@vercel/factory 0.0.14 → 0.0.16

package/dist/github-transfer.mjs

@@ -0,0 +1,273 @@
+import { createHash, randomUUID } from "node:crypto";
+//#region src/github-transfer.ts
+/** Maximum binary size accepted for a credential-free Git bundle transfer. */
+const maxGitBundleBytes = 314572800;
+/** Maximum binary upload size; uploads are sequential to bound SDK buffering. */
+const gitBundleChunkBytes = 4194304;
+/** Quote one argument for the sandbox's POSIX shell command boundary. */
+function quoteShellArgument(value) {
+	return "'" + value.replaceAll("'", "'\"'\"'") + "'";
+}
+/** Run an argument vector through the sandbox command boundary without interpolating its values. */
+async function runSandboxCommand(sandbox, command) {
+	if (command.length === 0) throw new Error("Sandbox command must contain an executable");
+	const rendered = command.map(quoteShellArgument).join(" ");
+	const result = await sandbox.run({ command: rendered });
+	if (typeof result.exitCode === "number" && result.exitCode !== 0) throw new Error(`Sandbox command failed: ${(result.stderr ?? "").trim()}`);
+	return result.stdout;
+}
+/** Stream a size-bounded Git bundle into a sandbox, verify its digest, and remove it after use. */
+async function withSandboxGitBundle(input) {
+	const directory = `/tmp/factory-${randomUUID()}`;
+	const path = `${directory}/transfer.bundle`;
+	const reader = input.bundle.stream.getReader();
+	const hash = createHash("sha256");
+	const parts = [];
+	let buffer = Buffer.allocUnsafe(gitBundleChunkBytes);
+	let buffered = 0;
+	let size = 0;
+	let headerValidated = false;
+	function validateHeader() {
+		const header = buffer.subarray(0, Math.min(buffered, 16)).toString();
+		if (!header.startsWith("# v2 git bundle\n") && !header.startsWith("# v3 git bundle\n")) throw new Error("Invalid Git bundle header");
+		headerValidated = true;
+	}
+	async function flush() {
+		if (!headerValidated) validateHeader();
+		const part = `${directory}/${parts.length}.part`;
+		const content = buffer.subarray(0, buffered);
+		hash.update(content);
+		await input.sandbox.writeBinaryFile({
+			path: part,
+			content
+		});
+		parts.push(part);
+		buffer = Buffer.allocUnsafe(gitBundleChunkBytes);
+		buffered = 0;
+	}
+	try {
+		await runSandboxCommand(input.sandbox, [
+			"mkdir",
+			"-m",
+			"700",
+			directory
+		]);
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			size += value.byteLength;
+			if (size > 314572800) throw new Error("Git bundle exceeds transfer limit");
+			for (let offset = 0; offset < value.byteLength;) {
+				const length = Math.min(buffer.length - buffered, value.byteLength - offset);
+				buffer.set(value.subarray(offset, offset + length), buffered);
+				buffered += length;
+				offset += length;
+				if (!headerValidated && buffered >= 16) validateHeader();
+				if (buffered === buffer.length) await flush();
+			}
+		}
+		if (buffered > 0) await flush();
+		if (!headerValidated) throw new Error("Invalid Git bundle header");
+		await runSandboxCommand(input.sandbox, [
+			"sh",
+			"-c",
+			"cat \"$@\" > \"$0\"",
+			path,
+			...parts
+		]);
+		await runSandboxCommand(input.sandbox, [
+			"sh",
+			"-c",
