codex-orchestrator 0.1.51 → 2.0.0

package/dist/src/v2/runtime-assets.d.ts

@@ -0,0 +1,31 @@
+export type InternalSkillName = 'agent-auto' | 'acceptance-proof';
+export type RuntimeAssetPublishStep = 'after-source-resolve' | 'after-first-file-sync' | 'before-temp-directory-sync' | 'after-temp-directory-sync' | 'before-rename' | 'after-rename' | 'after-parent-sync';
+export interface RuntimeAssetFileEvidence {
+    relativePath: string;
+    sha256: string;
+    size: number;
+    mode: number;
+    ownerUid: number;
+}
+export interface RuntimeAssetSnapshot {
+    packageVersion: string;
+    skill: InternalSkillName;
+    runtimeRoot: string;
+    snapshotRoot: string;
+    skillPath: string;
+    schemaPath: string;
+    rootMode: number;
+    ownerUid: number;
+    files: RuntimeAssetFileEvidence[];
+    generatedSchemaSha256: string;
+    reused: boolean;
+}
+export declare function publishRuntimeAssetSnapshot(input: {
+    packageRoot: string;
+    runtimeRoot: string;
+    snapshotRelativePath: string;
+    skill: InternalSkillName;
+    onStep?: (step: RuntimeAssetPublishStep) => Promise<void> | void;
+}): Promise<RuntimeAssetSnapshot>;
+export declare function verifyRuntimeAssetSnapshot(snapshot: RuntimeAssetSnapshot): Promise<void>;
+//# sourceMappingURL=runtime-assets.d.ts.map

package/dist/src/v2/runtime-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-assets.d.ts","sourceRoot":"","sources":["../../../src/v2/runtime-assets.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,kBAAkB,CAAC;AAClE,MAAM,MAAM,uBAAuB,GAC/B,sBAAsB,GACtB,uBAAuB,GACvB,4BAA4B,GAC5B,2BAA2B,GAC3B,eAAe,GACf,cAAc,GACd,mBAAmB,CAAC;AAExB,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAClC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAClE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoFhC;AAED,wBAAsB,0BAA0B,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD9F"}

package/dist/src/v2/runtime-assets.js

@@ -0,0 +1,473 @@
+import { randomUUID } from 'node:crypto';
+import { lstat, mkdir, open, readFile, readdir, rename, rm, } from 'node:fs/promises';
+import { dirname, isAbsolute, join, posix, relative, resolve, sep } from 'node:path';
+import { canonicalJson, sha256 } from './containment.js';
+import { implementationReportOutputSchema } from './implementation-report.js';
+import { proofReportOutputSchema } from './proof-report.js';
+const SNAPSHOT_ROOT_MODE = 0o700;
+const SNAPSHOT_FILE_MODE = 0o400;
+const LOCK_WAIT_MS = 5_000;
+const LOCK_POLL_MS = 25;
+export async function publishRuntimeAssetSnapshot(input) {
+    const expectedUid = runnerUid();
+    const packageRoot = resolve(input.packageRoot);
+    const runtimeRoot = resolve(input.runtimeRoot);
+    const snapshotRelativePath = validateRelativeSnapshotPath(input.snapshotRelativePath);
+    const snapshotRoot = resolve(runtimeRoot, ...snapshotRelativePath.split('/'));
+    assertContained(runtimeRoot, snapshotRoot, 'snapshot root');
+    const attemptRoot = dirname(snapshotRoot);
+    const source = await resolveSourceAssets(packageRoot, input.skill);
+    await input.onStep?.('after-source-resolve');
+    await assertSourceUnchanged(source);
+    await ensureManagedDirectoryPath(runtimeRoot, attemptRoot, expectedUid);
+    const attemptStat = await lstat(attemptRoot);
+    assertDirectory(attemptStat, attemptRoot);
+    assertOwner(attemptStat.uid, expectedUid, attemptRoot);
+    assertMode(attemptStat.mode, SNAPSHOT_ROOT_MODE, attemptRoot);
+    const lockPath = join(attemptRoot, '.snapshot.publish.lock');
+    const lock = await acquirePublishLock(lockPath);
+    let tempRoot;
+    let published = false;
+    try {
+        await assertSourceUnchanged(source);
+        if (await pathExists(snapshotRoot)) {
+            const existing = expectedSnapshot({ source, runtimeRoot, snapshotRoot, expectedUid, reused: true });
+            await verifyRuntimeAssetSnapshot(existing);
+            await assertSourceUnchanged(source);
+            return existing;
+        }
+        tempRoot = join(attemptRoot, `.snapshot.tmp-${process.pid}-${randomUUID()}`);
+        await mkdir(tempRoot, { mode: SNAPSHOT_ROOT_MODE });
+        const expectedFiles = sourceSnapshotFiles(source, expectedUid);
+        for (const [index, file] of expectedFiles.entries()) {
+            const bytes = sourceFileBytes(source, file.relativePath);
