@ai-ecoverse/slicc-kernel 1.76.0 → 1.77.0

package/README.md

@@ -155,7 +155,7 @@ Attaches to a kernel over a port from `kernel.connect()`, in any realm: a worker
 | `spawn(argv, { cwd, user, env, stdin, pgid, onStdout, onStderr })` | runs over pipes and resolves with `{ pid, pgid, exited, signal(name) }` once the process has started; output arrives in chunks, as bytes, and the kernel keeps no copy; every spawn leads its own process group, which `signal` (default `SIGTERM`) signals, unless `pgid` names an existing group to join (protocol 1.3): the process then joins that group and that group's session, as `setpgid` would (a client has no session of its own: each of its spawns and terminals leads one, and `setpgid` cannot cross sessions), and `signal` signals the whole group. The group must have been started by this client (a spawn or a terminal it opened), even if its leader has exited; an unknown group rejects with `code: 'ESRCH'`, another session's with `code: 'EPERM'`, and against a 1.2 kernel the client rejects with `code: 'ENOSYS'` before sending anything, as an older kernel would ignore the option; a program that cannot start rejects with `code: 'ENOENT'`. `user` runs it as another user, which only a root client may (see `kernel.connect`); against a 1.7 kernel the client rejects with `code: 'ENOSYS'` |
 | `run(argv, options?)` | `spawn` and wait: `{ pid, status, stdout, stderr }` as text, with `onStdout`/`onStderr` streaming text |
 | `openTerminal(argv, options?)` | a pty session, as `kernel.openTerminal` |
-| `ps()` | the kernel's processes: `{ pid, ppid, pgid, sid, argv, tty, started, state, rss, utime, stime, uid, gid }`, `state` being `'S'` or `'Z'`, `rss` the process's resident memory in bytes (the size of its wasm memory, what `/proc/<pid>/status` shows as `VmRSS`; absent from kernels before 1.61), `utime`/`stime` the CPU time it has used, in milliseconds, in its program and in the kernel's calls (see [`/proc`](#proc); absent for a JS program and from kernels before 1.63) and `uid`/`gid` the effective ids (absent from a 1.7 kernel). A client bound to a user sees only that user's processes |
+| `ps()` | the kernel's processes: `{ pid, ppid, pgid, sid, argv, tty, started, state, rss, utime, stime, uid, gid }`, `state` being `'S'`, `'T'` (stopped) or `'Z'`, `rss` the process's resident memory in bytes (the size of its wasm memory, what `/proc/<pid>/status` shows as `VmRSS`; absent from kernels before 1.61), `utime`/`stime` the CPU time it has used, in milliseconds, in its program and in the kernel's calls (see [`/proc`](#proc); absent for a JS program and from kernels before 1.63) and `uid`/`gid` the effective ids (absent from a 1.7 kernel). A client bound to a user sees only that user's processes |
 | `kill(pid, signal?)` | a process, or a process group with a negative pid; no such process rejects with `code: 'ESRCH'`, and one the client's user may not signal with `code: 'EPERM'` |
 | `fs` | `readFile`, `readText`, `writeFile(path, string \| bytes)`, `stat`, `lstat`, `readdir`, `mkdir` (with parents), `rm(path, { force })` (recursive), `rename`, `realpath`, `symlink(target, path)`, `readlink`, `exists`, on the processes' file system, mounts included (a path under a `tmpfs`, `fsa` or `hostfs` mount reads and writes the mounted file system, as `cat` in a process would); failures reject with `KernelCallError` and a POSIX `code` |
 | `fetch({ url, method, headers, body, signal })` | through the kernel's network transport (the one the page passed to `createKernel`), with a streaming body; `transport` is the same as a `NetworkTransport` |
@@ -234,7 +234,7 @@ On top of preview1 a WASI program gets:
 - **Threads**: `wasi.thread-spawn` (wasm32-wasip1-threads) and WASIX `thread_spawn_v2` start a worker per thread on the process's shared memory, sized from the module's own import (a 2 GiB maximum when the engine cannot reserve more). The threads share one descriptor table, and a file written, created, renamed or removed in one thread shows its new size and metadata to `stat` in every other thread at once, under any of its names (a symlink, a hard link, a new name after a rename in the same process), also when another thread renames a file over that name meanwhile, since the kernel reports which file an open or a change reached; this holds among the kernel's own processes, not against other tabs, `hostfs` writers or programs that aren't WASI; another process's changes show at close and after a `spawn` or `wait`, as with close-to-open caching, so a file another process renames while this one holds it open may show its old size under the new name until then; `exit` or a trap in any thread ends the process. At most 64 threads per process; `SLICC_WASM_THREADS` sets another cap, up to 256.
 - **WASIX** (a module importing `wasix_32v1`): fork and setjmp/longjmp through Asyncify (the module is built with `wasm-opt --asyncify`), exec, `posix_spawn`, `waitpid` (with `WNOHANG`, and `WUNTRACED` for a child that stops; WASIX has no `WCONTINUED`), pipes, `dup2`, signal handlers and interval timers, terminal modes, and dynamic linking: a position-independent main module loads side modules with `dlopen` from `LD_LIBRARY_PATH`, its runtime path, `/lib`, `/usr/lib` and `/usr/local/lib`. Each thread has its own copy of the function table, so the kernel hands out its slots (a side module's range, a `dlsym`'d function, a closure): threads loading or looking up at the same time never get the same slot. As in glibc, one `dlopen` at a time runs in a process, constructors included: a `dlopen` from a library's constructor goes ahead in its own thread, and another thread's `dlopen` waits, then finds the library loaded and gets the same handle. A thread waiting there still ends or stops with its process, but a signal handler it has runs once that `dlopen` returns. The lock is let go when a `dlopen` fails (an exception, a trap or `pthread_exit` out of a constructor included) and when its thread ends; a forked child starts with it free. In such a program, `dlopen(NULL)`, and `dlopen` of the program's own file (also by a path that resolves to it through symlinks), give a handle for the program that is already running (no second copy is loaded); a program that isn't position-independent gets an error from `dlopen(NULL)`, as from any `dlopen`; `dlsym` on it searches the program, then the loaded libraries, and `dlclose` of it does nothing. A function already in the table (the program's own, or a library's) keeps its slot, so `dlsym(handle, "strlen") == strlen`.
 - **Foreign calls** (libffi's WASIX backend, so Python's `ctypes`): `call_dynamic` calls a function through the program's indirect function table (a static module's exported `__indirect_function_table`, or the dynamic linker's), its arguments and results packed in memory one after another (`i32`/`f32` 4 bytes, `i64`/`f64` 8). With `strict` set, the buffers must fit the function exactly (else `EINVAL`, before the function is called); without it, missing arguments are zero (one cut short keeps the bytes given, with zeros above them) and results that do not fit are left out. A trap or exception of the callee goes through to the caller. JS cannot ask a function for its type, so the kernel reads the types from the module files (the program's and each side module's, once, when a program first calls through `call_dynamic`): a table slot that is empty, past the end, holds a function of no module the kernel knows of, or takes or returns a `v128`, gives `EINVAL`. For closures (callbacks such as `CFUNCTYPE`), a dynamically linked program gets table slots from `closure_allocate`, and `closure_free` gives them back for reuse and empties the slot in every thread; a static program gets `ENOTSUP`. `closure_prepare` puts a trampoline with the requested signature (any of `i32`, `i64`, `f32`, `f64`, `v128`) into such a slot, in every thread: each call stores its arguments below the stack pointer and calls the backing function as `backing(values, results, user_data)`, then returns what it wrote to `results`. The trampolines are small wasm modules made and compiled at run time, once per signature in each thread (an instance per closure), so a page whose Content Security Policy forbids compiling WebAssembly (no `'wasm-unsafe-eval'`) cannot run them; it cannot run the program either. A `fork` or a `longjmp` (both through Asyncify) inside a function reached through `call_dynamic` cannot unwind through it.
-- **Job control:** `^Z`, `SIGTSTP`, `SIGTTIN` and `SIGTTOU` stop a WASIX program at once, unless it has a handler for them. A stopped program that is busy computing is stopped for job control (`jobs` shows it, `fg`, `bg` and `SIGCONT` work), but its worker keeps a core busy until its next system call, since a worker's running code cannot be frozen from outside. Agents should `kill` such a job rather than leave it stopped. For the same reason, a signal with a handler or a terminating default (`^C`, `SIGTERM`) reaches a program that is busy computing only at its next system call, so a CPU-bound loop may not end on `^C`; `kill -9` always ends it. A pending signal is delivered at the program's next WASI or WASIX call, including the calls its worker answers without the kernel (`random_get`, `args_get`, …), except the exempt ones: `clock_time_get` (a tight loop of it measured up to 30% slower), `proc_exit`, `proc_exit2`, `thread_exit`, `thread_spawn_v2` and `wasi.thread-spawn` (wasi-threads), the calls that install handlers (`callback_signal`, `slicc.sigaction_set`), and calls made while Asyncify unwinds or rewinds the stack for `fork` or `longjmp`. A thread blocked in the kernel or waiting on a lock (`pthread_cond_wait`, a futex) is woken by a signal for it (a futex wait checks for signals every 50 ms, so each waiting thread wakes briefly that often), and `pthread_kill` runs the handler on the thread it names. A sleep, or a clock in `poll_oneoff`, never ends before the time asked (it can end later, never earlier). A signal that ends a sleep or a `poll`/`select` with a timeout makes the call fail with `EINTR` in a program whose libc says it is wasix-sysroot 2025.9.30-22 or later (its `slicc.libc` custom section). Older libcs turn that answer into `ENOTSUP` from `nanosleep` (up to -18), so for a program without the section the wait ends as if it had timed out, unless it imports `fd_fdflags_set` (then `EINTR`, as before).
+- **Job control:** `^Z`, `SIGTSTP`, `SIGTTIN` and `SIGTTOU` stop a WASIX program at once, unless it has a handler for them. A stopped program that is busy computing is stopped for job control (`jobs` shows it, `fg`, `bg` and `SIGCONT` work), but its worker keeps a core busy until its next system call, since a worker's running code cannot be frozen from outside. Agents should `kill` such a job rather than leave it stopped. An Emscripten program stops at its next kernel call as well, and at its next write, read or sleep that its glue answers without the kernel (a write to its own `/dev/null`, as in `yes > /dev/null`), so a stopped one keeps no core busy unless it computes without any of these calls. A stopped program doesn't move on while stopped: a `sleep` (or a blocked read) that would end meanwhile ends after `SIGCONT`. For the same reason, a signal with a handler or a terminating default (`^C`, `SIGTERM`) reaches a program that is busy computing only at its next system call, so a CPU-bound loop may not end on `^C`; `kill -9` always ends it. A pending signal is delivered at the program's next WASI or WASIX call, including the calls its worker answers without the kernel (`random_get`, `args_get`, …), except the exempt ones: `clock_time_get` (a tight loop of it measured up to 30% slower), `proc_exit`, `proc_exit2`, `thread_exit`, `thread_spawn_v2` and `wasi.thread-spawn` (wasi-threads), the calls that install handlers (`callback_signal`, `slicc.sigaction_set`), and calls made while Asyncify unwinds or rewinds the stack for `fork` or `longjmp`. A thread blocked in the kernel or waiting on a lock (`pthread_cond_wait`, a futex) is woken by a signal for it (a futex wait checks for signals every 50 ms, so each waiting thread wakes briefly that often), and `pthread_kill` runs the handler on the thread it names. A sleep, or a clock in `poll_oneoff`, never ends before the time asked (it can end later, never earlier). A signal that ends a sleep or a `poll`/`select` with a timeout makes the call fail with `EINTR` in a program whose libc says it is wasix-sysroot 2025.9.30-22 or later (its `slicc.libc` custom section). Older libcs turn that answer into `ENOTSUP` from `nanosleep` (up to -18), so for a program without the section the wait ends as if it had timed out, unless it imports `fd_fdflags_set` (then `EINTR`, as before).
 - **Pipes** have no file type for WASI and WASIX programs' `fstat` (`st_mode` type 0), because WASI has no FIFO file type. A socket type, as kernels 1.47.3 to 1.48.1 gave them, made Ruby treat a `popen` pipe as a socket (`close_write` then never ends the child's input). The kernel's `slicc_fs.fd_mode` answers `S_IFIFO | 0600` (Linux numbering) for a pipe, and wasix-sysroot 2025.9.30-21 and later take the type from it, so programs built on it see a FIFO (`S_ISFIFO`); older libcs keep only the permission bits. Until then Python's asyncio refuses a pipe for a subprocess (`Pipe transport is only for pipes, sockets and character devices`). They are read and written as pipes; socket calls on them fail with `ENOTSOCK`, and `isatty()` is false. Emscripten programs, bash included, see a FIFO. The same holds for any kernel descriptor that is neither seekable nor a terminal or device, such as captured output.
 - **Sockets**: the WASIX socket calls (`sock_open`, `sock_pair` for an `AF_UNIX` stream pair, `bind`, `listen`, `connect`, `accept`, options, local and peer names) are the kernel's loopback sockets, and preview1's `sock_recv` / `sock_send` / `sock_shutdown` work on them and on inherited ones. Writing to a socket whose peer is gone fails with `EPIPE`, through `fd_write` as through `sock_send`, as if `MSG_NOSIGNAL` were set, since a WASI program cannot ignore `SIGPIPE`; a pipe or terminal whose reader is gone still ends the program with status 141. HTTP and HTTPS leave through the realm proxy that `https_proxy` names, as for any other program; `resolve` answers `/etc/hosts` names and literal addresses, and the [uplink](#uplink)'s names.
 - **Diagnostics**: a trap ends the program with 134 and its message on stderr; with `SLICC_WASM_BACKTRACE=1` the wasm frames follow, named from the module's name section, or from a sidecar for a module shipped without one (`<module>.names` beside it, or the same path in a `<package>-names` package). `SLICC_WASI_STATS=1` makes a program print its calls, counted and timed, as it ends.
@@ -626,7 +626,7 @@ A character device (`0666`, major 10, minor 251), there in every `users` mode, t
 - **State per open file description:** `dup`'d and fork-inherited descriptors share one snapshot and one buffer, as on Linux; each `open()` is new. `lseek` fails with `ESPIPE`, and `poll`/`select` report it readable and writable at once.
 - **Reading:** the first `read()` asks `read(stamp)` and takes a snapshot of the text as UTF-8; later reads continue it, and its end is end-of-file. A failed read keeps no snapshot, so the next read asks again. A signal ends the wait with `EINTR`.
 - **Writing:** the bytes are buffered, and the last close of the description calls `write(text, stamp)` with all of them as one string, and waits for it, so `close()` returns its error. A description opened `O_WRONLY` always commits (with nothing written, `write('')` clears the clipboard, so `: > /dev/clipboard` works); one opened `O_RDWR` commits only once it has been written to, and one opened `O_RDONLY` never. More than 1 MiB in all fails that `write()` with `EFBIG`, and the description stays failed: later writes fail too and its close commits nothing. Bytes that aren't valid UTF-8 fail the close with `EILSEQ`, and the hook isn't called. With `O_RDWR`, reads come from the snapshot and writes go to the buffer, independently.
-- **Errors:** a hook that throws a `NotAllowedError` (no focus, or permission denied) gives `EACCES`; anything else, a hook that doesn't answer within 10 s ("clipboard timed out") included, gives `EIO`; no `clipboard` hook gives `ENOTSUP` on read and on a committing close (writes still buffer). The first line of the hook's message reaches JS programs in the error's message (`fd-close: … : EACCES`); Emscripten and WASI programs get the errno.
+- **Errors:** a hook that throws a `NotAllowedError` (no focus, or permission denied) gives `EACCES`; anything else, a hook that doesn't answer within 10 s ("clipboard timed out") included, gives `EIO`; no `clipboard` hook gives `ENOTSUP` on read and on a committing close (writes still buffer). The first line of the hook's message reaches JS programs in the error's message (`fd-close: … : EACCES`). Emscripten and WASI programs get the errno, and when the hook refuses or fails (`EACCES` or `EIO`, a timeout included) at a read or at a commit, the kernel first writes `<argv0>: /dev/clipboard: <message>` to the process's standard error, before the call returns, so it comes before the program's own error line (`cat: /dev/clipboard: The clipboard needs…` then `cat: write error: Permission denied`). It is one line: control characters are written as `\t`, `\n`, `\r` or `\xNN`, and it is cut at 200 characters. It's skipped when standard error is closed or is `/dev/clipboard` itself, and at a teardown commit.
 - **Standard output at exit:** an Emscripten program's libc never closes its standard output, so the kernel does what coreutils' `close_stdout` would: when it closes standard error at exit (or, failing that, when the runtime shuts down) with `/dev/clipboard` still on standard output, it commits it, and on an error prints `<program>: write error: <strerror>` to standard error and makes a 0 exit status 1. So `printf x | cat > /dev/clipboard` prints `cat: write error: Permission denied` and fails when the hook refuses. Only `/dev/clipboard` descriptors report their close errors this way; every other descriptor's close is as before.
 - **Exit without close:** a process that ends with a description still open commits at its teardown, stamped with that process; the error is then lost, as nobody is left to get it.
 - **The stamp:** `{ pid, uid, gid, users, tag? }`: the pid as the program sees it, the effective ids, the kernel's `users` mode, and the process's `tag` (see `kernel.run`; a process inherits it from its parent, and a client's processes get the client's `connect({ tag })`), in every `users` mode. A read is stamped with the process that reads first; a commit with the process that closes last (or ends, at teardown).
@@ -655,7 +655,7 @@ A character device (`0666`, major 10, minor 251), there in every `users` mode, t
 
 ### `/proc`
 
-Every process of the kernel has `/proc/<pid>/` with `cmdline`, `comm`, `stat`, `statm` and `status`, in the formats procps reads, and `/proc/self` is a link to the `/proc/<pid>` of the process that reads it, as on Linux (`readlink /proc/self` is its pid, the one it was exec'd under included). They come from the kernel's process table when they are opened, so a terminal sees the processes of every client. A process that exits while a program reads the `/proc` directory doesn't fail or cut short the listing: its pid is still listed, and opening its files fails with `ENOENT`, which `ps`, `pgrep` and `pidof` skip, as on Linux; an exec'd program shows under the pid its parent knows. `/proc/uptime`, `/proc/loadavg`, `/proc/stat` and `/proc/meminfo` are there too, and `/proc/mounts`. A process with no parent in the kernel (one a page, a client or the Node entry started) has parent 1, as children of init do, in `getppid()`, `/proc/<pid>/stat` and `ps` alike, and so does a process whose parent has ended, waited for or not (`getppid()` asks the kernel each time; a shell's `$PPID` keeps the value it started with, as on Linux). Pids, parents, process groups, sessions, command lines, terminals, start and boot times are real, and so are the credentials in `status` (`Uid:`, `Gid:`, `Groups:`) and each process's memory: the size of its wasm memory (`VSZ` and `RSS` alike, as wasm has no paging), which `/proc/meminfo` counts as used. CPU times are measured per process, its threads and the images it exec'd included: time a worker spends waiting for the kernel's answer is system time (at most 20 ms of each call; the rest of a longer one, such as a write into a full pipe, counts as blocked), time it spends blocked (a read, a `poll` or `select` that waits, a sleep, `wait`, a futex, while stopped) is neither (a readiness check that never waits is system time), and the rest is user time; a process's times stop when it ends, a call still in flight then adds nothing, so a loop that never calls the kernel shows as user time while it runs; they show in `/proc/<pid>/stat`, `ps` and `ps()`, and `/proc/stat` counts every process of the kernel, the reaped ones included, and `/proc/loadavg` averages the processes not blocked, sampled every 5 seconds. A JS program's time isn't measured yet. `MemTotal` (from `navigator.deviceMemory`, else 4 GiB) is a placeholder. A process that isn't root sees only its own user's processes (see [Users](#users)). WASI and WASIX programs see the same `/proc`, read-only (opening a file in it for writing, or linking one of its files elsewhere, fails with `EROFS`), from every thread, also through a symlink that points into it (where every change, `mkdir`, `rename`, `unlink`, `chmod`, a hard link from it or into it, and so on, fails too: with `EROFS` when the root file system has a physical `/proc`, which stays hidden and untouched, and otherwise with the `ENOENT` of the missing directory, since that check is only paid for when a physical `/proc` exists; with one, a symlink whose target passes `..` after a file or a missing name, such as `/f/../proc`, fails with `ENOTDIR` or `ENOENT`, as on Linux), and `/` lists it, so a WASI program gets a preopen for it; `/proc/self` is the program's own pid there too (the pid an exec'd program took over). Neither has `/proc/<pid>/fd` yet.
+Every process of the kernel has `/proc/<pid>/` with `cmdline`, `comm`, `stat`, `statm` and `status`, in the formats procps reads, and `/proc/self` is a link to the `/proc/<pid>` of the process that reads it, as on Linux (`readlink /proc/self` is its pid, the one it was exec'd under included). They come from the kernel's process table when they are opened, so a terminal sees the processes of every client. A process that exits while a program reads the `/proc` directory doesn't fail or cut short the listing: its pid is still listed, and opening its files fails with `ENOENT`, which `ps`, `pgrep` and `pidof` skip, as on Linux; an exec'd program shows under the pid its parent knows. `/proc/uptime`, `/proc/loadavg`, `/proc/stat` and `/proc/meminfo` are there too, and `/proc/mounts`. A process with no parent in the kernel (one a page, a client or the Node entry started) has parent 1, as children of init do, in `getppid()`, `/proc/<pid>/stat` and `ps` alike, and so does a process whose parent has ended, waited for or not (`getppid()` asks the kernel each time; a shell's `$PPID` keeps the value it started with, as on Linux). Pids, parents, process groups, sessions, command lines, terminals, start and boot times are real, and so are the credentials in `status` (`Uid:`, `Gid:`, `Groups:`) and each process's memory: the size of its wasm memory (`VSZ` and `RSS` alike, as wasm has no paging), which `/proc/meminfo` counts as used. CPU times are measured per process, its threads and the images it exec'd included: time a worker spends waiting for the kernel's answer is system time (at most 20 ms of each call; the rest of a longer one, such as a write into a full pipe, counts as blocked), time it spends blocked (a read, a `poll` or `select` that waits, a sleep, `wait`, a futex, while stopped) is neither (a readiness check that never waits is system time), and the rest is user time; a process's times stop when it ends, a call still in flight then adds nothing, so a loop that never calls the kernel shows as user time while it runs; they show in `/proc/<pid>/stat`, `ps` and `ps()`, and the times of the children a process has waited for (theirs and their own waited-for children's, as POSIX counts them) show as its `cutime` and `cstime` in `/proc/<pid>/stat`; a stopped process is `T` there, in `/proc/<pid>/status` (`T (stopped)`) and in `ps()`; a WASI or WASIX program's `CLOCK_PROCESS_CPUTIME_ID` and `CLOCK_THREAD_CPUTIME_ID` (`clock_time_get`) count only the time its thread runs, its own waits and blocked kernel calls left out (a sleep is not CPU time), per thread for now, so a threaded program's process clock is its calling thread's; and `/proc/stat` counts every process of the kernel, the reaped ones included, and `/proc/loadavg` averages the processes not blocked, sampled every 5 seconds. A JS program's time isn't measured yet. `MemTotal` (from `navigator.deviceMemory`, else 4 GiB) is a placeholder. A process that isn't root sees only its own user's processes (see [Users](#users)). WASI and WASIX programs see the same `/proc`, read-only (opening a file in it for writing, or linking one of its files elsewhere, fails with `EROFS`), from every thread, also through a symlink that points into it (where every change, `mkdir`, `rename`, `unlink`, `chmod`, a hard link from it or into it, and so on, fails too: with `EROFS` when the root file system has a physical `/proc`, which stays hidden and untouched, and otherwise with the `ENOENT` of the missing directory, since that check is only paid for when a physical `/proc` exists; with one, a symlink whose target passes `..` after a file or a missing name, such as `/f/../proc`, fails with `ENOTDIR` or `ENOENT`, as on Linux), and `/` lists it, so a WASI program gets a preopen for it; `/proc/self` is the program's own pid there too (the pid an exec'd program took over). Neither has `/proc/<pid>/fd` yet.
 
 The kernel writes `/etc/passwd` and `/etc/group` when it starts (see [Users](#users)). While the root has none of them, or no `/etc/mtab`, reading them gets per-process ones: root is uid 0 and the realm user, uid 1000, is named after `USER`, or `web_user` (Emscripten's default) without one, so it matches `$USER`, with `HOME` as its home, so `id`, `whoami`, `ls -l` and `ps` show names. Nothing is written to OPFS, and a real file there wins.
