codexgpt 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/AGENTS.example.md +20 -0
  2. package/CHANGELOG.md +342 -0
  3. package/CHATGPT_PROMPT.md +12 -0
  4. package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
  5. package/CODEX_PROMPT.md +12 -0
  6. package/CONTRIBUTING.md +62 -0
  7. package/DOMAIN_SETUP.md +275 -0
  8. package/FAQ.md +366 -0
  9. package/FAQ_ZH.md +329 -0
  10. package/LICENSE +21 -0
  11. package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
  12. package/README.md +490 -0
  13. package/README_ZH.md +747 -0
  14. package/SECURITY.md +295 -0
  15. package/config.example.env +103 -0
  16. package/dist/access/fullAccessLease.js +148 -0
  17. package/dist/access/fullAccessLease.js.map +1 -0
  18. package/dist/access/protectedRoots.js +122 -0
  19. package/dist/access/protectedRoots.js.map +1 -0
  20. package/dist/access/rootAdmission.js +347 -0
  21. package/dist/access/rootAdmission.js.map +1 -0
  22. package/dist/analysis/cache.js +27 -0
  23. package/dist/analysis/cache.js.map +1 -0
  24. package/dist/analysis/classify.js +102 -0
  25. package/dist/analysis/classify.js.map +1 -0
  26. package/dist/analysis/extract.js +139 -0
  27. package/dist/analysis/extract.js.map +1 -0
  28. package/dist/analysis/graph.js +22 -0
  29. package/dist/analysis/graph.js.map +1 -0
  30. package/dist/analysis/impact.js +167 -0
  31. package/dist/analysis/impact.js.map +1 -0
  32. package/dist/analysis/index.js +215 -0
  33. package/dist/analysis/index.js.map +1 -0
  34. package/dist/analysis/inventory.js +51 -0
  35. package/dist/analysis/inventory.js.map +1 -0
  36. package/dist/analysis/providers.js +24 -0
  37. package/dist/analysis/providers.js.map +1 -0
  38. package/dist/analysis/rank.js +27 -0
  39. package/dist/analysis/rank.js.map +1 -0
  40. package/dist/analysis/types.js +8 -0
  41. package/dist/analysis/types.js.map +1 -0
  42. package/dist/audit/canonicalJson.js +79 -0
  43. package/dist/audit/canonicalJson.js.map +1 -0
  44. package/dist/audit/diagnostics.js +128 -0
  45. package/dist/audit/diagnostics.js.map +1 -0
  46. package/dist/audit/index.js +12 -0
  47. package/dist/audit/index.js.map +1 -0
  48. package/dist/audit/lifecycleV3.js +53 -0
  49. package/dist/audit/lifecycleV3.js.map +1 -0
  50. package/dist/audit/lifecycleV4.js +70 -0
  51. package/dist/audit/lifecycleV4.js.map +1 -0
  52. package/dist/audit/lock.js +195 -0
  53. package/dist/audit/lock.js.map +1 -0
  54. package/dist/audit/queryTool.js +120 -0
  55. package/dist/audit/queryTool.js.map +1 -0
  56. package/dist/audit/runtime.js +48 -0
  57. package/dist/audit/runtime.js.map +1 -0
  58. package/dist/audit/schemas.js +640 -0
  59. package/dist/audit/schemas.js.map +1 -0
  60. package/dist/audit/store.js +1309 -0
  61. package/dist/audit/store.js.map +1 -0
  62. package/dist/audit/transactionParticipant.js +45 -0
  63. package/dist/audit/transactionParticipant.js.map +1 -0
  64. package/dist/audit/types.js +11 -0
  65. package/dist/audit/types.js.map +1 -0
  66. package/dist/auth/audit.js +44 -0
  67. package/dist/auth/audit.js.map +1 -0
  68. package/dist/auth/authorizationStore.js +333 -0
  69. package/dist/auth/authorizationStore.js.map +1 -0
  70. package/dist/auth/challenges.js +25 -0
  71. package/dist/auth/challenges.js.map +1 -0
  72. package/dist/auth/clientStore.js +469 -0
  73. package/dist/auth/clientStore.js.map +1 -0
  74. package/dist/auth/cloudflareConfig.js +112 -0
  75. package/dist/auth/cloudflareConfig.js.map +1 -0
  76. package/dist/auth/configuration.js +167 -0
  77. package/dist/auth/configuration.js.map +1 -0
  78. package/dist/auth/credentialStore.js +65 -0
  79. package/dist/auth/credentialStore.js.map +1 -0
  80. package/dist/auth/deploymentLock.js +220 -0
  81. package/dist/auth/deploymentLock.js.map +1 -0
  82. package/dist/auth/deploymentRegistry.js +149 -0
  83. package/dist/auth/deploymentRegistry.js.map +1 -0
  84. package/dist/auth/errors.js +26 -0
  85. package/dist/auth/errors.js.map +1 -0
  86. package/dist/auth/grantStore.js +307 -0
  87. package/dist/auth/grantStore.js.map +1 -0
  88. package/dist/auth/index.js +39 -0
  89. package/dist/auth/index.js.map +1 -0
  90. package/dist/auth/keyManager.js +148 -0
  91. package/dist/auth/keyManager.js.map +1 -0
  92. package/dist/auth/localAdminSession.js +173 -0
  93. package/dist/auth/localAdminSession.js.map +1 -0
  94. package/dist/auth/metadata.js +69 -0
  95. package/dist/auth/metadata.js.map +1 -0
  96. package/dist/auth/oauthProvider.js +589 -0
  97. package/dist/auth/oauthProvider.js.map +1 -0
  98. package/dist/auth/ownerApproval.js +51 -0
  99. package/dist/auth/ownerApproval.js.map +1 -0
  100. package/dist/auth/policyIdentity.js +189 -0
  101. package/dist/auth/policyIdentity.js.map +1 -0
  102. package/dist/auth/rateLimits.js +66 -0
  103. package/dist/auth/rateLimits.js.map +1 -0
  104. package/dist/auth/recovery.js +275 -0
  105. package/dist/auth/recovery.js.map +1 -0
  106. package/dist/auth/requestContext.js +34 -0
  107. package/dist/auth/requestContext.js.map +1 -0
  108. package/dist/auth/resourceMiddleware.js +147 -0
  109. package/dist/auth/resourceMiddleware.js.map +1 -0
  110. package/dist/auth/runtimeStatus.js +51 -0
  111. package/dist/auth/runtimeStatus.js.map +1 -0
  112. package/dist/auth/schemas.js +84 -0
  113. package/dist/auth/schemas.js.map +1 -0
  114. package/dist/auth/stateStore.js +468 -0
  115. package/dist/auth/stateStore.js.map +1 -0
  116. package/dist/auth/tokenService.js +631 -0
  117. package/dist/auth/tokenService.js.map +1 -0
  118. package/dist/auth/toolSecurity.js +108 -0
  119. package/dist/auth/toolSecurity.js.map +1 -0
  120. package/dist/auth/types.js +6 -0
  121. package/dist/auth/types.js.map +1 -0
  122. package/dist/auth/windowsDpapi.js +193 -0
  123. package/dist/auth/windowsDpapi.js.map +1 -0
  124. package/dist/bashOps.js +292 -0
  125. package/dist/bashOps.js.map +1 -0
  126. package/dist/capabilitiesOps.js +412 -0
  127. package/dist/capabilitiesOps.js.map +1 -0
  128. package/dist/changesets/crypto.js +92 -0
  129. package/dist/changesets/crypto.js.map +1 -0
  130. package/dist/changesets/index.js +9 -0
  131. package/dist/changesets/index.js.map +1 -0
  132. package/dist/changesets/moveStore.js +237 -0
  133. package/dist/changesets/moveStore.js.map +1 -0
  134. package/dist/changesets/moveUndo.js +386 -0
  135. package/dist/changesets/moveUndo.js.map +1 -0
  136. package/dist/changesets/schemas.js +234 -0
  137. package/dist/changesets/schemas.js.map +1 -0
  138. package/dist/changesets/store.js +573 -0
  139. package/dist/changesets/store.js.map +1 -0
  140. package/dist/changesets/types.js +9 -0
  141. package/dist/changesets/types.js.map +1 -0
  142. package/dist/changesets/undo.js +525 -0
  143. package/dist/changesets/undo.js.map +1 -0
  144. package/dist/changesets/unifiedUndo.js +31 -0
  145. package/dist/changesets/unifiedUndo.js.map +1 -0
  146. package/dist/cliEnvironment.js +85 -0
  147. package/dist/cliEnvironment.js.map +1 -0
  148. package/dist/codexSessions.js +733 -0
  149. package/dist/codexSessions.js.map +1 -0
  150. package/dist/codexgptSupertool.js +216 -0
  151. package/dist/codexgptSupertool.js.map +1 -0
  152. package/dist/codexproSupertool.js +204 -0
  153. package/dist/codexproSupertool.js.map +1 -0
  154. package/dist/config.js +733 -0
  155. package/dist/config.js.map +1 -0
  156. package/dist/control/localApprovalClient.js +287 -0
  157. package/dist/control/localApprovalClient.js.map +1 -0
  158. package/dist/control/localApprovalServer.js +466 -0
  159. package/dist/control/localApprovalServer.js.map +1 -0
  160. package/dist/control/runtime.js +178 -0
  161. package/dist/control/runtime.js.map +1 -0
  162. package/dist/control/schemas.js +184 -0
  163. package/dist/control/schemas.js.map +1 -0
  164. package/dist/control/windowsLocalControl.js +348 -0
  165. package/dist/control/windowsLocalControl.js.map +1 -0
  166. package/dist/fsOps.js +541 -0
  167. package/dist/fsOps.js.map +1 -0
  168. package/dist/git/admission.js +26 -0
  169. package/dist/git/admission.js.map +1 -0
  170. package/dist/git/branchService.js +51 -0
  171. package/dist/git/branchService.js.map +1 -0
  172. package/dist/git/capabilities.js +143 -0
  173. package/dist/git/capabilities.js.map +1 -0
  174. package/dist/git/commitService.js +344 -0
  175. package/dist/git/commitService.js.map +1 -0
  176. package/dist/git/durableState.js +151 -0
  177. package/dist/git/durableState.js.map +1 -0
  178. package/dist/git/execution.js +451 -0
  179. package/dist/git/execution.js.map +1 -0
  180. package/dist/git/fileTransaction.js +50 -0
  181. package/dist/git/fileTransaction.js.map +1 -0
  182. package/dist/git/indexService.js +421 -0
  183. package/dist/git/indexService.js.map +1 -0
  184. package/dist/git/integrations.js +653 -0
  185. package/dist/git/integrations.js.map +1 -0
  186. package/dist/git/locks.js +287 -0
  187. package/dist/git/locks.js.map +1 -0
  188. package/dist/git/mutationContext.js +92 -0
