@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/src/services/code-authoring-local.js

@@ -0,0 +1,403 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOCAL_RUNNER_FIXED_DOCKER_ARGS = exports.CODE_IMPLEMENTATION_IDS = void 0;
+exports.describeCodeActionContract = describeCodeActionContract;
+exports.scaffoldCodeAction = scaffoldCodeAction;
+exports.validateCodeActionSource = validateCodeActionSource;
+exports.buildCodeActionSource = buildCodeActionSource;
+exports.runLocalCodeTests = runLocalCodeTests;
+exports.assertLocalRunnerAvailable = assertLocalRunnerAvailable;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const shared_1 = require("@nexusclaw/shared");
+const code_authoring_1 = require("@nexusclaw/code-authoring");
+const ai_authoring_context_v2_1 = require("./ai-authoring-context-v2");
+function dockerClientEnv() {
+    return {
+        PATH: process.env.PATH ?? '',
+        ...(process.env.HOME ? { HOME: process.env.HOME } : {}),
+        ...(process.env.DOCKER_CONFIG
+            ? { DOCKER_CONFIG: process.env.DOCKER_CONFIG }
+            : {}),
+        ...(process.env.DOCKER_CONTEXT
+            ? { DOCKER_CONTEXT: process.env.DOCKER_CONTEXT }
+            : {}),
+        ...(process.env.DOCKER_HOST ? { DOCKER_HOST: process.env.DOCKER_HOST } : {}),
+    };
+}
+exports.CODE_IMPLEMENTATION_IDS = Object.freeze({
+    describe: 'nexus-cli/employee.code.describe#describe@v1',
+    scaffold: 'nexus-cli/employee.code.scaffold#scaffold@v1',
+    validate: 'nexus-cli/employee.code.validate#local@v1',
+    build: 'nexus-cli/employee.code.build#local@v1',
+    test: 'nexus-cli/employee.code.test#local@v1',
+});
+exports.LOCAL_RUNNER_FIXED_DOCKER_ARGS = Object.freeze([
+    'run', '--rm', '-i', '--network=none', '--read-only',
+    '--user=65532:65532', '--cap-drop=ALL',
+    '--security-opt=no-new-privileges', '--pids-limit=32',
+    '--memory=128m', '--cpus=0.5',
+    '--tmpfs=/tmp:rw,noexec,nosuid,nodev,size=16m',
+    '--env=NEXUS_LOCAL_RUNNER_CONTRACT=nexusclaw.local-sandbox-result/v1',
+]);
+function describeCodeActionContract() {
+    return {
+        contract: 'nexus-code-action/v1',
+        runtimeApiVersion: 'runtime/v2',
+        module: '@nexusclaw/code-sdk/agent-action-v1',
+        export: 'default',
+        signature: '(ctx: CodeActionContextV1, input: ActionInput) => Promise<ActionOutput>',
+        namespaces: ['records', 'connectors', 'ai', 'clock', 'limits', 'logger', 'principal'],
+    };
+}
+function scaffoldCodeAction(input) {
+    assertIdentifier(input.apiName);
+    if (!/^[a-z0-9][a-z0-9._-]{0,159}$/.test(input.packageName)) {
+        throw new Error('CODE_PACKAGE_NAME_INVALID');
+    }
+    if (!/^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9_-]*){2,}$/.test(input.toolName)) {
+        throw new Error('CODE_TOOL_NAME_INVALID');
+    }
+    if (!['pure', 'read_only', 'idempotent_write', 'side_effecting'].includes(input.sideEffectMode)) {
+        throw new Error('CODE_SIDE_EFFECT_MODE_INVALID');
+    }
+    const root = node_path_1.default.resolve(input.outDir);
+    const sourcePath = `code/${input.apiName}.ts`;
+    const inputSchemaRef = `schemas/${input.apiName}.input.schema.json`;
+    const outputSchemaRef = `schemas/${input.apiName}.output.schema.json`;
+    const casesPath = `tests/${input.apiName}.cases.json`;
+    const files = new Map([
+        ['package.yaml', js_yaml_1.default.dump({
+                schemaVersion: 'v1',
+                name: input.packageName,
+                version: '0.1.0',
+                packageType: 'code-extension',
+                packageClass: 'code-extension',
+                description: `Governed code action package for ${input.apiName}.`,
+                codeExtensionGovernance: {
+                    contractVersion: 'code-extension-governance/v2',
+                    runtimeApiVersion: 'runtime/v2',
+                },
+                executableArtifacts: [{
+                        extensionId: input.apiName,
+                        apiName: input.apiName,
+                        kind: 'function',
+                        functionType: 'ACTION',
+                        sourcePath,
+                        entrypoint: 'default',
+                        actionContractVersion: 'nexus-code-action/v1',
+                        runtimeApiVersion: 'runtime/v2',
+                    }],
+                dependencies: [],
+                compatibleCoreVersion: '>=0.1.0',
+                installOrder: 100,
+                includedMetadataKinds: [],
+                includedSeedKinds: [],
+                includedCodeKinds: ['function'],
+                visibility: 'internal',
+                releaseChannel: 'preview',
+                agentToolCatalogPath: 'agent-tools.json',
+            }, { noRefs: true, sortKeys: true })],
+        ['agent-tools.json', json({
+                schemaVersion: 'agent-code-tool-catalog/v1',
