agent-hitch 0.2.6 → 0.2.7

package/dist/src/evals/harbor-artifact-builder.js

@@ -0,0 +1,354 @@
+import { randomBytes } from "node:crypto";
+import { lstat, mkdir, mkdtemp, rename, rm } from "node:fs/promises";
+import path from "node:path";
+import { artifactMatches } from "../artifacts/index.js";
+import { HARBOR_NODE_VERSION_WITH_PREFIX, HARBOR_PNPM_VERSION, verifyLocalGitTransport } from "../backends/index.js";
+import { HitchError, atomicWriteJSON, digest, ensureDir, hitchRootId, readJSON, runCommand, statePaths, withFileLock, } from "../foundation/index.js";
+import { HARBOR_ARTIFACT_BUILDER_RECIPE_VERSION, ensureHarborArtifactBuilderImage } from "./harbor-artifact-builder-image.js";
+export const prepareHarborArtifact = async (input) => {
+    if (input.localTransport) {
+        await verifyLocalGitTransport(input.localTransport, {
+            expected: {
+                harnessId: input.resolvedRevision.harness_id,
+                resolutionIdentity: input.resolvedRevision.identity,
+                commit: input.localTransport.manifest.commit,
+            },
+            ...(input.signal ? { signal: input.signal } : {}),
+            env: input.env,
+        });
+    }
+    const docker = input.env.HITCH_DOCKER_PATH?.trim() || "docker";
+    const cache = await harborArtifactCache(input.root);
+    const builder = await ensureHarborArtifactBuilderImage({
+        root: input.root,
+        cache,
+        docker,
+        dockerPlatform: input.runtimeContract.dockerPlatform,
+        env: input.env,
+        ...(input.signal ? { signal: input.signal } : {}),
+    });
+    if (builder.artifactPlatform !== input.runtimeContract.artifactPlatform
+        || input.runtimeContract.nodeVersion !== HARBOR_NODE_VERSION_WITH_PREFIX) {
+        throw new HitchError("Harbor artifact builder does not match the planner-pinned trial runtime", {
+            code: "harbor_artifact_builder_contract_mismatch",
+            exitCode: 12,
+        });
+    }
+    const key = digest({
+        kind: "harbor-artifact-builder",
+        recipe_version: HARBOR_ARTIFACT_BUILDER_RECIPE_VERSION,
+        controller_runtime_id: input.runtimeId,
+        revision_identity: input.resolvedRevision.identity,
+        builder_image_id: builder.id,
+        platform: input.runtimeContract.artifactPlatform,
+        node: input.runtimeContract.nodeVersion,
+        pnpm: HARBOR_PNPM_VERSION,
+    });
+    const expected = {
+        harnessId: input.resolvedRevision.harness_id,
+        revisionIdentity: input.resolvedRevision.identity,
+        platform: input.runtimeContract.artifactPlatform,
+    };
+    const artifact = await withFileLock(cache.locks, key, async () => {
+        const cached = await readCachedArtifact(cache, key, expected);
+        if (cached)
+            return { artifact: cached, cacheHit: true };
+        const prepared = await buildArtifact({ ...input, cache, docker, builder });
+        try {
+            const promoted = await promoteArtifact(cache, prepared.directory, prepared.manifest, expected);
+            await atomicWriteJSON(path.join(cache.refs, `${key.slice("sha256:".length)}.json`), {
+                schema_version: "1",
+                preparation_key: key,
+                artifact_id: promoted.artifact_id,
+                controller_runtime_id: input.runtimeId,
+                builder_image_id: builder.id,
+                node_version: HARBOR_NODE_VERSION_WITH_PREFIX,
+                pnpm_version: HARBOR_PNPM_VERSION,
+            });
+            return { artifact: promoted, cacheHit: false };
+        }
+        finally {
+            await rm(prepared.stagingRoot, { recursive: true, force: true }).catch(() => { });
+        }
+    }, {
+        timeoutCode: "harbor_artifact_builder_locked",
+        timeoutExitCode: 12,
+        ...(input.signal ? { signal: input.signal } : {}),
+    });
+    return {
+        ...artifact,
+        source: "dedicated-builder",
+        builderImage: builder.reference,
+        builderImageId: builder.id,
+    };
+};
+export function harborArtifactDirectory(root, artifactId) {
+    if (!/^sha256:[0-9a-f]{64}$/.test(artifactId)) {
+        throw new HitchError(`invalid Harbor artifact ID: ${artifactId}`, { code: "artifact_invalid", exitCode: 5 });
+    }
+    return path.join(statePaths(root).store, "harbor-artifacts", "artifacts", artifactId.slice("sha256:".length));
+}
+export async function loadHarborArtifact(root, summary) {
+    const directory = harborArtifactDirectory(root, summary.artifact_id);
+    const manifest = await verifyArtifact(directory, {
+        harnessId: summary.harness_id,
+        revisionIdentity: summary.revision_identity,
+        platform: summary.platform,
+    });
+    if (manifest.artifact_integrity !== summary.artifact_integrity
+        || manifest.entrypoint_integrity !== summary.entrypoint_integrity) {
+        throw new HitchError("Harbor artifact no longer matches the eval-pinned integrity", {
+            code: "artifact_integrity_mismatch",
+            exitCode: 5,
+        });
+    }
+    return artifactUse(directory, manifest);
+}
+async function harborArtifactCache(root) {
+    const rootDirectory = await ensureDir(path.join(statePaths(root).store, "harbor-artifacts"));
+    const [artifacts, locks, temporary, invalid, refs] = await Promise.all([