+			"printf \"%s  %s\\n\" \"$1\" \"$2\" | sha256sum -c - >/dev/null",
+			"verify-bundle",
+			hash.digest("hex"),
+			path
+		]);
+		return await input.use(path);
+	} finally {
+		try {
+			await reader.cancel();
+		} finally {
+			reader.releaseLock();
+			await runSandboxCommand(input.sandbox, [
+				"rm",
+				"-rf",
+				directory
+			]);
+		}
+	}
+}
+/** Initialize a missing checkout and import exact GitHub refs without credentials. */
+async function fetchGitHubRefs(input) {
+	await input.transport.fetch({
+		repository: input.repository,
+		refs: input.refs.map((ref) => ref.remote)
+	}, async (bundle) => {
+		await withSandboxGitBundle({
+			sandbox: input.sandbox,
+			bundle,
+			async use(path) {
+				const repositoryPath = input.repositoryPath ?? "repo";
+				const checkout = await input.sandbox.run({ command: [
+					"test",
+					"-d",
+					`${repositoryPath}/.git`
+				].map(quoteShellArgument).join(" ") });
+				if (checkout.exitCode !== void 0 && checkout.exitCode !== 0) {
+					await runSandboxCommand(input.sandbox, [
+						"git",
+						"init",
+						repositoryPath
+					]);
+					for (const args of [
+						[
+							"remote",
+							"add",
+							"origin",
+							`https://github.com/${input.repository}.git`
+						],
+						[
+							"config",
+							"user.name",
+							"factory"
+						],
+						[
+							"config",
+							"user.email",
+							"factory@localhost"
+						]
+					]) await runSandboxCommand(input.sandbox, [
+						"git",
+						"-C",
+						repositoryPath,
+						...args
+					]);
+				}
+				await runSandboxCommand(input.sandbox, [
+					"git",
+					"-C",
+					repositoryPath,
+					"bundle",
+					"verify",
+					path
+				]);
+				await runSandboxCommand(input.sandbox, [
+					"git",
+					"-C",
+					repositoryPath,
+					"fetch",
+					"--no-tags",
+					path,
+					...input.refs.map((ref) => `+${ref.remote}:${ref.local}`)
+				]);
+			}
+		});
+	});
+}
+async function* readGitBundleParts(sandbox, directory, size) {
+	const count = Math.ceil(size / gitBundleChunkBytes);
+	for (let index = 0; index < count; index++) {
+		const suffix = String.fromCharCode(97 + Math.floor(index / 26), 97 + index % 26);
+		const stream = await sandbox.readFile({ path: `${directory}/part-${suffix}` });
+		if (stream === null) throw new Error("Git bundle part was not created");
+		const reader = stream.getReader();
+		const expectedBytes = Math.min(gitBundleChunkBytes, size - index * gitBundleChunkBytes);
+		let bytes = 0;
+		try {
+			for (;;) {
+				const { done, value } = await reader.read();
+				if (done) break;
+				bytes += value.byteLength;
+				if (bytes > expectedBytes) throw new Error("Invalid Git bundle part size");
+				yield value;
+			}
+			if (bytes !== expectedBytes) throw new Error("Invalid Git bundle part size");
+		} finally {
+			try {
+				await reader.cancel();
+			} finally {
+				reader.releaseLock();
+			}
+		}
+	}
+}
+/** Publish the current sandbox commit with an expected-head lease. */
+async function pushGitHubHead(input) {
+	const repositoryPath = input.repositoryPath ?? "repo";
+	const directory = `/tmp/factory-${randomUUID()}`;
+	const path = `${directory}/transfer.bundle`;
