swarm-deploy 0.0.0 → 0.2.0

package/dist/tar-protocol/manifest.js

@@ -0,0 +1,312 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TAR_TRANSFER_DOMAIN = exports.TAR_UNAME = exports.TAR_UID = exports.TAR_MTIME_MS = exports.TAR_MODE = exports.TAR_GNAME = exports.TAR_GID = exports.TAR_BLOCK_BYTES = exports.deterministicTarSize = void 0;
+exports.deriveSourceParent = deriveSourceParent;
+exports.computeTarTransferId = computeTarTransferId;
+exports.buildTarManifest = buildTarManifest;
+exports.regenerateTarSuffix = regenerateTarSuffix;
+exports.metadataFromManifest = metadataFromManifest;
+exports.assertMetadataTransferId = assertMetadataTransferId;
+const b4a_1 = __importDefault(require("b4a"));
+const _fs_1 = __importDefault(require("#fs"));
+const _path_1 = __importDefault(require("#path"));
+const sodium_native_1 = __importDefault(require("sodium-native"));
+const abort_js_1 = require("../abort.js");
+const errors_js_1 = require("../errors.js");
+const files_js_1 = require("../files.js");
+const layout_js_1 = require("../storage/layout.js");
+const controls_js_1 = require("./controls.js");
+const hash_js_1 = require("./hash.js");
+const ustar_js_1 = require("./ustar.js");
+var ustar_js_2 = require("./ustar.js");
+Object.defineProperty(exports, "deterministicTarSize", { enumerable: true, get: function () { return ustar_js_2.deterministicTarSize; } });
+Object.defineProperty(exports, "TAR_BLOCK_BYTES", { enumerable: true, get: function () { return ustar_js_2.TAR_BLOCK_BYTES; } });
+Object.defineProperty(exports, "TAR_GID", { enumerable: true, get: function () { return ustar_js_2.TAR_GID; } });
+Object.defineProperty(exports, "TAR_GNAME", { enumerable: true, get: function () { return ustar_js_2.TAR_GNAME; } });
+Object.defineProperty(exports, "TAR_MODE", { enumerable: true, get: function () { return ustar_js_2.TAR_MODE; } });
+Object.defineProperty(exports, "TAR_MTIME_MS", { enumerable: true, get: function () { return ustar_js_2.TAR_MTIME_MS; } });
+Object.defineProperty(exports, "TAR_UID", { enumerable: true, get: function () { return ustar_js_2.TAR_UID; } });
+Object.defineProperty(exports, "TAR_UNAME", { enumerable: true, get: function () { return ustar_js_2.TAR_UNAME; } });
+exports.TAR_TRANSFER_DOMAIN = 'swarm-deploy/direct-tar/v1';
+const READ_BYTES = 64 * 1024;
+function invalid(message, cause = null) {
+    return new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.PROTOCOL_INVALID, message, cause);
+}
+function assertSafeSize(size) {
+    (0, ustar_js_1.assertUstarFileSize)(size);
+}
+function assertClientKey(key) {
+    if (!b4a_1.default.isBuffer(key) || key.byteLength !== 32)
+        throw invalid('Invalid client public key');
+}
+function canonicalName(filePath) {
+    const name = (0, files_js_1.validateBasename)(_path_1.default.basename(filePath));
+    if ((0, files_js_1.isReservedHistoryName)(name)) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.INVALID_FILENAME, 'Filename cannot be encoded as USTAR');
+    }
+    return name;
+}
+/**
+ * The immediate parent directory name, only when it is a valid wire component.
+ * Unsafe or absent parents (spaces, dotfiles, filesystem root, overlong) are
+ * omitted so the upload keeps the legacy authenticated identity.
+ */
+function deriveSourceParent(filePath) {
+    const sourceParent = _path_1.default.basename(_path_1.default.dirname(_path_1.default.resolve(filePath)));
+    try {
+        (0, controls_js_1.assertSourceParent)(sourceParent);
+    }
+    catch {
+        return undefined;
+    }
+    return sourceParent;
+}
+function identity(stat) {
+    return { dev: stat.dev, ino: stat.ino, size: stat.size, mtimeMs: stat.mtimeMs };
+}
+function sameIdentity(expected, actual) {
+    return (actual.isFile() &&
+        actual.dev === expected.dev &&
+        actual.ino === expected.ino &&
+        actual.size === expected.size &&
+        actual.mtimeMs === expected.mtimeMs);
+}
+function assertIdentity(expected, actual, message) {
+    if (!sameIdentity(expected, actual))
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, message);
+}
+async function openStableSource(filePath, expected, signal) {
+    (0, abort_js_1.throwIfAborted)(signal);
+    const pathStat = await _fs_1.default.promises.lstat(filePath);
+    (0, abort_js_1.throwIfAborted)(signal);
+    if (pathStat.isSymbolicLink() || !pathStat.isFile()) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.INVALID_FILENAME, 'Path must be a regular file');
+    }
+    const observed = identity(pathStat);
+    if (expected)
+        assertIdentity(expected, pathStat, 'Source file changed before TAR generation');
+    let handle = null;
+    try {
+        handle = await _fs_1.default.promises.open(filePath, (0, layout_js_1.safeFileOpenFlags)('read'));
+        const opened = await handle.stat();
+        assertIdentity(expected || observed, opened, 'Source identity changed while opening');
+        return { handle, source: expected || observed };
+    }
+    catch (error) {
+        if (handle)
+            await handle.close().catch(() => { });
+        if (error instanceof errors_js_1.SwarmDeployError)
+            throw error;
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Unable to safely open source file', error);
+    }
+}
+async function* generateTar(handle, name, size, fileHash, signal) {
+    (0, abort_js_1.throwIfAborted)(signal);
+    yield (0, ustar_js_1.canonicalUstarHeader)(name, size);
+    let position = 0;
+    while (position < size) {
+        (0, abort_js_1.throwIfAborted)(signal);
+        const chunk = b4a_1.default.alloc(Math.min(READ_BYTES, size - position));
