agent-hitch 0.2.6 → 0.2.7

package/dist/src/images/docker-buildkit.js

@@ -0,0 +1,137 @@
+import { mkdtemp, readFile, rm } from "node:fs/promises";
+import path from "node:path";
+import { HitchError, credentialValuesFromEnv, ensureDir, hitchRootId, redactCredentialText, runCommand, statePaths } from "../foundation/index.js";
+import { ENVIRONMENT_IMAGE_LABELS } from "./ownership.js";
+export class DockerBuildKitBuilder {
+    id;
+    root;
+    docker;
+    env;
+    registryCachePrefix;
+    versionPromise;
+    constructor({ root, dockerExecutable, env = process.env, builderId = "local-docker-buildkit", registryCachePrefix }) {
+        if (!root || !builderId)
+            throw new TypeError("Docker BuildKit builder identity is invalid");
+        this.root = root;
+        this.docker = dockerExecutable || env.HITCH_DOCKER_PATH || "docker";
+        this.env = env;
+        this.id = builderId;
+        this.registryCachePrefix = registryCachePrefix?.replace(/\/+$/, "") || undefined;
+    }
+    async probe(reference, manifestDigest, platform, configDigest) {
+        try {
+            const inspected = await this.inspect(reference);
+            return inspected.platform === platform && (configDigest ? inspected.configDigest === configDigest : inspected.repoDigests.includes(manifestDigest));
+        }
+        catch {
+            return false;
+        }
+    }
+    async build(input) {
+        for (const name of input.secretNames) {
+            if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name))
+                throw new TypeError("BuildKit secret name is invalid");
+            if (this.env[name] === undefined) {
+                throw new HitchError(`BuildKit secret is unavailable: ${name}`, { code: "credential_unavailable", exitCode: 10 });
+            }
+        }
+        const temporary = await mkdtemp(path.join(await ensureDir(statePaths(this.root).temporary), "buildkit-"));
+        const metadataFile = path.join(temporary, "metadata.json");
+        try {
+            const args = ["buildx", "build", "--progress", "plain", "--load", "--metadata-file", metadataFile,
+                "--platform", input.platform, "--file", path.join(input.contextDirectory, input.dockerfile), "--tag", input.outputReference,
+                "--label", `${ENVIRONMENT_IMAGE_LABELS.rootId}=${hitchRootId(this.root)}`,
+                "--label", `${ENVIRONMENT_IMAGE_LABELS.cacheKey}=${input.cacheKey}`];
+            if (input.target)
+                args.push("--target", input.target);
+            for (const [name, value] of Object.entries(input.buildArgs))
+                args.push("--build-arg", `${name}=${value}`);
+            for (const name of input.secretNames)
+                args.push("--secret", `id=${name},env=${name}`);
+            const cacheReference = this.cacheReference(input.cacheKey, input.cacheReference);
+            if (cacheReference)
+                args.push("--cache-from", `type=registry,ref=${cacheReference}`, "--cache-to", `type=registry,ref=${cacheReference},mode=max`);
+            args.push(input.contextDirectory);
+            try {
+                await runCommand(this.docker, args, { env: this.env, failureCode: "image_build_failed", failureExitCode: 12 });
+            }
+            catch (error) {
+                const detail = redactCredentialText((error?.message || String(error)).slice(0, 64 * 1024), credentialValuesFromEnv(input.secretNames, this.env)).text;
+                throw new HitchError(`BuildKit invocation failed: ${detail}`, {
+                    code: error.code || "image_build_failed", exitCode: 12,
+                });
+            }
+            const metadata = await parseMetadata(metadataFile);
+            const inspected = await this.inspect(input.outputReference);
+            if (inspected.platform !== input.platform)
+                throw new HitchError("built image platform does not match", { code: "image_output_mismatch", exitCode: 12 });
+            return {
+                reference: input.outputReference,
+                manifest_digest: metadata.manifestDigest,
+                config_digest: metadata.configDigest ?? inspected.configDigest,
+                platform: inspected.platform,
+                buildkit_version: await this.version(),
+            };
+        }
+        finally {
+            await rm(temporary, { recursive: true, force: true });
+        }
+    }
+    async inspect(reference) {
+        const result = await runCommand(this.docker, ["image", "inspect", "--format", "{{json .}}", reference], {
+            env: this.env,
+            failureCode: "image_unavailable",
+            failureExitCode: 12,