+                packageName: input.packageName,
+                packageVersion: '0.1.0',
+                exports: [{
+                        contractVersion: 'agent-code-tool/v1',
+                        actionContractVersion: 'nexus-code-action/v1',
+                        exportId: input.apiName,
+                        artifactRef: input.apiName,
+                        toolName: input.toolName,
+                        description: `Governed code action ${input.apiName}.`,
+                        inputSchemaRef,
+                        outputSchemaRef,
+                        sideEffectMode: input.sideEffectMode,
+                        declaredRiskLevel: 'L0',
+                        capabilities: { records: [], connectors: [], ai: [] },
+                        limits: {
+                            timeoutMs: 60_000,
+                            memoryMb: 128,
+                            maxQueries: 10,
+                            maxDmlStatements: 10,
+                            maxDmlRows: 50,
+                            maxCallouts: 2,
+                            maxAiCalls: 1,
+                            maxAiInputTokens: 8000,
+                            maxAiOutputTokens: 2000,
+                            maxAiCost: { amount: '0', currency: 'USD' },
+                            maxLogEntries: 50,
+                            maxLogBytes: 32768,
+                            maxAttempts: 1,
+                        },
+                        redaction: {
+                            inputJsonPointers: [],
+                            outputJsonPointers: [],
+                            logPolicy: 'metadata_only',
+                        },
+                        tests: [{ path: casesPath, required: true }],
+                    }],
+            })],
+        [`code/${input.apiName}.ts`, `import type { CodeAction, ActionInput, ActionOutput } from '@nexusclaw/code-sdk/agent-action-v1';\n\nconst action: CodeAction<ActionInput, ActionOutput> = async (_ctx, input) => ({ ...input });\n\nexport default action;\n`],
+        [`schemas/${input.apiName}.input.schema.json`, json(emptySchema())],
+        [`schemas/${input.apiName}.output.schema.json`, json(emptySchema())],
+        [`tests/${input.apiName}.cases.json`, json({
+                schemaVersion: 'code-action-cases/v1',
+                actionExportId: input.apiName,
+                principalFixtures: [
+                    { fixtureId: 'bound', base: 'bound_candidate_agent' },
+                ],
+                cases: [{
+                        caseId: 'minimal',
+                        input: {},
+                        principalFixtureId: 'bound',
+                        clock: '2026-01-01T00:00:00.000Z',
+                        hostFixtures: { calls: [] },
+                        expect: {
+                            outcome: 'success',
+                            output: {},
+                            mutations: [],
+                        },
+                    }],
+            })],
+    ]);
+    const markerRelativePath = '.nexusclaw/scaffold.json';
+    const markerPath = node_path_1.default.join(root, markerRelativePath);
+    let priorMarker = null;
+    if (node_fs_1.default.existsSync(markerPath)) {
+        try {
+            priorMarker = JSON.parse(node_fs_1.default.readFileSync(markerPath, 'utf8'));
+        }
+        catch {
+            throw new Error(`CODE_SCAFFOLD_WOULD_OVERWRITE:${markerRelativePath}`);
+        }
+    }
+    for (const [relative] of files) {
+        const target = node_path_1.default.join(root, relative);
+        if (!node_fs_1.default.existsSync(target))
+            continue;
+        const expectedDigest = priorMarker?.schemaVersion === 'nexusclaw.code-scaffold-marker/v1'
+            ? priorMarker.files?.[relative]
+            : undefined;
+        if (!expectedDigest
+            || (0, shared_1.rawByteDigest)(node_fs_1.default.readFileSync(target)) !== expectedDigest) {
+            throw new Error(`CODE_SCAFFOLD_WOULD_OVERWRITE:${relative}`);
+        }
+    }
+    const created = [];
+    for (const [relative, content] of files) {
+        const target = node_path_1.default.join(root, relative);
+        node_fs_1.default.mkdirSync(node_path_1.default.dirname(target), { recursive: true });
+        node_fs_1.default.writeFileSync(target, content, 'utf8');
+        created.push(target);
+    }
+    node_fs_1.default.mkdirSync(node_path_1.default.dirname(markerPath), { recursive: true });
+    node_fs_1.default.writeFileSync(markerPath, json({
+        schemaVersion: 'nexusclaw.code-scaffold-marker/v1',
+        generator: exports.CODE_IMPLEMENTATION_IDS.scaffold,
+        files: Object.fromEntries([...files.entries()].map(([relative, content]) => [
+            relative,
+            (0, shared_1.rawByteDigest)(Buffer.from(content, 'utf8')),
+        ])),
+    }));
+    created.push(markerPath);