+        const read = await handle.read(chunk, 0, chunk.byteLength, position);
+        const count = typeof read === 'number' ? read : read.bytesRead;
+        if (count !== chunk.byteLength) {
+            throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Source file was truncated');
+        }
+        fileHash.update(chunk);
+        position += count;
+        yield chunk;
+    }
+    const padding = (ustar_js_1.TAR_BLOCK_BYTES - (size % ustar_js_1.TAR_BLOCK_BYTES)) % ustar_js_1.TAR_BLOCK_BYTES;
+    if (padding > 0)
+        yield b4a_1.default.alloc(padding);
+    yield b4a_1.default.alloc(2 * ustar_js_1.TAR_BLOCK_BYTES);
+}
+async function assertSourceFinal(filePath, handle, expected, signal) {
+    (0, abort_js_1.throwIfAborted)(signal);
+    assertIdentity(expected, await handle.stat(), 'Source file changed during TAR generation');
+    assertIdentity(expected, await _fs_1.default.promises.lstat(filePath), 'Source path changed during TAR generation');
+    (0, abort_js_1.throwIfAborted)(signal);
+}
+function transferField(hash, label, value) {
+    const labelBytes = b4a_1.default.from(`${label}\u0000`);
+    const valueBytes = typeof value === 'number' ? b4a_1.default.from(String(value)) : b4a_1.default.from(value);
+    hash
+        .update(labelBytes)
+        .update(b4a_1.default.from(`${valueBytes.byteLength}:`))
+        .update(valueBytes);
+}
+function computeTarTransferId(clientPublicKey, immutable) {
+    assertClientKey(clientPublicKey);
+    assertSafeSize(immutable.fileSize);
+    if (!b4a_1.default.isBuffer(immutable.fileSha256) || immutable.fileSha256.byteLength !== 32) {
+        throw invalid('Invalid file digest');
+    }
+    if (!b4a_1.default.isBuffer(immutable.tarSha256) || immutable.tarSha256.byteLength !== 32) {
+        throw invalid('Invalid TAR digest');
+    }
+    const hash = new hash_js_1.SodiumSha256();
+    transferField(hash, 'domain', exports.TAR_TRANSFER_DOMAIN);
+    transferField(hash, 'clientPublicKey', clientPublicKey);
+    transferField(hash, 'name', immutable.name);
+    if (immutable.sourceParent !== undefined) {
+        (0, controls_js_1.assertSourceParent)(immutable.sourceParent);
+        transferField(hash, 'sourceParent', immutable.sourceParent);
+    }
+    transferField(hash, 'fileSize', immutable.fileSize);
+    transferField(hash, 'fileSha256', immutable.fileSha256);
+    transferField(hash, 'tarSize', immutable.tarSize);
+    transferField(hash, 'tarSha256', immutable.tarSha256);
+    transferField(hash, 'type', 'file');
+    transferField(hash, 'mode', ustar_js_1.TAR_MODE);
+    transferField(hash, 'uid', ustar_js_1.TAR_UID);
+    transferField(hash, 'gid', ustar_js_1.TAR_GID);
+    transferField(hash, 'mtimeMs', ustar_js_1.TAR_MTIME_MS);
+    transferField(hash, 'uname', ustar_js_1.TAR_UNAME);
+    transferField(hash, 'gname', ustar_js_1.TAR_GNAME);
+    transferField(hash, 'pax', 'none');
+    return hash.digest();
+}
+async function buildTarManifest(filePath, clientPublicKey, { signal = null, includeSourceParent = true } = {}) {
+    assertClientKey(clientPublicKey);
+    const name = canonicalName(filePath);
+    const sourceParent = includeSourceParent === false ? undefined : deriveSourceParent(filePath);
+    const opened = await openStableSource(filePath, null, signal);
+    assertSafeSize(opened.source.size);
+    const fileHash = new hash_js_1.SodiumSha256();
+    const tarHash = new hash_js_1.SodiumSha256();
+    let tarSize = 0;
+    try {
+        for await (const chunk of generateTar(opened.handle, name, opened.source.size, fileHash, signal)) {
+            tarHash.update(chunk);
+            tarSize += chunk.byteLength;
+        }
+        await assertSourceFinal(filePath, opened.handle, opened.source, signal);
+    }
+    finally {
+        await opened.handle.close().catch(() => { });
+    }
+    if (tarSize !== (0, ustar_js_1.deterministicTarSize)(opened.source.size)) {
+        throw invalid('Noncanonical deterministic TAR length');
+    }
+    const fileSha256 = fileHash.digest();
+    const tarSha256 = tarHash.digest();
+    const transferId = computeTarTransferId(clientPublicKey, {
+        name,
+        ...(sourceParent === undefined ? {} : { sourceParent }),
+        fileSize: opened.source.size,
+        fileSha256,
+        tarSize,
+        tarSha256
+    });
+    return {
+        path: filePath,
+        name,
+        ...(sourceParent === undefined ? {} : { sourceParent }),
+        fileSize: opened.source.size,
+        fileSha256,
+        tarSize,
+        tarSha256,
+        transferId,
+        source: opened.source
+    };
+}
+async function regenerateTarSuffix(manifest, offset, write, { signal = null, expectedPrefixSha256 = null } = {}) {
+    if (!manifest || typeof manifest !== 'object')
+        throw invalid('Invalid TAR manifest');
+    if (!Number.isSafeInteger(offset) || offset < 0 || offset > manifest.tarSize) {
+        throw invalid('Invalid TAR resume offset');
+    }
+    if (typeof write !== 'function')
+        throw invalid('Invalid TAR suffix writer');
+    if (expectedPrefixSha256 !== null &&
+        (!b4a_1.default.isBuffer(expectedPrefixSha256) || expectedPrefixSha256.byteLength !== 32)) {
+        throw invalid('Invalid expected prefix digest');
+    }
+    const opened = await openStableSource(manifest.path, manifest.source, signal);
+    const fileHash = new hash_js_1.SodiumSha256();
+    const tarHash = new hash_js_1.SodiumSha256();
+    const prefixHash = new hash_js_1.SodiumSha256();
+    let position = 0;
+    let bytesSent = 0;
+    let prefixSha256 = offset === 0 ? prefixHash.digest() : null;
