@poe-platform/safe-bash 0.1.629 → 0.1.631

package/dist/safe-bash/commands/python/provisioning-runtime.js

@@ -0,0 +1,179 @@
+/** Pinned installer ABI; all package transport is serviced by the host, before user execution. */
+export async function installPythonPackages(supplied, start, request, maxTransferBytes) {
+    if (start.requirements.length === 0)
+        return;
+    const runtime = supplied;
+    if (runtime.version !== '314.0.6' || !runtime._api?.packageManager || !runtime._api.lockfile_packages || typeof runtime.loadPackage !== 'function' || typeof runtime.runPythonAsync !== 'function')
+        throw new Error('Python package installer ABI requires Pyodide 314.0.6');
+    const fetch = (url, expected) => {
+        const opened = request('package-open', start.session, url, expected);
+        try {
+            const bytes = new Uint8Array(opened.size);
+            for (let offset = 0; offset < bytes.length;) {
+                const chunk = request('package-read', start.session, opened.key, offset, Math.min(maxTransferBytes, 65536, bytes.length - offset));
+                if (!Array.isArray(chunk) || chunk.length === 0 || offset + chunk.length > bytes.length)
+                    throw new Error('Invalid Python package chunk');
+                bytes.set(chunk, offset);
+                offset += chunk.length;
+            }
+            return { bytes, headers: opened.headers };
+        }
+        finally {
+            request('package-close', start.session, opened.key);
+        }
+    };
+    // The pinned loader still owns dependency ordering, wheel extraction and dynamic linking.
+    // Replacing only its download operation prevents implicit Node/CDN network fallbacks.
+    runtime._api.packageManager.downloadPackage = async (metadata) => {
+        if (metadata.channel === runtime._api.packageManager.defaultChannel) {
+            const pkg = runtime._api.lockfile_packages[metadata.normalizedName];
+            if (!pkg)
+                throw new Error(`Missing matching Pyodide package: ${metadata.normalizedName}`);
+            return fetch(new URL(pkg.file_name, 'https://cdn.jsdelivr.net/pyodide/v314.0.6/full/').href, pkg.sha256).bytes;
+        }
+        return fetch(metadata.channel).bytes;
+    };
+    const loadPackages = async (names) => {
+        const errors = [];
+        await runtime.loadPackage(names, { messageCallback() { }, errorCallback(message) { errors.push(message); } });
+        if (errors.length)
+            throw new Error(errors.join('\n'));
+    };
+    const installedGlobals = [];
+    try {
+        await loadPackages(['micropip']);
+        runtime.globals.set('_safe_package_native', loadPackages);
+        installedGlobals.push('_safe_package_native');
+        runtime.globals.set('_safe_package_bytes', (url, hash) => fetch(url, hash).bytes);
+        installedGlobals.push('_safe_package_bytes');
+        runtime.globals.set('_safe_package_metadata', (url) => {
+            const result = fetch(url);
+            return JSON.stringify({ text: new TextDecoder().decode(result.bytes), headers: Object.fromEntries(result.headers.map(([name, value]) => [name.toLowerCase(), value])) });
+        });
+        installedGlobals.push('_safe_package_metadata');
+        runtime.globals.set('_safe_package_requirements_json', JSON.stringify(start.requirements));
+        installedGlobals.push('_safe_package_requirements_json');
+        await runtime.runPythonAsync(`
+import json as _safe_json
+import micropip as _safe_micropip
+from micropip._compat import compatibility_layer as _safe_compat
+from micropip.package_manager import PackageManager as _SafePackageManager
+from micropip.wheelinfo import WheelInfo as _SafeWheelInfo
+from micropip._utils import check_compatible as _safe_check_compatible
+from micropip._vendored.packaging.src.packaging.requirements import Requirement as _SafeRequirement, InvalidRequirement as _SafeInvalidRequirement
+from micropip._vendored.packaging.src.packaging.utils import canonicalize_name as _safe_name
+
+class _SafePackageCompatibility(_safe_compat):
+ @staticmethod
+ async def loadPackage(names):
+  return await _safe_package_native(names)
+ @staticmethod
+ async def fetch_bytes(url, kwargs):
+  return _safe_package_bytes(url).to_bytes()
+ @staticmethod
+ async def fetch_string_and_headers(url, kwargs):
+  value = _safe_json.loads(_safe_package_metadata(url))
+  return value['text'], value['headers']
+
+# Require index/URL digests before publishing wheel bytes to the host cache.
+# Local wheels are host-trusted inputs and receive a content digest on first read.
+async def _safe_wheel_fetch(self, url, kwargs, compat):
+ expected = self.sha256 if url == self.url else None
+ if url == self.metadata_url and isinstance(self.core_metadata, dict):
+  expected = self.core_metadata.get('sha256')
+ return _safe_package_bytes(url, expected).to_bytes()
+_SafeWheelInfo._fetch_bytes = _safe_wheel_fetch
+_safe_manager = _SafePackageManager(_SafePackageCompatibility)
+_safe_requirements = _safe_json.loads(_safe_package_requirements_json)
+# A persisted base wheel may be visited before a newly requested extra. Micropip
+# skips already locked names, so every occurrence must carry the requested extras.
+_safe_roots = []
+_safe_extras = {}
+for _safe_source in _safe_requirements:
+ try:
+  _safe_root = _SafeRequirement(_safe_source)
+  if _safe_root.name.endswith('.whl'):
+   raise _SafeInvalidRequirement(_safe_source)
+ except _SafeInvalidRequirement:
+  _safe_wheel = _SafeWheelInfo.from_url(_safe_source)
+  _safe_root = _SafeRequirement(_safe_wheel.name + ' @ ' + _safe_source)
+ _safe_roots.append(_safe_root)
+ if not _safe_root.marker or _safe_root.marker.evaluate({'extra': ''}):
+  # Named requirements may be skipped when already locked. Validate direct
+  # wheels even then, rather than letting an incompatible URL report success.
+  if _safe_root.url:
+   _safe_direct_wheel = _SafeWheelInfo.from_url(_safe_root.url)
+   _safe_check_compatible(_safe_direct_wheel.filename)
+   # Validate the actual archive and host-checked digest even if micropip's
+   # satisfied-name fast path will skip installing this explicit operand.
