codexgpt 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/AGENTS.example.md +20 -0
  2. package/CHANGELOG.md +342 -0
  3. package/CHATGPT_PROMPT.md +12 -0
  4. package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
  5. package/CODEX_PROMPT.md +12 -0
  6. package/CONTRIBUTING.md +62 -0
  7. package/DOMAIN_SETUP.md +275 -0
  8. package/FAQ.md +366 -0
  9. package/FAQ_ZH.md +329 -0
  10. package/LICENSE +21 -0
  11. package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
  12. package/README.md +490 -0
  13. package/README_ZH.md +747 -0
  14. package/SECURITY.md +295 -0
  15. package/config.example.env +103 -0
  16. package/dist/access/fullAccessLease.js +148 -0
  17. package/dist/access/fullAccessLease.js.map +1 -0
  18. package/dist/access/protectedRoots.js +122 -0
  19. package/dist/access/protectedRoots.js.map +1 -0
  20. package/dist/access/rootAdmission.js +347 -0
  21. package/dist/access/rootAdmission.js.map +1 -0
  22. package/dist/analysis/cache.js +27 -0
  23. package/dist/analysis/cache.js.map +1 -0
  24. package/dist/analysis/classify.js +102 -0
  25. package/dist/analysis/classify.js.map +1 -0
  26. package/dist/analysis/extract.js +139 -0
  27. package/dist/analysis/extract.js.map +1 -0
  28. package/dist/analysis/graph.js +22 -0
  29. package/dist/analysis/graph.js.map +1 -0
  30. package/dist/analysis/impact.js +167 -0
  31. package/dist/analysis/impact.js.map +1 -0
  32. package/dist/analysis/index.js +215 -0
  33. package/dist/analysis/index.js.map +1 -0
  34. package/dist/analysis/inventory.js +51 -0
  35. package/dist/analysis/inventory.js.map +1 -0
  36. package/dist/analysis/providers.js +24 -0
  37. package/dist/analysis/providers.js.map +1 -0
  38. package/dist/analysis/rank.js +27 -0
  39. package/dist/analysis/rank.js.map +1 -0
  40. package/dist/analysis/types.js +8 -0
  41. package/dist/analysis/types.js.map +1 -0
  42. package/dist/audit/canonicalJson.js +79 -0
  43. package/dist/audit/canonicalJson.js.map +1 -0
  44. package/dist/audit/diagnostics.js +128 -0
  45. package/dist/audit/diagnostics.js.map +1 -0
  46. package/dist/audit/index.js +12 -0
  47. package/dist/audit/index.js.map +1 -0
  48. package/dist/audit/lifecycleV3.js +53 -0
  49. package/dist/audit/lifecycleV3.js.map +1 -0
  50. package/dist/audit/lifecycleV4.js +70 -0
  51. package/dist/audit/lifecycleV4.js.map +1 -0
  52. package/dist/audit/lock.js +195 -0
  53. package/dist/audit/lock.js.map +1 -0
  54. package/dist/audit/queryTool.js +120 -0
  55. package/dist/audit/queryTool.js.map +1 -0
  56. package/dist/audit/runtime.js +48 -0
  57. package/dist/audit/runtime.js.map +1 -0
  58. package/dist/audit/schemas.js +640 -0
  59. package/dist/audit/schemas.js.map +1 -0
  60. package/dist/audit/store.js +1309 -0
  61. package/dist/audit/store.js.map +1 -0
  62. package/dist/audit/transactionParticipant.js +45 -0
  63. package/dist/audit/transactionParticipant.js.map +1 -0
  64. package/dist/audit/types.js +11 -0
  65. package/dist/audit/types.js.map +1 -0
  66. package/dist/auth/audit.js +44 -0
  67. package/dist/auth/audit.js.map +1 -0
  68. package/dist/auth/authorizationStore.js +333 -0
  69. package/dist/auth/authorizationStore.js.map +1 -0
  70. package/dist/auth/challenges.js +25 -0
  71. package/dist/auth/challenges.js.map +1 -0
  72. package/dist/auth/clientStore.js +469 -0
  73. package/dist/auth/clientStore.js.map +1 -0
  74. package/dist/auth/cloudflareConfig.js +112 -0
  75. package/dist/auth/cloudflareConfig.js.map +1 -0
  76. package/dist/auth/configuration.js +167 -0
  77. package/dist/auth/configuration.js.map +1 -0
  78. package/dist/auth/credentialStore.js +65 -0
  79. package/dist/auth/credentialStore.js.map +1 -0
  80. package/dist/auth/deploymentLock.js +220 -0
  81. package/dist/auth/deploymentLock.js.map +1 -0
  82. package/dist/auth/deploymentRegistry.js +149 -0
  83. package/dist/auth/deploymentRegistry.js.map +1 -0
  84. package/dist/auth/errors.js +26 -0
  85. package/dist/auth/errors.js.map +1 -0
  86. package/dist/auth/grantStore.js +307 -0
  87. package/dist/auth/grantStore.js.map +1 -0
  88. package/dist/auth/index.js +39 -0
  89. package/dist/auth/index.js.map +1 -0
  90. package/dist/auth/keyManager.js +148 -0
  91. package/dist/auth/keyManager.js.map +1 -0
  92. package/dist/auth/localAdminSession.js +173 -0
  93. package/dist/auth/localAdminSession.js.map +1 -0
  94. package/dist/auth/metadata.js +69 -0
  95. package/dist/auth/metadata.js.map +1 -0
  96. package/dist/auth/oauthProvider.js +589 -0
  97. package/dist/auth/oauthProvider.js.map +1 -0
  98. package/dist/auth/ownerApproval.js +51 -0
  99. package/dist/auth/ownerApproval.js.map +1 -0
  100. package/dist/auth/policyIdentity.js +189 -0
  101. package/dist/auth/policyIdentity.js.map +1 -0
  102. package/dist/auth/rateLimits.js +66 -0
  103. package/dist/auth/rateLimits.js.map +1 -0
  104. package/dist/auth/recovery.js +275 -0
  105. package/dist/auth/recovery.js.map +1 -0
  106. package/dist/auth/requestContext.js +34 -0
  107. package/dist/auth/requestContext.js.map +1 -0
  108. package/dist/auth/resourceMiddleware.js +147 -0
  109. package/dist/auth/resourceMiddleware.js.map +1 -0
  110. package/dist/auth/runtimeStatus.js +51 -0
  111. package/dist/auth/runtimeStatus.js.map +1 -0
  112. package/dist/auth/schemas.js +84 -0
  113. package/dist/auth/schemas.js.map +1 -0
  114. package/dist/auth/stateStore.js +468 -0
  115. package/dist/auth/stateStore.js.map +1 -0
  116. package/dist/auth/tokenService.js +631 -0
  117. package/dist/auth/tokenService.js.map +1 -0
  118. package/dist/auth/toolSecurity.js +108 -0
  119. package/dist/auth/toolSecurity.js.map +1 -0
  120. package/dist/auth/types.js +6 -0
  121. package/dist/auth/types.js.map +1 -0
  122. package/dist/auth/windowsDpapi.js +193 -0
  123. package/dist/auth/windowsDpapi.js.map +1 -0
  124. package/dist/bashOps.js +292 -0
  125. package/dist/bashOps.js.map +1 -0
  126. package/dist/capabilitiesOps.js +412 -0
  127. package/dist/capabilitiesOps.js.map +1 -0
  128. package/dist/changesets/crypto.js +92 -0
  129. package/dist/changesets/crypto.js.map +1 -0
  130. package/dist/changesets/index.js +9 -0
  131. package/dist/changesets/index.js.map +1 -0
  132. package/dist/changesets/moveStore.js +237 -0
  133. package/dist/changesets/moveStore.js.map +1 -0
  134. package/dist/changesets/moveUndo.js +386 -0
  135. package/dist/changesets/moveUndo.js.map +1 -0
  136. package/dist/changesets/schemas.js +234 -0
  137. package/dist/changesets/schemas.js.map +1 -0
  138. package/dist/changesets/store.js +573 -0
  139. package/dist/changesets/store.js.map +1 -0
  140. package/dist/changesets/types.js +9 -0
  141. package/dist/changesets/types.js.map +1 -0
  142. package/dist/changesets/undo.js +525 -0
  143. package/dist/changesets/undo.js.map +1 -0
  144. package/dist/changesets/unifiedUndo.js +31 -0
  145. package/dist/changesets/unifiedUndo.js.map +1 -0
  146. package/dist/cliEnvironment.js +85 -0
  147. package/dist/cliEnvironment.js.map +1 -0
  148. package/dist/codexSessions.js +733 -0
  149. package/dist/codexSessions.js.map +1 -0
  150. package/dist/codexgptSupertool.js +216 -0
  151. package/dist/codexgptSupertool.js.map +1 -0
  152. package/dist/codexproSupertool.js +204 -0
  153. package/dist/codexproSupertool.js.map +1 -0
  154. package/dist/config.js +733 -0
  155. package/dist/config.js.map +1 -0
  156. package/dist/control/localApprovalClient.js +287 -0
  157. package/dist/control/localApprovalClient.js.map +1 -0
  158. package/dist/control/localApprovalServer.js +466 -0
  159. package/dist/control/localApprovalServer.js.map +1 -0
  160. package/dist/control/runtime.js +178 -0
  161. package/dist/control/runtime.js.map +1 -0
  162. package/dist/control/schemas.js +184 -0
  163. package/dist/control/schemas.js.map +1 -0
  164. package/dist/control/windowsLocalControl.js +348 -0
  165. package/dist/control/windowsLocalControl.js.map +1 -0
  166. package/dist/fsOps.js +541 -0
  167. package/dist/fsOps.js.map +1 -0
  168. package/dist/git/admission.js +26 -0
  169. package/dist/git/admission.js.map +1 -0
  170. package/dist/git/branchService.js +51 -0
  171. package/dist/git/branchService.js.map +1 -0
  172. package/dist/git/capabilities.js +143 -0
  173. package/dist/git/capabilities.js.map +1 -0
  174. package/dist/git/commitService.js +344 -0
  175. package/dist/git/commitService.js.map +1 -0
  176. package/dist/git/durableState.js +151 -0
  177. package/dist/git/durableState.js.map +1 -0
  178. package/dist/git/execution.js +451 -0
  179. package/dist/git/execution.js.map +1 -0
  180. package/dist/git/fileTransaction.js +50 -0
  181. package/dist/git/fileTransaction.js.map +1 -0
  182. package/dist/git/indexService.js +421 -0
  183. package/dist/git/indexService.js.map +1 -0
  184. package/dist/git/integrations.js +653 -0
  185. package/dist/git/integrations.js.map +1 -0
  186. package/dist/git/locks.js +287 -0
  187. package/dist/git/locks.js.map +1 -0
