@poe-platform/safe-bash 0.1.0

package/dist/safe-bash/commands/node/host.js

@@ -0,0 +1,411 @@
+import { posix } from "node:path";
+import { types } from "node:util";
+import { isErrnoCode, isFsError } from "../../contracts/errors.js";
+import { NodeProfileError, nodeLimits } from "./types.js";
+import { integer, NodeLedger, record, strings, text } from "./values.js";
+export function fsDescriptor(error) {
+    try {
+        if (error === null || typeof error !== "object" || types.isProxy(error) || Array.isArray(error))
+            return undefined;
+        let prototype = error;
+        let depth = 0;
+        while (prototype !== null) {
+            if (types.isProxy(prototype) || ++depth > 16)
+                return undefined;
+            prototype = Object.getPrototypeOf(prototype);
+        }
+        if (!isFsError(error))
+            return undefined;
+        const fields = Object.create(null);
+        for (const key of Reflect.ownKeys(error)) {
+            if (key === "stack" || key === "cause")
+                continue;
+            if (typeof key !== "string" || !["name", "message", "code", "errno", "path", "syscall", "dest"].includes(key))
+                return undefined;
+            const descriptor = Object.getOwnPropertyDescriptor(error, key);
+            if (!descriptor || !Object.hasOwn(descriptor, "value"))
+                return undefined;
+            fields[key] = descriptor.value;
+        }
+        const value = record(fields, ["name", "message", "code", "errno"], ["path", "syscall", "dest"]);
+        if (value.name !== "FsError" || !isErrnoCode(value.code) || typeof value.errno !== "number" || !Number.isSafeInteger(value.errno) || value.errno >= 0)
+            return undefined;
+        const optional = (name) => value[name] === undefined ? null : text(value[name], nodeLimits.errorBytes, "FS error field");
+        return { name: "FsError", message: text(value.message, nodeLimits.errorBytes, "FS error message"), code: value.code, errno: value.errno, path: optional("path"), syscall: optional("syscall"), dest: optional("dest") };
+    }
+    catch {
+        return undefined;
+    }
+}
+function localError(code) { return { name: "Error", message: code === "ERR_VNODE_DENIED" ? "Virtual capability denied" : "Unsupported restricted Node operation", code, errno: null, path: null, syscall: null, dest: null }; }
+class FsOperationFailure {
+    reason;
+    constructor(reason) {
+        this.reason = reason;
+    }
+}
+function response(sequence, kind, value = null, cacheKey = null, error = null) { return { sequence, kind, text: value, error, cacheKey }; }
+export function readNodeHostRequest(value) {
+    const item = record(value, ["sequence", "op", "authority", "path", "flag", "text", "moduleKey"]);
+    const sequence = integer(item.sequence, nodeLimits.operations, "sequence");
+    if (sequence === 0)
+        throw new NodeProfileError("request sequence");
+    let bytes = 0;
+    for (const field of ["op", "authority", "path", "flag", "moduleKey"]) {
+        if (item[field] !== null) {
+            const entry = text(item[field], field === "path" ? nodeLimits.pathBytes : nodeLimits.metadataBytes, "request metadata");
+            bytes += Buffer.byteLength(entry);
+        }
+    }
+    if (bytes > nodeLimits.metadataBytes)
+        throw new NodeProfileError("request metadata");
+    if (item.text !== null)
+        text(item.text, nodeLimits.operationBytes, "request payload");
+    const empty = item.path === null && item.flag === null;
+    const noBody = item.text === null;
+    const noModule = item.moduleKey === null;
+    const valid = item.op === "authorizeModule" && item.authority === "module" && empty && noBody && ["fs", "path", "process"].includes(item.moduleKey)
+        || item.op === "authorizeJson" && item.authority === "json" && typeof item.path === "string" && item.flag === "r" && noBody && noModule
+        || item.op === "readText" && ["json", "data"].includes(item.authority) && typeof item.path === "string" && item.flag === "r" && noBody && noModule
+        || item.op === "readText" && item.authority === "stdin" && item.path === null && item.flag === "r" && noBody && noModule
+        || item.op === "writeText" && item.authority === "data" && typeof item.path === "string" && (item.flag === "w" || item.flag === "wx") && typeof item.text === "string" && noModule
+        || item.op === "writeOutput" && ["stdout", "stderr"].includes(item.authority) && empty && typeof item.text === "string" && noModule
+        || item.op === "path" && item.authority === "path" && empty && typeof item.text === "string" && ["join", "resolve", "normalize", "dirname", "basename", "extname", "relative", "isAbsolute"].includes(item.moduleKey);
+    if (!valid)
+        throw new TypeError("node protocol: operation shape");
+    return Object.freeze(item);
+}
+export class NodeHost {
+    owner;
+    grants;
+    cwd;
+    directory;
+    #sequence = 0;
+    #active = false;
+    #pending;
+    #stdinUsed = false;
+    #stdinActive = false;
+    #read = 0;
+    #written = 0;
+    #output = 0;
+    #jsonBytes = 0;
+    #authorized;
+    #authorizationSequence = 0;
+    #pulls = 0;
+    constructor(owner, grants, cwd, directory) {
+        this.owner = owner;
+        this.grants = grants;
+        this.cwd = cwd;
