wicked-crew 0.16.11 → 0.16.13

package/dist/editors/webrtc-guard.js

@@ -0,0 +1,506 @@
+/**
+ * No WebRTC in an editor frame.
+ *
+ * An editor bundle's policy says `connect-src 'none'` (`csp.ts`), which stops fetch, XHR, WebSocket, EventSource and
+ * beacons, but no browser applies `connect-src` to WebRTC. A script in the frame could open an `RTCPeerConnection` with
+ * a STUN or TURN server of its choosing, and ICE then sends UDP there (Chromium ignores `webrtc 'block'`). A third-party
+ * editor could carry what it reads out of the artifact that way.
+ *
+ * So crew puts {@link WEBRTC_PRELUDE} at the start of every inline script of every bundle it serves (after the
+ * script's hashbang and its directive prologue: those are inert, and moving them would turn strict mode off; a
+ * directive ended by automatic semicolon insertion is kept too, with crew's own `;` before the prelude). The
+ * prelude defines each WebRTC global as a non-writable, non-configurable `undefined` before any of the editor's own
+ * statements run. It has no `try`: if it cannot do that it throws, and the rest of that script never runs. It names no
+ * global a script can shadow and calls nothing a script can define first. A module's own `function window(){}` is
+ * bound before its first statement runs, so the prelude checks that `window` really is the window. It takes `Object`
+ * from an object literal, and its failure path throws a string (not `new TypeError`, which a hoisted declaration
+ * could replace).
+ *
+ * For a third-party editor, the bundle's `script-src` is then exactly the hashes {@link guardBundle} returns, with no
+ * `'unsafe-inline'`. A new JavaScript realm could otherwise bring the constructors back: a `srcdoc` child, a
+ * `javascript:` URL, or a `blob:`/`data:` document the frame navigates itself to. Every one of those documents inherits
+ * the bundle's policy, so the only scripts that can run in them are copies of crew's prefixed scripts, and the prelude
+ * runs first there too. `javascript:` URLs, inline event handlers and new script text are refused.
+ *
+ * The scanner below finds inline scripts the way an HTML parser does, closely enough for real bundles. For a
+ * third-party bundle its accuracy is not what keeps the guard sound: every hash crew issues is of text that crew itself
+ * built with the prelude first (after an inert prologue). A script the scanner misreads gets a hash the browser doesn't
+ * compute, so it doesn't run. The editor breaks visibly, and nothing runs without the prelude. A first-party bundle
+ * keeps `'unsafe-inline'` (it is studio's own code), so there the prelude is only where the scanner finds a script.
+ *
+ * Every script gains the prelude and a hash in one response header, so a third-party bundle may hold at most
+ * {@link MAX_INLINE_SCRIPTS} inline scripts; past that crew refuses to serve it, with the reason.
+ */
+import { createHash } from 'node:crypto';
+/** The WebRTC globals Chromium, Firefox and Safari expose, by name. The prelude also takes any other `RTC*`/`webkitRTC*`
+ *  global the browser has, so a new interface is covered without a crew release. */
+export const WEBRTC_GLOBALS = [
+    'RTCPeerConnection',
+    'webkitRTCPeerConnection',
+    'mozRTCPeerConnection',
+    'RTCDataChannel',
+    'RTCIceTransport',
+    'RTCDtlsTransport',
+    'RTCSctpTransport',
+    'RTCRtpSender',
+    'RTCRtpReceiver',
+    'RTCRtpTransceiver',
+    'RTCIceCandidate',
+    'RTCSessionDescription',
+    'RTCCertificate',
+];
+/** The prelude's one failure message (thrown as a string: see the module comment). */
+export const WEBRTC_PRELUDE_REFUSAL = 'WebRTC is not available in an editor frame';
+/**
+ * The prelude: one line of ES5, ending in a newline so the editor's own first line stays its own statement. It holds no
+ * `<` at all, so it can never end, open or escape the `<script>` it sits in. `w` must be the window itself (a module's
+ * hoisted `function window(){}` is a function, a `var window` is undefined, a `let`/`class` is not yet initialized).
+ * It takes the listed names always, and any other `RTC*`/`webkitRTC*`/`mozRTC*` global the browser defines (an
+ * interface object is configurable; a script's own `var RTCConfig` is not, and is left alone).
