@agent-relay/harness-driver 14.0.0 → 15.0.0-next.0

package/dist/broker-install.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Converge an npm install onto the canonical broker location.
+ *
+ * `npm i -g agent-relay` ships the broker inside node_modules through the
+ * platform optional dependency `@agent-relay/broker-<platform>-<arch>`. On the
+ * CLI's first run (not in a postinstall script: many users install with
+ * `ignore-scripts`), {@link ensureCanonicalBroker} copies that broker into
+ * `<install root>/bin/agent-relay-broker[.exe]` so every install method ends
+ * with the broker in the same place (see ./install-paths.ts).
+ *
+ * Guarantees:
+ *   - Atomic: the copy is written to a temp file in the target directory,
+ *     verified, chmod 0755, then renamed over the target.
+ *   - Integrity: when the npm package ships `<binary>.sha256`, the source must
+ *     match it; the temp copy must always hash identically to the source.
+ *   - No races: a lock file in the bin directory serialises concurrent CLI
+ *     processes; a process that finds the lock held skips this run. An
+ *     abandoned lock is broken by renaming it aside and confirming the renamed
+ *     file is the one judged abandoned, so a contender can never delete a
+ *     replacement lock another process just took. The owner re-checks that it
+ *     still holds the lock immediately before the final rename.
+ *   - Integrity of the sidecar itself: a present but unparseable `.sha256`
+ *     rejects the install (only an absent sidecar falls back to copy-hash
+ *     verification, for older packages).
+ *   - No downgrades: a canonical broker whose version is equal to or newer than
+ *     the npm one (for example from install.sh or the desktop app) is left
+ *     alone. A canonical file that cannot report a version is replaced.
+ */
+/** Set to `1` to disable copying the npm broker into the canonical bin directory. */
+export declare const SKIP_BROKER_INSTALL_ENV = "AGENT_RELAY_SKIP_BROKER_INSTALL";
+export type EnsureCanonicalBrokerSkipReason = 'disabled' | 'override' | 'no-source' | 'source-is-canonical' | 'unknown-source-version' | 'up-to-date' | 'newer-installed' | 'locked' | 'checksum-mismatch' | 'error';
+export type EnsureCanonicalBrokerResult = {
+    action: 'installed' | 'upgraded';
+    path: string;
+    version: string;
+    /** Version the replaced broker reported; absent when it reported none. */
+    previousVersion?: string;
+} | {
+    action: 'skipped';
+    reason: EnsureCanonicalBrokerSkipReason;
+    path: string;
+    detail?: string;
+};
+export interface EnsureCanonicalBrokerOptions {
+    /** Environment for overrides (default: process.env). */
+    env?: Record<string, string | undefined>;
+    /** Broker to copy (default: the npm optional-dependency binary). */
+    sourcePath?: string | null;
+    /** Version of `sourcePath` (default: its package.json version, else `--version`). */
+    sourceVersion?: string | null;
+    /** Destination (default: the canonical broker path). */
+    targetPath?: string;
+    /** Version probe for a binary; returns null when it cannot report one. */
+    readVersion?: (binaryPath: string) => string | null;
+    /** Age after which a lock is considered abandoned (default 120s). */
+    lockStaleMs?: number;
+}
+/**
+ * Extract the first semantic version from text such as
+ * `agent-relay-broker 14.0.0`.
+ * @param text - Output to scan
+ * @returns The version string, or null if none is present
+ */
+export declare function parseVersion(text: string | null | undefined): string | null;
+/**
+ * Compare two semantic versions.
+ * @returns -1, 0 or 1 like a sort comparator; null if either is unparseable
+ */
+export declare function compareVersions(a: string, b: string): number | null;
+/**
+ * Run `<binary> --version` and parse the version it prints.
+ * @param binaryPath - Executable to probe
+ * @returns The version, or null if the binary could not run or printed none
+ */
+export declare function readBinaryVersion(binaryPath: string): string | null;
+declare function versionCachePath(targetPath: string): string;
+/** What identifies one particular lock file, so a takeover can tell it apart from a replacement. */
+interface LockIdentity {
+    token?: string;
+    ino: number;
+    size: number;
+    mtimeMs: number;
+}
+/** A held lock. */
+export interface LockHandle {
+    /** Remove the lock if it is still ours. */
+    release: () => void;
+    /** True while the lock file on disk is still the one this process created. */
+    isHeld: () => boolean;
+}
+/**
+ * Inspect an existing lock. Returns null when it vanished (retry), otherwise
+ * whether it is abandoned (owner dead, unparseable and old, or older than
+ * `staleMs`) together with its identity.