+            timeoutMs: 30_000,
+        });
+        let value;
+        try {
+            value = JSON.parse(result.stdout);
+        }
+        catch {
+            throw new TypeError("Docker image inspection is invalid");
+        }
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new TypeError("Docker image inspection is invalid");
+        const image = value;
+        if (!digest(image.Id) || typeof image.Os !== "string" || !image.Os || typeof image.Architecture !== "string" || !image.Architecture)
+            throw new TypeError("Docker image identity is invalid");
+        const repoDigests = Array.isArray(image.RepoDigests)
+            ? image.RepoDigests.map((entry) => typeof entry === "string" ? entry.slice(entry.lastIndexOf("@") + 1) : "").filter(digest)
+            : [];
+        const variant = typeof image.Variant === "string" && image.Variant ? `/${image.Variant}` : "";
+        return { configDigest: image.Id, repoDigests, platform: `${image.Os}/${image.Architecture}${variant}` };
+    }
+    version() {
+        this.versionPromise ??= runCommand(this.docker, ["buildx", "version"], { env: this.env, timeoutMs: 10_000, failureCode: "buildkit_unavailable", failureExitCode: 3 })
+            .then((result) => result.stdout.trim().split(/\s+/).slice(0, 3).join(" ") || "unknown")
+            .catch((error) => { throw new HitchError("BuildKit version probe failed", { code: "buildkit_unavailable", exitCode: 3, cause: error }); });
+        return this.versionPromise;
+    }
+    cacheReference(cacheKey, fallback) {
+        if (this.registryCachePrefix)
+            return `${this.registryCachePrefix}/${cacheKey.slice("sha256:".length)}`;
+        return fallback.includes("/") ? fallback : null;
+    }
+}
+async function parseMetadata(file) {
+    let value;
+    try {
+        value = JSON.parse(await readFile(file, "utf8"));
+    }
+    catch {
+        throw new TypeError("BuildKit metadata is invalid");
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("BuildKit metadata is invalid");
+    const metadata = value;
+    const manifestDigest = metadata["containerimage.digest"];
+    const configDigest = metadata["containerimage.config.digest"];
+    if (!digest(manifestDigest) || (configDigest !== undefined && !digest(configDigest)))
+        throw new TypeError("BuildKit output digest is invalid");
+    return { manifestDigest, ...(configDigest ? { configDigest } : {}) };
+}
+function digest(value) {
+    return typeof value === "string" && /^sha256:[a-f0-9]{64}$/.test(value);
+}
+//# sourceMappingURL=docker-buildkit.js.map

package/dist/src/images/docker-buildkit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-buildkit.js","sourceRoot":"","sources":["../../../src/images/docker-buildkit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEnJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAU1D,MAAM,OAAO,qBAAqB;IACvB,EAAE,CAAS;IACH,IAAI,CAAS;IACb,MAAM,CAAS;IACf,GAAG,CAAoB;IACvB,mBAAmB,CAAqB;IACjD,cAAc,CAA8B;IAEpD,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,uBAAuB,EAAE,mBAAmB,EAAgC;QAC/I,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,gBAAgB,IAAI,GAAG,CAAC,iBAAiB,IAAI,QAAQ,CAAC;QACpE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;QACpB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,cAAsB,EAAE,QAAgB,EAAE,YAAqB;QAC5F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QACtJ,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAUX;QACC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACnG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,UAAU,CAAC,mCAAmC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1G,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,YAAY;gBAC/F,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe;gBAC3H,SAAS,EAAE,GAAG,wBAAwB,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzE,SAAS,EAAE,GAAG,wBAAwB,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvE,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;YAC1G,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,QAAQ,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;YACjF,IAAI,cAAc;gBAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,qBAAqB,cAAc,EAAE,EAAE,YAAY,EAAE,qBAAqB,cAAc,WAAW,CAAC,CAAC;YACnJ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;YACjH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,oBAAoB,CACjC,CAAE,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CACvH,CAAC,IAAI,CAAC;gBACP,MAAM,IAAI,UAAU,CAAC,+BAA+B,MAAM,EAAE,EAAE;oBAC5D,IAAI,EAAG,KAA2B,CAAC,IAAI,IAAI,oBAAoB,EAAE,QAAQ,EAAE,EAAE;iBAC9E,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC5D,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACxJ,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