@braedonsaunders/appkit-desk 0.4.0

package/guest-agent.js

@@ -0,0 +1,165 @@
+/**
+ * The in-guest agent: PID 1's helper inside the microVM, speaking the framed
+ * JSON protocol over a vsock stream. This is the only new attack surface in
+ * the desk design, so it is deliberately small: a bounded frame decoder, a
+ * strict parser, a closed dispatch switch, and nothing else. Everything that
+ * touches the guest OS — spawning processes, driving the compositor, reading
+ * the clipboard — is injected as a handler so the message-handling core stays
+ * pure and unit-testable on any platform.
+ *
+ * The module depends only on `node:` built-ins and this package's own
+ * protocol module; it ships in the same package and is started by the guest's
+ * init.
+ */
+import { Buffer } from 'node:buffer';
+import { DEFAULT_MAX_FRAME_BYTES, DeskProtocolError, encodeFrame, FrameDecoder, parseGuestRequest, } from './protocol.js';
+export function createGuestAgentCore(handlers, options = {}) {
+    const maxFrameBytes = options.maxFrameBytes ?? DEFAULT_MAX_FRAME_BYTES;
+    const decoder = new FrameDecoder({ maxFrameBytes });
+    async function respond(value) {
+        let request;
+        try {
+            request = parseGuestRequest(value);
+        }
+        catch (error) {
+            // The frame itself was well-formed JSON, so answering is safe; echo the
+            // id when one is recoverable so the host can settle its pending call.
+            const id = recoverId(value);
+            return { id, ok: false, error: errorMessage(error) };
+        }
+        try {
+            return { id: request.id, ok: true, result: await dispatch(request) };
+        }
+        catch (error) {
+            return { id: request.id, ok: false, error: errorMessage(error) };
+        }
+    }
+    async function dispatch(request) {
+        switch (request.op) {
+            case 'ping':
+                return { pong: true };
+            case 'capabilities':
+                return handlers.capabilities();
+            case 'exec':
+                return handlers.exec({
+                    command: request.command,
+                    args: request.args ?? [],
+                    cwd: request.cwd ?? null,
+                    env: request.env ?? null,
+                    timeoutMs: request.timeoutMs ?? null,
+                });
+            case 'job-start':
+                return handlers.jobStart({
+                    command: request.command,
+                    args: request.args ?? [],
+                    cwd: request.cwd ?? null,
+                    env: request.env ?? null,
+                });
+            case 'job-signal':
+                await handlers.jobSignal({ jobId: request.jobId, signal: request.signal });
+                return {};
+            case 'screen-start':
+                await handlers.screenStart({ width: request.width, height: request.height });
+                return {};
+            case 'screen-stop':
+                await handlers.screenStop();
+                return {};
+            case 'observe':
+                return handlers.observe();
+            case 'input':
+                await handlers.input(request.input);
+                return {};
+            case 'a11y-invoke':
+                await handlers.a11yInvoke({ nodeId: request.nodeId, action: request.action });
+                return {};
+            case 'launch':
+                await handlers.launch({ appId: request.appId, args: request.args ?? [] });
+                return {};
+            case 'clipboard-read':
+                return handlers.clipboardRead();
+            case 'clipboard-write':
+                await handlers.clipboardWrite({ text: request.text });
+                return {};
+            case 'frames-start':
+                await handlers.framesStart({
+                    fps: request.fps,
+                    width: request.width,
+                    height: request.height,
+                    format: request.format,
+                });
+                return {};
+            case 'frames-stop':
+                await handlers.framesStop();
+                return {};
+            case 'video-start':
+                await handlers.videoStart({
+                    fps: request.fps,
+                    width: request.width,
+                    height: request.height,
+                });
+                return {};
+            case 'video-stop':
+                await handlers.videoStop();
+                return {};
+            case 'handover-begin':
+                return handlers.handoverBegin({ ttlMs: request.ttlMs, scope: request.scope });
+            case 'handover-end':
+                await handlers.handoverEnd();
+                return {};
+        }
+    }
+    return {
+        async handleChunk(chunk) {
+            const values = decoder.push(chunk);
+            const responses = [];
+            for (const value of values) {
+                responses.push(encodeFrame(await respond(value), maxFrameBytes));
+            }
+            return responses;
+        },
+        encodeEvent(event) {
+            return encodeFrame(event, maxFrameBytes);
+        },
+    };
+}
+/**
+ * Bind the pure core to a real byte stream. This is the entire impure surface
+ * of the guest agent: read chunks, write responses, destroy the connection on
+ * a framing violation.
