@poe-platform/safe-bash 0.1.0

package/dist/safe-bash/commands/git/io.js

@@ -0,0 +1,388 @@
+import { createHash } from "node:crypto";
+import { setImmediate } from "node:timers/promises";
+import { FsError, createOutputOperation, dirname, resolvePath } from "../../contracts/index.js";
+import { ConsumerClosed, GIT_LIMITS, GitFailure, demand } from "./limits.js";
+export class Session {
+    context;
+    operation;
+    boundary;
+    owned = new WeakMap();
+    counts = new Map();
+    sinceYield = 0;
+    resident = 0;
+    observations = new Map();
+    extraObservations = [];
+    finalizers = [];
+    constructor(context, boundary) {
+        this.context = context;
+        this.boundary = resolvePath("/", boundary);
+        this.operation = createOutputOperation(context, context.stdout);
+    }
+    check() {
+        this.context.signal.throwIfAborted();
+        if (this.operation.signal.aborted) {
+            if (this.context.stdout.ownedOutput?.consumerClosed.aborted)
+                throw new ConsumerClosed("Git output consumer closed");
+            throw this.operation.signal.reason;
+        }
+    }
+    charge(key, amount) {
+        this.check();
+        const total = (this.counts.get(key) ?? 0) + amount;
+        demand(Number.isSafeInteger(amount) && amount >= 0 && Number.isSafeInteger(total) && total <= GIT_LIMITS[key], `Git ${key} exceeded`);
+        this.counts.set(key, total);
+    }
+    async step(amount = 1) {
+        this.charge("maxSteps", amount);
+        this.sinceYield += amount;
+        while (this.sinceYield >= 4096) {
+            this.sinceYield -= 4096;
+            await setImmediate();
+            this.check();
+        }
+    }
+    reserve(size) {
+        demand(Number.isSafeInteger(size) && size >= 0 && size <= GIT_LIMITS.maxResidentBytes - this.resident, "Git resident reservation exceeded");
+        this.resident += size;
+    }
+    unreserve(size) { this.resident -= size; }
+    allocate(size) {
+        this.reserve(size);
+        try {
+            const bytes = Buffer.alloc(size);
+            this.owned.set(bytes, size);
+            return bytes;
+        }
+        catch (error) {
+            this.unreserve(size);
+            throw error;
+        }
+    }
+    copy(bytes) {
+        const result = this.allocate(bytes.length);
+        result.set(bytes);
+        return result;
+    }
+    release(bytes) {
+        const amount = this.owned.get(bytes);
+        if (amount !== undefined) {
+            this.unreserve(amount);
+            this.owned.delete(bytes);
+        }
+    }
+    text(bytes) {
+        this.reserve(bytes.length * 2);
+        try {
+            return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
+        }
+        catch {
+            throw new GitFailure("invalid UTF-8 in Git metadata/text");
+        }
+    }
+    async hash(bytes, type) {
+        const hash = createHash("sha1");
+        if (type)
+            hash.update(`${type} ${bytes.length}\0`);
+        for (let offset = 0; offset < bytes.length; offset += 4096) {
+            const part = bytes.subarray(offset, offset + 4096);
+            await this.step(part.length);
+            hash.update(part);
+        }
+        return hash.digest("hex");
+    }
+    path(base, name) {
+        demand(!name.includes("\0") && Buffer.byteLength(name) <= GIT_LIMITS.maxPathBytes, "invalid Git path");
+        const path = resolvePath(base, name);
+        demand(path === this.boundary || path.startsWith(this.boundary === "/" ? "/" : this.boundary + "/"), "Git path outside discovery boundary");
+        demand(Buffer.byteLength(path) <= GIT_LIMITS.maxPathBytes, "Git path limit exceeded");
+        return path;
+    }
+    async call(start) {
+        this.check();
+        try {
+            const value = await start();
+            this.check();
+            return value;
+        }
+        catch (error) {
+            this.context.signal.throwIfAborted();
+            if (error instanceof ConsumerClosed)
+                throw error;
+            if (error instanceof FsError && !this.operation.signal.aborted)
+                throw new GitFailure(`${error.code}: ${error.path ?? "VFS read"}`);
+            throw error;
+        }
+    }
+    async stat(path) {
+        await this.step();
+        this.path("/", path);
+        try {
+            const stat = await this.context.fs.lstat(path, { signal: this.operation.signal });
+            this.check();
+            return stat;
+        }
+        catch (error) {
