@atomic-chat/core 0.5.1 → 0.13.2

package/dist/runtime/environment/linux-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-plan.js","sourceRoot":"","sources":["../../../src/runtime/environment/linux-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAGH,OAAO,EACL,OAAO,EACP,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GAGvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAyB,MAAM,2BAA2B,CAAA;AAuE3F,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;AAE9D;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAS,EAAE,CAAS;IACxD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAChE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAClD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,SAAS,KAAK,UAAU;YAAE,OAAO,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,KAAiB,EAAE,YAA+B;IACjF,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AACvG,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,KAAiB,EACjB,YAA+B,EAC/B,OAA+B;IAE/B,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,WAAW,CAAA;IAC1C,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACrD,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,cAAc,CAAA;IACnF,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI;QAAE,OAAO,sBAAsB,CAAA;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAChD,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC,EAAE;QAC5B,KAAK,CAAC,UAAU,KAAK,YAAY,CAAC,UAAU;QAC5C,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,CACpC,CAAA;IACD,OAAO,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAA;AAC7C,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,OAA+B;IAC5E,MAAM,OAAO,GAAG,wBAAwB,CAAC;QACvC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;QACpF,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,wBAAwB;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAA;AACpF,CAAC;AAID,SAAS,OAAO,CAAC,KAAiB,EAAE,OAA+B;IACjE,MAAM,OAAO,GAAG,CAAC,QAAwB,EAAW,EAAE,CAAC,CAAC;QACtD,YAAY,EAAE,sBAAsB;QACpC,sBAAsB,EAAE,KAAK;QAC7B,YAAY,EAAE,IAAI;QAClB,QAAQ;KACT,CAAC,CAAA;IAEF,MAAM,SAAS,GAAmB,EAAE,CAAA;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,uBAAuB,IAAI,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACxG,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACpF,SAAS,CAAC,IAAI,CACZ,OAAO,CACL,0BAA0B,EAC1B,gCAAgC,KAAK,CAAC,YAAY,mEAAmE,EACrH,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,CAC/B,CACF,CAAA;IACH,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7C,SAAS,CAAC,IAAI,CACZ,OAAO,CACL,gBAAgB,EAChB,+EAA+E,CAChF,CACF,CAAA;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,qBAAqB,CAAC,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClF,SAAS,CAAC,IAAI,CACZ,OAAO,CACL,gBAAgB,EAChB,mDAAmD,OAAO,CAAC,oBAAoB,+BAA+B,KAAK,CAAC,cAAc,GAAG,EACrI,EAAE,QAAQ,EAAE,OAAO,CAAC,oBAAoB,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,CACzE,CACF,CAAA;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,2DAA2D,CAAC,CAAC,CAAA;QAChG,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAC/C,qBAAqB,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAChG,CAAA;YACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzF,SAAS,CAAC,IAAI,CACZ,OAAO,CACL,4BAA4B,EAC5B,uCAAuC,OAAO,CAAC,wBAAwB,+CAA+C,IAAI,CAAC,kBAAkB,GAAG,EAChJ,EAAE,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAChF,CACF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IACvE,IAAI,aAAa,KAAK,IAAI;QAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAEzD,4FAA4F;IAC5F,2FAA2F;IAC3F,qBAAqB;IACrB,IACE,OAAO,CAAC,iBAAiB,KAAK,IAAI;QAClC,KAAK,CAAC,eAAe,KAAK,IAAI;QAC9B,KAAK,CAAC,eAAe,GAAG,OAAO,CAAC,iBAAiB,EACjD,CAAC;QACD,SAAS,CAAC,IAAI,CACZ,OAAO,CAAC,mBAAmB,EAAE,4DAA4D,EAAE;YACzF,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;YACnC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;SAC5C,CAAC,CACH,CAAA;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAA;IAEnD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAA;IAC7E,IAAI,WAAW,EAAE,CAAC;QAChB,8FAA8F;QAC9F,2EAA2E;QAC3E,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC3G,CAAC;IAED,+FAA+F;IAC/F,4CAA4C;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAiC,CAAA;IAC5D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;IAEtD,mGAAmG;IACnG,oGAAoG;IACpG,8CAA8C;IAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACpE,8FAA8F;YAC9F,gGAAgG;YAChG,wFAAwF;YACxF,4CAA4C;YAC5C,8EAA8E;YAC9E,gGAAgG;YAChG,+EAA+E;YAC/E,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACxD,MAAM,KAAK,GACT,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACpG,OAAO,OAAO,CAAC;gBACb,sBAAsB,EAAE;gBACxB,GAAG,UAAU;gBACb,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,IAAI,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvF,8FAA8F;YAC9F,+FAA+F;YAC/F,+FAA+F;YAC/F,+FAA+F;YAC/F,sFAAsF;YACtF,qBAAqB;YACrB,OAAO,OAAO,CAAC;gBACb,OAAO,CACL,2BAA2B,EAC3B,4FAA4F;oBAC1F,qFAAqF;oBACrF,wFAAwF;oBACxF,wDAAwD,CAC3D;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,mGAAmG;IACnG,2EAA2E;IAC3E,MAAM,iBAAiB,GACrB,KAAK,CAAC,MAAM,CAAC,GAAG;QAChB,KAAK,CAAC,iBAAiB;QACvB,uBAAuB,CAAC,KAAK,EAAE,YAAY,CAAC;QAC5C,mBAAmB,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;QACpC,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAA;IAEhC,IAAI,iBAAiB,EAAE,CAAC;QACtB,gGAAgG;QAChG,8FAA8F;QAC9F,uBAAuB;QACvB,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC;gBACb,OAAO,CACL,2BAA2B,EAC3B,8FAA8F;oBAC5F,qFAAqF;oBACrF,8DAA8D,CACjE;aACF,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACpC,+FAA+F;YAC/F,OAAO,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3F,CAAC;QACD,OAAO;YACL,YAAY,EAAE,gBAAgB;YAC9B,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,kBAAkB,EAAE,IAAI;gBACxB,mBAAmB,EAAE,IAAI;gBACzB,cAAc,EAAE;oBACd;wBACE,IAAI,EAAE,0BAA0B;wBAChC,IAAI,EAAE,OAAO,OAAO,CAAC,WAAW,8EAA8E;wBAC9G,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;qBACtC;iBACF;aACF;YACD,QAAQ,EAAE,EAAE;SACb,CAAA;IACH,CAAC;IAED,2FAA2F;IAC3F,gGAAgG;IAChG,kGAAkG;IAClG,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