@superbee/core 0.2.0-pre.16 → 0.2.0-pre.19

package/dist/source-harness/conformance.js

@@ -0,0 +1,265 @@
+/**
+ * The transport conformance suite. The engine's guard cannot see headers a transport adds after
+ * it, so every transport proves against a scripted peer that it sends the credential only when the
+ * engine's `credentialHost` and its own exact host match agree (lookalike hosts included), returns
+ * redirects unfollowed and refuses a body over the bound, and, behind the engine, that a
+ * cross-host or private-address redirect reaches nothing. It returns rows rather than asserting,
+ * so it runs under any test runner.
+ */
+import { bindSourceFeed, credentialHosts, parseConnectorDoc } from "../connectors.js";
+import { buildKindRegistry } from "../kinds.js";
+import { MemoryMachineState } from "../source-engine/machine-state.js";
+import { observeSource } from "../source-engine/observe.js";
+import { fetchIdentity } from "../source-engine/robots.js";
+import { ScriptedPeer } from "./peer.js";
+export const CONFORMANCE_SCENARIOS = Object.freeze([
+    "credential-reaches-its-host",
+    "credential-stays-on-its-host",
+    "redirect-returned-unfollowed",
+    "cross-host-redirect-refused",
+    "body-over-bound-refused",
+    "private-redirect-refused",
+]);
+const CREDENTIAL_HOST = "api.github.com";
+const KEYLESS_HOST = "feeds.example.org";
+const OUTSIDE_HOST = "collector.example.net";
+const PROBE = "conformance-probe";
+const IDENTITY = fetchIdentity("SuperbeeConformance/1 (+https://superbee.example.org/conformance)");
+const PRIVATE_TARGETS = Object.freeze([
+    "https://127.0.0.1/latest",
+    "https://10.0.0.5/internal",
+    "https://[::1]/x",
+    "https://[::ffff:127.0.0.1]/x",
+    "https://169.254.169.254/latest/meta-data/",
+    "https://metadata.google.internal/computeMetadata/v1/",
+    "https://localhost/x",
+    "https://api.github.com:8443/x",
+    "http://api.github.com/x",
+]);
+/**
+ * Requests that must never carry the credential: hosts that only look like the credential host,
+ * whatever the engine says, and the credential host itself when the engine says it is not one.
+ */
+const CREDENTIAL_PROBES = Object.freeze([
+    { name: "a declared keyless host", url: `https://${KEYLESS_HOST}/feed.json`, credentialHost: true },
+    { name: "an undeclared host", url: `https://${OUTSIDE_HOST}/collect`, credentialHost: true },
+    { name: "the credential host over http", url: `http://${CREDENTIAL_HOST}/repos/octo/probe/issues`, credentialHost: true },
+    { name: "a host starting with the credential host", url: `https://${CREDENTIAL_HOST}.${OUTSIDE_HOST}/x`, credentialHost: true },
+    { name: "a host ending with the credential host without a dot", url: `https://evil${CREDENTIAL_HOST}/x`, credentialHost: true },
+    { name: "the credential host with a trailing dot", url: `https://${CREDENTIAL_HOST}./x`, credentialHost: true },
+    { name: "the credential host as userinfo", url: `https://${CREDENTIAL_HOST}@${OUTSIDE_HOST}/x`, credentialHost: true },
+    { name: "the credential host on another port", url: `https://${CREDENTIAL_HOST}:8443/x`, credentialHost: true },
+    { name: "the credential host when the engine says otherwise", url: `https://${CREDENTIAL_HOST}/repos/octo/probe/issues`, credentialHost: false },
+]);
+const record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+/** Requests the probe profile makes: one GET of `spec.url`, its host and `spec.also` declared. */
+const probe = {
+    id: PROBE,
+    version: 1,
+    kind: "generic",
+    validateSpec(spec) {
+        if (!record(spec) || typeof spec.url !== "string")
+            return { ok: false, errors: [{ path: "/url", message: "is a URL" }] };
+        const also = Array.isArray(spec.also) ? spec.also.filter((host) => typeof host === "string") : [];
+        return { ok: true, spec: { url: spec.url, also } };
+    },
+    hostsFor: (spec) => [new URL(spec.url).hostname, ...spec.also],
+    async observe({ spec, transport }) {
+        await transport.request({ url: spec.url, headers: { accept: "application/json" } });
+        return { records: [], nextCursor: null, more: false, complete: false };
+    },
+};
+let world;
+function probeWorld() {
+    if (world)
+        return world;
