@telorun/cli 0.89.0 → 0.90.0

package/dist/release/crate-inputs.js

@@ -0,0 +1,407 @@
+/**
+ * The build inputs of a crate-built source, as one digest.
+ *
+ * A source whose files are prebuilt from a crate in this repository names that
+ * crate (`build: { cargo: <dir> }`), and `telo release stage --pin` records what
+ * built them (`build.inputs`): the committed files of the crate and of every
+ * path crate it reaches transitively — through a path dependency or a `[patch]`
+ * entry — the `Cargo.lock` packages those crates reach, the cargo configuration
+ * and toolchain files that apply where the crate is built, and what the
+ * workspace root's `Cargo.toml` passes down. A lock entry nothing here depends
+ * on is not an input, so an unrelated crate's new dependency trips no source.
+ * `telo release check` recomputes the same digest and fails when it moved, so a
+ * module never ships binaries older than the code they were built from — and an
+ * edit to a crate every controller depends on (the SDK, the controller ABI)
+ * trips every source built on it.
+ *
+ * Files are what git tracks, read from the working tree: build output, ignored
+ * files and a scratch file nobody added are not inputs, wherever they sit.
+ * Cargo is never invoked, so the check needs no toolchain and builds nothing.
+ */
+import { isModuleKind, readModuleSources, sha256Base64Url, } from "@telorun/analyzer";
+import { defaultCustomTags } from "@telorun/templating";
+import { execFileSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { parseAllDocuments } from "yaml";
+import { parseCargoToml } from "./cargo-toml.js";
+/** Files that configure a build from the directory they sit in downward. */
+const BUILD_CONFIG_FILES = [
+    ".cargo/config",
+    ".cargo/config.toml",
+    "rust-toolchain",
+    "rust-toolchain.toml",
+];
+/** What the workspace root's `Cargo.toml` passes down to every member's build. */
+const INHERITED_ROOT_KEYS = [
+    ["patch"],
+    ["replace"],
+    ["profile"],
+    ["workspace", "resolver"],
+    ["workspace", "package"],
+    ["workspace", "lints"],
+];
+const isTable = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function readManifest(dir) {
+    const file = path.join(dir, "Cargo.toml");
+    if (!fs.existsSync(file))
+        throw new Error(`'${dir}' holds no Cargo.toml, so it is not a crate.`);
+    return parseCargoToml(fs.readFileSync(file, "utf8"), file);
+}
+/** The directory of the workspace governing `crateDir` — the one whose
+ *  `Cargo.lock` fixed its registry dependencies — resolved as cargo does. */
+function workspaceRootOf(crateDir, manifest) {
+    if (isTable(manifest.workspace))
+        return { dir: crateDir, manifest };
+    const pkg = manifest.package;
+    if (isTable(pkg) && typeof pkg.workspace === "string") {
+        const dir = path.resolve(crateDir, pkg.workspace);
+        return { dir, manifest: readManifest(dir) };
+    }
+    for (let dir = path.dirname(crateDir);; dir = path.dirname(dir)) {
+        if (fs.existsSync(path.join(dir, "Cargo.toml"))) {
+            const candidate = readManifest(dir);
+            const workspace = candidate.workspace;
+            if (isTable(workspace)) {
+                const relative = path.relative(dir, crateDir).split(path.sep).join("/");
+                const excluded = Array.isArray(workspace.exclude) && workspace.exclude.some((entry) => typeof entry === "string" && (relative === entry.replace(/\/+$/, "") || relative.startsWith(`${entry.replace(/\/+$/, "")}/`)));
+                return excluded ? { dir: crateDir, manifest } : { dir, manifest: candidate };
+            }
+        }
+        if (path.dirname(dir) === dir)
+            return { dir: crateDir, manifest };
+    }
+}
+/** The directories of the path dependencies one crate's manifest declares — in
+ *  `[dependencies]`, `[build-dependencies]` and their per-target forms, the ones
+ *  that link into the build — with `workspace = true` resolved against the
+ *  workspace root's `[workspace.dependencies]`. */
+function pathDependencies(crateDir, manifest, root, inheritedNames) {
+    const tables = [manifest.dependencies, manifest["build-dependencies"]];
+    if (isTable(manifest.target)) {
+        for (const target of Object.values(manifest.target)) {
+            if (isTable(target))
+                tables.push(target.dependencies, target["build-dependencies"]);
+        }
+    }
+    const workspaceDeps = isTable(root.manifest.workspace) ? root.manifest.workspace.dependencies : undefined;
+    const out = [];
+    for (const table of tables) {
