self-bench 0.3.5 → 0.3.8

package/dist/api-main.js

@@ -1,8 +1,12 @@
 import { startApi } from "./api.js";
+import { loadAuthConfig } from "./auth/config.js";
 import { loadConfig } from "./config.js";
 const config = loadConfig();
-const stop = await startApi(config);
+const auth = loadAuthConfig();
+const stop = await startApi(config, auth ? { auth } : {});
 console.log(`SelfBench API listening on http://${config.apiHost}:${config.apiPort}`);
+if (auth)
+    console.log(`GitHub sign-in enabled; public URL ${auth.publicUrl}`);
 for (const signal of ["SIGINT", "SIGTERM"]) {
     process.once(signal, () => {
         void stop().finally(() => process.exit(0));

package/dist/api-main.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-main.js","sourceRoot":"","sources":["../src/api-main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpC,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AAErF,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"api-main.js","sourceRoot":"","sources":["../src/api-main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;AAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1D,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AACrF,IAAI,IAAI;IAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAE9E,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api.d.ts

@@ -1,27 +1,9 @@
-import { z } from "zod";
+import type { AuthConfig } from "./auth/config.js";
 import type { SelfBenchConfig } from "./config.js";
-import { type RunRequest } from "./contracts.js";
-declare const submissionSchema: z.ZodObject<{
-    runId: z.ZodString;
-    repository: z.ZodObject<{
-        url: z.ZodString;
-        commit: z.ZodString;
-    }, z.core.$strip>;
-    provenance: z.ZodObject<{
-        uri: z.ZodString;
-        sha256: z.ZodString;
-        sizeBytes: z.ZodNumber;
-        contentType: z.ZodString;
-    }, z.core.$strip>;
-    candidateCounts: z.ZodObject<{
-        easy: z.ZodNumber;
-        medium: z.ZodNumber;
-        hard: z.ZodNumber;
-    }, z.core.$strip>;
-    authoringModel: z.ZodDefault<z.ZodString>;
-    selfbenchCommit: z.ZodString;
-}, z.core.$strip>;
-export declare function startApi(config: SelfBenchConfig): Promise<() => Promise<void>>;
-export declare function buildRunRequest(config: SelfBenchConfig, submission: z.input<typeof submissionSchema>): RunRequest;
-export {};
+export interface ApiOptions {
+    /** When set, the API also serves the selfbench.dev site: GitHub sign-in and session cookies. */
+    readonly auth?: AuthConfig;
+}
+export declare function startApi(config: SelfBenchConfig, options?: ApiOptions): Promise<() => Promise<void>>;
+export { buildRunRequest } from "./api/run-request.js";
 //# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAGL,KAAK,UAAU,EAIhB,MAAM,gBAAgB,CAAC;AAIxB,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;iBAWpB,CAAC;AAEH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAsHpF;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,EACvB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,GAC3C,UAAU,CAuBZ"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAOnD,MAAM,WAAW,UAAU;IACzB,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;CAC5B;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAmK9B;AAYD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/api.js