+    const registry = buildKindRegistry([{ id: "conventions/probe", body: "", frontmatter: { type: "Convention", title: "Probe", governs: "Probe", fields: { required: ["title"] } } }], [], { okfVersion: "0.2" });
+    const parsed = parseConnectorDoc({ id: "connectors/conformance", body: "", frontmatter: {
+            type: "Connector", title: "Transport conformance probe", auth: { kind: "token", provider: "github" }, domains: [KEYLESS_HOST],
+            sources: [{ name: "probe", profile: PROBE, target_kind: "Probe", identity: { resource: `https://${CREDENTIAL_HOST}/repos/{owner}/{repo}`, id: "{id}" }, fields: { title: "title" }, completeness: "complete" }],
+        } }, { kinds: registry });
+    if (!parsed.ok)
+        throw new Error(`conformance connector refused: ${parsed.errors.map((e) => e.code).join(", ")}`);
+    const bound = bindSourceFeed(parsed.connector, { id: "source-feeds/conformance", frontmatter: {
+            type: "Source Feed", connector: parsed.connector.id, source: "probe", url: `https://${CREDENTIAL_HOST}/repos/octo/probe`, owned_fields: ["title"],
+        } }, registry, { okfVersion: "0.2" });
+    return (world = { connector: parsed.connector, bound });
+}
+const CREDENTIALS = () => [
+    { hosts: credentialHosts({ kind: "token", provider: "github" }), header: "authorization", value: "Bearer conformance-secret-1" },
+    // A provider's own header (Vagaro's `accessToken`), so a check on `authorization` alone cannot pass.
+    { hosts: credentialHosts({ kind: "token", provider: "github" }), header: "accessToken", value: "conformance-secret-2" },
+];
+/**
+ * Whether a request carries the credential anywhere: a header, the URL (decoded, so an encoded
+ * copy counts) or the body. The secret is the value's last word, so `Bearer x` is found as `x`.
+ */
+function carries(request, credential) {
+    const secret = credential.value.split(/\s+/).at(-1);
+    let url = request.url;
+    try {
+        url = decodeURIComponent(request.url.replaceAll("+", " "));
+    }
+    catch { /* keep the raw URL */ }
+    return [...Object.values(request.headers), url, request.url, request.body ?? ""].some((text) => text.includes(secret));
+}
+/** Every request that carried the credential's value toward a host it does not belong to. */
+function leaks(peer, credential) {
+    return peer.received.filter((request) => {
+        const url = new URL(request.url);
+        const allowed = url.protocol === "https:" && credential.hosts.includes(url.hostname);
+        return !allowed && carries(request, credential);
+    }).map((request) => `${request.method} ${request.url}`);
+}
+const answer = (routes) => (request) => {
+    const url = new URL(request.url);
+    if (url.pathname === "/robots.txt")
+        return { status: 404, body: "" };
+    return routes[`${url.origin}${url.pathname}`] ?? { status: 404, body: "" };
+};
+async function throughEngine(target, credential, routes, spec, maxBytes) {
+    const { connector, bound } = probeWorld();
+    const peer = new ScriptedPeer(answer(routes));
+    const receipt = await observeSource({
+        connector, bound, profile: probe, spec, transport: target.create(peer, credential), state: new MemoryMachineState(), identity: IDENTITY,
+        mode: "complete", budget: { requests: 20, ...(maxBytes !== undefined ? { maxBytes } : {}) }, commit: async () => { },
+    });
+    return { receipt, peer };
+}
+async function direct(transport, url, options = {}) {
+    try {
+        return await transport.request({ url, method: "GET", headers: { accept: "application/json" }, maxBytes: options.maxBytes ?? 4096, credentialHost: options.credentialHost ?? false });
+    }
+    catch (error) {
+        return error instanceof Error ? error : new Error(String(error));
+    }
+}
+const CHECKS = {
+    async "credential-reaches-its-host"(target) {
+        const problems = [];
+        for (const credential of CREDENTIALS()) {
+            const peer = new ScriptedPeer(() => ({ status: 200, body: "[]" }));
+            await direct(target.create(peer, credential), `https://${CREDENTIAL_HOST}/repos/octo/probe/issues`, { credentialHost: true });
+            const sent = peer.received[0]?.headers[credential.header.toLowerCase()];
+            if (sent !== credential.value)
