tinybeeai 0.0.0-stage → 0.16.1

package/dist/runner/worktree.js

@@ -0,0 +1,349 @@
+// Temporary worktrees for pull request and merge runs (KAT-284). A dot with a working folder used to run whatever
+// commit that folder was on, so the test count of a PR belonged to other code. For a PR of the repo itself
+// (not a fork) the runner now adds a git worktree of the working folder at the PR's head commit, installs
+// and runs there, and removes it when the run ends. The folder's own checkout, branch, index and files are
+// never touched: `git worktree add --detach` writes only under .git/worktrees of the folder and into the
+// new directory, and a fetch writes objects, FETCH_HEAD and one private ref (refs/localdost/tmp/<id>) that the
+// cleanup deletes. The owner's remote-tracking refs never move.
+//
+// The commit of the event is never trusted on its own. A PR commit must be the head of refs/pull/<n>/head of the
+// base repository as fetched, and the GitHub API must say the same for a PR whose head repository is the base
+// repository (the rule is judgePullHead in verify.ts, shared with the fresh clone). A merge commit must be an
+// ancestor of the fetched default branch of the repository, which the caller takes from GitHub (defaultBranchOf in
+// verify.ts) and not from the event. Else nothing runs.
+//
+// Worktrees live under <dataDir>/worktrees/<id> (an absolute, real path), never inside the repo folder. The artifact
+// cap, the install cache and the disk watch work on other folders (data/artifacts, data/runner-cache), and
+// sweepWorktrees skips a worktree that a run holds. Only our own worktree entries are ever removed from a repo.
+import { spawnSync } from 'node:child_process';
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync } from 'node:fs';
+import path from 'node:path';
+import { config, log } from '../config.js';
+import { redact } from '../agent/redact.js';
+import { runTracked } from '../proc.js';
+import { isSafeRef, judgePullHead } from './verify.js';
+const FETCH_TIMEOUT_MS = 2 * 60_000;
+const GIT_TIMEOUT_MS = 60_000;
+const SHA_ISH = /^[0-9a-f]{7,64}$/;
+const FULL_SHA = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+/** Private namespace the fetches land in. Nothing of the owner's lives here, and the cleanup deletes the ref. */
+const TMP_REF_PREFIX = 'refs/localdost/tmp/';
+/** Worktrees a run holds right now, with the repo folder each was added from. Nothing that cleans up may touch these. */
+const inUse = new Map();
+let exitHook = false;
+/** The real absolute path of `p`: symlinks resolved as far as the path exists, the rest appended as it is. */
+function realish(p) {
+    let cur = path.resolve(p);
+    const rest = [];
+    for (;;) {
+        try {
+            return path.join(realpathSync(cur), ...rest.reverse());
+        }
+        catch {
+            const up = path.dirname(cur);
+            if (up === cur)
+                return path.resolve(p);
+            rest.push(path.basename(cur));
+            cur = up;
+        }
+    }
+}
+/** <dataDir>/worktrees as an absolute real path, so a relative LOCALDOST_DATA_DIR cannot put a worktree in the wrong folder. */
+export function worktreesDir(dataDir = config.dataDir) {
+    return path.join(realish(dataDir), 'worktrees');
+}
+/** The worktrees held by a run in this process. */
+export function activeWorktrees() {
+    return [...inUse.keys()];
+}
+export function worktreeInUse(dir) {
+    return inUse.has(path.resolve(dir));
+}
+/** True when `child` is `parent` or below it. Both are absolute real paths. */
+function isInside(child, parent) {
+    const rel = path.relative(parent, child);
+    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+}
+/** Removes the worktree entry and folder at `dir` from the repo folder `repo`. Only that one entry: no repo-wide prune. Never throws. */
+function removeOwnWorktree(repo, dir) {
+    try {
+        spawnSync('git', ['worktree', 'remove', '--force', dir], { cwd: repo, env: gitEnv(), timeout: 30_000, stdio: 'ignore' });
+    }
+    catch {
+        /* the folder is removed below all the same */
+    }
+    try {
+        removeDir(dir);
+    }
+    catch (err) {
+        log.warn(`worktree: could not remove ${dir}: ${redact(String(err))}`);
+    }
+}
+function registerExitCleanup() {
+    if (exitHook)
+        return;
+    exitHook = true;
+    process.once('exit', () => {
+        for (const [d, repo] of inUse)
+            removeOwnWorktree(repo, d); // best effort on exit
+    });
+}
+function safeId(id) {
+    return id.replace(/[^A-Za-z0-9._-]/g, '_').slice(0, 80) || 'run';
+}
+/** A name that is valid in a git ref (no dots, so no `..` and no `.lock`). */
+function refId(id) {
+    return safeId(id).replace(/\./g, '_');
+}
+function gitEnv() {
+    // A fetch that needs a password must fail, not wait for a person at a terminal.
