agent-hitch 0.2.9 → 0.2.11

package/dist/src/workers/remote-harbor-ownership.js

@@ -0,0 +1,266 @@
+import { readFile, realpath } from "node:fs/promises";
+import path from "node:path";
+import { hostname } from "node:os";
+import { parseRemoteExecutionAdmission, parseRemoteExecutionOwnership, remoteExecutionBindingDigest } from "../control-plane/index.js";
+import { atomicWriteJSON, captureProcessIdentity, delay, ensureDir, HitchError, hitchRootId, inspectProcessIdentity, readJSON, runCommand, sha256JSON, statePaths, validateProcessIdentity, withFileLock } from "../foundation/index.js";
+import { DOCKER_OWNERSHIP_LABELS, parseExecutionLease, parseRemoteWorkerHostIdentity, reapOwnedDockerResources, releaseExecutionLease } from "../evals/index.js";
+import { observeRemoteWorkerHost } from "./remote-worker-host.js";
+/** Written before HTTP acceptance. No backend may start without this record. */
+export async function prepareRemoteHarborOffer(options, offer) {
+    return locked(options, offer, async (file) => {
+        const old = await readOwner(file, offer, false);
+        if (old) {
+            await assertEnvironment(options, old);
+            await assertOwner(old);
+            if (old.phase !== "prepared")
+                throw ambiguous("remote work has already started; it cannot execute twice");
+            return publicOwnership(old, offer);
+        }
+        const owner = await captureProcessIdentity(process.pid);
+        if (!owner)
+            throw ambiguous("worker process identity is unavailable");
+        const root = await realpath(await ensureDir(options.root));
+        const host = await observeRemoteWorkerHost();
+        const record = { schema_version: "2", binding_digest: binding(offer), root, root_id: hitchRootId(options.root),
+            host_identity: host, boot_digest: sha256JSON(host), docker_engine_id: await engineId(options), owner, phase: "prepared" };
+        // Lease and journal precede acceptance; a missing journal is never a release proof.
+        const now = new Date().toISOString();
+        await atomicWriteJSON(leaseFile(options, offer), { ...offer.lease, state: "running",
+            accepted_at: offer.lease.accepted_at ?? now, heartbeat_at: now, resource_epochs: offer.lease.resource_epochs ?? [offer.lease.epoch] });
+        await atomicWriteJSON(file, record);
+        return publicOwnership(record, offer);
+    });
+}
+export async function beginRemoteHarborOffer(options, offer) {
+    await mutateOwned(options, offer, record => {
+        if (record.phase !== "prepared")
+            throw ambiguous("remote work has already started; it cannot execute twice");
+        return { ...record, phase: "executing" };
+    });
+}
+export async function settleRemoteHarborOffer(options, offer) {
+    await mutateOwned(options, offer, record => {
+        if (record.phase !== "executing")
+            throw ambiguous("remote work settlement has no active execution");
+        return { ...record, phase: "settled" };
+    });
+}
+export function remoteHarborProcessHooks(options, offer, authorize) {
+    return {
+        recoverableProcess: true,
+        onProcessStarted: async (pid) => {
+            // The supervisor waits for this durable write before launching Harbor.
+            const identity = await captureProcessIdentity(pid);
+            if (!identity)
+                throw ambiguous("Harbor supervisor process identity is unavailable");
+            await mutateOwned(options, offer, record => {
+                if (record.phase !== "executing" || record.process)
+                    throw ambiguous("remote work already has a Harbor supervisor");
+                return { ...record, process: identity };
+            });
+            await authorize?.(identity);
+        },
+    };
+}
+/** Cleanup only, including after SIGKILL. Never adopts or repeats candidate execution. */
+export async function cleanRemoteHarborOffer(options, offer) {
+    await cleanOwnedExecution(options, offer);
+}
+export async function cleanPreviousRemoteHarborGeneration(options, offer, admission) {
+    return (await cleanOwnedExecution(options, offer, parseRemoteExecutionAdmission(admission, offer)));
+}
+async function cleanOwnedExecution(options, offer, admission) {
+    return locked(options, offer, async (file) => {
+        let record = (await readOwner(file, offer));
+        const host = await assertEnvironment(options, record, true);
+        const reboot = host !== undefined && host.boot_id !== record.host_identity.boot_id;
+        if (admission) {
+            if (sha256JSON(publicOwnership(record, offer)) !== admission.ownership_digest)
+                throw ambiguous("local ownership differs from the authenticated original execution");
+            if (sha256JSON(record.process ?? null) !== sha256JSON(admission.execution_process)) {
+                // An unacknowledged supervisor may exist before authorization. It has
+                // no authority to execute, and its unproven PID must never be signalled.
