dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/hermes-adapter.js

@@ -0,0 +1,455 @@
+import { chmod, lstat, mkdir, readFile, realpath } from 'node:fs/promises';
+import { lstatSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, parse, resolve, sep } from 'node:path';
+import { StringDecoder } from 'node:string_decoder';
+import { EFFORTS } from "../shared/types.js";
+import { hermesAccountModels, assertHermesOwnAccounts } from "./hermes-models.js";
+import { hermesNousEfforts, hermesNousMinimumTtl, selectHermesNousSource } from "./hermes-nous.js";
+import { hermesAccountEnvironment } from "./hermes-account-context.js";
+import { verifyHermesExecutable, hermesNativeCommand } from "./hermes-installation.js";
+import { ensureHermesNousFresh } from "./hermes-renewal.js";
+const record = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const nonempty = (value) => typeof value === 'string' && !!value.trim() && !value.includes('\0');
+export function hermesHomeDirectory(configured) {
+    const nativeDefault = process.platform === 'win32'
+        ? join(process.env.LOCALAPPDATA?.trim() || join(homedir(), 'AppData', 'Local'), 'hermes')
+        : join(homedir(), '.hermes');
+    const path = configured?.trim() || process.env.HERMES_HOME?.trim() || nativeDefault;
+    return validateHermesHomeDirectory(path);
+}
+function assertConfinedHome(path) {
+    const userHome = realpathSync(homedir());
+    if (path === parse(path).root || path === userHome || userHome.startsWith(path + sep))
+        throw new Error('Unsafe Hermes home: refusing filesystem root, user home or its ancestor');
+}
+/** Account setup may create a new home. Resolve its nearest existing ancestor before
+ * granting writes, so a parent symlink cannot turn a narrow-looking path into all of HOME.
+ * Returns a canonical path for the sandbox and native HERMES_HOME to share.
+ */
+export function validateHermesHomeDirectory(path) {
+    if (!isAbsolute(path) || path.includes('\0'))
+        throw new Error('Hermes home must be an absolute path');
+    const absolute = resolve(path);
+    assertConfinedHome(absolute);
+    try {
+        if (lstatSync(absolute).isSymbolicLink())
+            throw new Error('Unsafe Hermes home symlink');
+    }
+    catch (error) {
+        if (!record(error) || error.code !== 'ENOENT')
+            throw error;
+    }
+    let ancestor = absolute;
+    const missing = [];
+    for (;;) {
+        try {
+            const canonical = join(realpathSync(ancestor), ...missing);
+            assertConfinedHome(canonical);
+            return canonical;
+        }
+        catch (error) {
+            if (!record(error) || error.code !== 'ENOENT')
+                throw error;
+            const parent = dirname(ancestor);
+            if (parent === ancestor)
+                throw error;
+            missing.unshift(basename(ancestor));
+            ancestor = parent;
+        }
+    }
+}
+function selection(value) {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        throw new Error('请重新选择 Hermes 原生模型');
+    }
+    if (!Array.isArray(parsed) || parsed.length !== 2 || !parsed.every(nonempty))
+        throw new Error('请重新选择 Hermes 原生模型');
+    return [parsed[0], parsed[1]];
+}
+async function environment(stateDirectory, home, nousMinimumTtl) {
+    await mkdir(stateDirectory, { recursive: true, mode: 0o700 });
+    if ((await lstat(stateDirectory)).isSymbolicLink())
+        throw new Error('Unsafe Hermes state symlink');
+    await chmod(stateDirectory, 0o700);
+    const root = join(await realpath(stateDirectory), 'hermes');
+    for (const path of [root, join(root, 'tmp')]) {
+        await mkdir(path, { recursive: true, mode: 0o700 });
+        if ((await lstat(path)).isSymbolicLink())
+            throw new Error('Unsafe Hermes state symlink');
+        await chmod(path, 0o700);
+    }
+    // Preserve native provider/account configuration. No credentials are copied or injected.
+    // SAFE_MODE is the plugin-discovery guard; the CLI --safe-mode switch would ALSO discard
+    // user provider config, so it is deliberately not used. Native tool permissions remain active.