+    return { ...process.env, GIT_TERMINAL_PROMPT: '0', GIT_ASKPASS: 'true', GIT_OPTIONAL_LOCKS: '0' };
+}
+function git(cwd, args, timeoutMs = GIT_TIMEOUT_MS, runId) {
+    return runTracked('git', args, { cwd, env: gitEnv(), timeoutMs, maxBuffer: 100_000, ...(runId ? { runId } : {}) });
+}
+/** True when a remote URL (https, ssh, scp style, or a path) names owner/name. Hosts are not compared. */
+export function remoteIsRepo(url, repo) {
+    const m = /[:/]([^/:]+)\/([^/:]+?)(?:\.git)?\/?$/.exec(url.trim());
+    return !!m && m[1].toLowerCase() === repo.owner.toLowerCase() && m[2].toLowerCase() === repo.name.toLowerCase();
+}
+/**
+ * Text that may reach a PR comment, a check summary or a report: secrets masked, and every absolute local path
+ * (a home folder, a data folder, a remote given as a path) replaced by "<path>". Git's stderr is never put in a reason.
+ */
+export function scrubReason(text) {
+    return redact(text)
+        .replace(/(^|[\s"'(=:])(?:[A-Za-z]:\\[^\s"')]+|\/(?:[^\s"')/]+\/)+[^\s"')/]*)/g, '$1<path>')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+function removeDir(dir) {
+    rmSync(dir, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
+}
+/**
+ * Adds a worktree of the git checkout at `workdir` on commit `sha`, for a run of a pull request or a merge of `repo`.
+ * The caller has already ruled out a fork PR: fork code never gets a worktree.
+ *
+ * The commit is verified before anything is checked out, whatever the event said:
+ *  - PR (`prNumber`): refs/pull/<n>/head of the remote is fetched into a private ref and must equal `sha`, and
+ *    `pullHead` (the GitHub API) must report the same head sha with the base repository as head repository.
+ *  - Merge (`branch`, the default branch of the repository as verify.ts resolves it, never the branch an event names):
+ *    the branch is fetched into a private ref and `sha` must be an ancestor of it.
+ * If a check fails or cannot be made, the plan is `failed` with a plain reason, and no worktree exists.
+ */
+export async function prepareWorktree(o) {
+    const gone = () => o.cancelled?.() === true;
+    // A cancelled run starts no more git commands: the one that was running got killed, and the next would wait on its own.
+    const run = (cwd, args, timeoutMs, runId) => gone() ? Promise.resolve({ code: null, signal: null, stdout: '', stderr: '', timedOut: false }) : git(cwd, args, timeoutMs, runId);
+    const CANCELLED = { kind: 'failed', reason: 'The run was cancelled.' };
+    const sha = o.sha.trim().toLowerCase();
+    const short = sha.slice(0, 7);
+    if (!SHA_ISH.test(sha))
+        return { kind: 'failed', reason: scrubReason(`The commit "${o.sha.slice(0, 40)}" is not a git commit id, so no worktree was made.`) };
+    const refuse = (why) => ({
+        kind: 'failed',
+        reason: `The tests did not run for ${short}: ${why} No test count is shown for this commit.`,
+    });
+    const top = await run(o.workdir, ['rev-parse', '--show-toplevel'], 10_000, o.runId);
+    if (top.code !== 0 || !top.stdout.trim())
+        return { kind: 'none', why: 'not-git' };
+    const topDir = top.stdout.trim();
+    // The folder must be a checkout of the PR's repository, else its remotes say nothing about this commit.