+	try {
+		await runSandboxCommand(input.sandbox, [
+			"mkdir",
+			"-m",
+			"700",
+			directory
+		]);
+		const head = (await runSandboxCommand(input.sandbox, [
+			"git",
+			"-C",
+			repositoryPath,
+			"rev-parse",
+			"HEAD"
+		])).trim();
+		await runSandboxCommand(input.sandbox, [
+			"git",
+			"-C",
+			repositoryPath,
+			"bundle",
+			"create",
+			path,
+			"HEAD"
+		]);
+		const size = Number(await runSandboxCommand(input.sandbox, [
+			"sh",
+			"-c",
+			"wc -c < \"$1\"",
+			"bundle-size",
+			path
+		]));
+		if (!Number.isSafeInteger(size) || size < 1 || size > 314572800) throw new Error("Git bundle exceeds transfer limit");
+		await runSandboxCommand(input.sandbox, [
+			"split",
+			"-b",
+			String(gitBundleChunkBytes),
+			path,
+			`${directory}/part-`
+		]);
+		const parts = readGitBundleParts(input.sandbox, directory, size);
+		const stream = new ReadableStream({
+			async pull(controller) {
+				const { done, value } = await parts.next();
+				if (done) controller.close();
+				else controller.enqueue(value);
+			},
+			async cancel() {
+				await parts.return(void 0);
+			}
+		}, { highWaterMark: 0 });
+		try {
+			return await input.transport.push({
+				repository: input.repository,
+				bundle: { stream },
+				branch: input.branch,
+				expectedHead: input.expectedHead,
+				baseHead: input.baseHead,
+				head,
+				authorize: input.authorize
+			});
+		} finally {
+			await parts.return(void 0);
+			if (!stream.locked) await stream.cancel();
+		}
+	} finally {
+		await runSandboxCommand(input.sandbox, [
+			"rm",
+			"-rf",
+			directory
+		]);
+	}
+}
+//#endregion
+export { fetchGitHubRefs, gitBundleChunkBytes, maxGitBundleBytes, pushGitHubHead, quoteShellArgument, runSandboxCommand, withSandboxGitBundle };
+
+//# sourceMappingURL=github-transfer.mjs.map

package/dist/github-transfer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-transfer.mjs","names":[],"sources":["../src/github-transfer.ts"],"sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { CommandSandbox } from \"./sandbox/command\";\nimport type { RepositorySlug } from \"./schema/repository\";\n\n/** Sandbox path used to read a transferred Git bundle. */\nexport interface ReadGitTransferFileInput {\n  path: string;\n}\n\n/** Sandbox path and bytes used to stage a transferred Git bundle. */\nexport interface WriteGitTransferFileInput {\n  path: string;\n  content: Uint8Array;\n}\n\n/** Binary file and command access used to exchange Git objects with an agent sandbox. */\nexport interface GitTransferSandbox extends CommandSandbox {\n  readFile(options: ReadGitTransferFileInput): PromiseLike<ReadableStream<Uint8Array> | null>;\n  writeBinaryFile(options: WriteGitTransferFileInput): PromiseLike<void>;\n}\n\n/** Self-contained Git objects and refs transported without repository configuration or hooks. */\nexport interface GitHubRepositoryBundle {\n  /** Single-use binary stream, consumed before the transport callback returns. */\n  stream: ReadableStream<Uint8Array>;\n}\n\n/** Repository and exact additional refs requested from the trusted Git transport. */\nexport interface FetchGitHubBundleInput {\n  repository: RepositorySlug;\n  refs: readonly string[];\n}\n\n/** Exact branch update requested from the trusted Git transport. */\nexport interface PushGitHubBundleInput {\n  repository: RepositorySlug;\n  bundle: GitHubRepositoryBundle;\n  branch: string;\n  expectedHead: string;\n  /** Existing commit that a create-only branch must descend from. */\n  baseHead?: string;\n  head: string;\n  /** Rechecks application authority immediately before the provider mutation. */\n  authorize(): Promise<void>;\n}\n\n/** Trusted Git transport that never enables credentials in an agent sandbox. */\nexport interface GitHubGitTransport {\n  /** Consume all branch heads and additional exact refs while the read-only transport remains open. */\n  fetch(\n    input: FetchGitHubBundleInput,\n    use: (bundle: GitHubRepositoryBundle) => Promise<void>,\n  ): Promise<void>;\n  /** Publish a bundle to exactly one branch and return its actual remote head. */\n  push(input: PushGitHubBundleInput): Promise<string>;\n}\n\n/** Maximum binary size accepted for a credential-free Git bundle transfer. */\nexport const maxGitBundleBytes = 300 * 1024 * 1024;\n\n/** Maximum binary upload size; uploads are sequential to bound SDK buffering. */\nexport const gitBundleChunkBytes = 4 * 1024 * 1024;\n\n/** Quote one argument for the sandbox's POSIX shell command boundary. */\nexport function quoteShellArgument(value: string): string {\n  return \"'\" + value.replaceAll(\"'\", \"'\\\"'\\\"'\") + \"'\";\n}\n\n/** Run an argument vector through the sandbox command boundary without interpolating its values. */\nexport async function runSandboxCommand(\n  sandbox: CommandSandbox,\n  command: readonly string[],\n): Promise<string> {\n  if (command.length === 0) throw new Error(\"Sandbox command must contain an executable\");\n  const rendered = command.map(quoteShellArgument).join(\" \");\n  const result = await sandbox.run({ command: rendered });\n  if (typeof result.exitCode === \"number\" && result.exitCode !== 0) {\n    throw new Error(`Sandbox command failed: ${(result.stderr ?? \"\").trim()}`);\n  }\n  return result.stdout;\n}\n\n/** Input for temporarily copying a credential-free Git bundle into a sandbox. */\nexport interface WithSandboxGitBundleInput<T> {\n  sandbox: Pick<GitTransferSandbox, \"run\" | \"writeBinaryFile\">;\n  bundle: GitHubRepositoryBundle;\n  use(path: string): Promise<T>;\n}\n\n/** Stream a size-bounded Git bundle into a sandbox, verify its digest, and remove it after use. */\nexport async function withSandboxGitBundle<T>(input: WithSandboxGitBundleInput<T>): Promise<T> {\n  const directory = `/tmp/factory-${randomUUID()}`;\n  const path = `${directory}/transfer.bundle`;\n  const reader = input.bundle.stream.getReader();\n  const hash = createHash(\"sha256\");\n  const parts: string[] = [];\n  let buffer = Buffer.allocUnsafe(gitBundleChunkBytes);\n  let buffered = 0;\n  let size = 0;\n  let headerValidated = false;\n  function validateHeader() {\n    const header = buffer.subarray(0, Math.min(buffered, 16)).toString();\n    if (!header.startsWith(\"# v2 git bundle\\n\") && !header.startsWith(\"# v3 git bundle\\n\")) {\n      throw new Error(\"Invalid Git bundle header\");\n    }\n    headerValidated = true;\n  }\n  async function flush() {\n    if (!headerValidated) validateHeader();\n    const part = `${directory}/${parts.length}.part`;\n    const content = buffer.subarray(0, buffered);\n    hash.update(content);\n    await input.sandbox.writeBinaryFile({ path: part, content });\n    parts.push(part);\n    // SDK callers may retain the upload buffer until their request has completed.