@artenx/dshb 0.1.31 → 0.1.33

package/lib/core/sync/ssh-transport.js

@@ -296,11 +296,12 @@ var SyncSshTransport = class {
 		if (manifest.protocolVersion !== 1 || typeof manifest.instanceId !== "string" || !Array.isArray(manifest.entries) || !Array.isArray(manifest.skipped) || typeof manifest.digest !== "string") throw new SyncSshProbeError("protocol");
 		return manifest;
 	}
-	async fetchSessionEntries(peerId, keys, manifestDigest, prefixes = []) {
+	async fetchSessionEntries(peerId, keys, manifestDigest, prefixes = [], deferredObjects = false) {
 		const value = await this.fetchDataOperation(peerId, "session-entries", {
 			keys,
 			manifestDigest,
-			prefixes
+			prefixes,
+			deferredObjects
 		});
 		if (!isRecord(value) || value.ok !== true || !isRecord(value.bundle)) throw new SyncSshProbeError("helper");
 		const bundle = value.bundle;
@@ -359,6 +360,103 @@ var SyncSshTransport = class {
 		const fingerprint = this.hostKeyChallenges.acceptObserved(peer);
 		await this.peerManager.pinHostKey(peerId, fingerprint);
 	}
+	/**
+	* 拉取带外对象流：响应以帧流形式逐块 yield，调用方（收件箱）边收边落盘，
+	* 内存 O(单帧)。会话在流结束/出错时关闭（生成器 finally）。
+	*/
+	async *fetchSessionObjects(peerId, objects) {
+		const body = Buffer.from(JSON.stringify({ objects: [...objects] }), "utf8");
+		if (body.length > 134217728) throw new SyncSshProbeError("protocol");
+		const { peer, session } = await this.openSession(peerId);
+		try {
+			await session.sendControl({
+				kind: "request",
+				protocolVersion: 1,
+				operation: "session-objects",
+				port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT
+			});
+			for (let offset = 0, sequence = 0; offset < body.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) await session.sendData(sequence, body.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, body.length)));
+			await session.sendControl({ kind: "request-end" });
+			session.endInput();
+			let responseStatus;
+			let bodyMode;
+			let responseEnded = false;
+			let totalBytes = 0;
+			for await (const frame of session.readFrames()) {
+				if (frame.kind === "control") {
+					if (frame.value.kind === "error") throw new SyncSshProbeError("helper");
+					if (frame.value.kind === "response" && responseStatus === void 0) {
+						responseStatus = typeof frame.value.status === "number" ? frame.value.status : void 0;
+						bodyMode = typeof frame.value.bodyMode === "string" ? frame.value.bodyMode : void 0;
+						continue;
+					}
+					if (frame.value.kind === "response-end" && responseStatus !== void 0 && !responseEnded) {
+						responseEnded = true;
+						continue;
+					}
+					throw new SyncProtocolError("unexpected session-objects control frame");
+				}
+				if (responseStatus === void 0 || bodyMode !== "data" || responseEnded) throw new SyncProtocolError("unexpected session-objects data frame");
+				totalBytes += frame.data.length;
+				if (totalBytes > 68719476736) throw new SyncProtocolError("session-objects exceeds object stream limit");
+				yield frame.data;
+			}
+			if (responseStatus !== 200 || !responseEnded) throw new SyncSshProbeError("helper");
+		} catch (error) {
+			if (error instanceof SyncSshProbeError) throw error;
+			if (error instanceof SyncProtocolError) {
+				const probe = new SyncSshProbeError("protocol");
+				probe.detail = error.message;
+				throw probe;
+			}
+			throw new SyncSshProbeError("helper");
+		} finally {
+			session.close();
+		}
+	}
+	/**
+	* 推送带外对象流：把帧流按 1MB 分块写入请求体，逐块经 SSH 发送；
+	* 对端流式落盘收件箱后返回 JSON 摘要。
+	*/
+	async pushSessionObjects(peerId, frames) {
+		const { peer, session } = await this.openSession(peerId);
+		try {
+			await session.sendControl({
+				kind: "request",
+				protocolVersion: 1,
+				operation: "session-objects-push",
+				port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT
+			});
+			let sequence = 0;
+			let totalBytes = 0;
+			for await (const chunk of frames) {
+				if (!(chunk instanceof Uint8Array)) throw new SyncProtocolError("session-objects-push contains a non-byte chunk");
+				const data = Buffer.from(chunk);
+				totalBytes += data.byteLength;
+				if (totalBytes > 68719476736) throw new SyncProtocolError("session-objects-push exceeds object stream limit");
+				for (let offset = 0; offset < data.byteLength; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) await session.sendData(sequence, data.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, data.byteLength)));
+			}
+			await session.sendControl({ kind: "request-end" });
+			session.endInput();
+			let response;
+			for await (const frame of session.readFrames()) {
+				if (frame.kind !== "control" || response !== void 0) throw new SyncProtocolError("unexpected session-objects-push frame");
+				if (frame.value.kind === "error") throw new SyncSshProbeError("helper");
+				if (frame.value.kind === "response") response = frame.value;
+			}
+			if (!response || response.status !== 200) throw new SyncSshProbeError("helper");
+		} catch (error) {
+			if (error instanceof SyncSshProbeError) throw error;
+			if (error instanceof SyncProtocolError) {
+				const probe = new SyncSshProbeError("protocol");
+				probe.detail = error.message;
+				throw probe;
+			}
+			throw new SyncSshProbeError("helper");
+		} finally {
+			session.close();
+		}
+	}
 	async fetchDataOperation(peerId, operation, requestBody) {
 		const body = requestBody === void 0 ? void 0 : Buffer.from(JSON.stringify(requestBody), "utf8");
 		if (body && body.length > 134217728) throw new SyncSshProbeError("protocol");
@@ -445,7 +543,173 @@ function validateHandshakeResponse(value) {
 		capabilities: body.capabilities
 	};
 }
+const REMOTE_PROBE_BEGIN_MARKER = "DSHB_PROBE_BEGIN";
+const REMOTE_PROBE_END_MARKER = "DSHB_PROBE_END";
+const REMOTE_PROBE_TIMEOUT_MS = 12e3;
+const REMOTE_PROBE_MAX_OUTPUT_BYTES = 262144;
+/**
+* 生成远端发现脚本：纯 POSIX sh + 远端 node（DSH 所在机器必然有 node）。
+* 三个动作：① 多候选定位 DSH_HOME（含桌面版常见路径）；② 列出 profiles 及
+* dshb 安装标记；③ 握手探测真实 Web 端口（仅远端回环，桌面版 127.0.0.1:3080
+* 即可命中）。输出以 BEGIN/END 标记包裹，逐行 "key value"。
+*/
+function buildRemoteProbeScript(dshHome, preferredWebPort) {
+	const homeOverride = dshHome === void 0 ? "" : JSON.stringify(dshHome);
+	const homeCandidates = (homeOverride ? ` ${homeOverride}` : "") + " \"$DSH_HOME\" \"$HOME/.dsh\" \"$HOME/Library/Application Support/dsh\" \"$HOME/Library/Application Support/DeepSeek Harness\"";
+	return [
+		`echo ${REMOTE_PROBE_BEGIN_MARKER}`,
+		`for c in${homeCandidates}; do`,
+		"  [ -n \"$c\" ] && [ -d \"$c/profiles\" ] && echo \"home $c\"",
+		"done",
+		`for c in${homeCandidates}; do`,
+		"  [ -n \"$c\" ] && [ -d \"$c/profiles\" ] || continue",
+		"  for p in \"$c\"/profiles/*/; do",
+		"    [ -d \"$p\" ] || continue",
+		"    b=no; [ -d \"${p}node_modules/@artenx/dshb\" ] && b=yes",
+		"    [ -f \"${p}package.json\" ] || continue",
+		"    echo \"profile $(basename \"$p\") $b $c\"",
+		"  done",
+		"done",
+		"ps -eo args= 2>/dev/null | grep -E \"dsh .*--profile|--profile .*--port|dsh web\" | grep -v grep | head -6",
+		"node -e 'const http=require(\"http\");const ports=process.argv.slice(1).map(Number).filter(Number.isInteger);let i=0;function probe(){if(i>=ports.length)process.exit(0);const port=ports[i++];const req=http.get({host:\"127.0.0.1\",port,path:\"/api/dshb/sync/internal/handshake\",timeout:700},res=>{let body=\"\";res.on(\"data\",c=>body+=c);res.on(\"end\",()=>{try{const j=JSON.parse(body);if(j&&j.ok===true&&typeof j.instanceId===\"string\"){console.log(\"handshake \"+port+\" \"+j.instanceId)}}catch(e){}probe()})});req.on(\"timeout\",()=>{req.destroy();probe()});req.on(\"error\",()=>probe());}probe()' " + (preferredWebPort !== void 0 ? ` ${preferredWebPort}` : "") + " 3080 8080 3079 3204 3206 3207 9080 $(ps -eo args= 2>/dev/null | grep -o \"\\-\\-port [0-9]\\+\" | awk '{print $2}' | head -6)",
+		`echo ${REMOTE_PROBE_END_MARKER}`
+	].join("\n");
+}
+/** 解析探测输出：仅在 BEGIN/END 标记之间取行，容忍未知行。 */
+function parseRemoteProbeOutput(output, hostKeyFingerprint, preferredWebPort) {
+	const begin = output.indexOf(REMOTE_PROBE_BEGIN_MARKER);
+	const end = output.indexOf(REMOTE_PROBE_END_MARKER);
+	if (begin < 0 || end < begin) throw new SyncSshProbeError("helper");
+	const lines = output.slice(begin + 16, end).split("\n").map((line) => line.trim()).filter(Boolean);
+	const result = {
+		homes: [],
+		profiles: [],
+		handshakes: [],
+		processHints: [],
+		hostKeyFingerprint
+	};
+	for (const line of lines) {
+		const [head, ...rest] = line.split(/\s+/);
+		const value = rest.join(" ");
+		if (head === "home" && value) result.homes.push(value);
+		else if (head === "profile" && rest.length >= 3) {
+			const [name, dshb, home] = rest;
+			result.profiles.push({
+				name,
+				dshbInstalled: dshb === "yes",
+				home
+			});
+		} else if (head === "handshake" && rest.length >= 2) {
+			const port = Number(rest[0]);
+			if (Number.isInteger(port) && port >= 1 && port <= 65535 && !result.handshakes.some((hit) => hit.port === port)) result.handshakes.push({
+				port,
+				instanceId: rest[1]
+			});
+		} else if (line && !line.startsWith("home ") && !line.startsWith("profile ") && !line.startsWith("handshake ")) result.processHints.push(line);
+	}
+	result.homes = [...new Set(result.homes)];
+	result.profiles = result.profiles.filter((profile, index, all) => all.findIndex((candidate) => candidate.name === profile.name && candidate.home === profile.home) === index);
+	const preferred = result.handshakes.find((hit) => hit.port === preferredWebPort) ?? result.handshakes[0];
+	if (preferred) {
+		result.webPort = preferred.port;
+		result.instanceId = preferred.instanceId;
+	}
+	return result;
+}
+var SyncRemoteProbe = class {
+	/** 探测远端：SSH 登录 + 单次 exec 发现脚本；主机密钥自动接受（只读发现，指纹随结果返回）。 */
+	async probeRemote(draft, secrets, preferredWebPort) {
+		if (draft.authKind === "password" && !secrets.password) throw new SyncSshProbeError("auth");
+		if (draft.authKind === "key" && !secrets.privateKey) throw new SyncSshProbeError("auth");
+		let fingerprint = "";
+		const client = new Client();
+		try {
+			await new Promise((resolve, reject) => {
+				let settled = false;
+				const finish = (error) => {
+					if (settled) return;
+					settled = true;
+					clearTimeout(deadline);
+					if (error) reject(error);
+					else resolve();
+				};
+				const deadline = setTimeout(() => {
+					const timeout = /* @__PURE__ */ new Error("Timed out while waiting for SSH handshake");
+					timeout.level = "client-timeout";
+					finish(timeout);
+					client.end();
+				}, SSH_READY_TIMEOUT_MS);
+				client.once("ready", () => finish());
+				client.on("error", (error) => finish(error));
+				const config = {
+					host: draft.host,
+					port: draft.port,
+					username: draft.username,
+					hostHash: "sha256",
+					readyTimeout: SSH_READY_TIMEOUT_MS,
+					hostVerifier: (sha256Hex) => {
+						fingerprint = sha256Hex;
+						return true;
+					},
+					...draft.authKind === "password" ? { password: secrets.password } : {
+						privateKey: secrets.privateKey,
+						...secrets.passphrase ? { passphrase: secrets.passphrase } : {}
+					}
+				};
+				try {
+					client.connect(config);
+				} catch (error) {
+					finish(error);
+				}
+			});
+			return parseRemoteProbeOutput(await new Promise((resolve, reject) => {
+				const chunks = [];
+				let size = 0;
+				let settled = false;
+				const finish = (error, text) => {
+					if (settled) return;
+					settled = true;
+					clearTimeout(deadline);
+					if (error) reject(error);
+					else resolve(text ?? "");
+				};
+				const deadline = setTimeout(() => finish(/* @__PURE__ */ new Error("Timed out while waiting for the remote probe script")), REMOTE_PROBE_TIMEOUT_MS);
+				client.exec(buildRemoteProbeScript(void 0, preferredWebPort), (error, channel) => {
+					if (error) {
+						finish(error);
+						return;
+					}
+					channel.on("data", (chunk) => {
+						size += chunk.length;
+						if (size > REMOTE_PROBE_MAX_OUTPUT_BYTES) {
+							finish(/* @__PURE__ */ new Error("remote probe output exceeds size limit"));
+							return;
+						}
+						chunks.push(chunk);
+					});
+					channel.on("error", (error) => finish(error));
+					channel.on("close", (code) => {
+						const text = Buffer.concat(chunks).toString("utf8");
+						if (code !== 0 && !text.includes("DSHB_PROBE_END")) finish(/* @__PURE__ */ new Error(`remote probe script exited with ${code}`));
+						else finish(void 0, text);
+					});
+					channel.stderr.resume();
+				});
+			}), fingerprint, preferredWebPort);
+		} catch (error) {
+			if (error instanceof SyncSshProbeError) throw error;
+			const category = classifySshError(error);
+			if (category === "auth" || category === "network" || category === "timeout") throw new SyncSshProbeError(category);
+			if (category === "hostkey") throw new SyncSshProbeError("hostkey");
+			throw new SyncSshProbeError("helper");
+		} finally {
+			try {
+				client.end();
+			} catch {}
+		}
+	}
+};
 //#endregion