+        ensureDir(path.join(rootDirectory, "artifacts")),
+        ensureDir(path.join(rootDirectory, "locks")),
+        ensureDir(path.join(rootDirectory, "tmp")),
+        ensureDir(path.join(rootDirectory, "invalid")),
+        ensureDir(path.join(rootDirectory, "refs")),
+    ]);
+    return { root: rootDirectory, artifacts, locks, temporary, invalid, refs };
+}
+async function buildArtifact(input) {
+    const entrypoint = await controllerEntrypoint(input.runtimeDirectory, input.runtimeId);
+    const state = await mkdtemp(path.join(input.cache.temporary, "artifact-build-"));
+    const containerName = `hitch-artifact-builder-${process.pid}-${randomBytes(6).toString("hex")}`;
+    let completed = false;
+    try {
+        const args = [
+            "run", "--name", containerName,
+            "--platform", input.builder.dockerPlatform,
+            "--label", "io.hitch.harbor-artifact-builder=true",
+            "--label", `io.hitch.root-id=${hitchRootId(input.root)}`,
+            // Clone/install/build on the container's native Linux filesystem. A
+            // bind-mounted macOS/Windows state root changes filesystem semantics and
+            // can make pnpm copyfile fail before an artifact exists.
+            "--env", "HITCH_ROOT=/tmp/hitch-state",
+            "--env", "HOME=/tmp/hitch-builder-home",
+            "--mount", bindMount(path.join(input.runtimeDirectory, "payload"), "/opt/hitch", true),
+        ];
+        const uid = typeof process.getuid === "function" ? process.getuid() : null;
+        const gid = typeof process.getgid === "function" ? process.getgid() : null;
+        if (uid !== null && gid !== null)
+            args.push("--user", `${uid}:${gid}`);
+        if (input.localTransport) {
+            args.push("--env", "HITCH_HARBOR_INTERNAL=1");
+            args.push("--mount", bindMount(input.localTransport.directory, "/hitch-local-source-input", true));
+        }
+        args.push(input.builder.reference, "sh", "-ceu", builderScript(Boolean(input.localTransport)), "sh", `/opt/hitch/${entrypoint}`, lockedHarnessRef(input.resolvedRevision));
+        if (input.localTransport) {
+            args.push(input.localTransport.manifest.commit, input.localTransport.manifest.tree, input.localTransport.manifest.payload_sha256, String(input.localTransport.manifest.payload_bytes));
+        }
+        const result = await runCommand(input.docker, args, {
+            env: input.env,
+            ...(input.signal ? { signal: input.signal } : {}),
+            timeoutMs: 30 * 60 * 1_000,
+            failureCode: "harbor_artifact_build_failed",
+            failureExitCode: 12,
+        });
+        const payload = parsePrepareOutput(result.stdout);
+        const artifactId = payload.artifact_id;
+        const artifacts = path.join(state, "store", "artifacts");
+        await mkdir(artifacts, { recursive: true });
+        await runCommand(input.docker, [
+            "cp",
+            `${containerName}:/tmp/hitch-state/store/artifacts/${artifactId.slice("sha256:".length)}`,
+            artifacts,
+        ], {
+            env: input.env,
+            ...(input.signal ? { signal: input.signal } : {}),
+            timeoutMs: 10 * 60 * 1_000,
+            failureCode: "harbor_artifact_export_failed",
+            failureExitCode: 12,
+        });
+        const directory = path.join(state, "store", "artifacts", artifactId.slice("sha256:".length));
+        const manifest = await verifyArtifact(directory, {
+            harnessId: input.resolvedRevision.harness_id,
+            revisionIdentity: input.resolvedRevision.identity,
+            platform: input.builder.artifactPlatform,
+        });
+        if (manifest.artifact_id !== artifactId) {
+            throw new HitchError("dedicated builder returned a different artifact directory", {
+                code: "harbor_artifact_build_failed",
+                exitCode: 12,
+            });
+        }
+        completed = true;
+        return { directory, manifest, stagingRoot: state };
+    }
+    finally {
+        await runCommand(input.docker, ["rm", "--force", containerName], { env: input.env, timeoutMs: 30_000 }).catch(() => { });
+        if (!completed)
+            await rm(state, { recursive: true, force: true }).catch(() => { });
+    }
+}
+function builderScript(localSource) {
+    const common = [
+        "mkdir -p \"$HOME\"",
+        `test \"$(node -p process.version)\" = \"${HARBOR_NODE_VERSION_WITH_PREFIX}\"`,
+        `test \"$(pnpm --version)\" = \"${HARBOR_PNPM_VERSION}\"`,
+    ];
+    if (!localSource) {
+        return [...common, "exec node \"$1\" prepare \"$2\" --json"].join("\n");
+    }
+    return [
+        ...common,
+        "mkdir -p /tmp/hitch-state/local-source",
+        "node -e 'const fs=require(\"node:fs\");const crypto=require(\"node:crypto\");const [file,digest,size]=process.argv.slice(1);if(fs.statSync(file).size!==Number(size))throw new Error(\"local source payload size mismatch\");const hash=crypto.createHash(\"sha256\");const stream=fs.createReadStream(file);stream.on(\"data\",chunk=>hash.update(chunk));stream.on(\"end\",()=>{if(\"sha256:\"+hash.digest(\"hex\")!==digest)throw new Error(\"local source payload digest mismatch\")})' /hitch-local-source-input/payload.pack \"$5\" \"$6\"",
+        "git init --bare /tmp/hitch-state/local-source/repo.git >/dev/null",