+            if (file.relativePath.includes('/')) {
+                await mkdir(dirname(join(tempRoot, file.relativePath)), { recursive: true, mode: SNAPSHOT_ROOT_MODE });
+            }
+            const handle = await open(join(tempRoot, file.relativePath), 'wx', SNAPSHOT_FILE_MODE);
+            try {
+                await handle.writeFile(bytes);
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            await syncDirectory(dirname(join(tempRoot, file.relativePath)));
+            if (index === 0)
+                await input.onStep?.('after-first-file-sync');
+        }
+        const tempEvidence = expectedSnapshot({
+            source,
+            runtimeRoot,
+            snapshotRoot: tempRoot,
+            expectedUid,
+            reused: false,
+        });
+        await verifyRuntimeAssetSnapshot(tempEvidence);
+        await input.onStep?.('before-temp-directory-sync');
+        await syncDirectory(tempRoot);
+        await input.onStep?.('after-temp-directory-sync');
+        await assertSourceUnchanged(source);
+        await input.onStep?.('before-rename');
+        if (await pathExists(snapshotRoot)) {
+            const raced = expectedSnapshot({ source, runtimeRoot, snapshotRoot, expectedUid, reused: true });
+            await verifyRuntimeAssetSnapshot(raced);
+            await assertSourceUnchanged(source);
+            return raced;
+        }
+        await rename(tempRoot, snapshotRoot);
+        published = true;
+        await input.onStep?.('after-rename');
+        await syncDirectory(attemptRoot);
+        await input.onStep?.('after-parent-sync');
+        const snapshot = expectedSnapshot({ source, runtimeRoot, snapshotRoot, expectedUid, reused: false });
+        await verifyRuntimeAssetSnapshot(snapshot);
+        await assertSourceUnchanged(source);
+        return snapshot;
+    }
+    finally {
+        if (tempRoot && !published)
+            await rm(tempRoot, { recursive: true, force: true });
+        await releasePublishLock(lockPath, lock.token);
+    }
+}
+export async function verifyRuntimeAssetSnapshot(snapshot) {
+    const expectedUid = runnerUid();
+    if (snapshot.ownerUid !== expectedUid)
+        throw new Error('snapshot evidence owner does not match the runner');
+    if (snapshot.rootMode !== SNAPSHOT_ROOT_MODE)
+        throw new Error('snapshot evidence root mode is invalid');
+    const runtimeRoot = resolve(snapshot.runtimeRoot);
+    const snapshotRoot = resolve(snapshot.snapshotRoot);
+    assertContained(runtimeRoot, snapshotRoot, 'snapshot evidence root');
+    await assertExistingManagedPath(runtimeRoot, snapshotRoot, expectedUid);
+    const rootStat = await lstat(snapshotRoot);
+    assertDirectory(rootStat, snapshotRoot);
+    assertOwner(rootStat.uid, expectedUid, snapshotRoot);
+    assertMode(rootStat.mode, SNAPSHOT_ROOT_MODE, snapshotRoot);
+    const expectedNames = snapshot.skill === 'acceptance-proof'
+        ? [
+            'SKILL.md', 'output-schema.json', 'references/android.md', 'references/browser.md', 'references/ios.md',
+            'tools/android-lease.mjs', 'tools/ios-lease.mjs',
+        ]
+        : ['SKILL.md', 'output-schema.json'];
+    const actualNames = await snapshotFilePaths(snapshotRoot, expectedUid);
+    if (actualNames.length !== expectedNames.length || actualNames.some((name, index) => name !== expectedNames[index])) {
+        throw new Error('snapshot has missing or extra entries');
+    }
+    if (snapshot.files.length !== expectedNames.length)
+        throw new Error('snapshot evidence file list is invalid');
+    const evidenceNames = snapshot.files.map((file) => file.relativePath);
+    if (evidenceNames.some((name, index) => name !== expectedNames[index]))
+        throw new Error('snapshot evidence file order is invalid');
+    for (const file of snapshot.files) {
+        if (file.ownerUid !== expectedUid)
+            throw new Error(`snapshot evidence owner drift: ${file.relativePath}`);
+        if (file.mode !== SNAPSHOT_FILE_MODE)
+            throw new Error(`snapshot evidence mode drift: ${file.relativePath}`);
+        const path = join(snapshotRoot, file.relativePath);
+        const info = await lstat(path);
+        if (info.isSymbolicLink())
+            throw new Error(`snapshot contains a symbolic link: ${file.relativePath}`);