@@ -1,31 +1,24 @@
-import { timingSafeEqual } from "node:crypto";
-import { readFile } from "node:fs/promises";
 import { createServer } from "node:http";
-import { dirname, join } from "node:path";
 import { pipeline } from "node:stream/promises";
-import { fileURLToPath } from "node:url";
 import { Client } from "@temporalio/client";
 import { z } from "zod";
+import { authorized, bearerMatches, readBody, sendApiError, sendJson, sendReviewAsset, } from "./api/http.js";
+import { buildRunRequest } from "./api/run-request.js";
+import { queryStatus } from "./api/status.js";
+import { handleViewerRoute } from "./api/viewer-routes.js";
 import { createArtifactStore } from "./artifacts.js";
-import { artifactRefSchema, repositoryRefSchema, runRequestSchema, } from "./contracts.js";
+import { apiKeyDenies } from "./auth/api-keys.js";
+import { sendIdentityError } from "./auth/routes.js";
+import { sendExpiredSession } from "./auth/session-expired.js";
+import { openSite } from "./site/runtime.js";
 import { connectTemporalClient } from "./temporal/connection.js";
-import { selfBenchRunWorkflow, statusQuery } from "./temporal/workflow.js";
-const submissionSchema = z.object({
-    runId: z.string().regex(/^[a-z0-9][a-z0-9-]{2,62}$/),
-    repository: repositoryRefSchema,
-    provenance: artifactRefSchema,
-    candidateCounts: z.object({
-        easy: z.number().int().min(0).max(100),
-        medium: z.number().int().min(0).max(100),
-        hard: z.number().int().min(0).max(100),
-    }),
-    authoringModel: z.string().min(1).default("gpt-5.6-sol"),
-    selfbenchCommit: z.string().regex(/^[0-9a-f]{40}$/i),
-});
-export async function startApi(config) {
+import { selfBenchRunWorkflow } from "./temporal/workflow.js";
+import { listArchivedRuns } from "./viewer/archived.js";
+export async function startApi(config, options = {}) {
     const connection = await connectTemporalClient(config.temporal);
     const client = new Client({ connection, namespace: config.temporal.namespace });
     const artifacts = createArtifactStore(config.artifact);
+    const site = options.auth ? await openSite(options.auth, config, client, artifacts) : undefined;
     const server = createServer(async (request, response) => {
         try {
             const url = new URL(request.url ?? "/", `http://${request.headers.host ?? "localhost"}`);
@@ -33,15 +26,54 @@ export async function startApi(config) {
                 sendJson(response, 200, { ok: true });
                 return;
             }
+            if (site) {
+                if (await site.auth.handle(request, url, response))
+                    return;
+                if (request.method === "GET" && url.pathname === "/v1/viewer") {
+                    sendJson(response, 200, { modes: ["runs"], auth: "github" });
+                    return;
+                }
+                if (request.method === "GET" && isSitePage(url.pathname)) {
+                    await sendReviewAsset(response, "/");
+                    return;
+                }
+            }
             if (request.method === "GET" &&
                 (url.pathname === "/" || url.pathname.startsWith("/assets/"))) {
                 await sendReviewAsset(response, url.pathname);
                 return;
             }
-            if (!authorized(request, config.apiToken)) {
+            // With sign-in enabled the CLI's bearer token still works, but nothing is open by default.
+            const user = site ? await site.auth.authenticate(request, config.apiToken) : undefined;
+            const allowed = site
+                ? (config.apiToken !== undefined && bearerMatches(request, config.apiToken)) ||
+                    user !== undefined
+                : authorized(request, config.apiToken);
+            if (!allowed) {
                 sendJson(response, 401, { error: "unauthorized" });
                 return;
             }
+            const denied = user ? apiKeyDenies(user, request.method) : undefined;
+            if (denied) {
+                sendJson(response, 403, { error: denied });
+                return;
+            }
+            if (site && user && url.pathname.startsWith("/api/")) {
+                if (await site.apiKeys.handle(request, url, response, user))
+                    return;
+                if (await site.github.handle(request, url, response, user))
+                    return;
+                if (await site.repos.handle(request, url, response, user))
+                    return;
+                if (await site.pullRequests.handle(request, url, response, user))
+                    return;
+                if (await site.evaluations.handle(request, url, response, user))
+                    return;
+                if (await site.batches.handle(request, url, response, user))
+                    return;
+                if (await site.tasks.handle(request, url, response, user))
+                    return;
+            }