+ */
+export const WEBRTC_PRELUDE = '(function(w,o){if(typeof w!=="object"||w===null||w.window!==w)throw ' + JSON.stringify(WEBRTC_PRELUDE_REFUSAL) + ';var n=' +
+    JSON.stringify(WEBRTC_GLOBALS) +
+    ',k=o.getOwnPropertyNames(w),i,d;for(i=0;i!==k.length;i++)if(/^(webkit|moz)?RTC/.test(k[i])&&(d=o.getOwnPropertyDescriptor(w,k[i]))&&d.configurable)n.push(k[i]);' +
+    'for(i=0;i!==n.length;i++){o.defineProperty(w,n[i],{value:void 0,writable:false,configurable:false});' +
+    'if(w[n[i]]!==void 0)throw ' + JSON.stringify(WEBRTC_PRELUDE_REFUSAL) + '}})(window,({}).constructor);\n';
+/** The most inline scripts a third-party bundle may hold: each gains the prelude and is one hash in the policy header. */
+export const MAX_INLINE_SCRIPTS = 200;
+const LINE_END = /[\n\r\u2028\u2029]/;
+const SPACE = /\s/;
+const IDENTIFIER_PART = /[\w$\\\u0080-\uFFFF]/; // `\` too: an identifier may be written with escapes
+/**
+ * Whether a directive with no `;` ends before `text[i]` by automatic semicolon insertion: a line ended after it, and
+ * what follows cannot continue the expression (end of text, a statement-starting word other than `in`/`instanceof`, a
+ * number, a string, a block, a unary `!` or `~`, or `++`/`--`, which may not follow a line end). Any binary operator,
+ * bracket, dot or template continues it, so it does not count.
+ */
+function endsByAsi(text, i) {
+    if (i >= text.length)
+        return true;
+    const c = text[i];
+    if (c === '"' || c === "'" || c === '{' || c === '~' || /[0-9]/.test(c))
+        return true;
+    if (c === '!')
+        return text[i + 1] !== '=';
+    // `.5` is a number, and `\u0074op` an identifier written with an escape (an escaped `in` is no keyword).
+    if (c === '.')
+        return /[0-9]/.test(text[i + 1] ?? '');
+    if (c === '\\')
+        return true;
+    if (c === '+' || c === '-')
+        return text[i + 1] === c;
+    if (!IDENTIFIER_PART.test(c))
+        return false;
+    let j = i;
+    while (j < text.length && IDENTIFIER_PART.test(text[j]) && !SPACE.test(text[j]))
+        j++; // NBSP, LS... end a name
+    const word = text.slice(i, j);
+    return word !== 'in' && word !== 'instanceof';
+}
+/**
+ * Where the prelude goes in a script's text, read the way a JavaScript lexer reads it: past a hashbang line and a
+ * directive prologue (string-literal statements, each ended by its own `;` or by automatic semicolon insertion), with
+ * whitespace and comments between. No regular expression does this: a backtracking pattern can be made to end a
+ * comment early or late. Here a block comment ends at its first `*\/` and a line comment at the end of its line, exactly
+ * as in JavaScript, so nothing before the place found is code. `semicolon` says the last directive ended by insertion,
+ * so the prelude must be written after a `;` of its own.
+ */
+export function prologueEnd(text) {
+    const n = text.length;
+    let i = 0;
+    let at = 0;
+    let afterHashbang = false;
+    let semicolon = false;
+    if (text.startsWith('#!')) {
+        while (i < n && !LINE_END.test(text[i]))
+            i++;
+        at = i;
+        afterHashbang = true;
+    }
+    let crossed = false;
+    // At the start of a line (only whitespace and comments since the last line end): where a classic script's `-->`
+    // opens a line comment.
+    let lineStart = true;
+    // HTML-like comments (`<!--`, a line-leading `-->`) are comments only in a classic script. In a module, after an
+    // operand, `<!--x` is `< !--x`: code. So they are taken only before the first directive, where in a module they can
+    // only be a syntax error (nothing runs) and in a classic script they are comments. This must not depend on whether
+    // the script is classic or a module: a hash does not bind the type, so the same prefixed text can be run as either
+    // (a classic script copied into a child as a module), and what stands before the prelude must be inert under both.
+    let beforeDirectives = true;
+    /** Past whitespace and whole comments (noting a line end); false at a block comment that never closes. */
+    const skip = () => {
+        for (;;) {
+            while (i < n && SPACE.test(text[i])) {
+                if (LINE_END.test(text[i])) {
+                    crossed = true;
+                    lineStart = true;
+                }
+                i++;
+            }
+            if (beforeDirectives && lineStart && text.startsWith('-->', i)) {
+                while (i < n && !LINE_END.test(text[i]))
+                    i++;
+                continue;
+            }
+            if (text.startsWith('/*', i)) {
+                const close = text.indexOf('*/', i + 2);
+                if (close < 0)
+                    return false;
+                if (LINE_END.test(text.slice(i, close))) {
+                    crossed = true;
+                    lineStart = true;
+                }
+                i = close + 2;
+            }
+            else if (text.startsWith('//', i) || (beforeDirectives && text.startsWith('<!--', i))) {
+                // `<!--` opens a comment to the end of its line in a classic script (it is a syntax error in a module).