+        if (!isTable(table))
+            continue;
+        for (const [name, spec] of Object.entries(table)) {
+            if (!isTable(spec))
+                continue;
+            if (typeof spec.path === "string") {
+                out.push(path.resolve(crateDir, spec.path));
+            }
+            else if (spec.workspace === true) {
+                inheritedNames.add(name);
+                const inherited = isTable(workspaceDeps) ? workspaceDeps[name] : undefined;
+                if (inherited === undefined) {
+                    throw new Error(`${path.join(crateDir, "Cargo.toml")}: dependency '${name}' sets workspace = true, but ` +
+                        `${path.join(root.dir, "Cargo.toml")} declares no [workspace.dependencies] '${name}'.`);
+                }
+                if (isTable(inherited) && typeof inherited.path === "string") {
+                    out.push(path.resolve(root.dir, inherited.path));
+                }
+            }
+        }
+    }
+    return out;
+}
+/** Package name → directory of every path crate the workspace root's `[patch]`
+ *  tables substitute for a registry or git dependency. */
+function patchedPathCrates(root) {
+    const out = new Map();
+    const patch = root.manifest.patch;
+    if (!isTable(patch))
+        return out;
+    for (const registry of Object.values(patch)) {
+        if (!isTable(registry))
+            continue;
+        for (const [name, spec] of Object.entries(registry)) {
+            if (!isTable(spec) || typeof spec.path !== "string")
+                continue;
+            const crate = typeof spec.package === "string" ? spec.package : name;
+            out.set(crate, path.resolve(root.dir, spec.path));
+        }
+    }
+    return out;
+}
+/** The git work tree `dir` belongs to. Not being able to ask is a failure. */
+function gitTopLevel(dir) {
+    return realPath(git(dir, ["rev-parse", "--show-toplevel"]).trim());
+}
+function git(cwd, args) {
+    try {
+        return execFileSync("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+    }
+    catch (err) {
+        const stderr = err.stderr;
+        throw new Error(`\`git ${args.join(" ")}\` failed in ${cwd}` +
+            `${typeof stderr === "string" && stderr.trim() !== "" ? ` (${stderr.trim()})` : ""}. ` +
+            `A crate's build inputs are the files git tracks, so the digest is taken in the ` +
+            `repository's work tree.`);
+    }
+}
+/** A path with every link resolved, in the form the OS reports it. The native
+ *  resolver, because it is the one that expands a Windows 8.3 short name
+ *  (`RUNNER~1`) — git names the work tree by its long name, and a path compared
+ *  against it in the other form reads as outside the repository. */
+function realPath(target) {
+    return fs.realpathSync.native(target);
+}
+/** The files git tracks in `repo`, by repository-relative `/`-separated name.
+ *  Listed once per digest and matched in memory: a process spawn costs far more
+ *  than the listing, above all on Windows. */
+class TrackedFiles {
+    repo;
+    names;
+    constructor(repo) {
+        this.repo = repo;
+        this.names = new Set(git(repo, ["ls-files", "-z", "--cached"]).split("\0").filter((name) => name !== ""));
+    }
+    nameOf(file) {
+        return path.relative(this.repo, file).split(path.sep).join("/");
+    }
+    has(file) {
+        return this.names.has(this.nameOf(file));
+    }
+    /** The tracked files under `dirs`, absolute. A tracked file deleted from the
+     *  work tree is not an input any more, so it is left out. */
+    under(dirs) {
+        const prefixes = dirs.map((dir) => this.nameOf(dir));
+        return [...this.names]
+            .filter((name) => prefixes.some((prefix) => prefix === "" || name.startsWith(`${prefix}/`)))
+            .map((name) => path.join(this.repo, name))
+            .filter((file) => fs.existsSync(file));
+    }
+}
+/** JSON with object keys sorted, so equal TOML data renders to equal text. */
+function canonical(value) {
+    if (value === undefined)
+        return "null";
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    if (isTable(value)) {
+        return `{${Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+/**
+ * The `Cargo.lock` packages the given crates reach through the lock's own
+ * dependency graph. A dependency is written `name`, `name version` or
+ * `name version (source)` — as specific as the lock needs to tell packages of one
+ * name apart — and one that matches no package, or several, is refused rather
+ * than guessed.