+    const cfg = await run(topDir, ['config', '--get-regexp', '^remote\\..+\\.url$'], 10_000, o.runId);
+    let remote;
+    for (const line of cfg.code === 0 ? cfg.stdout.split('\n') : []) {
+        const m = /^remote\.(.+)\.url (.+)$/.exec(line.trim());
+        if (m && remoteIsRepo(m[2], o.repo)) {
+            remote = m[1];
+            break;
+        }
+    }
+    if (!remote)
+        return { kind: 'none', why: 'other-repo' };
+    // The worktrees folder must be outside the working folder: a worktree inside it would be untracked files of the owner's repo.
+    const parent = worktreesDir(o.dataDir);
+    const realTop = realish(topDir);
+    const realWork = realish(o.workdir);
+    if (isInside(parent, realTop) || isInside(parent, realWork)) {
+        log.warn(`worktree: the worktrees folder ${parent} is inside the working folder ${realTop}`);
+        return refuse('the folder for temporary worktrees is inside the working folder, so no worktree was made.');
+    }
+    const root = path.join(parent, safeId(o.id));
+    const tmpRef = `${TMP_REF_PREFIX}${refId(o.id)}`;
+    const isPr = !!o.prNumber && Number.isInteger(o.prNumber) && o.prNumber > 0;
+    const isMerge = !isPr && !!o.branch && isSafeRef(o.branch);
+    if (!isPr && !isMerge)
+        return refuse('it could not be checked against a pull request or a base branch.');
+    // Fetches into the private ref with an explicit refspec and no refmap: the owner's remote-tracking refs do not move.
+    const fetchTo = async (ref) => {
+        const f = await run(topDir, ['fetch', '--no-tags', '--no-recurse-submodules', '--quiet', '--refmap=', remote, `+${ref}:${tmpRef}`], FETCH_TIMEOUT_MS, o.runId);
+        if (f.code !== 0)
+            log.warn(`worktree: fetch of ${ref} failed${f.timedOut ? ' (timed out)' : ''}: ${redact(f.stderr.trim().split('\n').pop() ?? '')}`);
+        return f.code === 0;
+    };
+    let added = false;
+    let cleaned = false;
+    const cleanup = async () => {
+        if (cleaned)
+            return;
+        cleaned = true;
+        if (added) {
+            try {
+                await git(topDir, ['worktree', 'remove', '--force', root], 30_000, o.runId);
+            }
+            catch {
+                /* the folder is removed below */
+            }
+        }
+        try {
+            removeDir(root);
+        }
+        catch (err) {
+            log.warn(`worktree: could not remove ${root}: ${redact(String(err))}`);
+        }
+        try {
+            await git(topDir, ['update-ref', '-d', tmpRef], 30_000, o.runId);
+        }
+        catch {
+            /* a private ref left behind moves nothing of the owner's */
+        }
+        inUse.delete(root);
+    };
+    try {
+        let full = null;
+        if (isPr) {
+            const n = o.prNumber;
+            // 1. The commit is the head of the PR as the base repository serves it.
+            if (!FULL_SHA.test(sha))
+                return refuse('the commit is not given in full, so it cannot be checked against the PR.');
+            if (!(await fetchTo(`refs/pull/${n}/head`)))
+                return gone() ? CANCELLED : refuse('Could not fetch the PR head commit.');
+            const rp = await run(topDir, ['rev-parse', '--verify', '--quiet', `${tmpRef}^{commit}`], 10_000, o.runId);
+            const fetched = rp.code === 0 ? rp.stdout.trim().toLowerCase() : '';
+            if (gone())
+                return CANCELLED;
+            if (!FULL_SHA.test(fetched))
+                return refuse('Could not read the PR head commit.');
+            if (fetched !== sha)
+                return refuse(`the commit is not the head of PR #${n} in this repository.`);
+            // 2. The GitHub API agrees, and the head repository is the base repository (not a fork).
+            let head = null;
+            try {
+                head = (await o.pullHead?.(n)) ?? null;
+            }
+            catch (err) {
+                log.warn(`worktree: the PR #${n} lookup failed: ${redact(String(err instanceof Error ? err.message : err))}`);
+            }
+            if (gone())
+                return CANCELLED;
+            if (!head)
+                return refuse(`PR #${n} could not be checked with GitHub (no GitHub token, or the request failed).`);
+            // The same rule as a fresh clone (verify.ts): the head on GitHub is this commit, and its repository is this one.
+            const judged = judgePullHead(head, o.repo, n, fetched);
+            if (!judged.ok)
+                return refuse(judged.reason);
+            full = fetched;
+        }
+        else {
+            // The commit is on the base branch: fetch the branch, then ask git. Nothing is fetched by commit id.