  188. package/dist/git/mutationContext.js +92 -0
  189. package/dist/git/mutationContext.js.map +1 -0
  190. package/dist/git/mutationJournal.js +91 -0
  191. package/dist/git/mutationJournal.js.map +1 -0
  192. package/dist/git/mutationService.js +352 -0
  193. package/dist/git/mutationService.js.map +1 -0
  194. package/dist/git/normalization.js +57 -0
  195. package/dist/git/normalization.js.map +1 -0
  196. package/dist/git/objectQuarantine.js +243 -0
  197. package/dist/git/objectQuarantine.js.map +1 -0
  198. package/dist/git/opaqueRecordStore.js +187 -0
  199. package/dist/git/opaqueRecordStore.js.map +1 -0
  200. package/dist/git/operationStore.js +287 -0
  201. package/dist/git/operationStore.js.map +1 -0
  202. package/dist/git/parsers.js +311 -0
  203. package/dist/git/parsers.js.map +1 -0
  204. package/dist/git/privateIndex.js +79 -0
  205. package/dist/git/privateIndex.js.map +1 -0
  206. package/dist/git/productionBootstrap.js +39 -0
  207. package/dist/git/productionBootstrap.js.map +1 -0
  208. package/dist/git/readService.js +846 -0
  209. package/dist/git/readService.js.map +1 -0
  210. package/dist/git/recovery.js +417 -0
  211. package/dist/git/recovery.js.map +1 -0
  212. package/dist/git/repositoryIdentity.js +611 -0
  213. package/dist/git/repositoryIdentity.js.map +1 -0
  214. package/dist/git/repositoryStore.js +237 -0
  215. package/dist/git/repositoryStore.js.map +1 -0
  216. package/dist/git/resources.js +113 -0
  217. package/dist/git/resources.js.map +1 -0
  218. package/dist/git/restoreService.js +178 -0
  219. package/dist/git/restoreService.js.map +1 -0
  220. package/dist/git/reviewToken.js +86 -0
  221. package/dist/git/reviewToken.js.map +1 -0
  222. package/dist/git/stashService.js +566 -0
  223. package/dist/git/stashService.js.map +1 -0
  224. package/dist/git/stateToken.js +139 -0
  225. package/dist/git/stateToken.js.map +1 -0
  226. package/dist/gitOps.js +147 -0
  227. package/dist/gitOps.js.map +1 -0
  228. package/dist/guard.js +608 -0
  229. package/dist/guard.js.map +1 -0
  230. package/dist/guidance/diagnostics.js +14 -0
  231. package/dist/guidance/diagnostics.js.map +1 -0
  232. package/dist/guidance/instructions.js +167 -0
  233. package/dist/guidance/instructions.js.map +1 -0
  234. package/dist/guidance/mode.js +18 -0
  235. package/dist/guidance/mode.js.map +1 -0
  236. package/dist/guidance/openaiSkillMetadata.js +29 -0
  237. package/dist/guidance/openaiSkillMetadata.js.map +1 -0
  238. package/dist/guidance/safeTextReader.js +171 -0
  239. package/dist/guidance/safeTextReader.js.map +1 -0
  240. package/dist/guidance/skillCatalog.js +70 -0
  241. package/dist/guidance/skillCatalog.js.map +1 -0
  242. package/dist/guidance/skillDiscovery.js +353 -0
  243. package/dist/guidance/skillDiscovery.js.map +1 -0
  244. package/dist/guidance/skillMetadata.js +115 -0
  245. package/dist/guidance/skillMetadata.js.map +1 -0
  246. package/dist/guidance/skillResources.js +146 -0
  247. package/dist/guidance/skillResources.js.map +1 -0
  248. package/dist/handoffOps.js +449 -0
  249. package/dist/handoffOps.js.map +1 -0
  250. package/dist/http/localAdminApp.js +203 -0
  251. package/dist/http/localAdminApp.js.map +1 -0
  252. package/dist/http/oauthMcpRuntime.js +294 -0
  253. package/dist/http/oauthMcpRuntime.js.map +1 -0
  254. package/dist/http/publicApp.js +350 -0
  255. package/dist/http/publicApp.js.map +1 -0
  256. package/dist/http/securityHeaders.js +11 -0
  257. package/dist/http/securityHeaders.js.map +1 -0
  258. package/dist/http.js +2076 -0
  259. package/dist/http.js.map +1 -0
  260. package/dist/moves/engine.js +1079 -0
  261. package/dist/moves/engine.js.map +1 -0
  262. package/dist/moves/index.js +6 -0
  263. package/dist/moves/index.js.map +1 -0
  264. package/dist/moves/planner.js +270 -0
  265. package/dist/moves/planner.js.map +1 -0
  266. package/dist/moves/recovery.js +557 -0
  267. package/dist/moves/recovery.js.map +1 -0
  268. package/dist/moves/service.js +300 -0
  269. package/dist/moves/service.js.map +1 -0
  270. package/dist/moves/types.js +11 -0
  271. package/dist/moves/types.js.map +1 -0
  272. package/dist/mutations/index.js +4 -0
  273. package/dist/mutations/index.js.map +1 -0
  274. package/dist/mutations/lifecycle.js +165 -0
  275. package/dist/mutations/lifecycle.js.map +1 -0
  276. package/dist/mutations/localService.js +163 -0
  277. package/dist/mutations/localService.js.map +1 -0
  278. package/dist/mutations/runtime.js +322 -0
  279. package/dist/mutations/runtime.js.map +1 -0
  280. package/dist/mutations/types.js +2 -0
  281. package/dist/mutations/types.js.map +1 -0
  282. package/dist/mutations/writers.js +360 -0
  283. package/dist/mutations/writers.js.map +1 -0
  284. package/dist/patchOps.js +420 -0
  285. package/dist/patchOps.js.map +1 -0
  286. package/dist/policy/approval.js +306 -0
  287. package/dist/policy/approval.js.map +1 -0
  288. package/dist/policy/audit.js +88 -0
  289. package/dist/policy/audit.js.map +1 -0
  290. package/dist/policy/authorizationFacts.js +187 -0
  291. package/dist/policy/authorizationFacts.js.map +1 -0
  292. package/dist/policy/compat.js +104 -0
  293. package/dist/policy/compat.js.map +1 -0
  294. package/dist/policy/context.js +31 -0
  295. package/dist/policy/context.js.map +1 -0
  296. package/dist/policy/enforcement.js +46 -0
  297. package/dist/policy/enforcement.js.map +1 -0
  298. package/dist/policy/evaluator.js +338 -0
  299. package/dist/policy/evaluator.js.map +1 -0
  300. package/dist/policy/executionCapabilities.js +80 -0
  301. package/dist/policy/executionCapabilities.js.map +1 -0
  302. package/dist/policy/executionResources.js +192 -0
  303. package/dist/policy/executionResources.js.map +1 -0
  304. package/dist/policy/fullAccessResources.js +23 -0
  305. package/dist/policy/fullAccessResources.js.map +1 -0
  306. package/dist/policy/hardPolicy.js +50 -0
  307. package/dist/policy/hardPolicy.js.map +1 -0
  308. package/dist/policy/identity.js +142 -0
  309. package/dist/policy/identity.js.map +1 -0
  310. package/dist/policy/integration.js +331 -0
  311. package/dist/policy/integration.js.map +1 -0
  312. package/dist/policy/pendingApprovals.js +301 -0
  313. package/dist/policy/pendingApprovals.js.map +1 -0
  314. package/dist/policy/profileStore.js +367 -0
  315. package/dist/policy/profileStore.js.map +1 -0
  316. package/dist/policy/resources.js +249 -0
  317. package/dist/policy/resources.js.map +1 -0
  318. package/dist/policy/runtime.js +713 -0
  319. package/dist/policy/runtime.js.map +1 -0
  320. package/dist/policy/schemas.js +625 -0
  321. package/dist/policy/schemas.js.map +1 -0
  322. package/dist/policy/toolPolicy.js +141 -0
  323. package/dist/policy/toolPolicy.js.map +1 -0
  324. package/dist/policy/transport.js +10 -0
  325. package/dist/policy/transport.js.map +1 -0
  326. package/dist/policy/types.js +31 -0
  327. package/dist/policy/types.js.map +1 -0
  328. package/dist/proContext.js +675 -0
  329. package/dist/proContext.js.map +1 -0
  330. package/dist/process/authority.js +18 -0
  331. package/dist/process/authority.js.map +1 -0
  332. package/dist/process/backendDiscovery.js +83 -0
  333. package/dist/process/backendDiscovery.js.map +1 -0
  334. package/dist/process/commandCompiler.js +71 -0
  335. package/dist/process/commandCompiler.js.map +1 -0
  336. package/dist/process/outputCursor.js +67 -0
  337. package/dist/process/outputCursor.js.map +1 -0
  338. package/dist/process/outputQuota.js +94 -0
  339. package/dist/process/outputQuota.js.map +1 -0
  340. package/dist/process/outputRing.js +138 -0
  341. package/dist/process/outputRing.js.map +1 -0
  342. package/dist/process/processAuditCoordinator.js +52 -0
  343. package/dist/process/processAuditCoordinator.js.map +1 -0
  344. package/dist/process/processManager.js +311 -0
  345. package/dist/process/processManager.js.map +1 -0
  346. package/dist/process/runCommand.js +332 -0
  347. package/dist/process/runCommand.js.map +1 -0
  348. package/dist/process/streamingRedactor.js +105 -0
  349. package/dist/process/streamingRedactor.js.map +1 -0
  350. package/dist/process/types.js +2 -0
  351. package/dist/process/types.js.map +1 -0
  352. package/dist/process/windowsHostClient.js +604 -0
  353. package/dist/process/windowsHostClient.js.map +1 -0
  354. package/dist/process/windowsHostProtocol.js +270 -0
  355. package/dist/process/windowsHostProtocol.js.map +1 -0
  356. package/dist/process/windowsPersistentBackend.js +263 -0
  357. package/dist/process/windowsPersistentBackend.js.map +1 -0
  358. package/dist/productionRuntime.js +907 -0
  359. package/dist/productionRuntime.js.map +1 -0
  360. package/dist/profileStore.js +231 -0
  361. package/dist/profileStore.js.map +1 -0
  362. package/dist/redact.js +124 -0
  363. package/dist/redact.js.map +1 -0
  364. package/dist/searchOps.js +186 -0
  365. package/dist/searchOps.js.map +1 -0
  366. package/dist/selfTestOps.js +786 -0
  367. package/dist/selfTestOps.js.map +1 -0