             if (request.method === "POST" && url.pathname === "/v1/provenance") {
                 const runId = z
                     .string()
@@ -63,6 +95,12 @@ export async function startApi(config) {
                 sendJson(response, 202, { runId: workflowInput.runId });
                 return;
             }
+            if (await handleViewerRoute(request, url, response, {
+                store: artifacts,
+                statusFor: (runId) => queryStatus(client.workflow.getHandle(runId)),
+            })) {
+                return;
+            }
             const runMatch = /^\/v1\/runs\/([a-z0-9][a-z0-9-]{2,62})(?:\/(cancel|export))?$/.exec(url.pathname);
             if (runMatch?.[1] && request.method === "GET" && runMatch[2] === "export") {
                 const status = await queryStatus(client.workflow.getHandle(runMatch[1]));
@@ -102,6 +140,13 @@ export async function startApi(config) {
                         startedAt: execution.startTime.toISOString(),
                         closedAt: execution.closeTime?.toISOString(),
                     });
+                    if (runs.length >= 1_000)
+                        break;
+                }
+                const known = new Set(runs.map((run) => run.runId));
+                for (const archived of await listArchivedRuns(artifacts)) {
+                    if (!known.has(archived.runId))
+                        runs.push(archived);
                 }
                 sendJson(response, 200, runs);
                 return;
@@ -113,10 +158,11 @@ export async function startApi(config) {
                 response.destroy(error instanceof Error ? error : new Error(String(error)));
                 return;
             }
-            const message = error instanceof Error ? error.message : String(error);
-            sendJson(response, error instanceof z.ZodError || error instanceof SyntaxError ? 400 : 500, {
-                error: message,
-            });
+            if (options.auth && sendIdentityError(response, error, options.auth.publicUrl))
+                return;
+            if (options.auth && sendExpiredSession(response, error, options.auth.publicUrl))
+                return;
+            sendApiError(response, error);
         }
     });
     await new Promise((resolve, reject) => {
@@ -126,132 +172,18 @@ export async function startApi(config) {
     return async () => {
         await new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
         await connection.close();
+        await site?.database.close();
     };
 }
-export function buildRunRequest(config, submission) {
-    const parsed = submissionSchema.parse(submission);
-    return runRequestSchema.parse({
-        runId: parsed.runId,
-        repository: parsed.repository,
-        provenance: parsed.provenance,
-        candidateCounts: parsed.candidateCounts,
-        authoring: {
-            provider: "openai-codex",
-            model: parsed.authoringModel,
-            reasoningEffort: "high",
-        },
-        version: {
-            selfbenchCommit: config.buildCommit ?? parsed.selfbenchCommit,
-            executionBackend: config.execution.kind,
-            harborEnvironment: config.harborEnvironment,
-            sandboxImage: config.execution.image,
-            ...(config.execution.kind === "vercel"
-                ? { sandboxTimeoutCapMs: config.execution.timeoutCapMs }
-                : {}),
-            schema: 1,
-        },
-    });
-}
-async function queryStatus(handle) {
-    try {
-        const [status, description] = await Promise.all([handle.query(statusQuery), handle.describe()]);
-        if (description.status.name === "RUNNING" || terminalRunPhase(status.phase)) {
-            return status;
-        }
-        const phase = executionPhase(description.status.name);
-        return {
-            ...status,
-            phase,
-            ...(phase === "failed" && !status.error
-                ? { error: `Temporal workflow ${description.status.name.toLowerCase()}` }
-                : {}),
-        };
-    }
-    catch {
-        const description = await handle.describe();
-        return {
-            runId: description.workflowId,
-            phase: executionPhase(description.status.name),
-        };
-    }
-}
-function terminalRunPhase(phase) {
-    return ["complete", "blocked", "failed", "cancelled"].includes(phase);
-}
-function executionPhase(status) {
-    switch (status) {
-        case "COMPLETED":
-            return "complete";
-        case "CANCELED":
-            return "cancelled";
-        case "RUNNING":
-            return "queued";
-        default:
-            return "failed";
-    }
-}
-async function readBody(request, limit = 10 * 1024 * 1024) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of request) {
-        const value = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        size += value.byteLength;
-        if (size > limit) {