+            this.context.signal.throwIfAborted();
+            if (error instanceof FsError && error.code === "ENOENT" && !this.operation.signal.aborted)
+                return undefined;
+            if (error instanceof FsError && !this.operation.signal.aborted)
+                throw new GitFailure(`${error.code}: ${path}`);
+            throw error;
+        }
+    }
+    async safe(path, leafLink = false) {
+        const relative = this.path("/", path).slice(this.boundary === "/" ? 1 : this.boundary.length + 1);
+        let current = this.boundary;
+        const root = await this.stat(current);
+        demand(root?.type === "directory", "Git boundary is not a real directory");
+        const parts = relative ? relative.split("/") : [];
+        demand(parts.length <= GIT_LIMITS.maxDepth, "Git path depth exceeded");
+        for (let index = 0; index < parts.length; index++) {
+            current = this.path(current, parts[index]);
+            const stat = await this.stat(current);
+            if (!stat)
+                return;
+            demand(stat.type !== "symlink" || leafLink && index === parts.length - 1, "Git metadata/path symlink refused");
+            if (index < parts.length - 1)
+                demand(stat.type === "directory", "Git path obstruction");
+        }
+        if (!(leafLink && (await this.stat(path))?.type === "symlink")) {
+            const actual = await this.call(() => this.context.fs.realpath(path, { signal: this.operation.signal }));
+            demand(actual === path, "Git namespace case/normalization/alias mismatch");
+        }
+    }
+    async list(path) {
+        await this.safe(path);
+        const entries = await this.call(() => this.context.fs.readdir(path, { signal: this.operation.signal }));
+        demand(Array.isArray(entries), "invalid Git directory listing");
+        this.charge("maxEntries", entries.length);
+        this.reserve(entries.length * 64);
+        const seen = new Set();
+        for (const entry of entries) {
+            await this.step(entry.name.length + 1);
+            component(entry.name);
+            this.reserve(Buffer.byteLength(entry.name) * 2);
+            demand(!seen.has(entry.name), "duplicate Git directory entry");
+            seen.add(entry.name);
+        }
+        return entries;
+    }
+    async read(path, maximum, optional = false, observe = false) {
+        await this.safe(path);
+        const before = await this.stat(path);
+        if (!before) {
+            if (optional)
+                return undefined;
+            throw new GitFailure(`missing Git file: ${path}`);
+        }
+        demand(before.type === "file", `Git input is not a regular file: ${path}`);
+        demand(Number.isSafeInteger(before.size) && before.size >= 0 && before.size <= maximum, "Git file admission size exceeded");
+        const pieces = [];
+        let total = 0;
+        let iterator;
+        let closing;
+        const close = () => closing ??= Promise.resolve().then(() => iterator?.return?.());
+        let failed = false;
+        try {
+            if (this.context.fs.readStream) {
+                await this.operation.acquire(() => iterator = this.context.fs.readStream(path, { signal: this.operation.signal, chunkSize: GIT_LIMITS.maxChunkBytes })[Symbol.asyncIterator](), async () => { await close(); });
+                for (;;) {
+                    const row = await this.call(() => iterator.next());
+                    if (row.done)
+                        break;
+                    demand(row.value instanceof Uint8Array, "Git source yielded nonbytes");
+                    this.charge("maxChunks", 1);
+                    demand(row.value.length <= GIT_LIMITS.maxChunkBytes && row.value.length <= maximum - total, "Git read chunk/size exceeded");
+                    this.charge("maxReadBytes", row.value.length);
+                    await this.step(Math.max(1, row.value.length));
+                    pieces.push(this.copy(row.value));
+                    total += row.value.length;
+                }
+            }
+            else {
+                const bytes = await this.call(() => this.context.fs.readFile(path, { signal: this.operation.signal, maxBytes: maximum }));
+                demand(bytes instanceof Uint8Array && bytes.length <= maximum, "Git bounded readFile exceeded");
+                this.charge("maxReadBytes", bytes.length);
+                await this.step(bytes.length);
+                pieces.push(this.copy(bytes));
+                total = bytes.length;
