agent-hitch 0.2.0 → 0.2.2

package/dist/src/artifacts/integrity.js

@@ -0,0 +1,188 @@
+import { createHash } from "node:crypto";
+import { constants, createReadStream } from "node:fs";
+import { access, lstat, readFile, readdir, readlink, stat } from "node:fs/promises";
+import path from "node:path";
+import { HitchError, digest, fingerprintExecutable } from "../foundation/index.js";
+export async function npmPackageEntrypoint(directory, packageName, binName, nodeModulesDirectory = "node_modules") {
+    const packageDirectory = path.join(directory, nodeModulesDirectory, ...packageName.split("/"));
+    let metadata;
+    try {
+        metadata = JSON.parse(await readFile(path.join(packageDirectory, "package.json"), "utf8"));
+    }
+    catch (error) {
+        throw new HitchError(`installed package has no readable package.json: ${packageName}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+            cause: error,
+        });
+    }
+    const binTarget = typeof metadata.bin === "string" ? metadata.bin : metadata.bin?.[binName];
+    if (typeof binTarget !== "string" || !binTarget) {
+        throw new HitchError(`installed package does not declare the ${binName} executable: ${packageName}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+        });
+    }
+    const absolute = path.resolve(packageDirectory, binTarget);
+    if (absolute !== packageDirectory && !absolute.startsWith(`${packageDirectory}${path.sep}`)) {
+        throw new HitchError(`package executable escapes its installation directory: ${packageName}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+        });
+    }
+    return path.relative(directory, absolute);
+}
+export function entrypointLauncher(entrypoint) {
+    return /\.(?:cjs|mjs|js)$/i.test(entrypoint) ? "node" : "direct";
+}
+export function artifactInvocation(manifest, directory) {
+    const entrypoint = path.join(directory, manifest.entrypoint);
+    return manifest.launcher === "node"
+        ? { executable: process.execPath, entrypoint_args: [entrypoint] }
+        : { executable: entrypoint, entrypoint_args: [] };
+}
+export async function assertEntrypoint(file, launcher, reference) {
+    try {
+        await access(file, launcher === "node" ? constants.R_OK : constants.X_OK);
+        const info = await stat(file);
+        if (!info.isFile())
+            throw new Error("entrypoint is not a file");
+    }
+    catch (error) {
+        throw new HitchError(`prepared artifact has no executable entrypoint for ${reference}: ${file}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+            cause: error,
+        });
+    }
+}
+export async function optionalFileDigest(file) {
+    try {
+        return `sha256:${createHash("sha256").update(await readFile(file)).digest("hex")}`;
+    }
+    catch (error) {
+        if (error?.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+export async function assertNpmResolution(directory, resolved) {
+    let lock;
+    try {
+        lock = JSON.parse(await readFile(path.join(directory, "package-lock.json"), "utf8"));
+    }
+    catch (error) {
+        throw new HitchError(`npm did not produce a readable dependency lock for ${resolved.canonical_ref}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+            cause: error,
+        });
+    }
+    const packageName = resolved.source.package;
+    const installed = packageName ? lock.packages?.[`node_modules/${packageName}`] : undefined;
+    if (installed?.version !== resolved.revision.version || installed?.integrity !== resolved.source.integrity) {
+        throw new HitchError(`installed package integrity does not match the resolution for ${resolved.canonical_ref}`, {
+            code: "artifact_integrity_mismatch",
+            exitCode: 5,
+        });
+    }
+}
+export async function assertGlobalNpmResolution(directory, resolved) {
+    const packageName = resolved.source.package;
+    let metadata;
+    try {
+        metadata = JSON.parse(await readFile(path.join(directory, "lib", "node_modules", ...(packageName || "").split("/"), "package.json"), "utf8"));
+    }
+    catch (error) {
+        throw new HitchError(`npm did not produce a readable global package for ${resolved.canonical_ref}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+            cause: error,
+        });
+    }
+    if (metadata.name !== packageName || metadata.version !== resolved.revision.version) {
+        throw new HitchError(`installed package version does not match the resolution for ${resolved.canonical_ref}`, {
+            code: "artifact_integrity_mismatch",
+            exitCode: 5,
+        });
+    }
+}