+        if (!info.isFile())
+            throw new Error(`snapshot entry is not a regular file: ${file.relativePath}`);
+        assertOwner(info.uid, expectedUid, path);
+        assertMode(info.mode, SNAPSHOT_FILE_MODE, path);
+        const bytes = await readFile(path);
+        if (bytes.length !== file.size)
+            throw new Error(`snapshot size mismatch: ${file.relativePath}`);
+        if (sha256(bytes) !== file.sha256)
+            throw new Error(`snapshot hash mismatch: ${file.relativePath}`);
+    }
+    const skillPath = join(snapshotRoot, 'SKILL.md');
+    const schemaPath = join(snapshotRoot, 'output-schema.json');
+    if (resolve(snapshot.skillPath) !== skillPath || resolve(snapshot.schemaPath) !== schemaPath) {
+        throw new Error('snapshot evidence paths are invalid');
+    }
+    if (snapshot.generatedSchemaSha256 !== snapshot.files.find((file) => file.relativePath === 'output-schema.json')?.sha256) {
+        throw new Error('generated schema hash does not match snapshot evidence');
+    }
+}
+async function resolveSourceAssets(packageRoot, skill) {
+    const packageJsonPath = join(packageRoot, 'package.json');
+    const skillSourcePath = join(packageRoot, 'internal-skills', skill, 'SKILL.md');
+    const supplementalPaths = skill === 'acceptance-proof'
+        ? [
+            { relativePath: 'references/android.md', sourcePath: join(packageRoot, 'internal-skills', skill, 'references', 'android.md') },
+            { relativePath: 'references/browser.md', sourcePath: join(packageRoot, 'internal-skills', skill, 'references', 'browser.md') },
+            { relativePath: 'references/ios.md', sourcePath: join(packageRoot, 'internal-skills', skill, 'references', 'ios.md') },
+            { relativePath: 'tools/android-lease.mjs', sourcePath: join(packageRoot, 'internal-skills', skill, 'tools', 'android-lease.mjs') },
+            { relativePath: 'tools/ios-lease.mjs', sourcePath: join(packageRoot, 'internal-skills', skill, 'tools', 'ios-lease.mjs') },
+        ]
+        : [];
+    await assertSourcePath(packageRoot, packageJsonPath, true);
+    await assertSourcePath(packageRoot, skillSourcePath, true);
+    await Promise.all(supplementalPaths.map((asset) => assertSourcePath(packageRoot, asset.sourcePath, true)));
+    const [packageJsonBytes, skillBytes, supplementalBytes] = await Promise.all([
+        readFile(packageJsonPath),
+        readFile(skillSourcePath),
+        Promise.all(supplementalPaths.map((asset) => readFile(asset.sourcePath))),
+    ]);
+    const packageJson = JSON.parse(packageJsonBytes.toString('utf8'));
+    if (packageJson.name !== 'codex-orchestrator' || typeof packageJson.version !== 'string' || packageJson.version.length === 0) {
+        throw new Error('package.json does not identify a versioned codex-orchestrator package');
+    }
+    const schema = skill === 'agent-auto' ? implementationReportOutputSchema() : proofReportOutputSchema();
+    return {
+        packageRoot,
+        packageJsonPath,
+        packageJsonBytes,
+        packageVersion: packageJson.version,
+        skill,
+        skillSourcePath,
+        skillBytes,
+        schemaBytes: Buffer.from(`${canonicalJson(schema)}\n`, 'utf8'),
+        supplementalAssets: supplementalPaths.map((asset, index) => ({ ...asset, bytes: supplementalBytes[index] })),
+    };
+}
+async function assertSourceUnchanged(source) {
+    await assertSourcePath(source.packageRoot, source.packageJsonPath, true);
+    await assertSourcePath(source.packageRoot, source.skillSourcePath, true);
+    await Promise.all(source.supplementalAssets.map((asset) => assertSourcePath(source.packageRoot, asset.sourcePath, true)));
+    const [packageJsonBytes, skillBytes, supplementalBytes] = await Promise.all([
+        readFile(source.packageJsonPath),
+        readFile(source.skillSourcePath),
+        Promise.all(source.supplementalAssets.map((asset) => readFile(asset.sourcePath))),
+    ]);
+    if (!packageJsonBytes.equals(source.packageJsonBytes) || !skillBytes.equals(source.skillBytes)) {
+        throw new Error('package assets changed during resolution');
+    }
+    if (supplementalBytes.some((bytes, index) => !bytes.equals(source.supplementalAssets[index].bytes))) {
+        throw new Error('package assets changed during resolution');