+    return {
+        ...hermesAccountEnvironment(home),
+        PYTHONDONTWRITEBYTECODE: '1',
+        TMPDIR: join(root, 'tmp'),
+        HERMES_SAFE_MODE: '1',
+        HERMES_IGNORE_RULES: '1',
+        HERMES_YOLO_MODE: '0',
+        HERMES_ACCEPT_HOOKS: '0',
+        // Native supported per-process override: reuse a still-usable own invoke JWT
+        // instead of proactively refreshing every token below the 30-minute default.
+        ...(nousMinimumTtl === undefined ? {} : { HERMES_NOUS_MIN_KEY_TTL_SECONDS: nousMinimumTtl }),
+    };
+}
+async function requireConfiguration(home) {
+    try {
+        // Recheck canonical identities at use time, including symlinks in parent components.
+        // A changed alias must not expand the writable native-state exception.
+        const canonical = await realpath(home);
+        if (validateHermesHomeDirectory(home) !== canonical || canonical !== home)
+            throw new Error('Unsafe Hermes configuration path changed');
+        const directory = await lstat(home);
+        const config = await lstat(join(home, 'config.yaml'));
+        if (!directory.isDirectory() || directory.isSymbolicLink() || !config.isFile() || config.isSymbolicLink())
+            throw new Error('Unsafe Hermes configuration path');
+        if ((await realpath(join(home, 'config.yaml'))) !== join(canonical, 'config.yaml'))
+            throw new Error('Unsafe Hermes configuration realpath');
+    }
+    catch (error) {
+        if (record(error) && error.code === 'ENOENT')
+            throw new Error('请先在 Hermes 登录设置中选择服务商和模型');
+        throw error;
+    }
+}
+/** Only explicit native cached capabilities for the selected provider are offered.
+ * Other providers, unknown/stale capabilities and ambiguous endpoints keep native defaults.
+ * Source: NousResearch/hermes-agent@4787e4d, hermes_cli/models_reasoning_caps.py.
+ */
+async function reasoningEfforts(home, provider, model) {
+    const fallback = ['default'];
+    if (provider === 'nous')
+        return hermesNousEfforts(home, selectHermesNousSource(await assertHermesOwnAccounts(home)), model);
+    if (provider !== 'openrouter')
+        return fallback;
+    try {
+        const cacheDirectory = join(home, 'cache');
+        const path = join(cacheDirectory, 'reasoning_caps.json');
+        if ((await lstat(cacheDirectory)).isSymbolicLink())
+            return fallback;
+        const info = await lstat(path);
+        if (!info.isFile() || info.isSymbolicLink() || info.size > 4 * 1024 * 1024)
+            return fallback;
+        const cache = JSON.parse(await readFile(path, 'utf8'));
+        const entry = record(cache) ? cache['https://openrouter.ai/api/v1/models'] : undefined;
+        if (!record(entry) ||
+            typeof entry.ts !== 'number' ||
+            !Number.isFinite(entry.ts) ||
+            Date.now() / 1000 - entry.ts > 24 * 60 * 60 ||
+            entry.ts > Date.now() / 1000 + 60 ||
+            !record(entry.caps))
+            return fallback;
+        const capabilities = entry.caps[model];
+        if (!record(capabilities) ||
+            capabilities.supports_reasoning !== true ||
+            !Array.isArray(capabilities.supported_efforts))
+            return fallback;
+        const efforts = capabilities.supported_efforts.filter((value) => typeof value === 'string' && value !== 'default' && EFFORTS.includes(value));
+        return [...new Set([...fallback, ...efforts])];
+    }
+    catch {
+        return fallback;
+    }
+}
+/** Read-only native scalar queries; never prints a config object containing API keys. */
+export async function discoverHermes(executable, capture, stateDirectory, hermesHome, options = {}) {
+    options.signal?.throwIfAborted();
+    await verifyHermesExecutable(executable, options.signal ?? AbortSignal.timeout(15000));
+    const home = hermesHomeDirectory(hermesHome);
+    await requireConfiguration(home);
+    if (options.renewal)
+        await ensureHermesNousFresh({ ...options.renewal, home, executable });
+    const material = await assertHermesOwnAccounts(home, options.signal);
+    options.signal?.throwIfAborted();
+    const env = await environment(stateDirectory, home, material.config.model?.provider === 'nous' ? String(hermesNousMinimumTtl(material.env)) : undefined);
+    const get = async (key) => {
+        options.signal?.throwIfAborted();
+        const result = await capture(await hermesNativeCommand(executable, ['config', 'get', key, '--json'], options.signal), env);
+        options.signal?.throwIfAborted();
+        return JSON.parse(result);
+    };
+    // Native launchers take a per-home install lock and may initialize a new profile's
+    // runtime. Parallel scalar queries can race that first initialization.