  368. package/dist/semantic/budgets.js +12 -0
  369. package/dist/semantic/budgets.js.map +1 -0
  370. package/dist/semantic/builtin/typescriptAssets.js +68 -0
  371. package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
  372. package/dist/semantic/builtin/typescriptProvider.js +211 -0
  373. package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
  374. package/dist/semantic/builtin/typescriptWorker.js +365 -0
  375. package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
  376. package/dist/semantic/diffPreview.js +36 -0
  377. package/dist/semantic/diffPreview.js.map +1 -0
  378. package/dist/semantic/index.js +11 -0
  379. package/dist/semantic/index.js.map +1 -0
  380. package/dist/semantic/manager.js +522 -0
  381. package/dist/semantic/manager.js.map +1 -0
  382. package/dist/semantic/positions.js +86 -0
  383. package/dist/semantic/positions.js.map +1 -0
  384. package/dist/semantic/previewStore.js +276 -0
  385. package/dist/semantic/previewStore.js.map +1 -0
  386. package/dist/semantic/projectResolver.js +309 -0
  387. package/dist/semantic/projectResolver.js.map +1 -0
  388. package/dist/semantic/sourceSnapshot.js +54 -0
  389. package/dist/semantic/sourceSnapshot.js.map +1 -0
  390. package/dist/semantic/status.js +46 -0
  391. package/dist/semantic/status.js.map +1 -0
  392. package/dist/semantic/types.js +2 -0
  393. package/dist/semantic/types.js.map +1 -0
  394. package/dist/server.js +8676 -0
  395. package/dist/server.js.map +1 -0
  396. package/dist/stdio.js +64 -0
  397. package/dist/stdio.js.map +1 -0
  398. package/dist/toolCardWidget.js +2000 -0
  399. package/dist/toolCardWidget.js.map +1 -0
  400. package/dist/tools/contracts/catalog.js +111 -0
  401. package/dist/tools/contracts/catalog.js.map +1 -0
  402. package/dist/tools/contracts/index.js +8 -0
  403. package/dist/tools/contracts/index.js.map +1 -0
  404. package/dist/tools/contracts/registration.js +27 -0
  405. package/dist/tools/contracts/registration.js.map +1 -0
  406. package/dist/tools/contracts/schemas.js +11 -0
  407. package/dist/tools/contracts/schemas.js.map +1 -0
  408. package/dist/tools/contracts/types.js +2 -0
  409. package/dist/tools/contracts/types.js.map +1 -0
  410. package/dist/tools/contracts/v3.js +76 -0
  411. package/dist/tools/contracts/v3.js.map +1 -0
  412. package/dist/tools/contracts/v4.js +39 -0
  413. package/dist/tools/contracts/v4.js.map +1 -0
  414. package/dist/tools/contracts/v5.js +20 -0
  415. package/dist/tools/contracts/v5.js.map +1 -0
  416. package/dist/tools/phase3dServer.js +350 -0
  417. package/dist/tools/phase3dServer.js.map +1 -0
  418. package/dist/tools/schemas/applyPatch.js +388 -0
  419. package/dist/tools/schemas/applyPatch.js.map +1 -0
  420. package/dist/tools/schemas/bash.js +202 -0
  421. package/dist/tools/schemas/bash.js.map +1 -0
  422. package/dist/tools/schemas/closeWorkspace.js +105 -0
  423. package/dist/tools/schemas/closeWorkspace.js.map +1 -0
  424. package/dist/tools/schemas/codexContext.js +402 -0
  425. package/dist/tools/schemas/codexContext.js.map +1 -0
  426. package/dist/tools/schemas/codexSessions.js +328 -0
  427. package/dist/tools/schemas/codexSessions.js.map +1 -0
  428. package/dist/tools/schemas/codexgpt.js +1068 -0
  429. package/dist/tools/schemas/codexgpt.js.map +1 -0
  430. package/dist/tools/schemas/codexgptInventory.js +359 -0
  431. package/dist/tools/schemas/codexgptInventory.js.map +1 -0
  432. package/dist/tools/schemas/codexgptSelfTest.js +563 -0
  433. package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
  434. package/dist/tools/schemas/codexpro.js +917 -0
  435. package/dist/tools/schemas/codexpro.js.map +1 -0
  436. package/dist/tools/schemas/codexproInventory.js +352 -0
  437. package/dist/tools/schemas/codexproInventory.js.map +1 -0
  438. package/dist/tools/schemas/codexproSelfTest.js +546 -0
  439. package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
  440. package/dist/tools/schemas/common.js +21 -0
  441. package/dist/tools/schemas/common.js.map +1 -0
  442. package/dist/tools/schemas/createTaskWorktree.js +51 -0
  443. package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
  444. package/dist/tools/schemas/edit.js +321 -0
  445. package/dist/tools/schemas/edit.js.map +1 -0
  446. package/dist/tools/schemas/execution.js +330 -0
  447. package/dist/tools/schemas/execution.js.map +1 -0
  448. package/dist/tools/schemas/exportProContext.js +370 -0
  449. package/dist/tools/schemas/exportProContext.js.map +1 -0
  450. package/dist/tools/schemas/getTaskWorktree.js +19 -0
  451. package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
  452. package/dist/tools/schemas/gitBranch.js +42 -0
  453. package/dist/tools/schemas/gitBranch.js.map +1 -0
  454. package/dist/tools/schemas/gitCommit.js +40 -0
  455. package/dist/tools/schemas/gitCommit.js.map +1 -0
  456. package/dist/tools/schemas/gitCreateBranch.js +22 -0
  457. package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
  458. package/dist/tools/schemas/gitDiff.js +222 -0
  459. package/dist/tools/schemas/gitDiff.js.map +1 -0
  460. package/dist/tools/schemas/gitLog.js +41 -0
  461. package/dist/tools/schemas/gitLog.js.map +1 -0
  462. package/dist/tools/schemas/gitRestore.js +47 -0
  463. package/dist/tools/schemas/gitRestore.js.map +1 -0
  464. package/dist/tools/schemas/gitStage.js +33 -0
  465. package/dist/tools/schemas/gitStage.js.map +1 -0
  466. package/dist/tools/schemas/gitStash.js +102 -0
  467. package/dist/tools/schemas/gitStash.js.map +1 -0
  468. package/dist/tools/schemas/gitStatus.js +226 -0
  469. package/dist/tools/schemas/gitStatus.js.map +1 -0
  470. package/dist/tools/schemas/gitV4Common.js +205 -0
  471. package/dist/tools/schemas/gitV4Common.js.map +1 -0
  472. package/dist/tools/schemas/guidance.js +40 -0
  473. package/dist/tools/schemas/guidance.js.map +1 -0
  474. package/dist/tools/schemas/handoffToAgent.js +276 -0
  475. package/dist/tools/schemas/handoffToAgent.js.map +1 -0
  476. package/dist/tools/schemas/handoffToCodex.js +137 -0
  477. package/dist/tools/schemas/handoffToCodex.js.map +1 -0
  478. package/dist/tools/schemas/inspectWorkspace.js +379 -0
  479. package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
  480. package/dist/tools/schemas/listTaskWorktrees.js +21 -0
  481. package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
  482. package/dist/tools/schemas/listWorkspaces.js +134 -0
  483. package/dist/tools/schemas/listWorkspaces.js.map +1 -0
  484. package/dist/tools/schemas/loadSkill.js +619 -0
  485. package/dist/tools/schemas/loadSkill.js.map +1 -0
  486. package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
  487. package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
  488. package/dist/tools/schemas/movePaths.js +175 -0
  489. package/dist/tools/schemas/movePaths.js.map +1 -0
  490. package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
  491. package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
  492. package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
  493. package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
  494. package/dist/tools/schemas/openWorkspace.js +193 -0
  495. package/dist/tools/schemas/openWorkspace.js.map +1 -0
  496. package/dist/tools/schemas/queryAuditEvents.js +193 -0
  497. package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
  498. package/dist/tools/schemas/read.js +199 -0
  499. package/dist/tools/schemas/read.js.map +1 -0
  500. package/dist/tools/schemas/readCodexSession.js +353 -0
  501. package/dist/tools/schemas/readCodexSession.js.map +1 -0
  502. package/dist/tools/schemas/readHandoff.js +446 -0
  503. package/dist/tools/schemas/readHandoff.js.map +1 -0
  504. package/dist/tools/schemas/removeTaskWorktree.js +40 -0
  505. package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
  506. package/dist/tools/schemas/search.js +235 -0
  507. package/dist/tools/schemas/search.js.map +1 -0
  508. package/dist/tools/schemas/semantic.js +195 -0
  509. package/dist/tools/schemas/semantic.js.map +1 -0
  510. package/dist/tools/schemas/serverConfig.js +157 -0
  511. package/dist/tools/schemas/serverConfig.js.map +1 -0
  512. package/dist/tools/schemas/showChanges.js +283 -0
  513. package/dist/tools/schemas/showChanges.js.map +1 -0
  514. package/dist/tools/schemas/transactionResult.js +11 -0
  515. package/dist/tools/schemas/transactionResult.js.map +1 -0
  516. package/dist/tools/schemas/tree.js +136 -0
  517. package/dist/tools/schemas/tree.js.map +1 -0
  518. package/dist/tools/schemas/undoChangeSet.js +152 -0
  519. package/dist/tools/schemas/undoChangeSet.js.map +1 -0
  520. package/dist/tools/schemas/waitForHandoff.js +462 -0
  521. package/dist/tools/schemas/waitForHandoff.js.map +1 -0
  522. package/dist/tools/schemas/workspaceSnapshot.js +145 -0
  523. package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
  524. package/dist/tools/schemas/write.js +285 -0
  525. package/dist/tools/schemas/write.js.map +1 -0
