botmux 2.111.0 → 2.112.0

package/dist/workflows/v3/host-execution.d.ts

@@ -0,0 +1,142 @@
+/** Durable artifacts and provider-neutral helpers for v3 host execution. */
+import type { RegisteredHostExecutor } from '../hostExecutors/registry.js';
+import type { Manifest } from './contract.js';
+export declare const V3_HOST_INPUT_SCHEMA_VERSION: 1;
+/** P0 gates render the complete redacted payload inline. Refuse larger inputs
+ * before gate dispatch rather than asking a human to approve truncated bytes. */
+export declare const V3_MAX_APPROVABLE_HOST_INPUT_BYTES = 8000;
+export interface V3PreparedHostInput {
+    schemaVersion: typeof V3_HOST_INPUT_SCHEMA_VERSION;
+    runId: string;
+    nodeId: string;
+    instanceId: string;
+    attemptId: string;
+    executor: string;
+    provider: string;
+    parsedInput: unknown;
+    canonicalInput: unknown;
+    inputHash: string;
+    idempotencyKey: string;
+    idempotencyTtlMs: number;
+    approvalDigest: string;
+}
+export interface V3PreparedHostInputArtifact {
+    prepared: V3PreparedHostInput;
+    inputRef: {
+        path: string;
+        sha256: string;
+        bytes: number;
+    };
+    absolutePath: string;
+}
+export interface V3HostSuccessResult {
+    schemaVersion: 1;
+    runId: string;
+    nodeId: string;
+    instanceId: string;
+    attemptId: string;
+    executor: string;
+    provider: string;
+    idempotencyKey: string;
+    inputHash: string;
+    approvalDigest: string;
+    output: unknown;
+    externalRefs: Record<string, unknown>;
+}
+export declare function prepareV3HostInputArtifact<I, O>(input: {
+    runDir: string;
+    attemptDir: string;
+    runId: string;
+    nodeId: string;
+    instanceId: string;
+    attemptId: string;
+    executorName: string;
+    resolvedInput: unknown;
+    registered: RegisteredHostExecutor<I, O>;
+}): V3PreparedHostInputArtifact;
+/**
+ * Adopt the durable sidecar left by a crash between file fsync and the
+ * `hostInputPrepared` journal append. The sidecar is the freeze commit: never
+ * resolve upstream bindings or parse relative time again in this window.
+ *
+ * This reader does not trust fields merely because they are self-consistent.
+ * It re-derives the input hash, idempotency key and approval digest from the
+ * expected run/attempt identity, then applies the same schema/provider drift
+ * checks as normal journal-backed replay.
+ */
+export declare function readCrashLeftV3PreparedHostInput<I, O>(input: {
+    runDir: string;
+    attemptDir: string;
+    runId: string;
+    nodeId: string;
+    instanceId: string;
+    attemptId: string;
+    executorName: string;
+    registered: RegisteredHostExecutor<I, O>;
+}): V3PreparedHostInputArtifact | undefined;
+export declare function readAndVerifyV3PreparedHostInput<I, O>(input: {
+    runDir: string;
+    inputRef: {
+        path: string;
+        sha256: string;
+        bytes: number;
+    };
+    expected: {
+        runId: string;
+        nodeId: string;
+        instanceId: string;
+        attemptId: string;
+        executor: string;
+        provider: string;
+        inputHash: string;
+        idempotencyKey: string;
+        idempotencyTtlMs: number;
+        approvalDigest: string;
+    };
+    registered: RegisteredHostExecutor<I, O>;
+}): V3PreparedHostInputArtifact;
+export declare function writeV3HostSuccessArtifacts(input: {
+    runDir: string;
+    attemptDir: string;
+    runId: string;
+    nodeId: string;
+    instanceId: string;
+    attemptId: string;
+    executor: string;
+    provider: string;
+    idempotencyKey: string;
+    inputHash: string;
+    approvalDigest: string;
+    output: unknown;
+    externalRefs: Record<string, unknown>;
+}): {
+    manifestPath: string;
+    resultPath: string;
+};
+/**
+ * Re-validate the schema/identity-bound host result wrapper after the generic manifest
+ * validator has proved the file bytes.  A generic goal manifest with a
+ * coincidentally valid `result.json` is not close proof for a host intent: the
+ * wrapper must remain bound to the complete durable effect identity. This is
+ * crash/cross-attempt integrity, not an attestation against a same-UID writer.
