tracegrove 0.0.0-stage → 0.3.1

package/dist/hosts/local.js

@@ -0,0 +1,311 @@
+/**
+ * Local process ExecutorHost: launches the pinned application with a fresh port, data
+ * directory and issued credentials; attests the actual source identity independently of
+ * anything the application says about itself; confirms termination on stop.
+ */
+import { fork } from 'node:child_process';
+import { createServer } from 'node:net';
+import { randomBytes } from 'node:crypto';
+import { existsSync, mkdirSync, rmSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { HostCapabilityObservation, HostLease, IdentityAttestation, digestOfValue, freeze, parseAs, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { verifyGitSnapshotProofMetadata } from "../source/gitObjectProof.js";
+import { Deadline, sleep } from "../core/deadline.js";
+import { InfrastructureFailure, Blocked } from "../core/errors.js";
+import { isoPlusMs, nowIso } from "../core/clock.js";
+import { observeApplicationRuntime } from "./runtime.js";
+import { SnapshotLaunchObservation, SnapshotLaunchFailure, identityFromEntries, sourceIdentityDigest } from "./sourceIdentity.js";
+import { NativeJobDriver } from "../adapters/job/driver.js";
+export { sourceIdentityDigest } from "./sourceIdentity.js";
+export function buildCapabilityObservation(input) {
+    const capabilities = [
+        ...input.supported.map((capability) => ({ capability, state: 'supported', probe: 'probed', evidenceRefs: [] })),
+        ...input.unsupported.map((capability) => ({ capability, state: 'unsupported', probe: 'probed', evidenceRefs: [] })),
+    ];
+    return parseAs(HostCapabilityObservation, freeze({
+        schemaVersion: 'workflow.host-observation/v1',
+        ref: { id: `${input.executionId}.host-observation`, revision: '1' },
+        scope: input.scope,
+        hostPlanRef: input.hostPlanRef,
+        hostLeaseRef: input.leaseRef,
+        capabilities,
+        observedAt: nowIso(),
+        expiresAt: isoPlusMs(10 * 60 * 1000),
+    }), 'host observation');
+}
+export function buildLease(context, pid) {
+    return parseAs(HostLease, freeze({
+        schemaVersion: 'workflow.host-lease/v1',
+        ref: { id: `${context.executionId}.host-lease`, revision: String(context.generation) },
+        scope: context.scope,
+        hostPlanRef: context.hostPlan.ref,
+        campaignId: context.campaignId, executionId: context.executionId, attemptId: context.attemptId, generation: context.generation,
+        actorId: context.actorId,
+        observedWorkspaceIdentityRef: null,
+        observedRuntimeIdentity: { node: process.version, platform: process.platform, arch: process.arch, pid },
+        sessionHandleRef: null,
+        issuedAt: nowIso(),
+        expiresAt: isoPlusMs(context.hostPlan.sessionLifetimeMs),
+    }), 'host lease');
+}
+/** Reserve a free loopback port. The app binds it moments later; a race is reported as a startup failure. */
+export function freeLoopbackPort() {
+    return new Promise((resolvePort, reject) => {
+        const server = createServer();
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            const port = typeof address === 'object' && address ? address.port : 0;
+            server.close(() => (port ? resolvePort(port) : reject(new InfrastructureFailure('could not reserve a loopback port'))));
+        });
+    });
+}
+function substitute(text, values) {
+    return text.replace(/\{(port|dataDir)\}/g, (_m, name) => values[name]);
+}
+async function waitReady(origin, path, deadline, signal) {
+    while (!deadline.expired()) {
+        try {
+            const response = await fetch(`${origin}${path}`, { signal: deadline.child(2000).signal(signal) });
+            if (response.ok) {
+                try {
+                    return await response.json();
+                }
+                catch {
+                    return null;
+                }
+            }
+        }
+        catch { /* not ready yet */ }
+        await sleep(100, signal);
+    }
+    throw new InfrastructureFailure(`application did not become ready at ${origin}${path} within the readiness timeout`);
+}
+export class LocalProcessHost {
+    async start(context) {
+        if (process.platform === 'win32')
+            throw new Blocked([{ code: 'local_process_tree_unsupported', detail: 'the local host requires POSIX process-group termination' }]);
+        const launch = context.hostPlan.launch;
+        if (!launch)
+            throw new Blocked([{ code: 'host_launch_missing', detail: context.hostPlan.ref.id }]);
+        const cwd = resolve(context.projectRoot, launch.cwd);
+        if (launch.sourceSnapshot && (!verifySelfDigest(launch.sourceSnapshot.snapshot) || !sameScope(launch.sourceSnapshot.snapshot.scope, context.scope))) {
+            throw new Blocked([{ code: 'snapshot_scope_or_digest_mismatch', detail: 'The launch snapshot must match the admitted local owner and sealed manifest' }]);
+        }
+        let identity = sourceIdentityDigest(cwd, launch.identitySourceFiles);
+        let observedSnapshotRef;
+        let observedGitSource;
