agent-hitch 0.2.12 → 0.2.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/benchmark-packages/automationbench/RESOURCES.md +27 -0
- package/benchmark-packages/automationbench/resources.mjs +86 -0
- package/benchmark-packages/shared-tree/README.md +14 -0
- package/benchmark-packages/shared-tree/import.mjs +39 -0
- package/dist/scripts/canary-automation-resources.js +86 -0
- package/dist/scripts/canary-automation-resources.js.map +1 -0
- package/dist/scripts/canary-resource-empty-daemon.js +195 -0
- package/dist/scripts/canary-resource-empty-daemon.js.map +1 -0
- package/dist/scripts/canary-resources.js +89 -0
- package/dist/scripts/canary-resources.js.map +1 -0
- package/dist/scripts/check-architecture.js +6 -5
- package/dist/scripts/check-architecture.js.map +1 -1
- package/dist/scripts/resource-space-sampler.js +83 -0
- package/dist/scripts/resource-space-sampler.js.map +1 -0
- package/dist/src/adapters/providers/shared.js +0 -1
- package/dist/src/adapters/providers/shared.js.map +1 -1
- package/dist/src/backends/harbor/backend.js +5 -1
- package/dist/src/backends/harbor/backend.js.map +1 -1
- package/dist/src/backends/harbor/resource-admission.js +23 -0
- package/dist/src/backends/harbor/resource-admission.js.map +1 -0
- package/dist/src/cli/commands/resources.js +23 -0
- package/dist/src/cli/commands/resources.js.map +1 -0
- package/dist/src/cli/main.js +2 -0
- package/dist/src/cli/main.js.map +1 -1
- package/dist/src/control-plane/remote-offer-contract.js +11 -2
- package/dist/src/control-plane/remote-offer-contract.js.map +1 -1
- package/dist/src/control-plane/remote-result-transport.js +10 -0
- package/dist/src/control-plane/remote-result-transport.js.map +1 -1
- package/dist/src/control-plane/remote-work-coordinator.js +4 -1
- package/dist/src/control-plane/remote-work-coordinator.js.map +1 -1
- package/dist/src/control-plane/remote-work-inputs.js +16 -4
- package/dist/src/control-plane/remote-work-inputs.js.map +1 -1
- package/dist/src/control-plane/remote-worker-client.js +22 -0
- package/dist/src/control-plane/remote-worker-client.js.map +1 -1
- package/dist/src/control-plane/remote-worker-codecs.js +1 -1
- package/dist/src/control-plane/remote-worker-codecs.js.map +1 -1
- package/dist/src/control-plane/remote-worker-protocol.js +12 -2
- package/dist/src/control-plane/remote-worker-protocol.js.map +1 -1
- package/dist/src/control-plane/remote-worker-runner.js +1 -1
- package/dist/src/control-plane/remote-worker-runner.js.map +1 -1
- package/dist/src/control-plane/remote-workers.js +2 -1
- package/dist/src/control-plane/remote-workers.js.map +1 -1
- package/dist/src/domain/validation.js +41 -6
- package/dist/src/domain/validation.js.map +1 -1
- package/dist/src/evals/benchmark-adapter-manifest.js +4 -0
- package/dist/src/evals/benchmark-adapter-manifest.js.map +1 -1
- package/dist/src/evals/benchmark-candidate.js +11 -3
- package/dist/src/evals/benchmark-candidate.js.map +1 -1
- package/dist/src/evals/eval-result-builder.js +22 -1
- package/dist/src/evals/eval-result-builder.js.map +1 -1
- package/dist/src/evals/index.js +1 -0
- package/dist/src/evals/index.js.map +1 -1
- package/dist/src/evals/planned-execution.js +5 -14
- package/dist/src/evals/planned-execution.js.map +1 -1
- package/dist/src/evals/request.js +9 -0
- package/dist/src/evals/request.js.map +1 -1
- package/dist/src/evals/resource-eval-lifecycle.js +31 -0
- package/dist/src/evals/resource-eval-lifecycle.js.map +1 -0
- package/dist/src/evals/resource-legacy-export.js +57 -0
- package/dist/src/evals/resource-legacy-export.js.map +1 -0
- package/dist/src/evals/service.js +5 -20
- package/dist/src/evals/service.js.map +1 -1
- package/dist/src/evals/task-resources.js +12 -4
- package/dist/src/evals/task-resources.js.map +1 -1
- package/dist/src/evals/trial-bundle-files.js +81 -0
- package/dist/src/evals/trial-bundle-files.js.map +1 -0
- package/dist/src/evals/trial-import.js +7 -78
- package/dist/src/evals/trial-import.js.map +1 -1
- package/dist/src/foundation/durable-json.js +33 -0
- package/dist/src/foundation/durable-json.js.map +1 -0
- package/dist/src/foundation/index.js +2 -0
- package/dist/src/foundation/index.js.map +1 -1
- package/dist/src/foundation/resource-image-references.js +52 -0
- package/dist/src/foundation/resource-image-references.js.map +1 -0
- package/dist/src/images/gc.js +2 -2
- package/dist/src/images/gc.js.map +1 -1
- package/dist/src/images/registry.js +27 -2
- package/dist/src/images/registry.js.map +1 -1
- package/dist/src/resources/api.js +207 -0
- package/dist/src/resources/api.js.map +1 -0
- package/dist/src/resources/bundle.js +117 -0
- package/dist/src/resources/bundle.js.map +1 -0
- package/dist/src/resources/evidence.js +93 -0
- package/dist/src/resources/evidence.js.map +1 -0
- package/dist/src/resources/gc.js +123 -0
- package/dist/src/resources/gc.js.map +1 -0
- package/dist/src/resources/index.js +14 -0
- package/dist/src/resources/index.js.map +1 -0
- package/dist/src/resources/materialize.js +143 -0
- package/dist/src/resources/materialize.js.map +1 -0
- package/dist/src/resources/object-store.js +191 -0
- package/dist/src/resources/object-store.js.map +1 -0
- package/dist/src/resources/oci-layer-validation.js +202 -0
- package/dist/src/resources/oci-layer-validation.js.map +1 -0
- package/dist/src/resources/oci-provider.js +101 -0
- package/dist/src/resources/oci-provider.js.map +1 -0
- package/dist/src/resources/oci-registry-bundle.js +253 -0
- package/dist/src/resources/oci-registry-bundle.js.map +1 -0
- package/dist/src/resources/protocol.js +222 -0
- package/dist/src/resources/protocol.js.map +1 -0
- package/dist/src/resources/result-retention.js +93 -0
- package/dist/src/resources/result-retention.js.map +1 -0
- package/dist/src/resources/role-context.js +54 -0
- package/dist/src/resources/role-context.js.map +1 -0
- package/dist/src/resources/stats.js +36 -0
- package/dist/src/resources/stats.js.map +1 -0
- package/dist/src/resources/store.js +310 -0
- package/dist/src/resources/store.js.map +1 -0