+            }
+            const after = await this.stat(path);
+            demand(after && snapshot(before) === snapshot(after) && total === before.size, "Git input changed during read");
+            const result = this.allocate(total);
+            let position = 0;
+            for (const piece of pieces) {
+                result.set(piece, position);
+                position += piece.length;
+            }
+            if (observe)
+                this.observations.set(path, await this.hash(result));
+            return result;
+        }
+        catch (error) {
+            failed = true;
+            throw error;
+        }
+        finally {
+            for (const piece of pieces)
+                this.release(piece);
+            if (failed)
+                await close().catch(() => { });
+            else
+                await close();
+        }
+    }
+    async unchanged() {
+        for (const observation of this.extraObservations)
+            await observation();
+        for (const [path, hash] of this.observations) {
+            const bytes = await this.read(path, GIT_LIMITS.maxIndexBytes);
+            try {
+                demand(await this.hash(bytes) === hash, "Git metadata changed before output");
+            }
+            finally {
+                this.release(bytes);
+            }
+        }
+    }
+    observe(check) { this.reserve(64); this.extraObservations.push(check); }
+    onFinish(close) { this.reserve(64); this.finalizers.push(close); }
+    finish() { for (const close of this.finalizers.splice(0))
+        close(); }
+    async visitFile(path, maximum, consume) {
+        await this.safe(path);
+        const before = await this.stat(path);
+        demand(before?.type === "file" && Number.isSafeInteger(before.size) && before.size >= 0 && before.size <= maximum, "Git file admission size exceeded");
+        let total = 0;
+        let iterator;
+        let closing;
+        const close = () => closing ??= Promise.resolve().then(() => iterator?.return?.());
+        let failed = false;
+        try {
+            if (this.context.fs.readStream) {
+                await this.operation.acquire(() => iterator = this.context.fs.readStream(path, { signal: this.operation.signal, chunkSize: GIT_LIMITS.maxChunkBytes })[Symbol.asyncIterator](), async () => { await close(); });
+                for (;;) {
+                    const row = await this.call(() => iterator.next());
+                    if (row.done)
+                        break;
+                    this.charge("maxChunks", 1);
+                    demand(row.value instanceof Uint8Array && row.value.length <= GIT_LIMITS.maxChunkBytes && row.value.length <= before.size - total, "Git exact read chunk/size exceeded");
+                    this.charge("maxReadBytes", row.value.length);
+                    await this.step();
+                    await consume(row.value, total);
+                    total += row.value.length;
+                }
+            }
+            else {
+                const bytes = await this.call(() => this.context.fs.readFile(path, { signal: this.operation.signal, maxBytes: maximum }));
+                demand(bytes instanceof Uint8Array && bytes.length === before.size, "Git exact readFile size mismatch");
+                this.charge("maxReadBytes", bytes.length);
+                await consume(bytes, 0);
+                total = bytes.length;
+            }
+            const after = await this.stat(path);
+            demand(after && snapshot(before) === snapshot(after) && total === before.size, "Git input changed during exact read");
+        }
+        catch (error) {
+            failed = true;
+            throw error;
+        }
+        finally {
+            if (failed)
+                await close().catch(() => { });
+            else
+                await close();
+        }
+    }
+    async copyInto(target, source, offset = 0) {
+        demand(Number.isSafeInteger(offset) && offset >= 0 && source.length <= target.length - offset, "Git copy extent exceeded");
+        for (let position = 0; position < source.length; position += 4096) {
+            const part = source.subarray(position, position + 4096);
+            await this.step(part.length);
+            target.set(part, offset + position);
+        }
+    }
+    async readExact(path, maximum) {
+        await this.safe(path);
+        const stat = await this.stat(path);
+        demand(stat?.type === "file" && Number.isSafeInteger(stat.size) && stat.size >= 0 && stat.size <= maximum, "Git exact file admission exceeded");