+    let resetRequired = prefixSha256 !== null &&
+        expectedPrefixSha256 !== null &&
+        !sodium_native_1.default.sodium_memcmp(prefixSha256, expectedPrefixSha256);
+    try {
+        for await (const chunk of generateTar(opened.handle, manifest.name, manifest.fileSize, fileHash, signal)) {
+            (0, abort_js_1.throwIfAborted)(signal);
+            tarHash.update(chunk);
+            const end = position + chunk.byteLength;
+            if (position < offset) {
+                const prefixEnd = Math.min(chunk.byteLength, offset - position);
+                prefixHash.update(chunk.subarray(0, prefixEnd));
+                if (end >= offset) {
+                    prefixSha256 = prefixHash.digest();
+                    if (expectedPrefixSha256 && !sodium_native_1.default.sodium_memcmp(prefixSha256, expectedPrefixSha256)) {
+                        resetRequired = true;
+                    }
+                    if (!resetRequired && prefixEnd < chunk.byteLength) {
+                        const suffix = chunk.subarray(prefixEnd);
+                        await write(suffix);
+                        bytesSent += suffix.byteLength;
+                    }
+                }
+            }
+            else if (!resetRequired) {
+                await write(chunk);
+                bytesSent += chunk.byteLength;
+            }
+            position = end;
+        }
+        await assertSourceFinal(manifest.path, opened.handle, manifest.source, signal);
+    }
+    finally {
+        await opened.handle.close().catch(() => { });
+    }
+    if (position !== manifest.tarSize ||
+        (!resetRequired && bytesSent !== manifest.tarSize - offset)) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Regenerated TAR length changed');
+    }
+    const regeneratedFile = fileHash.digest();
+    const regeneratedTar = tarHash.digest();
+    if (!(0, hash_js_1.digestMatches)(regeneratedFile, manifest.fileSha256) ||
+        !(0, hash_js_1.digestMatches)(regeneratedTar, manifest.tarSha256)) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Source file changed during TAR regeneration');
+    }
+    if (prefixSha256 === null)
+        throw invalid('Unable to hash TAR prefix');
+    if (resetRequired)
+        return { status: 'RESET_REQUIRED', prefixSha256, bytesSent: 0 };
+    return { status: 'MATCH', prefixSha256, bytesSent };
+}
+function metadataFromManifest(manifest, reset = false) {
+    return {
+        v: controls_js_1.CONTROL_VERSION,
+        name: manifest.name,
+        ...(manifest.sourceParent === undefined ? {} : { sourceParent: manifest.sourceParent }),
+        fileSize: manifest.fileSize,
+        fileSha256: b4a_1.default.toString(manifest.fileSha256, 'hex'),
+        tarSize: manifest.tarSize,
+        tarSha256: b4a_1.default.toString(manifest.tarSha256, 'hex'),
+        transferId: b4a_1.default.toString(manifest.transferId, 'hex'),
+        reset
+    };
+}
+function assertMetadataTransferId(clientPublicKey, offeredMetadata) {
+    const metadata = (0, controls_js_1.decodeMetadataRecord)((0, controls_js_1.encodeMetadataRecord)(offeredMetadata));
+    const expected = computeTarTransferId(clientPublicKey, {
+        name: metadata.name,
+        ...(metadata.sourceParent === undefined ? {} : { sourceParent: metadata.sourceParent }),
+        fileSize: metadata.fileSize,
+        fileSha256: b4a_1.default.from(metadata.fileSha256, 'hex'),
+        tarSize: metadata.tarSize,
+        tarSha256: b4a_1.default.from(metadata.tarSha256, 'hex')
+    });
+    const offered = b4a_1.default.from(metadata.transferId, 'hex');
+    if (!sodium_native_1.default.sodium_memcmp(expected, offered))
+        throw invalid('Noncanonical TAR transfer ID');
+}
+//# sourceMappingURL=manifest.js.map

package/dist/tar-protocol/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/tar-protocol/manifest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAqB;AACrB,8CAAoB;AACpB,kDAAwB;AACxB,kEAAkC;AAClC,0CAAkE;AAClE,4CAAuD;AACvD,0CAAqE;AACrE,oDAAwD;AACxD,+CAMsB;AACtB,uCAAuD;AACvD,yCAWmB;AAEnB,uCASmB;AARjB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,mGAAA,OAAO,OAAA;AACP,qGAAA,SAAS,OAAA;AACT,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AACZ,mGAAA,OAAO,OAAA;AACP,qGAAA,SAAS,OAAA;AAEE,QAAA,mBAAmB,GAAG,4BAA4B,CAAA;AAC/D,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA;AAsC5B,SAAS,OAAO,CAAC,OAAe,EAAE,KAAK,GAAY,IAAI;IACrD,OAAO,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,eAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IACtD,IAAI,IAAA,gCAAqB,EAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,4BAAmC,QAAgB;IACjD,MAAM,YAAY,GAAG,eAAI,CAAC,QAAQ,CAAC,eAAI,CAAC,OAAO,CAAC,eAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,IAAA,gCAAkB,EAAC,YAAY,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc;IAC9B,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,QAA2B,EAAE,MAAgB;IACjE,OAAO,CACL,MAAM,CAAC,MAAM,EAAE;QACf,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC3B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC3B,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC7B,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CACpC,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAA2B,EAAE,MAAgB,EAAE,OAAe;IACpF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;AAC5F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,QAAkC,EAClC,MAA0C;IAE1C,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;IACtB,MAAM,QAAQ,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClD,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;IACtB,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACnC,IAAI,QAAQ;QAAE,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,2CAA2C,CAAC,CAAA;IAE7F,IAAI,MAAM,GAAkC,IAAI,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAA,6BAAiB,EAAC,MAAM,CAAC,CAAC,CAAA;QACpE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAClC,cAAc,CAAC,QAAQ,IAAI,QAAQ,EAAE,MAAM,EAAE,uCAAuC,CAAC,CAAA;QACrF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,IAAI,QAAQ,EAAE,CAAA;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAChD,IAAI,KAAK,YAAY,4BAAgB;YAAE,MAAM,KAAK,CAAA;QAClD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,WAAW,CACzB,MAA8B,EAC9B,IAAY,EACZ,IAAY,EACZ,QAAsB,EACtB,MAA0C;IAE1C,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;IACtB,MAAM,IAAA,+BAAoB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,OAAO,QAAQ,GAAG,IAAI,EAAE,CAAC;QACvB,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;QACtB,MAAM,KAAK,GAAG,aAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAA;QAC9D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACpE,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA;QAC9D,IAAI,KAAK,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAA;QAC3E,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtB,QAAQ,IAAI,KAAK,CAAA;QACjB,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,0BAAe,GAAG,CAAC,IAAI,GAAG,0BAAe,CAAC,CAAC,GAAG,0BAAe,CAAA;IAC9E,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,aAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,aAAG,CAAC,KAAK,CAAC,CAAC,GAAG,0BAAe,CAAC,CAAA;AACtC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,QAAgB,EAChB,MAA8B,EAC9B,QAA2B,EAC3B,MAA0C;IAE1C,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;IACtB,cAAc,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,2CAA2C,CAAC,CAAA;IAC1F,cAAc,CACZ,QAAQ,EACR,MAAM,aAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EACjC,2CAA2C,CAC5C,CAAA;IACD,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,aAAa,CACpB,IAAkB,EAClB,KAAa,EACb,KAAmC;IAEnC,MAAM,UAAU,GAAG,aAAG,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxF,IAAI;SACD,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,aAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC;SAC7C,MAAM,CAAC,UAAU,CAAC,CAAA;AACvB,CAAC;AAED,8BACE,eAA2B,EAC3B,SAOC;IAED,eAAe,CAAC,eAAe,CAAC,CAAA;IAChC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAClC,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAClF,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,sBAAY,EAAE,CAAA;IAC/B,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAA,mBAAmB,CAAC,CAAA;IAClD,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAA;IACvD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,IAAA,gCAAkB,EAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC1C,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC,CAAA;IAC7D,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;IACnD,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACvD,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IACjD,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACrD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAQ,CAAC,CAAA;IACrC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAO,CAAC,CAAA;IACnC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAO,CAAC,CAAA;IACnC,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,uBAAY,CAAC,CAAA;IAC5C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAS,CAAC,CAAA;IACvC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAS,CAAC,CAAA;IACvC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAClC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;AACtB,CAAC;AAEM,KAAK,2BACV,QAAgB,EAChB,eAA2B,EAC3B,EAAE,MAAM,GAAG,IAAI,EAAE,mBAAmB,GAAG,IAAI,EAAE,GAAuB,EAAE;IAEtE,eAAe,CAAC,eAAe,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7D,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,IAAI,sBAAY,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,sBAAY,EAAE,CAAA;IAClC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CACnC,MAAM,CAAC,MAAM,EACb,IAAI,EACJ,MAAM,CAAC,MAAM,CAAC,IAAI,EAClB,QAAQ,EACR,MAAM,CACP,EAAE,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,OAAO,IAAI,KAAK,CAAC,UAAU,CAAA;QAC7B,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,IAAA,+BAAoB,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,oBAAoB,CAAC,eAAe,EAAE;QACvD,IAAI;QACJ,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QAC5B,UAAU;QACV,OAAO;QACP,SAAS;KACV,CAAC,CAAA;IACF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QAC5B,UAAU;QACV,OAAO;QACP,SAAS;QACT,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAEM,KAAK,8BACV,QAAqB,EACrB,MAAc,EACd,KAA8C,EAC9C,EAAE,MAAM,GAAG,IAAI,EAAE,oBAAoB,GAAG,IAAI,EAAE,GAAqB,EAAE;IAErE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACpF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC7E,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC5C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC3E,IACE,oBAAoB,KAAK,IAAI;QAC7B,CAAC,CAAC,aAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC,UAAU,KAAK,EAAE,CAAC,EAC/E,CAAC;QACD,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7E,MAAM,QAAQ,GAAG,IAAI,sBAAY,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,sBAAY,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,IAAI,sBAAY,EAAE,CAAA;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,YAAY,GAAkB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3E,IAAI,aAAa,GACf,YAAY,KAAK,IAAI;QACrB,oBAAoB,KAAK,IAAI;QAC7B,CAAC,uBAAM,CAAC,aAAa,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IAC3D,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CACnC,MAAM,CAAC,MAAM,EACb,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,QAAQ,EACjB,QAAQ,EACR,MAAM,CACP,EAAE,CAAC;YACF