- package/dist/src/resources/tasks.js +153 -0
- package/dist/src/resources/tasks.js.map +1 -0
- package/dist/src/resources/transfer.js +162 -0
- package/dist/src/resources/transfer.js.map +1 -0
- package/dist/src/resources/views.js +130 -0
- package/dist/src/resources/views.js.map +1 -0
- package/dist/src/trajectories/analysis.js +31 -9
- package/dist/src/trajectories/analysis.js.map +1 -1
- package/dist/src/trajectories/chunk-projection.js +24 -11
- package/dist/src/trajectories/chunk-projection.js.map +1 -1
- package/dist/src/trajectories/contract.js +4 -0
- package/dist/src/trajectories/contract.js.map +1 -1
- package/dist/src/trajectories/dsh-chunk-contract.js +2 -2
- package/dist/src/trajectories/dsh-chunk-contract.js.map +1 -1
- package/dist/src/trajectories/dsh-contract.js +114 -17
- package/dist/src/trajectories/dsh-contract.js.map +1 -1
- package/dist/src/trajectories/embedded-stream.js +95 -0
- package/dist/src/trajectories/embedded-stream.js.map +1 -0
- package/dist/src/trajectories/events-chunk-drill.js +40 -0
- package/dist/src/trajectories/events-chunk-drill.js.map +1 -1
- package/dist/src/trajectories/events-page.js +43 -3
- package/dist/src/trajectories/events-page.js.map +1 -1
- package/dist/src/trajectories/format.js +3 -7
- package/dist/src/trajectories/format.js.map +1 -1
- package/dist/src/trajectories/index.js +1 -1
- package/dist/src/trajectories/index.js.map +1 -1
- package/dist/src/trajectories/providers/deepseek-codec.js +134 -0
- package/dist/src/trajectories/providers/deepseek-codec.js.map +1 -0
- package/dist/src/trajectories/providers/deepseek.js +32 -20
- package/dist/src/trajectories/providers/deepseek.js.map +1 -1
- package/dist/src/trajectories/request-attempt.js +16 -3
- package/dist/src/trajectories/request-attempt.js.map +1 -1
- package/dist/src/trajectories/store.js +28 -13
- package/dist/src/trajectories/store.js.map +1 -1
- package/dist/src/trajectories/stream-reader.js +12 -4
- package/dist/src/trajectories/stream-reader.js.map +1 -1
- package/dist/src/trajectories/surface-fold.js +26 -6
- package/dist/src/trajectories/surface-fold.js.map +1 -1
- package/dist/src/trajectories/unstarted-tool-repair.js +65 -0
- package/dist/src/trajectories/unstarted-tool-repair.js.map +1 -0
- package/dist/src/workers/remote-harbor-work-spec.js +9 -3
- package/dist/src/workers/remote-harbor-work-spec.js.map +1 -1
- package/dist/src/workers/remote-harbor-worker.js +24 -9
- package/dist/src/workers/remote-harbor-worker.js.map +1 -1
- package/docs/resource-storage.zh-CN.md +95 -0
- package/docs/schemas/execution-provider-status.schema.json +20 -0
- package/docs/schemas/hitch-resource-dataset-v2.schema.json +590 -0
- package/docs/schemas/hitch-resource-lock-v1.schema.json +341 -0
- package/docs/schemas/hitch-resource-plan-v1.schema.json +423 -0
- package/docs/schemas/hitch-resource-selection-v1.schema.json +608 -0
- package/docs/schemas/hitch-tree-v1.schema.json +75 -0
- package/docs/schemas/remote-harbor-work-spec.schema.json +47 -3
- package/docs/schemas/remote-work-offer.schema.json +2 -1
- package/docs/schemas/remote-worker-registration.schema.json +20 -0
- package/docs/schemas/trajectory-analysis.schema.json +17 -3
- package/package.json +9 -3
- package/test-contracts/hitch-resources-v1.json +197 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"oci-registry-bundle.js","sourceRoot":"","sources":["../../../src/resources/oci-registry-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAS,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAiB,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAiD,MAAM,2BAA2B,CAAC;AAEzI,0EAA0E;AAC1E,6DAA6D;AAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAChF,MAAM,MAAM,GAAG,kGAAkG,CAAC;AAClH,MAAM,YAAY,GAAG,GAAG,MAAM,sGAAsG,CAAC;AAKrI,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IAC7G,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACrE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ;QAAE,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,mEAAmE,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAO,EAAE,CAAC;AAC1I,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvR,OAAO,GAAG,CAAC;AACb,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,OAAe;IAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAiB,EAAE,CAAC;IAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAA4C,EAAE,CAAC;QAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QAAC,IAAI,IAAI,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACxM,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAY;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAA4B,CAAC;IAC/D,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IACxM,MAAM,KAAK,GAAG,CAAC,CAAU,EAAc,EAAE,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9P,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAE,CAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7K,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;AACxL,CAAC;AACD,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAmB;IAClE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAAC,IAAI,KAAyB,CAAC;IAC5E,OAAO,KAAK,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjJ,IAAI,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAChG,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3G,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACxI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC1J,IAAI,OAAO;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,QAAQ,CAAC,UAAU,OAAO,CAAC,CAAC;YACjI,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAA4B,CAAC;YACnI,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAAC,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,QAAQ,CAAC;IAChJ,CAAC,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAY,EAAE,SAAiB,EAAE,MAAoB;IAC/F,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,GAAG,CAAC,aAAa,KAAK,CAAC,cAAc,EAAE,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1K,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAAC,OAAO,QAAQ,CAAC;AAChD,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,KAAY,EAAE,YAAoB;IACzF,