+        const body = this.allocate(stat.size);
+        let success = false;
+        try {
+            await this.visitFile(path, maximum, (bytes, offset) => this.copyInto(body, bytes, offset));
+            const after = await this.stat(path);
+            demand(after && snapshot(stat) === snapshot(after), "Git exact file changed before fill");
+            success = true;
+            return body;
+        }
+        finally {
+            if (!success)
+                this.release(body);
+        }
+    }
+    async observeExact(path, maximum, body) {
+        const expected = await this.hash(body);
+        this.observe(async () => {
+            const hash = createHash("sha1");
+            await this.visitFile(path, maximum, async (bytes) => {
+                for (let offset = 0; offset < bytes.length; offset += 4096) {
+                    const part = bytes.subarray(offset, offset + 4096);
+                    await this.step(part.length);
+                    hash.update(part);
+                }
+            });
+            demand(hash.digest("hex") === expected, "Git packed input changed before output");
+        });
+    }
+    async output(bytes) {
+        const length = typeof bytes === "string" ? Buffer.byteLength(bytes) : bytes.length;
+        this.charge("maxOutputBytes", length);
+        if (typeof bytes === "string")
+            this.reserve(length);
+        const content = typeof bytes === "string" ? Buffer.from(bytes) : bytes;
+        try {
+            for (let offset = 0; offset < content.length; offset += GIT_LIMITS.maxChunkBytes) {
+                this.check();
+                await this.operation.output.write(content.subarray(offset, offset + GIT_LIMITS.maxChunkBytes));
+            }
+        }
+        finally {
+            if (typeof bytes === "string")
+                this.unreserve(length);
+        }
+    }
+    async sorted(paths) {
+        const values = Array.from(paths);
+        this.reserve(values.length * 16);
+        for (let width = 1; width < values.length; width *= 2) {
+            for (let start = 0; start < values.length; start += width * 2) {
+                const middle = Math.min(start + width, values.length), end = Math.min(start + width * 2, values.length);
+                const merged = [];
+                let left = start, right = middle;
+                while (left < middle || right < end) {
+                    if (left < middle && right < end)
+                        await this.step(values[left].length + values[right].length + 1);
+                    merged.push(right >= end || left < middle && compare(values[left], values[right]) <= 0 ? values[left++] : values[right++]);
+                }
+                for (let index = 0; index < merged.length; index++)
+                    values[start + index] = merged[index];
+            }
+        }
+        return values;
+    }
+}
+function snapshot(stat) { return `${stat.type}:${stat.size}:${stat.mode}:${stat.mtimeMs}:${stat.ctimeMs}`; }
+export function component(name) {
+    demand(typeof name === "string" && name.length > 0 && name !== "." && name !== ".." && !name.includes("/") && !name.includes("\0") && Buffer.byteLength(name) <= GIT_LIMITS.maxPathBytes, "invalid Git path component");
+    demand(Buffer.from(name).toString("utf8") === name, "nonroundtrippable Git path");
+}
+export function objectPath(name) {
+    demand(name.length > 0 && !name.startsWith("/") && !name.endsWith("/"), "invalid repository path");
+    for (const part of name.split("/")) {
+        component(part);
+        demand(part.toLowerCase() !== ".git", "reserved Git path");
+    }
+}
+export function compare(left, right) { return Buffer.compare(Buffer.from(left), Buffer.from(right)); }
+export function parent(path) { return dirname(path); }
+//# sourceMappingURL=io.js.map