+            const branch = o.branch;
+            const label = o.branchLabel ?? 'base branch';
+            const note = o.branchNote ? ` ${o.branchNote}` : '';
+            if (!(await fetchTo(`refs/heads/${branch}`)))
+                return gone() ? CANCELLED : refuse(`Could not fetch the ${label}.`);
+            const rp = await run(topDir, ['rev-parse', '--verify', '--quiet', `${sha}^{commit}`], 10_000, o.runId);
+            const resolved = rp.code === 0 ? rp.stdout.trim().toLowerCase() : '';
+            if (gone())
+                return CANCELLED;
+            if (!FULL_SHA.test(resolved))
+                return refuse(`the commit is not on the ${label}${label === 'test branch' ? ` ${branch}` : ''}.${note}`);
+            const anc = await run(topDir, ['merge-base', '--is-ancestor', resolved, tmpRef], 30_000, o.runId);
+            if (gone())
+                return CANCELLED;
+            if (anc.code !== 0)
+                return refuse(`the commit is not on the ${label} ${branch}.${note}`);
+            full = resolved;
+        }
+        mkdirSync(parent, { recursive: true });
+        // An entry of an earlier worktree at this very path (a crash) is ours: drop it, and only it, before the path is used again.
+        removeOwnWorktree(topDir, root);
+        inUse.set(root, topDir);
+        registerExitCleanup();
+        // Hooks of the person's repo (post-checkout) do not run for a checkout localdost makes.
+        added = true;
+        const add = await run(topDir, ['-c', 'core.hooksPath=/dev/null', 'worktree', 'add', '--detach', '--quiet', root, full], GIT_TIMEOUT_MS * 2, o.runId);
+        if (add.code !== 0 || gone()) {
+            if (add.code !== 0 && !gone())
+                log.warn(`worktree: git worktree add failed: ${redact(add.stderr.trim().split('\n').pop() ?? '')}`);
+            await cleanup();
+            if (gone())
+                return CANCELLED;
+            return refuse(add.timedOut ? 'Creating the worktree timed out.' : 'Could not create a worktree for it.');
+        }
+        // The same sub folder of the worktree as the working folder is of its repo (a monorepo package).
+        let rel = '';
+        try {
+            rel = path.relative(realpathSync(topDir), realpathSync(o.workdir));
+        }
+        catch {
+            rel = '';
+        }
+        if (rel.startsWith('..') || path.isAbsolute(rel))
+            rel = '';
+        return { kind: 'ready', worktree: { dir: path.join(root, rel), root, sha: full, cleanup } };
+    }
+    finally {
+        // Every exit that is not a ready worktree drops the private ref (and anything half made); a ready one is cleaned by its owner.
+        if (!inUse.has(root) || !added)
+            await cleanup();
+    }
+}
+/**
+ * Removes the worktrees a crash left behind: each folder under <dataDir>/worktrees (and nothing else) is removed
+ * as a worktree of the repo it was added from. A worktree that a run holds is skipped. Returns how many were removed.
+ */
+export function sweepWorktrees(dataDir = config.dataDir) {
+    const parent = worktreesDir(dataDir);
+    if (!existsSync(parent))
+        return 0;
+    let n = 0;
+    for (const name of readdirSync(parent)) {
+        const dir = path.join(parent, name);
+        if (inUse.has(path.resolve(dir)))
+            continue;
+        let repo;
+        try {
+            // A linked worktree has a `.git` file: "gitdir: <repo>/.git/worktrees/<name>".
+            const m = /^gitdir:\s*(.+)$/m.exec(lstatSync(dir).isDirectory() ? readFileSync(path.join(dir, '.git'), 'utf8') : '');
+            if (m)
+                repo = path.dirname(path.dirname(path.dirname(m[1].trim())));
+        }
+        catch {
+            /* not a worktree: removed below all the same */
+        }
+        if (repo && existsSync(repo))
+            removeOwnWorktree(repo, dir);
+        try {
+            removeDir(dir);
+            n++;
+        }
+        catch (err) {
+            log.warn(`worktree: could not remove ${dir}: ${redact(String(err))}`);
+        }
+    }
+    return n;
+}
+// ---------- for the Tests repo checkout (src/runner/test-repo.ts) ----------
+// A Tests repo run adds its worktrees to the same folder, under the same rules: never inside a repo folder, removed when the run
+// ends, swept at boot, and left alone while a run holds them.