+ */
+function reachedLockPackages(lockfile, crateNames) {
+    const lock = parseCargoToml(fs.readFileSync(lockfile, "utf8"), lockfile);
+    const packages = [];
+    for (const entry of Array.isArray(lock.package) ? lock.package : []) {
+        if (!isTable(entry) || typeof entry.name !== "string" || typeof entry.version !== "string") {
+            throw new Error(`${lockfile}: a [[package]] entry has no name or version.`);
+        }
+        packages.push({
+            name: entry.name,
+            version: entry.version,
+            ...(typeof entry.source === "string" ? { source: entry.source } : {}),
+            entry,
+        });
+    }
+    const find = (spec, from) => {
+        const match = /^(\S+)(?: (\S+))?(?: \((.+)\))?$/.exec(spec);
+        const candidates = match
+            ? packages.filter((p) => p.name === match[1] &&
+                (match[2] === undefined || p.version === match[2]) &&
+                (match[3] === undefined || p.source === match[3]))
+            : [];
+        if (candidates.length !== 1) {
+            throw new Error(`${lockfile}: ${from} depends on '${spec}', which names ${candidates.length === 0 ? "no" : "more than one"} ` +
+                `[[package]] — regenerate the lockfile with \`cargo generate-lockfile\`.`);
+        }
+        return candidates[0];
+    };
+    const reached = new Set();
+    const queue = crateNames.map((name) => {
+        const local = packages.filter((p) => p.name === name && p.source === undefined);
+        if (local.length !== 1) {
+            throw new Error(`${lockfile} has ${local.length === 0 ? "no" : "more than one"} entry for the path crate '${name}' — ` +
+                `run \`cargo generate-lockfile\` in the workspace.`);
+        }
+        return local[0];
+    });
+    while (queue.length > 0) {
+        const pkg = queue.shift();
+        if (reached.has(pkg))
+            continue;
+        reached.add(pkg);
+        const deps = pkg.entry.dependencies;
+        for (const dep of Array.isArray(deps) ? deps : []) {
+            if (typeof dep !== "string")
+                throw new Error(`${lockfile}: '${pkg.name}' lists a non-string dependency.`);
+            queue.push(find(dep, `'${pkg.name} ${pkg.version}'`));
+        }
+    }
+    return [...reached];
+}
+/** The value at a dotted key path, or undefined. */
+function valueAt(table, keys) {
+    let current = table;
+    for (const key of keys)
+        current = isTable(current) ? current[key] : undefined;
+    return current;
+}
+/**
+ * The digest of a crate's build inputs, `sha256-<base64url>`: one line per input,
+ * sorted — each tracked file of the crate and of every path crate it reaches
+ * (workspace-root-relative path and content digest), each `Cargo.lock` package
+ * those crates reach, each cargo configuration or toolchain file from the crate's
+ * directory up to the repository root, and from the workspace root's
+ * `Cargo.toml` the inherited `[workspace.dependencies]` entries plus `[patch]`,
+ * `[replace]`, `[profile]` and `[workspace]`'s `resolver`, `package` and `lints`.
+ */
+export async function crateInputsDigest(crateDir) {
+    const manifest = readManifest(crateDir);
+    const root = workspaceRootOf(crateDir, manifest);
+    const lockfile = path.join(root.dir, "Cargo.lock");
+    if (!fs.existsSync(lockfile)) {
+        throw new Error(`${root.dir} has no Cargo.lock. The lockfile fixes every registry dependency the build ` +
+            `links, so it is part of the digest — generate it with \`cargo generate-lockfile\`.`);
+    }
+    const repo = gitTopLevel(crateDir);
+    const tracked = new TrackedFiles(repo);
+    const rootDir = realPath(root.dir);
+    const patched = patchedPathCrates(root);
+    const crates = new Set();
+    const crateNames = [];
+    const inheritedNames = new Set();
+    const walk = (start) => {
+        const queue = [start];
+        while (queue.length > 0) {
+            const dir = realPath(queue.shift());
+            if (crates.has(dir))
+                continue;
+            if (!tracked.has(path.join(dir, "Cargo.toml"))) {
+                throw new Error(`${path.join(dir, "Cargo.toml")} is not tracked by git. A build input is a committed ` +
+                    `file, so an uncommitted crate has none to digest — git add the crate.`);
+            }
+            crates.add(dir);
+            const own = dir === realPath(crateDir) ? manifest : readManifest(dir);
+            const name = isTable(own.package) ? own.package.name : undefined;
+            if (typeof name !== "string")
+                throw new Error(`${path.join(dir, "Cargo.toml")} declares no [package] name.`);
+            crateNames.push(name);
+            queue.push(...pathDependencies(dir, own, root, inheritedNames));
+        }
+    };
+    walk(crateDir);
+    // A path crate the lock reaches that no path dependency named was substituted
+    // by `[patch]`: its files link into the build as much as any other's.