+    }
+}
+function expectedSnapshot(input) {
+    const files = sourceSnapshotFiles(input.source, input.expectedUid);
+    return {
+        packageVersion: input.source.packageVersion,
+        skill: input.source.skill,
+        runtimeRoot: input.runtimeRoot,
+        snapshotRoot: input.snapshotRoot,
+        skillPath: join(input.snapshotRoot, 'SKILL.md'),
+        schemaPath: join(input.snapshotRoot, 'output-schema.json'),
+        rootMode: SNAPSHOT_ROOT_MODE,
+        ownerUid: input.expectedUid,
+        files,
+        generatedSchemaSha256: files.find((file) => file.relativePath === 'output-schema.json').sha256,
+        reused: input.reused,
+    };
+}
+function sourceSnapshotFiles(source, ownerUid) {
+    const files = [
+        {
+            relativePath: 'SKILL.md',
+            sha256: sha256(source.skillBytes),
+            size: source.skillBytes.length,
+            mode: SNAPSHOT_FILE_MODE,
+            ownerUid,
+        },
+        {
+            relativePath: 'output-schema.json',
+            sha256: sha256(source.schemaBytes),
+            size: source.schemaBytes.length,
+            mode: SNAPSHOT_FILE_MODE,
+            ownerUid,
+        },
+    ];
+    for (const asset of source.supplementalAssets) {
+        files.push({
+            relativePath: asset.relativePath,
+            sha256: sha256(asset.bytes),
+            size: asset.bytes.length,
+            mode: SNAPSHOT_FILE_MODE,
+            ownerUid,
+        });
+    }
+    return files;
+}
+function sourceFileBytes(source, relativePath) {
+    if (relativePath === 'SKILL.md')
+        return source.skillBytes;
+    if (relativePath === 'output-schema.json')
+        return source.schemaBytes;
+    const supplemental = source.supplementalAssets.find((asset) => asset.relativePath === relativePath);
+    if (supplemental)
+        return supplemental.bytes;
+    throw new Error(`unknown runtime asset: ${relativePath}`);
+}
+async function snapshotFilePaths(snapshotRoot, expectedUid) {
+    const paths = [];
+    const visit = async (directory, relativeDirectory) => {
+        for (const entry of await readdir(directory, { withFileTypes: true })) {
+            const relativePath = relativeDirectory ? `${relativeDirectory}/${entry.name}` : entry.name;
+            const path = join(directory, entry.name);
+            const info = await lstat(path);
+            if (entry.isSymbolicLink() || info.isSymbolicLink())
+                throw new Error(`snapshot contains a symbolic link: ${relativePath}`);
+            assertOwner(info.uid, expectedUid, path);
+            if (entry.isDirectory()) {
+                assertMode(info.mode, SNAPSHOT_ROOT_MODE, path);
+                await visit(path, relativePath);
+            }
+            else if (entry.isFile()) {
+                paths.push(relativePath);
+            }
+            else {
+                throw new Error(`snapshot contains a special entry: ${relativePath}`);
+            }
+        }
+    };
+    await visit(snapshotRoot, '');
+    return paths.sort((left, right) => expectedAssetOrder(left) - expectedAssetOrder(right) || left.localeCompare(right));
+}
+function expectedAssetOrder(path) {
+    if (path === 'SKILL.md')
+        return 0;
+    if (path === 'output-schema.json')
+        return 1;
+    return 2;
+}
+async function ensureManagedDirectoryPath(runtimeRoot, target, expectedUid) {
+    await ensureManagedRuntimeRoot(runtimeRoot, expectedUid);
+    assertContained(runtimeRoot, target, 'managed directory');
+    const relativeTarget = relative(runtimeRoot, target);
+    let current = runtimeRoot;
+    for (const segment of relativeTarget.split(sep).filter(Boolean)) {
+        current = join(current, segment);
+        try {
+            const info = await lstat(current);
+            if (info.isSymbolicLink())
+                throw new Error(`managed runtime path contains a symbolic link: ${current}`);
+            assertDirectory(info, current);
+            assertOwner(info.uid, expectedUid, current);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            try {
+                await mkdir(current, { mode: SNAPSHOT_ROOT_MODE });
+            }
+            catch (mkdirError) {
+                if (mkdirError.code !== 'EEXIST')
+                    throw mkdirError;
