agent-hitch 0.2.6 → 0.2.7

package/dist/src/images/manifest.js

@@ -0,0 +1,109 @@
+import { sha256JSON } from "../foundation/index.js";
+const SHA256 = /^sha256:[a-f0-9]{64}$/;
+export function environmentImageIdentity(value) {
+    return sha256JSON({
+        source: value.source,
+        platform: value.platform,
+        build: value.build,
+        output: {
+            manifest_digest: value.output.manifest_digest,
+            ...(value.output.config_digest ? { config_digest: value.output.config_digest } : {}),
+        },
+        base_images: value.base_images,
+    });
+}
+export function parseEnvironmentImageManifest(value) {
+    const manifest = exact(value, ["schema_version", "image_id", "source", "platform", "build", "output", "base_images", "created_at"], "environment image manifest");
+    if (manifest.schema_version !== "1" || !digest(manifest.image_id) || typeof manifest.platform !== "string" || !manifest.platform
+        || typeof manifest.created_at !== "string" || !Number.isFinite(Date.parse(manifest.created_at)))
+        throw new TypeError("environment image manifest identity is invalid");
+    const source = exact(manifest.source, ["kind", "benchmark_id", "benchmark_revision"], "environment image source", ["task_id", "context_digest", "dockerfile_digest"]);
+    if (!new Set(["registry", "build-context", "compose-build"]).has(String(source.kind))
+        || typeof source.benchmark_id !== "string" || !source.benchmark_id
+        || typeof source.benchmark_revision !== "string" || !source.benchmark_revision)
+        throw new TypeError("environment image source is invalid");
+    for (const name of ["task_id"])
+        if (source[name] !== undefined && (typeof source[name] !== "string" || !source[name]))
+            throw new TypeError(`environment image source ${name} is invalid`);
+    for (const name of ["context_digest", "dockerfile_digest"])
+        if (source[name] !== undefined && !digest(source[name]))
+            throw new TypeError(`environment image source ${name} is invalid`);
+    if (source.kind !== "registry" && (!digest(source.context_digest) || !digest(source.dockerfile_digest)))
+        throw new TypeError("built image source digests are missing");
+    const build = exact(manifest.build, ["builder", "secret_names", "cache_key"], "environment image build", ["buildkit_version", "builder_id", "frontend", "target", "build_args_sha256"]);
+    if (build.builder !== "buildkit" || !digest(build.cache_key))
+        throw new TypeError("environment image build identity is invalid");
+    for (const name of ["buildkit_version", "builder_id", "frontend", "target"])
+        if (build[name] !== undefined && (typeof build[name] !== "string" || !build[name]))
+            throw new TypeError(`environment image build ${name} is invalid`);
+    if (build.build_args_sha256 !== undefined && !digest(build.build_args_sha256))
+        throw new TypeError("environment image build args digest is invalid");
+    const secretNames = stringSet(build.secret_names, "environment image secret names", /^[A-Za-z_][A-Za-z0-9_]*$/);
+    const output = exact(manifest.output, ["reference", "manifest_digest"], "environment image output", ["config_digest"]);
+    if (typeof output.reference !== "string" || !output.reference || !digest(output.manifest_digest)
+        || (output.config_digest !== undefined && !digest(output.config_digest)))
+        throw new TypeError("environment image output is invalid");
+    if (!Array.isArray(manifest.base_images))
+        throw new TypeError("environment image base images are invalid");
+    const baseImages = manifest.base_images.map((entry) => {
+        const base = exact(entry, ["reference", "digest"], "environment image base image");
+        if (typeof base.reference !== "string" || !base.reference || !digest(base.digest))
+            throw new TypeError("environment image base image is invalid");
+        return { reference: base.reference, digest: base.digest };
+    });
+    if (!canonical(baseImages.map((entry) => entry.reference)) || new Set(baseImages.map((entry) => entry.reference)).size !== baseImages.length)
+        throw new TypeError("environment image base images are not canonical");
+    const parsed = {
+        schema_version: "1",
+        image_id: manifest.image_id,
+        source: source,
+        platform: manifest.platform,
+        build: { ...build, secret_names: secretNames },
+        output: output,
+        base_images: baseImages,
+        created_at: manifest.created_at,
+    };
+    const { image_id: _imageId, created_at: _createdAt, ...identity } = parsed;
+    if (environmentImageIdentity(identity) !== parsed.image_id)
+        throw new TypeError("environment image id does not match its identity");
+    return parsed;
+}
+export function parseEnvironmentBuildRecord(value) {
+    const record = exact(value, ["schema_version", "build_id", "cache_key", "state", "owner_id", "builder_id", "started_at"], "environment build record", ["completed_at", "image_id", "error"]);
+    if (record.schema_version !== "1" || typeof record.build_id !== "string" || !/^build_[a-f0-9]{32}$/.test(record.build_id)
+        || !digest(record.cache_key) || !new Set(["running", "succeeded", "failed"]).has(String(record.state))
+        || typeof record.owner_id !== "string" || !record.owner_id || typeof record.builder_id !== "string" || !record.builder_id
+        || typeof record.started_at !== "string" || !Number.isFinite(Date.parse(record.started_at)))
