nawabari 0.9.2 → 0.10.2

package/dist/domain/fhs-development-runtime.js

@@ -0,0 +1,385 @@
+import fs from "node:fs";
+import { posix } from "node:path";
+import process from "node:process";
+import { DomainError, failure, success } from "./errors.js";
+import { materializeFhsRuntime } from "./fhs-runtime.js";
+import { compileRuntimeExecutableProjection, } from "./runtime-executable-projection.js";
+import { CANONICAL_RUNTIME_PROFILES, RUNTIME_PROFILE_CONTRACT_ID, RUNTIME_PROFILE_SCHEMA_VERSION, resolveRuntimeProfile, } from "./runtime-profile.js";
+import { projectSessionRuntimeProjection, runtimeMaterializationMissingError, STRICT_RUNTIME_POLICY, validateRuntimePolicy, } from "./runtime-projection.js";
+/** The canonical standalone Linux development baseline. */
+export const FHS_DEVELOPMENT_RUNTIME_REQUIREMENT_IDS = Object.freeze([
+    "node-runtime",
+    "git-package",
+    "pnpm-package",
+]);
+/**
+ * Explicit host/runtime evidence keys. These are exact executable sources,
+ * not search roots or package-manager configuration; absence is meaningful and
+ * leaves the strict baseline unavailable.
+ */
+export const FHS_DEVELOPMENT_EXECUTABLE_ENVIRONMENT_KEYS = Object.freeze({
+    "node-runtime": "NAWABARI_FHS_NODE_EXECUTABLE",
+    "git-package": "NAWABARI_FHS_GIT_EXECUTABLE",
+    "pnpm-package": "NAWABARI_FHS_PNPM_EXECUTABLE",
+});
+/** Stable provider identities consumed by #293's executable projection. */
+export const FHS_DEVELOPMENT_RUNTIME_PROVIDER_IDS = Object.freeze({
+    "node-runtime": "fhs-node-runtime-provider",
+    "git-package": "fhs-git-package-provider",
+    "pnpm-package": "fhs-pnpm-package-provider",
+});
+/**
+ * Read only the three explicit executable-source declarations exposed by the
+ * host/runtime boundary. In particular, this function never consults PATH,
+ * HOME, profile directories, or Corepack state.
+ */
+export function readExplicitFhsDevelopmentExecutableCandidates(environment = process.env) {
+    const candidates = FHS_DEVELOPMENT_RUNTIME_REQUIREMENT_IDS.flatMap((requirementId) => {
+        const candidate = environment[FHS_DEVELOPMENT_EXECUTABLE_ENVIRONMENT_KEYS[requirementId]];
+        return typeof candidate === "string" && candidate.length > 0
+            ? [{ requirement_id: requirementId, path: candidate }]
+            : [];
+    });
+    candidates.sort((left, right) => compareText(left.requirement_id, right.requirement_id));
+    return Object.freeze(candidates.map((candidate) => Object.freeze(candidate)));
+}
+/** Stable executable file name backing each canonical development requirement. */
+const FHS_DEVELOPMENT_EXECUTABLE_NAMES = Object.freeze({
+    "node-runtime": "node",
+    "git-package": "git",
+    "pnpm-package": "pnpm",
+});
+/**
+ * Fixed, bounded FHS binary directories consulted when no explicit host
+ * evidence env var is supplied. This is a small deterministic allowlist, not a
+ * PATH search: it never reflects process PATH, HOME, profile files, or
+ * Corepack state, so it cannot be redirected by an attacker-controlled PATH.
+ */
+export const FHS_DEVELOPMENT_DEFAULT_EXECUTABLE_ROOTS = Object.freeze(["/usr/bin", "/usr/local/bin", "/bin"]);
+/**
+ * Accept a fixed-root candidate only if it already satisfies the same
+ * symlink-rejecting contract `validateCandidatePath` enforces for explicit
+ * candidates: the leaf itself must not be a symlink, and no path component
+ * may resolve elsewhere. The leaf is lstat'd *before* any realpath
+ * resolution so a symlinked `node`/`git`/`pnpm` at a fixed root is rejected
+ * outright rather than silently followed to its target. Returns null when
+ * the root has no usable candidate (the caller tries the next root).
