@cortexkit/subc-client 0.17.0 → 0.18.0

package/dist/launch-nonce.d.ts

@@ -0,0 +1,173 @@
+/**
+ * The launch nonce: the secret the daemon gives each module it spawns, which
+ * the module presents to be admitted as itself.
+ *
+ * On macOS and Linux the daemon hands it over through a pipe rather than the
+ * environment, because any process of the same user can read another
+ * process's initial environment (`ps eww`). The pipe's read end is descriptor
+ * 3 in the module and `SUBC_LAUNCH_NONCE_FD` names it as `<fd>:<inode>`.
+ * {@link launchNonce} reads that descriptor once, closes it, and caches the
+ * value for the life of the process. While modules move over, the daemon also
+ * keeps setting the environment copy (`SUBC_LAUNCH_NONCE`), which
+ * {@link launchNonce} reads when no descriptor is named. Windows has no
+ * descriptor handoff, so there only the environment copy is read.
+ *
+ * This mirrors the Rust accessor in `subc-os` (`subc_os::launch_nonce`): the
+ * same checks in the same order, the same error names and messages.
+ */
+import { type BigIntStats } from "node:fs";
+/** The environment copy of the nonce, kept only while modules move to the descriptor. */
+export declare const SUBC_LAUNCH_NONCE_ENV = "SUBC_LAUNCH_NONCE";
+/**
+ * Names the descriptor holding the nonce, as `<fd>:<inode>`. The inode names
+ * the pipe itself, so the reader can tell it from an unrelated descriptor that
+ * happens to have the same number. A process a module spawns inherits this
+ * variable but not the pipe, and without the inode it would read and close
+ * whatever that process has at the number.
+ */
+export declare const SUBC_LAUNCH_NONCE_FD_ENV = "SUBC_LAUNCH_NONCE_FD";
+/** The descriptor number the daemon gives the pipe's read end in the module. */
+export declare const LAUNCH_NONCE_FD = 3;
+/** Where a process got its launch nonce from, as modules report it in provenance. */
+export type LaunchNonceSource = "fd" | "env";
+/** The nonce this process was launched with, and where it came from. */
+export interface LaunchNonce {
+    readonly value: string;
+    readonly source: LaunchNonceSource;
+}
+/**
+ * Why the descriptor named by `SUBC_LAUNCH_NONCE_FD` gave no nonce. The names
+ * are the Rust `LaunchNonceError` variants.
+ *
+ * None of these falls back to the environment copy. A named descriptor that
+ * cannot be read means the handoff went wrong, or that this process inherited
+ * the variable from a module without inheriting the pipe; reading the
+ * environment instead would hide the first and defeat the second.
+ */
+export type LaunchNonceErrorKind = 
+/** The variable is not `<fd>:<inode>`. */
+"Malformed"
+/** Nothing is open at that number: what a process spawned by a module sees. */
+ | "NotOpen"
+/** The descriptor is open but is not a pipe. It was left alone. */
+ | "NotAPipe"
+/** The descriptor is a pipe, but not the one named. It was left alone. */
+ | "WrongPipe"
+/** The named pipe holds no bytes. It was left open and nothing was consumed. */
+ | "Empty"
+/** Reading the named pipe failed. */
+ | "Unreadable"
+/** The named pipe held bytes that are not UTF-8. */
+ | "NotUtf8";
+export interface LaunchNonceErrorDetails {
+    /** The descriptor number, for every kind except `Malformed`. */
+    fd?: number;
+    /** The OS error number, for `NotOpen` and (when known) `Unreadable`. */
+    errno?: number;
+    /** The variable's text, for `Malformed`. */
+    value?: string;
+    /** The inodes compared, for `WrongPipe`. */
+    expectedInode?: bigint;
+    foundInode?: bigint;
+}
+export declare class LaunchNonceError extends Error {
+    readonly name = "LaunchNonceError";
+    readonly kind: LaunchNonceErrorKind;
+    readonly fd: number | undefined;
+    readonly errno: number | undefined;
+    readonly value: string | undefined;
+    readonly expectedInode: bigint | undefined;
+    readonly foundInode: bigint | undefined;
+    constructor(kind: LaunchNonceErrorKind, message: string, details?: LaunchNonceErrorDetails);
+}
+/**
+ * Whether `error` is a {@link LaunchNonceError}, including one thrown by another
+ * copy of this package sharing the process-wide cache, which `instanceof`
+ * would not recognise.
+ */
+export declare function isLaunchNonceError(error: unknown): error is LaunchNonceError;
+/**
+ * This process's launch nonce and where it came from, or `undefined` when
+ * neither variable is set (or the environment copy is empty): the process was
+ * not started by the daemon. Throws the cached {@link LaunchNonceError} when a
+ * named descriptor could not be taken.