+export async function sourceLockIdentity(directory) {
+    const candidates = ["package-lock.json", "npm-shrinkwrap.json", "pnpm-lock.yaml", "bun.lock", path.join("codex-rs", "Cargo.lock")];
+    const locks = {};
+    for (const candidate of candidates) {
+        const identity = await optionalFileDigest(path.join(directory, candidate));
+        if (identity)
+            locks[candidate] = identity;
+    }
+    return Object.keys(locks).length > 0 ? digest(locks) : null;
+}
+export async function executableMatches(executable, identity) {
+    try {
+        return await fingerprintExecutable(executable) === identity;
+    }
+    catch {
+        return false;
+    }
+}
+export async function artifactMatches(directory, manifest) {
+    if (!manifest?.entrypoint || !manifest.entrypoint_integrity || !manifest.artifact_integrity)
+        return false;
+    const root = path.resolve(directory);
+    const executable = path.resolve(root, manifest.entrypoint);
+    if (executable !== root && !executable.startsWith(`${root}${path.sep}`))
+        return false;
+    if (!await executableMatches(executable, manifest.entrypoint_integrity))
+        return false;
+    try {
+        return await artifactDirectoryIntegrity(directory) === manifest.artifact_integrity;
+    }
+    catch {
+        return false;
+    }
+}
+export async function artifactDirectoryIntegrity(directory) {
+    const root = path.resolve(directory);
+    const hash = createHash("sha256");
+    await digestArtifactDirectory(hash, root, root, "", true);
+    return `sha256:${hash.digest("hex")}`;
+}
+async function digestArtifactDirectory(hash, root, directory, relative, topLevel) {
+    const entries = await readdir(directory);
+    entries.sort();
+    for (const name of entries) {
+        if (topLevel && name === "artifact.json")
+            continue;
+        const absolute = path.join(directory, name);
+        const childRelative = relative ? path.join(relative, name) : name;
+        const info = await lstat(absolute);
+        if (info.isDirectory()) {
+            hash.update(`d\0${childRelative}\0${info.mode & 0o7777}\0`);
+            await digestArtifactDirectory(hash, root, absolute, childRelative, false);
+        }
+        else if (info.isFile()) {
+            hash.update(`f\0${childRelative}\0${info.mode & 0o7777}\0${info.size}\0`);
+            for await (const chunk of createReadStream(absolute))
+                hash.update(chunk);
+            hash.update("\0");
+        }
+        else if (info.isSymbolicLink()) {
+            const target = await readlink(absolute);
+            const resolvedTarget = path.resolve(path.dirname(absolute), target);
+            if (resolvedTarget !== root && !resolvedTarget.startsWith(`${root}${path.sep}`)) {
+                throw new HitchError(`artifact symlink escapes its installation directory: ${absolute}`, {
+                    code: "artifact_invalid",
+                    exitCode: 5,
+                });
+            }
+            hash.update(`l\0${childRelative}\0${target}\0`);
+        }
+        else {
+            throw new HitchError(`unsupported special file in prepared artifact: ${absolute}`, {
+                code: "artifact_invalid",
+                exitCode: 5,
+            });
+        }
+    }
+}
+//# sourceMappingURL=integrity.js.map

package/dist/src/artifacts/integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../../../src/artifacts/integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAInF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,WAAmB,EACnB,OAAe,EACf,oBAAoB,GAAG,cAAc;IAErC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/F,IAAI,QAAoD,CAAC;IACzD,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA+C,CAAC;IAC3I,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,mDAAmD,WAAW,EAAE,EAAE;YACrF,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,QAAQ,CAAC,GAA2C,EAAE,CAAC,OAAO,CAAC,CAAC;IACrI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,0CAA0C,OAAO,gBAAgB,WAAW,EAAE,EAAE;YACnG,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,gBAAgB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,UAAU,CAAC,0DAA0D,WAAW,EAAE,EAAE;YAC5F,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAmD,EAAE,SAAiB;IACvG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,OAAO,QAAQ,CAAC,QAAQ,KAAK,MAAM;QACjC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,UAAU,CAAC,EAAE;QACjE,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,sDAAsD,SAAS,KAAK,IAAI,EAAE,EAAE;YAC/F,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACrF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,QAA0B;IACrF,IAAI,IAA6E,CAAC;IAClF,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