/E,CAAC;QACD,kGAAkG;QAClG,qFAAqF;QACrF,MAAM,WAAW,GACf,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB;YAC9B,OAAO,CAAC,WAAW,KAAK,MAAM;YAC9B,KAAK,CAAC,YAAY,CAAC,UAAU,KAAK,IAAI,CAAA;QACxC,MAAM,KAAK,GAAG;YACZ,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC;YACxC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACnG,CAAA;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;IAC1G,CAAC;IAED,6FAA6F;IAC7F,oGAAoG;IACpG,4FAA4F;IAC5F,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACvG,OAAO,OAAO,CAAC,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,iGAAiG;IACjG,iGAAiG;IACjG,4EAA4E;IAC5E,wFAAwF;IACxF,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAA;IAEtE,OAAO;QACL,YAAY,EAAE,gBAAgB;QAC9B,sBAAsB,EAAE,KAAK;QAC7B,YAAY,EAAE,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC;QAC5D,QAAQ,EAAE,EAAE;KACb,CAAA;AACH,CAAC;AAED,MAAM,YAAY,GAAkC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AAE9E,SAAS,gBAAgB,CACvB,KAAiB,EACjB,YAA+B,EAC/B,OAA+B;IAE/B,gGAAgG;IAChG,yEAAyE;IACzE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAA;IAClD,6FAA6F;IAC7F,mGAAmG;IACnG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC3C,MAAM,gBAAgB,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAA;IAElE,iGAAiG;IACjG,iGAAiG;IACjG,8FAA8F;IAC9F,kDAAkD;IAClD,MAAM,cAAc,GAClB,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7F,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAA;IACnF,MAAM,eAAe,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,eAAe,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1G,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IAEtE,MAAM,aAAa,GAAwB,EAAE,CAAA;IAE7C,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,aAAa,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,yBAAyB,WAAW,oDAAoD;YAC9F,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,aAAa,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,oCAAoC,WAAW,qEAAqE;YAC1H,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,aAAa,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,iCAAiC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACpE,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAChD,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACrB,aAAa,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,0FAA0F;SACjG,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,mBAAmB;YACzB,IAAI,EACF,oFAAoF;gBACpF,yFAAyF;gBACzF,wFAAwF;SAC3F,CAAC,CAAA;IACJ,CAAC;IAED,iGAAiG;IACjG,+FAA+F;IAC/F,gGAAgG;IAChG,8DAA8D;IAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACzC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAC7E,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,OAAO,OAAO,CAAC,WAAW,8EAA8E;gBAC9G,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;aACtC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,8FAA8F;IAC9F,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,gGAAgG;IAChG,gGAAgG;IAChG,oDAAoD;IACpD,IAAI,gBAAgB,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAA;QACnE,aAAa,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EACF,KAAK,KAAK,IAAI;gBACZ,CAAC,CAAC,yFAAyF;gBAC3F,CAAC,CAAC,KAAK,GAAG,CAAC;oBACT,CAAC,CAAC,yDAAyD,KAAK,kCAAkC;oBAClG,CAAC,CAAC,uDAAuD;YAC/D,MAAM,EAAE,EAAE,kBAAkB,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC3E,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,kBAAkB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;QAC5C,8FAA8F;QAC9F,6BAA6B;QAC7B,mBAAmB,EAAE,IAAI;QACzB,cAAc,EAAE,aAAa;KAC9B,CAAA;AACH,CAAC"}

package/dist/runtime/environment/linux-probe.d.ts

@@ -0,0 +1,245 @@
+/**
+ * What a Linux machine can already do, read without changing any of it.
+ *
+ * The answer this produces decides whether Atomic Chat asks for a password at all. A machine that
+ * already runs containers on its GPU — which describes most people who would want this engine — is
+ * adopted exactly as it is: no packages, no daemon restart, no prompt. Everything else is a list of
+ * what would have to be added, shown before the system asks for authorization. Turning these facts
+ * into that verdict is `assessLinux` in `./linux-plan.js`; this file only reads the machine.
+ *
+ * Nothing here runs a container or writes a file. The one check that would — starting a container
+ * with a GPU attached — pulls an image, so it belongs to provisioning and is reported as `not-run`
+ * until somebody has run it.
+ *
+ * A fact that could not be read is not a fact. Every probe that fails lands in `unknown`, and an
+ * unknown prerequisite blocks the setup instead of being assumed present: guessing wrong here means
+ * asking for a password to install something that is already there, or claiming a machine is ready
+ * and failing halfway through a sixteen-gigabyte download.
+ */
+import type { GpuFacts, LinuxDockerInstallMethod, LinuxPackageFamily } from '../../contracts/index.js';
+import { type LinuxRoute } from './linux-docker-network.js';
+export interface CommandOutput {
+    /** Null when the binary is not on the machine at all. */
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}
+export interface LinuxProbeDeps {
+    /**
+     * `env`, when given, is an *overlay* on the environment this call would otherwise inherit — never
+     * a full replacement. Every other inherited variable (`PATH`, locale, ...) stays; a key mapped to
+     * a string sets it, a key mapped to `undefined` strips it. Used to keep a stray `DOCKER_HOST`/
+     * `DOCKER_CONTEXT`/`DOCKER_TLS_VERIFY`/`DOCKER_CERT_PATH` from steering the forced system-socket
+     * `docker info` call anywhere else, without discarding the rest of the environment the command
+     * would normally need (round 2, item 10 — the earlier wording here said "replaces", which is not
+     * what a caller should implement: `hostExec` in `host-exec.ts` merges this onto `process.env`, or
+     * onto its own configured base environment, rather than substituting it wholesale).