+ */
+function canonicalDefaultExecutable(candidatePath) {
+    if (!canonicalAbsolutePath(candidatePath))
+        return null;
+    try {
+        const stat = fs.lstatSync(candidatePath);
+        if (stat.isSymbolicLink() || !stat.isFile())
+            return null;
+        if ((stat.mode & 0o111) === 0)
+            return null;
+        const resolved = fs.realpathSync.native(candidatePath);
+        if (resolved !== candidatePath || !canonicalAbsolutePath(resolved))
+            return null;
+        return resolved;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Discover a default candidate for each canonical development requirement
+ * from a small fixed set of FHS binary directories (default:
+ * `FHS_DEVELOPMENT_DEFAULT_EXECUTABLE_ROOTS`). This is the fallback used only
+ * when no explicit `NAWABARI_FHS_*_EXECUTABLE` evidence is supplied; every
+ * discovered candidate is still re-validated by the same strict pipeline that
+ * validates explicit candidates.
+ */
+export function discoverDefaultFhsDevelopmentExecutableCandidates(roots = FHS_DEVELOPMENT_DEFAULT_EXECUTABLE_ROOTS) {
+    const candidates = FHS_DEVELOPMENT_RUNTIME_REQUIREMENT_IDS.flatMap((requirementId) => {
+        const name = FHS_DEVELOPMENT_EXECUTABLE_NAMES[requirementId];
+        for (const root of roots) {
+            const resolved = canonicalDefaultExecutable(posix.join(root, name));
+            if (resolved !== null)
+                return [{ requirement_id: requirementId, path: resolved }];
+        }
+        return [];
+    });
+    candidates.sort((left, right) => compareText(left.requirement_id, right.requirement_id));
+    return Object.freeze(candidates.map((candidate) => Object.freeze(candidate)));
+}
+/**
+ * The canonical host/runtime evidence source for standalone FHS development
+ * materialization: explicit `NAWABARI_FHS_*_EXECUTABLE` evidence always wins
+ * per requirement; a fixed-root default candidate (see
+ * `discoverDefaultFhsDevelopmentExecutableCandidates`) fills any requirement
+ * left unset so strict execution succeeds out of the box on a supported
+ * host. A requirement with neither source still fails closed.
+ */
+export function readFhsDevelopmentExecutableCandidates(environment = process.env, roots = FHS_DEVELOPMENT_DEFAULT_EXECUTABLE_ROOTS) {
+    const explicit = new Map(readExplicitFhsDevelopmentExecutableCandidates(environment).map((candidate) => [
+        candidate.requirement_id,
+        candidate,
+    ]));
+    const discovered = new Map(discoverDefaultFhsDevelopmentExecutableCandidates(roots).map((candidate) => [candidate.requirement_id, candidate]));
+    const candidates = FHS_DEVELOPMENT_RUNTIME_REQUIREMENT_IDS.flatMap((requirementId) => {
+        const candidate = explicit.get(requirementId) ?? discovered.get(requirementId);
+        return candidate === undefined ? [] : [candidate];
+    });
+    candidates.sort((left, right) => compareText(left.requirement_id, right.requirement_id));
+    return Object.freeze(candidates.map((candidate) => Object.freeze(candidate)));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNonEmptyText(value) {
+    return typeof value === "string" && value.length > 0 && !value.includes("\u0000");
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+/** Strip a reason's own trailing period so it nests into a sentence exactly once. */
+function reasonSentence(reason) {
+    return reason.endsWith(".") ? reason.slice(0, -1) : reason;
+}
+function missing(requirement, reason, details = {}) {
+    const fallback = requirement ?? { id: "development-runtime", kind: "runtime" };
+    const canonical = runtimeMaterializationMissingError(fallback.id, fallback.kind);
+    return failure(new DomainError(canonical.code, `${canonical.message.slice(0, -1)}: ${reasonSentence(reason)}.`, { ...(canonical.details ?? {}), reason, ...details }, canonical.exitCode));
+}
+function ambiguous(field, value, reason) {
+    return failure(new DomainError("RUNTIME_PROJECTION_AMBIGUOUS", `FHS development field '${field}' is ambiguous: ${reason}.`, {
+        field,
+        value,
+    }));
+}
+function invalid(field, reason, value) {
+    return failure(new DomainError("RUNTIME_PROJECTION_INVALID", `FHS development field '${field}' is invalid: ${reason}.`, {
+        field,
+        ...(value === undefined ? {} : { value }),
+    }));
+}
+function canonicalAbsolutePath(candidate) {
+    return posix.isAbsolute(candidate) && posix.normalize(candidate) === candidate && candidate !== "/";
+}
+function validateCandidatePath(candidate, requirement, field) {
+    if (!isNonEmptyText(candidate) || !canonicalAbsolutePath(candidate)) {
+        return invalid(field, "expected a normalized absolute path supplied by bounded host/runtime evidence", typeof candidate === "string" ? candidate : undefined);