,eAAe;gBAChC,eAAe,EAAE,QAAQ,CAAC,cAAc;gBACxC,aAAa,EAAE,QAAQ,CAAC,YAAY,IAAI,SAAS,CAAC,YAAY;gBAC9D,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,gBAAgB,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE;aACvC,CAAC;QACJ,CAAC;gBAAS,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,SAAiB;QACrC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE;YACtG,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,mBAAmB;YAChC,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAAC,CAAC;QAC/G,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3H,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC7L,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;YAClD,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3H,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,YAAY,GAAG,OAAO,EAAE,EAAE,CAAC;IAC1G,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,cAAc,KAAK,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,sBAAsB,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;aAClK,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;aACtF,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,IAAI,UAAU,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7I,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,cAAc,CAAC,QAAgB,EAAE,QAAgB;QACvD,IAAI,IAAI,CAAC,mBAAmB;YAAE,OAAO,GAAG,IAAI,CAAC,mBAAmB,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACvG,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;CACF;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAAC,CAAC;IACxH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,cAAc,GAAG,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC/I,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC"}

package/dist/src/images/dockerfile.js

@@ -0,0 +1,67 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+const MAX_DOCKERFILE_BYTES = 1024 * 1024;
+const PINNED_IMAGE = /^([^\s@]+)@(sha256:[a-f0-9]{64})$/;
+export async function inspectPinnedDockerfileBases(contextDirectory, dockerfile = "Dockerfile") {
+    const contents = await readFile(path.join(contextDirectory, dockerfile));
+    if (contents.byteLength > MAX_DOCKERFILE_BYTES || contents.includes(0))
+        throw unsupported("Dockerfile size or encoding is unsupported");
+    const text = contents.toString("utf8");
+    if (Buffer.from(text, "utf8").compare(contents) !== 0)
+        throw unsupported("Dockerfile must be UTF-8");
+    const aliases = new Set();
+    const bases = new Map();
+    let stages = 0;
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#")) {
+            if (/^#\s*escape\s*=/i.test(line))
+                throw unsupported("Dockerfile escape directives are unsupported");
+            continue;
+        }
+        if (line.endsWith("\\"))
+            throw unsupported("Dockerfile continuation lines are unsupported");
+        if (/^ARG\s/i.test(line) && stages === 0)
+            throw unsupported("Dockerfile ARG before FROM is unsupported");
+        if (/^FROM\s/i.test(line)) {
+            const match = line.match(/^FROM(?:\s+--platform=\S+)?\s+(\S+?)(?:\s+AS\s+([A-Za-z0-9_.-]+))?$/i);
+            if (!match)
+                throw unsupported("Dockerfile FROM syntax is unsupported");
+            const source = match[1];
+            if (source.toLowerCase() !== "scratch" && !aliases.has(source) && !/^\d+$/.test(source))
+                addPinnedBase(source, bases);
+            if (match[2])
+                aliases.add(match[2]);
+            stages += 1;
+            continue;
+        }
+        if (/^(COPY|ADD)\s/i.test(line)) {
+            const external = line.match(/(?:^|\s)--from=(\S+)/i)?.[1];
+            if (external && !aliases.has(external) && !/^\d+$/.test(external))
+                addPinnedBase(external, bases);
+        }
+        if (/^RUN\s/i.test(line) && /--mount=[^\s]*\bfrom=/i.test(line))
+            throw unsupported("Dockerfile external RUN mounts are unsupported");
+    }
+    if (stages === 0)
+        throw unsupported("Dockerfile has no FROM instruction");
+    return [...bases.entries()].map(([reference, digest]) => ({ reference, digest })).sort((left, right) => Buffer.compare(Buffer.from(left.reference), Buffer.from(right.reference)));
+}
+function addPinnedBase(value, bases) {
+    const match = value.match(PINNED_IMAGE);
+    if (!match)
+        throw unsupported(`Dockerfile base image is not digest-pinned: ${bounded(value)}`);
+    const reference = match[1];
+    const digest = match[2];
+    const previous = bases.get(reference);
+    if (previous && previous !== digest)
+        throw unsupported(`Dockerfile base image has conflicting digests: ${bounded(reference)}`);
+    bases.set(reference, digest);