+     */
+    exec: (command: string, args: string[], env?: Record<string, string | undefined>) => Promise<CommandOutput>;
+    /**
+     * The file's text. Contract (round 4, item D): resolve `null` **only** when the file does not
+     * exist (`ENOENT`); **reject** on every other failure (`EACCES`, `EISDIR`, `EIO`, ...). This probe
+     * relies on the difference for `/etc/docker/daemon.json`: `null` reads as "nothing configured
+     * yet", a rejection as "exists but unreadable", which blocks rather than planning a runtime change
+     * over a file nobody could read. An implementation that maps every error to `null` silently turns
+     * a locked-down file into "not configured". This module ships no default implementation; the
+     * caller that wires `probeLinux` to the real filesystem owns this contract.
+     */
+    readFile: (path: string) => Promise<string | null>;
+    /**
+     * For a socket, a directory, or a flag file such as `/run/ostree-booted`; never its contents.
+     * Resolves `false` only when the path is not there (`ENOENT`/`ENOTDIR`) and rejects on every other
+     * failure (`EACCES`, `EIO`, ...), the same contract as `readFile`: a check that could not run is an
+     * unread fact, not an absent path.
+     */
+    pathExists: (path: string) => Promise<boolean>;
+    /**
+     * Free space at one path, computed however the caller likes (`statfs`, a platform API, ...).
+     * Always called with a path this probe has already confirmed exists (`freeDiskBytes` itself does
+     * not need to walk up to find one) — see `nearestExistingAncestor` in `probeLinux`.
+     */
+    freeDiskBytes: (path: string) => Promise<number | null>;
+}
+export interface LinuxProbeOptions {
+    /** The account core is running as. Used only to label a plan step, never to gate access (D2). */
+    user: string;
+    /** `$XDG_RUNTIME_DIR`, supplied by the caller — never read from `process.env` here. Null when unset. */
+    xdgRuntimeDir: string | null;
+}
+export interface LinuxDistribution {
+    id: string;
+    /** `VERSION_ID`, or `BUILD_ID` (Arch/Manjaro/EndeavourOS, Debian testing/sid) when there is no
+     *  `VERSION_ID` at all, or `''` when the file has neither — which then matches no install recipe
+     *  (item 1: a rolling-release host is never mistaken for one with no distribution at all). */
+    version_id: string;
+    /** `ID_LIKE`, space-separated, lowercase. Empty when the file has none. */
+    id_like: string[];
+    family: LinuxPackageFamily;
+}
+/** The account this probe ran as, from `id -nG` / `getent group docker` — diagnostic only. */
+export interface DockerGroupFacts {
+    /**
+     * The account is listed in the `docker` group's members. `'unknown'` when `getent` itself could
+     * not answer *and* this session's own groups (`id -nG`) do not already show it either — a probe
+     * that cannot read `/etc/group` has not learned "not a member", so this must not be reported as a
+     * confident `false` (round 2, item 9). `getent`'s own exit `2` ("no such key": the `docker` group
+     * does not exist on this system at all) is different — that is a real, definitive answer, not a
+     * failure to read anything, so it reports `false` rather than `'unknown'` (round 3, ruling 7).
+     */
+    configured: boolean | 'unknown';
+    /** ...and this login session already carries it (`id -nG`); a group change needs a fresh login. */
+    effective: boolean;
+}
+export interface DockerFacts {
+    cli: boolean;
+    daemon_reachable: boolean;
+    /** The daemon's own id, so a later check can tell it is still the same daemon. */
+    engine_identity: string | null;
+    version: string | null;
+    install_method: LinuxDockerInstallMethod | null;
+    /**
+     * The installed engine package's version (`dpkg-query`'s `${Version}`, `rpm -q`'s own
+     * name-version-release string, or `pacman -Q docker`), independent of whether the daemon can be
+     * reached. Diagnostic only since task 2.23 (it used to decide Docker's CDI-on-by-default). Null
+     * when no package database confirms a version (including for `docker-desktop`/`snap`/
+     * `podman-docker`/rootless, which this never looks at — only `docker-ce`/`docker.io`/`moby-engine`).
+     */
+    engine_version: string | null;
+    /**
+     * The GPU can reach a container: `nvidia-ctk cdi list` names an `nvidia.com/gpu` device (task
+     * 2.23, F-5) — never a runtime named `nvidia` on its own. Only meaningful when `daemon_reachable`
+     * (it is `false` without an answer); `gpu_runtime_from_config` is the same signal read without
+     * the daemon.
+     */
+    gpu_runtime: boolean;
+    /**
+     * The same CDI evidence as `gpu_runtime`, independent of the daemon answering: `nvidia-ctk cdi
+     * list` reads the spec directories itself. What `effectiveGpuRuntime` uses when the daemon could
+     * not be reached, so a plan never skips the spec on a guess (item 3).
+     */
+    gpu_runtime_from_config: boolean;
+    /**
+     * A runtime named `nvidia` is registered: loaded by the daemon when it answered (`Runtimes`),
+     * otherwise `daemon.json`'s own `runtimes.nvidia`. Decides only whether the plan runs `nvidia-ctk
+     * runtime configure`; it never makes the GPU runtime ready by itself (F-5).
+     */
+    nvidia_runtime: boolean;
+    /**
+     * `/etc/docker/daemon.json` sets `bip` or `default-address-pools`, replacing Docker's own default
+     * address pools (F-4); `'unknown'` when the file exists but could not be read or parsed.