+    let reached = reachedLockPackages(lockfile, crateNames);
+    for (;;) {
+        const unwalked = reached.filter((p) => p.source === undefined && !crateNames.includes(p.name));
+        if (unwalked.length === 0)
+            break;
+        for (const pkg of unwalked) {
+            const dir = patched.get(pkg.name);
+            if (dir === undefined) {
+                throw new Error(`${lockfile}: the crate reaches the path package '${pkg.name}', but neither a path ` +
+                    `dependency nor a [patch] entry of ${path.join(root.dir, "Cargo.toml")} names its directory, ` +
+                    `so its files cannot be digested — regenerate the lockfile with \`cargo generate-lockfile\`.`);
+            }
+            walk(dir);
+        }
+        reached = reachedLockPackages(lockfile, crateNames);
+    }
+    const lines = reached.map((p) => `Cargo.lock#${p.name} ${p.version} ${p.source ?? ""}\0${canonical(p.entry)}`);
+    const workspace = isTable(root.manifest.workspace) ? root.manifest.workspace : {};
+    const workspaceDeps = isTable(workspace.dependencies) ? workspace.dependencies : {};
+    for (const name of inheritedNames) {
+        lines.push(`Cargo.toml#workspace.dependencies.${name}\0${canonical(workspaceDeps[name])}`);
+    }
+    for (const keys of INHERITED_ROOT_KEYS) {
+        const value = valueAt(root.manifest, keys);
+        if (value !== undefined)
+            lines.push(`Cargo.toml#${keys.join(".")}\0${canonical(value)}`);
+    }
+    const configs = [];
+    for (let dir = realPath(crateDir);; dir = path.dirname(dir)) {
+        for (const name of BUILD_CONFIG_FILES)
+            configs.push(path.join(dir, name));
+        if (dir === repo || path.dirname(dir) === dir)
+            break;
+    }
+    const inputs = new Set(tracked.under([...crates]));
+    for (const config of configs) {
+        if (tracked.has(config) && fs.existsSync(config))
+            inputs.add(config);
+    }
+    for (const file of inputs) {
+        const name = path.relative(rootDir, file).split(path.sep).join("/");
+        lines.push(`${name}\0${await sha256Base64Url(fs.readFileSync(file))}`);
+    }
+    lines.sort();
+    return `sha256-${await sha256Base64Url(new TextEncoder().encode([...new Set(lines)].join("\n")))}`;
+}
+/** Recompute every crate-built source's inputs across `modules` and report each
+ *  one that is unrecorded or has moved. */
+export async function checkCrateInputs(modules) {
+    const failures = [];
+    for (const module of modules) {
+        const sources = moduleSources(module);
+        if (sources instanceof Error) {
+            failures.push({ module: module.key, source: "", message: sources.message });
+            continue;
+        }
+        for (const source of sources) {
+            if (source.build === undefined)
+                continue;
+            const { cargo, inputs } = source.build;
+            const fail = (message) => failures.push({ module: module.key, source: source.name, message });
+            let actual;
+            try {
+                actual = await crateInputsDigest(path.resolve(module.dir, cargo));
+            }
+            catch (err) {
+                fail(`cannot digest crate '${cargo}': ${err instanceof Error ? err.message : String(err)}`);
+                continue;
+            }
+            if (inputs === undefined) {
+                fail(`builds from crate '${cargo}' but records no build.inputs — run ` +
+                    `\`telo release stage --pin --module ${module.key}\` after rebuilding its files.`);
+            }
+            else if (inputs !== actual) {
+                fail(`the build inputs of crate '${cargo}' moved (recorded ${inputs}, now ${actual}): a ` +
+                    `tracked file of the crate or of a path crate it reaches, a lock package they reach, ` +
+                    `or a cargo configuration applying to the build changed since its files were built. ` +
+                    `Rebuild them and run \`telo release stage --pin --module ${module.key}\`.`);
+            }
+        }
+    }
+    return failures;
+}
+function moduleSources(module) {
+    const text = fs.readFileSync(module.manifestPath, "utf8");
+    for (const doc of parseAllDocuments(text, { customTags: defaultCustomTags() })) {
+        if (doc.errors.length > 0) {
+            return new Error(`${module.manifestPath} does not parse, so its crate inputs cannot be checked: ` +
+                doc.errors[0].message);
+        }
+        const json = doc.toJSON();
