@dsh-enhanced/plugin-control-plane 0.1.64 → 0.1.66

package/lib/source-approval-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-approval-authority.d.ts","sourceRoot":"","sources":["../src/source-approval-authority.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAWnE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,wBAAwB,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,CAAC,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,SAAS,EAAE,MAAM,CAAA;QACjB,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,MAAM,CAAA;QACpB,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,GAAG,eAAe,GAAG,aAAa,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,CAAC,CAAA;QAC5J,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;QAC1B,eAAe,EAAE,MAAM,CAAA;QACvB,eAAe,EAAE,MAAM,CAAA;QACvB,YAAY,EAAE,MAAM,CAAA;QACpB,+EAA+E;QAC/E,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;CACF;AAkCD,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,UAAU,UAAQ,GAAG,MAAM,CAiBrH;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOvE;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAWjF;AAQD,wBAAgB,0BAA0B,IAAI,MAAM,CAAC,UAAU,CAK9D;AASD,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,6BAA6B,CAiBpH;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,gBAAgB,CAAC,QAAQ,CAAsB,GAAG,IAAI,CAelJ;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC7I;AAED,wBAAsB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChI;AA0BD,mGAAmG;AACnG,wBAAsB,uBAAuB,CAAC,WAAW,EAAE,6BAA6B,EAAE,YAAY,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0DvJ;AAYD,kHAAkH;AAClH,wBAAsB,0BAA0B,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5F"}
+{"version":3,"file":"source-approval-authority.d.ts","sourceRoot":"","sources":["../src/source-approval-authority.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAWnE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,wBAAwB,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,CAAC,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,SAAS,EAAE,MAAM,CAAA;QACjB,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,MAAM,CAAA;QACpB,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,GAAG,eAAe,GAAG,aAAa,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,CAAC,CAAA;QAC5J,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;QAC1B,eAAe,EAAE,MAAM,CAAA;QACvB,eAAe,EAAE,MAAM,CAAA;QACvB,YAAY,EAAE,MAAM,CAAA;QACpB,+EAA+E;QAC/E,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;CACF;AAkCD,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,UAAU,UAAQ,GAAG,MAAM,CAiBrH;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOvE;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAWjF;AAQD,wBAAgB,0BAA0B,IAAI,MAAM,CAAC,UAAU,CAK9D;AASD,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,6BAA6B,CAiBpH;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,gBAAgB,CAAC,QAAQ,CAAsB,GAAG,IAAI,CA+BlJ;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC7I;AAED,wBAAsB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChI;AA0BD,mGAAmG;AACnG,wBAAsB,uBAAuB,CAAC,WAAW,EAAE,6BAA6B,EAAE,YAAY,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0DvJ;AAYD,kHAAkH;AAClH,wBAAsB,0BAA0B,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5F"}

package/lib/source-approval-authority.js

@@ -183,14 +183,32 @@ export function validateSourceApprovalAuthorityConfig(value) {
     integer(grant.receiptTtlMs, 1_000, 86_400_000);
 }
 export function sourceAuthorityValidatePrepared(plan, now, status = 'pending-approval') {
-    if (plan.status !== status || plan.mode !== 'modify' || plan.sourceCheck === undefined || plan.preparedEvidence === undefined
-        || plan.preparedEvidence.schemaVersion !== 1
-        || now > plan.expiresAt || plan.preparedEvidence.preparedAt > plan.sourceCheck.checkedAt || plan.sourceCheck.checkedAt > plan.createdAt
-        || plan.preparedEvidence.preparedAt > now || plan.preparedEvidence.environment.npmConfigIgnoreScripts !== true
-        || plan.preparedEvidence.environment.frozenLockfile !== true || plan.preparedEvidence.environment.offline !== true
-        || plan.preparedEvidence.commands.length !== 1)
+    const evidence = plan.preparedEvidence;
+    if (plan.status !== status || plan.mode !== 'modify' || plan.sourceCheck === undefined || evidence === undefined
+        || now > plan.expiresAt || evidence.preparedAt > plan.sourceCheck.checkedAt || plan.sourceCheck.checkedAt > plan.createdAt
+        || evidence.preparedAt > now)
         fail();
-    const command = plan.preparedEvidence.commands[0];
+    if (evidence.schemaVersion === 3) {
+        // Linux native repository preparation is proven by its own pinned check
+        // sequence under linux-native-repository-v1; there is no Docker command
+        // line to pin. The private native receipt binding was verified by the
+        // prepare runner and is structurally revalidated when the control database
+        // is independently reopened.
+        const checks = ['source-archive-integrity', 'frozen-offline-install', 'repository-pnpm-check', 'source-input-recheck', 'package-integrity'];
+        if (evidence.boundary !== 'linux-native-repository-v1'
+            || evidence.environment.npmConfigIgnoreScripts !== true || evidence.environment.frozenLockfile !== true || evidence.environment.offline !== true
+            || evidence.checks.length !== checks.length || checks.some((check, index) => evidence.checks[index] !== check))
+            fail();
+        return;
+    }
+    // The macOS single-process schema can never back a full-repository modify plan.
+    if (evidence.schemaVersion === 2)
+        fail();
+    if (evidence.environment.npmConfigIgnoreScripts !== true
+        || evidence.environment.frozenLockfile !== true || evidence.environment.offline !== true
+        || evidence.commands.length !== 1)
+        fail();
+    const command = evidence.commands[0];
     const pairs = (left, right) => command.args.some((value, index) => value === left && command.args[index + 1] === right);
     if (command.command !== 'docker' || command.args[0] !== 'run' || command.args[1] !== '-i' || command.args[2] !== '--pull'
         || command.args[3] !== 'never' || !pairs('--network', 'none') || !command.args.includes('--read-only')

package/lib/source-approval-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-approval-authority.js","sourceRoot":"","sources":["../src/source-approval-authority.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AAC5E,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAIlE,MAAM,EAAE,GAAG,sCAAsC,CAAA;AACjD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,WAAW,GAAG,yEAAyE,CAAA;AAC7F,MAAM,gBAAgB,GAAG,+EAA+E,CAAA;AACxG,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAC/B,MAAM,aAAa,GAAG,MAAM,CAAA;AAgC5B,MAAM,4BAA6B,SAAQ,KAAK;IAC9C,YAAY,OAAO,GAAG,+CAA+C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA,CAAC,CAAC;CACtI;AAED,SAAS,IAAI,KAAY,MAAM,IAAI,4BAA4B,EAAE,CAAA,CAAC,CAAC;AAEnE,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IAC/E,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,QAA2B;IAC5E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;AACtF,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,GAAG;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;WAC3F,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IAC1E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe,EAAE,OAAO,GAAG,MAAM,CAAC,gBAAgB;IACjF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,OAAO,IAAK,KAAgB,GAAG,OAAO;QAAE,IAAI,EAAE,CAAA;IACtG,OAAO,KAAe,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAAY,EAAE,IAA0B,EAAE,UAAU,GAAG,KAAK;IAC3G,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,UAAwC,CAAA;IAC5C,IAAI,CAAC;QAAC,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE;WACvD,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IACpH,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACvJ,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,EAAE,CAAA;QACxF,CAAC;IACH,CAAC;IACD,IAAI,IAAkC,CAAA;IACtC,IAAI,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;WACzH,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAA;IAChH,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,IAAY;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,IAAI,IAAkC,CAAA;IACtC,IAAI,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;WACxE,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAA;IACnF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,OAAe;IACvE,gCAAgC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/F,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,IAAI,EAAE,CAAA;QAC5I,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAA;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACnG,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG;YAAE,IAAI,EAAE,CAAA;QAC1J,OAAO,KAAK,CAAA;IACd,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,IAA2B,EAAE,KAAsD;IAC1G,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WACtF,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WAC5F,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAA;AACvI,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,IAAI,EAAE,CAAA;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW;QACjH,kBAAkB,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAC1G,IAAI,IAAI,CAAC,QAAQ,KAAK,wBAAwB;QAAE,IAAI,EAAE,CAAA;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAClK,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAA;AACzG,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAAc;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5I,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc;QACzJ,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO;QAAE,IAAI,EAAE,CAAA;IAC9E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC1L,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7I,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,SAAS,