+     */
+    address_pools_configured: boolean | 'unknown';
+    /**
+     * `/etc/docker/daemon.json` exists but this probe could not use it: reading it failed (`readFile`
+     * rejected — `EACCES` on a `0600` file, a directory at that path, ...) or its contents did not
+     * parse as JSON. `assessLinux` must not plan `nvidia-ctk runtime configure` in this state — it
+     * would be writing next to a file it cannot even read back — and blocks with an instruction to fix
+     * the file by hand instead (round 2 item 6; round 3 item 2; round 4 item C). Neither the runtime
+     * entry nor the CDI setting is assumed behind an unreadable file (round 4, item A).
+     */
+    daemon_json_unreadable: boolean;
+    /** SELinux is enforcing for containers: mounts of our directories need the `:z` label (D15). */
+    selinux: boolean;
+    docker_root_dir: string | null;
+    containers_running: number;
+    /** `systemctl is-active docker`. `'unknown'` only when the check itself could not run. */
+    service_active: boolean | 'unknown';
+    /** `docker info`'s own `ServerErrors`, surfaced for diagnostics (item 17). */
+    server_errors: string[];
+}
+export interface LinuxFacts {
+    /** `uname -m`, `arm64` normalised to `aarch64`. Null when the command did not answer with `0`. */
+    architecture: string | null;
+    distribution: LinuxDistribution | null;
+    /** `/run/ostree-booted` exists: an rpm-ostree host (Silverblue, Kinoite, Bazzite, ...). */
+    immutable_os: boolean;
+    /**
+     * The host runs systemd: `/run/systemd/system` exists, the `sd_booted()` test. `false` on a
+     * container whose PID 1 is not an init system; null when the check itself failed, which is then
+     * the unread fact `init-system` in `unknown`.
+     */
+    systemd: boolean | null;
+    driver_version: string | null;
+    gpus: GpuFacts[];
+    docker: DockerFacts;
+    /** Diagnostic only — never gates readiness (spec: access is `docker info` answering, not group
+     *  membership). 2.6 reads this to tell "daemon active, this session just needs to relogin" apart
+     *  from "the daemon is not reachable at all" (item 2). */
+    docker_group: DockerGroupFacts;
+    /**
+     * The full `nvidia-container-toolkit` package is installed, by the distribution's package database
+     * (F-5) — `nvidia-container-toolkit-base` alone does not count, although it answers `nvidia-ctk
+     * --version` too. On a family without a known package database, the CLI answering is the signal.
+     */
+    toolkit_installed: boolean;
+    /**
+     * `/proc/net/route` (the main IPv4 table Docker checks its pools against), every route but the
+     * default one — destination in CIDR form and interface; null when the table could not be read
+     * (F-4). Never blocks.
+     */
+    routes: LinuxRoute[] | null;
+    free_disk_bytes: number | null;
+    /**
+     * The path `free_disk_bytes` is for: `docker.docker_root_dir` when `docker info` answered,
+     * otherwise `/var/lib/docker`, Docker's default. Always the path the image would land in, never
+     * the nearest existing ancestor the space was actually read at on a clean host (task 2.22,
+     * R-core-6). Set even when the read failed; `free_disk_bytes` is null then.
+     */
+    free_disk_path: string;
+    /** Named checks whose answer could not be read. Each one blocks, none is assumed. */
+    unknown: string[];
+}
+/** `/etc/os-release` is `KEY=value`, values optionally quoted. */
+export declare function parseOsRelease(text: string | null): LinuxDistribution | null;
+/** `uname -m`: normalise the one alias (`arm64`, common outside Linux) to the Linux spelling. */
+export declare function normalizeArchitecture(raw: string): string;
+/**
+ * `nvidia-smi --query-gpu=uuid,name,compute_cap,memory.total,memory.free,driver_version
+ * --format=csv,noheader,nounits`: one line per device, memory in MiB.
+ *
+ * A unified-memory card (GB10/DGX Spark) reports `[N/A]` for both memory columns instead of a
+ * number (captured on a DGX Spark-class host, driver 595.71.05), so those fields come out `null`
+ * rather than a wrong number — the model-compatibility check reads that as "compare against host
+ * memory instead" (design D13). A header line (`uuid, name, ...`, from a query without `noheader`)
+ * is not a card.
+ */
+export declare function parseNvidiaSmi(output: CommandOutput | null): {
+    driver_version: string | null;
+    gpus: GpuFacts[];
+};
+/**
+ * Parses `docker` from `id -nG` (this session's groups) and `getent group docker` (its members).
+ *
+ * `effective` (this session's own groups) is always a real answer on its own. For `configured`:
+ * `getent` exiting `2` ("no such key" — the `docker` group does not exist on this system at all) is
+ * itself a real, definitive answer, so that reads as `false`, not `'unknown'` (round 3, ruling 7).
+ * Any other failure (a different exit code, or the binary not being on the machine) proves nothing
+ * either way, so it falls back to `'unknown'` unless `effective` already confirmed membership on its
+ * own — this session already showing `docker` in `id -nG` needs no corroboration from `getent`
+ * (round 2, item 9).
+ */
+export declare function parseDockerGroup(sessionGroups: CommandOutput | null, groupEntry: CommandOutput | null, user: string): DockerGroupFacts;
+/**
+ * `systemctl is-active docker`: exits `0` and prints `active` only when the unit is really up.
+ *
+ * Known gap, documented rather than closed here (round 2 finding, "socket-activation note"): a host
+ * where `docker.socket` is active but `docker.service` itself is only started on first connection
+ * (`systemctl is-active docker` answering `inactive` right up until something dials the socket)
+ * would read as not active here, even though a real connection would in fact start it. Closing this
+ * needs a second `systemctl is-active docker.socket` call and a decision about how it interacts with
+ * every branch that reads `service_active` (`assessLinux`'s access-only/relogin path and
+ * `buildInstallPlan`'s `enable-docker-service`/`restart-docker` steps) — left for task 2.6 to decide
+ * against the actual wiring rather than guessed at here.
+ */
+export declare function parseServiceActive(output: CommandOutput | null): boolean | 'unknown';
+/**
+ * Walks a path up to the nearest existing ancestor (`/var/lib/docker` → `/var/lib` → `/var` → `/`),
+ * so a free-space check on a not-yet-installed `DockerRootDir` lands somewhere real instead of
+ * failing outright (item 7: a clean machine has no `/var/lib/docker` yet).