+        "git -C /tmp/hitch-state/local-source/repo.git index-pack --stdin < /hitch-local-source-input/payload.pack >/dev/null",
+        "test \"$(git -C /tmp/hitch-state/local-source/repo.git rev-parse \"$3^{commit}\")\" = \"$3\"",
+        "test \"$(git -C /tmp/hitch-state/local-source/repo.git rev-parse \"$3^{tree}\")\" = \"$4\"",
+        "printf '%s\\n' \"$3\" > /tmp/hitch-state/local-source/repo.git/shallow",
+        "git -C /tmp/hitch-state/local-source/repo.git update-ref refs/heads/hitch-local \"$3\"",
+        "exec node \"$1\" prepare \"$2\" --internal-locked-resolution /hitch-local-source-input/resolution.json --internal-local-git-manifest /hitch-local-source-input/manifest.json --internal-local-git-source /tmp/hitch-state/local-source/repo.git --json",
+    ].join("\n");
+}
+async function controllerEntrypoint(runtimeDirectory, runtimeId) {
+    const manifest = await readJSON(path.join(runtimeDirectory, "manifest.json"));
+    const entrypoints = manifest.entrypoints && typeof manifest.entrypoints === "object" && !Array.isArray(manifest.entrypoints)
+        ? manifest.entrypoints
+        : {};
+    const cli = entrypoints.cli && typeof entrypoints.cli === "object" && !Array.isArray(entrypoints.cli)
+        ? entrypoints.cli
+        : {};
+    const entrypoint = cli.path;
+    if (manifest.runtime_id !== runtimeId || typeof entrypoint !== "string" || !entrypoint
+        || path.posix.isAbsolute(entrypoint) || entrypoint.split("/").some((part) => !part || part === "." || part === "..")) {
+        throw new HitchError("controller runtime cannot be mounted in the Harbor artifact builder", {
+            code: "controller_runtime_integrity_mismatch",
+            exitCode: 12,
+        });
+    }
+    const file = path.join(runtimeDirectory, "payload", ...entrypoint.split("/"));
+    const info = await lstat(file).catch(() => null);
+    if (!info?.isFile() || info.isSymbolicLink()) {
+        throw new HitchError("controller runtime builder entrypoint is unavailable", {
+            code: "controller_runtime_integrity_mismatch",
+            exitCode: 12,
+        });
+    }
+    return entrypoint;
+}
+function bindMount(source, destination, readonly) {
+    const absolute = path.resolve(source);
+    if (absolute.includes(",") || /[\r\n\0]/.test(absolute)) {
+        throw new HitchError("Harbor artifact builder mount path is unsupported", { code: "invalid_input", exitCode: 2 });
+    }
+    return `type=bind,source=${absolute},target=${destination}${readonly ? ",readonly" : ""}`;
+}
+function parsePrepareOutput(stdout) {
+    let value;
+    try {
+        value = JSON.parse(stdout.trim());
+    }
+    catch (error) {
+        throw new HitchError("dedicated builder returned invalid prepare output", {
+            code: "harbor_artifact_build_failed",
+            exitCode: 12,
+            cause: error,
+        });
+    }
+    const artifact = value && typeof value === "object" && !Array.isArray(value)
+        ? value.artifact
+        : null;
+    if (!artifact || typeof artifact !== "object" || Array.isArray(artifact)
+        || !/^sha256:[0-9a-f]{64}$/.test(String(artifact.artifact_id || ""))) {
+        throw new HitchError("dedicated builder returned invalid artifact metadata", {
+            code: "harbor_artifact_build_failed",
+            exitCode: 12,
+        });
+    }
+    return artifact;
+}
+async function readCachedArtifact(cache, key, expected) {
+    const ref = await readJSON(path.join(cache.refs, `${key.slice("sha256:".length)}.json`), null).catch(() => null);
+    if (!ref || typeof ref.artifact_id !== "string" || !/^sha256:[0-9a-f]{64}$/.test(ref.artifact_id))
+        return null;
+    const directory = path.join(cache.artifacts, ref.artifact_id.slice("sha256:".length));
+    try {
+        return artifactUse(directory, await verifyArtifact(directory, expected));
+    }
+    catch {
+        await quarantine(cache, directory);
+        return null;
+    }
+}
+async function promoteArtifact(cache, source, manifest, expected) {
+    const destination = path.join(cache.artifacts, manifest.artifact_id.slice("sha256:".length));
+    const existing = await lstat(destination).catch(() => null);
+    if (existing) {
+        try {
+            return artifactUse(destination, await verifyArtifact(destination, expected));
+        }
+        catch {
+            await quarantine(cache, destination);
+        }
+    }
+    await rename(source, destination);
+    return artifactUse(destination, await verifyArtifact(destination, expected));
+}
+async function verifyArtifact(directory, expected) {
+    const info = await lstat(directory).catch(() => null);
+    if (!info?.isDirectory() || info.isSymbolicLink())
+        throw artifactError("artifact directory is invalid");
+    const manifest = await readJSON(path.join(directory, "artifact.json"));
+    if (manifest.schema_version !== "1" || !/^sha256:[0-9a-f]{64}$/.test(manifest.artifact_id)
+        || !/^sha256:[0-9a-f]{64}$/.test(String(manifest.artifact_integrity || ""))
+        || !/^sha256:[0-9a-f]{64}$/.test(String(manifest.entrypoint_integrity || ""))
+        || manifest.harness_id !== expected.harnessId
+        || manifest.revision_identity !== expected.revisionIdentity
+        || manifest.resolved_revision?.identity !== expected.revisionIdentity