-export { SyncSessionDeltaPrefixError, SyncSshProbeError, SyncSshSession, SyncSshTransport, buildSyncSshConnectConfig };
+export { REMOTE_PROBE_BEGIN_MARKER, REMOTE_PROBE_END_MARKER, SyncRemoteProbe, SyncSessionDeltaPrefixError, SyncSshProbeError, SyncSshSession, SyncSshTransport, buildRemoteProbeScript, buildSyncSshConnectConfig, parseRemoteProbeOutput };
 
 //# sourceMappingURL=ssh-transport.js.map

package/lib/core/sync/ssh-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-transport.js","names":[],"sources":["../../../src/core/sync/ssh-transport.ts"],"sourcesContent":["import { Client, type ConnectConfig } from 'ssh2'\nimport type { ClientChannel } from 'ssh2'\nimport { once } from 'node:events'\nimport { classifySshError } from '../../exec-ssh/connection.js'\nimport { SyncPeerManager, SyncPeerNotFoundError, type SyncPeerSecrets } from './peer-manager.js'\nimport { isRecord, type SyncPeer } from './model.js'\nimport { SyncHostKeyChallengeError, SyncHostKeyChallenges, inspectSyncHostKey } from './host-key.js'\nimport type { SyncNodeApplyResult, SyncNodeManifest } from './node-sync.js'\nimport {\n  MAX_SYNC_DATA_CHUNK_BYTES,\n  MAX_SYNC_TRANSFER_BYTES,\n  SYNC_PROTOCOL_VERSION,\n  SyncFrameDecoder,\n  SyncProtocolError,\n  encodeSyncControlFrame,\n  encodeSyncDataFrame,\n  type SyncFrame,\n} from './protocol.js'\nimport { REMOTE_SYNC_HELPER_COMMAND } from './remote-helper.js'\nimport type { SyncSessionApplyResult, SyncSessionBundle, SyncSessionEventPrefix, SyncSessionManifest } from './session-sync.js'\n\nconst SSH_READY_TIMEOUT_MS = 30_000\nconst SSH_READ_IDLE_TIMEOUT_MS = 60_000\nconst DEFAULT_REMOTE_WEB_PORT = 3080\n\nexport type SyncSshErrorCategory = 'auth' | 'network' | 'hostkey' | 'timeout' | 'helper' | 'protocol'\n\nexport class SyncSshProbeError extends Error {\n  constructor(readonly category: SyncSshErrorCategory) {\n    super(`SSH sync probe failed: ${category}`)\n    this.name = 'SyncSshProbeError'\n  }\n}\n\nexport class SyncSessionDeltaPrefixError extends Error {\n  constructor() {\n    super('remote session event prefix changed during transfer')\n    this.name = 'SyncSessionDeltaPrefixError'\n  }\n}\n\nexport interface SyncRemoteHandshake {\n  protocolVersion: number\n  instanceId: string\n  capabilities: string[]\n}\n\nexport interface SyncRemoteNodeManifest extends SyncNodeManifest {\n  capabilities?: string[]\n}\n\nexport class SyncSshSession {\n  private readonly decoder = new SyncFrameDecoder()\n  private readonly closeSignal = new AbortController()\n  private reading = false\n  private closed = false\n  private inputEnded = false\n  private nextDataSequence = 0\n  private pendingError: Error | undefined\n\n  constructor(\n    private readonly client: Client,\n    private readonly channel: ClientChannel,\n  ) {\n    channel.on('error', (error: Error) => { this.pendingError = error })\n    channel.on('exit', (code: number | null) => {\n      if (code !== null && code !== 0) this.pendingError = new Error(`remote helper exited with code ${code}`)\n    })\n    channel.on('close', () => { this.closeSignal.abort() })\n  }\n\n  async sendControl(value: Record<string, unknown>): Promise<void> {\n    await this.write(encodeSyncControlFrame(value))\n  }\n\n  async sendData(sequence: number, data: Buffer): Promise<void> {\n    if (sequence !== this.nextDataSequence) throw new SyncProtocolError('outgoing data sequence is out of order')\n    await this.write(encodeSyncDataFrame(sequence, data))\n    this.nextDataSequence += 1\n  }\n\n  endInput(): void {\n    if (this.closed || this.inputEnded) return\n    this.inputEnded = true\n    this.channel.end()\n  }\n\n  async *readFrames(idleTimeoutMs = SSH_READ_IDLE_TIMEOUT_MS): AsyncGenerator<SyncFrame> {\n    if (this.reading) throw new SyncProtocolError('SSH sync channel can only be read once')\n    this.reading = true\n    const channel = this.channel\n    const decoder = this.decoder\n    let idleDeadline: NodeJS.Timeout | undefined\n    const armIdleDeadline = (): void => {\n      clearTimeout(idleDeadline)\n      idleDeadline = setTimeout(() => {\n        this.pendingError = new Error(`SSH channel idle for more than ${Math.round(idleTimeoutMs / 1000)}s`)\n        // Full teardown: destroying the channel alone may leave the stdout\n        // stream open, which would keep a plain for-await suspended forever.\n        this.close()\n      }, idleTimeoutMs)\n    }\n    // channel.destroy() does not reliably end ssh2's stdout stream; racing the\n    // iterator against the close signal guarantees this generator settles.\n    // A channel close resolves with a sentinel instead of rejecting: a normal\n    // helper exit closes the channel around the same moment stdout reaches EOF,\n    // and only a pendingError (idle timeout, helper crash) makes it an error.\n    const CLOSE: unique symbol = Symbol('channel-close')\n    const closed: Promise<IteratorResult<Buffer> | typeof CLOSE> = new Promise((resolve) => {\n      this.closeSignal.signal.addEventListener('abort', () => resolve(CLOSE), { once: true })\n    })\n    const iterator = (channel.stdout as AsyncIterable<Buffer>)[Symbol.asyncIterator]()\n    try {\n      armIdleDeadline()\n      for (;;) {\n        const next = await Promise.race([iterator.next(), closed])\n        if (next === CLOSE || next.done) {\n          if (this.pendingError) throw new SyncProtocolError(`SSH channel error: ${this.pendingError.message}`)\n          break\n        }\n        armIdleDeadline()\n        for (const frame of decoder.push(Buffer.from(next.value))) yield frame\n      }\n      decoder.finish()\n    } catch (error) {\n      if (error instanceof SyncProtocolError) throw error\n      const detail = this.pendingError ? this.pendingError.message : error instanceof Error ? error.message : 'unknown error'\n      throw new SyncProtocolError(`SSH channel read failed: ${detail}`)\n    } finally {\n      clearTimeout(idleDeadline)\n      void iterator.return?.().catch(() => {})\n    }\n  }\n\n  close(): void {\n    if (this.closed) return\n    this.closed = true\n    this.channel.destroy()\n    this.client.end()\n  }\n\n  private async write(frame: Buffer): Promise<void> {\n    if (this.closed || this.inputEnded) throw new SyncProtocolError('SSH sync channel input is closed')\n    if (this.channel.write(frame)) return\n    // A frozen connection never drains; bound the wait so writes cannot hang.\n    const drainDeadline = setTimeout(() => this.closeSignal.abort(), SSH_READ_IDLE_TIMEOUT_MS)\n    try {\n      await once(this.channel, 'drain', { signal: this.closeSignal.signal })\n    } catch (error) {\n      if (this.closeSignal.signal.aborted) throw new SyncProtocolError('SSH channel closed before write could drain')\n      throw error\n    } finally {\n      clearTimeout(drainDeadline)\n    }\n  }\n}\n\nexport function buildSyncSshConnectConfig(\n  peer: SyncPeer,\n  secrets: SyncPeerSecrets,\n  challenges: SyncHostKeyChallenges,\n  onChallenge: (error: SyncHostKeyChallengeError) => void,\n): ConnectConfig {\n  return {\n    host: peer.host,\n    port: peer.port,\n    username: peer.username,\n    hostHash: 'sha256',\n    readyTimeout: SSH_READY_TIMEOUT_MS,\n    keepaliveInterval: 15_000,\n    hostVerifier: (sha256Hex: string): boolean => {\n      try {\n        const decision = inspectSyncHostKey(peer, sha256Hex, challenges)\n        if (!decision.trusted) onChallenge(decision.challenge)\n        return decision.trusted\n      } catch (error) {\n        if (error instanceof SyncHostKeyChallengeError) onChallenge(error)\n        return false\n      }\n    },\n    ...(peer.authKind === 'password'\n      ? { password: secrets.password }\n      : { privateKey: secrets.privateKey, ...(secrets.passphrase ? { passphrase: secrets.passphrase } : {}) }),\n  }\n}\n\nexport class SyncSshTransport {\n  private readonly hostKeyChallenges = new SyncHostKeyChallenges()\n\n  constructor(private readonly peerManager: SyncPeerManager) {}\n\n  async probe(peerId: string): Promise<SyncRemoteHandshake> {\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      const handshake = await this.requestHandshake(session, peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT)\n      if (handshake.protocolVersion !== SYNC_PROTOCOL_VERSION) throw new SyncSshProbeError('protocol')\n      return handshake\n    } catch (error) {\n      if (\n        error instanceof SyncHostKeyChallengeError ||\n        error instanceof SyncPeerNotFoundError ||\n        error instanceof SyncSshProbeError\n      ) {\n        throw error\n      }\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  async openSession(peerId: string): Promise<{ peer: SyncPeer; session: SyncSshSession }> {\n    const { peer, secrets } = await this.peerManager.connectionData(peerId)\n    if (peer.authKind === 'password' && !secrets.password) throw new SyncSshProbeError('auth')\n    if (peer.authKind === 'key' && !secrets.privateKey) throw new SyncSshProbeError('auth')\n\n    const client = new Client()\n    let challenge: SyncHostKeyChallengeError | undefined\n    let sessionOpened = false\n    try {\n      await new Promise<void>((resolve, reject) => {\n        let settled = false\n        const finish = (error?: unknown): void => {\n          if (settled) return\n          settled = true\n          clearTimeout(readyDeadline)\n          if (error) reject(error)\n          else resolve()\n        }\n\n        // ssh2's readyTimeout can be defeated by stalls behind transparent\n        // proxies; this deadline guarantees the connect promise settles.\n        const readyDeadline = setTimeout(() => {\n          const timeout = new Error('Timed out while waiting for SSH handshake')\n          ;(timeout as Error & { level?: string }).level = 'client-timeout'\n          finish(timeout)\n          client.end()\n        }, SSH_READY_TIMEOUT_MS * 2)\n        client.once('ready', () => finish())\n        client.on('error', (error: Error) => finish(challenge ?? error))\n        const config = buildSyncSshConnectConfig(peer, secrets, this.hostKeyChallenges, (error) => {\n          challenge = error\n        })\n\n        try {\n          client.connect(config)\n        } catch (error) {\n          finish(error)\n        }\n      })\n\n      const channel = await new Promise<ClientChannel>((resolve, reject) => {\n        const execDeadline = setTimeout(() => {\n          reject(new Error('Timed out while waiting for the sync helper channel'))\n          client.end()\n        }, SSH_READY_TIMEOUT_MS)\n        client.exec(REMOTE_SYNC_HELPER_COMMAND, (error, opened) => {\n          clearTimeout(execDeadline)\n          if (error) reject(error)\n          else resolve(opened)\n        })\n      })\n      const session = new SyncSshSession(client, channel)\n      sessionOpened = true\n      return { peer, session }\n    } catch (error) {\n      if (error instanceof SyncHostKeyChallengeError || error instanceof SyncPeerNotFoundError || error instanceof SyncSshProbeError) {\n        throw error\n      }\n      if (challenge) throw challenge\n      const category = classifySshError(error)\n      if (category === 'auth' || category === 'network' || category === 'timeout') {\n        throw new SyncSshProbeError(category)\n      }\n      if (category === 'hostkey') throw new SyncSshProbeError('hostkey')\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      if (!sessionOpened) {\n        try {\n          client.end()\n        } catch {}\n      }\n    }\n  }\n\n  async fetchNodeManifest(peerId: string): Promise<SyncRemoteNodeManifest> {\n    const value = await this.fetchDataOperation(peerId, 'node-manifest')\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.manifest)) throw new SyncSshProbeError('helper')\n    const manifest = value.manifest\n    if (manifest.protocolVersion !== SYNC_PROTOCOL_VERSION || typeof manifest.instanceId !== 'string' || !Array.isArray(manifest.records)) {\n      throw new SyncSshProbeError('protocol')\n    }\n    const capabilities = value.capabilities === undefined ? undefined : value.capabilities\n    if (capabilities !== undefined && (!Array.isArray(capabilities) || !capabilities.every((item) => typeof item === 'string'))) {\n      throw new SyncSshProbeError('protocol')\n    }\n    return { ...manifest, ...(capabilities ? { capabilities } : {}) } as unknown as SyncRemoteNodeManifest\n  }\n\n  async applyNodeManifest(\n    peerId: string,\n    records: SyncNodeManifest['records'],\n    sourceName: string,\n  ): Promise<SyncNodeApplyResult> {\n    const requestBody = Buffer.from(JSON.stringify({ records, sourceName }), 'utf8')\n    if (requestBody.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation: 'node-apply',\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      for (let offset = 0, sequence = 0; offset < requestBody.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n        await session.sendData(sequence, requestBody.