+ *
+ * The first call decides, and every later call returns the same answer
+ * without touching the descriptor or the environment again. So every reader
+ * in a process must come through here: after the first read closes the
+ * descriptor, its number is the next one the process hands out, and a second
+ * independent reader would read and close some unrelated socket or file. The
+ * cache is shared with every other copy of this package loaded in the same
+ * JavaScript realm (see {@link PROCESS_CELL_KEY}); a worker thread is its own
+ * realm and has its own cache, so read it on the main thread.
+ *
+ * - When `SUBC_LAUNCH_NONCE_FD` is set (not on Windows), the descriptor it
+ *   names is taken only if it is a pipe with the named inode and holds bytes;
+ *   it is then read to end of file and closed. Anything else throws and leaves
+ *   the descriptor as it was, and never falls back to the environment.
+ * - Otherwise the value of `SUBC_LAUNCH_NONCE` is used.
+ *
+ * It never changes `process.env`. Removing either variable would break any
+ * other reader in the process still on the environment copy.
+ *
+ * Call it before the process spawns anything. Until the first read the
+ * descriptor is inheritable (it has to be, to survive the daemon's exec), so a
+ * child spawned earlier would inherit the pipe.
+ *
+ * It assumes the write end of the pipe was closed before this process started,
+ * as the daemon's handoff does. Node and Bun cannot ask how many bytes a pipe
+ * holds without reading it (the Rust accessor uses the FIONREAD ioctl), so the
+ * emptiness check is a first read: at end of file it returns no bytes and
+ * consumes nothing. If some other process still held the write end open, an
+ * empty pipe would block that read instead of reporting `Empty`.
+ */
+export declare function launchNonce(): LaunchNonce | undefined;
+/**
+ * {@link launchNonce} without the throw: `undefined` for no nonce and for a
+ * refused descriptor alike. For readers that treat a refusal as "no
+ * identity", such as the consumer's route open.
+ */
+export declare function launchNonceOrUndefined(): LaunchNonce | undefined;
+type CachedResult = {
+    readonly ok: true;
+    readonly nonce: LaunchNonce | null;
+} | {
+    readonly ok: false;
+    readonly error: LaunchNonceError;
+};
+/**
+ * The shape stored under {@link PROCESS_CELL_KEY}. Other versions of this
+ * package read it, so it only ever gains members.
+ */
+interface SharedLaunchNonceCell {
+    result(): CachedResult;
+}
+/**
+ * Forgets the process-wide answer, so the next {@link launchNonce} reads again.
+ * For tests that change the environment between cases; never for modules,
+ * where a second read is exactly what the cache exists to prevent.
+ */
+export declare function resetLaunchNonceForTests(): void;
+/** What the accessor reads from fstat: the file type and the raw st_ino. */
+export type LaunchNonceStat = (fd: number) => Pick<BigIntStats, "isFIFO" | "ino">;
+/**
+ * A launch nonce read at most once. The process has one, behind
+ * {@link launchNonce}; tests make their own with a stand-in for the
+ * environment, the platform, and fstat.
+ */
+export declare class LaunchNonceCell implements SharedLaunchNonceCell {
+    private cached;
+    /** How many times this cell has taken a descriptor. At most one. */
+    descriptorReads: number;
+    private readonly lookup;
+    private readonly platform;
+    private readonly stat;
+    constructor(lookup: (key: string) => string | undefined, platform?: NodeJS.Platform, stat?: LaunchNonceStat);
+    result(): CachedResult;
+    /** The cached value, reading it first if no caller has yet; throws a refusal. */
+    get(): LaunchNonce | undefined;
+    private read;
+    private readDescriptor;
+}
+export {};
+//# sourceMappingURL=launch-nonce.d.ts.map

package/dist/launch-nonce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-nonce.d.ts","sourceRoot":"","sources":["../src/launch-nonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAkC,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3E,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D,gFAAgF;AAChF,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,qFAAqF;AACrF,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,KAAK,CAAC;AAE7C,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB;AAC9B,0CAA0C;AACxC,WAAW;AACb,+EAA+E;GAC7E,SAAS;AACX,mEAAmE;GACjE,UAAU;AACZ,0EAA0E;GACxE,WAAW;AACb,gFAAgF;GAC9E,OAAO;AACT,qCAAqC;GACnC,YAAY;AACd,oDAAoD;GAClD,SAAS,CAAC;AAEd,MAAM,WAAW,uBAAuB;IACtC,gEAAgE;IAChE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAKD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAkB,IAAI,sBAAsB;IAC5C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE5B,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B;CAS/F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAM5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,WAAW,IAAI,WAAW,GAAG,SAAS,CAErD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,WAAW,GAAG,SAAS,CAGhE;AAED,KAAK,YAAY,GACb;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE7D;;;GAGG;AACH,UAAU,qBAAqB;IAC7B,MAAM,IAAI,YAAY,CAAC;CACxB;AAqBD;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AAOD,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC;AAElF;;;;GAIG;AACH,qBAAa,eAAgB,YAAW,qBAAqB;IAC3D,OAAO,CAAC,MAAM,CAA2B;IACzC,oEAAoE;IACpE,eAAe,SAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;gBAGrC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,EAC3C,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,IAAI,GAAE,eAAyD;IAOjE,MAAM,IAAI,YAAY;IAKtB,iFAAiF;IACjF,GAAG,IAAI,WAAW,GAAG,SAAS;IAI9B,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,cAAc;CAsFvB"}

package/dist/launch-nonce.js

@@ -0,0 +1,334 @@
+/**
+ * The launch nonce: the secret the daemon gives each module it spawns, which
+ * the module presents to be admitted as itself.
