@smthrs/std 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/Bash.js

@@ -0,0 +1,505 @@
+/**
+ * Bash flow declaration and portable handler.
+ *
+ * Two ways in, and the difference is where the payload is parsed. `command` is
+ * a line for the platform shell, exactly as before. `script` is program text
+ * delivered to an interpreter on standard input, as data: nothing quotes it,
+ * escapes it, or terminates it with a heredoc marker, so the class of failure
+ * that produced `docker exec c bash -lc '…python - <<EOF…'` cannot occur. Its
+ * `args` reach the script as arguments rather than as interpolated text.
+ *
+ * `container` names a container the host knows how to reach, and the argv is
+ * built by the injected {@link Container} transport rather than typed by the
+ * caller. A host that binds no transport refuses such a call by saying so; the
+ * requirement is optional here precisely so a host without containers is not
+ * forced to declare one.
+ *
+ * @since 1.0.0
+ */
+import * as Path from "@smthrs/kernel/Path";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Schema from "effect/Schema";
+import * as Container from "./Container.js";
+import { capability, envelope } from "./internal/Declaration.js";
+import * as Diagnostics from "./internal/Diagnostics.js";
+import { outsideEnvelope } from "./internal/EnvelopePrecheck.js";
+import * as Exec from "./internal/Exec.js";
+import { MAX_SHELL_OUTPUT_BYTES, truncateBytes } from "./internal/Text.js";
+import * as Probe from "./Probe.js";
+import * as StdError from "./StdError.js";
+import * as TreeFingerprint from "./TreeFingerprint.js";
+/**
+ * Registry name for the bash flow.
+ *
+ * @category identifiers
+ * @since 1.0.0
+ */
+export const name = "bash";
+/**
+ * Model-facing description of the bash flow.
+ *
+ * Capped at 200 characters and read every frame, which is why the
+ * invalid-probe contract is not restated here: the cell contract teaches it
+ * once, and a result that has one explains itself.
+ *
+ * @category descriptions
+ * @since 1.0.0
+ */
+export const description = "Run a shell command, or an interpreter over a script passed as data instead of quoted into a line. container routes it through the host's container transport. mode:hermetic pre-checks path tokens.";
+/**
+ * Default command timeout in milliseconds.
+ *
+ * Ten minutes lets full builds and test suites finish while ensuring a stalled
+ * process eventually releases the flow.
+ *
+ * @category constants
+ * @since 1.0.0
+ */
+export const DEFAULT_TIMEOUT_MS = 600_000;
+const Command = Schema.optional(Schema.String.annotate({
+    description: "Shell command line to execute; give this or script, never both"
+}));
+const Script = Schema.optional(Schema.String.annotate({
+    description: "Program text delivered to the interpreter on stdin as data, so it needs no quoting or heredoc"
+}));
+const Interpreter = Schema.optional(Schema.String.annotate({
+    description: "Program that reads script on stdin; defaults to bash. python, python3, sh, zsh, node, ruby and perl are known"
+}));
+const Args = Schema.optional(Schema.Array(Schema.String).annotate({
+    description: "Arguments passed to the script as data, never interpolated into it"
+}));
+const Stdin = Schema.optional(Schema.String.annotate({
+    description: "Text written to the command's standard input; use script instead when the text is the program"
+}));
+const ContainerName = Schema.optional(Schema.String.annotate({
+    description: "Run inside this container through the host's container transport; requires mode:unhermetic"
+}));
+const Cwd = Schema.optional(Schema.String).annotate({
+    description: "Working directory for the command",
+    message: "cwd must be a path string. For a checkpoint, pass { at: ctx.base } as the third ctx.call argument."
+});
+const Env = Schema.optional(Schema.Record(Schema.String, Schema.String).annotate({ description: "Environment variables for the command" }));
+const TimeoutMs = Schema.optional(Schema.Number).annotate({
+    description: "Wall-clock timeout in milliseconds; defaults to 600000 ms",
+    message: "timeoutMs must be a number of milliseconds."
+});
+/**
+ * Input schema for the bash flow.
+ *
+ * The mode named `hermetic` requires explicit read and write envelopes for a
+ * lexical pre-check; it does not by itself confine the process. Unhermetic mode
+ * deliberately omits those declarations so the distinction stays visible in
+ * the input shape.
+ *
+ * @category schemas
+ * @since 1.0.0
+ */
+export const Input = Schema.Union([
+    Schema.Struct({
+        mode: Schema.Literal("hermetic").annotate({
+            description: "Lexically pre-check explicit path tokens against declared reads and writes; does not sandbox"
+        }),
+        command: Command,
+        script: Script,
+        interpreter: Interpreter,
+        args: Args,
+        stdin: Stdin,
+        container: ContainerName,
+        reads: Schema.Array(Schema.NonEmptyString).annotate({ description: "Paths or path globs the command may read" }),
+        writes: Schema.Array(Schema.NonEmptyString).annotate({ description: "Paths or path globs the command may write" }),
+        cwd: Cwd,
+        env: Env,
+        timeoutMs: TimeoutMs
+    }),
+    Schema.Struct({
+        // Omitted means unhermetic: it is the envelope `effects` already declares
+        // for every call, so the default grants nothing a named mode would not.
+        mode: Schema.Literal("unhermetic").annotate({
+            description: "Run without a declared filesystem envelope as an irreversible effect; the default"
+        }).pipe(Schema.optionalKey, Schema.withDecodingDefaultKey(Effect.succeed("unhermetic"))),
+        command: Command,
+        script: Script,
+        interpreter: Interpreter,
+        args: Args,
+        stdin: Stdin,
+        container: ContainerName,
+        cwd: Cwd,
+        env: Env,
+        timeoutMs: TimeoutMs
+    })
+]);
+/**
+ * Output schema for the bash flow.
+ *
+ * `invalidProbe` is present when the shell itself refused to start the
+ * command, which its exit code says outright: 127 for a program it could not
+ * find, 126 for one it could not execute. Only that. Reading a runner's own
+ * wording is a judgment rather than a fact, and `Probe.classify` makes it with
+ * Jev for the `test` flow, whose caller is asking about a suite; a shell call
+ * is any command at all and stays free of the gateway. See `Probe`.
+ *
+ * The `<stream>Truncated` flags are a wire convention, not a display detail.
+ * A truncated capture is a fragment of what the process printed, and the
+ * harness reads these flags to refuse a later write of those exact bytes —
+ * `@smthrs/harness/TruncatedOutput` is the consuming half. Renaming a flag, or
+ * dropping it when the capture is cut, disarms that guard silently.