+ */
+export declare function readAndVerifyV3HostSuccessResult(input: {
+    runDir: string;
+    attemptDir: string;
+    manifest: Manifest;
+    runId: string;
+    nodeId: string;
+    instanceId: string;
+    attemptId: string;
+    executor: string;
+    provider: string;
+    idempotencyKey: string;
+    inputHash: string;
+    approvalDigest: string;
+}): V3HostSuccessResult;
+export declare function validateHostInputRefShape(ref: {
+    path: string;
+    sha256: string;
+    bytes: number;
+}): void;
+//# sourceMappingURL=host-execution.d.ts.map

package/dist/workflows/v3/host-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-execution.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/host-execution.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAwB5E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,eAAO,MAAM,4BAA4B,EAAG,CAAU,CAAC;AACvD;iFACiF;AACjF,eAAO,MAAM,kCAAkC,OAAQ,CAAC;AAIxD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,OAAO,4BAA4B,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AA6BD,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;CAC1C,GAAG,2BAA2B,CAyD9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;CAC1C,GAAG,2BAA2B,GAAG,SAAS,CA8C1C;AAED,wBAAgB,gCAAgC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;CAC1C,GAAG,2BAA2B,CAuC9B;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2C/C;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,mBAAmB,CAiDtB;AAoID,wBAAgB,yBAAyB,CAAC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAIpG"}

package/dist/workflows/v3/host-execution.js

@@ -0,0 +1,424 @@
+/** Durable artifacts and provider-neutral helpers for v3 host execution. */
+import { createHash, randomUUID } from 'node:crypto';
+import { closeSync, constants, existsSync, fsyncSync, lstatSync, linkSync, mkdirSync, openSync, readFileSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { canonicalJson, computeInputHash } from '../../utils/canonical-input-hash.js';
+import { fsyncDirectorySyncPortable, fsyncRegularFileSync, } from '../../utils/fs-durability.js';
+import { deriveIdempotencyKey } from '../shared/idempotency-key.js';
+export const V3_HOST_INPUT_SCHEMA_VERSION = 1;
+/** P0 gates render the complete redacted payload inline. Refuse larger inputs
+ * before gate dispatch rather than asking a human to approve truncated bytes. */
+export const V3_MAX_APPROVABLE_HOST_INPUT_BYTES = 8_000;
+const SHA256_RE = /^[0-9a-f]{64}$/;
+const INPUT_HASH_RE = /^sha256:[0-9a-f]{64}$/;
+function deriveV3HostEffectIdentity(input) {
+    const idempotencyKey = deriveIdempotencyKey({
+        workflowId: 'v3-host',
+        revisionId: 'v1',
+        runId: input.runId,
+        nodeId: input.instanceId,
+        attemptId: input.attemptId,
+    }, { namespace: 'wf3_' });
+    const approvalDigest = computeInputHash({
+        v: 1,
+        runId: input.runId,
+        nodeId: input.nodeId,
+        instanceId: input.instanceId,
+        attemptId: input.attemptId,
+        executor: input.executor,
+        inputHash: input.inputHash,
+    });
+    return { idempotencyKey, approvalDigest };
+}
+export function prepareV3HostInputArtifact(input) {
+    const parsedInput = input.registered.parseInput(input.resolvedInput);
+    const canonicalInput = input.registered.executor.canonicalInput(parsedInput);
+    // Proves both values are finite plain JSON before they become durable input.
