS,CAAC,OAA0C,CAAC,CAAA;IAClE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,eAAe,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/I,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAE,CAAA;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eACtF,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc;eACxE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;eAC5D,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;YAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QACnJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO;eACxG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;eAC7B,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACxH,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,eAAe;YAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,iBAAiB;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7H,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QACpF,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IAC5G,IAAI,8BAA8B,CAAC,OAA2D,CAAC,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,CAAA;AAC5I,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAoB;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrH,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;QACtF,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,KAAK,GAAG,mBAAmB;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,EAAE,KAAK,GAAG,mBAAmB;gBAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAChE,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAA;YAClC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;gBAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;oBAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;gBAClH,MAAM,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC1C,CAAC;iBACI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;oBAAE,OAAO,CAAC,+BAA+B,CAAC,CAAA;gBACnH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;;gBAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAGrD;IACC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAA;QACtF,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,aAAqB,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACrH,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QACjG,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACvF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAC/G,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YAC5I,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;gBAC1G,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YACnF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACzB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9F,MAAM,OAAO,GAAoC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC9D,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnE,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACnC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAA2C,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAA;QACtG,CAAC,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACnH,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACzI,MAAM,KAAK,GAAmC,EAAE,CAAA;QAChD,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,SAAQ;YAChD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAA;YACxE,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACxD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;YACrB,IAAI,KAAK,GAAG,eAAe;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAA;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;eACrE,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACzI,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC;YAC7H,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAClF,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAA;QAChF,gCAAgC,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClI,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;AACrE,CAAC"}