+   await _safe_direct_wheel.download({}, _SafePackageCompatibility)
+  _safe_extras.setdefault(_safe_name(_safe_root.name), set()).update(_safe_root.extras)
+for _safe_root in _safe_roots:
+ _safe_root.extras.update(_safe_extras.get(_safe_name(_safe_root.name), set()))
+await _safe_manager.install([str(root) for root in _safe_roots], deps=True)
+# Resolve selected extras from distribution metadata, including extras added to
+# an already satisfied transitive dependency. Micropip skips those names early.
+# Keep its installer and conflict policy; do not infer dependencies from imports.
+import importlib.metadata as _safe_metadata
+_safe_previous_pending = None
+while True:
+ _safe_distributions = [d for d in _safe_metadata.distributions() if d.metadata['Name']]
+ _safe_versions = {_safe_name(d.metadata['Name']): d.version for d in _safe_distributions}
+ while True:
+  _safe_changed = False
+  _safe_dependencies = []
+  for _safe_dist in _safe_distributions:
+   _safe_contexts = {''} | _safe_extras.get(_safe_name(_safe_dist.metadata['Name']), set())
+   for _safe_dep in _safe_dist.requires or []:
+    _safe_requirement = _SafeRequirement(_safe_dep)
+    if _safe_requirement.marker and not any(_safe_requirement.marker.evaluate({'extra': extra}) for extra in _safe_contexts):
+     continue
+    # The marker belongs to the requesting distribution's extra context, already
+    # evaluated above; a separate installer transaction must not reinterpret it.
+    _safe_requirement.marker = None
+    _safe_dependencies.append(_safe_requirement)
+    _safe_selected = _safe_extras.setdefault(_safe_name(_safe_requirement.name), set())
+    if not _safe_requirement.extras.issubset(_safe_selected):
+     _safe_selected.update(_safe_requirement.extras)
+     _safe_changed = True
+  if not _safe_changed:
+   break
+ _safe_pending = set()
+ for _safe_requirement in _safe_dependencies:
+  _safe_version = _safe_versions.get(_safe_name(_safe_requirement.name))
+  if _safe_version is None:
+   _safe_pending.add(str(_safe_requirement))
+  elif not _safe_requirement.specifier.contains(_safe_version, prereleases=True):
+   raise ValueError('Python package dependency conflict: ' + str(_safe_requirement))
+ if not _safe_pending:
+  break
+ if _safe_pending == _safe_previous_pending:
+  raise ValueError('Python package dependencies remain missing: ' + ', '.join(sorted(_safe_pending)))
+ _safe_previous_pending = _safe_pending
+ await _safe_manager.install(sorted(_safe_pending), deps=True)
+# Explicit roots also constrain the result: direct URLs can bypass micropip's
+# already-installed version check, including when another root pins that name.
+for _safe_root in _safe_roots:
+ if _safe_root.marker and not _safe_root.marker.evaluate({'extra': ''}):
+  continue
+ _safe_version = _safe_versions.get(_safe_name(_safe_root.name))
+ if _safe_version is None or not _safe_root.specifier.contains(_safe_version, prereleases=True):
+  raise ValueError('Python package version conflict: ' + str(_safe_root))
+ if _safe_root.url:
+  _safe_wheel = _SafeWheelInfo.from_url(_safe_root.url)
+  _safe_wheel_pin = _SafeRequirement(_safe_wheel.name + '==' + str(_safe_wheel.version))
+  if _safe_name(_safe_wheel.name) != _safe_name(_safe_root.name) or not _safe_wheel_pin.specifier.contains(_safe_version, prereleases=True):
+   raise ValueError('Python package wheel version conflict: ' + str(_safe_root))
+_safe_installed_json = _safe_json.dumps([name + '==' + version for name, version in sorted(_safe_versions.items())])
+`);
+        const pinned = JSON.parse(runtime.runPython('_safe_installed_json'));
+        request('package-commit', start.session, pinned);
+    }
+    finally {
+        runtime._api.packageManager.downloadPackage = async () => { throw new Error('Python package transport is only available during installation'); };
+        // These bridge callbacks are not an application Python networking capability.
+        for (const name of installedGlobals)
+            runtime.globals.delete(name);
+    }
+}
+//# sourceMappingURL=provisioning-runtime.js.map

package/dist/safe-bash/commands/python/provisioning-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning-runtime.js","sourceRoot":"","sources":["../../../src/commands/python/provisioning-runtime.ts"],"names":[],"mappings":"AAeA,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,QAA6B,EAC7B,KAAyB,EACzB,OAA6C,EAC7C,gBAAuB;IAEvB,IAAG,KAAK,CAAC,YAAY,CAAC,MAAM,KAAG,CAAC;QAAC,OAAO;IACxC,MAAM,OAAO,GAAC,QAA4B,CAAC;IAC3C,IAAG,OAAO,CAAC,OAAO,KAAG,SAAS,IAAE,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAE,OAAO,OAAO,CAAC,WAAW,KAAG,UAAU,IAAE,OAAO,OAAO,CAAC,cAAc,KAAG,UAAU;QAAC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC7P,MAAM,KAAK,GAAC,CAAC,GAAU,EAAC,QAAgB,EAAgE,EAAE;QACzG,MAAM,MAAM,GAAC,OAAO,CAAC,cAAc,EAAC,KAAK,CAAC,OAAO,EAAC,GAAG,EAAC,QAAQ,CAAyE,CAAC;QACxI,IAAI,CAAC;YACL,MAAM,KAAK,GAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,KAAI,IAAI,MAAM,GAAC,CAAC,EAAC,MAAM,GAAC,KAAK,CAAC,MAAM,GAAE,CAAC;gBACtC,MAAM,KAAK,GAAC,OAAO,CAAC,cAAc,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,CAAC,GAAG,EAAC,MAAM,EAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAAC,CAAa,CAAC;gBACrI,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,MAAM,KAAG,CAAC,IAAE,MAAM,GAAC,KAAK,CAAC,MAAM,GAAC,KAAK,CAAC,MAAM;oBAAC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC7H,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC;gBAAA,MAAM,IAAE,KAAK,CAAC,MAAM,CAAC;YAC9C,CAAC;YACD,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YAAA,OAAO,CAAC,eAAe,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAA,CAAC;IAC/D,CAAC,CAAC;IACF,0FAA0F;IAC1F,sFAAsF;IACtF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,GAAC,KAAK,EAAC,QAAQ,EAAA,EAAE;QAC3D,IAAG,QAAQ,CAAC,OAAO,KAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,EAAC,CAAC;YACjE,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YAClE,IAAG,CAAC,GAAG;gBAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;YACxF,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,EAAC,iDAAiD,CAAC,CAAC,IAAI,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QAC9G,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,YAAY,GAAC,KAAK,EAAC,KAAc,EAAC,EAAE;QACzC,MAAM,MAAM,GAAU,