+                if (admission.execution_process || !record.process || !reboot && (!["terminal", "identity-mismatch"].includes(await inspectProcessIdentity(record.process))
+                    || (await processGroup(record.process.pid)).length))
+                    throw ambiguous("local supervisor differs from its authenticated launch");
+            }
+        }
+        if (record.phase === "released" && !admission && !reboot)
+            return;
+        const owner = reboot ? "previous-boot" : await inspectProcessIdentity(record.owner);
+        if (owner === "unavailable" || owner === "running" && (admission || !(record.owner.pid === process.pid && ["prepared", "settled", "cleaning"].includes(record.phase)))) {
+            throw ambiguous("original worker is still running or cannot be identified");
+        }
+        record = { ...record, phase: "cleaning" };
+        await atomicWriteJSON(file, record);
+        if (!reboot && record.process && (!admission || admission.execution_process))
+            await stopOwnedProcessGroup(record.process);
+        const lease = parseExecutionLease(await readJSON(leaseFile(options, offer)));
+        if (leaseIdentity(lease) !== leaseIdentity(offer.lease))
+            throw ambiguous("local lease ownership differs from the original offer");
+        await releaseExecutionLease({ evalDirectory: path.join(statePaths(options.root).evals, offer.lease.eval_id),
+            leaseId: offer.lease.lease_id, expectedEpoch: offer.lease.epoch });
+        const report = await reapOwnedDockerResources({ ...options, leaseIds: [offer.lease.lease_id] });
+        if (report.issues.length || report.retained.some(item => item.reason !== "lease_not_selected"))
+            throw ambiguous("remote Harbor Docker cleanup is incomplete");
+        // Successful rm alone is insufficient. Observe all three resource classes again.
+        for (const kind of ["container", "network", "volume"]) {
+            const args = [kind, "ls", ...(kind === "container" ? ["--all"] : []),
+                "--filter", `label=${DOCKER_OWNERSHIP_LABELS.rootId}=${hitchRootId(options.root)}`,
+                "--filter", `label=${DOCKER_OWNERSHIP_LABELS.leaseId}=${offer.lease.lease_id}`,
+                "--format", kind === "volume" ? "{{.Name}}" : "{{.ID}}"];
+            if ((await docker(options, args)).stdout.trim())
+                throw ambiguous("owned Docker resources remain after cleanup");
+        }
+        const finalHost = await assertEnvironment(options, record, true);
+        if (sha256JSON(finalHost ?? null) !== sha256JSON(host ?? null))
+            throw ambiguous("worker host or boot changed during cleanup");
+        if (!reboot && record.process && (await processGroup(record.process.pid)).length)
+            throw ambiguous("Harbor process group is still active");
+        await atomicWriteJSON(file, { ...record, phase: "released" });
+        if (admission) {
+            const ownership = publicOwnership(record, offer);
+            if (reboot) {
+                if (ownership.schema_version !== "3" || !host)
+                    throw ambiguous("original host identity is unavailable");
+                return { ownership, execution_process: admission.execution_process, host_identity: host, worker_status: "previous-boot", docker_resources_empty: true };
+            }
+            const workerStatus = await inspectProcessIdentity(record.owner);
+            if (workerStatus !== "terminal" && workerStatus !== "identity-mismatch")
+                throw ambiguous("original worker is still active or unobservable");
+            return { ownership, execution_process: admission.execution_process,
+                worker_status: workerStatus, process_group_empty: true, docker_resources_empty: true };
+        }
+    });
+}
+async function stopOwnedProcessGroup(identity) {
+    const status = await inspectProcessIdentity(identity);
+    if (status === "unavailable")
+        throw ambiguous("Harbor process identity is unavailable");
+    if (status === "running") {
+        const members = await processGroup(identity.pid);
+        if (!members.includes(identity.pid))
+            throw ambiguous("Harbor supervisor no longer owns its process group");
+        // Re-read identity immediately before signalling; a recycled PID grants no authority.
+        if (await inspectProcessIdentity(identity) !== "running")
+            throw ambiguous("Harbor supervisor changed during cleanup");
+        try {
+            process.kill(-identity.pid, "SIGTERM");
+        }
+        catch (error) {
+            if (error.code !== "ESRCH")
+                throw error;
+        }
+    }
+    // If the leader exited, do not signal an unproven group or guess descendant PIDs.
+    for (let attempt = 0; attempt < 40; attempt++) {
+        if (!(await processGroup(identity.pid)).length)
+            return;
+        await delay(50);
+    }
+    throw ambiguous("Harbor process group has not stopped; resources remain reserved");
+}
+async function processGroup(group) {
+    const output = await runCommand("/bin/ps", ["-axo", "pid=,pgid=,stat="], { env: { PATH: "/usr/bin:/bin", LC_ALL: "C" }, timeoutMs: 5_000 });
+    if (!output.stdout.trim())
+        throw ambiguous("process group observation is empty");
+    return output.stdout.trim().split(/\r?\n/).filter(Boolean).flatMap(line => {
+        const fields = line.trim().split(/\s+/);
+        if (fields.length !== 3 || !/^\d+$/.test(fields[0]) || !/^\d+$/.test(fields[1]))
+            throw ambiguous("process group observation is invalid");
+        return Number(fields[1]) === group && !/^[ZX]/.test(fields[2]) ? [Number(fields[0])] : [];
+    });
+}
+async function bootDigest() {
+    let boot;
+    if (process.platform === "linux")
+        boot = (await readFile("/proc/sys/kernel/random/boot_id", "utf8")).trim();
+    else if (process.platform === "darwin")
+        boot = (await runCommand("/usr/sbin/sysctl", ["-n", "kern.boottime"], { env: { PATH: "/usr/bin:/bin", LC_ALL: "C" }, timeoutMs: 5_000 })).stdout.trim();
+    else
+        throw ambiguous("worker recovery requires an observable POSIX host boot identity");
+    if (!boot)
+        throw ambiguous("host boot identity is unavailable");
+    return sha256JSON({ host: hostname(), platform: process.platform, boot });
+}
+async function assertEnvironment(options, record, allowReboot = false) {
+    if (record.root !== await realpath(options.root) || record.root_id !== hitchRootId(options.root)
+        || record.docker_engine_id !== await engineId(options))
+        throw ambiguous("worker root, host boot or Docker engine differs from the execution owner");