+                while (i < n && !LINE_END.test(text[i]))
+                    i++;
+            }
+            else {
+                return true;
+            }
+        }
+    };
+    while (skip()) {
+        const quote = text[i];
+        if (quote !== '"' && quote !== "'")
+            break;
+        beforeDirectives = false;
+        let j = i + 1;
+        let closed = false;
+        while (j < n) {
+            const c = text[j];
+            if (c === '\\') {
+                j += 2;
+                continue;
+            }
+            if (c === quote) {
+                closed = true;
+                j += 1;
+                break;
+            }
+            if (c === '\n' || c === '\r')
+                break;
+            j += 1;
+        }
+        if (!closed)
+            break;
+        lineStart = false;
+        const end = j;
+        i = j;
+        crossed = false;
+        if (!skip())
+            break;
+        if (text[i] === ';') {
+            i += 1;
+            lineStart = false;
+            at = i;
+            semicolon = false;
+        }
+        else if (text.startsWith('<!--', i)) {
+            // A comment in a classic script, code in a module (`"a" < !--x`): end the directive here with crew's own `;`
+            // and stop, so the prelude stands before this text either way (a module then fails on it; a classic script keeps
+            // its strict mode).
+            at = end;
+            semicolon = true;
+            afterHashbang = false;
+            break;
+        }
+        else if ((crossed || i >= n) && endsByAsi(text, i)) {
+            at = end;
+            semicolon = true;
+        }
+        else {
+            break;
+        }
+        afterHashbang = false;
+    }
+    return { at, afterHashbang, semicolon };
+}
+/** `text` with the prelude before its first statement (see {@link prologueEnd}): after a `;` of its own when the last
+ *  directive ended by insertion, and on its own line after a lone hashbang. */
+export function withPrelude(text) {
+    const { at, afterHashbang, semicolon } = prologueEnd(text);
+    return text.slice(0, at) + (semicolon ? ';' : '') + (afterHashbang ? '\n' : '') + WEBRTC_PRELUDE + text.slice(at);
+}
+/** The essences HTML runs as a classic script (HTML "JavaScript MIME type essence match"). */
+const JS_TYPES = new Set([
+    'application/ecmascript', 'application/javascript', 'application/x-ecmascript', 'application/x-javascript',
+    'text/ecmascript', 'text/javascript', 'text/javascript1.0', 'text/javascript1.1', 'text/javascript1.2',
+    'text/javascript1.3', 'text/javascript1.4', 'text/javascript1.5', 'text/jscript', 'text/livescript',
+    'text/x-ecmascript', 'text/x-javascript',
+]);
+/** Elements whose content is text up to their own end tag (scripting is on in the frame, so `noscript` is one). */
+const RAW_TEXT = new Set(['style', 'xmp', 'iframe', 'noembed', 'noframes', 'noscript', 'textarea', 'title']);
+const WS = /[\t\n\f\r ]/;
+const TAG_END = /[\t\n\f\r />]/;
+const NAMED_REFS = { amp: '&', lt: '<', gt: '>', quot: '"', apos: "'", sol: '/', period: '.', plus: '+', lowbar: '_', colon: ':', semi: ';', comma: ',', Tab: '\t', NewLine: '\n' };
+/** An attribute value as the parser hands it on: numeric character references, and the named ones a script type can
+ *  use. One it does not know stays as written, so the script reads as a data block and is refused, never run unguarded. */
+export function decodeAttribute(v) {
+    return v
+        .replace(/&#(?:[xX]([0-9a-fA-F]+)|([0-9]+));?/g, (_m, hex, dec) => {
+        const cp = hex !== undefined ? parseInt(hex, 16) : parseInt(dec, 10);
+        return cp > 0 && cp <= 0x10ffff && !(cp >= 0xd800 && cp <= 0xdfff) ? String.fromCodePoint(cp) : '\uFFFD';
+    })
+        .replace(/&([A-Za-z]+);/g, (m, name) => NAMED_REFS[name] ?? m);
+}
+/** Whether `<script …>` with these attributes runs its text as a classic or module script (HTML "prepare the script
+ *  element"); a `src` makes it external (`href` or `xlink:href` for an SVG script), and an unknown type makes it a
+ *  data block. */
+function runsInline(attrs, svg) {
+    if (svg ? attrs.has('href') || attrs.has('xlink:href') : attrs.has('src'))
+        return false;
+    const language = svg ? undefined : attrs.get('language'); // `language` is HTML's legacy fallback, not SVG's
+    const raw = attrs.has('type') ? attrs.get('type') : language !== undefined && language !== '' ? `text/${language}` : '';
+    if (raw === '')
+        return true;
+    // A JavaScript MIME type is matched with surrounding whitespace stripped; `module` exactly as written (Chromium).