-            throw new Error(`request body exceeds ${limit} bytes`);
-        }
-        chunks.push(value);
-    }
-    return Buffer.concat(chunks);
-}
-function authorized(request, token) {
-    if (!token) {
-        return true;
-    }
-    const supplied = request.headers.authorization?.replace(/^Bearer\s+/i, "");
-    if (!supplied) {
+/**
+ * Page paths load the SPA shell and let the router decide; API prefixes and anything that
+ * looks like a file (assets, favicons) are left to the handlers below.
+ */
+function isSitePage(pathname) {
+    if (/^\/(v1|api|auth)(\/|$)/.test(pathname))
         return false;
-    }
-    const expectedBuffer = Buffer.from(token);
-    const suppliedBuffer = Buffer.from(supplied);
-    return (expectedBuffer.length === suppliedBuffer.length &&
-        timingSafeEqual(expectedBuffer, suppliedBuffer));
-}
-async function sendReviewAsset(response, pathname) {
-    const relativePath = pathname === "/" ? "index.html" : pathname.slice(1);
-    const root = join(dirname(fileURLToPath(import.meta.url)), "review");
-    const path = join(root, relativePath);
-    if (!path.startsWith(`${root}/`)) {
-        sendJson(response, 400, { error: "invalid asset path" });
-        return;
-    }
-    try {
-        const body = await readFile(path);
-        response.writeHead(200, {
-            "content-type": contentType(path),
-            "content-length": body.byteLength,
-            "cache-control": pathname === "/" ? "no-cache" : "public, max-age=31536000, immutable",
-        });
-        response.end(body);
-    }
-    catch {
-        sendJson(response, 404, { error: "asset not found" });
-    }
-}
-function contentType(path) {
-    if (path.endsWith(".html"))
-        return "text/html; charset=utf-8";
-    if (path.endsWith(".css"))
-        return "text/css; charset=utf-8";
-    if (path.endsWith(".js"))
-        return "text/javascript; charset=utf-8";
-    return "application/octet-stream";
-}
-function sendJson(response, status, value) {
-    const body = `${JSON.stringify(value, null, 2)}\n`;
-    response.writeHead(status, {
-        "content-type": "application/json; charset=utf-8",
-        "content-length": Buffer.byteLength(body),
-    });
-    response.end(body);
+    const last = pathname.split("/").pop() ?? "";
+    return !last.includes(".");
 }
+export { buildRunRequest } from "./api/run-request.js";
 //# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EACL,iBAAiB,EAIjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE3E,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC;IACpD,UAAU,EAAE,mBAAmB;IAC/B,UAAU,EAAE,iBAAiB;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACvC,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAuB;IACpD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YACzF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC5D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IACE,OAAO,CAAC,MAAM,KAAK,KAAK;gBACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAC7D,CAAC;gBACD,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBACnE,MAAM,KAAK,GAAG,CAAC;qBACZ,MAAM,EAAE;qBACR,KAAK,CAAC,2BAA2B,CAAC;qBAClC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,CACnC,QAAQ,KAAK,yBAAyB,EACtC,IAAI,EACJ,sBAAsB,CACvB,CAAC;gBACF,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC7D,MAAM,aAAa,GAAG,eAAe,CACnC,MAAM,EACN,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACvD,CAAC;gBACF,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAChD,UAAU,EAAE,aAAa,CAAC,KAAK;oBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;oBACpC,IAAI,EAAE,CAAC,aAAa,CAAC;oBACrB,wBAAwB,EAAE,SAAS;iBACpC,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,+DAA+D,CAAC,IAAI,CACnF,GAAG,CAAC,QAAQ,CACb,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC5C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;oBACzC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;oBACzC,qBAAqB,EAAE,mCAAmC,QAAQ,CAAC,CAAC,CAAC,UAAU;oBAC/E,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;iBACzC,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3E,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAc,EAAE,CAAC;gBAC3B,IAAI,KAAK,EAAE,MAAM,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjD,KAAK,EAAE,uCAAuC;iBAC/C,CAAC,EAAE,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,SAAS,CAAC,UAAU;wBAC3B,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;wBAC7B,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;wBAC5C,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE;qBAC7C,CAAC,CAAC;gBACL,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,QAAQ,CAAC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,QAAQ,CAAC,QAAQ,EAAE,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;gBAC1F,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAuB,EACvB,UAA4C;IAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,gBAAgB,CAAC,KAAK,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS,EAAE;YACT,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