,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAA;YACvC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAA;gBAC/D,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;gBAC/C,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;oBAClB,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,CAAA;oBAClC,IAAI,oBAAoB,IAAI,CAAC,uBAAM,CAAC,aAAa,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,CAAC;wBACtF,aAAa,GAAG,IAAI,CAAA;oBACtB,CAAC;oBACD,IAAI,CAAC,aAAa,IAAI,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;wBACnD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;wBACxC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;wBACnB,SAAS,IAAI,MAAM,CAAC,UAAU,CAAA;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;gBAClB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAA;YAC/B,CAAC;YACD,QAAQ,GAAG,GAAG,CAAA;QAChB,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC7C,CAAC;IAED,IACE,QAAQ,KAAK,QAAQ,CAAC,OAAO;QAC7B,CAAC,CAAC,aAAa,IAAI,SAAS,KAAK,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAA;IACzC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;IACvC,IACE,CAAC,IAAA,uBAAa,EAAC,eAAe,EAAE,QAAQ,CAAC,UAAU,CAAC;QACpD,CAAC,IAAA,uBAAa,EAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,YAAY,KAAK,IAAI;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACrE,IAAI,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAClF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;AACrD,CAAC;AAED,8BAAqC,QAAqB,EAAE,KAAK,GAAG,KAAK;IACvE,OAAO;QACL,CAAC,EAAE,6BAAe;QAClB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;QACvF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;QAClD,UAAU,EAAE,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QACpD,KAAK;KACN,CAAA;AACH,CAAC;AAED,kCACE,eAA2B,EAC3B,eAA+B;IAE/B,MAAM,QAAQ,GAAG,IAAA,kCAAoB,EAAC,IAAA,kCAAoB,EAAC,eAAe,CAAC,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,eAAe,EAAE;QACrD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;QACvF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QAChD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;KAC/C,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IACpD,IAAI,CAAC,uBAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;AAC7F,CAAC"}

package/dist/tar-protocol/tree-extract.d.ts

@@ -0,0 +1,37 @@
+import { type AbortSignalLike } from '../abort.js';
+import { type TreeMetadataRecord } from './controls.js';
+import { type TreeEntry } from './tree.js';
+export interface TreeFileSink {
+    write(chunk: Uint8Array): Promise<void>;
+    close(): Promise<void>;
+}
+export interface TreeExtractionTarget {
+    createDirectory(relativePath: string): Promise<void>;
+    createFile(relativePath: string, size: number): Promise<TreeFileSink>;
+    complete(): Promise<void>;
+    abort(error: unknown): Promise<void>;
+}
+export interface TreeExtractionOptions {
+    signal?: AbortSignalLike | null;
+}
+export interface TreeExtractionResult {
+    entries: TreeEntry[];
+    entryCount: number;
+    payloadBytes: number;
+    treeSha256: Buffer;
+    tarSize: number;
+    tarSha256: Buffer;
+}
+/**
+ * Validates and extracts a canonical multi-entry tree archive.
+ *
+ * Only the name, typeflag, and size fields are parsed. Every other field is
+ * proved by rebuilding the whole 512-byte canonical header and comparing it
+ * byte for byte, so mode, uid, gid, mtime, uname, gname, magic, checksum, and
+ * the USTAR prefix are all pinned by one comparison.
+ *
+ * The archive path is only ever handed to the target as a validated relative
+ * path; this reader never joins it to an absolute path and never touches the
+ * filesystem itself. Any failure aborts the target exactly once.
+ */
+export declare function validateAndExtractTreeTar(source: Iterable<Uint8Array> | AsyncIterable<Uint8Array>, offeredMetadata: TreeMetadataRecord, target: TreeExtractionTarget, { signal }?: TreeExtractionOptions): Promise<TreeExtractionResult>;

package/dist/tar-protocol/tree-extract.js

@@ -0,0 +1,240 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAndExtractTreeTar = validateAndExtractTreeTar;
+const b4a_1 = __importDefault(require("b4a"));
+const abort_js_1 = require("../abort.js");
+const errors_js_1 = require("../errors.js");
+const controls_js_1 = require("./controls.js");
+const hash_js_1 = require("./hash.js");
+const tree_js_1 = require("./tree.js");
+const ustar_js_1 = require("./ustar.js");
+function invalid(message, cause = null) {
+    return new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.PROTOCOL_INVALID, message, cause);
+}
+function parseOctal(block, offset, length) {
+    let value = 0;
+    let digits = 0;
+    for (let index = offset; index < offset + length; index++) {
+        const byte = block[index];
+        if (byte === 0x20 || byte === 0)
+            break;
+        if (byte < 0x30 || byte > 0x37)
+            throw invalid('Noncanonical tree TAR header');
+        value = value * 8 + (byte - 0x30);
+        digits++;
+        if (!Number.isSafeInteger(value))
+            throw invalid('Noncanonical tree TAR header');
+    }
+    if (digits === 0)
+        throw invalid('Noncanonical tree TAR header');
+    return value;
+}
+function parseStoredName(block) {
+    let end = 0;
+    while (end < 100 && block[end] !== 0)
+        end++;
+    for (let index = end; index < 100; index++) {
+        if (block[index] !== 0)
+            throw invalid('Noncanonical tree TAR header');
+    }
+    if (end === 0)
+        throw invalid('Noncanonical tree TAR header');
+    return b4a_1.default.toString(block.subarray(0, end), 'utf8');
+}
+/**
+ * Validates and extracts a canonical multi-entry tree archive.
