smol-symphony 0.3.0 → 0.3.2

package/dist/tests/shell/gondolin-dispatch-shquote.test.js

@@ -1,168 +0,0 @@
-// Focused tests for the shell-injection fix: host-controlled guest paths /
-// adapter names interpolated into a `/bin/sh -c '…'` guest script must be
-// shell-quoted (shQuote) so a value containing a single quote cannot break out of
-// the single quotes and inject commands into the guest. Covers BOTH interpolation
-// sites: writeFileCommand (staging) and the dispatcher's BYO probe script.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import { mkdtemp, mkdir, rm, readFile, access, writeFile, chmod } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { Readable } from 'node:stream';
-import { shQuote, writeFileCommand } from '../../src/shell/adapter/gondolin-dispatch-helpers.js';
-import { GondolinDispatcher } from '../../src/shell/adapter/gondolin-dispatch.js';
-import { buildByoProbeScript, miseInstallFailureMessage, hasProjectMiseConfig, } from '../../src/core/runner/mise.js';
-const run = promisify(execFile);
-test('shQuote escapes an embedded single quote with the close-escape-reopen trick', () => {
-    assert.equal(shQuote('plain'), `'plain'`);
-    assert.equal(shQuote(`a'b`), `'a'\\''b'`);
-    // A naive interpolation would let `'; touch X; '` break out — shQuote keeps it a literal.
-    assert.equal(shQuote(`'; touch X; '`), `''\\''; touch X; '\\'''`);
-});
-test('writeFileCommand stages to a guest path containing a single quote WITHOUT injecting', async () => {
-    const dir = await mkdtemp(path.join(os.tmpdir(), 'symphony-shq-'));
-    try {
-        // A guest path with a single quote AND an injection payload. Pre-fix this broke
-        // out of the single quotes and `touch INJECTED` would have run.
-        const evilPath = path.join(dir, `wo'rk`, `; touch ${path.join(dir, 'INJECTED')} #`, 'file.txt');
-        const [shBin, dashC, script] = writeFileCommand({ guestPath: evilPath, content: 'hello-content', mode: 0o644 });
-        assert.equal(shBin, '/bin/sh');
-        assert.equal(dashC, '-c');
-        assert.ok(typeof script === 'string');
-        // Run the produced script through a REAL /bin/sh. It must land the content at the
-        // exact (quoted) path and must NOT create the injection sentinel.
-        await run('/bin/sh', ['-c', script], { cwd: dir });
-        assert.equal(await readFile(evilPath, 'utf8'), 'hello-content', 'content landed at the exact quoted path');
-        await assert.rejects(access(path.join(dir, 'INJECTED')), 'no injection sentinel was created');
-    }
-    finally {
-        await rm(dir, { recursive: true, force: true });
-    }
-});
-// ─── Probe-script injection coverage (gondolin-dispatch.ts) ──────────────────────
-const egress = {
-    httpHooks: {},
-    secretManager: {},
-    secretName: 'ANTHROPIC_AUTH_TOKEN',
-    adapterId: 'claude',
-};
-const identityRealpath = async (p) => p;
-const noopRegistry = { register: async () => ({ deregister: () => undefined }) };
-const noopLog = { emit: () => undefined, withIssue: () => noopLog };
-// Pass-through probe message mapper (we never reach a probe failure in these tests).
-const probeMsg = (code) => `probe failed ${code}`;
-function planWith(guestLauncherPath) {
-    return {
-        sessionLabel: 'symphony-test',
-        imagePath: '/img',
-        cpus: 1,
-        memMib: 512,
-        rootfsSize: '3G',
-        mounts: [{ host: '/srv/work', guest: '/work', readonly: false }],
-        env: {},
-        guestFiles: [{ guestPath: guestLauncherPath, content: 'launcher', mode: 0o755 }],
-        agentCommand: ['node', guestLauncherPath],
-        tunnel: { mcpGuestBaseUrl: 'http://m', acpWsGuestUrl: 'ws://m/acp', tcpHostEntry: {} },
-        allowWebSockets: false,
-        // Empty prep/install commands so those steps are no-op execs — this test exercises
-        // the shell-injection quoting of the probe script, not mise provisioning. The probe
-        // resolves node via `mise which node` (issue 233 made mise the only path); the test's
-        // fake `mise` on PATH echoes the fake `node`'s path for `which node`.
-        mise: { env: {}, prepCommand: [], installCommand: [] },
-    };
-}
-// A fake VmExec backed by a real /bin/sh run of the script the dispatcher emits, so
-// the probe (and stage) scripts are exercised exactly as the guest would run them.