+}
+function unsupported(message) {
+    return Object.assign(new TypeError(message), { code: "environment_build_context_unsupported" });
+}
+function bounded(value) {
+    return value.replace(/[\0\r\n]/g, " ").slice(0, 256);
+}
+//# sourceMappingURL=dockerfile.js.map

package/dist/src/images/dockerfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerfile.js","sourceRoot":"","sources":["../../../src/images/dockerfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,gBAAwB,EAAE,UAAU,GAAG,YAAY;IACpG,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,UAAU,GAAG,oBAAoB,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,WAAW,CAAC,4CAA4C,CAAC,CAAC;IACxI,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,WAAW,CAAC,0BAA0B,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,WAAW,CAAC,8CAA8C,CAAC,CAAC;YACrG,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,CAAC,+CAA+C,CAAC,CAAC;QAC5F,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,CAAC;YAAE,MAAM,WAAW,CAAC,2CAA2C,CAAC,CAAC;QACzG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACjG,IAAI,CAAC,KAAK;gBAAE,MAAM,WAAW,CAAC,uCAAuC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;YAClC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtH,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,CAAC,gDAAgD,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,WAAW,CAAC,oCAAoC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACrL,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAA0B;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,MAAM,WAAW,CAAC,+CAA+C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM;QAAE,MAAM,WAAW,CAAC,kDAAkD,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/H,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC"}

package/dist/src/images/gc.js

@@ -0,0 +1,261 @@
+import { readdir, rm } from "node:fs/promises";
+import path from "node:path";
+import { HitchError, atomicWriteJSON, hitchRootId, readEvalEnvironmentImageReferences, readJSON, runCommand, sha256JSON, statePaths, withEnvironmentImageReferenceLock, withFileLock } from "../foundation/index.js";
+import { parseEnvironmentBuildRecord, parseEnvironmentImageManifest } from "./manifest.js";
+import { ENVIRONMENT_IMAGE_LABELS } from "./ownership.js";
+import { environmentBuildRecordPath, environmentImageManifestPath, loadEnvironmentImageManifest } from "./service.js";
+const TERMINAL_EVAL_STATES = new Set(["succeeded", "failed", "cancelled"]);
+export async function pinEnvironmentImage(root, imageId, reason) {
+    validateRootAndImage(root, imageId);
+    if (reason !== undefined && (!reason.trim() || reason.length > 1_024 || /[\0\r\n]/.test(reason)))
+        throw new TypeError("environment image pin reason is invalid");
+    await withEnvironmentImageReferenceLock(root, async () => {
+        await loadEnvironmentImageManifest(root, imageId);
+        const file = environmentImagePinPath(root, imageId);
+        const existing = await readJSON(file, null);
+        if (existing !== null) {
+            parsePin(existing, imageId);
+            return;
+        }
+        await atomicWriteJSON(file, {
+            schema_version: "1",
+            image_id: imageId,
+            pinned_at: new Date().toISOString(),
+            ...(reason === undefined ? {} : { reason }),
+        });
+    });
+}
+export async function unpinEnvironmentImage(root, imageId) {
+    validateRootAndImage(root, imageId);
+    await withEnvironmentImageReferenceLock(root, () => rm(environmentImagePinPath(root, imageId), { force: true }));
+}
+export async function gcEnvironmentImages(input) {
+    if (!input.root || typeof input.dryRun !== "boolean")
+        throw new TypeError("environment image GC input is invalid");
+    const minimumAgeMs = input.minimumAgeMs ?? 24 * 60 * 60 * 1_000;
+    if (!Number.isSafeInteger(minimumAgeMs) || minimumAgeMs < 0)
+        throw new TypeError("environment image GC minimum age is invalid");
+    const env = input.env ?? process.env;
+    const command = input.run ?? ((args) => runCommand(env.HITCH_DOCKER_PATH || "docker", args, {
+        env,
+        ...(input.signal ? { signal: input.signal } : {}),
+        timeoutMs: 30_000,
+        failureCode: "environment_image_gc_docker_failed",
+        failureExitCode: 12,
+    }));
+    return withEnvironmentImageReferenceLock(input.root, async () => {
+        const references = await referencedEnvironmentImages(input.root);
+        const manifests = await storedManifests(input.root);
+        const retained = [];
+        const eligible = [];
+        const removed = [];
+        const skipped = [];
+        for (const manifest of manifests) {
+            const reasons = [...(references.get(manifest.image_id) ?? [])].sort(compare);