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;IACzK,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAC1G,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACxI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,IAAI,EAAE,CAAA;IACpG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,CAAC,CAAC,CAAA;IACjG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IACrH,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;AAC7I,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAsB,EAAE,GAAW,EAAE,SAAqC,kBAAkB;IAC1I,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;WACxH,IAAI,CAAC,gBAAgB,CAAC,aAAa,KAAK,CAAC;WACzC,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;WACpI,IAAI,CAAC,gBAAgB,CAAC,UAAU,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,sBAAsB,KAAK,IAAI;WAC3G,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI;WAC/G,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9C,IAAI,EAAE,CAAA;IACR,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAA;IAClD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;IAChJ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;WACpH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;WACnG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC;WACnG,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;WACrF,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,4BAA4B;QAAE,IAAI,EAAE,CAAA;AACnE,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,IAAsB,EAAE,KAAmC;IAC/G,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;IAC3H,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,MAAM,YAAY,GAAG,gCAAgC,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;IAC/J,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAC7E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,gBAAgB,KAAK,EAAE,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,IAAI,EAAE,CAAA;IAC7K,MAAM,WAAW,GAAG,0BAA0B,EAAE,CAAA;IAChD,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACxI,IAAI,IAAI,KAAK,IAAI,CAAC,UAAU;QAAE,IAAI,EAAE,CAAA;IACpC,MAAM,gBAAgB,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvK,MAAM,cAAc,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACnK,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,gBAAgB,CAAC,KAAK,YAAY,CAAC,cAAc,CAAC;QAAE,IAAI,EAAE,CAAA;IAC3I,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,eAAe;QAAE,IAAI,EAAE,CAAA;IACtE,MAAM,YAAY,GAAG,WAAW,IAAI,CAAC,IAAI,eAAe,CAAA;IACxD,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,IAAI,iBAAiB,CAAC;YAAE,IAAI,EAAE,CAAA;QACnG,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QACxH,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,IAAI,EAAE,CAAA;IACrE,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,CAAA;QAC7E,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACjG,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACtC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,QAAQ;YAAE,IAAI,EAAE,CAAA;QACpF,IAAI,IAAkC,CAAA;QACtC,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,IAAI,EAAE,CAAA;QACtF,KAAK,IAAI,IAAI,CAAC,IAAI,CAAA;QAClB,IAAI,KAAK,GAAG,KAAK,CAAC,eAAe;YAAE,IAAI,EAAE,CAAA;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC/F,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,WAAY,CAAC,UAAU,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,WAAY,CAAC,WAAW;QAAE,IAAI,EAAE,CAAA;AACxI,CAAC;AAID,SAAS,UAAU,CAAC,IAAY;IAC9B,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;IACvC,QAAQ,CAAC,IAAI,CAAC;;;;;;;cAOF,CAAC,CAAA;IACb,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,MAAqC,EAAE,OAA8B,EAAE,UAA+C,EAAE,GAAW,EAAE,SAAiB;IACxK,MAAM,QAAQ,GAAuC,EAAE,aAAa,EAAE,CAAC;QACrE,UAAU,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACrG,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;QACxG,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;IAC9F,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAC5I,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,WAA0C,EAAE,YAAmC;IAC3H,IAAI,CAAC;QACH,qCAAqC,CAAC,WAAW,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,WAAW,CAAC;QAAC,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QAC7H,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS;YAAE,IAAI,EAAE,CAAA;QAChD,MAAM,UAAU,GAAG,gCAAgC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAA;QACvF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAC3E,IAAI,UAA+C,CAAA;QACnD,IAAI,CAAC;YAAC,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAChE,IAAI,UAAU,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,EAAE,CAAA;QACtD,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1E,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,IAAI,MAAsD,CAAA;QAC1D,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;YACxC,MAAM,GAAG,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,qBAAqB;mBAC/G,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,IAAI,EAAE,CAAA;YACtE,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,MAAM,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC1H,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,kBAAkB;gBAAE,IAAI,EAAE,CAAA;QAC5K,CAAC;gBAAS,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;QAC9B,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC9B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,IAAI,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS;oBAAE,IAAI,EAAE,CAAA;gBACjE,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;gBACjD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC9G,IAAI,aAAa,IAAI,GAAG;oBAAE,IAAI,EAAE,CAAA;gBAChC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAmE,CAAA;gBAC3M,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,CAAC,+GAA+G,CAAC;yBACrJ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;qBACrD,IAAI,KAAK,CAAC,aAAa,KAAK,YAAY,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc;oBAAE,IAAI,EAAE,CAAA;gBACjG,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,2JAA2J,CAAC;qBACzL,GAAG,CAAC,aAAa,CAA+B,CAAA;gBACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,QAAQ,CAAC,aAAa,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM;2BACtH,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,cAAc,KAAK,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAAE,IAAI,EAAE,CAAA;oBACjI,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAY,CAAC,CAAA;oBAClF,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;wBAAE,IAAI,EAAE,CAAA;oBAChH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAC,OAAO,OAAO,CAAA;gBACvC,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS;oBAAE,IAAI,EAAE,CAAA;gBACrI,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAsB,CAAA;gBAClJ,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY;oBAAE,IAAI,EAAE,CAAA;gBACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;gBAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;gBAC3C,MAAM,CAAC,OAAO,CAAC,gLAAgL,CAAC;qBAC7L,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAA;gBAC3I,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,OAAO,CAAA;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;QACtH,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAA4B;YAAE,MAAM,KAAK,CAAA;QAC9D,MAAM,IAAI,4BAA4B,EAAE,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAAC,IAAI,IAAI,GAAG,CAAC,CAAA;IACzC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;QACvF,IAAI,IAAI,GAAG,iBAAiB;YAAE,IAAI,EAAE,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;AAC/F,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;YAAE,IAAI,EAAE,CAAA;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,WAAW,GAAG,2BAA2B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;QACnH,IAAI,MAAe,CAAC;QAAC,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAuC,EAAE,OAAgC,CAAC,CAAA;QAChK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,4BAA4B,EAAE,CAAA;IAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"source-approval-authority.js","sourceRoot":"","sources":["../src/source-approval-authority.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AAC5E,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAIlE,MAAM,EAAE,GAAG,sCAAsC,CAAA;AACjD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,WAAW,GAAG,yEAAyE,CAAA;AAC7F,MAAM,gBAAgB,GAAG,+EAA+E,CAAA;AACxG,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAC/B,MAAM,aAAa,GAAG,MAAM,CAAA;AAgC5B,MAAM,4BAA6B,SAAQ,KAAK;IAC9C,YAAY,OAAO,GAAG,+CAA+C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA,CAAC,CAAC;CACtI;AAED,SAAS,IAAI,KAAY,MAAM,IAAI,4BAA4B,EAAE,CAAA,CAAC,CAAC;AAEnE,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IAC/E,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,QAA2B;IAC5E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;AACtF,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,GAAG;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;WAC3F,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IAC1E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe,EAAE,OAAO,GAAG,MAAM,CAAC,gBAAgB;IACjF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,OAAO,IAAK,KAAgB,GAAG,OAAO;QAAE,IAAI,EAAE,CAAA;IACtG,OAAO,KAAe,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAAY,EAAE,IAA0B,EAAE,UAAU,GAAG,KAAK;IAC3G,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,UAAwC,CAAA;IAC5C,IAAI,CAAC;QAAC,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE;WACvD,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IACpH,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACvJ,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,EAAE,CAAA;QACxF,CAAC;IACH,CAAC;IACD,IAAI,IAAkC,CAAA;IACtC,IAAI,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;WACzH,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAA;IAChH,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,IAAY;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,IAAI,IAAkC,CAAA;IACtC,IAAI,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;WACxE,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAA;IACnF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,OAAe;IACvE,gCAAgC