+    return { root, createdFiles: created.sort() };
+}
+function validateCodeActionSource(sourcePath) {
+    const loaded = loadAction(sourcePath);
+    const compiled = (0, code_authoring_1.compileAction)(loaded);
+    return {
+        success: compiled.success,
+        exportId: loaded.exportId,
+        diagnostics: compiled.diagnostics,
+        sourceHash: compiled.sourceHash,
+        compiledHash: compiled.compiledHash,
+        compilerOptionsHash: compiled.compilerOptionsHash,
+        sdkDeclarationHash: compiled.sdkDeclarationHash,
+    };
+}
+function buildCodeActionSource(sourcePath) {
+    const result = validateCodeActionSource(sourcePath);
+    if (!result.success)
+        return result;
+    const root = resolveRoot(sourcePath);
+    const evidenceDir = node_path_1.default.join(root, '.nexusclaw', 'evidence');
+    node_fs_1.default.mkdirSync(evidenceDir, { recursive: true });
+    const evidencePath = node_path_1.default.join(evidenceDir, 'code-build.json');
+    node_fs_1.default.writeFileSync(evidencePath, json({
+        schemaVersion: 'nexusclaw.code-local-build-evidence/v1',
+        ...result,
+    }));
+    return { ...result, evidencePath };
+}
+async function runLocalCodeTests(input, preflight = preflightRootlessDocker) {
+    const runner = preflight();
+    await (0, ai_authoring_context_v2_1.verifyAuthoringContextV2)({
+        manifestPath: input.contextManifestPath,
+    });
+    const loaded = loadAction(input.sourcePath, input.exportId);
+    const compiled = (0, code_authoring_1.compileAction)(loaded);
+    if (!compiled.success)
+        return { success: false, diagnostics: compiled.diagnostics };
+    const frame = Buffer.from((0, shared_1.canonicalJsonString)({
+        schemaVersion: 'nexusclaw.local-sandbox-request/v1',
+        exportId: loaded.exportId,
+        suite: input.suite,
+        compiledCode: compiled.compiledCode,
+        cases: loaded.cases,
+        contextManifestDigest: (0, shared_1.rawByteDigest)(node_fs_1.default.readFileSync(input.contextManifestPath)),
+    }));
+    if (Buffer.byteLength(compiled.compiledCode) > 1024 * 1024 || frame.length > 2 * 1024 * 1024) {
+        throw new Error('CODE_LOCAL_RUNNER_FRAME_TOO_LARGE');
+    }
+    const args = [
+        ...exports.LOCAL_RUNNER_FIXED_DOCKER_ARGS,
+        `${runner.imageRef}@${runner.manifestDigest}`,
+    ];
+    const executed = (0, node_child_process_1.spawnSync)('docker', args, {
+        input: frame,
+        encoding: 'utf8',
+        timeout: 32_000,
+        maxBuffer: 1024 * 1024,
+        env: dockerClientEnv(),
+    });
+    if (executed.status !== 0 || executed.stderr.length > 64 * 1024) {
+        throw new Error('CODE_LOCAL_TEST_FAILED');
+    }
+    const parsed = JSON.parse(executed.stdout);
+    if (!parsed
+        || typeof parsed !== 'object'
+        || Array.isArray(parsed)
+        || Object.keys(parsed).sort().join(',') !==
+            'calls,cases,diagnostics,governor,mutations,ok,schemaVersion'
+        || parsed.schemaVersion !== 'nexusclaw.local-sandbox-result/v1'
+        || typeof parsed.ok !== 'boolean'
+        || !Array.isArray(parsed.cases)
+        || !Array.isArray(parsed.calls)
+        || !Array.isArray(parsed.mutations)
+        || !Array.isArray(parsed.diagnostics)) {
+        throw new Error('CODE_LOCAL_TEST_RESULT_INVALID');
+    }
+    return parsed;
+}
+function preflightRootlessDocker() {
+    const version = (0, node_child_process_1.spawnSync)('docker', ['version', '--format', 'json'], {
+        encoding: 'utf8',
+        env: dockerClientEnv(),
+    });
+    const info = (0, node_child_process_1.spawnSync)('docker', ['info', '--format', 'json'], {
+        encoding: 'utf8',
+        env: dockerClientEnv(),
+    });
+    if (version.status !== 0 || info.status !== 0) {
+        throw new Error('CODE_RUNTIME_PROVIDER_UNAVAILABLE');
+    }
+    const versionJson = JSON.parse(version.stdout);
+    const infoJson = JSON.parse(info.stdout);
+    const apiVersion = String(versionJson.Server?.ApiVersion ?? versionJson.Server?.APIVersion ?? '');
+    const security = infoJson.SecurityOptions;
+    if (Number.parseFloat(apiVersion) < 1.43 ||
+        !Array.isArray(security) ||
+        !security.some((item) => String(item).includes('name=rootless'))) {
+        throw new Error('CODE_RUNTIME_PROVIDER_UNAVAILABLE');
+    }
+    let lockPath;
+    try {
+        lockPath = require.resolve('@nexusclaw/code-authoring/local-runner-lock.json');
+    }
+    catch {
+        throw new Error('CODE_RUNTIME_PROVIDER_UNAVAILABLE');
+    }
+    const lock = (0, code_authoring_1.parseLocalRunnerLockV1)(JSON.parse(node_fs_1.default.readFileSync(lockPath, 'utf8')));
+    const immutableRef = `${lock.imageRef}@${lock.manifestDigest}`;
+    const inspected = (0, node_child_process_1.spawnSync)('docker', ['image', 'inspect', immutableRef], {
+        encoding: 'utf8',
+        env: dockerClientEnv(),
+    });