+    canonicalJson(parsedInput);
+    canonicalJson(canonicalInput);
+    if (Buffer.byteLength(JSON.stringify(parsedInput), 'utf-8') > V3_MAX_APPROVABLE_HOST_INPUT_BYTES) {
+        throw new Error(`v3 host input exceeds ${V3_MAX_APPROVABLE_HOST_INPUT_BYTES} bytes; ` +
+            'split the side effect so each approval card can show the complete payload');
+    }
+    const inputHash = computeInputHash(canonicalInput);
+    const { idempotencyKey, approvalDigest } = deriveV3HostEffectIdentity({
+        runId: input.runId,
+        nodeId: input.nodeId,
+        instanceId: input.instanceId,
+        attemptId: input.attemptId,
+        executor: input.executorName,
+        inputHash,
+    });
+    const prepared = {
+        schemaVersion: V3_HOST_INPUT_SCHEMA_VERSION,
+        runId: input.runId,
+        nodeId: input.nodeId,
+        instanceId: input.instanceId,
+        attemptId: input.attemptId,
+        executor: input.executorName,
+        provider: input.registered.executor.provider,
+        parsedInput,
+        canonicalInput,
+        inputHash,
+        idempotencyKey,
+        idempotencyTtlMs: input.registered.executor.idempotencyTtlMs,
+        approvalDigest,
+    };
+    const absolutePath = join(input.attemptDir, 'host-input.json');
+    assertPathInside(input.runDir, input.attemptDir);
+    ensureSecureDirectoryTree(input.runDir, input.attemptDir);
+    const content = `${JSON.stringify(prepared, null, 2)}\n`;
+    writeCreateOrVerify(absolutePath, content, 0o600, 'host input');
+    const existing = readFileSync(absolutePath, 'utf-8');
+    if (canonicalJson(parsePreparedHostInput(JSON.parse(existing))) !== canonicalJson(prepared)) {
+        throw new Error(`v3 host input conflict at ${absolutePath}; refusing to overwrite prepared bytes`);
+    }
+    fsyncRegularFileSync(absolutePath);
+    fsyncDirectorySyncPortable(input.attemptDir);
+    const bytes = readFileSync(absolutePath);
+    return {
+        prepared,
+        inputRef: {
+            path: relative(input.runDir, absolutePath),
+            sha256: sha256(bytes),
+            bytes: bytes.length,
+        },
+        absolutePath,
+    };
+}
+/**
+ * Adopt the durable sidecar left by a crash between file fsync and the
+ * `hostInputPrepared` journal append. The sidecar is the freeze commit: never
+ * resolve upstream bindings or parse relative time again in this window.
+ *
+ * This reader does not trust fields merely because they are self-consistent.
+ * It re-derives the input hash, idempotency key and approval digest from the
+ * expected run/attempt identity, then applies the same schema/provider drift
+ * checks as normal journal-backed replay.
+ */
+export function readCrashLeftV3PreparedHostInput(input) {
+    const absolutePath = join(input.attemptDir, 'host-input.json');
+    if (!existsSync(absolutePath))
+        return undefined;
+    assertPathInside(input.runDir, input.attemptDir);
+    assertSecureExistingPath(input.runDir, absolutePath, 'host input');
+    assertRegularFile(absolutePath, 'host input');
+    const bytes = readFileSync(absolutePath);
+    let prepared;
+    try {
+        prepared = parsePreparedHostInput(JSON.parse(bytes.toString('utf-8')));
+    }
+    catch (err) {
+        throw new Error(`v3 crash-left host input is invalid: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const inputHash = computeInputHash(prepared.canonicalInput);
+    const identity = deriveV3HostEffectIdentity({
+        runId: input.runId,
+        nodeId: input.nodeId,
+        instanceId: input.instanceId,
+        attemptId: input.attemptId,
+        executor: input.executorName,
+        inputHash,
+    });
+    const inputRef = {
+        path: relative(input.runDir, absolutePath),
+        sha256: sha256(bytes),
+        bytes: bytes.length,
+    };
+    return readAndVerifyV3PreparedHostInput({
+        runDir: input.runDir,
+        inputRef,
+        expected: {
+            runId: input.runId,
+            nodeId: input.nodeId,
+            instanceId: input.instanceId,
+            attemptId: input.attemptId,
+            executor: input.executorName,
+            provider: input.registered.executor.provider,
+            inputHash,
+            idempotencyKey: identity.idempotencyKey,
+            idempotencyTtlMs: input.registered.executor.idempotencyTtlMs,
+            approvalDigest: identity.approvalDigest,
+        },