  189. package/dist/git/mutationContext.js.map +1 -0
  190. package/dist/git/mutationJournal.js +91 -0
  191. package/dist/git/mutationJournal.js.map +1 -0
  192. package/dist/git/mutationService.js +352 -0
  193. package/dist/git/mutationService.js.map +1 -0
  194. package/dist/git/normalization.js +57 -0
  195. package/dist/git/normalization.js.map +1 -0
  196. package/dist/git/objectQuarantine.js +243 -0
  197. package/dist/git/objectQuarantine.js.map +1 -0
  198. package/dist/git/opaqueRecordStore.js +187 -0
  199. package/dist/git/opaqueRecordStore.js.map +1 -0
  200. package/dist/git/operationStore.js +287 -0
  201. package/dist/git/operationStore.js.map +1 -0
  202. package/dist/git/parsers.js +311 -0
  203. package/dist/git/parsers.js.map +1 -0
  204. package/dist/git/privateIndex.js +79 -0
  205. package/dist/git/privateIndex.js.map +1 -0
  206. package/dist/git/productionBootstrap.js +39 -0
  207. package/dist/git/productionBootstrap.js.map +1 -0
  208. package/dist/git/readService.js +846 -0
  209. package/dist/git/readService.js.map +1 -0
  210. package/dist/git/recovery.js +417 -0
  211. package/dist/git/recovery.js.map +1 -0
  212. package/dist/git/repositoryIdentity.js +611 -0
  213. package/dist/git/repositoryIdentity.js.map +1 -0
  214. package/dist/git/repositoryStore.js +237 -0
  215. package/dist/git/repositoryStore.js.map +1 -0
  216. package/dist/git/resources.js +113 -0
  217. package/dist/git/resources.js.map +1 -0
  218. package/dist/git/restoreService.js +178 -0
  219. package/dist/git/restoreService.js.map +1 -0
  220. package/dist/git/reviewToken.js +86 -0
  221. package/dist/git/reviewToken.js.map +1 -0
  222. package/dist/git/stashService.js +566 -0
  223. package/dist/git/stashService.js.map +1 -0
  224. package/dist/git/stateToken.js +139 -0
  225. package/dist/git/stateToken.js.map +1 -0
  226. package/dist/gitOps.js +147 -0
  227. package/dist/gitOps.js.map +1 -0
  228. package/dist/guard.js +608 -0
  229. package/dist/guard.js.map +1 -0
  230. package/dist/guidance/diagnostics.js +14 -0
  231. package/dist/guidance/diagnostics.js.map +1 -0
  232. package/dist/guidance/instructions.js +167 -0
  233. package/dist/guidance/instructions.js.map +1 -0
  234. package/dist/guidance/mode.js +18 -0
  235. package/dist/guidance/mode.js.map +1 -0
  236. package/dist/guidance/openaiSkillMetadata.js +29 -0
  237. package/dist/guidance/openaiSkillMetadata.js.map +1 -0
  238. package/dist/guidance/safeTextReader.js +171 -0
  239. package/dist/guidance/safeTextReader.js.map +1 -0
  240. package/dist/guidance/skillCatalog.js +70 -0
  241. package/dist/guidance/skillCatalog.js.map +1 -0
  242. package/dist/guidance/skillDiscovery.js +353 -0
  243. package/dist/guidance/skillDiscovery.js.map +1 -0
  244. package/dist/guidance/skillMetadata.js +115 -0
  245. package/dist/guidance/skillMetadata.js.map +1 -0
  246. package/dist/guidance/skillResources.js +146 -0
  247. package/dist/guidance/skillResources.js.map +1 -0
  248. package/dist/handoffOps.js +449 -0
  249. package/dist/handoffOps.js.map +1 -0
  250. package/dist/http/localAdminApp.js +203 -0
  251. package/dist/http/localAdminApp.js.map +1 -0
  252. package/dist/http/oauthMcpRuntime.js +294 -0
  253. package/dist/http/oauthMcpRuntime.js.map +1 -0
  254. package/dist/http/publicApp.js +350 -0
  255. package/dist/http/publicApp.js.map +1 -0
  256. package/dist/http/securityHeaders.js +11 -0
  257. package/dist/http/securityHeaders.js.map +1 -0
  258. package/dist/http.js +2076 -0
  259. package/dist/http.js.map +1 -0
  260. package/dist/moves/engine.js +1079 -0
  261. package/dist/moves/engine.js.map +1 -0
  262. package/dist/moves/index.js +6 -0
  263. package/dist/moves/index.js.map +1 -0
  264. package/dist/moves/planner.js +270 -0
  265. package/dist/moves/planner.js.map +1 -0
  266. package/dist/moves/recovery.js +557 -0
  267. package/dist/moves/recovery.js.map +1 -0
  268. package/dist/moves/service.js +300 -0
  269. package/dist/moves/service.js.map +1 -0
  270. package/dist/moves/types.js +11 -0
  271. package/dist/moves/types.js.map +1 -0
  272. package/dist/mutations/index.js +4 -0
  273. package/dist/mutations/index.js.map +1 -0
  274. package/dist/mutations/lifecycle.js +165 -0
  275. package/dist/mutations/lifecycle.js.map +1 -0
  276. package/dist/mutations/localService.js +163 -0
  277. package/dist/mutations/localService.js.map +1 -0
  278. package/dist/mutations/runtime.js +322 -0
  279. package/dist/mutations/runtime.js.map +1 -0
  280. package/dist/mutations/types.js +2 -0
  281. package/dist/mutations/types.js.map +1 -0
  282. package/dist/mutations/writers.js +360 -0
  283. package/dist/mutations/writers.js.map +1 -0
  284. package/dist/patchOps.js +420 -0
  285. package/dist/patchOps.js.map +1 -0
  286. package/dist/policy/approval.js +306 -0
  287. package/dist/policy/approval.js.map +1 -0
  288. package/dist/policy/audit.js +88 -0
  289. package/dist/policy/audit.js.map +1 -0
  290. package/dist/policy/authorizationFacts.js +187 -0
  291. package/dist/policy/authorizationFacts.js.map +1 -0
  292. package/dist/policy/compat.js +104 -0
  293. package/dist/policy/compat.js.map +1 -0
  294. package/dist/policy/context.js +31 -0
  295. package/dist/policy/context.js.map +1 -0
  296. package/dist/policy/enforcement.js +46 -0
  297. package/dist/policy/enforcement.js.map +1 -0
  298. package/dist/policy/evaluator.js +338 -0
  299. package/dist/policy/evaluator.js.map +1 -0
  300. package/dist/policy/executionCapabilities.js +80 -0
  301. package/dist/policy/executionCapabilities.js.map +1 -0
  302. package/dist/policy/executionResources.js +192 -0
  303. package/dist/policy/executionResources.js.map +1 -0
  304. package/dist/policy/fullAccessResources.js +23 -0
  305. package/dist/policy/fullAccessResources.js.map +1 -0
  306. package/dist/policy/hardPolicy.js +50 -0
  307. package/dist/policy/hardPolicy.js.map +1 -0
  308. package/dist/policy/identity.js +142 -0
  309. package/dist/policy/identity.js.map +1 -0
  310. package/dist/policy/integration.js +331 -0
  311. package/dist/policy/integration.js.map +1 -0
  312. package/dist/policy/pendingApprovals.js +301 -0
  313. package/dist/policy/pendingApprovals.js.map +1 -0
  314. package/dist/policy/profileStore.js +367 -0
  315. package/dist/policy/profileStore.js.map +1 -0
  316. package/dist/policy/resources.js +249 -0
  317. package/dist/policy/resources.js.map +1 -0
  318. package/dist/policy/runtime.js +713 -0
  319. package/dist/policy/runtime.js.map +1 -0
  320. package/dist/policy/schemas.js +625 -0
  321. package/dist/policy/schemas.js.map +1 -0
  322. package/dist/policy/toolPolicy.js +141 -0
  323. package/dist/policy/toolPolicy.js.map +1 -0
  324. package/dist/policy/transport.js +10 -0
  325. package/dist/policy/transport.js.map +1 -0
  326. package/dist/policy/types.js +31 -0
  327. package/dist/policy/types.js.map +1 -0
  328. package/dist/proContext.js +675 -0
  329. package/dist/proContext.js.map +1 -0
  330. package/dist/process/authority.js +18 -0
  331. package/dist/process/authority.js.map +1 -0
  332. package/dist/process/backendDiscovery.js +83 -0
  333. package/dist/process/backendDiscovery.js.map +1 -0
  334. package/dist/process/commandCompiler.js +71 -0
  335. package/dist/process/commandCompiler.js.map +1 -0
  336. package/dist/process/outputCursor.js +67 -0
  337. package/dist/process/outputCursor.js.map +1 -0
  338. package/dist/process/outputQuota.js +94 -0
  339. package/dist/process/outputQuota.js.map +1 -0
  340. package/dist/process/outputRing.js +138 -0
  341. package/dist/process/outputRing.js.map +1 -0
  342. package/dist/process/processAuditCoordinator.js +52 -0
  343. package/dist/process/processAuditCoordinator.js.map +1 -0
  344. package/dist/process/processManager.js +311 -0
  345. package/dist/process/processManager.js.map +1 -0
  346. package/dist/process/runCommand.js +332 -0
  347. package/dist/process/runCommand.js.map +1 -0
  348. package/dist/process/streamingRedactor.js +105 -0
  349. package/dist/process/streamingRedactor.js.map +1 -0
  350. package/dist/process/types.js +2 -0
  351. package/dist/process/types.js.map +1 -0
  352. package/dist/process/windowsHostClient.js +604 -0
  353. package/dist/process/windowsHostClient.js.map +1 -0
  354. package/dist/process/windowsHostProtocol.js +270 -0
  355. package/dist/process/windowsHostProtocol.js.map +1 -0
  356. package/dist/process/windowsPersistentBackend.js +263 -0
  357. package/dist/process/windowsPersistentBackend.js.map +1 -0
  358. package/dist/productionRuntime.js +907 -0
  359. package/dist/productionRuntime.js.map +1 -0
  360. package/dist/profileStore.js +231 -0
  361. package/dist/profileStore.js.map +1 -0
  362. package/dist/redact.js +124 -0
  363. package/dist/redact.js.map +1 -0
  364. package/dist/searchOps.js +186 -0
  365. package/dist/searchOps.js.map +1 -0
  366. package/dist/selfTestOps.js +786 -0
  367. package/dist/selfTestOps.js.map +1 -0