+                problems.push(`the ${credential.header} credential did not reach ${CREDENTIAL_HOST}`);
+            const { peer: engine } = await throughEngine(target, credential, { [`https://${CREDENTIAL_HOST}/x`]: { status: 200, body: "{}" } }, { url: `https://${CREDENTIAL_HOST}/x` });
+            if (engine.received[0]?.headers[credential.header.toLowerCase()] !== credential.value)
+                problems.push(`behind the engine the ${credential.header} credential did not reach ${CREDENTIAL_HOST}`);
+        }
+        return problems;
+    },
+    async "credential-stays-on-its-host"(target) {
+        const problems = [];
+        for (const credential of CREDENTIALS()) {
+            const peer = new ScriptedPeer(() => ({ status: 200, body: "[]" }));
+            const transport = target.create(peer, credential);
+            for (const probe of CREDENTIAL_PROBES) {
+                const before = peer.received.length;
+                await direct(transport, probe.url, { credentialHost: probe.credentialHost });
+                const carried = peer.received.slice(before).filter((request) => carries(request, credential));
+                if (carried.length)
+                    problems.push(`${credential.header} sent toward ${probe.name}`);
+            }
+        }
+        return problems;
+    },
+    async "redirect-returned-unfollowed"(target) {
+        const [credential] = CREDENTIALS();
+        const peer = new ScriptedPeer(answer({
+            [`https://${CREDENTIAL_HOST}/a`]: { status: 302, headers: { Location: `https://${CREDENTIAL_HOST}/b` }, body: "" },
+            [`https://${CREDENTIAL_HOST}/b`]: { status: 200, body: "{}" },
+        }));
+        const result = await direct(target.create(peer, credential), `https://${CREDENTIAL_HOST}/a`, { credentialHost: true });
+        const problems = [];
+        if (result instanceof Error || !result.ok || result.status !== 302)
+            problems.push("the 302 was not returned as the answer");
+        else if (result.headers.location !== `https://${CREDENTIAL_HOST}/b`)
+            problems.push("the 302's location header was not returned under a lowercase name");
+        if (peer.received.length !== 1)
+            problems.push(`the transport sent ${peer.received.length} requests for one call`);
+        return problems;
+    },
+    async "cross-host-redirect-refused"(target) {
+        const problems = [];
+        const cases = [
+            { name: "credential host to an undeclared host", from: `https://${CREDENTIAL_HOST}/x`, to: `https://${OUTSIDE_HOST}/steal` },
+            { name: "keyless host to an undeclared host", from: `https://${KEYLESS_HOST}/x`, to: `https://${OUTSIDE_HOST}/steal` },
+            { name: "credential host to a declared keyless host", from: `https://${CREDENTIAL_HOST}/x`, to: `https://${KEYLESS_HOST}/y`, also: [KEYLESS_HOST] },
+            { name: "declared keyless host to the credential host", from: `https://${KEYLESS_HOST}/x`, to: `https://${CREDENTIAL_HOST}/y`, also: [CREDENTIAL_HOST] },
+        ];
+        for (const credential of CREDENTIALS()) {
+            for (const c of cases) {
+                const toHost = new URL(c.to).hostname;
+                const { receipt, peer } = await throughEngine(target, credential, {
+                    [c.from]: { status: 302, headers: { location: c.to }, body: "" },
+                    [c.to]: { status: 200, body: "{}" },
+                }, { url: c.from, ...(c.also ? { also: c.also } : {}) });
+                const reached = peer.received.filter((request) => request.url.startsWith(c.to)).length;
+                if (receipt.outcome !== "refused")
+                    problems.push(`${c.name}: the run ended ${receipt.outcome}, not refused`);
+                if (reached)
+                    problems.push(`${c.name}: ${reached} request(s) reached ${toHost}`);
+                for (const leak of leaks(peer, credential))
+                    problems.push(`${c.name}: ${credential.header} sent with ${leak}`);
+            }
+        }
+        return problems;
+    },
+    async "body-over-bound-refused"(target) {
+        const [credential] = CREDENTIALS();
+        const problems = [];
+        // 600 characters, 1200 bytes: a bound read in characters would pass it.
