agent-hitch 0.2.6 → 0.2.8

package/dist/src/evals/harbor-bridge-error.js

@@ -1,5 +1,7 @@
 import { lstat, readFile } from "node:fs/promises";
 import path from "node:path";
+import { redactCredentialText } from "../foundation/index.js";
+import { parseFailureClassification } from "./failure-classifier.js";
 const HITCH_BRIDGE_ERROR_MAX_BYTES = 64 * 1024;
 const HITCH_BRIDGE_ERROR_MESSAGE_MAX_BYTES = 2048;
 const HITCH_BRIDGE_ERROR_CODES = new Set([
@@ -17,7 +19,7 @@ const HITCH_BRIDGE_ERROR_CODES = new Set([
     "hitch_result_artifact_copy_failed",
 ]);
 /** Read a Harbor bridge diagnostic as untrusted, bounded evidence. */
-export async function readHarborBridgeError(trialDirectory) {
+export async function readHarborBridgeError(trialDirectory, credentialValues = []) {
     const source = path.join(trialDirectory, "agent", "hitch-bridge-error.json");
     try {
         const info = await lstat(source);
@@ -27,7 +29,7 @@ export async function readHarborBridgeError(trialDirectory) {
         const value = JSON.parse(raw);
         if (!value || typeof value !== "object" || Array.isArray(value))
             return null;
-        const diagnostic = value;
+        const diagnostic = sanitizeEvidence(value, credentialValues);
         if (diagnostic.schema_version !== "1")
             return null;
         if (typeof diagnostic.code !== "string" || !HITCH_BRIDGE_ERROR_CODES.has(diagnostic.code))
@@ -36,12 +38,65 @@ export async function readHarborBridgeError(trialDirectory) {
             return null;
         if (Buffer.byteLength(diagnostic.message, "utf8") > HITCH_BRIDGE_ERROR_MESSAGE_MAX_BYTES)
             return null;
-        return { code: diagnostic.code, message: bridgeErrorMessage(diagnostic), raw };
+        const failureClassification = bridgeFailureClassification(diagnostic);
+        return {
+            code: diagnostic.code, message: bridgeErrorMessage(diagnostic), raw: `${JSON.stringify(diagnostic)}\n`,
+            ...(failureClassification ? { failureClassification } : {}),
+        };
     }
     catch {
         return null;
     }
 }
+function bridgeFailureClassification(diagnostic) {
+    if (diagnostic.failure_classification !== undefined) {
+        try {
+            return parseFailureClassification(diagnostic.failure_classification);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    if (diagnostic.code !== "hitch_process_failed")
+        return undefined;
+    const text = JSON.stringify(diagnostic);
+    if (/(?:insufficient|exhausted|depleted).{0,40}(?:balance|quota|credit)|(?:balance|quota|credit).{0,40}(?:insufficient|exhausted|depleted)|billing.{0,30}(?:limit|hard)/i.test(text)) {
+        return providerClassification("provider_quota_exhausted", "never", true);
+    }
+    if (/(?:invalid|missing|expired|revoked).{0,30}(?:api[_ -]?key|credential|token)|(?:authentication|authorization)\s+(?:failed|required)|\bunauthorized\b|(?:status|http)\s*401\b/i.test(text)) {
+        return providerClassification("provider_auth_failed", "operator-required", "unknown");
+    }
+    if (/(?:model|parameter|request).{0,40}(?:not found|does not exist|unsupported|invalid)|(?:unknown|invalid)\s+model/i.test(text)) {
+        return providerClassification("provider_configuration_invalid", "never", "unknown");
+    }
+    if (/\brate[ _-]?limit(?:ed|ing)?\b|too many requests|(?:status|http)\s*429\b/i.test(text)) {
+        return providerClassification("provider_rate_limited", "transient", true);
+    }
+    if (/\b(?:econnreset|etimedout|eai_again|socket hang up|connection reset|temporary network|network unreachable)\b/i.test(text)) {
+        return providerClassification("provider_transport_transient", "transient", true);
+    }
+    if (/agent run timed out|"status":"timed_out"|"code":"timed_out"/i.test(text)) {
+        return { schema_version: "1", phase: "agent", code: "agent_timed_out", candidate_started: true, retryability: "never", source: "bridge-evidence" };
+    }
+    return undefined;
+}
+function providerClassification(code, retryability, candidateStarted) {