+    if (record.schema_version === "1") {
+        if (record.boot_digest !== await bootDigest())
+            throw ambiguous("legacy ownership cannot identify its host across a boot change");
+        return;
+    }
+    const host = await observeRemoteWorkerHost(), original = record.host_identity;
+    if (host.platform !== original.platform || host.host_id !== original.host_id || !allowReboot && host.boot_id !== original.boot_id) {
+        throw ambiguous("worker root, host boot or Docker engine differs from the execution owner");
+    }
+    return host;
+}
+async function engineId(options) {
+    const info = JSON.parse((await docker(options, ["info", "--format", "{{json .}}"])).stdout);
+    if (typeof info.ID !== "string" || !info.ID || info.ID.length > 256 || /[\s\x00-\x1f]/.test(info.ID))
+        throw ambiguous("Docker engine identity is unavailable");
+    return info.ID;
+}
+function docker(options, args) {
+    const env = options.env ?? process.env;
+    return runCommand(options.dockerExecutable || env.HITCH_DOCKER_PATH || "docker", args, { env, timeoutMs: 10_000 });
+}
+async function assertOwner(record) {
+    if (record.owner.pid !== process.pid || await inspectProcessIdentity(record.owner) !== "running")
+        throw ambiguous("execution belongs to a different worker process");
+}
+async function mutateOwned(options, offer, mutate) {
+    await locked(options, offer, async (file) => {
+        const record = (await readOwner(file, offer));
+        await assertEnvironment(options, record);
+        await assertOwner(record);
+        await atomicWriteJSON(file, mutate(record));
+    });
+}
+function locked(options, offer, action) {
+    const directory = path.join(statePaths(options.root).evals, offer.lease.eval_id, "remote-work", offer.work.work_id, `epoch-${String(offer.lease.epoch).padStart(6, "0")}`);
+    return withFileLock(path.join(directory, ".locks"), "execution-owner", () => action(path.join(directory, "worker-execution.json")));
+}
+function leaseFile(options, offer) {
+    return path.join(statePaths(options.root).evals, offer.lease.eval_id, "leases", `${offer.lease.lease_id}.json`);
+}
+function leaseIdentity(lease) {
+    const { lease_id, eval_id, work_id, worker_id, provider, collision_domain_id, epoch, reservation } = lease;
+    return sha256JSON({ lease_id, eval_id, work_id, worker_id, provider, collision_domain_id, epoch, reservation, resource_epochs: lease.resource_epochs ?? [epoch] });
+}
+function binding(offer) {
+    return remoteExecutionBindingDigest(offer);
+}
+function publicOwnership(record, offer) {
+    return parseRemoteExecutionOwnership({ schema_version: record.schema_version === "2" ? "3" : "2", binding_digest: record.binding_digest, root_id: record.root_id,
+        root_digest: sha256JSON({ root: record.root, root_id: record.root_id }), boot_digest: record.boot_digest,
+        ...(record.schema_version === "2" ? { host_identity: record.host_identity } : {}),
+        docker_engine_id: record.docker_engine_id, worker_process: record.owner }, offer);
+}
+async function readOwner(file, offer, required = true) {
+    const record = await readJSON(file, null);
+    if (!record) {
+        if (required)
+            throw ambiguous("worker execution ownership record is missing; cleanup cannot be acknowledged");
+        return null;
+    }
+    if (record.schema_version !== "1" && record.schema_version !== "2" || record.binding_digest !== binding(offer)
+        || Object.keys(record).some(key => !["schema_version", "binding_digest", "root", "root_id", "boot_digest", "docker_engine_id", "owner", "phase", "process", ...(record.schema_version === "2" ? ["host_identity"] : [])].includes(key))
+        || !/^[a-f0-9]{24}$/.test(record.root_id)
+        || !path.isAbsolute(record.root) || !/^sha256:[a-f0-9]{64}$/.test(record.boot_digest)
+        || typeof record.docker_engine_id !== "string" || !record.docker_engine_id
+        || !["prepared", "executing", "settled", "cleaning", "released"].includes(record.phase))
+        throw ambiguous("worker execution ownership record differs from its offer");
+    validateProcessIdentity(record.owner);
+    if (record.process)
+        validateProcessIdentity(record.process);
+    if (record.schema_version === "2" && sha256JSON(parseRemoteWorkerHostIdentity(record.host_identity)) !== record.boot_digest) {
+        throw ambiguous("worker host identity differs from the original execution record");
+    }
+    return record;
+}
+function ambiguous(message) { return new HitchError(message, { code: "remote_worker_cleanup_ambiguous", exitCode: 12 }); }
+//# sourceMappingURL=remote-harbor-ownership.js.map

package/dist/src/workers/remote-harbor-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-harbor-ownership.js","sourceRoot":"","sources":["../../../src/workers/remote-harbor-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACvI,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,sBAAsB,EACjH,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtH,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACjK,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAgBlE,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAqC,EAAE,KAAwB;IAC5G,OAAO,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,SAAS,CAAC,0DAA0D,CAAC,CAAC;YAC1G,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAmB,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5H,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC5H,oFAAoF;QACpF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS;YACjF,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzI,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqC,EAAE,KAAwB;IAC1G,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QACzC,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,SAAS,CAAC,0DAA0D,CAAC,CAAC;QAC7G,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAqC,EAAE,KAAwB;IAC3G,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QACzC,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;YAAE,MAAM,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACpG,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAqC,EAAE,KAAwB,EAAE,SAA0D;IAClK,OAAO;QACL,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YACtC,uEAAuE;YACvE,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ;gBAAE,MAAM,SAAS,CAAC,mDAAmD,CAAC,CAAC;YACpF,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;gBACzC,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,SAAS,CAAC,6CAA6C,CAAC,CAAC;gBACnH,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqC,EAAE,KAAwB;IAC1G,MAAM,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,OAAqC,EAAE,KAAwB,EACvH,SAA2C;IAC3C,OAAO,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,6BAA6B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;AACvG,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAqC,EAAE,KAAwB,EAChG,SAA4C;IAC5C,OAAO,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;QACzC,IAAI,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,aAAc,CAAC,OAAO,CAAC;QACpF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,UAAU,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,gBAAgB;gBAAE,MAAM,SAAS,CAAC,mEAAmE,CAAC,CAAC;YACpK,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,UAAU,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACnF,sEAAsE;gBACtE,yEAAyE;gBACzE,IAAI,SAAS,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;uBACtJ,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;oBAAE,MAAM,SAAS,CAAC,wDAAwD,CAAC,CAAC;YACnI,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;YAAE,OAAO;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpF,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACvK,MAAM,SAAS,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC1C,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,iBAAiB,CAAC;YAAE,MAAM,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,uDAAuD,CAAC,CAAC;QAClI,MAAM,qBAAqB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACzG,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC;YAAE,MAAM,SAAS,CAAC,4CAA4C,CAAC,CAAC;QAC9J,iFAAiF;QACjF,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,UAAU,EAAE,SAAS,uBAAuB,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;gBAClF,UAAU,EAAE,SAAS,uBAAuB,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC9E,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,MAAM,SAAS,CAAC,6CAA6C,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC;YAAE,MAAM,SAAS,CAAC,4CAA4C,CAAC,CAAC;QAC9H,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC1I,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,SAAS,CAAC,cAAc,KAAK,GAAG,IAAI,CAAC,IAAI;oBAAE,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAC;gBACxG,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;YAC1J,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,IAAI,YAAY,KAAK,UAAU,IAAI,YAAY,KAAK,mBAAmB;gBAAE,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAC;YAC5I,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAChE,aAAa,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAA2B;IAC9D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,aAAa;QAAE,MAAM,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACxF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,SAAS,CAAC,oDAAoD,CAAC,CAAC;QAC3G,sFAAsF;QACtF,IAAI,MAAM,sBAAsB,CAAC,QAAQ,CAAC,KAAK,SAAS;YAAE,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACtH,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAC/C,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IACvF,CAAC;IACD,kFAAkF;IAClF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO;QACvD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC3I,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACvG,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,IAAI,GAAG,CAAC,MAAM,UAAU,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAC1G,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;;QAC/E,MAAM,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAqC,EAAE,MAAsB,EAAE,WAAW,GAAG,KAAK;IACjH,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;WAC3F,MAAM,CAAC,gBAAgB,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,SAAS,CAAC,0EAA0E,CAAC,CAAC;IACtJ,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,UAAU,EAAE;YAAE,MAAM,SAAS,CAAC,gEAAgE,CAAC,CAAC;QACjI,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,EAAE,QAAQ,GAAG,MAAM,CAAC,aAAc,CAAC;IAC/E,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClI,MAAM,SAAS,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,OAAqC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAqB,CAAC;IAChH,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/J,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AACD,SAAS,MAAM,CAAC,OAAqC,EAAE,IAAc;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,OAAO,UAAU,CAAC,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC,iBAAiB,IAAI,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrH,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,MAAsB;IAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,MAAM,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;QAAE,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAC;AACvK,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,OAAqC,EAAE,KAAwB,EAAE,MAAkD;IAC5I,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;QACxC,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAE,CAAC;QAC/C,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,MAAM,CAAI,OAAqC,EAAE,KAAwB,EAAE,MAAoC;IACtH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAChH,SAAS,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC;AACtI,CAAC;AACD,SAAS,SAAS,CAAC,OAAqC,EAAE,KAAwB;IAChF,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC;AAClH,CAAC;AACD,SAAS,aAAa,CAAC,KAAiC;IACtD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC3G,OAAO,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACrK,CAAC;AACD,SAAS,OAAO,CAAC,KAAwB;IACvC,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AACD,SAAS,eAAe,CAAC,MAAsB,EAAE,KAAwB;IACvE,OAAO,6BAA6B,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;QAC9J,WAAW,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;QACxG,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;AACtF,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAwB,EAAE,QAAQ,GAAG,IAAI;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAwB,IAAI,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,QAAQ;YAAE,MAAM,SAAS,CAAC,8EAA8E,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5I,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,KAAK,CAAC;WACzG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WACpO,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;WACtC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;WAClF,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,gBAAgB;WACvE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,0DAA0D,CAAC,CAAC;IACvK,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,OAAO;QAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG,IAAI,UAAU,CAAC,6BAA6B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5H,MAAM,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,SAAS,CAAC,OAAe,IAAgB,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC"}

package/dist/src/workers/remote-harbor-verifier.js

@@ -0,0 +1,76 @@
+import path from "node:path";
+import { atomicWriteJSON, sha256JSON, statePaths } from "../foundation/index.js";