\n    buffer = Buffer.allocUnsafe(gitBundleChunkBytes);\n    buffered = 0;\n  }\n  try {\n    await runSandboxCommand(input.sandbox, [\"mkdir\", \"-m\", \"700\", directory]);\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      size += value.byteLength;\n      if (size > maxGitBundleBytes) throw new Error(\"Git bundle exceeds transfer limit\");\n      for (let offset = 0; offset < value.byteLength;) {\n        const length = Math.min(buffer.length - buffered, value.byteLength - offset);\n        buffer.set(value.subarray(offset, offset + length), buffered);\n        buffered += length;\n        offset += length;\n        if (!headerValidated && buffered >= 16) validateHeader();\n        if (buffered === buffer.length) await flush();\n      }\n    }\n    if (buffered > 0) await flush();\n    if (!headerValidated) throw new Error(\"Invalid Git bundle header\");\n    await runSandboxCommand(input.sandbox, [\"sh\", \"-c\", 'cat \"$@\" > \"$0\"', path, ...parts]);\n    await runSandboxCommand(input.sandbox, [\n      \"sh\",\n      \"-c\",\n      'printf \"%s  %s\\\\n\" \"$1\" \"$2\" | sha256sum -c - >/dev/null',\n      \"verify-bundle\",\n      hash.digest(\"hex\"),\n      path,\n    ]);\n    return await input.use(path);\n  } finally {\n    try {\n      await reader.cancel();\n    } finally {\n      reader.releaseLock();\n      await runSandboxCommand(input.sandbox, [\"rm\", \"-rf\", directory]);\n    }\n  }\n}\n\n/** One remote Git ref and its sandbox-local destination. */\nexport interface GitHubRefMapping {\n  remote: string;\n  local: string;\n}\n\n/** Input for importing exact GitHub refs into a credential-free sandbox checkout. */\nexport interface FetchGitHubRefsInput {\n  sandbox: GitTransferSandbox;\n  transport: GitHubGitTransport;\n  repository: RepositorySlug;\n  refs: readonly GitHubRefMapping[];\n  repositoryPath?: string;\n}\n\n/** Initialize a missing checkout and import exact GitHub refs without credentials. */\nexport async function fetchGitHubRefs(input: FetchGitHubRefsInput): Promise<void> {\n  await input.transport.fetch(\n    {\n      repository: input.repository,\n      refs: input.refs.map((ref) => ref.remote),\n    },\n    async (bundle) => {\n      await withSandboxGitBundle({\n        sandbox: input.sandbox,\n        bundle,\n        async use(path) {\n          const repositoryPath = input.repositoryPath ?? \"repo\";\n          const checkout = await input.sandbox.run({\n            command: [\"test\", \"-d\", `${repositoryPath}/.git`].map(quoteShellArgument).join(\" \"),\n          });\n          if (checkout.exitCode !== undefined && checkout.exitCode !