+        || manifest.platform !== expected.platform
+        || manifest.toolchain?.node !== HARBOR_NODE_VERSION_WITH_PREFIX
+        || (manifest.harness_id === "deepseek" && manifest.source_type === "git" && manifest.toolchain?.pnpm !== HARBOR_PNPM_VERSION)
+        || manifest.source_type === "installed"
+        || typeof manifest.adapter_version !== "string" || !manifest.adapter_version
+        || typeof manifest.recipe_version !== "string" || !manifest.recipe_version
+        || !await artifactMatches(directory, manifest)) {
+        throw artifactError("artifact identity or integrity is invalid");
+    }
+    if (path.basename(directory) !== manifest.artifact_id.slice("sha256:".length)
+        && path.basename(path.dirname(directory)) === "artifacts")
+        throw artifactError("artifact directory name is invalid");
+    return manifest;
+}
+function artifactUse(directory, manifest) {
+    return {
+        directory,
+        artifact_id: manifest.artifact_id,
+        artifact_integrity: String(manifest.artifact_integrity),
+        entrypoint_integrity: String(manifest.entrypoint_integrity),
+        harness_id: manifest.harness_id,
+        revision_identity: manifest.revision_identity,
+        adapter_version: manifest.adapter_version,
+        recipe_version: manifest.recipe_version,
+        platform: manifest.platform,
+        node_version: String(manifest.toolchain.node),
+        source_type: manifest.source_type,
+        storage: "harbor-artifact-cache-v2",
+    };
+}
+async function quarantine(cache, directory) {
+    const info = await lstat(directory).catch(() => null);
+    if (!info)
+        return;
+    await rename(directory, path.join(cache.invalid, `${path.basename(directory)}-${randomBytes(6).toString("hex")}`)).catch(() => { });
+}
+function lockedHarnessRef(resolved) {
+    if (resolved.revision.type === "version" && resolved.revision.version)
+        return `${resolved.harness_id}@version:${resolved.revision.version}`;
+    if (resolved.revision.type === "commit" && resolved.revision.commit)
+        return `${resolved.harness_id}@commit:${resolved.revision.commit}`;
+    throw new HitchError("Harbor artifact builder requires an exact managed revision", { code: "invalid_resolution", exitCode: 2 });
+}
+function artifactError(message) {
+    return new HitchError(`Harbor prepared ${message}`, { code: "artifact_integrity_mismatch", exitCode: 5 });
+}
+//# sourceMappingURL=harbor-artifact-builder.js.map

package/dist/src/evals/harbor-artifact-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harbor-artifact-builder.js","sourceRoot":"","sources":["../../../src/evals/harbor-artifact-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAIrH,OAAO,EACL,UAAU,EACV,eAAe,EACf,MAAM,EACN,SAAS,EACT,WAAW,EACX,QAAQ,EACR,UAAU,EACV,UAAU,EACV,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sCAAsC,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AA6B9H,MAAM,CAAC,MAAM,qBAAqB,GAA8B,KAAK,EAAE,KAAK,EAAE,EAAE;IAC9E,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,uBAAuB,CAAC,KAAK,CAAC,cAAc,EAAE;YAClD,QAAQ,EAAE;gBACR,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;gBAC5C,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,QAAQ;gBACnD,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM;aAC7C;YACD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,gCAAgC,CAAC;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK;QACL,MAAM;QACN,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc;QACpD,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC,eAAe,CAAC,gBAAgB;WAClE,KAAK,CAAC,eAAe,CAAC,WAAW,KAAK,+BAA+B,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,yEAAyE,EAAE;YAC9F,IAAI,EAAE,2CAA2C;YACjD,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC;QACjB,IAAI,EAAE,yBAAyB;QAC/B,cAAc,EAAE,sCAAsC;QACtD,qBAAqB,EAAE,KAAK,CAAC,SAAS;QACtC,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,QAAQ;QAClD,gBAAgB,EAAE,OAAO,CAAC,EAAE;QAC5B,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,gBAAgB;QAChD,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,WAAW;QACvC,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAwB;QACpC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;QAC5C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,QAAQ;QACjD,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,gBAAgB;KACjD,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/F,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;gBAClF,cAAc,EAAE,GAAG;gBACnB,eAAe,EAAE,GAAG;gBACpB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,qBAAqB,EAAE,KAAK,CAAC,SAAS;gBACtC,gBAAgB,EAAE,OAAO,CAAC,EAAE;gBAC5B,YAAY,EAAE,+BAA+B;gBAC7C,YAAY,EAAE,mBAAmB;aAClC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC,EAAE;QACD,WAAW,EAAE,gCAAgC;QAC7C,eAAe,EAAE,EAAE;QACnB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,OAAO,CAAC,SAAS;QAC/B,cAAc,EAAE,OAAO,CAAC,EAAE;KAC3B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,UAAkB;IACtE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAAC,+BAA+B,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,OAOC;IAED,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE;QAC/C,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,gBAAgB,EAAE,OAAO,CAAC,iBAAiB;QAC3C,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;WACzD,QAAQ,CAAC,oBAAoB,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAAC,6DAA6D,EAAE;YAClF,