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC3I,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAY,EAAE,SAAiB,EAAE,IAAY,EAAE,MAAc,EAAE,MAAoB;IAC5H,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,GAAG,CAAC,aAAa,KAAK,CAAC,cAAc,EAAE,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1K,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,6BAA6B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClN,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACnM,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,GAAG,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAChG,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAA4C,EAAE,CAAC;gBAChF,OAAO,CAAC,cAAc,EAAE,CAAC;gBAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnL,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrG,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAAC,IAAI,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACzM,CAAC;AACD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAY,EAAE,IAAY,EAAE,MAAoB,EAAE,SAA4B,2BAA2B;IACpJ,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7H,IAAI,QAAgB,EAAE,KAAmB,EAAE,MAAiD,EAAE,SAAiB,EAAE,MAAkB,EAAE,MAAc,CAAC;IACpJ,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,GAAG,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3K,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC7J,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1F,IAAI,GAAG,CAAC,QAAQ,KAAK,6BAA6B,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACvI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/F,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChG,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAChC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjI,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,MAAO,CAAC;IAAC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAAC,IAAI,OAAO,GAAa,EAAE,CAAC;IAChG,KAAK,MAAM,IAAI,IAAI,KAAM,EAAE,CAAC;QAC1B,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAa,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAO,CAAC,MAAM,EAAE,CAAC;oBAAC,IAAI,IAAI,CAAC,IAAI,GAAG,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;QACpT,IAAI,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,MAAM,KAAK,MAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAA4B,CAAC;YACvF,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC/I,MAAM,MAAM,GAAG,CAAC,CAAC,MAA6C,CAAC;YAC/D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAO,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACxL,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAqB,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAChO,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACtG,KAAK,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC;QAAC,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAS,EAAE,KAAK,EAAE,KAAM,EAAE,SAAS,EAAE,SAAU,EAAE,MAAM,EAAE,MAAO,EAAE,KAAK,EAAE,CAAC;AAC/F,CAAC;AACD,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAY,EAAE,IAAY,EAAE,SAAiB,EAAE,QAAgB,EAAE,MAAoB,EAAE,SAA4B,2BAA2B;IACvL,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC/E,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACtI,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1G,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,OAAO,QAAQ,CAAC,UAAU,EAAE,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,KAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1F,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACvI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,UAAU,iBAAiB,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAClM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAiB,CAAC,CAAC;YACzU,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzI,CAAC;QACD,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,cAAc,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,SAAU,EAAE,EAAE,IAAI,EAAE,QAAS,EAAE,CAAC,CAAC;IACxL,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1I,OAAO,QAAS,CAAC;AACnB,CAAC"}
|
|
@@ -0,0 +1,222 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
export const RESOURCE_CAPABILITIES = ["blob@1", "tree@1", "oci-image@1", "input-file@1", "input-tree@1", "environment-image@1", "private-copy@1", "read-only@1"];
|
|
3
|
+
export function canonical(value) {
|
|
4
|
+
if (Array.isArray(value))
|
|
5
|
+
return `[${value.map(canonical).join(",")}]`;
|
|
6
|
+
if (value && typeof value === "object")
|
|
7
|
+
return `{${Object.keys(value).sort(compare).map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`;
|
|
8
|
+
const result = JSON.stringify(value);
|
|
9
|
+
if (result === undefined || typeof value === "number" && !Number.isFinite(value))
|
|
10
|
+
throw new TypeError("non-canonical JSON value");
|
|
11
|
+
return result;
|
|
12
|
+
}
|
|
13
|
+
export function hash(bytes) { return `sha256:${createHash("sha256").update(bytes).digest("hex")}`; }
|
|
14
|
+
export function identity(domain, value) { return hash(canonical({ protocol: domain, value })); }
|
|
15
|
+
export function compare(a, b) { return Buffer.compare(Buffer.from(a), Buffer.from(b)); }
|
|
16
|
+
export function object(value, keys) {
|
|
17
|
+
if (!value || typeof value !== "object" || Array.isArray(value))
|
|
18
|
+
throw new TypeError("resource record must be an object");
|
|
19
|
+
const result = value;
|
|
20
|
+
if (Object.keys(result).some(key => !keys.includes(key)))
|
|
21
|
+
throw new TypeError("unknown resource field");
|
|
22
|
+
return result;
|
|
23
|
+
}
|
|
24
|
+
export function sha(value) {
|
|
25
|
+
if (typeof value !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value))
|
|
26
|
+
throw new TypeError("invalid resource SHA-256");
|
|
27
|
+
return value;
|
|
28
|
+
}
|
|
29
|
+
export function natural(value) {
|
|
30
|
+
if (!Number.isSafeInteger(value) || value < 0)
|
|
31
|
+
throw new TypeError("resource size must be a non-negative safe integer");
|
|
32
|
+
return value;
|
|
33
|
+
}
|
|
34
|
+
export function resourceId(value) {
|
|
35
|
+
if (typeof value !== "string" || !/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(value) || value === "." || value === "..")