  526. package/dist/transactions/atomicFs.js +438 -0
  527. package/dist/transactions/atomicFs.js.map +1 -0
  528. package/dist/transactions/atomicStateFile.js +190 -0
  529. package/dist/transactions/atomicStateFile.js.map +1 -0
  530. package/dist/transactions/engine.js +574 -0
  531. package/dist/transactions/engine.js.map +1 -0
  532. package/dist/transactions/index.js +12 -0
  533. package/dist/transactions/index.js.map +1 -0
  534. package/dist/transactions/installation.js +158 -0
  535. package/dist/transactions/installation.js.map +1 -0
  536. package/dist/transactions/manifestV2Store.js +96 -0
  537. package/dist/transactions/manifestV2Store.js.map +1 -0
  538. package/dist/transactions/participantRecovery.js +98 -0
  539. package/dist/transactions/participantRecovery.js.map +1 -0
  540. package/dist/transactions/recovery.js +513 -0
  541. package/dist/transactions/recovery.js.map +1 -0
  542. package/dist/transactions/schemas.js +365 -0
  543. package/dist/transactions/schemas.js.map +1 -0
  544. package/dist/transactions/stateRoot.js +63 -0
  545. package/dist/transactions/stateRoot.js.map +1 -0
  546. package/dist/transactions/types.js +11 -0
  547. package/dist/transactions/types.js.map +1 -0
  548. package/dist/transactions/workspaceLock.js +201 -0
  549. package/dist/transactions/workspaceLock.js.map +1 -0
  550. package/dist/workspaceOps.js +924 -0
  551. package/dist/workspaceOps.js.map +1 -0
  552. package/dist/worktrees/candidateWorkspace.js +566 -0
  553. package/dist/worktrees/candidateWorkspace.js.map +1 -0
  554. package/dist/worktrees/manager.js +258 -0
  555. package/dist/worktrees/manager.js.map +1 -0
  556. package/dist/worktrees/materializer.js +60 -0
  557. package/dist/worktrees/materializer.js.map +1 -0
  558. package/dist/worktrees/mergeExecute.js +498 -0
  559. package/dist/worktrees/mergeExecute.js.map +1 -0
  560. package/dist/worktrees/mergePlanStore.js +247 -0
  561. package/dist/worktrees/mergePlanStore.js.map +1 -0
  562. package/dist/worktrees/mergePrepare.js +709 -0
  563. package/dist/worktrees/mergePrepare.js.map +1 -0
  564. package/dist/worktrees/recovery.js +294 -0
  565. package/dist/worktrees/recovery.js.map +1 -0
  566. package/dist/worktrees/remove.js +296 -0
  567. package/dist/worktrees/remove.js.map +1 -0
  568. package/dist/worktrees/remover.js +57 -0
  569. package/dist/worktrees/remover.js.map +1 -0
  570. package/dist/worktrees/root.js +47 -0
  571. package/dist/worktrees/root.js.map +1 -0
  572. package/dist/worktrees/service.js +245 -0
  573. package/dist/worktrees/service.js.map +1 -0
  574. package/dist/worktrees/store.js +156 -0
  575. package/dist/worktrees/store.js.map +1 -0
  576. package/dist/worktrees/treeManifest.js +106 -0
  577. package/dist/worktrees/treeManifest.js.map +1 -0
  578. package/dist/worktrees/verificationReceipts.js +215 -0
  579. package/dist/worktrees/verificationReceipts.js.map +1 -0
  580. package/dist/worktrees/verificationTerminal.js +23 -0
  581. package/dist/worktrees/verificationTerminal.js.map +1 -0
  582. package/dist/worktrees/workspaceAuthority.js +64 -0
  583. package/dist/worktrees/workspaceAuthority.js.map +1 -0
  584. package/docs/favicon.svg +5 -0
  585. package/docs/index.html +624 -0
  586. package/docs/og.svg +52 -0
  587. package/docs/script.js +33 -0
  588. package/docs/star.svg +11 -0
  589. package/docs/styles.css +1571 -0
  590. package/docs/zh.html +428 -0
  591. package/package.json +121 -0
  592. package/scripts/analysis-cli-smoke.mjs +81 -0
  593. package/scripts/analysis-smoke.mjs +179 -0
  594. package/scripts/atomic-file.mjs +137 -0
  595. package/scripts/ci-change-classifier.mjs +59 -0
  596. package/scripts/ci-failure-summary.mjs +92 -0
  597. package/scripts/cloudflared-installer.mjs +215 -0
  598. package/scripts/cloudflared-release.mjs +63 -0
  599. package/scripts/codexgpt-entry.mjs +235 -0
  600. package/scripts/codexgpt.mjs +4987 -0
  601. package/scripts/connector-auth-output-shim.cjs +66 -0
  602. package/scripts/doctor-smoke.mjs +90 -0
  603. package/scripts/doctor.mjs +165 -0
  604. package/scripts/exact-head-ci.mjs +126 -0
  605. package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
  606. package/scripts/execute-handoff-smoke.mjs +1117 -0
  607. package/scripts/g8-u-live-probe.mjs +208 -0
  608. package/scripts/http-smoke-compat.mjs +151 -0
  609. package/scripts/http-smoke.mjs +776 -0
  610. package/scripts/long-task-runner.mjs +1037 -0
  611. package/scripts/oauth-admin.mjs +1608 -0
  612. package/scripts/output-bounds.mjs +29 -0
  613. package/scripts/owned-temp-root.d.mts +50 -0
  614. package/scripts/owned-temp-root.mjs +567 -0
  615. package/scripts/phase-4a-smoke.mjs +36 -0
  616. package/scripts/policy-windows-spike.mjs +135 -0
  617. package/scripts/pro-apply.mjs +152 -0
  618. package/scripts/pro-bundle.mjs +121 -0
  619. package/scripts/pro-smoke.mjs +97 -0
  620. package/scripts/process-identity.mjs +67 -0
  621. package/scripts/repository-policy.mjs +166 -0
  622. package/scripts/run-and-summarize.mjs +134 -0
  623. package/scripts/run-smoke.mjs +52 -0
  624. package/scripts/run-with-cleanup.mjs +98 -0
  625. package/scripts/settings-smoke-platform-compat.mjs +85 -0
  626. package/scripts/settings-smoke.mjs +769 -0
  627. package/scripts/smoke-platform-compat.mjs +302 -0
  628. package/scripts/smoke.mjs +1180 -0
  629. package/scripts/stress-contract-compat.mjs +94 -0
  630. package/scripts/stress.mjs +882 -0
  631. package/scripts/test-domains.mjs +247 -0
  632. package/scripts/test-execution-profile-manifest.mjs +273 -0
  633. package/scripts/test-execution-profiles.mjs +147 -0
  634. package/scripts/test-performance-reporter.mjs +291 -0
  635. package/scripts/toolchain-manager.mjs +266 -0
  636. package/scripts/toolchains.json +19 -0
  637. package/scripts/windows-conpty-probe-child.mjs +82 -0
  638. package/scripts/windows-conpty-worker.ps1 +24 -0
  639. package/scripts/windows-credential-host-manifest.json +16 -0
  640. package/scripts/windows-credential-host-protocol-v1.json +16 -0
  641. package/scripts/windows-credential-host.cs +256 -0
  642. package/scripts/windows-credential-host.ps1 +26 -0
  643. package/scripts/windows-local-control-manifest.json +23 -0
  644. package/scripts/windows-local-control-spike.cs +738 -0
  645. package/scripts/windows-local-control-spike.mjs +415 -0
  646. package/scripts/windows-local-control-spike.ps1 +35 -0
  647. package/scripts/windows-local-control.cs +738 -0
  648. package/scripts/windows-local-control.ps1 +35 -0
  649. package/scripts/windows-native-api-inventory-v1.json +90 -0
  650. package/scripts/windows-process-host-manifest.json +20 -0
  651. package/scripts/windows-process-host-protocol-v1.json +59 -0
  652. package/scripts/windows-process-host.cs +2385 -0
  653. package/scripts/windows-process-host.ps1 +59 -0
  654. package/scripts/windows-realpath-shim.cjs +78 -0
@@ -0,0 +1,51 @@
1
+ import { hasSecretValue } from "../redact.js";
2
+ import { revalidateGitRepository } from "./repositoryIdentity.js";
3
+ import { gitMutationError, runGitRequired } from "./mutationContext.js";
4
+ function oidPattern(format) {
5
+ return new RegExp(`^[a-f0-9]{${format === "sha1" ? 40 : 64}}$`);
6
+ }
7
+ export class GitBranchServiceV4 {
8
+ context;
9
+ constructor(context) {
10
+ this.context = context;
11
+ }
12
+ async create(input) {
13
+ if (!/^codex\/[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(input.name) ||
14
+ hasSecretValue(input.name) ||
15
+ /(?:token|secret|password)[._-][A-Za-z0-9_-]{16,}/i.test(input.name)) {
16
+ throw gitMutationError("GIT_SECRET_BLOCKED");
17
+ }
18
+ const verified = await this.context.verifyState({
19
+ workspace: input.workspace,
20
+ guard: input.guard,
21
+ stateToken: input.stateToken
22
+ });
23
+ const repository = verified.repository;
24
+ const ref = `refs/heads/${input.name}`;
25
+ const baseRef = input.base.kind === "current_head"
26
+ ? "HEAD"
27
+ : this.context.resolveBranch(repository.repositoryId, input.base.branch_id);
28
+ await revalidateGitRepository(repository);
29
+ const baseResult = await runGitRequired(this.context.options.executor, repository, ["rev-parse", "--verify", `${baseRef}^{commit}`], { stdoutLimitBytes: 256 });
30
+ const oid = baseResult.stdout.toString("ascii").trim();
31
+ if (!oidPattern(repository.objectFormat).test(oid))
32
+ throw gitMutationError("GIT_REF_CHANGED");
33
+ const zeroOid = "0".repeat(oid.length);
34
+ const update = await this.context.options.executor.run(repository, ["update-ref", "--no-deref", ref, oid, zeroOid]);
35
+ if (update.status !== 0 || update.timedOut ||
36
+ update.stdoutTruncated || update.stderrTruncated)
37
+ throw gitMutationError("GIT_REF_CHANGED");
38
+ const stateToken = await this.context.refreshState({
39
+ workspace: input.workspace,
40
+ guard: input.guard
41
+ });
42
+ return {
43
+ repository_id: repository.repositoryId,
44
+ branch_id: this.context.branchId(repository.repositoryId, ref),
45
+ oid,
46
+ created: true,