+ */
+declare function inspectLock(lockPath: string, staleMs: number): {
+    stale: boolean;
+    identity: LockIdentity;
+} | null;
+/**
+ * Remove the abandoned lock described by `expected` without ever deleting a
+ * different (replacement) lock. The lock is atomically renamed aside first;
+ * if the renamed file turns out to be a live replacement that another
+ * contender created after the abandoned one was removed, it is linked back
+ * into place (no-clobber) and the takeover is abandoned.
+ *
+ * @returns true when the abandoned lock is gone and the caller may race to create one
+ */
+declare function breakStaleLock(lockPath: string, expected: LockIdentity): boolean;
+/**
+ * Take an exclusive lock file. Returns a handle, or null when a live process
+ * holds the lock (or a concurrent takeover won). An abandoned lock is broken
+ * with {@link breakStaleLock}.
+ */
+declare function acquireLock(lockPath: string, staleMs: number): LockHandle | null;
+type CopyOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'checksum-mismatch' | 'locked';
+    detail: string;
+};
+/**
+ * Copy `sourcePath` over `targetPath` through a verified temp file in the
+ * target directory. `canCommit` is consulted immediately before the final
+ * rename; when it returns false the copy is discarded.
+ */
+declare function copyAtomically(sourcePath: string, targetPath: string, canCommit: () => boolean): CopyOutcome;
+/**
+ * Copy the npm-shipped broker into the canonical bin directory when the
+ * canonical broker is missing or older. Never throws.
+ *
+ * @param options - Overrides, mainly for tests
+ * @returns What happened, for diagnostics
+ */
+export declare function ensureCanonicalBroker(options?: EnsureCanonicalBrokerOptions): EnsureCanonicalBrokerResult;
+/** @internal Exposed for tests. */
+export declare const testInternals: {
+    acquireLock: typeof acquireLock;
+    breakStaleLock: typeof breakStaleLock;
+    copyAtomically: typeof copyAtomically;
+    inspectLock: typeof inspectLock;
+    versionCachePath: typeof versionCachePath;
+};
+export {};
+//# sourceMappingURL=broker-install.d.ts.map

package/dist/broker-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-install.d.ts","sourceRoot":"","sources":["../src/broker-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAwBH,qFAAqF;AACrF,eAAO,MAAM,uBAAuB,oCAAoC,CAAC;AAKzE,MAAM,MAAM,+BAA+B,GACvC,UAAU,GACV,UAAU,GACV,WAAW,GACX,qBAAqB,GACrB,wBAAwB,GACxB,YAAY,GACZ,iBAAiB,GACjB,QAAQ,GACR,mBAAmB,GACnB,OAAO,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GACnC;IACE,MAAM,EAAE,WAAW,GAAG,UAAU,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,+BAA+B,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,WAAW,4BAA4B;IAC3C,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpD,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAI3E;AA2BD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASnE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYnE;AAqCD,iBAAS,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpD;AA8CD,oGAAoG;AACpG,UAAU,YAAY;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,mBAAmB;AACnB,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,OAAO,CAAC;CACvB;AAqBD;;;;GAIG;AACH,iBAAS,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CAmBzG;AAED;;;;;;;;GAQG;AACH,iBAAS,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAoCzE;AAED;;;;GAIG;AACH,iBAAS,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA8BzE;AAmCD,KAAK,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExG;;;;GAIG;AACH,iBAAS,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,GAAG,WAAW,CA6CrG;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,2BAA2B,CAmD7B;AAgCD,mCAAmC;AACnC,eAAO,MAAM,aAAa;;;;;;CAAiF,CAAC"}

package/dist/broker-install.js

@@ -0,0 +1,494 @@
+/**
+ * Converge an npm install onto the canonical broker location.
+ *
+ * `npm i -g agent-relay` ships the broker inside node_modules through the
+ * platform optional dependency `@agent-relay/broker-<platform>-<arch>`. On the
+ * CLI's first run (not in a postinstall script: many users install with
+ * `ignore-scripts`), {@link ensureCanonicalBroker} copies that broker into
+ * `<install root>/bin/agent-relay-broker[.exe]` so every install method ends
+ * with the broker in the same place (see ./install-paths.ts).