|
|
36
|
+
throw new TypeError("invalid resource ID");
|
|
37
|
+
return value;
|
|
38
|
+
}
|
|
39
|
+
export function portablePath(value) {
|
|
40
|
+
if (typeof value !== "string" || !value || value.length > 4096 || value.normalize("NFC") !== value
|
|
41
|
+
|| /[\\\x00-\x1f\x7f:]/.test(value) || value.split("/").some(part => !part || part === "." || part === ".." || /[. ]$/.test(part)
|
|
42
|
+
|| /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(part)))
|
|
43
|
+
throw new TypeError("non-portable resource path");
|
|
44
|
+
return value;
|
|
45
|
+
}
|
|
46
|
+
export function parseResource(value) {
|
|
47
|
+
const raw = object(value, ["kind", "digest", "size", "format", "manifestDigest", "platform", "indexDigest"]);
|
|
48
|
+
if (raw.kind === "blob") {
|
|
49
|
+
object(raw, ["kind", "digest", "size"]);
|
|
50
|
+
return { kind: "blob", digest: sha(raw.digest), size: natural(raw.size) };
|
|
51
|
+
}
|
|
52
|
+
if (raw.kind === "tree") {
|
|
53
|
+
object(raw, ["kind", "format", "manifestDigest"]);
|
|
54
|
+
if (raw.format !== "hitch-tree@1")
|
|
55
|
+
throw new TypeError("unsupported resource tree format");
|
|
56
|
+
return { kind: "tree", format: raw.format, manifestDigest: sha(raw.manifestDigest) };
|
|
57
|
+
}
|
|
58
|
+
if (raw.kind === "oci-image") {
|
|
59
|
+
object(raw, ["kind", "manifestDigest", "platform", "indexDigest"]);
|
|
60
|
+
if (typeof raw.platform !== "string" || !/^linux\/(amd64|arm64)(\/v[0-9]+)?$/.test(raw.platform))
|
|
61
|
+
throw new TypeError("unsupported OCI platform");
|
|
62
|
+
return { kind: "oci-image", manifestDigest: sha(raw.manifestDigest), platform: raw.platform,
|
|
63
|
+
...(raw.indexDigest === undefined ? {} : { indexDigest: sha(raw.indexDigest) }) };
|
|
64
|
+
}
|
|
65
|
+
throw new TypeError("unsupported resource kind");
|
|
66
|
+
}
|
|
67
|
+
export function parseResourceLock(value) {
|
|
68
|
+
const raw = object(value, ["protocol", "resources", "bindings", "requiredCapabilities"]);
|
|
69
|
+
if (raw.protocol !== "hitch-resource-lock@1")
|
|
70
|
+
throw new TypeError("unsupported resource lock protocol");
|
|
71
|
+
if (!raw.resources || typeof raw.resources !== "object" || Array.isArray(raw.resources))
|
|
72
|
+
throw new TypeError("resources must be a map");
|
|
73
|
+
const resources = Object.fromEntries(Object.entries(raw.resources).sort(([a], [b]) => compare(a, b)).map(([id, resource]) => [resourceId(id), parseResource(resource)]));
|
|
74
|
+
if (!Array.isArray(raw.requiredCapabilities) || raw.requiredCapabilities.some(c => typeof c !== "string" || !/^[a-z][a-z0-9-]*@[1-9][0-9]*$/.test(c))
|
|
75
|
+
|| new Set(raw.requiredCapabilities).size !== raw.requiredCapabilities.length)
|
|
76
|
+
throw new TypeError("invalid required resource capabilities");
|
|
77
|
+
if (!Array.isArray(raw.bindings))
|
|
78
|
+
throw new TypeError("resource bindings must be an array");
|
|
79
|
+
const bindings = raw.bindings.map(value => {
|
|
80
|
+
const binding = object(value, ["resource", "consumer", "use", "target", "executable", "access", "slot"]);
|
|
81
|
+
const resource = resourceId(binding.resource), dependency = resources[resource];
|
|
82
|
+
if (!dependency)
|
|
83
|
+
throw new TypeError("binding refers to missing resource");
|
|
84
|
+
const role = object(binding.consumer, ["role", "serviceId"]);
|
|
85
|
+
let consumer;
|
|
86
|
+
if (role.role === "service")
|
|
87
|
+
consumer = { role: "service", serviceId: portablePath(resourceId(role.serviceId)) };
|
|
88
|
+
else if ((role.role === "candidate" || role.role === "verifier") && role.serviceId === undefined)
|
|
89
|
+
consumer = { role: role.role };
|
|
90
|
+
else
|
|
91
|
+
throw new TypeError("invalid resource consumer");
|
|
92
|
+
if (consumer.role === "service" && consumer.serviceId.toLowerCase() === "main")
|
|
93
|
+
throw new TypeError("main is reserved for the candidate role");
|
|
94
|
+
if (binding.use === "environment-image") {
|
|
95
|
+
object(binding, ["resource", "consumer", "use", "slot"]);
|
|
96
|
+
if (dependency.kind !== "oci-image" || binding.slot !== "runtime" && binding.slot !== "build-base")
|
|
97
|
+
throw new TypeError("invalid environment image binding");
|
|
98
|
+
return { resource, consumer, use: binding.use, slot: binding.slot };
|
|
99
|
+
}
|
|
100
|
+
object(binding, ["resource", "consumer", "use", "target", "executable", "access"]);
|
|
101
|
+
const target = portablePath(binding.target), access = binding.access;
|
|
102
|
+
if (access !== "read-only" && access !== "private-copy")
|
|
103
|
+
throw new TypeError("invalid resource access");
|
|
104
|
+
if (binding.use === "input-file" && dependency.kind === "blob" && typeof binding.executable === "boolean")
|
|
105
|
+
return { resource, consumer, use: binding.use, target, access, executable: binding.executable };
|
|
106
|
+
if (binding.use === "input-tree" && dependency.kind === "tree" && binding.executable === undefined)
|
|
107
|
+
return { resource, consumer, use: binding.use, target, access };
|
|
108
|
+
throw new TypeError("resource kind and binding use disagree");
|
|
109
|
+
});
|
|
110
|
+
for (const [index, binding] of bindings.entries())
|
|
111
|
+
for (const other of bindings.slice(0, index)) {
|
|
112
|
+
if (canonical(binding.consumer).toLowerCase() !== canonical(other.consumer).toLowerCase())
|
|
113
|
+
continue;
|
|
114
|
+
if (binding.use === "environment-image" && other.use === "environment-image" && binding.slot === other.slot)
|
|
115
|
+
throw new TypeError("duplicate environment slot");
|
|
116
|
+
if (binding.use !== "environment-image" && other.use !== "environment-image") {
|
|
117
|
+
const a = binding.target.toLocaleLowerCase("en-US"), b = other.target.toLocaleLowerCase("en-US");
|
|
118
|
+
if (a === b || a.startsWith(`${b}/`) || b.startsWith(`${a}/`))
|
|
119
|
+
throw new TypeError("conflicting resource paths");
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
return { protocol: raw.protocol, resources, bindings, requiredCapabilities: [...raw.requiredCapabilities] };
|
|
123
|
+
}
|
|
124
|
+
export function parseTree(value) {
|
|
125
|
+
const raw = object(value, ["protocol", "entries"]);
|
|
126
|
+
if (raw.protocol !== "hitch-tree@1" || !Array.isArray(raw.entries))
|
|
127
|
+
throw new TypeError("unsupported tree manifest");
|
|
128
|
+
const entries = raw.entries.map(value => {
|
|
129
|
+