+import { assertRemoteVerifierOutcome, parseExecutionLease, parseRemoteVerifierOutcome, remoteVerifierTrialName, runRemoteVerifierWork } from "../evals/index.js";
+import { encodeRemoteVerifierResultEnvelope, materializeRemoteTreeEnvelope } from "../control-plane/index.js";
+export async function executeRemoteHarborVerifier(input) {
+    if (!input.spec.verifier_only || !input.readExecutionLease)
+        throw new TypeError("remote verifier requires current controller execution lease grants");
+    const verifier = input.spec.verifier_only, controller = new AbortController(), signal = AbortSignal.any([input.signal, controller.signal]);
+    const sourceSnapshotDirectory = path.join(input.workspace, "verifier-source"), verifierRuntimeDirectory = path.join(input.workspace, "verifier-runtime");
+    let expiry, timer, pending;
+    let lease;
+    const refresh = async () => {
+        const grant = parseExecutionLease(await input.readExecutionLease(AbortSignal.any([signal, AbortSignal.timeout(5_000)])));
+        const fields = ["lease_id", "eval_id", "work_id", "worker_id", "provider", "collision_domain_id", "epoch", "reservation"];
+        if (!grant || !["offered", "accepted", "running"].includes(grant.state) || Date.parse(grant.expires_at) <= Date.now()
+            || fields.some(field => sha256JSON(grant[field]) !== sha256JSON(input.offer.lease[field]))
+            || sha256JSON(grant.resource_epochs ?? [grant.epoch]) !== sha256JSON(input.offer.lease.resource_epochs ?? [input.offer.lease.epoch])) {
+            const error = new TypeError("remote verifier execution lease identity changed");
+            controller.abort(error);
+            throw error;
+        }
+        signal.throwIfAborted();
+        const acceptedAt = grant.accepted_at ?? input.offer.accepted_at;
+        if (!acceptedAt)
+            throw new TypeError("remote verifier has no acknowledged acceptance");
+        lease = { ...grant, state: "running", accepted_at: acceptedAt, resource_epochs: grant.resource_epochs ?? [grant.epoch] };
+        await atomicWriteJSON(path.join(statePaths(input.root).evals, lease.eval_id, "leases", `${lease.lease_id}.json`), lease);
+        signal.throwIfAborted();
+        clearTimeout(expiry);
+        expiry = setTimeout(() => controller.abort(new Error("remote verifier execution lease expired")), Math.max(1, Date.parse(grant.expires_at) - Date.now()));
+        expiry.unref();
+    };
+    try {
+        await refresh();
+        timer = setInterval(() => {
+            // A transient read failure grants no additional time; the last controller expiry still aborts work.
+            pending ??= refresh().catch(() => undefined).finally(() => { pending = undefined; });
+        }, 1_000);
+        timer.unref();
+        const tree = (kind) => {
+            const body = input.inputs.get(kind);
+            if (!body)
+                throw new TypeError(`remote verifier is missing ${kind}`);
+            return JSON.parse(body.toString());
+        };
+        await Promise.all([materializeRemoteTreeEnvelope(tree("verifier-source"), sourceSnapshotDirectory),
+            materializeRemoteTreeEnvelope(tree("verifier-runtime"), verifierRuntimeDirectory)]);
+        const outcome = await runRemoteVerifierWork({ root: input.root, directory: path.join(input.workspace, "verifier-work"),
+            sourceSnapshotDirectory, verifierRuntimeDirectory, taskDirectory: input.taskDirectory,
+            sourceManifest: verifier.source_manifest, sourceTrial: verifier.source_trial,
+            candidateResult: verifier.candidate_result, candidateResultDigest: verifier.candidate_result_digest,
+            runtimeDirectory: input.runtimeDirectory, verifierRuntimeId: verifier.verifier_runtime_id, trialName: remoteVerifierTrialName(verifier.assessment_id),
+            plan: input.spec.plan, lease: lease, env: input.env, signal,
+            ...(input.processHooks ? { processHooks: input.processHooks } : {}),
+            ...(input.harborExecutable ? { harborExecutable: input.harborExecutable } : {}) });
+        assertRemoteVerifierOutcome({ verifier, plan: input.spec.plan, work: input.offer.work, lease: lease, outcome: parseRemoteVerifierOutcome({
+                trial: outcome.trial, backend: { process_exit_code: outcome.backend.process_exit_code, signal: outcome.backend.signal },
+                execution: outcome.execution, config_digest: outcome.config_digest, controller_runtime_id: outcome.controller_runtime_id,
+                ...(outcome.runtime_repair ? { runtime_repair: outcome.runtime_repair } : {})
+            }) });
+        const body = await encodeRemoteVerifierResultEnvelope({ lease: lease, verifier, outcome, verifierDirectory: path.join(outcome.trial_directory, "verifier") });
+        signal.throwIfAborted();
+        return { status: "succeeded", artifacts: [{ kind: "result-bundle", body }], release: input.release };
+    }
+    catch {
+        return { status: signal.aborted ? "cancelled" : "failed",
+            artifacts: [{ kind: "diagnostic", body: Buffer.from(`${JSON.stringify({ schema_version: "2", code: signal.aborted ? "remote_verifier_cancelled" : "remote_verifier_failed" })}\n`) }], release: input.release };
+    }
+    finally {
+        clearInterval(timer);
+        clearTimeout(expiry);
+        controller.abort();
+        await pending;
+    }
+}
+//# sourceMappingURL=remote-harbor-verifier.js.map

package/dist/src/workers/remote-harbor-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-harbor-verifier.js","sourceRoot":"","sources":["../../../src/workers/remote-harbor-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACjK,OAAO,EAAE,kCAAkC,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAI9G,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,kBAAkB;QAAE,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IACtJ,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3I,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACzJ,IAAI,MAAiD,EAAE,KAAiD,EAAE,OAAkC,CAAC;IAC7I,IAAI,KAAuB,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,KAAK,CAAC,kBAAmB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,qBAAqB,EAAE,OAAO,EAAE,aAAa,CAAU,CAAC;QACnI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;eAChH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;eACvF,UAAU,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvI,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QACxH,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QAChE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACvF,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzH,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACzH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1J,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;QAChB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YACvB,oGAAoG;YACpG,OAAO,KAAK,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC,EAAE,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,IAA4C,EAAE,EAAE;YAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChJ,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;YAChG,6BAA6B,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC;YACpH,uBAAuB,EAAE,wBAAwB,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;YACrF,cAAc,EAAE,QAAQ,CAAC,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY;YAC5E,eAAe,EAAE,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,QAAQ,CAAC,uBAAuB;YACnG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,uBAAuB,CAAC,QAAQ,CAAC,aAAa,CAAC;YACrJ,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM;YAC5D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrF,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAM,EAAE,OAAO,EAAE,0BAA0B,CAAC;gBACxI,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;gBACvH,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;gBACxH,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAAE,CAAC,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/J,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACtD,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACpN,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,OAAO,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/src/workers/remote-harbor-work-spec.js

@@ -1,15 +1,31 @@
-import { HitchError } from "../foundation/index.js";
-import { parseEvalExecutionPlan } from "../evals/index.js";
+import { HitchError, sha256JSON } from "../foundation/index.js";
+import { assertPhysicalWork, assertRemoteVerifierWork, parseEvalExecutionPlan, parsePhysicalExecution } from "../evals/index.js";
+import { parseRemoteModelBinding } from "../control-plane/index.js";
 export function parseRemoteHarborWorkSpec(value, offer) {
+    const v2 = object(value) && value.schema_version === "2";
     const spec = exact(value, [
         "schema_version", "request", "plan", "work", "resolution", "harness_artifact", "controller_runtime", "task", "credential_names",
-    ], "remote Harbor work spec", ["credential_names"]);
-    if (spec.schema_version !== "1")
+        ...(v2 ? ["model_binding", "physical_execution", "verifier_source", "verifier_only"] : []),
+    ], "remote Harbor work spec", v2 ? ["model_binding", "physical_execution", "verifier_source", "verifier_only"] : ["credential_names"]);
+    if (spec.schema_version !== "1" && !v2)
         throw specError("remote Harbor work spec version is invalid");
-    const request = parseRequest(spec.request);
+    const binding = v2 && spec.model_binding !== undefined ? parseRemoteModelBinding(spec.model_binding) : undefined;
+    const physical = v2 && spec.physical_execution !== undefined ? parsePhysicalExecution(spec.physical_execution) : undefined;
+    const capture = v2 && spec.verifier_source === "2";
+    if (spec.verifier_source !== undefined && !capture)
+        throw specError("remote verifier source version is invalid");
+    if (v2 && !binding && !physical && !capture)
+        throw specError("remote work spec v2 requires a model binding, physical execution or verifier source capture");
+    const request = parseRequest(spec.request, v2);
     const plan = parseEvalExecutionPlan(spec.plan);
-    const work = plan.work_items.find((entry) => entry.work_id === offer.work.work_id);
-    if (!work || JSON.stringify(work) !== JSON.stringify(offer.work) || plan.eval_id !== offer.lease.eval_id
+    const work = offer.work;
+    try {
+        assertPhysicalWork(plan, work, physical);
+    }
+    catch {
+        throw specError("remote Harbor work graph differs from its frozen plan");
+    }
+    if (sha256JSON(spec.work) !== sha256JSON(work) || plan.eval_id !== offer.lease.eval_id
         || plan.provider !== offer.lease.provider || request.backend !== "harbor")
         throw specError("remote Harbor work graph does not match its offer");
     const resolution = parseResolution(spec.resolution);
@@ -28,19 +44,37 @@ export function parseRemoteHarborWorkSpec(value, offer) {
         || JSON.stringify(credentialNames) !== JSON.stringify(offer.credential_names ?? [])) {
         throw specError("remote Harbor work inputs do not match their pinned identities");
     }
+    const verifier = spec.verifier_only === undefined ? undefined : assertRemoteVerifierWork({ verifier: spec.verifier_only,
+        plan, work, physical, runtimeId: runtime.runtime_id });
+    if ((physical?.kind === "verifier-only") !== !!verifier)
+        throw specError("verifier-only requires both its physical identity and source descriptor");
+    if (verifier && (binding || capture || credentialNames.length || request.training_binding || plan.training_binding))
+        throw specError("verifier-only cannot execute a model or a training slot");
+    if (verifier) {
+        const kinds = ["work-spec", "harness-artifact", "controller-runtime", "task-input", "verifier-source", "verifier-runtime"];
+        if (!offer.inputs || offer.inputs.length !== kinds.length || kinds.some(kind => offer.inputs.filter(ref => ref.kind === kind).length !== 1)
+            || offer.inputs.some(ref => ref.format !== (ref.kind === "work-spec" ? "json" : "hitch-tree-v1")))
+            throw specError("remote verifier inputs are incomplete or ambiguous");
+    }
+    else if (binding)
+        validateModelGraph(binding, request, plan, credentialNames);
+    else if (plan.training_binding || request.model.startsWith("local/") || request.model.startsWith("training/"))
+        throw specError("bound models require remote work spec v2");
     return {
-        schema_version: "1", request, plan, work, resolution, harness_artifact: harnessArtifact,
+        ...(v2 ? { schema_version: "2", ...(binding ? { model_binding: binding } : {}), ...(physical ? { physical_execution: physical } : {}), ...(capture ? { verifier_source: "2" } : {}), ...(verifier ? { verifier_only: verifier } : {}) } : { schema_version: "1" }),
+        request, plan, work, resolution, harness_artifact: harnessArtifact,
         controller_runtime: { runtime_id: runtime.runtime_id, directory: "controller-runtime" },
         task: { task_id: task.task_id, directory: "task-input" },
         credential_names: credentialNames,
     };
 }
-function parseRequest(value) {
+function parseRequest(value, v2) {
     const request = exact(value, [
         "schema_version", "backend", "dataset", "harness_ref", "model", "attempts", "max_concurrent",