  368. package/dist/semantic/budgets.js +12 -0
  369. package/dist/semantic/budgets.js.map +1 -0
  370. package/dist/semantic/builtin/typescriptAssets.js +68 -0
  371. package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
  372. package/dist/semantic/builtin/typescriptProvider.js +211 -0
  373. package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
  374. package/dist/semantic/builtin/typescriptWorker.js +365 -0
  375. package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
  376. package/dist/semantic/diffPreview.js +36 -0
  377. package/dist/semantic/diffPreview.js.map +1 -0
  378. package/dist/semantic/index.js +11 -0
  379. package/dist/semantic/index.js.map +1 -0
  380. package/dist/semantic/manager.js +522 -0
  381. package/dist/semantic/manager.js.map +1 -0
  382. package/dist/semantic/positions.js +86 -0
  383. package/dist/semantic/positions.js.map +1 -0
  384. package/dist/semantic/previewStore.js +276 -0
  385. package/dist/semantic/previewStore.js.map +1 -0
  386. package/dist/semantic/projectResolver.js +309 -0
  387. package/dist/semantic/projectResolver.js.map +1 -0
  388. package/dist/semantic/sourceSnapshot.js +54 -0
  389. package/dist/semantic/sourceSnapshot.js.map +1 -0
  390. package/dist/semantic/status.js +46 -0
  391. package/dist/semantic/status.js.map +1 -0
  392. package/dist/semantic/types.js +2 -0
  393. package/dist/semantic/types.js.map +1 -0
  394. package/dist/server.js +8676 -0
  395. package/dist/server.js.map +1 -0
  396. package/dist/stdio.js +64 -0
  397. package/dist/stdio.js.map +1 -0
  398. package/dist/toolCardWidget.js +2000 -0
  399. package/dist/toolCardWidget.js.map +1 -0
  400. package/dist/tools/contracts/catalog.js +111 -0
  401. package/dist/tools/contracts/catalog.js.map +1 -0
  402. package/dist/tools/contracts/index.js +8 -0
  403. package/dist/tools/contracts/index.js.map +1 -0
  404. package/dist/tools/contracts/registration.js +27 -0
  405. package/dist/tools/contracts/registration.js.map +1 -0
  406. package/dist/tools/contracts/schemas.js +11 -0
  407. package/dist/tools/contracts/schemas.js.map +1 -0
  408. package/dist/tools/contracts/types.js +2 -0
  409. package/dist/tools/contracts/types.js.map +1 -0
  410. package/dist/tools/contracts/v3.js +76 -0
  411. package/dist/tools/contracts/v3.js.map +1 -0
  412. package/dist/tools/contracts/v4.js +39 -0
  413. package/dist/tools/contracts/v4.js.map +1 -0
  414. package/dist/tools/contracts/v5.js +20 -0
  415. package/dist/tools/contracts/v5.js.map +1 -0
  416. package/dist/tools/phase3dServer.js +350 -0
  417. package/dist/tools/phase3dServer.js.map +1 -0
  418. package/dist/tools/schemas/applyPatch.js +388 -0
  419. package/dist/tools/schemas/applyPatch.js.map +1 -0
  420. package/dist/tools/schemas/bash.js +202 -0
  421. package/dist/tools/schemas/bash.js.map +1 -0
  422. package/dist/tools/schemas/closeWorkspace.js +105 -0
  423. package/dist/tools/schemas/closeWorkspace.js.map +1 -0
  424. package/dist/tools/schemas/codexContext.js +402 -0
  425. package/dist/tools/schemas/codexContext.js.map +1 -0
  426. package/dist/tools/schemas/codexSessions.js +328 -0
  427. package/dist/tools/schemas/codexSessions.js.map +1 -0
  428. package/dist/tools/schemas/codexgpt.js +1068 -0
  429. package/dist/tools/schemas/codexgpt.js.map +1 -0
  430. package/dist/tools/schemas/codexgptInventory.js +359 -0
  431. package/dist/tools/schemas/codexgptInventory.js.map +1 -0
  432. package/dist/tools/schemas/codexgptSelfTest.js +563 -0
  433. package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
  434. package/dist/tools/schemas/codexpro.js +917 -0
  435. package/dist/tools/schemas/codexpro.js.map +1 -0
  436. package/dist/tools/schemas/codexproInventory.js +352 -0
  437. package/dist/tools/schemas/codexproInventory.js.map +1 -0
  438. package/dist/tools/schemas/codexproSelfTest.js +546 -0
  439. package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
  440. package/dist/tools/schemas/common.js +21 -0
  441. package/dist/tools/schemas/common.js.map +1 -0
  442. package/dist/tools/schemas/createTaskWorktree.js +51 -0
  443. package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
  444. package/dist/tools/schemas/edit.js +321 -0
  445. package/dist/tools/schemas/edit.js.map +1 -0
  446. package/dist/tools/schemas/execution.js +330 -0
  447. package/dist/tools/schemas/execution.js.map +1 -0
  448. package/dist/tools/schemas/exportProContext.js +370 -0
  449. package/dist/tools/schemas/exportProContext.js.map +1 -0
  450. package/dist/tools/schemas/getTaskWorktree.js +19 -0
  451. package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
  452. package/dist/tools/schemas/gitBranch.js +42 -0
  453. package/dist/tools/schemas/gitBranch.js.map +1 -0
  454. package/dist/tools/schemas/gitCommit.js +40 -0
  455. package/dist/tools/schemas/gitCommit.js.map +1 -0
  456. package/dist/tools/schemas/gitCreateBranch.js +22 -0
  457. package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
  458. package/dist/tools/schemas/gitDiff.js +222 -0
  459. package/dist/tools/schemas/gitDiff.js.map +1 -0
  460. package/dist/tools/schemas/gitLog.js +41 -0
  461. package/dist/tools/schemas/gitLog.js.map +1 -0
  462. package/dist/tools/schemas/gitRestore.js +47 -0
  463. package/dist/tools/schemas/gitRestore.js.map +1 -0
  464. package/dist/tools/schemas/gitStage.js +33 -0
  465. package/dist/tools/schemas/gitStage.js.map +1 -0
  466. package/dist/tools/schemas/gitStash.js +102 -0
  467. package/dist/tools/schemas/gitStash.js.map +1 -0
  468. package/dist/tools/schemas/gitStatus.js +226 -0
  469. package/dist/tools/schemas/gitStatus.js.map +1 -0
  470. package/dist/tools/schemas/gitV4Common.js +205 -0
  471. package/dist/tools/schemas/gitV4Common.js.map +1 -0
  472. package/dist/tools/schemas/guidance.js +40 -0
  473. package/dist/tools/schemas/guidance.js.map +1 -0
  474. package/dist/tools/schemas/handoffToAgent.js +276 -0
  475. package/dist/tools/schemas/handoffToAgent.js.map +1 -0
  476. package/dist/tools/schemas/handoffToCodex.js +137 -0
  477. package/dist/tools/schemas/handoffToCodex.js.map +1 -0
  478. package/dist/tools/schemas/inspectWorkspace.js +379 -0
  479. package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
  480. package/dist/tools/schemas/listTaskWorktrees.js +21 -0
  481. package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
  482. package/dist/tools/schemas/listWorkspaces.js +134 -0
  483. package/dist/tools/schemas/listWorkspaces.js.map +1 -0
  484. package/dist/tools/schemas/loadSkill.js +619 -0
  485. package/dist/tools/schemas/loadSkill.js.map +1 -0
  486. package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
  487. package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
  488. package/dist/tools/schemas/movePaths.js +175 -0
  489. package/dist/tools/schemas/movePaths.js.map +1 -0
  490. package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
  491. package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
  492. package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
  493. package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
  494. package/dist/tools/schemas/openWorkspace.js +193 -0
  495. package/dist/tools/schemas/openWorkspace.js.map +1 -0
  496. package/dist/tools/schemas/queryAuditEvents.js +193 -0
  497. package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
  498. package/dist/tools/schemas/read.js +199 -0
  499. package/dist/tools/schemas/read.js.map +1 -0
  500. package/dist/tools/schemas/readCodexSession.js +353 -0
  501. package/dist/tools/schemas/readCodexSession.js.map +1 -0
  502. package/dist/tools/schemas/readHandoff.js +446 -0
  503. package/dist/tools/schemas/readHandoff.js.map +1 -0
  504. package/dist/tools/schemas/removeTaskWorktree.js +40 -0
  505. package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
  506. package/dist/tools/schemas/search.js +235 -0
  507. package/dist/tools/schemas/search.js.map +1 -0
  508. package/dist/tools/schemas/semantic.js +195 -0
  509. package/dist/tools/schemas/semantic.js.map +1 -0
  510. package/dist/tools/schemas/serverConfig.js +157 -0
  511. package/dist/tools/schemas/serverConfig.js.map +1 -0
  512. package/dist/tools/schemas/showChanges.js +283 -0
  513. package/dist/tools/schemas/showChanges.js.map +1 -0
  514. package/dist/tools/schemas/transactionResult.js +11 -0
  515. package/dist/tools/schemas/transactionResult.js.map +1 -0
  516. package/dist/tools/schemas/tree.js +136 -0
  517. package/dist/tools/schemas/tree.js.map +1 -0
  518. package/dist/tools/schemas/undoChangeSet.js +152 -0
  519. package/dist/tools/schemas/undoChangeSet.js.map +1 -0
  520. package/dist/tools/schemas/waitForHandoff.js +462 -0
  521. package/dist/tools/schemas/waitForHandoff.js.map +1 -0
  522. package/dist/tools/schemas/workspaceSnapshot.js +145 -0
  523. package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
  524. package/dist/tools/schemas/write.js +285 -0
  525. package/dist/tools/schemas/write.js.map +1 -0