+        throw new TypeError("environment build record identity is invalid");
+    const terminal = record.state === "succeeded" || record.state === "failed";
+    if (terminal !== (typeof record.completed_at === "string" && Number.isFinite(Date.parse(record.completed_at))))
+        throw new TypeError("environment build terminal state is inconsistent");
+    if ((record.state === "succeeded") !== digest(record.image_id))
+        throw new TypeError("environment build image identity is inconsistent");
+    const error = record.error;
+    if ((record.state === "failed") !== Boolean(error) || (error && (typeof error !== "object" || Array.isArray(error)
+        || typeof error.code !== "string" || typeof error.message !== "string")))
+        throw new TypeError("environment build failure is inconsistent");
+    return record;
+}
+function exact(value, required, label, optional = []) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError(`${label} must be an object`);
+    const record = value;
+    if (required.some((key) => !(key in record)) || Object.keys(record).some((key) => !required.includes(key) && !optional.includes(key)))
+        throw new TypeError(`${label} fields are invalid`);
+    return record;
+}
+function digest(value) {
+    return typeof value === "string" && SHA256.test(value);
+}
+function stringSet(value, label, pattern) {
+    if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string" || !pattern.test(entry)) || !canonical(value)
+        || new Set(value).size !== value.length)
+        throw new TypeError(`${label} are invalid`);
+    return value;
+}
+function canonical(values) {
+    return values.every((value, index) => index === 0 || Buffer.compare(Buffer.from(values[index - 1]), Buffer.from(value)) < 0);
+}
+//# sourceMappingURL=manifest.js.map

package/dist/src/images/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/images/manifest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC,MAAM,UAAU,wBAAwB,CAAC,KAAkE;IACzG,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE;YACN,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe;YAC7C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF;QACD,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,4BAA4B,CAAC,CAAC;IAClK,IAAI,QAAQ,CAAC,cAAc,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ;WAC3H,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACzK,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,oBAAoB,CAAC,EAAE,0BAA0B,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACtK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;WAChF,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,YAAY;WAC/D,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,kBAAkB;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7I,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,CAAU;QAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,IAAI,aAAa,CAAC,CAAC;IACnM,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,CAAU;QAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,IAAI,aAAa,CAAC,CAAC;IACjM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACvK,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,yBAAyB,EAAE,CAAC,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACxL,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACjI,KAAK,MAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAU;QAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,IAAI,aAAa,CAAC,CAAC;IAC5O,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACrJ,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,gCAAgC,EAAE,0BAA0B,CAAC,CAAC;IAChH,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,0BAA0B,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IACvH,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;WAC3F,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACvI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAC3G,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACnF,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAClJ,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAgB,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACrN,MAAM,MAAM,GAAG;QACb,cAAc,EAAE,GAAY;QAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAkB;QACrC,MAAM,EAAE,MAAyD;QACjE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,WAAW,EAAoD;QAChG,MAAM,EAAE,MAAyD;QACjE,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC3E,IAAI,wBAAwB,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACpI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,0BAA0B,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7L,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;WACpH,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;WACnG,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU;WACtH,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACnK,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;IAC3E,IAAI,QAAQ,KAAK,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACxL,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACxI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC7G,OAAQ,KAAiC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAQ,KAAiC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACvM,OAAO,MAA6C,CAAC;AACvD,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,QAAkB,EAAE,KAAa,EAAE,WAAqB,EAAE;IACvF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC1L,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,EAAE,OAAe;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;WACrH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAAgB;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzI,CAAC"}