+        const runtime = await observeApplicationRuntime(launch.command, cwd, process.env.PATH ?? '', context.signal);
+        if (launch.nativeJobs && runtime.family !== 'node')
+            throw new Blocked([{ code: 'native_job_runtime_unsupported', detail: 'The native job bridge requires a Node application' }]);
+        const dataDir = join(context.workspaceDir, 'data');
+        mkdirSync(dataDir, { recursive: true });
+        const credentials = new Map();
+        const tokenMap = {};
+        for (const issued of launch.issuedCredentials) {
+            if (!context.credentialNames.includes(issued.name))
+                continue;
+            const secret = randomBytes(24).toString('base64url');
+            credentials.set(issued.name, secret);
+            tokenMap[secret] = issued.subject;
+        }
+        for (const name of context.credentialNames) {
+            if (!credentials.has(name))
+                throw new Blocked([{ code: 'credential_not_issuable', detail: `host ${context.hostPlan.ref.id} cannot issue ${name}`, owner: 'operator', action: 'declare the credential in the launch recipe' }]);
+        }
+        const assigned = launch.portMode === 'assigned';
+        const assignedPort = assigned ? await freeLoopbackPort() : 0;
+        const values = { port: String(assignedPort), dataDir };
+        const launchEnv = assigned ? Object.fromEntries(Object.entries(launch.env).map(([k, v]) => [k, substitute(v, values)])) : launch.env;
+        const launchArgs = assigned ? launch.args.map((arg) => substitute(arg, values)) : launch.args;
+        const env = { ...launchEnv, ...(launch.nativeJobs ? { TRACEGROVE_NATIVE_JOBS: launch.nativeJobs } : {}), PATH: process.env.PATH ?? '', ...(assigned && process.env.HOME ? { HOME: process.env.HOME } : {}), [launch.portEnv]: String(assignedPort), [launch.dataDirEnv]: dataDir, [launch.credentialsEnv]: JSON.stringify(tokenMap) };
+        const extension = import.meta.url.endsWith('.ts') ? 'ts' : 'js';
+        const child = fork(new URL(`./localSupervisor.${extension}`, import.meta.url), [], {
+            cwd, env: { PATH: process.env.PATH ?? '' }, execArgv: [], stdio: ['ignore', 'pipe', 'pipe', 'ipc'],
+        });
+        const nativeJobs = launch.nativeJobs ? new NativeJobDriver(child) : undefined;
+        let ownedCleanupConfirmed = false;
+        child.on('message', (message) => {
+            if (message && typeof message === 'object' && 'kind' in message && message.kind === 'host.cleaned')
+                ownedCleanupConfirmed = true;
+        });
+        const sourceObservation = launch.sourceSnapshot ? new Promise((resolveSource, reject) => {
+            const failed = (stage) => { cleanup(); reject(new Blocked([{ code: 'snapshot_source_unavailable', detail: 'The supervisor could not verify the pinned source tree' }, { code: `snapshot_preparation_${stage}`, detail: 'Pinned source preparation did not complete' }])); };
+            const exited = () => failed('owner_exit');
+            const timer = setTimeout(() => failed('timeout'), launch.readiness.timeoutMs);
+            const onMessage = (message) => {
+                const failure = SnapshotLaunchFailure.safeParse(message);
+                if (failure.success)
+                    return failed(failure.data.stage);
+                const parsed = SnapshotLaunchObservation.safeParse(message);
+                if (!parsed.success)
+                    return;
+                if (!sameRef(parsed.data.snapshotRef, launch.sourceSnapshot.snapshot.ref) || identityFromEntries(parsed.data.identity.entries).hex !== parsed.data.identity.hex)
+                    return failed('observation');
+                try {
+                    const expected = launch.sourceSnapshot.snapshot.commitProof ? { ...verifyGitSnapshotProofMetadata(launch.sourceSnapshot.snapshot).binding, verification: 'actual_file_bytes' } : undefined;
+                    if (digestOfValue(parsed.data.gitSource ?? null).hex !== digestOfValue(expected ?? null).hex)
+                        return failed('objects');
+                }
+                catch {
+                    return failed('objects');
+                }
+                cleanup();
+                resolveSource(parsed.data);
+            };
+            const cleanup = () => { clearTimeout(timer); child.off('message', onMessage); child.off('exit', exited); child.off('error', exited); };
+            child.on('message', onMessage);
+            child.once('exit', exited);
+            child.once('error', exited);
+        }) : null;
+        sourceObservation?.catch(() => undefined);
+        const sourceLaunch = launch.sourceSnapshot ? {
+            sourceSnapshot: { ...launch.sourceSnapshot, root: resolve(context.projectRoot, launch.sourceSnapshot.root) },
+        } : {};
+        if (launch.nativeJobs)
+            sourceLaunch.nativeJobs = launch.nativeJobs;
+        // Candidate output may contain credentials. Drain it without exporting it as proof; keep a
+        // short, secret-redacted tail only to explain a startup failure.