+ *
+ * @category schemas
+ * @since 1.0.0
+ */
+export const Output = Schema.Struct({
+    exitCode: Schema.Number.annotate({ description: "Command exit code, including non-zero codes" }),
+    stdout: Schema.String.annotate({
+        description: "Captured stdout; only the tail, and not the whole output, when stdoutTruncated is true"
+    }),
+    stderr: Schema.String.annotate({
+        description: "Captured stderr; only the tail, and not the whole output, when stderrTruncated is true"
+    }),
+    stdoutTruncated: Schema.Boolean.annotate({
+        description: "Whether stdout exceeded the capture limit, leaving stdout a fragment that must not be written to a file"
+    }),
+    stderrTruncated: Schema.Boolean.annotate({
+        description: "Whether stderr exceeded the capture limit, leaving stderr a fragment that must not be written to a file"
+    }),
+    stdoutDroppedBytes: Schema.Number.annotate({ description: "UTF-8 bytes omitted from the start of stdout" }),
+    stderrDroppedBytes: Schema.Number.annotate({ description: "UTF-8 bytes omitted from the start of stderr" }),
+    invalidProbe: Schema.optional(Probe.InvalidProbe.annotate({
+        description: "Reserved for a confirmed launch failure; an exit code alone does not establish one"
+    })),
+    mutated: Schema.optional(Schema.Boolean.annotate({
+        description: "Present for a containerised command whose working directory was measured before and after it: true when the tree changed, false when it held still. Absent when the tree was not measured, which is never read as unchanged."
+    }))
+});
+/**
+ * Static conservative effect envelope for the bash flow.
+ *
+ * The declaration is the registry-time worst case because the mode is not
+ * known until an invocation is decoded.
+ *
+ * @category effects
+ * @since 1.0.0
+ */
+export const effects = envelope({
+    tier: "irreversible",
+    mode: "expected",
+    reads: [],
+    writes: []
+});
+/**
+ * Narrows the effect envelope for a decoded invocation.
+ *
+ * @category effects
+ * @since 1.0.0
+ */
+export const effectsFor = (input) => input.mode === "hermetic"
+    ? envelope({
+        tier: "irreversible",
+        mode: "hermetic",
+        reads: input.reads,
+        writes: input.writes
+    })
+    : envelope({
+        tier: "irreversible",
+        mode: "expected",
+        reads: [],
+        writes: []
+    });
+/**
+ * Capabilities required by the bash flow.
+ *
+ * @category capabilities
+ * @since 1.0.0
+ */
+export const capabilities = [capability("proc:spawn", "*")];
+/**
+ * Declaration-only bash flow.
+ *
+ * @category flows
+ * @since 1.0.0
+ */
+export const flow = { name, description, input: Input, output: Output, capabilities, effects };
+/*
+ * `bash` declares no activity on purpose. What a shell call does is in the
+ * command, not in the declaration: the same flow runs a test suite, a type
+ * check, and `cat`. A reader that recognises a direct runner says so from the
+ * recorded command; everything else stays unknown, which is what an absent
+ * activity means.
+ */
+/**
+ * How one recorded call to this flow reads: the verb for each settlement, the
+ * input field that is its subject, and the measured output fields a one-line
+ * summary may count.
+ *
+ * Display metadata only, governed by `@smthrs/registry`
+ * `Descriptor.CallPresentation` and checked where `StandardFlows` binds it.
+ *
+ * @category presentation
+ * @since 1.0.0-rc.0
+ */
+export const presentation = {
+    verb: { pending: "running", success: "ran", failure: "failed to run" },
+    subject: "command",
+    result: "command"
+};
+/**
+ * Select standard input explicitly. Shells need `--` before script arguments
+ * so even an argument such as `-c` cannot replace the stdin program.
+ * Other supported interpreters treat arguments after `-` as program data.
+ */
+const stdinArguments = (interpreter) => {
+    switch (interpreter) {
+        case "bash":
+        case "zsh":
+        case "sh":
+        case "dash":
+            return ["-s", "--"];
+        case "python":
+        case "python3":
+        case "node":
+        case "ruby":
+        case "perl":
+            return ["-"];
+        default:
+            return undefined;
+    }
+};
+/** Whether a script is shell text the lexical pre-check can actually read. */
+const shells = new Set(["bash", "zsh", "sh", "dash"]);
+const invalid = (message) => new StdError.StdError({ code: "invalid_input", message });
+/** The invocation an input names, or the failure explaining why it names none. */
+const plan = (input) => {
+    const interpreter = input.interpreter ?? "bash";
+    if (input.command !== undefined && input.script !== undefined) {
+        return invalid("Give command or script, never both: a script is program text, a command is a shell line");
+    }
+    if (input.command === undefined && input.script === undefined) {
+        return invalid("Give either command (a shell line) or script (program text run by interpreter)");
+    }
+    if (input.script !== undefined && input.stdin !== undefined) {
+        return invalid("A script already arrives on standard input, so it cannot also carry stdin");
+    }
+    if (input.command !== undefined && input.args !== undefined) {
+        return invalid("args belong to a script; a command carries its own arguments in the line");
+    }
+    if (input.command !== undefined && input.interpreter !== undefined) {
+        return invalid("interpreter runs a script; a command runs in the platform shell");
+    }
+    if (input.mode === "hermetic" && input.container !== undefined) {
+        return invalid("A container has its own filesystem, so declared reads and writes cannot describe it. Use mode:unhermetic for a containerised command");
+    }
+    if (input.mode === "hermetic" && input.script !== undefined && !shells.has(interpreter)) {
+        return invalid(`The hermetic pre-check reads shell text, and ${interpreter} is not a shell. Run this script with mode:unhermetic, or express it as shell`);
+    }
+    if (input.command !== undefined) {
+        return { file: input.command, args: undefined, stdin: input.stdin, env: input.env, quoted: input.command };
+    }
+    const selector = stdinArguments(interpreter);
+    if (selector === undefined) {
+        return invalid(`Unsupported script interpreter: ${interpreter}`);
+    }
+    const args = [...selector, ...(input.args ?? [])];
+    return {
+        file: interpreter,
+        args,
+        stdin: input.script,
+        env: input.env,
+        quoted: [interpreter, ...args].join(" ")
+    };
+};
+/**
+ * The plan, refused when its input names no one invocation or when a hermetic
+ * call's paths fall outside its declared envelope. Spawned and terminal
+ * execution share this one check.
+ */
+const precheck = (input, path) => {
+    const intent = plan(input);
+    if (intent instanceof StdError.StdError || input.mode !== "hermetic")
+        return intent;
+    // A planned call carries exactly one of command or script.