+            }
+            const created = await lstat(current);
+            if (created.isSymbolicLink())
+                throw new Error(`managed runtime path contains a symbolic link: ${current}`);
+            assertDirectory(created, current);
+            assertOwner(created.uid, expectedUid, current);
+            assertMode(created.mode, SNAPSHOT_ROOT_MODE, current);
+        }
+    }
+}
+async function ensureManagedRuntimeRoot(runtimeRoot, expectedUid) {
+    try {
+        await mkdir(runtimeRoot, { mode: SNAPSHOT_ROOT_MODE });
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+    }
+    const info = await lstat(runtimeRoot);
+    if (info.isSymbolicLink())
+        throw new Error(`managed runtime path contains a symbolic link: ${runtimeRoot}`);
+    assertDirectory(info, runtimeRoot);
+    assertOwner(info.uid, expectedUid, runtimeRoot);
+    assertMode(info.mode, SNAPSHOT_ROOT_MODE, runtimeRoot);
+}
+async function assertExistingManagedPath(runtimeRoot, target, expectedUid) {
+    assertContained(runtimeRoot, target, 'managed snapshot');
+    const paths = [runtimeRoot];
+    let current = runtimeRoot;
+    for (const segment of relative(runtimeRoot, target).split(sep).filter(Boolean)) {
+        current = join(current, segment);
+        paths.push(current);
+    }
+    for (const path of paths) {
+        const info = await lstat(path);
+        if (info.isSymbolicLink())
+            throw new Error(`managed runtime path contains a symbolic link: ${path}`);
+        if (path !== target)
+            assertDirectory(info, path);
+        assertOwner(info.uid, expectedUid, path);
+    }
+}
+async function assertSourcePath(root, target, finalMustBeFile) {
+    assertContained(root, target, 'package asset');
+    const paths = [root];
+    let current = root;
+    for (const segment of relative(root, target).split(sep).filter(Boolean)) {
+        current = join(current, segment);
+        paths.push(current);
+    }
+    for (const [index, path] of paths.entries()) {
+        const info = await lstat(path);
+        if (info.isSymbolicLink())
+            throw new Error(`package asset path contains a symbolic link: ${path}`);
+        const isFinal = index === paths.length - 1;
+        if (isFinal && finalMustBeFile) {
+            if (!info.isFile())
+                throw new Error(`package asset is not a regular file: ${path}`);
+        }
+        else {
+            assertDirectory(info, path);
+        }
+    }
+}
+async function acquirePublishLock(path) {
+    const token = randomUUID();
+    const deadline = Date.now() + LOCK_WAIT_MS;
+    while (true) {
+        try {
+            const handle = await open(path, 'wx', 0o600);
+            try {
+                await handle.writeFile(`${token}\n`);
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            return { token };
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            if (Date.now() >= deadline)
+                throw new Error('timed out waiting for runtime asset snapshot publisher');
+            await new Promise((resolveWait) => setTimeout(resolveWait, LOCK_POLL_MS));
+        }
+    }
+}
+async function releasePublishLock(path, token) {
+    try {
+        const current = await readFile(path, 'utf8');
+        if (current === `${token}\n`)
+            await rm(path);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+async function syncDirectory(path) {
+    const handle = await open(path, 'r');
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+function validateRelativeSnapshotPath(value) {
+    if (value.length === 0 || isAbsolute(value) || value.includes('\\') || posix.normalize(value) !== value) {
+        throw new Error('snapshotRelativePath must be a normalized relative POSIX path');
+    }
+    const segments = value.split('/');
+    if (segments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
+        throw new Error('snapshotRelativePath contains an unsafe segment');
+    }
+    if (segments.at(-1) !== 'snapshot')
+        throw new Error('snapshotRelativePath must end in snapshot');
+    return value;
+}
+function assertContained(root, target, field) {
+    const relation = relative(resolve(root), resolve(target));
+    if (relation === '' && resolve(root) === resolve(target))
+        return;
