@dsh-enhanced/assistant-isolation 0.1.30

package/lib/audit-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-archive.js","sourceRoot":"","sources":["../src/audit-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAClE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,GAC9F,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,CAAC,MAAM,gCAAgC,GAAG,gCAAyC,CAAA;AAEzF,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,MAAM,kBAAkB,GAAG,GAAG,CAAA;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAA;AAC5B,MAAM,eAAe,GAAG,MAAM,CAAA;AAC9B,MAAM,sBAAsB,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAA;AACjD,MAAM,cAAc,GAAG,qBAAqB,CAAA;AAC5C,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,YAAY,GAAG,yBAAyB,CAAA;AAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,YAAY,GAAG,8CAA8C,CAAA;AACnE,MAAM,SAAS,GAAG,yEAAyE,CAAA;AAC3F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,YAAY,UAAU,EAAE,GAAG,YAAY,MAAM,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,CAAA;AACtH,MAAM,mBAAmB,GAAG,wEAAwE,CAAA;AAIpG,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC9B;IAArB,YAAqB,IAAoC,EAAE,UAAkB,IAAI;QAC/E,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAAgC;QAEvD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;IAC1C,CAAC;CACF;AAmDD,SAAS,IAAI,CAAC,IAAoC,EAAE,OAAgB,IAAW,MAAM,IAAI,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA,CAAC,CAAC;AACpI,SAAS,WAAW,CAAC,KAAc,IAAqB,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAA,CAAC,CAAC;AACtH,SAAS,YAAY,CAAC,KAAc,IAAqB,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAA,CAAC,CAAC;AACtH,SAAS,KAAK,CAAC,KAAc,IAAsC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAAA,CAAC,CAAC;AACrM,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAC9C,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,CAAA;AAC7D,CAAC;AACD,SAAS,SAAS,CAAC,KAA8B,EAAE,QAA2B;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;IACnC,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAC/F,CAAC;AACD,SAAS,WAAW,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IACnD,OAAO,CAAC,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,CAAA;AAC3H,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,sBAAsB,CAAA;AACpH,CAAC;AACD,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IACtK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACtE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,2CAA2C,CAAC,CAAA;IACvF,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;AACjH,CAAC;AACD,SAAS,MAAM,CAAC,OAAwB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAC/G,SAAS,SAAS,CAAC,IAAoD,EAAE,KAAqD;IAC5H,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,2CAA2C,CAAC,CAAA;IAChM,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,8CAA8C,CAAC,CAAA;QAC7P,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAC9F,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACvG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,6BAA6B,CAAC,CAAA;QAClN,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,SAA0B,IAAU,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA,CAAC,CAAC;AAC7F,SAAS,kBAAkB,CAAC,SAA0B;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5H,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAA;IACzK,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAC;QAAC,IAAI,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAA;IAAC,CAAC;AACtJ,CAAC;AACD,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACpF,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAA;AAC/H,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa,EAAE,OAAO,GAAG,MAAM,CAAC,gBAAgB;IACxF,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,iDAAiD,CAAC,CAAA;QACpR,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACvG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,6BAA6B,CAAC,CAAA;QACxQ,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAA;IACpD,CAAC;AACH,CAAC;AACD,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,OAAO,GAAG,MAAM,CAAC,gBAAgB;IACrF,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;YAAE,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAA;QAChK,OAAO,OAAO,CAAA;IAChB,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;AAC5C,CAAC;AACD,SAAS,uBAAuB,CAAC,IAAY,EAAE,IAAY;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAM;IAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC7C,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAC9B,CAAC;AACD,SAAS,0BAA0B,CAAC,IAAY;IAC9C,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM;YAAE,IAAI,CAAC,iBAAiB,EAAE,iEAAiE,CAAC,CAAA;QAChO,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACvG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM;eACpG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM;eAC3H,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAA;QAC5I,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,OAAO,IAAI,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAA;IAC3E,CAAC;YAAS,CAAC;QAAC,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;AACnE,CAAC;AACD,SAAS,yBAAyB,CAAC,QAA6B;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM;eACxI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK;YAAE,IAAI,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAA;IAChJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,IAAI,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IACjM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc;WACzS,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,aAAa;WAC9G,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;WACnH,KAAK,CAAC,QAAQ,KAAK,gCAAgC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAA;IACtN,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI;YAAE,IAAI,CAAC,iBAAiB,EAAE,wCAAwC,CAAC,CAAA;IACtM,CAAC;SAAM,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,uBAAuB;QAAE,IAAI,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAA;IACpM,OAAO,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,gCAAgC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;AACtY,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;IAC/E,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAA;IAC9S,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAgC,CAAA;AAClM