nawabari 0.9.2 → 0.10.2

package/dist/domain/nix-runtime-closure.js

@@ -0,0 +1,449 @@
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { DomainError, failure, success } from "./errors.js";
+import { RUNTIME_PROFILE_CONTRACT_ID, RUNTIME_PROFILE_SCHEMA_VERSION, } from "./runtime-profile.js";
+import { DEFAULT_RUNTIME_POLICY, projectSessionRuntimeProjection, runtimeMaterializationMissingError, validateRuntimePolicy, } from "./runtime-projection.js";
+/** Versioned evidence for a bounded Nix closure materialization. */
+export const NIX_RUNTIME_CLOSURE_CONTRACT_ID = "nawabari.nix-runtime-closure.v1";
+export const NIX_RUNTIME_CLOSURE_SCHEMA_VERSION = 1;
+const DEFAULT_NIXPKGS_REF = "nixpkgs";
+const DEFAULT_MAX_REQUIREMENTS = 128;
+const DEFAULT_MAX_PATHS = 4_096;
+const DEFAULT_MAX_OUTPUT_BYTES = 8 * 1_024 * 1_024;
+const DEFAULT_TIMEOUT_MS = 60_000;
+/** Nix attributes for the canonical logical requirements in #290. */
+export const DEFAULT_NIX_PACKAGE_ATTRIBUTES = Object.freeze({
+    node: "nodejs",
+    git: "git",
+    pnpm: "pnpm",
+});
+const nativeFileSystem = {
+    lstatSync: (candidate) => fs.lstatSync(candidate),
+    realpathSync: (candidate) => fs.realpathSync.native(candidate),
+};
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNonEmptyText(value) {
+    return typeof value === "string" && value.length > 0 && !value.includes("\0");
+}
+function isStableIdentifier(value) {
+    return typeof value === "string" && /^[a-z0-9][a-z0-9._-]*$/u.test(value);
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function byteLength(value) {
+    return Buffer.byteLength(value, "utf8");
+}
+function materializationFailure(requirement, reason, details = {}) {
+    const fallback = requirement ?? { id: "runtime-profile", kind: "runtime" };
+    const canonical = runtimeMaterializationMissingError(fallback.id, fallback.kind);
+    return failure(new DomainError(canonical.code, canonical.message, { ...(canonical.details ?? {}), reason, ...details }, canonical.exitCode));
+}
+function validateLimit(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 1 ? value : null;
+}
+function validateStoreRoot(value) {
+    if (!isNonEmptyText(value) || !path.posix.isAbsolute(value))
+        return null;
+    const normalized = path.posix.normalize(value);
+    if (normalized !== value || normalized === "/" || normalized.endsWith("/"))
+        return null;
+    return normalized;
+}
+function validateProfile(profile, maxRequirements) {
+    if (!isRecord(profile) || !isRecord(profile.profile) || !Array.isArray(profile.requirements)) {
+        return materializationFailure(null, "the resolved runtime profile is missing its logical material");
+    }
+    if ("contract_id" in profile && profile.contract_id !== RUNTIME_PROFILE_CONTRACT_ID) {
+        return materializationFailure(null, "the runtime profile contract identity is unsupported");
+    }
+    if ("schema_version" in profile && profile.schema_version !== RUNTIME_PROFILE_SCHEMA_VERSION) {
+        return materializationFailure(null, "the runtime profile schema version is unsupported");
+    }
+    const identity = profile.profile;
+    if (!isStableIdentifier(identity.id) || !isNonEmptyText(identity.version)) {
+        return materializationFailure(null, "the resolved runtime profile identity is invalid");
+    }
+    if (profile.requirements.length > maxRequirements) {
+        return materializationFailure(null, "the declared requirement set exceeds the bounded resolver limit", {
+            max_requirements: maxRequirements,
+        });
+    }
+    const requirements = [];
+    const ids = new Set();
+    for (const value of profile.requirements) {
+        if (!isRecord(value) ||
+            !isStableIdentifier(value.id) ||
+            (value.kind !== "runtime" && value.kind !== "package") ||
+            !isNonEmptyText(value.name) ||
+            !isNonEmptyText(value.version) ||
+            value.name.startsWith("/") ||
+            value.name.startsWith("~") ||
+            value.name.startsWith("$")) {
+            return materializationFailure(null, "a declared runtime requirement is invalid");
+        }
+        if (ids.has(value.id)) {
+            return materializationFailure({ id: value.id, kind: value.kind, name: value.name, version: value.version }, "a declared runtime requirement is duplicated");
+        }
+        ids.add(value.id);
+        requirements.push(Object.freeze({
+            id: value.id,
+            kind: value.kind,
+            name: value.name,
+            version: value.version,
+        }));
+    }
+    requirements.sort((left, right) => compareText(`${left.kind}:${left.id}`, `${right.kind}:${right.id}`));
+    return success({
+        profile: Object.freeze({ id: identity.id, version: identity.version }),
+        requirements: Object.freeze(requirements),
+    });
+}
+function validateOptions(options, requirement) {