+ *
+ * Guarantees:
+ *   - Atomic: the copy is written to a temp file in the target directory,
+ *     verified, chmod 0755, then renamed over the target.
+ *   - Integrity: when the npm package ships `<binary>.sha256`, the source must
+ *     match it; the temp copy must always hash identically to the source.
+ *   - No races: a lock file in the bin directory serialises concurrent CLI
+ *     processes; a process that finds the lock held skips this run. An
+ *     abandoned lock is broken by renaming it aside and confirming the renamed
+ *     file is the one judged abandoned, so a contender can never delete a
+ *     replacement lock another process just took. The owner re-checks that it
+ *     still holds the lock immediately before the final rename.
+ *   - Integrity of the sidecar itself: a present but unparseable `.sha256`
+ *     rejects the install (only an absent sidecar falls back to copy-hash
+ *     verification, for older packages).
+ *   - No downgrades: a canonical broker whose version is equal to or newer than
+ *     the npm one (for example from install.sh or the desktop app) is left
+ *     alone. A canonical file that cannot report a version is replaced.
+ */
+import { execFileSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { chmodSync, closeSync, copyFileSync, existsSync, linkSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, writeSync, } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { getOptionalDepBrokerPath } from './broker-path.js';
+import { getCanonicalBrokerPath } from './install-paths.js';
+/** Set to `1` to disable copying the npm broker into the canonical bin directory. */
+export const SKIP_BROKER_INSTALL_ENV = 'AGENT_RELAY_SKIP_BROKER_INSTALL';
+const DEFAULT_LOCK_STALE_MS = 120_000;
+const VERSION_PROBE_TIMEOUT_MS = 5_000;
+// Bounded components and the no-digit lookbehind keep the unanchored scan
+// linear: an unbounded `\d+` re-backtracks every suffix of a long digit run.
+const SEMVER_RE = /(?<!\d)(\d{1,10})\.(\d{1,10})\.(\d{1,10})(?:-([0-9A-Za-z.-]{1,128}))?/u;
+/**
+ * Extract the first semantic version from text such as
+ * `agent-relay-broker 14.0.0`.
+ * @param text - Output to scan
+ * @returns The version string, or null if none is present
+ */
+export function parseVersion(text) {
+    if (!text)
+        return null;
+    const match = SEMVER_RE.exec(text);
+    return match ? match[0] : null;
+}
+function comparePrerelease(a, b) {
+    if (a === b)
+        return 0;
+    if (a === undefined)
+        return 1; // a release outranks its prereleases
+    if (b === undefined)
+        return -1;
+    const as = a.split('.');
+    const bs = b.split('.');
+    for (let i = 0; i < Math.max(as.length, bs.length); i += 1) {
+        const x = as[i];
+        const y = bs[i];
+        if (x === undefined)
+            return -1;
+        if (y === undefined)
+            return 1;
+        const xn = /^\d+$/u.test(x);
+        const yn = /^\d+$/u.test(y);
+        if (xn && yn) {
+            const d = Number(x) - Number(y);
+            if (d !== 0)
+                return d < 0 ? -1 : 1;
+        }
+        else if (xn !== yn) {
+            return xn ? -1 : 1;
+        }
+        else if (x !== y) {
+            return x < y ? -1 : 1;
+        }
+    }
+    return 0;
+}
+/**
+ * Compare two semantic versions.
+ * @returns -1, 0 or 1 like a sort comparator; null if either is unparseable
+ */
+export function compareVersions(a, b) {
+    const ma = SEMVER_RE.exec(a);
+    const mb = SEMVER_RE.exec(b);
+    if (!ma || !mb)
+        return null;
+    for (let i = 1; i <= 3; i += 1) {
+        const d = Number(ma[i]) - Number(mb[i]);
+        if (d !== 0)
+            return d < 0 ? -1 : 1;
+    }
+    return comparePrerelease(ma[4], mb[4]);
+}
+/**
+ * Run `<binary> --version` and parse the version it prints.