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAQ7C,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAChD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC1C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAW5B;IACC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,0BAA0B,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAChG,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,QAAQ,EAAE,aAAa;YAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;YAC1C,SAAS,EAAE,uCAAuC;YAClD,SAAS,EAAE,oBAAoB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YACxD,oEAAoE;YACpE,yEAAyE;YACzE,yDAAyD;YACzD,OAAO,EAAE,6BAA6B;YACtC,OAAO,EAAE,8BAA8B;YACvC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC;SACvF,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,UAAU,EAAE,EAAE,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3K,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CACP,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,EACpC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAClC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,EAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,CACpD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;YAClD,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;YAC1B,WAAW,EAAE,8BAA8B;YAC3C,eAAe,EAAE,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;YAC7B,IAAI;YACJ,GAAG,aAAa,qCAAqC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;YACzF,SAAS;SACV,EAAE;YACD,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;YAC1B,WAAW,EAAE,+BAA+B;YAC5C,eAAe,EAAE,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE;YAC/C,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;YAC5C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,QAAQ;YACjD,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB;SACzC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,UAAU,CAAC,2DAA2D,EAAE;gBAChF,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxH,IAAI,CAAC,SAAS;YAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,WAAoB;IACzC,MAAM,MAAM,GAAG;QACb,oBAAoB;QACpB,2CAA2C,+BAA+B,IAAI;QAC9E,kCAAkC,mBAAmB,IAAI;KAC1D,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,MAAM,EAAE,wCAAwC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,wCAAwC;QACxC,khBAAkhB;QAClhB,mEAAmE;QACnE,sHAAsH;QACtH,8FAA8F;QAC9F,4FAA4F;QAC5F,wEAAwE;QACxE,wFAAwF;QACxF,wPAAwP;KACzP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,gBAAwB,EAAE,SAAiB;IAC7E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAA0B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1H,CAAC,CAAC,QAAQ,CAAC,WAAsC;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC;QACnG,CAAC,CAAC,WAAW,CAAC,GAA8B;QAC5C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;IAC5B,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU;WACjF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvH,MAAM,IAAI,UAAU,CAAC,qEAAqE,EAAE;YAC1F,IAAI,EAAE,uCAAuC;YAC7C,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,sDAAsD,EAAE;YAC3E,IAAI,EAAE,uCAAuC;YAC7C,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,WAAmB,EAAE,QAAiB;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC,mDAAmD,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,OAAO,oBAAoB,QAAQ,WAAW,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC,mDAAmD,EAAE;YACxE,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAE,KAAiC,CAAC,QAAQ;QAC7C,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WACnE,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAE,QAAoC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,UAAU,CAAC,sDAAsD,EAAE;YAC3E,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAA4B,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAsD,EACtD,GAAW,EACX,QAA6B;IAE7B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAmC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnJ,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/G,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,SAAS,EAAE,MAAM,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAsD,EACtD,MAAc,EACd,QAA0B,EAC1B,QAA6B;IAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,OAAO,WAAW,CAAC,WAAW,EAAE,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QACrF,MAAM,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,OAAO,WAAW,CAAC,WAAW,EAAE,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,QAA6B;IAC5E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,aAAa,CAAC,+BAA+B,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAmB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IACzF,IAAI,QAAQ,CAAC,cAAc,KAAK,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;WACrF,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;WACxE,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;WAC1E,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,SAAS;WAC1C,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,gBAAgB;WACxD,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,KAAK,QAAQ,CAAC,gBAAgB;WAClE,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;WACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,KAAK,+BAA+B;WAC5D,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,KAAK,mBAAmB,CAAC;WAC1H,QAAQ,CAAC,WAAW,KAAK,WAAW;WACpC,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,eAAe;WACzE,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc;WACvE,CAAC,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;WACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