+        let stderrTail = '';
+        child.stderr?.on('data', (chunk) => { stderrTail = (stderrTail + chunk.toString('utf8')).slice(-4096); });
+        const startupHint = () => {
+            let text = stderrTail;
+            for (const secret of credentials.values())
+                text = text.split(secret).join('<redacted>');
+            const lines = text.trim().split('\n').slice(-8).join('\n');
+            return lines ? `; last app output:\n${lines}` : '';
+        };
+        try {
+            const port = assigned ? await new Promise((resolvePort, reject) => {
+                // No stdout protocol: drain output and let readiness polling decide.
+                child.stdout?.resume();
+                child.on('exit', (code) => reject(new InfrastructureFailure(`application exited before becoming ready (code ${code})`)));
+                child.on('error', (error) => reject(new InfrastructureFailure(`failed to spawn ${launch.command}: ${error.message}`)));
+                child.send({ command: runtime.executable, args: launchArgs, cwd, env, workspaceDir: context.workspaceDir, identitySourceFiles: launch.identitySourceFiles, runtimeFamily: runtime.family, ...sourceLaunch });
+                resolvePort(assignedPort);
+            }) : await new Promise((resolvePort, reject) => {
+                let buffer = '';
+                const timer = setTimeout(() => reject(new InfrastructureFailure(`application did not report a port within ${launch.readiness.timeoutMs} ms`)), launch.readiness.timeoutMs);
+                child.stdout?.on('data', (chunk) => {
+                    buffer += chunk.toString('utf8');
+                    const match = buffer.match(/listening (\d+)/);
+                    if (match) {
+                        clearTimeout(timer);
+                        resolvePort(Number(match[1]));
+                    }
+                });
+                child.on('exit', (code) => { clearTimeout(timer); reject(new InfrastructureFailure(`application exited before listening (code ${code})`)); });
+                child.on('error', (error) => { clearTimeout(timer); reject(new InfrastructureFailure(`failed to spawn ${launch.command}: ${error.message}`)); });
+                child.send({ command: runtime.executable, args: launch.args, cwd, env, workspaceDir: context.workspaceDir, identitySourceFiles: launch.identitySourceFiles, runtimeFamily: runtime.family, ...sourceLaunch });
+            });
+            const origin = `http://127.0.0.1:${port}`;
+            const stopPolling = new AbortController();
+            const exitedEarly = assigned ? new Promise((_, reject) => {
+                // Give the last stderr bytes a moment to arrive, reject, then stop the readiness poll.
+                const onExit = () => { setTimeout(() => { reject(new InfrastructureFailure(`application exited before becoming ready${startupHint()}`)); stopPolling.abort(); }, 50); };
+                if (child.exitCode !== null)
+                    onExit();
+                else
+                    child.once('exit', onExit);
+            }) : null;
+            exitedEarly?.catch(() => undefined);
+            const ready = waitReady(origin, launch.readiness.path, Deadline.in(launch.readiness.timeoutMs), AbortSignal.any([context.signal, stopPolling.signal]));
+            ready.catch(() => undefined);
+            let healthBody;
+            try {
+                const [health, source] = await Promise.all([exitedEarly ? Promise.race([ready, exitedEarly]) : ready, sourceObservation,
+                    nativeJobs?.waitReady(Deadline.in(launch.readiness.timeoutMs), context.signal)]);
+                healthBody = health;
+                if (source) {
+                    identity = source.identity;
+                    observedSnapshotRef = source.snapshotRef;
+                    observedGitSource = source.gitSource;
+                }
+            }
+            catch (error) {
+                stopPolling.abort();
+                if (assigned && error instanceof InfrastructureFailure && !error.message.includes('last app output'))
+                    throw new InfrastructureFailure(`${error.message}${startupHint()}`);
+                throw error;
+            }
+            const lease = buildLease(context, child.pid ?? null);
+            const attestation = parseAs(IdentityAttestation, freeze({
+                schemaVersion: 'workflow.identity-attestation/v1',
+                ref: { id: `${context.executionId}.attestation.${launch.componentId}`, revision: '1' },
+                scope: context.scope,
+                componentId: launch.componentId,
+                kind: 'application',
+                identity: { kind: 'source_digest', sourceDigest: { algorithm: 'sha256', hex: identity.hex }, runtime: runtime.runtime },
+                issuer: 'local_launcher',
+                trustPolicy: 'launcher_computed_source_digest',
+                evidence: { files: identity.entries, runtimeProbe: runtime, observedHealthBody: (healthBody ?? null),
+                    ...(observedSnapshotRef ? { sourceSnapshotRef: observedSnapshotRef } : {}), ...(observedGitSource ? { gitSource: observedGitSource } : {}) },
+                observedAt: nowIso(),
+            }), 'identity attestation');
+            const observation = buildCapabilityObservation({
+                hostPlanRef: context.hostPlan.ref, leaseRef: lease.ref, scope: context.scope, executionId: context.executionId,
+                supported: ['shell', 'network_origin:loopback', 'confirmed_cancel', 'artifact_delivery', 'file_persistence', ...(nativeJobs ? ['native_job'] : [])],
+                unsupported: ['browser_engine', 'dom_cdp', 'screenshot', 'video_export', 'native_desktop', 'device:ios', 'device:android', 'mcp_transport', 'widget_host'],
+            });
+            let stopResult = null;
+            const session = {
+                origin, lease, observation, attestations: [attestation], credentials,
+                boundaryMode: 'real', interceptorRefs: [],
+                ownedResources: [
+                    { entityKey: 'host.process', physicalId: String(child.pid ?? 'unknown'), boundaryId: 'application' },
