@tiangong-lca/cli 0.1.0 → 0.1.2

package/dist/src/command-spec.d.ts

@@ -0,0 +1,90 @@
+export declare const FOUNDRY_COMMAND_SPEC_SCHEMA: 'tiangong-foundry.command-spec.v1';
+export type FoundryArtifactFact = {
+    role: string;
+    path: string;
+    bytes: number;
+    sha256: string;
+};
+export type FoundryCommandSpecBinding = {
+    artifacts: FoundryArtifactFact[];
+};
+export type FoundryCommandSpec = {
+    schema: typeof FOUNDRY_COMMAND_SPEC_SCHEMA;
+    executable: string;
+    argv: string[];
+    display: string;
+    binding: FoundryCommandSpecBinding;
+    sha256: string;
+};
+export type CreateFoundryCommandSpecOptions = {
+    executable: string;
+    argv: readonly string[];
+    binding?: FoundryCommandSpecBinding;
+};
+export type CreateFileArtifactFactOptions = {
+    role: string;
+    path: string;
+    filePath: string;
+};
+export type FoundryCommandSpecEnvironment = Record<string, string | undefined>;
+export type FoundryCommandSpecSpawnOptions = {
+    cwd?: string;
+    env?: FoundryCommandSpecEnvironment;
+    encoding: 'utf8';
+    maxBuffer?: number;
+    shell: false;
+    windowsHide: true;
+};
+export type FoundryCommandSpecAsyncSpawnOptions = FoundryCommandSpecSpawnOptions & {
+    signal: AbortSignal;
+};
+export type FoundryCommandSpecSpawnResult = {
+    pid?: number;
+    output?: unknown[];
+    stdout: string;
+    stderr: string;
+    status: number | null;
+    signal: string | null;
+    error?: Error;
+};
+export type ExecuteFoundryCommandSpecSyncOptions = {
+    resolveArtifactPath: (artifactPath: string) => string | null;
+    cwd?: string;
+    env?: FoundryCommandSpecEnvironment;
+    maxBuffer?: number;
+    spawnImpl?: (executable: string, argv: readonly string[], options: FoundryCommandSpecSpawnOptions) => FoundryCommandSpecSpawnResult;
+};
+export type FoundryCommandSpecClock = {
+    now: () => number;
+};
+export type FoundryCommandSpecSleep = (milliseconds: number, signal: AbortSignal) => Promise<void>;
+export type ExecuteFoundryCommandSpecOptions = {
+    resolveArtifactPath: (artifactPath: string) => string | null;
+    cwd?: string;
+    env?: FoundryCommandSpecEnvironment;
+    maxBuffer?: number;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    clock?: FoundryCommandSpecClock;
+    sleep?: FoundryCommandSpecSleep;
+    spawnImpl?: (executable: string, argv: readonly string[], options: FoundryCommandSpecAsyncSpawnOptions) => Promise<FoundryCommandSpecSpawnResult>;
+};
+export declare class FoundryCommandSpecTimeoutError extends Error {
+    readonly timeoutMs: number;
+    readonly startedAtMs: number;
+    readonly deadlineMs: number;
+    constructor(timeoutMs: number, startedAtMs: number);
+}
+export declare class FoundryCommandSpecAbortError extends Error {
+    readonly reason: unknown;
+    constructor(reason: unknown);
+}
+export declare function renderFoundryCommandDisplay(executable: string, argv: readonly string[]): string;
+export declare function parseFoundryCommandSpec(value: unknown): FoundryCommandSpec;
+export declare function createFoundryCommandSpec(options: CreateFoundryCommandSpecOptions): FoundryCommandSpec;
+export declare function createFileArtifactFact(options: CreateFileArtifactFactOptions): FoundryArtifactFact;
+export declare function commandSpecOptionValue(value: unknown, optionName: string): string | null;
+export declare function assertFoundryCommandSpecArtifactsCurrent(value: unknown, resolveArtifactPath: (artifactPath: string) => string | null): FoundryCommandSpec;
+export declare function assertFoundryCommandSpecBindsArtifact(value: unknown, requiredArtifact: FoundryArtifactFact): FoundryCommandSpec;
+export declare function executeFoundryCommandSpecSync(value: unknown, options: ExecuteFoundryCommandSpecSyncOptions): FoundryCommandSpecSpawnResult;
+export declare function executeFoundryCommandSpec(value: unknown, options: ExecuteFoundryCommandSpecOptions): Promise<FoundryCommandSpecSpawnResult>;

package/dist/src/command-spec.js

@@ -0,0 +1,400 @@
+import { spawn, spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+export const FOUNDRY_COMMAND_SPEC_SCHEMA = 'tiangong-foundry.command-spec.v1';
+const SHA256_PATTERN = /^[a-f0-9]{64}$/u;
+const VALUE_FLAGS = new Set([
+    '--input',
+    '--input-file',
+    '--out-dir',
+    '--root-policy',
+    '--state-code',
+    '--target-user-id',
+    '--type',
+]);
+const BOOLEAN_FLAGS = new Set(['--commit', '--compare-root-payload', '--json']);
+const UNIQUE_FLAGS = new Set([...VALUE_FLAGS, ...BOOLEAN_FLAGS]);
+const INPUT_FLAG_ALIASES = new Set(['--input', '--input-file']);
+const DEFAULT_MAX_BUFFER = 1024 * 1024;
+const MAX_NODE_TIMER_DELAY_MS = 2_147_483_647;
+const EXECUTION_COMPLETED = Symbol('command-spec-execution-completed');
+export class FoundryCommandSpecTimeoutError extends Error {
+    timeoutMs;
+    startedAtMs;
+    deadlineMs;
+    constructor(timeoutMs, startedAtMs) {
+        super(`CommandSpec execution exceeded its ${timeoutMs} ms timeout.`);
+        this.name = 'FoundryCommandSpecTimeoutError';
+        this.timeoutMs = timeoutMs;
+        this.startedAtMs = startedAtMs;
+        this.deadlineMs = startedAtMs + timeoutMs;
+    }
+}
+export class FoundryCommandSpecAbortError extends Error {
+    reason;
+    constructor(reason) {
+        super('CommandSpec execution was aborted.', { cause: reason });
+        this.name = 'FoundryCommandSpecAbortError';
+        this.reason = reason;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function hasExactKeys(value, expectedKeys) {
+    const actual = Object.keys(value).sort();
+    const expected = [...expectedKeys].sort();
+    return actual.length === expected.length && actual.every((key, index) => key === expected[index]);
+}
+function canonicalJsonValue(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalJsonValue);
+    if (!isRecord(value))