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, requestBody.length)))\n      }\n      await session.sendControl({ kind: 'request-end' })\n      session.endInput()\n\n      let response: Record<string, unknown> | undefined\n      for await (const frame of session.readFrames()) {\n        if (frame.kind !== 'control' || response) throw new SyncProtocolError('unexpected node apply response frame')\n        response = frame.value\n      }\n      if (!response || response.kind === 'error') throw new SyncSshProbeError('helper')\n      if (response.kind !== 'response' || response.status !== 200 || response.body === null || typeof response.body !== 'object') {\n        throw new SyncSshProbeError('helper')\n      }\n      const body = response.body as Record<string, unknown>\n      if (body.ok !== true || body.result === null || typeof body.result !== 'object') throw new SyncSshProbeError('helper')\n      const result = body.result as Record<string, unknown>\n      for (const key of ['created', 'updated', 'deleted', 'pendingRemoval', 'skipped'] as const) {\n        if (!Number.isSafeInteger(result[key]) || (result[key] as number) < 0) throw new SyncSshProbeError('protocol')\n      }\n      return result as unknown as SyncNodeApplyResult\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  async fetchSessionBundle(peerId: string): Promise<SyncSessionBundle> {\n    const value = await this.fetchDataOperation(peerId, 'session-bundle')\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.bundle)) throw new SyncSshProbeError('helper')\n    const bundle = value.bundle\n    if (bundle.protocolVersion !== 1 || typeof bundle.instanceId !== 'string' ||\n      !Array.isArray(bundle.entries) || !Array.isArray(bundle.skipped) || typeof bundle.digest !== 'string') {\n      throw new SyncSshProbeError('protocol')\n    }\n    return bundle as unknown as SyncSessionBundle\n  }\n\n  async fetchSessionManifest(peerId: string): Promise<SyncSessionManifest> {\n    const value = await this.fetchDataOperation(peerId, 'session-manifest')\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.manifest)) throw new SyncSshProbeError('helper')\n    const manifest = value.manifest\n    if (manifest.protocolVersion !== 1 || typeof manifest.instanceId !== 'string' ||\n      !Array.isArray(manifest.entries) || !Array.isArray(manifest.skipped) || typeof manifest.digest !== 'string') {\n      throw new SyncSshProbeError('protocol')\n    }\n    return manifest as unknown as SyncSessionManifest\n  }\n\n  async fetchSessionEntries(\n    peerId: string,\n    keys: readonly string[],\n    manifestDigest: string,\n    prefixes: readonly SyncSessionEventPrefix[] = [],\n  ): Promise<SyncSessionBundle> {\n    const value = await this.fetchDataOperation(peerId, 'session-entries', { keys, manifestDigest, prefixes })\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.bundle)) throw new SyncSshProbeError('helper')\n    const bundle = value.bundle\n    if (bundle.protocolVersion !== 1 || typeof bundle.instanceId !== 'string' ||\n      !Array.isArray(bundle.entries) || !Array.isArray(bundle.skipped) || typeof bundle.digest !== 'string') {\n      throw new SyncSshProbeError('protocol')\n    }\n    return bundle as unknown as SyncSessionBundle\n  }\n\n  async applySessionBundle(peerId: string, bundle: SyncSessionBundle, sourceName: string): Promise<SyncSessionApplyResult> {\n    const requestBody = Buffer.from(JSON.stringify({ bundle, sourceName, peerId }), 'utf8')\n    if (requestBody.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation: 'session-apply',\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      for (let offset = 0, sequence = 0; offset < requestBody.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n        await session.sendData(sequence, requestBody.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, requestBody.length)))\n      }\n      await session.sendControl({ kind: 'request-end' })\n      session.endInput()\n\n      let response: Record<string, unknown> | undefined\n      for await (const frame of session.readFrames()) {\n        if (frame.kind !== 'control' || response) throw new SyncProtocolError('unexpected session apply response frame')\n        response = frame.value\n      }\n      if (!response || response.kind === 'error') throw new SyncSshProbeError('helper')\n      if (response.kind === 'response' && response.status === 409 && isRecord(response.body) &&\n        response.body.code === 'session-delta-prefix') throw new SyncSessionDeltaPrefixError()\n      if (response.kind !== 'response' || response.status !== 200 || response.body === null || typeof response.body !== 'object') {\n        throw new SyncSshProbeError('helper')\n      }\n      const body = response.body as Record<string, unknown>\n      if (body.ok !== true || body.result === null || typeof body.result !== 'object') throw new SyncSshProbeError('helper')\n      const result = body.result as Record<string, unknown>\n      for (const key of ['created', 'updated', 'archived', 'deleted', 'skipped', 'unmapped'] as const) {\n        if (!Number.isSafeInteger(result[key]) || (result[key] as number) < 0) throw new SyncSshProbeError('protocol')\n      }\n      return result as unknown as SyncSessionApplyResult\n    } catch (error) {\n      if (error instanceof SyncSessionDeltaPrefixError) throw error\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  async trustObservedHostKey(peerId: string): Promise<void> {\n    const { peer } = await this.peerManager.connectionData(peerId)\n    const fingerprint = this.hostKeyChallenges.acceptObserved(peer)\n    await this.peerManager.pinHostKey(peerId, fingerprint)\n  }\n\n  private async fetchDataOperation(\n    peerId: string,\n    operation: 'node-manifest' | 'session-bundle' | 'session-manifest' | 'session-entries',\n    requestBody?: Record<string, unknown>,\n  ): Promise<unknown> {\n    const body = requestBody === undefined ? undefined : Buffer.from(JSON.stringify(requestBody), 'utf8')\n    if (body && body.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation,\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      if (body) {\n        for (let offset = 0, sequence = 0; offset < body.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n          await session.sendData(sequence, body.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, body.length)))\n        }\n        await session.sendControl({ kind: 'request-end' })\n      }\n      session.endInput()\n\n      let responseStatus: number | undefined\n      let bodyMode: string | undefined\n      let responseEnded = false\n      let totalBytes = 0\n      const chunks: Buffer[] = []\n      for await (const frame of session.readFrames()) {\n        if (frame.kind === 'control') {\n          if (frame.value.kind === 'error') throw new SyncSshProbeError('helper')\n          if (frame.value.kind === 'response' && responseStatus === undefined) {\n            responseStatus = typeof frame.value.status === 'number' ? frame.value.status : undefined\n            bodyMode = typeof frame.value.bodyMode === 'string' ? frame.value.bodyMode : undefined\n            continue\n          }\n          if (frame.value.kind === 'response-end' && responseStatus !== undefined && !responseEnded) {\n            responseEnded = true\n            continue\n          }\n          throw new SyncProtocolError(`unexpected ${operation} control frame`)\n        }\n        if (responseStatus === undefined || bodyMode !== 'data' || responseEnded) {\n          throw new SyncProtocolError(`unexpected ${operation} data frame`)\n        }\n        totalBytes += frame.data.length\n        if (totalBytes > MAX_SYNC_TRANSFER_BYTES) throw new SyncProtocolError(`${operation} exceeds transfer limit`)\n        chunks.push(frame.data)\n      }\n      if (responseStatus !== 200 || !responseEnded) throw new SyncSshProbeError('helper')\n      try {\n        return JSON.parse(Buffer.concat(chunks, totalBytes).toString('utf8')) as unknown\n      } catch {\n        throw new SyncProtocolError(`${operation} response is invalid JSON`)\n      }\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) {\n        const probe = new SyncSshProbeError('protocol')\n        ;(probe as Error & { detail?: string }).detail = error.message\n        throw probe\n      }\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  private async requestHandshake(session: SyncSshSession, port: number): Promise<SyncRemoteHandshake> {\n    await session.sendControl({\n      kind: 'request',\n      protocolVersion: SYNC_PROTOCOL_VERSION,\n      operation: 'handshake',\n      port,\n    })\n    session.endInput()\n\n    let response: Record<string, unknown> | undefined\n    for await (const frame of session.readFrames()) {\n      if (frame.kind !== 'control' || response) throw new SyncProtocolError('unexpected helper frame')\n      response = frame.value\n    }\n    if (!response) throw new SyncProtocolError('helper returned no handshake response')\n    return validateHandshakeResponse(response)\n  }\n}\n\nfunction validateHandshakeResponse(value: Record<string, unknown>): SyncRemoteHandshake {\n  if (value.kind === 'error') throw new SyncSshProbeError('helper')\n  if (value.kind !== 'response' || value.status !== 200 || value.body === null || typeof value.body !== 'object') {\n    throw new SyncSshProbeError('helper')\n  }\n  const body = value.body as Record<string, unknown>\n  if (\n    typeof body.protocolVersion !== 'number' ||\n    typeof body.instanceId !== 'string' ||\n    !Array.isArray(body.capabilities) ||\n    !body.capabilities.every((capability) => typeof capability === 'string')\n  ) {\n    throw new SyncSshProbeError('protocol')\n  }\n  return {\n    protocolVersion: body.protocolVersion,\n    instanceId: body.instanceId,\n    capabilities: body.capabilities,\n  }\n}\n"],"mappings":";;;;;;;;;AAqBA,MAAM,uBAAuB;AAC7B,MAAM,2BAA2B;AACjC,MAAM,0BAA0B;AAIhC,IAAa,oBAAb,cAAuC,MAAM;CACtB;CAArB,YAAY,UAAyC;EACnD,MAAM,0BAA0B,UAAU;EADvB,KAAA,WAAA;EAEnB,KAAK,OAAO;CACd;AACF;AAEA,IAAa,8BAAb,cAAiD,MAAM;CACrD,cAAc;EACZ,MAAM,qDAAqD;EAC3D,KAAK,OAAO;CACd;AACF;AAYA,IAAa,iBAAb,MAA4B;CAUP;CACA;CAVnB,UAA2B,IAAI,iBAAiB;CAChD,cAA+B,IAAI,gBAAgB;CACnD,UAAkB;CAClB,SAAiB;CACjB,aAAqB;CACrB,mBAA2B;CAC3B;CAEA,YACE,QACA,SACA;EAFiB,KAAA,SAAA;EACA,KAAA,UAAA;EAEjB,QAAQ,GAAG,UAAU,UAAiB;GAAE,KAAK,eAAe;EAAM,CAAC;EACnE,QAAQ,GAAG,SAAS,SAAwB;GAC1C,IAAI,SAAS,QAAQ,SAAS,GAAG,KAAK,+BAAe,IAAI,MAAM,kCAAkC,MAAM;EACzG,CAAC;EACD,QAAQ,GAAG,eAAe;GAAE,KAAK,YAAY,MAAM;EAAE,CAAC;CACxD;CAEA,MAAM,YAAY,OAA+C;EAC/D,MAAM,KAAK,MAAM,uBAAuB,KAAK,CAAC;CAChD;CAEA,MAAM,SAAS,UAAkB,MAA6B;EAC5D,IAAI,aAAa,KAAK,kBAAkB,MAAM,IAAI,kBAAkB,wCAAwC;EAC5G,MAAM,KAAK,MAAM,oBAAoB,UAAU,IAAI,CAAC;EACpD,KAAK,oBAAoB;CAC3B;CAEA,WAAiB;EACf,IAAI,KAAK,UAAU,KAAK,YAAY;EACpC,KAAK,aAAa;EAClB,KAAK,QAAQ,IAAI;CACnB;CAEA,OAAO,WAAW,gBAAgB,0BAAqD;EACrF,IAAI,KAAK,SAAS,MAAM,IAAI,kBAAkB,wCAAwC;EACtF,KAAK,UAAU;EACf,MAAM,UAAU,KAAK;EACrB,MAAM,UAAU,KAAK;EACrB,IAAI;EACJ,MAAM,wBAA8B;GAClC,aAAa,YAAY;GACzB,eAAe,iBAAiB;IAC9B,KAAK,+BAAe,IAAI,MAAM,kCAAkC,KAAK,MAAM,gBAAgB,GAAI,EAAE,EAAE;IAGnG,KAAK,MAAM;GACb,GAAG,aAAa;EAClB;EAMA,MAAM,QAAuB,OAAO,eAAe;EACnD,MAAM,SAAyD,IAAI,SAAS,YAAY;GACtF,KAAK,YAAY,OAAO,iBAAiB,eAAe,QAAQ,KAAK,GAAG,EAAE,MAAM,KAAK,CAAC;EACxF,CAAC;EACD,MAAM,WAAY,QAAQ,OAAiC,OAAO,cAAc,CAAC;EACjF,IAAI;GACF,gBAAgB;GAChB,SAAS;IACP,MAAM,OAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,KAAK,GAAG,MAAM,CAAC;IACzD,IAAI,SAAS,SAAS,KAAK,MAAM;KAC/B,IAAI,KAAK,cAAc,MAAM,IAAI,kBAAkB,sBAAsB,KAAK,aAAa,SAAS;KACpG;IACF;IACA,gBAAgB;IAChB,KAAK,MAAM,SAAS,QAAQ,KAAK,OAAO,KAAK,KAAK,KAAK,CAAC,GAAG,MAAM;GACnE;GACA,QAAQ,OAAO;EACjB,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,MAAM,SAAS,KAAK,eAAe,KAAK,aAAa,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACxG,MAAM,IAAI,kBAAkB,4BAA4B,QAAQ;EAClE,UAAU;GACR,aAAa,YAAY;GACzB,SAAc,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;EACzC;CACF;CAEA,QAAc;EACZ,IAAI,KAAK,QAAQ;EACjB,KAAK,SAAS;EACd,KAAK,QAAQ,QAAQ;EACrB,KAAK,OAAO,IAAI;CAClB;CAEA,MAAc,MAAM,OAA8B;EAChD,IAAI,KAAK,UAAU,KAAK,YAAY,MAAM,IAAI,kBAAkB,kCAAkC;EAClG,IAAI,KAAK,QAAQ,MAAM,KAAK,GAAG;EAE/B,MAAM,gBAAgB,iBAAiB,KAAK,YAAY,MAAM,GAAG,wBAAwB;EACzF,IAAI;GACF,MAAM,KAAK,KAAK,SAAS,SAAS,EAAE,QAAQ,KAAK,YAAY,OAAO,CAAC;EACvE,SAAS,OAAO;GACd,IAAI,KAAK,YAAY,OAAO,SAAS,MAAM,IAAI,kBAAkB,6CAA6C;GAC9G,MAAM;EACR,UAAU;GACR,aAAa,aAAa;EAC5B;CACF;AACF;AAEA,SAAgB,0BACd,MACA,SACA,YACA,aACe;CACf,OAAO;EACL,MAAM,KAAK;EACX,MAAM,KAAK;EACX,UAAU,KAAK;EACf,UAAU;EACV,cAAc;EACd,mBAAmB;EACnB,eAAe,cAA+B;GAC5C,IAAI;IACF,MAAM,WAAW,mBAAmB,MAAM,WAAW,UAAU;IAC/D,IAAI,CAAC,SAAS,SAAS,YAAY,SAAS,SAAS;IACrD,OAAO,SAAS;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,2BAA2B,YAAY,KAAK;IACjE,OAAO;GACT;EACF;EACA,GAAI,KAAK,aAAa,aAClB,EAAE,UAAU,QAAQ,SAAS,IAC7B;GAAE,YAAY,QAAQ;GAAY,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAAG;CAC1G;AACF;AAEA,IAAa,mBAAb,MAA8B;CAGC;CAF7B,oBAAqC,IAAI,sBAAsB;CAE/D,YAAY,aAA+C;EAA9B,KAAA,cAAA;CAA+B;CAE5D,MAAM,MAAM,QAA8C;EACxD,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