+        this.directory = directory;
+    }
+    #path(value, base = this.cwd) {
+        const source = text(value, nodeLimits.pathBytes, "path");
+        if (source.includes("\0"))
+            throw new TypeError("node protocol: NUL path");
+        return text(posix.resolve(base, source), nodeLimits.pathBytes, "resolved path");
+    }
+    #check() { this.owner.check(); }
+    #settled() { this.owner.context.signal.throwIfAborted(); this.owner.signal.throwIfAborted(); }
+    #admit(value) {
+        const item = readNodeHostRequest(value);
+        if (item.sequence !== this.#sequence + 1 || this.#active || this.#pending)
+            throw new NodeProfileError("request sequence/delivery");
+        return item;
+    }
+    async #stdin(maximum) {
+        if (this.#stdinActive)
+            throw new NodeProfileError("concurrent stdin");
+        if (this.#stdinUsed)
+            return new Uint8Array(0);
+        this.#stdinUsed = true;
+        this.#stdinActive = true;
+        let storage;
+        const release = this.owner.ledger.reserve("stdin-collection", maximum);
+        try {
+            storage = new Uint8Array(maximum);
+            let iterator;
+            try {
+                iterator = this.owner.context.stdin[Symbol.asyncIterator]();
+            }
+            catch (error) {
+                this.owner.failure(error, "execution");
+                throw error;
+            }
+            let offset = 0;
+            while (true) {
+                this.#check();
+                if (++this.#pulls > nodeLimits.steps)
+                    throw new NodeProfileError("stdin producer work");
+                let item;
+                try {
+                    item = await this.owner.job(() => iterator.next());
+                }
+                catch (error) {
+                    this.owner.failure(error, "execution");
+                    throw error;
+                }
+                this.#check();
+                if (item.done)
+                    break;
+                const fragment = item.value;
+                if (types.isProxy(fragment) || !types.isUint8Array(fragment))
+                    throw new TypeError("node stdin requires bytes");
+                if (fragment.byteLength > maximum - offset)
+                    throw new NodeProfileError("stdin bytes");
+                storage.set(fragment, offset);
+                offset += fragment.byteLength;
+            }
+            return storage.subarray(0, offset);
+        }
+        finally {
+            storage = undefined;
+            this.#stdinActive = false;
+            release();
+        }
+    }
+    async source(filename) {
+        if (!this.grants.sourceRead || filename === null && !this.grants.stdinRead)
+            throw new NodeProfileError("source read grant");
+        const release = this.owner.ledger.reserve("source-acquisition", nodeLimits.sourceBytes * 5);
+        let bytes;
+        try {
+            this.#check();
+            if (filename === null)
+                bytes = await this.#stdin(nodeLimits.sourceBytes);
+            else {
+                const selected = this.#path(filename);
+                try {
+                    bytes = await this.owner.job(() => this.owner.context.fs.readFile(selected, { signal: this.owner.signal, maxBytes: nodeLimits.sourceBytes }));
+                }
+                catch (error) {
+                    this.owner.failure(error, "execution");
+                    throw error;
+                }
+            }
+            this.#check();
+            if (types.isProxy(bytes) || !types.isUint8Array(bytes) || bytes.byteLength > nodeLimits.sourceBytes)
+                throw new NodeProfileError("source bytes");
+            const source = new TextDecoder("utf-8", { ignoreBOM: true }).decode(bytes);
+            return text(source.startsWith("\ufeff") ? source.slice(1) : source, nodeLimits.sourceBytes, "decoded source");
+        }
+        finally {
+            bytes = undefined;
+            release();
+        }
+    }
+    async #fs(start) { try {
+        return await this.owner.job(start);
+    }
+    catch (error) {
+        throw new FsOperationFailure(error);
+    } }
+    async #perform(item) {
+        const deny = () => response(item.sequence, "denied", null, null, localError("ERR_VNODE_DENIED"));
+        const key = (path) => ({ namespace: 1, path });
+        if (item.op === "authorizeModule")
+            return response(item.sequence, "void");
+        if (item.op === "path") {
+            const argumentsValue = JSON.parse(item.text);
+            const argumentsList = strings(argumentsValue, 16, nodeLimits.metadataBytes);
+            if (argumentsList.some(value => value.includes("\0")))
+                throw new TypeError("node protocol: path NUL");
+            const method = item.moduleKey;
+            const count = argumentsList.length;
+            let output;
+            if (method === "join")
+                output = posix.join(...argumentsList);
+            else if (method === "resolve")
+                output = posix.resolve(this.cwd, ...argumentsList);
+            else if (method === "basename" && (count === 1 || count === 2))
+                output = posix.basename(argumentsList[0], argumentsList[1]);
+            else if (method === "relative" && count === 2)