;IACtG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,sDAAsD,QAAQ,CAAC,aAAa,EAAE,EAAE;YACnG,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,gBAAgB,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,SAAS,EAAE,SAAS,KAAK,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3G,MAAM,IAAI,UAAU,CAAC,iEAAiE,QAAQ,CAAC,aAAa,EAAE,EAAE;YAC9G,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,QAA0B;IAC3F,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IAC5C,IAAI,QAA6C,CAAC;IAClD,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAC5C,SAAS,EACT,KAAK,EACL,cAAc,EACd,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EACjC,cAAc,CACf,EAAE,MAAM,CAAC,CAAoB,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,qDAAqD,QAAQ,CAAC,aAAa,EAAE,EAAE;YAClG,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpF,MAAM,IAAI,UAAU,CAAC,+DAA+D,QAAQ,CAAC,aAAa,EAAE,EAAE;YAC5G,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,UAAU,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IACnI,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,IAAI,QAAQ;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,QAA0B;IACjF,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,QAAQ,CAAC,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,CAAC,MAAM,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,oBAAoB,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,kBAAkB,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,SAAiB;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,IAAmC,EAAE,IAAY,EAAE,SAAiB,EAAE,QAAgB,EAAE,QAAiB;IAC9I,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,QAAQ,IAAI,IAAI,KAAK,eAAe;YAAE,SAAS;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,MAAM,aAAa,KAAK,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC;YAC5D,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,MAAM,aAAa,KAAK,IAAI,CAAC,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YAC1E,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,IAAI,cAAc,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,UAAU,CAAC,wDAAwD,QAAQ,EAAE,EAAE;oBACvF,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,UAAU,CAAC,kDAAkD,QAAQ,EAAE,EAAE;gBACjF,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/artifacts/preparer.js

@@ -0,0 +1,379 @@
+import { randomBytes } from "node:crypto";
+import { chmod, lstat, readdir, rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { getAdapter } from "../adapters/index.js";
+import { SCHEMA_VERSION, HitchError, atomicWriteJSON, commandExecutable, commandVersion, detectVersion, digest, ensureDir, fingerprintExecutable, readJSON, runCommand, statePaths } from "../foundation/index.js";
+import { gitCacheDirectory } from "../revisions/index.js";
+import { artifactDirectoryIntegrity, artifactInvocation, artifactMatches, assertEntrypoint, assertGlobalNpmResolution, assertNpmResolution, entrypointLauncher, npmPackageEntrypoint, optionalFileDigest, sourceLockIdentity } from "./integrity.js";
+import { artifactManifest, promoteArtifact, readCachedArtifact, withArtifactLock } from "./store.js";
+const RECIPE_VERSION = "1";
+export async function prepareHarness(resolved, { root, env = process.env, signal, verifiedLocalGitSource } = {}) {
+    if (!resolved || typeof resolved !== "object" || !resolved.identity) {
+        throw new HitchError("resolved revision is required", { code: "invalid_resolution", exitCode: 2 });
+    }
+    const adapter = getAdapter(resolved.harness_id);
+    if (resolved.source.type === "installed")
+        return prepareInstalled(resolved, adapter);
+    if (!root)
+        throw new HitchError("a Hitch state root is required to prepare managed revisions");
+    const source = adapter.revision_sources?.[resolved.selector.type];
+    if (!source) {
+        throw new HitchError(`${resolved.harness_id} does not support ${resolved.selector.type} revisions`, {
+            code: "revision_selector_unsupported",
+            exitCode: 10,
+        });
+    }
+    const paths = statePaths(root);
+    if (verifiedLocalGitSource)
+        await assertVerifiedLocalGitSource(resolved, verifiedLocalGitSource, env, signal);
+    const preparationKey = digest({
+        revision_identity: resolved.identity,
+        recipe_version: RECIPE_VERSION,
+        recipe: recipeIdentity(source),
+        platform: process.platform,
+        architecture: process.arch,
+        node: process.versions.node,
+    });
+    return withArtifactLock(paths, preparationKey, async () => {
+        const cached = await readCachedArtifact(paths, preparationKey, resolved.identity);
+        if (cached)
+            return { ...cached, cache_hit: true };
+        return resolved.source.type === "npm"