+ *
+ * Only the name, typeflag, and size fields are parsed. Every other field is
+ * proved by rebuilding the whole 512-byte canonical header and comparing it
+ * byte for byte, so mode, uid, gid, mtime, uname, gname, magic, checksum, and
+ * the USTAR prefix are all pinned by one comparison.
+ *
+ * The archive path is only ever handed to the target as a validated relative
+ * path; this reader never joins it to an absolute path and never touches the
+ * filesystem itself. Any failure aborts the target exactly once.
+ */
+async function validateAndExtractTreeTar(source, offeredMetadata, target, { signal = null } = {}) {
+    if (!target ||
+        typeof target !== 'object' ||
+        typeof target.createDirectory !== 'function' ||
+        typeof target.createFile !== 'function' ||
+        typeof target.complete !== 'function' ||
+        typeof target.abort !== 'function') {
+        throw invalid('Invalid tree extraction target');
+    }
+    const metadata = (0, controls_js_1.decodeTreeMetadataRecord)((0, controls_js_1.encodeTreeMetadataRecord)(offeredMetadata));
+    const tarHash = new hash_js_1.SodiumSha256();
+    const digests = [];
+    const directories = new Set();
+    const folded = new Set();
+    let position = 0;
+    let pending = b4a_1.default.alloc(0);
+    let payloadBytes = 0;
+    let previousPath = null;
+    let terminatorBlocks = 0;
+    let sink = null;
+    let sinkHash = null;
+    let sinkEntry = null;
+    let payloadRemaining = 0;
+    let paddingRemaining = 0;
+    const closeSink = async () => {
+        if (!sink || !sinkHash || !sinkEntry)
+            throw invalid('Tree extraction state is inconsistent');
+        const closing = sink;
+        const hash = sinkHash;
+        const entry = sinkEntry;
+        sink = null;
+        sinkHash = null;
+        sinkEntry = null;
+        await closing.close();
+        digests.push({ entry, sha256: hash.digest() });
+    };
+    const consumeHeader = async (block) => {
+        if (block.every((byte) => byte === 0)) {
+            terminatorBlocks++;
+            if (terminatorBlocks > 2)
+                throw invalid('Trailing tree TAR payload');
+            return;
+        }
+        if (terminatorBlocks > 0)
+            throw invalid('Tree TAR entry after terminator');
+        const storedName = parseStoredName(block);
+        const typeflag = block[156];
+        if (typeflag !== 48 && typeflag !== 53)
+            throw invalid('Unsupported tree TAR entry type');
+        const kind = typeflag === 53 ? 'directory' : 'file';
+        if (kind === 'directory' && !storedName.endsWith('/')) {
+            throw invalid('Noncanonical tree TAR header');
+        }
+        if (kind === 'file' && storedName.endsWith('/'))
+            throw invalid('Noncanonical tree TAR header');
+        const relativePath = kind === 'directory' ? storedName.slice(0, -1) : storedName;
+        (0, tree_js_1.assertTreeEntryPath)(relativePath, kind);
+        const size = parseOctal(block, 124, 12);
+        if (kind === 'directory' && size !== 0)
+            throw invalid('Invalid tree directory size');
+        if (!b4a_1.default.equals(block, (0, ustar_js_1.canonicalUstarTreeHeader)(storedName, kind, size))) {
+            throw invalid('Noncanonical tree TAR header');
+        }
+        if (digests.length >= Math.min(metadata.entryCount, tree_js_1.MAX_TREE_ENTRIES)) {
+            throw invalid('Tree TAR entry count exceeds the offer');
+        }
+        if (previousPath !== null && (0, tree_js_1.compareTreePaths)(previousPath, relativePath) >= 0) {
+            throw invalid('Noncanonical tree entry order');
+        }
+        const fold = relativePath.toLowerCase();
+        if (folded.has(fold))
+            throw invalid('Case-folded duplicate tree entry path');
+        folded.add(fold);
+        const separator = relativePath.lastIndexOf('/');
+        if (separator !== -1 && !directories.has(relativePath.slice(0, separator))) {
+            throw invalid('Tree entry has no parent directory entry');
+        }
+        previousPath = relativePath;
+        const entry = { kind, path: relativePath, size: kind === 'directory' ? 0 : size };
+        if (kind === 'directory') {
+            directories.add(relativePath);
+            digests.push({ entry });
+            await target.createDirectory(relativePath);
+            return;
+        }
+        if (payloadBytes > metadata.payloadBytes - size)
+            throw invalid('Tree payload exceeds the offer');
+        payloadBytes += size;
+        sinkEntry = entry;
+        sinkHash = new hash_js_1.SodiumSha256();
+        sink = await target.createFile(relativePath, size);
+        payloadRemaining = size;
+        paddingRemaining = (ustar_js_1.TAR_BLOCK_BYTES - (size % ustar_js_1.TAR_BLOCK_BYTES)) % ustar_js_1.TAR_BLOCK_BYTES;
+        if (payloadRemaining === 0)
+            await closeSink();
+    };
+    try {
+        (0, abort_js_1.throwIfAborted)(signal);
+        for await (const value of source) {
+            (0, abort_js_1.throwIfAborted)(signal);
+            if (!b4a_1.default.isBuffer(value))
+                throw invalid('Invalid TAR source bytes');
+            if (position > metadata.tarSize - value.byteLength)
+                throw invalid('Trailing tree TAR payload');
+            tarHash.update(value);
+            position += value.byteLength;
+            let offset = 0;
+            while (offset < value.byteLength) {
+                if (payloadRemaining > 0) {