,WAAW;QAAE,MAAM,aAAa,CAAC,oCAAoC,CAAC,CAAC;IACvH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,QAA0B;IAChE,OAAO;QACL,SAAS;QACT,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACvD,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC3D,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,0BAA0B;KACpC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAsD,EAAE,SAAiB;IACjG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrI,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA0B;IAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,GAAG,QAAQ,CAAC,UAAU,YAAY,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5I,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,GAAG,QAAQ,CAAC,UAAU,WAAW,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxI,MAAM,IAAI,UAAU,CAAC,4DAA4D,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,IAAI,UAAU,CAAC,mBAAmB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAC5G,CAAC"}

package/dist/src/evals/harbor-bridge-error.js

@@ -1,5 +1,6 @@
 import { lstat, readFile } from "node:fs/promises";
 import path from "node:path";
+import { redactCredentialText } from "../foundation/index.js";
 const HITCH_BRIDGE_ERROR_MAX_BYTES = 64 * 1024;
 const HITCH_BRIDGE_ERROR_MESSAGE_MAX_BYTES = 2048;
 const HITCH_BRIDGE_ERROR_CODES = new Set([
@@ -17,7 +18,7 @@ const HITCH_BRIDGE_ERROR_CODES = new Set([
     "hitch_result_artifact_copy_failed",
 ]);
 /** Read a Harbor bridge diagnostic as untrusted, bounded evidence. */
-export async function readHarborBridgeError(trialDirectory) {
+export async function readHarborBridgeError(trialDirectory, credentialValues = []) {
     const source = path.join(trialDirectory, "agent", "hitch-bridge-error.json");
     try {
         const info = await lstat(source);
@@ -27,7 +28,7 @@ export async function readHarborBridgeError(trialDirectory) {
         const value = JSON.parse(raw);
         if (!value || typeof value !== "object" || Array.isArray(value))
             return null;
-        const diagnostic = value;
+        const diagnostic = sanitizeEvidence(value, credentialValues);
         if (diagnostic.schema_version !== "1")
             return null;
         if (typeof diagnostic.code !== "string" || !HITCH_BRIDGE_ERROR_CODES.has(diagnostic.code))
@@ -36,12 +37,26 @@ export async function readHarborBridgeError(trialDirectory) {
             return null;
         if (Buffer.byteLength(diagnostic.message, "utf8") > HITCH_BRIDGE_ERROR_MESSAGE_MAX_BYTES)
             return null;
-        return { code: diagnostic.code, message: bridgeErrorMessage(diagnostic), raw };
+        return { code: diagnostic.code, message: bridgeErrorMessage(diagnostic), raw: `${JSON.stringify(diagnostic)}\n` };
     }
     catch {
         return null;
     }
 }
+function sanitizeEvidence(value, credentialValues, key = "") {
+    if (typeof value === "string") {
+        if (/(?:authorization|cookie|api[-_]?key|token|secret|password|credential)/i.test(key))
+            return "[REDACTED]";
+        return redactCredentialText(value, credentialValues).text;
+    }
+    if (Array.isArray(value))
+        return value.map((entry) => sanitizeEvidence(entry, credentialValues));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .map(([name, entry]) => [name, sanitizeEvidence(entry, credentialValues, name)]));
+    }
+    return value;
+}
 function bridgeErrorMessage(diagnostic) {
     const message = diagnostic.message;
     if (!message.includes("no diagnostic output"))

package/dist/src/evals/harbor-bridge-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"harbor-bridge-error.js","sourceRoot":"","sources":["../../../src/evals/harbor-bridge-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAClD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,2BAA2B;IAC3B,6BAA6B;IAC7B,8BAA8B;IAC9B,kCAAkC;IAClC,gCAAgC;IAChC,mCAAmC;CACpC,CAAC,CAAC;AAQH,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,cAAsB;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,UAAU,GAAG,KAAgC,CAAC;QACpD,IAAI,UAAU,CAAC,cAAc,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvG,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,oCAAoC;YAAE,OAAO,IAAI,CAAC;QACtG,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAiB,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACtD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAuB,CAAC;IACpF,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,OAAO,eAAe,CACpB,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EACrD,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,UAAU,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC"}
+{"version":3,"file":"harbor-bridge-error.js","sourceRoot":"","sources":["../../../src/evals/harbor-bridge-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAClD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,2BAA2B;IAC3B,6BAA6B;IAC7B,8BAA8B;IAC9B,kCAAkC;IAClC,gCAAgC;IAChC,mCAAmC;CACpC,CAAC,CAAC;AAQH,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,cAAsB,EAAE,mBAAsC,EAAE;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAA4B,CAAC;QACxF,IAAI,UAAU,CAAC,cAAc,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvG,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,oCAAoC;YAAE,OAAO,IAAI,CAAC;QACtG,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACpH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,gBAAmC,EAAE,GAAG,GAAG,EAAE;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,wEAAwE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAC5G,OAAO,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACvE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAiB,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACtD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAuB,CAAC;IACpF,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,OAAO,eAAe,CACpB,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EACrD,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,UAAU,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/src/evals/harbor-phase-timings.js