+        registered: input.registered,
+    });
+}
+export function readAndVerifyV3PreparedHostInput(input) {
+    if (isAbsolute(input.inputRef.path) || input.inputRef.path.includes('\0')) {
+        throw new Error('v3 host inputRef.path must be run-relative');
+    }
+    const absolutePath = resolve(input.runDir, input.inputRef.path);
+    assertPathInside(input.runDir, absolutePath);
+    assertSecureExistingPath(input.runDir, absolutePath, 'host input');
+    assertRegularFile(absolutePath, 'host input');
+    const bytes = readFileSync(absolutePath);
+    if (bytes.length !== input.inputRef.bytes || sha256(bytes) !== input.inputRef.sha256) {
+        throw new Error('v3 host input sidecar bytes/hash mismatch');
+    }
+    const prepared = parsePreparedHostInput(JSON.parse(bytes.toString('utf-8')));
+    if (input.registered.executor.provider !== prepared.provider) {
+        throw new Error('v3 host provider registration changed since input approval');
+    }
+    if (input.registered.executor.idempotencyTtlMs !== prepared.idempotencyTtlMs) {
+        throw new Error('v3 host provider idempotency TTL changed since input approval');
+    }
+    for (const key of [
+        'runId', 'nodeId', 'instanceId', 'attemptId', 'executor', 'provider',
+        'inputHash', 'idempotencyKey', 'idempotencyTtlMs', 'approvalDigest',
+    ]) {
+        if (prepared[key] !== input.expected[key]) {
+            throw new Error(`v3 host input ${key} does not match durable journal intent`);
+        }
+    }
+    const reparsed = input.registered.parseInput(prepared.parsedInput);
+    const canonicalInput = input.registered.executor.canonicalInput(reparsed);
+    if (canonicalJson(reparsed) !== canonicalJson(prepared.parsedInput)) {
+        throw new Error('v3 host input parse/schema drift changed the prepared payload');
+    }
+    if (canonicalJson(canonicalInput) !== canonicalJson(prepared.canonicalInput)) {
+        throw new Error('v3 host canonicalization drift changed the prepared payload');
+    }
+    if (computeInputHash(canonicalInput) !== prepared.inputHash) {
+        throw new Error('v3 host canonical input hash mismatch');
+    }
+    return { prepared, inputRef: input.inputRef, absolutePath };
+}
+export function writeV3HostSuccessArtifacts(input) {
+    canonicalJson(input.output);
+    canonicalJson(input.externalRefs);
+    const outputDir = join(input.attemptDir, 'work');
+    assertPathInside(input.runDir, input.attemptDir);
+    ensureSecureDirectoryTree(input.runDir, outputDir);
+    const resultPath = join(outputDir, 'result.json');
+    const resultContent = `${JSON.stringify({
+        schemaVersion: 1,
+        runId: input.runId,
+        nodeId: input.nodeId,
+        instanceId: input.instanceId,
+        attemptId: input.attemptId,
+        executor: input.executor,
+        provider: input.provider,
+        idempotencyKey: input.idempotencyKey,
+        inputHash: input.inputHash,
+        approvalDigest: input.approvalDigest,
+        output: input.output,
+        externalRefs: input.externalRefs,
+    }, null, 2)}\n`;
+    writeCreateOrVerify(resultPath, resultContent, 0o600, 'host result');
+    const resultBytes = Buffer.from(resultContent, 'utf-8');
+    const manifest = {
+        schemaVersion: 1,
+        status: 'ok',
+        summary: `host executor ${input.executor} completed`,
+        files: [{
+                name: 'result',
+                path: 'result.json',
+                kind: 'json',
+                bytes: resultBytes.length,
+                sha256: sha256(resultBytes),
+                mime: 'application/json',
+            }],
+    };
+    const manifestPath = join(input.attemptDir, 'manifest.json');
+    writeCreateOrVerify(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`, 0o600, 'host manifest');
+    fsyncRegularFileSync(resultPath);
+    fsyncDirectorySyncPortable(outputDir);
+    fsyncRegularFileSync(manifestPath);
+    fsyncDirectorySyncPortable(input.attemptDir);
+    return { manifestPath, resultPath };
+}
+/**
+ * Re-validate the schema/identity-bound host result wrapper after the generic manifest
+ * validator has proved the file bytes.  A generic goal manifest with a
+ * coincidentally valid `result.json` is not close proof for a host intent: the
+ * wrapper must remain bound to the complete durable effect identity. This is
+ * crash/cross-attempt integrity, not an attestation against a same-UID writer.