+    }
+    try {
+        const stat = fs.lstatSync(candidate);
+        if (stat.isSymbolicLink())
+            return missing(requirement, "the candidate executable must not be a symlink", { field, source: candidate });
+        if (!stat.isFile())
+            return missing(requirement, "the candidate executable is not a regular file", { field, source: candidate });
+        if ((stat.mode & 0o111) === 0)
+            return missing(requirement, "the candidate executable is not executable", { field, source: candidate });
+        const resolved = fs.realpathSync.native(candidate);
+        if (resolved !== candidate)
+            return missing(requirement, "the candidate executable resolves through a symlink", {
+                field,
+                source: candidate,
+                resolved_source: resolved,
+            });
+        if (!canonicalAbsolutePath(resolved))
+            return missing(requirement, "the candidate executable resolves to a non-canonical path", {
+                field,
+                source: candidate,
+                resolved_source: resolved,
+            });
+        return success(resolved);
+    }
+    catch (error) {
+        return missing(requirement, "the candidate executable is missing or cannot be canonicalized", {
+            field,
+            source: candidate,
+            reason_detail: error instanceof Error ? error.message.slice(0, 120) : "unknown",
+        });
+    }
+}
+function resolvedProfile(input) {
+    const profile = input.profile === undefined
+        ? resolveRuntimeProfile({ profiles: ["development"] }, CANONICAL_RUNTIME_PROFILES)
+        : !isRecord(input.profile)
+            ? invalid("profile", "expected a resolved runtime profile")
+            : success(input.profile);
+    if (!profile.ok)
+        return profile;
+    if (!isRecord(profile.value) ||
+        profile.value.contract_id !== RUNTIME_PROFILE_CONTRACT_ID ||
+        profile.value.schema_version !== RUNTIME_PROFILE_SCHEMA_VERSION ||
+        !isRecord(profile.value.profile) ||
+        !isStableRequirement(profile.value.profile.id) ||
+        !isNonEmptyText(profile.value.profile.version) ||
+        !Array.isArray(profile.value.requirements)) {
+        return invalid("profile", "expected a validated runtime profile");
+    }
+    const requirementIds = new Set();
+    for (const [index, candidate] of profile.value.requirements.entries()) {
+        if (!isRecord(candidate) ||
+            !isStableRequirement(candidate.id) ||
+            (candidate.kind !== "runtime" && candidate.kind !== "package") ||
+            !isNonEmptyText(candidate.name) ||
+            !isNonEmptyText(candidate.version)) {
+            return invalid(`profile.requirements[${index}]`, "expected a stable requirement descriptor");
+        }
+        if (requirementIds.has(candidate.id)) {
+            return ambiguous("profile.requirements", candidate.id, "duplicate requirement id");
+        }
+        requirementIds.add(candidate.id);
+    }
+    for (const requirementId of FHS_DEVELOPMENT_RUNTIME_REQUIREMENT_IDS) {
+        const requirement = profile.value.requirements.find((candidate) => isRecord(candidate) &&
+            isStableRequirement(candidate.id) &&
+            (candidate.kind === "runtime" || candidate.kind === "package") &&
+            isNonEmptyText(candidate.name) &&
+            isNonEmptyText(candidate.version) &&
+            candidate.id === requirementId);
+        if (requirement === undefined) {
+            const kind = requirementId === "node-runtime" ? "runtime" : "package";
+            return missing({ id: requirementId, kind }, "the canonical development baseline requirement is absent", {
+                requirement_id: requirementId,
+            });
+        }
+    }
+    return profile;
+}
+function isStableRequirement(value) {
+    return typeof value === "string" && /^[a-z0-9][a-z0-9._-]*$/u.test(value);
+}
+function validatedCandidates(value, profile) {
+    if (!Array.isArray(value))
+        return invalid("executable_candidates", "expected an array");
+    const requirements = new Map(profile.requirements.map((requirement) => [requirement.id, requirement]));
+    const seen = new Set();
+    const sources = new Map();
+    const validated = [];
+    for (const [index, item] of value.entries()) {
+        if (!isRecord(item) || !isNonEmptyText(item.requirement_id) || !isNonEmptyText(item.path)) {
+            return invalid(`executable_candidates[${index}]`, "expected requirement_id and path");
+        }
+        const requirement = requirements.get(item.requirement_id);
+        if (requirement === undefined)
+            return missing(null, "the candidate references an unknown profile requirement", {
+                requirement_id: item.requirement_id,
