dodo-mcp 1.0.0

package/dist/setup/componentProbes.js

@@ -0,0 +1,259 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { spawn, spawnSync } from 'node:child_process';
+import { resolveTrustedExecutable } from '../platform/execResolve.js';
+import { batchInvocation } from '../platform/shell.js';
+import { ensurePrivateDirectory } from '../platform/privateFs.js';
+import { removeWithRetry } from '../platform/fsRetry.js';
+import { signalOwnedProcess } from '../platform/processTree.js';
+import { buildChildEnv } from '../security/env.js';
+import { findSpeechEngine, renderSpeech } from '../platform/speech.js';
+import { loadGlobalConfig } from '../config/globalConfig.js';
+import { processMedia } from '../services/multimodal/mediaWorker.js';
+import { WorkerSpec } from '../services/multimodal/contracts.js';
+import { MODEL_PIN, verifiedFile } from './download.js';
+export const SETUP_LSP_LANGUAGES = ['python', 'html', 'css', 'json', 'yaml', 'bash'];
+/** Readiness is not inferred from an installed package name. Each LSP must answer initialize AND shutdown. */
+export async function probeLanguageServer(server, root, cwd, timeoutMs = 30000) {
+    const program = resolveTrustedExecutable(server.command, root, { allowAbsolute: true, allowBatch: false });
+    await new Promise((resolve, reject) => {
+        const child = spawn(program, server.args, { cwd, env: buildChildEnv({ parentEnv: process.env, workspaceRoot: root, extraAllowlist: [] }), shell: false, windowsHide: true, detached: process.platform !== 'win32', stdio: ['pipe', 'pipe', 'pipe'] });
+        let buffer = Buffer.alloc(0), total = 0, initialized = false, shutdown = false, failure, settled = false;
+        const send = (message) => {
+            const content = Buffer.from(JSON.stringify(message));
+            child.stdin.write(`Content-Length: ${content.length}\r\n\r\n`);
+            child.stdin.write(content);
+        };
+        const fail = (message) => { if (failure)
+            return; failure = new Error(message); try {
+            signalOwnedProcess(child, 'SIGKILL');
+        }
+        catch { /* close/error is handled below */ } };
+        const timer = setTimeout(() => fail('language server did not complete the initialize/shutdown probe'), timeoutMs);
+        child.stderr.resume();
+        child.stdin.on('error', () => undefined);
+        child.on('error', () => { if (!settled) {
+            settled = true;
+            clearTimeout(timer);
+            reject(new Error('language server could not start'));
+        } });
+        child.stdout.on('data', (chunk) => {
+            total += chunk.length;
+            if (total > 2 * 1024 * 1024) {
+                fail('language server output exceeds the setup probe budget');
+                return;
+            }
+            buffer = Buffer.concat([buffer, chunk]);
+            try {
+                while (!failure) {
+                    const end = buffer.indexOf('\r\n\r\n');
+                    if (end < 0)
+                        break;
+                    const header = buffer.subarray(0, end).toString('ascii'), match = /^Content-Length:\s*(\d+)\s*$/im.exec(header);
+                    if (!match)
+                        throw new Error('invalid LSP framing');
+                    const size = Number(match[1]);
+                    if (!Number.isSafeInteger(size) || size < 2 || size > 1024 * 1024)
+                        throw new Error('invalid LSP content length');
+                    if (buffer.length < end + 4 + size)
+                        break;
+                    const message = JSON.parse(buffer.subarray(end + 4, end + 4 + size).toString('utf8'));
+                    buffer = buffer.subarray(end + 4 + size);
+                    if (message.id === 1 && !message.method) {
+                        if (message.error || !message.result || typeof message.result !== 'object' || !('capabilities' in message.result))
+                            throw new Error('language server initialization failed');
+                        initialized = true;
+                        send({ jsonrpc: '2.0', method: 'initialized', params: {} });
+                        send({ jsonrpc: '2.0', id: 2, method: 'shutdown', params: null });
+                    }
+                    else if (message.id === 2 && !message.method) {
+                        if (!initialized || message.error)
+                            throw new Error('language server shutdown failed');
+                        shutdown = true;
+                        send({ jsonrpc: '2.0', method: 'exit' });
+                        child.stdin.end();
+                    }
+                    else if (message.method && message.id !== undefined) {
+                        send({ jsonrpc: '2.0', id: message.id, result: message.method === 'workspace/configuration' ? [] : null });
+                    }
+                }
+            }
+            catch {
+                fail('language server returned an invalid or failed protocol response');
+            }