+    if (relation.startsWith(`..${sep}`) || relation === '..' || isAbsolute(relation)) {
+        throw new Error(`${field} escapes its trusted root`);
+    }
+}
+function assertDirectory(info, path) {
+    if (info.isSymbolicLink())
+        throw new Error(`path is a symbolic link: ${path}`);
+    if (!info.isDirectory())
+        throw new Error(`path is not a directory: ${path}`);
+}
+function assertOwner(actualUid, expectedUid, path) {
+    if (actualUid !== expectedUid)
+        throw new Error(`path owner drift: ${path}`);
+}
+function assertMode(rawMode, expectedMode, path) {
+    const mode = rawMode & 0o777;
+    if (mode !== expectedMode)
+        throw new Error(`path mode drift at ${path}: expected ${expectedMode.toString(8)}, got ${mode.toString(8)}`);
+}
+async function pathExists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function runnerUid() {
+    const uid = process.getuid?.();
+    if (uid === undefined)
+        throw new Error('runtime asset snapshots require POSIX ownership checks');
+    return uid;
+}
+//# sourceMappingURL=runtime-assets.js.map

package/dist/src/v2/runtime-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-assets.js","sourceRoot":"","sources":["../../../src/v2/runtime-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,EAAE,GACH,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,YAAY,GAAG,EAAE,CAAC;AAkCxB,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAMjD;IACC,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,eAAe,CAAC,WAAW,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAC7C,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEpC,MAAM,0BAA0B,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7C,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1C,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACvD,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAA4B,CAAC;IACjC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACvF,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChE,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,uBAAuB,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC;YACpC,MAAM;YACN,WAAW;YACX,YAAY,EAAE,QAAQ;YACtB,WAAW;YACX,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,MAAM,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,4BAA4B,CAAC,CAAC;QACnD,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC;QAEtC,IAAI,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACrC,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACrG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,IAAI,CAAC,SAAS;YAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAA8B;IAC7E,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,QAAQ,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC5G,IAAI,QAAQ,CAAC,QAAQ,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxG,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpD,eAAe,CAAC,WAAW,EAAE,YAAY,EAAE,wBAAwB,CAAC,CAAC;IACrE,MAAM,yBAAyB,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAExE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxC,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACrD,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;IAE5D,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,KAAK,kBAAkB;QACzD,CAAC,CAAC;YACA,UAAU,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,mBAAmB;YACvG,yBAAyB,EAAE,qBAAqB;SACjD;QACD,CAAC,CAAC,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACvE,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9G,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAEnI,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAClG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,qBAAqB,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QACzH,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAcD,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAwB;IAC9E,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,iBAAiB,GAAG,KAAK,KAAK,kBAAkB;QACpD,CAAC,CAAC;YACA,EAAE,YAAY,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE;YAC9H,EAAE,YAAY,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE;YAC9H,EAAE,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE;YACtH,EAAE,YAAY,EAAE,yBAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE;YAClI,EAAE,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE;SAC3H;QACD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