+    // Nous has an authenticated native catalog contract. Its bounded own config is
+    // sufficient; the dedicated bounded renewal above is the only metadata write path.
+    const model = material.config.model?.provider === 'nous' ? material.config.model.default : await get('model.default');
+    const provider = material.config.model?.provider === 'nous' ? 'nous' : await get('model.provider');
+    if (!nonempty(model) || !nonempty(provider) || provider === 'auto')
+        throw new Error('请在 Hermes 登录设置中明确选择服务商和模型，然后刷新');
+    const scope = await hermesAccountModels(home, provider, options);
+    options.signal?.throwIfAborted();
+    if (scope.state !== 'supported')
+        return [];
+    const models = await Promise.all(scope.models.map(async (candidate) => ({
+        id: JSON.stringify([provider, candidate.id]),
+        label: candidate.name ?? candidate.id,
+        efforts: await reasoningEfforts(home, provider, candidate.id),
+        cost: candidate.cost,
+    })));
+    options.signal?.throwIfAborted();
+    return models;
+}
+/** Official stream-json CLI; not a claim of local installation or live execution. */
+export async function prepareHermes(input) {
+    await verifyHermesExecutable(input.executable, input.renewal?.signal ?? AbortSignal.timeout(15000));
+    const [provider, model] = selection(input.preference.model);
+    if (!['plan', 'accept-edits'].includes(input.mode))
+        throw new Error('Invalid Hermes mode');
+    if (input.mode === 'plan')
+        throw new Error('Hermes 当前原生非交互模式不支持只读派遣，请使用其他 CLI 或明确授权写入任务');
+    if (!nonempty(input.prompt))
+        throw new Error('Prompt must not be empty');
+    if (input.conversationId !== undefined && !nonempty(input.conversationId))
+        throw new Error('Invalid Hermes session identity');
+    const home = hermesHomeDirectory(input.hermesHome);
+    await requireConfiguration(home);
+    if (input.renewal)
+        await ensureHermesNousFresh({ ...input.renewal, home, executable: input.executable });
+    input.renewal?.signal.throwIfAborted();
+    const material = await assertHermesOwnAccounts(home, input.renewal?.signal);
+    if (provider === 'nous')
+        selectHermesNousSource(material);
+    const efforts = await reasoningEfforts(home, provider, model);
+    if (!efforts.includes(input.preference.effort))
+        throw new Error('Hermes 未确认支持此思考强度，请刷新模型后重选');
+    return {
+        argv: await hermesNativeCommand(input.executable, [
+            '--in',
+            input.project,
+            'chat',
+            '--format',
+            'stream-json',
+            '--model',
+            model,
+            '--provider',
+            provider,
+            '--toolsets',
+            'terminal,file',
+            '--ignore-rules',
+            ...(input.preference.effort === 'default' ? [] : ['--reasoning', input.preference.effort]),
+            ...(input.conversationId ? ['--resume', input.conversationId] : []),
+            '-q',
+            input.prompt,
+        ]),
+        env: await environment(input.stateDirectory, home, provider === 'nous' ? String(hermesNousMinimumTtl(material.env)) : undefined),
+    };
+}
+/** Map only counters actually reported by the native final envelope. These are run totals,
+ * not a model context-window occupancy estimate and not per-message counters.