+        });
+        child.once('close', code => {
+            clearTimeout(timer);
+            if (settled)
+                return;
+            settled = true;
+            if (failure)
+                reject(failure);
+            else if (!initialized || !shutdown || code !== 0)
+                reject(new Error(`language server protocol probe was incomplete (exit ${code})`));
+            else
+                resolve();
+        });
+        send({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { processId: process.pid, rootUri: pathToFileURL(cwd).href, capabilities: {}, clientInfo: { name: 'DODO setup probe' }, workspaceFolders: null } });
+    });
+}
+function binary(root, name) { return resolveTrustedExecutable(name, root, { allowBatch: false }); }
+function run(root, program, args, cwd, additions = {}) {
+    const invocation = process.platform === 'win32' && /\.(cmd|bat)$/i.test(program) ? batchInvocation(program, args, root) : { program, args, windowsVerbatimArguments: false };
+    const result = spawnSync(invocation.program, invocation.args, { cwd, env: { ...buildChildEnv({ parentEnv: process.env, workspaceRoot: root, extraAllowlist: [] }), ...additions }, shell: false, windowsHide: true, windowsVerbatimArguments: invocation.windowsVerbatimArguments, encoding: 'utf8', timeout: 30000, maxBuffer: 1024 * 1024 });
+    if (result.error || result.status !== 0)
+        throw new Error(`native ${path.basename(program)} probe failed (exit ${result.status ?? 'spawn failure'})`);
+    return result.stdout;
+}
+function silence(file, seconds = 1) {
+    const samples = 16000 * seconds, data = Buffer.alloc(44 + samples * 2);
+    data.write('RIFF', 0);
+    data.writeUInt32LE(data.length - 8, 4);
+    data.write('WAVEfmt ', 8);
+    data.writeUInt32LE(16, 16);
+    data.writeUInt16LE(1, 20);
+    data.writeUInt16LE(1, 22);
+    data.writeUInt32LE(16000, 24);
+    data.writeUInt32LE(32000, 28);
+    data.writeUInt16LE(2, 32);
+    data.writeUInt16LE(16, 34);
+    data.write('data', 36);
+    data.writeUInt32LE(samples * 2, 40);
+    fs.writeFileSync(file, data, { flag: 'wx', mode: 0o600 });
+}
+/** Explicit local setup only: fixtures are private and removed; no project code is executed. */
+export async function verifyInstalledComponent(component, root, configDir) {
+    if (!['git', 'ripgrep', 'cloudflared', 'speech', 'lsp', 'chromium', 'ffmpeg', 'whisper'].includes(component))
+        return undefined;
+    const directory = fs.realpathSync.native(fs.mkdtempSync(path.join(os.tmpdir(), 'dodo-setup-probe-')));
+    ensurePrivateDirectory(directory);
+    try {
+        if (component === 'git') {
+            const git = binary(root, 'git'), empty = path.join(directory, 'empty-config');
+            fs.writeFileSync(empty, '', { flag: 'wx', mode: 0o600 });
+            const templates = path.join(directory, 'empty-templates');
+            fs.mkdirSync(templates);
+            const repository = path.join(directory, 'repository');
+            fs.mkdirSync(repository);
+            const env = { GIT_CONFIG_GLOBAL: empty, GIT_CONFIG_NOSYSTEM: '1' };
+            const options = ['-c', `core.hooksPath=${templates}`, '-c', 'core.quotepath=false'];
+            run(root, git, [...options, 'init', '--quiet', `--template=${templates}`], repository, env);
+            const file = 'DODO ไทย space.txt';
+            fs.writeFileSync(path.join(repository, file), 'DODO_GIT_PROBE\n', { flag: 'wx' });
+            run(root, git, [...options, 'add', '--', file], repository, env);
+            const diff = run(root, git, [...options, 'diff', '--cached', '--no-ext-diff', '--no-textconv', '--', file], repository, env);
+            if (!diff.includes('+DODO_GIT_PROBE'))
+                throw new Error('Git did not stage and diff the disposable UTF-8 fixture');
+            return 'native Git initialized a disposable repository and staged/diffed a Thai/spaced filename; no commits/hooks/global config changes';
+        }
+        if (component === 'ripgrep') {
+            const file = path.join(directory, 'ไทย space.txt');
+            fs.writeFileSync(file, 'DODO_RG_PROBE\n', { flag: 'wx' });
+            const output = run(root, binary(root, 'rg'), ['--no-config', '--fixed-strings', '--json', '--', 'DODO_RG_PROBE', file], directory);
+            if (!output.split(/\r?\n/).filter(Boolean).some(line => JSON.parse(line).type === 'match'))
+                throw new Error('ripgrep did not return a real fixture match');
+            return 'native ripgrep found the exact token in a Thai/spaced fixture path';
+        }
+        if (component === 'cloudflared') {
+            const output = run(root, binary(root, 'cloudflared'), ['--version'], directory);
+            if (!/cloudflared version/i.test(output))
+                throw new Error('cloudflared did not return its version identity');
+            return 'cloudflared executable started and returned its version; no tunnel, network connection or credential was used';
+        }
+        if (component === 'speech') {