+            });
+        if (seen.has(item.requirement_id))
+            return ambiguous("executable_candidates.requirement_id", item.requirement_id, "multiple candidates satisfy one requirement");
+        seen.add(item.requirement_id);
+        const checked = validateCandidatePath(item.path, requirement, `executable_candidates[${index}].path`);
+        if (!checked.ok)
+            return checked;
+        const previousRequirement = sources.get(checked.value);
+        if (previousRequirement !== undefined) {
+            return ambiguous("executable_candidates.path", checked.value, `one source cannot satisfy both ${previousRequirement} and ${item.requirement_id}`);
+        }
+        sources.set(checked.value, item.requirement_id);
+        validated.push(Object.freeze({
+            requirement_id: item.requirement_id,
+            path: checked.value,
+            target: `/usr/local/bin/${requirement.name}`,
+        }));
+    }
+    for (const requirement of profile.requirements) {
+        if (!seen.has(requirement.id))
+            return missing(requirement, "no explicit candidate was supplied");
+    }
+    validated.sort((left, right) => compareText(left.requirement_id, right.requirement_id));
+    return success(Object.freeze(validated));
+}
+function developmentEntrypoints(profile, policy, candidates) {
+    const paths = new Map(candidates.map((candidate) => [candidate.requirement_id, candidate.target ?? candidate.path]));
+    const entrypoints = profile.requirements.map((requirement) => {
+        const path = paths.get(requirement.id);
+        const providerId = FHS_DEVELOPMENT_RUNTIME_PROVIDER_IDS[requirement.id] ?? `fhs-${requirement.id}-provider`;
+        return Object.freeze({
+            name: requirement.name,
+            target: path,
+            provider: Object.freeze({ id: providerId, requirement_id: requirement.id }),
+            provenance: (policy.mode === "strict" && requirement.kind === "runtime" ? "runtime-profile" : "package"),
+        });
+    });
+    return success(Object.freeze(entrypoints));
+}
+/**
+ * Resolve the canonical standalone Linux development baseline from explicit
+ * candidates, materialize its bounded ELF/shebang closure, and compile the
+ * exact result through #293's executable projection.
+ */
+export function resolveFhsDevelopmentRuntime(input) {
+    if (!isRecord(input))
+        return invalid("materialization", "expected an object");
+    const policy = validateRuntimePolicy(input.policy ?? STRICT_RUNTIME_POLICY);
+    if (!policy.ok)
+        return failure(policy.error);
+    if (policy.value.mode !== "strict")
+        return invalid("policy", "the FHS development resolver only supports strict policy");
+    const profile = resolvedProfile(input);
+    if (!profile.ok)
+        return profile;
+    const candidates = validatedCandidates(input.executable_candidates, profile.value);
+    if (!candidates.ok)
+        return candidates;
+    const materialized = materializeFhsRuntime({
+        profile: profile.value,
+        policy: policy.value,
+        executables: candidates.value,
+        ...(input.library_search_paths === undefined ? {} : { library_search_paths: input.library_search_paths }),
+    });
+    if (!materialized.ok)
+        return failure(materialized.error);
+    const entrypoints = developmentEntrypoints(profile.value, policy.value, candidates.value);
+    if (!entrypoints.ok)
+        return entrypoints;
+    const projection = projectSessionRuntimeProjection({
+        policy: policy.value,
+        profile: profile.value.profile,
+        requirements: profile.value.requirements,
+        filesystem: materialized.value.filesystem,
+        executables: entrypoints.value,
+    });
+    if (!projection.ok)
+        return failure(projection.error);
+    const executableProjection = compileRuntimeExecutableProjection(projection.value);
+    if (!executableProjection.ok)
+        return failure(executableProjection.error);
+    if (executableProjection.value.length !== profile.value.requirements.length) {
+        return missing(null, "the executable projection did not preserve the complete development baseline");
+    }
+    return success(Object.freeze({
+        policy: projection.value.policy,
+        profile: projection.value.profile,
+        materializer: "fhs",
+        projection: projection.value,
+        executable_projection: executableProjection.value,
+    }));
+}
+/** Alias emphasizing that this result is the FHS materialization authority. */
+export const materializeFhsDevelopmentRuntime = resolveFhsDevelopmentRuntime;
+/**
+ * Doctor/readiness authority. It calls the same resolver used by execution;
+ * it never reports readiness from directory existence or layout heuristics.