+        if (typeof json?.kind !== "string" || !isModuleKind(json.kind))
+            continue;
+        const { sources, problems } = readModuleSources(json);
+        if (problems.length > 0) {
+            return new Error(`its sources: block cannot be read, so its crate inputs cannot be checked:\n` +
+                problems.map((problem) => `  ${problem.message}`).join("\n"));
+        }
+        return sources;
+    }
+    return [];
+}
+//# sourceMappingURL=crate-inputs.js.map

package/dist/release/crate-inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crate-inputs.js","sourceRoot":"","sources":["../../src/release/crate-inputs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAEhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,cAAc,EAAkC,MAAM,iBAAiB,CAAC;AAGjF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG;IACzB,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,qBAAqB;CACtB,CAAC;AAEF,kFAAkF;AAClF,MAAM,mBAAmB,GAAqC;IAC5D,CAAC,OAAO,CAAC;IACT,CAAC,SAAS,CAAC;IACX,CAAC,SAAS,CAAC;IACX,CAAC,WAAW,EAAE,UAAU,CAAC;IACzB,CAAC,WAAW,EAAE,SAAS,CAAC;IACxB,CAAC,WAAW,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAsB,EAAE,CACnE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;IACjG,OAAO,cAAc,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED;6EAC6E;AAC7E,SAAS,eAAe,CAAC,QAAgB,EAAE,QAAmB;IAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;YACtC,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CACzE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CACzI,CAAC;gBACF,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;mDAGmD;AACnD,SAAS,gBAAgB,CACvB,QAAgB,EAChB,QAAmB,EACnB,IAA0C,EAC1C,cAA2B;IAE3B,MAAM,MAAM,GAAgB,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,IAAI,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBACnC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,iBAAiB,IAAI,+BAA+B;wBACtF,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,0CAA0C,IAAI,IAAI,CACzF,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;0DAC0D;AAC1D,SAAS,iBAAiB,CAAC,IAA0C;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC9D,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,EAAE;YAC1C,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;YACtF,iFAAiF;YACjF,yBAAyB,CAC5B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;oEAGoE;AACpE,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;8CAE8C;AAC9C,MAAM,YAAY;IAGa;IAFZ,KAAK,CAAc;IAEpC,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;IAEO,MAAM,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;iEAC6D;IAC7D,KAAK,CAAC,IAAuB;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;aACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;aAC3F,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,8EAA8E;AAC9E,SAAS,SAAS,CAAC,KAA4B;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aAC/D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AASD;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,QAAgB,EAAE,UAA6B;IAC1E,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,+CAA+C,CAAC,CAAC;QAC9E,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAY,EAAe,EAAE;QACvD,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,KAAK;YACtB,CAAC,CAAC,QAAQ,CAAC,MAAM,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC;gBACnB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClD,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CACpD;YACH,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,KAAK,IAAI,gBAAgB,IAAI,kBAAkB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,GAAG;gBAC3G,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,8BAA8B,IAAI,MAAM;gBACpG,mDAAmD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,MAAM,GAAG,CAAC,IAAI,kCAAkC,CAAC,CAAC;YAC1G,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,oDAAoD;AACpD,SAAS,OAAO,CAAC,KAAgB,EAAE,IAAuB;IACxD,IAAI,OAAO,GAA0B,KAAK,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,GAAG,6EAA6E;YACtF,oFAAoF,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,uDAAuD;oBACpF,uEAAuE,CAC1E,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,8BAA8B,CAAC,CAAC;YAC7G,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,CAAC;IACf,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QACjC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,yCAAyC,GAAG,CAAC,IAAI,wBAAwB;oBAClF,qCAAqC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,wBAAwB;oBAC9F,6FAA6F,CAChG,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,qCAAqC,IAAI,KAAK,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,kBAAkB;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