+        return value;
+    return Object.fromEntries(Object.keys(value)
+        .sort()
+        .map((key) => [key, canonicalJsonValue(value[key])]));
+}
+function sha256Buffer(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function commandSpecAuthority(value) {
+    return {
+        schema: value.schema,
+        executable: value.executable,
+        argv: value.argv,
+        binding: value.binding,
+    };
+}
+function commandSpecSha256(value) {
+    return sha256Buffer(JSON.stringify(canonicalJsonValue(commandSpecAuthority(value))));
+}
+function commandToken(value, label) {
+    if (typeof value !== 'string' || value.length === 0 || /[\0\r\n]/u.test(value)) {
+        throw new Error(`${label} must be a non-empty single-line string without NUL bytes.`);
+    }
+    return value;
+}
+function renderDisplayToken(value) {
+    if (/^[A-Za-z0-9_./:@%+=,-]+$/u.test(value))
+        return value;
+    return `'${value.replace(/'/gu, `'\\''`)}'`;
+}
+export function renderFoundryCommandDisplay(executable, argv) {
+    return [executable, ...argv].map(renderDisplayToken).join(' ');
+}
+function parseArtifactFact(value, index) {
+    if (!isRecord(value) ||
+        !hasExactKeys(value, ['bytes', 'path', 'role', 'sha256']) ||
+        !Number.isSafeInteger(value.bytes) ||
+        Number(value.bytes) < 0 ||
+        typeof value.sha256 !== 'string' ||
+        !SHA256_PATTERN.test(value.sha256)) {
+        throw new Error(`CommandSpec artifact ${index} failed exact bytes/SHA-256 validation.`);
+    }
+    return {
+        role: commandToken(value.role, `CommandSpec artifact ${index} role`),
+        path: commandToken(value.path, `CommandSpec artifact ${index} path`),
+        bytes: Number(value.bytes),
+        sha256: value.sha256,
+    };
+}
+function parseBinding(value) {
+    if (!isRecord(value) || !hasExactKeys(value, ['artifacts']) || !Array.isArray(value.artifacts)) {
+        throw new Error('CommandSpec binding must contain the exact artifacts key.');
+    }
+    const artifacts = value.artifacts.map(parseArtifactFact);
+    const roles = artifacts.map((artifact) => artifact.role);
+    if (new Set(roles).size !== roles.length) {
+        throw new Error('CommandSpec artifact roles must be unique.');
+    }
+    return { artifacts };
+}
+function criticalFlagName(token) {
+    if (UNIQUE_FLAGS.has(token))
+        return token;
+    const equals = token.indexOf('=');
+    if (equals <= 0)
+        return null;
+    const name = token.slice(0, equals);
+    return UNIQUE_FLAGS.has(name) ? name : null;
+}
+function validateCriticalFlags(argv) {
+    const counts = new Map();
+    for (let index = 0; index < argv.length; index += 1) {
+        const token = argv[index];
+        const name = criticalFlagName(token);
+        if (!name)
+            continue;
+        counts.set(name, (counts.get(name) ?? 0) + 1);
+        if (token.startsWith(`${name}=`)) {
+            const inlineValue = token.slice(name.length + 1);
+            if (VALUE_FLAGS.has(name) && inlineValue.length === 0) {
+                throw new Error(`CommandSpec critical flag ${name} requires one value.`);
+            }
+            if (BOOLEAN_FLAGS.has(name)) {
+                throw new Error(`CommandSpec boolean flag ${name} must not use an inline value.`);
+            }
+        }
+        if (VALUE_FLAGS.has(name) && token === name) {
+            const value = argv[index + 1];
+            if (!value || value.startsWith('--')) {
+                throw new Error(`CommandSpec critical flag ${name} requires one value.`);
+            }
+        }
+    }
+    for (const [name, count] of counts) {
+        if (count > 1)
+            throw new Error(`CommandSpec critical flag ${name} may appear only once.`);
+    }
+    const inputAliasCount = [...INPUT_FLAG_ALIASES].reduce((count, name) => count + (counts.get(name) ?? 0), 0);
+    if (inputAliasCount > 1) {
+        throw new Error('CommandSpec input aliases --input and --input-file are mutually exclusive.');
+    }
+}
+export function parseFoundryCommandSpec(value) {
+    if (!isRecord(value) ||
+        !hasExactKeys(value, ['argv', 'binding', 'display', 'executable', 'schema', 'sha256'])) {
+        throw new Error('CommandSpec must contain exact keys with no unexpected fields.');
+    }
+    if (value.schema !== FOUNDRY_COMMAND_SPEC_SCHEMA) {
+        throw new Error(`CommandSpec schema must be ${FOUNDRY_COMMAND_SPEC_SCHEMA}.`);
+    }
+    const executable = commandToken(value.executable, 'CommandSpec executable');
+    if (!Array.isArray(value.argv))
+        throw new Error('CommandSpec argv must be an array.');
+    const argv = value.argv.map((entry, index) => commandToken(entry, `CommandSpec argv[${index}]`));
+    const display = commandToken(value.display, 'CommandSpec display');
+    const binding = parseBinding(value.binding);
+    validateCriticalFlags(argv);
+    if (typeof value.sha256 !== 'string' || !SHA256_PATTERN.test(value.sha256)) {
+        throw new Error('CommandSpec SHA-256 is missing or malformed.');
+    }
+    const expectedSha256 = commandSpecSha256({
+        schema: value.schema,
+        executable,
+        argv,
+        binding,
+    });
+    if (value.sha256 !== expectedSha256) {
+        throw new Error('CommandSpec SHA-256 does not match executable, argv, and binding.');
+    }
+    return {
+        schema: FOUNDRY_COMMAND_SPEC_SCHEMA,
+        executable,
+        argv,
+        display,
+        binding,
+        sha256: value.sha256,
+    };
+}
+export function createFoundryCommandSpec(options) {
+    const executable = commandToken(options.executable, 'CommandSpec executable');
+    const argv = options.argv.map((entry, index) => commandToken(entry, `CommandSpec argv[${index}]`));
+    const binding = parseBinding(options.binding ?? { artifacts: [] });
+    validateCriticalFlags(argv);
+    const authority = {