@@ -0,0 +1,60 @@
+import { lstat, readFile } from "node:fs/promises";
+import path from "node:path";
+const MAX_TIMING_BYTES = 16 * 1024;
+const TRIAL_NAME = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,255}$/;
+export async function harborPhaseTimingEvents(jobDirectory, rawResult) {
+    const trials = Array.isArray(rawResult?.trial_results) ? rawResult.trial_results : [];
+    const events = [];
+    for (const value of trials) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            continue;
+        const trial = value;
+        if (typeof trial.trial_name !== "string" || !TRIAL_NAME.test(trial.trial_name) || trial.trial_name === "." || trial.trial_name === "..")
+            continue;
+        const identity = { trial_id: trial.trial_name, ...(typeof trial.task_name === "string" ? { task_id: trial.task_name } : {}) };
+        for (const source of [
+            { directory: "agent", phases: new Set(["setup", "agent"]) },
+            { directory: "verifier", phases: new Set(["verifier"]) },
+        ]) {
+            const file = path.join(jobDirectory, trial.trial_name, source.directory, "hitch-phase-timings.json");
+            try {
+                const info = await lstat(file);
+                if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > MAX_TIMING_BYTES)
+                    throw new TypeError("unsafe timing evidence");
+                const record = parseTiming(JSON.parse(await readFile(file, "utf8")), source.phases);
+                for (const [phase, timing] of Object.entries(record))
+                    events.push({ type: `eval.${phase}.completed`, ...identity, duration_ms: timing.duration_ms });
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    continue;
+                events.push({ type: "eval.phase-timing.invalid", ...identity, phase_source: source.directory, code: "phase_timing_invalid" });
+            }
+        }
+    }
+    return events;
+}
+function parseTiming(value, allowed) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("timing evidence must be an object");
+    const record = value;
+    if (Object.keys(record).some((key) => key !== "schema_version" && key !== "phases") || record.schema_version !== "1"
+        || !record.phases || typeof record.phases !== "object" || Array.isArray(record.phases))
+        throw new TypeError("timing evidence envelope is invalid");
+    const phases = record.phases;
+    if (Object.keys(phases).some((phase) => !allowed.has(phase)))
+        throw new TypeError("timing evidence phase is invalid");
+    const result = {};
+    for (const [phase, value] of Object.entries(phases)) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new TypeError("phase timing is invalid");
+        const timing = value;
+        if (Object.keys(timing).some((key) => key !== "duration_ms" && key !== "completed_at")
+            || !Number.isSafeInteger(timing.duration_ms) || timing.duration_ms < 0 || timing.duration_ms > 7 * 24 * 60 * 60 * 1_000
+            || typeof timing.completed_at !== "string" || !Number.isFinite(Date.parse(timing.completed_at)))
+            throw new TypeError("phase timing fields are invalid");
+        result[phase] = { duration_ms: timing.duration_ms };
+    }
+    return result;
+}
+//# sourceMappingURL=harbor-phase-timings.js.map

package/dist/src/evals/harbor-phase-timings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harbor-phase-timings.js","sourceRoot":"","sources":["../../../src/evals/harbor-phase-timings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,UAAU,GAAG,oCAAoC,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,YAAoB,EAAE,SAAyC;IAC3G,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,SAAS;QAClJ,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9H,KAAK,MAAM,MAAM,IAAI;YACnB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE;YAC3D,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE;SACzD,EAAE,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YACrG,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB;oBAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;gBAC/I,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,KAAK,YAAY,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACvJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACjE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAAoB;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG;WAC/G,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiC,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACtH,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAChH,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,cAAc,CAAC;eACjF,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,IAAK,MAAM,CAAC,WAAsB,GAAG,CAAC,IAAK,MAAM,CAAC,WAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;eAC5I,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC1J,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAqB,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/evals/index.js