== 0) {\n            await runSandboxCommand(input.sandbox, [\"git\", \"init\", repositoryPath]);\n            for (const args of [\n              [\"remote\", \"add\", \"origin\", `https://github.com/${input.repository}.git`],\n              [\"config\", \"user.name\", \"factory\"],\n              [\"config\", \"user.email\", \"factory@localhost\"],\n            ]) {\n              await runSandboxCommand(input.sandbox, [\"git\", \"-C\", repositoryPath, ...args]);\n            }\n          }\n          await runSandboxCommand(input.sandbox, [\n            \"git\",\n            \"-C\",\n            repositoryPath,\n            \"bundle\",\n            \"verify\",\n            path,\n          ]);\n          await runSandboxCommand(input.sandbox, [\n            \"git\",\n            \"-C\",\n            repositoryPath,\n            \"fetch\",\n            \"--no-tags\",\n            path,\n            ...input.refs.map((ref) => `+${ref.remote}:${ref.local}`),\n          ]);\n        },\n      });\n    },\n  );\n}\n\n/** Input for publishing the current sandbox commit to one exact GitHub branch. */\nexport interface PushGitHubHeadInput {\n  sandbox: GitTransferSandbox;\n  transport: GitHubGitTransport;\n  repository: RepositorySlug;\n  branch: string;\n  expectedHead: string;\n  /** Existing commit that a create-only branch must descend from. */\n  baseHead?: string;\n  /** Rechecks application authority immediately before the provider mutation. */\n  authorize(): Promise<void>;\n  repositoryPath?: string;\n}\n\nasync function* readGitBundleParts(sandbox: GitTransferSandbox, directory: string, size: number) {\n  const count = Math.ceil(size / gitBundleChunkBytes);\n  for (let index = 0; index < count; index++) {\n    const suffix = String.fromCharCode(97 + Math.floor(index / 26), 97 + (index % 26));\n    const stream = await sandbox.readFile({ path: `${directory}/part-${suffix}` });\n    if (stream === null) throw new Error(\"Git bundle part was not created\");\n    const reader = stream.getReader();\n    const expectedBytes = Math.min(gitBundleChunkBytes, size - index * gitBundleChunkBytes);\n    let bytes = 0;\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        bytes += value.byteLength;\n        if (bytes > expectedBytes) throw new Error(\"Invalid Git bundle part size\");\n        yield value;\n      }\n      if (bytes !== expectedBytes) throw new Error(\"Invalid Git bundle part size\");\n    } finally {\n      try {\n        await reader.cancel();\n      } finally {\n        reader.releaseLock();\n      }\n    }\n  }\n}\n\n/** Publish the current sandbox commit with an expected-head lease. */\nexport async function pushGitHubHead(input: PushGitHubHeadInput): Promise<string> {\n  const repositoryPath = input.repositoryPath ?? \"repo\";\n  const directory = `/tmp/factory-${randomUUID()}`;\n  const path = `${directory}/transfer.bundle`;\n  try {\n    await runSandboxCommand(input.sandbox, [\"mkdir\", \"-m\", \"700\", directory]);\n    const head = (\n      await runSandboxCommand(input.sandbox, [\"git\", \"-C\", repositoryPath, \"rev-parse\", \"HEAD\"])\n    ).trim();\n    await runSandboxCommand(input.sandbox, [\n      \"git\",\n      \"-C\",\n      repositoryPath,\n      \"bundle\",\n      \"create\",\n      path,\n      \"HEAD\",\n    ]);\n    const size = Number(\n      await runSandboxCommand(input.sandbox, [\"sh\", \"-c\", 'wc -c < \"$1\"', \"bundle-size\", path]),\n    );\n    if (!Number.isSafeInteger(size) || size < 1 || size > maxGitBundleBytes) {\n      throw new Error(\"Git bundle exceeds transfer limit\");\n    }\n    // Eve's Node-to-Web adapter can prefetch the entire file; bound each source file as well.