47
+ state_token: stateToken
48
+ };
49
+ }
50
+ }
51
+ //# sourceMappingURL=branchService.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"branchService.js","sourceRoot":"","sources":["../../src/git/branchService.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAwB,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE9F,SAAS,UAAU,CAAC,MAAyB;IAC3C,OAAO,IAAI,MAAM,CAAC,aAAa,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,kBAAkB;IACR;IAArB,YAAqB,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAEtD,KAAK,CAAC,MAAM,CAAC,KAMZ;QAOC,IACE,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACxD,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,mDAAmD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EACpE,CAAC;YACD,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACvC,MAAM,GAAG,GAAG,cAAc,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;YAChD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,cAAc,CACrC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,WAAW,CAAC,EAChD,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC;QACF,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CACpD,UAAU,EACV,CAAC,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAChD,CAAC;QACF,IACE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ;YACtC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe;YAChD,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO;YACL,aAAa,EAAE,UAAU,CAAC,YAAY;YACtC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC;YAC9D,GAAG;YACH,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC;CACF"}
@@ -0,0 +1,143 @@
1
+ import { createHash } from "node:crypto";
2
+ import fsp from "node:fs/promises";
3
+ import path from "node:path";
4
+ const issuedCapabilityEvidence = new WeakSet();
5
+ function gitError(code) {
6
+ return new Error(code);
7
+ }
8
+ function sha256(value) {
9
+ return createHash("sha256").update(value).digest("hex");
10
+ }
11
+ function stableJson(value) {
12
+ if (Array.isArray(value))
13
+ return `[${value.map(stableJson).join(",")}]`;
14
+ if (value && typeof value === "object") {
15
+ const object = value;
16
+ return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableJson(object[key])}`).join(",")}}`;
17
+ }
18
+ return JSON.stringify(value);
19
+ }
20
+ function samePath(left, right, platform) {
21
+ return platform === "win32"
22
+ ? left.toLocaleLowerCase("en-US") === right.toLocaleLowerCase("en-US")
23
+ : left === right;
24
+ }
25
+ export function enumerateGitExecutableCandidates(options = {}) {
26
+ const platform = options.platform ?? process.platform;
27
+ if (platform === "win32") {
28
+ const systemDrive = path.win32.parse(process.execPath).root.replace(/[\\/]$/, "") || "C:";
29
+ const programFiles = path.win32.resolve(options.programFiles ?? `${systemDrive}\\Program Files`);
30
+ return Object.freeze([
31
+ path.win32.join(programFiles, "Git", "cmd", "git.exe"),
32
+ path.win32.join(programFiles, "Git", "bin", "git.exe")
33
+ ]);
34
+ }
35
+ return Object.freeze(["/usr/bin/git", "/usr/local/bin/git"]);
36
+ }
37
+ export async function bindGitExecutable(executablePath) {
38
+ if (typeof executablePath !== "string" || executablePath.includes("\0") || !path.isAbsolute(executablePath)) {
39
+ throw gitError("GIT_EXECUTABLE_INVALID");
40
+ }
41
+ let handle;
42
+ try {
43
+ handle = await fsp.open(executablePath, "r");
44
+ }
45
+ catch {
46
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
47
+ }
48
+ try {
49
+ const [stat, content, realPath] = await Promise.all([
50
+ handle.stat({ bigint: true }),
51
+ handle.readFile(),
52
+ fsp.realpath(executablePath)
53
+ ]);
54
+ if (!stat.isFile())
55
+ throw gitError("GIT_EXECUTABLE_INVALID");
56
+ const digest = sha256(content);
57
+ return Object.freeze({
58
+ schemaVersion: 1,
59
+ realPath,
60
+ sha256: digest,
61
+ identity: `sha256:${digest}:dev:${stat.dev.toString()}:ino:${stat.ino.toString()}`,
62
+ dev: stat.dev.toString(),
63
+ ino: stat.ino.toString(),
64
+ size: stat.size.toString(),
65
+ mtimeNs: stat.mtimeNs.toString()
66
+ });
67
+ }
68
+ finally {
69
+ await handle.close();
70
+ }
71
+ }
72
+ export async function verifyGitExecutableBinding(binding, platform = process.platform) {
73
+ const current = await bindGitExecutable(binding.realPath).catch(() => {
74
+ throw gitError("GIT_EXECUTABLE_CHANGED");
75
+ });
76
+ if (!samePath(current.realPath, binding.realPath, platform) ||
77
+ current.sha256 !== binding.sha256 ||
78
+ current.dev !== binding.dev ||
79
+ current.ino !== binding.ino ||
80
+ current.size !== binding.size)
81
+ throw gitError("GIT_EXECUTABLE_CHANGED");
82
+ return current;
83
+ }
84
+ export async function resolveGitExecutable(options = {}) {
85
+ if (options.explicitPath)
86
+ return bindGitExecutable(options.explicitPath);
87
+ for (const candidate of enumerateGitExecutableCandidates(options)) {
88
+ try {
89
+ return await bindGitExecutable(candidate);
90
+ }
91
+ catch (error) {
92
+ if (error.message !== "GIT_CAPABILITY_UNAVAILABLE")
93
+ throw error;
94
+ }
95
+ }
96
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
97
+ }
98
+ export function assertGitCapabilityEvidence(value) {
99
+ const evidence = value;
100
+ const executable = evidence?.executable;
101
+ if (!evidence || typeof evidence !== "object" || !issuedCapabilityEvidence.has(evidence) ||
102
+ evidence.schemaVersion !== 1 || evidence.executionIsolation !== "none" ||
103
+ evidence.repositoryIntegrations !== "disabled" ||
104
+ typeof evidence.version !== "string" || !/^git version \d+\.\d+\.\d+(?:\.[A-Za-z0-9.-]+)?$/.test(evidence.version) ||
105
+ typeof evidence.capabilityRevision !== "string" || !/^[a-f0-9]{64}$/.test(evidence.capabilityRevision) ||
106
+ !executable || executable.schemaVersion !== 1 || typeof executable.realPath !== "string" ||
107
+ typeof executable.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(executable.sha256) ||
108
+ typeof executable.identity !== "string" || typeof executable.dev !== "string" ||
109
+ typeof executable.ino !== "string" || typeof executable.size !== "string" ||
110
+ typeof executable.mtimeNs !== "string")
111
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
112
+ return evidence;
113
+ }
114
+ export function createGitCapabilityEvidence(input) {
115
+ if (!/^git version \d+\.\d+\.\d+(?:\.[A-Za-z0-9.-]+)?$/.test(input.version) ||
116
+ !/^[a-f0-9]{64}$/.test(input.hostManifestRevision) ||
117
+ !/^[a-f0-9]{64}$/.test(input.implementationRevision))
118
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
119
+ const capabilityRevision = sha256(stableJson({
120
+ schemaVersion: 1,
121
+ executable: {
122
+ realPath: input.executable.realPath,
123
+ sha256: input.executable.sha256,
124
+ identity: input.executable.identity
125
+ },
126
+ version: input.version,
127
+ hostManifestRevision: input.hostManifestRevision,
128
+ implementationRevision: input.implementationRevision,
129
+ executionIsolation: "none",
130
+ repositoryIntegrations: "disabled"
131
+ }));
132
+ const evidence = Object.freeze({
133
+ schemaVersion: 1,
134
+ executable: input.executable,
135
+ version: input.version,
136
+ capabilityRevision,
137
+ executionIsolation: "none",
138
+ repositoryIntegrations: "disabled"
139
+ });
140
+ issuedCapabilityEvidence.add(evidence);
141
+ return evidence;
142
+ }
143
+ //# sourceMappingURL=capabilities.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/git/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAsB7B,MAAM,wBAAwB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEvD,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvH,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,QAAyB;IACtE,OAAO,QAAQ,KAAK,OAAO;QACzB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC;QACtE,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,UAG7C,EAAE;IACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;QAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,WAAW,iBAAiB,CAAC,CAAC;QACjG,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,cAAsB;IAC5D,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5G,MAAM,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,EAAE;YACjB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,aAAa,EAAE,CAAC;YAChB,QAAQ;YACR,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,UAAU,MAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAClF,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;YACxB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA6B,EAC7B,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACnE,MAAM,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,IACE,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACvD,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QACjC,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;QAC3B,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;QAC3B,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAC7B,MAAM,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAIvC,EAAE;IACJ,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzE,KAAK,MAAM,SAAS,IAAI,gCAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAe,CAAC,OAAO,KAAK,4BAA4B;gBAAE,MAAM,KAAK,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,QAAQ,GAAG,KAAuC,CAAC;IACzD,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAuD,CAAC;IACrF,IACE,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAkB,CAAC;QAC9F,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,QAAQ,CAAC,kBAAkB,KAAK,MAAM;QACtE,QAAQ,CAAC,sBAAsB,KAAK,UAAU;QAC9C,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,kDAAkD,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClH,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACtG,CAAC,UAAU,IAAI,UAAU,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;QACxF,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAClF,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAC7E,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACzE,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QACtC,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC/C,OAAO,QAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAK3C;IACC,IACE,CAAC,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACvE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAClD,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;QACpD,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC/C,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE;YACV,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ;YACnC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;YAC/B,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ;SACpC;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,kBAAkB,EAAE,MAAM;QAC1B,sBAAsB,EAAE,UAAU;KACnC,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,aAAa,EAAE,CAAU;QACzB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,kBAAkB;QAClB,kBAAkB,EAAE,MAAe;QACnC,sBAAsB,EAAE,UAAmB;KAC5C,CAAC,CAAC;IACH,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC"}
@@ -0,0 +1,344 @@
1
+ import fsp from "node:fs/promises";
2
+ import path from "node:path";
3
+ import { hasSecretValue } from "../redact.js";
4
+ import { gitMutationError, runGitRequired, sha256Git } from "./mutationContext.js";
5
+ import { GitObjectQuarantine } from "./objectQuarantine.js";
6
+ function safeUtf8(value, code) {
7
+ try {
8
+ return new TextDecoder("utf-8", { fatal: true }).decode(value).trim();
9
+ }
10
+ catch {
11
+ throw gitMutationError(code);
12
+ }
13
+ }
14
+ function parseNulPaths(value) {
15
+ return safeUtf8(value, "GIT_REPOSITORY_UNSAFE").split("\0").filter(Boolean);
16
+ }
17
+ async function localIdentity(context, repository) {
18
+ const read = async (key) => {
19
+ const result = await context.options.executor.run(repository, [
20
+ "config", "--local", "--no-includes", "--get", key
21
+ ], { stdoutLimitBytes: 1024 });
22
+ if (result.status !== 0 || result.timedOut || result.stdoutTruncated || result.stderrTruncated) {
23
+ throw gitMutationError("GIT_IDENTITY_REQUIRED");
24
+ }
25
+ const value = safeUtf8(result.stdout, "GIT_IDENTITY_REQUIRED");
26
+ if (!value || value.length > 320 || /[\u0000\r\n]/u.test(value) || hasSecretValue(value)) {
27
+ throw gitMutationError("GIT_IDENTITY_REQUIRED");
28
+ }
29
+ return value;
30
+ };
31
+ return { name: await read("user.name"), email: await read("user.email") };
32
+ }
33
+ async function stagedPathsAndCounts(context, repository, guard) {
34
+ const result = await runGitRequired(context.options.executor, repository, [
35
+ "diff", "--cached", "--name-status", "-z", "--no-renames", "--"
36
+ ]);
37
+ const fields = parseNulPaths(result.stdout);
38
+ if (fields.length === 0 || fields.length % 2 !== 0)
39
+ throw gitMutationError("GIT_STATE_CHANGED");
40
+ const paths = [];
41
+ const counts = { added: 0, modified: 0, deleted: 0, renamed: 0 };
42
+ for (let index = 0; index < fields.length; index += 2) {
43
+ const status = fields[index];
44
+ const relPath = fields[index + 1];
45
+ if (!/^[AMD]$/.test(status) || guard.isBlockedRelativePath(relPath) || hasSecretValue(relPath)) {
46
+ throw gitMutationError(status && /^[AMD]$/.test(status) ? "GIT_PATH_BLOCKED" : "GIT_UNMERGED");
47
+ }
48
+ if (status === "A")
49
+ counts.added += 1;
50
+ else if (status === "M")
51
+ counts.modified += 1;
52
+ else
53
+ counts.deleted += 1;
54
+ paths.push(relPath);
55
+ }
56
+ return { paths, counts };
57
+ }
58
+ async function scanStagedBlobs(context, repository, paths) {
59
+ let total = 0;
60
+ for (const relPath of paths) {
61
+ const entry = await context.options.executor.run(repository, ["ls-files", "--stage", "-z", "--", relPath], { stdoutLimitBytes: 4096 });
62
+ if (entry.status !== 0 || entry.timedOut || entry.stdoutTruncated || entry.stderrTruncated) {
63
+ throw gitMutationError("GIT_INDEX_CHANGED");
64
+ }
65
+ if (entry.stdout.length === 0)
66
+ continue;
67
+ const match = /^(100644|100755) ([a-f0-9]{40}|[a-f0-9]{64}) 0\t/.exec(entry.stdout.toString("utf8"));
68
+ if (!match)
69
+ throw gitMutationError("GIT_UNMERGED");
70
+ const blob = await runGitRequired(context.options.executor, repository, ["cat-file", "blob", match[2]], { stdoutLimitBytes: 16 * 1024 * 1024 });
71
+ total += blob.stdout.length;
72
+ if (total > 32 * 1024 * 1024)
73
+ throw gitMutationError("GIT_SCAN_LIMIT");
74
+ if (hasSecretValue(blob.stdout.toString("latin1")))
75
+ throw gitMutationError("GIT_SECRET_BLOCKED");
76
+ }
77
+ }
78
+ async function readStableFile(file, maximum) {
79
+ const lexical = await fsp.lstat(file, { bigint: true }).catch(() => {
80
+ throw gitMutationError("GIT_REPOSITORY_UNSAFE");
81
+ });
82
+ if (!lexical.isFile() ||
83
+ lexical.isSymbolicLink() ||
84
+ lexical.nlink !== 1n ||
85
+ lexical.size > BigInt(maximum))
86
+ throw gitMutationError("GIT_REPOSITORY_UNSAFE");
87
+ const handle = await fsp.open(file, "r").catch(() => {
88
+ throw gitMutationError("GIT_REPOSITORY_UNSAFE");
89
+ });
90
+ try {
91
+ const [bytes, stat] = await Promise.all([handle.readFile(), handle.stat({ bigint: true })]);
92
+ if (!stat.isFile() ||
93
+ stat.nlink !== 1n ||
94
+ stat.dev !== lexical.dev ||
95
+ stat.ino !== lexical.ino ||
96
+ stat.size !== lexical.size ||
97
+ stat.mtimeNs !== lexical.mtimeNs)
98
+ throw gitMutationError("GIT_REPOSITORY_UNSAFE");
99
+ return bytes;
100
+ }
101
+ finally {
102
+ await handle.close();
103
+ }
104
+ }
105
+ function parseCommitObject(value, oidWidth) {
106
+ const separator = value.indexOf(Buffer.from("\n\n"));
107
+ if (separator < 1)
108
+ throw gitMutationError("GIT_STATE_CHANGED");
109
+ let headers;
110
+ try {
111
+ headers = new TextDecoder("utf-8", { fatal: true }).decode(value.subarray(0, separator));
112
+ }
113
+ catch {
114
+ throw gitMutationError("GIT_STATE_CHANGED");
115
+ }
116
+ const tree = new RegExp(`^tree ([a-f0-9]{${oidWidth}})$`, "mu").exec(headers)?.[1];
117
+ const parents = [...headers.matchAll(new RegExp(`^parent ([a-f0-9]{${oidWidth}})$`, "gmu"))]
118
+ .map((match) => match[1]);
119
+ if (!tree || parents.length < 1 || parents.length > 2)
120
+ throw gitMutationError("GIT_STATE_CHANGED");
121
+ return {
122
+ treeOid: tree,
123
+ parentOids: parents,
124
+ signed: /^gpgsig /mu.test(headers),
125
+ message: value.subarray(separator + 2)
126
+ };
127
+ }
128
+ async function createShadowGitDirectory(input) {
129
+ const shadowGitDir = path.join(input.privateRoot, "shadow.git");
130
+ const privateIndex = path.join(input.privateRoot, "index");
131
+ const quarantineRoot = path.join(input.privateRoot, "objects");
132
+ const shadowRefFile = path.join(shadowGitDir, "refs", "heads", "codexgpt-integration");
133
+ await fsp.mkdir(path.dirname(shadowRefFile), { recursive: true, mode: 0o700 });
134
+ await fsp.mkdir(quarantineRoot, { mode: 0o700 });
135
+ await fsp.writeFile(privateIndex, input.indexBytes, { flag: "wx", mode: 0o600 });
136
+ await fsp.writeFile(path.join(shadowGitDir, "HEAD"), "ref: refs/heads/codexgpt-integration\n", {
137
+ flag: "wx",
138
+ mode: 0o600
139
+ });
140
+ await fsp.writeFile(shadowRefFile, `${input.headOid}\n`, { flag: "wx", mode: 0o600 });
141
+ return { shadowGitDir, privateIndex, quarantineRoot, shadowRefFile };
142
+ }
143
+ export class GitCommitServiceV4 {
144
+ context;
145
+ indexTokens;
146
+ hooks;
147
+ constructor(context, indexTokens, hooks = {}) {
148
+ this.context = context;
149
+ this.indexTokens = indexTokens;
150
+ this.hooks = hooks;
151
+ }
152
+ async commit(input) {
153
+ if (!input.message || Buffer.byteLength(input.message, "utf8") > 16 * 1024 || hasSecretValue(input.message)) {
154
+ throw gitMutationError("GIT_SECRET_BLOCKED");
155
+ }
156
+ const token = this.indexTokens.inspect(input.indexToken);
157
+ if (token.workspaceId !== input.workspace.id ||
158
+ token.capabilityRevision !== this.context.options.executor.capabilityRevision)
159
+ throw gitMutationError("GIT_STATE_TOKEN_INVALID");
160
+ const repository = await this.context.admitWorkspace(input.workspace);
161
+ if (repository.repositoryId !== token.repositoryId ||
162
+ repository.repositoryFingerprint !== token.repositoryFingerprint)