+    if (inspected.status !== 0) {
+        throw new Error('CODE_RUNTIME_PROVIDER_UNAVAILABLE');
+    }
+    const inspectedRows = JSON.parse(inspected.stdout);
+    const inspectedRow = Array.isArray(inspectedRows) ? inspectedRows[0] : inspectedRows;
+    const repoDigests = inspectedRow?.RepoDigests;
+    if (!Array.isArray(repoDigests)
+        || !repoDigests.includes(immutableRef)) {
+        throw new Error('CODE_RUNTIME_PROVIDER_UNAVAILABLE');
+    }
+    return lock;
+}
+function assertLocalRunnerAvailable() {
+    void preflightRootlessDocker();
+}
+function loadAction(sourcePath, requestedExportId) {
+    const root = resolveRoot(sourcePath);
+    const catalog = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'agent-tools.json'), 'utf8'));
+    const manifest = js_yaml_1.default.load(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'package.yaml'), 'utf8'));
+    const exports = catalog.exports;
+    if (!Array.isArray(exports))
+        throw new Error('CODE_TOOL_CATALOG_INVALID');
+    const selected = requestedExportId
+        ? exports.filter((item) => item.exportId === requestedExportId)
+        : exports;
+    if (selected.length !== 1)
+        throw new Error('CODE_EXPORT_SELECTOR_INVALID');
+    const item = selected[0];
+    const artifacts = (manifest.executableArtifacts ?? []).filter((artifact) => artifact.extensionId === item.artifactRef);
+    if (artifacts.length !== 1 ||
+        typeof artifacts[0]?.sourcePath !== 'string' ||
+        typeof item.inputSchemaRef !== 'string' ||
+        typeof item.outputSchemaRef !== 'string' ||
+        !Array.isArray(item.tests) ||
+        item.tests.length === 0 ||
+        item.tests.some((test) => !test ||
+            typeof test !== 'object' ||
+            typeof test.path !== 'string' ||
+            test.required !== true)) {
+        throw new Error('CODE_TOOL_CATALOG_INVALID');
+    }
+    const caseDocuments = item.tests.map((test) => JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, test.path), 'utf8')));
+    if (caseDocuments.some((document) => document.schemaVersion !== 'code-action-cases/v1'
+        || document.actionExportId !== item.exportId
+        || !Array.isArray(document.principalFixtures)
+        || document.principalFixtures.length === 0
+        || !Array.isArray(document.cases)
+        || document.cases.length !== 1)) {
+        throw new Error('CODE_ACTION_CASES_INVALID');
+    }
+    return {
+        exportId: item.exportId,
+        source: node_fs_1.default.readFileSync(node_path_1.default.join(root, artifacts[0].sourcePath), 'utf8'),
+        inputSchema: JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, item.inputSchemaRef), 'utf8')),
+        outputSchema: JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, item.outputSchemaRef), 'utf8')),
+        cases: {
+            schemaVersion: 'code-action-cases/v1',
+            actionExportId: item.exportId,
+            principalFixtures: caseDocuments.flatMap((document) => document.principalFixtures),
+            cases: caseDocuments.flatMap((document) => Array.isArray(document.cases) ? document.cases : []),
+        },
+    };
+}
+function resolveRoot(sourcePath) {
+    const resolved = node_path_1.default.resolve(sourcePath);
+    return node_fs_1.default.statSync(resolved).isDirectory() ? resolved : node_path_1.default.dirname(resolved);
+}
+function emptySchema() {
+    return {
+        $schema: 'https://json-schema.org/draft/2020-12/schema',
+        type: 'object',
+        additionalProperties: false,
+        properties: {},
+    };
+}
+function assertIdentifier(value) {
+    if (!/^[A-Za-z][A-Za-z0-9_]{0,159}$/.test(value))
+        throw new Error('CODE_API_NAME_INVALID');
+}
+function json(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+//# sourceMappingURL=code-authoring-local.js.map

package/dist/nexus-cli/src/services/code-authoring-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-authoring-local.js","sourceRoot":"","sources":["../../../../src/services/code-authoring-local.ts"],"names":[],"mappings":";;;;;;AA4CA,gEASC;AAED,gDAkKC;AAED,4DAYC;AAED,sDAYC;AAED,8CAuDC;AAgED,gEAEC;AAhXD,2DAA+C;AAC/C,sDAAyB;AACzB,0DAA6B;AAC7B,sDAA2B;AAC3B,8CAG2B;AAC3B,8DAGmC;AACnC,uEAAqE;AAErE,SAAS,eAAe;IACtB,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QAC5B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa;YAC3B,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc;YAC5B,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAEY,QAAA,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,8CAA8C;IACxD,QAAQ,EAAE,8CAA8C;IACxD,QAAQ,EAAE,2CAA2C;IACrD,KAAK,EAAE,wCAAwC;IAC/C,IAAI,EAAE,uCAAuC;CAC9C,CAAC,CAAC;AACU,QAAA,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,aAAa;IACpD,oBAAoB,EAAE,gBAAgB;IACtC,kCAAkC,EAAE,iBAAiB;IACrD,eAAe,EAAE,YAAY;IAC7B,8CAA8C;IAC9C,qEAAqE;CAC7D,CAAC,CAAC;AAEZ,SAAgB,0BAA0B;IACxC,OAAO;QACL,QAAQ,EAAE,sBAAsB;QAChC,iBAAiB,EAAE,YAAY