  526. package/dist/transactions/atomicFs.js +438 -0
  527. package/dist/transactions/atomicFs.js.map +1 -0
  528. package/dist/transactions/atomicStateFile.js +190 -0
  529. package/dist/transactions/atomicStateFile.js.map +1 -0
  530. package/dist/transactions/engine.js +574 -0
  531. package/dist/transactions/engine.js.map +1 -0
  532. package/dist/transactions/index.js +12 -0
  533. package/dist/transactions/index.js.map +1 -0
  534. package/dist/transactions/installation.js +158 -0
  535. package/dist/transactions/installation.js.map +1 -0
  536. package/dist/transactions/manifestV2Store.js +96 -0
  537. package/dist/transactions/manifestV2Store.js.map +1 -0
  538. package/dist/transactions/participantRecovery.js +98 -0
  539. package/dist/transactions/participantRecovery.js.map +1 -0
  540. package/dist/transactions/recovery.js +513 -0
  541. package/dist/transactions/recovery.js.map +1 -0
  542. package/dist/transactions/schemas.js +365 -0
  543. package/dist/transactions/schemas.js.map +1 -0
  544. package/dist/transactions/stateRoot.js +63 -0
  545. package/dist/transactions/stateRoot.js.map +1 -0
  546. package/dist/transactions/types.js +11 -0
  547. package/dist/transactions/types.js.map +1 -0
  548. package/dist/transactions/workspaceLock.js +201 -0
  549. package/dist/transactions/workspaceLock.js.map +1 -0
  550. package/dist/workspaceOps.js +924 -0
  551. package/dist/workspaceOps.js.map +1 -0
  552. package/dist/worktrees/candidateWorkspace.js +566 -0
  553. package/dist/worktrees/candidateWorkspace.js.map +1 -0
  554. package/dist/worktrees/manager.js +258 -0
  555. package/dist/worktrees/manager.js.map +1 -0
  556. package/dist/worktrees/materializer.js +60 -0
  557. package/dist/worktrees/materializer.js.map +1 -0
  558. package/dist/worktrees/mergeExecute.js +498 -0
  559. package/dist/worktrees/mergeExecute.js.map +1 -0
  560. package/dist/worktrees/mergePlanStore.js +247 -0
  561. package/dist/worktrees/mergePlanStore.js.map +1 -0
  562. package/dist/worktrees/mergePrepare.js +709 -0
  563. package/dist/worktrees/mergePrepare.js.map +1 -0
  564. package/dist/worktrees/recovery.js +294 -0
  565. package/dist/worktrees/recovery.js.map +1 -0
  566. package/dist/worktrees/remove.js +296 -0
  567. package/dist/worktrees/remove.js.map +1 -0
  568. package/dist/worktrees/remover.js +57 -0
  569. package/dist/worktrees/remover.js.map +1 -0
  570. package/dist/worktrees/root.js +47 -0
  571. package/dist/worktrees/root.js.map +1 -0
  572. package/dist/worktrees/service.js +245 -0
  573. package/dist/worktrees/service.js.map +1 -0
  574. package/dist/worktrees/store.js +156 -0
  575. package/dist/worktrees/store.js.map +1 -0
  576. package/dist/worktrees/treeManifest.js +106 -0
  577. package/dist/worktrees/treeManifest.js.map +1 -0
  578. package/dist/worktrees/verificationReceipts.js +215 -0
  579. package/dist/worktrees/verificationReceipts.js.map +1 -0
  580. package/dist/worktrees/verificationTerminal.js +23 -0
  581. package/dist/worktrees/verificationTerminal.js.map +1 -0
  582. package/dist/worktrees/workspaceAuthority.js +64 -0
  583. package/dist/worktrees/workspaceAuthority.js.map +1 -0
  584. package/docs/favicon.svg +5 -0
  585. package/docs/index.html +624 -0
  586. package/docs/og.svg +52 -0
  587. package/docs/script.js +33 -0
  588. package/docs/star.svg +11 -0
  589. package/docs/styles.css +1571 -0
  590. package/docs/zh.html +428 -0
  591. package/package.json +121 -0
  592. package/scripts/analysis-cli-smoke.mjs +81 -0
  593. package/scripts/analysis-smoke.mjs +179 -0
  594. package/scripts/atomic-file.mjs +137 -0
  595. package/scripts/ci-change-classifier.mjs +59 -0
  596. package/scripts/ci-failure-summary.mjs +92 -0
  597. package/scripts/cloudflared-installer.mjs +215 -0
  598. package/scripts/cloudflared-release.mjs +63 -0
  599. package/scripts/codexgpt-entry.mjs +235 -0
  600. package/scripts/codexgpt.mjs +4987 -0
  601. package/scripts/connector-auth-output-shim.cjs +66 -0
  602. package/scripts/doctor-smoke.mjs +90 -0
  603. package/scripts/doctor.mjs +165 -0
  604. package/scripts/exact-head-ci.mjs +126 -0
  605. package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
  606. package/scripts/execute-handoff-smoke.mjs +1117 -0
  607. package/scripts/g8-u-live-probe.mjs +208 -0
  608. package/scripts/http-smoke-compat.mjs +151 -0
  609. package/scripts/http-smoke.mjs +776 -0
  610. package/scripts/long-task-runner.mjs +1037 -0
  611. package/scripts/oauth-admin.mjs +1608 -0
  612. package/scripts/output-bounds.mjs +29 -0
  613. package/scripts/owned-temp-root.d.mts +50 -0
  614. package/scripts/owned-temp-root.mjs +567 -0
  615. package/scripts/phase-4a-smoke.mjs +36 -0
  616. package/scripts/policy-windows-spike.mjs +135 -0
  617. package/scripts/pro-apply.mjs +152 -0
  618. package/scripts/pro-bundle.mjs +121 -0
  619. package/scripts/pro-smoke.mjs +97 -0
  620. package/scripts/process-identity.mjs +67 -0
  621. package/scripts/repository-policy.mjs +166 -0
  622. package/scripts/run-and-summarize.mjs +134 -0
  623. package/scripts/run-smoke.mjs +52 -0
  624. package/scripts/run-with-cleanup.mjs +98 -0
  625. package/scripts/settings-smoke-platform-compat.mjs +85 -0
  626. package/scripts/settings-smoke.mjs +769 -0
  627. package/scripts/smoke-platform-compat.mjs +302 -0
  628. package/scripts/smoke.mjs +1180 -0
  629. package/scripts/stress-contract-compat.mjs +94 -0
  630. package/scripts/stress.mjs +882 -0
  631. package/scripts/test-domains.mjs +247 -0
  632. package/scripts/test-execution-profile-manifest.mjs +273 -0
  633. package/scripts/test-execution-profiles.mjs +147 -0
  634. package/scripts/test-performance-reporter.mjs +291 -0
  635. package/scripts/toolchain-manager.mjs +266 -0
  636. package/scripts/toolchains.json +19 -0
  637. package/scripts/windows-conpty-probe-child.mjs +82 -0
  638. package/scripts/windows-conpty-worker.ps1 +24 -0
  639. package/scripts/windows-credential-host-manifest.json +16 -0
  640. package/scripts/windows-credential-host-protocol-v1.json +16 -0
  641. package/scripts/windows-credential-host.cs +256 -0
  642. package/scripts/windows-credential-host.ps1 +26 -0
  643. package/scripts/windows-local-control-manifest.json +23 -0
  644. package/scripts/windows-local-control-spike.cs +738 -0
  645. package/scripts/windows-local-control-spike.mjs +415 -0
  646. package/scripts/windows-local-control-spike.ps1 +35 -0
  647. package/scripts/windows-local-control.cs +738 -0
  648. package/scripts/windows-local-control.ps1 +35 -0
  649. package/scripts/windows-native-api-inventory-v1.json +90 -0
  650. package/scripts/windows-process-host-manifest.json +20 -0
  651. package/scripts/windows-process-host-protocol-v1.json +59 -0
  652. package/scripts/windows-process-host.cs +2385 -0
  653. package/scripts/windows-process-host.ps1 +59 -0
  654. package/scripts/windows-realpath-shim.cjs +78 -0
@@ -0,0 +1,151 @@
1
+ import { createCipheriv, createDecipheriv, createHmac, hkdfSync, timingSafeEqual } from "node:crypto";
2
+ import path from "node:path";
3
+ export function gitStateDirectories(stateRoot) {
4
+ const root = path.resolve(stateRoot);
5
+ const locks = path.join(root, "locks", "git");
6
+ const state = path.join(root, "git");
7
+ return {
8
+ root,
9
+ locks,
10
+ repositoryLocks: path.join(locks, "repositories"),
11
+ worktreeLocks: path.join(locks, "worktrees"),
12
+ state,
13
+ repositories: path.join(state, "repositories"),
14
+ operations: path.join(state, "operations"),
15
+ quarantines: path.join(state, "quarantines")
16
+ };
17
+ }
18
+ export function gateRError(code = "GIT_RECOVERY_REQUIRED") {
19
+ const error = new Error(code);
20
+ error.code = code;
21
+ return error;
22
+ }
23
+ function canonical(value, ancestors) {
24
+ if (value === null)
25
+ return "null";
26
+ if (typeof value === "string" || typeof value === "boolean")
27
+ return JSON.stringify(value);
28
+ if (typeof value === "number") {
29
+ if (!Number.isFinite(value))
30
+ throw gateRError();
31
+ return JSON.stringify(value);
32
+ }
33
+ if (typeof value !== "object")
34
+ throw gateRError();
35
+ if (ancestors.has(value))
36
+ throw gateRError();
37
+ ancestors.add(value);
38
+ try {
39
+ if (Array.isArray(value)) {
40
+ return `[${value.map((item) => canonical(item, ancestors)).join(",")}]`;
41
+ }
42
+ const object = value;
43
+ const prototype = Object.getPrototypeOf(object);
44
+ if (prototype !== Object.prototype && prototype !== null)
45
+ throw gateRError();
46
+ return `{${Object.keys(object).sort((left, right) => left.localeCompare(right, "en"))
47
+ .map((key) => {
48
+ if (object[key] === undefined)
49
+ throw gateRError();
50
+ return `${JSON.stringify(key)}:${canonical(object[key], ancestors)}`;
51
+ }).join(",")}}`;
52
+ }
53
+ finally {
54
+ ancestors.delete(value);
55
+ }
56
+ }
57
+ export function canonicalGateRJson(value) {
58
+ return canonical(value, new Set());
59
+ }
60
+ export function deriveGateRSubkey(masterKey, label) {
61
+ if (!Buffer.isBuffer(masterKey) || masterKey.length !== 32)