163
+ throw gitMutationError("GIT_INDEX_CHANGED");
164
+ const headRefResult = await this.context.options.executor.run(repository, [
165
+ "symbolic-ref", "-q", "HEAD"
166
+ ], { stdoutLimitBytes: 512 });
167
+ if (headRefResult.status !== 0)
168
+ throw gitMutationError("GIT_REF_CHANGED");
169
+ const headRef = safeUtf8(headRefResult.stdout, "GIT_REF_CHANGED");
170
+ if (!headRef.startsWith("refs/heads/"))
171
+ throw gitMutationError("GIT_REF_CHANGED");
172
+ const headOid = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["rev-parse", "--verify", "HEAD"], { stdoutLimitBytes: 256 })).stdout, "GIT_REF_CHANGED");
173
+ if (headOid !== token.headOid)
174
+ throw gitMutationError("GIT_REF_CHANGED");
175
+ const treeOid = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["write-tree"], { stdoutLimitBytes: 256 })).stdout, "GIT_INDEX_CHANGED");
176
+ if (treeOid !== token.indexTreeOid)
177
+ throw gitMutationError("GIT_INDEX_CHANGED");
178
+ const staged = await stagedPathsAndCounts(this.context, repository, input.guard);
179
+ await scanStagedBlobs(this.context, repository, staged.paths);
180
+ const identity = await localIdentity(this.context, repository);
181
+ const finalHead = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["rev-parse", "--verify", "HEAD"], { stdoutLimitBytes: 256 })).stdout, "GIT_REF_CHANGED");
182
+ const finalTree = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["write-tree"], { stdoutLimitBytes: 256 })).stdout, "GIT_INDEX_CHANGED");
183
+ if (finalHead !== headOid)
184
+ throw gitMutationError("GIT_REF_CHANGED");
185
+ if (finalTree !== treeOid)
186
+ throw gitMutationError("GIT_INDEX_CHANGED");
187
+ const commitObject = await runGitRequired(this.context.options.executor, repository, ["commit-tree", treeOid, "-p", headOid], {
188
+ stdin: Buffer.from(input.message, "utf8"),
189
+ stdoutLimitBytes: 256,
190
+ identity: {
191
+ authorName: identity.name,
192
+ authorEmail: identity.email,
193
+ committerName: identity.name,
194
+ committerEmail: identity.email
195
+ }
196
+ });
197
+ const commitOid = safeUtf8(commitObject.stdout, "GIT_STATE_CHANGED");
198
+ await this.hooks.beforeRefUpdate?.();
199
+ const update = await this.context.options.executor.run(repository, [
200
+ "update-ref", "--no-deref", headRef, commitOid, headOid
201
+ ]);
202
+ if (update.status !== 0 || update.timedOut || update.stdoutTruncated || update.stderrTruncated) {
203
+ throw gitMutationError("GIT_REF_CHANGED");
204
+ }
205
+ this.indexTokens.revoke(input.indexToken);
206
+ const stateToken = await this.context.refreshState({
207
+ workspace: input.workspace,
208
+ guard: input.guard
209
+ });
210
+ return {
211
+ repository_id: repository.repositoryId,
212
+ commit_oid: commitOid,
213
+ tree_oid: treeOid,
214
+ parent_oids: [headOid],
215
+ file_counts: staged.counts,
216
+ hooks_executed: false,
217
+ signature: "none",
218
+ state_token: stateToken,
219
+ repository_integrations: "disabled",
220
+ execution_isolation: "none"
221
+ };
222
+ }
223
+ async commitApproved(input) {
224
+ if (!input.message || Buffer.byteLength(input.message, "utf8") > 16 * 1024 || hasSecretValue(input.message)) {
225
+ throw gitMutationError("GIT_SECRET_BLOCKED");
226
+ }
227
+ const gate = this.hooks.integrationGate;
228
+ if (!gate?.enabled)
229
+ throw gitMutationError("GIT_INTEGRATION_REQUIRED");
230
+ const reviewed = gate.inspect(input.integrationReviewToken);
231
+ const token = this.indexTokens.inspect(input.indexToken);
232
+ if (token.workspaceId !== input.workspace.id ||
233
+ reviewed.workspaceId !== input.workspace.id ||
234
+ reviewed.repositoryId !== token.repositoryId ||
235
+ token.capabilityRevision !== this.context.options.executor.capabilityRevision)
236
+ throw gitMutationError("GIT_STATE_TOKEN_INVALID");
237
+ const repository = await this.context.admitWorkspace(input.workspace);
238
+ if (repository.repositoryId !== token.repositoryId ||
239
+ repository.repositoryFingerprint !== token.repositoryFingerprint)
240
+ throw gitMutationError("GIT_INDEX_CHANGED");
241
+ const headRefResult = await this.context.options.executor.run(repository, [
242
+ "symbolic-ref", "-q", "HEAD"
243
+ ], { stdoutLimitBytes: 512 });
244
+ if (headRefResult.status !== 0)
245
+ throw gitMutationError("GIT_REF_CHANGED");
246
+ const headRef = safeUtf8(headRefResult.stdout, "GIT_REF_CHANGED");
247
+ if (!headRef.startsWith("refs/heads/"))
248
+ throw gitMutationError("GIT_REF_CHANGED");
249
+ const headOid = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["rev-parse", "--verify", "HEAD"], { stdoutLimitBytes: 256 })).stdout, "GIT_REF_CHANGED");
250
+ if (headOid !== token.headOid)
251
+ throw gitMutationError("GIT_REF_CHANGED");
252
+ const treeOid = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["write-tree"], { stdoutLimitBytes: 256 })).stdout, "GIT_INDEX_CHANGED");
253
+ if (treeOid !== token.indexTreeOid)
254
+ throw gitMutationError("GIT_INDEX_CHANGED");
255
+ const staged = await stagedPathsAndCounts(this.context, repository, input.guard);
256
+ await scanStagedBlobs(this.context, repository, staged.paths);
257
+ const liveIndex = path.join(repository.gitDir, "index");
258
+ const indexBytes = await readStableFile(liveIndex, 32 * 1024 * 1024);
259
+ const indexDigest = sha256Git(indexBytes);
260
+ const privateRoot = await this.context.options.executor.createPrivateDirectory?.("git-integration-commit");
261
+ if (!privateRoot)
262
+ throw gitMutationError("GIT_CAPABILITY_UNAVAILABLE");
263
+ try {
264
+ const shadow = await createShadowGitDirectory({
265
+ privateRoot,
266
+ headOid,
267
+ indexBytes
268
+ });
269
+ const executed = await gate.execute({
270
+ workspaceId: input.workspace.id,
271
+ repository,
272
+ reviewToken: input.integrationReviewToken,
273
+ authorization: input.authorization,
274
+ semanticStateDigest: reviewed.semanticStateDigest,
275
+ expectedToolName: "git_commit",
276
+ expectedCanonicalAction: "commit",
277
+ request: {
278
+ operation: "commit",
279
+ message: Buffer.from(`${input.message}\n`, "utf8"),
280
+ privateIndexPath: shadow.privateIndex,
281
+ objectDirectoryPath: shadow.quarantineRoot,
282
+ shadowGitDir: shadow.shadowGitDir
283
+ }
284
+ });
285
+ if (executed.result.status !== 0 ||
286
+ executed.result.timedOut ||
287
+ executed.result.stdoutTruncated ||
288
+ executed.result.stderrTruncated)
289
+ throw gitMutationError("GIT_COMMAND_FAILED");
290
+ const commitOid = (await readStableFile(shadow.shadowRefFile, 256)).toString("ascii").trim();
291
+ if (!new RegExp(`^[a-f0-9]{${repository.objectFormat === "sha1" ? 40 : 64}}$`, "u").test(commitOid)) {
292
+ throw gitMutationError("GIT_STATE_CHANGED");
293
+ }
294
+ const commitObject = await runGitRequired(this.context.options.executor, repository, ["cat-file", "commit", commitOid], { objectDirectoryPath: shadow.quarantineRoot, stdoutLimitBytes: 1024 * 1024 });
295
+ const parsed = parseCommitObject(commitObject.stdout, repository.objectFormat === "sha1" ? 40 : 64);
296
+ if (parsed.treeOid !== treeOid ||
297
+ parsed.parentOids.length !== 1 ||
298
+ parsed.parentOids[0] !== headOid ||
299
+ hasSecretValue(parsed.message.toString("latin1")))
300
+ throw gitMutationError("GIT_STATE_CHANGED");
301
+ const finalHead = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["rev-parse", "--verify", "HEAD"], { stdoutLimitBytes: 256 })).stdout, "GIT_REF_CHANGED");
302
+ const finalTree = safeUtf8((await runGitRequired(this.context.options.executor, repository, ["write-tree"], { stdoutLimitBytes: 256 })).stdout, "GIT_INDEX_CHANGED");
303
+ const finalIndex = await readStableFile(liveIndex, 32 * 1024 * 1024);
304
+ if (finalHead !== headOid ||
305
+ finalTree !== treeOid ||
306
+ sha256Git(finalIndex) !== indexDigest)
307
+ throw gitMutationError(finalHead !== headOid ? "GIT_REF_CHANGED" : "GIT_INDEX_CHANGED");
308
+ await new GitObjectQuarantine({ journal: () => undefined }).promote({
309
+ repository,
310
+ quarantineRoot: shadow.quarantineRoot,
311
+ objects: [{ oid: commitOid }]
312
+ });
313
+ await this.hooks.beforeRefUpdate?.();
314
+ const update = await this.context.options.executor.run(repository, [
315
+ "update-ref", "--no-deref", headRef, commitOid, headOid
316
+ ]);
317
+ if (update.status !== 0 || update.timedOut || update.stdoutTruncated || update.stderrTruncated) {
318
+ throw gitMutationError("GIT_REF_CHANGED");
319
+ }
320
+ this.indexTokens.revoke(input.indexToken);
321
+ const stateToken = await this.context.refreshState({
322
+ workspace: input.workspace,
323
+ guard: input.guard
324
+ });
325
+ return {
326
+ repository_id: repository.repositoryId,
327
+ commit_oid: commitOid,
328
+ tree_oid: treeOid,
329
+ parent_oids: [headOid],
330
+ file_counts: staged.counts,
331
+ hooks_executed: reviewed.identities.some((identity) => identity.kind === "hook"),
332
+ signature: parsed.signed ? "repository_config" : "none",
333
+ state_token: stateToken,
334
+ repository_integrations: "approved_full_access",
335
+ execution_isolation: "none"