+    return outsideEnvelope(input, input.command ?? input.script, path) ?? intent;
+};
+/** The plan as the host will spawn it, once the container transport has had it. */
+const routed = (plan, input, transport) => {
+    if (input.container === undefined)
+        return Effect.succeed(plan);
+    if (Option.isNone(transport))
+        return Effect.fail(Container.unavailable(input.container));
+    return Effect.map(transport.value.exec(request(plan, input, input.container)), (routing) => ({
+        file: routing.file,
+        args: routing.args,
+        stdin: plan.stdin,
+        env: routing.env,
+        // Diagnostics describe the logical invocation, not transport arguments.
+        quoted: plan.quoted
+    }));
+};
+/**
+ * One containerised request, always through a login shell.
+ *
+ * A container's environment is what its profile makes it. The images this
+ * harness runs against activate the project's interpreter — a conda env, a
+ * virtualenv, a modified `PATH` — from `/etc/profile.d`, so a program spawned
+ * directly by `docker exec` gets a different Python from the one that owns the
+ * repository's dependencies. That is measured, not theoretical: r90 typed
+ * `docker exec … bash -lc '…'` by hand and got the activation for free, r91
+ * routed `interpreter: "python3"` straight at the container and filled its
+ * traces with `ModuleNotFoundError: No module named 'numpy'` and
+ * `exec: "/usr/local/bin/python": no such file or directory`. Thirty of 45
+ * instances then spent 138 cells scanning `/opt` for the real interpreter.
+ *
+ * So the login shell is the transport's, not the caller's. A command line is
+ * one argument to `bash -lc`, as before. A program run under an interpreter
+ * becomes `bash -lc 'exec "$@"' bash <interpreter> <args…>`: the shell reads
+ * the profile, then `exec` replaces it with the interpreter, so the script
+ * still arrives on the inherited standard input and no argument is ever
+ * re-parsed as shell text.
+ */
+const request = (plan, input, container) => ({
+    container,
+    file: "bash",
+    args: plan.args === undefined
+        ? ["-lc", plan.file]
+        : ["-lc", `exec "$@"`, "bash", plan.file, ...plan.args],
+    ...(input.cwd === undefined ? {} : { cwd: input.cwd }),
+    ...(input.env === undefined ? {} : { env: input.env }),
+    stdin: plan.stdin !== undefined
+});
+/** How long one fingerprint of the container's working directory may take. */
+const FINGERPRINT_TIMEOUT_MS = 60_000;
+/**
+ * Measures the tree a containerised command is about to run in, or just ran in.
+ *
+ * The host's workspace walk cannot see a container's filesystem, so the
+ * measurement is taken where the tree is: `TreeFingerprint.script` runs
+ * through the same transport as the command, in the same working directory,
+ * and answers with one checksum. Every way this can fail — no transport, a
+ * container without `find` or `stat`, a timeout, a bounded listing — is read
+ * as "unmeasured" and reported as an absent `mutated`, never as a tree that
+ * held still. The time it costs is bounded by the command's own timeout so a
+ * stalled container cannot spend more waiting to be measured than it may
+ * spend running.
+ */
+const fingerprint = (input, transport) => Effect.gen(function* () {
+    if (input.container === undefined || Option.isNone(transport))
+        return undefined;
+    const routing = yield* transport.value.exec({
+        container: input.container,
+        file: "sh",
+        args: ["-c", TreeFingerprint.script()],
+        ...(input.cwd === undefined ? {} : { cwd: input.cwd }),
+        stdin: false
+    });
+    const result = yield* Exec.exec(routing.file, {
+        ...(routing.env === undefined ? {} : { env: routing.env }),
+        timeoutMs: Math.min(input.timeoutMs ?? DEFAULT_TIMEOUT_MS, FINGERPRINT_TIMEOUT_MS),
+        maxCaptureBytes: MAX_SHELL_OUTPUT_BYTES,
+        args: routing.args
+    });
+    return result.exitCode === 0 ? TreeFingerprint.parse(result.stdout) : undefined;
+}).pipe(Effect.orElseSucceed(() => undefined));
+/**
+ * Executes a shell command through the permission-aware kernel service.
+ *
+ * Non-zero exit codes remain successful values. Only timeout, host, permission,
+ * and declared-envelope pre-check failures use the typed error channel.
+ *
+ * @category handlers
+ * @since 1.0.0
+ */
+export const run = Effect.fn("Bash.run")(function* (input) {
+    const intent = precheck(input, yield* Path.Path);
+    if (intent instanceof StdError.StdError)
+        return yield* Effect.fail(intent);
+    // The working directory belongs to the container. The transport supplies
+    // any environment overrides its host process needs to forward into it.
+    const contained = input.container !== undefined;
+    const transport = yield* Effect.serviceOption(Container.Container);
+    const spawned = yield* routed(intent, input, transport);
+    // The tree the command runs in, before it runs. Measured in the container
+    // because nothing on this host can see it; see `TreeFingerprint`.
+    const before = yield* fingerprint(input, transport);
+    const result = yield* Exec.exec(spawned.file, {
+        ...(input.cwd === undefined || contained ? {} : { cwd: input.cwd }),
+        ...(spawned.env === undefined ? {} : { env: spawned.env }),
+        timeoutMs: input.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        maxCaptureBytes: MAX_SHELL_OUTPUT_BYTES,
+        ...(spawned.args === undefined ? {} : { args: spawned.args }),
+        ...(spawned.stdin === undefined ? {} : { stdin: spawned.stdin })
+    }).pipe(Effect.mapError((error) => Exec.toStdError(spawned.quoted, error)));
+    const mutated = TreeFingerprint.moved(before, yield* fingerprint(input, transport));
+    // A command on this host may have changed files a language server holds
+    // open; a container's files are not the ones it was sent.
+    if (!contained)
+        yield* Diagnostics.refresh;
+    const stdout = truncateBytes(result.stdout, MAX_SHELL_OUTPUT_BYTES, { keep: "tail" });
+    const stderr = truncateBytes(result.stderr, MAX_SHELL_OUTPUT_BYTES, { keep: "tail" });
+    // Exit codes alone cannot establish whether the shell refused to launch a
+    // command or a launched runner chose that status after executing tests.
+    return {
+        exitCode: result.exitCode,
+        stdout: stdout.text,
+        stderr: stderr.text,
+        stdoutTruncated: result.stdoutDroppedBytes > 0 || stdout.truncated,
+        stderrTruncated: result.stderrDroppedBytes > 0 || stderr.truncated,
+        stdoutDroppedBytes: result.stdoutDroppedBytes + stdout.droppedBytes,
+        stderrDroppedBytes: result.stderrDroppedBytes + stderr.droppedBytes,
+        ...(mutated === undefined ? {} : { mutated })
+    };
+});
+/**
+ * The invocation `input` names, or the typed refusal explaining why it names
+ * none. The same plan {@link run} spawns; a terminal provider runs it instead.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export const invocation = (input) => plan(input);
+/**
+ * {@link run}'s contract through a registered terminal (T-TRM-05): the same
+ * plan, hermetic pre-check, bounded output and diagnostics refresh, with
+ * execution supplied by `execute` instead of a spawn on this host. A terminal
+ * has no container transport, so a containerised call is refused before it
+ * reaches `execute`.