+    return { schema_version: "1", phase: "provider", code, candidate_started: candidateStarted, retryability, source: "bridge-evidence" };
+}
+function sanitizeEvidence(value, credentialValues, key = "") {
+    if (typeof value === "string") {
+        if (/(?:authorization|cookie|api[-_]?key|token|secret|password|credential)/i.test(key))
+            return "[REDACTED]";
+        return redactCredentialText(value, credentialValues).text;
+    }
+    if (Array.isArray(value))
+        return value.map((entry) => sanitizeEvidence(entry, credentialValues));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .map(([name, entry]) => [name, sanitizeEvidence(entry, credentialValues, name)]));
+    }
+    return value;
+}
 function bridgeErrorMessage(diagnostic) {
     const message = diagnostic.message;
     if (!message.includes("no diagnostic output"))

package/dist/src/evals/harbor-bridge-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"harbor-bridge-error.js","sourceRoot":"","sources":["../../../src/evals/harbor-bridge-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAClD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,2BAA2B;IAC3B,6BAA6B;IAC7B,8BAA8B;IAC9B,kCAAkC;IAClC,gCAAgC;IAChC,mCAAmC;CACpC,CAAC,CAAC;AAQH,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,cAAsB;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,UAAU,GAAG,KAAgC,CAAC;QACpD,IAAI,UAAU,CAAC,cAAc,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvG,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,oCAAoC;YAAE,OAAO,IAAI,CAAC;QACtG,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAiB,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACtD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAuB,CAAC;IACpF,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,OAAO,eAAe,CACpB,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EACrD,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,UAAU,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC"}
+{"version":3,"file":"harbor-bridge-error.js","sourceRoot":"","sources":["../../../src/evals/harbor-bridge-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAClD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,2BAA2B;IAC3B,6BAA6B;IAC7B,8BAA8B;IAC9B,kCAAkC;IAClC,gCAAgC;IAChC,mCAAmC;CACpC,CAAC,CAAC;AASH,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,cAAsB,EAAE,mBAAsC,EAAE;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAA4B,CAAC;QACxF,IAAI,UAAU,CAAC,cAAc,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvG,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,oCAAoC;YAAE,OAAO,IAAI,CAAC;QACtG,MAAM,qBAAqB,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QACtE,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI;YACtG,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAmC;IACtE,IAAI,UAAU,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC;YAAC,OAAO,0BAA0B,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC3G,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,sBAAsB;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,qKAAqK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrL,OAAO,sBAAsB,CAAC,0BAA0B,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,8KAA8K,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9L,OAAO,sBAAsB,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,iHAAiH,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjI,OAAO,sBAAsB,CAAC,gCAAgC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,2EAA2E,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,OAAO,sBAAsB,CAAC,uBAAuB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,+GAA+G,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/H,OAAO,sBAAsB,CAAC,8BAA8B,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,8DAA8D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAY,EACZ,YAAqD,EACrD,gBAA8D;IAE9D,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AACxI,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,gBAAmC,EAAE,GAAG,GAAG,EAAE;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,wEAAwE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAC5G,OAAO,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACvE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAiB,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACtD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAuB,CAAC;IACpF,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,OAAO,eAAe,CACpB,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EACrD,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,UAAU,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/src/evals/harbor-node-runtime.js