+            ? prepareNpmArtifact(resolved, adapter, source, paths, preparationKey, env, signal)
+            : prepareGitArtifact(resolved, adapter, source, paths, preparationKey, env, signal, verifiedLocalGitSource?.directory);
+    }, { ...(signal ? { signal } : {}) });
+}
+export async function listPreparedArtifacts(harnessId, { root } = {}) {
+    if (!root)
+        throw new HitchError("a Hitch state root is required to list prepared artifacts");
+    const directory = statePaths(root).artifacts;
+    let entries;
+    try {
+        entries = await readdir(directory, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error?.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    const artifacts = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        const manifest = await readJSON(path.join(directory, entry.name, "artifact.json"), null).catch(() => null);
+        if (!manifest || manifest.harness_id !== harnessId)
+            continue;
+        const artifactDirectory = path.join(directory, entry.name);
+        const ready = await artifactMatches(artifactDirectory, manifest);
+        artifacts.push({ ...manifest, status: ready ? "ready" : "invalid" });
+    }
+    return artifacts.sort((left, right) => String(right.prepared_at || "").localeCompare(String(left.prepared_at || "")));
+}
+async function prepareInstalled(resolved, adapter) {
+    const executable = resolved.source.executable;
+    if (!executable) {
+        throw new HitchError("installed resolution is missing its executable", { code: "artifact_integrity_mismatch", exitCode: 5 });
+    }
+    let currentIdentity;
+    try {
+        currentIdentity = await fingerprintExecutable(executable);
+    }
+    catch (error) {
+        throw new HitchError(`installed harness is no longer readable: ${executable}`, {
+            code: "artifact_integrity_mismatch",
+            exitCode: 5,
+            cause: error,
+        });
+    }
+    if (currentIdentity !== resolved.source.integrity) {
+        throw new HitchError(`installed harness changed after resolution: ${executable}`, {
+            code: "artifact_integrity_mismatch",
+            exitCode: 5,
+        });
+    }
+    return {
+        schema_version: SCHEMA_VERSION,
+        artifact_id: digest({ revision_identity: resolved.identity, recipe_version: RECIPE_VERSION }),
+        harness_id: resolved.harness_id,
+        revision_identity: resolved.identity,
+        source_type: "installed",
+        adapter: adapter.id,
+        adapter_version: RECIPE_VERSION,
+        recipe_version: RECIPE_VERSION,
+        platform: `${process.platform}-${process.arch}`,
+        entrypoint: executable,
+        launcher: "direct",
+        entrypoint_integrity: currentIdentity,
+        artifact_integrity: currentIdentity,
+        toolchain: { node: process.version },
+        resolved_revision: resolved,
+        executable,
+        entrypoint_args: [],
+        observed_version: resolved.revision.version,
+        external: true,
+        cache_hit: true,
+        prepared_at: resolved.resolved_at,
+    };
+}
+async function prepareNpmArtifact(resolved, adapter, source, paths, preparationKey, env, signal) {
+    const staging = await newStagingDirectory(paths, resolved.harness_id);
+    try {
+        const npm = commandExecutable("npm", env);
+        const tarball = resolved.source.tarball;
+        if (!tarball)
+            throw new HitchError("npm resolution is missing its tarball", { code: "prepare_failed", exitCode: 5 });
+        const installMode = source.install_mode || "project";
+        let nodeModulesDirectory = "node_modules";
+        let lockIdentity;
+        if (installMode === "global") {
+            const packedTarball = await packResolvedNpmTarball(npm, staging, resolved, env, signal);
+            try {
+                await runCommand(npm, ["install", "--global", "--prefix", staging, "--no-audit", "--no-fund", packedTarball], {
+                    env,
+                    signal,
+                    failureCode: "prepare_failed",
+                    failureExitCode: 5,
+                });
+            }
+            finally {
+                await rm(packedTarball, { force: true });
+            }
+            nodeModulesDirectory = path.join("lib", "node_modules");
+            await assertGlobalNpmResolution(staging, resolved);
+            lockIdentity = digest({
+                package: resolved.source.package,
+                version: resolved.revision.version,
+                integrity: resolved.source.integrity,
+            });
+        }
+        else {