package/dist/src/images/ownership.js

@@ -0,0 +1,5 @@
+export const ENVIRONMENT_IMAGE_LABELS = {
+    rootId: "io.hitch.environment-image-root-id",
+    cacheKey: "io.hitch.environment-image-cache-key",
+};
+//# sourceMappingURL=ownership.js.map

package/dist/src/images/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../../src/images/ownership.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,MAAM,EAAE,oCAAoC;IAC5C,QAAQ,EAAE,sCAAsC;CACxC,CAAC"}

package/dist/src/images/records.js

@@ -0,0 +1,32 @@
+import path from "node:path";
+import { readJSON, statePaths } from "../foundation/index.js";
+import { parseEnvironmentBuildRecord, parseEnvironmentImageManifest } from "./manifest.js";
+import { environmentBuildRecordPath, environmentImageManifestPath } from "./service.js";
+export async function inspectEnvironmentBuild(root, buildId) {
+    if (!/^build_[a-f0-9]{32}$/.test(buildId))
+        throw new TypeError("environment build id is invalid");
+    const index = await readJSON(path.join(statePaths(root).buildIndexes, `${buildId}.json`), null);
+    if (!index)
+        return null;
+    if (Object.keys(index).some((key) => !new Set(["schema_version", "build_id", "cache_key"]).has(key))
+        || index.schema_version !== "1" || index.build_id !== buildId || typeof index.cache_key !== "string"
+        || !/^sha256:[a-f0-9]{64}$/.test(index.cache_key)
+        || buildId !== `build_${index.cache_key.slice("sha256:".length, "sha256:".length + 32)}`)
+        throw new TypeError("environment build index is invalid");
+    const recordValue = await readJSON(environmentBuildRecordPath(root, index.cache_key), null);
+    if (!recordValue)
+        throw new TypeError("environment build record is missing");
+    const record = parseEnvironmentBuildRecord(recordValue);
+    if (record.build_id !== buildId || record.cache_key !== index.cache_key)
+        throw new TypeError("environment build record does not match its index");
+    if (!record.image_id)
+        return { record, manifest: null };
+    const manifestValue = await readJSON(environmentImageManifestPath(root, record.image_id), null);
+    if (!manifestValue)
+        throw new TypeError("environment image manifest is missing");
+    const manifest = parseEnvironmentImageManifest(manifestValue);
+    if (manifest.image_id !== record.image_id || manifest.build.cache_key !== record.cache_key)
+        throw new TypeError("environment image manifest does not match its build");
+    return { record, manifest };
+}
+//# sourceMappingURL=records.js.map

package/dist/src/images/records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.js","sourceRoot":"","sources":["../../../src/images/records.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAOxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,OAAe;IACzE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAiC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAChI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;WAC/F,KAAK,CAAC,cAAc,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WACjG,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;WAC9C,OAAO,KAAK,SAAS,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACtJ,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAiB,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,SAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;IACtH,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAClJ,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAiB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAChH,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IACvK,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/dist/src/images/registry.js

@@ -0,0 +1,154 @@
+import { lstat } from "node:fs/promises";
+import path from "node:path";
+import { HitchError, atomicWriteJSON, ensureDir, readJSON, runCommand, sha256JSON } from "../foundation/index.js";
+import { environmentImageIdentity, parseEnvironmentImageManifest } from "./manifest.js";
+import { environmentImageManifestPath } from "./service.js";
+export async function resolveRegistryEnvironmentImage(input) {
+    if (!input.root || !input.benchmarkId || !input.benchmarkRevision || !validReference(input.reference) || !input.platform || !input.resolver.id) {
+        throw new TypeError("registry image request identity is invalid");
+    }
+    const secretNames = canonicalNames(input.secretNames ?? []);
+    const resolved = await input.resolver.resolve(input.reference, input.platform, input.signal);
+    if (resolved.platform !== input.platform || !digest(resolved.manifest_digest) || (resolved.config_digest !== undefined && !digest(resolved.config_digest))
+        || !validReference(resolved.reference) || repositoryOf(resolved.reference) !== repositoryOf(input.reference)
+        || !resolved.reference.endsWith(`@${resolved.manifest_digest}`)) {
+        throw new HitchError("registry image identity does not match the request", { code: "image_output_mismatch", exitCode: 12 });
+    }
+    const requestedDigest = input.reference.match(/@(sha256:[a-f0-9]{64})$/)?.[1];
+    if (requestedDigest && requestedDigest !== resolved.manifest_digest)
+        throw new HitchError("registry digest resolution changed an immutable reference", { code: "image_digest_mismatch", exitCode: 12 });