\n    await runSandboxCommand(input.sandbox, [\n      \"split\",\n      \"-b\",\n      String(gitBundleChunkBytes),\n      path,\n      `${directory}/part-`,\n    ]);\n    const parts = readGitBundleParts(input.sandbox, directory, size);\n    const stream = new ReadableStream<Uint8Array>(\n      {\n        async pull(controller) {\n          const { done, value } = await parts.next();\n          if (done) controller.close();\n          else controller.enqueue(value);\n        },\n        async cancel() {\n          await parts.return(undefined);\n        },\n      },\n      { highWaterMark: 0 },\n    );\n    try {\n      return await input.transport.push({\n        repository: input.repository,\n        bundle: { stream },\n        branch: input.branch,\n        expectedHead: input.expectedHead,\n        baseHead: input.baseHead,\n        head,\n        authorize: input.authorize,\n      });\n    } finally {\n      await parts.return(undefined);\n      if (!stream.locked) await stream.cancel();\n    }\n  } finally {\n    await runSandboxCommand(input.sandbox, [\"rm\", \"-rf\", directory]);\n  }\n}\n"],"mappings":";;;AA0DA,MAAa,oBAAoB;;AAGjC,MAAa,sBAAsB;;AAGnC,SAAgB,mBAAmB,OAAuB;CACxD,OAAO,MAAM,MAAM,WAAW,KAAK,SAAS,IAAI;AAClD;;AAGA,eAAsB,kBACpB,SACA,SACiB;CACjB,IAAI,QAAQ,WAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;CACtF,MAAM,WAAW,QAAQ,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;CACzD,MAAM,SAAS,MAAM,QAAQ,IAAI,EAAE,SAAS,SAAS,CAAC;CACtD,IAAI,OAAO,OAAO,aAAa,YAAY,OAAO,aAAa,GAC7D,MAAM,IAAI,MAAM,4BAA4B,OAAO,UAAU,GAAA,CAAI,KAAK,GAAG;CAE3E,OAAO,OAAO;AAChB;;AAUA,eAAsB,qBAAwB,OAAiD;CAC7F,MAAM,YAAY,gBAAgB,WAAW;CAC7C,MAAM,OAAO,GAAG,UAAU;CAC1B,MAAM,SAAS,MAAM,OAAO,OAAO,UAAU;CAC7C,MAAM,OAAO,WAAW,QAAQ;CAChC,MAAM,QAAkB,CAAC;CACzB,IAAI,SAAS,OAAO,YAAY,mBAAmB;CACnD,IAAI,WAAW;CACf,IAAI,OAAO;CACX,IAAI,kBAAkB;CACtB,SAAS,iBAAiB;EACxB,MAAM,SAAS,OAAO,SAAS,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;EACnE,IAAI,CAAC,OAAO,WAAW,mBAAmB,KAAK,CAAC,OAAO,WAAW,mBAAmB,GACnF,MAAM,IAAI,MAAM,2BAA2B;EAE7C,kBAAkB;CACpB;CACA,eAAe,QAAQ;EACrB,IAAI,CAAC,iBAAiB,eAAe;EACrC,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,OAAO;EAC1C,MAAM,UAAU,OAAO,SAAS,GAAG,QAAQ;EAC3C,KAAK,OAAO,OAAO;EACnB,MAAM,MAAM,QAAQ,gBAAgB;GAAE,MAAM;GAAM;EAAQ,CAAC;EAC3D,MAAM,KAAK,IAAI;EAEf,SAAS,OAAO,YAAY,mBAAmB;EAC/C,WAAW;CACb;CACA,IAAI;EACF,MAAM,kBAAkB,MAAM,SAAS;GAAC;GAAS;GAAM;GAAO;EAAS,CAAC;EACxE,SAAS;GACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,QAAQ,MAAM;GACd,IAAI,OAAA,WAA0B,MAAM,IAAI,MAAM,mCAAmC;GACjF,KAAK,IAAI,SAAS,GAAG,SAAS,MAAM,aAAa;IAC/C,MAAM,SAAS,KAAK,IAAI,OAAO,SAAS,UAAU,MAAM,aAAa,MAAM;IAC3E,OAAO,IAAI,MAAM,SAAS,QAAQ,SAAS,MAAM,GAAG,QAAQ;IAC5D,YAAY;IACZ,UAAU;IACV,IAAI,CAAC,mBAAmB,YAAY,IAAI,eAAe;IACvD,IAAI,aAAa,OAAO,QAAQ,MAAM,MAAM;GAC9C;EACF;EACA,IAAI,WAAW,GAAG,MAAM,MAAM;EAC9B,IAAI,CAAC,iBAAiB,MAAM,IAAI,MAAM,2BAA2B;EACjE,MAAM,kBAAkB,MAAM,SAAS;GAAC;GAAM;GAAM;GAAmB;GAAM,GAAG;EAAK,CAAC;EACtF,MAAM,kBAAkB,MAAM,SAAS;GACrC;GACA;GACA;GACA;GACA,KAAK,OAAO,KAAK;GACjB;EACF,CAAC;EACD,OAAO,MAAM,MAAM,IAAI,IAAI;CAC7B,UAAU;EACR,IAAI;GACF,MAAM,OAAO,OAAO;EACtB,UAAU;GACR,OAAO,YAAY;GACnB,MAAM,kBAAkB,MAAM,SAAS;IAAC;IAAM;IAAO;GAAS,CAAC;EACjE;CACF;AACF;;AAkBA,eAAsB,gBAAgB,OAA4C;CAChF,MAAM,MAAM,UAAU,MACpB;EACE,YAAY,MAAM;EAClB,MAAM,MAAM,KAAK,KAAK,QAAQ,IAAI,MAAM;CAC1C,GACA,OAAO,WAAW;EAChB,MAAM,qBAAqB;GACzB,SAAS,MAAM;GACf;GACA,MAAM,IAAI,MAAM;IACd,MAAM,iBAAiB,MAAM,kBAAkB;IAC/C,MAAM,WAAW,MAAM,MAAM,QAAQ,IAAI,EACvC,SAAS;KAAC;KAAQ;KAAM,GAAG,eAAe;IAAM,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG,EACpF,CAAC;IACD,IAAI,SAAS,aAAa,KAAA,KAAa,SAAS,aAAa,GAAG;KAC9D,MAAM,kBAAkB,MAAM,SAAS;MAAC;MAAO;MAAQ;KAAc,CAAC;KACtE,KAAK,MAAM,QAAQ;MACjB;OAAC;OAAU;OAAO;OAAU,sBAAsB,MAAM,WAAW;MAAK;MACxE;OAAC;OAAU;OAAa;MAAS;MACjC;OAAC;OAAU;OAAc;MAAmB;KAC9C,GACE,MAAM,kBAAkB,MAAM,SAAS;MAAC;MAAO;MAAM;MAAgB,GAAG;KAAI,CAAC;IAEjF;IACA,MAAM,kBAAkB,MAAM,SAAS;KACrC;KACA;KACA;KACA;KACA;KACA;IACF,CAAC;IACD,MAAM,kBAAkB,MAAM,SAAS;KACrC;KACA;KACA;KACA;KACA;KACA;KACA,GAAG,MAAM,KAAK,KAAK,QAAQ,IAAI,IAAI,OAAO,GAAG,IAAI,OAAO;IAC1D,CAAC;GACH;EACF,CAAC;CACH,CACF;AACF;AAgBA,gBAAgB,mBAAmB,SAA6B,WAAmB,MAAc;CAC/F,MAAM,QAAQ,KAAK,KAAK,OAAO,mBAAmB;CAClD,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,SAAS;EAC1C,MAAM,SAAS,OAAO,aAAa,KAAK,KAAK,MAAM,QAAQ,EAAE,GAAG,KAAM,QAAQ,EAAG;EACjF,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE,MAAM,GAAG,UAAU,QAAQ,SAAS,CAAC;EAC7E,IAAI,WAAW,MAAM,MAAM,IAAI,MAAM,iCAAiC;EACtE,MAAM,SAAS,OAAO,UAAU;EAChC,MAAM,gBAAgB,KAAK,IAAI,qBAAqB,OAAO,QAAQ,mBAAmB;EACtF,IAAI,QAAQ;EACZ,IAAI;GACF,SAAS;IACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;IAC1C,IAAI,MAAM;IACV,SAAS,MAAM;IACf,IAAI,QAAQ,eAAe,MAAM,IAAI,MAAM,8BAA8B;IACzE,MAAM;GACR;GACA,IAAI,UAAU,eAAe,MAAM,IAAI,MAAM,8BAA8B;EAC7E,UAAU;GACR,IAAI;IACF,MAAM,OAAO,OAAO;GACtB,UAAU;IACR,OAAO,YAAY;GACrB;EACF;CACF;AACF;;AAGA,eAAsB,eAAe,OAA6C;CAChF,MAAM,iBAAiB,MAAM,kBAAkB;CAC/C,MAAM,YAAY,gBAAgB,WAAW;CAC7C,MAAM,OAAO,GAAG,UAAU;CAC1B,IAAI;EACF,MAAM,kBAAkB,MAAM,SAAS;GAAC;GAAS;GAAM;GAAO;EAAS,CAAC;EACxE,MAAM,QACJ,MAAM,kBAAkB,MAAM,SAAS;GAAC;GAAO;GAAM;GAAgB;GAAa;EAAM,CAAC,EAAA,CACzF,KAAK;EACP,MAAM,kBAAkB,MAAM,SAAS;GACrC;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,MAAM,OAAO,OACX,MAAM,kBAAkB,MAAM,SAAS;GAAC;GAAM;GAAM;GAAgB;GAAe;EAAI,CAAC,CAC1F;EACA,IAAI,CAAC,OAAO,cAAc,IAAI,KAAK,OAAO,KAAK,OAAA,WAC7C,MAAM,IAAI,MAAM,mCAAmC;EAGrD,MAAM,kBAAkB,MAAM,SAAS;GACrC;GACA;GACA,OAAO,mBAAmB;GAC1B;GACA,GAAG,UAAU;EACf,CAAC;EACD,MAAM,QAAQ,mBAAmB,MAAM,SAAS,WAAW,IAAI;EAC/D,MAAM,SAAS,IAAI,eACjB;GACE,MAAM,KAAK,YAAY;IACrB,MAAM,EAAE,MAAM,UAAU,MAAM,MAAM,KAAK;IACzC,IAAI,MAAM,WAAW,MAAM;SACtB,WAAW,QAAQ,KAAK;GAC/B;GACA,MAAM,SAAS;IACb,MAAM,MAAM,OAAO,KAAA,CAAS;GAC9B;EACF,GACA,EAAE,eAAe,EAAE,CACrB;EACA,IAAI;GACF,OAAO,MAAM,MAAM,UAAU,KAAK;IAChC,YAAY,MAAM;IAClB,QAAQ,EAAE,OAAO;IACjB,QAAQ,MAAM;IACd,cAAc,MAAM;IACpB,UAAU,MAAM;IAChB;IACA,WAAW,MAAM;GACnB,CAAC;EACH,UAAU;GACR,MAAM,MAAM,OAAO,KAAA,CAAS;GAC5B,IAAI,CAAC,OAAO,QAAQ,MAAM,OAAO,OAAO;EAC1C;CACF,UAAU;EACR,MAAM,kBAAkB,MAAM,SAAS;GAAC;GAAM;GAAO;EAAS,CAAC;CACjE;AACF"}