62
+ throw gateRError();
63
+ if (!/^[a-z][a-z0-9-]{0,63}$/.test(label))
64
+ throw gateRError();
65
+ return Buffer.from(hkdfSync("sha256", masterKey, Buffer.alloc(0), Buffer.from(`codexgpt/phase5/gate-r/${label}/v1`, "utf8"), 32));
66
+ }
67
+ export function sealGitState(key, aad, value, randomBytes, maxPlaintextBytes = 262_144) {
68
+ if (!Buffer.isBuffer(key) ||
69
+ key.length !== 32 ||
70
+ !aad ||
71
+ aad.length > 1024 ||
72
+ !Number.isSafeInteger(maxPlaintextBytes) ||
73
+ maxPlaintextBytes < 262_144 ||
74
+ maxPlaintextBytes > 48_000_000)
75
+ throw gateRError();
76
+ const plaintext = Buffer.from(canonicalGateRJson(value), "utf8");
77
+ if (plaintext.length > maxPlaintextBytes) {
78
+ plaintext.fill(0);
79
+ throw gateRError();
80
+ }
81
+ const iv = randomBytes(12);
82
+ if (!Buffer.isBuffer(iv) || iv.length !== 12) {
83
+ plaintext.fill(0);
84
+ throw gateRError();
85
+ }
86
+ try {
87
+ const cipher = createCipheriv("aes-256-gcm", key, iv);
88
+ cipher.setAAD(Buffer.from(aad, "utf8"));
89
+ const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
90
+ const tag = cipher.getAuthTag();
91
+ return {
92
+ schemaVersion: 1,
93
+ iv: iv.toString("base64"),
94
+ ciphertext: ciphertext.toString("base64"),
95
+ tag: tag.toString("base64")
96
+ };
97
+ }
98
+ catch {
99
+ throw gateRError();
100
+ }
101
+ finally {
102
+ plaintext.fill(0);
103
+ iv.fill(0);
104
+ }
105
+ }
106
+ export function openGitState(key, aad, sealed, maxPlaintextBytes = 262_144) {
107
+ try {
108
+ if (!Number.isSafeInteger(maxPlaintextBytes) ||
109
+ maxPlaintextBytes < 262_144 ||
110
+ maxPlaintextBytes > 48_000_000)
111
+ throw new Error("size");
112
+ if (sealed.schemaVersion !== 1)
113
+ throw new Error("version");
114
+ const iv = Buffer.from(sealed.iv, "base64");
115
+ const ciphertext = Buffer.from(sealed.ciphertext, "base64");
116
+ const tag = Buffer.from(sealed.tag, "base64");
117
+ if (iv.length !== 12 || tag.length !== 16 || ciphertext.length > maxPlaintextBytes)
118
+ throw new Error("shape");
119
+ const decipher = createDecipheriv("aes-256-gcm", key, iv);
120
+ decipher.setAAD(Buffer.from(aad, "utf8"));
121
+ decipher.setAuthTag(tag);
122
+ const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
123
+ try {
124
+ if (plaintext.length > maxPlaintextBytes)
125
+ throw new Error("size");
126
+ return JSON.parse(plaintext.toString("utf8"));
127
+ }
128
+ finally {
129
+ plaintext.fill(0);
130
+ }
131
+ }
132
+ catch {
133
+ throw gateRError();
134
+ }
135
+ }
136
+ export function gateRRecordMac(key, valueWithoutMac) {
137
+ if (!Buffer.isBuffer(key) || key.length !== 32)
138
+ throw gateRError();
139
+ return createHmac("sha256", key)
140
+ .update(canonicalGateRJson(valueWithoutMac), "utf8")
141
+ .digest("hex");
142
+ }
143
+ export function verifyGateRRecordMac(key, valueWithoutMac, supplied) {
144
+ if (!/^[a-f0-9]{64}$/.test(supplied))
145
+ throw gateRError();
146
+ const expected = Buffer.from(gateRRecordMac(key, valueWithoutMac), "hex");
147
+ const actual = Buffer.from(supplied, "hex");
148
+ if (expected.length !== actual.length || !timingSafeEqual(expected, actual))
149
+ throw gateRError();
150
+ }
151
+ //# sourceMappingURL=durableState.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"durableState.js","sourceRoot":"","sources":["../../src/git/durableState.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,QAAQ,EACR,eAAe,EAChB,MAAM,aAAa,CAAC;AACrB,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO;QACL,IAAI;QACJ,KAAK;QACL,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QACjD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QAC5C,KAAK;QACL,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QAC9C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC;QAC1C,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;KAC7C,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,uBAAuB;IACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAA6B,CAAC;IAC1D,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,SAAsB;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,UAAU,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,UAAU,EAAE,CAAC;IAClD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,UAAU,EAAE,CAAC;IAC7C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,UAAU,EAAE,CAAC;QAC7E,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;aAClF,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,MAAM,UAAU,EAAE,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;QACvE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa;IAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,UAAU,EAAE,CAAC;IAC/E,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,UAAU,EAAE,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CACzB,QAAQ,EACR,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACf,MAAM,CAAC,IAAI,CAAC,0BAA0B,KAAK,KAAK,EAAE,MAAM,CAAC,EACzD,EAAE,CACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,GAAW,EACX,KAAc,EACd,WAAqC,EACrC,iBAAiB,GAAG,OAAO;IAE3B,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,CAAC,GAAG;QACJ,GAAG,CAAC,MAAM,GAAG,IAAI;QACjB,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACxC,iBAAiB,GAAG,OAAO;QAC3B,iBAAiB,GAAG,UAAU;QAC9B,MAAM,UAAU,EAAE,CAAC;IACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,GAAW,EACX,MAAwB,EACxB,iBAAiB,GAAG,OAAO;IAE3B,IAAI,CAAC;QACH,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC;YACxC,iBAAiB,GAAG,OAAO;YAC3B,iBAAiB,GAAG,UAAU;YAC9B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7G,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,eAAwB;IAClE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,UAAU,EAAE,CAAC;IACnE,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SAC7B,MAAM,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;SACnD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,eAAwB,EAAE,QAAgB;IAC1F,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,UAAU,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,MAAM,UAAU,EAAE,CAAC;AAClG,CAAC"}
@@ -0,0 +1,451 @@
1
+ import { createHash } from "node:crypto";
2
+ import fsp from "node:fs/promises";
3
+ import path from "node:path";
4
+ import { createOwnedTempRoot } from "../../scripts/owned-temp-root.mjs";
5
+ import { createGitCapabilityEvidence, resolveGitExecutable, verifyGitExecutableBinding } from "./capabilities.js";
6
+ const FIXED_CONFIG = Object.freeze([
7
+ "advice.detachedHead=false",
8
+ "core.askPass=",
9
+ "core.editor=",
10
+ "core.fsmonitor=false",
11
+ "core.hooksPath=NUL",
12
+ "core.pager=cat",
13
+ "credential.helper=",
14
+ "diff.external=",
15
+ "gc.auto=0",
16
+ "maintenance.auto=false",
17
+ "pager.branch=false",
18
+ "pager.diff=false",
19
+ "pager.log=false",
20
+ "pager.status=false",
21
+ "protocol.allow=never",
22
+ "protocol.file.allow=never",
23
+ "sequence.editor=",
24
+ "tag.gpgSign=false",
25
+ "commit.gpgSign=false"
26
+ ]);
27
+ const APPROVED_INTEGRATION_FIXED_CONFIG = Object.freeze([
28
+ "advice.detachedHead=false",
29
+ "core.askPass=",
30
+ "core.editor=",
31
+ "core.pager=cat",
32
+ "credential.helper=",
33
+ "diff.external=",
34
+ "gc.auto=0",
35
+ "maintenance.auto=false",
36
+ "pager.branch=false",
37
+ "pager.diff=false",
38
+ "pager.log=false",
39
+ "pager.status=false",
40
+ "protocol.allow=never",
41
+ "protocol.file.allow=never",
42
+ "sequence.editor="
43
+ ]);
44
+ const MAX_ARGUMENTS = 384;
45
+ const MAX_ARGUMENT_BYTES = 8192;
46
+ const MAX_ARGUMENT_TOTAL_BYTES = 65_536;
47
+ const MAX_STDIN_BYTES = 131_072;
48
+ const MAX_OUTPUT_BYTES = 16 * 1024 * 1024;
49
+ const IMPLEMENTATION_REVISION = createHash("sha256").update(JSON.stringify({
50
+ schemaVersion: 4,
51
+ fixedConfig: FIXED_CONFIG,
52
+ approvedIntegrationFixedConfig: APPROVED_INTEGRATION_FIXED_CONFIG,
53
+ approvedIntegrationOperations: ["stage-private-old-add-new-trees", "commit-shadow", "merge-tree-quarantine", "checkout-private"],
54
+ limits: {
55
+ arguments: MAX_ARGUMENTS,
56
+ argumentBytes: MAX_ARGUMENT_BYTES,
57
+ argumentTotalBytes: MAX_ARGUMENT_TOTAL_BYTES,
58
+ stdinBytes: MAX_STDIN_BYTES,
59
+ outputBytes: MAX_OUTPUT_BYTES
60
+ },
61
+ executionIsolation: "none",
62
+ repositoryIntegrations: ["disabled", "approved_full_access"],
63
+ temporaryState: "owned-marker-v1",
64
+ hostTransport: "cxp4-framed-v1"
65
+ })).digest("hex");
66
+ function gitError(code) {
67
+ return new Error(code);
68
+ }
69
+ function validateArguments(args) {
70
+ if (!Array.isArray(args) || args.length > MAX_ARGUMENTS)
71
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
72
+ let total = 0;
73
+ const output = [];
74
+ for (const argument of args) {
75
+ if (typeof argument !== "string" || argument.includes("\0"))
76
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
77
+ const bytes = Buffer.byteLength(argument, "utf8");
78
+ if (bytes > MAX_ARGUMENT_BYTES)
79
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
80
+ total += bytes;
81
+ if (total > MAX_ARGUMENT_TOTAL_BYTES)
82
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
83
+ output.push(argument);