-function execViaRealSh(opts, sandboxRoot, fakeBinDir) {
-    // The dispatcher always invokes /bin/sh -c <script>; run that script for real with
-    // PATH pointed at our fake node/adapter bin dir so `command -v` resolves.
-    const script = opts.command[0] === '/bin/sh' ? (opts.command[2] ?? '') : opts.command.join(' ');
-    const env = { ...process.env, ...opts.env, PATH: `${fakeBinDir}:${process.env.PATH ?? ''}` };
-    // A live Readable the probe taps via `'data'`; we push the real /bin/sh stdout
-    // onto it once the run completes, then end it (matching runBoundedExec's contract).
-    const stdout = new Readable({ read() { } });
-    let resolveExit;
-    const exit = new Promise((r) => { resolveExit = r; });
-    const finish = (out, code) => {
-        if (out.length > 0)
-            stdout.push(out);
-        stdout.push(null);
-        resolveExit({ code, signal: null });
-    };
-    run('/bin/sh', ['-c', script], { cwd: sandboxRoot, env })
-        .then(({ stdout: out }) => finish(out, 0))
-        .catch((err) => finish(typeof err.stdout === 'string' ? err.stdout : '', typeof err.code === 'number' ? err.code : 1));
-    return {
-        stdin: { write: () => undefined, end: () => undefined },
-        stdout,
-        stderr: new Readable({ read() { this.push(null); } }),
-        pid: 1,
-        exit,
-        kill: () => undefined,
-    };
-}
-test('the BYO probe script is injection-safe for a launcher path containing a single quote', async () => {
-    const sandbox = await mkdtemp(path.join(os.tmpdir(), 'symphony-probe-'));
-    const fakeBin = path.join(sandbox, 'bin');
-    await mkdir(fakeBin, { recursive: true });
-    // Fake `node` that satisfies `command -v node` AND the `typeof WebSocket==="function"`
-    // check (exit 0), and a fake `claude` adapter on PATH.
-    await writeFile(path.join(fakeBin, 'node'), '#!/bin/sh\nexit 0\n', 'utf8');
-    await writeFile(path.join(fakeBin, 'claude'), '#!/bin/sh\nexit 0\n', 'utf8');
-    // Fake `mise` so the probe's `mise which node` resolves the fake node on PATH (issue
-    // 233 made mise the only node-resolution path); any other invocation is a no-op exit 0.
-    await writeFile(path.join(fakeBin, 'mise'), '#!/bin/sh\n[ "$1" = "which" ] && command -v "$2"\nexit 0\n', 'utf8');
-    await chmod(path.join(fakeBin, 'node'), 0o755);
-    await chmod(path.join(fakeBin, 'claude'), 0o755);
-    await chmod(path.join(fakeBin, 'mise'), 0o755);
-    // A launcher path with a single quote AND an injection payload. test -f must treat
-    // it as ONE literal path (which we create) — and the payload must NOT run.
-    const evilDir = path.join(sandbox, `la'unch; touch ${path.join(sandbox, 'PWNED')} #`);
-    await mkdir(evilDir, { recursive: true });
-    const launcherPath = path.join(evilDir, 'vm-agent.mjs');
-    await writeFile(launcherPath, 'x', 'utf8');
-    let probeScript = '';
-    const vm = {
-        id: 'vm-1',
-        exec: (opts) => {
-            // Stage writes return code 0; the probe is the /bin/sh script with `command -v`.
-            const script = opts.command[0] === '/bin/sh' ? (opts.command[2] ?? '') : '';
-            if (script.includes('command -v'))
-                probeScript = script;
-            return execViaRealSh(opts, sandbox, fakeBin);
-        },
-        close: async () => undefined,
-    };
-    const vmClient = {
-        createVm: async () => vm,
-        listSessions: async () => [],
-        gc: async () => 0,
-        killAllVms: () => 0,
-    };
-    const dispatcher = new GondolinDispatcher(vmClient, noopRegistry, () => undefined, identityRealpath, probeMsg, 
-    // The real core probe-script builder so the shQuote interpolation is exercised
-    // exactly as the guest would run it (resolving node via the fake `mise which node`).
-    buildByoProbeScript, miseInstallFailureMessage, hasProjectMiseConfig, noopLog);
-    const opts = {
-        plan: planWith(launcherPath),
-        launchEnv: {},
-        adapterBin: 'claude',
-        workdir: sandbox,
-        egress,
-        onStderr: () => undefined,
-    };
-    // dispatch must succeed (probe passes against the real launcher) — proving the
-    // quoted `test -f '<path>'` resolved the literal path.