@@ -0,0 +1,146 @@
+import { randomBytes } from "node:crypto";
+import { chmod, cp, lstat, mkdtemp, rename, rm } from "node:fs/promises";
+import path from "node:path";
+import { artifactDirectoryIntegrity } from "../artifacts/index.js";
+import { HARBOR_NODE_VERSION_WITH_PREFIX } from "../backends/index.js";
+import { HitchError, atomicWriteJSON, digest, ensureDir, fingerprintExecutable, readJSON, runCommand, statePaths, withFileLock } from "../foundation/index.js";
+export const HARBOR_NODE_RUNTIME_RECIPE = "1";
+export const HARBOR_NODE_RUNTIME_DIRECTORY = ".hitch-node-runtime";
+const ARCHIVE = "node-runtime.tar.gz";
+const MANIFEST = "node-runtime.json";
+const MAX_ARCHIVE_BYTES = 128 * 1024 * 1024;
+/** Export once from the pinned Linux builder; trial setup never downloads Node. */
+export async function prepareHarborNodeRuntime(input) {
+    const base = path.join(statePaths(input.root).store, "harbor-artifacts", "node-runtimes");
+    const [artifacts, locks, temporary, refs, invalid] = await Promise.all(["artifacts", "locks", "tmp", "refs", "invalid"].map((name) => ensureDir(path.join(base, name))));
+    const identity = {
+        schema_version: "1",
+        recipe_version: HARBOR_NODE_RUNTIME_RECIPE,
+        node_version: HARBOR_NODE_VERSION_WITH_PREFIX,
+        platform: input.builder.artifactPlatform,
+        libc: "glibc",
+        builder_image_id: input.builder.id,
+    };
+    const key = digest(identity).slice("sha256:".length);
+    const ref = path.join(refs, `${key}.json`);
+    return withFileLock(locks, key, async () => {
+        const previous = await readJSON(ref, null).catch(() => null);
+        if (typeof previous?.runtime_id === "string" && /^sha256:[a-f0-9]{64}$/.test(previous.runtime_id)) {
+            const directory = path.join(artifacts, previous.runtime_id.slice("sha256:".length));
+            try {
+                const manifest = await verifyHarborNodeRuntime(directory, identity);
+                if (manifest.runtime_id !== previous.runtime_id)
+                    throw runtimeError("cache reference identity mismatch");
+                return { directory, manifest };
+            }
+            catch {
+                if (await lstat(directory).catch(() => null)) {
+                    await rename(directory, path.join(invalid, `${path.basename(directory)}-${randomBytes(6).toString("hex")}`));
+                }
+            }
+        }
+        const staging = await mkdtemp(path.join(temporary, "export-"));
+        const container = `hitch-node-runtime-${process.pid}-${randomBytes(6).toString("hex")}`;
+        const options = {
+            env: input.env, ...(input.signal ? { signal: input.signal } : {}),
+            timeoutMs: 180_000, failureCode: "harbor_node_runtime_prepare_failed", failureExitCode: 12,
+        };
+        try {
+            await runCommand(input.docker, [
+                "run", "--name", container, "--network", "none", "--platform", input.builder.dockerPlatform,
+                // Never resolve a mutable tag after the builder's image inspection.
+                input.builder.id, "sh", "-ceu", [
+                    `test "$(node -p process.version)" = "${identity.node_version}"`,
+                    `test "$(node -p 'process.platform + \"-\" + process.arch')" = "${identity.platform}"`,
+                    "getconf GNU_LIBC_VERSION",
+                    "test -x /usr/local/bin/node",
+                    // Keep npm/npx available as with the former nvm install. Do not ship
+                    // the builder's pnpm, headers, or system libraries into task images.