+            if (reasons.length > 0) {
+                retained.push({ image_id: manifest.image_id, reasons });
+                continue;
+            }
+            if (manifest.source.kind === "registry") {
+                retained.push({ image_id: manifest.image_id, reasons: ["external-registry-image"] });
+                continue;
+            }
+            if (Date.now() - Date.parse(manifest.created_at) < minimumAgeMs) {
+                retained.push({ image_id: manifest.image_id, reasons: ["minimum-age"] });
+                continue;
+            }
+            const candidate = await withFileLock(statePaths(input.root).buildLocks, manifest.build.cache_key, async () => {
+                const current = await loadEnvironmentImageManifest(input.root, manifest.image_id);
+                if (JSON.stringify(current) !== JSON.stringify(manifest))
+                    throw gcError("environment image changed during GC");
+                return inspectGcCandidate(input.root, manifest, command);
+            }, { timeoutCode: "environment_image_gc_build_locked", timeoutExitCode: 12, ...(input.signal ? { signal: input.signal } : {}) });
+            if ("code" in candidate) {
+                skipped.push({ image_id: manifest.image_id, code: candidate.code });
+                continue;
+            }
+            eligible.push(candidate);
+            if (input.dryRun)
+                continue;
+            const deleted = await withFileLock(statePaths(input.root).buildLocks, manifest.build.cache_key, async () => {
+                const current = await loadEnvironmentImageManifest(input.root, manifest.image_id);
+                if (JSON.stringify(current) !== JSON.stringify(manifest))
+                    throw gcError("environment image changed during GC");
+                const rechecked = await inspectGcCandidate(input.root, manifest, command);
+                if ("code" in rechecked)
+                    return rechecked;
+                await command(["image", "rm", manifest.output.reference]);
+                await removeEnvironmentImageRecords(input.root, manifest);
+                return rechecked;
+            }, { timeoutCode: "environment_image_gc_build_locked", timeoutExitCode: 12, ...(input.signal ? { signal: input.signal } : {}) });
+            if ("code" in deleted)
+                skipped.push({ image_id: manifest.image_id, code: deleted.code });
+            else
+                removed.push(deleted);
+        }
+        return {
+            schema_version: "1",
+            dry_run: input.dryRun,
+            scanned: manifests.length,
+            retained: retained.sort(byImageId),
+            eligible: eligible.sort(byImageId),
+            removed: removed.sort(byImageId),
+            skipped: skipped.sort(byImageId),
+        };
+    });
+}
+async function inspectGcCandidate(root, manifest, command) {
+    if (!/^hitch-environment:[a-f0-9]{32}$/.test(manifest.output.reference) || !manifest.output.config_digest)
+        return { code: "not-owned-build-output" };
+    const record = parseEnvironmentBuildRecord(await readJSON(environmentBuildRecordPath(root, manifest.build.cache_key)));
+    if (record.state !== "succeeded" || record.image_id !== manifest.image_id || record.cache_key !== manifest.build.cache_key)
+        throw gcError("environment image build record does not match manifest");
+    let inspected;
+    try {
+        inspected = JSON.parse((await command(["image", "inspect", "--format", "{{json .}}", manifest.output.reference])).stdout);
+    }
+    catch {
+        return { code: "docker-image-unavailable" };
+    }
+    if (!inspected || typeof inspected !== "object" || Array.isArray(inspected))
+        return { code: "docker-inspect-invalid" };
+    const image = inspected;
+    const config = image.Config && typeof image.Config === "object" && !Array.isArray(image.Config) ? image.Config : {};
+    const labels = config.Labels && typeof config.Labels === "object" && !Array.isArray(config.Labels) ? config.Labels : {};
+    if (image.Id !== manifest.output.config_digest)
+        return { code: "config-digest-mismatch" };
+    if (labels[ENVIRONMENT_IMAGE_LABELS.rootId] !== hitchRootId(root)
+        || labels[ENVIRONMENT_IMAGE_LABELS.cacheKey] !== manifest.build.cache_key)
+        return { code: "ownership-label-mismatch" };
+    return { image_id: manifest.image_id, reference: manifest.output.reference, config_digest: manifest.output.config_digest };
+}
+async function referencedEnvironmentImages(root) {
+    const result = new Map();
+    const paths = statePaths(root);
+    for (const entry of await directories(paths.evals)) {