+ */
+export function runGuestAgent(options) {
+    const { stream, handlers } = options;
+    const core = createGuestAgentCore(handlers, { maxFrameBytes: options.maxFrameBytes });
+    let queue = Promise.resolve();
+    stream.on('data', (chunk) => {
+        queue = queue
+            .then(async () => {
+            for (const frame of await core.handleChunk(chunk))
+                stream.write(frame);
+        })
+            .catch((error) => {
+            stream.destroy(error instanceof DeskProtocolError ? error : new DeskProtocolError(errorMessage(error)));
+        });
+    });
+    const closed = new Promise((resolvePromise) => {
+        stream.once('close', () => resolvePromise());
+    });
+    return {
+        sendEvent(event) {
+            stream.write(core.encodeEvent(event));
+        },
+        closed,
+    };
+}
+function recoverId(value) {
+    if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
+        const id = value.id;
+        if (typeof id === 'string' && id.length > 0 && id.length <= 128)
+            return id;
+    }
+    return 'unknown';
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=guest-agent.js.map

package/guest-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-agent.js","sourceRoot":"","sources":["../src/guest-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,iBAAiB,GAOlB,MAAM,YAAY,CAAA;AAsEnB,MAAM,UAAU,oBAAoB,CAClC,QAA4B,EAC5B,UAAsC,EAAE;IAExC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAA;IACtE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;IAEnD,KAAK,UAAU,OAAO,CAAC,KAAc;QACnC,IAAI,OAAqB,CAAA;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;YAC3B,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAA;QACtD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAA;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAA;QAClE,CAAC;IACH,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,OAAqB;QAC3C,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACvB,KAAK,cAAc;gBACjB,OAAO,QAAQ,CAAC,YAAY,EAAE,CAAA;YAChC,KAAK,MAAM;gBACT,OAAO,QAAQ,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;iBACrC,CAAC,CAAA;YACJ,KAAK,WAAW;gBACd,OAAO,QAAQ,CAAC,QAAQ,CAAC;oBACvB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;iBACzB,CAAC,CAAA;YACJ,KAAK,YAAY;gBACf,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC1E,OAAO,EAAE,CAAA;YACX,KAAK,cAAc;gBACjB,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC5E,OAAO,EAAE,CAAA;YACX,KAAK,aAAa;gBAChB,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAA;gBAC3B,OAAO,EAAE,CAAA;YACX,KAAK,SAAS;gBACZ,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAA;YAC3B,KAAK,OAAO;gBACV,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBACnC,OAAO,EAAE,CAAA;YACX,KAAK,aAAa;gBAChB,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC7E,OAAO,EAAE,CAAA;YACX,KAAK,QAAQ;gBACX,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;gBACzE,OAAO,EAAE,CAAA;YACX,KAAK,gBAAgB;gBACnB,OAAO,QAAQ,CAAC,aAAa,EAAE,CAAA;YACjC,KAAK,iBAAiB;gBACpB,MAAM,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;gBACrD,OAAO,EAAE,CAAA;YACX,KAAK,cAAc;gBACjB,MAAM,QAAQ,CAAC,WAAW,CAAC;oBACzB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAA;gBACF,OAAO,EAAE,CAAA;YACX,KAAK,aAAa;gBAChB,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAA;gBAC3B,OAAO,EAAE,CAAA;YACX,KAAK,aAAa;gBAChB,MAAM,QAAQ,CAAC,UAAU,CAAC;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAA;gBACF,OAAO,EAAE,CAAA;YACX,KAAK,YAAY;gBACf,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAA;gBAC1B,OAAO,EAAE,CAAA;YACX,KAAK,gBAAgB;gBACnB,OAAO,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;YAC/E,KAAK,cAAc;gBACjB,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;gBAC5B,OAAO,EAAE,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAa;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,SAAS,GAAa,EAAE,CAAA;YAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