+ *
+ * On macOS and Linux the daemon hands it over through a pipe rather than the
+ * environment, because any process of the same user can read another
+ * process's initial environment (`ps eww`). The pipe's read end is descriptor
+ * 3 in the module and `SUBC_LAUNCH_NONCE_FD` names it as `<fd>:<inode>`.
+ * {@link launchNonce} reads that descriptor once, closes it, and caches the
+ * value for the life of the process. While modules move over, the daemon also
+ * keeps setting the environment copy (`SUBC_LAUNCH_NONCE`), which
+ * {@link launchNonce} reads when no descriptor is named. Windows has no
+ * descriptor handoff, so there only the environment copy is read.
+ *
+ * This mirrors the Rust accessor in `subc-os` (`subc_os::launch_nonce`): the
+ * same checks in the same order, the same error names and messages.
+ */
+import { closeSync, fstatSync, readSync } from "node:fs";
+/** The environment copy of the nonce, kept only while modules move to the descriptor. */
+export const SUBC_LAUNCH_NONCE_ENV = "SUBC_LAUNCH_NONCE";
+/**
+ * Names the descriptor holding the nonce, as `<fd>:<inode>`. The inode names
+ * the pipe itself, so the reader can tell it from an unrelated descriptor that
+ * happens to have the same number. A process a module spawns inherits this
+ * variable but not the pipe, and without the inode it would read and close
+ * whatever that process has at the number.
+ */
+export const SUBC_LAUNCH_NONCE_FD_ENV = "SUBC_LAUNCH_NONCE_FD";
+/** The descriptor number the daemon gives the pipe's read end in the module. */
+export const LAUNCH_NONCE_FD = 3;
+// This file sticks to syntax Node can strip without transforming (no
+// constructor parameter properties, no enums), so tests can run it directly
+// under Node as well as Bun.
+export class LaunchNonceError extends Error {
+    name = "LaunchNonceError";
+    kind;
+    fd;
+    errno;
+    value;
+    expectedInode;
+    foundInode;
+    constructor(kind, message, details = {}) {
+        super(message);
+        this.kind = kind;
+        this.fd = details.fd;
+        this.errno = details.errno;
+        this.value = details.value;
+        this.expectedInode = details.expectedInode;
+        this.foundInode = details.foundInode;
+    }
+}
+/**
+ * Whether `error` is a {@link LaunchNonceError}, including one thrown by another
+ * copy of this package sharing the process-wide cache, which `instanceof`
+ * would not recognise.
+ */
+export function isLaunchNonceError(error) {
+    return (error instanceof Error &&
+        error.name === "LaunchNonceError" &&
+        typeof error.kind === "string");
+}
+/**
+ * This process's launch nonce and where it came from, or `undefined` when
+ * neither variable is set (or the environment copy is empty): the process was
+ * not started by the daemon. Throws the cached {@link LaunchNonceError} when a
+ * named descriptor could not be taken.
+ *
+ * The first call decides, and every later call returns the same answer
+ * without touching the descriptor or the environment again. So every reader
+ * in a process must come through here: after the first read closes the
+ * descriptor, its number is the next one the process hands out, and a second
+ * independent reader would read and close some unrelated socket or file. The
+ * cache is shared with every other copy of this package loaded in the same
+ * JavaScript realm (see {@link PROCESS_CELL_KEY}); a worker thread is its own
+ * realm and has its own cache, so read it on the main thread.
+ *
+ * - When `SUBC_LAUNCH_NONCE_FD` is set (not on Windows), the descriptor it
+ *   names is taken only if it is a pipe with the named inode and holds bytes;
+ *   it is then read to end of file and closed. Anything else throws and leaves
+ *   the descriptor as it was, and never falls back to the environment.
+ * - Otherwise the value of `SUBC_LAUNCH_NONCE` is used.
+ *
+ * It never changes `process.env`. Removing either variable would break any
+ * other reader in the process still on the environment copy.