+            const engine = findSpeechEngine(root);
+            if (!engine)
+                throw new Error('no native speech engine passed its readiness probe');
+            const input = path.join(directory, 'input.txt'), output = path.join(directory, engine.kind === 'macos-say' ? 'output.aiff' : 'output.wav');
+            fs.writeFileSync(input, 'DODO setup verifies local speech.', { mode: 0o600, flag: 'wx' });
+            await renderSpeech(engine, input, output);
+            const bytes = fs.readFileSync(output), header = bytes.subarray(0, 4).toString('ascii');
+            if (bytes.length < 100 || !['FORM', 'RIFF'].includes(header))
+                throw new Error('speech engine did not produce an audio file');
+            return `${engine.kind} rendered a real local audio file (${bytes.length} bytes); no playback or microphone access`;
+        }
+        if (component === 'lsp') {
+            const config = loadGlobalConfig(path.join(configDir, 'config.json'));
+            for (const language of SETUP_LSP_LANGUAGES) {
+                const server = config.lsp[language];
+                if (!server)
+                    throw new Error(`language server is not registered: ${language}`);
+                try {
+                    await probeLanguageServer(server, root, directory);
+                }
+                catch (error) {
+                    throw new Error(`${language}: ${error.message}`);
+                }
+            }
+            return 'Python/HTML/CSS/JSON/YAML/Bash each answered LSP initialize and shutdown and exited successfully';
+        }
+        if (component === 'chromium') {
+            const { chromium } = await import('playwright');
+            const executable = chromium.executablePath();
+            if (!fs.existsSync(executable))
+                throw new Error('Playwright-matched Chromium executable is missing');
+            const browser = await chromium.launch({ executablePath: executable, headless: true, chromiumSandbox: true, timeout: 15000 });
+            try {
+                const page = await browser.newPage();
+                await page.setContent('<title>DODO setup fixture</title><button id="probe">Probe</button>');
+                await page.click('#probe');
+                const image = await page.screenshot({ type: 'jpeg', quality: 70 });
+                if (await page.title() !== 'DODO setup fixture' || image.length < 100)
+                    throw new Error('Chromium did not complete the local page/click/screenshot probe');
+            }
+            finally {
+                await browser.close();
+            }
+            return 'Playwright-matched Chromium launched with its browser sandbox, rendered/clicked a local page and returned a screenshot';
+        }
+        const ffmpeg = binary(root, 'ffmpeg'), ffprobe = binary(root, 'ffprobe'), input = path.join(directory, 'fixture.wav');
+        silence(input);
+        if (component === 'ffmpeg') {
+            const spec = WorkerSpec.parse({ operation: 'probe', input, directory, ffmpeg, ffprobe, startSec: 0, durationSec: 1, times: [], maxEdge: 320, language: 'en' });
+            const metadata = await processMedia(spec);
+            if (!metadata.metadata?.streams.some(stream => stream.type === 'audio'))
+                throw new Error('ffprobe failed to identify generated audio');
+            const excerpt = await processMedia({ ...spec, operation: 'audio' });
+            if (!excerpt.files.some(file => file.kind === 'audio'))
+                throw new Error('audio extraction did not produce output');
+            const videoDir = path.join(directory, 'video');
+            fs.mkdirSync(videoDir);
+            const video = path.join(videoDir, 'fixture.mp4');
+            run(root, ffmpeg, ['-hide_banner', '-loglevel', 'error', '-nostdin', '-f', 'lavfi', '-i', 'color=c=blue:s=320x240:r=1:d=1', '-c:v', 'mpeg4', '-y', video], videoDir);
+            const frames = await processMedia({ ...spec, operation: 'frames', input: video, directory: videoDir, times: [0] });
+            if (!frames.files.some(file => file.kind === 'image'))
+                throw new Error('video frame extraction did not produce output');
+            return 'DODO media worker probed generated audio, extracted PCM audio and decoded a generated video frame';
+        }
+        const model = path.join(configDir, 'models', 'ggml-tiny.bin');
+        if (!await verifiedFile(model, MODEL_PIN))
+            throw new Error('Whisper inference probe requires the verified default model; include model in setup components');
+        let whisper;
+        try {
+            whisper = binary(root, 'whisper-cli');
+        }
+        catch {
+            whisper = binary(root, 'whisper-cpp');
+        }
+        // whisper.cpp emits a canonical 10-second [BLANK_AUDIO] segment for short
+        // silence. Give the inference probe a matching 10-second bounded fixture so
+        // DODO's timestamp validator is exercised rather than falsely rejecting it.