;YAClE,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,WAAW,CAAC,KAAwB;YAClC,OAAO,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;QAC1C,CAAC;KACF,CAAA;AACH,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAI7B;IACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACpC,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IACrF,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAClC,KAAK,GAAG,KAAK;aACV,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACxE,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,MAAM,CAAC,OAAO,CACZ,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CACxF,CAAA;QACH,CAAC,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,EAAE;QAClD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,SAAS,CAAC,KAAwB;YAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;QACvC,CAAC;QACD,MAAM;KACP,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,EAAE,GAAI,KAAiC,CAAC,EAAE,CAAA;QAChD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,EAAE,CAAA;IAC5E,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC","sourcesContent":["/**\n * The in-guest agent: PID 1's helper inside the microVM, speaking the framed\n * JSON protocol over a vsock stream. This is the only new attack surface in\n * the desk design, so it is deliberately small: a bounded frame decoder, a\n * strict parser, a closed dispatch switch, and nothing else. Everything that\n * touches the guest OS — spawning processes, driving the compositor, reading\n * the clipboard — is injected as a handler so the message-handling core stays\n * pure and unit-testable on any platform.\n *\n * The module depends only on `node:` built-ins and this package's own\n * protocol module; it ships in the same package and is started by the guest's\n * init.\n */\nimport { Buffer } from 'node:buffer'\nimport type { Duplex } from 'node:stream'\nimport {\n  DEFAULT_MAX_FRAME_BYTES,\n  DeskProtocolError,\n  encodeFrame,\n  FrameDecoder,\n  parseGuestRequest,\n  type GuestEventMessage,\n  type GuestExecResult,\n  type GuestObservation,\n  type GuestInput,\n  type GuestRequest,\n  type GuestResponse,\n} from './protocol'\nimport type { DeskFrameFormat, DeskHandoverScope } from './events'\n\nexport interface GuestExecCall {\n  command: string\n  args: readonly string[]\n  cwd: string | null\n  env: Readonly<Record<string, string>> | null\n  timeoutMs: number | null\n}\n\nexport interface GuestJobStartCall {\n  command: string\n  args: readonly string[]\n  cwd: string | null\n  env: Readonly<Record<string, string>> | null\n}\n\n/**\n * The operations the guest environment implements. Handlers own all contact\n * with the OS; the core owns all contact with the wire.\n */\nexport interface GuestAgentHandlers {\n  exec(call: GuestExecCall): Promise<GuestExecResult>\n  jobStart(call: GuestJobStartCall): Promise<{ jobId: string }>\n  jobSignal(call: { jobId: string; signal: 'SIGTERM' | 'SIGKILL' }): Promise<void>\n  screenStart(call: { width: number; height: number }): Promise<void>\n  screenStop(): Promise<void>\n  observe(): Promise<GuestObservation>\n  input(action: GuestInput): Promise<void>\n  a11yInvoke(call: { nodeId: string; action: string }): Promise<void>\n  launch(call: { appId: string; args: readonly string[] }): Promise<void>\n  clipboardRead(): Promise<{ text: string }>\n  clipboardWrite(call: { text: string }): Promise<void>\n  /**\n   * `format` absent means the host did not ask, so the guest picks — an older\n   * host never sends it and must still get a stream it can decode.\n   */\n  framesStart(call: {\n    fps: number\n    width: number\n    height: number\n    format?: DeskFrameFormat\n  }): Promise<void>\n  framesStop(): Promise<void>\n  /**\n   * Start encoding the screen as video. Separate from `framesStart` because it\n   * is a different job with a different transport shape: one long-lived encoder\n   * whose output only means anything in order, rather than independent pictures.