-    const handle = await dispatcher.dispatch(opts);
-    await handle.teardown();
-    // The probe script must contain the SHELL-QUOTED launcher path (close-escape-reopen),
-    // never the raw value sitting unescaped between single quotes.
-    assert.ok(probeScript.includes(shQuote(launcherPath)), 'probe interpolates the shQuoted launcher path');
-    assert.ok(!probeScript.includes(`test -f '${launcherPath}'`), 'raw unescaped interpolation must not appear');
-    // And the injection payload must NOT have run.
-    await assert.rejects(access(path.join(sandbox, 'PWNED')), 'no injection sentinel created by the probe');
-    await rm(sandbox, { recursive: true, force: true });
-});
-//# sourceMappingURL=gondolin-dispatch-shquote.test.js.map

package/dist/tests/shell/gondolin-dispatch-shquote.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gondolin-dispatch-shquote.test.js","sourceRoot":"","sources":["../../../tests/shell/gondolin-dispatch-shquote.test.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0EAA0E;AAC1E,kFAAkF;AAClF,kFAAkF;AAClF,2EAA2E;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAUvC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC,IAAI,CAAC,6EAA6E,EAAE,GAAG,EAAE;IACvF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,0FAA0F;IAC1F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;IACrG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,gFAAgF;QAChF,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChH,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC;QAEtC,kFAAkF;QAClF,kEAAkE;QAClE,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,eAAe,EAAE,yCAAyC,CAAC,CAAC;QAC3G,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAChG,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,oFAAoF;AAEpF,MAAM,MAAM,GAA2B;IACrC,SAAS,EAAE,EAAW;IACtB,aAAa,EAAE,EAAW;IAC1B,UAAU,EAAE,sBAAsB;IAClC,SAAS,EAAE,QAAQ;CACpB,CAAC;AACF,MAAM,gBAAgB,GAAyB,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9D,MAAM,YAAY,GAAmB,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;AACjG,MAAM,OAAO,GAAY,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,EAAwB,CAAC;AACnG,qFAAqF;AACrF,MAAM,QAAQ,GAAG,CAAC,IAAmB,EAAU,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC;AAEzE,SAAS,QAAQ,CAAC,iBAAyB;IACzC,OAAO;QACL,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChE,GAAG,EAAE,EAAE;QACP,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAChF,YAAY,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACzC,MAAM,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;QACtF,eAAe,EAAE,KAAK;QACtB,mFAAmF;QACnF,oFAAoF;QACpF,sFAAsF;QACtF,sEAAsE;QACtE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,mFAAmF;AACnF,SAAS,aAAa,CAAC,IAAmB,EAAE,WAAmB,EAAE,UAAkB;IACjF,mFAAmF;IACnF,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;IAC7F,+EAA+E;IAC/E,oFAAoF;IACpF,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,KAAuB,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,WAAyE,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,OAAO,CAAiD,CAAC,CAAC,EAAE,EAAE,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,IAAY,EAAQ,EAAE;QACjD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;SACtD,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;SACzC,KAAK,CAAC,CAAC,GAA+D,EAAE,EAAE,CACzE,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,OAAO;QACL,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;QACvD,MAAM;QACN,MAAM,EAAE,IAAI,QAAQ,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,EAAE,CAAC;QACN,IAAI;QACJ,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,uFAAuF;IACvF,uDAAuD;IACvD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC7E,qFAAqF;IACrF,wFAAwF;IACxF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,4DAA4D,EAAE,MAAM,CAAC,CAAC;IAClH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAE/C,mFAAmF;IACnF,2EAA2E;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE3C,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,EAAE,GAAa;QACnB,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YACb,iFAAiF;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,WAAW,GAAG,MAAM,CAAC;YACxD,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC7B,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;QACxB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;QAC5B,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACjB,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;KACG,CAAC;IAEzB,MAAM,UAAU,GAAG,IAAI,kBAAkB,CACvC,QAAQ,EACR,YAAY,EACZ,GAAG,EAAE,CAAC,SAAS,EACf,gBAAgB,EAChB,QAAQ;IACR,+EAA+E;IAC/E,qFAAqF;IACrF,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,OAAO,CACR,CAAC;IACF,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC;QAC5B,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,OAAO;QAChB,MAAM;QACN,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;KAC1B,CAAC;IAEF,+EAA+E;IAC/E,uDAAuD;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;IAExB,sFAAsF;IACtF,+DAA+D;IAC/D,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,+CAA+C,CAAC,CAAC;IACxG,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,YAAY,GAAG,CAAC,EAAE,6CAA6C,CAAC,CAAC;IAC7G,+CAA+C;IAC/C,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,4CAA4C,CAAC,CAAC;IAExG,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC"}

package/dist/tests/shell/gondolin-image-converter.test.js

@@ -1,208 +0,0 @@
-// Unit tests for the OCI→gondolin converter (src/shell/adapter/gondolin-image-converter.ts).