+    if (raw.toLowerCase() === 'module')
+        return true;
+    return JS_TYPES.has(raw.replace(/^[\t\n\f\r ]+|[\t\n\f\r ]+$/g, '').toLowerCase());
+}
+/**
+ * The inline scripts of `html` (already newline-normalized), in document order. A tokenizer cut down to what decides
+ * where a script's text is: comments, doctypes and bogus comments, quoted attribute values, raw-text elements, and
+ * the script-data escape states (`<!--`, `<script`, `-->` inside a script).
+ */
+export function inlineScripts(html) {
+    const s = html;
+    const n = s.length;
+    const out = [];
+    const at = (p, word) => s.slice(p, p + word.length).toLowerCase() === word;
+    const delimited = (p) => p < n && TAG_END.test(s[p]);
+    /** Attributes from `p` (just after the tag name) to the tag's `>`; `end` is past the `>`, or -1 at end of file. */
+    const attributes = (p) => {
+        const attrs = new Map();
+        let j = p;
+        while (j < n) {
+            const from = j;
+            while (j < n && (WS.test(s[j]) || s[j] === '/'))
+                j++;
+            if (j >= n)
+                break;
+            // Self-closing is a `/` between attributes right before `>`, never the last character of an unquoted value.
+            if (s[j] === '>')
+                return { end: j + 1, attrs, selfClosing: j > from && s[j - 1] === '/' };
+            let k = j + 1; // a name may start with `=`
+            while (k < n && !TAG_END.test(s[k]) && s[k] !== '=')
+                k++;
+            const name = s.slice(j, k).toLowerCase();
+            let m = k;
+            while (m < n && WS.test(s[m]))
+                m++;
+            let value = '';
+            if (s[m] === '=') {
+                m++;
+                while (m < n && WS.test(s[m]))
+                    m++;
+                const q = s[m];
+                if (q === '"' || q === "'") {
+                    const close = s.indexOf(q, m + 1);
+                    if (close < 0)
+                        return { end: -1, attrs, selfClosing: false };
+                    value = s.slice(m + 1, close);
+                    j = close + 1;
+                }
+                else {
+                    let e = m;
+                    while (e < n && !WS.test(s[e]) && s[e] !== '>')
+                        e++;
+                    value = s.slice(m, e);
+                    j = e;
+                }
+            }
+            else {
+                j = m;
+            }
+            if (!attrs.has(name))
+                attrs.set(name, decodeAttribute(value));
+        }
+        return { end: -1, attrs, selfClosing: false };
+    };
+    /** Where a script's text ends (the `<` of its end tag, or end of file), from `p` just after its start tag. */
+    // The next `-->`, `--!>` from where the scan is: found once and kept while it is still ahead, so a long run of `<`
+    // after an open `<!--` costs one search, not one per `<` (the scan stays linear in the bundle's size).
+    const ahead = { close: -2, bang: -2 };
+    const nextFrom = (key, needle, from) => {
+        if (ahead[key] === -2 || (ahead[key] !== -1 && ahead[key] < from))
+            ahead[key] = s.indexOf(needle, from);
+        return ahead[key];
+    };
+    const scriptTextEnd = (p) => {
+        let state = 'data';
+        let i = p;
+        while (i < n) {
+            if (state === 'data') {
+                const lt = s.indexOf('<', i);
+                if (lt < 0)
+                    return n;
+                if (at(lt, '</script') && delimited(lt + 8))
+                    return lt;
+                if (at(lt, '<!--')) {
+                    state = 'escaped';
+                    i = lt + 2;
+                    continue;
+                } // `<!-->` closes again at once
+                i = lt + 1;
+                continue;
+            }
+            const lt = s.indexOf('<', i);
+            const close = nextFrom('close', '-->', i);
+            if (close >= 0 && (lt < 0 || close < lt)) {
+                state = 'data';
+                i = close + 3;
+                continue;
+            }
+            if (lt < 0)
+                return n;
+            if (at(lt, '</script') && delimited(lt + 8)) {
+                if (state === 'escaped')
+                    return lt;
+                state = 'escaped';
+                i = lt + 8;
+                continue;
+            }
+            if (state === 'escaped' && at(lt, '<script') && delimited(lt + 7)) {
+                state = 'double';
+                i = lt + 7;
+                continue;
+            }
+            i = lt + 1;
+        }
+        return n;
+    };
+    // Inside <svg> or <math> (foreign content) `style`, `title` and the like are ordinary elements, not raw text, and a
+    // self-closing `<script/>` is empty.