package/dist/safe-bash/commands/git/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../../src/commands/git/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAiF,MAAM,0BAA0B,CAAC;AAC/K,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,OAAO,OAAO;IAWG;IAVZ,SAAS,CAAkB;IAC3B,QAAQ,CAAS;IACT,KAAK,GAAG,IAAI,OAAO,EAAsB,CAAC;IAC1C,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAG,CAAC,CAAC;IACJ,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,iBAAiB,GAA4B,EAAE,CAAC;IAChD,UAAU,GAAmB,EAAE,CAAC;IAEjD,YAAqB,OAAuB,EAAE,QAAgB;QAAzC,YAAO,GAAP,OAAO,CAAgB;QAC1C,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,OAAO;gBAAE,MAAM,IAAI,cAAc,CAAC,4BAA4B,CAAC,CAAC;YACpH,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAA4B,EAAE,MAAc;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC,CAAC;QACtI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;YACxB,MAAM,YAAY,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,UAAU,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;QAC5I,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,IAAY,IAAU,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC;IAExD,QAAQ,CAAC,IAAY;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,KAAiB;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC;YAAC,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACxF,MAAM,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB,EAAE,IAAa;QACzC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACnD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,IAAY;QAC7B,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACvG,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC5I,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAQ,KAA2B;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAChE,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,KAAK,YAAY,cAAc;gBAAE,MAAM,KAAK,CAAC;YACjD,IAAI,KAAK,YAAY,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YACnI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,KAAK,YAAY,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC5G,IAAI,KAAK,YAAY,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/G,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,QAAQ,GAAG,KAAK;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClG,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,WAAW,EAAE,sCAAsC,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACvE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,mCAAmC,CAAC,CAAC;YAC/G,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,sBAAsB,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxG,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,iDAAiD,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,+BAA+B,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK;QACzE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,IAAI,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACnG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,kCAAkC,CAAC,CAAC;QAC5H,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAA+C,CAAC;QACpD,IAAI,OAAqC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAqB,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACrG,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjN,SAAS,CAAC;oBACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBACpD,IAAI,GAAG,CAAC,IAAI;wBAAE,MAAM;oBACpB,MAAM,CAAC,GAAG,CAAC,KAAK,YAAY,UAAU,EAAE,6BAA6B,CAAC,CAAC;oBACvE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;oBAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,aAAa,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,GAAG,KAAK,EAAE,8BAA8B,CAAC,CAAC;oBAC5H,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1H,MAAM,CAAC,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,+BAA+B,CAAC,CAAC;gBAChG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;YACtD,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YAChH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YAAC,CAAC;YACtF,IAAI,OAAO;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBACvC,CAAC;YACP,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM;gBAAE,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;;gBACrC,MAAM,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS;QACb,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,iBAAiB;YAAE,MAAM,WAAW,EAAE,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YAC9D,IAAI,CAAC;gBAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,KAAK,IAAI,EAAE,oCAAoC,CAAC,CAAC;YAAC,CAAC;oBAC/E,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,KAAM,CAAC,CAAC;YAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAA0B,IAAU,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnG,QAAQ,CAAC,KAAiB,IAAU,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpF,MAAM,KAAW,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAE1E,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,OAA6D;QAC1G,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,kCAAkC,CAAC,CAAC;QACvJ,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAA+C,CAAC;QACpD,IAAI,OAAqC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAqB,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACrG,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjN,SAAS,CAAC;oBACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAS,CAAC,IAAI,EAAE