-//
-// The real conversion needs docker + /dev/kvm and is validated host-manually (it
-// cannot run inside the dispatched VM). Here we inject a stub ConverterDeps bundle —
-// an in-memory gondolin image store keyed by cache ref — and assert the FCIS-testable
-// behaviour: the cache key is the resolved OCI digest (+ overlay version), a miss
-// builds + tags exactly once, and a second call for the same digest is a no-op
-// (`cached: true`, no rebuild). No docker.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { ensureConvertedImage, probeConvertedImage, resolveDigestForPolicy, cacheRefFor, } from '../../src/shell/adapter/gondolin-image-converter.js';
-/** A stub ConverterDeps over an in-memory store; records build calls + the configs built. */
-function makeDeps(opts) {
-    const store = new Map(); // cacheRef → buildId
-    const builtConfigs = [];
-    const digestPolicies = [];
-    let buildCount = 0;
-    const deps = {
-        resolveOciDigest: (_ref, _runtime, pullPolicy) => {
-            digestPolicies.push(pullPolicy);
-            return opts.digest;
-        },
-        resolveImageSelector: (selector) => {
-            const buildId = store.get(selector);
-            if (!buildId)
-                throw new Error(`not in store: ${selector}`);
-            return { source: 'ref', selector, assetDir: `/store/${buildId}`, buildId };
-        },
-        buildAssets: async (config) => {
-            buildCount += 1;
-            builtConfigs.push(config);
-            return { outputDir: '/tmp/out', manifestPath: '/tmp/out/manifest.json', manifest: {} };
-        },
-        importImageFromDirectory: (assetDir) => ({ buildId: 'build-xyz', arch: 'x86_64', assetDir, created: true }),
-        setImageRef: (reference, buildId) => {
-            store.set(reference, buildId);
-            return null;
-        },
-        defaultBuildConfig: () => ({ arch: 'x86_64', distro: 'alpine' }),
-        mkOutputDir: () => '/tmp/out',
-    };
-    return { deps, builds: () => buildCount, builtConfigs, digestPolicies, store };
-}
-test('ensureConvertedImage: a cache miss builds + tags by digest, returns cached:false', async () => {
-    const digest = 'sha256:abc123def456';
-    const { deps, builds, builtConfigs, digestPolicies, store } = makeDeps({ digest });
-    const r = await ensureConvertedImage('ghcr.io/acme/agent:1', { pullPolicy: 'if-not-present', deps });
-    assert.equal(r.cached, false);
-    assert.equal(r.buildId, 'build-xyz');
-    // The runtime selector the cached asset boots with (the build id when known) — the
-    // reconcile loop threads this into the VmPlan when `gondolin.image` is unset (#206).
-    assert.equal(r.selector, 'build-xyz');
-    assert.equal(builds(), 1);
-    // The OCI ref is threaded into the build config's oci source.
-    assert.equal(builtConfigs[0].oci?.image, 'ghcr.io/acme/agent:1');
-    // The FULL pull policy is preserved into the digest resolver (not reduced to a
-    // pull/skip boolean) so `always`/`never` are honored when computing the cache key.
-    assert.deepEqual(digestPolicies, ['if-not-present']);
-    // `buildAssets` is always asked to convert the LOCAL image (`if-not-present`),
-    // regardless of the operator's policy: the policy's pull already ran in the digest
-    // resolve, so the local ref IS `digest` and the asset is built from exactly the
-    // digest we keyed the cache on — never a freshly re-pulled, different digest.
-    assert.equal(builtConfigs[0].oci?.pullPolicy, 'if-not-present');
-    // It was tagged under the digest+overlay cache ref.
-    assert.ok(store.has(cacheRefFor(digest)));
-});
-test('ensureConvertedImage: an `always` policy is preserved into the digest resolver and keys the post-pull digest', async () => {
-    // The operator asked for `always`: the digest resolver must receive `always`
-    // (so it re-pulls even when present) and the digest IT returns — the post-pull
-    // digest — is what keys the cache. `buildAssets` still converts that local image.