+ *
+ * @category handlers
+ * @since 1.0.0
+ */
+export const inTerminal = (execute) => Effect.fn("Bash.inTerminal")(function* (input) {
+    const intent = precheck(input, yield* Path.Path);
+    if (intent instanceof StdError.StdError)
+        return yield* Effect.fail(intent);
+    if (input.container !== undefined)
+        return yield* Effect.fail(Container.unavailable(input.container));
+    const output = yield* execute(input);
+    // The terminal ran on this workspace: files a language server holds may
+    // have changed, exactly as after a spawn here.
+    yield* Diagnostics.refresh;
+    return output;
+});
+/**
+ * The refusal a sealed host answers a call outside its container with.
+ *
+ * @category errors
+ * @since 1.0.0-rc.1
+ */
+export const outsideContainer = (sealedTo, requested) => new StdError.StdError({
+    code: "outside_container",
+    message: requested === undefined
+        ? `This host runs commands only inside container "${sealedTo}". Name it: { mode: "unhermetic", container: "${sealedTo}", command: "..." }.`
+        : `This host runs commands only inside container "${sealedTo}", not "${requested}".`
+});
+/**
+ * {@link run}, sealed to one container.
+ *
+ * A host that must not be reachable from the cell (a benchmark host holding
+ * other tasks' tests and reference solutions, say) binds this instead of
+ * {@link run}: a call naming `sealedTo` runs as usual, and every other call,
+ * including one with no container that would run on the host, fails with
+ * `outside_container` before anything is spawned.
+ *
+ * @category handlers
+ * @since 1.0.0-rc.1
+ */
+export const sealed = (sealedTo) => (input) => input.container === sealedTo ? run(input) : Effect.fail(outsideContainer(sealedTo, input.container));
+//# sourceMappingURL=Bash.js.map

package/dist/esm/Bash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bash.js","sourceRoot":"","sources":["../../src/Bash.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,IAAI,MAAM,qBAAqB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,KAAK,IAAI,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC1E,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAA;AAE1B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GACtB,sMAAsM,CAAA;AAExM;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IACrD,WAAW,EAAE,gEAAgE;CAC9E,CAAC,CAAC,CAAA;AACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IACpD,WAAW,EAAE,+FAA+F;CAC7G,CAAC,CAAC,CAAA;AACH,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IACzD,WAAW,EACT,+GAA+G;CAClH,CAAC,CAAC,CAAA;AACH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAC1B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IACnC,WAAW,EAAE,oEAAoE;CAClF,CAAC,CACH,CAAA;AACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IACnD,WAAW,EAAE,+FAA+F;CAC7G,CAAC,CAAC,CAAA;AACH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC3D,WAAW,EAAE,4FAA4F;CAC1G,CAAC,CAAC,CAAA;AACH,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IAClD,WAAW,EAAE,mCAAmC;IAChD,OAAO,EAAE,oGAAoG;CAC9G,CAAC,CAAA;AACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CACzB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC,CAC/G,CAAA;AACD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IACxD,WAAW,EAAE,2DAA2D;IACxE,OAAO,EAAE,6CAA6C;CACvD,CAAC,CAAA;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC;YACxC,WAAW,EAAE,8FAA8F;SAC5G,CAAC;QACF,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;QAChH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QAClH,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG;QACR,SAAS,EAAE,SAAS;KACrB,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC;YAC1C,WAAW,EAAE,mFAAmF;SACjG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,YAAqB,CAAC,CAAC,CAAC;QACjG,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,aAAa;QACxB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG;QACR,SAAS,EAAE,SAAS;KACrB,CAAC;CACH,CAAC,CAAA;AAUF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;IAChG,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,wFAAwF;KACtG,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,wFAAwF;KACtG,CAAC;IACF,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvC,WAAW,EACT,yGAAyG;KAC5G,CAAC;IACF,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvC,WAAW,EACT,yGAAyG;KAC5G,CAAC;IACF,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IAC3G,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IAC3G,YAAY,EAAE,MAAM,CAAC,QAAQ,CAC3B,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;QAC1B,WAAW,EAAE,oFAAoF;KAClG,CAAC,CACH;IACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CACtB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,WAAW,EACT,8NAA8N;KACjO,CAAC,CACH;CACF,CAAC,CAAA;AAUF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;IAC9B,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;CACX,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAY,EAAE,EAAE,CACzC,KAAK,CAAC,IAAI,KAAK,UAAU;IACvB,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;IACF,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;KACX,CAAC,CAAA;AAEN;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAW,CAAA;AAEvG;;;;;;GAMG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE;IACtE,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,SAAS;CACT,CAAA;AAEV;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,WAAmB,EAAqC,EAAE;IAChF,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,IAAI,CAAC;QACV,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,CAAA;QACd;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC,CAAA;AAED,8EAA8E;AAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AAWrD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAqB,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAA;AAEjH,kFAAkF;AAClF,MAAM,IAAI,GAAG,CAAC,KAAY,EAA4B,EAAE;IACtD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,MAAM,CAAA;IAC/C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,OAAO,CAAC,yFAAyF,CAAC,CAAA;IAC3G,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,OAAO,CAAC,gFAAgF,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,2EAA2E,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,0EAA0E,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,iEAAiE,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,OAAO,CACZ,sIAAsI,CACvI,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACxF,OAAO,OAAO,CACZ,gDAAgD,WAAW,+EAA+E,CAC3I,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IAC5G,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;IACjD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACzC,CAAA;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,IAAe,EAA4B,EAAE;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,MAAM,YAAY,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,MAAM,CAAA;IACnF,2DAA2D;IAC3D,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAA;AAC/E,CAAC,CAAA;AAED,mFAAmF;AACnF,MAAM,MAAM,GAAG,CACb,IAAU,EACV,KAAY,EACZ,SAA6C,EACL,EAAE;IAC1C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IACxF,OAAO,MAAM,CAAC,GAAG,CACf,