,YAAY,MAAM,KAAK,iBAAiB,SAAS,KAAK,iBAAiB,uBAAuB;GACpG,IAAI,UAAU,oBAAA,GAA2C,MAAM,IAAI,kBAAkB,UAAU;GAC/F,OAAO;EACT,SAAS,OAAO;GACd,IACE,iBAAiB,6BACjB,iBAAiB,yBACjB,iBAAiB,mBAEjB,MAAM;GAER,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAM,YAAY,QAAsE;EACtF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,eAAe,MAAM;EACtE,IAAI,KAAK,aAAa,cAAc,CAAC,QAAQ,UAAU,MAAM,IAAI,kBAAkB,MAAM;EACzF,IAAI,KAAK,aAAa,SAAS,CAAC,QAAQ,YAAY,MAAM,IAAI,kBAAkB,MAAM;EAEtF,MAAM,SAAS,IAAI,OAAO;EAC1B,IAAI;EACJ,IAAI,gBAAgB;EACpB,IAAI;GACF,MAAM,IAAI,SAAe,SAAS,WAAW;IAC3C,IAAI,UAAU;IACd,MAAM,UAAU,UAA0B;KACxC,IAAI,SAAS;KACb,UAAU;KACV,aAAa,aAAa;KAC1B,IAAI,OAAO,OAAO,KAAK;UAClB,QAAQ;IACf;IAIA,MAAM,gBAAgB,iBAAiB;KACrC,MAAM,0BAAU,IAAI,MAAM,2CAA2C;KACpE,QAAwC,QAAQ;KACjD,OAAO,OAAO;KACd,OAAO,IAAI;IACb,GAAG,uBAAuB,CAAC;IAC3B,OAAO,KAAK,eAAe,OAAO,CAAC;IACnC,OAAO,GAAG,UAAU,UAAiB,OAAO,aAAa,KAAK,CAAC;IAC/D,MAAM,SAAS,0BAA0B,MAAM,SAAS,KAAK,oBAAoB,UAAU;KACzF,YAAY;IACd,CAAC;IAED,IAAI;KACF,OAAO,QAAQ,MAAM;IACvB,SAAS,OAAO;KACd,OAAO,KAAK;IACd;GACF,CAAC;GAaD,MAAM,UAAU,IAAI,eAAe,QAAQ,MAXrB,IAAI,SAAwB,SAAS,WAAW;IACpE,MAAM,eAAe,iBAAiB;KACpC,uBAAO,IAAI,MAAM,qDAAqD,CAAC;KACvE,OAAO,IAAI;IACb,GAAG,oBAAoB;IACvB,OAAO,KAAK,6BAA6B,OAAO,WAAW;KACzD,aAAa,YAAY;KACzB,IAAI,OAAO,OAAO,KAAK;UAClB,QAAQ,MAAM;IACrB,CAAC;GACH,CAAC,CACiD;GAClD,gBAAgB;GAChB,OAAO;IAAE;IAAM;GAAQ;EACzB,SAAS,OAAO;GACd,IAAI,iBAAiB,6BAA6B,iBAAiB,yBAAyB,iBAAiB,mBAC3G,MAAM;GAER,IAAI,WAAW,MAAM;GACrB,MAAM,WAAW,iBAAiB,KAAK;GACvC,IAAI,aAAa,UAAU,aAAa,aAAa,aAAa,WAChE,MAAM,IAAI,kBAAkB,QAAQ;GAEtC,IAAI,aAAa,WAAW,MAAM,IAAI,kBAAkB,SAAS;GACjE,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,IAAI,CAAC,eACH,IAAI;IACF,OAAO,IAAI;GACb,QAAQ,CAAC;EAEb;CACF;CAEA,MAAM,kBAAkB,QAAiD;EACvE,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,eAAe;EACnE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,QAAQ,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC5G,MAAM,WAAW,MAAM;EACvB,IAAI,SAAS,oBAAA,KAA6C,OAAO,SAAS,eAAe,YAAY,CAAC,MAAM,QAAQ,SAAS,OAAO,GAClI,MAAM,IAAI,kBAAkB,UAAU;EAExC,MAAM,eAAe,MAAM,iBAAiB,KAAA,IAAY,KAAA,IAAY,MAAM;EAC1E,IAAI,iBAAiB,KAAA,MAAc,CAAC,MAAM,QAAQ,YAAY,KAAK,CAAC,aAAa,OAAO,SAAS,OAAO,SAAS,QAAQ,IACvH,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;GAAE,GAAG;GAAU,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;EAAG;CAClE;CAEA,MAAM,kBACJ,QACA,SACA,YAC8B;EAC9B,MAAM,cAAc,OAAO,KAAK,KAAK,UAAU;GAAE;GAAS;EAAW,CAAC,GAAG,MAAM;EAC/E,IAAI,YAAY,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACxF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA,WAAW;IACX,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,YAAY,QAAQ,UAAU,2BAA2B,YAAY,GAC/G,MAAM,QAAQ,SAAS,UAAU,YAAY,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,YAAY,MAAM,CAAC,CAAC;GAEjI,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACjD,QAAQ,SAAS;GAEjB,IAAI;GACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,aAAa,UAAU,MAAM,IAAI,kBAAkB,sCAAsC;IAC5G,WAAW,MAAM;GACnB;GACA,IAAI,CAAC,YAAY,SAAS,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;GAChF,IAAI,SAAS,SAAS,cAAc,SAAS,WAAW,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,SAAS,UAChH,MAAM,IAAI,kBAAkB,QAAQ;GAEtC,MAAM,OAAO,SAAS;GACtB,IAAI,KAAK,OAAO,QAAQ,KAAK,WAAW,QAAQ,OAAO,KAAK,WAAW,UAAU,MAAM,IAAI,kBAAkB,QAAQ;GACrH,MAAM,SAAS,KAAK;GACpB,KAAK,MAAM,OAAO;IAAC;IAAW;IAAW;IAAW;IAAkB;GAAS,GAC7E,IAAI,CAAC,OAAO,cAAc,OAAO,IAAI,KAAM,OAAO,OAAkB,GAAG,MAAM,IAAI,kBAAkB,UAAU;GAE/G,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAM,mBAAmB,QAA4C;EACnE,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,gBAAgB;EACpE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,MAAM,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC1G,MAAM,SAAS,MAAM;EACrB,IAAI,OAAO,oBAAoB,KAAK,OAAO,OAAO,eAAe,YAC/D,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,OAAO,OAAO,WAAW,UAC7F,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;CACT;CAEA,MAAM,qBAAqB,QAA8C;EACvE,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,kBAAkB;EACtE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,QAAQ,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC5G,MAAM,WAAW,MAAM;EACvB,IAAI,SAAS,oBAAoB,KAAK,OAAO,SAAS,eAAe,YACnE,CAAC,MAAM,QAAQ,SAAS,OAAO,KAAK,CAAC,MAAM,QAAQ,SAAS,OAAO,KAAK,OAAO,SAAS,WAAW,UACnG,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;CACT;CAEA,MAAM,oBACJ,QACA,MACA,gBACA,WAA8C,CAAC,GACnB;EAC5B,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,mBAAmB;GAAE;GAAM;GAAgB;EAAS,CAAC;EACzG,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,MAAM,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC1G,MAAM,SAAS,MAAM;EACrB,IAAI,OAAO,oBAAoB,KAAK,OAAO,OAAO,eAAe,YAC/D,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,OAAO,OAAO,WAAW,UAC7F,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;CACT;CAEA,MAAM,mBAAmB,QAAgB,QAA2B,YAAqD;EACvH,MAAM,cAAc,OAAO,KAAK,KAAK,UAAU;GAAE;GAAQ;GAAY;EAAO,CAAC,GAAG,MAAM;EACtF,IAAI,YAAY,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACxF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA,WAAW;IACX,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,YAAY,QAAQ,UAAU,2BAA2B,YAAY,GAC/G,MAAM,QAAQ,SAAS,UAAU,YAAY,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,YAAY,MAAM,CAAC,CAAC;GAEjI,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACjD,QAAQ,SAAS;GAEjB,IAAI;GACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,aAAa,UAAU,MAAM,IAAI,kBAAkB,yCAAyC;IAC/G,WAAW,MAAM;GACnB;GACA,IAAI,CAAC,YAAY,SAAS,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;GAChF,IAAI,SAAS,SAAS,cAAc,SAAS,WAAW,OAAO,SAAS,SAAS,IAAI,KACnF,SAAS,KAAK,SAAS,wBAAwB,MAAM,IAAI,4BAA4B;GACvF,IAAI,SAAS,SAAS,cAAc,SAAS,WAAW,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,SAAS,UAChH,MAAM,IAAI,kBAAkB,QAAQ;GAEtC,MAAM,OAAO,SAAS;GACtB,IAAI,KAAK,OAAO,QAAQ,KAAK,WAAW,QAAQ,OAAO,KAAK,WAAW,UAAU,MAAM,IAAI,kBAAkB,QAAQ;GACrH,MAAM,SAAS,KAAK;GACpB,KAAK,MAAM,OAAO;IAAC;IAAW;IAAW;IAAY;IAAW;IAAW;GAAU,GACnF,IAAI,CAAC,OAAO,cAAc,OAAO,IAAI,KAAM,OAAO,OAAkB,GAAG,MAAM,IAAI,kBAAkB,UAAU;GAE/G,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,6BAA6B,MAAM;GACxD,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAM,qBAAqB,QAA+B;EACxD,MAAM,EAAE,SAAS,MAAM,KAAK,YAAY,eAAe,MAAM;EAC7D,MAAM,cAAc,KAAK,kBAAkB,eAAe,IAAI;EAC9D,MAAM,KAAK,YAAY,WAAW,QAAQ,WAAW;CACvD;CAEA,MAAc,mBACZ,QACA,WACA,aACkB;EAClB,MAAM,OAAO,gBAAgB,KAAA,IAAY,KAAA,IAAY,OAAO,KAAK,KAAK,UAAU,WAAW,GAAG,MAAM;EACpG,IAAI,QAAQ,KAAK,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACzF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA;IACA,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,IAAI,MAAM;IACR,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,KAAK,QAAQ,UAAU,2BAA2B,YAAY,GACxG,MAAM,QAAQ,SAAS,UAAU,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,KAAK,MAAM,CAAC,CAAC;IAEnH,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACnD;GACA,QAAQ,SAAS;GAEjB,IAAI;GACJ,IAAI;GACJ,IAAI,gBAAgB;GACpB,IAAI,aAAa;GACjB,MAAM,SAAmB,CAAC;GAC1B,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,WAAW;KAC5B,IAAI,MAAM,MAAM,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;KACtE,IAAI,MAAM,MAAM,SAAS,cAAc,mBAAmB,KAAA,GAAW;MACnE,iBAAiB,OAAO,MAAM,MAAM,WAAW,WAAW,MAAM,MAAM,SAAS,KAAA;MAC/E,WAAW,OAAO,MAAM,MAAM,aAAa,WAAW,MAAM,MAAM,WAAW,KAAA;MAC7E;KACF;KACA,IAAI,MAAM,MAAM,SAAS,kBAAkB,mBAAmB,KAAA,KAAa,CAAC,eAAe;MACzF,gBAAgB;MAChB;KACF;KACA,MAAM,IAAI,kBAAkB,cAAc,UAAU,eAAe;IACrE;IACA,IAAI,mBAAmB,KAAA,KAAa,aAAa,UAAU,eACzD,MAAM,IAAI,kBAAkB,cAAc,UAAU,YAAY;IAElE,cAAc,MAAM,KAAK;IACzB,IAAI,aAAA,WAAsC,MAAM,IAAI,kBAAkB,GAAG,UAAU,wBAAwB;IAC3G,OAAO,KAAK,MAAM,IAAI;GACxB;GACA,IAAI,mBAAmB,OAAO,CAAC,eAAe,MAAM,IAAI,kBAAkB,QAAQ;GAClF,IAAI;IACF,OAAO,KAAK,MAAM,OAAO,OAAO,QAAQ,UAAU,CAAC,CAAC,SAAS,MAAM,CAAC;GACtE,QAAQ;IACN,MAAM,IAAI,kBAAkB,GAAG,UAAU,0BAA0B;GACrE;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB;IACtC,MAAM,QAAQ,IAAI,kBAAkB,UAAU;IAC7C,MAAuC,SAAS,MAAM;IACvD,MAAM;GACR;GACA,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAc,iBAAiB,SAAyB,MAA4C;EAClG,MAAM,QAAQ,YAAY;GACxB,MAAM;GACN,iBAAA;GACA,WAAW;GACX;EACF,CAAC;EACD,QAAQ,SAAS;EAEjB,IAAI;EACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;GAC9C,IAAI,MAAM,SAAS,aAAa,UAAU,MAAM,IAAI,kBAAkB,yBAAyB;GAC/F,WAAW,MAAM;EACnB;EACA,IAAI,CAAC,UAAU,MAAM,IAAI,kBAAkB,uCAAuC;EAClF,OAAO,0BAA0B,QAAQ;CAC3C;AACF;AAEA,SAAS,0BAA0B,OAAqD;CACtF,IAAI,MAAM,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;CAChE,IAAI,MAAM,SAAS,cAAc,MAAM,WAAW,OAAO,MAAM,SAAS,QAAQ,OAAO,MAAM,SAAS,UACpG,MAAM,IAAI,kBAAkB,QAAQ;CAEtC,MAAM,OAAO,MAAM;CACnB,IACE,OAAO,KAAK,oBAAoB,YAChC,OAAO,KAAK,eAAe,YAC3B,CAAC,MAAM,QAAQ,KAAK,YAAY,KAChC,CAAC,KAAK,aAAa,OAAO,eAAe,OAAO,eAAe,QAAQ,GAEvE,MAAM,IAAI,kBAAkB,UAAU;CAExC,OAAO;EACL,iBAAiB,KAAK;EACtB,YAAY,KAAK;EACjB,cAAc,KAAK;CACrB;AACF"}
+{"version":3,"file":"ssh-transport.js","names":[],"sources":["../../../src/core/sync/ssh-transport.ts"],"sourcesContent":["import { Client, type ConnectConfig } from 'ssh2'\nimport type { ClientChannel } from 'ssh2'\nimport { once } from 'node:events'\nimport { classifySshError } from '../../exec-ssh/connection.js'\nimport { SyncPeerManager, SyncPeerNotFoundError, type SyncPeerSecrets } from './peer-manager.js'\nimport { isRecord, type SyncPeer } from './model.js'\nimport { SyncHostKeyChallengeError, SyncHostKeyChallenges, inspectSyncHostKey } from './host-key.js'\nimport type { SyncNodeApplyResult, SyncNodeManifest } from './node-sync.js'\nimport {\n  MAX_SESSION_OBJECT_STREAM_BYTES,\n  MAX_SYNC_DATA_CHUNK_BYTES,\n  MAX_SYNC_TRANSFER_BYTES,\n  SYNC_PROTOCOL_VERSION,\n  SyncFrameDecoder,\n  SyncProtocolError,\n  encodeSyncControlFrame,\n  encodeSyncDataFrame,\n  type SyncFrame,\n} from './protocol.js'\nimport { REMOTE_SYNC_HELPER_COMMAND } from './remote-helper.js'\nimport type { SyncSessionApplyResult, SyncSessionBundle, SyncSessionEventPrefix, SyncSessionManifest, SyncSessionObject } from './session-sync.js'\n\nconst SSH_READY_TIMEOUT_MS = 30_000\nconst SSH_READ_IDLE_TIMEOUT_MS = 60_000\nconst DEFAULT_REMOTE_WEB_PORT = 3080\n\nexport type SyncSshErrorCategory = 'auth' | 'network' | 'hostkey' | 'timeout' | 'helper' | 'protocol'\n\nexport class SyncSshProbeError extends Error {\n  constructor(readonly category: SyncSshErrorCategory) {\n    super(`SSH sync probe failed: ${category}`)\n    this.name = 'SyncSshProbeError'\n  }\n}\n\nexport class SyncSessionDeltaPrefixError extends Error {\n  constructor() {\n    super('remote session event prefix changed during transfer')\n    this.name = 'SyncSessionDeltaPrefixError'\n  }\n}\n\nexport interface SyncRemoteHandshake {\n  protocolVersion: number\n  instanceId: string\n  capabilities: string[]\n}\n\nexport interface SyncRemoteNodeManifest extends SyncNodeManifest {\n  capabilities?: string[]\n}\n\nexport class SyncSshSession {\n  private readonly decoder = new SyncFrameDecoder()\n  private readonly closeSignal = new AbortController()\n  private reading = false\n  private closed = false\n  private inputEnded = false\n  private nextDataSequence = 0\n  private pendingError: Error | undefined\n\n  constructor(\n    private readonly client: Client,\n    private readonly channel: ClientChannel,\n  ) {\n    channel.on('error', (error: Error) => { this.pendingError = error })\n    channel.on('exit', (code: number | null) => {\n      if (code !== null && code !== 0) this.pendingError = new Error(`remote helper exited with code ${code}`)\n    })\n    channel.on('close', () => { this.closeSignal.abort() })\n  }\n\n  async sendControl(value: Record<string, unknown>): Promise<void> {\n    await this.write(encodeSyncControlFrame(value))\n  }\n\n  async sendData(sequence: number, data: Buffer): Promise<void> {\n    if (sequence !== this.nextDataSequence) throw new SyncProtocolError('outgoing data sequence is out of order')\n    await this.write(encodeSyncDataFrame(sequence, data))\n    this.nextDataSequence += 1\n  }\n\n  endInput(): void {\n    if (this.closed || this.inputEnded) return\n    this.inputEnded = true\n    this.channel.end()\n  }\n\n  async *readFrames(idleTimeoutMs = SSH_READ_IDLE_TIMEOUT_MS): AsyncGenerator<SyncFrame> {\n    if (this.reading) throw new SyncProtocolError('SSH sync channel can only be read once')\n    this.reading = true\n    const channel = this.channel\n    const decoder = this.decoder\n    let idleDeadline: NodeJS.Timeout | undefined\n    const armIdleDeadline = (): void => {\n      clearTimeout(idleDeadline)\n      idleDeadline = setTimeout(() => {\n        this.pendingError = new Error(`SSH channel idle for more than ${Math.round(idleTimeoutMs / 1000)}s`)\n        // Full teardown: destroying the channel alone may leave the stdout\n        // stream open, which would keep a plain for-await suspended forever.\n        this.close()\n      }, idleTimeoutMs)\n    }\n    // channel.destroy() does not reliably end ssh2's stdout stream; racing the\n    // iterator against the close signal guarantees this generator settles.\n    // A channel close resolves with a sentinel instead of rejecting: a normal\n    // helper exit closes the channel around the same moment stdout reaches EOF,\n    // and only a pendingError (idle timeout, helper crash) makes it an error.