|
|
@@ -0,0 +1,252 @@
|
|
|
1
|
+
import type { ToolRunContext } from '@deepseek-ai/dsh-tools';
|
|
2
|
+
import type { PluginCreationVerificationCertificate } from '@dsh-enhanced/assistant-growth-contract';
|
|
3
|
+
import type { SourceJobOwnerReceipt } from './source-job-types.js';
|
|
4
|
+
import type { CreationCapabilitySourceSnapshot } from './creation-capability-source.js';
|
|
5
|
+
export type CreationCapabilityOwner = Pick<SourceJobOwnerReceipt, 'authorityId' | 'authorityHash' | 'principalId' | 'principalRecordId' | 'principalVersion' | 'workspace' | 'agentPreset'>;
|
|
6
|
+
/** Separate owner authority for adoption and ordinary use; never a verifier policy. */
|
|
7
|
+
export interface CreationCapabilityConfig {
|
|
8
|
+
authorityId: string;
|
|
9
|
+
keyId: string;
|
|
10
|
+
keyPath: string;
|
|
11
|
+
owner: CreationCapabilityOwner;
|
|
12
|
+
namePrefix: string;
|
|
13
|
+
expiresAt: number;
|
|
14
|
+
maxAdoptions: number;
|
|
15
|
+
maxTools: number;
|
|
16
|
+
maxCallsPerAdoption: number;
|
|
17
|
+
maxCallRecords: number;
|
|
18
|
+
maxInputBytes: number;
|
|
19
|
+
/** Opt-in lifetime for an already adopted capability; never extends either use grant. */
|
|
20
|
+
retention?: {
|
|
21
|
+
maximumLifetimeMs: number;
|
|
22
|
+
};
|
|
23
|
+
runner: {
|
|
24
|
+
stateRoot: string;
|
|
25
|
+
image: string;
|
|
26
|
+
dockerPath: string;
|
|
27
|
+
expiresAt: number;
|
|
28
|
+
maxRuns: number;
|
|
29
|
+
maxTotalDurationMs: number;
|
|
30
|
+
maxDurationMs: number;
|
|
31
|
+
maxOutputBytes: number;
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
export interface CreationCapabilityTool {
|
|
35
|
+
originalName: string;
|
|
36
|
+
name: string;
|
|
37
|
+
description: string;
|
|
38
|
+
parameters: Record<string, unknown>;
|
|
39
|
+
}
|
|
40
|
+
export interface CreationCapabilityReceipt {
|
|
41
|
+
protocol: 'dsh-created-capability-adoption/v1' | 'dsh-created-capability-adoption/v2';
|
|
42
|
+
authorityId: string;
|
|
43
|
+
authorityDigest: string;
|
|
44
|
+
keyId: string;
|
|
45
|
+
planId: string;
|
|
46
|
+
planDigest: string;
|
|
47
|
+
verificationDigest: string;
|
|
48
|
+
artifactSha256: string;
|
|
49
|
+
artifactBytes: number;
|
|
50
|
+
source: PluginCreationVerificationCertificate['source'];
|
|
51
|
+
schemaDigest: string;
|
|
52
|
+
toolsDigest: string;
|
|
53
|
+
expiresAt: number;
|
|
54
|
+
adoptedAt: number;
|
|
55
|
+
signature: string;
|
|
56
|
+
}
|
|
57
|
+
export interface CreationCapabilityRecord {
|
|
58
|
+
planId: string;
|
|
59
|
+
status: 'claimed' | 'authorized' | 'active' | 'closed' | 'unknown' | 'rejected';
|
|
60
|
+
receipt?: CreationCapabilityReceipt;
|
|
61
|
+
certificate: PluginCreationVerificationCertificate;
|
|
62
|
+
tools?: readonly CreationCapabilityTool[];
|
|
63
|
+
artifact: Buffer;
|
|
64
|
+
reason?: string;
|
|
65
|
+
}
|
|
66
|
+
export interface CreationCapabilityObservation {
|
|
67
|
+
status: 'observed' | 'unknown';
|
|
68
|
+
quiescent: boolean;
|
|
69
|
+
jobId?: string;
|
|
70
|
+
artifactSha256: string;
|
|
71
|
+
reason?: string;
|
|
72
|
+
environment?: PluginCreationVerificationCertificate['environment'];
|
|
73
|
+
schemaDigest?: string;
|
|
74
|
+
schemas?: readonly unknown[];
|
|
75
|
+
calls?: readonly {
|
|
76
|
+
id: string;
|
|
77
|
+
toolName: string;
|
|
78
|
+
result: unknown;
|
|
79
|
+
}[];
|
|
80
|
+
}
|
|
81
|
+
export interface CreationCapabilityRunner {
|
|
82
|
+
run(input: {
|
|
83
|
+
key: string;
|
|
84
|
+
artifact: Buffer;
|
|
85
|
+
operation: {
|
|
86
|
+
kind: 'discover';
|
|
87
|
+
} | {
|
|
88
|
+
kind: 'invoke';
|
|
89
|
+
schemaDigest: string;
|
|
90
|
+
calls: readonly {
|
|
91
|
+
id: string;
|
|
92
|
+
toolName: string;
|
|
93
|
+
arguments: unknown;
|
|
94
|
+
}[];
|
|
95
|
+
};
|
|
96
|
+
signal: AbortSignal;