+        const over = "é".repeat(600);
+        const exact = "a".repeat(1000);
+        const peer = new ScriptedPeer(answer({
+            [`https://${CREDENTIAL_HOST}/over`]: { status: 200, body: over },
+            [`https://${CREDENTIAL_HOST}/exact`]: { status: 200, body: exact },
+        }));
+        const transport = target.create(peer, credential);
+        const refused = await direct(transport, `https://${CREDENTIAL_HOST}/over`, { maxBytes: 1000, credentialHost: true });
+        if (refused instanceof Error || refused.ok || refused.refused !== "too_large")
+            problems.push("a 1200-byte body under a 1000-byte bound was not refused as too_large");
+        const admitted = await direct(transport, `https://${CREDENTIAL_HOST}/exact`, { maxBytes: 1000, credentialHost: true });
+        if (admitted instanceof Error || !admitted.ok || admitted.body !== exact || admitted.bytes !== 1000)
+            problems.push("a body exactly at the bound was not returned whole");
+        const { receipt } = await throughEngine(target, credential, { [`https://${CREDENTIAL_HOST}/over`]: { status: 200, body: over } }, { url: `https://${CREDENTIAL_HOST}/over` }, 1000);
+        if (receipt.outcome !== "too_large")
+            problems.push(`behind the engine the run ended ${receipt.outcome}, not too_large`);
+        return problems;
+    },
+    async "private-redirect-refused"(target) {
+        const [credential] = CREDENTIALS();
+        const problems = [];
+        for (const from of [`https://${CREDENTIAL_HOST}/x`, `https://${KEYLESS_HOST}/x`]) {
+            for (const to of PRIVATE_TARGETS) {
+                const { receipt, peer } = await throughEngine(target, credential, { [from]: { status: 302, headers: { location: to }, body: "" } }, { url: from });
+                const toUrl = new URL(to);
+                const reached = peer.received.filter((request) => {
+                    const url = new URL(request.url);
+                    return url.hostname === toUrl.hostname && url.port === toUrl.port && url.protocol === toUrl.protocol;
+                }).length;
+                if (receipt.outcome !== "refused")
+                    problems.push(`${from} to ${to}: the run ended ${receipt.outcome}, not refused`);
+                if (reached)
+                    problems.push(`${from} to ${to}: ${reached} request(s) reached it`);
+            }
+        }
+        return problems;
+    },
+};
+/** Run every conformance scenario against one transport. */
+export async function runTransportConformance(target) {
+    const rows = [];
+    for (const scenario of CONFORMANCE_SCENARIOS) {
+        try {
+            const problems = await CHECKS[scenario](target);
+            rows.push(problems.length ? { scenario, ok: false, detail: problems.join("; ") } : { scenario, ok: true });
+        }
+        catch (error) {
+            rows.push({ scenario, ok: false, detail: `threw: ${error instanceof Error ? error.message : String(error)}` });
+        }
+    }
+    return rows;
+}
+//# sourceMappingURL=conformance.js.map

package/dist/source-harness/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../src/source-harness/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAkC,MAAM,kBAAkB,CAAC;AACtH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAsB,MAAM,4BAA4B,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAiE,MAAM,WAAW,CAAC;AAcxG,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,6BAA6B;IAC7B,8BAA8B;IAC9B,8BAA8B;IAC9B,6BAA6B;IAC7B,yBAAyB;IACzB,0BAA0B;CAClB,CAAC,CAAC;AAEZ,MAAM,eAAe,GAAG,gBAAgB,CAAC;AACzC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,mEAAmE,CAAkB,CAAC;AACrH,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,0BAA0B;IAC1B,2BAA2B;IAC3B,iBAAiB;IACjB,8BAA8B;IAC9B,2CAA2C;IAC3C,sDAAsD;IACtD,qBAAqB;IACrB,+BAA+B;IAC/B,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,iBAAiB,GAA0E,MAAM,CAAC,MAAM,CAAC;IAC7G,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,WAAW,YAAY,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE;IACnG,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,WAAW,YAAY,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE;IAC5F,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,UAAU,eAAe,0BAA0B,EAAE,cAAc,EAAE,IAAI,EAAE;IACzH,EAAE,IAAI,EAAE,0CAA0C,EAAE,GAAG,EAAE,WAAW,eAAe,IAAI,YAAY,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;IAC/H,EAAE,IAAI,EAAE,sDAAsD,EAAE,GAAG,EAAE,eAAe,eAAe,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;IAC/H,EAAE,IAAI,EAAE,yCAAyC,EAAE,GAAG,EAAE,WAAW,eAAe,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;IAC/G,EAAE,IAAI,EAAE,iCAAiC,EAAE,GAAG,EAAE,WAAW,eAAe,IAAI,YAAY,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;IACtH,EAAE,IAAI,EAAE,qCAAqC,EAAE,GAAG,EAAE,WAAW,eAAe,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE;IAC/G,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,WAAW,eAAe,0BAA0B,EAAE,cAAc,EAAE,KAAK,EAAE;CACjJ,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,kGAAkG;AAClG,MAAM,KAAK,GAAyD;IAClE,EAAE,EAAE,KAAK;IACT,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,SAAS;IACf,YAAY,CAAC,IAAI;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IACrD,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAC9D,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;CACF,CAAC;AAEF,IAAI,KAA6D,CAAC;AAElE,SAAS,UAAU;IACjB,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/M,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE;YACtF,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC;YAC7H,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,WAAW,eAAe,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;SAChN,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,0BAA0B,EAAE,WAAW,EAAE;YAC5F,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,eAAe,mBAAmB,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC;SAClJ,EAAE,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,WAAW,GAAG,GAA0B,EAAE,CAAC;IAC/C,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAChI,qGAAqG;IACrG,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,sBAAsB,EAAE;CACxH,CAAC;AAEF;;;GAGG;AACH,SAAS,OAAO,CAAC,OAAoB,EAAE,UAA+B;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IACrD,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACtB,IAAI,CAAC;QAAC,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACzH,CAAC;AAED,6FAA6F;AAC7F,SAAS,KAAK,CAAC,IAAkB,EAAE,UAA+B;IAChE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrF,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,MAAoC,EAAE,EAAE,CAAC,CAAC,OAAoB,EAAgB,EAAE;IAC9F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACrE,OAAO,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC7E,CAAC,CAAC;AAEF,KAAK,UAAU,aAAa,CAAC,MAAkC,EAAE,UAA+B,EAAE,MAAoC,EAAE,IAAsC,EAAE,QAAiB;IAC/L,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ;QACvI,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KACpH,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,SAAoB,EAAE,GAAW,EAAE,UAA2D,EAAE;IACpH,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK,EAAE,CAAC,CAAC;IACvL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAID,MAAM,MAAM,GAA0D;IACpE,KAAK,CAAC,6BAA6B,CAAC,MAAM;QACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,WAAW,eAAe,0BAA0B,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9H,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACxE,IAAI,IAAI,KAAK,UAAU,CAAC,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,MAAM,6BAA6B,eAAe,EAAE,CAAC,CAAC;YACrH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,WAAW,eAAe,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,eAAe,IAAI,EAAE,CAAC,CAAC;YAC7K,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,UAAU,CAAC,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,UAAU,CAAC,MAAM,6BAA6B,eAAe,EAAE,CAAC,CAAC;QACjM,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,8BAA8B,CAAC,MAAM;QACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAClD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC9F,IAAI,OAAO,CAAC,MAAM;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,gBAAgB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,8BAA8B,CAAC,MAAM;QACzC,MAAM,CAAC,UAAU,CAAC,GAAG,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC;YACnC,CAAC,WAAW,eAAe,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,eAAe,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAClH,CAAC,WAAW,eAAe,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;SAC9D,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAW,CAAC,EAAE,WAAW,eAAe,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACxH,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,MAAM,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;aACvH,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,eAAe,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACxJ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC;QAClH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,MAAM;QACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAuE;YAChF,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,WAAW,eAAe,IAAI,EAAE,EAAE,EAAE,WAAW,YAAY,QAAQ,EAAE;YAC5H,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,WAAW,YAAY,IAAI,EAAE,EAAE,EAAE,WAAW,YAAY,QAAQ,EAAE;YACtH,EAAE,IAAI,EAAE,4CAA4C,EAAE,IAAI,EAAE,WAAW,eAAe,IAAI,EAAE,EAAE,EAAE,WAAW,YAAY,IAAI,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE;YACnJ,EAAE,IAAI,EAAE,8CAA8C,EAAE,IAAI,EAAE,WAAW,YAAY,IAAI,EAAE,EAAE,EAAE,WAAW,eAAe,IAAI,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE;SACzJ,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;gBACtC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE;oBAChE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;oBAChE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;iBACpC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvF,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,mBAAmB,OAAO,CAAC,OAAO,eAAe,CAAC,CAAC;gBAC7G,IAAI,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,uBAAuB,MAAM,EAAE,CAAC,CAAC;gBACjF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,cAAc,IAAI,EAAE,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAAM;QACpC,MAAM,CAAC,UAAU,CAAC,GAAG,WAAW,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,wEAAwE;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC;YACnC,CAAC,WAAW,eAAe,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;YAChE,CAAC,WAAW,eAAe,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE;SACnE,CAAC,CAAC,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAW,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,eAAe,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACrH,IAAI,OAAO,YAAY,KAAK,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACtK,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,eAAe,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,IAAI,QAAQ,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACzK,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,UAAW,EAAE,EAAE,CAAC,WAAW,eAAe,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,eAAe,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QACrL,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,mCAAmC,OAAO,CAAC,OAAO,iBAAiB,CAAC,CAAC;QACxH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAAM;QACrC,MAAM,CAAC,UAAU,CAAC,GAAG,WAAW,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,eAAe,IAAI,EAAE,WAAW,YAAY,IAAI,CAAC,EAAE,CAAC;YACjF,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,UAAW,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;oBAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACjC,OAAO,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;gBACvG,CAAC,CAAC,CAAC,MAAM,CAAC;gBACV,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,mBAAmB,OAAO,CAAC,OAAO,eAAe,CAAC,CAAC;gBACpH,IAAI,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,OAAO,wBAAwB,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAkC;IAC9E,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,QAAQ,IAAI,qBAAqB,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/source-harness/fixture.d.ts

@@ -0,0 +1,95 @@
+/**
+ * The fixture harness: replay a profile's scripted provider answers through the engine, map and
+ * write each committed page through record-overlay over a MemoryBackend bundle, and check each
+ * required scenario's outcome rule. The rules are profile-independent, so one list holds every
+ * profile, generic or extension, to the same behaviour.
+ */
+import { type Connector } from "../connectors.js";
+import type { OverlayReceipt, RecordChange } from "../record-overlay/types.js";
+import { type SourceState } from "../source-engine/machine-state.js";
+import { type FetchIdentity } from "../source-engine/robots.js";
+import type { SourceBudget, SourceProfile, SourceRunReceipt } from "../source-engine/types.js";
+import type { ConceptId, Frontmatter, OkfDocument } from "../types.js";
+import { type PeerRequest, type ScriptedExchange, type TransportCredential } from "./peer.js";
+/** Every profile's fixture includes these; a name may add a variant after a dot (`cursor.resume.page-number`). */
+export declare const REQUIRED_SCENARIOS: readonly ["errors.auth", "errors.rate-limit", "errors.server", "errors.malformed", "page.incomplete", "cursor.resume", "cursor.hostile", "complete.disappear", "fields.owned-conflict", "fields.unmapped", "fields.null", "identity.missing", "hosts.redirect", "hosts.undeclared"];
+export type RequiredScenario = (typeof REQUIRED_SCENARIOS)[number];
+/** The required scenario a name counts toward, or undefined. */
+export declare function scenarioBase(name: string): RequiredScenario | undefined;
+/** Required scenarios no name covers. */
+export declare function missingScenarios(names: Iterable<string>): RequiredScenario[];
+export interface SourceFixture {
+    connector: Connector;
+    profile: SourceProfile<any, any>;
+    spec: unknown;
+    /**
+     * The bundle's starting documents: Conventions for the target Kind, `Signal` and `Source Feed`,
+     * the Source Feed, and any overlay documents.