+    let foreign = 0;
+    let i = 0;
+    while (i < n) {
+        const lt = s.indexOf('<', i);
+        if (lt < 0)
+            break;
+        const c = s[lt + 1] ?? '';
+        if (at(lt, '<!--')) {
+            if (s[lt + 4] === '>') {
+                i = lt + 5;
+                continue;
+            }
+            if (s.startsWith('->', lt + 4)) {
+                i = lt + 6;
+                continue;
+            }
+            const a = nextFrom('close', '-->', lt + 4);
+            const b = nextFrom('bang', '--!>', lt + 4);
+            const end = a < 0 ? (b < 0 ? -1 : b + 4) : b < 0 || a < b ? a + 3 : b + 4;
+            if (end < 0)
+                break;
+            i = end;
+            continue;
+        }
+        if (c === '!' || c === '?') {
+            const end = s.indexOf('>', lt + 2);
+            if (end < 0)
+                break;
+            i = end + 1;
+            continue;
+        }
+        if (c === '/') {
+            if (!/[A-Za-z]/.test(s[lt + 2] ?? '')) {
+                const end = s.indexOf('>', lt + 2); // `</>` is nothing; `</ x>` a bogus comment
+                if (end < 0)
+                    break;
+                i = end + 1;
+                continue;
+            }
+            let k = lt + 2;
+            while (k < n && !TAG_END.test(s[k]))
+                k++;
+            const closing = s.slice(lt + 2, k).toLowerCase();
+            if (foreign > 0 && (closing === 'svg' || closing === 'math'))
+                foreign--;
+            const { end } = attributes(k);
+            if (end < 0)
+                break;
+            i = end;
+            continue;
+        }
+        if (!/[A-Za-z]/.test(c)) {
+            i = lt + 1;
+            continue;
+        }
+        let k = lt + 1;
+        while (k < n && !TAG_END.test(s[k]))
+            k++;
+        const name = s.slice(lt + 1, k).toLowerCase();
+        const { end, attrs, selfClosing } = attributes(k);
+        if (end < 0)
+            break; // end of file inside a tag: the parser drops it
+        if ((name === 'svg' || name === 'math') && !selfClosing) {
+            foreign++;
+            i = end;
+            continue;
+        }
+        if (name === 'script' && foreign > 0 && selfClosing) {
+            i = end;
+            continue;
+        }
+        if (name === 'script') {
+            const textEnd = scriptTextEnd(end);
+            out.push({ start: end, end: textEnd, runs: runsInline(attrs, foreign > 0) });
+            if (textEnd >= n)
+                break;
+            const after = attributes(textEnd + 8);
+            if (after.end < 0)
+                break;
+            i = after.end;
+            continue;
+        }
+        if (RAW_TEXT.has(name) && foreign === 0) {
+            let j = end;
+            for (;;) {
+                const close = s.indexOf('</', j);
+                if (close < 0) {
+                    j = n;
+                    break;
+                }
+                if (at(close + 2, name) && delimited(close + 2 + name.length)) {
+                    j = close;
+                    break;
+                }
+                j = close + 2;
+            }
+            i = j;
+            continue;
+        }
+        if (name === 'plaintext')
+            break;
+        i = end;
+    }
+    return out;
+}
+/**
+ * The bundle as crew serves it: the prelude first in every inline script that runs, and those scripts' hashes.
+ * Newlines are normalized first (the HTML parser turns CRLF and CR into LF before anything else, so the DOM is the same
+ * and a script's text is what crew hashes). A NUL in a script's text reaches the parser as U+FFFD, so crew writes it so.
+ */
+export function guardBundle(bytes, maxScripts = Number.POSITIVE_INFINITY) {
+    const html = bytes.toString('utf8').replace(/\r\n?/g, '\n');
+    const scripts = inlineScripts(html).filter((x) => x.runs);
+    // Counted before anything is built: each script gains the prelude, so many small ones would multiply the body.