+        schema: FOUNDRY_COMMAND_SPEC_SCHEMA,
+        executable,
+        argv,
+        binding,
+    };
+    return parseFoundryCommandSpec({
+        ...authority,
+        display: renderFoundryCommandDisplay(executable, argv),
+        sha256: commandSpecSha256(authority),
+    });
+}
+export function createFileArtifactFact(options) {
+    const role = commandToken(options.role, 'Artifact role');
+    const artifactPath = commandToken(options.path, 'Artifact path');
+    const filePath = commandToken(options.filePath, 'Artifact file path');
+    if (!fs.existsSync(filePath) || !fs.statSync(filePath).isFile()) {
+        throw new Error(`CommandSpec artifact is not a readable file: ${artifactPath}`);
+    }
+    const bytes = fs.readFileSync(filePath);
+    return {
+        role,
+        path: artifactPath,
+        bytes: bytes.byteLength,
+        sha256: sha256Buffer(bytes),
+    };
+}
+export function commandSpecOptionValue(value, optionName) {
+    const spec = parseFoundryCommandSpec(value);
+    for (let index = 0; index < spec.argv.length; index += 1) {
+        const token = spec.argv[index];
+        if (token === optionName)
+            return spec.argv[index + 1] ?? null;
+        if (token.startsWith(`${optionName}=`))
+            return token.slice(optionName.length + 1) || null;
+    }
+    return null;
+}
+export function assertFoundryCommandSpecArtifactsCurrent(value, resolveArtifactPath) {
+    const spec = parseFoundryCommandSpec(value);
+    for (const artifact of spec.binding.artifacts) {
+        const filePath = resolveArtifactPath(artifact.path);
+        if (!filePath || !fs.existsSync(filePath) || !fs.statSync(filePath).isFile()) {
+            throw new Error(`CommandSpec artifact drift: ${artifact.role} is missing.`);
+        }
+        const bytes = fs.readFileSync(filePath);
+        const sha256 = sha256Buffer(bytes);
+        if (bytes.byteLength !== artifact.bytes || sha256 !== artifact.sha256) {
+            throw new Error(`CommandSpec artifact drift: ${artifact.role} bytes/SHA-256 changed.`);
+        }
+    }
+    return spec;
+}
+export function assertFoundryCommandSpecBindsArtifact(value, requiredArtifact) {
+    const spec = parseFoundryCommandSpec(value);
+    const required = parseArtifactFact(requiredArtifact, 0);
+    const matched = spec.binding.artifacts.some((artifact) => artifact.role === required.role &&
+        artifact.path === required.path &&
+        artifact.bytes === required.bytes &&
+        artifact.sha256 === required.sha256);
+    if (!matched) {
+        throw new Error(`CommandSpec required artifact binding does not match: ${required.role}.`);
+    }
+    return spec;
+}
+export function executeFoundryCommandSpecSync(value, options) {
+    const spec = assertFoundryCommandSpecArtifactsCurrent(value, options.resolveArtifactPath);
+    const spawnOptions = {
+        ...(options.cwd === undefined ? {} : { cwd: options.cwd }),
+        ...(options.env === undefined ? {} : { env: options.env }),
+        ...(options.maxBuffer === undefined ? {} : { maxBuffer: options.maxBuffer }),
+        encoding: 'utf8',
+        shell: false,
+        windowsHide: true,
+    };
+    const spawnImpl = options.spawnImpl ??
+        ((executable, argv, childOptions) => spawnSync(executable, [...argv], childOptions));
+    return spawnImpl(spec.executable, spec.argv, spawnOptions);
+}
+export async function executeFoundryCommandSpec(value, options) {
+    const spec = assertFoundryCommandSpecArtifactsCurrent(value, options.resolveArtifactPath);
+    validateAsyncExecutionOptions(options);
+    const clock = options.clock ?? { now: Date.now };
+    const sleep = options.sleep ?? defaultSleep;
+    if (options.signal?.aborted) {
+        throw new FoundryCommandSpecAbortError(options.signal.reason);
+    }
+    const controller = new AbortController();
+    const startedAtMs = clock.now();
+    if (!Number.isFinite(startedAtMs)) {
+        throw new Error('CommandSpec clock must return a finite millisecond value.');
+    }
+    let settled = false;
+    const forwardAbort = () => controller.abort(options.signal?.reason);
+    options.signal?.addEventListener('abort', forwardAbort, { once: true });
+    try {
+        const spawnOptions = {
+            ...(options.cwd === undefined ? {} : { cwd: options.cwd }),
+            ...(options.env === undefined ? {} : { env: options.env }),
+            ...(options.maxBuffer === undefined ? {} : { maxBuffer: options.maxBuffer }),
+            encoding: 'utf8',
+            shell: false,
+            windowsHide: true,
+            signal: controller.signal,
+        };
+        const spawnImpl = options.spawnImpl ?? spawnCommandAsync;
+        const spawnPromise = spawnImpl(spec.executable, spec.argv, spawnOptions);
+        const abortPromise = new Promise((_resolve, reject) => {
+            const rejectAbort = () => {
+                if (settled || controller.signal.reason === EXECUTION_COMPLETED)
+                    return;
+                const reason = controller.signal.reason;
+                reject(reason instanceof FoundryCommandSpecTimeoutError
+                    ? reason
+                    : new FoundryCommandSpecAbortError(reason));
+            };
+            controller.signal.addEventListener('abort', rejectAbort, { once: true });
+        });
+        const timeoutPromise = options.timeoutMs === undefined
+            ? new Promise(() => undefined)
+            : sleep(options.timeoutMs, controller.signal).then(() => {
+                const error = new FoundryCommandSpecTimeoutError(options.timeoutMs, startedAtMs);
+                controller.abort(error);
+                throw error;
+            });
+        const result = await Promise.race([spawnPromise, abortPromise, timeoutPromise]);
+        settled = true;
+        controller.abort(EXECUTION_COMPLETED);