\n   */\n  videoStart(call: { fps: number; width: number; height: number }): Promise<void>\n  videoStop(): Promise<void>\n  handoverBegin(call: { ttlMs: number; scope: DeskHandoverScope }): Promise<{ url: string }>\n  handoverEnd(): Promise<void>\n  capabilities(): Promise<{ virtioGpu: boolean }>\n}\n\nexport interface GuestAgentCore {\n  /**\n   * Consume one chunk of the byte stream and return the frames to write back,\n   * in order. Malformed requests produce error responses; a framing violation\n   * (oversized or non-JSON frame) throws, and the caller must drop the\n   * connection — a length-prefixed stream cannot be resynchronized once its\n   * lengths are untrusted.\n   */\n  handleChunk(chunk: Buffer): Promise<Buffer[]>\n  /** Encode an unsolicited guest-to-host event frame. */\n  encodeEvent(event: GuestEventMessage): Buffer\n}\n\nexport function createGuestAgentCore(\n  handlers: GuestAgentHandlers,\n  options: { maxFrameBytes?: number } = {},\n): GuestAgentCore {\n  const maxFrameBytes = options.maxFrameBytes ?? DEFAULT_MAX_FRAME_BYTES\n  const decoder = new FrameDecoder({ maxFrameBytes })\n\n  async function respond(value: unknown): Promise<GuestResponse> {\n    let request: GuestRequest\n    try {\n      request = parseGuestRequest(value)\n    } catch (error) {\n      // The frame itself was well-formed JSON, so answering is safe; echo the\n      // id when one is recoverable so the host can settle its pending call.\n      const id = recoverId(value)\n      return { id, ok: false, error: errorMessage(error) }\n    }\n    try {\n      return { id: request.id, ok: true, result: await dispatch(request) }\n    } catch (error) {\n      return { id: request.id, ok: false, error: errorMessage(error) }\n    }\n  }\n\n  async function dispatch(request: GuestRequest): Promise<unknown> {\n    switch (request.op) {\n      case 'ping':\n        return { pong: true }\n      case 'capabilities':\n        return handlers.capabilities()\n      case 'exec':\n        return handlers.exec({\n          command: request.command,\n          args: request.args ?? [],\n          cwd: request.cwd ?? null,\n          env: request.env ?? null,\n          timeoutMs: request.timeoutMs ?? null,\n        })\n      case 'job-start':\n        return handlers.jobStart({\n          command: request.command,\n          args: request.args ?? [],\n          cwd: request.cwd ?? null,\n          env: request.env ?? null,\n        })\n      case 'job-signal':\n        await handlers.jobSignal({ jobId: request.jobId, signal: request.signal })\n        return {}\n      case 'screen-start':\n        await handlers.screenStart({ width: request.width, height: request.height })\n        return {}\n      case 'screen-stop':\n        await handlers.screenStop()\n        return {}\n      case 'observe':\n        return handlers.observe()\n      case 'input':\n        await handlers.input(request.input)\n        return {}\n      case 'a11y-invoke':\n        await handlers.a11yInvoke({ nodeId: request.nodeId, action: request.action })\n        return {}\n      case 'launch':\n        await handlers.launch({ appId: request.appId, args: request.args ?? [] })\n        return {}\n      case 'clipboard-read':\n        return handlers.clipboardRead()\n      case 'clipboard-write':\n        await handlers.clipboardWrite({ text: request.text })\n        return {}\n      case 'frames-start':\n        await handlers.framesStart({\n          fps: request.fps,\n          width: request.width,\n          height: request.height,\n          format: request.format,\n        })\n        return {}\n      case 'frames-stop':\n        await handlers.framesStop()\n        return {}\n      case 'video-start':\n        await handlers.videoStart({\n          fps: request.fps,\n          width: request.width,\n          height: request.height,\n        })\n        return {}\n      case 'video-stop':\n        await handlers.videoStop()\n        return {}\n      case 'handover-begin':\n        return handlers.handoverBegin({ ttlMs: request.ttlMs, scope: request.scope })\n      case 'handover-end':\n        await handlers.handoverEnd()\n        return {}\n    }\n  }\n\n  return {\n    async handleChunk(chunk: Buffer): Promise<Buffer[]> {\n      const values = decoder.push(chunk)\n      const responses: Buffer[] = []\n      for (const value of values) {\n        responses.push(encodeFrame(await respond(value), maxFrameBytes))\n      }\n      return responses\n    },\n    encodeEvent(event: GuestEventMessage): Buffer {\n      return encodeFrame(event, maxFrameBytes)\n    },\n  }\n}\n\nexport interface RunningGuestAgent {\n  /** Push an unsolicited event (job exit, frame, focus change) to the host. */\n  sendEvent(event: GuestEventMessage): void\n  /** Resolves when the connection has closed. */\n  closed: Promise<void>\n}\n\n/**\n * Bind the pure core to a real byte stream. This is the entire impure surface\n * of the guest agent: read chunks, write responses, destroy the connection on\n * a framing violation.\n */\nexport function runGuestAgent(options: {\n  stream: Duplex\n  handlers: GuestAgentHandlers\n  maxFrameBytes?: number\n}): RunningGuestAgent {\n  const { stream, handlers } = options\n  const core = createGuestAgentCore(handlers, { maxFrameBytes: options.maxFrameBytes })\n  let queue: Promise<void> = Promise.resolve()\n\n  stream.on('data', (chunk: Buffer) => {\n    queue = queue\n      .then(async () => {\n        for (const frame of await core.handleChunk(chunk)) stream.write(frame)\n      })\n      .catch((error: unknown) => {\n        stream.destroy(\n          error instanceof DeskProtocolError ? error : new DeskProtocolError(errorMessage(error)),\n        )\n      })\n  })\n\n  const closed = new Promise<void>((resolvePromise) => {\n    stream.once('close', () => resolvePromise())\n  })\n\n  return {\n    sendEvent(event: GuestEventMessage): void {\n      stream.write(core.encodeEvent(event))\n    },\n    closed,\n  }\n}\n\nfunction recoverId(value: unknown): string {\n  if (typeof value === 'object' && value !== null && !Array.isArray(value)) {\n    const id = (value as Record<string, unknown>).id\n    if (typeof id === 'string' && id.length > 0 && id.length <= 128) return id\n  }\n  return 'unknown'\n}\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error)\n}\n"]}

package/host.d.ts

@@ -0,0 +1,325 @@
+import { Buffer } from 'node:buffer';
+import { type DeskLauncherIdentity } from './plan.js';
+import { type DeskBackend } from './backend.js';
+import type { A11yNode, DeskFrameFormat, DeskHandoverScope, DeskPoint, DeskPointerButton, DeskPorts, DeskVideoChunkKind, WindowInfo } from './events.js';
+export declare const DEFAULT_CAPACITY = 4;
+export declare const DEFAULT_IDLE_SUSPEND_MS: number;
+export declare const DEFAULT_LEASE_MS: number;
+export declare const DEFAULT_CID_BASE = 100;
+export interface DeskHostOptions {
+    /** Root of the golden base image and per-desk assets. */
+    imageRoot: string;
+    vmmPath?: string;
+    kvmPath?: string;
+    /** Guest kernel; defaults to `<imageRoot>/vmlinux`. */
+    kernelPath?: string;
+    /**
+     * Initramfs the guest kernel boots with. A modular distro cloud kernel needs
+     * one to mount root; omit only for a kernel with virtio/ext4 built in. When
+     * unset it defaults to `<imageRoot>/initrd` if that file exists, else none.
+     */
+    initramfsPath?: string;
+    /**
+     * Kernel command line every desk boots with. Defaults to
+     * `DEFAULT_KERNEL_CMDLINE`; override it for partitioned cloud images whose
+     * root is not `/dev/vda` (e.g. `root=/dev/vda3 rw quiet`).