+                output = posix.relative(this.#path(argumentsList[0]), this.#path(argumentsList[1]));
+            else if (count === 1 && method === "normalize")
+                output = posix.normalize(argumentsList[0]);
+            else if (count === 1 && method === "dirname")
+                output = posix.dirname(argumentsList[0]);
+            else if (count === 1 && method === "extname")
+                output = posix.extname(argumentsList[0]);
+            else if (count === 1 && method === "isAbsolute")
+                output = posix.isAbsolute(argumentsList[0]) ? "true" : "false";
+            else
+                return response(item.sequence, "unsupported", null, null, localError("ERR_VNODE_UNSUPPORTED"));
+            return response(item.sequence, "text", text(output, nodeLimits.pathBytes, "path result"));
+        }
+        if (item.op === "authorizeJson") {
+            if (!this.grants.dataRead || !this.grants.jsonModules)
+                return deny();
+            const requested = item.path;
+            if (!(requested.startsWith("./") || requested.startsWith("../") || requested.startsWith("/")) || !requested.endsWith(".json"))
+                return response(item.sequence, "unsupported", null, null, localError("ERR_VNODE_UNSUPPORTED"));
+            const filename = this.#path(requested, this.directory);
+            const canonical = await this.#fs(() => this.owner.context.fs.realpath(filename, { signal: this.owner.signal }));
+            this.#settled();
+            this.#authorized = this.#path(canonical);
+            this.#authorizationSequence = item.sequence;
+            return response(item.sequence, "text", "", key(this.#authorized));
+        }
+        if (item.op === "readText") {
+            if (item.authority === "stdin" ? !this.grants.stdinRead : !this.grants.dataRead || item.authority === "json" && !this.grants.jsonModules)
+                return deny();
+            const filename = item.path === null ? null : this.#path(item.path);
+            if (item.authority === "json" && (filename !== this.#authorized || item.sequence !== this.#authorizationSequence + 1))
+                throw new NodeProfileError("JSON authorization");
+            if (item.authority === "json")
+                this.#authorized = undefined;
+            const remaining = Math.min(nodeLimits.operationBytes, nodeLimits.readBytes - this.#read, item.authority === "json" ? nodeLimits.jsonBytes - this.#jsonBytes : nodeLimits.operationBytes);
+            let bytes;
+            try {
+                bytes = filename === null ? await this.#stdin(remaining) : await this.#fs(() => this.owner.context.fs.readFile(filename, { signal: this.owner.signal, maxBytes: remaining }));
+                this.#settled();
+                if (types.isProxy(bytes) || !types.isUint8Array(bytes) || bytes.byteLength > remaining)
+                    throw new NodeProfileError("read bytes");
+                this.#read += bytes.byteLength;
+                if (item.authority === "json") {
+                    this.#jsonBytes += bytes.byteLength;
+                }
+                let decoded = new TextDecoder("utf-8", { ignoreBOM: true }).decode(bytes);
+                if (item.authority === "json" && decoded.startsWith("\ufeff"))
+                    decoded = decoded.slice(1);
+                text(decoded, nodeLimits.operationBytes, "decoded read result");
+                return response(item.sequence, "text", decoded, item.authority === "json" ? key(filename) : null);
+            }
+            finally {
+                bytes = undefined;
+            }
+        }
+        const payload = item.text;
+        const size = Buffer.byteLength(payload);
+        if (item.op === "writeText") {
+            if (!this.grants.dataWrite)
+                return deny();
+            if (size > nodeLimits.writeBytes - this.#written)
+                throw new NodeProfileError("write bytes");
+            const filename = this.#path(item.path);
+            this.#written += size;
+            let owned = new TextEncoder().encode(payload);
+            try {
+                await this.#fs(() => this.owner.context.fs.writeFile(filename, owned, { signal: this.owner.signal, flag: item.flag }));
+                this.#settled();
+            }
+            finally {
+                owned = undefined;
+            }
+            return response(item.sequence, "void");
+        }
+        if (item.authority === "stdout" ? !this.grants.stdoutWrite : !this.grants.stderrWrite)
+            return deny();
+        if (size > nodeLimits.outputBytes - this.#output)
+            throw new NodeProfileError("output bytes");
+        this.#output += size;
+        await this.write(item.authority === "stdout" ? this.owner.context.stdout : this.owner.context.stderr, payload);
+        return response(item.sequence, "void");
+    }
+    async write(sink, value) {
+        let closed;
+        let observed;
+        const onClosed = () => { observed ??= { present: true, value: closed.reason }; this.owner.failure(observed.value); };
+        let bytes;
+        try {
+            const owned = sink.ownedOutput;
+            const output = owned ?? sink;
+            closed = owned?.consumerClosed;
+            if (closed?.aborted) {