 

package/dist/driver-worker.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/cdp/port.ts", "../src/kernel/net/ws-queue.ts", "../src/kernel/net/remote-transport.ts", "../src/bytes.ts", "../src/client/dial-stream.ts", "../src/client/loopback-fetch.ts", "../src/client/protocol.ts", "../src/client/attach.ts", "../src/mount/protocol.ts", "../src/mount/driver.ts", "../src/mount/host.ts", "../src/process/js/lockdown.ts", "../src/driver-worker.ts"],
-  "sourcesContent": ["import type { CdpConnection, CdpHook, CdpRequest } from './types.ts';\n\nexport interface CdpPortLike {\n  postMessage(message: unknown): void;\n  addEventListener(type: 'message', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n  close(): void;\n}\n\nexport type CdpWire = { open: true } | { error: string } | { m: string } | { close: string | null };\n\nexport interface CdpOpen {\n  cdpOpen: CdpRequest & { registration?: number };\n  port: CdpPortLike;\n}\n\nexport function serveCdpPort(\n  port: CdpPortLike,\n  hook: CdpHook,\n  request: CdpRequest,\n  onDone?: () => void\n): () => void {\n  let conn: CdpConnection | undefined;\n  let done = false;\n  const end = () => {\n    done = true;\n    port.close();\n    onDone?.();\n  };\n  const finish = (reason: string | null) => {\n    if (done) return;\n    port.postMessage({ close: reason });\n    end();\n  };\n  port.addEventListener('message', ({ data }: MessageEvent<{ m?: string; close?: true }>) => {\n    if (data.m !== undefined) conn?.send(data.m);\n    else if (data.close && !done) {\n      end();\n      conn?.close();\n    }\n  });\n  port.start?.();\n  new Promise<CdpConnection>((resolve) => resolve(hook(request))).then(\n    (opened) => {\n      conn = opened;\n      if (done) return opened.close();\n      opened.onmessage = (m) => {\n        if (!done) port.postMessage({ m });\n      };\n      opened.onclose = (reason) => finish(reason ?? null);\n      port.postMessage({ open: true });\n    },\n    (e: unknown) => {\n      if (done) return;\n      port.postMessage({ error: e instanceof Error ? e.message : String(e) });\n      end();\n    }\n  );\n  return () => {\n    if (done) return;\n    conn?.close();\n    finish('the CDP host is gone');\n  };\n}\n\nexport function portCdpHook(\n  ask: (request: CdpRequest, port: CdpPortLike) => void,\n  gone?: Promise<unknown>\n): CdpHook {\n  return (request) =>\n    new Promise((resolve, reject) => {\n      const { port1, port2 } = new MessageChannel();\n      let closed = false;\n      const conn: CdpConnection = {\n        send: (m) => {\n          if (!closed) port1.postMessage({ m });\n        },\n        onmessage: null,\n        onclose: null,\n        close: () => {\n          if (closed) return;\n          closed = true;\n          port1.postMessage({ close: true });\n          port1.close();\n        },\n      };\n      port1.addEventListener('message', ({ data }: MessageEvent<CdpWire>) => {\n        if ('m' in data) conn.onmessage?.(data.m);\n        else if ('open' in data) resolve(conn);\n        else if ('error' in data) {\n          closed = true;\n          port1.close();\n          reject(new Error(data.error));\n        } else if (!closed) {\n          closed = true;\n          port1.close();\n          conn.onclose?.(data.close ?? undefined);\n        }\n      });\n      port1.start();\n      void gone?.then(() => {\n        if (closed) return;\n        closed = true;\n        port1.close();\n        reject(new Error('the CDP host is gone'));\n        conn.onclose?.('the CDP host is gone');\n      });\n      ask(request, port2 as unknown as CdpPortLike);\n    });\n}\n", "import type { RealmWebSocketClose, RealmWebSocketMessage } from './transport.ts';\n\nexport const INBOUND_LIMIT = 16 * 1024 * 1024;\nexport const MESSAGE_LIMIT = 64 * 1024 * 1024;\nexport const TOO_BIG = 1009;\n\nexport function payloadSize(message: RealmWebSocketMessage): number {\n  return typeof message === 'string' ? new TextEncoder().encode(message).length : message.length;\n}\n\nexport class MessageQueue implements AsyncIterable<RealmWebSocketMessage> {\n  private readonly items: RealmWebSocketMessage[] = [];\n  private readonly limit: number;\n  private waiter: (() => void) | undefined;\n  private size = 0;\n  private ended = false;\n  private readonly overflow: () => void;\n  private readonly taken: ((n: number) => void) | undefined;\n  readonly closed: Promise<RealmWebSocketClose>;\n  private settle!: (close: RealmWebSocketClose) => void;\n\n  constructor(overflow: () => void, limit = INBOUND_LIMIT, taken?: (n: number) => void) {\n    this.overflow = overflow;\n    this.limit = limit;\n    this.taken = taken;\n    this.closed = new Promise((resolve) => {\n      this.settle = resolve;\n    });\n  }\n\n  push(message: RealmWebSocketMessage): void {\n    if (this.ended) return;\n    const size = payloadSize(message);\n    const huge = size > MESSAGE_LIMIT;\n    if (huge || (this.items.length > 0 && this.size + size > this.limit)) {\n      const reason = huge\n        ? `a message is over ${MESSAGE_LIMIT} bytes`\n        : `over ${this.limit} bytes of messages are waiting`;\n      this.end({ code: TOO_BIG, reason });\n      this.overflow();\n      return;\n    }\n    this.size += size;\n    this.items.push(message);\n    this.wake();\n  }\n\n  end(close: RealmWebSocketClose): void {\n    if (this.ended) return;\n    this.ended = true;\n    this.settle(close);\n    this.wake();\n  }\n\n  private wake(): void {\n    const waiter = this.waiter;\n    this.waiter = undefined;\n    waiter?.();\n  }\n\n  async *[Symbol.asyncIterator](): AsyncIterator<RealmWebSocketMessage> {\n    for (;;) {\n      const next = this.items.shift();\n      if (next !== undefined) {\n        const n = payloadSize(next);\n        this.size -= n;\n        this.taken?.(n);\n        yield next;\n        continue;\n      }\n      if (this.ended) return;\n      await new Promise<void>((resolve) => {\n        this.waiter = resolve;\n      });\n    }\n  }\n}\n", "import type {\n  HeaderList,\n  RealmRedirectHop,\n  RealmTransport,\n  RealmTransportRequest,\n  RealmTransportResponse,\n  RealmTransportTraits,\n  RealmWebSocket,\n  RealmWebSocketMessage,\n  RealmWebSocketRequest,\n} from './transport.ts';\nimport { MessageQueue, payloadSize } from './ws-queue.ts';\n\nexport type TransportCall =\n  | {\n      net: 'fetch';\n      nid: number;\n      url: string;\n      method: string;\n      headers: HeaderList;\n      body?: Uint8Array;\n    }\n  | { net: 'read'; nid: number }\n  | { net: 'cancel'; nid: number }\n  | { net: 'ws-open'; nid: number; url: string; protocols: string[]; headers: HeaderList }\n  | { net: 'ws-send'; nid: number; data: RealmWebSocketMessage }\n  | { net: 'ws-close'; nid: number; code?: number; reason?: string }\n  | { net: 'ws-consumed'; nid: number; n: number };\n\nexport type TransportReply =\n  | {\n      net: 'head';\n      nid: number;\n      status: number;\n      statusText: string;\n      headers: HeaderList;\n      url?: string;\n      redirected?: boolean;\n      redirects?: readonly RealmRedirectHop[];\n    }\n  | { net: 'chunk'; nid: number; bytes: Uint8Array }\n  | { net: 'end'; nid: number }\n  | { net: 'error'; nid: number; message: string; status?: number; code?: string }\n  | { net: 'ws-opened'; nid: number; protocol: string }\n  | { net: 'ws-message'; nid: number; data: RealmWebSocketMessage }\n  | { net: 'ws-acked'; nid: number; n: number }\n  | { net: 'ws-closed'; nid: number; code: number; reason: string };\n\nexport interface TransportPort {\n  postMessage(message: TransportCall): void;\n}\n\nexport class TransportError extends Error {\n  readonly status: number | undefined;\n  readonly code: string | undefined;\n\n  constructor(message: string, status?: number, code?: string) {\n    super(message);\n    this.status = status;\n    this.code = code;\n  }\n}\n\ninterface Waiter {\n  resolve(reply: TransportReply): void;\n  reject(error: Error): void;\n}\n\nexport class RemoteTransport implements RealmTransport {\n  readonly traits: RealmTransportTraits;\n\n  private readonly port: TransportPort;\n\n  private readonly waiting = new Map<number, Waiter>();\n\n  private nextId = 0;\n\n  private readonly sockets = new Map<number, { queue: MessageQueue; acked(n: number): void }>();\n\n  private failure: Error | undefined;\n\n  constructor(port: TransportPort, traits: RealmTransportTraits) {\n    this.port = port;\n    this.traits = traits;\n  }\n\n  receive(reply: TransportReply): void {\n    const socket = this.sockets.get(reply.nid);\n    if (socket && this.toSocket(reply, socket)) return;\n    const waiter = this.waiting.get(reply.nid);\n    if (!waiter) return;\n    this.waiting.delete(reply.nid);\n    if (reply.net === 'error') {\n      waiter.reject(new TransportError(reply.message, reply.status, reply.code));\n    } else waiter.resolve(reply);\n  }\n\n  private toSocket(\n    reply: TransportReply,\n    socket: { queue: MessageQueue; acked(n: number): void }\n  ): boolean {\n    if (reply.net === 'ws-message') socket.queue.push(reply.data);\n    else if (reply.net === 'ws-acked') socket.acked(reply.n);\n    else if (reply.net === 'ws-closed') {\n      this.sockets.delete(reply.nid);\n      socket.queue.end({ code: reply.code, reason: reply.reason });\n    } else return false;\n    return true;\n  }\n\n  fail(error: Error): void {\n    this.failure = error;\n    for (const waiter of this.waiting.values()) waiter.reject(error);\n    this.waiting.clear();\n    for (const socket of this.sockets.values())\n      socket.queue.end({ code: 1011, reason: error.message });\n    this.sockets.clear();\n  }\n\n  private ask(call: TransportCall): Promise<TransportReply> {\n    if (this.failure) return Promise.reject(this.failure);\n    return new Promise((resolve, reject) => {\n      this.waiting.set(call.nid, { resolve, reject });\n      this.port.postMessage(call);\n    });\n  }\n\n  private cancel(nid: number): void {\n    const waiter = this.waiting.get(nid);\n    this.waiting.delete(nid);\n    waiter?.reject(new TransportError('the request was cancelled'));\n    this.port.postMessage({ net: 'cancel', nid });\n  }\n\n  async fetch(request: RealmTransportRequest): Promise<RealmTransportResponse> {\n    const nid = ++this.nextId;\n    const { signal } = request;\n    signal.throwIfAborted();\n    let finished = false;\n    const abort = () => {\n      finished = true;\n      this.cancel(nid);\n    };\n    signal.addEventListener('abort', abort, { once: true });\n    const finish = () => {\n      if (finished) return;\n      finished = true;\n      signal.removeEventListener('abort', abort);\n    };\n    let head: TransportReply;\n    try {\n      head = await this.ask({\n        net: 'fetch',\n        nid,\n        url: request.url,\n        method: request.method,\n        headers: request.headers,\n        ...(request.body ? { body: request.body } : {}),\n      });\n    } catch (e) {\n      finish();\n      throw e;\n    }\n    const { status, statusText, headers, url, redirected, redirects } = head as Extract<\n      TransportReply,\n      { net: 'head' }\n    >;\n    const read = async (): Promise<Uint8Array | undefined> => {\n      if (finished) return undefined;\n      const reply = await this.ask({ net: 'read', nid }).catch((e: unknown) => {\n        finish();\n        throw e;\n      });\n      if (reply.net === 'chunk') return reply.bytes;\n      finish();\n      return undefined;\n    };\n    const cancel = async () => {\n      if (finished) return;\n      finish();\n      this.cancel(nid);\n    };\n    return {\n      ...(redirected ? { url, redirected } : {}),\n      ...(redirects ? { redirects } : {}),\n      status,\n      statusText,\n      headers,\n      cancel,\n      body: {\n        [Symbol.asyncIterator]: () => ({\n          next: async () => {\n            const bytes = await read();\n            return bytes ? { value: bytes, done: false } : { value: undefined, done: true };\n          },\n          return: async () => {\n            await cancel();\n            return { value: undefined, done: true };\n          },\n        }),\n      },\n    };\n  }\n\n  async websocket(request: RealmWebSocketRequest): Promise<RealmWebSocket> {\n    const nid = ++this.nextId;\n    const { signal } = request;\n    signal.throwIfAborted();\n    const abort = () => this.cancel(nid);\n    signal.addEventListener('abort', abort, { once: true });\n    let opened: TransportReply;\n    try {\n      opened = await this.ask({\n        net: 'ws-open',\n        nid,\n        url: request.url,\n        protocols: request.protocols,\n        headers: request.headers,\n      });\n    } finally {\n      signal.removeEventListener('abort', abort);\n    }\n    const close = (code?: number, reason?: string) =>\n      this.port.postMessage({ net: 'ws-close', nid, code, reason });\n    const queue = new MessageQueue(\n      () => close(1000, 'a message is too big'),\n      Number.POSITIVE_INFINITY,\n      (n) => this.port.postMessage({ net: 'ws-consumed', nid, n })\n    );\n    let unacked = 0;\n    this.sockets.set(nid, { queue, acked: (n) => void (unacked -= n) });\n    return {\n      protocol: (opened as Extract<TransportReply, { net: 'ws-opened' }>).protocol,\n      get buffered() {\n        return unacked;\n      },\n      send: (data) => {\n        unacked += payloadSize(data);\n        this.port.postMessage({ net: 'ws-send', nid, data });\n      },\n      messages: queue,\n      close,\n      closed: queue.closed,\n    };\n  }\n}\n", "export function fresh(bytes: Uint8Array, start = 0, end = bytes.length): Uint8Array {\n  return new Uint8Array(bytes.subarray(start, end));\n}\n", "import { fresh } from '../bytes.ts';\n\nexport interface DialledSocket {\n  readable: ReadableStream<Uint8Array>;\n  writable: WritableStream<Uint8Array>;\n  close(): void;\n}\n\nexport interface DialOptions {\n  port: number;\n  host?: string;\n}\n\ninterface StreamPort {\n  postMessage(message: unknown, transfer?: Transferable[]): void;\n  addEventListener(type: 'message', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n  close(): void;\n}\n\ntype DialMessage = Uint8Array | { end: true } | { ack: true } | { error: string };\n\nexport interface DialHandle extends DialledSocket {\n  fail(error: Error): void;\n}\n\nexport function errorWithCode(message: string): Error & { code?: string } {\n  const code = /^E[A-Z]+/.exec(message)?.[0];\n  return Object.assign(new Error(message), code ? { code } : {});\n}\n\nexport function dialStream(port: StreamPort, onClose?: () => void): DialHandle {\n  let closed = false;\n  let reader: ReadableStreamDefaultController<Uint8Array> | undefined;\n  const acks: Array<{ resolve: () => void; reject: (error: Error) => void }> = [];\n  const readable = new ReadableStream<Uint8Array>({\n    start(controller) {\n      reader = controller;\n    },\n    pull() {\n      if (!closed) port.postMessage({ more: true });\n    },\n    cancel() {\n      reader = undefined;\n      close();\n    },\n  });\n  const finish = (fail?: Error) => {\n    const controller = reader;\n    reader = undefined;\n    for (const ack of acks.splice(0)) {\n      if (fail) ack.reject(fail);\n      else ack.resolve();\n    }\n    if (!controller) return;\n    if (fail) controller.error(fail);\n    else controller.close();\n  };\n  function shut(): void {\n    if (closed) return;\n    closed = true;\n    port.close();\n    onClose?.();\n  }\n  function close(): void {\n    if (!closed) port.postMessage({ close: true });\n    shut();\n    finish();\n  }\n  port.addEventListener('message', ({ data }: MessageEvent<DialMessage>) => {\n    if (data instanceof Uint8Array) reader?.enqueue(data);\n    else if ('ack' in data) acks.shift()?.resolve();\n    else if ('end' in data) finish();\n    else finish(errorWithCode(data.error));\n  });\n  port.start?.();\n  const writable = new WritableStream<Uint8Array>({\n    write(chunk) {\n      if (closed) throw errorWithCode('EPIPE: the connection is closed');\n      const copy = fresh(chunk);\n      const acked = new Promise<void>((resolve, reject) => acks.push({ resolve, reject }));\n      port.postMessage(copy, [copy.buffer]);\n      return acked;\n    },\n    close() {\n      if (!closed) port.postMessage({ end: true });\n    },\n    abort() {\n      close();\n    },\n  });\n  const fail = (error: Error) => {\n    shut();\n    finish(error);\n  };\n  return { readable, writable, close, fail };\n}\n", "import { type DialledSocket, type DialOptions, errorWithCode } from './dial-stream.ts';\n\nexport interface LoopbackFetchOptions extends DialOptions {\n  signal?: AbortSignal;\n}\n\nconst OWN_HEADERS = new Set(['host', 'connection', 'content-length', 'transfer-encoding']);\nconst encoder = new TextEncoder();\nconst latin1 = new TextDecoder('latin1');\n\nclass ByteSource {\n  private buffered = new Uint8Array(0);\n  private readonly reader: ReadableStreamDefaultReader<Uint8Array>;\n\n  constructor(reader: ReadableStreamDefaultReader<Uint8Array>) {\n    this.reader = reader;\n  }\n\n  private async more(): Promise<boolean> {\n    const { done, value } = await this.reader.read();\n    if (done) return false;\n    const joined = new Uint8Array(this.buffered.length + value.length);\n    joined.set(this.buffered);\n    joined.set(value, this.buffered.length);\n    this.buffered = joined;\n    return true;\n  }\n\n  async until(marker: string): Promise<Uint8Array | undefined> {\n    const needle = encoder.encode(marker);\n    for (;;) {\n      const at = indexOf(this.buffered, needle);\n      if (at >= 0) return this.take(at + needle.length);\n      if (!(await this.more())) return undefined;\n    }\n  }\n\n  async some(max: number): Promise<Uint8Array | undefined> {\n    if (this.buffered.length === 0 && !(await this.more())) return undefined;\n    return this.take(Math.min(max, this.buffered.length));\n  }\n\n  async exactly(count: number): Promise<Uint8Array | undefined> {\n    while (this.buffered.length < count) if (!(await this.more())) return undefined;\n    return this.take(count);\n  }\n\n  private take(count: number): Uint8Array {\n    const out = this.buffered.slice(0, count);\n    this.buffered = this.buffered.slice(count);\n    return out;\n  }\n}\n\nfunction indexOf(haystack: Uint8Array, needle: Uint8Array): number {\n  outer: for (let i = 0; i + needle.length <= haystack.length; i++) {\n    for (let j = 0; j < needle.length; j++) if (haystack[i + j] !== needle[j]) continue outer;\n    return i;\n  }\n  return -1;\n}\n\ninterface ResponseHead {\n  status: number;\n  statusText: string;\n  headers: Array<[string, string]>;\n}\n\nfunction parseHead(bytes: Uint8Array): ResponseHead {\n  const [statusLine = '', ...lines] = latin1.decode(bytes).split('\\r\\n');\n  const match = /^HTTP\\/1\\.[01] (\\d{3})(?: (.*))?$/.exec(statusLine);\n  if (!match) throw errorWithCode(`EPROTO: not an HTTP/1.x response: ${statusLine.slice(0, 80)}`);\n  const headers: Array<[string, string]> = [];\n  for (const line of lines) {\n    const colon = line.indexOf(':');\n    if (colon > 0) headers.push([line.slice(0, colon).trim(), line.slice(colon + 1).trim()]);\n  }\n  return { status: Number(match[1]), statusText: match[2] ?? '', headers };\n}\n\nfunction header(head: ResponseHead, name: string): string | undefined {\n  return head.headers.find(([key]) => key.toLowerCase() === name)?.[1];\n}\n\nasync function* chunked(source: ByteSource): AsyncGenerator<Uint8Array> {\n  for (;;) {\n    const line = await source.until('\\r\\n');\n    if (!line) throw errorWithCode('EPROTO: the chunked body ended early');\n    const size = Number.parseInt(latin1.decode(line).trim().split(';')[0] ?? '', 16);\n    if (!Number.isFinite(size)) throw errorWithCode('EPROTO: a malformed chunk size');\n    if (size === 0) return;\n    const data = await source.exactly(size);\n    if (!data || !(await source.exactly(2))) throw errorWithCode('EPROTO: a chunk ended early');\n    yield data;\n  }\n}\n\nasync function* counted(source: ByteSource, length: number): AsyncGenerator<Uint8Array> {\n  let left = length;\n  while (left > 0) {\n    const data = await source.some(left);\n    if (!data) throw errorWithCode('EPROTO: the body ended early');\n    left -= data.length;\n    yield data;\n  }\n}\n\nasync function* untilClose(source: ByteSource): AsyncGenerator<Uint8Array> {\n  for (let data = await source.some(65536); data; data = await source.some(65536)) yield data;\n}\n\nfunction bodyOf(source: ByteSource, head: ResponseHead, method: string) {\n  if (method === 'HEAD' || head.status === 204 || head.status === 304) return undefined;\n  if (header(head, 'transfer-encoding')?.toLowerCase().includes('chunked')) return chunked(source);\n  const length = header(head, 'content-length');\n  if (length === undefined) return untilClose(source);\n  const size = Number(length);\n  if (!/^\\d+$/.test(length.trim()) || !Number.isSafeInteger(size)) {\n    throw errorWithCode(`EPROTO: a malformed Content-Length: ${length}`);\n  }\n  return counted(source, size);\n}\n\nfunction stream(chunks: AsyncGenerator<Uint8Array>, socket: DialledSocket, signal?: AbortSignal) {\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      signal?.addEventListener('abort', () => controller.error(signal.reason), { once: true });\n    },\n    async pull(controller) {\n      try {\n        const next = await chunks.next();\n        if (next.done) {\n          controller.close();\n          socket.close();\n        } else controller.enqueue(next.value);\n      } catch (err) {\n        controller.error(err);\n        socket.close();\n      }\n    },\n    cancel() {\n      socket.close();\n    },\n  });\n}\n\nasync function requestBytes(request: Request): Promise<Uint8Array> {\n  const url = new URL(request.url);\n  const body = request.body ? new Uint8Array(await request.arrayBuffer()) : undefined;\n  const lines = [`${request.method} ${url.pathname}${url.search} HTTP/1.1`, `Host: ${url.host}`];\n  request.headers.forEach((value, name) => {\n    if (!OWN_HEADERS.has(name)) lines.push(`${name}: ${value}`);\n  });\n  if (body) lines.push(`Content-Length: ${body.length}`);\n  lines.push('Connection: close', '', '');\n  const head = encoder.encode(lines.join('\\r\\n'));\n  const out = new Uint8Array(head.length + (body?.length ?? 