+ * @param binaryPath - Executable to probe
+ * @returns The version, or null if the binary could not run or printed none
+ */
+export function readBinaryVersion(binaryPath) {
+    try {
+        const out = execFileSync(binaryPath, ['--version'], {
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+            timeout: VERSION_PROBE_TIMEOUT_MS,
+            windowsHide: true,
+        });
+        return parseVersion(out);
+    }
+    catch {
+        return null;
+    }
+}
+/** Version from the package.json of the npm package that ships `binaryPath` (`<pkg>/bin/<file>`). */
+function readPackageVersion(binaryPath) {
+    try {
+        const pkgJson = join(dirname(dirname(binaryPath)), 'package.json');
+        const parsed = JSON.parse(readFileSync(pkgJson, 'utf-8'));
+        return typeof parsed.version === 'string' ? parseVersion(parsed.version) : null;
+    }
+    catch {
+        return null;
+    }
+}
+function sha256File(filePath) {
+    return createHash('sha256').update(readFileSync(filePath)).digest('hex');
+}
+/**
+ * Expected digest from a `<binary>.sha256` sidecar (`<hex>` or `<hex>  <name>`).
+ * `digest` is null when the sidecar exists but holds no SHA-256 digest
+ * (empty, truncated, corrupt), which callers must treat as a failed check.
+ */
+function readSidecarSha256(binaryPath) {
+    const sidecar = `${binaryPath}.sha256`;
+    if (!existsSync(sidecar))
+        return { present: false };
+    const match = /\b([0-9a-fA-F]{64})\b/u.exec(readFileSync(sidecar, 'utf-8'));
+    return { present: true, digest: match ? match[1].toLowerCase() : null };
+}
+function versionCachePath(targetPath) {
+    return join(dirname(targetPath), `.${basename(targetPath)}.version.json`);
+}
+/**
+ * Version of the canonical broker, served from a stat-keyed cache so a normal
+ * CLI run does not execute the broker just to learn its version.
+ */
+function readTargetVersion(targetPath, readVersion) {
+    let stat;
+    try {
+        stat = statSync(targetPath);
+    }
+    catch {
+        return null;
+    }
+    const cachePath = versionCachePath(targetPath);
+    try {
+        const cached = JSON.parse(readFileSync(cachePath, 'utf-8'));
+        if (cached.size === stat.size && cached.mtimeMs === stat.mtimeMs && typeof cached.version === 'string') {
+            return cached.version;
+        }
+    }
+    catch {
+        // No usable cache.
+    }
+    const version = readVersion(targetPath);
+    if (version)
+        writeVersionCache(targetPath, version);
+    return version;
+}
+function writeVersionCache(targetPath, version) {
+    try {
+        const stat = statSync(targetPath);
+        const entry = { size: stat.size, mtimeMs: stat.mtimeMs, version };
+        writeFileSync(versionCachePath(targetPath), `${JSON.stringify(entry)}\n`);
+    }
+    catch {
+        // The cache is an optimisation only.
+    }
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code === 'EPERM';
+    }
+}
+function readLockToken(lockPath) {
+    try {
+        const held = JSON.parse(readFileSync(lockPath, 'utf-8'));
+        return typeof held.token === 'string' ? held.token : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function lockIdentity(lockPath) {
+    const stat = statSync(lockPath);
+    return { token: readLockToken(lockPath), ino: stat.ino, size: stat.size, mtimeMs: stat.mtimeMs };
+}
+function sameLock(a, b) {
+    if (a.token !== undefined || b.token !== undefined)
+        return a.token === b.token;
+    return a.ino === b.ino && a.size === b.size && a.mtimeMs === b.mtimeMs;
+}
+/**
+ * Inspect an existing lock. Returns null when it vanished (retry), otherwise
+ * whether it is abandoned (owner dead, unparseable and old, or older than
+ * `staleMs`) together with its identity.
+ */
+function inspectLock(lockPath, staleMs) {
+    let identity;
+    let pid = NaN;
+    try {
+        identity = lockIdentity(lockPath);
+        const held = JSON.parse(readFileSync(lockPath, 'utf-8'));
+        if (typeof held.pid === 'number')
+            pid = held.pid;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return null;
+        // Unparseable, probably while being written: held unless it is also old.