+                    `tar --sort=name --mtime=@0 --owner=0 --group=0 --numeric-owner -czf /tmp/${ARCHIVE} -C /usr/local bin/node bin/npm bin/npx lib/node_modules/npm`,
+                ].join("\n"),
+            ], options);
+            await runCommand(input.docker, ["cp", `${container}:/tmp/${ARCHIVE}`, path.join(staging, ARCHIVE)], options);
+            const archive = path.join(staging, ARCHIVE);
+            const info = await lstat(archive);
+            if (!info.isFile() || info.size <= 0 || info.size > MAX_ARCHIVE_BYTES)
+                throw runtimeError("exported archive is invalid");
+            const payload = { ...identity, archive_sha256: await fingerprintExecutable(archive), archive_bytes: info.size };
+            const manifest = { ...payload, runtime_id: digest(payload) };
+            await atomicWriteJSON(path.join(staging, MANIFEST), manifest);
+            await verifyHarborNodeRuntime(staging, identity);
+            const destination = path.join(artifacts, manifest.runtime_id.slice("sha256:".length));
+            if (await lstat(destination).catch(() => null)) {
+                try {
+                    await verifyHarborNodeRuntime(destination, manifest);
+                }
+                catch {
+                    await rename(destination, path.join(invalid, `${path.basename(destination)}-${randomBytes(6).toString("hex")}`));
+                }
+            }
+            if (!await lstat(destination).catch(() => null))
+                await rename(staging, destination);
+            await atomicWriteJSON(ref, { runtime_id: manifest.runtime_id });
+            return { directory: destination, manifest };
+        }
+        finally {
+            await runCommand(input.docker, ["rm", "--force", container], { env: input.env, timeoutMs: 30_000 }).catch(() => { });
+            await rm(staging, { recursive: true, force: true });
+        }
+    }, {
+        timeoutCode: "harbor_node_runtime_locked", timeoutExitCode: 12,
+        ...(input.signal ? { signal: input.signal } : {}),
+    });
+}
+export async function verifyHarborNodeRuntime(directory, expected) {
+    const info = await lstat(directory);
+    const manifestInfo = await lstat(path.join(directory, MANIFEST));
+    if (!info.isDirectory() || info.isSymbolicLink() || !manifestInfo.isFile() || manifestInfo.size > 16_384) {
+        throw runtimeError("cache entry is not a regular runtime bundle");
+    }
+    const manifest = await readJSON(path.join(directory, MANIFEST));
+    const { runtime_id, ...payload } = manifest;
+    const archive = path.join(directory, ARCHIVE);
+    const archiveInfo = await lstat(archive);
+    if (Object.keys(manifest).sort().join(",") !== "archive_bytes,archive_sha256,builder_image_id,libc,node_version,platform,recipe_version,runtime_id,schema_version"
+        || manifest.schema_version !== "1" || manifest.recipe_version !== HARBOR_NODE_RUNTIME_RECIPE
+        || manifest.node_version !== HARBOR_NODE_VERSION_WITH_PREFIX || manifest.libc !== "glibc"
+        || !/^linux-(x64|arm64)$/.test(manifest.platform)
+        || !/^sha256:[a-f0-9]{64}$/.test(manifest.builder_image_id)
+        || !archiveInfo.isFile() || archiveInfo.size <= 0 || archiveInfo.size > MAX_ARCHIVE_BYTES
+        || archiveInfo.size !== manifest.archive_bytes || await fingerprintExecutable(archive) !== manifest.archive_sha256
+        || digest(payload) !== runtime_id
+        || Object.entries(expected).some(([key, value]) => manifest[key] !== value)) {
+        throw runtimeError("cache identity or archive checksum mismatch");
+    }
+    return manifest;
+}
+/** Compose in staging, then seal a NEW identity; never mutate a published artifact. */
+export async function attachHarborNodeRuntime(directory, manifest, runtime) {
+    const destination = path.join(directory, HARBOR_NODE_RUNTIME_DIRECTORY);
+    if (await lstat(destination).catch(() => null))
+        throw runtimeError("harness uses the reserved offline runtime directory");
+    await cp(runtime.directory, destination, { recursive: true, errorOnExist: true, force: false });
+    await verifyHarborNodeRuntime(destination, runtime.manifest);
+    // mkdtemp cache roots are private. This public runtime payload must remain
+    // readable when a task runs Hitch as a non-root user; seal these modes too.