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAC,EAAC,eAAe,KAAG,CAAC,EAAC,aAAa,CAAC,OAAO,IAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;QACrG,IAAG,MAAM,CAAC,MAAM;YAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,gBAAgB,GAAU,EAAE,CAAC;IACnC,IAAI,CAAC;QACJ,MAAM,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAC,YAAY,CAAC,CAAC;QACzD,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC9C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAC,CAAC,GAAU,EAAC,IAAY,EAAC,EAAE,CAAA,KAAK,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5F,gBAAgB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAC,CAAC,GAAU,EAAC,EAAE;YAC1D,MAAM,MAAM,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,KAAK,CAAC,EAAC,EAAE,CAAA,CAAC,IAAI,CAAC,WAAW,EAAE,EAAC,KAAK,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;QACzL,CAAC,CAAC,CAAC;QACH,gBAAgB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1F,gBAAgB,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,cAAc,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgH9B,CAAC,CAAC;QACD,MAAM,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAa,CAAC;QAC/E,OAAO,CAAC,gBAAgB,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;IAChD,CAAC;YAAO,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,GAAC,KAAK,IAAE,EAAE,GAAC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAA,CAAC,CAAC;QAC1I,8EAA8E;QAC9E,KAAI,MAAM,IAAI,IAAI,gBAAgB;YAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;AACF,CAAC"}

package/dist/safe-bash/commands/python/provisioning.d.ts

@@ -0,0 +1,49 @@
+import type { FileSystem } from '../../contracts/filesystem.js';
+import type { HttpTransport, NetworkAuthorizer } from '../network/types.js';
+export interface PythonPackageCache {
+    get(key: string): Promise<Uint8Array | undefined>;
+    set(key: string, bytes: Uint8Array): Promise<void>;
+}
+export interface PythonPackageProgress {
+    readonly phase: 'download' | 'cached' | 'installed';
+    readonly url?: string;
+    readonly bytes?: number;
+    readonly totalBytes?: number;
+}
+export interface PythonPackageOptions {
+    readonly requirements?: readonly string[];
+    readonly requirementFiles?: readonly string[];
+    readonly profile?: 'documents';
+    readonly offline?: boolean;
+    readonly transport?: HttpTransport;
+    readonly authorize?: NetworkAuthorizer;
+    readonly cache?: PythonPackageCache;
+    /** Canonical filesystem directory, scoped to this package environment. */
+    readonly cacheDirectory?: string;
+    readonly maxDownloadBytes?: number;
+    /** Byte budget for the built-in memory cache; external cache retention belongs to its owner. */
+    readonly maxCacheBytes?: number;
+    readonly onProgress?: (event: PythonPackageProgress) => void;
+}
+export interface PythonPackageStart {
+    readonly session: string;
+    readonly requirements: readonly string[];
+    readonly offline: boolean;
+}
+export interface PythonPackageContext {
+    readonly fs: FileSystem;
+    readonly cwd: string;
+    readonly signal: AbortSignal;
+}
+export declare const pythonDocumentPackages: readonly string[];
+/** Trusted host cache; content is rehashed on every read. No runtime or network work at construction. */
+export declare function createPythonPackageEnvironment(options?: PythonPackageOptions): {
+    prepare: (context: PythonPackageContext & {
+        requirements?: readonly string[];
+        requirementFiles?: readonly string[];
+        offline?: boolean;
+    }) => Promise<PythonPackageStart>;
+    dispatch: (op: string, args: unknown[], _context: PythonPackageContext) => Promise<unknown>;
+    finish(start: PythonPackageStart): void;
+};
+//# sourceMappingURL=provisioning.d.ts.map

package/dist/safe-bash/commands/python/provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.d.ts","sourceRoot":"","sources":["../../../src/commands/python/provisioning.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,MAAM,WAAW,kBAAkB;IAClC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AACD,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,gGAAgG;IAChG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAC7D;AACD,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AACrI,MAAM,WAAW,oBAAoB;IAAG,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE;AACrH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAGlD,CAAC;AA6BH,yGAAyG;AACzG,wBAAgB,8BAA8B,CAAC,OAAO,GAAE,oBAAyB;uBA2BhD,oBAAoB,GAAG;QAAC,YAAY,CAAC,EAAC,SAAS,MAAM,EAAE,CAAC;QAAA,gBAAgB,CAAC,EAAC,SAAS,MAAM,EAAE,CAAC;QAAA,OAAO,CAAC,EAAC,OAAO,CAAA;KAAC,KAAG,OAAO,CAAC,kBAAkB,CAAC;mBAmChJ,MAAM,QAAM,OAAO,EAAE,YAAU,oBAAoB,KAAE,OAAO,CAAC,OAAO,CAAC;kBA8G1D,kBAAkB;EACxD"}

package/dist/safe-bash/commands/python/provisioning.js

@@ -0,0 +1,320 @@
+import { sha256 } from '@noble/hashes/sha2.js';
+import { resolvePath as resolve, dirname } from '../../contracts/path.js';
+export const pythonDocumentPackages = Object.freeze([
+    'lxml==6.0.2', 'pillow==12.2.0', 'python-docx==1.2.0', 'openpyxl==3.1.5', 'XlsxWriter==3.2.9',
+    'pypdf==6.18.1', 'fpdf2==2.8.8', 'fonttools==4.65.0', 'defusedxml==0.7.1', 'et-xmlfile==2.0.0', 'typing-extensions==4.16.0',
+]);
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const runtimeKey = 'pyodide-314.0.6-cp314-emscripten-wasm32-v1';
+function digest(value) { return Array.from(sha256(value), byte => byte.toString(16).padStart(2, '0')).join(''); }
+function failure(message) { return Object.assign(new Error(message), { code: 'EPACKAGE' }); }
+function missing(error) { return typeof error === 'object' && error !== null && 'code' in error && error.code === 'ENOENT'; }
+function normalizeRequirement(value, cwd) {
+    const requirement = value.trim();
+    if (!requirement || requirement.startsWith('-'))
+        throw failure(`Unsupported requirement: ${value}`);
+    if (requirement.endsWith('.whl') && !requirement.includes('://'))
+        return 'file://' + resolve(cwd, requirement).split('/').map(encodeURIComponent).join('/');
+    return requirement;
+}
+function checkSession(session) {
+    session.signal.throwIfAborted();
+    if (session.closed)
+        throw failure('Python package session is closed');
+}
+/** Trusted host cache; content is rehashed on every read. No runtime or network work at construction. */