+    if (scripts.length > maxScripts)
+        return { body: Buffer.alloc(0), scriptHashes: [], tooMany: scripts.length };
+    const parts = [];
+    const scriptHashes = [];
+    let last = 0;
+    for (const script of scripts) {
+        const text = withPrelude(html.slice(script.start, script.end).replace(/\0/g, '\uFFFD'));
+        parts.push(html.slice(last, script.start), text);
+        last = script.end;
+        scriptHashes.push(createHash('sha256').update(text, 'utf8').digest('base64'));
+    }
+    parts.push(html.slice(last));
+    return { body: Buffer.from(parts.join(''), 'utf8'), scriptHashes };
+}
+//# sourceMappingURL=webrtc-guard.js.map

package/dist/editors/webrtc-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtc-guard.js","sourceRoot":"","sources":["../../src/editors/webrtc-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;oFACoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,mBAAmB;IACnB,yBAAyB;IACzB,sBAAsB;IACtB,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,uBAAuB;IACvB,gBAAgB;CACR,CAAC;AAEX,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,4CAA4C,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GACzB,sEAAsE,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAAG,SAAS;IAC3H,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;IAC9B,kKAAkK;IAClK,sGAAsG;IACtG,4BAA4B,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAAG,iCAAiC,CAAC;AAE5G,0HAA0H;AAC1H,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACtC,MAAM,KAAK,GAAG,IAAI,CAAC;AACnB,MAAM,eAAe,GAAG,sBAAsB,CAAC,CAAC,qDAAqD;AAErG;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,CAAS;IACxC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;IAC1C,yGAAyG;IACzG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC,CAAC,yBAAyB;IACjH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,YAAY,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QAC9C,EAAE,GAAG,CAAC,CAAC;QACP,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,gHAAgH;IAChH,wBAAwB;IACxB,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,iHAAiH;IACjH,oHAAoH;IACpH,mHAAmH;IACnH,mHAAmH;IACnH,mHAAmH;IACnH,IAAI,gBAAgB,GAAG,IAAI,CAAC;IAC5B,0GAA0G;IAC1G,MAAM,IAAI,GAAG,GAAY,EAAE;QACzB,SAAS,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;oBAC5B,OAAO,GAAG,IAAI,CAAC;oBACf,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,gBAAgB,IAAI,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxC,IAAI,KAAK,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC5B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;oBACxC,OAAO,GAAG,IAAI,CAAC;oBACf,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBACD,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,wGAAwG;gBACxG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,EAAE,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;YAAE,MAAM;QAC1C,gBAAgB,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YAClD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAM;YACpC,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,SAAS,GAAG,KAAK,CAAC;QAClB,MAAM,GAAG,GAAG,CAAC,CAAC;QACd,CAAC,GAAG,CAAC,CAAC;QACN,OAAO,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM;QACnB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;YAClB,EAAE,GAAG,CAAC,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACtC,6GAA6G;YAC7G,iHAAiH;YACjH,oBAAoB;YACpB,EAAE,GAAG,GAAG,CAAC;YACT,SAAS,GAAG,IAAI,CAAC;YACjB,aAAa,GAAG,KAAK,CAAC;YACtB,MAAM;QACR,CAAC;aAAM,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACrD,EAAE,GAAG,GAAG,CAAC;YACT,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;QACD,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpH,CAAC;AAWD,8FAA8F;AAC9F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,wBAAwB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,0BAA0B;IAC1G,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB;IACtG,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,cAAc,EAAE,iBAAiB;IACnG,mBAAmB,EAAE,mBAAmB;CACzC,CAAC,CAAC;AACH,mHAAmH;AACnH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7G,MAAM,EAAE,GAAG,aAAa,CAAC;AACzB,MAAM,OAAO,GAAG,eAAe,CAAC;AAShC,MAAM,UAAU,GAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAE5M;2HAC2H;AAC3H,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,OAAO,CAAC;SACL,OAAO,CAAC,sCAAsC,EAAE,CAAC,EAAE,EAAE,GAAuB,EAAE,GAAuB,EAAE,EAAE;QACxG,MAAM,EAAE,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAI,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,QAAQ,IAAI,CAAC,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3G,CAAC,CAAC;SACD,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;kBAEkB;AAClB,SAAS,UAAU,CAAC,KAA0B,EAAE,GAAY;IAC1D,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,kDAAkD;IAC5G,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzH,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,kHAAkH;IAClH,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,IAAY,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;IACpG,MAAM,SAAS,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAEvE,mHAAmH;IACnH,MAAM,UAAU,GAAG,CAAC,CAAS,EAAqE,EAAE;QAClG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,CAAC,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM;YAClB,4GAA4G;YAC5G,