+                    { entityKey: 'host.workspace', physicalId: context.workspaceDir, boundaryId: 'storage' },
+                ],
+                dataDir,
+                ...(nativeJobs ? { nativeJobs } : {}),
+                stop(reason) {
+                    if (stopResult)
+                        return stopResult;
+                    stopResult = (async () => {
+                        const exited = new Promise((resolveExit) => {
+                            if (child.exitCode !== null || child.signalCode !== null)
+                                return resolveExit(true);
+                            child.once('exit', () => resolveExit(true));
+                        });
+                        child.kill('SIGTERM');
+                        const graceful = await Promise.race([exited, sleep(5000).then(() => false)]);
+                        if (!graceful && child.connected)
+                            child.disconnect();
+                        if (!graceful)
+                            await Promise.race([exited, sleep(2000).then(() => false)]);
+                        const confirmed = ownedCleanupConfirmed && (child.exitCode !== null || child.signalCode !== null);
+                        if (confirmed)
+                            rmSync(context.workspaceDir, { recursive: true, force: true });
+                        const workspaceGone = !existsSync(context.workspaceDir);
+                        return { confirmed: confirmed && workspaceGone, detail: `${reason}; process ${confirmed ? 'exited' : 'still running'}; workspace ${workspaceGone ? 'removed' : 'remains'}` };
+                    })();
+                    return stopResult;
+                },
+            };
+            if (context.signal.aborted) {
+                await session.stop('cancelled during start');
+                throw new InfrastructureFailure('cancelled during host start');
+            }
+            return session;
+        }
+        catch (error) {
+            // Disconnect lets the trusted owner kill its application group and remove
+            // the owned workspace, including when startup failed before readiness.
+            if (child.connected)
+                child.disconnect();
+            if (child.exitCode === null && child.signalCode === null) {
+                await new Promise((done) => {
+                    const timeout = setTimeout(done, context.hostPlan.cleanupReserveMs);
+                    child.once('exit', () => { clearTimeout(timeout); done(); });
+                });
+            }
+            credentials.clear();
+            // Supervisor exit alone says nothing about its owned process group. Keep
+            // the inventory/workspace unless the trusted owner acknowledged cleanup.
+            if (ownedCleanupConfirmed && (child.exitCode !== null || child.signalCode !== null)) {
+                rmSync(context.workspaceDir, { recursive: true, force: true });
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=local.js.map

package/dist/hosts/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/hosts/local.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAgD,MAAM,sBAAsB,CAAC;AACrN,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClI,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,UAAU,0BAA0B,CAAC,KAAsL;IAC/N,MAAM,YAAY,GAAG;QACnB,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,WAAoB,EAAE,KAAK,EAAE,QAAiB,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACjI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAsB,EAAE,KAAK,EAAE,QAAiB,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;KACtI,CAAC;IACF,OAAO,OAAO,CAAC,yBAAyB,EAAE,MAAM,CAAC;QAC/C,aAAa,EAAE,8BAAuC;QACtD,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,mBAAmB,EAAE,QAAQ,EAAE,GAAG,EAAE;QACnE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,QAAQ;QAC5B,YAAY;QACZ,UAAU,EAAE,MAAM,EAAE;QACpB,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;KACrC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAyB,EAAE,GAAkB;IACtE,OAAO,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;QAC/B,aAAa,EAAE,wBAAiC;QAChD,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,WAAW,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QACtF,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9H,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,4BAA4B,EAAE,IAAI;QAClC,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;QACvG,gBAAgB,EAAE,IAAI;QACtB,QAAQ,EAAE,MAAM,EAAE;QAClB,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACzD,CAAC,EAAE,YAAY,CAAC,CAAC;AACpB,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,MAA8B;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,QAAkB,EAAE,MAAmB;IAC5F,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClG,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC;YAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,qBAAqB,CAAC,uCAAuC,MAAM,GAAG,IAAI,+BAA+B,CAAC,CAAC;AACvH,CAAC;AAED,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CAAC,KAAK,CAAC,OAAyB;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC,CAAC;QACrK,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACpJ,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,6EAA6E,EAAE,CAAC,CAAC,CAAC;QAC5J,CAAC;QACD,IAAI,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrE,IAAI,mBAAyE,CAAC;QAC9E,IAAI,iBAAmD,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC,CAAC,CAAC;QACjL,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACnD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACpC,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,iBAAiB,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAC,CAAC;QACjO,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC;QAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACrI,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9F,MAAM,GAAG,GAA2B,EAAE,GAAG,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9V,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,KAAK,GAAiB,IAAI,CAAC,IAAI,GAAG,CAAC,qBAAqB,SAAS,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE;YAC/F,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;SACnG,