+ */
+export function readAndVerifyV3HostSuccessResult(input) {
+    assertRegularFile(join(input.attemptDir, 'manifest.json'), 'host manifest');
+    if (input.manifest.status !== 'ok') {
+        throw new Error('v3 host success manifest status must be ok');
+    }
+    if (input.manifest.files.length !== 1) {
+        throw new Error('v3 host success manifest must contain exactly one file');
+    }
+    const file = input.manifest.files[0];
+    if (file.name !== 'result' || file.path !== 'result.json' || file.kind !== 'json') {
+        throw new Error('v3 host success manifest must expose exactly result.json as JSON');
+    }
+    const resultPath = join(input.attemptDir, 'work', 'result.json');
+    assertPathInside(input.runDir, resultPath);
+    assertSecureExistingPath(input.runDir, resultPath, 'host result');
+    assertRegularFile(resultPath, 'host result');
+    const bytes = readFileSync(resultPath);
+    if (bytes.length !== file.bytes || sha256(bytes) !== file.sha256) {
+        throw new Error('v3 host success result bytes/hash mismatch');
+    }
+    let raw;
+    try {
+        raw = JSON.parse(bytes.toString('utf-8'));
+    }
+    catch (err) {
+        throw new Error(`v3 host success result is invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!isRecord(raw))
+        throw new Error('v3 host success result must be an object');
+    const allowed = new Set([
+        'schemaVersion', 'runId', 'nodeId', 'instanceId', 'attemptId', 'executor',
+        'provider', 'idempotencyKey', 'inputHash', 'approvalDigest', 'output', 'externalRefs',
+    ]);
+    const extra = Object.keys(raw).filter((key) => !allowed.has(key));
+    if (extra.length > 0) {
+        throw new Error(`v3 host success result has unsupported keys: ${extra.join(', ')}`);
+    }
+    if (raw.schemaVersion !== 1)
+        throw new Error('v3 host success result schemaVersion mismatch');
+    for (const key of [
+        'runId', 'nodeId', 'instanceId', 'attemptId', 'executor', 'provider',
+        'idempotencyKey', 'inputHash', 'approvalDigest',
+    ]) {
+        if (raw[key] !== input[key])
+            throw new Error(`v3 host success result ${key} mismatch`);
+    }
+    if (!isRecord(raw.externalRefs))
+        throw new Error('v3 host success result externalRefs must be an object');
+    canonicalJson(raw.output);
+    canonicalJson(raw.externalRefs);
+    return raw;
+}
+function parsePreparedHostInput(raw) {
+    if (!isRecord(raw))
+        throw new Error('v3 host input sidecar must be an object');
+    const allowed = new Set([
+        'schemaVersion', 'runId', 'nodeId', 'instanceId', 'attemptId', 'executor',
+        'provider', 'parsedInput', 'canonicalInput', 'inputHash', 'idempotencyKey',
+        'idempotencyTtlMs', 'approvalDigest',
+    ]);
+    const extra = Object.keys(raw).filter((key) => !allowed.has(key));
+    if (extra.length > 0)
+        throw new Error(`v3 host input sidecar has unsupported keys: ${extra.join(', ')}`);
+    if (raw.schemaVersion !== V3_HOST_INPUT_SCHEMA_VERSION)
+        throw new Error('v3 host input sidecar schemaVersion mismatch');
+    for (const key of ['runId', 'nodeId', 'instanceId', 'attemptId', 'executor', 'provider', 'idempotencyKey']) {
+        if (typeof raw[key] !== 'string' || raw[key].length === 0)
+            throw new Error(`v3 host input ${key} must be non-empty`);
+    }
+    if (typeof raw.inputHash !== 'string' || !INPUT_HASH_RE.test(raw.inputHash)) {
+        throw new Error('v3 host input inputHash is invalid');
+    }
+    if (typeof raw.approvalDigest !== 'string' || !INPUT_HASH_RE.test(raw.approvalDigest)) {
+        throw new Error('v3 host input approvalDigest is invalid');
+    }
+    if (!Number.isSafeInteger(raw.idempotencyTtlMs) || raw.idempotencyTtlMs < 1) {
+        throw new Error('v3 host input idempotencyTtlMs must be a positive safe integer');
+    }
+    canonicalJson(raw.parsedInput);
+    canonicalJson(raw.canonicalInput);
+    return raw;
+}
+function writeCreateOrVerify(path, content, mode, label) {
+    const tempPath = `${path}.tmp-${process.pid}-${randomUUID()}`;
+    let fd;
+    try {
+        fd = openSync(tempPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), mode);
+        writeFileSync(fd, content, 'utf-8');
+        fsyncSync(fd);
+        closeSync(fd);
+        fd = undefined;
+        try {
+            // link(2) is an atomic no-overwrite publish: the canonical path either
+            // does not exist, or names the fully fsync'd inode. A crash may leave an
+            // unreferenced temp file, never a partial canonical host artifact.