,CAAC,WAAW,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,gBAAgB,CAAC,WAAW,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,QAAQ,CAAC,eAAe,CAAC;QACzB,QAAQ,CAAC,eAAe,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1E,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA0C,CAAC;IAC3G,IAAI,WAAW,CAAC,IAAI,KAAK,oBAAoB,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7H,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;IACvG,OAAO;QACL,WAAW;QACX,eAAe;QACf,gBAAgB;QAChB,cAAc,EAAE,WAAW,CAAC,OAAO;QACnC,KAAK;QACL,eAAe;QACf,UAAU;QACV,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAC9D,kBAAkB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;KAC7G,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAoB;IACvD,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACzE,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACzE,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;KAClF,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAMzB;IACC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACnE,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;QAC3C,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QACzB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC;QAC/C,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC1D,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,KAAK;QACL,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,oBAAoB,CAAE,CAAC,MAAM;QAC/F,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB,EAAE,QAAgB;IACjE,MAAM,KAAK,GAA+B;QACxC;YACE,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACjC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;YAC9B,IAAI,EAAE,kBAAkB;YACxB,QAAQ;SACT;QACD;YACE,YAAY,EAAE,oBAAoB;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;YAClC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;YAC/B,IAAI,EAAE,kBAAkB;YACxB,QAAQ;SACT;KACF,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACT,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC3B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YACxB,IAAI,EAAE,kBAAkB;YACxB,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAoB,EAAE,YAAoB;IACjE,IAAI,YAAY,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IAC1D,IAAI,YAAY,KAAK,oBAAoB;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IACpG,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC;IAC5C,MAAM,IAAI,KAAK,CAAC,0BAA0B,YAAY,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,YAAoB,EAAE,WAAmB;IACxE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,iBAAyB,EAAiB,EAAE;QAClF,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;YAC3H,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,WAAmB,EAAE,MAAc,EAAE,WAAmB;IAChG,MAAM,wBAAwB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACzD,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YACxG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAK,UAAoC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,UAAU,CAAC;YAChF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YAC3G,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,WAAmB,EAAE,WAAmB;IAC9E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,EAAE,CAAC,CAAC;IAC5G,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAChD,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,MAAc,EAAE,WAAmB;IAC/F,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QACrG,IAAI,IAAI,KAAK,MAAM;YAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAc,EAAE,eAAwB;IACpF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,eAAe,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAC3C,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;gBACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACtG,MAAM,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC3D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,GAAG,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO;IACjE,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAuC,EAAE,IAAY;IAC5E,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,WAAmB,EAAE,IAAY;IACvE,IAAI,SAAS,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,YAAoB,EAAE,IAAY;IACrE,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7B,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,cAAc,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1I,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACjG,OAAO,GAAG,CAAC;AACb,CAAC"}