+        if (!/^eval_[a-f0-9]{32}$/.test(entry))
+            continue;
+        const directory = path.join(paths.evals, entry);
+        const control = await readJSON(path.join(directory, "control.json"), null);
+        const terminalResult = await readJSON(path.join(directory, "result.json"), null);
+        const terminal = TERMINAL_EVAL_STATES.has(String(control?.state)) || TERMINAL_EVAL_STATES.has(String(terminalResult?.status));
+        if (terminal)
+            continue;
+        const request = await readJSON(path.join(directory, "request.json"), null);
+        if (request === null && control === null)
+            continue;
+        const references = await readEvalEnvironmentImageReferences(directory, entry);
+        if (!references)
+            throw gcError(`active eval has no environment image reference fence: ${entry}`);
+        if (references.state !== "planned")
+            throw gcError(`active eval image planning is incomplete: ${entry}`);
+        for (const imageId of references.image_ids)
+            addReference(result, imageId, "active-eval");
+    }
+    for (const entry of await directories(paths.runs)) {
+        const index = await readJSON(path.join(paths.runs, entry, "bundle.index.json"), null);
+        if (index === null)
+            continue;
+        const manifest = await readJSON(path.join(paths.runs, entry, "manifest.json"), null);
+        const { bundle_digest: bundleDigest, created_at: _createdAt, ...bundleIdentity } = index;
+        if (index.schema_version !== "1" || index.sealed !== true || typeof index.run_id !== "string"
+            || typeof bundleDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(bundleDigest)
+            || sha256JSON(bundleIdentity) !== bundleDigest
+            || manifest?.sealed !== true || manifest.run_id !== index.run_id)
+            throw gcError(`sealed bundle index is invalid: ${entry}`);
+        if (index.environment === undefined)
+            continue;
+        const environment = record(index.environment);
+        if (!environment || !Array.isArray(environment.images))
+            throw gcError(`sealed bundle environment is invalid: ${entry}`);
+        for (const image of environment.images) {
+            const value = record(image);
+            if (!value || typeof value.image_id !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value.image_id))
+                throw gcError(`sealed bundle image reference is invalid: ${entry}`);
+            addReference(result, value.image_id, "sealed-bundle");
+        }
+    }
+    for (const entry of await files(paths.environmentImagePins)) {
+        if (!/^[a-f0-9]{64}\.json$/.test(entry))
+            throw gcError("environment image pin filename is invalid");
+        const imageId = `sha256:${entry.slice(0, 64)}`;
+        parsePin(await readJSON(path.join(paths.environmentImagePins, entry)), imageId);
+        addReference(result, imageId, "operator-pin");
+    }
+    return result;
+}
+async function storedManifests(root) {
+    const result = [];
+    for (const entry of await directories(statePaths(root).environmentImages)) {
+        if (!/^[a-f0-9]{64}$/.test(entry))
+            throw gcError("environment image store entry is invalid");
+        const manifest = parseEnvironmentImageManifest(await readJSON(path.join(statePaths(root).environmentImages, entry, "manifest.json")));
+        if (manifest.image_id !== `sha256:${entry}`)
+            throw gcError("environment image store path does not match manifest");
+        result.push(manifest);
+    }
+    return result.sort((left, right) => compare(left.image_id, right.image_id));
+}
+async function removeEnvironmentImageRecords(root, manifest) {
+    const paths = statePaths(root);
+    const manifestDirectory = path.dirname(environmentImageManifestPath(root, manifest.image_id));
+    const recordDirectory = path.dirname(environmentBuildRecordPath(root, manifest.build.cache_key));
+    const buildId = `build_${manifest.build.cache_key.slice("sha256:".length, "sha256:".length + 32)}`;
+    await rm(path.join(paths.buildIndexes, `${buildId}.json`), { force: true });
+    await rm(recordDirectory, { recursive: true, force: true });
+    await rm(manifestDirectory, { recursive: true, force: true });
+}
+function environmentImagePinPath(root, imageId) {
+    return path.join(statePaths(root).environmentImagePins, `${imageId.slice("sha256:".length)}.json`);
+}
+function parsePin(value, expectedImageId) {
+    const pin = record(value);
+    if (!pin || Object.keys(pin).some((key) => !["schema_version", "image_id", "pinned_at", "reason"].includes(key))
+        || pin.schema_version !== "1" || pin.image_id !== expectedImageId