84
+ }
85
+ return output;
86
+ }
87
+ function validateConfigOverrides(values) {
88
+ if (!values)
89
+ return [];
90
+ if (values.length > 128)
91
+ throw gitError("GIT_INTEGRATION_REQUIRED");
92
+ return values.map((value) => {
93
+ if (typeof value !== "string" || value.length < 1 || value.length > 1024 || value.includes("\0") ||
94
+ !/^(?:filter\.[A-Za-z0-9._-]+\.(?:clean|smudge|required|process)|diff\.[A-Za-z0-9._-]+\.(?:command|textconv)|merge\.[A-Za-z0-9._-]+\.driver)=/.test(value))
95
+ throw gitError("GIT_INTEGRATION_REQUIRED");
96
+ return value;
97
+ });
98
+ }
99
+ function boundedInt(value, fallback, maximum) {
100
+ const actual = value ?? fallback;
101
+ if (!Number.isSafeInteger(actual) || actual < 1 || actual > maximum)
102
+ throw gitError("GIT_SCAN_LIMIT");
103
+ return actual;
104
+ }
105
+ function safePrivatePath(value, root) {
106
+ if (value === undefined)
107
+ return undefined;
108
+ if (typeof value !== "string" || value.includes("\0"))
109
+ throw gitError("GIT_REPOSITORY_UNSAFE");
110
+ const resolved = path.resolve(value);
111
+ const relative = path.relative(root, resolved);
112
+ if (relative.startsWith("..") || path.isAbsolute(relative))
113
+ throw gitError("GIT_REPOSITORY_UNSAFE");
114
+ return resolved;
115
+ }
116
+ function safeIdentity(value) {
117
+ if (!value)
118
+ return {};
119
+ const required = [
120
+ value.authorName,
121
+ value.authorEmail,
122
+ value.committerName,
123
+ value.committerEmail
124
+ ];
125
+ if (required.some((item) => typeof item !== "string" || item.length < 1 || item.length > 320 ||
126
+ /[\u0000\r\n]/u.test(item)))
127
+ throw gitError("GIT_IDENTITY_REQUIRED");
128
+ const dates = [value.systemAuthorDate, value.systemCommitterDate].filter((item) => item !== undefined);
129
+ if (dates.some((item) => item.length > 80 ||
130
+ !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u.test(item)))
131
+ throw gitError("GIT_IDENTITY_REQUIRED");
132
+ return {
133
+ GIT_AUTHOR_NAME: value.authorName,
134
+ GIT_AUTHOR_EMAIL: value.authorEmail,
135
+ GIT_COMMITTER_NAME: value.committerName,
136
+ GIT_COMMITTER_EMAIL: value.committerEmail,
137
+ ...(value.systemAuthorDate ? { GIT_AUTHOR_DATE: value.systemAuthorDate } : {}),
138
+ ...(value.systemCommitterDate ? { GIT_COMMITTER_DATE: value.systemCommitterDate } : {})
139
+ };
140
+ }
141
+ function cleanWindowsEnvironment(home, tempRoot) {
142
+ const systemDrive = path.win32.parse(process.execPath).root.replace(/[\\/]$/, "") || "C:";
143
+ const systemRoot = path.win32.join(`${systemDrive}\\`, "Windows");
144
+ return {
145
+ SystemDrive: systemDrive,
146
+ SystemRoot: systemRoot,
147
+ WINDIR: systemRoot,
148
+ ProgramData: path.win32.join(`${systemDrive}\\`, "ProgramData"),
149
+ ComSpec: path.win32.join(systemRoot, "System32", "cmd.exe"),
150
+ PATH: `${path.win32.join(systemRoot, "System32")};${systemRoot}`,
151
+ PATHEXT: ".COM;.EXE;.BAT;.CMD",
152
+ TEMP: tempRoot,
153
+ TMP: tempRoot,
154
+ HOME: home,
155
+ XDG_CONFIG_HOME: path.win32.join(home, "xdg"),
156
+ LC_ALL: "C",
157
+ LANG: "C",
158
+ GIT_CONFIG_NOSYSTEM: "1",
159
+ GIT_CONFIG_SYSTEM: "NUL",
160
+ GIT_CONFIG_GLOBAL: "NUL",
161
+ GIT_TERMINAL_PROMPT: "0",
162
+ GIT_NO_LAZY_FETCH: "1",
163
+ GIT_NO_REPLACE_OBJECTS: "1",
164
+ GIT_ALLOW_PROTOCOL: "",
165
+ GIT_PROTOCOL_FROM_USER: "0",
166
+ GIT_OPTIONAL_LOCKS: "0",
167
+ GIT_LFS_SKIP_SMUDGE: "1"
168
+ };
169
+ }
170
+ function hostManifestRevision(manifest) {
171
+ return createHash("sha256").update(JSON.stringify(manifest)).digest("hex");
172
+ }
173
+ export class WindowsHostGitExecutor {
174
+ capabilityRevision;
175
+ capability;
176
+ #binding;
177
+ #hostRuntime;
178
+ #home;
179
+ #tempRoot;
180
+ #ownedTemp;
181
+ #disposed = false;
182
+ constructor(input) {
183
+ this.#binding = input.binding;
184
+ this.#hostRuntime = input.hostRuntime;
185
+ this.#home = input.home;
186
+ this.#tempRoot = input.tempRoot;
187
+ this.#ownedTemp = input.ownedTemp;
188
+ this.capability = input.capability;
189
+ this.capabilityRevision = input.capability.capabilityRevision;
190
+ }
191
+ static async start(options) {
192
+ if (process.platform !== "win32")
193
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
194
+ const binding = await resolveGitExecutable({
195
+ explicitPath: options.explicitGitPath,
196
+ platform: "win32",
197
+ programFiles: options.programFiles
198
+ });
199
+ const ownedTemp = await createOwnedTempRoot("git-exec");
200
+ const tempRoot = ownedTemp.path;
201
+ const home = path.join(tempRoot, "home");
202
+ await fsp.mkdir(path.join(home, "xdg"), { recursive: true });
203
+ try {
204
+ const client = await options.hostRuntime.get();
205
+ const environment = cleanWindowsEnvironment(home, tempRoot);
206
+ const { body } = await client.request("run", {
207
+ executable: binding.realPath,
208
+ arguments: ["--version"],
209
+ cwd: tempRoot,
210
+ environment,
211
+ stdinBase64: "",
212
+ timeoutMs: 30_000,
213
+ stdoutLimitBytes: 4096,
214
+ stderrLimitBytes: 4096
215
+ }, { timeoutMs: 40_000 });
216
+ const stdout = Buffer.from(typeof body.stdoutBase64 === "string" ? body.stdoutBase64 : "", "base64").toString("utf8").trim();
217
+ if (body.timedOut === true || body.exitCode !== 0 || !/^git version /.test(stdout))
218
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
219
+ const capability = createGitCapabilityEvidence({
220
+ executable: binding,
221
+ version: stdout,
222
+ hostManifestRevision: hostManifestRevision(client.manifest),
223
+ implementationRevision: IMPLEMENTATION_REVISION
224
+ });
225
+ return new WindowsHostGitExecutor({ binding, hostRuntime: options.hostRuntime, home, tempRoot, ownedTemp, capability });
226
+ }
227
+ catch (error) {
228
+ await ownedTemp.cleanup().catch(() => { });
229
+ throw error;
230
+ }
231
+ }
232
+ async run(repository, args, options = {}) {
233
+ if (this.#disposed)
234
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
235
+ await verifyGitExecutableBinding(this.#binding, "win32");
236
+ const requested = validateArguments(args);
237
+ const stdin = options.stdin ?? Buffer.alloc(0);
238
+ if (!Buffer.isBuffer(stdin) || stdin.length > MAX_STDIN_BYTES)
239
+ throw gitError("GIT_SCAN_LIMIT");
240
+ const timeoutMs = boundedInt(options.timeoutMs, 60_000, 600_000);
241
+ const stdoutLimitBytes = boundedInt(options.stdoutLimitBytes, MAX_OUTPUT_BYTES, MAX_OUTPUT_BYTES);
242
+ const stderrLimitBytes = boundedInt(options.stderrLimitBytes, 4096, MAX_OUTPUT_BYTES);
243
+ const config = [...FIXED_CONFIG, ...validateConfigOverrides(options.configOverrides)];
244
+ const privateIndexPath = safePrivatePath(options.privateIndexPath, this.#tempRoot);
245
+ const objectDirectoryPath = safePrivatePath(options.objectDirectoryPath, this.#tempRoot);
246
+ const repositoryArgs = repository
247
+ ? [
248
+ `--git-dir=${repository.gitDir}`,
249
+ `--work-tree=${repository.worktreeRoot}`,
250
+ "--literal-pathspecs"
251
+ ]
252
+ : [];
253
+ const arguments_ = [
254
+ ...repositoryArgs,
255
+ ...config.flatMap((entry) => ["-c", entry]),
256
+ ...requested
257
+ ];
258
+ validateArguments(arguments_);
259
+ const client = await this.#hostRuntime.get();
260
+ const { body } = await client.request("run", {
261
+ executable: this.#binding.realPath,
262
+ arguments: arguments_,
263
+ cwd: repository?.worktreeRoot ?? this.#tempRoot,
264
+ environment: {
265
+ ...cleanWindowsEnvironment(this.#home, this.#tempRoot),
266
+ ...(privateIndexPath ? { GIT_INDEX_FILE: privateIndexPath } : {}),
267
+ ...(objectDirectoryPath ? {
268
+ GIT_OBJECT_DIRECTORY: objectDirectoryPath,
269
+ ...(repository ? { GIT_ALTERNATE_OBJECT_DIRECTORIES: path.join(repository.commonDir, "objects") } : {})
270
+ } : {}),
271
+ ...safeIdentity(options.identity)
272
+ },
273
+ stdinBase64: stdin.toString("base64"),
274
+ timeoutMs,
275
+ stdoutLimitBytes,
276
+ stderrLimitBytes
277
+ }, { timeoutMs: timeoutMs + 10_000 });
278
+ return {
279
+ status: typeof body.exitCode === "number" ? body.exitCode : 1,
280
+ stdout: Buffer.from(typeof body.stdoutBase64 === "string" ? body.stdoutBase64 : "", "base64"),
281
+ stderr: Buffer.from(typeof body.stderrBase64 === "string" ? body.stderrBase64 : "", "base64"),
282
+ stdoutTruncated: body.stdoutTruncated === true,
283
+ stderrTruncated: body.stderrTruncated === true,
284
+ timedOut: body.timedOut === true
285
+ };
286
+ }
287
+ async runApprovedIntegration(repository, request) {
288
+ if (this.#disposed)
289
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
290
+ await verifyGitExecutableBinding(this.#binding, "win32");
291
+ let requested;
292
+ let stdin = Buffer.alloc(0);
293
+ let privateIndexPath;
294
+ let objectDirectoryPath;
295
+ const integrationGitDir = safePrivatePath(request.integrationGitDir, this.#tempRoot);
296
+ const hooksPath = safePrivatePath(request.hooksPath, this.#tempRoot);
297
+ const integrationConfigOverrides = validateConfigOverrides(request.integrationConfigOverrides);
298
+ if (!integrationGitDir || !hooksPath)
299