+            linkSync(tempPath, path);
+            fsyncDirectorySyncPortable(dirname(path));
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+            assertRegularFile(path, label);
+            if (readFileSync(path, 'utf-8') !== content) {
+                throw new Error(`v3 ${label} conflict at ${path}; refusing to overwrite committed bytes`);
+            }
+        }
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+        try {
+            unlinkSync(tempPath);
+            fsyncDirectorySyncPortable(dirname(path));
+        }
+        catch {
+            // The canonical link (if any) is already fsync'd. A cleanup failure may
+            // leave an unreferenced temp inode, but must not turn a proven provider
+            // result into output uncertainty.
+        }
+    }
+    fsyncRegularFileSync(path);
+    fsyncDirectorySyncPortable(dirname(path));
+}
+function assertRegularFile(path, label) {
+    const stat = lstatSync(path);
+    if (!stat.isFile() || stat.isSymbolicLink()) {
+        throw new Error(`v3 ${label} must be a regular file: ${path}`);
+    }
+    if ((stat.mode & 0o077) !== 0) {
+        throw new Error(`v3 ${label} must not be group/world accessible: ${path}`);
+    }
+}
+function assertPathInside(parent, child) {
+    const root = resolve(parent);
+    const rel = relative(root, resolve(child));
+    if (rel === '' || rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel)) {
+        throw new Error('v3 host path escapes runDir');
+    }
+}
+function ensureSecureDirectoryTree(rootPath, targetPath) {
+    const root = resolve(rootPath);
+    const target = resolve(targetPath);
+    const rel = relative(root, target);
+    if (rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel)) {
+        throw new Error('v3 host directory escapes runDir');
+    }
+    assertDirectory(root, 'run directory');
+    let current = root;
+    for (const segment of rel.split(/[\\/]/).filter(Boolean)) {
+        current = join(current, segment);
+        if (!existsSync(current))
+            mkdirSync(current, { mode: 0o700 });
+        assertDirectory(current, 'host artifact directory');
+    }
+}
+function assertSecureExistingPath(rootPath, filePath, label) {
+    const root = resolve(rootPath);
+    const target = resolve(filePath);
+    assertPathInside(root, target);
+    assertDirectory(root, 'run directory');
+    const rel = relative(root, dirname(target));
+    let current = root;
+    for (const segment of rel.split(/[\\/]/).filter(Boolean)) {
+        current = join(current, segment);
+        assertDirectory(current, `${label} parent`);
+    }
+}
+function assertDirectory(path, label) {
+    const stat = lstatSync(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink()) {
+        throw new Error(`v3 ${label} must be a real directory: ${path}`);
+    }
+}
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function validateHostInputRefShape(ref) {
+    if (!ref.path || isAbsolute(ref.path) || ref.path.includes('\0'))
+        throw new Error('invalid v3 host inputRef.path');
+    if (!SHA256_RE.test(ref.sha256))
+        throw new Error('invalid v3 host inputRef.sha256');
+    if (!Number.isSafeInteger(ref.bytes) || ref.bytes < 0)
+        throw new Error('invalid v3 host inputRef.bytes');
+}
+//# sourceMappingURL=host-execution.js.map

package/dist/workflows/v3/host-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-execution.js","sourceRoot":"","sources":["../../../src/workflows/v3/host-execution.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AACvD;iFACiF;AACjF,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,CAAC;AACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAuC9C,SAAS,0BAA0B,CAAC,KAOnC;IACC,MAAM,cAAc,GAAG,oBAAoB,CAAC;QAC1C,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,UAAU;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1B,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACtC,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAO,KAUhD;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC7E,6EAA6E;IAC7E,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3B,aAAa,CAAC,cAAc,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAAG,kCAAkC,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CACb,yBAAyB,kCAAkC,UAAU;YACrE,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,0BAA0B,CAAC;QACpE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,YAAY;QAC5B,SAAS;KACV,CAAC,CAAC;IACH,MAAM,QAAQ,GAAwB;QACpC,aAAa,EAAE,4BAA4B;QAC3C,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,YAAY;QAC5B,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ;QAC5C,WAAW;QACX,cAAc;QACd,SAAS;QACT,cAAc;QACd,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB;QAC5D,cAAc;KACf,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC/D,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACzD,mBAAmB,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,6BAA6B,YAAY,wCAAwC,CAAC,CAAC;IACrG,CAAC;IACD,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;YACrB,KAAK,EAAE,KAAK,CAAC,MAAM;SACpB;QACD,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAAO,KAStD;IACC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACnE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,YAAY;QAC5B,SAAS;KACV,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC;IACF,OAAO,gCAAgC,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ;QACR,QAAQ,EAAE;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,YAAY;YAC5B,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ;YAC5C,SAAS;YACT,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB;YAC5D,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC;QACD,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAO,KAgBtD;IACC,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChE,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACnE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI;QAChB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU;QACpE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB;KAC3D,EAAE,CAAC;QACX,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,wCAAwC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,aAAa,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,gBAAgB,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAc3C;IACC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACtC,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAChB,mBAAmB,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAa;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,iBAAiB,KAAK,CAAC,QAAQ,YAAY;QACpD,KAAK,EAAE,CAAC;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,WAAW,CAAC,MAAM;gBACzB,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;gBAC3B,IAAI,EAAE,kBAAkB;aACzB,CAAC;KACH,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC7D,mBAAmB,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACpG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACjC,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACtC,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAahD;IACC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACjE,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAClE,iBAAiB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAY,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU;QACzE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc;KACtF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC9F,KAAK,MAAM,GAAG,IAAI;QAChB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU;QACpE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB;KACvC,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,WAAW,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1G,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,OAAO,GAAqC,CAAC;AAC/C,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU;QACzE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB;QAC1E,kBAAkB,EAAE,gBAAgB;KACrC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,IAAI,GAAG,CAAC,aAAa,KAAK,4BAA4B;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACxH,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACpH,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,oBAAoB,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAK,GAAG,CAAC,gBAA2B,GAAG,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,OAAO,GAAqC,CAAC;AAC/C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe,EAAE,IAAY,EAAE,KAAa;IACrF,MAAM,QAAQ,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;IAC9D,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CACX,QAAQ,EACR,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EACvF,IAAI,CACL,CAAC;QACF,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,SAAS,CAAC;QACf,IAAI,CAAC;YACH,uEAAuE;YACvE,yEAAyE;YACzE,mEAAmE;YACnE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzB,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,IAAI,yCAAyC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,wEAAwE;YACxE,kCAAkC;QACpC,CAAC;IACH,CAAC;IACD,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,KAAa;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB,EAAE,UAAkB;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,eAAe,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB,EAAE,QAAgB,EAAE,KAAa;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAoD;IAC5F,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AAC3G,CAAC"}