+        try {
+            identity = lockIdentity(lockPath);
+        }
+        catch {
+            return null;
+        }
+        return { stale: Date.now() - identity.mtimeMs > staleMs, identity };
+    }
+    const old = Date.now() - identity.mtimeMs > staleMs;
+    return { stale: old || !Number.isInteger(pid) || !isProcessAlive(pid), identity };
+}
+/**
+ * Remove the abandoned lock described by `expected` without ever deleting a
+ * different (replacement) lock. The lock is atomically renamed aside first;
+ * if the renamed file turns out to be a live replacement that another
+ * contender created after the abandoned one was removed, it is linked back
+ * into place (no-clobber) and the takeover is abandoned.
+ *
+ * @returns true when the abandoned lock is gone and the caller may race to create one
+ */
+function breakStaleLock(lockPath, expected) {
+    const aside = `${lockPath}.${process.pid}.${Math.random().toString(36).slice(2)}.stale`;
+    try {
+        renameSync(lockPath, aside);
+    }
+    catch (err) {
+        // ENOENT: someone else already removed it; race to create a fresh one.
+        return err.code === 'ENOENT';
+    }
+    let moved = null;
+    try {
+        moved = lockIdentity(aside);
+    }
+    catch {
+        // Unreadable; treat as not the lock we judged.
+    }
+    if (moved && sameLock(moved, expected)) {
+        try {
+            unlinkSync(aside);
+        }
+        catch {
+            // Best effort.
+        }
+        return true;
+    }
+    // We moved someone else's fresh lock. Restore it unless a newer lock already
+    // exists (link never overwrites). If restoring fails, its owner notices
+    // through isHeld() before committing and backs off.
+    try {
+        linkSync(aside, lockPath);
+    }
+    catch {
+        // A newer lock is in place, or the filesystem has no hard links.
+    }
+    try {
+        unlinkSync(aside);
+    }
+    catch {
+        // Best effort.
+    }
+    return false;
+}
+/**
+ * Take an exclusive lock file. Returns a handle, or null when a live process
+ * holds the lock (or a concurrent takeover won). An abandoned lock is broken
+ * with {@link breakStaleLock}.
+ */
+function acquireLock(lockPath, staleMs) {
+    const token = `${process.pid}:${Date.now()}:${Math.random().toString(36).slice(2)}`;
+    for (let attempt = 0; attempt < 3; attempt += 1) {
+        try {
+            const fd = openSync(lockPath, 'wx', 0o644);
+            try {
+                writeSync(fd, JSON.stringify({ pid: process.pid, token }));
+            }
+            finally {
+                closeSync(fd);
+            }
+            return {
+                isHeld: () => readLockToken(lockPath) === token,
+                release: () => {
+                    try {
+                        if (readLockToken(lockPath) === token)
+                            unlinkSync(lockPath);
+                    }
+                    catch {
+                        // Already gone.
+                    }
+                },
+            };
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+        }
+        const existing = inspectLock(lockPath, staleMs);
+        if (existing === null)
+            continue;
+        if (!existing.stale)
+            return null;
+        if (!breakStaleLock(lockPath, existing.identity))
+            return null;
+    }
+    return null;
+}
+/** Decide whether this run should converge at all; returns a skip reason or the inputs. */
+function resolveInputs(options, env, targetPath, readVersion) {
+    const flag = env[SKIP_BROKER_INSTALL_ENV]?.trim().toLowerCase();
+    if (flag === '1' || flag === 'true')
+        return { skip: 'disabled' };
+    // An explicit broker override means the operator chose a binary; do not
+    // populate the canonical slot behind their back.
+    if (env.BROKER_BINARY_PATH?.trim() || env.AGENT_RELAY_BIN?.trim())
+        return { skip: 'override' };
+    // Only the broker that ships with this CLI's own package tree may populate
+    // the shared slot; never one found through the current project's
+    // node_modules (that broker may be a different version).
+    const sourcePath = options.sourcePath === undefined ? getOptionalDepBrokerPath({ includeCwd: false }) : options.sourcePath;
+    if (!sourcePath || !existsSync(sourcePath))
+        return { skip: 'no-source' };
+    if (sameFile(sourcePath, targetPath))
+        return { skip: 'source-is-canonical' };
+    const declared = options.sourceVersion === undefined ? readPackageVersion(sourcePath) : options.sourceVersion;
+    const sourceVersion = declared ?? readVersion(sourcePath);
+    if (!sourceVersion)
+        return { skip: 'unknown-source-version', detail: sourcePath };
+    return { sourcePath, sourceVersion };
+}
+/**
+ * Copy `sourcePath` over `targetPath` through a verified temp file in the
+ * target directory. `canCommit` is consulted immediately before the final
+ * rename; when it returns false the copy is discarded.