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YACvC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;gBAAE,qBAAqB,GAAG,IAAI,CAAC;QACnI,CAAC,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,OAAO,CAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;YACjH,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,wDAAwD,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,KAAK,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpR,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAE,EAAE;gBACrC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,OAAO,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,cAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG;oBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC/L,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,8BAA8B,CAAC,MAAM,CAAC,cAAe,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC7L,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG;wBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzH,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBACrC,OAAO,EAAE,CAAC;gBAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACvI,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACV,iBAAiB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAwD,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;YAChG,cAAc,EAAE,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE;SAC7G,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,MAAM,CAAC,UAAU;YAAE,YAAY,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACnE,2FAA2F;QAC3F,iEAAiE;QACjE,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,UAAU,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,IAAI,IAAI,GAAG,UAAU,CAAC;YACtB,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,CAAC,CAAC;QACF,IAAI,CAAC;YACL,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;gBACxE,qEAAqE;gBACrE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACvB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,kDAAkD,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,mBAAmB,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvH,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;gBAC7M,WAAW,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrD,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,4CAA4C,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC3K,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;oBAC9C,IAAI,KAAK,EAAE,CAAC;wBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;wBAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;gBACpE,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,6CAA6C,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9I,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,mBAAmB,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjJ,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;YAChN,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,oBAAoB,IAAI,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC9D,uFAAuF;gBACvF,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,qBAAqB,CAAC,2CAA2C,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;oBAAE,MAAM,EAAE,CAAC;;oBAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACV,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvJ,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,UAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,iBAAiB;oBACrH,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnF,UAAU,GAAG,MAAM,CAAC;gBACpB,IAAI,MAAM,EAAE,CAAC;oBAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAAC,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC;oBAAC,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC;gBAAC,CAAC;YAC7H,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACb,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,QAAQ,IAAI,KAAK,YAAY,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBAAE,MAAM,IAAI,qBAAqB,CAAC,GAAG,KAAK,CAAC,OAAO,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC1K,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;gBACtD,aAAa,EAAE,kCAA2C;gBAC1D,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,WAAW,gBAAgB,MAAM,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACtF,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,IAAI,EAAE,aAAsB;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAwB,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,QAAiB,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;gBACzI,MAAM,EAAE,gBAAyB;gBACjC,WAAW,EAAE,iCAA0C;gBACvD,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,UAAU,IAAI,IAAI,CAAU;oBAC3G,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBAC9I,UAAU,EAAE,MAAM,EAAE;aACrB,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAC5B,MAAM,WAAW,GAAG,0BAA0B,CAAC;gBAC7C,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAC9G,SAAS,EAAE,CAAC,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnJ,WAAW,EAAE,CAAC,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,CAAC;aAC3J,CAAC,CAAC;YACH,IAAI,UAAU,GAA2D,IAAI,CAAC;YAC9E,MAAM,OAAO,GAAgB;gBAC3B,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW;gBACpE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE;gBACzC,cAAc,EAAE;oBACd,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE;oBACpG,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE;iBACzF;gBACD,OAAO;gBACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAc;oBACjB,IAAI,UAAU;wBAAE,OAAO,UAAU,CAAC;oBAClC,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;wBACzB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAU,CAAC,WAAW,EAAE,EAAE;4BAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gCAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;4BACnF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC9C,CAAC,CAAC,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACtB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC7E,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS;4BAAE,KAAK,CAAC,UAAU,EAAE,CAAC;wBACrD,IAAI,CAAC,QAAQ;4BAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC3E,MAAM,SAAS,GAAG,qBAAqB,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;wBAClG,IAAI,SAAS;4BAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9E,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;wBACxD,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,eAAe,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;oBAC7K,CAAC,CAAC,EAAE,CAAC;oBACL,OAAO,UAAU,CAAC;gBACpB,CAAC;aACF,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAAC,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;YAAC,CAAC;YAC7I,OAAO,OAAO,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,uEAAuE;YACvE,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzD,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;oBACpE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC,CAAC,CAAC;YACL,CAAC;YACD,WAAW,CAAC,KAAK,EAAE,CAAC;YACpB,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,qBAAqB,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC;gBACpF,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/hosts/localSupervisor.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/hosts/localSupervisor.js