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1F,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B;YAC3C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YACpC,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjB,CAAC,EAAE,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBAClC,IAAI,KAAK,GAAG,CAAC;wBAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;oBAC7D,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBAC9B,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,GAAG,CAAC,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,CAAC,EAAE,CAAC;oBACrD,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACtB,CAAC,GAAG,CAAC,CAAC;gBACR,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,CAAC,GAAG,CAAC,CAAC;YACR,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC,CAAC;IAEF,8GAA8G;IAC9G,mHAAmH;IACnH,uGAAuG;IACvG,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAqB,EAAE,MAAc,EAAE,IAAY,EAAU,EAAE;QAC/E,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,CAAS,EAAU,EAAE;QAC1C,IAAI,KAAK,GAAkC,MAAM,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7B,IAAI,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACrB,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACvD,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;oBAAC,KAAK,GAAG,SAAS,CAAC;oBAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC,CAAC,+BAA+B;gBAChG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1C,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,MAAM,CAAC;gBAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACtF,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;YACrB,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5C,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;gBACnC,KAAK,GAAG,SAAS,CAAC;gBAClB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,QAAQ,CAAC;gBAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC9G,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,oHAAoH;IACpH,qCAAqC;IACrC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM;QAClB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzD,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,GAAG,GAAG,CAAC;gBAAE,MAAM;YACnB,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,GAAG,CAAC;gBAAE,MAAM;YACnB,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,4CAA4C;gBAChF,IAAI,GAAG,GAAG,CAAC;oBAAE,MAAM;gBACnB,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACxE,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,GAAG,GAAG,CAAC;gBAAE,MAAM;YACnB,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,CAAC,gDAAgD;QACpE,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,CAAC,GAAG,GAAG,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1F,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;YAAC,CAAC,GAAG,GAAG,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7E,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC;gBAAE,MAAM;YACzB,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,GAAG,CAAC;YACZ,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBAAC,CAAC,GAAG,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAChC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAC,CAAC,GAAG,KAAK,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACpF,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM;QAChC,CAAC,GAAG,GAAG,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,UAAU,GAAG,MAAM,CAAC,iBAAiB;IAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,+GAA+G;IAC/G,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7G,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;QAClB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;AACrE,CAAC"}

package/dist/inspect/reading.d.ts

@@ -0,0 +1,110 @@
+/**
+ * CREW'S OWN READING of a working step (operator 2026-10-30: "if it's been running long you can have an agent analyze
+ * right there, to make sure no tokens are wasted and no problems are occurring"). Pure and deterministic: the unit's
+ * newest attempt, read off its recorded frames, and nothing else.
+ *
+ * What it reads (the run's own log, `GET /runs/:id/events`):
+ *  - `toolActivity` (core#1207): each tool call, started and finished, with its target; a `working` frame is a quiet
+ *    seat's heartbeat and is not a call;
+ *  - `powerActivity`: power mode's edits and commits, read off git;
+ *  - `unitOutputDelta`: what the seat said;
+ *  - `usageProgress` (live) and `cliUsage` (at the attempt's end): its tokens.
+ *
+ * What it says, in this order (the first that holds):
+ *  - **stuck**: a call open for {@link STUCK_OPEN_CALL_MS} (a hung process), or nothing at all for
+ *    {@link STUCK_QUIET_MS} (no call, no words, no tokens);
+ *  - **looping**: the same call (tool + target) {@link LOOP_SAME_CALL} times, the same failing command
+ *    {@link LOOP_FAILING_RERUN} times, or the same file edited {@link LOOP_SAME_FILE_EDITS} times; with the evidence;
+ *  - **wasteful**: {@link WASTE_TOKENS} tokens or more since its last new words or edit, at least
+ *    {@link WASTE_MIN_MS} ago;
+ *  - else **progressing**.
+ *
+ * The seat that checks on a step (service.ts) gets this reading and the step's recent frames; this reading stands on
+ * its own when no such seat can answer.