+ *
+ * Call it before the process spawns anything. Until the first read the
+ * descriptor is inheritable (it has to be, to survive the daemon's exec), so a
+ * child spawned earlier would inherit the pipe.
+ *
+ * It assumes the write end of the pipe was closed before this process started,
+ * as the daemon's handoff does. Node and Bun cannot ask how many bytes a pipe
+ * holds without reading it (the Rust accessor uses the FIONREAD ioctl), so the
+ * emptiness check is a first read: at end of file it returns no bytes and
+ * consumes nothing. If some other process still held the write end open, an
+ * empty pipe would block that read instead of reporting `Empty`.
+ */
+export function launchNonce() {
+    return unwrap(processCell().result());
+}
+/**
+ * {@link launchNonce} without the throw: `undefined` for no nonce and for a
+ * refused descriptor alike. For readers that treat a refusal as "no
+ * identity", such as the consumer's route open.
+ */
+export function launchNonceOrUndefined() {
+    const result = processCell().result();
+    return result.ok ? result.nonce ?? undefined : undefined;
+}
+/**
+ * Where the process-wide cell lives. A registry symbol rather than a module
+ * variable, because a module's dependencies often install two copies of this
+ * package. With a cache per copy, the second copy would look at the
+ * descriptor after the first had closed it, refuse, and so fail to register
+ * the module with the daemon.
+ */
+const PROCESS_CELL_KEY = Symbol.for("@cortexkit/subc-client/launch-nonce/v1");
+function processCell() {
+    const global = globalThis;
+    let cell = global[PROCESS_CELL_KEY];
+    if (cell === undefined) {
+        cell = new LaunchNonceCell((key) => process.env[key]);
+        global[PROCESS_CELL_KEY] = cell;
+    }
+    return cell;
+}
+/**
+ * Forgets the process-wide answer, so the next {@link launchNonce} reads again.
+ * For tests that change the environment between cases; never for modules,
+ * where a second read is exactly what the cache exists to prevent.
+ */
+export function resetLaunchNonceForTests() {
+    delete globalThis[PROCESS_CELL_KEY];
+}
+function unwrap(result) {
+    if (!result.ok)
+        throw result.error;
+    return result.nonce ?? undefined;
+}
+/**
+ * A launch nonce read at most once. The process has one, behind
+ * {@link launchNonce}; tests make their own with a stand-in for the
+ * environment, the platform, and fstat.
+ */
+export class LaunchNonceCell {
+    cached;
+    /** How many times this cell has taken a descriptor. At most one. */
+    descriptorReads = 0;
+    lookup;
+    platform;
+    stat;
+    constructor(lookup, platform = process.platform, stat = (fd) => fstatSync(fd, { bigint: true })) {
+        this.lookup = lookup;
+        this.platform = platform;
+        this.stat = stat;
+    }
+    result() {
+        if (this.cached === undefined)
+            this.cached = this.read();
+        return this.cached;
+    }
+    /** The cached value, reading it first if no caller has yet; throws a refusal. */
+    get() {
+        return unwrap(this.result());
+    }
+    read() {
+        if (this.platform !== "win32") {
+            const named = this.lookup(SUBC_LAUNCH_NONCE_FD_ENV);
+            if (named !== undefined) {
+                try {
+                    return { ok: true, nonce: this.readDescriptor(named) };
+                }
+                catch (error) {
+                    if (error instanceof LaunchNonceError)
+                        return { ok: false, error };
+                    throw error;
+                }
+            }
+        }
+        const value = this.lookup(SUBC_LAUNCH_NONCE_ENV);
+        return { ok: true, nonce: value ? makeLaunchNonce(value, "env") : null };
+    }
+    readDescriptor(text) {
+        const { fd, expectedInode } = parseFdValue(text);
+        // Check what the descriptor is before taking ownership of it. Reading and
+        // closing a descriptor that belongs to other code in this process would
+        // break that code, and a process that inherited the variable without the
+        // descriptor may well have something else at this number.
+        let stat;
+        try {
+            stat = this.stat(fd);
+        }
+        catch (error) {
+            const errno = errnoOf(error) ?? 0;
+            throw new LaunchNonceError("NotOpen", `${SUBC_LAUNCH_NONCE_FD_ENV} names descriptor ${fd}, which is not open (errno ${errno}); ` +
+                "a process spawned by a module inherits the variable but not the descriptor", { fd, errno });
+        }
+        if (!stat.isFIFO()) {
+            throw new LaunchNonceError("NotAPipe", `${SUBC_LAUNCH_NONCE_FD_ENV} names descriptor ${fd}, which is not a pipe; left it untouched`, { fd });
+        }
+        // Node reports st_ino as a signed 64-bit value, and macOS pipe inodes use
+        // the top bit, so they come back negative. The variable carries the
+        // unsigned value (the Rust daemon writes `st_ino as u64`).