@@ -0,0 +1,115 @@
+/** Trusted local owner: the IPC channel closes even when the controller is killed. */
+import { spawn } from 'node:child_process';
+import { rmSync } from 'node:fs';
+import { isAbsolute, join, relative, resolve } from 'node:path';
+import { readGitSnapshotSource, readGitSnapshotTree, writeGitSnapshotTree } from "../source/snapshotTree.js";
+import { sourceIdentityDigest } from "./sourceIdentity.js";
+import { pinnedArguments } from "./pinnedArguments.js";
+import { NativeJobRequest, MAX_NATIVE_JOB_MESSAGE_BYTES } from "../protocol/schemas/nativeJob.js";
+let app = null;
+let workspaceDir = null;
+let stopping = false;
+function signalApp(signal) {
+    if (!app?.pid)
+        return;
+    try {
+        if (process.platform === 'win32')
+            app.kill(signal);
+        else
+            process.kill(-app.pid, signal);
+    }
+    catch (error) {
+        if (error.code !== 'ESRCH')
+            throw error;
+    }
+}
+async function stop() {
+    if (stopping)
+        return;
+    stopping = true;
+    if (app && app.exitCode === null && app.signalCode === null) {
+        const exited = new Promise((done) => app.once('exit', () => done()));
+        signalApp('SIGKILL');
+        await exited;
+    }
+    else
+        signalApp('SIGKILL');
+    if (workspaceDir)
+        rmSync(workspaceDir, { recursive: true, force: true });
+    if (process.connected)
+        process.send?.({ kind: 'host.cleaned' }, undefined, undefined, () => process.exit(0));
+    else
+        process.exit(0);
+}
+process.once('disconnect', () => { void stop(); });
+process.once('SIGTERM', () => { void stop(); });
+process.once('SIGINT', () => { void stop(); });
+process.on('message', (message) => {
+    const wrapper = message;
+    if (wrapper?.kind !== 'host.job_request' || stopping || !app?.connected)
+        return;
+    const parsed = NativeJobRequest.safeParse(wrapper.request);
+    if (parsed.success && Buffer.byteLength(JSON.stringify(parsed.data)) <= MAX_NATIVE_JOB_MESSAGE_BYTES)
+        app.send(parsed.data);
+});
+process.once('message', (message) => {
+    if (stopping || !process.connected)
+        return;
+    workspaceDir = message.workspaceDir;
+    let cwd = message.cwd;
+    let args = message.args;
+    if (message.sourceSnapshot) {
+        let stage = 'read';
+        try {
+            const binding = message.sourceSnapshot;
+            const root = resolve(binding.root);
+            const within = relative(root, cwd);
+            if (within.startsWith('..') || isAbsolute(within) || (within || '.') !== binding.cwd)
+                throw new Error('snapshot cwd outside binding');
+            const files = readGitSnapshotTree(binding.snapshot, root);
+            stage = 'template';
+            args = pinnedArguments(message.args, cwd, root, binding.snapshot, message.runtimeFamily);
+            stage = 'copy';
+            const privateRoot = join(workspaceDir, 'source');
+            writeGitSnapshotTree(files, privateRoot);
+            stage = 'objects';
+            const { gitSource } = readGitSnapshotSource(binding.snapshot, privateRoot);
+            cwd = resolve(privateRoot, within);
+            stage = 'identity';
+            const identity = sourceIdentityDigest(cwd, message.identitySourceFiles);
+            if (!process.connected) {
+                void stop();
+                return;
+            }
+            process.send?.({ kind: 'host.source', snapshotRef: binding.snapshot.ref, identity, ...(gitSource ? { gitSource } : {}) }, undefined, undefined, error => { if (error)
+                void stop(); });
+        }
+        catch {
+            if (process.connected)
+                process.send?.({ kind: 'host.source_failed', stage }, undefined, undefined, () => { void stop(); });
+            else
+                void stop();
+            return;
+        }
+    }
+    if (stopping || !process.connected) {
+        void stop();
+        return;
+    }
+    app = spawn(message.command, args, {
+        cwd, env: message.env, detached: process.platform !== 'win32',
+        stdio: message.nativeJobs ? ['ignore', 'pipe', 'pipe', 'ipc'] : ['ignore', 'pipe', 'pipe'],
+    });
+    if (message.nativeJobs)
+        app.on('message', (payload) => {
+            const kind = payload?.kind;
+            if (!stopping && process.connected && (kind === 'tracegrove.job.ready' || kind === 'tracegrove.job.response') &&
+                Buffer.byteLength(JSON.stringify(payload)) <= MAX_NATIVE_JOB_MESSAGE_BYTES)
+                process.send?.({ kind: 'host.job', message: payload });
+        });
+    app.stdout?.pipe(process.stdout);
+    app.stderr?.pipe(process.stderr);
+    app.once('error', () => { void stop(); });
+    app.once('exit', () => { void stop(); });
+});
+//# sourceMappingURL=localSupervisor.js.map