-    const digest = 'sha256:postpull';
-    const { deps, builds, builtConfigs, digestPolicies, store } = makeDeps({ digest });
-    const r = await ensureConvertedImage('repo:latest', { pullPolicy: 'always', deps });
-    assert.equal(r.cached, false);
-    assert.deepEqual(digestPolicies, ['always']);
-    assert.equal(builtConfigs[0].oci?.pullPolicy, 'if-not-present');
-    assert.ok(store.has(cacheRefFor(digest)));
-    assert.equal(builds(), 1);
-});
-test('ensureConvertedImage: a second call for the same digest is a no-op (cached:true, no rebuild)', async () => {
-    const digest = 'sha256:abc123def456';
-    const { deps, builds } = makeDeps({ digest });
-    const first = await ensureConvertedImage('ghcr.io/acme/agent:1', { deps });
-    assert.equal(first.cached, false);
-    assert.equal(builds(), 1);
-    // Same digest resolves on the second call → cache hit, build NOT re-run.
-    const second = await ensureConvertedImage('ghcr.io/acme/agent:1', { deps });
-    assert.equal(second.cached, true);
-    assert.equal(second.buildId, 'build-xyz');
-    // The cache hit still resolves the runtime selector (no rebuild) so dispatch can boot it.
-    assert.equal(second.selector, 'build-xyz');
-    assert.equal(builds(), 1);
-});
-test('ensureConvertedImage: a cache hit with no known build id falls the selector back to the asset dir', async () => {
-    // A resolved asset whose content-derived build id is unknown still yields a usable
-    // runtime selector — the asset directory (a `path` selector), never empty (#206).
-    const digest = 'sha256:nobuild';
-    const { deps } = makeDeps({ digest });
-    const noBuildIdDeps = {
-        ...deps,
-        resolveImageSelector: (selector) => ({ source: 'ref', selector, assetDir: '/store/asset-dir' }),
-    };
-    const r = await ensureConvertedImage('ghcr.io/acme/agent:1', { deps: noBuildIdDeps });
-    assert.equal(r.cached, true);
-    assert.equal(r.buildId, '');
-    assert.equal(r.selector, '/store/asset-dir');
-});
-test('ensureConvertedImage: caches on the DIGEST, not the ref string (a re-tagged image reconverts)', async () => {
-    // Same ref string, different underlying digest → distinct cache refs → a rebuild.
-    const d1 = makeDeps({ digest: 'sha256:1111' });
-    await ensureConvertedImage('repo:latest', { deps: d1.deps });
-    // A new converter view whose digest changed (the tag moved) must build afresh.
-    const d2 = makeDeps({ digest: 'sha256:2222' });
-    // Seed d2's store with the OLD digest's ref to prove only the matching digest hits.
-    d2.store.set(cacheRefFor('sha256:1111'), 'old-build');
-    const r = await ensureConvertedImage('repo:latest', { deps: d2.deps });
-    assert.equal(r.cached, false);
-    assert.equal(d2.builds(), 1);
-});
-test('probeConvertedImage: converted=true when a cached asset resolves; false otherwise', () => {
-    const digest = 'sha256:abc123def456';
-    const { deps, digestPolicies, store } = makeDeps({ digest });
-    // Nothing tagged yet → not converted, but locally resolvable (digest read ok).
-    // The probe carries the resolved digest + a null selector (no cached asset).
-    assert.deepEqual(probeConvertedImage('ghcr.io/acme/agent:1', { deps }), {
-        converted: false,
-        locallyResolvable: true,
-        digest,
-        selector: null,
-    });
-    // The read-only probe must NEVER pull — it resolves the CURRENT local digest with
-    // the `never` policy so it stays cheap enough for the hot poll path.
-    assert.deepEqual(digestPolicies, ['never']);
-    // Tag the cache ref → converted; the probe now carries the runtime selector
-    // (the build id) the reconcile loop boots the cached asset with (#206 rework).
-    store.set(cacheRefFor(digest), 'build-xyz');
-    assert.deepEqual(probeConvertedImage('ghcr.io/acme/agent:1', { deps }), {
-        converted: true,
-        locallyResolvable: true,
-        digest,
-        selector: 'build-xyz',
-    });
-});
-test('probeConvertedImage: an unresolvable digest reports neither converted nor resolvable', () => {
-    const deps = {
-        ...makeDeps({ digest: 'sha256:x' }).deps,
-        resolveOciDigest: () => {
-            throw new Error('not present locally');
-        },
-    };
-    assert.deepEqual(probeConvertedImage('ghcr.io/acme/agent:1', { deps }), {
-        converted: false,
-        locallyResolvable: false,
-        digest: null,
-        selector: null,
-    });
-});
-// ── resolveDigestForPolicy: the pull-policy ordering (docker-free) ──────────────
-//
-// The production runtime resolver shells out to docker/podman, so we test its pure
-// ordering helper directly with injected inspect/pull effects. `inspect`/`pull` here
-// model the local image store: `pull` flips the inspected digest from the stale local
-// one to the registry one, so we can assert which digest each policy keys on.