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/F,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,IAAI,EAAE,CAAA;QAC5I,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAA;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACnG,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG;YAAE,IAAI,EAAE,CAAA;QAC1J,OAAO,KAAK,CAAA;IACd,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,IAA2B,EAAE,KAAsD;IAC1G,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WACtF,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WAC5F,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAA;AACvI,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,IAAI,EAAE,CAAA;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW;QACjH,kBAAkB,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAC1G,IAAI,IAAI,CAAC,QAAQ,KAAK,wBAAwB;QAAE,IAAI,EAAE,CAAA;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAClK,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAA;AACzG,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAAc;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5I,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc;QACzJ,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO;QAAE,IAAI,EAAE,CAAA;IAC9E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC1L,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7I,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,SAAS,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;IACzK,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAC1G,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACxI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,IAAI,EAAE,CAAA;IACpG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,CAAC,CAAC,CAAA;IACjG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IACrH,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;AAC7I,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAsB,EAAE,GAAW,EAAE,SAAqC,kBAAkB;IAC1I,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAA;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;WAC3G,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;WACvH,QAAQ,CAAC,UAAU,GAAG,GAAG;QAC5B,IAAI,EAAE,CAAA;IACR,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QACjC,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,MAAM,GAAG,CAAC,0BAA0B,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,mBAAmB,CAAU,CAAA;QACpJ,IAAI,QAAQ,CAAC,QAAQ,KAAK,4BAA4B;eACjD,QAAQ,CAAC,WAAW,CAAC,sBAAsB,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,cAAc,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI;eAC7I,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,IAAI,EAAE,CAAA;QACxH,OAAM;IACR,CAAC;IACD,gFAAgF;IAChF,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACxC,IAAI,QAAQ,CAAC,WAAW,CAAC,sBAAsB,KAAK,IAAI;WACnD,QAAQ,CAAC,WAAW,CAAC,cAAc,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI;WACrF,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACjC,IAAI,EAAE,CAAA;IACR,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAA;IACrC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;IAChJ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;WACpH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;WACnG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC;WACnG,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;WACrF,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,4BAA4B;QAAE,IAAI,EAAE,CAAA;AACnE,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,IAAsB,EAAE,KAAmC;IAC/G,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;IAC3H,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,MAAM,YAAY,GAAG,gCAAgC,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;IAC/J,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAC7E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,gBAAgB,KAAK,EAAE,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,IAAI,EAAE,CAAA;IAC7K,MAAM,WAAW,GAAG,0BAA0B,EAAE,CAAA;IAChD,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACxI,IAAI,IAAI,KAAK,IAAI,CAAC,UAAU;QAAE,IAAI,EAAE,CAAA;IACpC,MAAM,gBAAgB,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvK,MAAM,cAAc,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACnK,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,gBAAgB,CAAC,KAAK,YAAY,CAAC,cAAc,CAAC;QAAE,IAAI,EAAE,CAAA;IAC3I,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,eAAe;QAAE,IAAI,EAAE,CAAA;IACtE,MAAM,YAAY,GAAG,WAAW,IAAI,CAAC,IAAI,eAAe,CAAA;IACxD,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,IAAI,iBAAiB,CAAC;YAAE,IAAI,EAAE,CAAA;QACnG,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QACxH,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,IAAI,EAAE,CAAA;IACrE,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,CAAA;QAC7E,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACjG,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACtC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,QAAQ;YAAE,IAAI,EAAE,CAAA;QACpF,IAAI,IAAkC,CAAA;QACtC,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,IAAI,EAAE,CAAA;QACtF,KAAK,IAAI,IAAI,CAAC,IAAI,CAAA;QAClB,IAAI,KAAK,GAAG,KAAK,CAAC,eAAe;YAAE,IAAI,EAAE,CAAA;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC/F,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,WAAY,CAAC,UAAU,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,WAAY,CAAC,WAAW;QAAE,IAAI,EAAE,CAAA;AACxI,CAAC;AAID,SAAS,UAAU,CAAC,IAAY;IAC9B,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;IACvC,QAAQ,CAAC,IAAI,CAAC;;;;;;;cAOF,CAAC,CAAA;IACb,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,MAAqC,EAAE,OAA8B,EAAE,UAA+C,EAAE,GAAW,EAAE,SAAiB;IACxK,MAAM,QAAQ,GAAuC,EAAE,aAAa,EAAE,CAAC;QACrE,UAAU,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACrG,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;QACxG,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;IAC9F,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAC5I,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,WAA0C,EAAE,YAAmC;IAC3H,IAAI,CAAC;QACH,qCAAqC,CAAC,WAAW,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,WAAW,CAAC;QAAC,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QAC7H,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS;YAAE,IAAI,EAAE,CAAA;QAChD,MAAM,UAAU,GAAG,gCAAgC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAA;QACvF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAC3E,IAAI,UAA+C,CAAA;QACnD,IAAI,CAAC;YAAC,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAChE,IAAI,UAAU,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,EAAE,CAAA;QACtD,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1E,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,IAAI,MAAsD,CAAA;QAC1D,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;YACxC,MAAM,GAAG,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,qBAAqB;mBAC/G,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,IAAI,EAAE,CAAA;YACtE,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,MAAM,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC1H,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,kBAAkB;gBAAE,IAAI,EAAE,CAAA;QAC5K,CAAC;gBAAS,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;QAC9B,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC9B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,IAAI,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS;oBAAE,IAAI,EAAE,CAAA;gBACjE,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;gBACjD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC9G,IAAI,aAAa,IAAI,GAAG;oBAAE,IAAI,EAAE,CAAA;gBAChC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAmE,CAAA;gBAC3M,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,CAAC,+GAA+G,CAAC;yBACrJ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;qBACrD,IAAI,KAAK,CAAC,aAAa,KAAK,YAAY,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc;oBAAE,IAAI,EAAE,CAAA;gBACjG,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,2JAA2J,CAAC;qBACzL,GAAG,CAAC,aAAa,CAA+B,CAAA;gBACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,QAAQ,CAAC,aAAa,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM;2BACtH,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,cAAc,KAAK,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAAE,IAAI,EAAE,CAAA;oBACjI,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAY,CAAC,CAAA;oBAClF,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;wBAAE,IAAI,EAAE,CAAA;oBAChH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAC,OAAO,OAAO,CAAA;gBACvC,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS;oBAAE,IAAI,EAAE,CAAA;gBACrI,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAsB,CAAA;gBAClJ,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY;oBAAE,IAAI,EAAE,CAAA;gBACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;gBAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;gBAC3C,MAAM,CAAC,OAAO,CAAC,gLAAgL,CAAC;qBAC7L,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAA;gBAC3I,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,OAAO,CAAA;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;QACtH,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAA4B;YAAE,MAAM,KAAK,CAAA;QAC9D,MAAM,IAAI,4BAA4B,EAAE,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAAC,IAAI,IAAI,GAAG,CAAC,CAAA;IACzC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;QACvF,IAAI,IAAI,GAAG,iBAAiB;YAAE,IAAI,EAAE,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;AAC/F,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;YAAE,IAAI,EAAE,CAAA;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,WAAW,GAAG,2BAA2B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;QACnH,IAAI,MAAe,CAAC;QAAC,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAuC,EAAE,OAAgC,CAAC,CAAA;QAChK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,4BAA4B,EAAE,CAAA;IAAC,CAAC;AACtD,CAAC"}

package/lib/source-build-diagnostics.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Bounded, content-safe projection of a deterministic isolated build failure.