+export function createPythonPackageEnvironment(options = {}) {
+    if (options.cache && options.cacheDirectory)
+        throw new TypeError('Choose package cache or cacheDirectory, not both');
+    if (options.profile !== undefined && options.profile !== 'documents')
+        throw new TypeError('Unknown Python package profile');
+    const maxBytes = options.maxDownloadBytes ?? 64 * 1024 * 1024;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)
+        throw new RangeError('maxDownloadBytes must be a positive integer');
+    const maxCacheBytes = options.maxCacheBytes ?? 128 * 1024 * 1024;
+    if (!Number.isSafeInteger(maxCacheBytes) || maxCacheBytes < 1)
+        throw new RangeError('maxCacheBytes must be a positive integer');
+    const memory = new Map();
+    let memoryBytes = 0;
+    const defaultCache = {
+        async get(key) { return memory.get(key)?.slice(); },
+        async set(key, value) {
+            const manifestKey = runtimeKey + '-environment';
+            if (key === manifestKey && value.length > maxCacheBytes)
+                throw failure('Python package manifest exceeds maxCacheBytes');
+            const previous = memory.get(key);
+            if (previous) {
+                memoryBytes -= previous.length;
+                memory.delete(key);
+            }
+            if (value.length > maxCacheBytes)
+                return;
+            while (memory.size && (memoryBytes + value.length > maxCacheBytes || memory.size >= 1024)) {
+                const oldest = Array.from(memory.keys()).find(entry => entry !== manifestKey);
+                if (oldest === undefined)
+                    return;
+                memoryBytes -= memory.get(oldest).length;
+                memory.delete(oldest);
+            }
+            memory.set(key, value.slice());
+            memoryBytes += value.length;
+        },
+    };
+    const sessions = new Map();
+    let counter = 0;
+    let committing = Promise.resolve();
+    async function prepare(context) {
+        context.signal.throwIfAborted();
+        const directory = options.cacheDirectory === undefined ? undefined : resolve(context.cwd, options.cacheDirectory, runtimeKey);
+        const cache = options.cache ?? (directory === undefined ? defaultCache : {
+            async get(key) { try {
+                return await context.fs.readFile(resolve(directory, key), { signal: context.signal, maxBytes });
+            }
+            catch (error) {
+                if (missing(error))
+                    return undefined;
+                throw error;
+            } },
+            async set(key, bytes) { await context.fs.mkdir(directory, { recursive: true, signal: context.signal }); await context.fs.writeFile(resolve(directory, key), bytes, { signal: context.signal }); },
+        });
+        const stored = await cache.get(runtimeKey + '-environment');
+        context.signal.throwIfAborted();
+        if (stored && stored.length > maxBytes)
+            throw failure('Python package manifest exceeds maxDownloadBytes');
+        const manifest = stored === undefined ? '' : decoder.decode(stored);
+        let previous;
+        try {
+            previous = stored === undefined ? [] : JSON.parse(manifest);
+        }
+        catch {
+            throw failure('Invalid Python package environment manifest');
+        }
+        if (!Array.isArray(previous) || previous.some(value => typeof value !== 'string'))
+            throw failure('Invalid Python package environment manifest');
+        const requirements = [...previous, ...(options.profile === 'documents' ? pythonDocumentPackages : []), ...(options.requirements ?? []), ...(context.requirements ?? [])].map(value => normalizeRequirement(value, context.cwd));
+        for (const file of [...options.requirementFiles ?? [], ...context.requirementFiles ?? []]) {
+            const path = resolve(context.cwd, file);
+            let source;
+            try {
+                source = decoder.decode(await context.fs.readFile(path, { signal: context.signal, maxBytes: 1024 * 1024 }));
+            }
+            catch (error) {
+                context.signal.throwIfAborted();
+                throw failure(`Cannot read Python requirements ${path}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            for (const line of source.split('\n')) {
+                const text = line.trim();
+                if (!text || text.startsWith('#'))
+                    continue;
+                if (text.endsWith('\\') || text.startsWith('-'))
+                    throw failure(`Unsupported requirements option or continuation in ${path}: ${text}`);
+                // Hash fragments on direct wheel URLs remain part of the requirement.
+                const comment = text.indexOf(' #');
+                requirements.push(normalizeRequirement(comment < 0 ? text : text.slice(0, comment), dirname(path)));
+            }
+        }
+        context.signal.throwIfAborted();
+        const session = String(++counter);
+        const unique = [...new Set(requirements)];
+        const aborted = () => { const current = sessions.get(session); if (current) {
+            current.closed = true;
+            current.opened.clear();
+        } sessions.delete(session); };
+        sessions.set(session, { ...context, cache, offline: context.offline ?? options.offline ?? false, requirements: unique, opened: new Map(), opening: false, closed: false, manifest, aborted });
+        context.signal.addEventListener('abort', aborted, { once: true });
+        return { session, requirements: unique, offline: context.offline ?? options.offline ?? false };
+    }
+    async function dispatch(op, args, _context) {
+        _context.signal.throwIfAborted();
+        const session = sessions.get(String(args[0]));
+        if (!session)
+            throw failure('Python package session is closed');
+        checkSession(session);
+        if (op === 'package-commit') {
+            const pinned = args[1];
+            if (!Array.isArray(pinned) || pinned.some(value => typeof value !== 'string'))
+                throw failure('Invalid installed package manifest');
+            // Pins supplement the original sources (including canonical local wheels).