+    await chmod(destination, 0o755);
+    await chmod(path.join(destination, MANIFEST), 0o644);
+    await chmod(path.join(destination, ARCHIVE), 0o644);
+    const integrity = await artifactDirectoryIntegrity(directory);
+    const artifactId = digest({
+        kind: "harbor-offline-node-artifact-v1", harness_artifact_id: manifest.artifact_id,
+        node_runtime_id: runtime.manifest.runtime_id, artifact_integrity: integrity,
+    });
+    const composed = {
+        ...manifest, artifact_id: artifactId, artifact_integrity: integrity,
+        toolchain: { ...manifest.toolchain, node_runtime: runtime.manifest.runtime_id },
+    };
+    await atomicWriteJSON(path.join(directory, "artifact.json"), composed);
+    const renamed = path.join(path.dirname(directory), artifactId.slice("sha256:".length));
+    await rename(directory, renamed);
+    return { directory: renamed, manifest: composed };
+}
+function runtimeError(message) {
+    return new HitchError(`Harbor offline Node runtime: ${message}`, { code: "harbor_node_runtime_invalid", exitCode: 12 });
+}
+//# sourceMappingURL=harbor-node-runtime.js.map

package/dist/src/evals/harbor-node-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harbor-node-runtime.js","sourceRoot":"","sources":["../../../src/evals/harbor-node-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG/J,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AACnE,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AACrC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAmB5C,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAC1F,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACpE,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CACrD,CAAC;IAC9C,MAAM,QAAQ,GAAG;QACf,cAAc,EAAE,GAAY;QAC5B,cAAc,EAAE,0BAA0B;QAC1C,YAAY,EAAE,+BAA+B;QAC7C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB;QACxC,IAAI,EAAE,OAAgB;QACtB,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;KACnC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IAC3C,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAkC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9F,IAAI,OAAO,QAAQ,EAAE,UAAU,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACpE,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;oBAAE,MAAM,YAAY,CAAC,mCAAmC,CAAC,CAAC;gBACzG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/G,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,sBAAsB,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,oCAAoC,EAAE,eAAe,EAAE,EAAE;SAC3F,CAAC;QACF,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;gBAC7B,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;gBAC3F,oEAAoE;gBACpE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;oBAC9B,wCAAwC,QAAQ,CAAC,YAAY,GAAG;oBAChE,kEAAkE,QAAQ,CAAC,QAAQ,GAAG;oBACtF,0BAA0B;oBAC1B,6BAA6B;oBAC7B,qEAAqE;oBACrE,qEAAqE;oBACrE,4EAA4E,OAAO,8DAA8D;iBAClJ,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,EAAE,OAAO,CAAC,CAAC;YACZ,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,SAAS,SAAS,OAAO,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB;gBAAE,MAAM,YAAY,CAAC,6BAA6B,CAAC,CAAC;YACzH,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAChH,MAAM,QAAQ,GAA8B,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC9D,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBAAC,MAAM,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAC7D,MAAM,CAAC;oBAAC,MAAM,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;YAC7H,CAAC;YACD,IAAI,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACpF,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpH,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EAAE;QACD,WAAW,EAAE,4BAA4B,EAAE,eAAe,EAAE,EAAE;QAC9D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,QAA4C;IAE5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;QACzG,MAAM,YAAY,CAAC,6CAA6C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAA4B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3F,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,mHAAmH;WAC7J,QAAQ,CAAC,cAAc,KAAK,GAAG,IAAI,QAAQ,CAAC,cAAc,KAAK,0BAA0B;WACzF,QAAQ,CAAC,YAAY,KAAK,+BAA+B,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;WACtF,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC9C,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;WACxD,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,GAAG,iBAAiB;WACtF,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC,aAAa,IAAI,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