+        || typeof pin.pinned_at !== "string" || !Number.isFinite(Date.parse(pin.pinned_at))
+        || pin.reason !== undefined && (typeof pin.reason !== "string" || !pin.reason || pin.reason.length > 1_024 || /[\0\r\n]/.test(pin.reason))) {
+        throw gcError("environment image pin is invalid");
+    }
+}
+async function directories(root) {
+    try {
+        return (await readdir(root, { withFileTypes: true })).filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort(compare);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+}
+async function files(root) {
+    try {
+        return (await readdir(root, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).sort(compare);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+}
+function addReference(target, imageId, reason) {
+    const reasons = target.get(imageId) ?? new Set();
+    reasons.add(reason);
+    target.set(imageId, reasons);
+}
+function record(value) {
+    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function validateRootAndImage(root, imageId) {
+    if (!root || !/^sha256:[a-f0-9]{64}$/.test(imageId))
+        throw new TypeError("environment image pin identity is invalid");
+}
+function gcError(message) {
+    return new HitchError(message, { code: "environment_image_gc_reference_scan_failed", exitCode: 12 });
+}
+function byImageId(left, right) {
+    return compare(left.image_id, right.image_id);
+}
+function compare(left, right) {
+    return Buffer.compare(Buffer.from(left), Buffer.from(right));
+}
+//# sourceMappingURL=gc.js.map

package/dist/src/images/gc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gc.js","sourceRoot":"","sources":["../../../src/images/gc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,kCAAkC,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,iCAAiC,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACrN,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAEtH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAY3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAe,EAAE,MAAe;IACtF,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjK,MAAM,iCAAiC,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAiB,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,eAAe,CAAC,IAAI,EAAE;YAC1B,cAAc,EAAE,GAAG;YACnB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,OAAe;IACvE,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,iCAAiC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAOzC;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACnH,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAChI,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,IAAI,QAAQ,EAAE,IAAI,EAAE;QACpG,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,oCAAoC;QACjD,eAAe,EAAE,EAAE;KACpB,CAAC,CAAC,CAAC;IACJ,OAAO,iCAAiC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,QAAQ,GAA2C,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAA2C,EAAE,CAAC;QAC5D,MAAM,OAAO,GAA0C,EAAE,CAAC;QAC1D,MAAM,OAAO,GAA0C,EAAE,CAAC;QAC1D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,YAAY,EAAE,CAAC;gBAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBACzE,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;gBAC3G,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAClF,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;oBAAE,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;gBAC/G,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjI,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpE,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC3B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;gBACzG,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAClF,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;oBAAE,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;gBAC/G,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC1E,IAAI,MAAM,IAAI,SAAS;oBAAE,OAAO,SAAS,CAAC;gBAC1C,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC1D,MAAM,6BAA6B,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC1D,OAAO,SAAS,CAAC;YACnB,CAAC,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjI,IAAI,MAAM,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;;gBACpF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,cAAc,EAAE,GAAG;YACnB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,OAAO,EAAE,SAAS,CAAC,MAAM;YACzB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;SACjC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,QAAoC,EACpC,OAAyE;IAEzE,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IACrJ,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,QAAQ,CAAC,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,OAAO,CAAC,wDAAwD,CAAC,CAAC;IACpM,