+    const policy = validateRuntimePolicy(options.policy ?? DEFAULT_RUNTIME_POLICY);
+    if (!policy.ok)
+        return materializationFailure(requirement, "the runtime policy is invalid");
+    const nixExecutable = options.nix_executable ?? "nix";
+    if (!isNonEmptyText(nixExecutable))
+        return materializationFailure(requirement, "the Nix executable is invalid");
+    if (options.nixpkgs_ref !== undefined && options.nixpkgs !== undefined && options.nixpkgs_ref !== options.nixpkgs) {
+        return materializationFailure(requirement, "the Nixpkgs references are ambiguous");
+    }
+    const ref = options.nixpkgs_ref ?? options.nixpkgs ?? DEFAULT_NIXPKGS_REF;
+    if (!isNonEmptyText(ref) || ref.includes("#") || /\s/u.test(ref)) {
+        return materializationFailure(requirement, "the Nixpkgs reference is invalid", { nixpkgs: ref });
+    }
+    const storeRoot = validateStoreRoot(options.store_root ?? "/nix/store");
+    if (storeRoot === null)
+        return materializationFailure(requirement, "the Nix store root is invalid");
+    const maxRequirements = validateLimit(options.max_requirements, DEFAULT_MAX_REQUIREMENTS);
+    const maxPaths = validateLimit(options.max_paths, DEFAULT_MAX_PATHS);
+    const maxOutputBytes = validateLimit(options.max_output_bytes, DEFAULT_MAX_OUTPUT_BYTES);
+    const timeoutMs = validateLimit(options.timeout_ms, DEFAULT_TIMEOUT_MS);
+    if (maxRequirements === null || maxPaths === null || maxOutputBytes === null || timeoutMs === null) {
+        return materializationFailure(requirement, "a resolver bound is invalid");
+    }
+    const attributes = options.package_attributes ?? DEFAULT_NIX_PACKAGE_ATTRIBUTES;
+    if (!isRecord(attributes))
+        return materializationFailure(requirement, "the Nix attribute map is invalid");
+    for (const [key, value] of Object.entries(attributes)) {
+        if (!isNonEmptyText(key) || !isNonEmptyText(value)) {
+            return materializationFailure(requirement, "the Nix attribute map contains an invalid entry");
+        }
+    }
+    return success({
+        policy: policy.value,
+        nix_executable: nixExecutable,
+        nixpkgs: ref,
+        package_attributes: attributes,
+        command_runner: options.command_runner ?? createDefaultNixCommandRunner(maxOutputBytes, timeoutMs),
+        store_root: storeRoot,
+        filesystem: options.filesystem ?? nativeFileSystem,
+        max_requirements: maxRequirements,
+        max_paths: maxPaths,
+        max_output_bytes: maxOutputBytes,
+        timeout_ms: timeoutMs,
+    });
+}
+function commandResultText(value) {
+    return typeof value === "string" ? value : value instanceof Uint8Array ? Buffer.from(value).toString("utf8") : "";
+}
+function createDefaultNixCommandRunner(maxOutputBytes, timeoutMs) {
+    return (executable, args) => {
+        try {
+            const stdout = execFileSync(executable, [...args], {
+                cwd: process.cwd(),
+                encoding: "utf8",
+                timeout: timeoutMs,
+                maxBuffer: maxOutputBytes,
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+            return { exit_code: 0, stdout, stderr: "" };
+        }
+        catch (error) {
+            const candidate = isRecord(error) ? error : {};
+            const status = typeof candidate.status === "number" ? candidate.status : 1;
+            return {
+                exit_code: status,
+                stdout: commandResultText(candidate.stdout),
+                stderr: commandResultText(candidate.stderr),
+            };
+        }
+    };
+}
+const NIX_ATTRIBUTE_PATTERN = /^[A-Za-z0-9_][A-Za-z0-9_+-]*(?:\.[A-Za-z0-9_][A-Za-z0-9_+-]*)*$/u;
+function nixAttributeForRequirement(requirement, attributes) {
+    const attribute = attributes[requirement.id] ?? attributes[requirement.name] ?? requirement.name;
+    return isNonEmptyText(attribute) && NIX_ATTRIBUTE_PATTERN.test(attribute) ? attribute : null;
+}
+function installableForRequirement(requirement, options) {
+    const attribute = nixAttributeForRequirement(requirement, options.package_attributes);
+    if (attribute === null) {
+        return materializationFailure(requirement, "no safe Nix attribute maps the logical requirement");
+    }
+    const installable = `${options.nixpkgs}#${attribute}`;
+    if (byteLength(installable) > 1_024) {
+        return materializationFailure(requirement, "the Nix installable exceeds the bounded length");
+    }
+    return success(installable);
+}
+function isStorePath(value, storeRoot) {
+    if (!value.startsWith(`${storeRoot}/`) || value.includes("\0"))
+        return false;
+    if (path.posix.normalize(value) !== value || path.posix.dirname(value) !== storeRoot)
+        return false;
+    const name = path.posix.basename(value);
+    return name.length > 0 && name !== "." && name !== "..";
+}
+/**
+ * Nix JSON format 1 uses store paths as the result object's top-level keys.