,cAAc;WAC/G,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU;WAC9B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAsC,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACjH,MAAM,YAAY,CAAC,6CAA6C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EAAE,QAA0B,EAAE,OAAoB;IAEnE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,qDAAqD,CAAC,CAAC;IAC1H,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,MAAM,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC;QACxB,IAAI,EAAE,iCAAiC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,WAAW;QAClF,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,SAAS;KAC5E,CAAC,CAAC;IACH,MAAM,QAAQ,GAAqB;QACjC,GAAG,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS;QACnE,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE;KAChF,CAAC;IACF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,UAAU,CAAC,gCAAgC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1H,CAAC"}

package/dist/src/evals/harbor-phase-timings.js

@@ -0,0 +1,60 @@
+import { lstat, readFile } from "node:fs/promises";
+import path from "node:path";
+const MAX_TIMING_BYTES = 16 * 1024;
+const TRIAL_NAME = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,255}$/;
+export async function harborPhaseTimingEvents(jobDirectory, rawResult) {
+    const trials = Array.isArray(rawResult?.trial_results) ? rawResult.trial_results : [];
+    const events = [];
+    for (const value of trials) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            continue;
+        const trial = value;
+        if (typeof trial.trial_name !== "string" || !TRIAL_NAME.test(trial.trial_name) || trial.trial_name === "." || trial.trial_name === "..")
+            continue;
+        const identity = { trial_id: trial.trial_name, ...(typeof trial.task_name === "string" ? { task_id: trial.task_name } : {}) };
+        for (const source of [
+            { directory: "agent", phases: new Set(["setup", "agent"]) },
+            { directory: "verifier", phases: new Set(["verifier"]) },
+        ]) {
+            const file = path.join(jobDirectory, trial.trial_name, source.directory, "hitch-phase-timings.json");
+            try {
+                const info = await lstat(file);
+                if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > MAX_TIMING_BYTES)
+                    throw new TypeError("unsafe timing evidence");
+                const record = parseTiming(JSON.parse(await readFile(file, "utf8")), source.phases);
+                for (const [phase, timing] of Object.entries(record))
+                    events.push({ type: `eval.${phase}.completed`, ...identity, duration_ms: timing.duration_ms });
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    continue;
+                events.push({ type: "eval.phase-timing.invalid", ...identity, phase_source: source.directory, code: "phase_timing_invalid" });
+            }
+        }
+    }
+    return events;
+}
+function parseTiming(value, allowed) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("timing evidence must be an object");
+    const record = value;
+    if (Object.keys(record).some((key) => key !== "schema_version" && key !== "phases") || record.schema_version !== "1"
+        || !record.phases || typeof record.phases !== "object" || Array.isArray(record.phases))
+        throw new TypeError("timing evidence envelope is invalid");
+    const phases = record.phases;
+    if (Object.keys(phases).some((phase) => !allowed.has(phase)))
+        throw new TypeError("timing evidence phase is invalid");
+    const result = {};
+    for (const [phase, value] of Object.entries(phases)) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new TypeError("phase timing is invalid");
+        const timing = value;
+        if (Object.keys(timing).some((key) => key !== "duration_ms" && key !== "completed_at")
+            || !Number.isSafeInteger(timing.duration_ms) || timing.duration_ms < 0 || timing.duration_ms > 7 * 24 * 60 * 60 * 1_000
+            || typeof timing.completed_at !== "string" || !Number.isFinite(Date.parse(timing.completed_at)))
+            throw new TypeError("phase timing fields are invalid");
+        result[phase] = { duration_ms: timing.duration_ms };
+    }
+    return result;
+}
+//# sourceMappingURL=harbor-phase-timings.js.map