+        return result;
+    }
+    finally {
+        settled = true;
+        options.signal?.removeEventListener('abort', forwardAbort);
+    }
+}
+function validateAsyncExecutionOptions(options) {
+    if (options.timeoutMs !== undefined &&
+        (!Number.isSafeInteger(options.timeoutMs) ||
+            options.timeoutMs <= 0 ||
+            options.timeoutMs > MAX_NODE_TIMER_DELAY_MS)) {
+        throw new Error(`CommandSpec timeoutMs must be a positive safe integer no greater than the maximum supported timer delay (${MAX_NODE_TIMER_DELAY_MS} ms).`);
+    }
+    if (options.maxBuffer !== undefined &&
+        (!Number.isSafeInteger(options.maxBuffer) || options.maxBuffer <= 0)) {
+        throw new Error('CommandSpec maxBuffer must be a positive safe integer.');
+    }
+}
+function defaultSleep(milliseconds, signal) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, milliseconds);
+        timer.unref();
+        signal.addEventListener('abort', () => {
+            clearTimeout(timer);
+            reject(signal.reason);
+        }, { once: true });
+    });
+}
+function spawnCommandAsync(executable, argv, options) {
+    return new Promise((resolve) => {
+        const child = spawn(executable, [...argv], {
+            cwd: options.cwd,
+            env: options.env,
+            shell: false,
+            windowsHide: true,
+            signal: options.signal,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        const stdout = [];
+        const stderr = [];
+        const maxBuffer = options.maxBuffer ?? DEFAULT_MAX_BUFFER;
+        let capturedBytes = 0;
+        let captureError;
+        let spawnError;
+        const capture = (target, bytes) => {
+            capturedBytes += bytes.byteLength;
+            if (capturedBytes > maxBuffer) {
+                captureError = new RangeError(`CommandSpec output exceeded maxBuffer (${maxBuffer} bytes).`);
+                child.kill();
+                return;
+            }
+            target.push(bytes);
+        };
+        child.stdout.on('data', (chunk) => capture(stdout, chunk));
+        child.stderr.on('data', (chunk) => capture(stderr, chunk));
+        child.once('error', (error) => {
+            spawnError = error;
+        });
+        child.once('close', (status, signal) => {
+            const stdoutText = Buffer.concat(stdout).toString('utf8');
+            const stderrText = Buffer.concat(stderr).toString('utf8');
+            resolve({
+                ...(child.pid === undefined ? {} : { pid: child.pid }),
+                output: [null, stdoutText, stderrText],
+                stdout: stdoutText,
+                stderr: stderrText,
+                status,
+                signal,
+                ...((captureError ?? spawnError) === undefined
+                    ? {}
+                    : { error: (captureError ?? spawnError) }),
+            });
+        });
+    });
+}
+//# sourceMappingURL=command-spec.js.map

package/dist/src/command-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-spec.js","sourceRoot":"","sources":["../../src/command-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAA2C,CAAC;AAEvF,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,SAAS;IACT,cAAc;IACd,WAAW;IACX,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;AACjE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAChE,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,mBAAmB,GAAG,MAAM,CAAC,kCAAkC,CAAC,CAAC;AA+FvE,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,UAAU,CAAS;IAE5B,YAAY,SAAiB,EAAE,WAAmB;QAChD,KAAK,CAAC,sCAAsC,SAAS,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,MAAM,CAAU;IAEzB,YAAY,MAAe;QACzB,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,YAA+B;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACf,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAsB;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAK7B;IACC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAK1B;IACC,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4DAA4D,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAkB,EAAE,IAAuB;IACrF,OAAO,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;QACvB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,yCAAyC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,CAAC;QACpE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,CAAC;QACpE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,sBAAsB,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,gCAAgC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,sBAAsB,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,wBAAwB,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,MAAM,CACpD,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAChD,CAAC,CACF,CAAC;IACF,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EACtF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,2BAA2B,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,oBAAoB,KAAK,GAAG,CAAC,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,cAAc,GAAG,iBAAiB,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU;QACV,IAAI;QACJ,OAAO;KACR,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,2BAA2B;QACnC,UAAU;QACV,IAAI;QACJ,OAAO;QACP,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAwC;IAExC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC7C,YAAY,CAAC,KAAK,EAAE,oBAAoB,KAAK,GAAG,CAAC,CAClD,CAAC;IACF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE,2BAA2B;QACnC,UAAU;QACV,IAAI;QACJ,OAAO;KACR,CAAC;IACF,OAAO,uBAAuB,CAAC;QAC7B,GAAG,SAAS;QACZ,OAAO,EAAE,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC;QACtD,MAAM,EAAE,iBAAiB,CAAC,SAAS,CAAC;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAsC;IAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,KAAK,CAAC,UAAU;QACvB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,UAAkB;IACvE,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QAC9D,