-/** A fake local image store: `inspect()` returns the current local digest (or null);
- *  `pull()` records a call and sets the local digest to `afterPull`. */
-function fakeRuntime(opts) {
-    let local = opts.localBeforePull;
-    let pullCount = 0;
-    return {
-        io: {
-            inspect: () => local,
-            pull: () => {
-                pullCount += 1;
-                local = opts.afterPull;
-            },
-        },
-        pulls: () => pullCount,
-    };
-}
-test('resolveDigestForPolicy: `if-not-present` inspects first and skips the pull when present', () => {
-    const rt = fakeRuntime({ localBeforePull: 'sha256:local', afterPull: 'sha256:registry' });
-    const id = resolveDigestForPolicy('if-not-present', rt.io);
-    assert.equal(id, 'sha256:local'); // used the local digest, no pull
-    assert.equal(rt.pulls(), 0);
-});
-test('resolveDigestForPolicy: `if-not-present` pulls on a local miss, then re-inspects', () => {
-    const rt = fakeRuntime({ localBeforePull: null, afterPull: 'sha256:registry' });
-    const id = resolveDigestForPolicy('if-not-present', rt.io);
-    assert.equal(id, 'sha256:registry');
-    assert.equal(rt.pulls(), 1);
-});
-test('resolveDigestForPolicy: `always` pulls even when present and uses the post-pull digest', () => {
-    // The ref IS present locally (a stale digest), but `always` must still pull and key
-    // off the fresh post-pull digest — the bug the reviewer flagged.
-    const rt = fakeRuntime({ localBeforePull: 'sha256:stale', afterPull: 'sha256:fresh' });
-    const id = resolveDigestForPolicy('always', rt.io);
-    assert.equal(id, 'sha256:fresh');
-    assert.equal(rt.pulls(), 1);
-});
-test('resolveDigestForPolicy: `never` does not pull; a local miss resolves to null', () => {
-    const present = fakeRuntime({ localBeforePull: 'sha256:local', afterPull: 'sha256:registry' });
-    assert.equal(resolveDigestForPolicy('never', present.io), 'sha256:local');
-    assert.equal(present.pulls(), 0);
-    const missing = fakeRuntime({ localBeforePull: null, afterPull: 'sha256:registry' });
-    assert.equal(resolveDigestForPolicy('never', missing.io), null);
-    assert.equal(missing.pulls(), 0);
-});
-//# sourceMappingURL=gondolin-image-converter.test.js.map

package/dist/tests/shell/gondolin-image-converter.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gondolin-image-converter.test.js","sourceRoot":"","sources":["../../../tests/shell/gondolin-image-converter.test.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,EAAE;AACF,iFAAiF;AACjF,qFAAqF;AACrF,sFAAsF;AACtF,kFAAkF;AAClF,+EAA+E;AAC/E,2CAA2C;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,WAAW,GAEZ,MAAM,qDAAqD,CAAC;AAS7D,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,IAAwB;IAOxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,qBAAqB;IAC9D,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,IAAI,GAAkB;QAC1B,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE;YAC/C,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,OAAO,EAAE,EAAE,OAAO,EAAmB,CAAC;QAC9F,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC5B,UAAU,IAAI,CAAC,CAAC;YAChB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAA4B,CAAC;QACnH,CAAC;QACD,wBAAwB,EAAE,CAAC,QAAQ,EAAE,EAAE,CACrC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAkB;QACtF,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;YAClC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAgB;QAC/E,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU;KAC9B,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACjF,CAAC;AAED,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,MAAM,GAAG,qBAAqB,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACrC,mFAAmF;IACnF,qFAAqF;IACrF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1B,8DAA8D;IAC9D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAClE,+EAA+E;IAC/E,mFAAmF;IACnF,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,8EAA8E;IAC9E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACjE,oDAAoD;IACpD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8GAA8G,EAAE,KAAK,IAAI,EAAE;IAC9H,6EAA6E;IAC7E,+EAA+E;IAC/E,kFAAkF;IAClF,MAAM,MAAM,GAAG,iBAAiB,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACjE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,MAAM,MAAM,GAAG,qBAAqB,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1B,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,0FAA0F;IAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;IACnH,mFAAmF;IACnF,kFAAkF;IAClF,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,MAAM,aAAa,GAAkB;QACnC,GAAG,IAAI;QACP,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE,CACjC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAkB;KAC/E,CAAC;IACF,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,kFAAkF;IAClF,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/C,MAAM,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/C,oFAAoF;IACpF,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,MAAM,GAAG,qBAAqB,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;QACtE,SAAS,EAAE,KAAK;QAChB,iBAAiB,EAAE,IAAI;QACvB,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,kFAAkF;IAClF,qEAAqE;IACrE,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,+EAA+E;IAC/E,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;QACtE,SAAS,EAAE,IAAI;QACf,iBAAiB,EAAE,IAAI;QACvB,MAAM;QACN,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,MAAM,IAAI,GAAkB;QAC1B,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI;QACxC,gBAAgB,EAAE,GAAG,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;IACF,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;QACtE,SAAS,EAAE,KAAK;QAChB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mFAAmF;AACnF,EAAE;AACF,mFAAmF;AACnF,qFAAqF;AACrF,sFAAsF;AACtF,8EAA8E;AAE9E;wEACwE;AACxE,SAAS,WAAW,CAAC,IAA2D;IAI9E,IAAI,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC;IACjC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,EAAE,EAAE;YACF,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;YACpB,IAAI,EAAE,GAAG,EAAE;gBACT,SAAS,IAAI,CAAC,CAAC;gBACf,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,CAAC;SACF;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,yFAAyF,EAAE,GAAG,EAAE;IACnG,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1F,MAAM,EAAE,GAAG,sBAAsB,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,iCAAiC;IACnE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,sBAAsB,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,GAAG,EAAE;IAClG,oFAAoF;IACpF,iEAAiE;IACjE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvF,MAAM,EAAE,GAAG,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/F,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC"}

package/dist/tests/shell/gondolin-image-fetch.test.js

@@ -1,93 +0,0 @@
-// Unit tests for the managed prebuilt-image fetcher (src/shell/adapter/gondolin-image-fetch.ts).
-//
-// The real fetch needs network + tar/zstd + a Gondolin store and is validated
-// host-manually (a published asset on a clean host). Here we inject a stub FetchDeps
-// over an in-memory store and assert the FCIS-testable behaviour: a cache hit returns
-// WITHOUT downloading; a sha256 mismatch or a digest-less sidecar THROWS before import;
-// a miss downloads → verifies → extracts → imports → tags exactly once.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { ensureFetchedImage, probeFetchedImage } from '../../src/shell/adapter/gondolin-image-fetch.js';
-import { buildManagedImageWiring } from '../../src/core/image/managed-image.js';
-const WIRING = buildManagedImageWiring({ version: '0.3.0', nodeArch: 'x64' });
-const GOOD_SHA = 'a'.repeat(64);
-/** A stub FetchDeps over an in-memory store. `sidecar`/`actualSha`/`extractDir` drive
- *  the verify + extract paths; downloads + imports + tags are recorded. */
-function makeDeps(opts = {}) {
-    const store = new Map();
-    if (opts.seedRef)
-        store.set(opts.seedRef, { buildId: 'cached-bid', assetDir: '/store/cached-bid' });
-    const downloads = [];
-    const imported = [];
-    const tagged = [];
-    const deps = {
-        resolveImageSelector: (sel) => {
-            const v = store.get(sel);
-            if (!v)
-                throw new Error(`not in store: ${sel}`);
-            return { source: 'ref', selector: sel, assetDir: v.assetDir, buildId: v.buildId };
-        },
-        importImageFromDirectory: (dir) => {
-            imported.push(dir);
-            return { buildId: 'fetched-bid', arch: 'x86_64', assetDir: '/store/fetched-bid', created: true };
-        },
-        setImageRef: (ref, buildId, arch) => {
-            tagged.push([ref, buildId, arch]);
-            store.set(ref, { buildId, assetDir: `/store/${buildId}` });
-            return undefined;
-        },
-        downloadToFile: async (url) => {
-            downloads.push(url);
-        },
-        readTextFile: () => opts.sidecar ?? `${GOOD_SHA}  ${WIRING.assetName}`,
-        sha256OfFile: async () => opts.actualSha ?? GOOD_SHA,
-        extractAsset: async () => '/extracted/asset',
-        mkTempDir: () => '/tmp/managed-test',
-    };
-    return { deps, downloads, imported, tagged, store };
-}
-test('cache HIT returns the cached selector WITHOUT downloading', async () => {
-    const r = makeDeps({ seedRef: WIRING.ref });
-    const out = await ensureFetchedImage(WIRING, { deps: r.deps });
-    assert.equal(out.cached, true);
-    assert.equal(out.selector, 'cached-bid');
-    assert.equal(r.downloads.length, 0, 'no download on a cache hit');
-    assert.equal(r.imported.length, 0);
-});
-test('cache MISS downloads → verifies → extracts → imports → tags exactly once', async () => {
-    const r = makeDeps(); // store empty → miss
-    const out = await ensureFetchedImage(WIRING, { deps: r.deps });
-    assert.equal(out.cached, false);
-    assert.equal(out.selector, 'fetched-bid'); // build id wins as the runtime selector
-    assert.deepEqual(r.imported, ['/extracted/asset']);
-    assert.deepEqual(r.tagged, [[WIRING.ref, 'fetched-bid', 'x86_64']]);
-    // Downloaded the asset + its sidecar (one candidate sufficed).