\n    const CLOSE: unique symbol = Symbol('channel-close')\n    const closed: Promise<IteratorResult<Buffer> | typeof CLOSE> = new Promise((resolve) => {\n      this.closeSignal.signal.addEventListener('abort', () => resolve(CLOSE), { once: true })\n    })\n    const iterator = (channel.stdout as AsyncIterable<Buffer>)[Symbol.asyncIterator]()\n    try {\n      armIdleDeadline()\n      for (;;) {\n        const next = await Promise.race([iterator.next(), closed])\n        if (next === CLOSE || next.done) {\n          if (this.pendingError) throw new SyncProtocolError(`SSH channel error: ${this.pendingError.message}`)\n          break\n        }\n        armIdleDeadline()\n        for (const frame of decoder.push(Buffer.from(next.value))) yield frame\n      }\n      decoder.finish()\n    } catch (error) {\n      if (error instanceof SyncProtocolError) throw error\n      const detail = this.pendingError ? this.pendingError.message : error instanceof Error ? error.message : 'unknown error'\n      throw new SyncProtocolError(`SSH channel read failed: ${detail}`)\n    } finally {\n      clearTimeout(idleDeadline)\n      void iterator.return?.().catch(() => {})\n    }\n  }\n\n  close(): void {\n    if (this.closed) return\n    this.closed = true\n    this.channel.destroy()\n    this.client.end()\n  }\n\n  private async write(frame: Buffer): Promise<void> {\n    if (this.closed || this.inputEnded) throw new SyncProtocolError('SSH sync channel input is closed')\n    if (this.channel.write(frame)) return\n    // A frozen connection never drains; bound the wait so writes cannot hang.\n    const drainDeadline = setTimeout(() => this.closeSignal.abort(), SSH_READ_IDLE_TIMEOUT_MS)\n    try {\n      await once(this.channel, 'drain', { signal: this.closeSignal.signal })\n    } catch (error) {\n      if (this.closeSignal.signal.aborted) throw new SyncProtocolError('SSH channel closed before write could drain')\n      throw error\n    } finally {\n      clearTimeout(drainDeadline)\n    }\n  }\n}\n\nexport function buildSyncSshConnectConfig(\n  peer: SyncPeer,\n  secrets: SyncPeerSecrets,\n  challenges: SyncHostKeyChallenges,\n  onChallenge: (error: SyncHostKeyChallengeError) => void,\n): ConnectConfig {\n  return {\n    host: peer.host,\n    port: peer.port,\n    username: peer.username,\n    hostHash: 'sha256',\n    readyTimeout: SSH_READY_TIMEOUT_MS,\n    keepaliveInterval: 15_000,\n    hostVerifier: (sha256Hex: string): boolean => {\n      try {\n        const decision = inspectSyncHostKey(peer, sha256Hex, challenges)\n        if (!decision.trusted) onChallenge(decision.challenge)\n        return decision.trusted\n      } catch (error) {\n        if (error instanceof SyncHostKeyChallengeError) onChallenge(error)\n        return false\n      }\n    },\n    ...(peer.authKind === 'password'\n      ? { password: secrets.password }\n      : { privateKey: secrets.privateKey, ...(secrets.passphrase ? { passphrase: secrets.passphrase } : {}) }),\n  }\n}\n\nexport class SyncSshTransport {\n  private readonly hostKeyChallenges = new SyncHostKeyChallenges()\n\n  constructor(private readonly peerManager: SyncPeerManager) {}\n\n  async probe(peerId: string): Promise<SyncRemoteHandshake> {\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      const handshake = await this.requestHandshake(session, peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT)\n      if (handshake.protocolVersion !== SYNC_PROTOCOL_VERSION) throw new SyncSshProbeError('protocol')\n      return handshake\n    } catch (error) {\n      if (\n        error instanceof SyncHostKeyChallengeError ||\n        error instanceof SyncPeerNotFoundError ||\n        error instanceof SyncSshProbeError\n      ) {\n        throw error\n      }\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  async openSession(peerId: string): Promise<{ peer: SyncPeer; session: SyncSshSession }> {\n    const { peer, secrets } = await this.peerManager.connectionData(peerId)\n    if (peer.authKind === 'password' && !secrets.password) throw new SyncSshProbeError('auth')\n    if (peer.authKind === 'key' && !secrets.privateKey) throw new SyncSshProbeError('auth')\n\n    const client = new Client()\n    let challenge: SyncHostKeyChallengeError | undefined\n    let sessionOpened = false\n    try {\n      await new Promise<void>((resolve, reject) => {\n        let settled = false\n        const finish = (error?: unknown): void => {\n          if (settled) return\n          settled = true\n          clearTimeout(readyDeadline)\n          if (error) reject(error)\n          else resolve()\n        }\n\n        // ssh2's readyTimeout can be defeated by stalls behind transparent\n        // proxies; this deadline guarantees the connect promise settles.\n        const readyDeadline = setTimeout(() => {\n          const timeout = new Error('Timed out while waiting for SSH handshake')\n          ;(timeout as Error & { level?: string }).level = 'client-timeout'\n          finish(timeout)\n          client.end()\n        }, SSH_READY_TIMEOUT_MS * 2)\n        client.once('ready', () => finish())\n        client.on('error', (error: Error) => finish(challenge ?? error))\n        const config = buildSyncSshConnectConfig(peer, secrets, this.hostKeyChallenges, (error) => {\n          challenge = error\n        })\n\n        try {\n          client.connect(config)\n        } catch (error) {\n          finish(error)\n        }\n      })\n\n      const channel = await new Promise<ClientChannel>((resolve, reject) => {\n        const execDeadline = setTimeout(() => {\n          reject(new Error('Timed out while waiting for the sync helper channel'))\n          client.end()\n        }, SSH_READY_TIMEOUT_MS)\n        client.exec(REMOTE_SYNC_HELPER_COMMAND, (error, opened) => {\n          clearTimeout(execDeadline)\n          if (error) reject(error)\n          else resolve(opened)\n        })\n      })\n      const session = new SyncSshSession(client, channel)\n      sessionOpened = true\n      return { peer, session }\n    } catch (error) {\n      if (error instanceof SyncHostKeyChallengeError || error instanceof SyncPeerNotFoundError || error instanceof SyncSshProbeError) {\n        throw error\n      }\n      if (challenge) throw challenge\n      const category = classifySshError(error)\n      if (category === 'auth' || category === 'network' || category === 'timeout') {\n        throw new SyncSshProbeError(category)\n      }\n      if (category === 'hostkey') throw new SyncSshProbeError('hostkey')\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      if (!sessionOpened) {\n        try {\n          client.end()\n        } catch {}\n      }\n    }\n  }\n\n  async fetchNodeManifest(peerId: string): Promise<SyncRemoteNodeManifest> {\n    const value = await this.fetchDataOperation(peerId, 'node-manifest')\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.manifest)) throw new SyncSshProbeError('helper')\n    const manifest = value.manifest\n    if (manifest.protocolVersion !== SYNC_PROTOCOL_VERSION || typeof manifest.instanceId !== 'string' || !Array.isArray(manifest.records)) {\n      throw new SyncSshProbeError('protocol')\n    }\n    const capabilities = value.capabilities === undefined ? undefined : value.capabilities\n    if (capabilities !== undefined && (!Array.isArray(capabilities) || !capabilities.every((item) => typeof item === 'string'))) {\n      throw new SyncSshProbeError('protocol')\n    }\n    return { ...manifest, ...(capabilities ? { capabilities } : {}) } as unknown as SyncRemoteNodeManifest\n  }\n\n  async applyNodeManifest(\n    peerId: string,\n    records: SyncNodeManifest['records'],\n    sourceName: string,\n  ): Promise<SyncNodeApplyResult> {\n    const requestBody = Buffer.from(JSON.stringify({ records, sourceName }), 'utf8')\n    if (requestBody.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation: 'node-apply',\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      for (let offset = 0, sequence = 0; offset < requestBody.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n        await session.sendData(sequence, requestBody.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, requestBody.length)))\n      }\n      await session.sendControl({ kind: 'request-end' })\n      session.endInput()\n\n      let response: Record<string, unknown> | undefined\n      for await (const frame of session.readFrames()) {\n        if (frame.kind !== 'control' || response) throw new SyncProtocolError('unexpected node apply response frame')\n        response = frame.value\n      }\n      if (!response || response.kind === 'error') throw new SyncSshProbeError('helper')\n      if (response.kind !== 'response' || response.status !== 200 || response.body === null || typeof response.body !== 'object') {\n        throw new SyncSshProbeError('helper')\n      }\n      const body = response.body as Record<string, unknown>\n      if (body.ok !== true || body.result === null || typeof body.result !== 'object') throw new SyncSshProbeError('helper')\n      const result = body.result as Record<string, unknown>\n      for (const key of ['created', 'updated', 'deleted', 'pendingRemoval', 'skipped'] as const) {\n        if (!Number.isSafeInteger(result[key]) || (result[key] as number) < 0) throw new SyncSshProbeError('protocol')\n      }\n      return result as unknown as SyncNodeApplyResult\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  async fetchSessionBundle(peerId: string): Promise<SyncSessionBundle> {\n    const value = await this.fetchDataOperation(peerId, 'session-bundle')\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.bundle)) throw new SyncSshProbeError('helper')\n    const bundle = value.bundle\n    if (bundle.protocolVersion !== 1 || typeof bundle.instanceId !== 'string' ||\n      !Array.isArray(bundle.entries) || !Array.isArray(bundle.skipped) || typeof bundle.digest !== 'string') {\n      throw new SyncSshProbeError('protocol')\n    }\n    return bundle as unknown as SyncSessionBundle\n  }\n\n  async fetchSessionManifest(peerId: string): Promise<SyncSessionManifest> {\n    const value = await this.fetchDataOperation(peerId, 'session-manifest')\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.manifest)) throw new SyncSshProbeError('helper')\n    const manifest = value.manifest\n    if (manifest.protocolVersion !== 1 || typeof manifest.instanceId !== 'string' ||\n      !Array.isArray(manifest.entries) || !Array.isArray(manifest.skipped) || typeof manifest.digest !== 'string') {\n      throw new SyncSshProbeError('protocol')\n    }\n    return manifest as unknown as SyncSessionManifest\n  }\n\n  async fetchSessionEntries(\n    peerId: string,\n    keys: readonly string[],\n    manifestDigest: string,\n    prefixes: readonly SyncSessionEventPrefix[] = [],\n    deferredObjects = false,\n  ): Promise<SyncSessionBundle> {\n    const value = await this.fetchDataOperation(peerId, 'session-entries', { keys, manifestDigest, prefixes, deferredObjects })\n    if (!isRecord(value) || value.ok !== true || !isRecord(value.bundle)) throw new SyncSshProbeError('helper')\n    const bundle = value.bundle\n    if (bundle.protocolVersion !== 1 || typeof bundle.instanceId !== 'string' ||\n      !Array.isArray(bundle.entries) || !Array.isArray(bundle.skipped) || typeof bundle.digest !== 'string') {\n      throw new SyncSshProbeError('protocol')\n    }\n    return bundle as unknown as SyncSessionBundle\n  }\n\n  async applySessionBundle(peerId: string, bundle: SyncSessionBundle, sourceName: string): Promise<SyncSessionApplyResult> {\n    const requestBody = Buffer.from(JSON.stringify({ bundle, sourceName, peerId }), 'utf8')\n    if (requestBody.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation: 'session-apply',\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      for (let offset = 0, sequence = 0; offset < requestBody.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n        await session.sendData(sequence, requestBody.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, requestBody.length)))\n      }\n      await session.sendControl({ kind: 'request-end' })\n      session.endInput()\n\n      let response: Record<string, unknown> | undefined\n      for await (const frame of session.readFrames()) {\n        if (frame.kind !== 'control' || response) throw new SyncProtocolError('unexpected session apply response frame')\n        response = frame.value\n      }\n      if (!response || response.kind === 'error') throw new SyncSshProbeError('helper')\n      if (response.kind === 'response' && response.status === 409 && isRecord(response.body) &&\n        response.body.code === 'session-delta-prefix') throw new SyncSessionDeltaPrefixError()\n      if (response.kind !== 'response' || response.status !== 200 || response.body === null || typeof response.body !== 'object') {\n        throw new SyncSshProbeError('helper')\n      }\n      const body = response.body as Record<string, unknown>\n      if (body.ok !