+ */
+export declare function nearestExistingAncestor(pathExists: LinuxProbeDeps['pathExists'], path: string): Promise<string>;
+/**
+ * Read the machine. Every command here is read-only; none of them installs, starts, enables or
+ * pulls anything.
+ */
+export declare function probeLinux(deps: LinuxProbeDeps, options: LinuxProbeOptions): Promise<LinuxFacts>;

package/dist/runtime/environment/linux-probe.js

@@ -0,0 +1,315 @@
+/**
+ * What a Linux machine can already do, read without changing any of it.
+ *
+ * The answer this produces decides whether Atomic Chat asks for a password at all. A machine that
+ * already runs containers on its GPU — which describes most people who would want this engine — is
+ * adopted exactly as it is: no packages, no daemon restart, no prompt. Everything else is a list of
+ * what would have to be added, shown before the system asks for authorization. Turning these facts
+ * into that verdict is `assessLinux` in `./linux-plan.js`; this file only reads the machine.
+ *
+ * Nothing here runs a container or writes a file. The one check that would — starting a container
+ * with a GPU attached — pulls an image, so it belongs to provisioning and is reported as `not-run`
+ * until somebody has run it.
+ *
+ * A fact that could not be read is not a fact. Every probe that fails lands in `unknown`, and an
+ * unknown prerequisite blocks the setup instead of being assumed present: guessing wrong here means
+ * asking for a password to install something that is already there, or claiming a machine is ready
+ * and failing halfway through a sixteen-gigabyte download.
+ */
+import { cdiListsNvidiaGpu, daemonJsonNvidiaRuntimeEvidence, detectDockerInstallMethod, detectEngineVersion, fullToolkitInstalled, PACMAN_PACKAGE_CANDIDATES, parseDockerInfo, TOOLKIT_PACKAGE, } from './linux-docker-facts.js';
+import { daemonJsonSetsAddressPools, parseProcNetRoute } from './linux-docker-network.js';
+/** `/etc/os-release` is `KEY=value`, values optionally quoted. */
+export function parseOsRelease(text) {
+    if (text === null)
+        return null;
+    const fields = new Map();
+    for (const line of text.split('\n')) {
+        const match = /^([A-Z_]+)=(.*)$/.exec(line.trim());
+        if (match === null)
+            continue;
+        const value = match[2]
+            .trim()
+            .replace(/^"(.*)"$/, '$1')
+            .replace(/^'(.*)'$/, '$1');
+        fields.set(match[1], value);
+    }
+    const id = fields.get('ID');
+    if (id === undefined || id === '')
+        return null;
+    // Arch, Manjaro and EndeavourOS ship no VERSION_ID at all (rolling release); Debian testing/sid
+    // has none either. BUILD_ID is Arch's nearest equivalent; when even that is absent, '' matches no
+    // install recipe (item 1) rather than making the whole distribution look unread.
+    const versionId = fields.get('VERSION_ID') ?? fields.get('BUILD_ID') ?? '';
+    const idLike = (fields.get('ID_LIKE') ?? '')
+        .split(/\s+/)
+        .map((entry) => entry.toLowerCase())
+        .filter(Boolean);
+    return {
+        id: id.toLowerCase(),
+        version_id: versionId,
+        id_like: idLike,
+        family: packageFamilyFor(id.toLowerCase(), idLike),
+    };
+}
+const APT_FAMILY = new Set(['debian', 'ubuntu']);
+const DNF_FAMILY = new Set(['fedora', 'rhel', 'centos', 'rocky', 'almalinux']);
+const PACMAN_FAMILY = new Set(['arch', 'manjaro', 'endeavouros']);
+/** `ID` first, `ID_LIKE` as a fallback for a derivative distribution (e.g. Linux Mint, Nobara). */
+function packageFamilyFor(id, idLike) {
+    if (APT_FAMILY.has(id) || idLike.some((entry) => APT_FAMILY.has(entry)))
+        return 'apt';
+    if (DNF_FAMILY.has(id) || idLike.some((entry) => DNF_FAMILY.has(entry)))
+        return 'dnf';
+    if (PACMAN_FAMILY.has(id) || idLike.some((entry) => PACMAN_FAMILY.has(entry)))
+        return 'pacman';
+    return 'other';
+}
+/** `uname -m`: normalise the one alias (`arm64`, common outside Linux) to the Linux spelling. */
+export function normalizeArchitecture(raw) {
+    const trimmed = raw.trim();
+    return trimmed === 'arm64' ? 'aarch64' : trimmed;
+}
+const MIB = 1024 * 1024;
+/**
+ * One memory cell in MiB, as bytes: a plain number (`nounits`) or one followed by ` MiB` (a query
+ * without `nounits`). Anything else — `[N/A]`/`N/A` on a unified-memory card, `[Not Supported]`, an
+ * empty cell — is `null`, never `0`: `Number('')` is `0`, and a zero read as a size would refuse
+ * every model for "no memory" instead of taking the unified-memory branch (design D13), while a
+ * `NaN` from `Number('32607 MiB')` would turn a discrete card into a unified-memory one.
+ */
+function mibCellBytes(cell) {
+    const match = /^(\d+(?:\.\d+)?)(?:\s*MiB)?$/.exec(cell);
+    return match === null ? null : Number(match[1]) * MIB;
+}
+/**
+ * `nvidia-smi --query-gpu=uuid,name,compute_cap,memory.total,memory.free,driver_version
+ * --format=csv,noheader,nounits`: one line per device, memory in MiB.
+ *
+ * A unified-memory card (GB10/DGX Spark) reports `[N/A]` for both memory columns instead of a
+ * number (captured on a DGX Spark-class host, driver 595.71.05), so those fields come out `null`
+ * rather than a wrong number — the model-compatibility check reads that as "compare against host
+ * memory instead" (design D13). A header line (`uuid, name, ...`, from a query without `noheader`)
+ * is not a card.