0));\n  out.set(head);\n  if (body) out.set(body, head.length);\n  return out;\n}\n\nexport async function loopbackFetch(\n  dial: (options: DialOptions) => Promise<DialledSocket>,\n  input: RequestInfo | URL,\n  options: LoopbackFetchOptions\n): Promise<Response> {\n  options.signal?.throwIfAborted();\n  const request = input instanceof Request ? input : new Request(input);\n  const bytes = await requestBytes(request);\n  const socket = await dial({\n    port: options.port,\n    ...(options.host ? { host: options.host } : {}),\n  });\n  options.signal?.addEventListener('abort', () => socket.close(), { once: true });\n  try {\n    const writer = socket.writable.getWriter();\n    await writer.write(bytes);\n    writer.releaseLock();\n    const source = new ByteSource(socket.readable.getReader());\n    let head: ResponseHead;\n    do {\n      const raw = await source.until('\\r\\n\\r\\n');\n      if (!raw) throw errorWithCode('ECONNRESET: the connection closed before a response');\n      head = parseHead(raw);\n    } while (head.status >= 100 && head.status < 200);\n    const chunks = bodyOf(source, head, request.method);\n    if (!chunks) socket.close();\n    return new Response(chunks ? stream(chunks, socket, options.signal) : null, {\n      status: head.status,\n      statusText: head.statusText,\n      headers: head.headers,\n    });\n  } catch (err) {\n    socket.close();\n    throw err;\n  }\n}\n", "import type { UsersMode } from '../fs/types.ts';\nimport type { WatchChange } from '../fs/watch.ts';\nimport type { TransportCall, TransportReply } from '../kernel/net/remote-transport.ts';\nimport type { RealmTransportTraits } from '../kernel/net/transport.ts';\nimport type { MountSpec } from '../mount/mount-fs.ts';\n\nexport const PROTOCOL: readonly [number, number] = [1, 9];\n\nexport interface ClientHello {\n  protocol: readonly [number, number];\n  lock?: string;\n}\n\nexport interface KernelHello {\n  protocol: readonly [number, number];\n  lock?: string;\n  traits?: RealmTransportTraits;\n  users?: UsersMode;\n  error?: string;\n}\n\nexport interface SpawnRequestOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  stdin?: Uint8Array;\n  pgid?: number;\n}\n\nexport interface TerminalRequestOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  cols?: number;\n  rows?: number;\n}\n\nexport type TerminalAction =\n  | { action: 'write'; bytes: Uint8Array }\n  | { action: 'resize'; cols: number; rows: number }\n  | { action: 'signal'; signal: string }\n  | { action: 'close' };\n\nexport const FS_METHODS = [\n  'readFile',\n  'writeFile',\n  'stat',\n  'lstat',\n  'readdir',\n  'mkdir',\n  'rm',\n  'rename',\n  'realpath',\n  'symlink',\n  'readlink',\n  'exists',\n] as const;\n\nexport type FsMethod = (typeof FS_METHODS)[number];\n\nexport type ClientCall =\n  | { op: 'spawn'; argv: string[]; options: SpawnRequestOptions }\n  | { op: 'open-terminal'; argv: string[]; options: TerminalRequestOptions }\n  | ({ op: 'terminal'; terminal: number } & TerminalAction)\n  | { op: 'kill'; pid: number; signal: string }\n  | { op: 'ps' }\n  | { op: 'fs'; method: FsMethod; args: unknown[] }\n  | { op: 'watch'; paths: string[]; recursive: boolean }\n  | { op: 'unwatch'; watch: number }\n  | { op: 'mount'; spec: MountSpec }\n  | { op: 'umount'; target: string }\n  | { op: 'mounts' }\n  | { op: 'dial'; port: number; host?: string }\n  | { op: 'serve-cdp'; runtime?: string }\n  | { op: 'unserve-cdp'; registration: number }\n  | { op: 'detach'; kill?: boolean };\n\nexport type ClientRequest = ClientCall & { id: number };\n\nexport interface ClientReply {\n  id: number;\n  result?: unknown;\n  error?: string;\n  code?: string;\n  fd?: 1 | 2;\n  bytes?: Uint8Array;\n  started?: number;\n}\n\nexport type ClientMessage = { hello: ClientHello } | ClientRequest | TransportCall;\n\nexport interface WatchEvent {\n  watch: number;\n  change: WatchChange;\n}\n\nexport type KernelMessage = { hello: KernelHello } | ClientReply | WatchEvent | TransportReply;\n\nexport interface ProcessEntry {\n  pid: number;\n  ppid: number;\n  pgid: number;\n  sid: number;\n  argv: string[];\n  tty: string | null;\n  started: number;\n  state: 'S' | 'Z';\n  memory: number;\n  rss?: number;\n  utime?: number;\n  stime?: number;\n  uid?: number;\n  gid?: number;\n}\n\nexport interface MessagePortLike {\n  postMessage(message: unknown, transfer?: Transferable[]): void;\n  addEventListener(type: 'message' | 'close', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n  close?(): void;\n}\n\nexport interface LockManagerLike {\n  request(name: string, callback: () => Promise<unknown> | unknown): Promise<unknown>;\n}\n\nexport function locksOf(scope: object = globalThis): LockManagerLike | undefined {\n  const locks = (scope as { navigator?: { locks?: LockManagerLike } }).navigator?.locks;\n  return typeof locks?.request === 'function' ? locks : undefined;\n}\n\nexport function versionError(theirs: unknown): string | undefined {\n  const major = Array.isArray(theirs) ? theirs[0] : undefined;\n  if (major === PROTOCOL[0]) return undefined;\n  const named = typeof major === 'number' ? `${major}.x` : 'without a version';\n  return `slicc-kernel client protocol ${named} is not supported: this side speaks ${PROTOCOL.join('.')}`;\n}\n", "import { type CdpOpen, serveCdpPort } from '../cdp/port.ts';\nimport type { CdpHook } from '../cdp/types.ts';\nimport type { FsStat, UsersMode } from '../fs/types.ts';\nimport type { WatchChange } from '../fs/watch.ts';\nimport { RemoteTransport, type TransportReply } from '../kernel/net/remote-transport.ts';\nimport type {\n  RealmTransport,\n  RealmTransportRequest,\n  RealmTransportResponse,\n} from '../kernel/net/transport.ts';\nimport type { MountEntry, MountSpec } from '../mount/mount-fs.ts';\nimport { type DialledSocket, type DialOptions, dialStream } from './dial-stream.ts';\nimport { type LoopbackFetchOptions, loopbackFetch } from './loopback-fetch.ts';\nimport {\n  type ClientCall,\n  type ClientReply,\n  type FsMethod,\n  type KernelHello,\n  type LockManagerLike,\n  locksOf,\n  type MessagePortLike,\n  PROTOCOL,\n  type ProcessEntry,\n  type TerminalAction,\n  versionError,\n} from './protocol.ts';\n\nexport type { WatchChange } from '../fs/watch.ts';\nexport type { ProcessEntry } from './protocol.ts';\n\nexport class KernelGoneError extends Error {\n  constructor(message = 'the slicc-kernel this client was attached to is gone') {\n    super(message);\n    this.name = 'KernelGoneError';\n  }\n}\n\nexport class KernelCallError extends Error {\n  readonly code: string | undefined;\n\n  constructor(message: string, code?: string) {\n    super(message);\n    this.name = 'KernelCallError';\n    this.code = code;\n  }\n}\n\nexport interface AttachOptions {\n  timeoutMs?: number;\n  locks?: LockManagerLike | null;\n}\n\nexport interface SpawnOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  stdin?: string | Uint8Array;\n  group?: 'new';\n  pgid?: number;\n  onStdout?: (bytes: Uint8Array) => void;\n  onStderr?: (bytes: Uint8Array) => void;\n}\n\nexport interface SpawnedProcess {\n  readonly pid: number;\n  readonly pgid: number;\n  readonly exited: Promise<number>;\n  signal(name?: string): Promise<void>;\n}\n\nexport interface ClientRunOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  stdin?: string | Uint8Array;\n  onStdout?: (text: string) => void;\n  onStderr?: (text: string) => void;\n}\n\nexport interface ClientRunResult {\n  pid: number;\n  status: number;\n  stdout: string;\n  stderr: string;\n}\n\nexport interface ClientTerminalOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  cols?: number;\n  rows?: number;\n  onData?: (bytes: Uint8Array) => void;\n}\n\nexport interface ClientTerminal {\n  readonly pid: number;\n  readonly exited: Promise<number>;\n  onData: ((bytes: Uint8Array) => void) | null;\n  write(data: string | Uint8Array): void;\n  resize(cols: number, rows: number): void;\n  signal(name: string): void;\n  close(): void;\n}\n\nexport interface ClientFs {\n  readFile(path: string): Promise<Uint8Array>;\n  readText(path: string): Promise<string>;\n  writeFile(path: string, data: string | Uint8Array): Promise<void>;\n  stat(path: string): Promise<FsStat>;\n  lstat(path: string): Promise<FsStat>;\n  readdir(path: string): Promise<string[]>;\n  mkdir(path: string): Promise<void>;\n  rm(path: string, options?: { force?: boolean }): Promise<void>;\n  rename(from: string, to: string): Promise<void>;\n  realpath(path: string): Promise<string>;\n  symlink(target: string, path: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  exists(path: string): Promise<boolean>;\n  watch(\n    paths: string[],\n    options: { recursive?: boolean },\n    onChange: (change: WatchChange) => void\n  ): Promise<{ close(): void }>;\n}\n\nexport type ClientFetchRequest = Omit<RealmTransportRequest, 'signal'> & { signal?: AbortSignal };\n\nexport interface KernelClient {\n  readonly protocol: readonly [number, number];\n  readonly transport: RealmTransport;\n  readonly users: UsersMode;\n  readonly closed: Promise<Error>;\n  spawn(argv: string[], options?: SpawnOptions): Promise<SpawnedProcess>;\n  run(argv: string[], options?: ClientRunOptions): Promise<ClientRunResult>;\n  openTerminal(argv: string[], options?: ClientTerminalOptions): Promise<ClientTerminal>;\n  ps(): Promise<ProcessEntry[]>;\n  mount(spec: MountSpec): Promise<MountEntry>;\n  umount(target: string): Promise<void>;\n  mounts(): Promise<MountEntry[]>;\n  kill(pid: number, signal?: string): Promise<void>;\n  fetch(request: ClientFetchRequest): Promise<RealmTransportResponse>;\n  dial(options: DialOptions): Promise<DialledSocket>;\n  loopbackFetch(input: RequestInfo | URL, options: LoopbackFetchOptions): Promise<Response>;\n  readonly fs: ClientFs;\n  serveCdp(hook: CdpHook, options?: { runtime?: string }): Promise<{ close(): void }>;\n  close(options?: { kill?: boolean }): Promise<void>;\n}\n\ninterface Pending {\n  resolve: (value: unknown) => void;\n  reject: (error: Error) => void;\n  output?: (fd: 1 | 2, bytes: Uint8Array) => void;\n  started?: (pid: number) => void;\n}\n\ntype Handlers = Omit<Pending, 'resolve' | 'reject'>;\n\nconst encoder = new TextEncoder();\nconst bytesOf = (data: string | Uint8Array) =>\n  typeof data === 'string' ? encoder.encode(data) : data;\n\nconst UNAVAILABLE = {\n  manualRedirects: false,\n  encodedBodies: false,\n  maxRequestBody: 0,\n  unavailable: true,\n} as const;\n\nasync function holdLock(\n  locks: LockManagerLike | undefined\n): Promise<{ name?: string; release(): void }> {\n  if (!locks) return { release() {} };\n  const name = `slicc-kernel-client:${crypto.randomUUID()}`;\n  const granted = Promise.withResolvers<void>();\n  const held = Promise.withResolvers<void>();\n  void locks.request(name, () => {\n    granted.resolve();\n    return held.promise;\n  });\n  await granted.promise;\n  return { name, release: () => held.resolve() };\n}\n\nfunction concat(chunks: Uint8Array[]): Uint8Array {\n  const out = new Uint8Array(chunks.reduce((n, c) => n + c.length, 0));\n  let at = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, at);\n    at += chunk.length;\n  }\n  return out;\n}\n\nclass Channel {\n  readonly greeted = Promise.withResolvers<KernelHello>();\n  readonly ended = Promise.withResolvers<Error>();\n  remote: RemoteTransport | undefined;\n  failure: Error | undefined;\n  private readonly pending = new Map<number, Pending>();\n  readonly watching = new Map<number, (change: WatchChange) => void>();\n  readonly cdpHooks = new Map<number, CdpHook>();\n  private readonly cdpOpen = new Set<() => void>();\n  protocol: readonly [number, number] = PROTOCOL;\n  private nextId = 0;\n  private readonly port: MessagePortLike;\n  private readonly release: () => void;\n\n  constructor(port: MessagePortLike, release: () => void) {\n    this.port = port;\n    this.release = release;\n    this.greeted.promise.catch(() => undefined);\n    port.addEventListener('message', (event) => this.receive(event.data));\n    port.addEventListener('close', () => this.end(new KernelGoneError()));\n    port.start?.();\n  }\n\n  post(message: object): void {\n    if (!this.failure) this.port.postMessage(message);\n  }\n\n  end(error: Error): void {\n    if (this.failure) return;\n    this.failure = error;\n    this.greeted.reject(error);\n    this.remote?.fail(error);\n    for (const close of [...this.cdpOpen]) close();\n    this.cdpOpen.clear();\n    for (const call of this.pending.values()) call.reject(error);\n    this.pending.clear();\n    this.release();\n    this.port.close?.();\n    this.ended.resolve(error);\n  }\n\n  request(call: ClientCall, handlers: Handlers = {}): { id: number; done: Promise<unknown> } {\n    const id = ++this.nextId;\n    const { failure } = this;\n    if (failure) return { id, done: Promise.reject(failure) };\n    const done = new Promise((resolve, reject) => {\n      this.pending.set(id, { resolve, reject, ...handlers });\n      this.port.postMessage({ ...call, id });\n    });\n    return { id, done };\n  }\n\n  call(call: ClientCall): Promise<unknown> {\n    return this.request(call).done;\n  }\n\n  private receive(data: {\n    hello?: KernelHello;\n    net?: unknown;\n    bye?: string;\n    watch?: number;\n    change?: WatchChange;\n    cdpOpen?: CdpOpen['cdpOpen'];\n    port?: CdpOpen['port'];\n  }): void {\n    if (data.cdpOpen && data.port) {\n      this.openCdp(data as CdpOpen);\n      return;\n    }\n    if (data.watch !== undefined) {\n      this.watching.get(data.watch)?.(data.change as WatchChange);\n      return;\n    }\n    if (data.bye !== undefined) {\n      this.end(new KernelGoneError(data.bye));\n      return;\n    }\n    if (data.hello) {\n      this.greeted.resolve(data.hello);\n      return;\n    }\n    if (data.net !== undefined) {\n      this.remote?.receive(data as TransportReply);\n      return;\n    }\n    const reply = data as ClientReply;\n    const call = this.pending.get(reply.id);\n    if (!call) return;\n    if (reply.fd !== undefined) {\n      call.output?.(reply.fd, reply.bytes as Uint8Array);\n      return;\n    }\n    if (reply.started !== undefined) {\n      call.started?.(reply.started);\n      return;\n    }\n    this.pending.delete(reply.id);\n    if (reply.error !== undefined) call.reject(new KernelCallError(reply.error, reply.code));\n    else call.resolve(reply.result);\n  }\n\n  private openCdp({ cdpOpen: { registration, ...request }, port }: CdpOpen): void {\n    const hook = registration === undefined ? undefined : this.cdpHooks.get(registration);\n    if (!hook || this.failure) {\n      port.postMessage({ error: 'this client no longer serves CDP' });\n      port.close();\n      return;\n    }\n    const close = serveCdpPort(port, hook, request, () => this.cdpOpen.delete(close));\n    this.cdpOpen.add(close);\n  }\n}\n\nasync function serveCdpOn(\n  channel: Channel,\n  hook: CdpHook,\n  options: { runtime?: string }\n): Promise<{ close(): void }> {\n  await since(channel, 5, 'CDP serving', async () => {});\n  const req = {\n    op: 'serve-cdp' as const,\n    ...(options.runtime ? { runtime: options.runtime } : {}),\n  };\n  const { id, done } = channel.request(req);\n  channel.cdpHooks.set(id, hook);\n  try {\n    await done;\n  } catch (error) {\n    channel.cdpHooks.delete(id);\n    throw error;\n  }\n  return {\n    close: () => {\n      if (!channel.cdpHooks.delete(id)) return;\n      void channel.call({ op: 'unserve-cdp', registration: id }).catch(() => undefined);\n    },\n  };\n}\n\nasync function dialOn(channel: Channel, { port, host }: DialOptions): Promise<DialledSocket> {\n  const req = { op: 'dial' as const, port, ...(host ? { host } : {}) };\n  return dialStream((await since(channel, 4, 'dial', () => channel.call(req))) as MessagePort);\n}\n\nasync function spawnOn(\n  channel: Channel,\n  argv: string[],\n  opts: SpawnOptions\n): Promise<SpawnedProcess> {\n  const { onStdout, onStderr, stdin, group: _, ...rest } = opts;\n  if (opts.pgid !== undefined)\n    await since(channel, 3, 'spawn into a process group', async () => {});\n  if (opts.user !== undefined) await since(channel, 8, 'spawn as a user', async () => {});\n  const started = Promise.withResolvers<number>();\n  const options = { ...rest, ...(stdin !== undefined ? { stdin: bytesOf(stdin) } : {}) };\n  const { done } = channel.request(\n    { op: 'spawn', argv, options },\n    {\n      output: (fd, bytes) => (fd === 1 ? onStdout : onStderr)?.(bytes),\n      started: started.resolve,\n    }\n  );\n  done.catch(started.reject);\n  const pid = await started.promise;\n  const pgid = opts.pgid ?? pid;\n  return {\n    pid,\n    pgid,\n    exited: done as Promise<number>,\n    signal: async (name = 'SIGTERM') =>\n      void (await channel.call({ op: 'kill', pid: -pgid, signal: name })),\n  };\n}\n\nasync function runOn(\n  channel: Channel,\n  argv: string[],\n  opts: ClientRunOptions\n): Promise<ClientRunResult> {\n  const { onStdout, onStderr, ...rest } = opts;\n  const chunks: Record<1 | 2, Uint8Array[]> = { 1: [], 2: [] };\n  const live = { 1: new TextDecoder(), 2: new TextDecoder() };\n  const tee = (fd: 1 | 2, on?: (text: string) => void) => (bytes: Uint8Array) => {\n    chunks[fd].push(bytes);\n    on?.(live[fd].decode(bytes, { stream: true }));\n  };\n  const child = await spawnOn(channel, argv, {\n    ...rest,\n    onStdout: tee(1, onStdout),\n    onStderr: tee(2, onStderr),\n  });\n  const status = await child.exited;\n  const text = (fd: 1 | 2) => new TextDecoder().decode(concat(chunks[fd]));\n  return { pid: child.pid, status, stdout: text(1), stderr: text(2) };\n}\n\nasync function terminalOn(\n  channel: Channel,\n  argv: string[],\n  opts: ClientTerminalOptions\n): Promise<ClientTerminal> {\n  const { onData, ...options } = opts;\n  if (opts.user !== undefined) await since(channel, 8, 'a terminal as a user', async () => {});\n  let listener = onData ?? null;\n  const backlog: Uint8Array[] = [];\n  const started = Promise.withResolvers<number>();\n  const { id, done } = channel.request(\n    { op: 'open-terminal', argv, options },\n    {\n      output: (_fd, bytes) => (listener ? listener(bytes) : backlog.push(bytes)),\n      started: started.resolve,\n    }\n  );\n  done.catch(started.reject);\n  const pid = await started.promise;\n  const send = (action: TerminalAction) =>\n    void channel.call({ op: 'terminal', terminal: id, ...action }).catch(() => undefined);\n  return {\n    pid,\n    exited: done as Promise<number>,\n    get onData() {\n      return listener;\n    },\n    set onData(next) {\n      listener = next;\n      if (next) for (const bytes of backlog.splice(0)) next(bytes);\n    },\n    write: (data) => send({ action: 'write', bytes: bytesOf(data) }),\n    resize: (cols, rows) => send({ action: 'resize', cols, rows }),\n    signal: (name) => send({ action: 'signal', signal: name }),\n    close: () => send({ action: 'close' }),\n  };\n}\n\nfunction fsOn(channel: Channel): ClientFs {\n  const fs = (method: FsMethod, ...args: unknown[]) => channel.call({ op: 'fs', method, args });\n  const done = async (method: FsMethod, ...args: unknown[]) => void (await fs(method, ...args));\n  return {\n    readFile: (path) => fs('readFile', path) as Promise<Uint8Array>,\n    readText: async (path) => new TextDecoder().decode((await fs('readFile', path)) as Uint8Array),\n    writeFile: (path, data) => done('writeFile', path, data),\n    stat: (path) => fs('stat', path) as Promise<FsStat>,\n    lstat: (path) => fs('lstat', path) as Promise<FsStat>,\n    readdir: (path) => fs('readdir', path) as Promise<string[]>,\n    mkdir: (path) => done('mkdir', path),\n    rm: (path, o = {}) => done('rm', path, o.force === true),\n    rename: (from, to) => done('rename', from, to),\n    realpath: (path) => fs('realpath', path) as Promise<string>,\n    symlink: (target, path) => done('symlink', target, path),\n    readlink: (path) => fs('readlink', path) as Promise<string>,\n    exists: (path) => fs('exists', path) as Promise<boolean>,\n    async watch(paths, options, onChange) {\n      if (channel.protocol[1] < 1) {\n        throw new KernelCallError(\n          `this kernel speaks protocol ${channel.protocol.join('.')}, which has no watch`,\n          'ENOSYS'\n        );\n      }\n      const { id, done } = channel.request({\n        op: 'watch',\n        paths,\n        recursive: options.recursive === true,\n      });\n      channel.watching.set(id, onChange);\n      try {\n        await done;\n      } catch (error) {\n        channel.watching.delete(id);\n        throw error;\n      }\n      return {\n        close: () => {\n          if (!channel.watching.delete(id)) return;\n          void channel.call({ op: 'unwatch', watch: id }).catch(() => undefined);\n        },\n      };\n    },\n  };\n}\n\nfunction since(channel: Channel, minor: number, what: string, run: () => Promise<unknown>) {\n  if (channel.protocol[1] < minor) {\n    return Promise.reject(\n      new KernelCallError(\n        `this kernel speaks protocol ${channel.protocol.join('.')}, which has no ${what}`,\n        'ENOSYS'\n      )\n    );\n  }\n  return run();\n}\n\nasync function greet(\n  channel: Channel,\n  lock: string | undefined,\n  timeoutMs: number\n): Promise<KernelHello> {\n  channel.post({ hello: { protocol: PROTOCOL, ...