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAC3D,CAAC,OAAO,EAAQ,EAAE,CAAC,CAAC;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,wEAAwE;QACxE,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,GAAG,CAAC,IAAU,EAAE,KAAY,EAAE,SAAiB,EAAqB,EAAE,CAAC,CAAC;IACnF,SAAS;IACT,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS;QAC3B,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;QACpB,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IACzD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACtD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACtD,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS;CAChC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAErC;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,GAAG,CAClB,KAAY,EACZ,SAA6C,EAC2D,EAAE,CAC1G,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC;QACtC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACtD,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5C,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,kBAAkB,EAAE,sBAAsB,CAAC;QAClF,eAAe,EAAE,sBAAsB;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACjF,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;AAEhD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,EAChD,KAAY;IAEZ,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,YAAY,QAAQ,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAA;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IAEvD,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5C,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,kBAAkB;QAChD,eAAe,EAAE,sBAAsB;QACvC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KACjE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;IACnF,wEAAwE;IACxE,0DAA0D;IAC1D,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAA;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,eAAe,EAAE,MAAM,CAAC,kBAAkB,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS;QAClE,eAAe,EAAE,MAAM,CAAC,kBAAkB,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS;QAClE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,GAAG,MAAM,CAAC,YAAY;QACnE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,GAAG,MAAM,CAAC,YAAY;QACnE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAA;AACH,CAAC,CAAC,CAAA;AAkBF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAY,EAAkC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAEvF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,OAAsE,EACtE,EAAE,CACF,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EACpC,KAAY;IAEZ,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,YAAY,QAAQ,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IACpG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACpC,wEAAwE;IACxE,+CAA+C;IAC/C,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAA;IAC1B,OAAO,MAAM,CAAA;AACf,CAAC,CAAC,CAAA;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,SAA6B,EAAqB,EAAE,CACrG,IAAI,QAAQ,CAAC,QAAQ,CAAC;IACpB,IAAI,EAAE,mBAAmB;IACzB,OAAO,EAAE,SAAS,KAAK,SAAS;QAC9B,CAAC,CAAC,kDAAkD,QAAQ,iDAAiD,QAAQ,sBAAsB;QAC3I,CAAC,CAAC,kDAAkD,QAAQ,WAAW,SAAS,IAAI;CACvF,CAAC,CAAA;AAEJ;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC3C,CACE,KAAY,EACmF,EAAE,CACjG,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA","sourcesContent":["/**\n * Bash flow declaration and portable handler.\n *\n * Two ways in, and the difference is where the payload is parsed. `command` is\n * a line for the platform shell, exactly as before. `script` is program text\n * delivered to an interpreter on standard input, as data: nothing quotes it,\n * escapes it, or terminates it with a heredoc marker, so the class of failure\n * that produced `docker exec c bash -lc '…python - <<EOF…'` cannot occur. Its\n * `args` reach the script as arguments rather than as interpolated text.\n *\n * `container` names a container the host knows how to reach, and the argv is\n * built by the injected {@link Container} transport rather than typed by the\n * caller. A host that binds no transport refuses such a call by saying so; the\n * requirement is optional here precisely so a host without containers is not\n * forced to declare one.\n *\n * @since 1.0.0\n */\n\nimport type * as ChildProcessSpawner from \"@smthrs/kernel/ChildProcessSpawner\"\nimport * as Path from \"@smthrs/kernel/Path\"\nimport * as Effect from \"effect/Effect\"\nimport * as Option from \"effect/Option\"\nimport * as Schema from \"effect/Schema\"\nimport * as Container from \"./Container.ts\"\nimport { capability, envelope } from \"./internal/Declaration.ts\"\nimport * as Diagnostics from \"./internal/Diagnostics.ts\"\nimport { outsideEnvelope } from \"./internal/EnvelopePrecheck.ts\"\nimport * as Exec from \"./internal/Exec.ts\"\nimport { MAX_SHELL_OUTPUT_BYTES, truncateBytes } from \"./internal/Text.ts\"\nimport * as Probe from \"./Probe.ts\"\nimport * as StdError from \"./StdError.ts\"\nimport * as TreeFingerprint from \"./TreeFingerprint.ts\"\n\n/**\n * Registry name for the bash flow.\n *\n * @category identifiers\n * @since 1.0.0\n */\nexport const name = \"bash\"\n\n/**\n * Model-facing description of the bash flow.\n *\n * Capped at 200 characters and read every frame, which is why the\n * invalid-probe contract is not restated here: the cell contract teaches it\n * once, and a result that has one explains itself.\n *\n * @category descriptions\n * @since 1.0.0\n */\nexport const description =\n  \"Run a shell command, or an interpreter over a script passed as data instead of quoted into a line. container routes it through the host's container transport. mode:hermetic pre-checks path tokens.\"\n\n/**\n * Default command timeout in milliseconds.\n *\n * Ten minutes lets full builds and test suites finish while ensuring a stalled\n * process eventually releases the flow.\n *\n * @category constants\n * @since 1.0.0\n */\nexport const DEFAULT_TIMEOUT_MS = 600_000\n\nconst Command = Schema.optional(Schema.String.annotate({\n  description: \"Shell command line to execute; give this or script, never both\"\n}))\nconst Script = Schema.optional(Schema.String.annotate({\n  description: \"Program text delivered to the interpreter on stdin as data, so it needs no quoting or heredoc\"\n}))\nconst Interpreter = Schema.optional(Schema.String.annotate({\n  description:\n    \"Program that reads script on stdin; defaults to bash. python, python3, sh, zsh, node, ruby and perl are known\"\n}))\nconst Args = Schema.optional(\n  Schema.Array(Schema.String).annotate({\n    description: \"Arguments passed to the script as data, never interpolated into it\"\n  })\n)\nconst Stdin = Schema.optional(Schema.String.annotate({\n  description: \"Text written to the command's standard input; use script instead when the text is the program\"\n}))\nconst ContainerName = Schema.optional(Schema.String.annotate({\n  description: \"Run inside this container through the host's container transport; requires mode:unhermetic\"\n}))\nconst Cwd = Schema.optional(Schema.String).annotate({\n  description: \"Working directory for the command\",\n  message: \"cwd must be a path string. For a checkpoint, pass { at: ctx.base } as the third ctx.call argument.