+            await writeFile(path.join(staging, "package.json"), `${JSON.stringify({ private: true })}\n`, { mode: 0o600 });
+            await runCommand(npm, ["install", "--no-audit", "--no-fund", "--save-exact", tarball], {
+                cwd: staging,
+                env,
+                signal,
+                failureCode: "prepare_failed",
+                failureExitCode: 5,
+            });
+            await assertNpmResolution(staging, resolved);
+            lockIdentity = await optionalFileDigest(path.join(staging, "package-lock.json"));
+        }
+        const packageName = resolved.source.package;
+        if (!packageName)
+            throw new HitchError("npm resolution is missing its package name", { code: "prepare_failed", exitCode: 5 });
+        const binName = source.bin;
+        if (!binName)
+            throw new HitchError("npm revision source is missing its bin name", { code: "prepare_failed", exitCode: 5 });
+        const entrypoint = await npmPackageEntrypoint(staging, packageName, binName, nodeModulesDirectory);
+        const stagedExecutable = path.join(staging, entrypoint);
+        await assertEntrypoint(stagedExecutable, entrypointLauncher(entrypoint), resolved.canonical_ref);
+        const toolchain = { node: process.version, npm: await commandVersion(npm, env, signal) };
+        const launcher = entrypointLauncher(entrypoint);
+        const invocation = artifactInvocation({ entrypoint, launcher }, staging);
+        const observedVersion = await detectVersion(invocation.executable, [...invocation.entrypoint_args, ...adapter.version_args]);
+        throwIfAborted(signal);
+        assertObservedVersion(observedVersion, resolved.revision.version || "", resolved.canonical_ref);
+        const entrypointIntegrity = await fingerprintExecutable(stagedExecutable);
+        const artifactIntegrity = await artifactDirectoryIntegrity(staging);
+        const artifactId = digest({
+            preparation_key: preparationKey,
+            dependency_lock: lockIdentity,
+            toolchain,
+            artifact_integrity: artifactIntegrity,
+        });
+        const manifest = artifactManifest(resolved, adapter, artifactId, entrypoint, toolchain, {
+            dependency_lock: lockIdentity,
+            artifact_integrity: artifactIntegrity,
+        });
+        manifest.launcher = launcher;
+        manifest.observed_version = observedVersion || null;
+        manifest.entrypoint_integrity = entrypointIntegrity;
+        await atomicWriteJSON(path.join(staging, "artifact.json"), manifest);
+        return promoteArtifact(paths, staging, manifest, preparationKey);
+    }
+    catch (error) {
+        await rm(staging, { recursive: true, force: true });
+        throw normalizePreparationError(error, resolved.canonical_ref);
+    }
+}
+async function prepareGitArtifact(resolved, adapter, source, paths, preparationKey, env, signal, verifiedSourceDirectory) {
+    const staging = await newStagingDirectory(paths, resolved.harness_id);
+    const sourceDirectory = path.join(staging, "source");
+    try {
+        const git = commandExecutable("git", env);
+        const sourceRepository = verifiedSourceDirectory || gitCacheDirectory(paths, resolved.source.url || "");
+        await runCommand(git, ["clone", "--no-hardlinks", "--no-checkout", sourceRepository, sourceDirectory], {
+            env,
+            signal,
+            failureCode: "prepare_failed",
+            failureExitCode: 5,
+        });
+        await runCommand(git, ["-C", sourceDirectory, "checkout", "--detach", resolved.revision.commit], {
+            env,
+            signal,
+            failureCode: "prepare_failed",
+            failureExitCode: 5,
+        });
+        const toolchain = { node: process.version };
+        for (const command of source.commands || []) {
+            const executable = commandExecutable(command.executable, env);
+            toolchain[command.executable] ||= await commandVersion(executable, env, signal);
+            await runCommand(executable, command.args || [], {
+                cwd: path.resolve(sourceDirectory, command.cwd || "."),
+                env,
+                signal,
+                failureCode: "prepare_failed",
+                failureExitCode: 5,
+            });
+        }
+        const entrypoint = path.join("source", source.entrypoint || "");
+        const stagedExecutable = path.join(staging, entrypoint);
+        if (stagedExecutable.endsWith(".js"))
+            await chmod(stagedExecutable, 0o755).catch(() => { });
+        await assertEntrypoint(stagedExecutable, entrypointLauncher(entrypoint), resolved.canonical_ref);