|
|
97
|
+
}): Promise<CreationCapabilityObservation>;
|
|
98
|
+
close(): Promise<void>;
|
|
99
|
+
}
|
|
100
|
+
/** The integration owns current authenticated task/owner fences, not model parameters. */
|
|
101
|
+
export interface CreationCapabilityPorts {
|
|
102
|
+
inspect(planId: string): {
|
|
103
|
+
certificate: PluginCreationVerificationCertificate;
|
|
104
|
+
artifact: Buffer;
|
|
105
|
+
owner: CreationCapabilityOwner;
|
|
106
|
+
};
|
|
107
|
+
recheck(planId: string, signal: AbortSignal): Promise<void>;
|
|
108
|
+
/** Capture checked staged source before first claim; legacy ports may have no archive. */
|
|
109
|
+
captureSource?(planId: string, signal: AbortSignal): Promise<CreationCapabilitySourceSnapshot>;
|
|
110
|
+
/** Historical evidence read for a v2 receipt; must recheck the current owner and frozen source. */
|
|
111
|
+
inspectRetained?(record: CreationCapabilityRecord): {
|
|
112
|
+
certificate: PluginCreationVerificationCertificate;
|
|
113
|
+
artifact: Buffer;
|
|
114
|
+
owner: CreationCapabilityOwner;
|
|
115
|
+
};
|
|
116
|
+
recheckRetained?(record: CreationCapabilityRecord, signal: AbortSignal): Promise<void>;
|
|
117
|
+
withCurrent<T>(record: CreationCapabilityRecord, callback: () => T): T;
|
|
118
|
+
assertCaller(record: CreationCapabilityRecord, execution: ToolRunContext): void;
|
|
119
|
+
/** Optional authenticated Host attribution; absence never implies a foreground task. */
|
|
120
|
+
inspectCall?(record: CreationCapabilityRecord, execution: ToolRunContext, toolAlias: string, argumentsJson: string): CreationCapabilityForegroundCallWitness | undefined;
|
|
121
|
+
}
|
|
122
|
+
export interface CreationCapabilityForegroundCallWitness {
|
|
123
|
+
protocol: 'assistant-delivery/foreground-tool-call/v1';
|
|
124
|
+
task: {
|
|
125
|
+
protocol: 'assistant-delivery/foreground-task/v1';
|
|
126
|
+
inboxId: string;
|
|
127
|
+
sessionId: string;
|
|
128
|
+
scope: {
|
|
129
|
+
workspace: string;
|
|
130
|
+
preset: string;
|
|
131
|
+
};
|
|
132
|
+
owner: {
|
|
133
|
+
principalRecordId: string;
|
|
134
|
+
principalVersion: number;
|
|
135
|
+
};
|
|
136
|
+
binding: {
|
|
137
|
+
id: string;
|
|
138
|
+
version: number;
|
|
139
|
+
generation: number;
|
|
140
|
+
};
|
|
141
|
+
dispatchedAt: number;
|
|
142
|
+
};
|
|
143
|
+
turn: number;
|
|
144
|
+
call: {
|
|
145
|
+
id: string;
|
|
146
|
+
toolName: string;
|
|
147
|
+
eventSeq: number;
|
|
148
|
+
eventDigest: string;
|
|
149
|
+
argumentsDigest: string;
|
|
150
|
+
};
|
|
151
|
+
}
|
|
152
|
+
export interface CreationCapabilityCallEvidence {
|
|
153
|
+
protocol: 'dsh-created-capability-call-evidence/v1';
|
|
154
|
+
planId: string;
|
|
155
|
+
key: string;
|
|
156
|
+
status: CreationCapabilityCall['status'];
|
|
157
|
+
attribution: 'foreground' | 'unattributed' | 'legacy-unattributed';
|
|
158
|
+
toolAlias?: string;
|
|
159
|
+
originalName?: string;
|
|
160
|
+
receiptDigest: string;
|
|
161
|
+
artifactSha256: string;
|
|
162
|
+
schemaDigest: string;
|
|
163
|
+
claimedAt?: number;
|
|
164
|
+
settledAt?: number;
|
|
165
|
+
foreground?: CreationCapabilityForegroundCallWitness;
|
|
166
|
+
}
|
|
167
|
+
/** A current, content-free task association; not a causal improvement claim. */
|
|
168
|
+
export interface CreationCapabilityTaskAssociation {
|
|
169
|
+
protocol: 'dsh-created-capability-task-association/v1';
|
|
170
|
+
planId: string;
|
|
171
|
+
inboxId: string;
|
|
172
|
+
sessionId: string;
|
|
173
|
+
callKeys: readonly string[];
|
|
174
|
+
receiptDigest: string;
|
|
175
|
+
artifactSha256: string;
|
|
176
|
+
schemaDigest: string;
|
|
177
|
+
adoptionStatus: CreationCapabilityRecord['status'];
|
|
178
|
+
/** Signed deadline only; current execution still requires runtime owner, mount and quota checks. */