,MAAM,CAAC,cAAc;YAC5B,eAAe,EAAE,MAAM;SACxB;QACD,OAAO,EAAE;YACP,eAAe,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe;YAC7D,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;YACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK;YACpC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;gBACpC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;SACV;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO;YACL,GAAG,MAAM;YACT,KAAK;YACL,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK;gBACrC,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE;gBACzE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,WAAW,CAAC,UAAU;YAC7B,KAAK,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IACxE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,OAAwB,EAAE,KAAyB;IACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC/C,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAwB,EAAE,QAAgB;IACvE,MAAM,YAAY,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC;YACjC,gBAAgB,EAAE,IAAI,CAAC,UAAU;YACjC,eAAe,EAAE,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qCAAqC;SACvF,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,gCAAgC,CAAC;IAClE,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,KAAc;IACxE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACnD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;KAC1C,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,UAAU,EACV,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAQxD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAuB,EACvB,UAAsB,EAAE;IAExB,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YACzF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC5D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC9D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAuB,CAAC,CAAC;oBAClF,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzD,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;YACH,CAAC;YACD,IACE,OAAO,CAAC,MAAM,KAAK,KAAK;gBACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAC7D,CAAC;gBACD,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,2FAA2F;YAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,MAAM,OAAO,GAAG,IAAI;gBAClB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1E,IAAI,KAAK,SAAS;gBACpB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,IAAI,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;gBACpE,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;gBACnE,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;gBAClE,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;gBACzE,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;gBACxE,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;gBACpE,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO;YACpE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBACnE,MAAM,KAAK,GAAG,CAAC;qBACZ,MAAM,EAAE;qBACR,KAAK,CAAC,2BAA2B,CAAC;qBAClC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,CACnC,QAAQ,KAAK,yBAAyB,EACtC,IAAI,EACJ,sBAAsB,CACvB,CAAC;gBACF,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC7D,MAAM,aAAa,GAAG,eAAe,CACnC,MAAM,EACN,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACvD,CAAC;gBACF,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAChD,UAAU,EAAE,aAAa,CAAC,KAAK;oBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;oBACpC,IAAI,EAAE,CAAC,aAAa,CAAC;oBACrB,wBAAwB,EAAE,SAAS;iBACpC,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,IACE,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC9C,KAAK,EAAE,SAAS;gBAChB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;aACpE,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,+DAA+D,CAAC,IAAI,CACnF,GAAG,CAAC,QAAQ,CACb,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC5C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;oBACzC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;oBACzC,qBAAqB,EAAE,mCAAmC,QAAQ,CAAC,CAAC,CAAC,UAAU;oBAC/E,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;iBACzC,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3E,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACtD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAc,EAAE,CAAC;gBAC3B,IAAI,KAAK,EAAE,MAAM,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjD,KAAK,EAAE,uCAAuC;iBAC/C,CAAC,EAAE,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,SAAS,CAAC,UAAU;wBAC3B,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;wBAC7B,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;wBAC5C,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE;qBAC7C,CAAC,CAAC;oBACH,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;wBAAE,MAAM;gBAClC,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3E,KAAK,MAAM,QAAQ,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtD,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,QAAQ,CAAC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO;YACvF,IAAI,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO;YACxF,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/archive.d.ts