+ * Metadata values also contain store paths (derivers and references), but
+ * those are not query results and must not be mistaken for materialized
+ * closure members.  Accept the equivalent array/key shapes for test doubles
+ * and older wrappers while never descending into a result's metadata.
+ */
+function collectJsonStorePaths(value, storeRoot, paths) {
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            if (typeof item === "string" && isStorePath(item, storeRoot)) {
+                paths.add(item);
+            }
+            else if (isRecord(item)) {
+                for (const key of Object.keys(item)) {
+                    if (isStorePath(key, storeRoot))
+                        paths.add(key);
+                }
+                if (paths.size === 0 && typeof item.path === "string" && isStorePath(item.path, storeRoot)) {
+                    paths.add(item.path);
+                }
+            }
+        }
+        return;
+    }
+    if (!isRecord(value))
+        return;
+    for (const key of Object.keys(value)) {
+        if (isStorePath(key, storeRoot))
+            paths.add(key);
+    }
+    if (paths.size === 0 && typeof value.path === "string" && isStorePath(value.path, storeRoot)) {
+        paths.add(value.path);
+    }
+}
+function parsePathInfo(output, storeRoot, requirement, maxPaths, maxOutputBytes) {
+    if (byteLength(output) > maxOutputBytes) {
+        return materializationFailure(requirement, "Nix path-info output exceeded the bounded size");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(output);
+    }
+    catch {
+        return materializationFailure(requirement, "Nix path-info did not return valid JSON");
+    }
+    const paths = new Set();
+    collectJsonStorePaths(parsed, storeRoot, paths);
+    if (paths.size === 0)
+        return materializationFailure(requirement, "Nix path-info returned no store paths");
+    if (paths.size > maxPaths) {
+        return materializationFailure(requirement, "the Nix closure exceeds the bounded path limit", {
+            max_paths: maxPaths,
+        });
+    }
+    return success(Object.freeze([...paths].sort(compareText)));
+}
+function queryPathInfo(requirement, installable, recursive, options) {
+    const args = [
+        "path-info",
+        "--json",
+        "--json-format",
+        "1",
+        "--no-pretty",
+        ...(recursive ? ["--recursive"] : []),
+        "--offline",
+        installable,
+    ];
+    let result;
+    try {
+        result = options.command_runner(options.nix_executable, args);
+    }
+    catch {
+        return materializationFailure(requirement, "the Nix path-info command could not be started");
+    }
+    if (!isRecord(result) ||
+        typeof result.exit_code !== "number" ||
+        !Number.isSafeInteger(result.exit_code) ||
+        typeof result.stdout !== "string" ||
+        typeof result.stderr !== "string") {
+        return materializationFailure(requirement, "the Nix command returned an invalid result");
+    }
+    if (result.exit_code !== 0) {
+        return materializationFailure(requirement, "the declared material is unavailable from the local Nix store", {
+            installable,
+            exit_code: result.exit_code,
+            stderr: result.stderr.slice(0, 240),
+        });
+    }
+    return parsePathInfo(result.stdout, options.store_root, requirement, options.max_paths, options.max_output_bytes);
+}
+function verifyStorePath(candidate, requirement, options) {
+    if (!isStorePath(candidate, options.store_root)) {
+        return materializationFailure(requirement, "Nix returned a path outside the selected store root", {
+            path: candidate,
+        });
+    }
+    let stat;
+    try {
+        stat = options.filesystem.lstatSync(candidate);
+        if (stat.isSymbolicLink() || (!stat.isDirectory() && !stat.isFile())) {
+            return materializationFailure(requirement, "a resolved store path is not a regular materialized path", {
+                path: candidate,
+            });
+        }
+        if (options.filesystem.realpathSync(candidate) !== candidate) {
+            return materializationFailure(requirement, "a resolved store path traverses an unproven symlink", {
+                path: candidate,
+            });
+        }
+    }
+    catch {
+        return materializationFailure(requirement, "a resolved store path is missing or cannot be canonicalized", {
+            path: candidate,
+        });
+    }
+    return success(null);
+}
+function freezeProjection(policy, profile, requirements, filesystem) {
+    const projection = projectSessionRuntimeProjection({
+        policy,
+        profile,
+        requirements,
+        filesystem,
+        executables: [],
+    });
+    return projection.ok ? projection : failure(projection.error);
+}
+/**
+ * Resolve an already-selected #290 profile using Nix's native path-info
+ * closure query, then create only exact store-path projections. This function
+ * does not build, substitute, crawl the store, or inspect PATH/home state.