\"\n})\nconst Env = Schema.optional(\n  Schema.Record(Schema.String, Schema.String).annotate({ description: \"Environment variables for the command\" })\n)\nconst TimeoutMs = Schema.optional(Schema.Number).annotate({\n  description: \"Wall-clock timeout in milliseconds; defaults to 600000 ms\",\n  message: \"timeoutMs must be a number of milliseconds.\"\n})\n\n/**\n * Input schema for the bash flow.\n *\n * The mode named `hermetic` requires explicit read and write envelopes for a\n * lexical pre-check; it does not by itself confine the process. Unhermetic mode\n * deliberately omits those declarations so the distinction stays visible in\n * the input shape.\n *\n * @category schemas\n * @since 1.0.0\n */\nexport const Input = Schema.Union([\n  Schema.Struct({\n    mode: Schema.Literal(\"hermetic\").annotate({\n      description: \"Lexically pre-check explicit path tokens against declared reads and writes; does not sandbox\"\n    }),\n    command: Command,\n    script: Script,\n    interpreter: Interpreter,\n    args: Args,\n    stdin: Stdin,\n    container: ContainerName,\n    reads: Schema.Array(Schema.NonEmptyString).annotate({ description: \"Paths or path globs the command may read\" }),\n    writes: Schema.Array(Schema.NonEmptyString).annotate({ description: \"Paths or path globs the command may write\" }),\n    cwd: Cwd,\n    env: Env,\n    timeoutMs: TimeoutMs\n  }),\n  Schema.Struct({\n    // Omitted means unhermetic: it is the envelope `effects` already declares\n    // for every call, so the default grants nothing a named mode would not.\n    mode: Schema.Literal(\"unhermetic\").annotate({\n      description: \"Run without a declared filesystem envelope as an irreversible effect; the default\"\n    }).pipe(Schema.optionalKey, Schema.withDecodingDefaultKey(Effect.succeed(\"unhermetic\" as const))),\n    command: Command,\n    script: Script,\n    interpreter: Interpreter,\n    args: Args,\n    stdin: Stdin,\n    container: ContainerName,\n    cwd: Cwd,\n    env: Env,\n    timeoutMs: TimeoutMs\n  })\n])\n\n/**\n * Decoded input accepted by the bash handler.\n *\n * @category models\n * @since 1.0.0\n */\nexport type Input = typeof Input.Type\n\n/**\n * Output schema for the bash flow.\n *\n * `invalidProbe` is present when the shell itself refused to start the\n * command, which its exit code says outright: 127 for a program it could not\n * find, 126 for one it could not execute. Only that. Reading a runner's own\n * wording is a judgment rather than a fact, and `Probe.classify` makes it with\n * Jev for the `test` flow, whose caller is asking about a suite; a shell call\n * is any command at all and stays free of the gateway. See `Probe`.\n *\n * The `<stream>Truncated` flags are a wire convention, not a display detail.\n * A truncated capture is a fragment of what the process printed, and the\n * harness reads these flags to refuse a later write of those exact bytes —\n * `@smthrs/harness/TruncatedOutput` is the consuming half. Renaming a flag, or\n * dropping it when the capture is cut, disarms that guard silently.\n *\n * @category schemas\n * @since 1.0.0\n */\nexport const Output = Schema.Struct({\n  exitCode: Schema.Number.annotate({ description: \"Command exit code, including non-zero codes\" }),\n  stdout: Schema.String.annotate({\n    description: \"Captured stdout; only the tail, and not the whole output, when stdoutTruncated is true\"\n  }),\n  stderr: Schema.String.annotate({\n    description: \"Captured stderr; only the tail, and not the whole output, when stderrTruncated is true\"\n  }),\n  stdoutTruncated: Schema.Boolean.annotate({\n    description:\n      \"Whether stdout exceeded the capture limit, leaving stdout a fragment that must not be written to a file\"\n  }),\n  stderrTruncated: Schema.Boolean.annotate({\n    description:\n      \"Whether stderr exceeded the capture limit, leaving stderr a fragment that must not be written to a file\"\n  }),\n  stdoutDroppedBytes: Schema.Number.annotate({ description: \"UTF-8 bytes omitted from the start of stdout\" }),\n  stderrDroppedBytes: Schema.Number.annotate({ description: \"UTF-8 bytes omitted from the start of stderr\" }),\n  invalidProbe: Schema.optional(\n    Probe.InvalidProbe.annotate({\n      description: \"Reserved for a confirmed launch failure; an exit code alone does not establish one\"\n    })\n  ),\n  mutated: Schema.optional(\n    Schema.Boolean.annotate({\n      description:\n        \"Present for a containerised command whose working directory was measured before and after it: true when the tree changed, false when it held still. Absent when the tree was not measured, which is never read as unchanged.\"\n    })\n  )\n})\n\n/**\n * Decoded output returned by the bash handler.\n *\n * @category models\n * @since 1.0.0\n */\nexport type Output = typeof Output.Type\n\n/**\n * Static conservative effect envelope for the bash flow.\n *\n * The declaration is the registry-time worst case because the mode is not\n * known until an invocation is decoded.\n *\n * @category effects\n * @since 1.0.0\n */\nexport const effects = envelope({\n  tier: \"irreversible\",\n  mode: \"expected\",\n  reads: [],\n  writes: []\n})\n\n/**\n * Narrows the effect envelope for a decoded invocation.\n *\n * @category effects\n * @since 1.0.0\n */\nexport const effectsFor = (input: Input) =>\n  input.mode === \"hermetic\"\n    ? envelope({\n      tier: \"irreversible\",\n      mode: \"hermetic\",\n      reads: input.reads,\n      writes: input.writes\n    })\n    : envelope({\n      tier: \"irreversible\",\n      mode: \"expected\",\n      reads: [],\n      writes: []\n    })\n\n/**\n * Capabilities required by the bash flow.\n *\n * @category capabilities\n * @since 1.0.0\n */\nexport const capabilities = [capability(\"proc:spawn\", \"*\")]\n\n/**\n * Declaration-only bash flow.\n *\n * @category flows\n * @since 1.0.0\n */\nexport const flow = { name, description, input: Input, output: Output, capabilities, effects } as const\n\n/*\n * `bash` declares no activity on purpose. What a shell call does is in the\n * command, not in the declaration: the same flow runs a test suite, a type\n * check, and `cat`. A reader that recognises a direct runner says so from the\n * recorded command; everything else stays unknown, which is what an absent\n * activity means.\n */\n\n/**\n * How one recorded call to this flow reads: the verb for each settlement, the\n * input field that is its subject, and the measured output fields a one-line\n * summary may count.\n *\n * Display metadata only, governed by `@smthrs/registry`\n * `Descriptor.CallPresentation` and checked where `StandardFlows` binds it.\n *\n * @category presentation\n * @since 1.0.0-rc.0\n */\nexport const presentation = {\n  verb: { pending: \"running\", success: \"ran\", failure: \"failed to run\" },\n  subject: \"command\",\n  result: \"command\"\n} as const\n\n/**\n * Select standard input explicitly. Shells need `--` before script arguments\n * so even an argument such as `-c` cannot replace the stdin program.