const entry = object(value, ["path", "kind", "digest", "size", "executable"]), name = portablePath(entry.path);
|
|
130
|
+
if (entry.kind === "directory") {
|
|
131
|
+
object(entry, ["path", "kind"]);
|
|
132
|
+
return { path: name, kind: "directory" };
|
|
133
|
+
}
|
|
134
|
+
if (entry.kind !== "file" || typeof entry.executable !== "boolean")
|
|
135
|
+
throw new TypeError("invalid tree entry");
|
|
136
|
+
return { path: name, kind: "file", digest: sha(entry.digest), size: natural(entry.size), executable: entry.executable };
|
|
137
|
+
});
|
|
138
|
+
const paths = new Map();
|
|
139
|
+
for (const [i, entry] of entries.entries()) {
|
|
140
|
+
if (i && compare(entries[i - 1].path, entry.path) >= 0)
|
|
141
|
+
throw new TypeError("tree paths must be unique and byte-sorted");
|
|
142
|
+
const key = entry.path.toLocaleLowerCase("en-US");
|
|
143
|
+
if (paths.has(key))
|
|
144
|
+
throw new TypeError("tree paths collide on a case-insensitive filesystem");
|
|
145
|
+
paths.set(key, entry);
|
|
146
|
+
const parts = entry.path.split("/");
|
|
147
|
+
parts.pop();
|
|
148
|
+
if (parts.length && paths.get(parts.join("/").toLocaleLowerCase("en-US"))?.kind !== "directory")
|
|
149
|
+
throw new TypeError("tree parent directory is missing");
|
|
150
|
+
}
|
|
151
|
+
return { protocol: raw.protocol, entries };
|
|
152
|
+
}
|
|
153
|
+
/** JSON.parse accepts duplicate keys. Lock/manifest text must reject them before
|
|
154
|
+
* parsing so a repeated resource ID cannot silently replace its first value. */
|
|
155
|
+
export function parseStrictJson(text) {
|
|
156
|
+
let at = 0;
|
|
157
|
+
const white = () => { while (/\s/u.test(text[at] ?? "") && at < text.length)
|
|
158
|
+
at++; };
|
|
159
|
+
const string = () => {
|
|
160
|
+
white();
|
|
161
|
+
const start = at;
|
|
162
|
+
if (text[at++] !== '"')
|
|
163
|
+
throw new TypeError("invalid JSON key");
|
|
164
|
+
while (at < text.length) {
|
|
165
|
+
const c = text[at++];
|
|
166
|
+
if (c === "\\")
|
|
167
|
+
at++;
|
|
168
|
+
else if (c === '"')
|
|
169
|
+
return JSON.parse(text.slice(start, at));
|
|
170
|
+
}
|
|
171
|
+
throw new TypeError("unterminated JSON string");
|
|
172
|
+
};
|
|
173
|
+
const value = (depth) => {
|
|
174
|
+
if (depth > 128)
|
|
175
|
+
throw new TypeError("resource JSON nesting limit exceeded");
|
|
176
|
+
white();
|
|
177
|
+
const c = text[at];
|
|
178
|
+
if (c === '"') {
|
|
179
|
+
string();
|
|
180
|
+
return;
|
|
181
|
+
}
|
|
182
|
+
if (c === "{" || c === "[") {
|
|
183
|
+
at++;
|
|
184
|
+
white();
|
|
185
|
+
const close = c === "{" ? "}" : "]", keys = new Set();
|
|
186
|
+
if (text[at] === close) {
|
|
187
|
+
at++;
|
|
188
|
+
return;
|
|
189
|
+
}
|
|
190
|
+
for (;;) {
|
|
191
|
+
if (c === "{") {
|
|
192
|
+
const key = string();
|
|
193
|
+
if (keys.has(key))
|
|
194
|
+
throw new TypeError("duplicate JSON key");
|
|
195
|
+
keys.add(key);
|
|
196
|
+
white();
|
|
197
|
+
if (text[at++] !== ":")
|
|
198
|
+
throw new TypeError("invalid JSON");
|
|
199
|
+
}
|
|
200
|
+
value(depth + 1);
|
|
201
|
+
white();
|
|
202
|
+
const end = text[at++];
|
|
203
|
+
if (end === close)
|
|
204
|
+
break;
|
|
205
|
+
if (end !== ",")
|
|
206
|
+
throw new TypeError("invalid JSON");
|
|
207
|
+
}
|
|
208
|
+
return;
|
|
209
|
+
}
|
|
210
|
+
const start = at;
|
|
211
|
+
while (at < text.length && !/[\s,}\]]/.test(text[at]))
|
|
212
|
+
at++;
|
|
213
|
+
if (at === start)
|
|
214
|
+
throw new TypeError("invalid JSON");
|
|
215
|
+
};
|
|
216
|
+
value(0);
|
|
217
|
+
white();
|
|
218
|
+
if (at !== text.length)
|
|
219
|
+
throw new TypeError("trailing JSON content");
|
|
220
|
+
return JSON.parse(text);
|
|
221
|
+
}
|
|
222
|
+
//# sourceMappingURL=protocol.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/resources/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,aAAa,CAAU,CAAC;AAE1K,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5L,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAClI,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,KAA0B,IAAY,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACjI,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAc,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACzH,MAAM,UAAU,OAAO,CAAC,CAAS,EAAE,CAAS,IAAY,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,IAAuB;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACvH,OAAO,KAAe,CAAC;AACzB,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IACpI,OAAO,KAAe,CAAC;AACzB,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAClK,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK;WAC7F,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;WAC5H,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7G,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAClJ,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACzF,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,QAAQ,KAAK,uBAAuB;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACxG,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACxI,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;WAChJ,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,oBAAoB,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAC/I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAC7D,IAAI,QAAkB,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;aAC5G,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,QAAQ,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;;YAC5H,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACtD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAC/I,IAAI,OAAO,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACzD,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;YAC7J,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAa,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACrE,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,cAAc;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACxG,IAAI,OAAO,CAAC,GAAG,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAa,CAAC;QACtN,IAAI,OAAO,CAAC,GAAG,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAa,CAAC;QAC/K,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;QAAE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAChG,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;gBAAE,SAAS;YACpG,IAAI,OAAO,CAAC,GAAG,KAAK,mBAAmB,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;YAC/J,IAAI,OAAO,CAAC,GAAG,KAAK,mBAAmB,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;gBAC7E,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACjG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;YACnH,CAAC;QACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAa,EAAE,CAAC;AAC1H,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/G,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAe,CAAC;QAAC,CAAC;QAC3H,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC9G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAe,CAAC;IACvI,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAC1H,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;QAC/F,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC3J,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM;QAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,GAAW,EAAE;QAC1B,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3F,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,EAAE,EAAE,CAAC;iBAAM,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAW,CAAC;QAAC,CAAC;QAChJ,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAQ,EAAE;QACpC,IAAI,KAAK,GAAG,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC7E,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,EAAE,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC7E,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;gBAAC,EAAE,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzC,SAAS,CAAC;gBACR,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;oBAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG;wBAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;gBAAC,CAAC;gBAC3L,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAC,IAAI,GAAG,KAAK,KAAK;oBAAE,MAAM;gBAAC,IAAI,GAAG,KAAK,GAAG;oBAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;YACpI,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC;QAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC;YAAE,EAAE,EAAE,CAAC;QAAC,IAAI,EAAE,KAAK,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;IACxI,CAAC,CAAC;IACF,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC;IAAC,IAAI,EAAE,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC"}
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
import { copyFile, lstat, mkdir, readFile, readdir, statfs } from "node:fs/promises";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { canonical, identity, natural, object, parseStrictJson, sha } from "./protocol.js";
|
|
4
|
+
import { fileClosure } from "./gc.js";
|
|
5
|
+
import { parseResourceTask, preflightResourceTask, taskClosureLock } from "./tasks.js";
|
|
6
|
+
const MAX_PROOF_BYTES = 32 * 1024 ** 2;
|
|
7
|
+
/** Only newly derived descriptor bytes travel back with the result. Input data
|
|
8
|
+
* already exists at the controller and must not be re-embedded in its envelope. */
|
|
9
|
+
export async function exportResourceResultProof(store, plan, allDigests, directory) {
|
|
10
|
+
const source = new Set(await fileClosure(store, Object.values(taskClosureLock(plan.task).resources)));
|
|
11
|
+
const proof = [];
|
|
12
|
+
let total = 0;
|
|
13
|
+
for (const digest of allDigests.filter(d => !source.has(d)).sort()) {
|
|
14
|
+
const size = await store.objects.verify(digest);
|
|
15
|
+
total += size;
|
|
16
|
+
if (total > MAX_PROOF_BYTES)
|
|
17
|
+
throw new Error("resource result proof byte budget exceeded");
|
|
18
|
+
proof.push({ digest, size });
|
|
19
|
+
}
|
|
20
|
+
const output = path.join(directory, "resource-proof");
|
|
21
|
+
await mkdir(output);
|
|
22
|
+
const space = await statfs(output, { bigint: true });
|
|
23
|
+
if (space.bavail * space.bsize < BigInt(total) + BigInt(store.objects.budget.minFreeBytes))
|
|
24
|
+
throw new Error("resource result proof free-space reserve exceeded");
|
|
25
|
+
for (const item of proof)
|
|
26
|
+
await copyFile(store.objects.objectPath(item.digest), path.join(output, item.digest.slice(7)));
|
|
27
|
+
return proof;
|
|
28
|
+
}
|
|
29
|
+
/** Restore/pin the worker's materialization proof before publishing its result.
|
|
30
|
+
* The original task is selected by controller admission, never by the worker. */
|
|
31
|
+
export async function retainResourceResult(input) {
|
|
32
|
+
if (!/^run_[a-f0-9]{32}$/.test(input.runId))
|
|
33
|
+
throw new Error("invalid resource result run identity");
|
|
34
|
+
const file = path.join(input.directory, "resource.execution.json"), info = await lstat(file);
|
|
35
|
+
if (!info.isFile() || info.size > 16 * 1024 ** 2)
|
|
36
|
+
throw new Error("resource result evidence missing or oversized");
|
|
37
|
+
const value = object(parseStrictJson(await readFile(file, "utf8")), ["protocol", "plan", "materialized_task_digest", "materializedTree", "images", "observed", "materialization", "proofObjects"]);
|
|
38
|
+
const plan = object(value.plan, ["protocol", "resolver", "backend", "platform", "task", "digest"]);
|
|
39
|
+
const task = parseResourceTask(plan.task), owner = `run:${input.runId}`;
|
|
40
|
+
if (value.protocol !== "hitch-resource-execution@1" || canonical(task) !== canonical(input.task))
|
|
41
|
+
throw new Error("remote resource result task differs from admission");
|
|
42
|
+
const checked = await preflightResourceTask(input.store, input.task, { owner: `${owner}:admission`, generation: 1, platform: String(plan.platform) });
|
|
43
|
+
if (canonical(plan) !== canonical(checked.plan))
|
|
44
|
+
throw new Error("remote resource result plan differs from admission");
|
|
45
|
+
const tree = object(value.materializedTree, ["kind", "format", "manifestDigest"]);
|
|
46
|
+
if (tree.kind !== "tree" || tree.format !== "hitch-tree@1" || value.materialized_task_digest !== identity("hitch-materialized-task@1", tree))
|
|
47
|
+
throw new Error("remote materialization proof identity mismatch");
|
|
48
|
+
const materializedTree = { kind: "tree", format: "hitch-tree@1", manifestDigest: sha(tree.manifestDigest) };
|
|
49
|
+
if (!Array.isArray(value.images) || !Array.isArray(value.observed) || !Array.isArray(value.proofObjects))
|
|
50
|
+
throw new Error("incomplete resource result evidence");
|
|
51
|
+
const images = value.images.map(item => {
|
|
52
|
+
const image = object(item, ["resource", "imageId", "configDigest", "manifestDigest", "platform", "reference"]);
|
|
53
|
+
const expected = checked.closure.images.find(i => i.resource === image.resource);
|
|
54
|
+
if (!expected || image.configDigest !== expected.configDigest || image.manifestDigest !== expected.manifestDigest || image.platform !== expected.platform)