+ */
+function copyAtomically(sourcePath, targetPath, canCommit) {
+    const sourceHash = sha256File(sourcePath);
+    const sidecar = readSidecarSha256(sourcePath);
+    if (sidecar.present && sidecar.digest === null) {
+        return {
+            ok: false,
+            reason: 'checksum-mismatch',
+            detail: `${sourcePath}.sha256 is present but holds no SHA-256 digest`,
+        };
+    }
+    if (sidecar.present && sidecar.digest !== sourceHash) {
+        return {
+            ok: false,
+            reason: 'checksum-mismatch',
+            detail: `expected ${sidecar.digest}, got ${sourceHash}`,
+        };
+    }
+    const tempPath = join(dirname(targetPath), `.${basename(targetPath)}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`);
+    try {
+        copyFileSync(sourcePath, tempPath);
+        chmodSync(tempPath, 0o755);
+        const copiedHash = sha256File(tempPath);
+        if (copiedHash !== sourceHash) {
+            return {
+                ok: false,
+                reason: 'checksum-mismatch',
+                detail: `copy hashed ${copiedHash}, source ${sourceHash}`,
+            };
+        }
+        if (!canCommit()) {
+            return { ok: false, reason: 'locked', detail: 'install lock was taken over before commit' };
+        }
+        renameSync(tempPath, targetPath);
+        return { ok: true };
+    }
+    finally {
+        try {
+            unlinkSync(tempPath);
+        }
+        catch {
+            // Renamed into place, or never created.
+        }
+    }
+}
+/**
+ * Copy the npm-shipped broker into the canonical bin directory when the
+ * canonical broker is missing or older. Never throws.
+ *
+ * @param options - Overrides, mainly for tests
+ * @returns What happened, for diagnostics
+ */
+export function ensureCanonicalBroker(options = {}) {
+    const env = options.env ?? process.env;
+    const targetPath = options.targetPath ?? getCanonicalBrokerPath(env);
+    const readVersion = options.readVersion ?? readBinaryVersion;
+    const skip = (reason, detail) => ({
+        action: 'skipped',
+        reason,
+        path: targetPath,
+        ...(detail ? { detail } : {}),
+    });
+    try {
+        const inputs = resolveInputs(options, env, targetPath, readVersion);
+        if ('skip' in inputs)
+            return skip(inputs.skip, inputs.detail);
+        const { sourcePath, sourceVersion } = inputs;
+        // Fast path without the lock: the common case is "already converged".
+        const preCheck = decide(targetPath, sourceVersion, readVersion);
+        if (preCheck.kind !== 'install')
+            return skip(preCheck.kind, preCheck.version);
+        const binDir = dirname(targetPath);
+        mkdirSync(binDir, { recursive: true, mode: 0o755 });
+        const lock = acquireLock(join(binDir, `.${basename(targetPath)}.lock`), options.lockStaleMs ?? DEFAULT_LOCK_STALE_MS);
+        if (!lock)
+            return skip('locked');
+        try {
+            // Re-check under the lock: another process may have just converged.