+ */
+export function parseNvidiaSmi(output) {
+    if (output === null || output.code !== 0)
+        return { driver_version: null, gpus: [] };
+    const gpus = [];
+    let driver = null;
+    for (const line of output.stdout.split('\n')) {
+        const cells = line.split(',').map((cell) => cell.trim());
+        if (cells.length < 6 || cells[0] === '' || cells[0] === 'uuid')
+            continue;
+        driver = cells[5];
+        gpus.push({
+            gpu_id: cells[0],
+            name: cells[1],
+            compute_capability: cells[2],
+            total_vram_bytes: mibCellBytes(cells[3]),
+            free_vram_bytes: mibCellBytes(cells[4]),
+            driver_version: driver,
+        });
+    }
+    return { driver_version: driver, gpus };
+}
+/**
+ * Parses `docker` from `id -nG` (this session's groups) and `getent group docker` (its members).
+ *
+ * `effective` (this session's own groups) is always a real answer on its own. For `configured`:
+ * `getent` exiting `2` ("no such key" — the `docker` group does not exist on this system at all) is
+ * itself a real, definitive answer, so that reads as `false`, not `'unknown'` (round 3, ruling 7).
+ * Any other failure (a different exit code, or the binary not being on the machine) proves nothing
+ * either way, so it falls back to `'unknown'` unless `effective` already confirmed membership on its
+ * own — this session already showing `docker` in `id -nG` needs no corroboration from `getent`
+ * (round 2, item 9).
+ */
+export function parseDockerGroup(sessionGroups, groupEntry, user) {
+    const effective = sessionGroups !== null && sessionGroups.code === 0 && sessionGroups.stdout.split(/\s+/).includes('docker');
+    if (groupEntry !== null && groupEntry.code === 2) {
+        return { configured: effective, effective };
+    }
+    if (groupEntry === null || groupEntry.code !== 0) {
+        return { configured: effective ? true : 'unknown', effective };
+    }
+    const members = (groupEntry.stdout.split(':')[3] ?? '').trim().split(',').filter(Boolean);
+    return { configured: effective || members.includes(user), effective };
+}
+/**
+ * `systemctl is-active docker`: exits `0` and prints `active` only when the unit is really up.
+ *
+ * Known gap, documented rather than closed here (round 2 finding, "socket-activation note"): a host
+ * where `docker.socket` is active but `docker.service` itself is only started on first connection
+ * (`systemctl is-active docker` answering `inactive` right up until something dials the socket)
+ * would read as not active here, even though a real connection would in fact start it. Closing this
+ * needs a second `systemctl is-active docker.socket` call and a decision about how it interacts with
+ * every branch that reads `service_active` (`assessLinux`'s access-only/relogin path and
+ * `buildInstallPlan`'s `enable-docker-service`/`restart-docker` steps) — left for task 2.6 to decide
+ * against the actual wiring rather than guessed at here.
+ */
+export function parseServiceActive(output) {
+    if (output === null || output.code === null)
+        return 'unknown';
+    return output.code === 0 && output.stdout.trim() === 'active';
+}
+/** Where Docker Engine keeps images unless configured otherwise: the disk check's path before it answers. */
+const DEFAULT_DOCKER_ROOT_DIR = '/var/lib/docker';
+const DOCKER_SOCKET = 'unix:///var/run/docker.sock';
+// The forced-socket query must never be steered by a leftover remote/TLS context (item 17).
+const STRIP_DOCKER_ENV = {
+    DOCKER_HOST: undefined,
+    DOCKER_CONTEXT: undefined,
+    DOCKER_TLS_VERIFY: undefined,
+    DOCKER_CERT_PATH: undefined,
+};
+/**
+ * Walks a path up to the nearest existing ancestor (`/var/lib/docker` → `/var/lib` → `/var` → `/`),
+ * so a free-space check on a not-yet-installed `DockerRootDir` lands somewhere real instead of
+ * failing outright (item 7: a clean machine has no `/var/lib/docker` yet).
+ */
+export async function nearestExistingAncestor(pathExists, path) {
+    const segments = path.split('/').filter(Boolean);
+    for (let end = segments.length; end >= 0; end--) {
+        const candidate = `/${segments.slice(0, end).join('/')}`;
+        if (await pathExists(candidate).catch(() => false))
+            return candidate;
+    }
+    return '/';
+}
+/**
+ * `readFile` collapses "does not exist" (`ENOENT`) and every other failure (`EACCES` on a `0600`
+ * file, a directory where a file was expected, ...) into the same `null` when a caller blanket-
+ * catches it — which is correct for `/etc/os-release` (never expected to be permission-restricted)
+ * but wrong for `/etc/docker/daemon.json`, which a hardened host may deliberately lock down. This
+ * distinguishes them: `{ text: null, unreadable: false }` only for a `readFile` that itself resolved
+ * `null` (this repo's convention for "not there"); a `readFile` that *rejects* is a real read error,
+ * reported as `{ text: null, unreadable: true }` rather than silently folded into "not configured"
+ * (round 3, item 2).
+ */
+async function readDaemonJson(readFile) {
+    try {
+        return { text: await readFile('/etc/docker/daemon.json'), unreadable: false };
+    }
+    catch {
+        return { text: null, unreadable: true };
+    }
+}
+/**
+ * Read the machine. Every command here is read-only; none of them installs, starts, enables or
+ * pulls anything.