(lock ? { lock } : {}) } });\n  const timer = setTimeout(\n    () =>\n      channel.end(\n        new KernelGoneError(`no slicc-kernel answered on this port within ${timeoutMs} ms`)\n      ),\n    timeoutMs\n  );\n  let hello: KernelHello;\n  try {\n    hello = await channel.greeted.promise;\n  } finally {\n    clearTimeout(timer);\n  }\n  const refused = hello.error ?? versionError(hello.protocol);\n  if (refused) {\n    const error = new Error(refused);\n    channel.end(error);\n    throw error;\n  }\n  return hello;\n}\n\nexport async function attachKernel(\n  port: MessagePortLike,\n  options: AttachOptions = {}\n): Promise<KernelClient> {\n  const locks = options.locks === null ? undefined : (options.locks ?? locksOf());\n  const own = await holdLock(locks);\n  const channel = new Channel(port, own.release);\n  const hello = await greet(channel, own.name, options.timeoutMs ?? 10_000);\n  channel.protocol = hello.protocol;\n  if (hello.lock && locks) void locks.request(hello.lock, () => channel.end(new KernelGoneError()));\n  const transport = new RemoteTransport(\n    { postMessage: (call) => channel.post(call) },\n    hello.traits ?? UNAVAILABLE\n  );\n  channel.remote = transport;\n  return {\n    protocol: hello.protocol,\n    transport,\n    users: hello.users ?? 'off',\n    closed: channel.ended.promise,\n    spawn: (argv, opts = {}) => spawnOn(channel, argv, opts),\n    run: (argv, opts = {}) => runOn(channel, argv, opts),\n    openTerminal: (argv, opts = {}) => terminalOn(channel, argv, opts),\n    ps: () => channel.call({ op: 'ps' }) as Promise<ProcessEntry[]>,\n    mount: (spec) =>\n      since(channel, 2, 'mount', () => channel.call({ op: 'mount', spec })) as Promise<MountEntry>,\n    umount: async (target) =>\n      void (await since(channel, 2, 'umount', () => channel.call({ op: 'umount', target }))),\n    mounts: () =>\n      since(channel, 2, 'mounts', () => channel.call({ op: 'mounts' })) as Promise<MountEntry[]>,\n    kill: async (pid, signal = 'SIGTERM') => void (await channel.call({ op: 'kill', pid, signal })),\n    fetch: (req) => {\n      const { signal, ...rest } = req;\n      return transport.fetch({ ...rest, signal: signal ?? new AbortController().signal });\n    },\n    dial: (options) => dialOn(channel, options),\n    loopbackFetch: (input, options) => loopbackFetch((o) => dialOn(channel, o), input, options),\n    fs: fsOn(channel),\n    serveCdp: (hook, options = {}) => serveCdpOn(channel, hook, options),\n    async close(o = {}) {\n      if (channel.failure) return;\n      await channel\n        .call({ op: 'detach', ...(o.kill ? { kill: true } : {}) })\n        .catch(() => undefined);\n      channel.end(new KernelGoneError('this client is closed'));\n    },\n  };\n}\n", "export const DRIVER_PROTOCOL: readonly [number, number] = [1, 2];\n\nexport interface DriverCapabilities {\n  readonly?: boolean;\n  symlinks?: boolean;\n  links?: boolean;\n  chmod?: boolean;\n  owners?: boolean;\n  linkTimes?: boolean;\n  ranges?: boolean;\n  sessions?: boolean;\n  listingStats?: boolean;\n  caseInsensitive?: boolean;\n  normalization?: 'none' | 'nfc' | 'nfd-insensitive';\n  maxIo?: number;\n  maxFile?: number;\n  attrTtl?: number;\n  entryTtl?: number;\n}\n\nexport interface DriverAttr {\n  kind: 'file' | 'directory' | 'symlink';\n  size: number;\n  mtime: number;\n  mode?: number;\n  ino?: number;\n  nlink?: number;\n  etag?: string;\n  uid?: number;\n  gid?: number;\n}\n\nexport interface DriverOwner {\n  uid?: number;\n  gid?: number;\n  mode?: number;\n}\n\nexport interface DriverEntry {\n  name: string;\n  kind: DriverAttr['kind'];\n  attr?: DriverAttr;\n}\n\nexport interface DriverStatfs {\n  bsize: number;\n  blocks: number;\n  bfree: number;\n}\n\nexport interface MountRequestInfo {\n  source: string;\n  options: Record<string, string>;\n}\n\nexport type DriverCall =\n  | { op: 'getattr'; path: string }\n  | { op: 'readdir'; path: string }\n  | ({\n      op: 'open';\n      path: string;\n      write: boolean;\n      create: boolean;\n      truncate: boolean;\n      exclusive: boolean;\n      ifMatch?: string;\n    } & DriverOwner)\n  | { op: 'read'; fh: number; offset: number; size: number }\n  | { op: 'write'; fh: number; offset: number; bytes: Uint8Array }\n  | { op: 'release'; fh: number }\n  | ({ op: 'mkdir'; path: string } & DriverOwner)\n  | { op: 'rmdir'; path: string }\n  | { op: 'unlink'; path: string }\n  | { op: 'rename'; from: string; to: string }\n  | { op: 'link'; from: string; to: string }\n  | ({ op: 'symlink'; target: string; path: string } & DriverOwner)\n  | { op: 'readlink'; path: string }\n  | {\n      op: 'setattr';\n      path: string;\n      mode?: number;\n      mtime?: number;\n      size?: number;\n      uid?: number;\n      gid?: number;\n    }\n  | { op: 'statfs' };\n\nexport type DriverRequest = DriverCall & { id: number };\n\nexport interface DriverReply {\n  id: number;\n  result?: unknown;\n  errno?: string;\n  message?: string;\n}\n\nexport interface KernelDriverHello {\n  protocol: readonly [number, number];\n  mount: MountRequestInfo;\n}\n\nexport interface DriverHello {\n  protocol: readonly [number, number];\n  capabilities?: DriverCapabilities;\n  error?: string;\n  errno?: string;\n}\n\nexport type KernelToDriver = { hello: KernelDriverHello } | DriverRequest;\n\nexport type DriverToKernel = { hello: DriverHello } | DriverReply | { invalidate: string[] | true };\n\nexport function driverVersionError(theirs: unknown): string | undefined {\n  const major = Array.isArray(theirs) ? theirs[0] : undefined;\n  if (major === DRIVER_PROTOCOL[0]) return undefined;\n  const named = typeof major === 'number' ? `${major}.x` : 'without a version';\n  return `slicc-kernel driver protocol ${named} is not supported: this side speaks ${DRIVER_PROTOCOL.join('.')}`;\n}\n", "import {\n  DRIVER_PROTOCOL,\n  type DriverAttr,\n  type DriverCapabilities,\n  type DriverEntry,\n  type DriverOwner,\n  type DriverRequest,\n  type DriverStatfs,\n  driverVersionError,\n  type KernelDriverHello,\n  type MountRequestInfo,\n} from './protocol.ts';\n\nexport type {\n  DriverAttr,\n  DriverCapabilities,\n  DriverEntry,\n  DriverOwner,\n  DriverStatfs,\n  MountRequestInfo,\n} from './protocol.ts';\n\nimport { fresh } from '../bytes.ts';\n\nexport interface OpenFlags {\n  write: boolean;\n  create: boolean;\n  truncate: boolean;\n  exclusive: boolean;\n  ifMatch?: string;\n  owner?: DriverOwner;\n}\n\nexport interface FilesystemHandlers {\n  mount?(\n    info: MountRequestInfo\n  ): Promise<DriverCapabilities | undefined> | DriverCapabilities | undefined;\n  getattr(path: string): Promise<DriverAttr>;\n  readdir(path: string): Promise<DriverEntry[]>;\n  open(path: string, flags: OpenFlags): Promise<number>;\n  read(fh: number, offset: number, size: number): Promise<Uint8Array>;\n  write(fh: number, offset: number, bytes: Uint8Array): Promise<void>;\n  release(fh: number): Promise<void>;\n  mkdir(path: string, owner?: DriverOwner): Promise<void>;\n  rmdir(path: string): Promise<void>;\n  unlink(path: string): Promise<void>;\n  rename(from: string, to: string): Promise<void>;\n  link?(from: string, to: string): Promise<void>;\n  symlink?(target: string, path: string, owner?: DriverOwner): Promise<void>;\n  readlink?(path: string): Promise<string>;\n  setattr?(path: string, attr: DriverSetAttr): Promise<void>;\n  statfs?(): Promise<DriverStatfs>;\n}\n\nexport interface DriverSetAttr {\n  mode?: number;\n  mtime?: number;\n  size?: number;\n  uid?: number;\n  gid?: number;\n}\n\nfunction ownerOf(req: DriverOwner): DriverOwner | undefined {\n  const owner = {\n    ...(req.uid !== undefined ? { uid: req.uid } : {}),\n    ...(req.gid !== undefined ? { gid: req.gid } : {}),\n    ...(req.mode !== undefined ? { mode: req.mode } : {}),\n  };\n  return Object.keys(owner).length > 0 ? owner : undefined;\n}\n\nfunction withOwner<T extends object>(base: T, owner: DriverOwner | undefined): T {\n  return owner ? { ...base, owner } : base;\n}\n\nexport interface DriverPort {\n  postMessage(message: unknown, transfer?: Transferable[]): void;\n  addEventListener(type: 'message', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n}\n\nexport interface ServedFilesystem {\n  invalidate(paths: string[] | true): void;\n}\n\nexport function fsError(code: string, message = code): Error & { code: string } {\n  return Object.assign(new Error(message), { code });\n}\n\nasync function dispatch(h: FilesystemHandlers, req: DriverRequest): Promise<unknown> {\n  switch (req.op) {\n    case 'getattr':\n      return h.getattr(req.path);\n    case 'readdir':\n      return h.readdir(req.path);\n    case 'open':\n      return h.open(\n        req.path,\n        withOwner(\n          {\n            write: req.write,\n            create: req.create,\n            truncate: req.truncate,\n            exclusive: req.exclusive,\n            ...(req.ifMatch !== undefined ? { ifMatch: req.ifMatch } : {}),\n          },\n          ownerOf(req)\n        )\n      );\n    case 'read':\n      return h.read(req.fh, req.offset, req.size);\n    case 'write':\n      return h.write(req.fh, req.offset, req.bytes);\n    case 'release':\n      return h.release(req.fh);\n    case 'mkdir':\n      return ownerOf(req) ? h.mkdir(req.path, ownerOf(req)) : h.mkdir(req.path);\n    case 'rmdir':\n      return h.rmdir(req.path);\n    case 'unlink':\n      return h.unlink(req.path);\n    case 'rename':\n      return h.rename(req.from, req.to);\n    case 'link':\n      if (!h.link) throw fsError('EPERM', 'this file system has no hard links');\n      return h.link(req.from, req.to);\n    case 'symlink':\n      if (!h.symlink) throw fsError('EPERM', 'this file system has no symlinks');\n      return ownerOf(req)\n        ? h.symlink(req.target, req.path, ownerOf(req))\n        : h.symlink(req.target, req.path);\n    case 'readlink':\n      if (!h.readlink) throw fsError('EINVAL', `${req.path} is not a symlink`);\n      return h.readlink(req.path);\n    case 'setattr':\n      return h.setattr?.(req.path, {\n        ...(req.mode !== undefined ? { mode: req.mode } : {}),\n        ...(req.mtime !== undefined ? { mtime: req.mtime } : {}),\n        ...(req.size !== undefined ? { size: req.size } : {}),\n        ...(req.uid !== undefined ? { uid: req.uid } : {}),\n        ...(req.gid !== undefined ? { gid: req.gid } : {}),\n      });\n    case 'statfs':\n      return h.statfs?.() ?? null;\n    default:\n      throw fsError('ENOSYS', `unknown driver op ${(req as { op: string }).op}`);\n  }\n}\n\nexport function serveFilesystem(\n  port: DriverPort,\n  handlers: FilesystemHandlers,\n  capabilities: DriverCapabilities = {},\n  options: { owned?: boolean } = {}\n): ServedFilesystem {\n  let open = false;\n  const reply = (message: object, transfer: Transferable[] = []) =>\n    port.postMessage(message, transfer);\n  async function hello(message: KernelDriverHello): Promise<void> {\n    const refused = driverVersionError(message.protocol);\n    if (refused) {\n      reply({ hello: { protocol: DRIVER_PROTOCOL, error: refused, errno: 'EPROTO' } });\n      return;\n    }\n    try {\n      const refined = await handlers.mount?.(message.mount);\n      open = true;\n      reply({\n        hello: { protocol: DRIVER_PROTOCOL, capabilities: { ...capabilities, ...refined } },\n      });\n    } catch (err) {\n      const code = (err as { code?: unknown })?.code;\n      reply({\n        hello: {\n          protocol: DRIVER_PROTOCOL,\n          error: err instanceof Error ? err.message : String(err),\n          errno: typeof code === 'string' ? code : 'EIO',\n        },\n      });\n    }\n  }\n  port.addEventListener('message', (event) => {\n    const data = event.data as { hello?: KernelDriverHello } & DriverRequest;\n    if (data.hello) {\n      void hello(data.hello);\n      return;\n    }\n    if (!open) return;\n    dispatch(handlers, data).then(\n      (result) => {\n        if (result instanceof Uint8Array) {\n          const whole = result.byteOffset === 0 && result.byteLength === result.buffer.byteLength;\n          const bytes = options.owned && whole ? result : fresh(result);\n          reply({ id: data.id, result: bytes }, [bytes.buffer]);\n        } else reply({ id: data.id, result: result ?? null });\n      },\n      (err: unknown) => {\n        const code = (err as { code?: unknown })?.code;\n        reply({\n          id: data.id,\n          errno: typeof code === 'string' ? code : 'EIO',\n          message: err instanceof Error ? err.message : String(err),\n        });\n      }\n    );\n  });\n  port.start?.();\n  return { invalidate: (paths) => reply({ invalidate: paths }) };\n}\n", "import { attachKernel } from '../client/attach.ts';\nimport type { MessagePortLike } from '../client/protocol.ts';\nimport type { RealmTransportRequest, RealmTransportResponse } from '../kernel/net/transport.ts';\nimport { type FilesystemHandlers, serveFilesystem } from './driver.ts';\nimport { DRIVER_PROTOCOL, type DriverCapabilities } from './protocol.ts';\n\nexport interface DriverStart {\n  code: string;\n  driver: MessagePortLike;\n  client: MessagePortLike;\n}\n\nexport interface DriverEnv {\n  fetch(\n    request: Omit<RealmTransportRequest, 'signal'> & { signal?: AbortSignal }\n  ): Promise<RealmTransportResponse>;\n}\n\nexport type DriverFactory = (\n  env: DriverEnv\n) =>\n  | Promise<{ handlers: FilesystemHandlers; capabilities?: DriverCapabilities }>\n  | { handlers: FilesystemHandlers; capabilities?: DriverCapabilities };\n\nexport async function hostDriver(\n  start: DriverStart,\n  load: (code: string) => Promise<{ default?: unknown }>\n): Promise<void> {\n  try {\n    const factory = (await load(start.code)).default;\n    if (typeof factory !== 'function') {\n      throw new Error('a slicc file system module must export a default function');\n    }\n    const client = await attachKernel(start.client, { locks: null });\n    const made = await (factory as DriverFactory)({ fetch: (request) => client.fetch(request) });\n    serveFilesystem(start.driver, made.handlers, made.capabilities ?? {});\n  } catch (err) {\n    start.driver.postMessage({\n      hello: {\n        protocol: DRIVER_PROTOCOL,\n        error: `the driver did not start: ${err instanceof Error ? err.message : String(err)}`,\n        errno: 'EIO',\n      },\n    });\n  }\n}\n", "export const BLOCKED_GLOBALS: readonly string[] = [\n  'XMLHttpRequest',\n  'WebSocketStream',\n  'WebTransport',\n  'EventSource',\n  'importScripts',\n  'indexedDB',\n  'caches',\n  'cookieStore',\n  'Worker',\n  'SharedWorker',\n  'BroadcastChannel',\n  'postMessage',\n  'close',\n  'webkitRequestFileSystem',\n  'webkitRequestFileSystemSync',\n  'webkitResolveLocalFileSystemURL',\n  'webkitResolveLocalFileSystemSyncURL',\n];\n\nexport const BLOCKED_NAVIGATOR: readonly string[] = [\n  'storage',\n  'storageBuckets',\n  'locks',\n  'serviceWorker',\n  'usb',\n  'hid',\n  'serial',\n];\n\nexport const OPEN_SLOTS: readonly string[] = ['fetch', 'WebSocket'];\n\nfunction chain(target: object): object[] {\n  const out: object[] = [];\n  for (let at: object | null = target; at && at !== Object.prototype; ) {\n    out.push(at);\n    at = Object.getPrototypeOf(at);\n  }\n  return out;\n}\n\nexport function hide(target: object, names: readonly string[]): void {\n  for (const name of names) {\n    const holders = chain(target);\n    for (const holder of holders) {\n      if (Object.getOwnPropertyDescriptor(holder, name)?.configurable) {\n        Reflect.deleteProperty(holder, name);\n      }\n    }\n    const kept = holders.slice(1).some((holder) => Object.hasOwn(holder, name));\n    const defined = Reflect.defineProperty(target, name, {\n      value: undefined,\n      writable: false,\n      enumerable: false,\n      configurable: false,\n    });\n    if (kept || (!defined && Reflect.get(target, name) !== undefined)) {\n      throw new Error(`slicc-kernel: cannot withhold ${name} from a JS program`);\n    }\n  }\n}\n\nexport function vacate(target: object, names: readonly string[]): void {\n  for (const name of names) {\n    for (let at: object | null = target; at && at !== Object.prototype; ) {\n      if (Object.getOwnPropertyDescriptor(at, name)?.configurable) Reflect.deleteProperty(at, name);\n      at = Object.getPrototypeOf(at);\n    }\n    Reflect.defineProperty(target, name, {\n      value: undefined,\n      writable: true,\n      enumerable: false,\n      configurable: true,\n    });\n    if (Reflect.get(target, name) !== undefined) {\n      throw new Error(`slicc-kernel: cannot withhold ${name} from a JS program`);\n    }\n  }\n}\n\nexport function lockdown(scope: object = globalThis): void {\n  hide(scope, BLOCKED_GLOBALS);\n  vacate(scope, OPEN_SLOTS);\n  const navigator = (scope as { navigator?: unknown }).navigator;\n  if (navigator && typeof navigator === 'object') hide(navigator, BLOCKED_NAVIGATOR);\n}\n", "import { type DriverStart, hostDriver } from './mount/host.ts';\nimport { lockdown } from './process/js/lockdown.ts';\n\naddEventListener(\n  'message',\n  (event) =>\n    void hostDriver((event as MessageEvent<DriverStart>).data, (code) => {\n      const url = URL.createObjectURL(new Blob([code], { type: 'text/javascript' }));\n      lockdown();\n      return import(url);\n    }),\n  { once: true }\n);\n"],
+  "sourcesContent": ["import type { CdpConnection, CdpHook, CdpRequest } from './types.ts';\n\nexport interface CdpPortLike {\n  postMessage(message: unknown): void;\n  addEventListener(type: 'message', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n  close(): void;\n}\n\nexport type CdpWire = { open: true } | { error: string } | { m: string } | { close: string | null };\n\nexport interface CdpOpen {\n  cdpOpen: CdpRequest & { registration?: number };\n  port: CdpPortLike;\n}\n\nexport function serveCdpPort(\n  port: CdpPortLike,\n  hook: CdpHook,\n  request: CdpRequest,\n  onDone?: () => void\n): () => void {\n  let conn: CdpConnection | undefined;\n  let done = false;\n  const end = () => {\n    done = true;\n    port.close();\n    onDone?.();\n  };\n  const finish = (reason: string | null) => {\n    if (done) return;\n    port.postMessage({ close: reason });\n    end();\n  };\n  port.addEventListener('message', ({ data }: MessageEvent<{ m?: string; close?: true }>) => {\n    if (data.m !== undefined) conn?.send(data.m);\n    else if (data.close && !done) {\n      end();\n      conn?.close();\n    }\n  });\n  port.start?.();\n  new Promise<CdpConnection>((resolve) => resolve(hook(request))).then(\n    (opened) => {\n      conn = opened;\n      if (done) return opened.close();\n      opened.onmessage = (m) => {\n        if (!done) port.postMessage({ m });\n      };\n      opened.onclose = (reason) => finish(reason ?? null);\n      port.postMessage({ open: true });\n    },\n    (e: unknown) => {\n      if (done) return;\n      port.postMessage({ error: e instanceof Error ? e.message : String(e) });\n      end();\n    }\n  );\n  return () => {\n    if (done) return;\n    conn?.close();\n    finish('the CDP host is gone');\n  };\n}\n\nexport function portCdpHook(\n  ask: (request: CdpRequest, port: CdpPortLike) => void,\n  gone?: Promise<unknown>\n): CdpHook {\n  return (request) =>\n    new Promise((resolve, reject) => {\n      const { port1, port2 } = new MessageChannel();\n      let closed = false;\n      const conn: CdpConnection = {\n        send: (m) => {\n          if (!closed) port1.postMessage({ m });\n        },\n        onmessage: null,\n        onclose: null,\n        close: () => {\n          if (closed) return;\n          closed = true;\n          port1.postMessage({ close: true });\n          port1.close();\n        },\n      };\n      port1.addEventListener('message', ({ data }: MessageEvent<CdpWire>) => {\n        if ('m' in data) conn.onmessage?.(data.m);\n        else if ('open' in data) resolve(conn);\n        else if ('error' in data) {\n          closed = true;\n          port1.close();\n          reject(new Error(data.error));\n        } else if (!closed) {\n          closed = true;\n          port1.close();\n          conn.onclose?.(data.close ?? undefined);\n        }\n      });\n      port1.start();\n      void gone?.then(() => {\n        if (closed) return;\n        closed = true;\n        port1.close();\n        reject(new Error('the CDP host is gone'));\n        conn.onclose?.('the CDP host is gone');\n      });\n      ask(request, port2 as unknown as CdpPortLike);\n    });\n}\n", "import type { RealmWebSocketClose, RealmWebSocketMessage } from './transport.ts';\n\nexport const INBOUND_LIMIT = 16 * 1024 * 1024;\nexport const MESSAGE_LIMIT = 64 * 1024 * 1024;\nexport const TOO_BIG = 1009;\n\nexport function payloadSize(message: RealmWebSocketMessage): number {\n  return typeof message === 'string' ? new TextEncoder().encode(message).length : message.length;\n}\n\nexport class MessageQueue implements AsyncIterable<RealmWebSocketMessage> {\n  private readonly items: RealmWebSocketMessage[] = [];\n  private readonly limit: number;\n  private waiter: (() => void) | undefined;\n  private size = 0;\n  private ended = false;\n  private readonly overflow: () => void;\n  private readonly taken: ((n: number) => void) | undefined;\n  readonly closed: Promise<RealmWebSocketClose>;\n  private settle!: (close: RealmWebSocketClose) => void;\n\n  constructor(overflow: () => void, limit = INBOUND_LIMIT, taken?: (n: number) => void) {\n    this.overflow = overflow;\n    this.limit = limit;\n    this.taken = taken;\n    this.closed = new Promise((resolve) => {\n      this.settle = resolve;\n    });\n  }\n\n  push(message: RealmWebSocketMessage): void {\n    if (this.ended) return;\n    const size = payloadSize(message);\n    const huge = size > MESSAGE_LIMIT;\n    if (huge || (this.items.length > 0 && this.size + size > this.limit)) {\n      const reason = huge\n        ? `a message is over ${MESSAGE_LIMIT} bytes`\n        : `over ${this.limit} bytes of messages are waiting`;\n      this.end({ code: TOO_BIG, reason });\n      this.overflow();\n      return;\n    }\n    this.size += size;\n    this.items.push(message);\n    this.wake();\n  }\n\n  end(close: RealmWebSocketClose): void {\n    if (this.ended) return;\n    this.ended = true;\n    this.settle(close);\n    this.wake();\n  }\n\n  private wake(): void {\n    const waiter = this.waiter;\n    this.waiter = undefined;\n    waiter?.