,MAAM,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,CAAC,IAAI,EAAE,CAAC;IACb,OAAO,UAAU,MAAM,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACrG,CAAC;AASD;2CAC2C;AAC3C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAoC;IAEpC,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,SAAS;YACzC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YACvC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACtG,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,wBAAwB,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5F,SAAS;YACX,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CACF,sBAAsB,KAAK,sCAAsC;oBAC/D,uCAAuC,MAAM,CAAC,GAAG,gCAAgC,CACpF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,IAAI,CACF,8BAA8B,KAAK,qBAAqB,MAAM,SAAS,MAAM,OAAO;oBAClF,sFAAsF;oBACtF,qFAAqF;oBACrF,4DAA4D,MAAM,CAAC,GAAG,KAAK,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,MAAwB;IAC7C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/E,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,KAAK,CACd,GAAG,MAAM,CAAC,YAAY,0DAA0D;gBAC9E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CACzB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAA+B,CAAC;QACvD,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,KAAK,CACd,6EAA6E;gBAC3E,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/release/stage.d.ts

@@ -0,0 +1,61 @@
+/**
+ * `telo release stage` — fetch, extract, verify and pin the files a module's
+ * `sources:` block declares.
+ *
+ * Fetching is the CLI's alone: the kernel reads what this put on disk and never
+ * reaches an upstream. Plain staging only verifies against the pins in the
+ * manifest; `--pin` is the one writer of those pins, through the analyzer's
+ * byte-splice editor, so nothing else in `telo.yaml` moves — and nothing is
+ * written until the edited text reads back with exactly the pins computed.
+ */
+import { type SourceArchiveFormat } from "@telorun/analyzer";
+import { type BundleEntry } from "@telorun/kernel";
+export interface StageTarget {
+    /** Workspace-relative module key, for messages. */
+    readonly key: string;
+    readonly dir: string;
+    readonly manifestPath: string;
+}
+export interface StageOutcome {
+    readonly module: string;
+    readonly source: string;
+    /** Module-relative path of the entry. */
+    readonly path: string;
+    readonly action: "verified" | "staged" | "linked" | "pinned";
+}
+export interface StageFailure {
+    readonly module: string;
+    readonly source?: string;
+    readonly path?: string;
+    readonly url?: string;
+    readonly message: string;
+}
+export interface StageResult {
+    readonly outcomes: StageOutcome[];
+    readonly failures: StageFailure[];
+}
+/** Reads the archive at a URL, in the format its source declares, into its entries. */
+export type ArchiveReader = (url: string, format: SourceArchiveFormat) => Promise<BundleEntry[]>;
+/**
+ * One fetch per URL for the life of the reader; the caller decides that life
+ * (the command takes one reader per module, so decoded archives do not pile up
+ * across a workspace). A request is bounded in time, in response size and in
+ * decompressed size, and may not end at a URL a source could not name.
+ */
+export declare function createArchiveReader(options?: {
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    maxBytes?: number;
+    maxExtractedBytes?: number;
+}): ArchiveReader;
+/**
+ * Stage one module's `sources:`. With `pin`, fetch every file entry, write its
+ * `sha256` and `executable` — and each built source's `build.inputs` — into the
+ * manifest, then stage against those pins. A module with no `sources:` block
+ * yields an empty result.
+ */
+export declare function stageModule(target: StageTarget, options: {
+    pin: boolean;
+    archives: ArchiveReader;
+}): Promise<StageResult>;
+//# sourceMappingURL=stage.d.ts.map

package/dist/release/stage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage.d.ts","sourceRoot":"","sources":["../../src/release/stage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EASL,KAAK,mBAAmB,EAIzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAA+B,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAQhF,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;CAC9D;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;CACnC;AAED,uFAAuF;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;AAgBjG;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACvB,GACL,aAAa,CAwBf;AA2ZD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,GACjD,OAAO,CAAC,WAAW,CAAC,CA2FtB"}