+            const merged = [...new Set([...session.requirements, ...pinned])];
+            const manifestBytes = encoder.encode(JSON.stringify(merged));
+            if (manifestBytes.length > maxBytes)
+                throw failure('Python package manifest exceeds maxDownloadBytes');
+            const commit = committing.then(async () => {
+                checkSession(session);
+                const current = await session.cache.get(runtimeKey + '-environment');
+                checkSession(session);
+                if (current && current.length > maxBytes)
+                    throw failure('Python package manifest exceeds maxDownloadBytes');
+                if ((current === undefined ? '' : decoder.decode(current)) !== session.manifest)
+                    throw failure('Python package environment changed during installation; retry the command');
+                await session.cache.set(runtimeKey + '-environment', manifestBytes);
+                checkSession(session);
+            });
+            committing = commit.catch(() => { });
+            await commit;
+            options.onProgress?.({ phase: 'installed' });
+            return null;
+        }
+        if (op === 'package-read') {
+            const bytes = session.opened.get(String(args[1]));
+            const offset = args[2];
+            const length = args[3];
+            if (!bytes || !Number.isSafeInteger(offset) || !Number.isSafeInteger(length) || offset < 0 || length < 1 || length > 65536)
+                throw failure('Invalid package chunk request');
+            return Array.from(bytes.subarray(offset, offset + length));
+        }
+        if (op === 'package-close') {
+            session.opened.delete(String(args[1]));
+            return null;
+        }
+        if (op !== 'package-open' || typeof args[1] !== 'string')
+            throw failure('Invalid package operation');
+        if (session.opening)
+            throw failure('Package download already in progress');
+        session.opening = true;
+        session.opened.clear();
+        try {
+            const url = args[1];
+            const expected = args[2];
+            if (expected !== undefined && expected !== null && (typeof expected !== 'string' || expected.length !== 64 || Array.from(expected).some(c => !'0123456789abcdef'.includes(c))))
+                throw failure('Invalid SHA-256 package integrity value');
+            const address = runtimeKey + '-url-' + digest(encoder.encode(url));
+            const metadata = await session.cache.get(address);
+            checkSession(session);
+            let bytes;
+            let headers = [];
+            if (metadata) {
+                if (metadata.length > maxBytes)
+                    throw failure('Python package cache metadata exceeds maxDownloadBytes');
+                let record;
+                try {
+                    record = JSON.parse(decoder.decode(metadata));
+                }
+                catch {
+                    throw failure(`Invalid package cache metadata: ${url}`);
+                }
+                if (typeof record !== 'object' || record === null || typeof record.digest !== 'string' || record.digest.length !== 64 || Array.from(record.digest).some(char => !'0123456789abcdef'.includes(char)) || !Array.isArray(record.headers) || record.headers.some(pair => !Array.isArray(pair) || pair.length !== 2 || pair.some(value => typeof value !== 'string')))
+                    throw failure(`Invalid package cache metadata: ${url}`);
+                bytes = await session.cache.get(runtimeKey + '-sha256-' + record.digest);
+                headers = record.headers;
+                checkSession(session);
+                if (bytes && bytes.length > maxBytes)
+                    throw failure('Cached package exceeds maxDownloadBytes');
+                // Cache implementations may lend mutable buffers; retain the bytes we authenticate.
+                if (bytes)
+                    bytes = Uint8Array.from(bytes);
+                if (bytes && digest(bytes) !== record.digest)
+                    throw failure(`Package cache integrity mismatch: ${url}`);
+                if (bytes)
+                    options.onProgress?.({ phase: 'cached', url, bytes: bytes.length });
+            }
+            if (!bytes) {
+                if (url.startsWith('file:') || url.startsWith('emfs:')) {
+                    const path = new URL(url);
+                    if (path.host && path.host !== 'localhost')
+                        throw failure('Local wheels must use the canonical filesystem');
+                    try {
+                        bytes = await session.fs.readFile(decodeURIComponent(path.pathname), { signal: session.signal, maxBytes });
+                    }
+                    catch (error) {
+                        checkSession(session);
+                        throw failure(`Cannot read canonical Python wheel ${path.pathname}: ${error instanceof Error ? error.message : String(error)}`);
+                    }
+                }
+                else {
+                    if (session.offline)
+                        throw failure(`Offline package cache miss: ${url}`);
+                    if (!options.transport || !options.authorize)
+                        throw failure('Python package download requires configured transport and authorization');
+                    let current = new URL(url);
+                    let redirectFrom;
+                    for (let redirect = 0;; redirect++) {
+                        if (current.protocol !== 'https:' && current.protocol !== 'http:')
+                            throw failure(`Unsupported package transport protocol: ${current.protocol}`);
+                        if (current.username || current.password)
+                            throw failure('Package URLs with credentials are unsupported');
+                        let denyPrivate = false;
+                        const allowed = await options.authorize({ url: current.href, method: 'GET', attempt: 0, signal: session.signal, ...redirectFrom === undefined ? {} : { redirectFrom }, requirePrivateNetworkDeny() { denyPrivate = true; } });
+                        checkSession(session);
+                        if (!allowed)
+                            throw failure(`Python package download authorization denied: ${current.href}`);
+                        if (denyPrivate && !options.transport.supportsPrivateNetworkDeny)
+                            throw failure('Package transport cannot enforce private network denial');
+                        checkSession(session);
+                        const response = await options.transport({ url: current.href, method: 'GET', headers: [['accept', 'application/vnd.pypi.simple.v1+json, application/json;q=0.9, */*;q=0.1']], signal: session.signal, ...denyPrivate ? { denyPrivateNetworks: true } : {} });