+     */
+    kernelCmdline?: string;
+    /** Directory holding vsock and API control sockets. */
+    runtimeDir?: string;
+    launcherIdentity?: DeskLauncherIdentity;
+    backend?: DeskBackend;
+    ports: DeskPorts;
+    /** Hard cap on concurrently resident desks; starts beyond it queue FIFO. */
+    capacity?: number;
+    idleSuspendMs?: number;
+    defaultLeaseMs?: number;
+    /** First guest vsock CID handed out; each boot takes the next one. */
+    cidBase?: number;
+    now?: () => number;
+    pathExists?: (path: string) => boolean;
+    deviceExists?: (path: string) => boolean;
+}
+export interface DeskStartOptions {
+    deskId: string;
+    /** Absolute path of the golden base image this desk boots from. */
+    baseImage: string;
+    /** Absolute path of this desk's copy-on-write overlay. */
+    overlayPath: string;
+    memoryMb?: number;
+    vcpus?: number;
+    leaseMs?: number;
+    network?: {
+        tapDevice?: string;
+        macAddress?: string;
+    };
+}
+export interface DeskExecOptions {
+    command: string;
+    args?: readonly string[];
+    cwd?: string;
+    env?: Readonly<Record<string, string>>;
+    timeoutMs?: number;
+    /** Survive the call as a background job; the job dies with the lease. */
+    keepAlive?: boolean;
+}
+export interface DeskExecSnapshot {
+    deskId: string;
+    command: string;
+    args: readonly string[];
+    exitCode: number | null;
+    signal: string | null;
+    stdout: string;
+    stderr: string;
+    truncated: boolean;
+    startedAt: string;
+    finishedAt: string;
+}
+export interface DeskJob {
+    jobId: string;
+    deskId: string;
+    command: string;
+    args: readonly string[];
+    startedAt: string;
+    status: 'running' | 'exited';
+    exitCode: number | null;
+    signal: string | null;
+}
+export interface DeskObservation {
+    png: Buffer;
+    width: number;
+    height: number;
+    a11y: A11yNode | null;
+    windows: readonly WindowInfo[];
+    focused: WindowInfo | null;
+}
+export interface DeskFrame {
+    seq: number;
+    width: number;
+    height: number;
+    data: Buffer;
+    /**
+     * How `data` is encoded. A consumer must not assume PNG — it builds the
+     * media type it hands on (a `data:` URL, a decoder) from this.
+     */
+    format: DeskFrameFormat;
+    at: string;
+}
+/**
+ * One unit of the live video stream: the init segment, or one media fragment.
+ *
+ * Video is deliberately NOT modelled as a kind of frame. A frame is a picture
+ * that stands alone; a video chunk is meaningless without the init segment
+ * before it and, for a media chunk, without the keyframe its group of pictures
+ * began at. Pretending otherwise produces a consumer that appends bytes in any
+ * order and renders black with no error to explain it.
+ */
+export interface DeskVideoChunk {
+    seq: number;
+    kind: DeskVideoChunkKind;
+    /** RFC 6381, e.g. `avc1.42C020`. What a MediaSource must be told. */
+    codec: string;
+    width: number;
+    height: number;
+    /** True when a `media` chunk begins at a sync sample. Always false on `init`. */
+    keyframe: boolean;
+    data: Buffer;
+    at: string;
+}
+export interface DeskScreenInput {
+    move(x: number, y: number): Promise<void>;
+    click(x: number, y: number, button?: DeskPointerButton): Promise<void>;
+    type(text: string): Promise<void>;
+    key(combo: string): Promise<void>;
+    scroll(x: number, y: number, dx: number, dy: number): Promise<void>;
+    drag(from: DeskPoint, to: DeskPoint): Promise<void>;
+}
+export interface DeskScreenHandle {
+    observe(): Promise<DeskObservation>;
+    /**
+     * Coordinate contract: all coordinates are in the pixel space of the most
+     * recent view of the screen — an `observe()`, a frame from `frames()`, or a
+     * chunk from `video()` — one to one. All three anchor it, because the caller
+     * aims at whatever it was last shown, and a live viewer is shown a stream
+     * rather than an observation. That holds whatever the encoding is: a lossy
+     * frame and an H.264 fragment are both true-size views of the screen, so they
+     * anchor exactly as a lossless PNG does. Input before any view, or outside
+     * its bounds, throws.
+     */
+    input: DeskScreenInput;
+    a11y: {
+        invoke(nodeId: string, action: string): Promise<void>;
+    };
+    launch(appId: string, args?: readonly string[]): Promise<void>;
+    clipboard: {
+        read(): Promise<string>;
+        write(text: string): Promise<void>;
+    };
+    /**
+     * The live frame stream. `format` picks how the guest encodes each frame and
+     * is a bytes-for-fidelity trade: `jpeg` is roughly an order of magnitude
+     * smaller per frame, which is what a human driving the screen needs, while
+     * `png` stays exact. Omitted leaves the choice to the guest. `observe()` is
+     * unaffected and always lossless.
+     *
+     * The stream also ends when the desk reconnects to its guest agent: the
+     * capture behind it did not survive, so the iterator completes rather than
+     * waiting on frames that are never coming. Start another one to resume.
+     */
+    frames(options?: {
+        fps?: number;
+        width?: number;
+        height?: number;
+        format?: DeskFrameFormat;
+    }): AsyncIterable<DeskFrame>;
+    /**
+     * The live screen as encoded VIDEO rather than as a sequence of pictures.