+ */
+export function hermesTokenUsage(tokens) {
+    if (!record(tokens))
+        return undefined;
+    const count = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+    const total = count(tokens.total);
+    if (total === undefined)
+        return undefined;
+    return {
+        total,
+        input: count(tokens.input),
+        output: count(tokens.output),
+        cacheRead: count(tokens.cache_read),
+        scope: 'run',
+    };
+}
+/** Native record validation; the source protocol has no public reasoning event. */
+export function parseHermesRecord(value) {
+    if (!record(value))
+        throw new Error('Invalid Hermes event');
+    const finite = (x) => typeof x === 'number' && Number.isFinite(x) && x >= 0;
+    switch (value.type) {
+        case 'system':
+            if (value.subtype === 'init' && nonempty(value.session_id) && nonempty(value.model))
+                return value;
+            break;
+        case 'text':
+            if (typeof value.text === 'string')
+                return value;
+            break;
+        case 'tool_use':
+        case 'tool_result':
+            if (!nonempty(value.name) || (value.tool_call_id !== undefined && !nonempty(value.tool_call_id)))
+                break;
+            if (value.type === 'tool_use' && (value.input === undefined || record(value.input)))
+                return value;
+            if (value.type === 'tool_result' &&
+                typeof value.output === 'string' &&
+                typeof value.is_error === 'boolean' &&
+                finite(value.duration_ms))
+                return value;
+            break;
+        case 'result':
+            if (nonempty(value.session_id) &&
+                typeof value.text === 'string' &&
+                Number.isInteger(value.exit_code) &&
+                (value.error === undefined || typeof value.error === 'string') &&
+                (value.duration_ms === undefined || finite(value.duration_ms)) &&
+                (value.tokens === undefined || (record(value.tokens) && Object.values(value.tokens).every(finite))))
+                return value;
+            break;
+    }
+    throw new Error('Invalid Hermes event');
+}
+export class HermesProtocol {
+    emit;
+    identify;
+    maxLineBytes;
+    decoder = new StringDecoder('utf8');
+    pending = '';
+    response = '';
+    assistantStep = 0;
+    assistantSegmentOpen = false;
+    final;
+    terminal = false;
+    ended = false;
+    failure;
+    tools = new Map();
+    result;
+    conversationId;
+    constructor(emit, identify, maxLineBytes) {
+        this.emit = emit;
+        this.identify = identify;
+        this.maxLineBytes = maxLineBytes;
+    }
+    feed(chunk) {
+        if (this.ended)
+            throw new Error('Hermes stream already ended');
+        this.pending += typeof chunk === 'string' ? chunk : this.decoder.write(chunk);
+        let end;
+        while ((end = this.pending.indexOf('\n')) >= 0) {
+            const line = this.pending.slice(0, end).trim();
+            this.pending = this.pending.slice(end + 1);
+            if (line)
+                this.line(line);
+        }
+        if (Buffer.byteLength(this.pending) > this.maxLineBytes)
+            throw new Error('CLI event exceeds maxLineBytes');
+    }
+    end() {
+        if (this.ended)
+            return;
+        this.pending += this.decoder.end();
+        if (this.pending.trim())
+            this.line(this.pending.trim());
+        this.pending = '';
+        this.ended = true;
+        if (!this.conversationId)
+            return;
+        // The native final envelope is authoritative. Tool-progress callbacks are advisory:
+        // a model can recover from a failed tool, and a final envelope may follow an unfinished
+        // callback. Preserve the observed tool row instead of rewriting the run's outcome.
+        const error = this.failure ?? (!this.terminal ? 'Hermes 缺少 result 终态' : undefined);
+        this.result = {
+            conversationId: this.conversationId,
+            status: error ? 'ERROR' : 'SUCCESS',
+            response: this.final ?? this.response,
+            ...(error ? { error } : {}),
+        };
+        this.emit({
+            kind: 'result',
+            step: this.assistantStep || undefined,
+            text: this.result.response,
+            state: this.result.status,
+            ...(error ? { detail: error } : {}),
+        });
+    }
+    assistant(text) {
+        if (!this.assistantSegmentOpen) {
+            this.assistantStep += 1;
+            this.assistantSegmentOpen = true;
+        }
+        this.emit({ kind: 'assistant', step: this.assistantStep, text });
+    }
+    id(id) {
+        if (this.conversationId && this.conversationId !== id)
+            throw new Error('Hermes session identity changed');
+        if (!this.conversationId)
+            this.identify(id);
+        this.conversationId = id;
+    }
+    line(line) {
+        if (Buffer.byteLength(line) > this.maxLineBytes)
+            throw new Error('CLI event exceeds maxLineBytes');
+        if (this.terminal)
+            throw new Error('Unexpected event after Hermes result');
+        const event = parseHermesRecord(JSON.parse(line));
+        if (event.type === 'system') {
+            if (this.conversationId)
+                throw new Error('Duplicate Hermes init');
+            this.id(event.session_id);
+            this.emit({ kind: 'status', text: 'CLI 已连接', observedModel: event.model });
+            return;
+        }
+        if (!this.conversationId)
+            throw new Error('Missing Hermes init session identity');
+        if (event.type === 'text') {
+            // Native on_text_delta emits increments (including whitespace), not snapshots.