+                        try {
+                            checkSession(session);
+                            if ([301, 302, 303, 307, 308].includes(response.status)) {
+                                if (redirect >= 5)
+                                    throw failure('Too many package redirects');
+                                const location = response.headers.find(([key]) => key.toLowerCase() === 'location')?.[1];
+                                if (!location)
+                                    throw failure('Package redirect has no location');
+                                redirectFrom = current.href;
+                                current = new URL(location, current);
+                                continue;
+                            }
+                            if (response.status < 200 || response.status >= 300)
+                                throw failure(`Package download failed: HTTP ${response.status} ${current.href}`);
+                            headers = response.headers;
+                            const encoding = headers.find(([key]) => key.toLowerCase() === 'content-encoding')?.[1].trim().toLowerCase();
+                            const length = headers.find(([key]) => key.toLowerCase() === 'content-length')?.[1];
+                            const total = length === undefined || (encoding !== undefined && encoding !== 'identity') ? undefined : Number(length);
+                            if (total !== undefined && Number.isFinite(total) && total > maxBytes)
+                                throw failure('Package download exceeds maxDownloadBytes');
+                            const chunks = [];
+                            let count = 0;
+                            for await (const chunk of response.body) {
+                                checkSession(session);
+                                if (chunk.length === 0)
+                                    continue;
+                                count += chunk.length;
+                                if (count > maxBytes)
+                                    throw failure('Package download exceeds maxDownloadBytes');
+                                chunks.push(Uint8Array.from(chunk));
+                                options.onProgress?.({ phase: 'download', url, bytes: count, ...typeof total === 'number' && Number.isSafeInteger(total) ? { totalBytes: total } : {} });
+                            }
+                            bytes = new Uint8Array(count);
+                            let offset = 0;
+                            for (const chunk of chunks) {
+                                bytes.set(chunk, offset);
+                                offset += chunk.length;
+                            }
+                            break;
+                        }
+                        finally {
+                            await response.dispose();
+                        }
+                    }
+                }
+                checkSession(session);
+                if (expected && digest(bytes) !== expected)
+                    throw failure(`Package integrity mismatch: ${url}`);
+                const hash = digest(bytes);
+                const metadataBytes = encoder.encode(JSON.stringify({ digest: hash, headers }));
+                if (metadataBytes.length > maxBytes)
+                    throw failure('Python package cache metadata exceeds maxDownloadBytes');
+                await session.cache.set(runtimeKey + '-sha256-' + hash, Uint8Array.from(bytes));
+                checkSession(session);
+                await session.cache.set(address, metadataBytes);
+                checkSession(session);
+            }
+            checkSession(session);
+            if (expected && digest(bytes) !== expected)
+                throw failure(`Package integrity mismatch: ${url}`);
+            const key = digest(bytes);
+            session.opened.set(key, bytes);
+            return { key, size: bytes.length, headers };
+        }
+        finally {
+            session.opening = false;
+        }
+    }
+    return { prepare, dispatch, finish(start) { const session = sessions.get(start.session); if (session) {
+            session.closed = true;
+            session.opened.clear();
+            session.signal.removeEventListener('abort', session.aborted);
+        } sessions.delete(start.session); } };
+}
+//# sourceMappingURL=provisioning.js.map

package/dist/safe-bash/commands/python/provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../../../src/commands/python/provisioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA8B1E,MAAM,CAAC,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACtE,aAAa,EAAC,gBAAgB,EAAC,oBAAoB,EAAC,iBAAiB,EAAC,mBAAmB;IACzF,eAAe,EAAC,cAAc,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,2BAA2B;CACtH,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,UAAU,GAAG,4CAA4C,CAAC;AAChE,SAAS,MAAM,CAAC,KAAiB,IAAY,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjI,SAAS,OAAO,CAAC,OAAe,IAA2B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAC,EAAC,IAAI,EAAC,UAAU,EAAC,CAAC,CAAC,CAAC,CAAC;AACxH,SAAS,OAAO,CAAC,KAAc,IAAa,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;AAC/I,SAAS,oBAAoB,CAAC,KAAa,EAAE,GAAW;IACvD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;IACpG,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,GAAG,OAAO,CAAC,GAAG,EAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3J,OAAO,WAAW,CAAC;AACpB,CAAC;AAYD,SAAS,YAAY,CAAC,OAAgB;IACrC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAChC,IAAG,OAAO,CAAC,MAAM;QAAC,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACrE,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,8BAA8B,CAAC,UAAgC,EAAE;IAChF,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACrH,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC5H,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,YAAY,GAAuB;QACxC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAE,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAC,KAAK;YAClB,MAAM,WAAW,GAAC,UAAU,GAAC,cAAc,CAAC;YAC5C,IAAG,GAAG,KAAG,WAAW,IAAI,KAAK,CAAC,MAAM,GAAC,aAAa;gBAAC,MAAM,OAAO,CAAC,+CAA+C,CAAC,CAAC;YAClH,MAAM,QAAQ,GAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAA,IAAG,QAAQ,EAAC,CAAC;gBAAA,WAAW,IAAE,QAAQ,CAAC,MAAM,CAAC;gBAAA,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAA,CAAC;YAC7F,IAAG,KAAK,CAAC,MAAM,GAAC,aAAa;gBAAC,OAAO;YACrC,OAAM,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,GAAC,KAAK,CAAC,MAAM,GAAC,aAAa,IAAI,MAAM,CAAC,IAAI,IAAE,IAAI,CAAC,EAAC,CAAC;gBACnF,MAAM,MAAM,GAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,KAAG,WAAW,CAAC,CAAC;gBACxE,IAAG,MAAM,KAAG,SAAS;oBAAC,OAAO;gBAC7B,WAAW,IAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