+ */
+export function materializeNixRuntimeClosure(profile, options = {}) {
+    if (!isRecord(options))
+        return materializationFailure(null, "the Nix materializer options are invalid");
+    const initialOptions = validateOptions(options, null);
+    if (!initialOptions.ok)
+        return initialOptions;
+    const profileResult = validateProfile(profile, initialOptions.value.max_requirements);
+    if (!profileResult.ok)
+        return profileResult;
+    const requirementForErrors = profileResult.value.requirements[0] ?? null;
+    const optionsResult = validateOptions(options, requirementForErrors);
+    if (!optionsResult.ok)
+        return optionsResult;
+    const resolvedOptions = optionsResult.value;
+    const packages = [];
+    const storePaths = new Set();
+    const pathProvenance = new Map();
+    for (const requirement of profileResult.value.requirements) {
+        const installable = installableForRequirement(requirement, resolvedOptions);
+        if (!installable.ok)
+            return installable;
+        const roots = queryPathInfo(requirement, installable.value, false, resolvedOptions);
+        if (!roots.ok)
+            return roots;
+        if (roots.value.length !== 1) {
+            return materializationFailure(requirement, "the declared installable resolved to an ambiguous output set", {
+                installable: installable.value,
+                output_count: roots.value.length,
+            });
+        }
+        const root = roots.value[0];
+        const closure = queryPathInfo(requirement, installable.value, true, resolvedOptions);
+        if (!closure.ok)
+            return closure;
+        if (!closure.value.includes(root)) {
+            return materializationFailure(requirement, "the Nix closure omitted its declared root", {
+                root,
+                installable: installable.value,
+            });
+        }
+        for (const storePath of closure.value) {
+            const verified = verifyStorePath(storePath, requirement, resolvedOptions);
+            if (!verified.ok)
+                return verified;
+            storePaths.add(storePath);
+            const provenance = requirement.kind === "runtime" ? "runtime-profile" : "package";
+            const previous = pathProvenance.get(storePath);
+            if (previous === undefined || (provenance === "runtime-profile" && previous === "package")) {
+                pathProvenance.set(storePath, provenance);
+            }
+            if (storePaths.size > resolvedOptions.max_paths) {
+                return materializationFailure(requirement, "the combined Nix closure exceeds the bounded path limit", {
+                    max_paths: resolvedOptions.max_paths,
+                });
+            }
+        }
+        packages.push(Object.freeze({
+            requirement_id: requirement.id,
+            installable: installable.value,
+            root,
+            closure: Object.freeze([...closure.value].sort(compareText)),
+        }));
+    }
+    const sortedStorePaths = Object.freeze([...storePaths].sort(compareText));
+    const filesystem = resolvedOptions.policy.mode === "compatibility"
+        ? [
+            Object.freeze({
+                source: resolvedOptions.store_root,
+                target: resolvedOptions.store_root,
+                access_mode: "read-only",
+                provenance: "compatibility",
+            }),
+        ]
+        : sortedStorePaths.map((storePath) => Object.freeze({
+            source: storePath,
+            target: storePath,
+            access_mode: "read-only",
+            provenance: pathProvenance.get(storePath) ?? "package",
+        }));
+    if (resolvedOptions.policy.mode === "compatibility") {
+        try {
+            const stat = resolvedOptions.filesystem.lstatSync(resolvedOptions.store_root);
+            if (stat.isSymbolicLink() || !stat.isDirectory()) {
+                return materializationFailure(requirementForErrors, "the compatibility Nix store root is not a directory");
+            }
+            if (resolvedOptions.filesystem.realpathSync(resolvedOptions.store_root) !== resolvedOptions.store_root) {
+                return materializationFailure(requirementForErrors, "the compatibility Nix store root is not canonical");
+            }
+        }
+        catch {
+            return materializationFailure(requirementForErrors, "the compatibility Nix store root is unavailable");
+        }
+    }
+    const projection = freezeProjection(resolvedOptions.policy, profileResult.value.profile, profileResult.value.requirements, filesystem);