+     *
+     * This is what a person driving the desk should watch. `frames()` ships a
+     * whole independent image per tick; a video codec ships the DIFFERENCE, and a
+     * desktop is mostly still — which is roughly two orders of magnitude fewer
+     * bytes on the transport between the guest and here, the one place the live
+     * view was actually bounded.
+     *
+     * The stream anchors the coordinate space exactly as `observe()` and
+     * `frames()` do, from the first chunk onwards, because a viewer driving by
+     * video is aiming at what the video showed it.
+     *
+     * Masked like frames: nothing is emitted while a handover is active. And
+     * ended like frames when the desk reconnects to its guest agent — a video
+     * consumer resumed on a fresh encoder, without its init segment and away
+     * from a keyframe, decodes nothing at all and says so nowhere.
+     */
+    video(options?: {
+        fps?: number;
+        width?: number;
+        height?: number;
+    }): AsyncIterable<DeskVideoChunk>;
+    handover: {
+        begin(options: {
+            ttlMs: number;
+            scope?: DeskHandoverScope;
+            actor?: string;
+        }): Promise<{
+            url: string;
+        }>;
+        end(): Promise<void>;
+        readonly active: boolean;
+    };
+}
+export interface DeskScreenService {
+    start(options: {
+        width: number;
+        height: number;
+    }): Promise<DeskScreenHandle>;
+    stop(): Promise<void>;
+    readonly running: boolean;
+}
+/**
+ * One leased desk.
+ *
+ * The handle stays valid across a lost guest connection: the host reconnects
+ * underneath it and later calls work, so a guest agent restart or a dropped
+ * vsock bridge no longer costs the rest of the lease. Two consequences a
+ * caller must actually handle:
+ *
+ * - A call that was IN FLIGHT when the connection dropped rejects with
+ *   `DeskRequestFateUnknownError` — it may already have run in the guest.
+ *   Nothing retries it for you.
+ * - A reconnect does not restore guest-side capture state. Live `frames()` and
+ *   `video()` iterators END, and the coordinate anchor is dropped, so the
+ *   caller must `observe()` (or take a new frame) before aiming again.
+ *
+ * When the connection cannot be recovered at all the desk is suspended, so the
+ * handle goes dead and `resume()` boots a fresh one — rather than the handle
+ * answering "no longer connected" for the rest of the lease.
+ */
+export interface DeskHandle {
+    readonly deskId: string;
+    renewLease(ms: number): void;
+    exec(options: DeskExecOptions & {
+        keepAlive: true;
+    }): Promise<DeskJob>;
+    exec(options: DeskExecOptions): Promise<DeskExecSnapshot>;
+    /** The keepAlive processes still running on this desk. */
+    jobs(): DeskJob[];
+    screen: DeskScreenService;
+}
+export interface DeskHostStats {
+    /** Desks currently resident (booted or booting) against the capacity cap. */
+    resident: number;
+    /** Starts waiting in the FIFO queue for capacity. */
+    queued: number;
+    capacity: number;
+    suspended: number;
+    lastStartedAt: string | null;
+    lastSuspendedAt: string | null;
+    /**
+     * Times a resident desk lost its guest connection mid-lease and got it back.
+     * One is a blip; a number that climbs is a desk FLAPPING — a guest agent
+     * restarting in a loop, a failing vsock bridge — and that is the difference
+     * between "the desk is slow" and a diagnosis.
+     */
+    reconnects: number;
+    lastReconnectAt: string | null;
+    /** Which desk reconnected last: enough to go and look at the right one. */
+    lastReconnectDeskId: string | null;
+    lastError: string | null;
+}
+export interface DeskHost {
+    start(options: DeskStartOptions): Promise<DeskHandle>;
+    resume(deskId: string): Promise<DeskHandle>;
+    suspend(deskId: string): Promise<void>;
+    destroy(deskId: string): Promise<void>;
+    stats(): DeskHostStats;
+    /**
+     * Enforce every time-based rule now: expire handovers past their TTL and
+     * suspend desks past their lease or idle deadline. Returns the number of
+     * desks suspended. Timers call this automatically; tests with an injected
+     * clock call it directly.