+        const whisperInput = path.join(directory, 'whisper-fixture.wav');
+        silence(whisperInput, 10);
+        const spec = WorkerSpec.parse({ operation: 'transcribe', input: whisperInput, directory, ffmpeg, ffprobe, whisper, model, startSec: 0, durationSec: 10, times: [], maxEdge: 320, language: 'en' });
+        const result = await processMedia(spec);
+        const transcript = result.files.find(file => file.kind === 'transcript');
+        if (!transcript)
+            throw new Error('Whisper returned no transcription result');
+        const value = JSON.parse(fs.readFileSync(path.join(directory, transcript.name), 'utf8'));
+        if (!Array.isArray(value.segments))
+            throw new Error('Whisper output did not contain a valid segment array');
+        return 'whisper.cpp loaded the pinned model and completed inference on synthetic silent audio; this is not an ASR accuracy assessment';
+    }
+    finally {
+        removeWithRetry(directory, true);
+    }
+}
+//# sourceMappingURL=componentProbes.js.map

package/dist/setup/componentProbes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"componentProbes.js","sourceRoot":"","sources":["../../src/setup/componentProbes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE9F,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAmC,EAAE,IAAY,EAAE,GAAW,EAAE,SAAS,GAAG,KAAK;IACzH,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3G,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtP,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,WAAW,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,EAAE,OAA0B,EAAE,OAAO,GAAG,KAAK,CAAC;QAC5H,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7F,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,GAAG,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpL,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gEAAgE,CAAC,EAAE,SAAS,CAAC,CAAC;QAClH,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC;oBAChB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBAAC,IAAI,GAAG,GAAG,CAAC;wBAAE,MAAM;oBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChH,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBAChJ,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI;wBAAE,MAAM;oBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiF,CAAC;oBACtK,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzC,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;wBAC5K,WAAW,GAAG,IAAI,CAAC;wBACnB,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC5D,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpE,CAAC;yBAAM,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBAC/C,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK;4BAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;wBACtF,QAAQ,GAAG,IAAI,CAAC;wBAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;wBAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC/E,CAAC;yBAAM,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;wBACtD,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC7G,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,OAAO;gBAAE,OAAO;YAAC,OAAO,GAAG,IAAI,CAAC;YACzD,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC;iBACxB,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,IAAI,GAAG,CAAC,CAAC,CAAC;;gBAC/H,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAClN,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,IAAY,OAAO,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3H,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,IAAc,EAAE,GAAW,EAAE,YAA+B,EAAE;IACxG,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;IAC7K,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,CAAC,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/U,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,MAAM,CAAC,MAAM,IAAI,eAAe,GAAG,CAAC,CAAC;IACrJ,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,OAAO,GAAG,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,GAAG,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1K,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB,EAAE,IAAY,EAAE,SAAiB;IAC/F,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/H,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACzI,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAC9E,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAChF,MAAM,GAAG,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,kBAAkB,SAAS,EAAE,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;YACpF,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5F,MAAM,IAAI,GAAG,oBAAoB,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACrH,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAC7H,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAClH,OAAO,iIAAiI,CAAC;QAC3I,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9G,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;YACnI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAClL,OAAO,oEAAoE,CAAC;QAC9E,CAAC;QACD,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YAChF,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAC7G,OAAO,+GAA+G,CAAC;QACzH,CAAC;QACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YAC1H,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC3I,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,mCAAmC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvF,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC7H,OAAO,GAAG,MAAM,CAAC,IAAI,sCAAsC,KAAK,CAAC,MAAM,2CAA2C,CAAC;QACrH,CAAC;QACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;YACrE,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;gBACpH,IAAI,CAAC;oBAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAC3D,OAAO,KAAK,EAAE,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,CAAC;YAChF,CAAC;YACD,OAAO,kGAAkG,CAAC;QAC5G,CAAC;QACD,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACrG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7H,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,UAAU,CAAC,oEAAoE,CAAC,CAAC;gBAC5F,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;gBACnE,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,oBAAoB,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YAC5J,CAAC;oBAAS,CAAC;gBAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACpC,OAAO,wHAAwH,CAAC;QAClI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtI,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/J,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACvI,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACnH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACjD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrK,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACxH,OAAO,mGAAmG,CAAC;QAC7G,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;QAC7J,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAAC,CAAC;QAC/F,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnM,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACvJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;QACnH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC5G,OAAO,+HAA+H,CAAC;IACzI,CAAC;YAAS,CAAC;QAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;AACjD,CAAC"}