== true || body.result === null || typeof body.result !== 'object') throw new SyncSshProbeError('helper')\n      const result = body.result as Record<string, unknown>\n      for (const key of ['created', 'updated', 'archived', 'deleted', 'skipped', 'unmapped'] as const) {\n        if (!Number.isSafeInteger(result[key]) || (result[key] as number) < 0) throw new SyncSshProbeError('protocol')\n      }\n      return result as unknown as SyncSessionApplyResult\n    } catch (error) {\n      if (error instanceof SyncSessionDeltaPrefixError) throw error\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) throw new SyncSshProbeError('protocol')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  async trustObservedHostKey(peerId: string): Promise<void> {\n    const { peer } = await this.peerManager.connectionData(peerId)\n    const fingerprint = this.hostKeyChallenges.acceptObserved(peer)\n    await this.peerManager.pinHostKey(peerId, fingerprint)\n  }\n\n  /**\n   * 拉取带外对象流：响应以帧流形式逐块 yield，调用方（收件箱）边收边落盘，\n   * 内存 O(单帧)。会话在流结束/出错时关闭（生成器 finally）。\n   */\n  async *fetchSessionObjects(\n    peerId: string,\n    objects: readonly SyncSessionObject[],\n  ): AsyncGenerator<Uint8Array> {\n    const body = Buffer.from(JSON.stringify({ objects: [...objects] }), 'utf8')\n    if (body.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation: 'session-objects',\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      for (let offset = 0, sequence = 0; offset < body.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n        await session.sendData(sequence, body.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, body.length)))\n      }\n      await session.sendControl({ kind: 'request-end' })\n      session.endInput()\n\n      let responseStatus: number | undefined\n      let bodyMode: string | undefined\n      let responseEnded = false\n      let totalBytes = 0\n      for await (const frame of session.readFrames()) {\n        if (frame.kind === 'control') {\n          if (frame.value.kind === 'error') throw new SyncSshProbeError('helper')\n          if (frame.value.kind === 'response' && responseStatus === undefined) {\n            responseStatus = typeof frame.value.status === 'number' ? frame.value.status : undefined\n            bodyMode = typeof frame.value.bodyMode === 'string' ? frame.value.bodyMode : undefined\n            continue\n          }\n          if (frame.value.kind === 'response-end' && responseStatus !== undefined && !responseEnded) {\n            responseEnded = true\n            continue\n          }\n          throw new SyncProtocolError('unexpected session-objects control frame')\n        }\n        if (responseStatus === undefined || bodyMode !== 'data' || responseEnded) {\n          throw new SyncProtocolError('unexpected session-objects data frame')\n        }\n        totalBytes += frame.data.length\n        if (totalBytes > MAX_SESSION_OBJECT_STREAM_BYTES) {\n          throw new SyncProtocolError('session-objects exceeds object stream limit')\n        }\n        yield frame.data\n      }\n      if (responseStatus !== 200 || !responseEnded) throw new SyncSshProbeError('helper')\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) {\n        const probe = new SyncSshProbeError('protocol')\n        ;(probe as Error & { detail?: string }).detail = error.message\n        throw probe\n      }\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  /**\n   * 推送带外对象流：把帧流按 1MB 分块写入请求体，逐块经 SSH 发送；\n   * 对端流式落盘收件箱后返回 JSON 摘要。\n   */\n  async pushSessionObjects(peerId: string, frames: AsyncIterable<Uint8Array>): Promise<void> {\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation: 'session-objects-push',\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      let sequence = 0\n      let totalBytes = 0\n      for await (const chunk of frames) {\n        if (!(chunk instanceof Uint8Array)) throw new SyncProtocolError('session-objects-push contains a non-byte chunk')\n        const data = Buffer.from(chunk)\n        totalBytes += data.byteLength\n        if (totalBytes > MAX_SESSION_OBJECT_STREAM_BYTES) {\n          throw new SyncProtocolError('session-objects-push exceeds object stream limit')\n        }\n        for (let offset = 0; offset < data.byteLength; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n          await session.sendData(sequence, data.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, data.byteLength)))\n        }\n      }\n      await session.sendControl({ kind: 'request-end' })\n      session.endInput()\n\n      let response: Record<string, unknown> | undefined\n      for await (const frame of session.readFrames()) {\n        if (frame.kind !== 'control' || response !== undefined) throw new SyncProtocolError('unexpected session-objects-push frame')\n        if (frame.value.kind === 'error') throw new SyncSshProbeError('helper')\n        if (frame.value.kind === 'response') response = frame.value\n      }\n      if (!response || response.status !== 200) throw new SyncSshProbeError('helper')\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) {\n        const probe = new SyncSshProbeError('protocol')\n        ;(probe as Error & { detail?: string }).detail = error.message\n        throw probe\n      }\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  private async fetchDataOperation(\n    peerId: string,\n    operation: 'node-manifest' | 'session-bundle' | 'session-manifest' | 'session-entries',\n    requestBody?: Record<string, unknown>,\n  ): Promise<unknown> {\n    const body = requestBody === undefined ? undefined : Buffer.from(JSON.stringify(requestBody), 'utf8')\n    if (body && body.length > MAX_SYNC_TRANSFER_BYTES) throw new SyncSshProbeError('protocol')\n    const { peer, session } = await this.openSession(peerId)\n    try {\n      await session.sendControl({\n        kind: 'request',\n        protocolVersion: SYNC_PROTOCOL_VERSION,\n        operation,\n        port: peer.remoteWebPort ?? DEFAULT_REMOTE_WEB_PORT,\n      })\n      if (body) {\n        for (let offset = 0, sequence = 0; offset < body.length; offset += MAX_SYNC_DATA_CHUNK_BYTES, sequence += 1) {\n          await session.sendData(sequence, body.subarray(offset, Math.min(offset + MAX_SYNC_DATA_CHUNK_BYTES, body.length)))\n        }\n        await session.sendControl({ kind: 'request-end' })\n      }\n      session.endInput()\n\n      let responseStatus: number | undefined\n      let bodyMode: string | undefined\n      let responseEnded = false\n      let totalBytes = 0\n      const chunks: Buffer[] = []\n      for await (const frame of session.readFrames()) {\n        if (frame.kind === 'control') {\n          if (frame.value.kind === 'error') throw new SyncSshProbeError('helper')\n          if (frame.value.kind === 'response' && responseStatus === undefined) {\n            responseStatus = typeof frame.value.status === 'number' ? frame.value.status : undefined\n            bodyMode = typeof frame.value.bodyMode === 'string' ? frame.value.bodyMode : undefined\n            continue\n          }\n          if (frame.value.kind === 'response-end' && responseStatus !== undefined && !responseEnded) {\n            responseEnded = true\n            continue\n          }\n          throw new SyncProtocolError(`unexpected ${operation} control frame`)\n        }\n        if (responseStatus === undefined || bodyMode !== 'data' || responseEnded) {\n          throw new SyncProtocolError(`unexpected ${operation} data frame`)\n        }\n        totalBytes += frame.data.length\n        if (totalBytes > MAX_SYNC_TRANSFER_BYTES) throw new SyncProtocolError(`${operation} exceeds transfer limit`)\n        chunks.push(frame.data)\n      }\n      if (responseStatus !== 200 || !responseEnded) throw new SyncSshProbeError('helper')\n      try {\n        return JSON.parse(Buffer.concat(chunks, totalBytes).toString('utf8')) as unknown\n      } catch {\n        throw new SyncProtocolError(`${operation} response is invalid JSON`)\n      }\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      if (error instanceof SyncProtocolError) {\n        const probe = new SyncSshProbeError('protocol')\n        ;(probe as Error & { detail?: string }).detail = error.message\n        throw probe\n      }\n      throw new SyncSshProbeError('helper')\n    } finally {\n      session.close()\n    }\n  }\n\n  private async requestHandshake(session: SyncSshSession, port: number): Promise<SyncRemoteHandshake> {\n    await session.sendControl({\n      kind: 'request',\n      protocolVersion: SYNC_PROTOCOL_VERSION,\n      operation: 'handshake',\n      port,\n    })\n    session.endInput()\n\n    let response: Record<string, unknown> | undefined\n    for await (const frame of session.readFrames()) {\n      if (frame.kind !== 'control' || response) throw new SyncProtocolError('unexpected helper frame')\n      response = frame.value\n    }\n    if (!response) throw new SyncProtocolError('helper returned no handshake response')\n    return validateHandshakeResponse(response)\n  }\n}\n\nfunction validateHandshakeResponse(value: Record<string, unknown>): SyncRemoteHandshake {\n  if (value.kind === 'error') throw new SyncSshProbeError('helper')\n  if (value.kind !== 'response' || value.status !== 200 || value.body === null || typeof value.body !== 'object') {\n    throw new SyncSshProbeError('helper')\n  }\n  const body = value.body as Record<string, unknown>\n  if (\n    typeof body.protocolVersion !== 'number' ||\n    typeof body.instanceId !== 'string' ||\n    !Array.isArray(body.capabilities) ||\n    !body.capabilities.every((capability) => typeof capability === 'string')\n  ) {\n    throw new SyncSshProbeError('protocol')\n  }\n  return {\n    protocolVersion: body.protocolVersion,\n    instanceId: body.instanceId,\n    capabilities: body.capabilities,\n  }\n}\n\n//#region 远端配置探测（SSH 登录后自动发现 DSH_HOME / profile / Web 端口）\n\nexport interface SyncRemoteProbeDraft {\n  host: string\n  port: number\n  username: string\n  authKind: 'password' | 'key'\n}\n\nexport interface SyncRemoteProbeProfile {\n  name: string\n  dshbInstalled: boolean\n  home: string\n}\n\nexport interface SyncRemoteProbeHandshake {\n  port: number\n  instanceId: string\n}\n\nexport interface SyncRemoteProbeResult {\n  homes: string[]\n  profiles: SyncRemoteProbeProfile[]\n  /** 握手命中的全部端口（同机多实例时可能有多个；配置端口的命中排最前）。 */\n  handshakes: SyncRemoteProbeHandshake[]\n  webPort?: number\n  instanceId?: string\n  processHints: string[]\n  hostKeyFingerprint: string\n}\n\nexport const REMOTE_PROBE_BEGIN_MARKER = 'DSHB_PROBE_BEGIN'\nexport const REMOTE_PROBE_END_MARKER = 'DSHB_PROBE_END'\nconst REMOTE_PROBE_TIMEOUT_MS = 12_000\nconst REMOTE_PROBE_MAX_OUTPUT_BYTES = 256 * 1024\n\n/**\n * 生成远端发现脚本：纯 POSIX sh + 远端 node（DSH 所在机器必然有 node）。\n * 三个动作：① 多候选定位 DSH_HOME（含桌面版常见路径）；② 列出 profiles 及\n * dshb 安装标记；③ 握手探测真实 Web 端口（仅远端回环，桌面版 127.0.0.1:3080\n * 即可命中）。输出以 BEGIN/END 标记包裹，逐行 \"key value\"。\n */\nexport function buildRemoteProbeScript(dshHome?: string, preferredWebPort?: number): string {\n  const homeOverride = dshHome === undefined ? '' : JSON.stringify(dshHome)\n  const homeCandidates = (homeOverride ? ` ${homeOverride}` : '')\n    + ' \"$DSH_HOME\" \"$HOME/.dsh\" \"$HOME/Library/Application Support/dsh\"'\n    + ' \"$HOME/Library/Application Support/DeepSeek Harness\"'\n  return [\n    `echo ${REMOTE_PROBE_BEGIN_MARKER}`,\n    `for c in${homeCandidates}; do`,\n    '  [ -n \"$c\" ] && [ -d \"$c/profiles\" ] && echo \"home $c\"',\n    'done',\n    `for c in${homeCandidates}; do`,\n    '  [ -n \"$c\" ] && [ -d \"$c/profiles\" ] || continue',\n    '  for p in \"$c\"/profiles/*/; do',\n    '    [ -d \"$p\" ] || continue',\n    '    b=no; [ -d \"${p}node_modules/@artenx/dshb\" ] && b=yes',\n    '    [ -f \"${p}package.json\" ] || continue',\n    '    echo \"profile $(basename \"$p\") $b $c\"',\n    '  done',\n    'done',\n    'ps -eo args= 2>/dev/null | grep -E \"dsh .*--profile|--profile .*--port|dsh web\" | grep -v grep | head -6',\n    `node -e '`\n    + 'const http=require(\"http\");'\n    + 'const ports=process.argv.slice(1).map(Number).filter(Number.isInteger);'\n    + 'let i=0;'\n    + 'function probe(){'\n    + 'if(i>=ports.length)process.exit(0);'\n    + 'const port=ports[i++];'\n    + 'const req=http.get({host:\"127.0.0.1\",port,path:\"/api/dshb/sync/internal/handshake\",timeout:700},res=>{'\n    + 'let body=\"\";res.on(\"data\",c=>body+=c);res.on(\"end\",()=>{'\n    + 'try{const j=JSON.parse(body);if(j&&j.ok===true&&typeof j.instanceId===\"string\")'\n    + '{console.log(\"handshake \"+port+\" \"+j.instanceId)}}catch(e){}probe()})});'\n    + 'req.on(\"timeout\",()=>{req.destroy();probe()});'\n    + 'req.on(\"error\",()=>probe());'\n    + '}probe()'\n    + \"' \"\n    + (preferredWebPort !== undefined ? ` ${preferredWebPort}` : '')\n    + ' 3080 8080 3079 3204 3206 3207 9080'\n    + ` $(ps -eo args= 2>/dev/null | grep -o \"\\\\-\\\\-port [0-9]\\\\+\" | awk '{print $2}' | head -6)`,\n    `echo ${REMOTE_PROBE_END_MARKER}`,\n  ].join('\\n')\n}\n\n/** 解析探测输出：仅在 BEGIN/END 标记之间取行，容忍未知行。 */\nexport function parseRemoteProbeOutput(output: string, hostKeyFingerprint: string, preferredWebPort?: number): SyncRemoteProbeResult {\n  const begin = output.indexOf(REMOTE_PROBE_BEGIN_MARKER)\n  const end = output.indexOf(REMOTE_PROBE_END_MARKER)\n  if (begin < 0 || end < begin) throw new SyncSshProbeError('helper')\n  const lines = output.slice(begin + REMOTE_PROBE_BEGIN_MARKER.length, end).split('\\n')\n    .map((line) => line.trim()).filter(Boolean)\n  const result: SyncRemoteProbeResult = { homes: [], profiles: [], handshakes: [], processHints: [], hostKeyFingerprint }\n  for (const line of lines) {\n    const [head, ...rest] = line.split(/\\s+/)\n    const value = rest.join(' ')\n    if (head === 'home' && value) result.homes.push(value)\n    else if (head === 'profile' && rest.length >= 3) {\n      const [name, dshb, home] = rest\n      result.profiles.push({ name, dshbInstalled: dshb === 'yes', home })\n    } else if (head === 'handshake' && rest.length >= 2) {\n      const port = Number(rest[0])\n      if (Number.isInteger(port) && port >= 1 && port <= 65535\n        && !result.handshakes.some((hit) => hit.port === port)) {\n        result.handshakes.push({ port, instanceId: rest[1] })\n      }\n    } else if (line && !line.startsWith('home ') && !line.startsWith('profile ') && !line.startsWith('handshake ')) {\n      result.processHints.push(line)\n    }\n  }\n  result.homes = [...new Set(result.homes)]\n  result.profiles = result.profiles.filter((profile, index, all) =>\n    all.findIndex((candidate) => candidate.name === profile.name && candidate.home === profile.home) === index)\n  // 首选端口（已保存对端的配置值）的命中作为自动回填值；其余命中仅提示。\n  const preferred = result.handshakes.find((hit) => hit.port === preferredWebPort)\n    ?? result.handshakes[0]\n  if (preferred) {\n    result.webPort = preferred.port\n    result.instanceId = preferred.instanceId\n  }\n  return result\n}\n\nexport class SyncRemoteProbe {\n  /** 探测远端：SSH 登录 + 单次 exec 发现脚本；主机密钥自动接受（只读发现，指纹随结果返回）。 */\n  async probeRemote(draft: SyncRemoteProbeDraft, secrets: SyncPeerSecrets, preferredWebPort?: number): Promise<SyncRemoteProbeResult> {\n    if (draft.authKind === 'password' && !secrets.password) throw new SyncSshProbeError('auth')\n    if (draft.authKind === 'key' && !secrets.privateKey) throw new SyncSshProbeError('auth')\n    let fingerprint = ''\n    const client = new Client()\n    try {\n      await new Promise<void>((resolve, reject) => {\n        let settled = false\n        const finish = (error?: unknown): void => {\n          if (settled) return\n          settled = true\n          clearTimeout(deadline)\n          if (error) reject(error)\n          else resolve()\n        }\n        const deadline = setTimeout(() => {\n          const timeout = new Error('Timed out while waiting for SSH handshake')\n          ;(timeout as Error & { level?: string }).level = 'client-timeout'\n          finish(timeout)\n          client.end()\n        }, SSH_READY_TIMEOUT_MS)\n        client.once('ready', () => finish())\n        client.on('error', (error: Error) => finish(error))\n        const config: ConnectConfig = {\n          host: draft.host,\n          port: draft.port,\n          username: draft.username,\n          hostHash: 'sha256',\n          readyTimeout: SSH_READY_TIMEOUT_MS,\n          // 只读探测：自动接受指纹并记录，随结果返回供 UI 展示；\n          // 保存对端后的真实同步仍走 run/trust-host-key 的显式信任流程。\n          hostVerifier: (sha256Hex: string): boolean => {\n            fingerprint = sha256Hex\n            return true\n          },\n          ...(draft.authKind === 'password'\n            ? { password: secrets.password }\n            : { privateKey: secrets.privateKey, ...(secrets.passphrase ? { passphrase: secrets.passphrase } : {}) }),\n        }\n        try {\n          client.connect(config)\n        } catch (error) {\n          finish(error)\n        }\n      })\n      const stdout = await new Promise<string>((resolve, reject) => {\n        const chunks: Buffer[] = []\n        let size = 0\n        let settled = false\n        const finish = (error?: unknown, text?: string): void => {\n          if (settled) return\n          settled = true\n          clearTimeout(deadline)\n          if (error) reject(error)\n          else resolve(text ?? '')\n        }\n        const deadline = setTimeout(() => finish(new Error('Timed out while waiting for the remote probe script')), REMOTE_PROBE_TIMEOUT_MS)\n        client.exec(buildRemoteProbeScript(undefined, preferredWebPort), (error, channel) => {\n          if (error) { finish(error); return }\n          channel.on('data', (chunk: Buffer) => {\n            size += chunk.length\n            if (size > REMOTE_PROBE_MAX_OUTPUT_BYTES) { finish(new Error('remote probe output exceeds size limit')); return }\n            chunks.push(chunk)\n          })\n          channel.on('error', (error: Error) => finish(error))\n          channel.on('close', (code: number | null) => {\n            const text = Buffer.concat(chunks).toString('utf8')\n            if (code !== 0 && !text.includes(REMOTE_PROBE_END_MARKER)) finish(new Error(`remote probe script exited with ${code}`))\n            else finish(undefined, text)\n          })\n          channel.stderr.resume()\n        })\n      })\n      return parseRemoteProbeOutput(stdout, fingerprint, preferredWebPort)\n    } catch (error) {\n      if (error instanceof SyncSshProbeError) throw error\n      const category = classifySshError(error)\n      if (category === 'auth' || category === 'network' || category === 'timeout') throw new SyncSshProbeError(category)\n      if (category === 'hostkey') throw new SyncSshProbeError('hostkey')\n      throw new SyncSshProbeError('helper')\n    } finally {\n      try {\n        client.end()\n      } catch {}\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAsBA,MAAM,uBAAuB;AAC7B,MAAM,2BAA2B;AACjC,MAAM,0BAA0B;AAIhC,IAAa,oBAAb,cAAuC,MAAM;CACtB;CAArB,YAAY,UAAyC;EACnD,MAAM,0BAA0B,UAAU;EADvB,KAAA,WAAA;EAEnB,KAAK,OAAO;CACd;AACF;AAEA,IAAa,8BAAb,cAAiD,MAAM;CACrD,cAAc;EACZ,MAAM,qDAAqD;EAC3D,KAAK,OAAO;CACd;AACF;AAYA,IAAa,iBAAb,MAA4B;CAUP;CACA;CAVnB,UAA2B,IAAI,iBAAiB;CAChD,cAA+B,IAAI,gBAAgB;CACnD,UAAkB;CAClB,SAAiB;CACjB,aAAqB;CACrB,mBAA2B;CAC3B;CAEA,YACE,QACA,SACA;EAFiB,KAAA,SAAA;EACA,KAAA,UAAA;EAEjB,QAAQ,GAAG,UAAU,UAAiB;GAAE,KAAK,eAAe;EAAM,CAAC;EACnE,QAAQ,GAAG,SAAS,SAAwB;GAC1C,IAAI,SAAS,QAAQ,SAAS,GAAG,KAAK,+BAAe,IAAI,MAAM,kCAAkC,MAAM;EACzG,CAAC;EACD,QAAQ,GAAG,eAAe;GAAE,KAAK,YAAY,MAAM;EAAE,CAAC;CACxD;CAEA,MAAM,YAAY,OAA+C;EAC/D,MAAM,KAAK,MAAM,uBAAuB,KAAK,CAAC;CAChD;CAEA,MAAM,SAAS,UAAkB,MAA6B;EAC5D,IAAI,aAAa,KAAK,kBAAkB,MAAM,IAAI,kBAAkB,wCAAwC;EAC5G,MAAM,KAAK,MAAM,oBAAoB,UAAU,IAAI,CAAC;EACpD,KAAK,oBAAoB;CAC3B;CAEA,WAAiB;EACf,IAAI,KAAK,UAAU,KAAK,YAAY;EACpC,KAAK,aAAa;EAClB,KAAK,QAAQ,IAAI;CACnB;CAEA,OAAO,WAAW,gBAAgB,0BAAqD;EACrF,IAAI,KAAK,SAAS,MAAM,IAAI,kBAAkB,wCAAwC;EACtF,KAAK,UAAU;EACf,MAAM,UAAU,KAAK;EACrB,MAAM,UAAU,KAAK;EACrB,IAAI;EACJ,MAAM,wBAA8B;GAClC,aAAa,YAAY;GACzB,eAAe,iBAAiB;IAC9B,KAAK,+BAAe,IAAI,MAAM,kCAAkC,KAAK,MAAM,gBAAgB,GAAI,EAAE,EAAE;IAGnG,KAAK,MAAM;GACb,GAAG,aAAa;EAClB;EAMA,MAAM,QAAuB,OAAO,eAAe;EACnD,MAAM,SAAyD,IAAI,SAAS,YAAY;GACtF,KAAK,YAAY,OAAO,iBAAiB,eAAe,QAAQ,KAAK,GAAG,EAAE,MAAM,KAAK,CAAC;EACxF,CAAC;EACD,MAAM,WAAY,QAAQ,OAAiC,OAAO,cAAc,CAAC;EACjF,IAAI;GACF,gBAAgB;GAChB,SAAS;IACP,MAAM,OAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,KAAK,GAAG,MAAM,CAAC;IACzD,IAAI,SAAS,SAAS,KAAK,MAAM;KAC/B,IAAI,KAAK,cAAc,MAAM,IAAI,kBAAkB,sBAAsB,KAAK,aAAa,SAAS;KACpG;IACF;IACA,gBAAgB;IAChB,KAAK,MAAM,SAAS,QAAQ,KAAK,OAAO,KAAK,KAAK,KAAK,CAAC,GAAG,MAAM;GACnE;GACA,QAAQ,OAAO;EACjB,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,MAAM,SAAS,KAAK,eAAe,KAAK,aAAa,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACxG,MAAM,IAAI,kBAAkB,4BAA4B,QAAQ;EAClE,UAAU;GACR,aAAa,YAAY;GACzB,SAAc,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;EACzC;CACF;CAEA,QAAc;EACZ,IAAI,KAAK,QAAQ;EACjB,KAAK,SAAS;EACd,KAAK,QAAQ,QAAQ;EACrB,KAAK,OAAO,IAAI;CAClB;CAEA,MAAc,MAAM,OAA8B;EAChD,IAAI,KAAK,UAAU,KAAK,YAAY,MAAM,IAAI,kBAAkB,kCAAkC;EAClG,IAAI,KAAK,QAAQ,MAAM,KAAK,GAAG;EAE/B,MAAM,gBAAgB,iBAAiB,KAAK,YAAY,MAAM,GAAG,wBAAwB;EACzF,IAAI;GACF,MAAM,KAAK,KAAK,SAAS,SAAS,EAAE,QAAQ,KAAK,YAAY,OAAO,CAAC;EACvE,SAAS,OAAO;GACd,IAAI,KAAK,YAAY,OAAO,SAAS,MAAM,IAAI,kBAAkB,6CAA6C;GAC9G,MAAM;EACR,UAAU;GACR,aAAa,aAAa;EAC5B;CACF;AACF;AAEA,SAAgB,0BACd,MACA,SACA,YACA,aACe;CACf,OAAO;EACL,MAAM,KAAK;EACX,MAAM,KAAK;EACX,UAAU,KAAK;EACf,UAAU;EACV,cAAc;EACd,mBAAmB;EACnB,eAAe,cAA+B;GAC5C,IAAI;IACF,MAAM,WAAW,mBAAmB,MAAM,WAAW,UAAU;IAC/D,IAAI,CAAC,SAAS,SAAS,YAAY,SAAS,SAAS;IACrD,OAAO,SAAS;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,2BAA2B,YAAY,KAAK;IACjE,OAAO;GACT;EACF;EACA,GAAI,KAAK,aAAa,aAClB,EAAE,UAAU,QAAQ,SAAS,IAC7B;GAAE,YAAY,QAAQ;GAAY,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAAG;CAC1G;AACF;AAEA,IAAa,mBAAb,MAA8B;CAGC;CAF7B,oBAAqC,IAAI,sBAAsB;CAE/D,YAAY,aAA+C;EAA9B,KAAA,cAAA;CAA+B;CAE5D,MAAM,MAAM,QAA8C;EACxD,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,YAAY,MAAM,KAAK,iBAAiB,SAAS,KAAK,iBAAiB,uBAAuB;GACpG,IAAI,UAAU,oBAAA,GAA2C,MAAM,IAAI,kBAAkB,UAAU;GAC/F,OAAO;EACT,SAAS,OAAO;GACd,IACE,iBAAiB,6BACjB,iBAAiB,yBACjB,iBAAiB,mBAEjB,MAAM;GAER,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAM,YAAY,QAAsE;EACtF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,eAAe,MAAM;EACtE,IAAI,KAAK,aAAa,cAAc,CAAC,QAAQ,UAAU,MAAM,IAAI,kBAAkB,MAAM;EACzF,IAAI,KAAK,aAAa,SAAS,CAAC,QAAQ,YAAY,MAAM,IAAI,kBAAkB,MAAM;EAEtF,MAAM,SAAS,IAAI,OAAO;EAC1B,IAAI;EACJ,IAAI,gBAAgB;EACpB,IAAI;GACF,MAAM,IAAI,SAAe,SAAS,WAAW;IAC3C,IAAI,UAAU;IACd,MAAM,UAAU,UAA0B;KACxC,IAAI,SAAS;KACb,UAAU;KACV,aAAa,aAAa;KAC1B,IAAI,OAAO,OAAO,KAAK;UAClB,QAAQ;IACf;IAIA,MAAM,gBAAgB,iBAAiB;KACrC,MAAM,0BAAU,IAAI,MAAM,2CAA2C;KACpE,QAAwC,QAAQ;KACjD,OAAO,OAAO;KACd,OAAO,IAAI;IACb,GAAG,uBAAuB,CAAC;IAC3B,OAAO,KAAK,eAAe,OAAO,CAAC;IACnC,OAAO,GAAG,UAAU,UAAiB,OAAO,aAAa,KAAK,CAAC;IAC/D,MAAM,SAAS,0BAA0B,MAAM,SAAS,KAAK,oBAAoB,UAAU;KACzF,YAAY;IACd,CAAC;IAED,IAAI;KACF,OAAO,QAAQ,MAAM;IACvB,SAAS,OAAO;KACd,OAAO,KAAK;IACd;GACF,CAAC;GAaD,MAAM,UAAU,IAAI,eAAe,QAAQ,MAXrB,IAAI,SAAwB,SAAS,WAAW;IACpE,MAAM,eAAe,iBAAiB;KACpC,uBAAO,IAAI,MAAM,qDAAqD,CAAC;KACvE,OAAO,IAAI;IACb,GAAG,oBAAoB;IACvB,OAAO,KAAK,6BAA6B,OAAO,WAAW;KACzD,aAAa,YAAY;KACzB,IAAI,OAAO,OAAO,KAAK;UAClB,QAAQ,MAAM;IACrB,CAAC;GACH,CAAC,CACiD;GAClD,gBAAgB;GAChB,OAAO;IAAE;IAAM;GAAQ;EACzB,SAAS,OAAO;GACd,IAAI,iBAAiB,6BAA6B,iBAAiB,yBAAyB,iBAAiB,mBAC3G,MAAM;GAER,IAAI,WAAW,MAAM;GACrB,MAAM,WAAW,iBAAiB,KAAK;GACvC,IAAI,aAAa,UAAU,aAAa,aAAa,aAAa,WAChE,MAAM,IAAI,kBAAkB,QAAQ;GAEtC,IAAI,aAAa,WAAW,MAAM,IAAI,kBAAkB,SAAS;GACjE,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,IAAI,CAAC,eACH,IAAI;IACF,OAAO,IAAI;GACb,QAAQ,CAAC;EAEb;CACF;CAEA,MAAM,kBAAkB,QAAiD;EACvE,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,eAAe;EACnE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,QAAQ,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC5G,MAAM,WAAW,MAAM;EACvB,IAAI,SAAS,oBAAA,KAA6C,OAAO,SAAS,eAAe,YAAY,CAAC,MAAM,QAAQ,SAAS,OAAO,GAClI,MAAM,IAAI,kBAAkB,UAAU;EAExC,MAAM,eAAe,MAAM,iBAAiB,KAAA,IAAY,KAAA,IAAY,MAAM;EAC1E,IAAI,iBAAiB,KAAA,MAAc,CAAC,MAAM,QAAQ,YAAY,KAAK,CAAC,aAAa,OAAO,SAAS,OAAO,SAAS,QAAQ,IACvH,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;GAAE,GAAG;GAAU,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;EAAG;CAClE;CAEA,MAAM,kBACJ,QACA,SACA,YAC8B;EAC9B,MAAM,cAAc,OAAO,KAAK,KAAK,UAAU;GAAE;GAAS;EAAW,CAAC,GAAG,MAAM;EAC/E,IAAI,YAAY,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACxF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA,WAAW;IACX,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,YAAY,QAAQ,UAAU,2BAA2B,YAAY,GAC/G,MAAM,QAAQ,SAAS,UAAU,YAAY,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,YAAY,MAAM,CAAC,CAAC;GAEjI,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACjD,QAAQ,SAAS;GAEjB,IAAI;GACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,aAAa,UAAU,MAAM,IAAI,kBAAkB,sCAAsC;IAC5G,WAAW,MAAM;GACnB;GACA,IAAI,CAAC,YAAY,SAAS,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;GAChF,IAAI,SAAS,SAAS,cAAc,SAAS,WAAW,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,SAAS,UAChH,MAAM,IAAI,kBAAkB,QAAQ;GAEtC,MAAM,OAAO,SAAS;GACtB,IAAI,KAAK,OAAO,QAAQ,KAAK,WAAW,QAAQ,OAAO,KAAK,WAAW,UAAU,MAAM,IAAI,kBAAkB,QAAQ;GACrH,MAAM,SAAS,KAAK;GACpB,KAAK,MAAM,OAAO;IAAC;IAAW;IAAW;IAAW;IAAkB;GAAS,GAC7E,IAAI,CAAC,OAAO,cAAc,OAAO,IAAI,KAAM,OAAO,OAAkB,GAAG,MAAM,IAAI,kBAAkB,UAAU;GAE/G,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAM,mBAAmB,QAA4C;EACnE,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,gBAAgB;EACpE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,MAAM,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC1G,MAAM,SAAS,MAAM;EACrB,IAAI,OAAO,oBAAoB,KAAK,OAAO,OAAO,eAAe,YAC/D,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,OAAO,OAAO,WAAW,UAC7F,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;CACT;CAEA,MAAM