\n * Other supported interpreters treat arguments after `-` as program data.\n */\nconst stdinArguments = (interpreter: string): ReadonlyArray<string> | undefined => {\n  switch (interpreter) {\n    case \"bash\":\n    case \"zsh\":\n    case \"sh\":\n    case \"dash\":\n      return [\"-s\", \"--\"]\n    case \"python\":\n    case \"python3\":\n    case \"node\":\n    case \"ruby\":\n    case \"perl\":\n      return [\"-\"]\n    default:\n      return undefined\n  }\n}\n\n/** Whether a script is shell text the lexical pre-check can actually read. */\nconst shells = new Set([\"bash\", \"zsh\", \"sh\", \"dash\"])\n\n/** What one invocation runs, before any container transport rewrites it. */\ninterface Plan {\n  readonly file: string\n  readonly args: ReadonlyArray<string> | undefined\n  readonly stdin: string | undefined\n  readonly env: Record<string, string> | undefined\n  readonly quoted: string\n}\n\nconst invalid = (message: string): StdError.StdError => new StdError.StdError({ code: \"invalid_input\", message })\n\n/** The invocation an input names, or the failure explaining why it names none. */\nconst plan = (input: Input): Plan | StdError.StdError => {\n  const interpreter = input.interpreter ?? \"bash\"\n  if (input.command !== undefined && input.script !== undefined) {\n    return invalid(\"Give command or script, never both: a script is program text, a command is a shell line\")\n  }\n  if (input.command === undefined && input.script === undefined) {\n    return invalid(\"Give either command (a shell line) or script (program text run by interpreter)\")\n  }\n  if (input.script !== undefined && input.stdin !== undefined) {\n    return invalid(\"A script already arrives on standard input, so it cannot also carry stdin\")\n  }\n  if (input.command !== undefined && input.args !== undefined) {\n    return invalid(\"args belong to a script; a command carries its own arguments in the line\")\n  }\n  if (input.command !== undefined && input.interpreter !== undefined) {\n    return invalid(\"interpreter runs a script; a command runs in the platform shell\")\n  }\n  if (input.mode === \"hermetic\" && input.container !== undefined) {\n    return invalid(\n      \"A container has its own filesystem, so declared reads and writes cannot describe it. Use mode:unhermetic for a containerised command\"\n    )\n  }\n  if (input.mode === \"hermetic\" && input.script !== undefined && !shells.has(interpreter)) {\n    return invalid(\n      `The hermetic pre-check reads shell text, and ${interpreter} is not a shell. Run this script with mode:unhermetic, or express it as shell`\n    )\n  }\n  if (input.command !== undefined) {\n    return { file: input.command, args: undefined, stdin: input.stdin, env: input.env, quoted: input.command }\n  }\n  const selector = stdinArguments(interpreter)\n  if (selector === undefined) {\n    return invalid(`Unsupported script interpreter: ${interpreter}`)\n  }\n  const args = [...selector, ...(input.args ?? [])]\n  return {\n    file: interpreter,\n    args,\n    stdin: input.script,\n    env: input.env,\n    quoted: [interpreter, ...args].join(\" \")\n  }\n}\n\n/**\n * The plan, refused when its input names no one invocation or when a hermetic\n * call's paths fall outside its declared envelope. Spawned and terminal\n * execution share this one check.\n */\nconst precheck = (input: Input, path: Path.Path): Plan | StdError.StdError => {\n  const intent = plan(input)\n  if (intent instanceof StdError.StdError || input.mode !== \"hermetic\") return intent\n  // A planned call carries exactly one of command or script.\n  return outsideEnvelope(input, input.command ?? input.script!, path) ?? intent\n}\n\n/** The plan as the host will spawn it, once the container transport has had it. */\nconst routed = (\n  plan: Plan,\n  input: Input,\n  transport: Option.Option<Container.Container>\n): Effect.Effect<Plan, StdError.StdError> => {\n  if (input.container === undefined) return Effect.succeed(plan)\n  if (Option.isNone(transport)) return Effect.fail(Container.unavailable(input.container))\n  return Effect.map(\n    transport.value.exec(request(plan, input, input.container)),\n    (routing): Plan => ({\n      file: routing.file,\n      args: routing.args,\n      stdin: plan.stdin,\n      env: routing.env,\n      // Diagnostics describe the logical invocation, not transport arguments.\n      quoted: plan.quoted\n    })\n  )\n}\n\n/**\n * One containerised request, always through a login shell.\n *\n * A container's environment is what its profile makes it. The images this\n * harness runs against activate the project's interpreter — a conda env, a\n * virtualenv, a modified `PATH` — from `/etc/profile.d`, so a program spawned\n * directly by `docker exec` gets a different Python from the one that owns the\n * repository's dependencies. That is measured, not theoretical: r90 typed\n * `docker exec … bash -lc '…'` by hand and got the activation for free, r91\n * routed `interpreter: \"python3\"` straight at the container and filled its\n * traces with `ModuleNotFoundError: No module named 'numpy'` and\n * `exec: \"/usr/local/bin/python\": no such file or directory`. Thirty of 45\n * instances then spent 138 cells scanning `/opt` for the real interpreter.\n *\n * So the login shell is the transport's, not the caller's. A command line is\n * one argument to `bash -lc`, as before. A program run under an interpreter\n * becomes `bash -lc 'exec \"$@\"' bash <interpreter> <args…>`: the shell reads\n * the profile, then `exec` replaces it with the interpreter, so the script\n * still arrives on the inherited standard input and no argument is ever\n * re-parsed as shell text.\n */\nconst request = (plan: Plan, input: Input, container: string): Container.Request => ({\n  container,\n  file: \"bash\",\n  args: plan.args === undefined\n    ? [\"-lc\", plan.file]\n    : [\"-lc\", `exec \"$@\"`, \"bash\", plan.file, ...plan.args],\n  ...(input.cwd === undefined ? {} : { cwd: input.cwd }),\n  ...(input.env === undefined ? {} : { env: input.env }),\n  stdin: plan.stdin !== undefined\n})\n\n/** How long one fingerprint of the container's working directory may take. */\nconst FINGERPRINT_TIMEOUT_MS = 60_000\n\n/**\n * Measures the tree a containerised command is about to run in, or just ran in.\n *\n * The host's workspace walk cannot see a container's filesystem, so the\n * measurement is taken where the tree is: `TreeFingerprint.script` runs\n * through the same transport as the command, in the same working directory,\n * and answers with one checksum. Every way this can fail — no transport, a\n * container without `find` or `stat`, a timeout, a bounded listing — is read\n * as \"unmeasured\" and reported as an absent `mutated`, never as a tree that\n * held still. The time it costs is bounded by the command's own timeout so a\n * stalled container cannot spend more waiting to be measured than it may\n * spend running.