+                onClosed();
+                throw observed.value;
+            }
+            closed?.addEventListener("abort", onClosed, { once: true });
+            bytes = new TextEncoder().encode(value);
+            await this.owner.job(() => output.write(bytes));
+            if (observed)
+                throw observed.value;
+        }
+        catch (error) {
+            this.owner.failure(error, "execution");
+            throw error;
+        }
+        finally {
+            bytes = undefined;
+            closed?.removeEventListener("abort", onClosed);
+        }
+    }
+    async diagnostic(value) {
+        if (!this.grants.stderrWrite)
+            return;
+        const count = Buffer.byteLength(value);
+        if (count > nodeLimits.outputBytes - this.#output)
+            throw new NodeProfileError("diagnostic output bytes");
+        this.#output += count;
+        await this.write(this.owner.context.stderr, value);
+    }
+    async request(value) {
+        let item;
+        try {
+            this.#check();
+            item = this.#admit(value);
+        }
+        catch (error) {
+            this.owner.failure(error, "profile");
+            throw error;
+        }
+        this.#active = true;
+        this.#sequence = item.sequence;
+        let release;
+        try {
+            release = this.owner.ledger.reserve("operation-" + item.sequence, nodeLimits.operationBytes * 6 + nodeLimits.metadataBytes * 2);
+            let result;
+            let failure;
+            try {
+                result = await this.#perform(item);
+            }
+            catch (error) {
+                this.owner.context.signal.throwIfAborted();
+                this.owner.signal.throwIfAborted();
+                const actual = error instanceof FsOperationFailure ? error.reason : error;
+                const descriptor = error instanceof FsOperationFailure ? fsDescriptor(actual) : undefined;
+                if (!descriptor) {
+                    if (error instanceof FsOperationFailure)
+                        this.owner.failure(actual, "execution");
+                    throw actual;
+                }
+                failure = { present: true, value: actual };
+                result = response(item.sequence, "fsError", null, null, descriptor);
+            }
+            this.#pending = { sequence: item.sequence, response: result, failure, release };
+            release = undefined;
+            return result;
+        }
+        catch (error) {
+            this.owner.failure(error, "profile");
+            throw error;
+        }
+        finally {
+            this.#active = false;
+            release?.();
+        }
+    }
+    delivered(sequence) {
+        const pending = this.#pending;
+        if (!pending || sequence !== pending.sequence || this.#active) {
+            const error = new NodeProfileError("postcopy delivery");
+            this.owner.failure(error, "profile");
+            throw error;
+        }
+        this.#pending = undefined;
+        pending.response = undefined;
+        pending.failure = undefined;
+        pending.release();
+    }
+    retire() {
+        const pending = this.#pending;
+        this.#pending = undefined;
+        if (!pending)
+            return undefined;
+        const failure = pending.failure;
+        pending.response = undefined;
+        pending.failure = undefined;
+        pending.release();
+        return failure;
+    }
+}
+//# sourceMappingURL=host.js.map

package/dist/safe-bash/commands/node/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../src/commands/node/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAsG,MAAM,YAAY,CAAC;AAC9J,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEzE,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClH,IAAI,SAAS,GAAkB,KAAK,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,SAAS,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC/D,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAkB,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QACvF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO;gBAAE,SAAS;YACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAChI,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACjC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAChG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxK,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAiB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAChJ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1N,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AACD,SAAS,UAAU,CAAC,IAAY,IAAoB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,uCAAuC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvP,MAAM,kBAAkB;IAAwB;IAArB,YAAqB,MAAe;QAAf,WAAM,GAAN,MAAM,CAAS;IAAG,CAAC;CAAE;AACrE,SAAS,QAAQ,CAAC,QAAgB,EAAE,IAA8B,EAAE,QAAuB,IAAI,EAAE,WAAyC,IAAI,EAAE,QAA+B,IAAI,IAAsB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AACnQ,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC3E,IAAI,QAAQ,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAU,EAAE,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;YAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC3L,CAAC;IACD,IAAI,KAAK,GAAG,UAAU,CAAC,aAAa;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,iBAAiB,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAmB,CAAC;WACxJ,IAAI,CAAC,EAAE,KAAK,eAAe,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,MAAM,IAAI,QAAQ;WACpI,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAmB,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,MAAM,IAAI,QAAQ;WACzJ,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,MAAM,IAAI,QAAQ;WACrH,IAAI,CAAC,EAAE,KAAK,WAAW,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ;WAC/K,IAAI,CAAC,EAAE,KAAK,aAAa,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAmB,CAAC,IAAI,KAAK,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ;WAC1I,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAmB,CAAC,CAAC;IAClO,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,CAAC;AAC3D,CAAC;AAUD,MAAM,OAAO,QAAQ;IAaE;IAA2B;IAAiD;IAAsB;IAZvH,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,CAAiI;IACzI,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAG,KAAK,CAAC;IACrB,KAAK,GAAG,CAAC,CAAC;IACV,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,CAAC;IACZ,UAAU,GAAG,CAAC,CAAC;IACf,WAAW,CAAqB;IAChC,sBAAsB,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,CAAC,CAAC;IACX,YAAqB,KAAgB,EAAW,MAAsC,EAAW,GAAW,EAAW,SAAiB;QAAnH,UAAK,GAAL,KAAK,CAAW;QAAW,WAAM,GAAN,MAAM,CAAgC;QAAW,QAAG,GAAH,GAAG,CAAQ;QAAW,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAC5I,KAAK,CAAC,KAAc,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAW,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtC,QAAQ,KAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACpG,MAAM,CAAC,KAAc;QACnB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QACnI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACtE,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACjD,IAAI,OAA+B,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,QAAmC,CAAC;YACxC,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAAC,CAAC;YACpE,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YACtE,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK;oBAAE,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;gBACxF,IAAI,IAAgC,CAAC;gBACrC,IAAI,CAAC;oBAAC,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC3D,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM;gBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;gBAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;gBAC/G,IAAI,QAAQ,CAAC,UAAU,GAAG,OAAO,GAAG,MAAM;oBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBACtF,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;YAC/D,CAAC;YACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YAAC,OAAO,GAAG,SAAS,CAAC;YAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAC5H,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAC5F,IAAI,KAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,QAAQ,KAAK,IAAI;gBAAE,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;iBACpE,CAAC;gBACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,CAAC;oBAAC,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACtJ,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC,WAAW;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAChJ,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAChH,CAAC;gBAAS,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,GAAG,CAAQ,KAA2B,IAAoB,IAAI,CAAC;QAAC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC;IACpK,KAAK,CAAC,QAAQ,CAAC,IAAqB;QAClC,MAAM,IAAI,GAAG,GAAqB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnH,MAAM,GAAG,GAAG,CAAC,IAAY,EAAuC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,EAAE,KAAK,iBAAiB;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACvB,MAAM,cAAc,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC;YACvD,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YAC5E,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAU,CAAC;YAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC;YACnC,IAAI,MAAc,CAAC;YACnB,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;iBACxD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC;iBAC7E,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;iBACxH,IAAI,MAAM,KAAK,UAAU,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC9H,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,WAAW;gBAAE,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC;iBACvF,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC;iBACnF,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC;iBACnF,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,YAAY;gBAAE,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;;gBAC5G,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpG,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,KAAK,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;gBAAE,OAAO,IAAI,EAAE,CAAC;YACrE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAK,CAAC;YAC7B,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC9N,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAChH,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC5C,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;gBAAE,OAAO,IAAI,EAAE,CAAC;YACxJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;YACxK,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;gBAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YACzL,IAAI,KAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC9K,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,SAAS;oBAAE,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBACjI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC/B,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;oBAC9B,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;gBACtC,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1F,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;gBAChE,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrG,CAAC;oBAAS,CAAC;gBAAC,KAAK,GAAG,SAAS,CAAC;YAAC,CAAC;QAClC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAK,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC1C,IAAI,IAAI,GAAG,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;YACtB,IAAI,KAAK,GAA2B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtE,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAkB,EAAE,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,CAAC;oBACvJ,CAAC;gBAAC,KAAK,GAAG,SAAS,CAAC;YAAC,CAAC;YAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,IAAI,EAAE,CAAC;QACrG,IAAI,IAAI,GAAG,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,IAAc,EAAE,KAAa;QACvC,IAAI,MAA+B,CAAC;QACpC,IAAI,QAAgC,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAS,EAAE,GAAG,QAAQ,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,IAAI,KAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAC/B,MAAM,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC;YAC7B,MAAM,GAAG,KAAK,EAAE,cAAc,CAAC;YAC/B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBAAC,QAAQ,EAAE,CAAC;gBAAC,MAAM,QAAS,CAAC,KAAK,CAAC;YAAC,CAAC;YAC3D,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC,CAAC;YACjD,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBAChE,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC;YAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAAC,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QACzG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAc;QAC1B,IAAI,IAAqB,CAAC;QAC1B,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACtH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpD,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,cAAc,GAAG,CAAC,GAAG,UAAU,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YAChI,IAAI,MAAwB,CAAC;YAC7B,IAAI,OAA+B,CAAC;YACpC,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC3C,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC/E,MAAM,MAAM,GAAG,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC1E,MAAM,UAAU,GAAG,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1F,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,IAAI,KAAK,YAAY,kBAAkB;wBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;oBACjF,MAAM,MAAM,CAAC;gBACf,CAAC;gBACD,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC3C,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAChF,OAAO,GAAG,SAAS,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBAC9D,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;QAAC,CAAC;IAChD,CAAC;IACD,SAAS,CAAC,QAAgB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC9K,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM;QACJ,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7E,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/safe-bash/commands/node/index.d.ts

@@ -0,0 +1,15 @@
+import type { CommandDefinition } from "../../contracts/command.js";
+import type { VirtualShellPlugin } from "../../contracts/plugin.js";
+import { type NodeCommandOptions } from "./types.js";
+export { NODE_PROFILE, NodeProfileError, NodeUsageError, nodeLimits } from "./types.js";
+export type { NodeCommandOptions, NodeProviderCommandOptions, NodeSafeJsCommandOptions, NodeCompletion, NodeGrants, NodeGuestError, NodeHostRequest, NodeHostResponse, NodeHostServices, NodeObservation, NodeReason, NodeRetirement, NodeRuntimeProvider, NodeSelector, NodeSession, NodeSourceRequest } from "./types.js";
+export { createNodeWorkerProvider } from "./worker-provider.js";
+export { NODE_ENGINE_ABI } from "./worker-types.js";
+export type { NodeBridge, NodeEngineAdapter, NodeEngineInput, NodeEngineResult, NodeWorkerEvent, NodeWorkerProviderOptions } from "./worker-types.js";
+export type NodeCommandsOptions<Budget = unknown> = NodeCommandOptions<Budget> & {
+    readonly replace?: boolean;
+};
+export declare function createNodeCommands<Budget = unknown>(options: NodeCommandsOptions<Budget>): readonly CommandDefinition[];
+export declare function nodeCommands<Budget = unknown>(options: NodeCommandsOptions<Budget>): VirtualShellPlugin;
+export declare function createNodeCommand<Budget = unknown>(options: NodeCommandOptions<Budget>): CommandDefinition;
+//# sourceMappingURL=index.d.ts.map

package/dist/safe-bash/commands/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/node/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAkB,iBAAiB,EAAiB,MAAM,4BAA4B,CAAC;AACnG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAQpE,OAAO,EAA8D,KAAK,kBAAkB,EAAiH,MAAM,YAAY,CAAC;AAGhO,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxF,YAAY,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC5T,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEtJ,MAAM,MAAM,mBAAmB,CAAC,MAAM,GAAG,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG;IAC/E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAA;AAUD,wBAAgB,kBAAkB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,iBAAiB,EAAE,CAEvH;AAED,wBAAgB,YAAY,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,kBAAkB,CASvG;AAQD,wBAAgB,iBAAiB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAmH1G"}