+ */
+export type InspectVerdict = 'progressing' | 'looping' | 'stuck' | 'wasteful';
+export type InspectAction = 'let_run' | 'steer' | 'stop';
+/** A call open this long is a hung process. */
+export declare const STUCK_OPEN_CALL_MS: number;
+/** Nothing at all this long (no call, no words, no tokens): stuck. */
+export declare const STUCK_QUIET_MS: number;
+/** The same call (tool + target) this many times: a loop. */
+export declare const LOOP_SAME_CALL = 4;
+/** The same command failing this many times: a loop. */
+export declare const LOOP_FAILING_RERUN = 3;
+/** The same file edited this many times: a loop. */
+export declare const LOOP_SAME_FILE_EDITS = 6;
+/** Tokens spent since the last new words or edit that read as waste... */
+export declare const WASTE_TOKENS = 400000;
+/** A usage total sent this soon after an output still belongs to the turn that made it (the engine sends at most one
+ *  per 3 s, after the message that carried the output). */
+export declare const USAGE_SETTLE_MS = 5000;
+/** ...when that last new output is at least this old. */
+export declare const WASTE_MIN_MS: number;
+type Frame = Record<string, unknown>;
+export interface ReadingCall {
+    tool: string;
+    kind: string;
+    target: string | null;
+    at: number | null;
+    ok: boolean | null;
+    durationMs: number | null;
+    open: boolean;
+}
+export interface ReadingUsage {
+    inputTokens: number;
+    outputTokens: number;
+    costUsd: number | null;
+    /** `live` (a `usageProgress` total while it works) or `final` (the attempt's `cliUsage`). */
+    source: 'live' | 'final';
+}
+export interface UnitReading {
+    ord: number;
+    attempt: number;
+    /** When the attempt was dispatched (unix ms), null when the log has no dispatch for it. */
+    startedAt: number | null;
+    elapsedMs: number | null;
+    calls: number;
+    openCalls: Array<{
+        tool: string;
+        target: string | null;
+        forMs: number;
+    }>;
+    /** `read 4 · search 2 · run 3 · test 1 · edit 2`. */
+    byKind: Record<string, number>;
+    /** Files edited or written, with how often. */
+    edits: Array<{
+        path: string;
+        count: number;
+    }>;
+    /** Words said: deltas and characters. */
+    said: {
+        deltas: number;
+        chars: number;
+        lastAt: number | null;
+        newest: string | null;
+    };
+    usage: ReadingUsage | null;
+    /** The newest frame of any kind but a heartbeat (unix ms). */
+    lastSignAt: number | null;
+    verdict: InspectVerdict;
+    /** One line per piece of evidence, in plain words ("Ran `npm test` 5 times, 4 failed"). */
+    evidence: string[];
+    /** What it is doing now, in one line ("Running `npm test -- jpy`", "Edited src/a.ts"). */
+    doing: string | null;
+    action: InspectAction;
+    /** The note crew would suggest sending the seat (`action: steer`), else null. */
+    note: string | null;
+}
+/** The frames of the unit's newest attempt: from its last `unitDispatched`, this ord only. */
+export declare function attemptFrames(events: readonly Frame[], ord: number): {
+    frames: Frame[];
+    attempt: number;
+    startedAt: number | null;
+};
+/** Crew's reading of the unit's newest attempt at `now`. */
+export declare function readUnit(events: readonly Frame[] | null | undefined, ord: number, now: number): UnitReading;
+/** The step's recent frames for the checking seat, compact and bounded: one line each, newest last. */
+export declare function timeline(events: readonly Frame[] | null | undefined, ord: number, max?: number): string[];
+export {};
+//# sourceMappingURL=reading.d.ts.map

package/dist/inspect/reading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reading.d.ts","sourceRoot":"","sources":["../../src/inspect/reading.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAC9E,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzD,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,QAAc,CAAC;AAC9C,sEAAsE;AACtE,eAAO,MAAM,cAAc,QAAa,CAAC;AACzC,6DAA6D;AAC7D,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,0EAA0E;AAC1E,eAAO,MAAM,YAAY,SAAU,CAAC;AACpC;2DAC2D;AAC3D,eAAO,MAAM,eAAe,OAAQ,CAAC;AACrC,yDAAyD;AACzD,eAAO,MAAM,YAAY,QAAa,CAAC;AAEvC,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6FAA6F;IAC7F,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,+CAA+C;IAC/C,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,yCAAyC;IACzC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACtF,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,8DAA8D;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0FAA0F;IAC1F,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,iFAAiF;IACjF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAgBD,8FAA8F;AAC9F,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAYnI;AAkBD,4DAA4D;AAC5D,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CA0L3G;AAED,uGAAuG;AACvG,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,MAAM,EAAE,CA8BrG"}