         "infrastructure_retries", "infrastructure_retry_backoff_ms", "timeout_ms", "setup_timeout_ms",
         "agent_args", "pass_env", "benchmark_id", "benchmark_revision",
-    ], "remote eval request");
+        ...(v2 ? ["training_binding", "local_inference"] : []),
+    ], "remote eval request", v2 ? ["training_binding", "local_inference"] : []);
     if (typeof request.schema_version !== "string" || request.backend !== "harbor" || request.dataset !== "task-input"
         || !text(request.harness_ref) || typeof request.model !== "string"
         || !positive(request.attempts) || !positive(request.max_concurrent)
@@ -51,6 +85,28 @@ function parseRequest(value) {
         throw specError("remote eval request is invalid");
     return request;
 }
+function validateModelGraph(binding, request, plan, credentialNames) {
+    if (!plan.model_capture?.required || plan.model_capture.effective_mode !== "proxy" || plan.model_capture.topology !== "in-sandbox"
+        || credentialNames.length || request.pass_env.length)
+        throw specError("remote model binding requires mandatory lease capture and no credential overrides");
+    if (binding.kind === "training-external") {
+        if (request.local_inference || !request.training_binding || !plan.training_binding
+            || sha256JSON(request.training_binding) !== sha256JSON(binding.training) || sha256JSON(plan.training_binding) !== sha256JSON(binding.training)
+            || request.model !== `training/${binding.training.bindingId}` || !request.harness_ref.startsWith("training-tool@")
+            || request.attempts !== 1 || request.infrastructure_retries !== 0 || request.agent_args.length
+            || plan.slots.length !== 1 || plan.work_items.length !== 1 || plan.retry_policy.infrastructure_retries !== 0) {
+            throw specError("remote training binding differs from its single-attempt work graph");
+        }
+    }
+    else {
+        const selection = exact(request.local_inference, ["model", "device", "profile", "offline", "inference_id", "model_node"], "remote managed model selection");
+        if (request.training_binding || plan.training_binding || !request.model.startsWith("local/") || selection.model !== request.model
+            || selection.device !== "auto" || selection.profile !== "baseline" || typeof selection.offline !== "boolean"
+            || selection.inference_id !== binding.inference_id || sha256JSON(selection.model_node) !== sha256JSON(binding.model_node)) {
+            throw specError("remote managed model binding differs from its request");
+        }
+    }
+}
 function parseResolution(value) {
     const resolution = exact(value, [
         "schema_version", "requested_ref", "canonical_ref", "harness_id", "selector", "source", "revision", "identity", "resolved_at",

package/dist/src/workers/remote-harbor-work-spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-harbor-work-spec.js","sourceRoot":"","sources":["../../../src/workers/remote-harbor-work-spec.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAc3D,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAwB;IAChF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE;QACxB,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB;KAChI,EAAE,yBAAyB,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,cAAc,KAAK,GAAG;QAAE,MAAM,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO;WACnG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAClJ,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QACjG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAA4B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpK,IAAI,OAAO,CAAC,SAAS,KAAK,oBAAoB,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;WACxI,IAAI,CAAC,SAAS,KAAK,YAAY,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;WAClG,eAAe,CAAC,SAAS,KAAK,kBAAkB,IAAI,eAAe,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU;WACxG,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,eAAe,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;WAClF,eAAe,CAAC,iBAAiB,KAAK,UAAU,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC,aAAa;WAC7G,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ;WACpG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACtF,MAAM,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe;QACvF,kBAAkB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,oBAAoB,EAAE;QACvF,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAiB,EAAE,SAAS,EAAE,YAAY,EAAE;QAClE,gBAAgB,EAAE,eAAe;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE;QAC3B,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB;QAC5F,wBAAwB,EAAE,iCAAiC,EAAE,YAAY,EAAE,kBAAkB;QAC7F,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,oBAAoB;KAC/D,EAAE,qBAAqB,CAAC,CAAC;IAC1B,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY;WAC7G,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;WAC/D,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;WAChE,CAAC,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC;WACrG,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;WAC1E,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;WAC9E,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAAE,MAAM,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACzH,OAAO,OAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE;QAC9B,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa;KAC9H,EAAE,0BAA0B,CAAC,CAAC;IAC/B,IAAI,OAAO,UAAU,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;WAClH,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;WAC7H,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;WAClG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACxJ,OAAO,UAAyC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE;QAC5B,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,YAAY,EAAE,mBAAmB;QAC3G,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa;KAC/E,EAAE,0BAA0B,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,SAAS,KAAK,kBAAkB;WACxC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WAC/G,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;WACpG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/H,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAgD,CAAC;AAC1D,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa,EAAE,WAA8B,EAAE;IACrG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClJ,SAAS,MAAM,CAAC,KAAc,IAAa,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrH,SAAS,QAAQ,CAAC,KAAc,IAAa,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5G,SAAS,WAAW,CAAC,KAAc,IAAa,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/G,SAAS,IAAI,CAAC,KAAc,IAAa,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpJ,SAAS,WAAW,CAAC,KAAc,EAAE,OAAe;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAChK,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAC5L,CAAC;AACD,SAAS,SAAS,CAAC,OAAe,IAAgB,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"remote-harbor-work-spec.js","sourceRoot":"","sources":["../../../src/workers/remote-harbor-work-spec.