();\n  }\n\n  async *[Symbol.asyncIterator](): AsyncIterator<RealmWebSocketMessage> {\n    for (;;) {\n      const next = this.items.shift();\n      if (next !== undefined) {\n        const n = payloadSize(next);\n        this.size -= n;\n        this.taken?.(n);\n        yield next;\n        continue;\n      }\n      if (this.ended) return;\n      await new Promise<void>((resolve) => {\n        this.waiter = resolve;\n      });\n    }\n  }\n}\n", "import type {\n  HeaderList,\n  RealmRedirectHop,\n  RealmTransport,\n  RealmTransportRequest,\n  RealmTransportResponse,\n  RealmTransportTraits,\n  RealmWebSocket,\n  RealmWebSocketMessage,\n  RealmWebSocketRequest,\n} from './transport.ts';\nimport { MessageQueue, payloadSize } from './ws-queue.ts';\n\nexport type TransportCall =\n  | {\n      net: 'fetch';\n      nid: number;\n      url: string;\n      method: string;\n      headers: HeaderList;\n      body?: Uint8Array;\n    }\n  | { net: 'read'; nid: number }\n  | { net: 'cancel'; nid: number }\n  | { net: 'ws-open'; nid: number; url: string; protocols: string[]; headers: HeaderList }\n  | { net: 'ws-send'; nid: number; data: RealmWebSocketMessage }\n  | { net: 'ws-close'; nid: number; code?: number; reason?: string }\n  | { net: 'ws-consumed'; nid: number; n: number };\n\nexport type TransportReply =\n  | {\n      net: 'head';\n      nid: number;\n      status: number;\n      statusText: string;\n      headers: HeaderList;\n      url?: string;\n      redirected?: boolean;\n      redirects?: readonly RealmRedirectHop[];\n    }\n  | { net: 'chunk'; nid: number; bytes: Uint8Array }\n  | { net: 'end'; nid: number }\n  | { net: 'error'; nid: number; message: string; status?: number; code?: string }\n  | { net: 'ws-opened'; nid: number; protocol: string }\n  | { net: 'ws-message'; nid: number; data: RealmWebSocketMessage }\n  | { net: 'ws-acked'; nid: number; n: number }\n  | { net: 'ws-closed'; nid: number; code: number; reason: string };\n\nexport interface TransportPort {\n  postMessage(message: TransportCall): void;\n}\n\nexport class TransportError extends Error {\n  readonly status: number | undefined;\n  readonly code: string | undefined;\n\n  constructor(message: string, status?: number, code?: string) {\n    super(message);\n    this.status = status;\n    this.code = code;\n  }\n}\n\ninterface Waiter {\n  resolve(reply: TransportReply): void;\n  reject(error: Error): void;\n}\n\nexport class RemoteTransport implements RealmTransport {\n  readonly traits: RealmTransportTraits;\n\n  private readonly port: TransportPort;\n\n  private readonly waiting = new Map<number, Waiter>();\n\n  private nextId = 0;\n\n  private readonly sockets = new Map<number, { queue: MessageQueue; acked(n: number): void }>();\n\n  private failure: Error | undefined;\n\n  constructor(port: TransportPort, traits: RealmTransportTraits) {\n    this.port = port;\n    this.traits = traits;\n  }\n\n  receive(reply: TransportReply): void {\n    const socket = this.sockets.get(reply.nid);\n    if (socket && this.toSocket(reply, socket)) return;\n    const waiter = this.waiting.get(reply.nid);\n    if (!waiter) return;\n    this.waiting.delete(reply.nid);\n    if (reply.net === 'error') {\n      waiter.reject(new TransportError(reply.message, reply.status, reply.code));\n    } else waiter.resolve(reply);\n  }\n\n  private toSocket(\n    reply: TransportReply,\n    socket: { queue: MessageQueue; acked(n: number): void }\n  ): boolean {\n    if (reply.net === 'ws-message') socket.queue.push(reply.data);\n    else if (reply.net === 'ws-acked') socket.acked(reply.n);\n    else if (reply.net === 'ws-closed') {\n      this.sockets.delete(reply.nid);\n      socket.queue.end({ code: reply.code, reason: reply.reason });\n    } else return false;\n    return true;\n  }\n\n  fail(error: Error): void {\n    this.failure = error;\n    for (const waiter of this.waiting.values()) waiter.reject(error);\n    this.waiting.clear();\n    for (const socket of this.sockets.values())\n      socket.queue.end({ code: 1011, reason: error.message });\n    this.sockets.clear();\n  }\n\n  private ask(call: TransportCall): Promise<TransportReply> {\n    if (this.failure) return Promise.reject(this.failure);\n    return new Promise((resolve, reject) => {\n      this.waiting.set(call.nid, { resolve, reject });\n      this.port.postMessage(call);\n    });\n  }\n\n  private cancel(nid: number): void {\n    const waiter = this.waiting.get(nid);\n    this.waiting.delete(nid);\n    waiter?.reject(new TransportError('the request was cancelled'));\n    this.port.postMessage({ net: 'cancel', nid });\n  }\n\n  async fetch(request: RealmTransportRequest): Promise<RealmTransportResponse> {\n    const nid = ++this.nextId;\n    const { signal } = request;\n    signal.throwIfAborted();\n    let finished = false;\n    const abort = () => {\n      finished = true;\n      this.cancel(nid);\n    };\n    signal.addEventListener('abort', abort, { once: true });\n    const finish = () => {\n      if (finished) return;\n      finished = true;\n      signal.removeEventListener('abort', abort);\n    };\n    let head: TransportReply;\n    try {\n      head = await this.ask({\n        net: 'fetch',\n        nid,\n        url: request.url,\n        method: request.method,\n        headers: request.headers,\n        ...(request.body ? { body: request.body } : {}),\n      });\n    } catch (e) {\n      finish();\n      throw e;\n    }\n    const { status, statusText, headers, url, redirected, redirects } = head as Extract<\n      TransportReply,\n      { net: 'head' }\n    >;\n    const read = async (): Promise<Uint8Array | undefined> => {\n      if (finished) return undefined;\n      const reply = await this.ask({ net: 'read', nid }).catch((e: unknown) => {\n        finish();\n        throw e;\n      });\n      if (reply.net === 'chunk') return reply.bytes;\n      finish();\n      return undefined;\n    };\n    const cancel = async () => {\n      if (finished) return;\n      finish();\n      this.cancel(nid);\n    };\n    return {\n      ...(redirected ? { url, redirected } : {}),\n      ...(redirects ? { redirects } : {}),\n      status,\n      statusText,\n      headers,\n      cancel,\n      body: {\n        [Symbol.asyncIterator]: () => ({\n          next: async () => {\n            const bytes = await read();\n            return bytes ? { value: bytes, done: false } : { value: undefined, done: true };\n          },\n          return: async () => {\n            await cancel();\n            return { value: undefined, done: true };\n          },\n        }),\n      },\n    };\n  }\n\n  async websocket(request: RealmWebSocketRequest): Promise<RealmWebSocket> {\n    const nid = ++this.nextId;\n    const { signal } = request;\n    signal.throwIfAborted();\n    const abort = () => this.cancel(nid);\n    signal.addEventListener('abort', abort, { once: true });\n    let opened: TransportReply;\n    try {\n      opened = await this.ask({\n        net: 'ws-open',\n        nid,\n        url: request.url,\n        protocols: request.protocols,\n        headers: request.headers,\n      });\n    } finally {\n      signal.removeEventListener('abort', abort);\n    }\n    const close = (code?: number, reason?: string) =>\n      this.port.postMessage({ net: 'ws-close', nid, code, reason });\n    const queue = new MessageQueue(\n      () => close(1000, 'a message is too big'),\n      Number.POSITIVE_INFINITY,\n      (n) => this.port.postMessage({ net: 'ws-consumed', nid, n })\n    );\n    let unacked = 0;\n    this.sockets.set(nid, { queue, acked: (n) => void (unacked -= n) });\n    return {\n      protocol: (opened as Extract<TransportReply, { net: 'ws-opened' }>).protocol,\n      get buffered() {\n        return unacked;\n      },\n      send: (data) => {\n        unacked += payloadSize(data);\n        this.port.postMessage({ net: 'ws-send', nid, data });\n      },\n      messages: queue,\n      close,\n      closed: queue.closed,\n    };\n  }\n}\n", "export function fresh(bytes: Uint8Array, start = 0, end = bytes.length): Uint8Array {\n  return new Uint8Array(bytes.subarray(start, end));\n}\n", "import { fresh } from '../bytes.ts';\n\nexport interface DialledSocket {\n  readable: ReadableStream<Uint8Array>;\n  writable: WritableStream<Uint8Array>;\n  close(): void;\n}\n\nexport interface DialOptions {\n  port: number;\n  host?: string;\n}\n\ninterface StreamPort {\n  postMessage(message: unknown, transfer?: Transferable[]): void;\n  addEventListener(type: 'message', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n  close(): void;\n}\n\ntype DialMessage = Uint8Array | { end: true } | { ack: true } | { error: string };\n\nexport interface DialHandle extends DialledSocket {\n  fail(error: Error): void;\n}\n\nexport function errorWithCode(message: string): Error & { code?: string } {\n  const code = /^E[A-Z]+/.exec(message)?.[0];\n  return Object.assign(new Error(message), code ? { code } : {});\n}\n\nexport function dialStream(port: StreamPort, onClose?: () => void): DialHandle {\n  let closed = false;\n  let reader: ReadableStreamDefaultController<Uint8Array> | undefined;\n  const acks: Array<{ resolve: () => void; reject: (error: Error) => void }> = [];\n  const readable = new ReadableStream<Uint8Array>({\n    start(controller) {\n      reader = controller;\n    },\n    pull() {\n      if (!closed) port.postMessage({ more: true });\n    },\n    cancel() {\n      reader = undefined;\n      close();\n    },\n  });\n  const finish = (fail?: Error) => {\n    const controller = reader;\n    reader = undefined;\n    for (const ack of acks.splice(0)) {\n      if (fail) ack.reject(fail);\n      else ack.resolve();\n    }\n    if (!controller) return;\n    if (fail) controller.error(fail);\n    else controller.close();\n  };\n  function shut(): void {\n    if (closed) return;\n    closed = true;\n    port.close();\n    onClose?.();\n  }\n  function close(): void {\n    if (!closed) port.postMessage({ close: true });\n    shut();\n    finish();\n  }\n  port.addEventListener('message', ({ data }: MessageEvent<DialMessage>) => {\n    if (data instanceof Uint8Array) reader?.enqueue(data);\n    else if ('ack' in data) acks.shift()?.resolve();\n    else if ('end' in data) finish();\n    else finish(errorWithCode(data.error));\n  });\n  port.start?.();\n  const writable = new WritableStream<Uint8Array>({\n    write(chunk) {\n      if (closed) throw errorWithCode('EPIPE: the connection is closed');\n      const copy = fresh(chunk);\n      const acked = new Promise<void>((resolve, reject) => acks.push({ resolve, reject }));\n      port.postMessage(copy, [copy.buffer]);\n      return acked;\n    },\n    close() {\n      if (!closed) port.postMessage({ end: true });\n    },\n    abort() {\n      close();\n    },\n  });\n  const fail = (error: Error) => {\n    shut();\n    finish(error);\n  };\n  return { readable, writable, close, fail };\n}\n", "import { type DialledSocket, type DialOptions, errorWithCode } from './dial-stream.ts';\n\nexport interface LoopbackFetchOptions extends DialOptions {\n  signal?: AbortSignal;\n}\n\nconst OWN_HEADERS = new Set(['host', 'connection', 'content-length', 'transfer-encoding']);\nconst encoder = new TextEncoder();\nconst latin1 = new TextDecoder('latin1');\n\nclass ByteSource {\n  private buffered = new Uint8Array(0);\n  private readonly reader: ReadableStreamDefaultReader<Uint8Array>;\n\n  constructor(reader: ReadableStreamDefaultReader<Uint8Array>) {\n    this.reader = reader;\n  }\n\n  private async more(): Promise<boolean> {\n    const { done, value } = await this.reader.read();\n    if (done) return false;\n    const joined = new Uint8Array(this.buffered.length + value.length);\n    joined.set(this.buffered);\n    joined.set(value, this.buffered.length);\n    this.buffered = joined;\n    return true;\n  }\n\n  async until(marker: string): Promise<Uint8Array | undefined> {\n    const needle = encoder.encode(marker);\n    for (;;) {\n      const at = indexOf(this.buffered, needle);\n      if (at >= 0) return this.take(at + needle.length);\n      if (!(await this.more())) return undefined;\n    }\n  }\n\n  async some(max: number): Promise<Uint8Array | undefined> {\n    if (this.buffered.length === 0 && !(await this.more())) return undefined;\n    return this.take(Math.min(max, this.buffered.length));\n  }\n\n  async exactly(count: number): Promise<Uint8Array | undefined> {\n    while (this.buffered.length < count) if (!(await this.more())) return undefined;\n    return this.take(count);\n  }\n\n  private take(count: number): Uint8Array {\n    const out = this.buffered.slice(0, count);\n    this.buffered = this.buffered.slice(count);\n    return out;\n  }\n}\n\nfunction indexOf(haystack: Uint8Array, needle: Uint8Array): number {\n  outer: for (let i = 0; i + needle.length <= haystack.length; i++) {\n    for (let j = 0; j < needle.length; j++) if (haystack[i + j] !== needle[j]) continue outer;\n    return i;\n  }\n  return -1;\n}\n\ninterface ResponseHead {\n  status: number;\n  statusText: string;\n  headers: Array<[string, string]>;\n}\n\nfunction parseHead(bytes: Uint8Array): ResponseHead {\n  const [statusLine = '', ...lines] = latin1.decode(bytes).split('\\r\\n');\n  const match = /^HTTP\\/1\\.[01] (\\d{3})(?: (.*))?$/.exec(statusLine);\n  if (!match) throw errorWithCode(`EPROTO: not an HTTP/1.x response: ${statusLine.slice(0, 80)}`);\n  const headers: Array<[string, string]> = [];\n  for (const line of lines) {\n    const colon = line.indexOf(':');\n    if (colon > 0) headers.push([line.slice(0, colon).trim(), line.slice(colon + 1).trim()]);\n  }\n  return { status: Number(match[1]), statusText: match[2] ?? '', headers };\n}\n\nfunction header(head: ResponseHead, name: string): string | undefined {\n  return head.headers.find(([key]) => key.toLowerCase() === name)?.[1];\n}\n\nasync function* chunked(source: ByteSource): AsyncGenerator<Uint8Array> {\n  for (;;) {\n    const line = await source.until('\\r\\n');\n    if (!line) throw errorWithCode('EPROTO: the chunked body ended early');\n    const size = Number.parseInt(latin1.decode(line).trim().split(';')[0] ?? '', 16);\n    if (!Number.isFinite(size)) throw errorWithCode('EPROTO: a malformed chunk size');\n    if (size === 0) return;\n    const data = await source.exactly(size);\n    if (!data || !(await source.exactly(2))) throw errorWithCode('EPROTO: a chunk ended early');\n    yield data;\n  }\n}\n\nasync function* counted(source: ByteSource, length: number): AsyncGenerator<Uint8Array> {\n  let left = length;\n  while (left > 0) {\n    const data = await source.some(left);\n    if (!data) throw errorWithCode('EPROTO: the body ended early');\n    left -= data.length;\n    yield data;\n  }\n}\n\nasync function* untilClose(source: ByteSource): AsyncGenerator<Uint8Array> {\n  for (let data = await source.some(65536); data; data = await source.some(65536)) yield data;\n}\n\nfunction bodyOf(source: ByteSource, head: ResponseHead, method: string) {\n  if (method === 'HEAD' || head.status === 204 || head.status === 304) return undefined;\n  if (header(head, 'transfer-encoding')?.toLowerCase().includes('chunked')) return chunked(source);\n  const length = header(head, 'content-length');\n  if (length === undefined) return untilClose(source);\n  const size = Number(length);\n  if (!/^\\d+$/.test(length.trim()) || !Number.isSafeInteger(size)) {\n    throw errorWithCode(`EPROTO: a malformed Content-Length: ${length}`);\n  }\n  return counted(source, size);\n}\n\nfunction stream(chunks: AsyncGenerator<Uint8Array>, socket: DialledSocket, signal?: AbortSignal) {\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      signal?.addEventListener('abort', () => controller.error(signal.reason), { once: true });\n    },\n    async pull(controller) {\n      try {\n        const next = await chunks.next();\n        if (next.done) {\n          controller.close();\n          socket.close();\n        } else controller.enqueue(next.value);\n      } catch (err) {\n        controller.error(err);\n        socket.close();\n      }\n    },\n    cancel() {\n      socket.close();\n    },\n  });\n}\n\nasync function requestBytes(request: Request): Promise<Uint8Array> {\n  const url = new URL(request.url);\n  const body = request.body ? new Uint8Array(await request.arrayBuffer()) : undefined;\n  const lines = [`${request.method} ${url.pathname}${url.search} HTTP/1.1`, `Host: ${url.host}`];\n  request.headers.forEach((value, name) => {\n    if (!OWN_HEADERS.has(name)) lines.push(`${name}: ${value}`);\n  });\n  if (body) lines.push(`Content-Length: ${body.length}`);\n  lines.push('Connection: close', '', '');\n  const head = encoder.encode(lines.join('\\r\\n'));\n  const out = new Uint8Array(head.length + (body?.length ?? 0));\n  out.set(head);\n  if (body) out.set(body, head.length);\n  return out;\n}\n\nexport async function loopbackFetch(\n  dial: (options: DialOptions) => Promise<DialledSocket>,\n  input: RequestInfo | URL,\n  options: LoopbackFetchOptions\n): Promise<Response> {\n  options.signal?.throwIfAborted();\n  const request = input instanceof Request ? input : new Request(input);\n  const bytes = await requestBytes(request);\n  const socket = await dial({\n    port: options.port,\n    ...(options.host ? { host: options.host } : {}),\n  });\n  options.signal?.addEventListener('abort', () => socket.close(), { once: true });\n  try {\n    const writer = socket.writable.getWriter();\n    await writer.write(bytes);\n    writer.releaseLock();\n    const source = new ByteSource(socket.readable.getReader());\n    let head: ResponseHead;\n    do {\n      const raw = await source.until('\\r\\n\\r\\n');\n      if (!raw) throw errorWithCode('ECONNRESET: the connection closed before a response');\n      head = parseHead(raw);\n    } while (head.status >= 100 && head.status < 200);\n    const chunks = bodyOf(source, head, request.method);\n    if (!chunks) socket.close();\n    return new Response(chunks ? stream(chunks, socket, options.signal) : null, {\n      status: head.status,\n      statusText: head.statusText,\n      headers: head.headers,\n    });\n  } catch (err) {\n    socket.close();\n    throw err;\n  }\n}\n", "import type { UsersMode } from '../fs/types.ts';\nimport type { WatchChange } from '../fs/watch.ts';\nimport type { TransportCall, TransportReply } from '../kernel/net/remote-transport.ts';\nimport type { RealmTransportTraits } from '../kernel/net/transport.ts';\nimport type { MountSpec } from '../mount/mount-fs.ts';\n\nexport const PROTOCOL: readonly [number, number] = [1, 9];\n\nexport interface ClientHello {\n  protocol: readonly [number, number];\n  lock?: string;\n}\n\nexport interface KernelHello {\n  protocol: readonly [number, number];\n  lock?: string;\n  traits?: RealmTransportTraits;\n  users?: UsersMode;\n  error?: string;\n}\n\nexport interface SpawnRequestOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  stdin?: Uint8Array;\n  pgid?: number;\n}\n\nexport interface TerminalRequestOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  cols?: number;\n  rows?: number;\n}\n\nexport type TerminalAction =\n  | { action: 'write'; bytes: Uint8Array }\n  | { action: 'resize'; cols: number; rows: number }\n  | { action: 'signal'; signal: string }\n  | { action: 'close' };\n\nexport const FS_METHODS = [\n  'readFile',\n  'writeFile',\n  'stat',\n  'lstat',\n  'readdir',\n  'mkdir',\n  'rm',\n  'rename',\n  'realpath',\n  'symlink',\n  'readlink',\n  'exists',\n] as const;\n\nexport type FsMethod = (typeof FS_METHODS)[number];\n\nexport type ClientCall =\n  | { op: 'spawn'; argv: string[]; options: SpawnRequestOptions }\n  | { op: 'open-terminal'; argv: string[]; options: TerminalRequestOptions }\n  | ({ op: 'terminal'; terminal: number } & TerminalAction)\n  | { op: 'kill'; pid: number; signal: string }\n  | { op: 'ps' }\n  | { op: 'fs'; method: FsMethod; args: unknown[] }\n  | { op: 'watch'; paths: string[]; recursive: boolean }\n  | { op: 'unwatch'; watch: number }\n  | { op: 'mount'; spec: MountSpec }\n  | { op: 'umount'; target: string }\n  | { op: 'mounts' }\n  | { op: 'dial'; port: number; host?: string }\n  | { op: 'serve-cdp'; runtime?: string }\n  | { op: 'unserve-cdp'; registration: number }\n  | { op: 'detach'; kill?: boolean };\n\nexport type ClientRequest = ClientCall & { id: number };\n\nexport interface ClientReply {\n  id: number;\n  result?: unknown;\n  error?: string;\n  code?: string;\n  fd?: 1 | 2;\n  bytes?: Uint8Array;\n  started?: number;\n}\n\nexport type ClientMessage = { hello: ClientHello } | ClientRequest | TransportCall;\n\nexport interface WatchEvent {\n  watch: number;\n  change: WatchChange;\n}\n\nexport type KernelMessage = { hello: KernelHello } | ClientReply | WatchEvent | TransportReply;\n\nexport interface ProcessEntry {\n  pid: number;\n  ppid: number;\n  pgid: number;\n  sid: number;\n  argv: string[];\n  tty: string | null;\n  started: number;\n  state: 'S' | 'T' | 'Z';\n  memory: number;\n  rss?: number;\n  utime?: number;\n  stime?: number;\n  uid?: number;\n  gid?: number;\n}\n\nexport interface MessagePortLike {\n  postMessage(message: unknown, transfer?: Transferable[]): void;\n  addEventListener(type: 'message' | 'close', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n  close?(): void;\n}\n\nexport interface LockManagerLike {\n  request(name: string, callback: () => Promise<unknown> | unknown): Promise<unknown>;\n}\n\nexport function locksOf(scope: object = globalThis): LockManagerLike | undefined {\n  const locks = (scope as { navigator?: { locks?: LockManagerLike } }).navigator?.locks;\n  return typeof locks?.request === 'function' ? locks : undefined;\n}\n\nexport function versionError(theirs: unknown): string | undefined {\n  const major = Array.isArray(theirs) ? theirs[0] : undefined;\n  if (major === PROTOCOL[0]) return undefined;\n  const named = typeof major === 'number' ? `${major}.x` : 'without a version';\n  return `slicc-kernel client protocol ${named} is not supported: this side speaks ${PROTOCOL.join('.')}`;\n}\n", "import { type CdpOpen, serveCdpPort } from '../cdp/port.ts';\nimport type { CdpHook } from '../cdp/types.ts';\nimport type { FsStat, UsersMode } from '../fs/types.ts';\nimport type { WatchChange } from '../fs/watch.ts';\nimport { RemoteTransport, type TransportReply } from '../kernel/net/remote-transport.ts';\nimport type {\n  RealmTransport,\n  RealmTransportRequest,\n  RealmTransportResponse,\n} from '../kernel/net/transport.ts';\nimport type { MountEntry, MountSpec } from '../mount/mount-fs.ts';\nimport { type DialledSocket, type DialOptions, dialStream } from './dial-stream.ts';\nimport { type LoopbackFetchOptions, loopbackFetch } from './loopback-fetch.ts';\nimport {\n  type ClientCall,\n  type ClientReply,\n  type FsMethod,\n  type KernelHello,\n  type LockManagerLike,\n  locksOf,\n  type MessagePortLike,\n  PROTOCOL,\n  type ProcessEntry,\n  type TerminalAction,\n  versionError,\n} from './protocol.ts';\n\nexport type { WatchChange } from '../fs/watch.ts';\nexport type { ProcessEntry } from './protocol.ts';\n\nexport class KernelGoneError extends Error {\n  constructor(message = 'the slicc-kernel this client was attached to is gone') {\n    super(message);\n    this.name = 'KernelGoneError';\n  }\n}\n\nexport class KernelCallError extends Error {\n  readonly code: string | undefined;\n\n  constructor(message: string, code?: string) {\n    super(message);\n    this.name = 'KernelCallError';\n    this.code = code;\n  }\n}\n\nexport interface AttachOptions {\n  timeoutMs?: number;\n  locks?: LockManagerLike | null;\n}\n\nexport interface SpawnOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  stdin?: string | Uint8Array;\n  group?: 'new';\n  pgid?: number;\n  onStdout?: (bytes: Uint8Array) => void;\n  onStderr?: (bytes: Uint8Array) => void;\n}\n\nexport interface SpawnedProcess {\n  readonly pid: number;\n  readonly pgid: number;\n  readonly exited: Promise<number>;\n  signal(name?: string): Promise<void>;\n}\n\nexport interface ClientRunOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  stdin?: string | Uint8Array;\n  onStdout?: (text: string) => void;\n  onStderr?: (text: string) => void;\n}\n\nexport interface ClientRunResult {\n  pid: number;\n  status: number;\n  stdout: string;\n  stderr: string;\n}\n\nexport interface ClientTerminalOptions {\n  cwd?: string;\n  user?: string | number;\n  env?: Record<string, string>;\n  cols?: number;\n  rows?: number;\n  onData?: (bytes: Uint8Array) => void;\n}\n\nexport interface ClientTerminal {\n  readonly pid: number;\n  readonly exited: Promise<number>;\n  onData: ((bytes: Uint8Array) => void) | null;\n  write(data: string | Uint8Array): void;\n  resize(cols: number, rows: number): void;\n  signal(name: string): void;\n  close(): void;\n}\n\nexport interface ClientFs {\n  readFile(path: string): Promise<Uint8Array>;\n  readText(path: string): Promise<string>;\n  writeFile(path: string, data: string | Uint8Array): Promise<void>;\n  stat(path: string): Promise<FsStat>;\n  lstat(path: string): Promise<FsStat>;\n  readdir(path: string): Promise<string[]>;\n  mkdir(path: string): Promise<void>;\n  rm(path: string, options?: { force?: boolean }): Promise<void>;\n  rename(from: string, to: string): Promise<void>;\n  realpath(path: string): Promise<string>;\n  symlink(target: string, path: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  exists(path: string): Promise<boolean>;\n  watch(\n    paths: string[],\n    options: { recursive?: boolean },\n    onChange: (change: WatchChange) => void\n  ): Promise<{ close(): void }>;\n}\n\nexport type ClientFetchRequest = Omit<RealmTransportRequest, 'signal'> & { signal?: AbortSignal };\n\nexport interface KernelClient {\n  readonly protocol: readonly [number, number];\n  readonly transport: RealmTransport;\n  readonly users: UsersMode;\n  readonly closed: Promise<Error>;\n  spawn(argv: string[], options?: SpawnOptions): Promise<SpawnedProcess>;\n  run(argv: string[], options?: ClientRunOptions): Promise<ClientRunResult>;\n  openTerminal(argv: string[], options?: ClientTerminalOptions): Promise<ClientTerminal>;\n  ps(): Promise<ProcessEntry[]>;\n  mount(spec: MountSpec): Promise<MountEntry>;\n  umount(target: string): Promise<void>;\n  mounts(): Promise<MountEntry[]>;\n  kill(pid: number, signal?: string): Promise<void>;\n  fetch(request: ClientFetchRequest): Promise<RealmTransportResponse>;\n  dial(options: DialOptions): Promise<DialledSocket>;\n  loopbackFetch(input: RequestInfo | URL, options: LoopbackFetchOptions): Promise<Response>;\n  readonly fs: ClientFs;\n  serveCdp(hook: CdpHook, options?: { runtime?: string }): Promise<{ close(): void }>;\n  close(options?: { kill?: boolean }): Promise<void>;\n}\n\ninterface Pending {\n  resolve: (value: unknown) => void;\n  reject: (error: Error) => void;\n  output?: (fd: 1 | 2, bytes: Uint8Array) => void;\n  started?: (pid: number) => void;\n}\n\ntype Handlers = Omit<Pending, 'resolve' | 'reject'>;\n\nconst encoder = new TextEncoder();\nconst bytesOf = (data: string | Uint8Array) =>\n  typeof data === 'string' ? encoder.encode(data) : data;\n\nconst UNAVAILABLE = {\n  manualRedirects: false,\n  encodedBodies: false,\n  maxRequestBody: 0,\n  unavailable: true,\n} as const;\n\nasync function holdLock(\n  locks: LockManagerLike | undefined\n): Promise<{ name?: string; release(): void }> {\n  if (!locks) return { release() {} };\n  const name = `slicc-kernel-client:${crypto.randomUUID()}`;\n  const granted = Promise.withResolvers<void>();\n  const held = Promise.withResolvers<void>();\n  void locks.request(name, () => {\n    granted.resolve();\n    return held.promise;\n  });\n  await granted.promise;\n  return { name, release: () => held.resolve() };\n}\n\nfunction concat(chunks: Uint8Array[]): Uint8Array {\n  const out = new Uint8Array(chunks.reduce((n, c) => n + c.length, 0));\n  let at = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, at);\n    at += chunk.length;\n  }\n  return out;\n}\n\nclass Channel {\n  readonly greeted = Promise.withResolvers<KernelHello>();\n  readonly ended = Promise.withResolvers<Error>();\n  remote: RemoteTransport | undefined;\n  failure: Error | undefined;\n  private readonly pending = new Map<number, Pending>();\n  readonly watching = new Map<number, (change: WatchChange) => void>();\n  readonly cdpHooks = new Map<number, CdpHook>();\n  private readonly cdpOpen = new Set<() => void>();\n  protocol: readonly [number, number] = PROTOCOL;\n  private nextId = 0;\n  private readonly port: MessagePortLike;\n  private readonly release: () => void;\n\n  constructor(port: MessagePortLike, release: () => void) {\n    this.port = port;\n    this.release = release;\n    this.greeted.promise.catch(() => undefined);\n    port.addEventListener('message', (event) => this.receive(event.data));\n    port.addEventListener('close', () => this.end(new KernelGoneError()));\n    port.start?.();\n  }\n\n  post(message: object): void {\n    if (!this.failure) this.port.postMessage(message);\n  }\n\n  end(error: Error): void {\n    if (this.failure) return;\n    this.failure = error;\n    this.greeted.reject(error);\n    this.remote?.fail(error);\n    for (const close of [...this.cdpOpen]) close();\n    this.cdpOpen.clear();\n    for (const call of this.pending.values()) call.reject(error);\n    this.pending.clear();\n    this.release();\n    this.port.close?.();\n    this.ended.resolve(error);\n  }\n\n  request(call: ClientCall, handlers: Handlers = {}): { id: number; done: Promise<unknown> } {\n    const id = ++this.nextId;\n    const { failure } = this;\n    if (failure) return { id, done: Promise.reject(failure) };\n    const done = new Promise((resolve, reject) => {\n      this.pending.set(id, { resolve, reject, ...handlers });\n      this.port.postMessage({ ...call, id });\n    });\n    return { id, done };\n  }\n\n  call(call: ClientCall): Promise<unknown> {\n    return this.request(call).done;\n  }\n\n  private receive(data: {\n    hello?: KernelHello;\n    net?: unknown;\n    bye?: string;\n    watch?: number;\n    change?: WatchChange;\n    cdpOpen?: CdpOpen['cdpOpen'];\n    port?: CdpOpen['port'];\n  }): void {\n    if (data.cdpOpen && data.port) {\n      this.openCdp(data as CdpOpen);\n      return;\n    }\n    if (data.watch !== undefined) {\n      this.watching.get(data.watch)?.(data.change as WatchChange);\n      return;\n    }\n    if (data.bye !== undefined) {\n      this.end(new KernelGoneError(data.bye));\n      return;\n    }\n    if (data.hello) {\n      this.greeted.resolve(data.hello);\n      return;\n    }\n    if (data.net !== undefined) {\n      this.remote?.receive(data as TransportReply);\n      return;\n    }\n    const reply = data as ClientReply;\n    const call = this.pending.get(reply.id);\n    if (!call) return;\n    if (reply.fd !== undefined) {\n      call.output?.(reply.fd, reply.bytes as Uint8Array);\n      return;\n    }\n    if (reply.started !== undefined) {\n      call.started?.(reply.started);\n      return;\n    }\n    this.pending.delete(reply.id);\n    if (reply.error !== undefined) call.reject(new KernelCallError(reply.error, reply.code));\n    else call.resolve(reply.result);\n  }\n\n  private openCdp({ cdpOpen: { registration, ...request }, port }: CdpOpen): void {\n    const hook = registration === undefined ? undefined : this.cdpHooks.get(registration);\n    if (!hook || this.failure) {\n      port.postMessage({ error: 'this client no longer serves CDP' });\n      port.close();\n      return;\n    }\n    const close = serveCdpPort(port, hook, request, () => this.cdpOpen.delete(close));\n    this.cdpOpen.add(close);\n  }\n}\n\nasync function serveCdpOn(\n  channel: Channel,\n  hook: CdpHook,\n  options: { runtime?: string }\n): Promise<{ close(): void }> {\n  await since(channel, 5, 'CDP serving', async () => {});\n  const req = {\n    op: 'serve-cdp' as const,\n    ...(options.runtime ? { runtime: options.runtime } : {}),\n  };\n  const { id, done } = channel.request(req);\n  channel.cdpHooks.set(id, hook);\n  try {\n    await done;\n  } catch (error) {\n    channel.cdpHooks.delete(id);\n    throw error;\n  }\n  return {\n    close: () => {\n      if (!channel.cdpHooks.delete(id)) return;\n      void channel.call({ op: 'unserve-cdp', registration: id }).catch(() => undefined);\n    },\n  };\n}\n\nasync function dialOn(channel: Channel, { port, host }: DialOptions): Promise<DialledSocket> {\n  const req = { op: 'dial' as const, port, ...(host ? { host } : {}) };\n  return dialStream((await since(channel, 4, 'dial', () => channel.call(req))) as MessagePort);\n}\n\nasync function spawnOn(\n  channel: Channel,\n  argv: string[],\n  opts: SpawnOptions\n): Promise<SpawnedProcess> {\n  const { onStdout, onStderr, stdin, group: _, ...rest } = opts;\n  if (opts.pgid !== undefined)\n    await since(channel, 3, 'spawn into a process group', async () => {});\n  if (opts.user !== undefined) await since(channel, 8, 'spawn as a user', async () => {});\n  const started = Promise.withResolvers<number>();\n  const options = { ...rest, ...(stdin !== undefined ? { stdin: bytesOf(stdin) } : {}) };\n  const { done } = channel.request(\n    { op: 'spawn', argv, options },\n    {\n      output: (fd, bytes) => (fd === 1 ? onStdout : onStderr)?.(bytes),\n      started: started.resolve,\n    }\n  );\n  done.catch(started.reject);\n  const pid = await started.promise;\n  const pgid = opts.pgid ?? pid;\n  return {\n    pid,\n    pgid,\n    exited: done as Promise<number>,\n    signal: async (name = 'SIGTERM') =>\n      void (await channel.call({ op: 'kill', pid: -pgid, signal: name })),\n  };\n}\n\nasync function runOn(\n  channel: Channel,\n  argv: string[],\n  opts: ClientRunOptions\n): Promise<ClientRunResult> {\n  const { onStdout, onStderr, ...rest } = opts;\n  const chunks: Record<1 | 2, Uint8Array[]> = { 1: [], 2: [] };\n  const live = { 1: new TextDecoder(), 2: new TextDecoder() };\n  const tee = (fd: 1 | 2, on?: (text: string) => void) => (bytes: Uint8Array) => {\n    chunks[fd].push(bytes);\n    on?.(live[fd].decode(bytes, { stream: true }));\n  };\n  const child = await spawnOn(channel, argv, {\n    ...rest,\n    onStdout: tee(1, onStdout),\n    onStderr: tee(2, onStderr),\n  });\n  const status = await child.exited;\n  const text = (fd: 1 | 2) => new TextDecoder().decode(concat(chunks[fd]));\n  return { pid: child.pid, status, stdout: text(1), stderr: text(2) };\n}\n\nasync function terminalOn(\n  channel: Channel,\n  argv: string[],\n  opts: ClientTerminalOptions\n): Promise<ClientTerminal> {\n  const { onData, ...options } = opts;\n  if (opts.user !== undefined) await since(channel, 8, 'a terminal as a user', async () => {});\n  let listener = onData ?? null;\n  const backlog: Uint8Array[] = [];\n  const started = Promise.withResolvers<number>();\n  const { id, done } = channel.request(\n    { op: 'open-terminal', argv, options },\n    {\n      output: (_fd, bytes) => (listener ? listener(bytes) : backlog.push(bytes)),\n      started: started.resolve,\n    }\n  );\n  done.catch(started.reject);\n  const pid = await started.promise;\n  const send = (action: TerminalAction) =>\n    void channel.call({ op: 'terminal', terminal: id, ...action }).catch(() => undefined);\n  return {\n    pid,\n    exited: done as Promise<number>,\n    get onData() {\n      return listener;\n    },\n    set onData(next) {\n      listener = next;\n      if (next) for (const bytes of backlog.splice(0)) next(bytes);\n    },\n    write: (data) => send({ action: 'write', bytes: bytesOf(data) }),\n    resize: (cols, rows) => send({ action: 'resize', cols, rows }),\n    signal: (name) => send({ action: 'signal', signal: name }),\n    close: () => send({ action: 'close' }),\n  };\n}\n\nfunction fsOn(channel: Channel): ClientFs {\n  const fs = (method: FsMethod, ...args: unknown[]) => channel.call({ op: 'fs', method, args });\n  const done = async (method: FsMethod, ...args: unknown[]) => void (await fs(method, ...args));\n  return {\n    readFile: (path) => fs('readFile', path) as Promise<Uint8Array>,\n    readText: async (path) => new TextDecoder().decode((await fs('readFile', path)) as Uint8Array),\n    writeFile: (path, data) => done('writeFile', path, data),\n    stat: (path) => fs('stat', path) as Promise<FsStat>,\n    lstat: (path) => fs('lstat', path) as Promise<FsStat>,\n    readdir: (path) => fs('readdir', path) as Promise<string[]>,\n    mkdir: (path) => done('mkdir', path),\n    rm: (path, o = {}) => done('rm', path, o.force === true),\n    rename: (from, to) => done('rename', from, to),\n    realpath: (path) => fs('realpath', path) as Promise<string>,\n    symlink: (target, path) => done('symlink', target, path),\n    readlink: (path) => fs('readlink', path) as Promise<string>,\n    exists: (path) => fs('exists', path) as Promise<boolean>,\n    async watch(paths, options, onChange) {\n      if (channel.protocol[1] < 1) {\n        throw new KernelCallError(\n          `this kernel speaks protocol ${channel.protocol.join('.')}, which has no watch`,\n          'ENOSYS'\n        );\n      }\n      const { id, done } = channel.request({\n        op: 'watch',\n        paths,\n        recursive: options.recursive === true,\n      });\n      channel.watching.set(id, onChange);\n      try {\n        await done;\n      } catch (error) {\n        channel.watching.delete(id);\n        throw error;\n      }\n      return {\n        close: () => {\n          if (!channel.watching.delete(id)) return;\n          void channel.call({ op: 'unwatch', watch: id }).catch(() => undefined);\n        },\n      };\n    },\n  };\n}\n\nfunction since(channel: Channel, minor: number, what: string, run: () => Promise<unknown>) {\n  if (channel.protocol[1] < minor) {\n    return Promise.reject(\n      new KernelCallError(\n        `this kernel speaks protocol ${channel.protocol.join('.')}, which has no ${what}`,\n        'ENOSYS'\n      )\n    );\n  }\n  return run();\n}\n\nasync function greet(\n  channel: Channel,\n  lock: string | undefined,\n  timeoutMs: number\n): Promise<KernelHello> {\n  channel.post({ hello: { protocol: PROTOCOL, ...(lock ? { lock } : {}) } });\n  const timer = setTimeout(\n    () =>\n      channel.end(\n        new KernelGoneError(`no slicc-kernel answered on this port within ${timeoutMs} ms`)\n      ),\n    timeoutMs\n  );\n  let hello: KernelHello;\n  try {\n    hello = await channel.greeted.promise;\n  } finally {\n    clearTimeout(timer);\n  }\n  const refused = hello.error ?? versionError(hello.protocol);\n  if (refused) {\n    const error = new Error(refused);\n    channel.end(error);\n    throw error;\n  }\n  return hello;\n}\n\nexport async function attachKernel(\n  port: MessagePortLike,\n  options: AttachOptions = {}\n): Promise<KernelClient> {\n  const locks = options.locks === null ? undefined : (options.locks ?? locksOf());\n  const own = await holdLock(locks);\n  const channel = new Channel(port, own.release);\n  const hello = await greet(channel, own.name, options.timeoutMs ?? 10_000);\n  channel.protocol = hello.protocol;\n  if (hello.lock && locks) void locks.request(hello.lock, () => channel.end(new KernelGoneError()));\n  const transport = new RemoteTransport(\n    { postMessage: (call) => channel.post(call) },\n    hello.traits ?? UNAVAILABLE\n  );\n  channel.remote = transport;\n  return {\n    protocol: hello.protocol,\n    transport,\n    users: hello.users ?? 'off',\n    closed: channel.ended.promise,\n    spawn: (argv, opts = {}) => spawnOn(channel, argv, opts),\n    run: (argv, opts = {}) => runOn(channel, argv, opts),\n    openTerminal: (argv, opts = {}) => terminalOn(channel, argv, opts),\n    ps: () => channel.call({ op: 'ps' }) as Promise<ProcessEntry[]>,\n    mount: (spec) =>\n      since(channel, 2, 'mount', () => channel.call({ op: 'mount', spec })) as Promise<MountEntry>,\n    umount: async (target) =>\n      void (await since(channel, 2, 'umount', () => channel.call({ op: 'umount', target }))),\n    mounts: () =>\n      since(channel, 2, 'mounts', () => channel.call({ op: 'mounts' })) as Promise<MountEntry[]>,\n    kill: async (pid, signal = 'SIGTERM') => void (await channel.call({ op: 'kill', pid, signal })),\n    fetch: (req) => {\n      const { signal, ...rest } = req;\n      return transport.fetch({ ...rest, signal: signal ?? new AbortController().signal });\n    },\n    dial: (options) => dialOn(channel, options),\n    loopbackFetch: (input, options) => loopbackFetch((o) => dialOn(channel, o), input, options),\n    fs: fsOn(channel),\n    serveCdp: (hook, options = {}) => serveCdpOn(channel, hook, options),\n    async close(o = {}) {\n      if (channel.failure) return;\n      await channel\n        .call({ op: 'detach', ...(o.kill ? { kill: true } : {}) })\n        .catch(() => undefined);\n      channel.end(new KernelGoneError('this client is closed'));\n    },\n  };\n}\n", "export const DRIVER_PROTOCOL: readonly [number, number] = [1, 2];\n\nexport interface DriverCapabilities {\n  readonly?: boolean;\n  symlinks?: boolean;\n  links?: boolean;\n  chmod?: boolean;\n  owners?: boolean;\n  linkTimes?: boolean;\n  ranges?: boolean;\n  sessions?: boolean;\n  listingStats?: boolean;\n  caseInsensitive?: boolean;\n  normalization?: 'none' | 'nfc' | 'nfd-insensitive';\n  maxIo?: number;\n  maxFile?: number;\n  attrTtl?: number;\n  entryTtl?: number;\n}\n\nexport interface DriverAttr {\n  kind: 'file' | 'directory' | 'symlink';\n  size: number;\n  mtime: number;\n  mode?: number;\n  ino?: number;\n  nlink?: number;\n  etag?: string;\n  uid?: number;\n  gid?: number;\n}\n\nexport interface DriverOwner {\n  uid?: number;\n  gid?: number;\n  mode?: number;\n}\n\nexport interface DriverEntry {\n  name: string;\n  kind: DriverAttr['kind'];\n  attr?: DriverAttr;\n}\n\nexport interface DriverStatfs {\n  bsize: number;\n  blocks: number;\n  bfree: number;\n}\n\nexport interface MountRequestInfo {\n  source: string;\n  options: Record<string, string>;\n}\n\nexport type DriverCall =\n  | { op: 'getattr'; path: string }\n  | { op: 'readdir'; path: string }\n  | ({\n      op: 'open';\n      path: string;\n      write: boolean;\n      create: boolean;\n      truncate: boolean;\n      exclusive: boolean;\n      ifMatch?: string;\n    } & DriverOwner)\n  | { op: 'read'; fh: number; offset: number; size: number }\n  | { op: 'write'; fh: number; offset: number; bytes: Uint8Array }\n  | { op: 'release'; fh: number }\n  | ({ op: 'mkdir'; path: string } & DriverOwner)\n  | { op: 'rmdir'; path: string }\n  | { op: 'unlink'; path: string }\n  | { op: 'rename'; from: string; to: string }\n  | { op: 'link'; from: string; to: string }\n  | ({ op: 'symlink'; target: string; path: string } & DriverOwner)\n  | { op: 'readlink'; path: string }\n  | {\n      op: 'setattr';\n      path: string;\n      mode?: number;\n      mtime?: number;\n      size?: number;\n      uid?: number;\n      gid?: number;\n    }\n  | { op: 'statfs' };\n\nexport type DriverRequest = DriverCall & { id: number };\n\nexport interface DriverReply {\n  id: number;\n  result?: unknown;\n  errno?: string;\n  message?: string;\n}\n\nexport interface KernelDriverHello {\n  protocol: readonly [number, number];\n  mount: MountRequestInfo;\n}\n\nexport interface DriverHello {\n  protocol: readonly [number, number];\n  capabilities?: DriverCapabilities;\n  error?: string;\n  errno?: string;\n}\n\nexport type KernelToDriver = { hello: KernelDriverHello } | DriverRequest;\n\nexport type DriverToKernel = { hello: DriverHello } | DriverReply | { invalidate: string[] | true };\n\nexport function driverVersionError(theirs: unknown): string | undefined {\n  const major = Array.isArray(theirs) ? theirs[0] : undefined;\n  if (major === DRIVER_PROTOCOL[0]) return undefined;\n  const named = typeof major === 'number' ? `${major}.x` : 'without a version';\n  return `slicc-kernel driver protocol ${named} is not supported: this side speaks ${DRIVER_PROTOCOL.join('.')