+    const cacheKey = sha256JSON({ kind: "registry", requested_reference: input.reference, manifest_digest: resolved.manifest_digest, platform: input.platform });
+    const withoutIdentity = {
+        schema_version: "1",
+        source: {
+            kind: "registry",
+            benchmark_id: input.benchmarkId,
+            benchmark_revision: input.benchmarkRevision,
+            ...(input.taskId ? { task_id: input.taskId } : {}),
+        },
+        platform: input.platform,
+        build: {
+            builder: "buildkit",
+            builder_id: input.resolver.id,
+            frontend: "registry-resolution",
+            secret_names: secretNames,
+            cache_key: cacheKey,
+        },
+        output: {
+            reference: resolved.reference,
+            manifest_digest: resolved.manifest_digest,
+            ...(resolved.config_digest ? { config_digest: resolved.config_digest } : {}),
+        },
+        base_images: [],
+    };
+    const manifest = parseEnvironmentImageManifest({
+        ...withoutIdentity,
+        image_id: environmentImageIdentity(withoutIdentity),
+        created_at: new Date().toISOString(),
+    });
+    const file = environmentImageManifestPath(input.root, manifest.image_id);
+    const cacheHit = await regularFile(file);
+    if (cacheHit) {
+        const persisted = parseEnvironmentImageManifest(await readJSON(file));
+        if (persisted.image_id !== manifest.image_id || persisted.output.manifest_digest !== manifest.output.manifest_digest)
+            throw new TypeError("registry image cache identity changed");
+        return { manifest: persisted, cacheHit: true };
+    }
+    await ensureDir(path.dirname(file));
+    await atomicWriteJSON(file, manifest);
+    return { manifest: parseEnvironmentImageManifest(await readJSON(file)), cacheHit: false };
+}
+export class DockerRegistryResolver {
+    id;
+    docker;
+    env;
+    constructor({ dockerExecutable, env = process.env, id = "local-docker-registry" } = {}) {
+        if (!id)
+            throw new TypeError("Docker registry resolver id is invalid");
+        this.id = id;
+        this.docker = dockerExecutable || env.HITCH_DOCKER_PATH || "docker";
+        this.env = env;
+    }
+    async resolve(reference, platform, signal) {
+        if (!validReference(reference) || !platform)
+            throw new TypeError("Docker registry image request is invalid");
+        try {
+            await runCommand(this.docker, ["pull", "--platform", platform, reference], {
+                env: this.env,
+                failureCode: "image_registry_unavailable",
+                failureExitCode: 3,
+                ...(signal ? { signal } : {}),
+            });
+            const result = await runCommand(this.docker, ["image", "inspect", "--format", "{{json .}}", reference], {
+                env: this.env,
+                failureCode: "image_unavailable",
+                failureExitCode: 12,
+                timeoutMs: 30_000,
+                ...(signal ? { signal } : {}),
+            });
+            return parseDockerInspection(reference, platform, result.stdout);
+        }
+        catch (error) {
+            if (error.code === "cancelled")
+                throw error;
+            throw new HitchError("registry image resolution failed", { code: error.code || "image_registry_unavailable", exitCode: 12, cause: error });
+        }
+    }
+}
+function parseDockerInspection(requested, platform, stdout) {
+    let value;
+    try {
+        value = JSON.parse(stdout);
+    }
+    catch {
+        throw new TypeError("Docker registry inspection is invalid");
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("Docker registry inspection is invalid");
+    const image = value;
+    if (!digest(image.Id) || typeof image.Os !== "string" || typeof image.Architecture !== "string" || !Array.isArray(image.RepoDigests))
+        throw new TypeError("Docker registry image identity is invalid");
+    const actualPlatform = `${image.Os}/${image.Architecture}${typeof image.Variant === "string" && image.Variant ? `/${image.Variant}` : ""}`;
+    if (actualPlatform !== platform)
+        throw new HitchError("registry image platform does not match", { code: "image_platform_mismatch", exitCode: 12 });
+    const candidates = image.RepoDigests.filter((entry) => typeof entry === "string" && /@sha256:[a-f0-9]{64}$/.test(entry));
+    const requestedDigest = requested.match(/@(sha256:[a-f0-9]{64})$/)?.[1];
+    const repository = repositoryOf(requested);
+    const selected = candidates.find((entry) => entry === `${repository}@${requestedDigest}`)
+        ?? candidates.find((entry) => entry.startsWith(`${repository}@`))
+        ?? (candidates.length === 1 ? candidates[0] : undefined);
+    if (!selected)
+        throw new TypeError("Docker registry manifest digest is unavailable");
+    const manifestDigest = selected.slice(selected.lastIndexOf("@") + 1);
+    if (requestedDigest && manifestDigest !== requestedDigest)
+        throw new HitchError("Docker registry digest does not match", { code: "image_digest_mismatch", exitCode: 12 });
+    return { reference: `${repository}@${manifestDigest}`, manifest_digest: manifestDigest, config_digest: image.Id, platform: actualPlatform };
+}
+function repositoryOf(reference) {
+    const withoutDigest = reference.split("@")[0];
+    const slash = withoutDigest.lastIndexOf("/");
+    const colon = withoutDigest.lastIndexOf(":");