336
+ };
337
+ }
338
+ finally {
339
+ indexBytes.fill(0);
340
+ await this.context.options.executor.removePrivateDirectory?.(privateRoot).catch(() => { });
341
+ }
342
+ }
343
+ }
344
+ //# sourceMappingURL=commitService.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"commitService.js","sourceRoot":"","sources":["../../src/git/commitService.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,OAAO,EAEL,gBAAgB,EAChB,cAAc,EACd,SAAS,EACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAA6B,EAC7B,UAA0D;IAE1D,MAAM,IAAI,GAAG,KAAK,EAAE,GAA+B,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;YAC5D,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG;SACnD,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC/F,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACzF,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAA6B,EAC7B,UAA0D,EAC1D,KAAgB;IAKhB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE;QACxE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;KAChE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAChG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/F,MAAM,gBAAgB,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;aACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;;YACzC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAA6B,EAC7B,UAA0D,EAC1D,KAAwB;IAExB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAC9C,UAAU,EACV,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAC5C,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAC3B,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YAC3F,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,KAAK;YAAE,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,cAAc,CAC/B,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,UAAU,EACV,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9B,EAAE,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CACvC,CAAC;QACF,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACvE,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IACnG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACjE,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,IACE,CAAC,OAAO,CAAC,MAAM,EAAE;QACjB,OAAO,CAAC,cAAc,EAAE;QACxB,OAAO,CAAC,KAAK,KAAK,EAAE;QACpB,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAClD,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5F,IACE,CAAC,IAAI,CAAC,MAAM,EAAE;YACd,IAAI,CAAC,KAAK,KAAK,EAAE;YACjB,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YACxB,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YACxB,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAC1B,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAChC,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAa,EACb,QAAiB;IAEjB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC/D,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,mBAAmB,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,qBAAqB,QAAQ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;SACzF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IACnG,OAAO;QACL,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAIvC;IAMC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACvF,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,wCAAwC,EAAE;QAC7F,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,OAAO,kBAAkB;IAEV;IACA;IACA;IAHnB,YACmB,OAA6B,EAC7B,WAAmC,EACnC,QAGb,EAAE;QALW,YAAO,GAAP,OAAO,CAAsB;QAC7B,gBAAW,GAAX,WAAW,CAAwB;QACnC,UAAK,GAAL,KAAK,CAGhB;IACL,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAKZ;QAYC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5G,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,IACE,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE;YACxC,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;YAC7E,MAAM,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtE,IACE,UAAU,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YAC9C,UAAU,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;YAChE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;YACxE,cAAc,EAAE,IAAI,EAAE,MAAM;SAC7B,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9B,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EACjC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,YAAY,CAAC,EACd,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,CAAC,YAAY;YAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EACjC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,YAAY,CAAC,EACd,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAChC,IAAI,SAAS,KAAK,OAAO;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACrE,IAAI,SAAS,KAAK,OAAO;YAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EACvC;YACE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;YACzC,gBAAgB,EAAE,GAAG;YACrB,QAAQ,EAAE;gBACR,UAAU,EAAE,QAAQ,CAAC,IAAI;gBACzB,WAAW,EAAE,QAAQ,CAAC,KAAK;gBAC3B,aAAa,EAAE,QAAQ,CAAC,IAAI;gBAC5B,cAAc,EAAE,QAAQ,CAAC,KAAK;aAC/B;SACF,CACF,CAAC;QACF,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;YACjE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;SACxD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC/F,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO;YACL,aAAa,EAAE,UAAU,CAAC,YAAY;YACtC,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,CAAC,OAAO,CAAC;YACtB,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,UAAU;YACvB,uBAAuB,EAAE,UAAU;YACnC,mBAAmB,EAAE,MAAM;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAOpB;QAYC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5G,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,OAAO;YAAE,MAAM,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,IACE,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE;YACxC,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE;YAC3C,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YAC5C,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;YAC7E,MAAM,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtE,IACE,UAAU,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YAC9C,UAAU,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;YAChE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;YACxE,cAAc,EAAE,IAAI,EAAE,MAAM;SAC7B,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9B,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EACjC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,YAAY,CAAC,EACd,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,CAAC,YAAY;YAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,wBAAwB,CAAC,CAAC;QAC3G,IAAI,CAAC,WAAW;YAAE,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;gBAC5C,WAAW;gBACX,OAAO;gBACP,UAAU;aACX,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBAClC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE;gBAC/B,UAAU;gBACV,WAAW,EAAE,KAAK,CAAC,sBAAsB;gBACzC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,gBAAgB,EAAE,YAAY;gBAC9B,uBAAuB,EAAE,QAAQ;gBACjC,OAAO,EAAE;oBACP,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,MAAM,CAAC;oBAClD,gBAAgB,EAAE,MAAM,CAAC,YAAY;oBACrC,mBAAmB,EAAE,MAAM,CAAC,cAAc;oBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC;aACF,CAAC,CAAC;YACH,IACE,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAC5B,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBACxB,QAAQ,CAAC,MAAM,CAAC,eAAe;gBAC/B,QAAQ,CAAC,MAAM,CAAC,eAAe;gBAC/B,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7F,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,UAAU,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,EACjC,EAAE,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,GAAG,IAAI,EAAE,CAC9E,CAAC;YACF,MAAM,MAAM,GAAG,iBAAiB,CAC9B,YAAY,CAAC,MAAM,EACnB,UAAU,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAC7C,CAAC;YACF,IACE,MAAM,CAAC,OAAO,KAAK,OAAO;gBAC1B,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAC9B,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO;gBAChC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjD,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EACjC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,MAAM,cAAc,CAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAC7B,UAAU,EACV,CAAC,YAAY,CAAC,EACd,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAC1B,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;YACrE,IACE,SAAS,KAAK,OAAO;gBACrB,SAAS,KAAK,OAAO;gBACrB,SAAS,CAAC,UAAU,CAAC,KAAK,WAAW;gBACrC,MAAM,gBAAgB,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC1F,MAAM,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC;gBAClE,UAAU;gBACV,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;gBACjE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;aACxD,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC/F,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBACjD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,OAAO;gBACL,aAAa,EAAE,UAAU,CAAC,YAAY;gBACtC,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,CAAC,OAAO,CAAC;gBACtB,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC;gBAChF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM;gBACvD,WAAW,EAAE,UAAU;gBACvB,uBAAuB,EAAE,sBAAsB;gBAC/C,mBAAmB,EAAE,MAAM;aAC5B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF"}