@@ -0,0 +1,14 @@
+export interface ExtractArchiveOptions {
+    readonly allowSymlinks?: boolean;
+    readonly signal?: AbortSignal;
+    /** Entry cap; defaults to MAX_ARCHIVE_ENTRIES for untrusted outer bundles. */
+    readonly maxEntries?: number;
+}
+/**
+ * Options for the repository snapshots SelfBench itself renders into a bundle
+ * (`environment/repo.tar.gz`, `tests/repo.tar.gz`). Real repositories exceed the
+ * outer-bundle entry cap, so only the unpacked-size cap applies.
+ */
+export declare const REPOSITORY_SNAPSHOT_ARCHIVE_OPTIONS: ExtractArchiveOptions;
+export declare function extractRegularArchive(archive: string, destination: string, options?: ExtractArchiveOptions): Promise<void>;
+//# sourceMappingURL=archive.d.ts.map

package/dist/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../src/archive.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,EAAE,qBAGjD,CAAC;AAEF,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAoDf"}

package/dist/archive.js

@@ -0,0 +1,114 @@
+import { lstat, readdir, readlink } from "node:fs/promises";
+import { join, posix } from "node:path";
+import { runCommand } from "./process.js";
+const MAX_ARCHIVE_ENTRIES = 20_000;
+const MAX_ARCHIVE_UNPACKED_BYTES = 10 * 1024 * 1024 * 1024;
+/**
+ * Options for the repository snapshots SelfBench itself renders into a bundle
+ * (`environment/repo.tar.gz`, `tests/repo.tar.gz`). Real repositories exceed the
+ * outer-bundle entry cap, so only the unpacked-size cap applies.
+ */
+export const REPOSITORY_SNAPSHOT_ARCHIVE_OPTIONS = {
+    allowSymlinks: true,
+    maxEntries: Number.POSITIVE_INFINITY,
+};
+export async function extractRegularArchive(archive, destination, options = {}) {
+    const [names, verbose] = await Promise.all([
+        runCommand("tar", ["-tzf", archive], options.signal ? { signal: options.signal } : {}),
+        runCommand("tar", ["-tvzf", archive], options.signal ? { signal: options.signal } : {}),
+    ]);
+    const paths = outputLines(names.stdout);
+    const entries = outputLines(verbose.stdout);
+    if (paths.length !== entries.length) {
+        throw new Error("archive listing is ambiguous");
+    }
+    const maxEntries = options.maxEntries ?? MAX_ARCHIVE_ENTRIES;
+    if (paths.length === 0 || paths.length > maxEntries) {
+        throw new Error(`archive must contain between 1 and ${maxEntries} entries`);
+    }
+    const normalized = new Set();
+    const symlinks = new Set();
+    let unpackedBytes = 0;
+    for (let index = 0; index < paths.length; index += 1) {
+        const path = paths[index];
+        const entry = entries[index];
+        const allowedTypes = options.allowSymlinks ? ["-", "d", "l"] : ["-", "d"];
+        if (!path || !entry || !allowedTypes.includes(entry[0] ?? "")) {
+            throw new Error(`archive contains an unsupported entry: ${path ?? "unknown"}`);
+        }
+        unpackedBytes += archiveEntrySize(entry);
+        if (unpackedBytes > MAX_ARCHIVE_UNPACKED_BYTES) {
+            throw new Error(`archive expands beyond ${MAX_ARCHIVE_UNPACKED_BYTES} bytes`);
+        }
+        const safePath = normalizeArchivePath(path);
+        if (normalized.has(safePath)) {
+            throw new Error(`archive repeats path ${safePath}`);
+        }
+        if ([...symlinks].some((link) => safePath.startsWith(`${link}/`))) {
+            throw new Error(`archive writes through symbolic link ${safePath}`);
+        }
+        if (entry[0] === "l") {
+            if ([...normalized].some((existing) => existing.startsWith(`${safePath}/`))) {
+                throw new Error(`archive replaces a directory with symbolic link ${safePath}`);
+            }
+            validateLinkTarget(safePath, verboseLinkTarget(entry, safePath));
+            symlinks.add(safePath);
+        }
+        normalized.add(safePath);
+    }
+    await runCommand("tar", ["-xzf", archive, "--no-same-owner", "-C", destination], options.signal ? { signal: options.signal } : {});
+    await assertExtractedTreeIsRegular(destination, options.allowSymlinks ?? false);
+}
+function normalizeArchivePath(path) {
+    if (path.includes("\0") || path.startsWith("/") || path.split("/").includes("..")) {
+        throw new Error(`archive path escapes destination: ${path}`);
+    }
+    const normalized = posix.normalize(path.replace(/^\.\/+/, ""));
+    if (!normalized || normalized === ".." || normalized.startsWith("../")) {
+        throw new Error(`archive path escapes destination: ${path}`);
+    }
+    return normalized;
+}
+async function assertExtractedTreeIsRegular(root, allowSymlinks) {
+    for (const entry of await readdir(root, { recursive: true, withFileTypes: true })) {
+        const path = join(entry.parentPath, entry.name);
+        const stats = await lstat(path);
+        if (stats.isSymbolicLink() && allowSymlinks) {
+            const relative = posix.relative(root, path);
+            validateLinkTarget(relative, await readlink(path));
+            continue;
+        }
+        if (!stats.isFile() && !stats.isDirectory()) {
+            throw new Error(`archive extracted an unsupported entry: ${entry.name}`);
+        }
+    }
+}
+function archiveEntrySize(entry) {
+    const fields = entry.trim().split(/\s+/);
+    const index = /^\d+$/.test(fields[1] ?? "") ? 4 : 2;
+    const size = Number(fields[index]);
+    if (!Number.isSafeInteger(size) || size < 0) {
+        throw new Error("archive entry has an invalid size");
+    }
+    return size;
+}
+function verboseLinkTarget(entry, path) {
+    const separator = entry.lastIndexOf(" -> ");
+    if (separator < 0) {
+        throw new Error(`archive symbolic link has no target: ${path}`);
+    }
+    return entry.slice(separator + 4);
+}
+function validateLinkTarget(path, target) {
+    const resolved = posix.resolve("/archive", posix.dirname(path), target);
+    if (target.startsWith("/") || (resolved !== "/archive" && !resolved.startsWith("/archive/"))) {
+        throw new Error(`archive symbolic link escapes destination: ${path} -> ${target}`);
+    }
+}
+function outputLines(value) {
+    return value
+        .split("\n")
+        .map((line) => line.trimEnd())
+        .filter(Boolean);
+}
+//# sourceMappingURL=archive.js.map