+        const foundInode = BigInt.asUintN(64, stat.ino);
+        if (foundInode !== expectedInode) {
+            throw new LaunchNonceError("WrongPipe", `${SUBC_LAUNCH_NONCE_FD_ENV} names descriptor ${fd} with inode ${expectedInode}, but it has ` +
+                `inode ${foundInode}; left it untouched`, { fd, expectedInode, foundInode });
+        }
+        // Node and Bun have no FIONREAD (the ioctl the Rust accessor uses to count
+        // the waiting bytes without reading them), so the first read is the
+        // emptiness check. With the write end closed, as the daemon leaves it, an
+        // empty pipe answers end of file: zero bytes, nothing consumed, and the
+        // descriptor stays open. A non-blocking descriptor with a writer still
+        // open answers EAGAIN, which likewise consumed nothing. Do not replace
+        // this with fstat's size: macOS reports the waiting byte count there for
+        // an anonymous pipe, but 0 for a mkfifo pipe, and Linux reports 0 for
+        // every pipe.
+        const chunk = Buffer.alloc(256);
+        let got;
+        try {
+            got = readSync(fd, chunk, 0, chunk.length, null);
+        }
+        catch (error) {
+            if (isWouldBlock(error))
+                throw emptyError(fd);
+            throw unreadableError(fd, errnoOf(error));
+        }
+        if (got === 0)
+            throw emptyError(fd);
+        // From here the descriptor is this process's to consume: it is the pipe
+        // the daemon named by inode, and every reader goes through this one cell,
+        // which reaches this line at most once.
+        this.descriptorReads += 1;
+        const parts = [Buffer.from(chunk.subarray(0, got))];
+        try {
+            for (;;) {
+                const n = readSync(fd, chunk, 0, chunk.length, null);
+                if (n === 0)
+                    break;
+                parts.push(Buffer.from(chunk.subarray(0, n)));
+            }
+        }
+        catch (error) {
+            throw unreadableError(fd, errnoOf(error));
+        }
+        finally {
+            closeQuietly(fd);
+        }
+        let value;
+        try {
+            value = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(parts));
+        }
+        catch {
+            throw new LaunchNonceError("NotUtf8", `the launch nonce pipe at descriptor ${fd} held bytes that are not UTF-8`, { fd });
+        }
+        return makeLaunchNonce(value, "fd");
+    }
+}
+const U64_MAX = (1n << 64n) - 1n;
+const I32_MAX = 2 ** 31 - 1;
+/**
+ * Parse `<fd>:<inode>` exactly as the Rust accessor does: split at the first
+ * colon; the descriptor is decimal with an optional `+` or `-` sign and must
+ * fit a signed 32-bit integer and not be negative; the inode is decimal with
+ * an optional `+` and must fit an unsigned 64-bit integer.
+ */
+function parseFdValue(text) {
+    const malformed = () => new LaunchNonceError("Malformed", `${SUBC_LAUNCH_NONCE_FD_ENV}=${JSON.stringify(text)} is not <fd>:<inode>`, { value: text });
+    const colon = text.indexOf(":");
+    if (colon < 0)
+        throw malformed();
+    const fdText = text.slice(0, colon);
+    const inodeText = text.slice(colon + 1);
+    if (!/^[+-]?\d+$/.test(fdText) || !/^\+?\d+$/.test(inodeText))
+        throw malformed();
+    const fdBig = BigInt(fdText);
+    if (fdBig < 0n || fdBig > BigInt(I32_MAX))
+        throw malformed();
+    const expectedInode = BigInt(inodeText);
+    if (expectedInode > U64_MAX)
+        throw malformed();
+    return { fd: Number(fdBig), expectedInode };
+}
+/**
+ * Holds the value in a private field behind a getter, so logging, inspecting
+ * or serialising the object does not print the secret; the Rust type's Debug
+ * output redacts it the same way.
+ */
+class RedactedLaunchNonce {
+    source;
+    #value;
+    constructor(value, source) {
+        this.#value = value;
+        this.source = source;
+        Object.freeze(this);
+    }
+    get value() {
+        return this.#value;
+    }
+    toJSON() {
+        return { source: this.source };
+    }
+    [Symbol.for("nodejs.util.inspect.custom")]() {
+        return `LaunchNonce { value: <${this.#value.length} bytes redacted>, source: "${this.source}" }`;
+    }
+}
+function makeLaunchNonce(value, source) {
+    return new RedactedLaunchNonce(value, source);
+}
+function emptyError(fd) {
+    return new LaunchNonceError("Empty", `the launch nonce pipe at descriptor ${fd} is empty; left it untouched`, { fd });
+}
+function unreadableError(fd, errno) {
+    // `Some(n)` / `None` is how the Rust message prints an optional errno.