+ */
+export async function probeLinux(deps, options) {
+    const unknown = [];
+    const osRelease = await deps.readFile('/etc/os-release').catch(() => null);
+    const distribution = parseOsRelease(osRelease);
+    if (distribution === null)
+        unknown.push('distribution');
+    const [unameM, smi, dockerVersion, dockerInfo, ctk, cdiList, dpkgQuery, rpmQuery, pacmanQuery, snapList, immutableOs, systemd, sessionGroups, groupEntry, serviceActive, daemonJsonRead, toolkitQuery, routeTable,] = await Promise.all([
+        deps.exec('uname', ['-m']),
+        deps.exec('nvidia-smi', [
+            '--query-gpu=uuid,name,compute_cap,memory.total,memory.free,driver_version',
+            '--format=csv,noheader,nounits',
+        ]),
+        deps.exec('docker', ['--version']),
+        // `-H` pins the query to the system socket as the current user, overriding both DOCKER_HOST
+        // and an active DOCKER_CONTEXT; the explicit env override also strips it and TLS settings from
+        // the child process rather than relying on the flag alone (spec: access is decided by calling
+        // the daemon, never by a user context or group membership).
+        deps.exec('docker', ['-H', DOCKER_SOCKET, 'info', '--format', '{{json .}}'], STRIP_DOCKER_ENV),
+        deps.exec('nvidia-ctk', ['--version']),
+        deps.exec('nvidia-ctk', ['cdi', 'list']),
+        // `${Version}` (round 3, ruling 5) feeds `detectEngineVersion`; install-method detection itself
+        // only ever reads the first two columns (`installedDpkgPackages`).
+        deps.exec('dpkg-query', [
+            '-W',
+            '-f',
+            '${db:Status-Abbrev} ${Package} ${Version}\n',
+            'docker-ce',
+            'docker.io',
+            'moby-engine',
+            'podman-docker',
+            'docker-desktop',
+        ]),
+        deps.exec('rpm', ['-q', 'docker-ce', 'docker.io', 'moby-engine', 'podman-docker', 'docker-desktop']),
+        // Read-only query; Arch's own `docker` package is not one `dpkg-query`/`rpm -q` ever see, and
+        // this is also `engine_version`'s only source there (round 3, item 1/ruling 5). `docker-desktop`
+        // is Docker Desktop's package name on Arch (round 4, item E).
+        // Only on a pacman-family distribution: elsewhere a `pacman` on PATH can be something unrelated
+        // entirely (Debian's /usr/games/pacman), and there is no Arch package to ask about (round 5, item 3).
+        distribution?.family === 'pacman'
+            ? deps.exec('pacman', ['-Q', ...PACMAN_PACKAGE_CANDIDATES])
+            : Promise.resolve(null),
+        deps.exec('snap', ['list', 'docker']),
+        deps.pathExists('/run/ostree-booted').catch(() => false),
+        deps.pathExists('/run/systemd/system').catch(() => null),
+        deps.exec('id', ['-nG']),
+        deps.exec('getent', ['group', 'docker']),
+        deps.exec('systemctl', ['is-active', 'docker']),
+        readDaemonJson(deps.readFile),
+        // The full toolkit, by its own package (F-5): `nvidia-ctk --version` answers for `-base` alone.
+        // One package name per query, so `-base` can never match it as a prefix.
+        distribution?.family === 'apt'
+            ? deps.exec('dpkg-query', ['-W', '-f', '${db:Status-Abbrev} ${Package}\n', TOOLKIT_PACKAGE])
+            : distribution?.family === 'dnf'
+                ? deps.exec('rpm', ['-q', TOOLKIT_PACKAGE])
+                : distribution?.family === 'pacman'
+                    ? deps.exec('pacman', ['-Q', TOOLKIT_PACKAGE])
+                    : Promise.resolve(null),
+        deps.readFile('/proc/net/route').catch(() => null),
+    ]);
+    if (unameM.code !== 0)
+        unknown.push('architecture');
+    if (systemd === null)
+        unknown.push('init-system');
+    const architecture = unameM.code === 0 ? normalizeArchitecture(unameM.stdout) : null;
+    const nvidia = parseNvidiaSmi(smi);
+    if (smi.code === null)
+        unknown.push('nvidia-driver');
+    const cli = dockerVersion.code === 0;
+    const info = parseDockerInfo(cli ? dockerInfo : null, cdiList);
+    const serviceActiveParsed = parseServiceActive(serviceActive);
+    const rootlessSocketPresent = options.xdgRuntimeDir !== null &&
+        (await deps.pathExists(`${options.xdgRuntimeDir}/docker.sock`).catch(() => false));
+    const installMethod = detectDockerInstallMethod(info, { dockerVersion, dpkgQuery, rpmQuery, pacmanQuery, snapList }, rootlessSocketPresent, serviceActiveParsed);
+    const engineVersion = detectEngineVersion(dpkgQuery, rpmQuery, pacmanQuery);
+    const daemonJsonEvidence = daemonJsonNvidiaRuntimeEvidence(daemonJsonRead);
+    // Before anything is installed there is no DockerRootDir yet; check the nearest ancestor that
+    // does exist instead of failing outright on a path that is not there yet (item 7).