@@ -1,7 +1,30 @@
 export { DEFAULT_EVAL_SETUP_TIMEOUT_MS, DEFAULT_EVAL_TIMEOUT_MS, DEFAULT_INFRASTRUCTURE_RETRIES, DEFAULT_INFRASTRUCTURE_RETRY_BACKOFF_MS, newEvalId, resolveBenchmarkReference, resolveLocalDatasetTaskIds, validateEvalId, validateEvalRequest } from "./request.js";
+export { EvalEventSink, MAX_EVAL_EVENT_BYTES } from "./events.js";
+export { buildEvalExecutionPlan, parseEvalExecutionPlan, DEFAULT_EVAL_TRIAL_RESOURCES } from "./execution-plan.js";
+export { runtimeResourcesForTask } from "./execution-plan-resources.js";
+export { deriveTaskResourceRequirement, resolveLocalTaskPlanningInputs, resolveLocalTaskResourceRequirements, HARBOR_EGRESS_SIDECAR_RESOURCES } from "./task-resources.js";
+export { parseExecutionEvidence } from "./execution-evidence.js";
+export { parseDockerMemoryBytes, startDockerResourceObserver } from "./docker-resource-observer.js";
+export { parseDockerEngineContainerStats, readDockerEngineContainerStats } from "./docker-engine-stats.js";
+export { DEFAULT_EXECUTION_LEASE_HEARTBEAT_MS, DEFAULT_EXECUTION_LEASE_TTL_MS, acceptExecutionLease, createExecutionLease, heartbeatExecutionLease, markExecutionLeaseLost, markExecutionLeaseRunning, parseExecutionLease, readExecutionLeases, recoverExecutionLeases, reissueExecutionLease, releaseExecutionLease } from "./execution-leases.js";
 export { runEval } from "./service.js";
-export { inspectEval, listEvals } from "./records.js";
+export { harborArtifactDirectory, loadHarborArtifact, prepareHarborArtifact } from "./harbor-artifact-builder.js";
+export { DEFAULT_HARBOR_ARTIFACT_BUILDER_BASE_IMAGE } from "./harbor-artifact-builder-image.js";
+export { HARBOR_NODE_VERSION, HARBOR_NODE_VERSION_WITH_PREFIX, HARBOR_PNPM_VERSION } from "../backends/index.js";
+export { startEvalModelCaptureRuntime } from "./model-capture-runtime.js";
+export { recoverLocalDockerEvalLeases } from "./recovery.js";
+export { inspectEval, isControlPlaneEval, listEvals } from "./records.js";
 export { importEvalTrialRun, importEvalTrialRuns, validateEvalTrialReferences } from "./trial-import.js";
-export { createEvalProgress, evalTrialKey, mergeEvalProgressTrial, readEvalProgress, replaceInvalidEvalProgressTrial, writeEvalProgress } from "./progress.js";
+export { createEvalProgress, evalTrialKey, mergeEvalProgressTrial, parseEvalTrialRef, readEvalProgress, replaceInvalidEvalProgressTrial, writeEvalProgress } from "./progress.js";
 export { rerunEval, selectRerunTasks, selectRerunTrialSlots } from "./rerun.js";
+export { EVAL_RERUN_TYPES, assertEvalRerunTypeSupported, evalRerunSemantics, parseEvalRerunType } from "./rerun-types.js";
+export { LocalDockerExecutionProvider, adoptLocalDockerLeaseEpoch, parseExecutionProviderStatus, parseLocalProviderExecutionRecord, readLocalDockerProcessRecord, readLocalDockerProcessRecordByLease, reconcileLocalDockerProcess, recordLocalDockerProcessExit, recordLocalDockerProcessStart, releaseLocalDockerProcessRecord, waitForLocalDockerProcessTerminal } from "./local-docker-provider.js";
+export { loadTrialEnvironmentImages } from "./trial-environment-evidence.js";
+export { resolvedImageMapping } from "./environment-image-planning.js";
+export { recoverPromotedEvalTrialPublications } from "./trial-publication-recovery.js";
+export { parseEvalTrialPublication } from "./trial-publication.js";
+export { runRemoteInfrastructureRetries } from "./remote-infrastructure-retry.js";
+export { loadEvalResumeState } from "./resume-state.js";
+export { DOCKER_OWNERSHIP_LABELS, dockerOwnershipLabelMap, dockerResourceOwnership, validateDockerResourceOwnership } from "./docker-ownership.js";
+export { reapOwnedDockerResources } from "./docker-reaper.js";
 //# sourceMappingURL=index.js.map

package/dist/src/evals/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/evals/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,uCAAuC,EAAE,SAAS,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGtQ,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEzG,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC/J,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/evals/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,uCAAuC,EAAE,SAAS,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGtQ,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnH,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,oCAAoC,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAE3K,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAI3G,OAAO,EAAE,oCAAoC,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAErV,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAClH,OAAO,EAAE,0CAA0C,EAAE,MAAM,oCAAoC,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEjH,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEzG,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClL,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE1H,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAGxY,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AAEvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACnJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC"}