package/dist/setup/download.js

@@ -0,0 +1,139 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { Readable, Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { DodoError } from '../errors.js';
+import { windowsSystemExecutable } from '../platform/system.js';
+export const MODEL_PIN = {
+    url: 'https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-tiny.bin',
+    sha256: 'be07e048e1e599ad46341c8d2a135645097a538221678b7acdd1b1919c6e1b21', bytes: 77691713,
+};
+/** Pinned publisher release assets, researched 2026-09-10. No latest-at-install execution. */
+export const WINDOWS_PINS = {
+    git: { url: 'https://github.com/git-for-windows/git/releases/download/v2.55.0.windows.5/MinGit-2.55.0.5-64-bit.zip', sha256: '56d7b226b7693196cfc71fef26568f536c4a021ab6c37ff2db4287bed908e96e', bytes: 38989688 },
+    ripgrep: { url: 'https://github.com/BurntSushi/ripgrep/releases/download/15.2.0/ripgrep-15.2.0-x86_64-pc-windows-msvc.zip', sha256: '71b2fef860abe467217a538ff31de02f5258807c0129f771846f87bd029aafc5', bytes: 1789611 },
+    ffmpeg: { url: 'https://github.com/GyanD/codexffmpeg/releases/download/9.0.1/ffmpeg-9.0.1-essentials_build.zip', sha256: 'fec81ae03971d9dd4be3ebe02e263bd2ec1d789483f931bdba5f5715e65da2e9', bytes: 111253802 },
+    whisper: { url: 'https://github.com/ggml-org/whisper.cpp/releases/download/v1.9.2/whisper-bin-x64.zip', sha256: '49dcc16de826f20bd53d44f947a1ae49dfa81f86cad67a64d80820cb192d674a', bytes: 8194445 },
+};
+const HOSTS = new Set(['github.com', 'release-assets.githubusercontent.com', 'objects.githubusercontent.com', 'huggingface.co', 'cdn-lfs.huggingface.co', 'cdn-lfs-us-1.hf.co', 'cas-bridge.xethub.hf.co', 'us.aws.cdn.hf.co']);
+export function validateDownloadUrl(raw) {
+    const url = new URL(raw);
+    if (url.protocol !== 'https:' || url.username || url.password || (url.port && url.port !== '443') || !HOSTS.has(url.hostname))
+        throw new DodoError('PATH_DENIED', 'setup download host/protocol is not allowed');
+    return url;
+}
+export async function hashFile(file) {
+    const st = fs.lstatSync(file);
+    if (!st.isFile() || st.isSymbolicLink() || st.nlink !== 1)
+        throw new DodoError('PATH_DENIED', 'setup refuses linked or non-regular files');
+    const hash = createHash('sha256');
+    for await (const chunk of fs.createReadStream(file))
+        hash.update(chunk);
+    return hash.digest('hex');
+}
+export async function verifiedFile(file, pin) {
+    try {
+        return fs.lstatSync(file).size === pin.bytes && await hashFile(file) === pin.sha256;
+    }
+    catch {
+        return false;
+    }
+}
+/** Bounded download, exact SHA256+size, validated redirects, exclusive final creation. */
+export async function downloadVerified(pin, target, fetcher = fetch) {
+    if (!/^[a-f0-9]{64}$/.test(pin.sha256) || !Number.isSafeInteger(pin.bytes) || pin.bytes < 1 || pin.bytes > 1024 * 1024 * 1024)
+        throw new DodoError('INVALID_INPUT', 'invalid setup download pin');
+    if (fs.existsSync(target)) {
+        if (await verifiedFile(target, pin))
+            return;
+        throw new DodoError('CONFLICT', 'existing download differs from its pin; it was not overwritten');
+    }
+    const temporary = `${target}.${randomUUID()}.part`;
+    let url = validateDownloadUrl(pin.url), created = false;
+    try {
+        const signal = AbortSignal.timeout(300000);
+        let response;
+        for (let hop = 0; hop <= 5; hop++) {
+            response = await fetcher(url, { redirect: 'manual', signal, headers: { 'User-Agent': 'DODO-explicit-local-setup' } });
+            if ([301, 302, 303, 307, 308].includes(response.status)) {
+                const location = response.headers.get('location');
+                await response.body?.cancel();
+                if (!location || hop === 5)
+                    throw new Error('invalid or excessive download redirects');
+                url = validateDownloadUrl(new URL(location, url).href);
+                continue;
+            }
+            break;
+        }
+        if (!response?.ok || !response.body)
+            throw new Error(`download failed (${response?.status ?? 'no response'})`);
+        const length = response.headers.get('content-length');
+        if (length !== null && Number(length) !== pin.bytes) {
+            await response.body.cancel();
+            throw new Error('download Content-Length differs from pin');
+        }
+        const fd = fs.openSync(temporary, 'wx', 0o600);
+        created = true;
+        fs.closeSync(fd);
+        let size = 0;
+        const hash = createHash('sha256');
+        const check = new Transform({ transform(chunk, _encoding, callback) { size += chunk.length; if (size > pin.bytes) {
+                callback(new Error('download exceeds pinned byte limit'));
+                return;
+            } hash.update(chunk); callback(null, chunk); } });
+        await pipeline(Readable.fromWeb(response.body), check, fs.createWriteStream(temporary, { flags: 'r+' }), { signal });
+        if (size !== pin.bytes || hash.digest('hex') !== pin.sha256)
+            throw new Error('download integrity verification failed');
+        await fs.promises.link(temporary, target); // No overwrite, even if another setup completed meanwhile.