+    return colon > slash ? withoutDigest.slice(0, colon) : withoutDigest;
+}
+function validReference(value) {
+    return typeof value === "string" && value.length > 0 && value.length <= 1_024 && !/[\s\0]/.test(value) && !value.includes("://");
+}
+function digest(value) {
+    return typeof value === "string" && /^sha256:[a-f0-9]{64}$/.test(value);
+}
+function canonicalNames(value) {
+    if (value.some((name) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)))
+        throw new TypeError("registry secret names are invalid");
+    return [...new Set(value)].sort((left, right) => Buffer.compare(Buffer.from(left), Buffer.from(right)));
+}
+async function regularFile(file) {
+    try {
+        return (await lstat(file)).isFile();
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/images/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/images/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAc5D,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAUrD;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC/I,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7F,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;WACrJ,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;WACzG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,UAAU,CAAC,oDAAoD,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,eAAe,IAAI,eAAe,KAAK,QAAQ,CAAC,eAAe;QAAE,MAAM,IAAI,UAAU,CAAC,2DAA2D,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACxM,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7J,MAAM,eAAe,GAAgE;QACnF,cAAc,EAAE,GAAG;QACnB,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE;YACL,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,QAAQ,EAAE,qBAAqB;YAC/B,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,QAAQ;SACpB;QACD,MAAM,EAAE;YACN,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E;QACD,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAC7C,GAAG,eAAe;QAClB,QAAQ,EAAE,wBAAwB,CAAC,eAAe,CAAC;QACnD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACnL,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,EAAE,QAAQ,EAAE,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC5F,CAAC;AAQD,MAAM,OAAO,sBAAsB;IACxB,EAAE,CAAS;IACH,MAAM,CAAS;IACf,GAAG,CAAoB;IAExC,YAAY,EAAE,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,uBAAuB,KAAoC,EAAE;QACnH,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACvE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,gBAAgB,IAAI,GAAG,CAAC,iBAAiB,IAAI,QAAQ,CAAC;QACpE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAoB;QACrE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAC7G,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACzE,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,4BAA4B;gBACzC,eAAe,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE;gBACtG,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,mBAAmB;gBAChC,eAAe,EAAE,EAAE;gBACnB,SAAS,EAAE,MAAM;gBACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,KAAK,CAAC;YACnE,MAAM,IAAI,UAAU,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAG,KAA2B,CAAC,IAAI,IAAI,4BAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpK,CAAC;IACH,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc;IAChF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAAC,CAAC;IAC3G,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC9H,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACvM,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,YAAY,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3I,IAAI,cAAc,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACnJ,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1I,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,UAAU,IAAI,eAAe,EAAE,CAAC;WACpF,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;WAC9D,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAW,CAAC;IAC/E,IAAI,eAAe,IAAI,cAAc,KAAK,eAAe;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1K,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,IAAI,cAAc,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AAC9I,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;IACxD,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3H,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC1D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/images/service.js

@@ -0,0 +1,224 @@
+import { randomUUID } from "node:crypto";
+import path from "node:path";
+import { HitchError, atomicWriteJSON, ensureDir, readJSON, sha256JSON, statePaths, withFileLock } from "../foundation/index.js";
+import { resolveBuildContext } from "./context.js";
+import { environmentImageIdentity, parseEnvironmentBuildRecord, parseEnvironmentImageManifest } from "./manifest.js";
+export class EnvironmentImageService {
+    root;
+    builder;
+    acquireBuildSlot;
+    onEvent;
+    active = new Map();
+    constructor({ root, builder, acquireBuildSlot, onEvent = () => { } }) {
+        if (!root || !builder.id)
+            throw new TypeError("environment image service identity is invalid");
+        this.root = root;
+        this.builder = builder;
+        this.acquireBuildSlot = acquireBuildSlot;
+        this.onEvent = onEvent;
+    }
+    async build(input) {
+        const resolved = await resolveInput(input);
+        const buildId = buildIdentity(resolved.cacheKey);
+        this.emit({ type: "build.queued", build_id: buildId, cache_key: resolved.cacheKey, task_id: input.taskId });
+        const current = this.active.get(resolved.cacheKey);
+        if (current) {
+            const waitStartedAt = Date.now();