+ */
+export function fhsDevelopmentRuntimeReadiness(platform, runtimeLayout) {
+    if (platform !== "linux") {
+        return Object.freeze({
+            strict_ready: false,
+            reason: "standalone FHS development materialization is supported only on Linux",
+            code: "SANDBOX_UNSUPPORTED_PLATFORM",
+            details: { platform },
+        });
+    }
+    const resolved = resolveFhsDevelopmentRuntime({
+        executable_candidates: runtimeLayout.fhs_executable_candidates ?? [],
+        ...(runtimeLayout.fhs_library_search_paths === undefined
+            ? {}
+            : { library_search_paths: runtimeLayout.fhs_library_search_paths }),
+    });
+    if (resolved.ok) {
+        return Object.freeze({ strict_ready: true, reason: null, code: null, details: {} });
+    }
+    return Object.freeze({
+        strict_ready: false,
+        reason: resolved.error.message,
+        code: resolved.error.code,
+        details: resolved.error.details ?? {},
+    });
+}
+export const doctorFhsDevelopmentRuntime = fhsDevelopmentRuntimeReadiness;
+//# sourceMappingURL=fhs-development-runtime.js.map

package/dist/domain/fhs-development-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fhs-development-runtime.js","sourceRoot":"","sources":["../../src/domain/fhs-development-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAsD,MAAM,aAAa,CAAC;AAChH,OAAO,EAAE,qBAAqB,EAAwC,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EACL,kCAAkC,GAEnC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,EAC9B,qBAAqB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,+BAA+B,EAC/B,kCAAkC,EAClC,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,yBAAyB,CAAC;AAGjC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,uCAAuC,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,cAAc;IACd,aAAa;IACb,cAAc;CACN,CAAC,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAG,MAAM,CAAC,MAAM,CAAC;IACvE,cAAc,EAAE,8BAA8B;IAC9C,aAAa,EAAE,6BAA6B;IAC5C,cAAc,EAAE,8BAA8B;CACtC,CAAC,CAAC;AAEZ,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oCAAoC,GAAqC,MAAM,CAAC,MAAM,CAAC;IAClG,cAAc,EAAE,2BAA2B;IAC3C,aAAa,EAAE,0BAA0B;IACzC,cAAc,EAAE,2BAA2B;CAC5C,CAAC,CAAC;AA8BH;;;;GAIG;AACH,MAAM,UAAU,8CAA8C,CAC5D,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,UAAU,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACnF,MAAM,SAAS,GAAG,WAAW,CAAC,2CAA2C,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1F,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAC1D,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAA4C,CAAC;YAChG,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,kFAAkF;AAClF,MAAM,gCAAgC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACvF,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAU,CAAC,CAAC;AAEvH;;;;;;;;GAQG;AACH,SAAS,0BAA0B,CAAC,aAAqB;IACvD,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,aAAa,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iDAAiD,CAC/D,QAA2B,wCAAwC;IAEnE,MAAM,UAAU,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACnF,MAAM,IAAI,GAAG,gCAAgC,CAAC,aAAa,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACpE,IAAI,QAAQ,KAAK,IAAI;gBACnB,OAAO,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAA4C,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sCAAsC,CACpD,cAAiC,OAAO,CAAC,GAAG,EAC5C,QAA2B,wCAAwC;IAEnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,8CAA8C,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QAC7E,SAAS,CAAC,cAAc;QACxB,SAAS;KACV,CAAC,CACH,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,iDAAiD,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CACnH,CAAC;IACF,MAAM,UAAU,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/E,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAID,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CACd,WAA2D,EAC3D,MAAc,EACd,UAAsB,EAAE;IAExB,MAAM,QAAQ,GAAG,WAAW,IAAI,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC;IACxF,MAAM,SAAS,GAAG,kCAAkC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,OAAO,CACZ,IAAI,WAAW,CACb,SAAS,CAAC,IAAI,EACd,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,GAAG,EAC/D,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EACpD,SAAS,CAAC,QAAQ,CACnB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa,EAAE,MAAc;IAC7D,OAAO,OAAO,CACZ,IAAI,WAAW,CAAC,8BAA8B,EAAE,0BAA0B,KAAK,mBAAmB,MAAM,GAAG,EAAE;QAC3G,KAAK;QACL,KAAK;KACN,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,MAAc,EAAE,KAAc;IAC5D,OAAO,OAAO,CACZ,IAAI,WAAW,CAAC,4BAA4B,EAAE,0BAA0B,KAAK,iBAAiB,MAAM,GAAG,EAAE;QACvG,KAAK;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,SAAS,KAAK,GAAG,CAAC;AACtG,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAkB,EAClB,WAA+B,EAC/B,KAAa;IAEb,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,OAAO,OAAO,CACZ,KAAK,EACL,+EAA+E,EAC/E,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,cAAc,EAAE;YACvB,OAAO,OAAO,CAAC,WAAW,EAAE,gDAAgD,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9G,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAChB,OAAO,OAAO,CAAC,WAAW,EAAE,gDAAgD,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9G,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAC3B,OAAO,OAAO,CAAC,WAAW,EAAE,4CAA4C,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1G,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS;YACxB,OAAO,OAAO,CAAC,WAAW,EAAE,qDAAqD,EAAE;gBACjF,KAAK;gBACL,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;QACL,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;YAClC,OAAO,OAAO,CAAC,WAAW,EAAE,2DAA2D,EAAE;gBACvF,KAAK;gBACL,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;QACL,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,WAAW,EAAE,gEAAgE,EAAE;YAC5F,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB;IAC3C,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,SAAS;QACzB,CAAC,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,0BAA0B,CAAC;QAClF,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YACxB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,qCAAqC,CAAC;YAC3D,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAA4C,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IACE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,2BAA2B;QACzD,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,8BAA8B;QAC/D,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAC1C,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACtE,IACE,CAAC,QAAQ,CAAC,SAAS,CAAC;YACpB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC;YAC9D,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC;YAC/B,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAClC,CAAC;YACD,OAAO,OAAO,CAAC,wBAAwB,KAAK,GAAG,EAAE,0CAA0C,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC,sBAAsB,EAAE,SAAS,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACrF,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,MAAM,aAAa,IAAI,uCAAuC,EAAE,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CACjD,CAAC,SAAS,EAAE,EAAE,CACZ,QAAQ,CAAC,SAAS,CAAC;YACnB,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC;YAC9B,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC;YACjC,SAAS,CAAC,EAAE,KAAK,aAAa,CACjC,CAAC;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,aAAa,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,0DAA0D,EAAE;gBACtG,cAAc,EAAE,aAAa;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,OAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,SAAS,GAAsC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1F,OAAO,OAAO,CAAC,yBAAyB,KAAK,GAAG,EAAE,kCAAkC,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,OAAO,CAAC,IAAI,EAAE,yDAAyD,EAAE;gBAC9E,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC;QACL,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC;YAC/B,OAAO,SAAS,CACd,sCAAsC,EACtC,IAAI,CAAC,cAAc,EACnB,6CAA6C,CAC9C,CAAC;QACJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,KAAK,QAAQ,CAAC,CAAC;QACtG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,SAAS,CACd,4BAA4B,EAC5B,OAAO,CAAC,KAAK,EACb,kCAAkC,mBAAmB,QAAQ,IAAI,CAAC,cAAc,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,SAAS,CAAC,IAAI,CACZ,MAAM,CAAC,MAAM,CAAC;YACZ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,OAAO,CAAC,KAAK;YACnB,MAAM,EAAE,kBAAkB,WAAW,CAAC,IAAI,EAAE;SAC7C,CAAC,CACH,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;IACnG,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACxF,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+B,EAC/B,MAAqB,EACrB,UAAsD;IAStD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAW,CAAC;QACjD,MAAM,UAAU,GAAG,oCAAoC,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,OAAO,WAAW,CAAC,EAAE,WAAW,CAAC;QAC5G,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;YAC3E,UAAU,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CACxE