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,KAAc,EACd,mBAA4D;IAE5D,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,IAAI,cAAc,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,KAAK,IAAI,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,KAAc,EACd,gBAAqC;IAErC,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CACzC,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC/B,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC/B,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QACjC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CACtC,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yDAAyD,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc,EACd,OAA6C;IAE7C,MAAM,IAAI,GAAG,wCAAwC,CAAC,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAmC;QACnD,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,IAAI;KAClB,CAAC;IACF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS;QACjB,CAAC,CAAC,UAAkB,EAAE,IAAuB,EAAE,YAA4C,EAAE,EAAE,CAC7F,SAAS,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,YAAY,CAAkC,CAAC,CAAC;IACrF,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAc,EACd,OAAyC;IAEzC,MAAM,IAAI,GAAG,wCAAwC,CAAC,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1F,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,MAAM,YAAY,GAAwC;YACxD,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5E,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACzD,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC3D,MAAM,WAAW,GAAG,GAAG,EAAE;gBACvB,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,mBAAmB;oBAAE,OAAO;gBACxE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;gBACxC,MAAM,CACJ,MAAM,YAAY,8BAA8B;oBAC9C,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAC7C,CAAC;YACJ,CAAC,CAAC;YACF,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,MAAM,cAAc,GAClB,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,OAAO,CAAQ,GAAG,EAAE,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,KAAK,GAAG,IAAI,8BAA8B,CAAC,OAAO,CAAC,SAAU,EAAE,WAAW,CAAC,CAAC;gBAClF,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;QACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QAChF,OAAO,GAAG,IAAI,CAAC;QACf,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAyC;IAC9E,IACE,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC;YACvC,OAAO,CAAC,SAAS,IAAI,CAAC;YACtB,OAAO,CAAC,SAAS,GAAG,uBAAuB,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4GAA4G,uBAAuB,OAAO,CAC3I,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,MAAmB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,UAAkB,EAClB,IAAuB,EACvB,OAA4C;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACzC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC1D,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAA+B,CAAC;QACpC,IAAI,UAA6B,CAAC;QAElC,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,EAAE;YAClD,aAAa,IAAI,KAAK,CAAC,UAAU,CAAC;YAClC,IAAI,aAAa,GAAG,SAAS,EAAE,CAAC;gBAC9B,YAAY,GAAG,IAAI,UAAU,CAC3B,0CAA0C,SAAS,UAAU,CAC9D,CAAC;gBACF,KAAK,CAAC,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,OAAO,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC;gBACtC,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,MAAM;gBACN,GAAG,CAAC,CAAC,YAAY,IAAI,UAAU,CAAC,KAAK,SAAS;oBAC5C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,IAAI,UAAU,CAAE,EAAE,CAAC;aAC9C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { spawn, spawnSync } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport fs from 'node:fs';\n\nexport const FOUNDRY_COMMAND_SPEC_SCHEMA = 'tiangong-foundry.command-spec.v1' as const;\n\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst VALUE_FLAGS = new Set([\n  '--input',\n  '--input-file',\n  '--out-dir',\n  '--root-policy',\n  '--state-code',\n  '--target-user-id',\n  '--type',\n]);\nconst BOOLEAN_FLAGS = new Set(['--commit', '--compare-root-payload', '--json']);\nconst UNIQUE_FLAGS = new Set([...VALUE_FLAGS, ...BOOLEAN_FLAGS]);\nconst INPUT_FLAG_ALIASES = new Set(['--input', '--input-file']);\nconst DEFAULT_MAX_BUFFER = 1024 * 1024;\nconst MAX_NODE_TIMER_DELAY_MS = 2_147_483_647;\nconst EXECUTION_COMPLETED = Symbol('command-spec-execution-completed');\n\ntype JsonRecord = Record<string, unknown>;\n\nexport type FoundryArtifactFact = {\n  role: string;\n  path: string;\n  bytes: number;\n  sha256: string;\n};\n\nexport type FoundryCommandSpecBinding = {\n  artifacts: FoundryArtifactFact[];\n};\n\nexport type FoundryCommandSpec = {\n  schema: typeof FOUNDRY_COMMAND_SPEC_SCHEMA;\n  executable: string;\n  argv: string[];\n  display: string;\n  binding: FoundryCommandSpecBinding;\n  sha256: string;\n};\n\nexport type CreateFoundryCommandSpecOptions = {\n  executable: string;\n  argv: readonly string[];\n  binding?: FoundryCommandSpecBinding;\n};\n\nexport type CreateFileArtifactFactOptions = {\n  role: string;\n  path: string;\n  filePath: string;\n};\n\nexport type FoundryCommandSpecEnvironment = Record<string, string | undefined>;\n\nexport type FoundryCommandSpecSpawnOptions = {\n  cwd?: string;\n  env?: FoundryCommandSpecEnvironment;\n  encoding: 'utf8';\n  maxBuffer?: number;\n  shell: false;\n  windowsHide: true;\n};\n\nexport type FoundryCommandSpecAsyncSpawnOptions = FoundryCommandSpecSpawnOptions & {\n  signal: AbortSignal;\n};\n\nexport type FoundryCommandSpecSpawnResult = {\n  pid?: number;\n  output?: unknown[];\n  stdout: string;\n  stderr: string;\n  status: number | null;\n  signal: string | null;\n  error?: Error;\n};\n\nexport type ExecuteFoundryCommandSpecSyncOptions = {\n  resolveArtifactPath: (artifactPath: string) => string | null;\n  cwd?: string;\n  env?: FoundryCommandSpecEnvironment;\n  maxBuffer?: number;\n  spawnImpl?: (\n    executable: string,\n    argv: readonly string[],\n    options: FoundryCommandSpecSpawnOptions,\n  ) => FoundryCommandSpecSpawnResult;\n};\n\nexport type FoundryCommandSpecClock = {\n  now: () => number;\n};\n\nexport type FoundryCommandSpecSleep = (milliseconds: number, signal: AbortSignal) => Promise<void>;\n\nexport type ExecuteFoundryCommandSpecOptions = {\n  resolveArtifactPath: (artifactPath: string) => string | null;\n  cwd?: string;\n  env?: FoundryCommandSpecEnvironment;\n  maxBuffer?: number;\n  timeoutMs?: number;\n  signal?: AbortSignal;\n  clock?: FoundryCommandSpecClock;\n  sleep?: FoundryCommandSpecSleep;\n  spawnImpl?: (\n    executable: string,\n    argv: readonly string[],\n    options: FoundryCommandSpecAsyncSpawnOptions,\n  ) => Promise<FoundryCommandSpecSpawnResult>;\n};\n\nexport class FoundryCommandSpecTimeoutError extends Error {\n  readonly timeoutMs: number;\n  readonly startedAtMs: number;\n  readonly deadlineMs: number;\n\n  constructor(timeoutMs: number, startedAtMs: number) {\n    super(`CommandSpec execution exceeded its ${timeoutMs} ms timeout.