+                    const take = Math.min(payloadRemaining, value.byteLength - offset);
+                    const chunk = value.subarray(offset, offset + take);
+                    sinkHash.update(chunk);
+                    await sink.write(chunk);
+                    payloadRemaining -= take;
+                    offset += take;
+                    if (payloadRemaining === 0)
+                        await closeSink();
+                    continue;
+                }
+                if (paddingRemaining > 0) {
+                    const take = Math.min(paddingRemaining, value.byteLength - offset);
+                    for (let index = offset; index < offset + take; index++) {
+                        if (value[index] !== 0)
+                            throw invalid('Nonzero tree TAR padding');
+                    }
+                    paddingRemaining -= take;
+                    offset += take;
+                    continue;
+                }
+                const take = Math.min(ustar_js_1.TAR_BLOCK_BYTES - pending.byteLength, value.byteLength - offset);
+                pending = b4a_1.default.concat([pending, value.subarray(offset, offset + take)]);
+                offset += take;
+                if (pending.byteLength < ustar_js_1.TAR_BLOCK_BYTES)
+                    continue;
+                const block = pending;
+                pending = b4a_1.default.alloc(0);
+                await consumeHeader(block);
+            }
+        }
+        if (pending.byteLength !== 0 ||
+            payloadRemaining !== 0 ||
+            paddingRemaining !== 0 ||
+            sink !== null) {
+            throw invalid('Truncated tree TAR payload');
+        }
+        if (position !== metadata.tarSize)
+            throw invalid('Truncated tree TAR payload');
+        if (terminatorBlocks !== 2)
+            throw invalid('Missing tree TAR terminator');
+        if (digests.length !== metadata.entryCount)
+            throw invalid('Tree entry count mismatch');
+        if (payloadBytes !== metadata.payloadBytes)
+            throw invalid('Tree payload size mismatch');
+        const treeSha256 = (0, tree_js_1.treeDigest)(digests);
+        const tarSha256 = tarHash.digest();
+        if (!(0, hash_js_1.digestMatches)(treeSha256, b4a_1.default.from(metadata.treeSha256, 'hex'))) {
+            throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.CHECKSUM_MISMATCH, 'Extracted tree digest mismatch');
+        }
+        if (!(0, hash_js_1.digestMatches)(tarSha256, b4a_1.default.from(metadata.tarSha256, 'hex'))) {
+            throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.CHECKSUM_MISMATCH, 'TAR digest mismatch');
+        }
+        await target.complete();
+        return {
+            entries: digests.map((value) => value.entry),
+            entryCount: digests.length,
+            payloadBytes,
+            treeSha256,
+            tarSize: metadata.tarSize,
+            tarSha256
+        };
+    }
+    catch (error) {
+        // A half-written file must release its handle before the target removes the tree.
+        if (sink)
+            await Promise.resolve(sink.close()).catch(() => { });
+        await Promise.resolve(target.abort(error)).catch(() => { });
+        if (error instanceof errors_js_1.SwarmDeployError)
+            throw error;
+        throw invalid('Tree extraction failed', error);
+    }
+}
+//# sourceMappingURL=tree-extract.js.map

package/dist/tar-protocol/tree-extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree-extract.js","sourceRoot":"","sources":["../../src/tar-protocol/tree-extract.ts"],"names":[],"mappings":";;;;;;AAAA,8CAAqB;AACrB,0CAAkE;AAClE,4CAAuD;AACvD,+CAIsB;AACtB,uCAAuD;AACvD,uCAOkB;AAClB,yCAAsE;AA2BtE,SAAS,OAAO,CAAC,OAAe,EAAE,KAAK,GAAY,IAAI;IACrD,OAAO,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc;IAC/D,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,IAAI,KAAK,GAAG,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC;YAAE,MAAK;QACtC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI;YAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;QAC7E,KAAK,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;QACjC,MAAM,EAAE,CAAA;QACR,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAC/D,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,OAAO,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,CAAA;IAC3C,KAAK,IAAI,KAAK,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,GAAG,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAC5D,OAAO,aAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,oCACV,MAAwD,EACxD,eAAmC,EACnC,MAA4B,EAC5B,EAAE,MAAM,GAAG,IAAI,EAAE,GAA0B,EAAE;IAE7C,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,MAAM,CAAC,eAAe,KAAK,UAAU;QAC5C,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU;QACvC,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU;QACrC,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAClC,CAAC;QACD,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,sCAAwB,EAAC,IAAA,sCAAwB,EAAC,eAAe,CAAC,CAAC,CAAA;IACpF,MAAM,OAAO,GAAG,IAAI,sBAAY,EAAE,CAAA;IAClC,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAEhC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,GAAW,aAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,YAAY,GAAkB,IAAI,CAAA;IACtC,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,IAAI,GAAwB,IAAI,CAAA;IACpC,IAAI,QAAQ,GAAwB,IAAI,CAAA;IACxC,IAAI,SAAS,GAAqB,IAAI,CAAA;IACtC,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,gBAAgB,GAAG,CAAC,CAAA;IAExB,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;QAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;YAAE,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAA;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAA;QACrB,MAAM,KAAK,GAAG,SAAS,CAAA;QACvB,IAAI,GAAG,IAAI,CAAA;QACX,QAAQ,GAAG,IAAI,CAAA;QACf,SAAS,GAAG,IAAI,CAAA;QAChB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACrB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAChD,CAAC,CAAA;IAED,MAAM,aAAa,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;QAC3D,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACtC,gBAAgB,EAAE,CAAA;YAClB,IAAI,gBAAgB,GAAG,CAAC;gBAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;YACpE,OAAM;QACR,CAAC;QACD,IAAI,gBAAgB,GAAG,CAAC;YAAE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAA;QAC1E,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,EAAE;YAAE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAA;QACxF,MAAM,IAAI,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;QACnD,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;QAC9F,MAAM,YAAY,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;QAChF,IAAA,6BAAmB,EAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QACvC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAA;QACpF,IAAI,CAAC,aAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAA,mCAAwB,EAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,0BAAgB,CAAC,EAAE,CAAC;YACtE,MAAM,OAAO,CAAC,wCAAwC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,IAAI,IAAA,0BAAgB,EAAC,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAA;QAChD,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,CAAA;QACvC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAA;QAC5E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChB,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,CAAC,0CAA0C,CAAC,CAAA;QAC3D,CAAC;QACD,YAAY,GAAG,YAAY,CAAA;QAC3B,MAAM,KAAK,GAAc,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5F,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YACvB,MAAM,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QACD,IAAI,YAAY,GAAG,QAAQ,CAAC,YAAY,GAAG,IAAI;YAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAA;QAChG,YAAY,IAAI,IAAI,CAAA;QACpB,SAAS,GAAG,KAAK,CAAA;QACjB,QAAQ,GAAG,IAAI,sBAAY,EAAE,CAAA;QAC7B,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAClD,gBAAgB,GAAG,IAAI,CAAA;QACvB,gBAAgB,GAAG,CAAC,0BAAe,GAAG,CAAC,IAAI,GAAG,0BAAe,CAAC,CAAC,GAAG,0BAAe,CAAA;QACjF,IAAI,gBAAgB,KAAK,CAAC;YAAE,MAAM,SAAS,EAAE,CAAA;IAC/C,CAAC,CAAA;IAED,IAAI,CAAC;QACH,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;QACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;YACtB,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;YACnE,IAAI,QAAQ,GAAG,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,UAAU;gBAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;YAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAA;YAC5B,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;gBACjC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAA;oBAClE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;oBACnD,QAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBACvB,MAAM,IAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBACxB,gBAAgB,IAAI,IAAI,CAAA;oBACxB,MAAM,IAAI,IAAI,CAAA;oBACd,IAAI,gBAAgB,KAAK,CAAC;wBAAE,MAAM,SAAS,EAAE,CAAA;oBAC7C,SAAQ;gBACV,CAAC;gBACD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAA;oBAClE,KAAK,IAAI,KAAK,GAAG,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;wBACxD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;4BAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;oBACnE,CAAC;oBACD,gBAAgB,IAAI,IAAI,CAAA;oBACxB,MAAM,IAAI,IAAI,CAAA;oBACd,SAAQ;gBACV,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,0BAAe,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAA;gBACtF,OAAO,GAAG,aAAG,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;gBACtE,MAAM,IAAI,IAAI,CAAA;gBACd,IAAI,OAAO,CAAC,UAAU,GAAG,0BAAe;oBAAE,SAAQ;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAA;gBACrB,OAAO,GAAG,aAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACtB,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;YAC5B,CAAC;QACH,CAAC;QACD,IACE,OAAO,CAAC,UAAU,KAAK,CAAC;YACxB,gBAAgB,KAAK,CAAC;YACtB,gBAAgB,KAAK,CAAC;YACtB,IAAI,KAAK,IAAI,EACb,CAAC;YACD,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAA;QAC9E,IAAI,gBAAgB,KAAK,CAAC;YAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAA;QACxE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU;YAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;QACtF,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY;YAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACvF,MAAM,UAAU,GAAG,IAAA,oBAAU,EAAC,OAAO,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;QAClC,IAAI,CAAC,IAAA,uBAAa,EAAC,UAAU,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAA;QACxF,CAAC;QACD,IAAI,CAAC,IAAA,uBAAa,EAAC,SAAS,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAA;QAC7E,CAAC;QACD,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;QACvB,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;YAC5C,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,YAAY;YACZ,UAAU;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kFAAkF;QAClF,IAAI,IAAI;YAAE,MAAM,OAAO,CAAC,OAAO,CAAE,IAAqB,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC/E,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC1D,IAAI,KAAK,YAAY,4BAAgB;YAAE,MAAM,KAAK,CAAA;QAClD,MAAM,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAA;IAChD,CAAC;AACH,CAAC"}