+        const lockIdentity = await sourceLockIdentity(sourceDirectory);
+        await rm(path.join(sourceDirectory, ".git"), { recursive: true, force: true });
+        const launcher = entrypointLauncher(entrypoint);
+        const invocation = artifactInvocation({ entrypoint, launcher }, staging);
+        const observedVersion = await detectVersion(invocation.executable, [...invocation.entrypoint_args, ...adapter.version_args]);
+        throwIfAborted(signal);
+        const entrypointIntegrity = await fingerprintExecutable(stagedExecutable);
+        const artifactIntegrity = await artifactDirectoryIntegrity(staging);
+        const artifactId = digest({
+            preparation_key: preparationKey,
+            dependency_lock: lockIdentity,
+            toolchain,
+            artifact_integrity: artifactIntegrity,
+        });
+        const manifest = artifactManifest(resolved, adapter, artifactId, entrypoint, toolchain, {
+            dependency_lock: lockIdentity,
+            artifact_integrity: artifactIntegrity,
+        });
+        manifest.launcher = launcher;
+        manifest.observed_version = observedVersion || null;
+        manifest.entrypoint_integrity = entrypointIntegrity;
+        await atomicWriteJSON(path.join(staging, "artifact.json"), manifest);
+        return promoteArtifact(paths, staging, manifest, preparationKey);
+    }
+    catch (error) {
+        await rm(staging, { recursive: true, force: true });
+        throw normalizePreparationError(error, resolved.canonical_ref);
+    }
+}
+async function assertVerifiedLocalGitSource(resolved, verified, env, signal) {
+    if (resolved.source.type !== "git" || resolved.source.registered !== false || resolved.revision.type !== "commit") {
+        throw new HitchError("verified local Git source cannot be used with this resolution", { code: "local_source_integrity_mismatch", exitCode: 12 });
+    }
+    if (verified.resolutionIdentity !== resolved.identity || verified.commit !== resolved.revision.commit) {
+        throw new HitchError("verified local Git source does not match the locked resolution", { code: "local_source_integrity_mismatch", exitCode: 12 });
+    }
+    const info = await lstat(verified.directory).catch(() => null);
+    if (!info?.isDirectory() || info.isSymbolicLink()) {
+        throw new HitchError("verified local Git source is not a directory", { code: "local_source_integrity_mismatch", exitCode: 12 });
+    }
+    const git = commandExecutable("git", env);
+    const commitResult = await runCommand(git, ["-C", verified.directory, "rev-parse", "--verify", `${verified.commit}^{commit}`], {
+        env,
+        signal,
+        failureCode: "local_source_integrity_mismatch",
+        failureExitCode: 12,
+    });
+    const treeResult = await runCommand(git, ["-C", verified.directory, "rev-parse", "--verify", `${verified.commit}^{tree}`], {
+        env,
+        signal,
+        failureCode: "local_source_integrity_mismatch",
+        failureExitCode: 12,
+    });
+    if (commitResult.stdout.trim().toLowerCase() !== verified.commit || treeResult.stdout.trim().toLowerCase() !== verified.tree) {
+        throw new HitchError("verified local Git source commit or tree changed", { code: "local_source_integrity_mismatch", exitCode: 12 });
+    }
+}
+function recipeIdentity(source) {
+    return {
+        type: source.type,
+        package: source.package,
+        packages: source.packages,
+        bin: source.bin,
+        install_mode: source.install_mode,
+        url: source.url,
+        commands: source.commands,
+        entrypoint: source.entrypoint,
+    };
+}
+async function newStagingDirectory(paths, harnessId) {
+    await ensureDir(paths.temporary);
+    const directory = path.join(paths.temporary, `${harnessId}-${process.pid}-${Date.now()}-${randomBytes(6).toString("hex")}`);
+    await ensureDir(directory);
+    return directory;
+}
+async function packResolvedNpmTarball(npm, directory, resolved, env, signal) {
+    const tarball = resolved.source.tarball;
+    if (!tarball)
+        throw new HitchError("npm resolution is missing its tarball", { code: "prepare_failed", exitCode: 5 });
+    const result = await runCommand(npm, ["pack", "--json", "--pack-destination", directory, tarball], {
+        env,
+        signal,
+        failureCode: "prepare_failed",
+        failureExitCode: 5,
+    });
+    let packed;
+    try {
+        const records = JSON.parse(result.stdout);
+        if (Array.isArray(records) && records.length === 1)
+            packed = records[0];
+    }
+    catch {
+        // The validation error below includes the resolved reference without exposing npm output.