}`;\n}\n", "import {\n  DRIVER_PROTOCOL,\n  type DriverAttr,\n  type DriverCapabilities,\n  type DriverEntry,\n  type DriverOwner,\n  type DriverRequest,\n  type DriverStatfs,\n  driverVersionError,\n  type KernelDriverHello,\n  type MountRequestInfo,\n} from './protocol.ts';\n\nexport type {\n  DriverAttr,\n  DriverCapabilities,\n  DriverEntry,\n  DriverOwner,\n  DriverStatfs,\n  MountRequestInfo,\n} from './protocol.ts';\n\nimport { fresh } from '../bytes.ts';\n\nexport interface OpenFlags {\n  write: boolean;\n  create: boolean;\n  truncate: boolean;\n  exclusive: boolean;\n  ifMatch?: string;\n  owner?: DriverOwner;\n}\n\nexport interface FilesystemHandlers {\n  mount?(\n    info: MountRequestInfo\n  ): Promise<DriverCapabilities | undefined> | DriverCapabilities | undefined;\n  getattr(path: string): Promise<DriverAttr>;\n  readdir(path: string): Promise<DriverEntry[]>;\n  open(path: string, flags: OpenFlags): Promise<number>;\n  read(fh: number, offset: number, size: number): Promise<Uint8Array>;\n  write(fh: number, offset: number, bytes: Uint8Array): Promise<void>;\n  release(fh: number): Promise<void>;\n  mkdir(path: string, owner?: DriverOwner): Promise<void>;\n  rmdir(path: string): Promise<void>;\n  unlink(path: string): Promise<void>;\n  rename(from: string, to: string): Promise<void>;\n  link?(from: string, to: string): Promise<void>;\n  symlink?(target: string, path: string, owner?: DriverOwner): Promise<void>;\n  readlink?(path: string): Promise<string>;\n  setattr?(path: string, attr: DriverSetAttr): Promise<void>;\n  statfs?(): Promise<DriverStatfs>;\n}\n\nexport interface DriverSetAttr {\n  mode?: number;\n  mtime?: number;\n  size?: number;\n  uid?: number;\n  gid?: number;\n}\n\nfunction ownerOf(req: DriverOwner): DriverOwner | undefined {\n  const owner = {\n    ...(req.uid !== undefined ? { uid: req.uid } : {}),\n    ...(req.gid !== undefined ? { gid: req.gid } : {}),\n    ...(req.mode !== undefined ? { mode: req.mode } : {}),\n  };\n  return Object.keys(owner).length > 0 ? owner : undefined;\n}\n\nfunction withOwner<T extends object>(base: T, owner: DriverOwner | undefined): T {\n  return owner ? { ...base, owner } : base;\n}\n\nexport interface DriverPort {\n  postMessage(message: unknown, transfer?: Transferable[]): void;\n  addEventListener(type: 'message', handler: (event: MessageEvent) => void): void;\n  start?(): void;\n}\n\nexport interface ServedFilesystem {\n  invalidate(paths: string[] | true): void;\n}\n\nexport function fsError(code: string, message = code): Error & { code: string } {\n  return Object.assign(new Error(message), { code });\n}\n\nasync function dispatch(h: FilesystemHandlers, req: DriverRequest): Promise<unknown> {\n  switch (req.op) {\n    case 'getattr':\n      return h.getattr(req.path);\n    case 'readdir':\n      return h.readdir(req.path);\n    case 'open':\n      return h.open(\n        req.path,\n        withOwner(\n          {\n            write: req.write,\n            create: req.create,\n            truncate: req.truncate,\n            exclusive: req.exclusive,\n            ...(req.ifMatch !== undefined ? { ifMatch: req.ifMatch } : {}),\n          },\n          ownerOf(req)\n        )\n      );\n    case 'read':\n      return h.read(req.fh, req.offset, req.size);\n    case 'write':\n      return h.write(req.fh, req.offset, req.bytes);\n    case 'release':\n      return h.release(req.fh);\n    case 'mkdir':\n      return ownerOf(req) ? h.mkdir(req.path, ownerOf(req)) : h.mkdir(req.path);\n    case 'rmdir':\n      return h.rmdir(req.path);\n    case 'unlink':\n      return h.unlink(req.path);\n    case 'rename':\n      return h.rename(req.from, req.to);\n    case 'link':\n      if (!h.link) throw fsError('EPERM', 'this file system has no hard links');\n      return h.link(req.from, req.to);\n    case 'symlink':\n      if (!h.symlink) throw fsError('EPERM', 'this file system has no symlinks');\n      return ownerOf(req)\n        ? h.symlink(req.target, req.path, ownerOf(req))\n        : h.symlink(req.target, req.path);\n    case 'readlink':\n      if (!h.readlink) throw fsError('EINVAL', `${req.path} is not a symlink`);\n      return h.readlink(req.path);\n    case 'setattr':\n      return h.setattr?.(req.path, {\n        ...(req.mode !== undefined ? { mode: req.mode } : {}),\n        ...(req.mtime !== undefined ? { mtime: req.mtime } : {}),\n        ...(req.size !== undefined ? { size: req.size } : {}),\n        ...(req.uid !== undefined ? { uid: req.uid } : {}),\n        ...(req.gid !== undefined ? { gid: req.gid } : {}),\n      });\n    case 'statfs':\n      return h.statfs?.() ?? null;\n    default:\n      throw fsError('ENOSYS', `unknown driver op ${(req as { op: string }).op}`);\n  }\n}\n\nexport function serveFilesystem(\n  port: DriverPort,\n  handlers: FilesystemHandlers,\n  capabilities: DriverCapabilities = {},\n  options: { owned?: boolean } = {}\n): ServedFilesystem {\n  let open = false;\n  const reply = (message: object, transfer: Transferable[] = []) =>\n    port.postMessage(message, transfer);\n  async function hello(message: KernelDriverHello): Promise<void> {\n    const refused = driverVersionError(message.protocol);\n    if (refused) {\n      reply({ hello: { protocol: DRIVER_PROTOCOL, error: refused, errno: 'EPROTO' } });\n      return;\n    }\n    try {\n      const refined = await handlers.mount?.(message.mount);\n      open = true;\n      reply({\n        hello: { protocol: DRIVER_PROTOCOL, capabilities: { ...capabilities, ...refined } },\n      });\n    } catch (err) {\n      const code = (err as { code?: unknown })?.code;\n      reply({\n        hello: {\n          protocol: DRIVER_PROTOCOL,\n          error: err instanceof Error ? err.message : String(err),\n          errno: typeof code === 'string' ? code : 'EIO',\n        },\n      });\n    }\n  }\n  port.addEventListener('message', (event) => {\n    const data = event.data as { hello?: KernelDriverHello } & DriverRequest;\n    if (data.hello) {\n      void hello(data.hello);\n      return;\n    }\n    if (!open) return;\n    dispatch(handlers, data).then(\n      (result) => {\n        if (result instanceof Uint8Array) {\n          const whole = result.byteOffset === 0 && result.byteLength === result.buffer.byteLength;\n          const bytes = options.owned && whole ? result : fresh(result);\n          reply({ id: data.id, result: bytes }, [bytes.buffer]);\n        } else reply({ id: data.id, result: result ?? null });\n      },\n      (err: unknown) => {\n        const code = (err as { code?: unknown })?.code;\n        reply({\n          id: data.id,\n          errno: typeof code === 'string' ? code : 'EIO',\n          message: err instanceof Error ? err.message : String(err),\n        });\n      }\n    );\n  });\n  port.start?.();\n  return { invalidate: (paths) => reply({ invalidate: paths }) };\n}\n", "import { attachKernel } from '../client/attach.ts';\nimport type { MessagePortLike } from '../client/protocol.ts';\nimport type { RealmTransportRequest, RealmTransportResponse } from '../kernel/net/transport.ts';\nimport { type FilesystemHandlers, serveFilesystem } from './driver.ts';\nimport { DRIVER_PROTOCOL, type DriverCapabilities } from './protocol.ts';\n\nexport interface DriverStart {\n  code: string;\n  driver: MessagePortLike;\n  client: MessagePortLike;\n}\n\nexport interface DriverEnv {\n  fetch(\n    request: Omit<RealmTransportRequest, 'signal'> & { signal?: AbortSignal }\n  ): Promise<RealmTransportResponse>;\n}\n\nexport type DriverFactory = (\n  env: DriverEnv\n) =>\n  | Promise<{ handlers: FilesystemHandlers; capabilities?: DriverCapabilities }>\n  | { handlers: FilesystemHandlers; capabilities?: DriverCapabilities };\n\nexport async function hostDriver(\n  start: DriverStart,\n  load: (code: string) => Promise<{ default?: unknown }>\n): Promise<void> {\n  try {\n    const factory = (await load(start.code)).default;\n    if (typeof factory !== 'function') {\n      throw new Error('a slicc file system module must export a default function');\n    }\n    const client = await attachKernel(start.client, { locks: null });\n    const made = await (factory as DriverFactory)({ fetch: (request) => client.fetch(request) });\n    serveFilesystem(start.driver, made.handlers, made.capabilities ?? {});\n  } catch (err) {\n    start.driver.postMessage({\n      hello: {\n        protocol: DRIVER_PROTOCOL,\n        error: `the driver did not start: ${err instanceof Error ? err.message : String(err)}`,\n        errno: 'EIO',\n      },\n    });\n  }\n}\n", "export const BLOCKED_GLOBALS: readonly string[] = [\n  'XMLHttpRequest',\n  'WebSocketStream',\n  'WebTransport',\n  'EventSource',\n  'importScripts',\n  'indexedDB',\n  'caches',\n  'cookieStore',\n  'Worker',\n  'SharedWorker',\n  'BroadcastChannel',\n  'postMessage',\n  'close',\n  'webkitRequestFileSystem',\n  'webkitRequestFileSystemSync',\n  'webkitResolveLocalFileSystemURL',\n  'webkitResolveLocalFileSystemSyncURL',\n];\n\nexport const BLOCKED_NAVIGATOR: readonly string[] = [\n  'storage',\n  'storageBuckets',\n  'locks',\n  'serviceWorker',\n  'usb',\n  'hid',\n  'serial',\n];\n\nexport const OPEN_SLOTS: readonly string[] = ['fetch', 'WebSocket'];\n\nfunction chain(target: object): object[] {\n  const out: object[] = [];\n  for (let at: object | null = target; at && at !== Object.prototype; ) {\n    out.push(at);\n    at = Object.getPrototypeOf(at);\n  }\n  return out;\n}\n\nexport function hide(target: object, names: readonly string[]): void {\n  for (const name of names) {\n    const holders = chain(target);\n    for (const holder of holders) {\n      if (Object.getOwnPropertyDescriptor(holder, name)?.configurable) {\n        Reflect.deleteProperty(holder, name);\n      }\n    }\n    const kept = holders.slice(1).some((holder) => Object.hasOwn(holder, name));\n    const defined = Reflect.defineProperty(target, name, {\n      value: undefined,\n      writable: false,\n      enumerable: false,\n      configurable: false,\n    });\n    if (kept || (!defined && Reflect.get(target, name) !== undefined)) {\n      throw new Error(`slicc-kernel: cannot withhold ${name} from a JS program`);\n    }\n  }\n}\n\nexport function vacate(target: object, names: readonly string[]): void {\n  for (const name of names) {\n    for (let at: object | null = target; at && at !== Object.prototype; ) {\n      if (Object.getOwnPropertyDescriptor(at, name)?.configurable) Reflect.deleteProperty(at, name);\n      at = Object.getPrototypeOf(at);\n    }\n    Reflect.defineProperty(target, name, {\n      value: undefined,\n      writable: true,\n      enumerable: false,\n      configurable: true,\n    });\n    if (Reflect.get(target, name) !== undefined) {\n      throw new Error(`slicc-kernel: cannot withhold ${name} from a JS program`);\n    }\n  }\n}\n\nexport function lockdown(scope: object = globalThis): void {\n  hide(scope, BLOCKED_GLOBALS);\n  vacate(scope, OPEN_SLOTS);\n  const navigator = (scope as { navigator?: unknown }).navigator;\n  if (navigator && typeof navigator === 'object') hide(navigator, BLOCKED_NAVIGATOR);\n}\n", "import { type DriverStart, hostDriver } from './mount/host.ts';\nimport { lockdown } from './process/js/lockdown.ts';\n\naddEventListener(\n  'message',\n  (event) =>\n    void hostDriver((event as MessageEvent<DriverStart>).data, (code) => {\n      const url = URL.createObjectURL(new Blob([code], { type: 'text/javascript' }));\n      lockdown();\n      return import(url);\n    }),\n  { once: true }\n);\n"],
   "mappings": ";AAgBO,SAAS,aACd,MACA,MACA,SACA,QACY;AACZ,MAAI;AACJ,MAAI,OAAO;AACX,QAAM,MAAM,MAAM;AAChB,WAAO;AACP,SAAK,MAAM;AACX,aAAS;AAAA,EACX;AACA,QAAM,SAAS,CAAC,WAA0B;AACxC,QAAI,KAAM;AACV,SAAK,YAAY,EAAE,OAAO,OAAO,CAAC;AAClC,QAAI;AAAA,EACN;AACA,OAAK,iBAAiB,WAAW,CAAC,EAAE,KAAK,MAAkD;AACzF,QAAI,KAAK,MAAM,OAAW,OAAM,KAAK,KAAK,CAAC;AAAA,aAClC,KAAK,SAAS,CAAC,MAAM;AAC5B,UAAI;AACJ,YAAM,MAAM;AAAA,IACd;AAAA,EACF,CAAC;AACD,OAAK,QAAQ;AACb,MAAI,QAAuB,CAAC,YAAY,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE;AAAA,IAC9D,CAAC,WAAW;AACV,aAAO;AACP,UAAI,KAAM,QAAO,OAAO,MAAM;AAC9B,aAAO,YAAY,CAAC,MAAM;AACxB,YAAI,CAAC,KAAM,MAAK,YAAY,EAAE,EAAE,CAAC;AAAA,MACnC;AACA,aAAO,UAAU,CAAC,WAAW,OAAO,UAAU,IAAI;AAClD,WAAK,YAAY,EAAE,MAAM,KAAK,CAAC;AAAA,IACjC;AAAA,IACA,CAAC,MAAe;AACd,UAAI,KAAM;AACV,WAAK,YAAY,EAAE,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,EAAE,CAAC;AACtE,UAAI;AAAA,IACN;AAAA,EACF;AACA,SAAO,MAAM;AACX,QAAI,KAAM;AACV,UAAM,MAAM;AACZ,WAAO,sBAAsB;AAAA,EAC/B;AACF;;;AC7DO,IAAM,gBAAgB,KAAK,OAAO;AAClC,IAAM,gBAAgB,KAAK,OAAO;AAClC,IAAM,UAAU;AAEhB,SAAS,YAAY,SAAwC;AAClE,SAAO,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,OAAO,OAAO,EAAE,SAAS,QAAQ;AAC1F;AAEO,IAAM,eAAN,MAAmE;AAAA,EACvD,QAAiC,CAAC;AAAA,EAClC;AAAA,EACT;AAAA,EACA,OAAO;AAAA,EACP,QAAQ;AAAA,EACC;AAAA,EACA;AAAA,EACR;AAAA,EACD;AAAA,EAER,YAAY,UAAsB,QAAQ,eAAe,OAA6B;AACpF,SAAK,WAAW;AAChB,SAAK,QAAQ;AACb,SAAK,QAAQ;AACb,SAAK,SAAS,IAAI,QAAQ,CAAC,YAAY;AACrC,WAAK,SAAS;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,KAAK,SAAsC;AACzC,QAAI,KAAK,MAAO;AAChB,UAAM,OAAO,YAAY,OAAO;AAChC,UAAM,OAAO,OAAO;AACpB,QAAI,QAAS,KAAK,MAAM,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,OAAQ;AACpE,YAAM,SAAS,OACX,qBAAqB,aAAa,WAClC,QAAQ,KAAK,KAAK;AACtB,WAAK,IAAI,EAAE,MAAM,SAAS,OAAO,CAAC;AAClC,WAAK,SAAS;AACd;AAAA,IACF;AACA,SAAK,QAAQ;AACb,SAAK,MAAM,KAAK,OAAO;AACvB,SAAK,KAAK;AAAA,EACZ;AAAA,EAEA,IAAI,OAAkC;AACpC,QAAI,KAAK,MAAO;AAChB,SAAK,QAAQ;AACb,SAAK,OAAO,KAAK;AACjB,SAAK,KAAK;AAAA,EACZ;AAAA,EAEQ,OAAa;AACnB,UAAM,SAAS,KAAK;AACpB,SAAK,SAAS;AACd,aAAS;AAAA,EACX;AAAA,EAEA,QAAQ,OAAO,aAAa,IAA0C;AACpE,eAAS;AACP,YAAM,OAAO,KAAK,MAAM,MAAM;AAC9B,UAAI,SAAS,QAAW;AACtB,cAAM,IAAI,YAAY,IAAI;AAC1B,aAAK,QAAQ;AACb,aAAK,QAAQ,CAAC;AACd,cAAM;AACN;AAAA,MACF;AACA,UAAI,KAAK,MAAO;AAChB,YAAM,IAAI,QAAc,CAAC,YAAY;AACnC,aAAK,SAAS;AAAA,MAChB,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;ACxBO,IAAM,iBAAN,cAA6B,MAAM;AAAA,EAC/B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAiB,MAAe;AAC3D,UAAM,OAAO;AACb,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAOO,IAAM,kBAAN,MAAgD;AAAA,EAC5C;AAAA,EAEQ;AAAA,EAEA,UAAU,oBAAI,IAAoB;AAAA,EAE3C,SAAS;AAAA,EAEA,UAAU,oBAAI,IAA6D;AAAA,EAEpF;AAAA,EAER,YAAY,MAAqB,QAA8B;AAC7D,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,QAAQ,OAA6B;AACnC,UAAM,SAAS,KAAK,QAAQ,IAAI,MAAM,GAAG;AACzC,QAAI,UAAU,KAAK,SAAS,OAAO,MAAM,EAAG;AAC5C,UAAM,SAAS,KAAK,QAAQ,IAAI,MAAM,GAAG;AACzC,QAAI,CAAC,OAAQ;AACb,SAAK,QAAQ,OAAO,MAAM,GAAG;AAC7B,QAAI,MAAM,QAAQ,SAAS;AACzB,aAAO,OAAO,IAAI,eAAe,MAAM,SAAS,MAAM,QAAQ,MAAM,IAAI,CAAC;AAAA,IAC3E,MAAO,QAAO,QAAQ,KAAK;AAAA,EAC7B;AAAA,EAEQ,SACN,OACA,QACS;AACT,QAAI,MAAM,QAAQ,aAAc,QAAO,MAAM,KAAK,MAAM,IAAI;AAAA,aACnD,MAAM,QAAQ,WAAY,QAAO,MAAM,MAAM,CAAC;AAAA,aAC9C,MAAM,QAAQ,aAAa;AAClC,WAAK,QAAQ,OAAO,MAAM,GAAG;AAC7B,aAAO,MAAM,IAAI,EAAE,MAAM,MAAM,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC7D,MAAO,QAAO;AACd,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,OAAoB;AACvB,SAAK,UAAU;AACf,eAAW,UAAU,KAAK,QAAQ,OAAO,EAAG,QAAO,OAAO,KAAK;AAC/D,SAAK,QAAQ,MAAM;AACnB,eAAW,UAAU,KAAK,QAAQ,OAAO;AACvC,aAAO,MAAM,IAAI,EAAE,MAAM,MAAM,QAAQ,MAAM,QAAQ,CAAC;AACxD,SAAK,QAAQ,MAAM;AAAA,EACrB;AAAA,EAEQ,IAAI,MAA8C;AACxD,QAAI,KAAK,QAAS,QAAO,QAAQ,OAAO,KAAK,OAAO;AACpD,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,SAAS,OAAO,CAAC;AAC9C,WAAK,KAAK,YAAY,IAAI;AAAA,IAC5B,CAAC;AAAA,EACH;AAAA,EAEQ,OAAO,KAAmB;AAChC,UAAM,SAAS,KAAK,QAAQ,IAAI,GAAG;AACnC,SAAK,QAAQ,OAAO,GAAG;AACvB,YAAQ,OAAO,IAAI,eAAe,2BAA2B,CAAC;AAC9D,SAAK,KAAK,YAAY,EAAE,KAAK,UAAU,IAAI,CAAC;AAAA,EAC9C;AAAA,EAEA,MAAM,MAAM,SAAiE;AAC3E,UAAM,MAAM,EAAE,KAAK;AACnB,UAAM,EAAE,OAAO,IAAI;AACnB,WAAO,eAAe;AACtB,QAAI,WAAW;AACf,UAAM,QAAQ,MAAM;AAClB,iBAAW;AACX,WAAK,OAAO,GAAG;AAAA,IACjB;AACA,WAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AACtD,UAAM,SAAS,MAAM;AACnB,UAAI,SAAU;AACd,iBAAW;AACX,aAAO,oBAAoB,SAAS,KAAK;AAAA,IAC3C;AACA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,KAAK,IAAI;AAAA,QACpB,KAAK;AAAA,QACL;AAAA,QACA,KAAK,QAAQ;AAAA,QACb,QAAQ,QAAQ;AAAA,QAChB,SAAS,QAAQ;AAAA,QACjB,GAAI,QAAQ,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,MAC/C,CAAC;AAAA,IACH,SAAS,GAAG;AACV,aAAO;AACP,YAAM;AAAA,IACR;AACA,UAAM,EAAE,QAAQ,YAAY,SAAS,KAAK,YAAY,UAAU,IAAI;AAIpE,UAAM,OAAO,YAA6C;AACxD,UAAI,SAAU,QAAO;AACrB,YAAM,QAAQ,MAAM,KAAK,IAAI,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAe;AACvE,eAAO;AACP,cAAM;AAAA,MACR,CAAC;AACD,UAAI,MAAM,QAAQ,QAAS,QAAO,MAAM;AACxC,aAAO;AACP,aAAO;AAAA,IACT;AACA,UAAM,SAAS,YAAY;AACzB,UAAI,SAAU;AACd,aAAO;AACP,WAAK,OAAO,GAAG;AAAA,IACjB;AACA,WAAO;AAAA,MACL,GAAI,aAAa,EAAE,KAAK,WAAW,IAAI,CAAC;AAAA,MACxC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM;AAAA,QACJ,CAAC,OAAO,aAAa,GAAG,OAAO;AAAA,UAC7B,MAAM,YAAY;AAChB,kBAAM,QAAQ,MAAM,KAAK;AACzB,mBAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,MAAM,IAAI,EAAE,OAAO,QAAW,MAAM,KAAK;AAAA,UAChF;AAAA,UACA,QAAQ,YAAY;AAClB,kBAAM,OAAO;AACb,mBAAO,EAAE,OAAO,QAAW,MAAM,KAAK;AAAA,UACxC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,SAAyD;AACvE,UAAM,MAAM,EAAE,KAAK;AACnB,UAAM,EAAE,OAAO,IAAI;AACnB,WAAO,eAAe;AACtB,UAAM,QAAQ,MAAM,KAAK,OAAO,GAAG;AACnC,WAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AACtD,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,KAAK,IAAI;AAAA,QACtB,KAAK;AAAA,QACL;AAAA,QACA,KAAK,QAAQ;AAAA,QACb,WAAW,QAAQ;AAAA,QACnB,SAAS,QAAQ;AAAA,MACnB,CAAC;AAAA,IACH,UAAE;AACA,aAAO,oBAAoB,SAAS,KAAK;AAAA,IAC3C;AACA,UAAM,QAAQ,CAAC,MAAe,WAC5B,KAAK,KAAK,YAAY,EAAE,KAAK,YAAY,KAAK,MAAM,OAAO,CAAC;AAC9D,UAAM,QAAQ,IAAI;AAAA,MAChB,MAAM,MAAM,KAAM,sBAAsB;AAAA,MACxC,OAAO;AAAA,MACP,CAAC,MAAM,KAAK,KAAK,YAAY,EAAE,KAAK,eAAe,KAAK,EAAE,CAAC;AAAA,IAC7D;AACA,QAAI,UAAU;AACd,SAAK,QAAQ,IAAI,KAAK,EAAE,OAAO,OAAO,CAAC,MAAM,MAAM,WAAW,GAAG,CAAC;AAClE,WAAO;AAAA,MACL,UAAW,OAAyD;AAAA,MACpE,IAAI,WAAW;AACb,eAAO;AAAA,MACT;AAAA,MACA,MAAM,CAAC,SAAS;AACd,mBAAW,YAAY,IAAI;AAC3B,aAAK,KAAK,YAAY,EAAE,KAAK,WAAW,KAAK,KAAK,CAAC;AAAA,MACrD;AAAA,MACA,UAAU;AAAA,MACV;AAAA,MACA,QAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACF;;;ACrPO,SAAS,MAAM,OAAmB,QAAQ,GAAG,MAAM,MAAM,QAAoB;AAClF,SAAO,IAAI,WAAW,MAAM,SAAS,OAAO,GAAG,CAAC;AAClD;;;ACwBO,SAAS,cAAc,SAA4C;AACxE,QAAM,OAAO,WAAW,KAAK,OAAO,IAAI,CAAC;AACzC,SAAO,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;AAC/D;AAEO,SAAS,WAAW,MAAkB,SAAkC;AAC7E,MAAI,SAAS;AACb,MAAI;AACJ,QAAM,OAAuE,CAAC;AAC9E,QAAM,WAAW,IAAI,eAA2B;AAAA,IAC9C,MAAM,YAAY;AAChB,eAAS;AAAA,IACX;AAAA,IACA,OAAO;AACL,UAAI,CAAC,OAAQ,MAAK,YAAY,EAAE,MAAM,KAAK,CAAC;AAAA,IAC9C;AAAA,IACA,SAAS;AACP,eAAS;AACT,YAAM;AAAA,IACR;AAAA,EACF,CAAC;AACD,QAAM,SAAS,CAACA,UAAiB;AAC/B,UAAM,aAAa;AACnB,aAAS;AACT,eAAW,OAAO,KAAK,OAAO,CAAC,GAAG;AAChC,UAAIA,MAAM,KAAI,OAAOA,KAAI;AAAA,UACpB,KAAI,QAAQ;AAAA,IACnB;AACA,QAAI,CAAC,WAAY;AACjB,QAAIA,MAAM,YAAW,MAAMA,KAAI;AAAA,QAC1B,YAAW,MAAM;AAAA,EACxB;AACA,WAAS,OAAa;AACpB,QAAI,OAAQ;AACZ,aAAS;AACT,SAAK,MAAM;AACX,cAAU;AAAA,EACZ;AACA,WAAS,QAAc;AACrB,QAAI,CAAC,OAAQ,MAAK,YAAY,EAAE,OAAO,KAAK,CAAC;AAC7C,SAAK;AACL,WAAO;AAAA,EACT;AACA,OAAK,iBAAiB,WAAW,CAAC,EAAE,KAAK,MAAiC;AACxE,QAAI,gBAAgB,WAAY,SAAQ,QAAQ,IAAI;AAAA,aAC3C,SAAS,KAAM,MAAK,MAAM,GAAG,QAAQ;AAAA,aACrC,SAAS,KAAM,QAAO;AAAA,QAC1B,QAAO,cAAc,KAAK,KAAK,CAAC;AAAA,EACvC,CAAC;AACD,OAAK,QAAQ;AACb,QAAM,WAAW,IAAI,eAA2B;AAAA,IAC9C,MAAM,OAAO;AACX,UAAI,OAAQ,OAAM,cAAc,iCAAiC;AACjE,YAAM,OAAO,MAAM,KAAK;AACxB,YAAM,QAAQ,IAAI,QAAc,CAAC,SAAS,WAAW,KAAK,KAAK,EAAE,SAAS,OAAO,CAAC,CAAC;AACnF,WAAK,YAAY,MAAM,CAAC,KAAK,MAAM,CAAC;AACpC,aAAO;AAAA,IACT;AAAA,IACA,QAAQ;AACN,UAAI,CAAC,OAAQ,MAAK,YAAY,EAAE,KAAK,KAAK,CAAC;AAAA,IAC7C;AAAA,IACA,QAAQ;AACN,YAAM;AAAA,IACR;AAAA,EACF,CAAC;AACD,QAAM,OAAO,CAAC,UAAiB;AAC7B,SAAK;AACL,WAAO,KAAK;AAAA,EACd;AACA,SAAO,EAAE,UAAU,UAAU,OAAO,KAAK;AAC3C;;;AC1FA,IAAM,cAAc,oBAAI,IAAI,CAAC,QAAQ,cAAc,kBAAkB,mBAAmB,CAAC;AACzF,IAAM,UAAU,IAAI,YAAY;AAChC,IAAM,SAAS,IAAI,YAAY,QAAQ;AAEvC,IAAM,aAAN,MAAiB;AAAA,EACP,WAAW,IAAI,WAAW,CAAC;AAAA,EAClB;AAAA,EAEjB,YAAY,QAAiD;AAC3D,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAc,OAAyB;AACrC,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK,OAAO,KAAK;AAC/C,QAAI,KAAM,QAAO;AACjB,UAAM,SAAS,IAAI,WAAW,KAAK,SAAS,SAAS,MAAM,MAAM;AACjE,WAAO,IAAI,KAAK,QAAQ;AACxB,WAAO,IAAI,OAAO,KAAK,SAAS,MAAM;AACtC,SAAK,WAAW;AAChB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,MAAM,QAAiD;AAC3D,UAAM,SAAS,QAAQ,OAAO,MAAM;AACpC,eAAS;AACP,YAAM,KAAK,QAAQ,KAAK,UAAU,MAAM;AACxC,UAAI,MAAM,EAAG,QAAO,KAAK,KAAK,KAAK,OAAO,MAAM;AAChD,UAAI,CAAE,MAAM,KAAK,KAAK,EAAI,QAAO;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,KAA8C;AACvD,QAAI,KAAK,SAAS,WAAW,KAAK,CAAE,MAAM,KAAK,KAAK,EAAI,QAAO;AAC/D,WAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,MAAM,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,QAAQ,OAAgD;AAC5D,WAAO,KAAK,SAAS,SAAS,MAAO,KAAI,CAAE,MAAM,KAAK,KAAK,EAAI,QAAO;AACtE,WAAO,KAAK,KAAK,KAAK;