,MAAM,CAAC;gBAAA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAAA,WAAW,IAAE,KAAK,CAAC,MAAM,CAAC;QACzD,CAAC;KACD,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACnC,KAAK,UAAU,OAAO,CAAC,OAAsH;QAC5I,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAC,OAAO,CAAC,cAAc,EAAC,UAAU,CAAC,CAAC;QAC5H,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACxE,KAAK,CAAC,GAAG,CAAC,GAAW,IAAI,IAAI,CAAC;gBAAC,OAAO,MAAM,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAC,GAAG,CAAC,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAM,KAAK,EAAE,CAAC;gBAAC,IAAG,OAAO,CAAC,KAAK,CAAC;oBAAC,OAAO,SAAS,CAAC;gBAAA,MAAM,KAAK,CAAC;YAAC,CAAC,CAAC,CAAC;YAC9L,KAAK,CAAC,GAAG,CAAC,GAAW,EAAC,KAAgB,IAAI,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC,CAAA,MAAM,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAC,GAAG,CAAC,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAC;SACtM,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,GAAC,cAAc,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAC,QAAQ;YAAC,MAAM,OAAO,CAAC,kDAAkD,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,CAAC,6CAA6C,CAAC,CAAC;QAAC,CAAC;QAC5I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,CAAC;YAAE,MAAM,OAAO,CAAC,6CAA6C,CAAC,CAAC;QAC5I,MAAM,YAAY,GAAG,CAAC,GAAG,QAAoB,EAAC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAE,EAAE,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,oBAAoB,CAAC,KAAK,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAChO,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,gBAAgB,IAAE,EAAE,EAAC,GAAG,OAAO,CAAC,gBAAgB,IAAE,EAAE,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;YACvC,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,GAAC,IAAI,EAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAM,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAAA,MAAM,OAAO,CAAC,mCAAmC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAClR,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAC,SAAS;gBACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,OAAO,CAAC,sDAAsD,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtI,sEAAsE;gBACtE,MAAM,OAAO,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACjC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,GAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,CAAC,EAAC,OAAO,CAAC,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7F,CAAC;QACF,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,MAAM,OAAO,GAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,GAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QACxC,MAAM,OAAO,GAAC,GAAE,EAAE,GAAC,MAAM,OAAO,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,OAAO,EAAC,CAAC;YAAA,OAAO,CAAC,MAAM,GAAC,IAAI,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC,CAAA,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC;QAC1I,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAC,EAAC,GAAG,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,IAAE,OAAO,CAAC,OAAO,IAAE,KAAK,EAAC,YAAY,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,GAAG,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC;QAC1K,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAC7D,OAAO,EAAC,OAAO,EAAC,YAAY,EAAC,MAAM,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,IAAE,OAAO,CAAC,OAAO,IAAE,KAAK,EAAC,CAAC;IACtF,CAAC;IACD,KAAK,UAAU,QAAQ,CAAC,EAAS,EAAC,IAAc,EAAC,QAA6B;QAC7E,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACjC,MAAM,OAAO,GAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAG,CAAC,OAAO;YAAC,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC9D,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,IAAG,EAAE,KAAG,gBAAgB,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,CAAC;gBAAC,MAAM,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAC3H,2EAA2E;YAC3E,MAAM,MAAM,GAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,EAAC,GAAG,MAAkB,CAAC,CAAC,CAAC,CAAC;YAC3E,MAAM,aAAa,GAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,IAAG,aAAa,CAAC,MAAM,GAAC,QAAQ;gBAAC,MAAM,OAAO,CAAC,kDAAkD,CAAC,CAAC;YACnG,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAE,EAAE;gBACvC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAC,cAAc,CAAC,CAAC;gBACnE,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAC,QAAQ;oBAAC,MAAM,OAAO,CAAC,kDAAkD,CAAC,CAAC;gBACxG,IAAI,CAAC,OAAO,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAG,OAAO,CAAC,QAAQ;oBAAE,MAAM,OAAO,CAAC,2EAA2E,CAAC,CAAC;gBACpK,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAC,cAAc,EAAC,aAAa,CAAC,CAAC;gBACjE,YAAY,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,UAAU,GAAC,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;YAChC,MAAM,MAAM,CAAC;YACb,OAAO,CAAC,UAAU,EAAE,CAAC,EAAC,KAAK,EAAC,WAAW,EAAC,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAG,EAAE,KAAG,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,GAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAG,CAAC,KAAK,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAG,MAAiB,GAAC,CAAC,IAAG,MAAiB,GAAC,CAAC,IAAG,MAAiB,GAAC,KAAK;gBAAC,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;YAC7L,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAgB,EAAE,MAAiB,GAAE,MAAiB,CAAC,CAAC,CAAC;QAC3F,CAAC;QACD,IAAG,EAAE,KAAG,eAAe,EAAE,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAC9E,IAAG,EAAE,KAAG,cAAc,IAAE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAG,QAAQ;YAAC,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAC7F,IAAG,OAAO,CAAC,OAAO;YAAC,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACzE,OAAO,CAAC,OAAO,GAAC,IAAI,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC;YACL,MAAM,GAAG,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM,QAAQ,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzC,IAAG,QAAQ,KAAG,SAAS,IAAI,QAAQ,KAAG,IAAI,IAAI,CAAC,OAAO,QAAQ,KAAG,QAAQ,IAAE,QAAQ,CAAC,MAAM,KAAG,EAAE,IAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;YACzN,MAAM,OAAO,GAAC,UAAU,GAAC,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAC,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,KAA0B,CAAC;YAAA,IAAI,OAAO,GAAqC,EAAE,CAAC;YAClF,IAAG,QAAQ,EAAC,CAAC;gBACZ,IAAG,QAAQ,CAAC,MAAM,GAAC,QAAQ;oBAAC,MAAM,OAAO,CAAC,wDAAwD,CAAC,CAAC;gBACpG,IAAI,MAAmE,CAAC;gBACxE,IAAI,CAAC;oBAAC,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAkB,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,OAAO,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACxI,IAAG,OAAO,MAAM,KAAG,QAAQ,IAAE,MAAM,KAAG,IAAI,IAAE,OAAO,MAAM,CAAC,MAAM,KAAG,QAAQ,IAAE,MAAM,CAAC,MAAM,CAAC,MAAM,KAAG,EAAE,IAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,MAAM,KAAG,CAAC,IAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,CAAC,CAAC;oBAAC,MAAM,OAAO,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;gBACtX,KAAK,GAAC,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAC,UAAU,GAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAAA,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC1F,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAG,KAAK,IAAI,KAAK,CAAC,MAAM,GAAC,QAAQ;oBAAC,MAAM,OAAO,CAAC,yCAAyC,CAAC,CAAC;gBAC3F,oFAAoF;gBACpF,IAAG,KAAK;oBAAC,KAAK,GAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAG,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,MAAM;oBAAC,MAAM,OAAO,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;gBACpG,IAAG,KAAK;oBAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAC,KAAK,EAAC,QAAQ,EAAC,GAAG,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC;YACxE,CAAC;YACD,IAAG,CAAC,KAAK,EAAC,CAAC;gBACV,IAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAC,CAAC;oBACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC1B,IAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAG,WAAW;wBAAC,MAAM,OAAO,CAAC,gDAAgD,CAAC,CAAC;oBACxG,IAAI,CAAC;wBAAC,KAAK,GAAC,MAAM,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,OAAM,KAAK,EAAE,CAAC;wBAAC,YAAY,CAAC,OAAO,CAAC,CAAC;wBAAA,MAAM,OAAO,CAAC,sCAAsC,IAAI,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBACrR,CAAC;qBAAI,CAAC;oBACL,IAAG,OAAO,CAAC,OAAO;wBAAC,MAAM,OAAO,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;oBACvE,IAAG,CAAC,OAAO,CAAC,SAAS,IAAE,CAAC,OAAO,CAAC,SAAS;wBAAC,MAAM,OAAO,CAAC,yEAAyE,CAAC,CAAC;oBACnI,IAAI,OAAO,GAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAA,IAAI,YAA6B,CAAC;oBAC3D,KAAI,IAAI,QAAQ,GAAC,CAAC,GAAE,QAAQ,EAAE,EAAC,CAAC;wBAC/B,IAAG,OAAO,CAAC,QAAQ,KAAG,QAAQ,IAAE,OAAO,CAAC,QAAQ,KAAG,OAAO;4BAAC,MAAM,OAAO,CAAC,2CAA2C,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;wBACxI,IAAG,OAAO,CAAC,QAAQ,IAAE,OAAO,CAAC,QAAQ;4BAAC,MAAM,OAAO,CAAC,+CAA+C,CAAC,CAAC;wBACrG,IAAI,WAAW,GAAC,KAAK,CAAC;wBACtB,MAAM,OAAO,GAAC,MAAM,OAAO,CAAC,SAAS,CAAC,EAAC,GAAG,EAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,GAAG,YAAY,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,EAAC,yBAAyB,KAAG,WAAW,GAAC,IAAI,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;wBACpM,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,IAAG,CAAC,OAAO;4BAAC,MAAM,OAAO,CAAC,iDAAiD,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;wBAC3F,IAAG,WAAW,IAAE,CAAC,OAAO,CAAC,SAAS,CAAC,0BAA0B;4BAAC,MAAM,OAAO,CAAC,yDAAyD,CAAC,CAAC;wBACvI,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,MAAM,QAAQ,GAAC,MAAM,OAAO,CAAC,SAAS,CAAC,EAAC,GAAG,EAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,CAAC,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,GAAG,WAAW,CAAA,CAAC,CAAA,EAAC,mBAAmB,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,EAAC,CAAC,CAAC;wBACzO,IAAG,CAAC;4BACH,YAAY,CAAC,OAAO,CAAC,CAAC;4BACtB,IAAG,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,CAAC;gCACnD,IAAG,QAAQ,IAAE,CAAC;oCAAC,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;gCAC3D,MAAM,QAAQ,GAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAC,EAAE,CAAA,GAAG,CAAC,WAAW,EAAE,KAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gCAAA,IAAG,CAAC,QAAQ;oCAAC,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;gCAClJ,YAAY,GAAC,OAAO,CAAC,IAAI,CAAC;gCAAA,OAAO,GAAC,IAAI,GAAG,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC;gCAAA,SAAS;4BACtE,CAAC;4BACD,IAAG,QAAQ,CAAC,MAAM,GAAC,GAAG,IAAE,QAAQ,CAAC,MAAM,IAAE,GAAG;gCAAC,MAAM,OAAO,CAAC,iCAAiC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;4BAC/H,OAAO,GAAC,QAAQ,CAAC,OAAO,CAAC;4BACzB,MAAM,QAAQ,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAC,EAAE,CAAA,GAAG,CAAC,WAAW,EAAE,KAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;4BACvG,MAAM,MAAM,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAC,EAAE,CAAA,GAAG,CAAC,WAAW,EAAE,KAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;4BAAA,MAAM,KAAK,GAAC,MAAM,KAAG,SAAS,IAAE,CAAC,QAAQ,KAAG,SAAS,IAAE,QAAQ,KAAG,UAAU,CAAC,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,CAAC;4BACrL,IAAG,KAAK,KAAG,SAAS,IAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,QAAQ;gCAAC,MAAM,OAAO,CAAC,2CAA2C,CAAC,CAAC;4BACxH,MAAM,MAAM,GAAc,EAAE,CAAC;4BAAA,IAAI,KAAK,GAAC,CAAC,CAAC;4BACzC,IAAI,KAAK,EAAC,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAC,CAAC;gCAAA,YAAY,CAAC,OAAO,CAAC,CAAC;gCAAA,IAAG,KAAK,CAAC,MAAM,KAAG,CAAC;oCAAC,SAAS;gCAAA,KAAK,IAAE,KAAK,CAAC,MAAM,CAAC;gCAAA,IAAG,KAAK,GAAC,QAAQ;oCAAC,MAAM,OAAO,CAAC,2CAA2C,CAAC,CAAC;gCAAA,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gCAAA,OAAO,CAAC,UAAU,EAAE,CAAC,EAAC,KAAK,EAAC,UAAU,EAAC,GAAG,EAAC,KAAK,EAAC,KAAK,EAAC,GAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,EAAC,UAAU,EAAC,KAAK,EAAC,CAAA,CAAC,CAAA,EAAE,EAAC,CAAC,CAAC;4BAAA,CAAC;4BACxW,KAAK,GAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;4BAAA,IAAI,MAAM,GAAC,CAAC,CAAC;4BAAA,KAAI,MAAM,KAAK,IAAI,MAAM,EAAC,CAAC;gCAAA,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC;gCAAA,MAAM,IAAE,KAAK,CAAC,MAAM,CAAC;4BAAA,CAAC;4BAClH,MAAM;wBACP,CAAC;gCAAO,CAAC;4BAAA,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;wBAAA,CAAC;oBACpC,CAAC;gBACF,CAAC;gBACD,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAG,QAAQ,IAAE,MAAM,CAAC,KAAK,CAAC,KAAG,QAAQ;oBAAC,MAAM,OAAO,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;gBAC1F,MAAM,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzB,MAAM,aAAa,GAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,CAAC,CAAC;gBAC1E,IAAG,aAAa,CAAC,MAAM,GAAC,QAAQ;oBAAC,MAAM,OAAO,CAAC,wDAAwD,CAAC,CAAC;gBACzG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAC,UAAU,GAAC,IAAI,EAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3E,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAC,aAAa,CAAC,CAAC;gBAC/C,YAAY,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;YACD,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAG,QAAQ,IAAE,MAAM,CAAC,KAAK,CAAC,KAAG,QAAQ;gBAAC,MAAM,OAAO,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;YAC1F,MAAM,GAAG,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAC,KAAK,CAAC,CAAC;YACtD,OAAO,EAAC,GAAG,EAAC,IAAI,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,EAAC,CAAC;QACvC,CAAC;gBAAS,CAAC;YAAA,OAAO,CAAC,OAAO,GAAC,KAAK,CAAC;QAAA,CAAC;IACnC,CAAC;IACD,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,CAAC,KAAwB,IAAE,MAAM,OAAO,GAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,OAAO,EAAC,CAAC;YAAA,OAAO,CAAC,MAAM,GAAC,IAAI,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAA,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAA,CAAC,CAAA,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;AAC3P,CAAC"}

package/dist/safe-bash/commands/python/reply.d.ts

@@ -0,0 +1,3 @@
+/** Own and admit a finite wire value before allocating its serialized payload. */
+export declare function encodePythonReply(value: unknown, maxBytes: number): Uint8Array;
+//# sourceMappingURL=reply.d.ts.map

package/dist/safe-bash/commands/python/reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply.d.ts","sourceRoot":"","sources":["../../../src/commands/python/reply.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAgE9E"}