+ *
+ * The isolated build runs under `env -i` with no credentials, but its output is
+ * still untrusted text. Only compiler-style `file(line,col): error CODE: msg`
+ * entries and vitest failure blocks (`FAIL  file > suite > case`, the error's
+ * first line and its first `❯ file:line:col` frame, as code `VITEST`) for
+ * plugin-relative paths, plus a short sanitized tail, are retained.
+ * Absolute host or sandbox paths are rewritten to plugin-relative form or
+ * `<path>`, and long token-like strings are redacted.
+ */
+export interface SourceBuildDiagnosticEntry {
+    readonly file: string;
+    readonly line: number;
+    readonly column: number;
+    readonly code: string;
+    readonly message: string;
+}
+export interface SourceBuildDiagnostics {
+    readonly protocol: 'dsh-source-build-diagnostics/v1';
+    readonly phase: 'tree' | 'install' | 'check' | 'pack' | 'unknown';
+    readonly exitCode: number;
+    readonly entries: readonly SourceBuildDiagnosticEntry[];
+    readonly tail: readonly string[];
+    readonly truncated: boolean;
+}
+export declare const SOURCE_BUILD_CHECK_FAILED = "source-build-check-failed";
+/** Remove control characters, absolute paths and token-like values; bound length. */
+export declare function sanitizeBuildText(text: string): string;
+export declare function sourceBuildDiagnostics(stderr: string, exitCode: number): SourceBuildDiagnostics;
+//# sourceMappingURL=source-build-diagnostics.d.ts.map

package/lib/source-build-diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-build-diagnostics.d.ts","sourceRoot":"","sources":["../src/source-build-diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AACD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,iCAAiC,CAAA;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,0BAA0B,EAAE,CAAA;IACvD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,eAAO,MAAM,yBAAyB,8BAA8B,CAAA;AA6BpE,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAsD/F"}

package/lib/source-build-diagnostics.js

@@ -0,0 +1,110 @@
+export const SOURCE_BUILD_CHECK_FAILED = 'source-build-check-failed';
+const MAX_ENTRIES = 20;
+const MAX_TAIL_LINES = 12;
+const MAX_TEXT = 300;
+const PHASES = new Set(['tree', 'install', 'check', 'pack']);
+// Non-pretty TypeScript output, e.g. `src/index.ts(62,5): error TS2322: ...`.
+const TSC = /^(.+?)\((\d{1,7}),(\d{1,7})\): error (TS\d{1,6}): (.*)$/u;
+// Pretty / ESLint-like output, e.g. `src/index.ts:62:5 - error TS2322: ...`.
+const COLON = /^(.+?):(\d{1,7}):(\d{1,7}) - error (TS\d{1,6}): (.*)$/u;
+// Vitest failure header, e.g. ` FAIL  tests/x.spec.ts > suite > case` or a file-level `[ tests/x.spec.ts ]`.
+const VITEST_FAIL = /^\s*FAIL\s+(?:\|[^|]{1,100}\|\s+)?(\S+?)(?:\s+>\s+(.+?))?(?:\s+\[[^\]]*\])?\s*$/u;
+// Vitest stack frame, e.g. ` ❯ tests/x.spec.ts:12:5` or ` ❯ helper src/index.ts:40:12`.
+const VITEST_FRAME = /^\s*❯\s+(?:\S+\s+)?(\S+?):(\d{1,7}):(\d{1,7})\s*$/u;
+// Vitest block separator (`⎯⎯⎯[1/3]⎯`) or run summary (`Test Files  1 failed (1)`).
+const VITEST_END = /^\s*(?:⎯{3,}|Test Files\s)/u;
+const VITEST_CODE = 'VITEST';
+// Terminal SGR/cursor sequences; built from a code point so the pattern holds no literal control character.
+const ANSI = new RegExp(String.fromCharCode(27) + '\\[[0-9;]*[A-Za-z]', 'gu');
+const RELATIVE = /^(?:src|tests?|lib|scripts)\/[A-Za-z0-9._/-]{1,200}$|^[A-Za-z0-9._-]{1,100}\.(?:json|[cm]?[jt]sx?)$/u;
+function relativePath(path) {
+    let value = path.trim();
+    const plugin = /(?:^|\/)plugins\/[a-z0-9][a-z0-9-]*\/(.+)$/u.exec(value);
+    if (plugin)
+        value = plugin[1];
+    else if (value.startsWith('/'))
+        return undefined;
+    if (value.split('/').some(part => part === '..' || part === ''))
+        return undefined;
+    return RELATIVE.test(value) ? value : undefined;
+}
+/** Remove control characters, absolute paths and token-like values; bound length. */
+export function sanitizeBuildText(text) {
+    let value = text.replace(ANSI, '').replace(/[\p{Cc}\u2028\u2029]/gu, ' ');
+    value = value.replace(/(?<=^|[\s'"(=:,`[])\/[^\s'"():,`\]]+/gu, match => relativePath(match) ?? '<path>');
+    value = value.replace(/\b[A-Za-z0-9_]*(?:key|token|secret|password|authorization|bearer)\b\s*[:=]\s*\S+/giu, '<redacted>');
+    value = value.replace(/\b(?:sk|pk|ghp|gho|xox[abp])-[A-Za-z0-9_-]{8,}\b/gu, '<redacted>');
+    value = value.replace(/[A-Za-z0-9+/_=-]{40,}/gu, '<redacted>');
+    value = value.replace(/\s+/gu, ' ').trim();
+    return value.length > MAX_TEXT ? value.slice(0, MAX_TEXT - 1) + '…' : value;
+}
+export function sourceBuildDiagnostics(stderr, exitCode) {
+    const lines = String(stderr).slice(-65_536).split(/\r?\n/u);
+    const phases = [...String(stderr).matchAll(/source build phase failed: ([a-z-]+)/gu)].map(match => match[1]);
+    const named = phases.at(-1);
+    const phase = (named !== undefined && PHASES.has(named) ? named : 'unknown');
+    const entries = [];
+    let truncated = String(stderr).length > 65_536;
+    const push = (entry) => {
+        if (entries.length >= MAX_ENTRIES)
+            truncated = true;
+        else
+            entries.push(Object.freeze(entry));
+    };
+    // One vitest error block may follow several consecutive FAIL headers that share it.