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACjI,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAqBpE,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAwB;IAChF,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,GAAG,CAAC;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE;QACxB,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB;QAC/H,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACvI,IAAI,IAAI,CAAC,cAAc,KAAK,GAAG,IAAI,CAAC,EAAE;QAAE,MAAM,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjH,MAAM,QAAQ,GAAG,EAAE,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3H,MAAM,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC,eAAe,KAAK,GAAG,CAAC;IACnD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACjH,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,6FAA6F,CAAC,CAAC;IAC5J,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC;QAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IACjD,MAAM,CAAC;QAAC,MAAM,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAAC,CAAC;IACnF,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO;WACjF,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAClJ,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QACjG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAA4B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpK,IAAI,OAAO,CAAC,SAAS,KAAK,oBAAoB,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;WACxI,IAAI,CAAC,SAAS,KAAK,YAAY,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;WAClG,eAAe,CAAC,SAAS,KAAK,kBAAkB,IAAI,eAAe,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU;WACxG,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,eAAe,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;WAClF,eAAe,CAAC,iBAAiB,KAAK,UAAU,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC,aAAa;WAC7G,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ;WACpG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACtF,MAAM,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa;QACrH,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,UAAoB,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ;QAAE,MAAM,SAAS,CAAC,yEAAyE,CAAC,CAAC;IACpJ,IAAI,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,eAAe,CAAC,MAAM,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAAE,MAAM,SAAS,CAAC,yDAAyD,CAAC,CAAC;IAChM,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;QAC3H,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;eACvI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC7K,CAAC;SAAM,IAAI,OAAO;QAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;SAC3E,IAAI,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAC3K,OAAO;QACL,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAY,EAAE,CAAC;QAC7R,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe;QAClE,kBAAkB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,oBAAoB,EAAE;QACvF,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAiB,EAAE,SAAS,EAAE,YAAY,EAAE;QAClE,gBAAgB,EAAE,eAAe;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,EAAW;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE;QAC3B,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB;QAC5F,wBAAwB,EAAE,iCAAiC,EAAE,YAAY,EAAE,kBAAkB;QAC7F,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,oBAAoB;QAC9D,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY;WAC7G,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;WAC/D,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;WAChE,CAAC,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC;WACrG,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;WAC1E,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;WAC9E,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAAE,MAAM,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACzH,OAAO,OAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA6B,EAAE,OAAoB,EAAE,IAAyB,EAAE,eAAyB;IACnI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,YAAY;WAC7H,eAAe,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,SAAS,CAAC,mFAAmF,CAAC,CAAC;IAC7J,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,gBAAgB;eAC7E,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;eAC3I,OAAO,CAAC,KAAK,KAAK,YAAY,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC;eAC/G,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,sBAAsB,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM;eAC3F,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,sBAAsB,KAAK,CAAC,EAAE,CAAC;YAC/G,MAAM,SAAS,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAC5J,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;eAC5H,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,SAAS;eACzG,SAAS,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5H,MAAM,SAAS,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE;QAC9B,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa;KAC9H,EAAE,0BAA0B,CAAC,CAAC;IAC/B,IAAI,OAAO,UAAU,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;WAClH,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;WAC7H,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;WAClG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACxJ,OAAO,UAAyC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE;QAC5B,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,YAAY,EAAE,mBAAmB;QAC3G,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa;KAC/E,EAAE,0BAA0B,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,SAAS,KAAK,kBAAkB;WACxC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WAC/G,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;WACpG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/H,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAgD,CAAC;AAC1D,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa,EAAE,WAA8B,EAAE;IACrG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClJ,SAAS,MAAM,CAAC,KAAc,IAAa,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrH,SAAS,QAAQ,CAAC,KAAc,IAAa,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5G,SAAS,WAAW,CAAC,KAAc,IAAa,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/G,SAAS,IAAI,CAAC,KAAc,IAAa,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpJ,SAAS,WAAW,CAAC,KAAc,EAAE,OAAe;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAChK,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAC5L,CAAC;AACD,SAAS,SAAS,CAAC,OAAe,IAAgB,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC"}