+export { git as gitIn, realish, refId, removeOwnWorktree, safeId, TMP_REF_PREFIX };
+/** Marks a worktree as held by a run in this process, so the boot sweep of a later server start is the only thing that may remove it. */
+export function holdWorktree(root, repoDir) {
+    inUse.set(root, repoDir);
+    registerExitCleanup();
+}
+/** Lets go of a worktree held with holdWorktree. */
+export function releaseWorktree(root) {
+    inUse.delete(root);
+}
+//# sourceMappingURL=worktree.js.map

package/dist/runner/worktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.js","sourceRoot":"","sources":["../../src/runner/worktree.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,2GAA2G;AAC3G,0GAA0G;AAC1G,2GAA2G;AAC3G,yGAAyG;AACzG,+GAA+G;AAC/G,gEAAgE;AAChE,EAAE;AACF,iHAAiH;AACjH,8GAA8G;AAC9G,8GAA8G;AAC9G,mHAAmH;AACnH,wDAAwD;AACxD,EAAE;AACF,qHAAqH;AACrH,2GAA2G;AAC3G,gHAAgH;AAChH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5G,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAC;AAItE,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,iHAAiH;AACjH,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAoB7C,yHAAyH;AACzH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxC,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,8GAA8G;AAC9G,SAAS,OAAO,CAAC,CAAS;IACxB,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED,gIAAgI;AAChI,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAc;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,yIAAyI;AACzI,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAW;IAClD,IAAI,CAAC;QACH,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3H,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK;YAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,MAAM;IACb,gFAAgF;IAChF,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,SAAS,GAAG,cAAc,EAAE,KAAc;IAClF,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAqC;IAC7E,MAAM,CAAC,GAAG,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AACpH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC;SAChB,OAAO,CAAC,sEAAsE,EAAE,UAAU,CAAC;SAC3F,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAmBrC;IACC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,KAAK,IAAI,CAAC;IAC5C,wHAAwH;IACxH,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,SAAkB,EAAE,KAAc,EAAE,EAAE,CAC9E,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACrI,MAAM,SAAS,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACrF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oDAAoD,CAAC,EAAE,CAAC;IAC9J,MAAM,MAAM,GAAG,CAAC,GAAW,EAAgB,EAAE,CAAC,CAAC;QAC7C,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,6BAA6B,KAAK,KAAK,GAAG,0CAA0C;KAC7F,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEjC,wGAAwG;IACxG,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAClG,IAAI,MAA0B,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAExD,8HAA8H;IAC9H,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,kCAAkC,MAAM,iCAAiC,OAAO,EAAE,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,2FAA2F,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAEjD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,kEAAkE,CAAC,CAAC;IAEzG,qHAAqH;IACrH,MAAM,OAAO,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,MAAM,GAAG,CACjB,MAAM,EACN,CAAC,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC,EACtG,gBAAgB,EAChB,CAAC,CAAC,KAAK,CACR,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACtJ,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC;IAEF,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,GAAG,CAAC,CAAC,QAAS,CAAC;YACtB,wEAAwE;YACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,0EAA0E,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;YACvH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC1G,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,IAAI,IAAI,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,MAAM,CAAC,oCAAoC,CAAC,CAAC;YACjF,IAAI,OAAO,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC,qCAAqC,CAAC,sBAAsB,CAAC,CAAC;YACjG,yFAAyF;YACzF,IAAI,IAAI,GAAoB,IAAI,CAAC;YACjC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,IAAI,IAAI,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC;YAChH,iHAAiH;YACjH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,qGAAqG;YACrG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAO,CAAC;YACzB,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,uBAAuB,KAAK,GAAG,CAAC,CAAC;YAClH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACvG,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,IAAI,IAAI,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC,4BAA4B,KAAK,GAAG,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvI,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAClG,IAAI,IAAI,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,4BAA4B,KAAK,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YACzF,IAAI,GAAG,QAAQ,CAAC;QAClB,CAAC;QAED,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,4HAA4H;QAC5H,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxB,mBAAmB,EAAE,CAAC;QAEtB,wFAAwF;QACxF,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACrJ,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACnI,MAAM,OAAO,EAAE,CAAC;YAChB,IAAI,IAAI,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;QAC3G,CAAC;QAED,iGAAiG;QACjG,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9F,CAAC;YAAS,CAAC;QACT,+HAA+H;QAC/H,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,OAAO,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC3C,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,+EAA+E;YAC/E,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrH,IAAI,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,EAAE,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,iIAAiI;AACjI,8DAA8D;AAE9D,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAEnF,yIAAyI;AACzI,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,mBAAmB,EAAE,CAAC;AACxB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/sandbox.js

@@ -0,0 +1,61 @@
+// Sandbox mode (KAT-286). LOCALDOST_SANDBOX=1 starts a server that only serves the UI and the API over the
+// data it already has: the job queue, pollers, probes, status-page checks, digests, webhooks, and Slack
+// stay off, and every outward write is refused before it reaches the network. Model calls still work.