+    let tests = [];
+    let error;
+    let frames = [];
+    const flush = () => {
+        for (const test of tests) {
+            const own = frames.find(frame => frame.file === test.file);
+            const other = own === undefined ? frames[0] : undefined;
+            const text = [test.name, error ?? 'failed'].filter(part => part !== '').join(': ')
+                + (other === undefined ? '' : ` (at ${other.file}:${other.line}:${other.column})`);
+            push({ file: test.file, line: own?.line ?? 0, column: own?.column ?? 0, code: VITEST_CODE, message: sanitizeBuildText(text) });
+        }
+        tests = [];
+        error = undefined;
+        frames = [];
+    };
+    for (const raw of lines) {
+        const line = raw.replace(ANSI, '').trimEnd();
+        const match = TSC.exec(line) ?? COLON.exec(line);
+        if (match) {
+            flush();
+            const file = relativePath(match[1]);
+            if (file !== undefined)
+                push({ file, line: Number(match[2]), column: Number(match[3]), code: match[4], message: sanitizeBuildText(match[5]) });
+            continue;
+        }
+        const failed = VITEST_FAIL.exec(line);
+        if (failed) {
+            if (error !== undefined || frames.length > 0)
+                flush();
+            const file = relativePath(failed[1]);
+            if (file !== undefined)
+                tests.push({ file, name: failed[2]?.trim() ?? '' });
+            continue;
+        }
+        if (tests.length === 0)
+            continue;
+        if (VITEST_END.test(line)) {
+            flush();
+            continue;
+        }
+        const frame = VITEST_FRAME.exec(line);
+        const file = frame ? relativePath(frame[1]) : undefined;
+        if (frame && file !== undefined)
+            frames.push({ file, line: Number(frame[2]), column: Number(frame[3]) });
+        else if (error === undefined && frame === null && line.trim() !== '')
+            error = line.trim();
+    }
+    flush();
+    const meaningful = lines.map(line => line.replace(ANSI, '')).filter(line => line.trim() !== '');
+    if (meaningful.length > MAX_TAIL_LINES)
+        truncated = true;
+    const tail = meaningful.slice(-MAX_TAIL_LINES).map(sanitizeBuildText).filter(line => line !== '');
+    return Object.freeze({ protocol: 'dsh-source-build-diagnostics/v1', phase,
+        exitCode: Number.isSafeInteger(exitCode) ? exitCode : -1, entries: Object.freeze(entries), tail: Object.freeze(tail), truncated });
+}
+//# sourceMappingURL=source-build-diagnostics.js.map

package/lib/source-build-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-build-diagnostics.js","sourceRoot":"","sources":["../src/source-build-diagnostics.ts"],"names":[],"mappings":"AA2BA,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,CAAA;AACpE,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,QAAQ,GAAG,GAAG,CAAA;AACpB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAC5D,8EAA8E;AAC9E,MAAM,GAAG,GAAG,0DAA0D,CAAA;AACtE,6EAA6E;AAC7E,MAAM,KAAK,GAAG,wDAAwD,CAAA;AACtE,6GAA6G;AAC7G,MAAM,WAAW,GAAG,kFAAkF,CAAA;AACtG,wFAAwF;AACxF,MAAM,YAAY,GAAG,oDAAoD,CAAA;AACzE,oFAAoF;AACpF,MAAM,UAAU,GAAG,6BAA6B,CAAA;AAChD,MAAM,WAAW,GAAG,QAAQ,CAAA;AAC5B,4GAA4G;AAC5G,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,IAAI,CAAC,CAAA;AAC7E,MAAM,QAAQ,GAAG,sGAAsG,CAAA;AAEvH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IACvB,MAAM,MAAM,GAAG,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxE,IAAI,MAAM;QAAE,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAA;SACzB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAChD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IACjF,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;IACzE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,wCAAwC,EAAE,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAA;IACzG,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,qFAAqF,EAAE,YAAY,CAAC,CAAA;IAC1H,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,oDAAoD,EAAE,YAAY,CAAC,CAAA;IACzF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAA;IAC9D,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1C,OAAO,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,QAAgB;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IAC7G,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAoC,CAAA;IAC/G,MAAM,OAAO,GAAiC,EAAE,CAAA;IAChD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAA;IAC9C,MAAM,IAAI,GAAG,CAAC,KAAiC,EAAQ,EAAE;QACvD,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;YAAE,SAAS,GAAG,IAAI,CAAA;;YAC9C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,CAAC,CAAA;IACD,oFAAoF;IACpF,IAAI,KAAK,GAAqC,EAAE,CAAA;IAChD,IAAI,KAAyB,CAAA;IAC7B,IAAI,MAAM,GAAqD,EAAE,CAAA;IACjE,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAA;YAC1D,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACvD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;kBAC9E,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YACpF,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAChI,CAAC;QACD,KAAK,GAAG,EAAE,CAAC;QAAC,KAAK,GAAG,SAAS,CAAC;QAAC,MAAM,GAAG,EAAE,CAAA;IAC5C,CAAC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,EAAE,CAAA;YACP,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;YACpC,IAAI,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAA;YAChJ,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,EAAE,CAAA;YACrD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAA;YACrC,IAAI,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;YAC3E,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,SAAQ;QAAC,CAAC;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxD,IAAI,KAAK,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;aACnG,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3F,CAAC;IACD,KAAK,EAAE,CAAA;IACP,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/F,IAAI,UAAU,CAAC,MAAM,GAAG,cAAc;QAAE,SAAS,GAAG,IAAI,CAAA;IACxD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,iCAAiC,EAAE,KAAK;QACvE,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACtI,CAAC"}

package/lib/source-build.d.ts

@@ -3,7 +3,7 @@ import type { CreationCapabilitySourceSnapshot } from './creation-capability-sou
 import type { PluginCreationVerificationCertificate } from '@dsh-enhanced/assistant-growth-contract';
 import { type SourceCreationBinding } from './source-creation.js';
 import type { DockerSourcePreparedEvidence, SourcePreparedEvidence } from './types.js';
-import type { NativeMacRuntime } from '@dsh-enhanced/assistant-isolation';
+import type { LinuxRuntime, LinuxCgroupRoots, LinuxRunnerStateSeal, LinuxSystemSnapshot, LinuxUserNamespaceMapping, NativeMacRuntime } from '@dsh-enhanced/assistant-isolation';
 export interface DockerSourceBuildConfig {
     /** Canonical owner-controlled docker client. */
     dockerPath: string;
@@ -43,7 +43,24 @@ export interface NativeSourceBuildConfig {
     outputBytes: number;
     versioning?: 'patch';
 }
-export type SourceBuildConfig = DockerSourceBuildConfig | NativeSourceBuildConfig;
+export interface LinuxSourceBuildConfig extends Omit<NativeSourceBuildConfig, 'backend' | 'runtime'> {
+    backend: 'linux-native';
+    runtime: LinuxRuntime;
+    cgroupRoots: LinuxCgroupRoots;
+    memoryMiB: number;
+    cpus: number;
+    pidsLimit: number;
+    workspaceMiB: number;
+    temporaryMiB: number;
+    workspaceInodes: number;
+    temporaryInodes: number;
+    /** Paired owner-approved repository identities; omitted for the legacy boundary. */
+    userNamespace?: LinuxUserNamespaceMapping;
+    systemSnapshot?: LinuxSystemSnapshot;
+    /** Owner-frozen runner state identity, kept outside the writable state tree. */