;QAC/B,MAAM,EAAE,qCAAqC;QAC7C,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,yEAAyE;QACpF,UAAU,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAMlC;IACC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,KAAK,CAAC,OAAO,KAAK,CAAC;IAC9C,MAAM,cAAc,GAAG,WAAW,KAAK,CAAC,OAAO,oBAAoB,CAAC;IACpE,MAAM,eAAe,GAAG,WAAW,KAAK,CAAC,OAAO,qBAAqB,CAAC;IACtE,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC,OAAO,aAAa,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB;QACpC,CAAC,cAAc,EAAE,iBAAI,CAAC,IAAI,CAAC;gBACzB,aAAa,EAAE,IAAI;gBACnB,IAAI,EAAE,KAAK,CAAC,WAAW;gBACvB,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,gBAAgB;gBAC7B,YAAY,EAAE,gBAAgB;gBAC9B,WAAW,EAAE,oCAAoC,KAAK,CAAC,OAAO,GAAG;gBACjE,uBAAuB,EAAE;oBACvB,eAAe,EAAE,8BAA8B;oBAC/C,iBAAiB,EAAE,YAAY;iBAChC;gBACD,mBAAmB,EAAE,CAAC;wBACpB,WAAW,EAAE,KAAK,CAAC,OAAO;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,IAAI,EAAE,UAAU;wBAChB,YAAY,EAAE,QAAQ;wBACtB,UAAU;wBACV,UAAU,EAAE,SAAS;wBACrB,qBAAqB,EAAE,sBAAsB;wBAC7C,iBAAiB,EAAE,YAAY;qBAChC,CAAC;gBACF,YAAY,EAAE,EAAE;gBAChB,qBAAqB,EAAE,SAAS;gBAChC,YAAY,EAAE,GAAG;gBACjB,qBAAqB,EAAE,EAAE;gBACzB,iBAAiB,EAAE,EAAE;gBACrB,iBAAiB,EAAE,CAAC,UAAU,CAAC;gBAC/B,UAAU,EAAE,UAAU;gBACtB,cAAc,EAAE,SAAS;gBACzB,oBAAoB,EAAE,kBAAkB;aACzC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC,kBAAkB,EAAE,IAAI,CAAC;gBACxB,aAAa,EAAE,4BAA4B;gBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,OAAO;gBACvB,OAAO,EAAE,CAAC;wBACR,eAAe,EAAE,oBAAoB;wBACrC,qBAAqB,EAAE,sBAAsB;wBAC7C,QAAQ,EAAE,KAAK,CAAC,OAAO;wBACvB,WAAW,EAAE,KAAK,CAAC,OAAO;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,WAAW,EAAE,wBAAwB,KAAK,CAAC,OAAO,GAAG;wBACrD,cAAc;wBACd,eAAe;wBACf,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,iBAAiB,EAAE,IAAI;wBACvB,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;wBACrD,MAAM,EAAE;4BACN,SAAS,EAAE,MAAM;4BACjB,QAAQ,EAAE,GAAG;4BACb,UAAU,EAAE,EAAE;4BACd,gBAAgB,EAAE,EAAE;4BACpB,UAAU,EAAE,EAAE;4BACd,WAAW,EAAE,CAAC;4BACd,UAAU,EAAE,CAAC;4BACb,gBAAgB,EAAE,IAAI;4BACtB,iBAAiB,EAAE,IAAI;4BACvB,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;4BAC3C,aAAa,EAAE,EAAE;4BACjB,WAAW,EAAE,KAAK;4BAClB,WAAW,EAAE,CAAC;yBACf;wBACD,SAAS,EAAE;4BACT,iBAAiB,EAAE,EAAE;4BACrB,kBAAkB,EAAE,EAAE;4BACtB,SAAS,EAAE,eAAe;yBAC3B;wBACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;qBAC7C,CAAC;aACH,CAAC,CAAC;QACH,CAAC,QAAQ,KAAK,CAAC,OAAO,KAAK,EAAE,+NAA+N,CAAC;QAC7P,CAAC,WAAW,KAAK,CAAC,OAAO,oBAAoB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnE,CAAC,WAAW,KAAK,CAAC,OAAO,qBAAqB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,CAAC,SAAS,KAAK,CAAC,OAAO,aAAa,EAAE,IAAI,CAAC;gBACzC,aAAa,EAAE,sBAAsB;gBACrC,cAAc,EAAE,KAAK,CAAC,OAAO;gBAC7B,iBAAiB,EAAE;oBACjB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE;iBACtD;gBACD,KAAK,EAAE,CAAC;wBACN,MAAM,EAAE,SAAS;wBACjB,KAAK,EAAE,EAAE;wBACT,kBAAkB,EAAE,OAAO;wBAC3B,KAAK,EAAE,0BAA0B;wBACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;wBAC3B,MAAM,EAAE;4BACN,OAAO,EAAE,SAAS;4BAClB,MAAM,EAAE,EAAE;4BACV,SAAS,EAAE,EAAE;yBACd;qBACF,CAAC;aACH,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;IACtD,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACvD,IAAI,WAAW,GAGJ,IAAI,CAAC;IAChB,IAAI,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,kBAAkB,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QACrC,MAAM,cAAc,GAAG,WAAW,EAAE,aAAa,KAAK,mCAAmC;YACvF,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC;YAC/B,CAAC,CAAC,SAAS,CAAC;QACd,IACE,CAAC,cAAc;eACZ,IAAA,sBAAa,EAAC,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,cAAc,EAC5D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,iBAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,iBAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;QAChC,aAAa,EAAE,mCAAmC;QAClD,SAAS,EAAE,+BAAuB,CAAC,QAAQ;QAC3C,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YAChD,QAAQ;YACR,IAAA,sBAAa,EAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;SAC5C,CAAC,CACH;KACF,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,SAAgB,wBAAwB,CAAC,UAAkB;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAA,8BAAa,EAAC,MAAM,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAC9D,iBAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAC/D,iBAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC;QAClC,aAAa,EAAE,wCAAwC;QACvD,GAAG,MAAM;KACV,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,KAKvC,EAAE,SAAS,GAAG,uBAAuB;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,IAAA,kDAAwB,EAAC;QAC7B,YAAY,EAAE,KAAK,CAAC,mBAAmB;KACxC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAA,8BAAa,EAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,4BAAmB,EAAC;QAC5C,aAAa,EAAE,oCAAoC;QACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,qBAAqB,EAAE,IAAA,sBAAa,EAAC,iBAAE,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;KACxE,CAAC,CAAC,CAAC;IACb,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG;QACX,GAAG,sCAA8B;QACjC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,cAAc,EAAE;KAC9C,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,8BAAS,EAAC,QAAQ,EAAE,IAAI,EAAE;QACzC,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,GAAG,EAAE,eAAe,EAAE;KACvB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,IACE,CAAC,MAAM;WACJ,OAAO,MAAM,KAAK,QAAQ;WAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;WACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,6DAA6D;WAC5D,MAAM,CAAC,aAAa,KAAK,mCAAmC;WAC5D,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS;WAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;WAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;WAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;WAChC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB;IAI9B,MAAM,OAAO,GAAG,IAAA,8BAAS,EAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;QACnE,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,eAAe,EAAE;KACvB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAA,8BAAS,EAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;QAC7D,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,eAAe,EAAE;KACvB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC;IAC1C,IACE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI;QACpC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,OAAO,CACxB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,uCAAsB,EACjC,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC9C,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAA,8BAAS,EACzB,QAAQ,EACR,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,EAClC;QACE,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,eAAe,EAAE;KACvB,CACF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACrF,MAAM,WAAW,GAAG,YAAY,EAAE,WAAW,CAAC;IAC9C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;WACxB,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,SAAgB,0BAA0B;IACxC,KAAK,uBAAuB,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,iBAA0B;IAChE,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,iBAAI,CAAC,IAAI,CACxB,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAMzD,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,iBAAiB;QAChC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,iBAAiB,CAAC;QACpE,CAAC,CAAC,OAAO,CAAC;IACZ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3D,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CACxD,CAAC;IACF,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,KAAK,QAAQ;QAC5C,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACvC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CACb,CAAC,IAAa,EAAE,EAAE,CAChB,CAAC,IAAI;YACL,OAAO,IAAI,KAAK,QAAQ;YACxB,OAAQ,IAA2B,CAAC,IAAI,KAAK,QAAQ;YACpD,IAA+B,CAAC,QAAQ,KAAK,IAAI,CACrD,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAsB,EAAE,EAAE,CAC9D,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAChE,CAAC;IACF,IACE,aAAa,CAAC,IAAI,CAChB,CAAC,QAKA,EAAE,EAAE,CACH,QAAQ,CAAC,aAAa,KAAK,sBAAsB;WAC9C,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ;WACzC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;WAC1C,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;WACvC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC9B,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CACjC,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAkB;QACjC,MAAM,EAAE,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QACzE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QACtF,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QACxF,KAAK,EAAE;YACL,aAAa,EAAE,sBAAsB;YACrC,cAAc,EAAE,IAAI,CAAC,QAAkB;YACvC,iBAAiB,EAAE,aAAa,CAAC,OAAO,CACtC,CAAC,QAA0C,EAAE,EAAE,CAC7C,QAAQ,CAAC,iBAAiB,CAC7B;YACD,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,QAA+B,EAAE,EAAE,CAC/D,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACpD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB;IACrC,MAAM,QAAQ,GAAG,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,iBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,OAAO,EAAE,8CAA8C;QACvD,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC"}

package/dist/nexus-cli/src/services/code-authoring-local.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/nexus-cli/src/services/code-authoring-local.test.js

@@ -0,0 +1,129 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_test_1 = __importDefault(require("node:test"));
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const code_authoring_local_1 = require("./code-authoring-local");
+(0, node_test_1.default)('local runner uses the exact frozen Docker flags with no host mount or socket', () => {
+    strict_1.default.deepEqual(code_authoring_local_1.LOCAL_RUNNER_FIXED_DOCKER_ARGS, [
+        'run', '--rm', '-i', '--network=none', '--read-only',
+        '--user=65532:65532', '--cap-drop=ALL',
+        '--security-opt=no-new-privileges', '--pids-limit=32',
+        '--memory=128m', '--cpus=0.5',
+        '--tmpfs=/tmp:rw,noexec,nosuid,nodev,size=16m',
+        '--env=NEXUS_LOCAL_RUNNER_CONTRACT=nexusclaw.local-sandbox-result/v1',