\n */\nconst fingerprint = (\n  input: Input,\n  transport: Option.Option<Container.Container>\n): Effect.Effect<TreeFingerprint.Measurement | undefined, never, ChildProcessSpawner.ChildProcessSpawner> =>\n  Effect.gen(function*() {\n    if (input.container === undefined || Option.isNone(transport)) return undefined\n    const routing = yield* transport.value.exec({\n      container: input.container,\n      file: \"sh\",\n      args: [\"-c\", TreeFingerprint.script()],\n      ...(input.cwd === undefined ? {} : { cwd: input.cwd }),\n      stdin: false\n    })\n    const result = yield* Exec.exec(routing.file, {\n      ...(routing.env === undefined ? {} : { env: routing.env }),\n      timeoutMs: Math.min(input.timeoutMs ?? DEFAULT_TIMEOUT_MS, FINGERPRINT_TIMEOUT_MS),\n      maxCaptureBytes: MAX_SHELL_OUTPUT_BYTES,\n      args: routing.args\n    })\n    return result.exitCode === 0 ? TreeFingerprint.parse(result.stdout) : undefined\n  }).pipe(Effect.orElseSucceed(() => undefined))\n\n/**\n * Executes a shell command through the permission-aware kernel service.\n *\n * Non-zero exit codes remain successful values. Only timeout, host, permission,\n * and declared-envelope pre-check failures use the typed error channel.\n *\n * @category handlers\n * @since 1.0.0\n */\nexport const run = Effect.fn(\"Bash.run\")(function*(\n  input: Input\n): Effect.fn.Return<Output, StdError.StdError, ChildProcessSpawner.ChildProcessSpawner | Path.Path> {\n  const intent = precheck(input, yield* Path.Path)\n  if (intent instanceof StdError.StdError) return yield* Effect.fail(intent)\n  // The working directory belongs to the container. The transport supplies\n  // any environment overrides its host process needs to forward into it.\n  const contained = input.container !== undefined\n  const transport = yield* Effect.serviceOption(Container.Container)\n  const spawned = yield* routed(intent, input, transport)\n\n  // The tree the command runs in, before it runs. Measured in the container\n  // because nothing on this host can see it; see `TreeFingerprint`.\n  const before = yield* fingerprint(input, transport)\n  const result = yield* Exec.exec(spawned.file, {\n    ...(input.cwd === undefined || contained ? {} : { cwd: input.cwd }),\n    ...(spawned.env === undefined ? {} : { env: spawned.env }),\n    timeoutMs: input.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    maxCaptureBytes: MAX_SHELL_OUTPUT_BYTES,\n    ...(spawned.args === undefined ? {} : { args: spawned.args }),\n    ...(spawned.stdin === undefined ? {} : { stdin: spawned.stdin })\n  }).pipe(Effect.mapError((error) => Exec.toStdError(spawned.quoted, error)))\n  const mutated = TreeFingerprint.moved(before, yield* fingerprint(input, transport))\n  // A command on this host may have changed files a language server holds\n  // open; a container's files are not the ones it was sent.\n  if (!contained) yield* Diagnostics.refresh\n  const stdout = truncateBytes(result.stdout, MAX_SHELL_OUTPUT_BYTES, { keep: \"tail\" })\n  const stderr = truncateBytes(result.stderr, MAX_SHELL_OUTPUT_BYTES, { keep: \"tail\" })\n  // Exit codes alone cannot establish whether the shell refused to launch a\n  // command or a launched runner chose that status after executing tests.\n  return {\n    exitCode: result.exitCode,\n    stdout: stdout.text,\n    stderr: stderr.text,\n    stdoutTruncated: result.stdoutDroppedBytes > 0 || stdout.truncated,\n    stderrTruncated: result.stderrDroppedBytes > 0 || stderr.truncated,\n    stdoutDroppedBytes: result.stdoutDroppedBytes + stdout.droppedBytes,\n    stderrDroppedBytes: result.stderrDroppedBytes + stderr.droppedBytes,\n    ...(mutated === undefined ? {} : { mutated })\n  }\n})\n\n/**\n * What one call runs, after planning and before any transport: the program,\n * its arguments (absent for a shell command line), standard input, the\n * caller's environment, and the logical invocation as a person reads it.\n *\n * @category models\n * @since 1.0.0\n */\nexport interface Invocation {\n  readonly file: string\n  readonly args: ReadonlyArray<string> | undefined\n  readonly stdin: string | undefined\n  readonly env: Record<string, string> | undefined\n  readonly quoted: string\n}\n\n/**\n * The invocation `input` names, or the typed refusal explaining why it names\n * none. The same plan {@link run} spawns; a terminal provider runs it instead.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const invocation = (input: Input): Invocation | StdError.StdError => plan(input)\n\n/**\n * {@link run}'s contract through a registered terminal (T-TRM-05): the same\n * plan, hermetic pre-check, bounded output and diagnostics refresh, with\n * execution supplied by `execute` instead of a spawn on this host. A terminal\n * has no container transport, so a containerised call is refused before it\n * reaches `execute`.\n *\n * @category handlers\n * @since 1.0.0\n */\nexport const inTerminal = <R>(\n  execute: (input: Input) => Effect.Effect<Output, StdError.StdError, R>\n) =>\n  Effect.fn(\"Bash.inTerminal\")(function*(\n    input: Input\n  ): Effect.fn.Return<Output, StdError.StdError, R | Path.Path> {\n    const intent = precheck(input, yield* Path.Path)\n    if (intent instanceof StdError.StdError) return yield* Effect.fail(intent)\n    if (input.container !== undefined) return yield* Effect.fail(Container.unavailable(input.container))\n    const output = yield* execute(input)\n    // The terminal ran on this workspace: files a language server holds may\n    // have changed, exactly as after a spawn here.\n    yield* Diagnostics.refresh\n    return output\n  })\n\n/**\n * The refusal a sealed host answers a call outside its container with.\n *\n * @category errors\n * @since 1.0.0-rc.1\n */\nexport const outsideContainer = (sealedTo: string, requested: string | undefined): StdError.StdError =>\n  new StdError.StdError({\n    code: \"outside_container\",\n    message: requested === undefined\n      ? `This host runs commands only inside container \"${sealedTo}\". Name it: { mode: \"unhermetic\", container: \"${sealedTo}\", command: \"...\" }.`\n      : `This host runs commands only inside container \"${sealedTo}\", not \"${requested}\".`\n  })\n\n/**\n * {@link run}, sealed to one container.\n *\n * A host that must not be reachable from the cell (a benchmark host holding\n * other tasks' tests and reference solutions, say) binds this instead of\n * {@link run}: a call naming `sealedTo` runs as usual, and every other call,\n * including one with no container that would run on the host, fails with\n * `outside_container` before anything is spawned.\n *\n * @category handlers\n * @since 1.0.0-rc.1\n */\nexport const sealed = (sealedTo: string) =>\n(\n  input: Input\n): Effect.Effect<Output, StdError.StdError, ChildProcessSpawner.ChildProcessSpawner | Path.Path> =>\n  input.container === sealedTo ? run(input) : Effect.fail(outsideContainer(sealedTo, input.container))\n"]}