+            return current.then((result) => {
+                this.emit({ type: "build.wait", build_id: buildId, cache_key: resolved.cacheKey, duration_ms: Date.now() - waitStartedAt });
+                return result;
+            });
+        }
+        const operation = this.buildLocked(resolved, input.signal).finally(() => this.active.delete(resolved.cacheKey));
+        this.active.set(resolved.cacheKey, operation);
+        return operation;
+    }
+    async buildLocked(input, signal) {
+        const paths = statePaths(this.root);
+        const lockRequestedAt = Date.now();
+        return withFileLock(paths.buildLocks, input.cacheKey, async () => {
+            const lockWaitMs = Date.now() - lockRequestedAt;
+            if (lockWaitMs > 0)
+                this.emit({ type: "build.wait", build_id: buildIdentity(input.cacheKey), cache_key: input.cacheKey, duration_ms: lockWaitMs });
+            const cached = await this.cached(input.cacheKey);
+            if (cached && await this.builder.probe(cached.output.reference, cached.output.manifest_digest, cached.platform, cached.output.config_digest)) {
+                this.emit({ type: "build.cache_hit", build_id: buildIdentity(input.cacheKey), cache_key: input.cacheKey, image_id: cached.image_id });
+                return { manifest: cached, cacheHit: true };
+            }
+            const now = new Date().toISOString();
+            const started = Date.now();
+            const ownerId = randomUUID();
+            const recordBase = {
+                schema_version: "1",
+                build_id: buildIdentity(input.cacheKey),
+                cache_key: input.cacheKey,
+                owner_id: ownerId,
+                builder_id: this.builder.id,
+                started_at: now,
+            };
+            await this.writeRecord(parseEnvironmentBuildRecord({ ...recordBase, state: "running" }));
+            this.emit({ type: "build.started", build_id: recordBase.build_id, cache_key: input.cacheKey });
+            let slot;
+            try {
+                slot = await this.acquireBuildSlot?.(signal);
+                const output = await this.builder.build({
+                    contextDirectory: input.context.context_directory,
+                    dockerfile: input.context.dockerfile,
+                    platform: input.platform,
+                    ...(input.target ? { target: input.target } : {}),
+                    buildArgs: input.buildArgs,
+                    secretNames: input.secretNames,
+                    outputReference: input.outputReference,
+                    cacheKey: input.cacheKey,
+                    cacheReference: input.cacheReference,
+                });
+                if (output.platform !== input.platform || !/^sha256:[a-f0-9]{64}$/.test(output.manifest_digest))
+                    throw new HitchError("BuildKit output identity does not match the image plan", { code: "image_output_mismatch", exitCode: 12 });
+                const withoutIdentity = {
+                    schema_version: "1",
+                    source: input.source,
+                    platform: input.platform,
+                    build: {
+                        builder: "buildkit",
+                        ...(output.buildkit_version ? { buildkit_version: output.buildkit_version } : {}),
+                        builder_id: this.builder.id,
+                        ...(input.frontend ? { frontend: input.frontend } : {}),
+                        ...(input.target ? { target: input.target } : {}),
+                        build_args_sha256: input.buildArgsDigest,
+                        secret_names: input.secretNames,
+                        cache_key: input.cacheKey,
+                    },
+                    output: {
+                        reference: output.reference,
+                        manifest_digest: output.manifest_digest,
+                        ...(output.config_digest ? { config_digest: output.config_digest } : {}),
+                    },
+                    base_images: input.baseImages,
+                };
+                const manifest = parseEnvironmentImageManifest({ ...withoutIdentity, image_id: environmentImageIdentity(withoutIdentity), created_at: new Date().toISOString() });
+                await this.writeManifest(manifest);
+                await this.writeRecord(parseEnvironmentBuildRecord({ ...recordBase, state: "succeeded", image_id: manifest.image_id, completed_at: new Date().toISOString() }));
+                this.emit({ type: "build.completed", build_id: recordBase.build_id, cache_key: input.cacheKey, image_id: manifest.image_id, duration_ms: Date.now() - started });
+                return { manifest, cacheHit: false };
+            }
+            catch (error) {
+                const code = error instanceof HitchError ? error.code : "image_build_failed";
+                await this.writeRecord(parseEnvironmentBuildRecord({
+                    ...recordBase,
+                    state: "failed",
+                    completed_at: new Date().toISOString(),
+                    error: { code, message: "environment image build failed" },
+                }));
+                this.emit({ type: "build.failed", build_id: recordBase.build_id, cache_key: input.cacheKey, code, duration_ms: Date.now() - started });
+                throw new HitchError("environment image build failed", { code, exitCode: error instanceof HitchError ? error.exitCode : 12, cause: error });