+        await fs.promises.unlink(temporary);
+        created = false;
+    }
+    finally {
+        if (created && fs.existsSync(temporary))
+            fs.unlinkSync(temporary);
+    }
+}
+/** Validate every ZIP entry BEFORE writing; reject zip-slip, links, ADS and case collisions. */
+const ZIP_SCRIPT = String.raw `
+$ErrorActionPreference='Stop'
+Add-Type -AssemblyName System.IO.Compression.FileSystem
+$root=[IO.Path]::GetFullPath($env:DODO_ZIP_DEST).TrimEnd('\')+'\'
+$zip=[IO.Compression.ZipFile]::OpenRead($env:DODO_ZIP_SOURCE)
+try {
+  if($zip.Entries.Count -gt 30000){throw 'too many archive entries'}
+  $seen=[Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+  [long]$total=0
+  foreach($e in $zip.Entries) {
+    $name=$e.FullName.Replace('\','/').TrimEnd('/')
+    if(-not $name){continue}
+    if($name.StartsWith('/') -or $name -match '[<>:"|?*\x00-\x1f]'){throw 'unsafe archive path'}
+    foreach($s in $name.Split('/')) {
+      if(-not $s -or $s -eq '.' -or $s -eq '..' -or $s -match '[ .]$' -or $s -match '^(?i:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)'){throw 'ambiguous archive path'}
+    }
+    $mode=($e.ExternalAttributes -shr 16) -band 61440
+    if($mode -ne 0 -and $mode -ne 32768 -and $mode -ne 16384){throw 'archive contains links or special files'}
+    $dest=[IO.Path]::GetFullPath([IO.Path]::Combine($root,$name))
+    if(-not $dest.StartsWith($root,[StringComparison]::OrdinalIgnoreCase) -or -not $seen.Add($dest)){throw 'archive escape or collision'}
+    $total+=$e.Length
+    if($total -gt 2147483648 -or $e.Length -gt 1073741824){throw 'archive expansion limit'}
+  }
+  foreach($e in $zip.Entries) {
+    if(-not $e.FullName){continue}
+    $dest=[IO.Path]::Combine($root,$e.FullName.Replace('/','\'))
+    if($e.FullName.EndsWith('/') -or $e.FullName.EndsWith('\')){[IO.Directory]::CreateDirectory($dest)|Out-Null;continue}
+    [IO.Directory]::CreateDirectory([IO.Path]::GetDirectoryName($dest))|Out-Null
+    [IO.Compression.ZipFileExtensions]::ExtractToFile($e,$dest,$false)
+  }
+} finally {$zip.Dispose()}
+[Console]::Write('extracted')
+`;
+export function extractWindowsZip(archive, emptyDirectory) {
+    if (fs.readdirSync(emptyDirectory).length !== 0 || fs.lstatSync(emptyDirectory).isSymbolicLink())
+        throw new DodoError('PATH_DENIED', 'ZIP destination must be a new empty private directory');
+    const result = spawnSync(windowsSystemExecutable('WindowsPowerShell/v1.0/powershell.exe'), ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(ZIP_SCRIPT, 'utf16le').toString('base64')], { env: { ...process.env, DODO_ZIP_SOURCE: path.resolve(archive), DODO_ZIP_DEST: path.resolve(emptyDirectory) }, shell: false, windowsHide: true, encoding: 'utf8', timeout: 180000, maxBuffer: 16384 });
+    if (result.error || result.status !== 0 || result.stdout.trim() !== 'extracted')
+        throw new DodoError('PATH_DENIED', 'verified archive could not be extracted safely; partial staging was not activated');
+}
+//# sourceMappingURL=download.js.map

package/dist/setup/download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/setup/download.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,MAAM,CAAC,MAAM,SAAS,GAAgB;IACpC,GAAG,EAAE,yEAAyE;IAC9E,MAAM,EAAE,kEAAkE,EAAE,KAAK,EAAE,QAAQ;CAC5F,CAAC;AACF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,YAAY,GAAkE;IACzF,GAAG,EAAE,EAAE,GAAG,EAAE,uGAAuG,EAAE,MAAM,EAAE,kEAAkE,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClN,OAAO,EAAE,EAAE,GAAG,EAAE,0GAA0G,EAAE,MAAM,EAAE,kEAAkE,EAAE,KAAK,EAAE,OAAO,EAAE;IACxN,MAAM,EAAE,EAAE,GAAG,EAAE,gGAAgG,EAAE,MAAM,EAAE,kEAAkE,EAAE,KAAK,EAAE,SAAS,EAAE;IAC/M,OAAO,EAAE,EAAE,GAAG,EAAE,sFAAsF,EAAE,MAAM,EAAE,kEAAkE,EAAE,KAAK,EAAE,OAAO,EAAE;CACrM,CAAC;AACF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,sCAAsC,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAChO,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;IACjN,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC;IAC3I,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAAC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IACrH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,GAAgB;IAC/D,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC;IAAC,CAAC;IAC5F,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAgB,EAAE,MAAc,EAAE,UAAwB,KAAK;IACpG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAClM,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO;QAC5C,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,gEAAgE,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,OAAO,CAAC;IACnD,IAAI,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAA8B,CAAC;QACnC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAClC,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,2BAA2B,EAAE,EAAE,CAAC,CAAC;YACtH,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBACjF,IAAI,CAAC,QAAQ,IAAI,GAAG,