|
|
179
|
+
withinSignedUseWindow: boolean;
|
|
180
|
+
task: {
|
|
181
|
+
projection: {
|
|
182
|
+
subjectKind: 'foreground-turn';
|
|
183
|
+
subjectRef: string;
|
|
184
|
+
version: number;
|
|
185
|
+
digest: string;
|
|
186
|
+
disposition: 'upsert';
|
|
187
|
+
};
|
|
188
|
+
scopeWatermark: number;
|
|
189
|
+
outcomeId: string;
|
|
190
|
+
judgement: 'owner-feedback' | 'independent-verifier';
|
|
191
|
+
status: 'achieved' | 'not-achieved';
|
|
192
|
+
sourceDigest: string;
|
|
193
|
+
};
|
|
194
|
+
}
|
|
195
|
+
export interface CreationCapabilityCall {
|
|
196
|
+
key: string;
|
|
197
|
+
status: 'claimed' | 'completed' | 'unknown';
|
|
198
|
+
result?: unknown;
|
|
199
|
+
jobId?: string;
|
|
200
|
+
}
|
|
201
|
+
/** Historical source data signed separately from the finite execution receipt. */
|
|
202
|
+
export interface CreationCapabilitySourceArchive {
|
|
203
|
+
protocol: 'dsh-created-capability-source-archive/v1';
|
|
204
|
+
authorityId: string;
|
|
205
|
+
authorityDigest: string;
|
|
206
|
+
keyId: string;
|
|
207
|
+
planId: string;
|
|
208
|
+
certificateDigest: string;
|
|
209
|
+
artifactSha256: string;
|
|
210
|
+
source: CreationCapabilitySourceSnapshot;
|
|
211
|
+
signature: string;
|
|
212
|
+
}
|
|
213
|
+
export interface CreationCapabilityJournalPort {
|
|
214
|
+
readonly authorityDigest: string;
|
|
215
|
+
readonly publicKey: string;
|
|
216
|
+
inspect(planId: string): CreationCapabilityRecord | undefined;
|
|
217
|
+
list(): readonly CreationCapabilityRecord[];
|
|
218
|
+
claim(input: {
|
|
219
|
+
certificate: PluginCreationVerificationCertificate;
|
|
220
|
+
artifact: Buffer;
|
|
221
|
+
source?: CreationCapabilitySourceSnapshot;
|
|
222
|
+
}): {
|
|
223
|
+
created: boolean;
|
|
224
|
+
record: CreationCapabilityRecord;
|
|
225
|
+
};
|
|
226
|
+
/** Lazy historical read; legacy rows have no archive and are never inferred or backfilled. */
|
|
227
|
+
inspectSourceArchive?(planId: string): CreationCapabilitySourceArchive | undefined;
|
|
228
|
+
authorize(planId: string, tools: readonly CreationCapabilityTool[]): CreationCapabilityRecord;
|
|
229
|
+
activate(planId: string): CreationCapabilityRecord;
|
|
230
|
+
settle(planId: string, status: 'closed' | 'unknown' | 'rejected', reason: string): void;
|
|
231
|
+
claimCall(input: {
|
|
232
|
+
planId: string;
|
|
233
|
+
key: string;
|
|
234
|
+
argumentsDigest: string;
|
|
235
|
+
toolAlias?: string;
|
|
236
|
+
foreground?: CreationCapabilityForegroundCallWitness;
|
|
237
|
+
}): {
|
|
238
|
+
created: boolean;
|
|
239
|
+
call: CreationCapabilityCall;
|
|
240
|
+
};
|
|
241
|
+
listCallEvidence?(planId: string): readonly CreationCapabilityCallEvidence[];
|
|
242
|
+
settleCall(input: {
|
|
243
|
+
planId: string;
|
|
244
|
+
key: string;
|
|
245
|
+
status: 'completed' | 'unknown';
|
|
246
|
+
result?: unknown;
|
|
247
|
+
jobId?: string;
|
|
248
|
+
}): void;
|
|
249
|
+
recoverClaims(): void;
|
|
250
|
+
close(): void;
|
|
251
|
+
}
|
|
252
|
+
//# sourceMappingURL=creation-capability-types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"creation-capability-types.d.ts","sourceRoot":"","sources":["../src/creation-capability-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAA;AAEvF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,qBAAqB,EAAE,aAAa,GAAG,eAAe,GAAG,aAAa,GAC7G,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,CAAC,CAAA;AAE3E,uFAAuF;AACvF,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,uBAAuB,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE,MAAM,CAAA;QACb,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,kBAAkB,EAAE,MAAM,CAAA;QAC1B,aAAa,EAAE,MAAM,CAAA;QACrB,cAAc,EAAE,MAAM,CAAA;KACvB,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,oCAAoC,GAAG,oCAAoC,CAAA;IACrF,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