+    if (!projection.ok)
+        return projection;
+    return success(Object.freeze({
+        contract_id: NIX_RUNTIME_CLOSURE_CONTRACT_ID,
+        schema_version: NIX_RUNTIME_CLOSURE_SCHEMA_VERSION,
+        policy: resolvedOptions.policy,
+        profile: profileResult.value.profile,
+        requirements: profileResult.value.requirements,
+        packages: Object.freeze(packages.sort((left, right) => compareText(left.requirement_id, right.requirement_id))),
+        store_paths: sortedStorePaths,
+        projection: projection.value,
+    }));
+}
+/** Resolve is the same bounded operation; the alias mirrors profile terminology. */
+export const resolveNixRuntimeClosure = materializeNixRuntimeClosure;
+export const materializeNixRuntimeProfile = materializeNixRuntimeClosure;
+export function isNixRuntimeClosureError(error) {
+    return error.code === "RUNTIME_MATERIALIZATION_MISSING";
+}
+//# sourceMappingURL=nix-runtime-closure.js.map

package/dist/domain/nix-runtime-closure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nix-runtime-closure.js","sourceRoot":"","sources":["../../src/domain/nix-runtime-closure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAsC,MAAM,aAAa,CAAC;AAChG,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,kCAAkC,EAClC,qBAAqB,GAMtB,MAAM,yBAAyB,CAAC;AAEjC,oEAAoE;AACpE,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAA0C,CAAC;AAC1F,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAU,CAAC;AAE7D,MAAM,mBAAmB,GAAG,SAAS,CAAC;AACtC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,wBAAwB,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC;AACnD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,qEAAqE;AACrE,MAAM,CAAC,MAAM,8BAA8B,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5F,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;CACb,CAAC,CAAC;AA0EH,MAAM,gBAAgB,GAAyB;IAC7C,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;IACjD,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;CAC/D,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAsC,EACtC,MAAc,EACd,UAAsB,EAAE;IAExB,MAAM,QAAQ,GAAG,WAAW,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC;IACpF,MAAM,SAAS,GAAG,kCAAkC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,OAAO,CACZ,IAAI,WAAW,CACb,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,OAAO,EACjB,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EACpD,SAAS,CAAC,QAAQ,CACnB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB;IACrD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/F,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CACtB,OAAgB,EAChB,eAAuB;IAEvB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7F,OAAO,sBAAsB,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,aAAa,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,2BAA2B,EAAE,CAAC;QACpF,OAAO,sBAAsB,CAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,gBAAgB,IAAI,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,8BAA8B,EAAE,CAAC;QAC7F,OAAO,sBAAsB,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,OAAO,sBAAsB,CAAC,IAAI,EAAE,kDAAkD,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClD,OAAO,sBAAsB,CAAC,IAAI,EAAE,iEAAiE,EAAE;YACrG,gBAAgB,EAAE,eAAe;SAClC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAyB,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChB,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;YACtD,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3B,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC1B,CAAC;YACD,OAAO,sBAAsB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,OAAO,sBAAsB,CAC3B,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAC5E,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,YAAY,CAAC,IAAI,CACf,MAAM,CAAC,MAAM,CAAC;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxG,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,OAAiC,EACjC,WAAsC;IAEtC,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,sBAAsB,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAE5F,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACtD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;QAAE,OAAO,sBAAsB,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAEhH,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QAClH,OAAO,sBAAsB,CAAC,WAAW,EAAE,sCAAsC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC;IAC1E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,sBAAsB,CAAC,WAAW,EAAE,kCAAkC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC;IACxE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,sBAAsB,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAEpG,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACxE,IAAI,eAAe,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACnG,OAAO,sBAAsB,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,8BAA8B,CAAC;IAChF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,sBAAsB,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;IAC1G,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,sBAAsB,CAAC,WAAW,EAAE,iDAAiD,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,cAAc,EAAE,aAAa;QAC7B,OAAO,EAAE,GAAG;QACZ,kBAAkB,EAAE,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,6BAA6B,CAAC,cAAc,EAAE,SAAS,CAAC;QAClG,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,gBAAgB;QAClD,gBAAgB,EAAE,eAAe;QACjC,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,cAAc;QAChC,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpH,CAAC;AAED,SAAS,6BAA6B,CAAC,cAAsB,EAAE,SAAiB;IAC9E,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;gBACjD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,cAAc;gBACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAW,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO;gBACL,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC3C,MAAM,EAAE,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC;aAC5C,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GAAG,kEAAkE,CAAC;AAEjG,SAAS,0BAA0B,CACjC,WAA+B,EAC/B,UAA4C;IAE5C,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC;IACjG,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/F,CAAC;AAED,SAAS,yBAAyB,CAAC,WAA+B,EAAE,OAA0B;IAC5F,MAAM,SAAS,GAAG,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,sBAAsB,CAAC,WAAW,EAAE,oDAAoD,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;IACtD,IAAI,UAAU,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,CAAC;QACpC,OAAO,sBAAsB,CAAC,WAAW,EAAE,gDAAgD,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,SAAiB;IACnD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,KAAc,EAAE,SAAiB,EAAE,KAAkB;IAClF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;wBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;oBAC3F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC7F,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,SAAiB,EACjB,WAA+B,EAC/B,QAAgB,EAChB,cAAsB;IAEtB,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO,sBAAsB,CAAC,WAAW,EAAE,gDAAgD,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;IAC1G,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC1B,OAAO,sBAAsB,CAAC,WAAW,EAAE,gDAAgD,EAAE;YAC3F,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CACpB,WAA+B,EAC/B,WAAmB,EACnB,SAAkB,EAClB,OAA0B;IAE1B,MAAM,IAAI,GAAG;QACX,WAAW;QACX,QAAQ;QACR,eAAe;QACf,GAAG;QACH,aAAa;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,WAAW;QACX,WAAW;KACZ,CAAC;IACF,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,CAAC,WAAW,EAAE,gDAAgD,CAAC,CAAC;IAC/F,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;QACjB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,sBAAsB,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,sBAAsB,CAAC,WAAW,EAAE,+DAA+D,EAAE;YAC1G,WAAW;YACX,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,eAAe,CACtB,SAAiB,EACjB,WAA+B,EAC/B,OAA0B;IAE1B,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,OAAO,sBAAsB,CAAC,WAAW,EAAE,qDAAqD,EAAE;YAChG,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAoB,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACrE,OAAO,sBAAsB,CAAC,WAAW,EAAE,0DAA0D,EAAE;gBACrG,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO,sBAAsB,CAAC,WAAW,EAAE,qDAAqD,EAAE;gBAChG,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,CAAC,WAAW,EAAE,6DAA6D,EAAE;YACxG,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAqB,EACrB,OAA+B,EAC/B,YAA2C,EAC3C,UAAkD;IAElD,MAAM,UAAU,GAAG,+BAA+B,CAAC;QACjD,MAAM;QACN,OAAO;QACP,YAAY;QACZ,UAAU;QACV,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA+B,EAC/B,UAAoC,EAAE;IAEtC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,sBAAsB,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;IACxG,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC;IAC9C,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtF,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC;IAC5C,MAAM,oBAAoB,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACrE,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC;IAC5C,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC;IAE5C,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyC,CAAC;IACxE,KAAK,MAAM,WAAW,IAAI,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3D,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW,CAAC,EAAE;YAAE,OAAO,WAAW,CAAC;QACxC,