+            // One step identifies a continuous response segment for foldEvents to append.
+            if (event.text) {
+                this.response += event.text;
+                this.assistant(event.text);
+            }
+            return;
+        }
+        if (event.type === 'result') {
+            this.id(event.session_id);
+            this.terminal = true;
+            this.final = event.text;
+            if (event.exit_code !== 0 || event.error)
+                this.failure = event.error || `Hermes 运行失败（${event.exit_code}）`;
+            // A final envelope replaces the last streamed segment during folding. It must
+            // not append a second full answer. A tool boundary with no subsequent deltas
+            // still needs a new response row after the tool, including non-streaming models.
+            if (event.text && !this.assistantSegmentOpen)
+                this.assistant(event.text);
+            return;
+        }
+        this.assistantSegmentOpen = false;
+        let key = event.tool_call_id;
+        if (event.type === 'tool_use') {
+            if (!key) {
+                if ([...this.tools.values()].some((tool) => tool.name === event.name && !tool.done))
+                    throw new Error('Ambiguous Hermes tool identity');
+                key = `anonymous:${this.tools.size}`;
+            }
+            if (this.tools.has(key))
+                throw new Error('Duplicate Hermes tool identity');
+            const tool = { step: this.tools.size + 1, name: event.name, done: false };
+            this.tools.set(key, tool);
+            this.emit({
+                kind: 'tool',
+                text: tool.name,
+                step: tool.step,
+                state: 'running',
+                detail: JSON.stringify(event.input ?? {}),
+            });
+        }
+        else {
+            if (!key) {
+                const matching = [...this.tools.entries()].filter(([, tool]) => tool.name === event.name && !tool.done);
+                if (matching.length !== 1)
+                    throw new Error('Unmatched Hermes tool result');
+                key = matching[0][0];
+            }
+            const tool = this.tools.get(key);
+            if (!tool || tool.done || tool.name !== event.name)
+                throw new Error('Unmatched Hermes tool result');
+            tool.done = true;
+            this.emit({
+                kind: 'tool',
+                text: tool.name,
+                step: tool.step,
+                state: event.is_error ? 'failed' : 'completed',
+                detail: event.output,
+            });
+        }
+    }
+}
+//# sourceMappingURL=hermes-adapter.js.map

package/lib/types/host/hermes-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-adapter.js","sourceRoot":"","sources":["../../../src/host/hermes-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAgD,MAAM,oBAAoB,CAAA;AAG1F,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAA6B,MAAM,qBAAqB,CAAA;AActF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AACtE,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAEtE,MAAM,UAAU,mBAAmB,CAAC,UAAmB;IACrD,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC;QACzF,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,aAAa,CAAA;IACnF,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;AAC9F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC5B,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAC5D,CAAC;IACD,IAAI,QAAQ,GAAG,QAAQ,CAAA;IACvB,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,CAAC,CAAA;YAC1D,kBAAkB,CAAC,SAAS,CAAC,CAAA;YAC7B,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;YAChC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACpC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;YACnC,QAAQ,GAAG,MAAM,CAAA;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACtC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;AAC/B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,cAAsB,EAAE,IAAY,EAAE,cAAuB;IACtF,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAClG,MAAM,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC3D,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QACxF,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC1B,CAAC;IACD,yFAAyF;IACzF,yFAAyF;IACzF,+FAA+F;IAC/F,OAAO;QACL,GAAG,wBAAwB,CAAC,IAAI,CAAC;QACjC,uBAAuB,EAAE,GAAG;QAC5B,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACzB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,6EAA6E;QAC7E,6EAA6E;QAC7E,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAAE,cAAc,EAAE,CAAC;KAC7F,CAAA;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,qFAAqF;QACrF,uEAAuE;QACvE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;YACvE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC7D,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE;YACvG,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACzF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAa;IAC3E,MAAM,QAAQ,GAAa,CAAC,SAAS,CAAC,CAAA;IACtC,IAAI,QAAQ,KAAK,MAAM;QACrB,OAAO,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACpG,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAA;QACxD,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,QAAQ,CAAA;QACnE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,QAAQ,CAAA;QAC3F,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACtF,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YAC5B,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3C,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE;YACjC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAEnB,OAAO,QAAQ,CAAA;QACjB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,IACE,CAAC,MAAM,CAAC,YAAY,CAAC;YACrB,YAAY,CAAC,kBAAkB,KAAK,IAAI;YACxC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC;YAE9C,OAAO,QAAQ,CAAA;QACjB,MAAM,OAAO,GAAG,YAAY,CAAC,iBAAiB,CAAC,MAAM,CACnD,CAAC,KAAK,EAAmB,EAAE,CACzB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAe,CAAC,CACxF,CAAA;QACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,OAA0E,EAC1E,cAAsB,EACtB,UAAmB,EACnB,UAA0F,EAAE;IAE5F,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,MAAM,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,OAAO,CAAC,OAAO;QACjB,MAAM,qBAAqB,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACpE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B,cAAc,EACd,IAAI,EACJ,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CACpG,CAAA;IACD,MAAM,GAAG,GAAG,KAAK,EAAE,GAAW,EAAoB,EAAE;QAClD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,MAAM,mBAAmB,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EACvF,GAAG,CACJ,CAAA;QACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAA;IACD,mFAAmF;IACnF,uEAAuE;IACvE,+EAA+E;IAC/E,mFAAmF;IACnF,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,CAAA;IACzG,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,MAAM;QAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACrC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5C,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE;QACrC,OAAO,EAAE,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC,CAAC,CACJ,CAAA;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAkB;IAElB,MAAM,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACnG,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAC3D,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC1F,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACxE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAClD,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,OAAO;QACf,MAAM,qBAAqB,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IACvF,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3E,IAAI,QAAQ,KAAK,MAAM;QAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACzD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE;YAChD,MAAM;YACN,KAAK,CAAC,OAAO;YACb,MAAM;YACN,UAAU;YACV,aAAa;YACb,SAAS;YACT,KAAK;YACL,YAAY;YACZ,QAAQ;YACR,YAAY;YACZ,eAAe;YACf,gBAAgB;YAChB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1F,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI;YACJ,KAAK,CAAC,MAAM;SACb,CAAC;QACF,GAAG,EAAE,MAAM,WAAW,CACpB,KAAK,CAAC,cAAc,EACpB,IAAI,EACJ,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC7E;KACF,CAAA;AACH,CAAC;AAwBD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IACrC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAsB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,OAAO;QACL,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;QACnC,KAAK,EAAE,KAAK;KACb,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBACjF,OAAO,KAAqB,CAAA;YAC9B,MAAK;QACP,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAqB,CAAA;YAChE,MAAK;QACP,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAK;YACvG,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjF,OAAO,KAAqB,CAAA;YAC9B,IACE,KAAK,CAAC,IAAI,KAAK,aAAa;gBAC5B,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;gBACnC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;gBAEzB,OAAO,KAAqB,CAAA;YAC9B,MAAK;QACP,KAAK,QAAQ;YACX,IACE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC1B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;gBACjC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;gBAC9D,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC9D,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBAEnG,OAAO,KAAqB,CAAA;YAC9B,MAAK;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,OAAO,cAAc;IAcf;IACA;IACA;IAfF,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,GAAG,EAAE,CAAA;IACZ,QAAQ,GAAG,EAAE,CAAA;IACb,aAAa,GAAG,CAAC,CAAA;IACjB,oBAAoB,GAAG,KAAK,CAAA;IAC5B,KAAK,CAAS;IACd,QAAQ,GAAG,KAAK,CAAA;IAChB,KAAK,GAAG,KAAK,CAAA;IACb,OAAO,CAAS;IAChB,KAAK,GAAG,IAAI,GAAG,EAAyD,CAAA;IAChF,MAAM,CAAiB;IACvB,cAAc,CAAS;IACvB,YACU,IAAiC,EACjC,QAA8B,EAC9B,YAAoB;QAFpB,SAAI,GAAJ,IAAI,CAA6B;QACjC,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,iBAAY,GAAZ,YAAY,CAAQ;IAC3B,CAAC;IACJ,IAAI,CAAC,KAAsB;QACzB,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7E,IAAI,GAAW,CAAA;QACf,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;YAC1C,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAC5G,CAAC;IACD,GAAG;QACD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAM;QACtB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;QAClC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAM;QAChC,oFAAoF;QACpF,wFAAwF;QACxF,mFAAmF;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAClF,IAAI,CAAC,MAAM,GAAG;YACZ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACnC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ;YACrC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAA;QACD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS;YACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YACzB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CAAA;IACJ,CAAC;IACO,SAAS,CAAC,IAAY;QAC5B,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,IAAI,CAAC,CAAA;YACvB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAClC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,CAAC;IACO,EAAE,CAAC,EAAU;QACnB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACzG,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,cAAc,GAAG,EAAE,CAAA;IAC1B,CAAC;IACO,IAAI,CAAC,IAAY;QACvB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAClG,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;YACjE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YACzB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YAC1E,OAAM;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,+EAA+E;YAC/E,8EAA8E;YAC9E,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAA;gBAC3B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;YACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAA;YACvB,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK;gBACtC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,eAAe,KAAK,CAAC,SAAS,GAAG,CAAA;YACjE,8EAA8E;YAC9E,6EAA6E;YAC7E,iFAAiF;YACjF,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACxE,OAAM;QACR,CAAC;QACD,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA;QACjC,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,CAAA;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjF,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;gBACnD,GAAG,GAAG,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YACtC,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YAC1E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;YACzE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;aAC1C,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CACrD,CAAA;gBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBAC1E,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvB,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACnG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;YAChB,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;gBAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;CACF"}

package/lib/types/host/hermes-env.d.ts

@@ -0,0 +1,4 @@
+/** Deliberately bounded subset shared by Host discovery and the sandbox. Native
+ * python-dotenv also accepts quoted keys and multiline forms; accepting those
+ * without exactly matching its parser could change the pinned account home. */
+export declare function parseHermesOwnEnvironment(source: string): Record<string, string>;

package/lib/types/host/hermes-env.js

@@ -0,0 +1,22 @@
+import { parseEnv } from 'node:util';
+/** Deliberately bounded subset shared by Host discovery and the sandbox. Native
+ * python-dotenv also accepts quoted keys and multiline forms; accepting those
+ * without exactly matching its parser could change the pinned account home. */
+export function parseHermesOwnEnvironment(source) {
+    for (const line of source.split(/\r?\n/)) {
+        if (!line.trim() || /^\s*#/.test(line))
+            continue;
+        if (!/^\s*(?:export\s+)?[A-Za-z_][A-Za-z0-9_]*\s*=/.test(line))
+            throw new Error('Hermes .env 格式无法安全读取，请使用普通 KEY=value 配置');
+    }
+    const result = Object.fromEntries(Object.entries(parseEnv(source)).filter((entry) => typeof entry[1] === 'string'));
+    // An empty assignment also overrides the process value and re-enables native
+    // global fallback. Check presence, never truthiness, for every selector.
+    for (const key of ['HOME', 'HERMES_HOME', 'HERMES_PROFILE', 'HERMES_MANAGED_DIR'])
+        if (Object.hasOwn(result, key))
+            throw new Error('Hermes 账号环境不能重定向账号目录');
+    if (Object.values(result).some((value) => value.includes('${')))
+        throw new Error('Hermes .env 暂不支持环境变量插值');
+    return result;
+}
+//# sourceMappingURL=hermes-env.js.map

package/lib/types/host/hermes-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-env.js","sourceRoot":"","sources":["../../../src/host/hermes-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC;;+EAE+E;AAC/E,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAQ;QAChD,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CACrC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF,CAAA;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,CAAC;QAC/E,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC3C,OAAO,MAAM,CAAA;AACf,CAAC"}

package/lib/types/host/hermes-installation.d.ts

@@ -0,0 +1,10 @@
+export declare class HermesExecutableError extends Error {
+}
+export declare function hermesCommandInstallationHome(argv: string[]): string | undefined;
+/** Reuse the current official checkout's committed dependency environment, not a
+ * directory selected by recency/hash guessing. A clean account home must not run
+ * the installer's borrowed-home sync. Older/self-contained entries retain their
+ * native launcher contract. The child rechecks this selection under its native lock. */
+export declare function hermesNativeCommand(executable: string, args: string[], signal?: AbortSignal): Promise<string[]>;
+/** Inspect the installed fixed exec shim without invoking its installer or auth UI. */
+export declare function verifyHermesExecutable(executable: string, signal: AbortSignal): Promise<void>;