,qCAAqC,CAAC,QAAQ,CAAC,CAAA;IACvD,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;IAC/E,OAAO,CAAC,EAAE,yBAAyB,CAAA;IACnC,WAAW,EAAE,qCAAqC,CAAA;IAClD,KAAK,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,qCAAqC,CAAC,aAAa,CAAC,CAAA;IAClE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IAC5B,KAAK,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACrE;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE;YAAE,IAAI,EAAE,UAAU,CAAA;SAAE,GACvE;YAAE,IAAI,EAAE,QAAQ,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,SAAS;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,OAAO,CAAA;aAAE,EAAE,CAAA;SAAE,CAAC;QACnH,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,qCAAqC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,uBAAuB,CAAA;KAAE,CAAA;IACjI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,0FAA0F;IAC1F,aAAa,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAA;IAC9F,mGAAmG;IACnG,eAAe,CAAC,CAAC,MAAM,EAAE,wBAAwB,GAAG;QAAE,WAAW,EAAE,qCAAqC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,uBAAuB,CAAA;KAAE,CAAA;IAC5J,eAAe,CAAC,CAAC,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtF,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IACtE,YAAY,CAAC,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/E,wFAAwF;IACxF,WAAW,CAAC,CAAC,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EACzF,aAAa,EAAE,MAAM,GAAG,uCAAuC,GAAG,SAAS,CAAA;CAC9E;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,EAAE,4CAA4C,CAAA;IACtD,IAAI,EAAE;QACJ,QAAQ,EAAE,uCAAuC,CAAA;QACjD,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5C,KAAK,EAAE;YAAE,iBAAiB,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,CAAA;QAC9D,OAAO,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5D,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAA;CACvG;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,yCAAyC,CAAA;IACnD,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACxC,WAAW,EAAE,YAAY,GAAG,cAAc,GAAG,qBAAqB,CAAA;IAClE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,uCAAuC,CAAA;CACrD;AAED,gFAAgF;AAChF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,4CAA4C,CAAA;IACtD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAA;IAClD,oGAAoG;IACpG,qBAAqB,EAAE,OAAO,CAAA;IAC9B,IAAI,EAAE;QACJ,UAAU,EAAE;YAAE,WAAW,EAAE,iBAAiB,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,QAAQ,CAAA;SAAE,CAAA;QAC1H,cAAc,EAAE,MAAM,CAAA;QACtB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,gBAAgB,GAAG,sBAAsB,CAAA;QACpD,MAAM,EAAE,UAAU,GAAG,cAAc,CAAA;QACnC,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,0CAA0C,CAAA;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,gCAAgC,CAAA;IACxC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAAA;IAC7D,IAAI,IAAI,SAAS,wBAAwB,EAAE,CAAA;IAC3C,KAAK,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,qCAAqC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAClF,MAAM,CAAC,EAAE,gCAAgC,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,wBAAwB,CAAA;KAAE,CAAA;IACtG,8FAA8F;IAC9F,oBAAoB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,+BAA+B,GAAG,SAAS,CAAA;IAClF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,sBAAsB,EAAE,GAAG,wBAAwB,CAAA;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAAA;IAClD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACvF,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC1F,UAAU,CAAC,EAAE,uCAAuC,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,sBAAsB,CAAA;KAAE,CAAA;IAC7G,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,8BAA8B,EAAE,CAAA;IAC5E,UAAU,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC3H,aAAa,IAAI,IAAI,CAAA;IACrB,KAAK,IAAI,IAAI,CAAA;CACd"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"creation-capability-types.js","sourceRoot":"","sources":["../src/creation-capability-types.ts"],"names":[],"mappings":""}
|