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IACvH,MAAM,KAAK,GAAG,SAAoC,CAAC;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/I,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnJ,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC1F,IAAI,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC;WAC5D,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACzH,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;AAC7H,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,IAAY;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAiC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3G,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAiC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QACjH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9H,IAAI,QAAQ;YAAE,SAAS;QACvB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAiB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3F,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QACnD,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU;YAAE,MAAM,OAAO,CAAC,yDAAyD,KAAK,EAAE,CAAC,CAAC;QACjG,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;QACxG,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,SAAS;YAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAiC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;QACtH,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAiC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;QACrH,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC;QACzF,IAAI,KAAK,CAAC,cAAc,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;eACxF,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC;eAC/E,UAAU,CAAC,cAAc,CAAC,KAAK,YAAY;eAC3C,QAAQ,EAAE,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC9H,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,SAAS;QAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,MAAM,OAAO,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QACxH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,MAAM,OAAO,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;YACvK,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,QAAkB,EAAE,eAAe,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAY,CAAC;QACzD,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,0CAA0C,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QACtI,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,KAAK,EAAE;YAAE,MAAM,OAAO,CAAC,sDAAsD,CAAC,CAAC;QACnH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,IAAY,EAAE,QAAoC;IAC7F,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,SAAS,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;IACnG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,OAAe;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,eAAuB;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WAC3G,GAAG,CAAC,cAAc,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe;WAC9D,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;WAChF,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7I,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC9I,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACnG,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACzI,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACnG,CAAC;AAED,SAAS,YAAY,CAAC,MAAgC,EAAE,OAAe,EAAE,MAAc;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/G,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,OAAe;IACzD,IAAI,CAAC,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,4CAA4C,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,SAAS,CAAC,IAA0B,EAAE,KAA2B;IACxE,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/src/images/index.js

@@ -0,0 +1,10 @@
+export { resolveBuildContext } from "./context.js";
+export { inspectPinnedDockerfileBases } from "./dockerfile.js";
+export { environmentImageIdentity, parseEnvironmentBuildRecord, parseEnvironmentImageManifest } from "./manifest.js";
+export { EnvironmentImageService, loadEnvironmentImageManifest } from "./service.js";
+export { DockerBuildKitBuilder } from "./docker-buildkit.js";
+export { ENVIRONMENT_IMAGE_LABELS } from "./ownership.js";
+export { gcEnvironmentImages, pinEnvironmentImage, unpinEnvironmentImage } from "./gc.js";
+export { inspectEnvironmentBuild } from "./records.js";
+export { DockerRegistryResolver, resolveRegistryEnvironmentImage } from "./registry.js";
+//# sourceMappingURL=index.js.map

package/dist/src/images/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/images/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AACrH,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAErF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAE1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,sBAAsB,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC"}