+    stateSeal?: LinuxRunnerStateSeal;
+}
+export type SourceBuildConfig = DockerSourceBuildConfig | NativeSourceBuildConfig | LinuxSourceBuildConfig;
 export interface SourceBuildResult<E extends SourcePreparedEvidence = SourcePreparedEvidence> {
     treeDigest: string;
     patchDigest: string;
@@ -55,6 +72,12 @@ export interface SourceBuildResult<E extends SourcePreparedEvidence = SourcePrep
 /** Exact in-container command recorded in prepared source evidence. */
 export declare const PREPARED_SOURCE_BUILD_SCRIPT: string;
 export declare function validateSourceBuildConfig(config: SourceBuildConfig): void;
+export declare function sourceTree(worktree: string, baseCommit: string, scope: readonly string[], environment: NodeJS.ProcessEnv, signal?: AbortSignal): Promise<{
+    tree: string;
+    temporary: string;
+    cleanup: () => Promise<void>;
+}>;
+export declare function verifySourcePreparation(input: Pick<Parameters<typeof runDockerPreparedChecks>[0], 'worktree' | 'baseCommit' | 'name' | 'scope' | 'environment' | 'signal' | 'assertCurrent' | 'creation' | 'revision'>): Promise<void>;
 /**
  * Archive an exact temporary-index tree into a disposable, mount-free Docker
  * container. No repository, state directory, socket, credential, environment

package/lib/source-build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-build.d.ts","sourceRoot":"","sources":["../src/source-build.ts"],"names":[],"mappings":"AAMA,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC/F,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAA;AACvF,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAE/F,OAAO,KAAK,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AAEzE,MAAM,WAAW,uBAAuB;IACtC,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,sEAAsE;IACtE,OAAO,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,qBAAqB,CAAA;IAC3D,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;iFAC6E;IAC7E,iBAAiB,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,gBAAgB,CAAA;IACzB,OAAO,EAAE,gBAAgB,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,uBAAuB,CAAA;AA0BjF,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,sBAAsB,GAAG,sBAAsB;IAC1F,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,CAAC,CAAA;IACX,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AASD,uEAAuE;AACvE,eAAO,MAAM,4BAA4B,QAsaxC,CAAA;AAYD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAqDzE;AAyED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,uBAAuB,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IAC9B,MAAM,EAAE,WAAW,CAAA;IACnB,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,SAAS,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,gFAAgF;IAChF,QAAQ,CAAC,EAAE,qBAAqB,CAAA;IAChC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,qBAAqB,CAAC;QAAC,YAAY,EAAE,gCAAgC,CAAC;QAAC,iBAAiB,EAAE,qCAAqC,CAAC;QAAC,KAAK,EAAE,SAAS,OAAO,uBAAuB,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAA;IAC3N,sGAAsG;IACtG,WAAW,CAAC,EAAE,IAAI,CAAA;CACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,CAoL3D;AAED,mFAAmF;AACnF,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBzI"}
+{"version":3,"file":"source-build.d.ts","sourceRoot":"","sources":["../src/source-build.ts"],"names":[],"mappings":"AAMA,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC/F,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAA;AACvF,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAE/F,OAAO,KAAK,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AAE/K,MAAM,WAAW,uBAAuB;IACtC,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,sEAAsE;IACtE,OAAO,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,qBAAqB,CAAA;IAC3D,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;iFAC6E;IAC7E,iBAAiB,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,gBAAgB,CAAA;IACzB,OAAO,EAAE,gBAAgB,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,SAAS,CAAC;IAClG,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,YAAY,CAAA;IACrB,WAAW,EAAE,gBAAgB,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,oFAAoF;IACpF,aAAa,CAAC,EAAE,yBAAyB,CAAA;IACzC,cAAc,CAAC,EAAE,mBAAmB,CAAA;IACpC,gFAAgF;IAChF,SAAS,CAAC,EAAE,oBAAoB,CAAA;CACjC;AAED,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,uBAAuB,GAAG,sBAAsB,CAAA;AAyG1G,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,sBAAsB,GAAG,sBAAsB;IAC1F,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,CAAC,CAAA;IACX,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AASD,uEAAuE;AACvE,eAAO,MAAM,4BAA4B,QAsaxC,CAAA;AAYD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CA0FzE;AA6DD,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAUjO;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,EACrG,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,eAAe,GAAG,UAAU,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBrI;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,uBAAuB,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IAC9B,MAAM,EAAE,WAAW,CAAA;IACnB,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,SAAS,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,gFAAgF;IAChF,QAAQ,CAAC,EAAE,qBAAqB,CAAA;IAChC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,qBAAqB,CAAC;QAAC,YAAY,EAAE,gCAAgC,CAAC;QAAC,iBAAiB,EAAE,qCAAqC,CAAC;QAAC,KAAK,EAAE,SAAS,OAAO,uBAAuB,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAA;IAC3N,sGAAsG;IACtG,WAAW,CAAC,EAAE,IAAI,CAAA;CACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,CAoK3D;AAED,mFAAmF;AACnF,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBzI"}

package/lib/source-build.js

@@ -31,6 +31,87 @@ function validNativeRuntimeShape(value) {
         && runtime.roots.some(root => within(runtime.nodePath, root.path) && runtime.nodePath !== root.path)
         && runtime.roots.some(root => within(runtime.modulesPath, root.path));
 }
+/** Shape-only: the independently copied authority module cannot load isolation. */
+function validLinuxRuntimeShape(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    const hex = (part) => typeof part === 'string' && /^[a-f0-9]{64}$/u.test(part);
+    const canonical = (part) => typeof part === 'string' && isAbsolute(part)
+        && resolve(part) === part && !/[\p{Cc}]/u.test(part);
+    return Object.keys(item).sort().join() === 'backend,cachePath,lockSha256,modulesPath,nativePnpmPath,nativePnpmRoot,nodePath,nodeSha256,platform,pnpmPath,root,schemaVersion,sourceCommit,storePath,versions'
+        && item.schemaVersion === 1 && item.backend === 'linux-native' && item.platform === `linux-${process.arch}`
+        && typeof item.sourceCommit === 'string' && /^[a-f0-9]{40}$/u.test(item.sourceCommit) && item.sourceCommit !== '0'.repeat(40)
+        && hex(item.lockSha256) && hex(item.nodeSha256) && !!item.root
+        && Object.keys(item.root).sort().join() === 'dev,ino,path,sha256'
+        && canonical(item.root.path) && item.root.path !== '/' && hex(item.root.sha256)
+        && Number.isSafeInteger(item.root.dev) && item.root.dev >= 0 && Number.isSafeInteger(item.root.ino) && item.root.ino >= 0
+        && item.nodePath === join(item.root.path, 'bin', 'node')
+        && item.pnpmPath === join(item.root.path, 'pnpm', 'bin', 'pnpm.mjs')
+        && item.nativePnpmRoot === join(item.root.path, 'pnpm-native')
+        && item.nativePnpmPath === join(item.nativePnpmRoot, 'pnpm')
+        && item.modulesPath === join(item.root.path, 'node_modules') && item.storePath === join(item.root.path, 'store')
+        && item.cachePath === join(item.root.path, 'cache') && !!item.versions
+        && Object.keys(item.versions).sort().join() === 'cordis,node,pnpm,systemPrompt,tools,typescript'