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACvF,GAAG,GAAG,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS;YACnE,CAAC;YACD,MAAM;QACR,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,EAAE,MAAM,IAAI,aAAa,GAAG,CAAC,CAAC;QAC/G,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAAC,CAAC;QACnJ,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,IAAI,GAAG,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;gBAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjP,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAgD,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACjK,IAAI,IAAI,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvH,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,2DAA2D;QACtG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,GAAG,KAAK,CAAC;IACvD,CAAC;YAAS,CAAC;QAAC,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;AAClF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgC5B,CAAC;AACF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,cAAsB;IACvE,IAAI,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,uDAAuD,CAAC,CAAC;IAC9L,MAAM,MAAM,GAAG,SAAS,CAAC,uBAAuB,CAAC,uCAAuC,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3Z,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,mFAAmF,CAAC,CAAC;AAC3M,CAAC"}

package/dist/setup/managedTools.js

@@ -0,0 +1,118 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { DodoError } from '../errors.js';
+import { ensurePrivateDirectory } from '../platform/privateFs.js';
+import { windowsSystemExecutable, envValue } from '../platform/system.js';
+import { isWithinPath } from '../platform/pathPolicy.js';
+import { renameWithRetry } from '../platform/fsRetry.js';
+const Manifest = z.object({ version: z.literal(1), paths: z.array(z.string().min(1).max(1024)).max(40) }).strict();
+const FILE = 'managed-tools.json';
+const ACL_PROBE = String.raw `
+$ErrorActionPreference='Stop'
+$identity=[Security.Principal.WindowsIdentity]::GetCurrent()
+$sid=$identity.User.Value
+$admin=[Security.Principal.WindowsPrincipal]::new($identity).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+foreach($p in (ConvertFrom-Json $env:DODO_SETUP_PATHS)) {
+  $item=Get-Item -LiteralPath $p -Force
+  if(($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0){throw 'reparse'}
+  $a=Get-Acl -LiteralPath $p
+  $owner=$a.GetOwner([Security.Principal.SecurityIdentifier]).Value
+  if($owner -ne $sid -and -not ($admin -and $owner -eq 'S-1-5-32-544')){throw 'owner'}
+  $found=$false
+  foreach($r in $a.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier])) {
+    if($r.AccessControlType -eq 'Allow') {
+      if(@($sid,'S-1-5-18','S-1-5-32-544') -notcontains $r.IdentityReference.Value){throw 'DACL'}
+      if($r.IdentityReference.Value -eq $sid){$found=$true}
+    }
+  }
+  if(-not $found){throw 'owner access'}
+}
+[Console]::Write('private')
+`;
+export function assertSetupPrivatePaths(objects) {
+    for (const object of objects) {
+        const st = fs.lstatSync(object);
+        if (st.isSymbolicLink() || (!st.isDirectory() && (!st.isFile() || st.nlink !== 1)))
+            throw new DodoError('PATH_DENIED', 'unsafe managed-tool path');
+        if (process.platform !== 'win32' && (st.uid !== process.getuid?.() || (st.mode & 0o077) !== 0))
+            throw new DodoError('PATH_DENIED', 'managed tool manifest/directory must be owner-private');
+    }
+    if (process.platform === 'win32') {
+        const result = spawnSync(windowsSystemExecutable('WindowsPowerShell/v1.0/powershell.exe'), ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(ACL_PROBE, 'utf16le').toString('base64')], { shell: false, windowsHide: true, timeout: 15000, maxBuffer: 4096, encoding: 'utf8', env: { ...process.env, DODO_SETUP_PATHS: JSON.stringify(objects) } });
+        if (result.error || result.status !== 0 || result.stdout.trim() !== 'private')
+            throw new DodoError('PATH_DENIED', 'managed-tool ACL verification failed; no tool PATH entries were loaded');
+    }
+}
+/** Read-only even on Windows: verification never repairs ACLs or creates state. */
+export function readManagedPaths(configDir, workspaceRoot) {
+    const file = path.join(configDir, FILE);
+    if (!fs.existsSync(file))
+        return [];
+    if (fs.lstatSync(configDir).isSymbolicLink())
+        throw new DodoError('PATH_DENIED', 'managed tool state cannot be a directory link');
+    const config = fs.realpathSync.native(configDir), tools = path.join(config, 'tools');
+    assertSetupPrivatePaths([config, tools, file]);
+    if (fs.statSync(file).size > 65536)
+        throw new DodoError('RESOURCE_LIMIT', 'managed tool manifest is oversized');
+    const value = Manifest.parse(JSON.parse(fs.readFileSync(file, 'utf8')));
+    return value.paths.map(rel => {
+        if (!/^tools\//.test(rel) || rel.includes('\\') || rel.split('/').some(s => !s || s === '.' || s === '..' || s.includes(':')))