+    const shown = errno === undefined ? "None" : `Some(${errno})`;
+    return new LaunchNonceError("Unreadable", `could not read the launch nonce from descriptor ${fd} (errno ${shown})`, { fd, errno });
+}
+function isWouldBlock(error) {
+    const code = error?.code;
+    return code === "EAGAIN" || code === "EWOULDBLOCK";
+}
+/** Node and Bun report errno negated (libuv style); the Rust errors carry it positive. */
+function errnoOf(error) {
+    const errno = error?.errno;
+    return typeof errno === "number" ? Math.abs(errno) : undefined;
+}
+function closeQuietly(fd) {
+    try {
+        closeSync(fd);
+    }
+    catch {
+        // Nothing useful can be done if closing the consumed pipe fails.
+    }
+}
+//# sourceMappingURL=launch-nonce.js.map

package/dist/launch-nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-nonce.js","sourceRoot":"","sources":["../src/launch-nonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAoB,MAAM,SAAS,CAAC;AAE3E,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAgDjC,qEAAqE;AACrE,4EAA4E;AAC5E,6BAA6B;AAC7B,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACvB,IAAI,GAAG,kBAAkB,CAAC;IACnC,IAAI,CAAuB;IAC3B,EAAE,CAAqB;IACvB,KAAK,CAAqB;IAC1B,KAAK,CAAqB;IAC1B,aAAa,CAAqB;IAClC,UAAU,CAAqB;IAExC,YAAY,IAA0B,EAAE,OAAe,EAAE,UAAmC,EAAE;QAC5F,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,KAAK,CAAC,IAAI,KAAK,kBAAkB;QACjC,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;AAE9E,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,UAA4D,CAAC;IAC5E,IAAI,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAQ,UAA6D,CAAC,gBAAgB,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,MAAoB;IAClC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;AACnC,CAAC;AAKD;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,CAA2B;IACzC,oEAAoE;IACpE,eAAe,GAAG,CAAC,CAAC;IACH,MAAM,CAAsC;IAC5C,QAAQ,CAAkB;IAC1B,IAAI,CAAkB;IAEvC,YACE,MAA2C,EAC3C,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAwB,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAE/D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,iFAAiF;IACjF,GAAG;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/B,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,gBAAgB;wBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;oBACnE,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,0DAA0D;QAC1D,IAAI,IAAyC,CAAC;QAC9C,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,gBAAgB,CACxB,SAAS,EACT,GAAG,wBAAwB,qBAAqB,EAAE,8BAA8B,KAAK,KAAK;gBACxF,4EAA4E,EAC9E,EAAE,EAAE,EAAE,KAAK,EAAE,CACd,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,gBAAgB,CACxB,UAAU,EACV,GAAG,wBAAwB,qBAAqB,EAAE,0CAA0C,EAC5F,EAAE,EAAE,EAAE,CACP,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,2DAA2D;QAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,WAAW,EACX,GAAG,wBAAwB,qBAAqB,EAAE,eAAe,aAAa,eAAe;gBAC3F,SAAS,UAAU,qBAAqB,EAC1C,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAClC,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,cAAc;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;QAEpC,wEAAwE;QACxE,0EAA0E;QAC1E,wCAAwC;QACxC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAM;gBACnB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CACxB,SAAS,EACT,uCAAuC,EAAE,gCAAgC,EACzE,EAAE,EAAE,EAAE,CACP,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAE5B;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,IAAI,gBAAgB,CAClB,WAAW,EACX,GAAG,wBAAwB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,EACzE,EAAE,KAAK,EAAE,IAAI,EAAE,CAChB,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,SAAS,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,SAAS,EAAE,CAAC;IAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,aAAa,GAAG,OAAO;QAAE,MAAM,SAAS,EAAE,CAAC;IAC/C,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,mBAAmB;IACd,MAAM,CAAoB;IAC1B,MAAM,CAAS;IAExB,YAAY,KAAa,EAAE,MAAyB;QAClD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAED,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACxC,OAAO,yBAAyB,IAAI,CAAC,MAAM,CAAC,MAAM,8BAA8B,IAAI,CAAC,MAAM,KAAK,CAAC;IACnG,CAAC;CACF;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,MAAyB;IAC/D,OAAO,IAAI,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,gBAAgB,CACzB,OAAO,EACP,uCAAuC,EAAE,8BAA8B,EACvE,EAAE,EAAE,EAAE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,EAAU,EAAE,KAAyB;IAC5D,uEAAuE;IACvE,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC;IAC9D,OAAO,IAAI,gBAAgB,CACzB,YAAY,EACZ,mDAAmD,EAAE,WAAW,KAAK,GAAG,EACxE,EAAE,EAAE,EAAE,KAAK,EAAE,CACd,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,CAAC;AACrD,CAAC;AAED,0FAA0F;AAC1F,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,KAAK,GAAI,KAAoC,EAAE,KAAK,CAAC;IAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC"}

package/dist/provider.d.ts

@@ -1,6 +1,7 @@
 import { type BindIdentity, type ReconnectBackoff, type RequestOptions, type RouteTarget, type SubcCallErrorKind } from "./client.js";
 import { type ConnectionInfo } from "./connection-file.js";
 import { AdmissionClass, Priority } from "./envelope.js";
+import { type LaunchNonceSource } from "./launch-nonce.js";
 import { RouteHandle } from "./route-handle.js";
 export declare const HELLO_CORR = 1n;
 export type TrustTier = "first_party" | "reviewed" | "untrusted";
@@ -27,6 +28,34 @@ export interface ManifestInput {
     provides: ProviderRoleInput[];
     consumes: ConsumerRoleInput[];
     bindings: BindingsInput;
+    /**
+     * Facts about the running build, sent in HELLO only when declared. When it is
+     * declared without `launch_nonce_source`, the provider fills that field in
+     * from the launch nonce it sends.