package/dist/src/evals/harbor-phase-timings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harbor-phase-timings.js","sourceRoot":"","sources":["../../../src/evals/harbor-phase-timings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,UAAU,GAAG,oCAAoC,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,YAAoB,EAAE,SAAyC;IAC3G,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,SAAS;QAClJ,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9H,KAAK,MAAM,MAAM,IAAI;YACnB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE;YAC3D,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE;SACzD,EAAE,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YACrG,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB;oBAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;gBAC/I,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,KAAK,YAAY,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACvJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACjE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAAoB;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG;WAC/G,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiC,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACtH,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAChH,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,cAAc,CAAC;eACjF,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,IAAK,MAAM,CAAC,WAAsB,GAAG,CAAC,IAAK,MAAM,CAAC,WAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;eAC5I,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC1J,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAqB,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/evals/index.js

@@ -1,7 +1,45 @@
 export { DEFAULT_EVAL_SETUP_TIMEOUT_MS, DEFAULT_EVAL_TIMEOUT_MS, DEFAULT_INFRASTRUCTURE_RETRIES, DEFAULT_INFRASTRUCTURE_RETRY_BACKOFF_MS, newEvalId, resolveBenchmarkReference, resolveLocalDatasetTaskIds, validateEvalId, validateEvalRequest } from "./request.js";
+export { buildBenchmarkAdapterManifest, loadBenchmarkAdapterManifest, scoreWithinRange } from "./benchmark-adapter-manifest.js";
+export { EvalEventSink, MAX_EVAL_EVENT_BYTES } from "./events.js";
+export { buildEvalExecutionPlan, parseEvalExecutionPlan, DEFAULT_EVAL_TRIAL_RESOURCES } from "./execution-plan.js";
+export { workSchedulingPriority } from "./planned-execution-support.js";
+export { planTaskSchedulingHints, recordTaskDuration, schedulingHintsFromPlan } from "./duration-estimator.js";
+export { classifyTrialFailure, parseFailureClassification, physicalRetryAllowed } from "./failure-classifier.js";
+export { ensurePhysicalRetryDecision, ensureTerminalRetryDecision, parseEvalRetryState, readEvalRetryState, resolveRetryWork, transitionRetryDecision } from "./retry-state.js";
+export { runtimeResourcesForTask } from "./execution-plan-resources.js";
+export { deriveTaskResourceRequirement, resolveLocalTaskPlanningInputs, resolveLocalTaskResourceRequirements, HARBOR_EGRESS_SIDECAR_RESOURCES } from "./task-resources.js";
+export { parseExecutionEvidence } from "./execution-evidence.js";
+export { parseDockerMemoryBytes, startDockerResourceObserver } from "./docker-resource-observer.js";
+export { parseDockerEngineContainerStats, readDockerEngineContainerStats } from "./docker-engine-stats.js";
+export { DEFAULT_EXECUTION_LEASE_HEARTBEAT_MS, DEFAULT_EXECUTION_LEASE_TTL_MS, acceptExecutionLease, createExecutionLease, heartbeatExecutionLease, markExecutionLeaseLost, markExecutionLeaseRunning, parseExecutionLease, readExecutionLeases, recoverExecutionLeases, reissueExecutionLease, releaseExecutionLease } from "./execution-leases.js";
 export { runEval } from "./service.js";
-export { inspectEval, listEvals } from "./records.js";
+export { harborArtifactDirectory, loadHarborArtifact, prepareHarborArtifact } from "./harbor-artifact-builder.js";
+export { DEFAULT_HARBOR_ARTIFACT_BUILDER_BASE_IMAGE } from "./harbor-artifact-builder-image.js";
+export { HARBOR_NODE_VERSION, HARBOR_NODE_VERSION_WITH_PREFIX, HARBOR_PNPM_VERSION } from "../backends/index.js";
+export { startEvalModelCaptureRuntime } from "./model-capture-runtime.js";
+export { recoverLocalDockerEvalLeases } from "./recovery.js";
+export { inspectEval, isControlPlaneEval, listEvals } from "./records.js";
 export { importEvalTrialRun, importEvalTrialRuns, validateEvalTrialReferences } from "./trial-import.js";
-export { createEvalProgress, evalTrialKey, mergeEvalProgressTrial, readEvalProgress, replaceInvalidEvalProgressTrial, writeEvalProgress } from "./progress.js";