+        && item.versions.node === 'v22.23.2' && item.versions.pnpm === '11.7.0'
+        && ['typescript', 'cordis', 'tools', 'systemPrompt'].every(key => {
+            const version = item.versions[key];
+            return typeof version === 'string' && version.length > 0 && version.length <= 128;
+        });
+}
+function identityFields(value, names) {
+    return !!value && typeof value === 'object' && Object.getPrototypeOf(value) === Object.prototype
+        && Object.keys(value).sort().join() === names;
+}
+/** Pure shape validation: opening the seal and its bound ledger is owned by the
+ * Linux runner, including in independently copied authority programs. */
+function validLinuxStateSeal(value, stateRoot) {
+    if (!value || typeof value !== 'object' || Object.getPrototypeOf(value) !== Object.prototype
+        || Reflect.ownKeys(value).length !== 2
+        || !Reflect.ownKeys(value).every(key => key === 'path' || key === 'sha256')
+        || !Object.values(Object.getOwnPropertyDescriptors(value)).every(field => field.enumerable && 'value' in field))
+        return false;
+    const seal = value;
+    return typeof seal.path === 'string' && isAbsolute(seal.path) && resolve(seal.path) === seal.path
+        && seal.path !== '/' && !/[\p{Cc}\\]/u.test(seal.path)
+        && seal.path !== stateRoot && !seal.path.startsWith(stateRoot + sep)
+        && typeof seal.sha256 === 'string' && /^[a-f0-9]{64}$/u.test(seal.sha256);
+}
+/** Shape checks only: the runner verifies helpers, kernel mapping and snapshot
+ * bytes at dispatch. This file also runs in standalone authority copies. */
+function validLinuxRepositoryIdentity(config) {
+    const mapping = config.userNamespace, snapshot = config.systemSnapshot;
+    if (mapping === undefined || snapshot === undefined)
+        return mapping === undefined && snapshot === undefined;
+    const natural = (value) => Number.isSafeInteger(value) && value >= 0;
+    const hex = (value) => typeof value === 'string' && /^[a-f0-9]{64}$/u.test(value);
+    const canonical = (value) => typeof value === 'string' && isAbsolute(value)
+        && resolve(value) === value && value !== '/' && !/[\p{Cc}\\]/u.test(value);
+    if (!identityFields(mapping, 'candidateGid,candidateUid,helpers,hostNamespace,ownerGid,ownerUid,schemaVersion')
+        || mapping.schemaVersion !== 1 || !natural(mapping.ownerUid) || mapping.ownerUid === 0
+        || mapping.ownerUid !== process.getuid?.() || !natural(mapping.ownerGid) || mapping.ownerGid !== process.getgid?.()
+        || !natural(mapping.candidateUid) || mapping.candidateUid < 65_536 || mapping.candidateUid > 0xffff_fffe
+        || !natural(mapping.candidateGid) || mapping.candidateGid < 65_536 || mapping.candidateGid > 0xffff_fffe
+        || mapping.ownerUid === mapping.candidateUid || mapping.ownerGid === mapping.candidateGid
+        || !identityFields(mapping.hostNamespace, 'dev,ino') || !natural(mapping.hostNamespace.dev)
+        || !natural(mapping.hostNamespace.ino) || mapping.hostNamespace.ino === 0
+        || !identityFields(mapping.helpers, 'gid,uid'))
+        return false;
+    for (const kind of ['uid', 'gid']) {
+        const helper = mapping.helpers[kind];
+        if (!identityFields(helper, 'path,sha256') || helper.path !== `/usr/bin/new${kind}map` || !hex(helper.sha256))
+            return false;
+    }
+    if (!identityFields(snapshot, 'bytes,entries,manifestSha256,root,schemaVersion') || snapshot.schemaVersion !== 1
+        || !identityFields(snapshot.root, 'dev,ino,path,sha256') || !canonical(snapshot.root.path)
+        || !natural(snapshot.root.dev) || !natural(snapshot.root.ino) || !hex(snapshot.root.sha256) || !hex(snapshot.manifestSha256)
+        || !natural(snapshot.bytes) || snapshot.bytes < 1 || snapshot.bytes > 640 * 1024 ** 2
+        || !natural(snapshot.entries) || snapshot.entries < 2 || snapshot.entries > 32768)
+        return false;
+    const overlaps = (left, right) => left === right || left.startsWith(right + sep) || right.startsWith(left + sep);
+    return !overlaps(snapshot.root.path, config.stateRoot) && !overlaps(snapshot.root.path, config.runtime.root.path)
+        && !(snapshot.root.dev === config.runtime.root.dev && snapshot.root.ino === config.runtime.root.ino);
+}
 const imageDigest = /^(?:[a-z0-9][a-z0-9._:/-]*@)?sha256:[a-f0-9]{64}$/u;
 const marker = /^DSH_PREPARED_PACK\t([^\t\n]+)\t([0-9]+)\t([a-f0-9]{64})\t([^\t\n]+)\t([^\t\n]+)$/mu;
 const packFrame = 'DSH_PREPARED_PACK_BYTES_V1\t';
@@ -469,7 +550,42 @@ export function validateSourceBuildConfig(config) {
     if (config === null || typeof config !== 'object' || Array.isArray(config)) {
         throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source build configuration is invalid');
     }
+    const sealField = Object.getOwnPropertyDescriptor(config, 'stateSeal');
+    if ('stateSeal' in config && !sealField || sealField && (!sealField.enumerable || !('value' in sealField)
+        || Object.getOwnPropertyDescriptor(config, 'backend')?.value !== 'linux-native')) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source build state seal is invalid');
+    }
     if ('backend' in config) {
+        if (config.backend === 'linux-native') {
+            const allowed = new Set(['backend', 'runtime', 'cgroupRoots', 'stateRoot', 'authorityDigest', 'expiresAt', 'maxRuns',
+                'maxTotalDurationMs', 'timeoutMs', 'outputBytes', 'versioning', 'memoryMiB', 'cpus', 'pidsLimit', 'workspaceMiB',
+                'temporaryMiB', 'workspaceInodes', 'temporaryInodes', 'userNamespace', 'systemSnapshot', 'stateSeal']);
+            const integer = (value, min, max) => Number.isSafeInteger(value) && value >= min && value <= max;
+            const roots = config.cgroupRoots;
+            if (Object.keys(config).some(key => !allowed.has(key)) || !validLinuxRuntimeShape(config.runtime)
+                || typeof config.stateRoot !== 'string' || !isAbsolute(config.stateRoot) || resolve(config.stateRoot) !== config.stateRoot
+                || config.stateRoot === '/' || /[\p{Cc}\\]/u.test(config.stateRoot)
+                || config.stateRoot === config.runtime.root.path || config.stateRoot.startsWith(config.runtime.root.path + sep)
+                || config.runtime.root.path.startsWith(config.stateRoot + sep)
+                || typeof config.authorityDigest !== 'string' || !/^[a-f0-9]{64}$/u.test(config.authorityDigest)
+                || !integer(config.expiresAt, 1, Number.MAX_SAFE_INTEGER) || !integer(config.maxRuns, 1, 1000)
+                || !integer(config.maxTotalDurationMs, 60_000, 86_400_000) || !integer(config.timeoutMs, 60_000, 1_800_000)
+                || config.timeoutMs > config.maxTotalDurationMs
+                || !integer(config.outputBytes, 4096, 1_048_576) || config.versioning !== undefined && config.versioning !== 'patch'
+                || !integer(config.memoryMiB, 128, 16384) || !Number.isFinite(config.cpus) || config.cpus < 0.25 || config.cpus > 16
+                || !integer(config.pidsLimit, 16, 1024) || !integer(config.workspaceMiB, 64, 8192)
+                || !integer(config.temporaryMiB, 32, 4096) || !integer(config.workspaceInodes, 16, 1_000_000)
+                || !integer(config.temporaryInodes, 16, 1_000_000) || !roots || roots.mode !== 'v1'
+                || Object.keys(roots).sort().join() !== 'cpu,freezer,memory,mode,pids'
+                || new Set([roots.cpu, roots.memory, roots.pids, roots.freezer]).size !== 4
+                || [roots.cpu, roots.memory, roots.pids, roots.freezer].some(root => typeof root !== 'string'