+    const diskCheckTarget = info.docker_root_dir ?? DEFAULT_DOCKER_ROOT_DIR;
+    const diskCheckPath = await nearestExistingAncestor(deps.pathExists, diskCheckTarget);
+    const disk = await deps.freeDiskBytes(diskCheckPath).catch(() => null);
+    if (disk === null)
+        unknown.push('free-disk');
+    return {
+        architecture,
+        distribution,
+        immutable_os: immutableOs,
+        systemd,
+        driver_version: nvidia.driver_version,
+        gpus: nvidia.gpus,
+        docker: {
+            cli,
+            daemon_reachable: info.daemon_reachable,
+            engine_identity: info.engine_identity,
+            version: info.version,
+            install_method: installMethod,
+            engine_version: engineVersion,
+            gpu_runtime: info.gpu_runtime,
+            gpu_runtime_from_config: cdiListsNvidiaGpu(cdiList),
+            nvidia_runtime: info.daemon_reachable ? info.nvidia_runtime : daemonJsonEvidence === 'configured',
+            address_pools_configured: daemonJsonSetsAddressPools(daemonJsonRead),
+            daemon_json_unreadable: daemonJsonEvidence === 'unreadable',
+            selinux: info.selinux,
+            docker_root_dir: info.docker_root_dir,
+            containers_running: info.containers_running,
+            service_active: serviceActiveParsed,
+            server_errors: info.server_errors,
+        },
+        docker_group: parseDockerGroup(sessionGroups, groupEntry, options.user),
+        toolkit_installed: fullToolkitInstalled(distribution?.family ?? null, ctk, toolkitQuery),
+        routes: parseProcNetRoute(routeTable),
+        free_disk_bytes: disk,
+        free_disk_path: diskCheckTarget,
+        unknown,
+    };
+}
+//# sourceMappingURL=linux-probe.js.map

package/dist/runtime/environment/linux-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-probe.js","sourceRoot":"","sources":["../../../src/runtime/environment/linux-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EACL,iBAAiB,EACjB,+BAA+B,EAC/B,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,eAAe,GAChB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAmB,MAAM,2BAA2B,CAAA;AAoL1G,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAClD,IAAI,KAAK,KAAK,IAAI;YAAE,SAAQ;QAC5B,MAAM,KAAK,GAAI,KAAK,CAAC,CAAC,CAAY;aAC/B,IAAI,EAAE;aACN,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;aACzB,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,KAAK,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC9C,gGAAgG;IAChG,kGAAkG;IAClG,iFAAiF;IACjF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IAC1E,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SACzC,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACnC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE;QACpB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC;KACnD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;AAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;AAEjE,mGAAmG;AACnG,SAAS,gBAAgB,CAAC,EAAU,EAAE,MAAgB;IACpD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC9F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;AAClD,CAAC;AAED,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;AAEvB;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,MAA4B;IAIzD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACnF,MAAM,IAAI,GAAe,EAAE,CAAA;IAC3B,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,SAAQ;QACxE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;QAC3B,IAAI,CAAC,IAAI,CAAC;YACR,MAAM,EAAE,KAAK,CAAC,CAAC,CAAW;YAC1B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAW;YACxB,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAW;YACtC,gBAAgB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC;YAClD,eAAe,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC;YACjD,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAmC,EACnC,UAAgC,EAChC,IAAY;IAEZ,MAAM,SAAS,GACb,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC5G,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;IAC7C,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAA;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzF,OAAO,EAAE,UAAU,EAAE,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAA;AACvE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA4B;IAC7D,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAC7D,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAA;AAC/D,CAAC;AAED,6GAA6G;AAC7G,MAAM,uBAAuB,GAAG,iBAAiB,CAAA;AAEjD,MAAM,aAAa,GAAG,6BAA6B,CAAA;AACnD,4FAA4F;AAC5F,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,SAAS;IACtB,cAAc,EAAE,SAAS;IACzB,iBAAiB,EAAE,SAAS;IAC5B,gBAAgB,EAAE,SAAS;CAC5B,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAwC,EACxC,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,KAAK,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;QACxD,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;IACtE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAoC;IAEpC,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,yBAAyB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB,EAAE,OAA0B;IAC/E,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC1E,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IAC9C,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAEvD,MAAM,CACJ,MAAM,EACN,GAAG,EACH,aAAa,EACb,UAAU,EACV,GAAG,EACH,OAAO,EACP,SAAS,EACT,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,WAAW,EACX,OAAO,EACP,aAAa,EACb,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,EACZ,UAAU,EACX,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,2EAA2E;YAC3E,+BAA+B;SAChC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC;QAClC,4FAA4F;QAC5F,+FAA+F;QAC/F,8FAA8F;QAC9F,4DAA4D;QAC5D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAC9F,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,gGAAgG;QAChG,mEAAmE;QACnE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,IAAI;YACJ,IAAI;YACJ,6CAA6C;YAC7C,WAAW;YACX,WAAW;YACX,aAAa;YACb,eAAe;YACf,gBAAgB;SACjB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QACpG,8FAA8F;QAC9F,iGAAiG;QACjG,8DAA8D;QAC9D,gGAAgG;QAChG,sGAAsG;QACtG,YAAY,EAAE,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,yBAAyB,CAAC,CAAC;YAC3D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/C,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,gGAAgG;QAChG,yEAAyE;QACzE,YAAY,EAAE,MAAM,KAAK,KAAK;YAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,kCAAkC,EAAE,eAAe,CAAC,CAAC;YAC5F,CAAC,CAAC,YAAY,EAAE,MAAM,KAAK,KAAK;gBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBAC3C,CAAC,CAAC,YAAY,EAAE,MAAM,KAAK,QAAQ;oBACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;oBAC9C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KACnD,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACnD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACjD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEpF,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAEpD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,KAAK,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9D,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAA;IAE7D,MAAM,qBAAqB,GACzB,OAAO,CAAC,aAAa,KAAK,IAAI;QAC9B,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,aAAa,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IACpF,MAAM,aAAa,GAAG,yBAAyB,CAC7C,IAAI,EACJ,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAC7D,qBAAqB,EACrB,mBAAmB,CACpB,CAAA;IACD,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IAE3E,MAAM,kBAAkB,GAAG,+BAA+B,CAAC,cAAc,CAAC,CAAA;IAE1E,8FAA8F;IAC9F,mFAAmF;IACnF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,uBAAuB,CAAA;IACvE,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACtE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAE5C,OAAO;QACL,YAAY;QACZ,YAAY;QACZ,YAAY,EAAE,WAAW;QACzB,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE;YACN,GAAG;YACH,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc,EAAE,aAAa;YAC7B,cAAc,EAAE,aAAa;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,uBAAuB,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACnD,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,KAAK,YAAY;YACjG,wBAAwB,EAAE,0BAA0B,CAAC,cAAc,CAAC;YACpE,sBAAsB,EAAE,kBAAkB,KAAK,YAAY;YAC3D,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,mBAAmB;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC;QACD,YAAY,EAAE,gBAAgB,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC;QACvE,iBAAiB,EAAE,oBAAoB,CAAC,YAAY,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC;QACxF,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC;QACrC,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,eAAe;QAC/B,OAAO;KACR,CAAA;AACH,CAAC"}