+export { captureVerifierDiagnostics, DEFAULT_VERIFIER_DIAGNOSTIC_MAX_BYTES, MAX_VERIFIER_DIAGNOSTIC_MAX_BYTES, persistTrialVerifierDiagnostics, VERIFIER_ARTIFACT_NAMES, VERIFIER_DIAGNOSTICS_INDEX_REF } from "./verifier-artifacts.js";
+export { captureVerifierScoreEvidence } from "./verifier-score-artifacts.js";
+export { MAX_VERIFIER_FEEDBACK_BYTES, MAX_VERIFIER_PROCESS_BYTES } from "../domain/index.js";
+export { createEvalProgress, evalTrialKey, mergeEvalProgressTrial, parseEvalTrialRef, readEvalProgress, replaceInvalidEvalProgressTrial, writeEvalProgress } from "./progress.js";
 export { rerunEval, selectRerunTasks, selectRerunTrialSlots } from "./rerun.js";
+export { EVAL_RERUN_TYPES, assertEvalRerunTypeSupported, evalRerunSemantics, parseEvalRerunType } from "./rerun-types.js";
+export { LocalDockerExecutionProvider, adoptLocalDockerLeaseEpoch, parseExecutionProviderStatus, parseLocalProviderExecutionRecord, readLocalDockerProcessRecord, readLocalDockerProcessRecordByLease, reconcileLocalDockerProcess, recordLocalDockerProcessExit, recordLocalDockerProcessStart, releaseLocalDockerProcessRecord, waitForLocalDockerProcessTerminal } from "./local-docker-provider.js";
+export { loadTrialEnvironmentImages } from "./trial-environment-evidence.js";
+export { resolvedImageMapping } from "./environment-image-planning.js";
+export { readCandidateIneligibleDiagnostic } from "./verifier-eligibility.js";
+export { retryBackoffMs } from "./retry-backoff.js";
+export { physicalRetryWorkItem, physicalRetryWorkItemForTriggerIds } from "./physical-retry-work.js";
+export { ensureEvolutionBaseline, evolutionBaselineFingerprint, parseEvolutionBaseline, readEvolutionBaseline } from "./evolution-baseline.js";
+export { replaySchedulerTrace } from "./scheduler-trace-replay.js";
+export { recoverPromotedEvalTrialPublications } from "./trial-publication-recovery.js";
+export { parseEvalTrialPublication } from "./trial-publication.js";
+export { runRemoteInfrastructureRetries } from "./remote-infrastructure-retry.js";
+export { loadEvalResumeState } from "./resume-state.js";
+export { DOCKER_OWNERSHIP_LABELS, dockerOwnershipLabelMap, dockerResourceOwnership, validateDockerResourceOwnership } from "./docker-ownership.js";
+export { reapOwnedDockerResources } from "./docker-reaper.js";
+export { compileBenchmark, exportStandardBenchmarkDataset, runBenchmarkEval, STANDARD_BENCHMARK_COMPILER } from "./benchmark-run.js";
+export { prepareVerifierEnvironmentRuntime } from "./verifier-runtime.js";
 //# sourceMappingURL=index.js.map

package/dist/src/evals/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/evals/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,uCAAuC,EAAE,SAAS,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGtQ,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEzG,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC/J,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/evals/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,uCAAuC,EAAE,SAAS,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACtQ,OAAO,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAIhI,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnH,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC/G,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEjH,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhL,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,oCAAoC,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAE3K,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAI3G,OAAO,EAAE,oCAAoC,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAErV,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAClH,OAAO,EAAE,0CAA0C,EAAE,MAAM,oCAAoC,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEjH,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEzG,OAAO,EAAE,0BAA0B,EAAE,qCAAqC,EAAE,iCAAiC,EAAE,+BAA+B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzO,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAE7F,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClL,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE1H,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAGxY,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE/I,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AAEvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACnJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACrI,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC"}