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,sBAAsB,CAAC,WAAW,EAAE,8DAA8D,EAAE;gBACzG,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC;QACtC,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,sBAAsB,CAAC,WAAW,EAAE,2CAA2C,EAAE;gBACtF,IAAI;gBACJ,WAAW,EAAE,WAAW,CAAC,KAAK;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC;YAClC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC3F,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,GAAG,eAAe,CAAC,SAAS,EAAE,CAAC;gBAChD,OAAO,sBAAsB,CAAC,WAAW,EAAE,yDAAyD,EAAE;oBACpG,SAAS,EAAE,eAAe,CAAC,SAAS;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACZ,cAAc,EAAE,WAAW,CAAC,EAAE;YAC9B,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;SAC7D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GACd,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe;QAC7C,CAAC,CAAC;YACE,MAAM,CAAC,MAAM,CAAC;gBACZ,MAAM,EAAE,eAAe,CAAC,UAAU;gBAClC,MAAM,EAAE,eAAe,CAAC,UAAU;gBAClC,WAAW,EAAE,WAAoB;gBACjC,UAAU,EAAE,eAAwB;aACrC,CAAC;SACH;QACH,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjC,MAAM,CAAC,MAAM,CAAC;YACZ,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,WAAoB;YACjC,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAK,SAAmB;SAClE,CAAC,CACH,CAAC;IAER,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjD,OAAO,sBAAsB,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,UAAU,EAAE,CAAC;gBACvG,OAAO,sBAAsB,CAAC,oBAAoB,EAAE,mDAAmD,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,sBAAsB,CAAC,oBAAoB,EAAE,iDAAiD,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CACjC,eAAe,CAAC,MAAM,EACtB,aAAa,CAAC,KAAK,CAAC,OAAO,EAC3B,aAAa,CAAC,KAAK,CAAC,YAAY,EAChC,UAAU,CACX,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,OAAO,OAAO,CACZ,MAAM,CAAC,MAAM,CAAC;QACZ,WAAW,EAAE,+BAA+B;QAC5C,cAAc,EAAE,kCAAkC;QAClD,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY;QAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC/G,WAAW,EAAE,gBAAgB;QAC7B,UAAU,EAAE,UAAU,CAAC,KAAK;KAC7B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AACrE,MAAM,CAAC,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AAEzE,MAAM,UAAU,wBAAwB,CAAC,KAAkB;IACzD,OAAO,KAAK,CAAC,IAAI,KAAK,iCAAiC,CAAC;AAC1D,CAAC"}

package/dist/domain/pnpm-middleware-backend-materialization.d.ts

@@ -0,0 +1,117 @@
+import { type DomainResult } from "./errors.js";
+import { type NixRuntimeClosure, type NixRuntimeClosureOptions } from "./nix-runtime-closure.js";
+import { type RuntimeExecutableProvider, type RuntimeProfileIdentity, type RuntimeRequirement, type SessionRuntimeProjection } from "./runtime-projection.js";
+import type { ResolvedRuntimeProfile } from "./runtime-profile.js";
+import type { RuntimeExecutableProviderMaterialization } from "./runtime-executable-projection.js";
+/** Versioned identity for the concrete #309 backend-materialization boundary. */
+export declare const PNPM_MIDDLEWARE_BACKEND_MATERIALIZATION_CONTRACT_ID: "nawabari.pnpm-middleware-backend-materialization.v1";
+export declare const PNPM_MIDDLEWARE_BACKEND_MATERIALIZATION_SCHEMA_VERSION: 1;
+/** Stable backend targets consumed by #306; its public executable alias is separate. */
+export declare const PNPM_MIDDLEWARE_RTK_TARGET: "/runtime/pnpm-middleware/rtk";
+export declare const PNPM_MIDDLEWARE_REAL_PNPM_TARGET: "/runtime/pnpm-middleware/pnpm/bin/pnpm.mjs";
+export declare const PNPM_MIDDLEWARE_PNPM_BUNDLE_TARGET: "/runtime/pnpm-middleware/pnpm/dist/pnpm.mjs";
+/**
+ * Backend identities owned by #309.  The public launcher requirements and
+ * provider/entrypoint constants remain owned by #306.
+ */
+export declare const RTK_BACKEND_REQUIREMENT: Readonly<{
+    id: "rtk-pnpm-middleware";
+    kind: "package";
+    name: "rtk";
+    version: "0.45.0";
+}>;
+export declare const REAL_PNPM_BACKEND_REQUIREMENT: Readonly<{
+    id: "pnpm-pinned-backend";
+    kind: "package";
+    name: "pnpm";
+    version: "11.18.0";
+}>;
+export declare const RTK_NIXPKGS_REF: "github:NixOS/nixpkgs/bb92730f6e97ca1c19e285a872cdd62a1a25c467";
+export declare const RTK_NIX_PACKAGE_ATTRIBUTE: "rtk";
+export declare const RTK_NIX_INSTALLABLE: "github:NixOS/nixpkgs/bb92730f6e97ca1c19e285a872cdd62a1a25c467#rtk";
+export declare const RTK_EXECUTABLE_RELATIVE_PATH: "bin/rtk";
+export declare const PNPM_NIXPKGS_REF: "github:NixOS/nixpkgs/44cc5cdbf88deb1d20243d1d5e3b46ad008b6139";
+export declare const PNPM_NIX_PACKAGE_ATTRIBUTE: "pnpm";
+export declare const PNPM_NIX_INSTALLABLE: "github:NixOS/nixpkgs/44cc5cdbf88deb1d20243d1d5e3b46ad008b6139#pnpm";
+/** `bin/pnpm` is a symlink; this is the exact regular executable in the Nix output. */