+     */
+    documents: readonly OkfDocument[];
+    feed: ConceptId;
+    identity?: FetchIdentity;
+    credential?: TransportCredential;
+}
+export interface SourceRunScript {
+    mode?: "incremental" | "complete";
+    /** The run's observation time; runs default to one hour apart. */
+    at?: string;
+    exchanges: readonly ScriptedExchange[];
+    /** Editor edits applied before the run. */
+    edits?: ReadonlyArray<{
+        id: ConceptId;
+        set: Record<string, unknown>;
+    }>;
+    budget?: Partial<SourceBudget>;
+}
+export interface SourceScenario {
+    name: string;
+    /** Replaces the fixture's spec for this scenario. */
+    spec?: unknown;
+    runs: readonly SourceRunScript[];
+}
+export interface ScenarioRun {
+    receipt: SourceRunReceipt;
+    /** Every change a commit carried, replays of pending changes included. */
+    changes: RecordChange[];
+    /** One record-overlay receipt per committed page. */
+    overlay: OverlayReceipt[];
+    /** The run's findings, written. */
+    findings: OverlayReceipt;
+    /** Requests that reached the provider. */
+    received: PeerRequest[];
+    unscripted: string[];
+    unused: ScriptedExchange[];
+    stateBefore: SourceState | null;
+    state: SourceState | null;
+    /** Every document's frontmatter after the run. */
+    documents: Record<string, Frontmatter>;
+}
+export interface ScenarioResult {
+    name: string;
+    base: RequiredScenario | undefined;
+    /** The declared hosts the scenario's spec may reach. */
+    hosts: string[];
+    threshold: number;
+    edits: Array<{
+        run: number;
+        id: ConceptId;
+        set: Record<string, unknown>;
+    }>;
+    runs: ScenarioRun[];
+}
+/** Run one scenario's runs in order over one fresh bundle and one machine state. */
+export declare function runSourceScenario(fixture: SourceFixture, scenario: SourceScenario): Promise<ScenarioResult>;
+/**
+ * The problems with one scenario's result: its required outcome rule, plus for every scenario no
+ * request to a host outside the declared set and no request the fixture did not script.
+ */
+export declare function checkScenario(result: ScenarioResult): string[];
+/** Run every scenario of a fixture, check each, and list the required scenarios it lacks. */
+export declare function runSourceFixture(fixture: SourceFixture, scenarios: readonly SourceScenario[]): Promise<{
+    results: ScenarioResult[];
+    problems: Record<string, string[]>;
+    missing: RequiredScenario[];
+}>;
+//# sourceMappingURL=fixture.d.ts.map

package/dist/source-harness/fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../../src/source-harness/fixture.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAmD,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQnG,OAAO,KAAK,EAAiB,cAAc,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC9F,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAEzF,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAA+B,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE3H,kHAAkH;AAClH,eAAO,MAAM,kBAAkB,qRAepB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEvE;AAED,yCAAyC;AACzC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAO5E;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,SAAS,EAAE,SAAS,WAAW,EAAE,CAAC;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,aAAa,GAAG,UAAU,CAAC;IAClC,kEAAkE;IAClE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACvC,2CAA2C;IAC3C,KAAK,CAAC,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,SAAS,eAAe,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,qDAAqD;IACrD,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,mCAAmC;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,0CAA0C;IAC1C,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACnC,wDAAwD;IACxD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC3E,IAAI,EAAE,WAAW,EAAE,CAAC;CACrB;AAkBD,oFAAoF;AACpF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CA8DjH;AAkHD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,CAY9D;AAED,6FAA6F;AAC7F,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CAU5M"}