package/dist/hosts/localSupervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localSupervisor.js","sourceRoot":"","sources":["../../src/hosts/localSupervisor.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC7G,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAIlG,IAAI,GAAG,GAAwB,IAAI,CAAC;AACpC,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,SAAS,SAAS,CAAC,MAAsB;IACvC,IAAI,CAAC,GAAG,EAAE,GAAG;QAAE,OAAO;IACtB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,MAAM,CAAC;IACf,CAAC;;QAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,YAAY;QAAE,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;;QACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;IACzC,MAAM,OAAO,GAAG,OAAsD,CAAC;IACvE,IAAI,OAAO,EAAE,IAAI,KAAK,kBAAkB,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,SAAS;QAAE,OAAO;IAChF,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,4BAA4B;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9H,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAe,EAAE,EAAE;IAC1C,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO;IAC3C,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACpC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,IAAI,KAAK,GAA0D,MAAM,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;YAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/G,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACtI,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC1D,KAAK,GAAG,UAAU,CAAC;YACnB,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YACzF,KAAK,GAAG,MAAM,CAAC;YACf,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3F,KAAK,GAAG,SAAS,CAAC;YAClB,MAAM,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC3E,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnC,KAAK,GAAG,UAAU,CAAC;YACnB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACxE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAAC,KAAK,IAAI,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChD,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK;gBAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,CAAC,SAAS;gBAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACtH,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAAC,KAAK,IAAI,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAC5D,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;QACjC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC7D,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAC3F,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,UAAU;QAAE,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YAC7D,MAAM,IAAI,GAAI,OAAqC,EAAE,IAAI,CAAC;YAC1D,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,yBAAyB,CAAC;gBACzG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,4BAA4B;gBAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzI,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC"}

package/dist/hosts/mock.d.ts

@@ -0,0 +1,4 @@
+import type { ExecutorHost, HostSession, HostStartContext } from './types.ts';
+export declare class MockLoopbackHost implements ExecutorHost {
+    start(context: HostStartContext): Promise<HostSession>;
+}

package/dist/hosts/mock.js

@@ -0,0 +1,82 @@
+/**
+ * Mock loopback host for the `mock_contract` lane: serves declared responses on 127.0.0.1.
+ * The boundary is stubbed and says so; its identity is operator-declared and unverified.
+ */
+import { createServer } from 'node:http';
+import { randomBytes } from 'node:crypto';
+import { IdentityAttestation, freeze, parseAs } from "../protocol/index.js";
+import { Blocked } from "../core/errors.js";
+import { nowIso } from "../core/clock.js";
+import { buildCapabilityObservation, buildLease } from "./local.js";
+function matchPath(pattern, actual) {
+    const p = pattern.split('/');
+    const a = actual.split('/');
+    if (p.length !== a.length)
+        return false;
+    return p.every((segment, i) => segment.startsWith('{') || segment === a[i]);
+}
+export class MockLoopbackHost {
+    async start(context) {
+        const responses = context.mockResponses;
+        if (!responses)
+            throw new Blocked([{ code: 'mock_responses_missing', detail: context.hostPlan.ref.id }]);
+        const credentials = new Map();
+        for (const name of context.credentialNames)
+            credentials.set(name, randomBytes(16).toString('base64url'));
+        const calls = [];
+        const server = createServer((req, res) => {
+            const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+            const route = responses.routes.find((r) => r.method === req.method && matchPath(r.path, url.pathname));
+            calls.push({ method: req.method ?? '', path: url.pathname, matched: !!route });
+            if (!route) {
+                res.writeHead(501, { 'content-type': 'application/json' });
+                return res.end(JSON.stringify({ error: 'unmatched_mock_route' }));
+            }
+            if (route.requireBearer && !(req.headers.authorization ?? '').startsWith('Bearer ')) {
+                res.writeHead(401, { 'content-type': 'application/json' });
+                return res.end(JSON.stringify({ error: 'unauthorized' }));
+            }
+            req.resume();
+            req.on('end', () => {
+                const body = route.body === null ? '' : JSON.stringify(route.body);
+                res.writeHead(route.status, { 'content-type': 'application/json', 'x-request-id': `mock-${calls.length}`, 'x-tracegrove-interceptor': responses.ref.id });
+                res.end(body);
+            });
+        });
+        const port = await new Promise((resolvePort) => server.listen(0, '127.0.0.1', () => { const address = server.address(); resolvePort(typeof address === 'object' && address ? address.port : 0); }));
+        const origin = `http://127.0.0.1:${port}`;
+        const lease = buildLease(context, process.pid);
+        const attestation = parseAs(IdentityAttestation, freeze({
+            schemaVersion: 'workflow.identity-attestation/v1',
+            ref: { id: `${context.executionId}.attestation.notes-api`, revision: '1' },
+            scope: context.scope,
+            componentId: 'notes-api',
+            kind: 'application',
+            identity: { kind: 'declared_release', release: 'stub' },
+            issuer: 'declared_binding',
+            trustPolicy: 'operator_declared_unverified',
+            evidence: { files: [], observedHealthBody: null },
+            observedAt: nowIso(),
+        }), 'stub attestation');
+        const observation = buildCapabilityObservation({
+            hostPlanRef: context.hostPlan.ref, leaseRef: lease.ref, scope: context.scope, executionId: context.executionId,