+    ]);
+    strict_1.default.equal(code_authoring_local_1.LOCAL_RUNNER_FIXED_DOCKER_ARGS.some((arg) => arg.includes('/var/run/docker')), false);
+    strict_1.default.equal(code_authoring_local_1.LOCAL_RUNNER_FIXED_DOCKER_ARGS.includes('--volume'), false);
+});
+(0, node_test_1.default)('code scaffold emits default ABI/catalog/schemas/cases and compiles', () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-code-scaffold-'));
+    (0, code_authoring_local_1.scaffoldCodeAction)({
+        apiName: 'QualifyLead',
+        packageName: 'com.acme.qualify-lead',
+        toolName: 'custom.sales.qualify_lead',
+        sideEffectMode: 'read_only',
+        outDir: root,
+    });
+    strict_1.default.match(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'code/QualifyLead.ts'), 'utf8'), /export default action/);
+    strict_1.default.deepEqual(JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'agent-tools.json'), 'utf8')), {
+        schemaVersion: 'agent-code-tool-catalog/v1',
+        packageName: 'com.acme.qualify-lead',
+        packageVersion: '0.1.0',
+        exports: [{
+                contractVersion: 'agent-code-tool/v1',
+                actionContractVersion: 'nexus-code-action/v1',
+                exportId: 'QualifyLead',
+                artifactRef: 'QualifyLead',
+                toolName: 'custom.sales.qualify_lead',
+                description: 'Governed code action QualifyLead.',
+                inputSchemaRef: 'schemas/QualifyLead.input.schema.json',
+                outputSchemaRef: 'schemas/QualifyLead.output.schema.json',
+                sideEffectMode: 'read_only',
+                declaredRiskLevel: 'L0',
+                capabilities: { records: [], connectors: [], ai: [] },
+                limits: {
+                    timeoutMs: 60_000,
+                    memoryMb: 128,
+                    maxQueries: 10,
+                    maxDmlStatements: 10,
+                    maxDmlRows: 50,
+                    maxCallouts: 2,
+                    maxAiCalls: 1,
+                    maxAiInputTokens: 8000,
+                    maxAiOutputTokens: 2000,
+                    maxAiCost: { amount: '0', currency: 'USD' },
+                    maxLogEntries: 50,
+                    maxLogBytes: 32768,
+                    maxAttempts: 1,
+                },
+                redaction: {
+                    inputJsonPointers: [],
+                    outputJsonPointers: [],
+                    logPolicy: 'metadata_only',
+                },
+                tests: [{ path: 'tests/QualifyLead.cases.json', required: true }],
+            }],
+    });
+    const manifest = js_yaml_1.default.load(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'package.yaml'), 'utf8'));
+    strict_1.default.equal(manifest.codeExtensionGovernance.contractVersion, 'code-extension-governance/v2');
+    strict_1.default.equal(manifest.executableArtifacts[0].sourcePath, 'code/QualifyLead.ts');
+    strict_1.default.deepEqual(JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'tests/QualifyLead.cases.json'), 'utf8')), {
+        schemaVersion: 'code-action-cases/v1',
+        actionExportId: 'QualifyLead',
+        principalFixtures: [
+            { fixtureId: 'bound', base: 'bound_candidate_agent' },
+        ],
+        cases: [{
+                caseId: 'minimal',
+                input: {},
+                principalFixtureId: 'bound',
+                clock: '2026-01-01T00:00:00.000Z',
+                hostFixtures: { calls: [] },
+                expect: {
+                    outcome: 'success',
+                    output: {},
+                    mutations: [],
+                },
+            }],
+    });
+    strict_1.default.equal((0, code_authoring_local_1.validateCodeActionSource)(root).success, true);
+    const built = (0, code_authoring_local_1.buildCodeActionSource)(root);
+    strict_1.default.equal(built.success, true);
+    strict_1.default.equal(node_fs_1.default.existsSync(node_path_1.default.join(root, '.nexusclaw/evidence/code-build.json')), true);
+    (0, code_authoring_local_1.scaffoldCodeAction)({
+        apiName: 'QualifyLead',
+        packageName: 'com.acme.qualify-lead',
+        toolName: 'custom.sales.qualify_lead',
+        sideEffectMode: 'read_only',
+        outDir: root,
+    });
+    node_fs_1.default.appendFileSync(node_path_1.default.join(root, 'code/QualifyLead.ts'), '// user edit\n');
+    strict_1.default.throws(() => (0, code_authoring_local_1.scaffoldCodeAction)({
+        apiName: 'QualifyLead',
+        packageName: 'com.acme.qualify-lead',
+        toolName: 'custom.sales.qualify_lead',
+        sideEffectMode: 'read_only',
+        outDir: root,
+    }), /CODE_SCAFFOLD_WOULD_OVERWRITE/);
+});
+(0, node_test_1.default)('local test fails provider preflight before reading source', async () => {
+    let preflightCalled = false;
+    await strict_1.default.rejects(() => (0, code_authoring_local_1.runLocalCodeTests)({