-    assert.equal(r.downloads.length, 2);
-    assert.ok(r.downloads[0].endsWith(WIRING.assetName));
-    assert.ok(r.downloads[1].endsWith(`${WIRING.assetName}.sha256`));
-});
-test('a sha256 MISMATCH throws loudly and never imports', async () => {
-    const r = makeDeps({ actualSha: 'b'.repeat(64) }); // sidecar says GOOD_SHA, file hashes differently
-    await assert.rejects(() => ensureFetchedImage(WIRING, { deps: r.deps }), /sha256 mismatch/);
-    assert.equal(r.imported.length, 0);
-    assert.equal(r.tagged.length, 0);
-});
-test('a digest-less / malformed sidecar throws before import', async () => {
-    const r = makeDeps({ sidecar: 'not-a-digest\n' });
-    await assert.rejects(() => ensureFetchedImage(WIRING, { deps: r.deps }), /missing or malformed/);
-    assert.equal(r.imported.length, 0);
-});
-test('all candidates failing to download surfaces an aggregate error', async () => {
-    const r = makeDeps();
-    r.deps.downloadToFile = async (url) => {
-        throw new Error(`404 ${url}`);
-    };
-    await assert.rejects(() => ensureFetchedImage(WIRING, { deps: r.deps }), /no published asset found/);
-});
-test('probeFetchedImage is read-only: cached → {digest,selector}; miss → nulls', () => {
-    const hit = makeDeps({ seedRef: WIRING.ref });
-    assert.deepEqual(probeFetchedImage(WIRING, { deps: hit.deps }), { digest: 'cached-bid', selector: 'cached-bid' });
-    const miss = makeDeps();
-    assert.deepEqual(probeFetchedImage(WIRING, { deps: miss.deps }), { digest: null, selector: null });
-});
-//# sourceMappingURL=gondolin-image-fetch.test.js.map

package/dist/tests/shell/gondolin-image-fetch.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gondolin-image-fetch.test.js","sourceRoot":"","sources":["../../../tests/shell/gondolin-image-fetch.test.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,EAAE;AACF,8EAA8E;AAC9E,qFAAqF;AACrF,sFAAsF;AACtF,wFAAwF;AACxF,wEAAwE;AAExE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAkB,MAAM,iDAAiD,CAAC;AACxH,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAE,CAAC;AAC/E,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAUhC;2EAC2E;AAC3E,SAAS,QAAQ,CAAC,OAAmE,EAAE;IACrF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiD,CAAC;IACvE,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACpG,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,MAAM,IAAI,GAAc;QACtB,oBAAoB,EAAE,CAAC,GAAG,EAAiB,EAAE;YAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpF,CAAC;QACD,wBAAwB,EAAE,CAAC,GAAG,EAAiB,EAAE;YAC/C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnG,CAAC;QACD,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAc,CAAC,CAAC,CAAC;YAC5C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,QAAQ,KAAK,MAAM,CAAC,SAAS,EAAE;QACtE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ;QACpD,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,kBAAkB;QAC5C,SAAS,EAAE,GAAG,EAAE,CAAC,mBAAmB;KACrC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,4BAA4B,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,qBAAqB;IAC3C,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,wCAAwC;IACnF,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpE,+DAA+D;IAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,iDAAiD;IACpG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,CAAC,CAAC,IAAI,CAAC,cAAc,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC"}