|
|
55
|
+
throw new Error("remote result OCI base differs from admission");
|
|
56
|
+
return image;
|
|
57
|
+
});
|
|
58
|
+
if (canonical(images.map(i => i.resource).sort()) !== canonical(checked.closure.images.map(i => i.resource).sort()))
|
|
59
|
+
throw new Error("incomplete resource result OCI closure");
|
|
60
|
+
const observed = value.observed.map(item => object(item, ["consumer", "configDigest", "platform", "baseConfigs"]));
|
|
61
|
+
if (input.requireObserved)
|
|
62
|
+
for (const binding of task.lock.bindings.filter(b => b.use === "environment-image")) {
|
|
63
|
+
const expected = checked.closure.images.find(i => i.resource === binding.resource);
|
|
64
|
+
if (!observed.some(o => canonical(o.consumer) === canonical(binding.consumer) && o.platform === checked.plan.platform
|
|
65
|
+
&& Array.isArray(o.baseConfigs) && o.baseConfigs.includes(expected.configDigest)
|
|
66
|
+
&& input.execution.observed.containers.some(c => c.image_config_digest === o.configDigest)))
|
|
67
|
+
throw new Error("remote result lacks observed resource role evidence");
|
|
68
|
+
}
|
|
69
|
+
const proof = value.proofObjects.map(item => { const v = object(item, ["digest", "size"]); return { digest: sha(v.digest), size: natural(v.size) }; });
|
|
70
|
+
if (proof.length > input.store.objects.budget.maxFiles || proof.reduce((n, p) => n + p.size, 0) > MAX_PROOF_BYTES
|
|
71
|
+
|| canonical(proof.map(p => p.digest)) !== canonical([...new Set(proof.map(p => p.digest))].sort()))
|
|
72
|
+
throw new Error("resource proof inventory or budget invalid");
|
|
73
|
+
const proofDirectory = path.join(input.directory, "resource-proof");
|
|
74
|
+
if (!(await lstat(proofDirectory)).isDirectory() || canonical((await readdir(proofDirectory)).sort()) !== canonical(proof.map(p => p.digest.slice(7))))
|
|
75
|
+
throw new Error("resource proof file inventory mismatch");
|
|
76
|
+
for (const item of proof)
|
|
77
|
+
await input.store.objects.verify(item.digest, item.size, path.join(proofDirectory, item.digest.slice(7)));
|
|
78
|
+
const leases = [];
|
|
79
|
+
for (const item of proof) {
|
|
80
|
+
const imported = await input.store.import(path.join(proofDirectory, item.digest.slice(7)), "blob", `${owner}:proof`);
|
|
81
|
+
leases.push(imported.leaseId);
|
|
82
|
+
if (imported.resource.kind !== "blob" || imported.resource.digest !== item.digest)
|
|
83
|
+
throw new Error("resource proof changed during import");
|
|
84
|
+
}
|
|
85
|
+
const source = taskClosureLock(task);
|
|
86
|
+
const root = await input.store.pin({ owner, generation: 1, purpose: "sealed-run", lock: { ...source, resources: { ...source.resources, "hitch-materialized-task": materializedTree } } });
|
|
87
|
+
const base = new Set(checked.closure.objectDigests), actualDelta = root.closure.objectDigests.filter(d => !base.has(d)).sort();
|
|
88
|
+
if (canonical(actualDelta) !== canonical(proof.map(p => p.digest)))
|
|
89
|
+
throw new Error("resource proof has missing or extraneous objects");
|
|
90
|
+
for (const lease of leases)
|
|
91
|
+
await input.store.finishLease(lease, "ended");
|
|
92
|
+
}
|
|
93
|
+
//# sourceMappingURL=result-retention.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"result-retention.js","sourceRoot":"","sources":["../../../src/resources/result-retention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAwC,MAAM,YAAY,CAAC;AAE7H,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;AAGvC;mFACmF;AACnF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAoB,EAAE,IAAkB,EAAE,UAAgC,EAAE,SAAiB;IAC3I,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,KAAK,GAA0B,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,IAAI,IAAI,CAAC;QAC/D,IAAI,KAAK,GAAG,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACjK,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAA+I;IACxL,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7F,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnH,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;IACnM,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,QAAQ,KAAK,4BAA4B,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxK,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtJ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,IAAI,KAAK,CAAC,wBAAwB,KAAK,QAAQ,CAAC,2BAA2B,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAChN,MAAM,gBAAgB,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,MAAM,EAAE,cAAuB,EAAE,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;IAC9H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACjK,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC5N,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC/K,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACnH,IAAI,KAAK,CAAC,eAAe;QAAE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,mBAAmB,CAAC,EAAE,CAAC;YAC/G,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAE,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ;mBAChH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;mBAC7E,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxK,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvJ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,eAAe;WAC5G,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACrK,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAClN,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpJ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1L,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/H,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxI,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC5E,CAAC"}
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
import { lstat, readFile } from "node:fs/promises";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { parse as parseToml } from "smol-toml";
|
|
4
|
+
import { canonical, object, parseStrictJson } from "./protocol.js";
|
|
5
|
+
export const roleDirectory = (consumer) => consumer.role === "candidate" ? "environment/candidate" : consumer.role === "verifier" ? "tests" : `environment/services/${consumer.serviceId}`;
|
|
6
|
+
export async function validateRoleContexts(directory, bindings, platform, images) {
|
|
7
|
+
// Package-native phase supervision has its own evidence/replay contract.
|
|
8
|
+
// This backend cannot silently bypass it by treating its descriptor as a
|
|
9
|
+
// normal resource task. A future backend must version that integration.