+ throw gitError("GIT_REPOSITORY_UNSAFE");
300
+ if (request.operation === "stage") {
301
+ if (request.paths.length < 1 || request.paths.length > 256)
302
+ throw gitError("GIT_SCAN_LIMIT");
303
+ if (request.paths.some((item) => typeof item !== "string" ||
304
+ item.length < 1 ||
305
+ item.length > MAX_ARGUMENT_BYTES ||
306
+ item.includes("\0")))
307
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
308
+ requested = ["add", "--pathspec-from-file=-", "--pathspec-file-nul"];
309
+ stdin = Buffer.from(`${request.paths.join("\0")}\0`, "utf8");
310
+ privateIndexPath = safePrivatePath(request.privateIndexPath, this.#tempRoot);
311
+ objectDirectoryPath = safePrivatePath(request.objectDirectoryPath, this.#tempRoot);
312
+ if (!privateIndexPath || !objectDirectoryPath)
313
+ throw gitError("GIT_REPOSITORY_UNSAFE");
314
+ }
315
+ else if (request.operation === "commit") {
316
+ if (!Buffer.isBuffer(request.message) || request.message.length < 1 || request.message.length > 16 * 1024) {
317
+ throw gitError("GIT_SCAN_LIMIT");
318
+ }
319
+ requested = ["commit", "--file=-"];
320
+ stdin = request.message;
321
+ privateIndexPath = safePrivatePath(request.privateIndexPath, this.#tempRoot);
322
+ objectDirectoryPath = safePrivatePath(request.objectDirectoryPath, this.#tempRoot);
323
+ const shadowGitDir = safePrivatePath(request.shadowGitDir, this.#tempRoot);
324
+ if (!privateIndexPath ||
325
+ !objectDirectoryPath ||
326
+ !shadowGitDir ||
327
+ shadowGitDir !== integrationGitDir)
328
+ throw gitError("GIT_REPOSITORY_UNSAFE");
329
+ }
330
+ else if (request.operation === "merge_tree") {
331
+ if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(request.targetOid) ||
332
+ !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(request.taskOid))
333
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
334
+ requested = ["merge-tree", "--write-tree", "-z", request.targetOid, request.taskOid];
335
+ objectDirectoryPath = safePrivatePath(request.objectDirectoryPath, this.#tempRoot);
336
+ if (!objectDirectoryPath)
337
+ throw gitError("GIT_REPOSITORY_UNSAFE");
338
+ }
339
+ else if (request.operation === "checkout_index") {
340
+ if (request.paths.length < 1 ||
341
+ request.paths.length > 4096 ||
342
+ request.paths.some((item) => typeof item !== "string" ||
343
+ item.length < 1 ||
344
+ item.length > MAX_ARGUMENT_BYTES ||
345
+ item.includes("\0")))
346
+ throw gitError("GIT_SCAN_LIMIT");
347
+ privateIndexPath = safePrivatePath(request.privateIndexPath, this.#tempRoot);
348
+ const destination = safePrivatePath(request.destinationPrefix, this.#tempRoot);
349
+ if (!privateIndexPath || !destination)
350
+ throw gitError("GIT_REPOSITORY_UNSAFE");
351
+ requested = ["checkout-index", "--force", "-z", "--stdin", `--prefix=${destination}${path.sep}`];
352
+ stdin = Buffer.from(`${request.paths.join("\0")}\0`, "utf8");
353
+ }
354
+ else {
355
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
356
+ }
357
+ const repositoryArgs = [
358
+ `--git-dir=${integrationGitDir}`,
359
+ `--work-tree=${repository.worktreeRoot}`,
360
+ "--literal-pathspecs"
361
+ ];
362
+ const approvedConfig = [
363
+ ...APPROVED_INTEGRATION_FIXED_CONFIG,
364
+ ...integrationConfigOverrides,
365
+ `core.hooksPath=${hooksPath}`
366
+ ];
367
+ const client = await this.#hostRuntime.get();
368
+ const environment = cleanWindowsEnvironment(this.#home, this.#tempRoot);
369
+ delete environment.GIT_LFS_SKIP_SMUDGE;
370
+ const runApproved = async (command, commandStdin, stdoutLimitBytes = MAX_OUTPUT_BYTES) => {
371
+ const arguments_ = [
372
+ ...repositoryArgs,
373
+ ...approvedConfig.flatMap((entry) => ["-c", entry]),
374
+ ...validateArguments(command)
375
+ ];
376
+ validateArguments(arguments_);
377
+ const { body } = await client.request("run", {
378
+ executable: this.#binding.realPath,
379
+ arguments: arguments_,
380
+ cwd: repository.worktreeRoot,
381
+ environment: {
382
+ ...environment,
383
+ ...(privateIndexPath ? { GIT_INDEX_FILE: privateIndexPath } : {}),
384
+ ...(objectDirectoryPath ? { GIT_OBJECT_DIRECTORY: objectDirectoryPath } : {}),
385
+ GIT_ALTERNATE_OBJECT_DIRECTORIES: path.join(repository.commonDir, "objects")
386
+ },
387
+ stdinBase64: commandStdin.toString("base64"),
388
+ timeoutMs: 120_000,
389
+ stdoutLimitBytes,
390
+ stderrLimitBytes: MAX_OUTPUT_BYTES
391
+ }, { timeoutMs: 130_000 });
392
+ return {
393
+ status: typeof body.exitCode === "number" ? body.exitCode : 1,
394
+ stdout: Buffer.from(typeof body.stdoutBase64 === "string" ? body.stdoutBase64 : "", "base64"),
395
+ stderr: Buffer.from(typeof body.stderrBase64 === "string" ? body.stderrBase64 : "", "base64"),
396
+ stdoutTruncated: body.stdoutTruncated === true,
397
+ stderrTruncated: body.stderrTruncated === true,
398
+ timedOut: body.timedOut === true
399
+ };
400
+ };
401
+ const succeeds = (result) => result.status === 0 &&
402
+ !result.timedOut &&
403
+ !result.stdoutTruncated &&
404
+ !result.stderrTruncated;
405
+ if (request.operation !== "stage")
406
+ return { result: await runApproved(requested, stdin) };
407
+ const readTreeOid = (result) => {
408
+ const treeText = result.stdout.toString("ascii");
409
+ const expected = repository.objectFormat === "sha1"
410
+ ? /^[a-f0-9]{40}\r?\n?$/u
411
+ : /^[a-f0-9]{64}\r?\n?$/u;
412
+ if (!expected.test(treeText))
413
+ throw gitError("GIT_COMMAND_FAILED");
414
+ return treeText.trim();
415
+ };
416
+ const oldTree = await runApproved(["write-tree"], Buffer.alloc(0), 256);
417
+ if (!succeeds(oldTree))
418
+ return { result: oldTree };
419
+ const primary = await runApproved(requested, stdin);
420
+ if (!succeeds(primary))
421
+ return { result: primary };
422
+ const newTree = await runApproved(["write-tree"], Buffer.alloc(0), 256);
423
+ if (!succeeds(newTree))
424
+ return { result: newTree };
425
+ return {
426
+ result: newTree,
427
+ stageOldTreeOid: readTreeOid(oldTree),
428
+ stageTreeOid: readTreeOid(newTree)
429
+ };
430
+ }
431
+ async createPrivateDirectory(prefix) {
432
+ if (this.#disposed || !/^[a-z][a-z0-9-]{0,31}$/.test(prefix))
433
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
434
+ return fsp.mkdtemp(path.join(this.#tempRoot, `${prefix}-`));
435
+ }
436
+ async removePrivateDirectory(directory) {
437
+ if (this.#disposed)
438
+ throw gitError("GIT_CAPABILITY_UNAVAILABLE");
439
+ const resolved = safePrivatePath(directory, this.#tempRoot);
440
+ if (!resolved || resolved === this.#tempRoot)
441
+ throw gitError("GIT_REPOSITORY_UNSAFE");
442
+ await fsp.rm(resolved, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
443
+ }
444
+ async dispose() {
445
+ if (this.#disposed)
446
+ return;
447
+ this.#disposed = true;
448
+ await this.#ownedTemp.cleanup();
449
+ }
450
+ }
451
+ //# sourceMappingURL=execution.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/git/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAsB,MAAM,mCAAmC,CAAC;AAE5F,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAG3B,MAAM,mBAAmB,CAAC;AAwF3B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,2BAA2B;IAC3B,eAAe;IACf,cAAc;IACd,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,WAAW;IACX,wBAAwB;IACxB,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,2BAA2B;IAC3B,kBAAkB;IAClB,mBAAmB;IACnB,sBAAsB;CACvB,CAAC,CAAC;AACH,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,2BAA2B;IAC3B,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,WAAW;IACX,wBAAwB;IACxB,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,2BAA2B;IAC3B,kBAAkB;CACnB,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,uBAAuB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;IACzE,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,YAAY;IACzB,8BAA8B,EAAE,iCAAiC;IACjE,6BAA6B,EAAE,CAAC,iCAAiC,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,CAAC;IAChI,MAAM,EAAE;QACN,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,kBAAkB;QACjC,kBAAkB,EAAE,wBAAwB;QAC5C,UAAU,EAAE,eAAe;QAC3B,WAAW,EAAE,gBAAgB;KAC9B;IACD,kBAAkB,EAAE,MAAM;IAC1B,sBAAsB,EAAE,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5D,cAAc,EAAE,iBAAiB;IACjC,aAAa,EAAE,gBAAgB;CAChC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElB,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAuB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;QAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IACtG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAC1G,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,KAAK,GAAG,kBAAkB;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAC7E,KAAK,IAAI,KAAK,CAAC;QACf,IAAI,KAAK,GAAG,wBAAwB;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAqC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,IACE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC5F,CAAC,6IAA6I,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1J,MAAM,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe;IAC9E,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,OAAO;QAAE,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,IAAY;IAC9D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACpG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAsC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG;QACf,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,cAAc;KACrB,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACzB,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAChE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B;QAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,MAAM,CACtE,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAC7C,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,IAAI,CAAC,MAAM,GAAG,EAAE;QAChB,CAAC,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7D;QAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC3C,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,UAAU;QACjC,gBAAgB,EAAE,KAAK,CAAC,WAAW;QACnC,kBAAkB,EAAE,KAAK,CAAC,aAAa;QACvC,mBAAmB,EAAE,KAAK,CAAC,cAAc;QACzC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,QAAgB;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,EAAE,SAAS,CAAC,CAAC;IAClE,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,EAAE,aAAa,CAAC;QAC/D,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC;QAC3D,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,UAAU,EAAE;QAChE,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,IAAI;QACV,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QAC7C,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,GAAG;QACT,mBAAmB,EAAE,GAAG;QACxB,iBAAiB,EAAE,KAAK;QACxB,iBAAiB,EAAE,KAAK;QACxB,mBAAmB,EAAE,GAAG;QACxB,iBAAiB,EAAE,GAAG;QACtB,sBAAsB,EAAE,GAAG;QAC3B,kBAAkB,EAAE,EAAE;QACtB,sBAAsB,EAAE,GAAG;QAC3B,kBAAkB,EAAE,GAAG;QACvB,mBAAmB,EAAE,GAAG;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAiB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,kBAAkB,CAAS;IAC3B,UAAU,CAAwB;IAClC,QAAQ,CAAuB;IAC/B,YAAY,CAA4B;IACxC,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,UAAU,CAAgB;IACnC,SAAS,GAAG,KAAK,CAAC;IAElB,YAAoB,KAOnB;QACC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAIlB;QACC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;YACzC,YAAY,EAAE,OAAO,CAAC,eAAe;YACrC,QAAQ,EAAE,OAAO;YACjB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC3C,UAAU,EAAE,OAAO,CAAC,QAAQ;gBAC5B,SAAS,EAAE,CAAC,WAAW,CAAC;gBACxB,GAAG,EAAE,QAAQ;gBACb,WAAW;gBACX,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,MAAM;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,gBAAgB,EAAE,IAAI;aACvB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7H,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;YACjI,MAAM,UAAU,GAAG,2BAA2B,CAAC;gBAC7C,UAAU,EAAE,OAAO;gBACnB,OAAO,EAAE,MAAM;gBACf,oBAAoB,EAAE,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC3D,sBAAsB,EAAE,uBAAuB;aAChD,CAAC,CAAC;YACH,OAAO,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,UAAiD,EACjD,IAAuB,EACvB,UAA+B,EAAE;QAEjC,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACjE,MAAM,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;YAAE,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QAClG,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACtF,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,mBAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzF,MAAM,cAAc,GAAG,UAAU;YAC/B,CAAC,CAAC;gBACE,aAAa,UAAU,CAAC,MAAM,EAAE;gBAChC,eAAe,UAAU,CAAC,YAAY,EAAE;gBACxC,qBAAqB;aACtB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,UAAU,GAAG;YACjB,GAAG,cAAc;YACjB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,GAAG,SAAS;SACb,CAAC;QACF,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;YAC3C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAClC,SAAS,EAAE,UAAU;YACrB,GAAG,EAAE,UAAU,EAAE,YAAY,IAAI,IAAI,CAAC,SAAS;YAC/C,WAAW,EAAE;gBACX,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;oBACxB,oBAAoB,EAAE,mBAAmB;oBACzC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gCAAgC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC;aAClC;YACD,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrC,SAAS;YACT,gBAAgB;YAChB,gBAAgB;SACjB,EAAE,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC;YAC7F,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC;YAC7F,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;YAC9C,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;YAC9C,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,UAA0C,EAC1C,OAA0C;QAE1C,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACjE,MAAM,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,SAAmB,CAAC;QACxB,IAAI,KAAK,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,gBAAoC,CAAC;QACzC,IAAI,mBAAuC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,0BAA0B,GAAG,uBAAuB,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC/F,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS;YAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAC7F,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9B,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,CAAC,MAAM,GAAG,CAAC;gBACf,IAAI,CAAC,MAAM,GAAG,kBAAkB;gBAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpB;gBAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;YAChD,SAAS,GAAG,CAAC,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,CAAC,CAAC;YACrE,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7D,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7E,mBAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,CAAC,gBAAgB,IAAI,CAAC,mBAAmB;gBAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACzF,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAC1G,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACnC,CAAC;YACD,SAAS,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACnC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;YACxB,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7E,mBAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnF,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3E,IACE,CAAC,gBAAgB;gBACjB,CAAC,mBAAmB;gBACpB,CAAC,YAAY;gBACb,YAAY,KAAK,iBAAiB;gBAClC,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;YAC9C,IACE,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC3D,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzD,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;YAC/C,SAAS,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACrF,mBAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,CAAC,mBAAmB;gBAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YAClD,IACE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACxB,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI;gBAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1B,OAAO,IAAI,KAAK,QAAQ;oBACxB,IAAI,CAAC,MAAM,GAAG,CAAC;oBACf,IAAI,CAAC,MAAM,GAAG,kBAAkB;oBAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpB;gBACD,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACnC,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7E,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/E,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW;gBAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAC/E,SAAS,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjG,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,cAAc,GAAG;YACrB,aAAa,iBAAiB,EAAE;YAChC,eAAe,UAAU,CAAC,YAAY,EAAE;YACxC,qBAAqB;SACtB,CAAC;QACF,MAAM,cAAc,GAAG;YACrB,GAAG,iCAAiC;YACpC,GAAG,0BAA0B;YAC7B,kBAAkB,SAAS,EAAE;SAC9B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,OAAO,WAAW,CAAC,mBAAmB,CAAC;QACvC,MAAM,WAAW,GAAG,KAAK,EACvB,OAA0B,EAC1B,YAAoB,EACpB,gBAAgB,GAAG,gBAAgB,EACN,EAAE;YAC/B,MAAM,UAAU,GAAG;gBACjB,GAAG,cAAc;gBACjB,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACnD,GAAG,iBAAiB,CAAC,OAAO,CAAC;aAC9B,CAAC;YACF,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC3C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAClC,SAAS,EAAE,UAAU;gBACrB,GAAG,EAAE,UAAU,CAAC,YAAY;gBAC5B,WAAW,EAAE;oBACX,GAAG,WAAW;oBACd,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7E,gCAAgC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;iBAC7E;gBACD,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC5C,SAAS,EAAE,OAAO;gBAClB,gBAAgB;gBAChB,gBAAgB,EAAE,gBAAgB;aACnC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC7D,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAC7F,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAC7F,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;gBAC9C,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;gBAC9C,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;aACjC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,MAA0B,EAAW,EAAE,CACvD,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,MAAM,CAAC,QAAQ;YAChB,CAAC,MAAM,CAAC,eAAe;YACvB,CAAC,MAAM,CAAC,eAAe,CAAC;QAC1B,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,WAAW,GAAG,CAAC,MAA0B,EAAU,EAAE;YACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,KAAK,MAAM;gBACjD,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,uBAAuB,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACnE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC;YACrC,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACzC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAC3G,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;CACF"}