,CAAC,CAAC;oBACpD,IAAI,GAAG,CAAC,IAAI;wBAAE,MAAM;oBACpB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;oBAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,YAAY,UAAU,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,aAAa,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,oCAAoC,CAAC,CAAC;oBACzK,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC9C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBAClB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBAChC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1H,MAAM,CAAC,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;gBACxG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACxB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;YACvB,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBACvC,CAAC;YACP,IAAI,MAAM;gBAAE,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;;gBACrC,MAAM,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAkB,EAAE,MAAkB,EAAE,MAAM,GAAG,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAC3H,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;YACxD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,mCAAmC,CAAC,CAAC;QAChJ,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,oCAAoC,CAAC,CAAC;YAC1F,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,OAAe,EAAE,IAAgB;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;gBAChD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;oBAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;oBACnD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,wCAAwC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvE,IAAI,CAAC;YACH,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;gBACjF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxG,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,IAAI,GAAG,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;gBACjC,OAAO,IAAI,GAAG,MAAM,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;oBACpC,IAAI,IAAI,GAAG,MAAM,IAAI,KAAK,GAAG,GAAG;wBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACpG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAE,EAAE,MAAM,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAE,CAAC,CAAC;gBACjI,CAAC;gBACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE;oBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAc,IAAY,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAE9H,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IACxN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,4BAA4B,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACnG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAAC,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,KAAa,IAAY,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9H,MAAM,UAAU,MAAM,CAAC,IAAY,IAAY,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/dist/safe-bash/commands/git/limits.d.ts

@@ -0,0 +1,39 @@
+export interface GitCommandsOptions {
+    readonly replace?: boolean;
+    readonly discoveryBoundary?: string;
+}
+export declare const GIT_LIMITS: Readonly<{
+    maxArgumentBytes: 65536;
+    maxPathBytes: 4096;
+    maxReadBytes: 67108864;
+    maxInflatedBytes: 134217728;
+    maxObjectBytes: 8388608;
+    maxWorkingFileBytes: 8388608;
+    maxIndexBytes: 16777216;
+    maxMetadataBytes: 1048576;
+    maxResidentBytes: 67108864;
+    maxEntries: 20000;
+    maxObjects: 32768;
+    maxCommits: 2000;
+    maxDepth: 128;
+    maxRefDepth: 16;
+    maxDeltaDepth: 32;
+    maxSteps: 32000000;
+    maxDiffCells: 1000000;
+    maxLines: 200000;
+    maxOutputBytes: 16777216;
+    maxDiagnosticBytes: 65536;
+    maxChunkBytes: 65536;
+    maxChunks: 32768;
+    maxPacks: 8;
+    maxPackBytes: 33554432;
+}>;
+export declare class GitFailure extends Error {
+    readonly status: number;
+    constructor(message: string, status?: number);
+}
+export declare class ConsumerClosed extends Error {
+}
+export declare function demand(condition: unknown, message: string): asserts condition;
+export declare function settings(options: GitCommandsOptions): Required<GitCommandsOptions>;
+//# sourceMappingURL=limits.d.ts.map

package/dist/safe-bash/commands/git/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../../src/commands/git/limits.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;EAQrB,CAAC;AAEH,qBAAa,UAAW,SAAQ,KAAK;IACN,QAAQ,CAAC,MAAM;gBAAhC,OAAO,EAAE,MAAM,EAAW,MAAM,SAAM;CACnD;AAED,qBAAa,cAAe,SAAQ,KAAK;CAAG;AAE5C,wBAAgB,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAE7E;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAalF"}

package/dist/safe-bash/commands/git/limits.js