+    }
+    const filename = packed?.filename;
+    if (packed?.name !== resolved.source.package
+        || packed?.version !== resolved.revision.version
+        || packed?.integrity !== resolved.source.integrity
+        || typeof filename !== "string"
+        || !filename
+        || path.basename(filename) !== filename) {
+        throw new HitchError(`packed package integrity does not match the resolution for ${resolved.canonical_ref}`, {
+            code: "artifact_integrity_mismatch",
+            exitCode: 5,
+        });
+    }
+    const archive = path.join(directory, filename);
+    try {
+        if (!(await lstat(archive)).isFile())
+            throw new Error("packed archive is not a file");
+    }
+    catch (error) {
+        throw new HitchError(`npm did not produce a readable package archive for ${resolved.canonical_ref}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+            cause: error,
+        });
+    }
+    return archive;
+}
+function normalizePreparationError(error, reference) {
+    if (error instanceof HitchError)
+        return error;
+    return new HitchError(`failed to prepare ${reference}: ${error?.message || String(error)}`, {
+        code: "prepare_failed",
+        exitCode: 5,
+        cause: error,
+    });
+}
+function throwIfAborted(signal) {
+    if (signal?.aborted)
+        throw cancelledError();
+}
+function cancelledError() {
+    return new HitchError("harness preparation cancelled", { code: "cancelled", exitCode: 9 });
+}
+function assertObservedVersion(observed, expected, reference) {
+    const escaped = expected.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    if (!observed || !new RegExp(`(?:^|\\s)v?${escaped}(?:\\s|$)`).test(observed)) {
+        throw new HitchError(`prepared artifact for ${reference} reported ${observed || "no version"}; expected ${expected}`, {
+            code: "artifact_invalid",
+            exitCode: 5,
+        });
+    }
+}
+//# sourceMappingURL=preparer.js.map

package/dist/src/artifacts/preparer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preparer.js","sourceRoot":"","sources":["../../../src/artifacts/preparer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAY,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEnN,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACrP,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGrG,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA0B,EAC1B,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,KAKrD,EAAE;IAEN,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,CAAC,UAAU,qBAAqB,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE;YAClG,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,sBAAsB;QAAE,MAAM,4BAA4B,CAAC,QAAQ,EAAE,sBAAsB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9G,MAAM,cAAc,GAAG,MAAM,CAAC;QAC5B,iBAAiB,EAAE,QAAQ,CAAC,QAAQ;QACpC,cAAc,EAAE,cAAc;QAC9B,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,IAAI;QAC1B,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;KAC5B,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClF,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;YACnC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,CAAC;YACnF,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC;IAC3H,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,EAAE,IAAI,KAAwB,EAAE;IAC7F,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IAC7C,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAA0B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpI,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACjE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAA0B,EAAE,OAA0B;IACpF,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,gDAAgD,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,4CAA4C,UAAU,EAAE,EAAE;YAC7E,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,eAAe,KAAK,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,+CAA+C,UAAU,EAAE,EAAE;YAChF,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;QAC7F,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,iBAAiB,EAAE,QAAQ,CAAC,QAAQ;QACpC,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,OAAO,CAAC,EAAE;QACnB,eAAe,EAAE,cAAc;QAC/B,cAAc,EAAE,cAAc;QAC9B,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;QAC/C,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAClB,oBAAoB,EAAE,eAAe;QACrC,kBAAkB,EAAE,eAAe;QACnC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;QACpC,iBAAiB,EAAE,QAAQ;QAC3B,UAAU;QACV,eAAe,EAAE,EAAE;QACnB,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAC3C,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,QAAQ,CAAC,WAAW;KACd,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAA0B,EAC1B,OAA0B,EAC1B,MAAgC,EAChC,KAAiB,EACjB,cAAsB,EACtB,GAAsB,EACtB,MAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACrH,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,SAAS,CAAC;QACrD,IAAI,oBAAoB,GAAG,cAAc,CAAC;QAC1C,IAAI,YAA2B,CAAC;QAChC,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE;oBAC5G,GAAG;oBACH,MAAM;oBACN,WAAW,EAAE,gBAAgB;oBAC7B,eAAe,EAAE,CAAC;iBACnB,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACnD,YAAY,GAAG,MAAM,CAAC;gBACpB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAChC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;gBAClC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;aACrC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/G,