+//
+// The switches live at a few choke points, not at every caller:
+//   queue.ts      startQueue and claimNext     no job starts or is claimed
+//   monitor/      startPollers, startProbes,   no timer starts
+//                 startStatusPages
+//   index.ts      the digest scheduler         no digest is queued
+//   nightly-scheduler.ts                       no nightly test run is queued
+//   server.ts     the /hooks/* routes          503
+//   slack/        startSlack, postUpdate       no connection, no post
+//   agent/rules.ts execute()                   GitHub, Linear, Jira, Slack, MCP writes, pull requests
+//   notify/push.ts notify()                    web push and ntfy
+import { config, log } from './config.js';
+/** The top banner of the app. The server sends it, so the words live in one place. */
+export const SANDBOX_BANNER = 'Sandbox: nothing leaves this server.';
+/** The plain answer of /hooks/* in sandbox mode. */
+export const SANDBOX_WEBHOOK_MESSAGE = 'Sandbox mode is on, so this server does not take webhooks.';
+/** True while LOCALDOST_SANDBOX is 1, true, or yes. */
+export function sandboxOn() {
+    return config.sandbox;
+}
+/** Action kinds that write to something outside this server. The rest only touch local data. */
+export const OUTWARD_KINDS = new Set([
+    'push_notify',
+    'pr_comment',
+    'check_run',
+    'ticket_comment',
+    'ticket_status',
+    'open_pr',
+    'mcp_tool',
+    'slack_post',
+    'file_defect',
+    'issue_create',
+]);
+/** The error a refused write throws, so a caller records a failure and an approval stays in the Inbox. */
+export class SandboxRefusedError extends Error {
+    kind;
+    target;
+    constructor(kind, target) {
+        super(`sandbox: refused ${kind} to ${target}`);
+        this.kind = kind;
+        this.target = target;
+        this.name = 'SandboxRefusedError';
+    }
+}
+/** Writes the one log line for a refused write. */
+export function logRefused(kind, target) {
+    log.warn(`sandbox: refused ${kind} to ${target}`);
+}
+/** Logs the refusal and throws. Call it before any network call of an outward write. */
+export function refuseOutward(kind, target) {
+    logRefused(kind, target);
+    throw new SandboxRefusedError(kind, target);
+}
+/** Logs that a part of the server stays off in sandbox mode, once per start call. */
+export function sandboxSkips(what) {
+    log.info(`sandbox: ${what} off`);
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,wGAAwG;AACxG,sGAAsG;AACtG,EAAE;AACF,gEAAgE;AAChE,2EAA2E;AAC3E,+DAA+D;AAC/D,mCAAmC;AACnC,mEAAmE;AACnE,6EAA6E;AAC7E,mDAAmD;AACnD,sEAAsE;AACtE,sGAAsG;AACtG,iEAAiE;AACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAG1C,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAErE,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,4DAA4D,CAAC;AAEpG,uDAAuD;AACvD,MAAM,UAAU,SAAS;IACvB,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAA4B,IAAI,GAAG,CAAa;IACxE,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,SAAS;IACT,UAAU;IACV,YAAY;IACZ,aAAa;IACb,cAAc;CACf,CAAC,CAAC;AAEH,0GAA0G;AAC1G,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEjC;IACA;IAFX,YACW,IAAY,EACZ,MAAc;QAEvB,KAAK,CAAC,oBAAoB,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC;QAHtC,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QAGvB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAc;IACrD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc;IACxD,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzB,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;AACnC,CAAC"}