+     */
+    provenance?: ManifestProvenance;
+}
+/**
+ * Build provenance a module declares in its manifest; mirrors
+ * `ManifestProvenance` in subc-protocol. Every field is optional and is left
+ * off the wire when unset. Omit a field you cannot know rather than sending a
+ * placeholder such as "unknown".
+ */
+export interface ManifestProvenance {
+    build_git_sha?: string;
+    /** Why `build_git_sha` is unavailable; an open set of reasons. */
+    build_git_sha_absence_reason?: string;
+    build_lock_digest?: string;
+    /** The subc-protocol crate version this module's wire vocabulary matches. */
+    wire_crate_version?: string;
+    store_schema_version?: string;
+    /**
+     * Where the running module read its launch nonce from: `fd` (the pipe the
+     * daemon hands over as descriptor 3) or `env` (the environment variable kept
+     * while modules move to the pipe). A fact about the running process, not
+     * the build. Filled in by the provider when left unset.
+     */
+    launch_nonce_source?: LaunchNonceSource;
 }
 export type ProviderRoleInput = {
     role: "tool_provider";
@@ -203,16 +232,19 @@ export interface SubcProviderConnectOptions {
     onConnectionState?: (event: ProviderConnectionState) => void | Promise<void>;
     /**
      * The one-time launch nonce to echo in HELLO for a reserved module. Defaults to
-     * the `SUBC_LAUNCH_NONCE` environment variable subc injects on spawn; pass
-     * explicitly to override. Omitted from the wire when empty (non-reserved modules).
+     * the process's launch nonce (see `launchNonce`: the descriptor subc hands
+     * over, or the `SUBC_LAUNCH_NONCE` environment copy), and `connect()` rejects
+     * with code `launch_nonce_unavailable` when a named descriptor is refused.
+     * Pass explicitly to override. Omitted from the wire when empty
+     * (non-reserved modules).
      */
     launchNonce?: string;
     /**
      * Whether an unexpected connection drop starts a reconnect-and-re-register
      * cycle (`true`) or ends serving and resolves {@link SubcProvider.closed}
      * (`false`). Defaults to `false` when the process runs under the daemon's
-     * supervision (both `SUBC_MODULE_ID` and `SUBC_LAUNCH_NONCE` are set and
-     * non-empty in its environment, the pair the daemon injects at spawn), since
+     * supervision (`SUBC_MODULE_ID` is set and the process has a launch nonce,
+     * the pair the daemon injects at spawn), since
      * the daemon owns a supervised module's restarts and waits for it to exit;
      * `true` otherwise, so plugins and other self-connecting providers keep
      * reconnecting. A daemon GOODBYE and `close()` end serving regardless.
@@ -362,4 +394,9 @@ export declare class SubcProvider {
     private failFatal;
     private finishClosed;
 }
+/**
+ * The manifest exactly as HELLO sends it. Exported for the conformance tests,
+ * not from the package entry.