+        sourcePath: '/definitely/missing/source',
+        exportId: 'missing',
+        contextManifestPath: '/definitely/missing/context',
+        suite: 'all',
+    }, () => {
+        preflightCalled = true;
+        throw new Error('CODE_RUNTIME_PROVIDER_UNAVAILABLE');
+    }), /CODE_RUNTIME_PROVIDER_UNAVAILABLE/);
+    strict_1.default.equal(preflightCalled, true);
+});
+//# sourceMappingURL=code-authoring-local.test.js.map

package/dist/nexus-cli/src/services/code-authoring-local.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-authoring-local.test.js","sourceRoot":"","sources":["../../../../src/services/code-authoring-local.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAC7B,0DAA6B;AAC7B,sDAA2B;AAC3B,iEAMgC;AAEhC,IAAA,mBAAI,EAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,gBAAM,CAAC,SAAS,CAAC,qDAA8B,EAAE;QAC/C,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,aAAa;QACpD,oBAAoB,EAAE,gBAAgB;QACtC,kCAAkC,EAAE,iBAAiB;QACrD,eAAe,EAAE,YAAY;QAC7B,8CAA8C;QAC9C,qEAAqE;KACtE,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,qDAA8B,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnG,gBAAM,CAAC,KAAK,CAAC,qDAA8B,CAAC,QAAQ,CAAC,UAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC5E,IAAA,yCAAkB,EAAC;QACjB,OAAO,EAAE,aAAa;QACtB,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,2BAA2B;QACrC,cAAc,EAAE,WAAW;QAC3B,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CACV,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,EAC/D,uBAAuB,CACxB,CAAC;IACF,gBAAM,CAAC,SAAS,CACd,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC,EACxE;QACE,aAAa,EAAE,4BAA4B;QAC3C,WAAW,EAAE,uBAAuB;QACpC,cAAc,EAAE,OAAO;QACvB,OAAO,EAAE,CAAC;gBACR,eAAe,EAAE,oBAAoB;gBACrC,qBAAqB,EAAE,sBAAsB;gBAC7C,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,aAAa;gBAC1B,QAAQ,EAAE,2BAA2B;gBACrC,WAAW,EAAE,mCAAmC;gBAChD,cAAc,EAAE,uCAAuC;gBACvD,eAAe,EAAE,wCAAwC;gBACzD,cAAc,EAAE,WAAW;gBAC3B,iBAAiB,EAAE,IAAI;gBACvB,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBACrD,MAAM,EAAE;oBACN,SAAS,EAAE,MAAM;oBACjB,QAAQ,EAAE,GAAG;oBACb,UAAU,EAAE,EAAE;oBACd,gBAAgB,EAAE,EAAE;oBACpB,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,CAAC;oBACb,gBAAgB,EAAE,IAAI;oBACtB,iBAAiB,EAAE,IAAI;oBACvB,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC3C,aAAa,EAAE,EAAE;oBACjB,WAAW,EAAE,KAAK;oBAClB,WAAW,EAAE,CAAC;iBACf;gBACD,SAAS,EAAE;oBACT,iBAAiB,EAAE,EAAE;oBACrB,kBAAkB,EAAE,EAAE;oBACtB,SAAS,EAAE,eAAe;iBAC3B;gBACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAClE,CAAC;KACH,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,iBAAI,CAAC,IAAI,CACxB,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAClC,CAAC;IACzB,gBAAM,CAAC,KAAK,CACV,QAAQ,CAAC,uBAAuB,CAAC,eAAe,EAChD,8BAA8B,CAC/B,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAChF,gBAAM,CAAC,SAAS,CACd,IAAI,CAAC,KAAK,CACR,iBAAE,CAAC,YAAY,CACb,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,EAC/C,MAAM,CACP,CACF,EACD;QACE,aAAa,EAAE,sBAAsB;QACrC,cAAc,EAAE,aAAa;QAC7B,iBAAiB,EAAE;YACjB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE;SACtD;QACD,KAAK,EAAE,CAAC;gBACN,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,EAAE;gBACT,kBAAkB,EAAE,OAAO;gBAC3B,KAAK,EAAE,0BAA0B;gBACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,MAAM,EAAE;oBACN,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,EAAE;oBACV,SAAS,EAAE,EAAE;iBACd;aACF,CAAC;KACH,CACF,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,IAAA,+CAAwB,EAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAA,4CAAqB,EAAC,IAAI,CAAC,CAAC;IAC1C,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,gBAAM,CAAC,KAAK,CAAC,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1F,IAAA,yCAAkB,EAAC;QACjB,OAAO,EAAE,aAAa;QACtB,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,2BAA2B;QACrC,cAAc,EAAE,WAAW;QAC3B,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,iBAAE,CAAC,cAAc,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC5E,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,yCAAkB,EAAC;QACvB,OAAO,EAAE,aAAa;QACtB,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,2BAA2B;QACrC,cAAc,EAAE,WAAW;QAC3B,MAAM,EAAE,IAAI;KACb,CAAC,EACF,+BAA+B,CAChC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,gBAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CACH,IAAA,wCAAiB,EAAC;QAChB,UAAU,EAAE,4BAA4B;QACxC,QAAQ,EAAE,SAAS;QACnB,mBAAmB,EAAE,6BAA6B;QAClD,KAAK,EAAE,KAAK;KACb,EAAE,GAAG,EAAE;QACN,eAAe,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC,CAAC,EACJ,mCAAmC,CACpC,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC"}

package/dist/nexus-cli/src/services/code-extension-governance.d.ts

@@ -0,0 +1,4 @@
+import { type ExtensionGovernanceValidationResult, type MetadataPackageManifest } from './api-client';
+export declare function validateCodeExtensionGovernance(manifest: MetadataPackageManifest, options?: {
+    existingManifest?: MetadataPackageManifest | null;
+}): ExtensionGovernanceValidationResult;