+export declare const PNPM_EXECUTABLE_RELATIVE_PATH: "libexec/pnpm/bin/pnpm.mjs";
+export declare const PNPM_BUNDLE_RELATIVE_PATH: "libexec/pnpm/dist/pnpm.mjs";
+/** Immutable source pins obtained from the selected Nixpkgs expressions. */
+export declare const RTK_NIX_SOURCE: Readonly<{
+    owner: "rtk-ai";
+    repository: "rtk";
+    tag: "v0.45.0";
+    revision: "refs/tags/v0.45.0";
+    url: "https://github.com/rtk-ai/rtk/archive/refs/tags/v0.45.0.tar.gz";
+    hash: "sha256-weAyHM0nWLrM8JRbbXIfjUsHtAep3DOFyTO+M3BZ/iU=";
+    cargo_hash: "sha256-tgW6il/xLxt/xwhUBJ4MNVnk0JSZ7iFjJaEobj5+H4o=";
+}>;
+export declare const PNPM_NIX_SOURCE: Readonly<{
+    registry: "https://registry.npmjs.org/";
+    package: "pnpm";
+    version: "11.18.0";
+    url: "https://registry.npmjs.org/pnpm/-/pnpm-11.18.0.tgz";
+    hash: "sha256-KcNcqNKih5iP3uPg824H2bk3g/VntXm3/Vt5ikVj3YE=";
+}>;
+export declare const RTK_BACKEND_PROVIDER: RuntimeExecutableProvider;
+export declare const REAL_PNPM_BACKEND_PROVIDER: RuntimeExecutableProvider;
+/** Bounded observations recorded from the exact resolved Nix output files. */
+export declare const RTK_BACKEND_EVIDENCE: Readonly<{
+    executable_sha256: "44ef7ff8063d5ddc2ea68b1662c346129322cd2ce922440e53ca1486d1aa7ee0";
+    version: "rtk 0.45.0\n";
+    version_bytes: 11;
+    version_sha256: "9755282c9fbe0070d4f117d607f93a2b8a881ecfe373886e1ddec350cb2d920b";
+    proxy_help_bytes: 382;
+    proxy_help_sha256: "268105667cee57d4b742de30183bd4d780459c893ea942402f2f32d133c273d7";
+}>;
+export declare const PNPM_BACKEND_EVIDENCE: Readonly<{
+    executable_sha256: "81c9d9b2d59db7fa00bb3456a6bacbc6c58b7aeb5c744727c4e167cdadd957e8";
+    version: "11.18.0\n";
+    version_bytes: 8;
+    version_sha256: "324f52ea836cd47edb7932f3992fa50b67fc7fec13a6950e1a1ddf720afab6d2";
+    help_bytes: 2305;
+    help_sha256: "015f07d56a341088941fffca78f148ff6a9eb17af5246b80aa729a8028f4cb36";
+    bundle_bytes: 12904703;
+    bundle_sha256: "d34a7b439643e7b8680a817387ec3692c7097ae7a85865c2c15ad6211143d506";
+}>;
+export type PnpmMiddlewareBackendDescriptor = Readonly<{
+    /** Exact path visible inside the sandbox and passed to #306. */
+    readonly path: string;
+    /** Exact regular executable source in the already-materialized Nix output. */
+    readonly source: string;
+    readonly provider: RuntimeExecutableProvider;
+}>;
+/**
+ * Structural backend-only handoff consumed by #306's materialize API.  This
+ * boundary intentionally contains no launcher, entrypoint, or public provider
+ * contract so the two Issues have one-way ownership.
+ */
+export type PnpmMiddlewareBackendMaterializationOptions = Omit<NixRuntimeClosureOptions, "nixpkgs" | "nixpkgs_ref" | "package_attributes">;
+export type PnpmMiddlewareBackendMaterialization = Readonly<{
+    readonly contract_id: typeof PNPM_MIDDLEWARE_BACKEND_MATERIALIZATION_CONTRACT_ID;
+    readonly schema_version: typeof PNPM_MIDDLEWARE_BACKEND_MATERIALIZATION_SCHEMA_VERSION;
+    readonly profile: RuntimeProfileIdentity;
+    readonly requirements: readonly [RuntimeRequirement, RuntimeRequirement];
+    /** Exact descriptors accepted by #306's materializePnpmMiddleware input. */
+    readonly rtk: PnpmMiddlewareBackendDescriptor;
+    readonly real_pnpm: PnpmMiddlewareBackendDescriptor;
+    /** Strict bounded projection containing closure roots and exact executable files. */
+    readonly projection: SessionRuntimeProjection;
+    readonly rtk_closure: NixRuntimeClosure;
+    readonly real_pnpm_closure: NixRuntimeClosure;
+    readonly rtk_provider_materialization: RuntimeExecutableProviderMaterialization;
+    readonly real_pnpm_provider_materialization: RuntimeExecutableProviderMaterialization;
+    readonly evidence: Readonly<{
+        readonly rtk: typeof RTK_BACKEND_EVIDENCE;
+        readonly real_pnpm: typeof PNPM_BACKEND_EVIDENCE;
+    }>;
+}>;
+/**
+ * Materialize both concrete middleware backends through #291's offline Nix
+ * path-info authority.  Each backend uses its own immutable Nixpkgs revision;
+ * no build, substitute, PATH lookup, home lookup, or store crawl occurs here.
+ */
+export declare function materializePnpmMiddlewareBackends(profile: ResolvedRuntimeProfile, options?: PnpmMiddlewareBackendMaterializationOptions): DomainResult<PnpmMiddlewareBackendMaterialization>;
+/** #292 accepts only a host path; it cannot prove these pinned package artifacts. */
+export declare function materializePnpmMiddlewareFhsRuntime(_input?: unknown): DomainResult<never>;
+export declare const materializePnpmMiddlewareBackendMaterialization: typeof materializePnpmMiddlewareBackends;