+            throw new DodoError('PATH_DENIED', 'managed tool paths must stay below the private tools directory');
+        const absolute = path.join(config, rel);
+        let current = config;
+        for (const segment of rel.split('/')) {
+            current = path.join(current, segment);
+            const st = fs.lstatSync(current);
+            if (!st.isDirectory() || st.isSymbolicLink())
+                throw new DodoError('PATH_DENIED', 'managed tools cannot follow directory links');
+        }
+        const real = fs.realpathSync.native(absolute);
+        if (!isWithinPath(tools, real) || isWithinPath(workspaceRoot, real))
+            throw new DodoError('PATH_DENIED', 'managed tool directory is not outside the workspace');
+        return real;
+    });
+}
+/** Process-local PATH only; does not edit OS PATH, shell profiles or live services. */
+export function activateManagedTools(configDir, workspaceRoot) {
+    const paths = readManagedPaths(configDir, workspaceRoot);
+    if (!paths.length)
+        return;
+    const previous = envValue(process.env, 'PATH') ?? '';
+    if (process.platform === 'win32')
+        for (const key of Object.keys(process.env))
+            if (key.toUpperCase() === 'PATH' && key !== 'PATH')
+                delete process.env[key];
+    process.env['PATH'] = [...new Set([...paths, ...previous.split(path.delimiter).filter(Boolean)])].join(path.delimiter);
+}
+/** Called under the setup lock. Refuses concurrent mtime/content changes before atomic replacement. */
+export function registerManagedPath(configDir, directory) {
+    ensurePrivateDirectory(configDir);
+    ensurePrivateDirectory(path.join(configDir, 'tools'));
+    const file = path.join(configDir, FILE);
+    if (fs.existsSync(file)) {
+        assertSetupPrivatePaths([file]);
+        if (fs.statSync(file).size > 65536)
+            throw new DodoError('RESOURCE_LIMIT', 'managed tool manifest is oversized');
+    }
+    const before = fs.existsSync(file) ? { bytes: fs.readFileSync(file), mtime: fs.statSync(file, { bigint: true }).mtimeNs } : undefined;
+    const paths = before ? Manifest.parse(JSON.parse(before.bytes.toString('utf8'))).paths : [];
+    const rel = path.relative(configDir, directory).split(path.sep).join('/');
+    if (!rel.startsWith('tools/') || rel.split('/').includes('..'))
+        throw new DodoError('PATH_DENIED', 'tools must be installed in the managed directory');
+    const data = JSON.stringify(Manifest.parse({ version: 1, paths: [...new Set([...paths, rel])] }), null, 2) + '\n';
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    fs.writeFileSync(temporary, data, { flag: 'wx', mode: 0o600 });
+    try {
+        if (before ? !fs.existsSync(file) || fs.statSync(file, { bigint: true }).mtimeNs !== before.mtime || !fs.readFileSync(file).equals(before.bytes) : fs.existsSync(file))
+            throw new DodoError('FILE_CHANGED', 'managed tool manifest changed concurrently');
+        renameWithRetry(temporary, file);
+    }
+    finally {
+        if (fs.existsSync(temporary))
+            fs.unlinkSync(temporary);
+    }
+}
+//# sourceMappingURL=managedTools.js.map

package/dist/setup/managedTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managedTools.js","sourceRoot":"","sources":["../../src/setup/managedTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACnH,MAAM,IAAI,GAAG,oBAAoB,CAAC;AAClC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;CAqB3B,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,OAAiB;IACvD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;QACnJ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,uDAAuD,CAAC,CAAC;IAC9L,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,uBAAuB,CAAC,uCAAuC,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9W,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,wEAAwE,CAAC,CAAC;IAC9L,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,aAAqB;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrF,uBAAuB,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,gEAAgE,CAAC,CAAC;QACpO,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,GAAG,MAAM,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;QAClI,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,qDAAqD,CAAC,CAAC;QAC/J,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,aAAqB;IAC3E,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1J,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACzH,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,SAAiB;IACtE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtI,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,kDAAkD,CAAC,CAAC;IACvJ,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAClH,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAC;QAC1P,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;AACvE,CAAC"}