`);\n    this.name = 'FoundryCommandSpecTimeoutError';\n    this.timeoutMs = timeoutMs;\n    this.startedAtMs = startedAtMs;\n    this.deadlineMs = startedAtMs + timeoutMs;\n  }\n}\n\nexport class FoundryCommandSpecAbortError extends Error {\n  readonly reason: unknown;\n\n  constructor(reason: unknown) {\n    super('CommandSpec execution was aborted.', { cause: reason });\n    this.name = 'FoundryCommandSpecAbortError';\n    this.reason = reason;\n  }\n}\n\nfunction isRecord(value: unknown): value is JsonRecord {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction hasExactKeys(value: JsonRecord, expectedKeys: readonly string[]): boolean {\n  const actual = Object.keys(value).sort();\n  const expected = [...expectedKeys].sort();\n  return actual.length === expected.length && actual.every((key, index) => key === expected[index]);\n}\n\nfunction canonicalJsonValue(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(canonicalJsonValue);\n  if (!isRecord(value)) return value;\n  return Object.fromEntries(\n    Object.keys(value)\n      .sort()\n      .map((key) => [key, canonicalJsonValue(value[key])]),\n  );\n}\n\nfunction sha256Buffer(value: string | Buffer): string {\n  return createHash('sha256').update(value).digest('hex');\n}\n\nfunction commandSpecAuthority(value: {\n  schema: unknown;\n  executable: unknown;\n  argv: unknown;\n  binding: unknown;\n}): JsonRecord {\n  return {\n    schema: value.schema,\n    executable: value.executable,\n    argv: value.argv,\n    binding: value.binding,\n  };\n}\n\nfunction commandSpecSha256(value: {\n  schema: unknown;\n  executable: unknown;\n  argv: unknown;\n  binding: unknown;\n}): string {\n  return sha256Buffer(JSON.stringify(canonicalJsonValue(commandSpecAuthority(value))));\n}\n\nfunction commandToken(value: unknown, label: string): string {\n  if (typeof value !== 'string' || value.length === 0 || /[\\0\\r\\n]/u.test(value)) {\n    throw new Error(`${label} must be a non-empty single-line string without NUL bytes.`);\n  }\n  return value;\n}\n\nfunction renderDisplayToken(value: string): string {\n  if (/^[A-Za-z0-9_./:@%+=,-]+$/u.test(value)) return value;\n  return `'${value.replace(/'/gu, `'\\\\''`)}'`;\n}\n\nexport function renderFoundryCommandDisplay(executable: string, argv: readonly string[]): string {\n  return [executable, ...argv].map(renderDisplayToken).join(' ');\n}\n\nfunction parseArtifactFact(value: unknown, index: number): FoundryArtifactFact {\n  if (\n    !isRecord(value) ||\n    !hasExactKeys(value, ['bytes', 'path', 'role', 'sha256']) ||\n    !Number.isSafeInteger(value.bytes) ||\n    Number(value.bytes) < 0 ||\n    typeof value.sha256 !== 'string' ||\n    !SHA256_PATTERN.test(value.sha256)\n  ) {\n    throw new Error(`CommandSpec artifact ${index} failed exact bytes/SHA-256 validation.`);\n  }\n  return {\n    role: commandToken(value.role, `CommandSpec artifact ${index} role`),\n    path: commandToken(value.path, `CommandSpec artifact ${index} path`),\n    bytes: Number(value.bytes),\n    sha256: value.sha256,\n  };\n}\n\nfunction parseBinding(value: unknown): FoundryCommandSpecBinding {\n  if (!isRecord(value) || !hasExactKeys(value, ['artifacts']) || !Array.isArray(value.artifacts)) {\n    throw new Error('CommandSpec binding must contain the exact artifacts key.');\n  }\n  const artifacts = value.artifacts.map(parseArtifactFact);\n  const roles = artifacts.map((artifact) => artifact.role);\n  if (new Set(roles).size !== roles.length) {\n    throw new Error('CommandSpec artifact roles must be unique.');\n  }\n  return { artifacts };\n}\n\nfunction criticalFlagName(token: string): string | null {\n  if (UNIQUE_FLAGS.has(token)) return token;\n  const equals = token.indexOf('=');\n  if (equals <= 0) return null;\n  const name = token.slice(0, equals);\n  return UNIQUE_FLAGS.has(name) ? name : null;\n}\n\nfunction validateCriticalFlags(argv: readonly string[]): void {\n  const counts = new Map<string, number>();\n  for (let index = 0; index < argv.length; index += 1) {\n    const token = argv[index];\n    const name = criticalFlagName(token);\n    if (!name) continue;\n    counts.set(name, (counts.get(name) ?? 0) + 1);\n    if (token.startsWith(`${name}=`)) {\n      const inlineValue = token.slice(name.length + 1);\n      if (VALUE_FLAGS.has(name) && inlineValue.length === 0) {\n        throw new Error(`CommandSpec critical flag ${name} requires one value.`);\n      }\n      if (BOOLEAN_FLAGS.has(name)) {\n        throw new Error(`CommandSpec boolean flag ${name} must not use an inline value.`);\n      }\n    }\n    if (VALUE_FLAGS.has(name) && token === name) {\n      const value = argv[index + 1];\n      if (!value || value.startsWith('--')) {\n        throw new Error(`CommandSpec critical flag ${name} requires one value.`);\n      }\n    }\n  }\n  for (const [name, count] of counts) {\n    if (count > 1) throw new Error(`CommandSpec critical flag ${name} may appear only once.`);\n  }\n  const inputAliasCount = [...INPUT_FLAG_ALIASES].reduce(\n    (count, name) => count + (counts.get(name) ?? 