+     */
+    sweep(): Promise<number>;
+}
+export declare function createDeskHost(options: DeskHostOptions): DeskHost;
+export interface VerifyDeskHostOptions {
+    kernelPath: string;
+    /** Initramfs for the probe VM; needed for a modular kernel, as at boot. */
+    initramfsPath?: string;
+    /**
+     * Kernel command line for the probe VM. It must match what real desks boot
+     * with: a probe that panics because its root is on another partition
+     * reports a host that cannot run desks, which is indistinguishable from a
+     * host that genuinely cannot.
+     */
+    kernelCmdline?: string;
+    baseImagePath: string;
+    vmmPath?: string;
+    kvmPath?: string;
+    /** Where the throwaway probe overlay is created; defaults to the OS tmpdir. */
+    scratchDir?: string;
+    runtimeDir?: string;
+    backend?: DeskBackend;
+    launcherIdentity?: DeskLauncherIdentity;
+    platform?: NodeJS.Platform;
+    pathExists?: (path: string) => boolean;
+    deviceExists?: (path: string) => boolean;
+    idFactory?: () => string;
+}
+export interface DeskHostVerification {
+    /** Whether this host can serve desks: KVM present and the guest reachable. */
+    supported: boolean;
+    vmmPath: string;
+    kvm: boolean;
+    vsock: boolean;
+    virtioGpu: boolean;
+}
+/**
+ * Boot-time probe. Distinguishes a host that is unusable — wrong platform,
+ * missing VMM, missing images — which throws, from capabilities that are
+ * merely absent, which are reported as booleans: `kvm` (no boot possible
+ * without it), `vsock` (the guest agent answered), and `virtioGpu` (a screen
+ * would have hardware-backed rendering). It boots a throwaway microVM through
+ * the backend, asks it two questions, and discards it.
+ */
+export declare function verifyDeskHost(options: VerifyDeskHostOptions): Promise<DeskHostVerification>;
+//# sourceMappingURL=host.d.ts.map

package/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAML,KAAK,oBAAoB,EAC1B,MAAM,QAAQ,CAAA;AACf,OAAO,EAEL,KAAK,WAAW,EAGjB,MAAM,WAAW,CAAA;AAWlB,OAAO,KAAK,EACV,QAAQ,EAGR,eAAe,EAEf,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,SAAS,EACT,kBAAkB,EAClB,UAAU,EACX,MAAM,UAAU,CAAA;AAEjB,eAAO,MAAM,gBAAgB,IAAI,CAAA;AACjC,eAAO,MAAM,uBAAuB,QAAa,CAAA;AACjD,eAAO,MAAM,gBAAgB,QAAc,CAAA;AAC3C,eAAO,MAAM,gBAAgB,MAAM,CAAA;AA0BnC,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,KAAK,EAAE,SAAS,CAAA;IAChB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IACtC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CACzC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACtC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;IAC9B,OAAO,EAAE,UAAU,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,MAAM,EAAE,eAAe,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;CACX;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,kBAAkB,CAAA;IACxB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;CACX;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,CAAA;IACnC;;;;;;;;;OASG;IACH,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE;QAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAA;IAC/D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,SAAS,EAAE;QAAE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAA;IAC1E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE;QACf,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,eAAe,CAAA;KACzB,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;IAC5B;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE;QACd,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,aAAa,CAAC,cAAc,CAAC,CAAA;IACjC,QAAQ,EAAE;QACR,KAAK,CAAC,OAAO,EAAE;YACb,KAAK,EAAE,MAAM,CAAA;YACb,KAAK,CAAC,EAAE,iBAAiB,CAAA;YACzB,KAAK,CAAC,EAAE,MAAM,CAAA;SACf,GAAG,OAAO,CAAC;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;QAC5B,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QACpB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KACzB,CAAA;CACF;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACzD,0DAA0D;IAC1D,IAAI,IAAI,OAAO,EAAE,CAAA;IACjB,MAAM,EAAE,iBAAiB,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAA;IAChB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,2EAA2E;IAC3E,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACrD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC3C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,KAAK,IAAI,aAAa,CAAA;IACtB;;;;;OAKG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CACzB;AA0CD,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CA03BjE;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IACtC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IACxC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA4ElG"}