+                    || !new RegExp(`^/sys/fs/cgroup/[A-Za-z0-9_,]+/dsh-native/uid-${process.getuid?.()}$`, 'u').test(root))
+                || !validLinuxRepositoryIdentity(config)
+                || Object.hasOwn(config, 'stateSeal') && !validLinuxStateSeal(config.stateSeal, config.stateRoot)) {
+                throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'Linux source build configuration is invalid');
+            }
+            return;
+        }
         const allowed = new Set(['backend', 'runtime', 'stateRoot', 'authorityDigest', 'expiresAt', 'maxRuns',
             'maxTotalDurationMs', 'timeoutMs', 'outputBytes', 'versioning']);
         if (config.backend !== 'macos-seatbelt' || Object.keys(config).some(key => !allowed.has(key))
@@ -492,7 +608,9 @@ export function validateSourceBuildConfig(config) {
         }
         return;
     }
-    if (config === null || typeof config !== 'object' || Array.isArray(config) || (config.profile !== undefined && config.profile !== 'standard' && config.profile !== 'repository' && config.profile !== 'portable-repository')
+    const allowedDockerKeys = new Set(['dockerPath', 'socketPath', 'daemonId', 'image', 'timeoutMs', 'memoryMiB', 'cpus',
+        'pidsLimit', 'workspaceMiB', 'outputBytes', 'versioning', 'profile', 'temporaryMiB', 'repositorySandbox']);
+    if (config === null || typeof config !== 'object' || Array.isArray(config) || Object.keys(config).some(key => !allowedDockerKeys.has(key)) || (config.profile !== undefined && config.profile !== 'standard' && config.profile !== 'repository' && config.profile !== 'portable-repository')
         || (config.versioning !== undefined && config.versioning !== 'patch')
         || (config.temporaryMiB !== undefined && !Number.isSafeInteger(config.temporaryMiB))
         || (config.profile === 'portable-repository' && config.repositorySandbox === undefined)
@@ -588,13 +706,13 @@ async function verifiedPortableSocket(config) {
 function portableArgs(socket, configDirectory, args) {
     return socket === undefined ? args : ['--config', configDirectory, '-H', `unix://${socket}`, ...args];
 }
-async function sourceTree(worktree, baseCommit, scope, environment) {
+export async function sourceTree(worktree, baseCommit, scope, environment, signal) {
     const temporary = await mkdtemp(join(tmpdir(), 'dsh-source-build-index-'));
     try {
         const env = { ...environment, GIT_INDEX_FILE: join(temporary, 'index') };
-        await runLocalCommand('git', ['read-tree', baseCommit], worktree, env);
-        await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], worktree, env);
-        const tree = (await runLocalCommand('git', ['write-tree'], worktree, env, { capture: true })).trim();
+        await runLocalCommand('git', ['read-tree', baseCommit], worktree, env, signal ? { signal } : {});
+        await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], worktree, env, signal ? { signal } : {});
+        const tree = (await runLocalCommand('git', ['write-tree'], worktree, env, { capture: true, ...(signal ? { signal } : {}) })).trim();
         if (!/^[a-f0-9]{40}$/u.test(tree))
             throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'temporary source tree is invalid');
         return { tree, temporary, cleanup: async () => { await rm(temporary, { recursive: true, force: true }); } };
@@ -604,6 +722,27 @@ async function sourceTree(worktree, baseCommit, scope, environment) {
         throw error;
     }
 }
+export async function verifySourcePreparation(input) {
+    if (input.creation === undefined && input.revision === undefined)
+        return;
+    if (input.creation !== undefined && input.revision !== undefined)
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source build has conflicting preparation authorities');
+    if ((input.creation?.grant ?? input.revision.binding.grant).expiresAt <= Date.now())
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source creation grant expired before build');
+    const verified = input.revision === undefined ? await verifyCreatedPluginWorkspace({ worktree: input.worktree, baseCommit: input.baseCommit,
+        name: input.name, environment: input.environment, signal: input.signal, assertCurrent: input.assertCurrent,
+        creation: input.creation }) : await verifyRevisedPluginWorkspace({ worktree: input.worktree, baseCommit: input.baseCommit,
+        name: input.name, environment: input.environment, signal: input.signal, assertCurrent: input.assertCurrent,
+        revision: input.revision.binding, parentSource: input.revision.parentSource, parentCertificate: input.revision.parentCertificate, files: input.revision.files });
+    const expected = [...input.scope].sort();
+    const actual = [...verified.scope].sort();
+    if (expected.length !== actual.length || expected.some((path, index) => path !== actual[index])) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source creation build scope differs from verified scope');
+    }
+    await input.assertCurrent();
+    if ((input.creation?.grant ?? input.revision.binding.grant).expiresAt <= Date.now())
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source creation grant expired before build');
+}
 /**
  * Archive an exact temporary-index tree into a disposable, mount-free Docker
  * container. No repository, state directory, socket, credential, environment
@@ -644,27 +783,7 @@ export async function runDockerPreparedChecks(input) {
     }
     let creationSnapshot;
     let baseLockDigest;
-    const verifyCreation = async () => {
-        if (input.creation === undefined && input.revision === undefined)
-            return;
-        if (input.creation !== undefined && input.revision !== undefined)
-            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source build has conflicting preparation authorities');
-        if ((input.creation?.grant ?? input.revision.binding.grant).expiresAt <= Date.now())
-            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source creation grant expired before build');
-        const verified = input.revision === undefined ? await verifyCreatedPluginWorkspace({ worktree: input.worktree, baseCommit: input.baseCommit,
-            name: input.name, environment: input.environment, signal: input.signal, assertCurrent: input.assertCurrent,
-            creation: input.creation }) : await verifyRevisedPluginWorkspace({ worktree: input.worktree, baseCommit: input.baseCommit,
-            name: input.name, environment: input.environment, signal: input.signal, assertCurrent: input.assertCurrent,
-            revision: input.revision.binding, parentSource: input.revision.parentSource, parentCertificate: input.revision.parentCertificate, files: input.revision.files });
-        const expected = [...input.scope].sort();
-        const actual = [...verified.scope].sort();
-        if (expected.length !== actual.length || expected.some((path, index) => path !== actual[index])) {
-            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source creation build scope differs from verified scope');
-        }
-        await input.assertCurrent();
-        if ((input.creation?.grant ?? input.revision.binding.grant).expiresAt <= Date.now())
-            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source creation grant expired before build');
-    };
+    const verifyCreation = () => verifySourcePreparation(input);
     if (input.creation !== undefined || input.revision !== undefined) {
         await verifyCreation();
         creationSnapshot = await checkedSourceSnapshot(input.worktree, input.baseCommit, input.scope, input.environment, undefined, input.signal);