+ */
+export declare function normalizeManifest(manifest: ManifestInput, sentNonce: string | undefined): ManifestInput;
 //# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EACL,cAAc,EAMd,QAAQ,EAGT,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,WAAW,EAEZ,MAAM,mBAAmB,CAAC;AAgB3B,eAAO,MAAM,UAAU,KAAK,CAAC;AAE7B,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAC/D,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,QAAQ,CAAC;AACzD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;AACnC,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AACrC,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,sBAAsB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GACD;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,yBAAyB,EAAE,CAAC;IAC3C,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;CAC1B,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,aAAa,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAGD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,wBAAwB,CAAC,CAAC;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,yFAAyF;IACzF,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;;;;OAQG;IACH,YAAY,IAAI,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,sBAAsB,KACxB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;AAEpD,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAE/E,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAE3B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8QAA8Q;IAC9Q,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,MAAM,YAAY,GACpB,OAAO,GACP;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC/B;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;IAC7E,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oEAAoE;IACpE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2GAA2G;IAC3G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAmCD,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAGjF;AAwCD,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,IAAI,EAAE,iBAAiB;IAChC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO;gBAJzB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,IAAI,GAAE,iBAA8B;IAC7C,yEAAyE;IAChE,MAAM,CAAC,EAAE,OAAO,YAAA;CAI5B;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gCAAgC,GAAG,aAAa,CAoC/F;AAED,wBAAgB,mBAAmB,CAAC,OAAO,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,EACvE,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAC/E,eAAe,CAMjB;AAED,qBAAa,YAAY;IAoDrB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IArDvB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAsB;IAIvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgI;IACxJ,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,qBAAqB,CAAK;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0D;IACtF,OAAO,CAAC,YAAY,CAA+B;IACnD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,UAAU,CAAkG;IACpH,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,qBAAqB,CAAK;IAElC;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,OAAO;IAeP,gFAAgF;IAChF,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,IAAI,IAAI,IAAI,cAAc,CAEzB;IAED,YAAY,IAAI,MAAM;IAItB,wEAAwE;IAClE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAqCpG,sEAAsE;IAChE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBhG,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAS/C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAWrC,8GAA8G;WACjG,OAAO,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;IAavE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;mBAiBP,cAAc;YAoBrB,QAAQ;YAuBR,QAAQ;IAyEtB;;;;;;OAMG;IACH;;;;;;;OAOG;YACW,gBAAgB;YAShB,eAAe;IAS7B,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;YAIV,oBAAoB;YA+GpB,iBAAiB;YAqGjB,mBAAmB;YA0CnB,SAAS;YA2BT,MAAM;IAKpB,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,0BAA0B;YA6BpB,kBAAkB;IAgDhC,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,sBAAsB;YAMhB,yBAAyB;IAmCvC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,YAAY;CAGrB"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EACL,cAAc,EAMd,QAAQ,EAGT,MAAM,eAAe,CAAC;AACvB,OAAO,EAKL,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,WAAW,EAEZ,MAAM,mBAAmB,CAAC;AAgB3B,eAAO,MAAM,UAAU,KAAK,CAAC;AAE7B,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAC/D,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,QAAQ,CAAC;AACzD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;AACnC,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AACrC,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,sBAAsB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GACD;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,yBAAyB,EAAE,CAAC;IAC3C,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;CAC1B,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,aAAa,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAGD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,wBAAwB,CAAC,CAAC;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,yFAAyF;IACzF,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;;;;OAQG;IACH,YAAY,IAAI,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,sBAAsB,KACxB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;AAEpD,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAE/E,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAE3B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8QAA8Q;IAC9Q,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,MAAM,YAAY,GACpB,OAAO,GACP;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC/B;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;IAC7E,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oEAAoE;IACpE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2GAA2G;IAC3G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAmCD,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAGjF;AAwCD,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,IAAI,EAAE,iBAAiB;IAChC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO;gBAJzB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,IAAI,GAAE,iBAA8B;IAC7C,yEAAyE;IAChE,MAAM,CAAC,EAAE,OAAO,YAAA;CAI5B;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gCAAgC,GAAG,aAAa,CAoC/F;AAED,wBAAgB,mBAAmB,CAAC,OAAO,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,EACvE,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAC/E,eAAe,CAMjB;AAED,qBAAa,YAAY;IAoDrB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IArDvB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAsB;IAIvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgI;IACxJ,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,qBAAqB,CAAK;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0D;IACtF,OAAO,CAAC,YAAY,CAA+B;IACnD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,UAAU,CAAkG;IACpH,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,qBAAqB,CAAK;IAElC;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,OAAO;IAeP,gFAAgF;IAChF,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,IAAI,IAAI,IAAI,cAAc,CAEzB;IAED,YAAY,IAAI,MAAM;IAItB,wEAAwE;IAClE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAqCpG,sEAAsE;IAChE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBhG,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAS/C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAWrC,8GAA8G;WACjG,OAAO,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;IAavE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;mBAiBP,cAAc;YAoBrB,QAAQ;YAuBR,QAAQ;IAyEtB;;;;;;OAMG;IACH;;;;;;;OAOG;YACW,gBAAgB;YAShB,eAAe;IAS7B,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;YAIV,oBAAoB;YA+GpB,iBAAiB;YAqGjB,mBAAmB;YA0CnB,SAAS;YA2BT,MAAM;IAKpB,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,0BAA0B;YA6BpB,kBAAkB;IAgDhC,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,sBAAsB;YAMhB,yBAAyB;IAmCvC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,YAAY;CAGrB;AAsMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CA2BvG"}