+            }
+            finally {
+                slot?.release();
+            }
+        }, { timeoutCode: "image_build_locked", timeoutExitCode: 12, ...(signal ? { signal } : {}) });
+    }
+    async cached(cacheKey) {
+        const record = await readJSON(environmentBuildRecordPath(this.root, cacheKey), null);
+        if (!record)
+            return null;
+        const parsed = parseEnvironmentBuildRecord(record);
+        if (parsed.state !== "succeeded" || !parsed.image_id)
+            return null;
+        const manifest = await readJSON(environmentImageManifestPath(this.root, parsed.image_id), null);
+        return manifest ? parseEnvironmentImageManifest(manifest) : null;
+    }
+    async writeManifest(manifest) {
+        const file = environmentImageManifestPath(this.root, manifest.image_id);
+        await ensureDir(path.dirname(file));
+        await atomicWriteJSON(file, manifest);
+        parseEnvironmentImageManifest(await readJSON(file));
+    }
+    async writeRecord(record) {
+        const file = environmentBuildRecordPath(this.root, record.cache_key);
+        const index = path.join(statePaths(this.root).buildIndexes, `${record.build_id}.json`);
+        await ensureDir(path.dirname(file));
+        await ensureDir(path.dirname(index));
+        const existing = await readJSON(index, null);
+        if (existing && (existing.schema_version !== "1" || existing.build_id !== record.build_id || existing.cache_key !== record.cache_key)) {
+            throw new HitchError("environment build id collision", { code: "build_id_collision", exitCode: 12 });
+        }
+        if (!existing)
+            await atomicWriteJSON(index, { schema_version: "1", build_id: record.build_id, cache_key: record.cache_key });
+        await atomicWriteJSON(file, record);
+    }
+    emit(event) {
+        try {
+            this.onEvent(event);
+        }
+        catch { /* Build observers cannot alter image identity. */ }
+    }
+}
+function buildIdentity(cacheKey) {
+    return `build_${cacheKey.slice("sha256:".length, "sha256:".length + 32)}`;
+}
+async function resolveInput(input) {
+    if (!input.benchmarkId || !input.benchmarkRevision || !input.platform)
+        throw new TypeError("environment image request identity is invalid");
+    const context = await resolveBuildContext(input.contextDirectory, input.dockerfile);
+    const buildArgs = canonicalRecord(input.buildArgs ?? {});
+    const secretNames = canonicalNames(input.secretNames ?? []);
+    if (secretNames.some((name) => name in buildArgs))
+        throw new TypeError("secret image inputs cannot also be build args");
+    const baseImages = canonicalBaseImages(input.baseImages ?? []);
+    const source = {
+        kind: input.sourceKind ?? "build-context",
+        benchmark_id: input.benchmarkId,
+        benchmark_revision: input.benchmarkRevision,
+        ...(input.taskId ? { task_id: input.taskId } : {}),
+        context_digest: context.context_digest,
+        dockerfile_digest: context.dockerfile_digest,
+    };
+    const buildArgsDigest = sha256JSON(buildArgs);
+    const cacheKey = sha256JSON({ source, platform: input.platform, frontend: input.frontend, target: input.target, build_args_sha256: buildArgsDigest, base_images: baseImages, secret_names: secretNames });
+    const suffix = cacheKey.slice("sha256:".length, "sha256:".length + 32);
+    return {
+        context,
+        source,
+        platform: input.platform,
+        ...(input.target ? { target: input.target } : {}),
+        ...(input.frontend ? { frontend: input.frontend } : {}),
+        buildArgs,
+        buildArgsDigest,
+        secretNames,
+        baseImages,
+        cacheKey,
+        outputReference: `hitch-environment:${suffix}`,
+        cacheReference: `hitch-cache:${sha256JSON({ benchmark_id: input.benchmarkId, task_id: input.taskId ?? null, platform: input.platform }).slice("sha256:".length, "sha256:".length + 32)}`,
+    };
+}
+function canonicalRecord(value) {
+    for (const [name, entry] of Object.entries(value))
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || typeof entry !== "string")
+            throw new TypeError("environment image build args are invalid");
+    return Object.fromEntries(Object.entries(value).sort(([left], [right]) => Buffer.compare(Buffer.from(left), Buffer.from(right))));
+}
+function canonicalNames(value) {
+    if (value.some((name) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)))
+        throw new TypeError("environment image secret names are invalid");
+    return [...new Set(value)].sort((left, right) => Buffer.compare(Buffer.from(left), Buffer.from(right)));
+}
+function canonicalBaseImages(value) {
+    for (const entry of value)
+        if (!entry.reference || !/^sha256:[a-f0-9]{64}$/.test(entry.digest))
+            throw new TypeError("environment image base identity is invalid");
+    if (new Set(value.map((entry) => entry.reference)).size !== value.length)
+        throw new TypeError("environment image base references are duplicated");
+    return [...value].sort((left, right) => Buffer.compare(Buffer.from(left.reference), Buffer.from(right.reference)));
+}
+export function environmentImageManifestPath(root, imageId) {
+    return path.join(statePaths(root).environmentImages, imageId.slice("sha256:".length), "manifest.json");
+}
+export async function loadEnvironmentImageManifest(root, imageId) {
+    if (!root || !/^sha256:[a-f0-9]{64}$/.test(imageId))