,qBAAqB,QAA8C;EACvE,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,kBAAkB;EACtE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,QAAQ,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC5G,MAAM,WAAW,MAAM;EACvB,IAAI,SAAS,oBAAoB,KAAK,OAAO,SAAS,eAAe,YACnE,CAAC,MAAM,QAAQ,SAAS,OAAO,KAAK,CAAC,MAAM,QAAQ,SAAS,OAAO,KAAK,OAAO,SAAS,WAAW,UACnG,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;CACT;CAEA,MAAM,oBACJ,QACA,MACA,gBACA,WAA8C,CAAC,GAC/C,kBAAkB,OACU;EAC5B,MAAM,QAAQ,MAAM,KAAK,mBAAmB,QAAQ,mBAAmB;GAAE;GAAM;GAAgB;GAAU;EAAgB,CAAC;EAC1H,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,OAAO,QAAQ,CAAC,SAAS,MAAM,MAAM,GAAG,MAAM,IAAI,kBAAkB,QAAQ;EAC1G,MAAM,SAAS,MAAM;EACrB,IAAI,OAAO,oBAAoB,KAAK,OAAO,OAAO,eAAe,YAC/D,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,OAAO,OAAO,WAAW,UAC7F,MAAM,IAAI,kBAAkB,UAAU;EAExC,OAAO;CACT;CAEA,MAAM,mBAAmB,QAAgB,QAA2B,YAAqD;EACvH,MAAM,cAAc,OAAO,KAAK,KAAK,UAAU;GAAE;GAAQ;GAAY;EAAO,CAAC,GAAG,MAAM;EACtF,IAAI,YAAY,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACxF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA,WAAW;IACX,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,YAAY,QAAQ,UAAU,2BAA2B,YAAY,GAC/G,MAAM,QAAQ,SAAS,UAAU,YAAY,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,YAAY,MAAM,CAAC,CAAC;GAEjI,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACjD,QAAQ,SAAS;GAEjB,IAAI;GACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,aAAa,UAAU,MAAM,IAAI,kBAAkB,yCAAyC;IAC/G,WAAW,MAAM;GACnB;GACA,IAAI,CAAC,YAAY,SAAS,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;GAChF,IAAI,SAAS,SAAS,cAAc,SAAS,WAAW,OAAO,SAAS,SAAS,IAAI,KACnF,SAAS,KAAK,SAAS,wBAAwB,MAAM,IAAI,4BAA4B;GACvF,IAAI,SAAS,SAAS,cAAc,SAAS,WAAW,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,SAAS,UAChH,MAAM,IAAI,kBAAkB,QAAQ;GAEtC,MAAM,OAAO,SAAS;GACtB,IAAI,KAAK,OAAO,QAAQ,KAAK,WAAW,QAAQ,OAAO,KAAK,WAAW,UAAU,MAAM,IAAI,kBAAkB,QAAQ;GACrH,MAAM,SAAS,KAAK;GACpB,KAAK,MAAM,OAAO;IAAC;IAAW;IAAW;IAAY;IAAW;IAAW;GAAU,GACnF,IAAI,CAAC,OAAO,cAAc,OAAO,IAAI,KAAM,OAAO,OAAkB,GAAG,MAAM,IAAI,kBAAkB,UAAU;GAE/G,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,6BAA6B,MAAM;GACxD,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB,MAAM,IAAI,kBAAkB,UAAU;GAC9E,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAM,qBAAqB,QAA+B;EACxD,MAAM,EAAE,SAAS,MAAM,KAAK,YAAY,eAAe,MAAM;EAC7D,MAAM,cAAc,KAAK,kBAAkB,eAAe,IAAI;EAC9D,MAAM,KAAK,YAAY,WAAW,QAAQ,WAAW;CACvD;;;;;CAMA,OAAO,oBACL,QACA,SAC4B;EAC5B,MAAM,OAAO,OAAO,KAAK,KAAK,UAAU,EAAE,SAAS,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,MAAM;EAC1E,IAAI,KAAK,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACjF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA,WAAW;IACX,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,KAAK,QAAQ,UAAU,2BAA2B,YAAY,GACxG,MAAM,QAAQ,SAAS,UAAU,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,KAAK,MAAM,CAAC,CAAC;GAEnH,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACjD,QAAQ,SAAS;GAEjB,IAAI;GACJ,IAAI;GACJ,IAAI,gBAAgB;GACpB,IAAI,aAAa;GACjB,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,WAAW;KAC5B,IAAI,MAAM,MAAM,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;KACtE,IAAI,MAAM,MAAM,SAAS,cAAc,mBAAmB,KAAA,GAAW;MACnE,iBAAiB,OAAO,MAAM,MAAM,WAAW,WAAW,MAAM,MAAM,SAAS,KAAA;MAC/E,WAAW,OAAO,MAAM,MAAM,aAAa,WAAW,MAAM,MAAM,WAAW,KAAA;MAC7E;KACF;KACA,IAAI,MAAM,MAAM,SAAS,kBAAkB,mBAAmB,KAAA,KAAa,CAAC,eAAe;MACzF,gBAAgB;MAChB;KACF;KACA,MAAM,IAAI,kBAAkB,0CAA0C;IACxE;IACA,IAAI,mBAAmB,KAAA,KAAa,aAAa,UAAU,eACzD,MAAM,IAAI,kBAAkB,uCAAuC;IAErE,cAAc,MAAM,KAAK;IACzB,IAAI,aAAA,aACF,MAAM,IAAI,kBAAkB,6CAA6C;IAE3E,MAAM,MAAM;GACd;GACA,IAAI,mBAAmB,OAAO,CAAC,eAAe,MAAM,IAAI,kBAAkB,QAAQ;EACpF,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB;IACtC,MAAM,QAAQ,IAAI,kBAAkB,UAAU;IAC7C,MAAuC,SAAS,MAAM;IACvD,MAAM;GACR;GACA,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;;;;;CAMA,MAAM,mBAAmB,QAAgB,QAAkD;EACzF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA,WAAW;IACX,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,IAAI,WAAW;GACf,IAAI,aAAa;GACjB,WAAW,MAAM,SAAS,QAAQ;IAChC,IAAI,EAAE,iBAAiB,aAAa,MAAM,IAAI,kBAAkB,gDAAgD;IAChH,MAAM,OAAO,OAAO,KAAK,KAAK;IAC9B,cAAc,KAAK;IACnB,IAAI,aAAA,aACF,MAAM,IAAI,kBAAkB,kDAAkD;IAEhF,KAAK,IAAI,SAAS,GAAG,SAAS,KAAK,YAAY,UAAU,2BAA2B,YAAY,GAC9F,MAAM,QAAQ,SAAS,UAAU,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,KAAK,UAAU,CAAC,CAAC;GAEzH;GACA,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACjD,QAAQ,SAAS;GAEjB,IAAI;GACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,aAAa,aAAa,KAAA,GAAW,MAAM,IAAI,kBAAkB,uCAAuC;IAC3H,IAAI,MAAM,MAAM,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;IACtE,IAAI,MAAM,MAAM,SAAS,YAAY,WAAW,MAAM;GACxD;GACA,IAAI,CAAC,YAAY,SAAS,WAAW,KAAK,MAAM,IAAI,kBAAkB,QAAQ;EAChF,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB;IACtC,MAAM,QAAQ,IAAI,kBAAkB,UAAU;IAC7C,MAAuC,SAAS,MAAM;IACvD,MAAM;GACR;GACA,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAc,mBACZ,QACA,WACA,aACkB;EAClB,MAAM,OAAO,gBAAgB,KAAA,IAAY,KAAA,IAAY,OAAO,KAAK,KAAK,UAAU,WAAW,GAAG,MAAM;EACpG,IAAI,QAAQ,KAAK,SAAA,WAAkC,MAAM,IAAI,kBAAkB,UAAU;EACzF,MAAM,EAAE,MAAM,YAAY,MAAM,KAAK,YAAY,MAAM;EACvD,IAAI;GACF,MAAM,QAAQ,YAAY;IACxB,MAAM;IACN,iBAAA;IACA;IACA,MAAM,KAAK,iBAAiB;GAC9B,CAAC;GACD,IAAI,MAAM;IACR,KAAK,IAAI,SAAS,GAAG,WAAW,GAAG,SAAS,KAAK,QAAQ,UAAU,2BAA2B,YAAY,GACxG,MAAM,QAAQ,SAAS,UAAU,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,2BAA2B,KAAK,MAAM,CAAC,CAAC;IAEnH,MAAM,QAAQ,YAAY,EAAE,MAAM,cAAc,CAAC;GACnD;GACA,QAAQ,SAAS;GAEjB,IAAI;GACJ,IAAI;GACJ,IAAI,gBAAgB;GACpB,IAAI,aAAa;GACjB,MAAM,SAAmB,CAAC;GAC1B,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;IAC9C,IAAI,MAAM,SAAS,WAAW;KAC5B,IAAI,MAAM,MAAM,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;KACtE,IAAI,MAAM,MAAM,SAAS,cAAc,mBAAmB,KAAA,GAAW;MACnE,iBAAiB,OAAO,MAAM,MAAM,WAAW,WAAW,MAAM,MAAM,SAAS,KAAA;MAC/E,WAAW,OAAO,MAAM,MAAM,aAAa,WAAW,MAAM,MAAM,WAAW,KAAA;MAC7E;KACF;KACA,IAAI,MAAM,MAAM,SAAS,kBAAkB,mBAAmB,KAAA,KAAa,CAAC,eAAe;MACzF,gBAAgB;MAChB;KACF;KACA,MAAM,IAAI,kBAAkB,cAAc,UAAU,eAAe;IACrE;IACA,IAAI,mBAAmB,KAAA,KAAa,aAAa,UAAU,eACzD,MAAM,IAAI,kBAAkB,cAAc,UAAU,YAAY;IAElE,cAAc,MAAM,KAAK;IACzB,IAAI,aAAA,WAAsC,MAAM,IAAI,kBAAkB,GAAG,UAAU,wBAAwB;IAC3G,OAAO,KAAK,MAAM,IAAI;GACxB;GACA,IAAI,mBAAmB,OAAO,CAAC,eAAe,MAAM,IAAI,kBAAkB,QAAQ;GAClF,IAAI;IACF,OAAO,KAAK,MAAM,OAAO,OAAO,QAAQ,UAAU,CAAC,CAAC,SAAS,MAAM,CAAC;GACtE,QAAQ;IACN,MAAM,IAAI,kBAAkB,GAAG,UAAU,0BAA0B;GACrE;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,IAAI,iBAAiB,mBAAmB;IACtC,MAAM,QAAQ,IAAI,kBAAkB,UAAU;IAC7C,MAAuC,SAAS,MAAM;IACvD,MAAM;GACR;GACA,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,QAAQ,MAAM;EAChB;CACF;CAEA,MAAc,iBAAiB,SAAyB,MAA4C;EAClG,MAAM,QAAQ,YAAY;GACxB,MAAM;GACN,iBAAA;GACA,WAAW;GACX;EACF,CAAC;EACD,QAAQ,SAAS;EAEjB,IAAI;EACJ,WAAW,MAAM,SAAS,QAAQ,WAAW,GAAG;GAC9C,IAAI,MAAM,SAAS,aAAa,UAAU,MAAM,IAAI,kBAAkB,yBAAyB;GAC/F,WAAW,MAAM;EACnB;EACA,IAAI,CAAC,UAAU,MAAM,IAAI,kBAAkB,uCAAuC;EAClF,OAAO,0BAA0B,QAAQ;CAC3C;AACF;AAEA,SAAS,0BAA0B,OAAqD;CACtF,IAAI,MAAM,SAAS,SAAS,MAAM,IAAI,kBAAkB,QAAQ;CAChE,IAAI,MAAM,SAAS,cAAc,MAAM,WAAW,OAAO,MAAM,SAAS,QAAQ,OAAO,MAAM,SAAS,UACpG,MAAM,IAAI,kBAAkB,QAAQ;CAEtC,MAAM,OAAO,MAAM;CACnB,IACE,OAAO,KAAK,oBAAoB,YAChC,OAAO,KAAK,eAAe,YAC3B,CAAC,MAAM,QAAQ,KAAK,YAAY,KAChC,CAAC,KAAK,aAAa,OAAO,eAAe,OAAO,eAAe,QAAQ,GAEvE,MAAM,IAAI,kBAAkB,UAAU;CAExC,OAAO;EACL,iBAAiB,KAAK;EACtB,YAAY,KAAK;EACjB,cAAc,KAAK;CACrB;AACF;AAiCA,MAAa,4BAA4B;AACzC,MAAa,0BAA0B;AACvC,MAAM,0BAA0B;AAChC,MAAM,gCAAgC;;;;;;;AAQtC,SAAgB,uBAAuB,SAAkB,kBAAmC;CAC1F,MAAM,eAAe,YAAY,KAAA,IAAY,KAAK,KAAK,UAAU,OAAO;CACxE,MAAM,kBAAkB,eAAe,IAAI,iBAAiB,MACxD;CAEJ,OAAO;EACL,QAAQ;EACR,WAAW,eAAe;EAC1B;EACA;EACA,WAAW,eAAe;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,kmBAeG,qBAAqB,KAAA,IAAY,IAAI,qBAAqB,MAC3D;EAEF,QAAQ;CACV,CAAC,CAAC,KAAK,IAAI;AACb;;AAGA,SAAgB,uBAAuB,QAAgB,oBAA4B,kBAAkD;CACnI,MAAM,QAAQ,OAAO,QAAQ,yBAAyB;CACtD,MAAM,MAAM,OAAO,QAAQ,uBAAuB;CAClD,IAAI,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,kBAAkB,QAAQ;CAClE,MAAM,QAAQ,OAAO,MAAM,QAAQ,IAAkC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAClF,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;CAC5C,MAAM,SAAgC;EAAE,OAAO,CAAC;EAAG,UAAU,CAAC;EAAG,YAAY,CAAC;EAAG,cAAc,CAAC;EAAG;CAAmB;CACtH,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,CAAC,MAAM,GAAG,QAAQ,KAAK,MAAM,KAAK;EACxC,MAAM,QAAQ,KAAK,KAAK,GAAG;EAC3B,IAAI,SAAS,UAAU,OAAO,OAAO,MAAM,KAAK,KAAK;OAChD,IAAI,SAAS,aAAa,KAAK,UAAU,GAAG;GAC/C,MAAM,CAAC,MAAM,MAAM,QAAQ;GAC3B,OAAO,SAAS,KAAK;IAAE;IAAM,eAAe,SAAS;IAAO;GAAK,CAAC;EACpE,OAAO,IAAI,SAAS,eAAe,KAAK,UAAU,GAAG;GACnD,MAAM,OAAO,OAAO,KAAK,EAAE;GAC3B,IAAI,OAAO,UAAU,IAAI,KAAK,QAAQ,KAAK,QAAQ,SAC9C,CAAC,OAAO,WAAW,MAAM,QAAQ,IAAI,SAAS,IAAI,GACrD,OAAO,WAAW,KAAK;IAAE;IAAM,YAAY,KAAK;GAAG,CAAC;EAExD,OAAO,IAAI,QAAQ,CAAC,KAAK,WAAW,OAAO,KAAK,CAAC,KAAK,WAAW,UAAU,KAAK,CAAC,KAAK,WAAW,YAAY,GAC3G,OAAO,aAAa,KAAK,IAAI;CAEjC;CACA,OAAO,QAAQ,CAAC,GAAG,IAAI,IAAI,OAAO,KAAK,CAAC;CACxC,OAAO,WAAW,OAAO,SAAS,QAAQ,SAAS,OAAO,QACxD,IAAI,WAAW,cAAc,UAAU,SAAS,QAAQ,QAAQ,UAAU,SAAS,QAAQ,IAAI,MAAM,KAAK;CAE5G,MAAM,YAAY,OAAO,WAAW,MAAM,QAAQ,IAAI,SAAS,gBAAgB,KAC1E,OAAO,WAAW;CACvB,IAAI,WAAW;EACb,OAAO,UAAU,UAAU;EAC3B,OAAO,aAAa,UAAU;CAChC;CACA,OAAO;AACT;AAEA,IAAa,kBAAb,MAA6B;;CAE3B,MAAM,YAAY,OAA6B,SAA0B,kBAA2D;EAClI,IAAI,MAAM,aAAa,cAAc,CAAC,QAAQ,UAAU,MAAM,IAAI,kBAAkB,MAAM;EAC1F,IAAI,MAAM,aAAa,SAAS,CAAC,QAAQ,YAAY,MAAM,IAAI,kBAAkB,MAAM;EACvF,IAAI,cAAc;EAClB,MAAM,SAAS,IAAI,OAAO;EAC1B,IAAI;GACF,MAAM,IAAI,SAAe,SAAS,WAAW;IAC3C,IAAI,UAAU;IACd,MAAM,UAAU,UAA0B;KACxC,IAAI,SAAS;KACb,UAAU;KACV,aAAa,QAAQ;KACrB,IAAI,OAAO,OAAO,KAAK;UAClB,QAAQ;IACf;IACA,MAAM,WAAW,iBAAiB;KAChC,MAAM,0BAAU,IAAI,MAAM,2CAA2C;KACpE,QAAwC,QAAQ;KACjD,OAAO,OAAO;KACd,OAAO,IAAI;IACb,GAAG,oBAAoB;IACvB,OAAO,KAAK,eAAe,OAAO,CAAC;IACnC,OAAO,GAAG,UAAU,UAAiB,OAAO,KAAK,CAAC;IAClD,MAAM,SAAwB;KAC5B,MAAM,MAAM;KACZ,MAAM,MAAM;KACZ,UAAU,MAAM;KAChB,UAAU;KACV,cAAc;KAGd,eAAe,cAA+B;MAC5C,cAAc;MACd,OAAO;KACT;KACA,GAAI,MAAM,aAAa,aACnB,EAAE,UAAU,QAAQ,SAAS,IAC7B;MAAE,YAAY,QAAQ;MAAY,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KAAG;IAC1G;IACA,IAAI;KACF,OAAO,QAAQ,MAAM;IACvB,SAAS,OAAO;KACd,OAAO,KAAK;IACd;GACF,CAAC;GA6BD,OAAO,uBAAuB,MA5BT,IAAI,SAAiB,SAAS,WAAW;IAC5D,MAAM,SAAmB,CAAC;IAC1B,IAAI,OAAO;IACX,IAAI,UAAU;IACd,MAAM,UAAU,OAAiB,SAAwB;KACvD,IAAI,SAAS;KACb,UAAU;KACV,aAAa,QAAQ;KACrB,IAAI,OAAO,OAAO,KAAK;UAClB,QAAQ,QAAQ,EAAE;IACzB;IACA,MAAM,WAAW,iBAAiB,uBAAO,IAAI,MAAM,qDAAqD,CAAC,GAAG,uBAAuB;IACnI,OAAO,KAAK,uBAAuB,KAAA,GAAW,gBAAgB,IAAI,OAAO,YAAY;KACnF,IAAI,OAAO;MAAE,OAAO,KAAK;MAAG;KAAO;KACnC,QAAQ,GAAG,SAAS,UAAkB;MACpC,QAAQ,MAAM;MACd,IAAI,OAAO,+BAA+B;OAAE,uBAAO,IAAI,MAAM,wCAAwC,CAAC;OAAG;MAAO;MAChH,OAAO,KAAK,KAAK;KACnB,CAAC;KACD,QAAQ,GAAG,UAAU,UAAiB,OAAO,KAAK,CAAC;KACnD,QAAQ,GAAG,UAAU,SAAwB;MAC3C,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;MAClD,IAAI,SAAS,KAAK,CAAC,KAAK,SAAA,gBAAgC,GAAG,uBAAO,IAAI,MAAM,mCAAmC,MAAM,CAAC;WACjH,OAAO,KAAA,GAAW,IAAI;KAC7B,CAAC;KACD,QAAQ,OAAO,OAAO;IACxB,CAAC;GACH,CAAC,GACqC,aAAa,gBAAgB;EACrE,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,MAAM,WAAW,iBAAiB,KAAK;GACvC,IAAI,aAAa,UAAU,aAAa,aAAa,aAAa,WAAW,MAAM,IAAI,kBAAkB,QAAQ;GACjH,IAAI,aAAa,WAAW,MAAM,IAAI,kBAAkB,SAAS;GACjE,MAAM,IAAI,kBAAkB,QAAQ;EACtC,UAAU;GACR,IAAI;IACF,OAAO,IAAI;GACb,QAAQ,CAAC;EACX;CACF;AACF"}

package/lib/{protocol-KaWZArY8.d.ts → protocol-DJ0zyVlB.d.ts}

@@ -3,9 +3,12 @@ declare const SYNC_PROTOCOL_VERSION = 1;
 declare const SYNC_SESSION_MANIFEST_CAPABILITY = "session-manifest-v1";
 declare const SYNC_SESSION_EVENT_TAIL_CAPABILITY = "session-event-tail-delta-v1";
 declare const SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY = "session-bundle-objects-v1";
+declare const SYNC_SESSION_OBJECT_STREAM_CAPABILITY = "session-object-stream-v1";
 declare const MAX_SYNC_CONTROL_FRAME_BYTES: number;
 declare const MAX_SYNC_DATA_CHUNK_BYTES: number;
 declare const MAX_SYNC_TRANSFER_BYTES: number;
+declare const MAX_SESSION_OBJECT_INLINE_BYTES: number;
+declare const MAX_SESSION_OBJECT_STREAM_BYTES: number;
 type SyncFrame = {
   kind: 'control';
   value: Record<string, unknown>;
@@ -34,5 +37,5 @@ declare class SyncFrameDecoder {
   private resetFrame;
 }
 //#endregion
-export { SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY as a, SyncFrame as c, encodeSyncControlFrame as d, encodeSyncDataFrame as f, SYNC_PROTOCOL_VERSION as i, SyncFrameDecoder as l, MAX_SYNC_DATA_CHUNK_BYTES as n, SYNC_SESSION_EVENT_TAIL_CAPABILITY as o, MAX_SYNC_TRANSFER_BYTES as r, SYNC_SESSION_MANIFEST_CAPABILITY as s, MAX_SYNC_CONTROL_FRAME_BYTES as t, SyncProtocolError as u };
-//# sourceMappingURL=protocol-KaWZArY8.d.ts.map
+export { MAX_SYNC_TRANSFER_BYTES as a, SYNC_SESSION_EVENT_TAIL_CAPABILITY as c, SyncFrame as d, SyncFrameDecoder as f, encodeSyncDataFrame as h, MAX_SYNC_DATA_CHUNK_BYTES as i, SYNC_SESSION_MANIFEST_CAPABILITY as l, encodeSyncControlFrame as m, MAX_SESSION_OBJECT_STREAM_BYTES as n, SYNC_PROTOCOL_VERSION as o, SyncProtocolError as p, MAX_SYNC_CONTROL_FRAME_BYTES as r, SYNC_SESSION_BUNDLE_OBJECTS_CAPABILITY as s, MAX_SESSION_OBJECT_INLINE_BYTES as t, SYNC_SESSION_OBJECT_STREAM_CAPABILITY as u };
+//# sourceMappingURL=protocol-DJ0zyVlB.d.ts.map