package/dist/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../src/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAS3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,aAAa,EAAE,IAAI;IACnB,UAAU,EAAE,MAAM,CAAC,iBAAiB;CACrC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,WAAmB,EACnB,UAAiC,EAAE;IAEnC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,UAAU,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,UAAU,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,aAAa,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,aAAa,GAAG,0BAA0B,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,0BAA0B,QAAQ,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,UAAU,CACd,KAAK,EACL,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,CAAC,EACvD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;IACF,MAAM,4BAA4B,CAAC,WAAW,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,aAAsB;IAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,IAAY;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAc;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;SAC7B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/artifacts/common.d.ts

@@ -0,0 +1,15 @@
+import { Readable } from "node:stream";
+import type { ArtifactRef } from "../contracts.js";
+export declare function verifiedArtifactReadStream(reference: ArtifactRef, input: Readable): Readable;
+export declare function copyWithDigest(sourcePath: string, destinationPath: string): Promise<{
+    sha256: string;
+    sizeBytes: number;
+}>;
+export declare function fileDigest(path: string): Promise<{
+    sha256: string;
+    sizeBytes: number;
+}>;
+export declare function hasCode(error: unknown, code: string): boolean;
+export declare function isNotFound(error: unknown): boolean;
+export declare function verifyArtifact(reference: ArtifactRef, value: Uint8Array): void;
+//# sourceMappingURL=common.d.ts.map