+        throw new TypeError("environment image identity is invalid");
+    return parseEnvironmentImageManifest(await readJSON(environmentImageManifestPath(root, imageId)));
+}
+export function environmentBuildRecordPath(root, cacheKey) {
+    return path.join(statePaths(root).buildRecords, cacheKey.slice("sha256:".length), "record.json");
+}
+//# sourceMappingURL=service.js.map

package/dist/src/images/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/images/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAiDrH,MAAM,OAAO,uBAAuB;IACjB,IAAI,CAAS;IACb,OAAO,CAA0B;IACjC,gBAAgB,CAAuE;IACvF,OAAO,CAA2C;IAClD,MAAM,GAAG,IAAI,GAAG,EAAgF,CAAC;IAElH,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,EAAkC;QACjG,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiC;QAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;gBAC5H,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAoB,EAAE,MAAoB;QAClE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,OAAO,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;YAChD,IAAI,UAAU,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;YACnJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,MAAM,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC7I,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtI,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG;gBACjB,cAAc,EAAE,GAAY;gBAC5B,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACvC,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACzB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC3B,UAAU,EAAE,GAAG;aAChB,CAAC;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/F,IAAI,IAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBACtC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;oBACjD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;oBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;oBAAE,MAAM,IAAI,UAAU,CAAC,wDAAwD,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjO,MAAM,eAAe,GAAgE;oBACnF,cAAc,EAAE,GAAG;oBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE;wBACL,OAAO,EAAE,UAAU;wBACnB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjF,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;wBAC3B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,iBAAiB,EAAE,KAAK,CAAC,eAAe;wBACxC,YAAY,EAAE,KAAK,CAAC,WAAW;wBAC/B,SAAS,EAAE,KAAK,CAAC,QAAQ;qBAC1B;oBACD,MAAM,EAAE;wBACN,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;wBACvC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzE;oBACD,WAAW,EAAE,KAAK,CAAC,UAAU;iBAC9B,CAAC;gBACF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,wBAAwB,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAClK,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACnC,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACjK,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC;oBACjD,GAAG,UAAU;oBACb,KAAK,EAAE,QAAQ;oBACf,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE;iBAC3D,CAAC,CAAC,CAAC;gBACJ,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACvI,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9I,CAAC;oBAAS,CAAC;gBAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,CAAC;QAChC,CAAC,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAiB,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAiB,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAChH,OAAO,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,QAAoC;QAC9D,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,6BAA6B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAgC;QACxD,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,QAAQ,OAAO,CAAC,CAAC;QACvF,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAiC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7E,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,GAAG,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACtI,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7H,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,IAAI,CAAC,KAA8B;QACzC,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC3F,CAAC;CACF;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,SAAS,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;AAC5E,CAAC;AAiBD,KAAK,UAAU,YAAY,CAAC,KAAiC;IAC3D,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IAC5I,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACxH,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAyC;QACnD,IAAI,EAAE,KAAK,CAAC,UAAU,IAAI,eAAe;QACzC,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;QAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1M,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvE,OAAO;QACL,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS;QACT,eAAe;QACf,WAAW;QACX,UAAU;QACV,QAAQ;QACR,eAAe,EAAE,qBAAqB,MAAM,EAAE;QAC9C,cAAc,EAAE,eAAe,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE;KACzL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAA6B;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAC5L,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACpI,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpI,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAmD;IAC9E,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAClK,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,OAAe;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,OAAe;IAC9E,IAAI,CAAC,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClH,OAAO,6BAA6B,CAAC,MAAM,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,QAAgB;IACvE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;AACnG,CAAC"}