;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QAChC,OAAO,OAAO,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,qBAAqB,CAAC;QACzC,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,WAAW,EAAE,UAAU,CAAC,KAAK;QAC7B,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC;KAC1G,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,UAAU,GAAG,+BAA+B,CAAC;QACjD,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;QACxC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;QACzC,WAAW,EAAE,WAAW,CAAC,KAAK;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClF,IAAI,CAAC,oBAAoB,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC5E,OAAO,OAAO,CAAC,IAAI,EAAE,8EAA8E,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,OAAO,CACZ,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;QAC/B,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;QACjC,YAAY,EAAE,KAAc;QAC5B,UAAU,EAAE,UAAU,CAAC,KAAK;QAC5B,qBAAqB,EAAE,oBAAoB,CAAC,KAAK;KAClD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gCAAgC,GAAG,4BAA4B,CAAC;AAE7E;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,aAAmG;IAEnG,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,uEAAuE;YAC/E,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,4BAA4B,CAAC;QAC5C,qBAAqB,EAAE,aAAa,CAAC,yBAAyB,IAAI,EAAE;QACpE,GAAG,CAAC,aAAa,CAAC,wBAAwB,KAAK,SAAS;YACtD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,aAAa,CAAC,wBAAwB,EAAE,CAAC;KACtE,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO;QAC9B,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;QACzB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC"}

package/dist/domain/fhs-runtime.d.ts

@@ -0,0 +1,36 @@
+import { type DomainResult } from "./errors.js";
+import { type ResolvedRuntimeProfile } from "./runtime-profile.js";
+import { type RuntimePolicy, type SessionRuntimeProjection } from "./runtime-projection.js";
+/** Versioned identity for bounded standalone/FHS runtime materialization. */
+export declare const FHS_RUNTIME_MATERIALIZATION_CONTRACT_ID: "nawabari.fhs-runtime-materialization.v1";
+export declare const FHS_RUNTIME_MATERIALIZATION_SCHEMA_VERSION: 1;
+/** The only host roots accepted as FHS materialization destinations. */
+export declare const FHS_RUNTIME_ROOTS: readonly ["/usr", "/bin", "/lib", "/lib64"];
+/** Fixed, distro-independent lookup order for the common FHS library layouts. */
+export declare const FHS_RUNTIME_LIBRARY_SEARCH_PATHS: readonly ["/lib", "/lib64", "/usr/lib", "/usr/lib64", "/lib/aarch64-linux-gnu", "/lib/arm-linux-gnueabi", "/lib/arm-linux-gnueabihf", "/lib/i386-linux-gnu", "/lib/powerpc64le-linux-gnu", "/lib/riscv64-linux-gnu", "/lib/s390x-linux-gnu", "/lib/x86_64-linux-gnu", "/usr/lib/aarch64-linux-gnu", "/usr/lib/arm-linux-gnueabi", "/usr/lib/arm-linux-gnueabihf", "/usr/lib/i386-linux-gnu", "/usr/lib/powerpc64le-linux-gnu", "/usr/lib/riscv64-linux-gnu", "/usr/lib/s390x-linux-gnu", "/usr/lib/x86_64-linux-gnu"];
+export type FhsRuntimeExecutableDeclaration = Readonly<{
+    /** Profile requirement satisfied by this explicitly declared host artifact. */
+    readonly requirement_id: string;
+    /** Absolute canonical host path. */
+    readonly path: string;
+    /** Optional bounded namespace target; omitted for legacy same-path declarations. */
+    readonly target?: string;
+}>;
+export type FhsRuntimeMaterializationInput = Readonly<{
+    /** Output of the #290 logical runtime-profile resolver. */
+    readonly profile: ResolvedRuntimeProfile;
+    /** One explicitly declared executable artifact for every selected requirement. */
+    readonly executables: readonly FhsRuntimeExecutableDeclaration[];
+    /** Omitted means strict default-deny. Compatibility is never inferred. */
+    readonly policy?: RuntimePolicy;
+    /** Optional fixed FHS directories, useful for a controlled host layout. */
+    readonly library_search_paths?: readonly string[];
+}>;
+/**
+ * Resolve declared FHS executables and their ELF loader/library closure into
+ * file-level read-only projections. No directory or host-root projection is
+ * ever generated by this function.
+ */
+export declare function materializeFhsRuntime(input: unknown): DomainResult<SessionRuntimeProjection>;
+/** Descriptive alias for callers that emphasize the resulting projection. */
+export declare const materializeFhsRuntimeProjection: typeof materializeFhsRuntime;