@@ -0,0 +1,43 @@
+export const GIT_LIMITS = Object.freeze({
+    maxArgumentBytes: 65536, maxPathBytes: 4096, maxReadBytes: 67108864,
+    maxInflatedBytes: 134217728, maxObjectBytes: 8388608, maxWorkingFileBytes: 8388608,
+    maxIndexBytes: 16777216, maxMetadataBytes: 1048576, maxResidentBytes: 67108864,
+    maxEntries: 20000, maxObjects: 32768, maxCommits: 2000, maxDepth: 128,
+    maxRefDepth: 16, maxDeltaDepth: 32, maxSteps: 32000000, maxDiffCells: 1000000,
+    maxLines: 200000, maxOutputBytes: 16777216, maxDiagnosticBytes: 65536,
+    maxChunkBytes: 65536, maxChunks: 32768, maxPacks: 8, maxPackBytes: 33554432,
+});
+export class GitFailure extends Error {
+    status;
+    constructor(message, status = 128) {
+        super(message);
+        this.status = status;
+    }
+}
+export class ConsumerClosed extends Error {
+}
+export function demand(condition, message) {
+    if (!condition)
+        throw new GitFailure(message);
+}
+export function settings(options) {
+    if (!options || typeof options !== "object")
+        throw new TypeError("Invalid Git options");
+    let replace = false;
+    let discoveryBoundary = "/";
+    for (const key of Reflect.ownKeys(options)) {
+        const descriptor = Object.getOwnPropertyDescriptor(options, key);
+        if (!("value" in descriptor))
+            throw new TypeError("Git options require own data properties");
+        if (key === "replace" && typeof descriptor.value === "boolean")
+            replace = descriptor.value;
+        else if (key === "discoveryBoundary" && typeof descriptor.value === "string")
+            discoveryBoundary = descriptor.value;
+        else
+            throw new TypeError(`Invalid Git option: ${String(key)}`);
+    }
+    if (!discoveryBoundary.startsWith("/") || discoveryBoundary.includes("\0") || Buffer.byteLength(discoveryBoundary) > GIT_LIMITS.maxPathBytes)
+        throw new TypeError("Invalid Git discoveryBoundary");
+    return { replace, discoveryBoundary };
+}
+//# sourceMappingURL=limits.js.map

package/dist/safe-bash/commands/git/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../../src/commands/git/limits.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ;IACnE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO;IAClF,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ;IAC9E,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG;IACrE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO;IAC7E,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK;IACrE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ;CAC5E,CAAC,CAAC;AAEH,MAAM,OAAO,UAAW,SAAQ,KAAK;IACG;IAAtC,YAAY,OAAe,EAAW,SAAS,GAAG;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAA/B,WAAM,GAAN,MAAM,CAAM;IAAoB,CAAC;CACxE;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,MAAM,UAAU,MAAM,CAAC,SAAkB,EAAE,OAAe;IACxD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAA2B;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACxF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,iBAAiB,GAAG,GAAG,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAE,CAAC;QAClE,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAC7F,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC;aACtF,IAAI,GAAG,KAAK,mBAAmB,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YAAE,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC;;YAC9G,MAAM,IAAI,SAAS,CAAC,uBAAuB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG,UAAU,CAAC,YAAY;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACnM,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AACxC,CAAC"}

package/dist/safe-bash/commands/git/pack.d.ts

@@ -0,0 +1,14 @@
+import { type GitObject } from "./codec.js";
+import type { Session } from "./io.js";
+export declare class PackCatalogue {
+    private readonly session;
+    readonly objects: Map<string, GitObject>;
+    private readonly owners;
+    constructor(session: Session);
+    close(): void;
+    private retain;
+    admit(gitdir: string): Promise<void>;
+    private index;
+    private readPack;
+}
+//# sourceMappingURL=pack.d.ts.map

package/dist/safe-bash/commands/git/pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack.d.ts","sourceRoot":"","sources":["../../../src/commands/git/pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAmBvC,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,QAAQ,CAAC,OAAO,yBAAgC;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEf,OAAO,EAAE,OAAO;IAE7C,KAAK,IAAI,IAAI;YAMC,MAAM;IAkBd,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAoD5B,KAAK;YAiDL,QAAQ;CAiGvB"}