+            const decision = decide(targetPath, sourceVersion, readVersion);
+            if (decision.kind !== 'install')
+                return skip(decision.kind, decision.version);
+            const copied = copyAtomically(sourcePath, targetPath, lock.isHeld);
+            if (!copied.ok)
+                return skip(copied.reason, copied.detail);
+            writeVersionCache(targetPath, sourceVersion);
+            if (decision.previous === undefined) {
+                return { action: 'installed', path: targetPath, version: sourceVersion };
+            }
+            return {
+                action: 'upgraded',
+                path: targetPath,
+                version: sourceVersion,
+                ...(decision.previous ? { previousVersion: decision.previous } : {}),
+            };
+        }
+        finally {
+            lock.release();
+        }
+    }
+    catch (err) {
+        return skip('error', err instanceof Error ? err.message : String(err));
+    }
+}
+function decide(targetPath, sourceVersion, readVersion) {
+    if (!existsSync(targetPath))
+        return { kind: 'install', previous: undefined };
+    const installed = readTargetVersion(targetPath, readVersion);
+    if (!installed)
+        return { kind: 'install', previous: null };
+    const cmp = compareVersions(installed, sourceVersion);
+    if (cmp === null)
+        return { kind: 'install', previous: installed };
+    if (cmp > 0)
+        return { kind: 'newer-installed', version: installed };
+    if (cmp === 0)
+        return { kind: 'up-to-date', version: installed };
+    return { kind: 'install', previous: installed };
+}
+function sameFile(a, b) {
+    try {
+        const sa = statSync(a);
+        const sb = statSync(b);
+        return sa.dev === sb.dev && sa.ino === sb.ino;
+    }
+    catch {
+        return false;
+    }
+}
+/** @internal Exposed for tests. */
+export const testInternals = { acquireLock, breakStaleLock, copyAtomically, inspectLock, versionCachePath };
+//# sourceMappingURL=broker-install.js.map

package/dist/broker-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-install.js","sourceRoot":"","sources":["../src/broker-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;AAEzE,MAAM,qBAAqB,GAAG,OAAO,CAAC;AACtC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AA4CvC,0EAA0E;AAC1E,6EAA6E;AAC7E,MAAM,SAAS,GAAG,wEAAwE,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAA+B;IAC1D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAqB,EAAE,CAAqB;IACrE,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,qCAAqC;IACpE,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE;YAClD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,wBAAwB;YACjC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAA0B,CAAC;QACnF,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAID;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,OAAO,GAAG,GAAG,UAAU,SAAS,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAQD,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,UAAkB,EAAE,WAAyC;IACtF,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA0B,CAAC;QACrF,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvG,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,OAAO;QAAE,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB,EAAE,OAAe;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAChF,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAkBD,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAwB,CAAC;QAChF,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAe,EAAE,CAAe;IAChD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC;IAC/E,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,IAAI,QAAsB,CAAC;IAC3B,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAsB,CAAC;QAC9E,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,yEAAyE;QACzE,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;IACpD,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,QAAsB;IAC9D,MAAM,KAAK,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxF,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,GAAwB,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IACD,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,wEAAwE;IACxE,oDAAoD;IACpD,IAAI,CAAC;QACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,KAAK;gBAC/C,OAAO,EAAE,GAAG,EAAE;oBACZ,IAAI,CAAC;wBACH,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,KAAK;4BAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC9D,CAAC;oBAAC,MAAM,CAAC;wBACP,gBAAgB;oBAClB,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,2FAA2F;AAC3F,SAAS,aAAa,CACpB,OAAqC,EACrC,GAAuC,EACvC,UAAkB,EAClB,WAAyC;IAEzC,MAAM,IAAI,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACjE,wEAAwE;IACxE,iDAAiD;IACjD,IAAI,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAE/F,2EAA2E;IAC3E,iEAAiE;IACjE,yDAAyD;IACzD,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC1G,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzE,IAAI,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAE7E,MAAM,QAAQ,GACZ,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC/F,MAAM,aAAa,GAAG,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACvC,CAAC;AAID;;;;GAIG;AACH,SAAS,cAAc,CAAC,UAAkB,EAAE,UAAkB,EAAE,SAAwB;IACtF,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,GAAG,UAAU,gDAAgD;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,YAAY,OAAO,CAAC,MAAM,SAAS,UAAU,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CACnB,OAAO,CAAC,UAAU,CAAC,EACnB,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CACrF,CAAC;IACF,IAAI,CAAC;QACH,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,eAAe,UAAU,YAAY,UAAU,EAAE;aAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAC9F,CAAC;QACD,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAwC,EAAE;IAE1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,MAAuC,EAAE,MAAe,EAA+B,EAAE,CAAC,CAAC;QACvG,MAAM,EAAE,SAAS;QACjB,MAAM;QACN,IAAI,EAAE,UAAU;QAChB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,MAAM,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;QAE7C,sEAAsE;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,WAAW,CACtB,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAC7C,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAC7C,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,oEAAoE;YACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YAChE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE9E,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1D,iBAAiB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAE7C,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAC3E,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,aAAa;gBACtB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAOD,SAAS,MAAM,CACb,UAAkB,EAClB,aAAqB,EACrB,WAAyC;IAEzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7E,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClE,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpE,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC"}