|
|
10
|
+
if (await lstat(path.join(directory, ".hitch-benchmark.json")).catch(e => { if (e.code !== "ENOENT")
|
|
11
|
+
throw e; return undefined; }))
|
|
12
|
+
throw new Error("resource role-context backend does not support Package-native phase descriptors");
|
|
13
|
+
const task = parseToml(await readFile(path.join(directory, "task.toml"), "utf8"));
|
|
14
|
+
if (task.verifier?.environment_mode !== "separate")
|
|
15
|
+
throw new Error("resource tasks require a separate verifier environment");
|
|
16
|
+
const compose = object(parseStrictJson(await readFile(path.join(directory, "environment/docker-compose.yaml"), "utf8")), ["services", "networks", "volumes"]);
|
|
17
|
+
const services = compose.services;
|
|
18
|
+
if (!services || typeof services !== "object" || !services.main)
|
|
19
|
+
throw new Error("resource tasks require an explicit candidate Compose service");
|
|
20
|
+
for (const [id, service] of Object.entries(services)) {
|
|
21
|
+
if (!service || typeof service !== "object" || service.platform !== platform)
|
|
22
|
+
throw new Error("resource service platform mismatch");
|
|
23
|
+
object(service, ["platform", "build", "command", "entrypoint", "environment", "networks", "depends_on", "healthcheck", "working_dir", "init", "user", "ports", "expose"]);
|
|
24
|
+
const consumer = id === "main" ? { role: "candidate" } : { role: "service", serviceId: id };
|
|
25
|
+
const expected = id === "main" ? "candidate" : `services/${id}`;
|
|
26
|
+
const build = object(service.build, ["context", "dockerfile"]);
|
|
27
|
+
if (build.context !== expected && build.context !== `./${expected}` || build.dockerfile !== "Dockerfile")
|
|
28
|
+
throw new Error("resource task build context crosses role boundary");
|
|
29
|
+
if (service.volumes !== undefined)
|
|
30
|
+
throw new Error("resource task host/volume mounts require an explicitly supported backend capability");
|
|
31
|
+
await checkBases(consumer);
|
|
32
|
+
}
|
|
33
|
+
await checkBases({ role: "verifier" });
|
|
34
|
+
for (const binding of bindings)
|
|
35
|
+
if (binding.consumer.role === "service" && !services[binding.consumer.serviceId])
|
|
36
|
+
throw new Error("resource binding references an absent service");
|
|
37
|
+
async function checkBases(consumer) {
|
|
38
|
+
const text = await readFile(path.join(directory, roleDirectory(consumer), "Dockerfile"), "utf8");
|
|
39
|
+
const bases = [...text.matchAll(/^FROM\s+(\S+)(?:\s+AS\s+\S+)?\s*$/gim)].map(m => m[1]);
|
|
40
|
+
if (/^\s*(?:ADD\s|RUN\s+(?!--network=none\s)|COPY\s+--from|#\s*syntax=)/gim.test(text) || /--mount[=\s]/i.test(text))
|
|
41
|
+
throw new Error("resource Dockerfile has undeclared external build inputs");
|
|
42
|
+
const assigned = bindings.filter(b => canonical(b.consumer) === canonical(consumer) && b.use === "environment-image");
|
|
43
|
+
for (const binding of assigned) {
|
|
44
|
+
if (binding.use === "environment-image" && binding.slot !== "build-base")
|
|
45
|
+
throw new Error("role-context backend requires explicit build-base image bindings");
|
|
46
|
+
const image = images.find(i => i.resource === binding.resource);
|
|
47
|
+
if (!image || !bases.some(base => base.endsWith(`@${image.reference.split('@')[1]}`)))
|
|
48
|
+
throw new Error("resource image binding does not match role Dockerfile");
|
|
49
|
+
}
|
|
50
|
+
if (!bases.length || bases.some(base => !/@sha256:[a-f0-9]{64}$/.test(base) || !images.some(image => base.endsWith(`@${image.reference.split('@')[1]}`) && assigned.some(b => b.resource === image.resource))))
|
|
51
|
+
throw new Error("resource Dockerfile bases must use immutable digests");
|
|
52
|
+
}
|
|
53
|
+
}
|
|
54
|
+
//# sourceMappingURL=role-context.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"role-context.js","sourceRoot":"","sources":["../../../src/resources/role-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAA+B,MAAM,eAAe,CAAC;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,QAAQ,CAAC,SAAS,EAAE,CAAC;AAErM,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,QAAmB,EAAE,QAAgB,EAAE,MAAsD;IACzJ,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACvO,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAkD,CAAC;IACnI,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC9H,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9J,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAmD,CAAC;IAC7E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACjJ,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpI,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1K,MAAM,QAAQ,GAAa,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACtG,MAAM,QAAQ,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC/K,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QAC1I,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnL,KAAK,UAAU,UAAU,CAAC,QAAkB;QAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACzF,IAAI,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAClM,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;QACtH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,GAAG,KAAK,mBAAmB,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC9J,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAClK,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1R,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { lstat, readdir } from "node:fs/promises";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { validateLease, validateRoot } from "./store.js";
|
|
4
|
+
export async function resourceStorageStats(store) {
|
|
5
|
+
return store.locked(async () => {
|
|
6
|
+
const scopes = {};
|
|
7
|
+
for (const scope of ["objects", "oci-manifests", "descriptor-views", "view-quarantine", "quarantine", "workspaces", "staging", "workspace-records", "roots", "leases", "transactions"]) {
|
|
8
|
+
const result = { files: 0, logicalBytes: 0, allocatedBlockBytes: 0 };
|
|
9
|
+
const visit = async (file) => {
|
|
10
|
+
const info = await lstat(file).catch(e => { if (e.code !== "ENOENT")
|
|
11
|
+
throw e; return undefined; });
|
|
12
|
+
if (!info)
|
|
13
|
+
return;
|
|
14
|
+
if (info.isDirectory())
|
|
15
|
+
for (const name of await readdir(file))
|
|
16
|
+
await visit(path.join(file, name));
|
|
17
|
+
else if (info.isFile()) {
|
|
18
|
+
result.files++;
|
|
19
|
+
result.logicalBytes += info.size;
|
|
20
|
+
result.allocatedBlockBytes += info.blocks * 512;
|
|
21
|
+
}
|
|
22
|
+
else
|
|
23
|
+
throw new Error("resource store contains an unsafe entry; accounting stopped");
|
|
24
|
+
};
|
|
25
|
+
await visit(path.join(store.directory, scope));
|
|
26
|
+
scopes[scope] = result;
|
|
27
|
+
}
|
|
28
|
+
const roots = await store.records("roots"), leases = await store.records("leases");
|
|
29
|
+
roots.forEach(validateRoot);
|
|
30
|
+
leases.forEach(validateLease);
|
|
31
|
+
return { protocol: "hitch-resource-storage@1", scopes, roots: roots.map(r => ({ owner: r.owner, generation: r.generation, state: r.state, purpose: r.purpose })),
|
|
32
|
+
leases: leases.filter(l => l.state !== "released").map(l => ({ id: l.id, owner: l.owner, state: l.state, purpose: l.purpose })),
|
|
33
|
+
physicalAccounting: "allocated blocks may overlap under CoW; no exclusive-byte or saved-byte claim", externalScopes: ["source dataset/projections", "OCI image layers", "BuildKit cache", "sealed run evidence"] };
|
|
34
|
+
});
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=stats.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/resources/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAiB,aAAa,EAAE,YAAY,EAAyC,MAAM,YAAY,CAAC;AAE/G,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAoB;IAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QAC7B,MAAM,MAAM,GAAyF,EAAE,CAAC;QACxG,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;YACvL,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;gBAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI;oBAAE,OAAO;gBACtH,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;wBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;qBAC9F,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC;oBAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAC,CAAC;;oBACzH,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACtF,CAAC,CAAC;YACF,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAe,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAgB,QAAQ,CAAC,CAAC;QAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5K,OAAO,EAAE,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9J,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/H,kBAAkB,EAAE,+EAA+E,EAAE,cAAc,EAAE,CAAC,4BAA4B,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,CAAC;IACvN,CAAC,CAAC,CAAC;AACL,CAAC"}
|