AAAA,EACxB;AAAA,EAEQ,KAAK,OAA2B;AACtC,UAAM,MAAM,KAAK,SAAS,MAAM,GAAG,KAAK;AACxC,SAAK,WAAW,KAAK,SAAS,MAAM,KAAK;AACzC,WAAO;AAAA,EACT;AACF;AAEA,SAAS,QAAQ,UAAsB,QAA4B;AACjE,QAAO,UAAS,IAAI,GAAG,IAAI,OAAO,UAAU,SAAS,QAAQ,KAAK;AAChE,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,KAAI,SAAS,IAAI,CAAC,MAAM,OAAO,CAAC,EAAG,UAAS;AACpF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAQA,SAAS,UAAU,OAAiC;AAClD,QAAM,CAAC,aAAa,IAAI,GAAG,KAAK,IAAI,OAAO,OAAO,KAAK,EAAE,MAAM,MAAM;AACrE,QAAM,QAAQ,oCAAoC,KAAK,UAAU;AACjE,MAAI,CAAC,MAAO,OAAM,cAAc,qCAAqC,WAAW,MAAM,GAAG,EAAE,CAAC,EAAE;AAC9F,QAAM,UAAmC,CAAC;AAC1C,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,QAAQ,EAAG,SAAQ,KAAK,CAAC,KAAK,MAAM,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,MAAM,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;AAAA,EACzF;AACA,SAAO,EAAE,QAAQ,OAAO,MAAM,CAAC,CAAC,GAAG,YAAY,MAAM,CAAC,KAAK,IAAI,QAAQ;AACzE;AAEA,SAAS,OAAO,MAAoB,MAAkC;AACpE,SAAO,KAAK,QAAQ,KAAK,CAAC,CAAC,GAAG,MAAM,IAAI,YAAY,MAAM,IAAI,IAAI,CAAC;AACrE;AAEA,gBAAgB,QAAQ,QAAgD;AACtE,aAAS;AACP,UAAM,OAAO,MAAM,OAAO,MAAM,MAAM;AACtC,QAAI,CAAC,KAAM,OAAM,cAAc,sCAAsC;AACrE,UAAM,OAAO,OAAO,SAAS,OAAO,OAAO,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE;AAC/E,QAAI,CAAC,OAAO,SAAS,IAAI,EAAG,OAAM,cAAc,gCAAgC;AAChF,QAAI,SAAS,EAAG;AAChB,UAAM,OAAO,MAAM,OAAO,QAAQ,IAAI;AACtC,QAAI,CAAC,QAAQ,CAAE,MAAM,OAAO,QAAQ,CAAC,EAAI,OAAM,cAAc,6BAA6B;AAC1F,UAAM;AAAA,EACR;AACF;AAEA,gBAAgB,QAAQ,QAAoB,QAA4C;AACtF,MAAI,OAAO;AACX,SAAO,OAAO,GAAG;AACf,UAAM,OAAO,MAAM,OAAO,KAAK,IAAI;AACnC,QAAI,CAAC,KAAM,OAAM,cAAc,8BAA8B;AAC7D,YAAQ,KAAK;AACb,UAAM;AAAA,EACR;AACF;AAEA,gBAAgB,WAAW,QAAgD;AACzE,WAAS,OAAO,MAAM,OAAO,KAAK,KAAK,GAAG,MAAM,OAAO,MAAM,OAAO,KAAK,KAAK,EAAG,OAAM;AACzF;AAEA,SAAS,OAAO,QAAoB,MAAoB,QAAgB;AACtE,MAAI,WAAW,UAAU,KAAK,WAAW,OAAO,KAAK,WAAW,IAAK,QAAO;AAC5E,MAAI,OAAO,MAAM,mBAAmB,GAAG,YAAY,EAAE,SAAS,SAAS,EAAG,QAAO,QAAQ,MAAM;AAC/F,QAAM,SAAS,OAAO,MAAM,gBAAgB;AAC5C,MAAI,WAAW,OAAW,QAAO,WAAW,MAAM;AAClD,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,cAAc,IAAI,GAAG;AAC/D,UAAM,cAAc,uCAAuC,MAAM,EAAE;AAAA,EACrE;AACA,SAAO,QAAQ,QAAQ,IAAI;AAC7B;AAEA,SAAS,OAAO,QAAoC,QAAuB,QAAsB;AAC/F,SAAO,IAAI,eAA2B;AAAA,IACpC,MAAM,YAAY;AAChB,cAAQ,iBAAiB,SAAS,MAAM,WAAW,MAAM,OAAO,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,IACzF;AAAA,IACA,MAAM,KAAK,YAAY;AACrB,UAAI;AACF,cAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,YAAI,KAAK,MAAM;AACb,qBAAW,MAAM;AACjB,iBAAO,MAAM;AAAA,QACf,MAAO,YAAW,QAAQ,KAAK,KAAK;AAAA,MACtC,SAAS,KAAK;AACZ,mBAAW,MAAM,GAAG;AACpB,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAAA,IACA,SAAS;AACP,aAAO,MAAM;AAAA,IACf;AAAA,EACF,CAAC;AACH;AAEA,eAAe,aAAa,SAAuC;AACjE,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,OAAO,QAAQ,OAAO,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC,IAAI;AAC1E,QAAM,QAAQ,CAAC,GAAG,QAAQ,MAAM,IAAI,IAAI,QAAQ,GAAG,IAAI,MAAM,aAAa,SAAS,IAAI,IAAI,EAAE;AAC7F,UAAQ,QAAQ,QAAQ,CAAC,OAAO,SAAS;AACvC,QAAI,CAAC,YAAY,IAAI,IAAI,EAAG,OAAM,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE;AAAA,EAC5D,CAAC;AACD,MAAI,KAAM,OAAM,KAAK,mBAAmB,KAAK,MAAM,EAAE;AACrD,QAAM,KAAK,qBAAqB,IAAI,EAAE;AACtC,QAAM,OAAO,QAAQ,OAAO,MAAM,KAAK,MAAM,CAAC;AAC9C,QAAM,MAAM,IAAI,WAAW,KAAK,UAAU,MAAM,UAAU,EAAE;AAC5D,MAAI,IAAI,IAAI;AACZ,MAAI,KAAM,KAAI,IAAI,MAAM,KAAK,MAAM;AACnC,SAAO;AACT;AAEA,eAAsB,cACpB,MACA,OACA,SACmB;AACnB,UAAQ,QAAQ,eAAe;AAC/B,QAAM,UAAU,iBAAiB,UAAU,QAAQ,IAAI,QAAQ,KAAK;AACpE,QAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,QAAM,SAAS,MAAM,KAAK;AAAA,IACxB,MAAM,QAAQ;AAAA,IACd,GAAI,QAAQ,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,EAC/C,CAAC;AACD,UAAQ,QAAQ,iBAAiB,SAAS,MAAM,OAAO,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;AAC9E,MAAI;AACF,UAAM,SAAS,OAAO,SAAS,UAAU;AACzC,UAAM,OAAO,MAAM,KAAK;AACxB,WAAO,YAAY;AACnB,UAAM,SAAS,IAAI,WAAW,OAAO,SAAS,UAAU,CAAC;AACzD,QAAI;AACJ,OAAG;AACD,YAAM,MAAM,MAAM,OAAO,MAAM,UAAU;AACzC,UAAI,CAAC,IAAK,OAAM,cAAc,qDAAqD;AACnF,aAAO,UAAU,GAAG;AAAA,IACtB,SAAS,KAAK,UAAU,OAAO,KAAK,SAAS;AAC7C,UAAM,SAAS,OAAO,QAAQ,MAAM,QAAQ,MAAM;AAClD,QAAI,CAAC,OAAQ,QAAO,MAAM;AAC1B,WAAO,IAAI,SAAS,SAAS,OAAO,QAAQ,QAAQ,QAAQ,MAAM,IAAI,MAAM;AAAA,MAC1E,QAAQ,KAAK;AAAA,MACb,YAAY,KAAK;AAAA,MACjB,SAAS,KAAK;AAAA,IAChB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,MAAM;AACb,UAAM;AAAA,EACR;AACF;;;AC/LO,IAAM,WAAsC,CAAC,GAAG,CAAC;AAwHjD,SAAS,QAAQ,QAAgB,YAAyC;AAC/E,QAAM,QAAS,MAAsD,WAAW;AAChF,SAAO,OAAO,OAAO,YAAY,aAAa,QAAQ;AACxD;AAEO,SAAS,aAAa,QAAqC;AAChE,QAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI,OAAO,CAAC,IAAI;AAClD,MAAI,UAAU,SAAS,CAAC,EAAG,QAAO;AAClC,QAAM,QAAQ,OAAO,UAAU,WAAW,GAAG,KAAK,OAAO;AACzD,SAAO,gCAAgC,KAAK,uCAAuC,SAAS,KAAK,GAAG,CAAC;AACvG;;;AC1GO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,YAAY,UAAU,wDAAwD;AAC5E,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAChC;AAAA,EAET,YAAY,SAAiB,MAAe;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAiHA,IAAMC,WAAU,IAAI,YAAY;AAChC,IAAM,UAAU,CAAC,SACf,OAAO,SAAS,WAAWA,SAAQ,OAAO,IAAI,IAAI;AAEpD,IAAM,cAAc;AAAA,EAClB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,aAAa;AACf;AAEA,eAAe,SACb,OAC6C;AAC7C,MAAI,CAAC,MAAO,QAAO,EAAE,UAAU;AAAA,EAAC,EAAE;AAClC,QAAM,OAAO,uBAAuB,OAAO,WAAW,CAAC;AACvD,QAAM,UAAU,QAAQ,cAAoB;AAC5C,QAAM,OAAO,QAAQ,cAAoB;AACzC,OAAK,MAAM,QAAQ,MAAM,MAAM;AAC7B,YAAQ,QAAQ;AAChB,WAAO,KAAK;AAAA,EACd,CAAC;AACD,QAAM,QAAQ;AACd,SAAO,EAAE,MAAM,SAAS,MAAM,KAAK,QAAQ,EAAE;AAC/C;AAEA,SAAS,OAAO,QAAkC;AAChD,QAAM,MAAM,IAAI,WAAW,OAAO,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC,CAAC;AACnE,MAAI,KAAK;AACT,aAAW,SAAS,QAAQ;AAC1B,QAAI,IAAI,OAAO,EAAE;AACjB,UAAM,MAAM;AAAA,EACd;AACA,SAAO;AACT;AAEA,IAAM,UAAN,MAAc;AAAA,EACH,UAAU,QAAQ,cAA2B;AAAA,EAC7C,QAAQ,QAAQ,cAAqB;AAAA,EAC9C;AAAA,EACA;AAAA,EACiB,UAAU,oBAAI,IAAqB;AAAA,EAC3C,WAAW,oBAAI,IAA2C;AAAA,EAC1D,WAAW,oBAAI,IAAqB;AAAA,EAC5B,UAAU,oBAAI,IAAgB;AAAA,EAC/C,WAAsC;AAAA,EAC9B,SAAS;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAuB,SAAqB;AACtD,SAAK,OAAO;AACZ,SAAK,UAAU;AACf,SAAK,QAAQ,QAAQ,MAAM,MAAM,MAAS;AAC1C,SAAK,iBAAiB,WAAW,CAAC,UAAU,KAAK,QAAQ,MAAM,IAAI,CAAC;AACpE,SAAK,iBAAiB,SAAS,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC,CAAC;AACpE,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,KAAK,SAAuB;AAC1B,QAAI,CAAC,KAAK,QAAS,MAAK,KAAK,YAAY,OAAO;AAAA,EAClD;AAAA,EAEA,IAAI,OAAoB;AACtB,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,SAAK,QAAQ,OAAO,KAAK;AACzB,SAAK,QAAQ,KAAK,KAAK;AACvB,eAAW,SAAS,CAAC,GAAG,KAAK,OAAO,EAAG,OAAM;AAC7C,SAAK,QAAQ,MAAM;AACnB,eAAW,QAAQ,KAAK,QAAQ,OAAO,EAAG,MAAK,OAAO,KAAK;AAC3D,SAAK,QAAQ,MAAM;AACnB,SAAK,QAAQ;AACb,SAAK,KAAK,QAAQ;AAClB,SAAK,MAAM,QAAQ,KAAK;AAAA,EAC1B;AAAA,EAEA,QAAQ,MAAkB,WAAqB,CAAC,GAA2C;AACzF,UAAM,KAAK,EAAE,KAAK;AAClB,UAAM,EAAE,QAAQ,IAAI;AACpB,QAAI,QAAS,QAAO,EAAE,IAAI,MAAM,QAAQ,OAAO,OAAO,EAAE;AACxD,UAAM,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC5C,WAAK,QAAQ,IAAI,IAAI,EAAE,SAAS,QAAQ,GAAG,SAAS,CAAC;AACrD,WAAK,KAAK,YAAY,EAAE,GAAG,MAAM,GAAG,CAAC;AAAA,IACvC,CAAC;AACD,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EAEA,KAAK,MAAoC;AACvC,WAAO,KAAK,QAAQ,IAAI,EAAE;AAAA,EAC5B;AAAA,EAEQ,QAAQ,MAQP;AACP,QAAI,KAAK,WAAW,KAAK,MAAM;AAC7B,WAAK,QAAQ,IAAe;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,UAAU,QAAW;AAC5B,WAAK,SAAS,IAAI,KAAK,KAAK,IAAI,KAAK,MAAqB;AAC1D;AAAA,IACF;AACA,QAAI,KAAK,QAAQ,QAAW;AAC1B,WAAK,IAAI,IAAI,gBAAgB,KAAK,GAAG,CAAC;AACtC;AAAA,IACF;AACA,QAAI,KAAK,OAAO;AACd,WAAK,QAAQ,QAAQ,KAAK,KAAK;AAC/B;AAAA,IACF;AACA,QAAI,KAAK,QAAQ,QAAW;AAC1B,WAAK,QAAQ,QAAQ,IAAsB;AAC3C;AAAA,IACF;AACA,UAAM,QAAQ;AACd,UAAM,OAAO,KAAK,QAAQ,IAAI,MAAM,EAAE;AACtC,QAAI,CAAC,KAAM;AACX,QAAI,MAAM,OAAO,QAAW;AAC1B,WAAK,SAAS,MAAM,IAAI,MAAM,KAAmB;AACjD;AAAA,IACF;AACA,QAAI,MAAM,YAAY,QAAW;AAC/B,WAAK,UAAU,MAAM,OAAO;AAC5B;AAAA,IACF;AACA,SAAK,QAAQ,OAAO,MAAM,EAAE;AAC5B,QAAI,MAAM,UAAU,OAAW,MAAK,OAAO,IAAI,gBAAgB,MAAM,OAAO,MAAM,IAAI,CAAC;AAAA,QAClF,MAAK,QAAQ,MAAM,MAAM;AAAA,EAChC;AAAA,EAEQ,QAAQ,EAAE,SAAS,EAAE,cAAc,GAAG,QAAQ,GAAG,KAAK,GAAkB;AAC9E,UAAM,OAAO,iBAAiB,SAAY,SAAY,KAAK,SAAS,IAAI,YAAY;AACpF,QAAI,CAAC,QAAQ,KAAK,SAAS;AACzB,WAAK,YAAY,EAAE,OAAO,mCAAmC,CAAC;AAC9D,WAAK,MAAM;AACX;AAAA,IACF;AACA,UAAM,QAAQ,aAAa,MAAM,MAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,KAAK,CAAC;AAChF,SAAK,QAAQ,IAAI,KAAK;AAAA,EACxB;AACF;AAEA,eAAe,WACb,SACA,MACA,SAC4B;AAC5B,QAAM,MAAM,SAAS,GAAG,eAAe,YAAY;AAAA,EAAC,CAAC;AACrD,QAAM,MAAM;AAAA,IACV,IAAI;AAAA,IACJ,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD;AACA,QAAM,EAAE,IAAI,KAAK,IAAI,QAAQ,QAAQ,GAAG;AACxC,UAAQ,SAAS,IAAI,IAAI,IAAI;AAC7B,MAAI;AACF,UAAM;AAAA,EACR,SAAS,OAAO;AACd,YAAQ,SAAS,OAAO,EAAE;AAC1B,UAAM;AAAA,EACR;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AACX,UAAI,CAAC,QAAQ,SAAS,OAAO,EAAE,EAAG;AAClC,WAAK,QAAQ,KAAK,EAAE,IAAI,eAAe,cAAc,GAAG,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAClF;AAAA,EACF;AACF;AAEA,eAAe,OAAO,SAAkB,EAAE,MAAM,KAAK,GAAwC;AAC3F,QAAM,MAAM,EAAE,IAAI,QAAiB,MAAM,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG;AACnE,SAAO,WAAY,MAAM,MAAM,SAAS,GAAG,QAAQ,MAAM,QAAQ,KAAK,GAAG,CAAC,CAAiB;AAC7F;AAEA,eAAe,QACb,SACA,MACA,MACyB;AACzB,QAAM,EAAE,UAAU,UAAU,OAAO,OAAO,GAAG,GAAG,KAAK,IAAI;AACzD,MAAI,KAAK,SAAS;AAChB,UAAM,MAAM,SAAS,GAAG,8BAA8B,YAAY;AAAA,IAAC,CAAC;AACtE,MAAI,KAAK,SAAS,OAAW,OAAM,MAAM,SAAS,GAAG,mBAAmB,YAAY;AAAA,EAAC,CAAC;AACtF,QAAM,UAAU,QAAQ,cAAsB;AAC9C,QAAM,UAAU,EAAE,GAAG,MAAM,GAAI,UAAU,SAAY,EAAE,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,EAAG;AACrF,QAAM,EAAE,KAAK,IAAI,QAAQ;AAAA,IACvB,EAAE,IAAI,SAAS,MAAM,QAAQ;AAAA,IAC7B;AAAA,MACE,QAAQ,CAAC,IAAI,WAAW,OAAO,IAAI,WAAW,YAAY,KAAK;AAAA,MAC/D,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AACA,OAAK,MAAM,QAAQ,MAAM;AACzB,QAAM,MAAM,MAAM,QAAQ;AAC1B,QAAM,OAAO,KAAK,QAAQ;AAC1B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ,OAAO,OAAO,cACpB,KAAM,MAAM,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC;AAAA,EACrE;AACF;AAEA,eAAe,MACb,SACA,MACA,MAC0B;AAC1B,QAAM,EAAE,UAAU,UAAU,GAAG,KAAK,IAAI;AACxC,QAAM,SAAsC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE;AAC3D,QAAM,OAAO,EAAE,GAAG,IAAI,YAAY,GAAG,GAAG,IAAI,YAAY,EAAE;AAC1D,QAAM,MAAM,CAAC,IAAW,OAAgC,CAAC,UAAsB;AAC7E,WAAO,EAAE,EAAE,KAAK,KAAK;AACrB,SAAK,KAAK,EAAE,EAAE,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,EAC/C;AACA,QAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAAA,IACzC,GAAG;AAAA,IACH,UAAU,IAAI,GAAG,QAAQ;AAAA,IACzB,UAAU,IAAI,GAAG,QAAQ;AAAA,EAC3B,CAAC;AACD,QAAM,SAAS,MAAM,MAAM;AAC3B,QAAM,OAAO,CAAC,OAAc,IAAI,YAAY,EAAE,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;AACvE,SAAO,EAAE,KAAK,MAAM,KAAK,QAAQ,QAAQ,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,EAAE;AACpE;AAEA,eAAe,WACb,SACA,MACA,MACyB;AACzB,QAAM,EAAE,QAAQ,GAAG,QAAQ,IAAI;AAC/B,MAAI,KAAK,SAAS,OAAW,OAAM,MAAM,SAAS,GAAG,wBAAwB,YAAY;AAAA,EAAC,CAAC;AAC3F,MAAI,WAAW,UAAU;AACzB,QAAM,UAAwB,CAAC;AAC/B,QAAM,UAAU,QAAQ,cAAsB;AAC9C,QAAM,EAAE,IAAI,KAAK,IAAI,QAAQ;AAAA,IAC3B,EAAE,IAAI,iBAAiB,MAAM,QAAQ;AAAA,IACrC;AAAA,MACE,QAAQ,CAAC,KAAK,UAAW,WAAW,SAAS,KAAK,IAAI,QAAQ,KAAK,KAAK;AAAA,MACxE,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AACA,OAAK,MAAM,QAAQ,MAAM;AACzB,QAAM,MAAM,MAAM,QAAQ;AAC1B,QAAM,OAAO,CAAC,WACZ,KAAK,QAAQ,KAAK,EAAE,IAAI,YAAY,UAAU,IAAI,GAAG,OAAO,CAAC,EAAE,MAAM,MAAM,MAAS;AACtF,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,OAAO,MAAM;AACf,iBAAW;AACX,UAAI,KAAM,YAAW,SAAS,QAAQ,OAAO,CAAC,EAAG,MAAK,KAAK;AAAA,IAC7D;AAAA,IACA,OAAO,CAAC,SAAS,KAAK,EAAE,QAAQ,SAAS,OAAO,QAAQ,IAAI,EAAE,CAAC;AAAA,IAC/D,QAAQ,CAAC,MAAM,SAAS,KAAK,EAAE,QAAQ,UAAU,MAAM,KAAK,CAAC;AAAA,IAC7D,QAAQ,CAAC,SAAS,KAAK,EAAE,QAAQ,UAAU,QAAQ,KAAK,CAAC;AAAA,IACzD,OAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,CAAC;AAAA,EACvC;AACF;AAEA,SAAS,KAAK,SAA4B;AACxC,QAAM,KAAK,CAAC,WAAqB,SAAoB,QAAQ,KAAK,EAAE,IAAI,MAAM,QAAQ,KAAK,CAAC;AAC5F,QAAM,OAAO,OAAO,WAAqB,SAAoB,KAAM,MAAM,GAAG,QAAQ,GAAG,IAAI;AAC3F,SAAO;AAAA,IACL,UAAU,CAAC,SAAS,GAAG,YAAY,IAAI;AAAA,IACvC,UAAU,OAAO,SAAS,IAAI,YAAY,EAAE,OAAQ,MAAM,GAAG,YAAY,IAAI,CAAgB;AAAA,IAC7F,WAAW,CAAC,MAAM,SAAS,KAAK,aAAa,MAAM,IAAI;AAAA,IACvD,MAAM,CAAC,SAAS,GAAG,QAAQ,IAAI;AAAA,IAC/B,OAAO,CAAC,SAAS,GAAG,SAAS,IAAI;AAAA,IACjC,SAAS,CAAC,SAAS,GAAG,WAAW,IAAI;AAAA,IACrC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI;AAAA,IACnC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,MAAM,MAAM,EAAE,UAAU,IAAI;AAAA,IACvD,QAAQ,CAAC,MAAM,OAAO,KAAK,UAAU,MAAM,EAAE;AAAA,IAC7C,UAAU,CAAC,SAAS,GAAG,YAAY,IAAI;AAAA,IACvC,SAAS,CAAC,QAAQ,SAAS,KAAK,WAAW,QAAQ,IAAI;AAAA,IACvD,UAAU,CAAC,SAAS,GAAG,YAAY,IAAI;AAAA,IACvC,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;AAAA,IACnC,MAAM,MAAM,OAAO,SAAS,UAAU;AACpC,UAAI,QAAQ,SAAS,CAAC,IAAI,GAAG;AAC3B,cAAM,IAAI;AAAA,UACR,+BAA+B,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,UACzD;AAAA,QACF;AAAA,MACF;AACA,YAAM,EAAE,IAAI,MAAAC,MAAK,IAAI,QAAQ,QAAQ;AAAA,QACnC,IAAI;AAAA,QACJ;AAAA,QACA,WAAW,QAAQ,cAAc;AAAA,MACnC,CAAC;AACD,cAAQ,SAAS,IAAI,IAAI,QAAQ;AACjC,UAAI;AACF,cAAMA;AAAA,MACR,SAAS,OAAO;AACd,gBAAQ,SAAS,OAAO,EAAE;AAC1B,cAAM;AAAA,MACR;AACA,aAAO;AAAA,QACL,OAAO,MAAM;AACX,cAAI,CAAC,QAAQ,SAAS,OAAO,EAAE,EAAG;AAClC,eAAK,QAAQ,KAAK,EAAE,IAAI,WAAW,OAAO,GAAG,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,MAAM,SAAkB,OAAe,MAAc,KAA6B;AACzF,MAAI,QAAQ,SAAS,CAAC,IAAI,OAAO;AAC/B,WAAO,QAAQ;AAAA,MACb,IAAI;AAAA,QACF,+BAA+B,QAAQ,SAAS,KAAK,GAAG,CAAC,kBAAkB,IAAI;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI;AACb;AAEA,eAAe,MACb,SACA,MACA,WACsB;AACtB,UAAQ,KAAK,EAAE,OAAO,EAAE,UAAU,UAAU,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,EAAE,CAAC;AACzE,QAAM,QAAQ;AAAA,IACZ,MACE,QAAQ;AAAA,MACN,IAAI,gBAAgB,gDAAgD,SAAS,KAAK;AAAA,IACpF;AAAA,IACF;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,QAAQ,QAAQ;AAAA,EAChC,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACA,QAAM,UAAU,MAAM,SAAS,aAAa,MAAM,QAAQ;AAC1D,MAAI,SAAS;AACX,UAAM,QAAQ,IAAI,MAAM,OAAO;AAC/B,YAAQ,IAAI,KAAK;AACjB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,eAAsB,aACpB,MACA,UAAyB,CAAC,GACH;AACvB,QAAM,QAAQ,QAAQ,UAAU,OAAO,SAAa,QAAQ,SAAS,QAAQ;AAC7E,QAAM,MAAM,MAAM,SAAS,KAAK;AAChC,QAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,OAAO;AAC7C,QAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ,aAAa,GAAM;AACxE,UAAQ,WAAW,MAAM;AACzB,MAAI,MAAM,QAAQ,MAAO,MAAK,MAAM,QAAQ,MAAM,MAAM,MAAM,QAAQ,IAAI,IAAI,gBAAgB,CAAC,CAAC;AAChG,QAAM,YAAY,IAAI;AAAA,IACpB,EAAE,aAAa,CAAC,SAAS,QAAQ,KAAK,IAAI,EAAE;AAAA,IAC5C,MAAM,UAAU;AAAA,EAClB;AACA,UAAQ,SAAS;AACjB,SAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB;AAAA,IACA,OAAO,MAAM,SAAS;AAAA,IACtB,QAAQ,QAAQ,MAAM;AAAA,IACtB,OAAO,CAAC,MAAM,OAAO,CAAC,MAAM,QAAQ,SAAS,MAAM,IAAI;AAAA,IACvD,KAAK,CAAC,MAAM,OAAO,CAAC,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,IACnD,cAAc,CAAC,MAAM,OAAO,CAAC,MAAM,WAAW,SAAS,MAAM,IAAI;AAAA,IACjE,IAAI,MAAM,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,IACnC,OAAO,CAAC,SACN,MAAM,SAAS,GAAG,SAAS,MAAM,QAAQ,KAAK,EAAE,IAAI,SAAS,KAAK,CAAC,CAAC;AAAA,IACtE,QAAQ,OAAO,WACb,KAAM,MAAM,MAAM,SAAS,GAAG,UAAU,MAAM,QAAQ,KAAK,EAAE,IAAI,UAAU,OAAO,CAAC,CAAC;AAAA,IACtF,QAAQ,MACN,MAAM,SAAS,GAAG,UAAU,MAAM,QAAQ,KAAK,EAAE,IAAI,SAAS,CAAC,CAAC;AAAA,IAClE,MAAM,OAAO,KAAK,SAAS,cAAc,KAAM,MAAM,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,OAAO,CAAC;AAAA,IAC7F,OAAO,CAAC,QAAQ;AACd,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI;AAC5B,aAAO,UAAU,MAAM,EAAE,GAAG,MAAM,QAAQ,UAAU,IAAI,gBAAgB,EAAE,OAAO,CAAC;AAAA,IACpF;AAAA,IACA,MAAM,CAACC,aAAY,OAAO,SAASA,QAAO;AAAA,IAC1C,eAAe,CAAC,OAAOA,aAAY,cAAc,CAAC,MAAM,OAAO,SAAS,CAAC,GAAG,OAAOA,QAAO;AAAA,IAC1F,IAAI,KAAK,OAAO;AAAA,IAChB,UAAU,CAAC,MAAMA,WAAU,CAAC,MAAM,WAAW,SAAS,MAAMA,QAAO;AAAA,IACnE,MAAM,MAAM,IAAI,CAAC,GAAG;AAClB,UAAI,QAAQ,QAAS;AACrB,YAAM,QACH,KAAK,EAAE,IAAI,UAAU,GAAI,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,EAAG,CAAC,EACxD,MAAM,MAAM,MAAS;AACxB,cAAQ,IAAI,IAAI,gBAAgB,uBAAuB,CAAC;AAAA,IAC1D;AAAA,EACF;AACF;;;ACjjBO,IAAM,kBAA6C,CAAC,GAAG,CAAC;AAiHxD,SAAS,mBAAmB,QAAqC;AACtE,QAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI,OAAO,CAAC,IAAI;AAClD,MAAI,UAAU,gBAAgB,CAAC,EAAG,QAAO;AACzC,QAAM,QAAQ,OAAO,UAAU,WAAW,GAAG,KAAK,OAAO;AACzD,SAAO,gCAAgC,KAAK,uCAAuC,gBAAgB,KAAK,GAAG,CAAC;AAC9G;;;ACxDA,SAAS,QAAQ,KAA2C;AAC1D,QAAM,QAAQ;AAAA,IACZ,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,IAChD,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,IAChD,GAAI,IAAI,SAAS,SAAY,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAAA,EACrD;AACA,SAAO,OAAO,KAAK,KAAK,EAAE,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,UAA4B,MAAS,OAAmC;AAC/E,SAAO,QAAQ,EAAE,GAAG,MAAM,MAAM,IAAI;AACtC;AAYO,SAAS,QAAQ,MAAc,UAAU,MAAgC;AAC9E,SAAO,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG,EAAE,KAAK,CAAC;AACnD;AAEA,eAAe,SAAS,GAAuB,KAAsC;AACnF,UAAQ,IAAI,IAAI;AAAA,IACd,KAAK;AACH,aAAO,EAAE,QAAQ,IAAI,IAAI;AAAA,IAC3B,KAAK;AACH,aAAO,EAAE,QAAQ,IAAI,IAAI;AAAA,IAC3B,KAAK;AACH,aAAO,EAAE;AAAA,QACP,IAAI;AAAA,QACJ;AAAA,UACE;AAAA,YACE,OAAO,IAAI;AAAA,YACX,QAAQ,IAAI;AAAA,YACZ,UAAU,IAAI;AAAA,YACd,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,YAAY,SAAY,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;AAAA,UAC9D;AAAA,UACA,QAAQ,GAAG;AAAA,QACb;AAAA,MACF;AAAA,IACF,KAAK;AACH,aAAO,EAAE,KAAK,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI;AAAA,IAC5C,KAAK;AACH,aAAO,EAAE,MAAM,IAAI,IAAI,IAAI,QAAQ,IAAI,KAAK;AAAA,IAC9C,KAAK;AACH,aAAO,EAAE,QAAQ,IAAI,EAAE;AAAA,IACzB,KAAK;AACH,aAAO,QAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI;AAAA,IAC1E,KAAK;AACH,aAAO,EAAE,MAAM,IAAI,IAAI;AAAA,IACzB,KAAK;AACH,aAAO,EAAE,OAAO,IAAI,IAAI;AAAA,IAC1B,KAAK;AACH,aAAO,EAAE,OAAO,IAAI,MAAM,IAAI,EAAE;AAAA,IAClC,KAAK;AACH,UAAI,CAAC,EAAE,KAAM,OAAM,QAAQ,SAAS,oCAAoC;AACxE,aAAO,EAAE,KAAK,IAAI,MAAM,IAAI,EAAE;AAAA,IAChC,KAAK;AACH,UAAI,CAAC,EAAE,QAAS,OAAM,QAAQ,SAAS,kCAAkC;AACzE,aAAO,QAAQ,GAAG,IACd,EAAE,QAAQ,IAAI,QAAQ,IAAI,MAAM,QAAQ,GAAG,CAAC,IAC5C,EAAE,QAAQ,IAAI,QAAQ,IAAI,IAAI;AAAA,IACpC,KAAK;AACH,UAAI,CAAC,EAAE,SAAU,OAAM,QAAQ,UAAU,GAAG,IAAI,IAAI,mBAAmB;AACvE,aAAO,EAAE,SAAS,IAAI,IAAI;AAAA,IAC5B,KAAK;AACH,aAAO,EAAE,UAAU,IAAI,MAAM;AAAA,QAC3B,GAAI,IAAI,SAAS,SAAY,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAAA,QACnD,GAAI,IAAI,UAAU,SAAY,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;AAAA,QACtD,GAAI,IAAI,SAAS,SAAY,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAAA,QACnD,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,QAChD,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,MAClD,CAAC;AAAA,IACH,KAAK;AACH,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AACE,YAAM,QAAQ,UAAU,qBAAsB,IAAuB,EAAE,EAAE;AAAA,EAC7E;AACF;AAEO,SAAS,gBACd,MACA,UACA,eAAmC,CAAC,GACpC,UAA+B,CAAC,GACd;AAClB,MAAI,OAAO;AACX,QAAM,QAAQ,CAAC,SAAiB,WAA2B,CAAC,MAC1D,KAAK,YAAY,SAAS,QAAQ;AACpC,iBAAe,MAAM,SAA2C;AAC9D,UAAM,UAAU,mBAAmB,QAAQ,QAAQ;AACnD,QAAI,SAAS;AACX,YAAM,EAAE,OAAO,EAAE,UAAU,iBAAiB,OAAO,SAAS,OAAO,SAAS,EAAE,CAAC;AAC/E;AAAA,IACF;AACA,QAAI;AACF,YAAM,UAAU,MAAM,SAAS,QAAQ,QAAQ,KAAK;AACpD,aAAO;AACP,YAAM;AAAA,QACJ,OAAO,EAAE,UAAU,iBAAiB,cAAc,EAAE,GAAG,cAAc,GAAG,QAAQ,EAAE;AAAA,MACpF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,OAAQ,KAA4B;AAC1C,YAAM;AAAA,QACJ,OAAO;AAAA,UACL,UAAU;AAAA,UACV,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,UACtD,OAAO,OAAO,SAAS,WAAW,OAAO;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,OAAK,iBAAiB,WAAW,CAAC,UAAU;AAC1C,UAAM,OAAO,MAAM;AACnB,QAAI,KAAK,OAAO;AACd,WAAK,MAAM,KAAK,KAAK;AACrB;AAAA,IACF;AACA,QAAI,CAAC,KAAM;AACX,aAAS,UAAU,IAAI,EAAE;AAAA,MACvB,CAAC,WAAW;AACV,YAAI,kBAAkB,YAAY;AAChC,gBAAM,QAAQ,OAAO,eAAe,KAAK,OAAO,eAAe,OAAO,OAAO;AAC7E,gBAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS,MAAM,MAAM;AAC5D,gBAAM,EAAE,IAAI,KAAK,IAAI,QAAQ,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC;AAAA,QACtD,MAAO,OAAM,EAAE,IAAI,KAAK,IAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,MACtD;AAAA,MACA,CAAC,QAAiB;AAChB,cAAM,OAAQ,KAA4B;AAC1C,cAAM;AAAA,UACJ,IAAI,KAAK;AAAA,UACT,OAAO,OAAO,SAAS,WAAW,OAAO;AAAA,UACzC,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QAC1D,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACD,OAAK,QAAQ;AACb,SAAO,EAAE,YAAY,CAAC,UAAU,MAAM,EAAE,YAAY,MAAM,CAAC,EAAE;AAC/D;;;ACxLA,eAAsB,WACpB,OACA,MACe;AACf,MAAI;AACF,UAAM,WAAW,MAAM,KAAK,MAAM,IAAI,GAAG;AACzC,QAAI,OAAO,YAAY,YAAY;AACjC,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AACA,UAAM,SAAS,MAAM,aAAa,MAAM,QAAQ,EAAE,OAAO,KAAK,CAAC;AAC/D,UAAM,OAAO,MAAO,QAA0B,EAAE,OAAO,CAAC,YAAY,OAAO,MAAM,OAAO,EAAE,CAAC;AAC3F,oBAAgB,MAAM,QAAQ,KAAK,UAAU,KAAK,gBAAgB,CAAC,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,UAAM,OAAO,YAAY;AAAA,MACvB,OAAO;AAAA,QACL,UAAU;AAAA,QACV,OAAO,6BAA6B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACpF,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AC7CO,IAAM,kBAAqC;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,oBAAuC;AAAA,EAClD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,aAAgC,CAAC,SAAS,WAAW;AAElE,SAAS,MAAM,QAA0B;AACvC,QAAM,MAAgB,CAAC;AACvB,WAAS,KAAoB,QAAQ,MAAM,OAAO,OAAO,aAAa;AACpE,QAAI,KAAK,EAAE;AACX,SAAK,OAAO,eAAe,EAAE;AAAA,EAC/B;AACA,SAAO;AACT;AAEO,SAAS,KAAK,QAAgB,OAAgC;AACnE,aAAW,QAAQ,OAAO;AACxB,UAAM,UAAU,MAAM,MAAM;AAC5B,eAAW,UAAU,SAAS;AAC5B,UAAI,OAAO,yBAAyB,QAAQ,IAAI,GAAG,cAAc;AAC/D,gBAAQ,eAAe,QAAQ,IAAI;AAAA,MACrC;AAAA,IACF;AACA,UAAM,OAAO,QAAQ,MAAM,CAAC,EAAE,KAAK,CAAC,WAAW,OAAO,OAAO,QAAQ,IAAI,CAAC;AAC1E,UAAM,UAAU,QAAQ,eAAe,QAAQ,MAAM;AAAA,MACnD,OAAO;AAAA,MACP,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,QAAS,CAAC,WAAW,QAAQ,IAAI,QAAQ,IAAI,MAAM,QAAY;AACjE,YAAM,IAAI,MAAM,iCAAiC,IAAI,oBAAoB;AAAA,IAC3E;AAAA,EACF;AACF;AAEO,SAAS,OAAO,QAAgB,OAAgC;AACrE,aAAW,QAAQ,OAAO;AACxB,aAAS,KAAoB,QAAQ,MAAM,OAAO,OAAO,aAAa;AACpE,UAAI,OAAO,yBAAyB,IAAI,IAAI,GAAG,aAAc,SAAQ,eAAe,IAAI,IAAI;AAC5F,WAAK,OAAO,eAAe,EAAE;AAAA,IAC/B;AACA,YAAQ,eAAe,QAAQ,MAAM;AAAA,MACnC,OAAO;AAAA,MACP,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,QAAQ,IAAI,QAAQ,IAAI,MAAM,QAAW;AAC3C,YAAM,IAAI,MAAM,iCAAiC,IAAI,oBAAoB;AAAA,IAC3E;AAAA,EACF;AACF;AAEO,SAAS,SAAS,QAAgB,YAAkB;AACzD,OAAK,OAAO,eAAe;AAC3B,SAAO,OAAO,UAAU;AACxB,QAAM,YAAa,MAAkC;AACrD,MAAI,aAAa,OAAO,cAAc,SAAU,MAAK,WAAW,iBAAiB;AACnF;;;AClFA;AAAA,EACE;AAAA,EACA,CAAC,UACC,KAAK,WAAY,MAAoC,MAAM,CAAC,SAAS;AACnE,UAAM,MAAM,IAAI,gBAAgB,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,kBAAkB,CAAC,CAAC;AAC7E,aAAS;AACT,WAAO,OAAO;AAAA,EAChB,CAAC;AAAA,EACH,EAAE,MAAM,KAAK;AACf;",
   "names": ["fail", "encoder", "done", "options"]
 }