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE;gBACrF,GAAG,EAAE,OAAO;gBACZ,GAAG;gBACH,MAAM;gBACN,WAAW,EAAE,gBAAgB;gBAC7B,eAAe,EAAE,CAAC;aACnB,CAAC,CAAC;YACH,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC7C,YAAY,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5C,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9H,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3H,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACnG,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,gBAAgB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjG,MAAM,SAAS,GAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACjH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,eAAe,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7H,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,qBAAqB,CAAC,eAAe,EAAG,QAAQ,CAAC,QAAQ,CAAC,OAAkB,IAAI,EAAE,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5G,MAAM,mBAAmB,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,MAAM,CAAC;YACxB,eAAe,EAAE,cAAc;YAC/B,eAAe,EAAE,YAAY;YAC7B,SAAS;YACT,kBAAkB,EAAE,iBAAiB;SACtC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE;YACtF,eAAe,EAAE,YAAY;YAC7B,kBAAkB,EAAE,iBAAiB;SACtC,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,gBAAgB,GAAG,eAAe,IAAI,IAAI,CAAC;QACpD,QAAQ,CAAC,oBAAoB,GAAG,mBAAmB,CAAC;QACpD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAA0B,EAC1B,OAA0B,EAC1B,MAAgC,EAChC,KAAiB,EACjB,cAAsB,EACtB,GAAsB,EACtB,MAA+B,EAC/B,uBAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,uBAAuB,IAAI,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE;YACrG,GAAG;YACH,MAAM;YACN,WAAW,EAAE,gBAAgB;YAC7B,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE;YACzG,GAAG;YACH,MAAM;YACN,WAAW,EAAE,gBAAgB;YAC7B,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,SAAS,GAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACpE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC9D,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAChF,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;gBAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;gBACtD,GAAG;gBACH,MAAM;gBACN,WAAW,EAAE,gBAAgB;gBAC7B,eAAe,EAAE,CAAC;aACnB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,gBAAgB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjG,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,eAAe,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7H,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,mBAAmB,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,MAAM,CAAC;YACxB,eAAe,EAAE,cAAc;YAC/B,eAAe,EAAE,YAAY;YAC7B,SAAS;YACT,kBAAkB,EAAE,iBAAiB;SACtC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE;YACtF,eAAe,EAAE,YAAY;YAC7B,kBAAkB,EAAE,iBAAiB;SACtC,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,gBAAgB,GAAG,eAAe,IAAI,IAAI,CAAC;QACpD,QAAQ,CAAC,oBAAoB,GAAG,mBAAmB,CAAC;QACpD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,QAA0B,EAC1B,QAAgC,EAChC,GAAsB,EACtB,MAA+B;IAE/B,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClH,MAAM,IAAI,UAAU,CAAC,+DAA+D,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtG,MAAM,IAAI,UAAU,CAAC,gEAAgE,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACpJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,8CAA8C,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,MAAM,WAAW,CAAC,EAAE;QAC7H,GAAG;QACH,MAAM;QACN,WAAW,EAAE,iCAAiC;QAC9C,eAAe,EAAE,EAAE;KACpB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,MAAM,SAAS,CAAC,EAAE;QACzH,GAAG;QACH,MAAM;QACN,WAAW,EAAE,iCAAiC;QAC9C,eAAe,EAAE,EAAE;KACpB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7H,MAAM,IAAI,UAAU,CAAC,kDAAkD,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACtI,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAgC;IACtD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAAiB,EAAE,SAAiB;IACrE,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5H,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAC;AACnB,CAAC;AASD,KAAK,UAAU,sBAAsB,CACnC,GAAW,EACX,SAAiB,EACjB,QAA0B,EAC1B,GAAsB,EACtB,MAA+B;IAE/B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACrH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;QACjG,GAAG;QACH,MAAM;QACN,WAAW,EAAE,gBAAgB;QAC7B,eAAe,EAAE,CAAC;KACnB,CAAC,CAAC;IACH,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAoB,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;IAClC,IACE,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,MAAM,CAAC,OAAO;WACrC,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO;WAC7C,MAAM,EAAE,SAAS,KAAK,QAAQ,CAAC,MAAM,CAAC,SAAS;WAC/C,OAAO,QAAQ,KAAK,QAAQ;WAC5B,CAAC,QAAQ;WACT,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,EACvC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,8DAA8D,QAAQ,CAAC,aAAa,EAAE,EAAE;YAC3G,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,sDAAsD,QAAQ,CAAC,aAAa,EAAE,EAAE;YACnG,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,SAAiB;IAClE,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,IAAI,UAAU,CAAC,qBAAqB,SAAS,KAAM,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;QACrG,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,cAAc,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,UAAU,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,QAAgB,EAAE,SAAiB;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,OAAO,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,UAAU,CAAC,yBAAyB,SAAS,aAAa,QAAQ,IAAI,YAAY,cAAc,QAAQ,EAAE,EAAE;YACpH,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}