+            supported: ['network_origin:loopback', 'confirmed_cancel', 'artifact_delivery'],
+            unsupported: ['shell', 'file_persistence', 'browser_engine', 'video_export'],
+        });
+        let stopped = false;
+        return {
+            origin, lease, observation, attestations: [attestation], credentials,
+            boundaryMode: 'stubbed', interceptorRefs: [responses.ref],
+            ownedResources: [{ entityKey: 'mock.server', physicalId: origin, boundaryId: 'application' }],
+            dataDir: null,
+            async stop(reason) {
+                if (stopped)
+                    return { confirmed: true, detail: 'already stopped' };
+                stopped = true;
+                await new Promise((resolveClose) => server.close(() => resolveClose()));
+                return { confirmed: true, detail: `${reason}; mock server closed after ${calls.length} calls (${calls.filter((c) => !c.matched).length} unmatched)` };
+            },
+        };
+    }
+}
+//# sourceMappingURL=mock.js.map

package/dist/hosts/mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/hosts/mock.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGpE,SAAS,SAAS,CAAC,OAAe,EAAE,MAAc;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CAAC,KAAK,CAAC,OAAyB;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe;YAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,MAAM,KAAK,GAA8D,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC9I,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/M,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,KAAK,CAAC,MAAM,EAAE,EAAE,0BAA0B,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1J,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5M,MAAM,MAAM,GAAG,oBAAoB,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;YACtD,aAAa,EAAE,kCAA2C;YAC1D,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,WAAW,wBAAwB,EAAE,QAAQ,EAAE,GAAG,EAAE;YAC1E,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,aAAsB;YAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAA2B,EAAE,OAAO,EAAE,MAAM,EAAE;YAChE,MAAM,EAAE,kBAA2B;YACnC,WAAW,EAAE,8BAAuC;YACpD,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;YACjD,UAAU,EAAE,MAAM,EAAE;SACrB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACxB,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW;YAC9G,SAAS,EAAE,CAAC,yBAAyB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;YAC/E,WAAW,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,CAAC;SAC7E,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW;YACpE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;YACzD,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;YAC7F,OAAO,EAAE,IAAI;YACb,KAAK,CAAC,IAAI,CAAC,MAAc;gBACvB,IAAI,OAAO;oBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;gBACnE,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBAC9E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,8BAA8B,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;YACxJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/hosts/pinnedArguments.d.ts

@@ -0,0 +1,3 @@
+import type { GitSourceSnapshot } from '../protocol/schemas/gitSources.ts';
+/** Bind qualified launch templates to pinned files; opaque eval/shell wrappers cannot claim a snapshot. */
+export declare function pinnedArguments(args: string[], cwd: string, root: string, snapshot: GitSourceSnapshot, family: 'node' | 'python'): string[];

package/dist/hosts/pinnedArguments.js

@@ -0,0 +1,39 @@
+import { isAbsolute, relative, resolve, sep } from 'node:path';
+import { Conflict } from "../core/errors.js";
+import { djangoBootstrap } from "./launchTemplates.js";
+/** Bind qualified launch templates to pinned files; opaque eval/shell wrappers cannot claim a snapshot. */
+export function pinnedArguments(args, cwd, root, snapshot, family) {
+    const files = new Set(snapshot.files.map(file => file.path));
+    const pinned = (path) => {
+        const within = relative(root, resolve(cwd, path)).split(sep).join('/');
+        if (within.startsWith('..') || isAbsolute(within) || !files.has(within))
+            throw new Conflict('snapshot launch entry is not a pinned regular file');
+    };
+    if (family === 'node' && args.length === 1) {
+        pinned(args[0]);
+        return [`./${relative(cwd, resolve(cwd, args[0])).split(sep).join('/')}`];
+    }
+    if (family === 'python' && args.length === 7 && args[0] === '-m' && args[1] === 'uvicorn' &&
+        args[3] === '--host' && args[4] === '127.0.0.1' && args[5] === '--port' && /^\d+$/.test(args[6])) {
+        const match = /^([A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*):([A-Za-z_]\w*)$/.exec(args[2]);
+        if (!match)
+            throw new Conflict('snapshot FastAPI entry needs a qualified module:attribute');
+        const module = match[1].replaceAll('.', '/');
+        try {
+            pinned(`${module}.py`);
+        }
+        catch {
+            pinned(`${module}/__init__.py`);
+        }
+        return args;
+    }
+    if (family === 'python' && args.length === 2 && args[0] === '-c') {
+        const port = /127\.0\.0\.1:(\d+)/.exec(args[1])?.[1];
+        if (port && args[1] === djangoBootstrap(port)) {
+            pinned('manage.py');
+            return args;
+        }
+    }
+    throw new Conflict('snapshot launch requires a qualified Node, FastAPI or Django template');
+}
+//# sourceMappingURL=pinnedArguments.js.map

package/dist/hosts/pinnedArguments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinnedArguments.js","sourceRoot":"","sources":["../../src/hosts/pinnedArguments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,2GAA2G;AAC3G,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,GAAW,EAAE,IAAY,EAAE,QAA2B,EAAE,MAAyB;IAC/H,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IACpJ,CAAC,CAAC;IACF,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACjB,OAAO,CAAC,KAAK,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QACrF,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACtG,MAAM,KAAK,GAAG,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC;QAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,uEAAuE,CAAC,CAAC;AAC9F,CAAC"}