package/dist/artifacts/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/artifacts/common.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGnD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAgB5F;AAED,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBhD;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAS7F;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAElD;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAI9E"}

package/dist/artifacts/common.js

@@ -0,0 +1,58 @@
+import { createHash } from "node:crypto";
+import { createReadStream, createWriteStream } from "node:fs";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { sha256 } from "../hash.js";
+export function verifiedArtifactReadStream(reference, input) {
+    return Readable.from((async function* () {
+        const hash = createHash("sha256");
+        let sizeBytes = 0;
+        for await (const chunk of input) {
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            hash.update(bytes);
+            sizeBytes += bytes.byteLength;
+            yield bytes;
+        }
+        if (sizeBytes !== reference.sizeBytes || hash.digest("hex") !== reference.sha256) {
+            throw new Error(`artifact integrity check failed: ${reference.uri}`);
+        }
+    })());
+}
+export async function copyWithDigest(sourcePath, destinationPath) {
+    const hash = createHash("sha256");
+    let sizeBytes = 0;
+    const hasher = new Transform({
+        transform(chunk, _encoding, callback) {
+            hash.update(chunk);
+            sizeBytes += chunk.byteLength;
+            callback(undefined, chunk);
+        },
+    });
+    await pipeline(createReadStream(sourcePath), hasher, createWriteStream(destinationPath, { flags: "wx", mode: 0o600 }));
+    return { sha256: hash.digest("hex"), sizeBytes };
+}
+export async function fileDigest(path) {
+    const hash = createHash("sha256");
+    let sizeBytes = 0;
+    for await (const chunk of createReadStream(path)) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        hash.update(bytes);
+        sizeBytes += bytes.byteLength;
+    }
+    return { sha256: hash.digest("hex"), sizeBytes };
+}
+export function hasCode(error, code) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === code);
+}
+export function isNotFound(error) {
+    return hasCode(error, "ENOENT");
+}
+export function verifyArtifact(reference, value) {
+    if (value.byteLength !== reference.sizeBytes || sha256(value) !== reference.sha256) {
+        throw new Error(`artifact integrity check failed: ${reference.uri}`);
+    }
+}
+//# sourceMappingURL=common.js.map

package/dist/artifacts/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/artifacts/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,MAAM,UAAU,0BAA0B,CAAC,SAAsB,EAAE,KAAe;IAChF,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,KAAK,SAAS,CAAC;QACd,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;YAC9B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,EAAE,CACL,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,eAAuB;IAEvB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;YAC9B,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,CACZ,gBAAgB,CAAC,UAAU,CAAC,EAC5B,MAAM,EACN,iBAAiB,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CACjE,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAc,EAAE,IAAY;IAClD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA4B,CAAC,IAAI,KAAK,IAAI,CAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,KAAiB;IACtE,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC"}

package/dist/artifacts/gcs.d.ts

@@ -0,0 +1,18 @@
+import type { Readable } from "node:stream";
+import type { ArtifactRef } from "../contracts.js";
+import type { ArtifactEntry, ArtifactStore } from "./types.js";
+export declare class GcsArtifactStore implements ArtifactStore {
+    #private;
+    constructor(bucket: string, prefix: string);
+    put(key: string, value: Uint8Array, contentType: string): Promise<ArtifactRef>;
+    putFile(key: string, sourcePath: string, contentType: string): Promise<ArtifactRef>;
+    get(reference: ArtifactRef): Promise<Uint8Array>;
+    signedReadUrl(reference: ArtifactRef, ttlMs: number): Promise<string>;
+    openRead(reference: ArtifactRef): Promise<Readable>;
+    getByKey(key: string): Promise<Uint8Array | undefined>;
+    openReadByKey(key: string, options?: {
+        readonly start?: number;
+    }): Promise<Readable | undefined>;
+    list(prefix: string): Promise<ArtifactEntry[]>;
+}
+//# sourceMappingURL=gcs.d.ts.map