0),\n    0,\n  );\n  if (inputAliasCount > 1) {\n    throw new Error('CommandSpec input aliases --input and --input-file are mutually exclusive.');\n  }\n}\n\nexport function parseFoundryCommandSpec(value: unknown): FoundryCommandSpec {\n  if (\n    !isRecord(value) ||\n    !hasExactKeys(value, ['argv', 'binding', 'display', 'executable', 'schema', 'sha256'])\n  ) {\n    throw new Error('CommandSpec must contain exact keys with no unexpected fields.');\n  }\n  if (value.schema !== FOUNDRY_COMMAND_SPEC_SCHEMA) {\n    throw new Error(`CommandSpec schema must be ${FOUNDRY_COMMAND_SPEC_SCHEMA}.`);\n  }\n  const executable = commandToken(value.executable, 'CommandSpec executable');\n  if (!Array.isArray(value.argv)) throw new Error('CommandSpec argv must be an array.');\n  const argv = value.argv.map((entry, index) => commandToken(entry, `CommandSpec argv[${index}]`));\n  const display = commandToken(value.display, 'CommandSpec display');\n  const binding = parseBinding(value.binding);\n  validateCriticalFlags(argv);\n  if (typeof value.sha256 !== 'string' || !SHA256_PATTERN.test(value.sha256)) {\n    throw new Error('CommandSpec SHA-256 is missing or malformed.');\n  }\n  const expectedSha256 = commandSpecSha256({\n    schema: value.schema,\n    executable,\n    argv,\n    binding,\n  });\n  if (value.sha256 !== expectedSha256) {\n    throw new Error('CommandSpec SHA-256 does not match executable, argv, and binding.');\n  }\n  return {\n    schema: FOUNDRY_COMMAND_SPEC_SCHEMA,\n    executable,\n    argv,\n    display,\n    binding,\n    sha256: value.sha256,\n  };\n}\n\nexport function createFoundryCommandSpec(\n  options: CreateFoundryCommandSpecOptions,\n): FoundryCommandSpec {\n  const executable = commandToken(options.executable, 'CommandSpec executable');\n  const argv = options.argv.map((entry, index) =>\n    commandToken(entry, `CommandSpec argv[${index}]`),\n  );\n  const binding = parseBinding(options.binding ?? { artifacts: [] });\n  validateCriticalFlags(argv);\n  const authority = {\n    schema: FOUNDRY_COMMAND_SPEC_SCHEMA,\n    executable,\n    argv,\n    binding,\n  };\n  return parseFoundryCommandSpec({\n    ...authority,\n    display: renderFoundryCommandDisplay(executable, argv),\n    sha256: commandSpecSha256(authority),\n  });\n}\n\nexport function createFileArtifactFact(\n  options: CreateFileArtifactFactOptions,\n): FoundryArtifactFact {\n  const role = commandToken(options.role, 'Artifact role');\n  const artifactPath = commandToken(options.path, 'Artifact path');\n  const filePath = commandToken(options.filePath, 'Artifact file path');\n  if (!fs.existsSync(filePath) || !fs.statSync(filePath).isFile()) {\n    throw new Error(`CommandSpec artifact is not a readable file: ${artifactPath}`);\n  }\n  const bytes = fs.readFileSync(filePath);\n  return {\n    role,\n    path: artifactPath,\n    bytes: bytes.byteLength,\n    sha256: sha256Buffer(bytes),\n  };\n}\n\nexport function commandSpecOptionValue(value: unknown, optionName: string): string | null {\n  const spec = parseFoundryCommandSpec(value);\n  for (let index = 0; index < spec.argv.length; index += 1) {\n    const token = spec.argv[index];\n    if (token === optionName) return spec.argv[index + 1] ?? null;\n    if (token.startsWith(`${optionName}=`)) return token.slice(optionName.length + 1) || null;\n  }\n  return null;\n}\n\nexport function assertFoundryCommandSpecArtifactsCurrent(\n  value: unknown,\n  resolveArtifactPath: (artifactPath: string) => string | null,\n): FoundryCommandSpec {\n  const spec = parseFoundryCommandSpec(value);\n  for (const artifact of spec.binding.artifacts) {\n    const filePath = resolveArtifactPath(artifact.path);\n    if (!filePath || !fs.existsSync(filePath) || !fs.statSync(filePath).isFile()) {\n      throw new Error(`CommandSpec artifact drift: ${artifact.role} is missing.`);\n    }\n    const bytes = fs.readFileSync(filePath);\n    const sha256 = sha256Buffer(bytes);\n    if (bytes.byteLength !== artifact.bytes || sha256 !== artifact.sha256) {\n      throw new Error(`CommandSpec artifact drift: ${artifact.role} bytes/SHA-256 changed.`);\n    }\n  }\n  return spec;\n}\n\nexport function assertFoundryCommandSpecBindsArtifact(\n  value: unknown,\n  requiredArtifact: FoundryArtifactFact,\n): FoundryCommandSpec {\n  const spec = parseFoundryCommandSpec(value);\n  const required = parseArtifactFact(requiredArtifact, 0);\n  const matched = spec.binding.artifacts.some(\n    (artifact) =>\n      artifact.role === required.role &&\n      artifact.path === required.path &&\n      artifact.bytes === required.bytes &&\n      artifact.sha256 === required.sha256,\n  );\n  if (!matched) {\n    throw new Error(`CommandSpec required artifact binding does not match: ${required.role}.`);\n  }\n  return spec;\n}\n\nexport function executeFoundryCommandSpecSync(\n  value: unknown,\n  options: ExecuteFoundryCommandSpecSyncOptions,\n): FoundryCommandSpecSpawnResult {\n  const spec = assertFoundryCommandSpecArtifactsCurrent(value, options.resolveArtifactPath);\n  const spawnOptions: FoundryCommandSpecSpawnOptions = {\n    ...(options.cwd === undefined ? {} : { cwd: options.cwd }),\n    ...(options.env === undefined ? {} : { env: options.env }),\n    ...(options.maxBuffer === undefined ? {} : { maxBuffer: options.maxBuffer }),\n    encoding: 'utf8',\n    shell: false,\n    windowsHide: true,\n  };\n  const spawnImpl =\n    options.spawnImpl ??\n    ((executable: string, argv: readonly string[], childOptions: FoundryCommandSpecSpawnOptions) =>\n      spawnSync(executable, [...argv], childOptions) as FoundryCommandSpecSpawnResult);\n  return spawnImpl(spec.executable, spec.argv, spawnOptions);\n}\n\nexport async function executeFoundryCommandSpec(\n  value: unknown,\n  options: ExecuteFoundryCommandSpecOptions,\n): Promise<FoundryCommandSpecSpawnResult> {\n  const spec = assertFoundryCommandSpecArtifactsCurrent(value, options.resolveArtifactPath);\n  validateAsyncExecutionOptions(options);\n  const clock = options.clock ?? { now: Date.now };\n  const sleep = options.sleep ?? defaultSleep;\n  if (options.signal?.aborted) {\n    throw new FoundryCommandSpecAbortError(options.signal.reason);\n  }\n  const controller = new AbortController();\n  const startedAtMs = clock.now();\n  if (!Number.isFinite(startedAtMs)) {\n    throw new Error('CommandSpec clock must return a finite millisecond value.');\n  }\n  let settled = false;\n\n  const forwardAbort = () => controller.abort(options.signal?.reason);\n  options.signal?.addEventListener('abort', forwardAbort, { once: true });\n\n  try {\n    const spawnOptions: FoundryCommandSpecAsyncSpawnOptions = {\n      ...(options.cwd === undefined ? {} : { cwd: options.cwd }),\n      ...(options.env === undefined ? {} : { env: options.env }),\n      ...(options.maxBuffer === undefined ? {} : { maxBuffer: options.maxBuffer }),\n      encoding: 'utf8',\n      shell: false,\n      windowsHide: true,\n      signal: controller.signal,\n    };\n    const spawnImpl = options.spawnImpl ?? spawnCommandAsync;\n    const spawnPromise = spawnImpl(spec.executable, spec.argv, spawnOptions);\n    const abortPromise = new Promise<never>((_resolve, reject) => {\n      const rejectAbort = () => {\n        if (settled || controller.signal.reason === EXECUTION_COMPLETED) return;\n        const reason = controller.signal.reason;\n        reject(\n          reason instanceof FoundryCommandSpecTimeoutError\n            ? reason\n            : new FoundryCommandSpecAbortError(reason),\n        );\n      };\n      controller.signal.addEventListener('abort', rejectAbort, { once: true });\n    });\n    const timeoutPromise =\n      options.timeoutMs === undefined\n        ? new Promise<never>(() => undefined)\n        : sleep(options.timeoutMs, controller.signal).then(() => {\n            const error = new FoundryCommandSpecTimeoutError(options.timeoutMs!, startedAtMs);\n            controller.abort(error);\n            throw error;\n          });\n    const result = await Promise.race([spawnPromise, abortPromise, timeoutPromise]);\n    settled = true;\n    controller.abort(EXECUTION_COMPLETED);\n    return result;\n  } finally {\n    settled = true;\n    options.signal?.removeEventListener('abort', forwardAbort);\n  }\n}\n\nfunction validateAsyncExecutionOptions(options: ExecuteFoundryCommandSpecOptions): void {\n  if (\n    options.timeoutMs !== undefined &&\n    (!Number.isSafeInteger(options.timeoutMs) ||\n      options.timeoutMs <= 0 ||\n      options.timeoutMs > MAX_NODE_TIMER_DELAY_MS)\n  ) {\n    throw new Error(\n      `CommandSpec timeoutMs must be a positive safe integer no greater than the maximum supported timer delay (${MAX_NODE_TIMER_DELAY_MS} ms).`,\n    );\n  }\n  if (\n    options.maxBuffer !== undefined &&\n    (!Number.isSafeInteger(options.maxBuffer) || options.maxBuffer <= 0)\n  ) {\n    throw new Error('CommandSpec maxBuffer must be a positive safe integer.');\n  }\n}\n\nfunction defaultSleep(milliseconds: number, signal: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const timer = setTimeout(resolve, milliseconds);\n    timer.unref();\n    signal.addEventListener(\n      'abort',\n      () => {\n        clearTimeout(timer);\n        reject(signal.reason);\n      },\n      { once: true },\n    );\n  });\n}\n\nfunction spawnCommandAsync(\n  executable: string,\n  argv: readonly string[],\n  options: FoundryCommandSpecAsyncSpawnOptions,\n): Promise<FoundryCommandSpecSpawnResult> {\n  return new Promise((resolve) => {\n    const child = spawn(executable, [...argv], {\n      cwd: options.cwd,\n      env: options.env,\n      shell: false,\n      windowsHide: true,\n      signal: options.signal,\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n    const stdout: Buffer[] = [];\n    const stderr: Buffer[] = [];\n    const maxBuffer = options.maxBuffer ?? DEFAULT_MAX_BUFFER;\n    let capturedBytes = 0;\n    let captureError: Error | undefined;\n    let spawnError: Error | undefined;\n\n    const capture = (target: Buffer[], bytes: Buffer) => {\n      capturedBytes += bytes.byteLength;\n      if (capturedBytes > maxBuffer) {\n        captureError = new RangeError(\n          `CommandSpec output exceeded maxBuffer (${maxBuffer} bytes).`,\n        );\n        child.kill();\n        return;\n      }\n      target.push(bytes);\n    };\n    child.stdout.on('data', (chunk: Buffer) => capture(stdout, chunk));\n    child.stderr.on('data', (chunk: Buffer) => capture(stderr, chunk));\n    child.once('error', (error) => {\n      spawnError = error;\n    });\n    child.once('close', (status, signal) => {\n      const stdoutText = Buffer.concat(stdout).toString('utf8');\n      const stderrText = Buffer.concat(stderr).toString('utf8');\n      resolve({\n        ...(child.pid === undefined ? {} : { pid: child.pid }),\n        output: [null, stdoutText, stderrText],\n        stdout: stdoutText,\n        stderr: stderrText,\n        status,\n        signal,\n        ...((captureError ?? spawnError) === undefined\n          ? {}\n          : { error: (captureError ?? spawnError)! }),\n      });\n    });\n  });\n}\n"]}

package/dist/src/lib/artifacts.d.ts

@@ -0,0 +1,9 @@
+type WriteJsonLinesOptions = {
+    append?: boolean;
+};
+export declare function writeTextArtifact(filePath: string, text: string): string;
+export declare function writeJsonArtifact(filePath: string, value: unknown, compact?: boolean): string;
+export declare function writeJsonLinesArtifact(filePath: string, rows: unknown | unknown[], options?: WriteJsonLinesOptions): string;
+export declare function readJsonArtifact(filePath: string): unknown;
+export declare function readJsonLinesArtifact(filePath: string): unknown[];
+export {};