,CAAC;AACD,SAAS,gBAAgB,CAAC,SAAiB,EAAE,IAAY,EAAE,cAAsB;IAC/E,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,gBAAgB,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAA;IACtG,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,eAAe,CAAC,CAAA;IACtI,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,UAAU,KAAK,cAAc;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,qCAAqC,CAAC,CAAA;IACrH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,gCAAgC,CAAC,CAAA;IACpJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,2BAA2B,CAAC,CAAA;IACnH,IAAI,WAAoB,CAAA;IACxB,IAAI,CAAC;QAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,qBAAqB,CAAC,CAAA;IAAC,CAAC;IACxH,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,iCAAiC,CAAC,CAAA;IACvH,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAkC,EAAE,CAAA;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,GAAY,CAAA;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,qBAAqB,CAAC,CAAA;QAAC,CAAC;QAC3G,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,+BAA+B,CAAC,CAAA;QACzG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,mCAAmC,CAAC,CAAA;IACvH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,aAAa,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,0CAA0C,CAAC,CAAA;IAC1N,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,IAAI,OAAO,CAAC,KAAK,CAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,aAAa,GAAG,KAAK;YAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,gCAAgC,CAAC,CAAA;IACtM,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,SAA0B;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACjG,IAAI,QAAkC,CAAA;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QAC9H,MAAM,OAAO,GAAI,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAiC,CAAC,YAAY,CAAA;QAC1G,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,6FAA6F,CAAC,CAAC,GAAG,EAAuF,CAAA;QACtN,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,GAAG,EAAE,mBAAmB,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAA;QACtR,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvB,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,GAAG,CAAC,wBAAwB,EAAE,CAAA;IAC5G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC3C,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,OAAO,IAAI,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAA;IACpE,CAAC;YAAS,CAAC;QAAC,QAAQ,EAAE,KAAK,EAAE,CAAA;IAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,SAA0B,EAAE,gBAA+E,EAAE,mBAAmB,GAAG,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,aAAmC;IAC9N,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,KAAe,CAAA;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAA;IAAC,CAAC;IACjH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACvF,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,YAAY,IAAI,aAAa,KAAK,SAAS;gBAAE,yBAAyB,CAAC,aAAa,CAAC,CAAA;;gBAC7F,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;YAC9D,SAAQ;QACV,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACjG,IAAI,CAAC,iBAAiB,EAAE,kCAAkC,IAAI,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,eAAe,GAAG,gBAAgB,IAAI,mBAAmB,CAAC,SAAS,CAAC,IAAI,SAAS,CAAA;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,kBAAkB,IAAI,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAA;QACtH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,gCAAgC,EAAE,SAAS,EAAE,CAAC,EAAE,iBAAiB,EAAE,eAAe,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,eAAe,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAA;IAC7T,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,CAAA;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAA;IACnG,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAA;IACjD,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACrE,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAAE,IAAI,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAA;YAC1G,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QACpD,CAAC;IACD,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,IAAI,OAAO,GAA4B,OAAO,CAAC,CAAC,CAAC,CAAA;IACjD,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAA;QAC3F,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,iBAAiB,EAAE,6DAA6D,CAAC,CAAA;IAC3H,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAAC,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAAC,IAAI,WAAW,GAAG,CAAC,CAAA;IAC9E,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAE,CAAC;QAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;QAC3D,IAAI,QAAQ,CAAC,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,iBAAiB;YAAE,IAAI,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAA;QAC9J,IAAI,QAAQ,CAAC,qBAAqB,KAAK,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,qBAAqB;YAAE,IAAI,CAAC,iBAAiB,EAAE,wDAAwD,CAAC,CAAA;QACpK,IAAI,SAAS,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC;gBAAE,IAAI,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAA;QAC9I,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,QAAQ,CAAC,aAAa,KAAK,gBAAgB;gBAAE,IAAI,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAA;YAC3J,gBAAgB,GAAG,QAAQ,CAAC,YAAY,GAAG,CAAC,CAAC;YAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAA;QAC7E,CAAC;QACD,IAAI,QAAQ,CAAC,uBAAuB,GAAG,uBAAuB;YAAE,IAAI,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAA;QACtI,uBAAuB,GAAG,QAAQ,CAAC,uBAAuB,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAA;IAC5B,MAAM,eAAe,GAAG,gBAAgB,GAAG,CAAC,CAAA;IAC5C,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,KAAK,eAAe;QAAE,IAAI,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAA;IAC/J,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAA;IAChE,MAAM,qBAAqB,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAA;IACxE,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,iBAAiB,KAAK,iBAAiB,IAAI,eAAe,CAAC,qBAAqB,KAAK,qBAAqB,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAA;IACtP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,gCAAgC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAA;AACnQ,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,2BAA2B,CAAC,gBAAwB;IAClE,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAA;IACxF,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,YAAY,CAAA;QAC1D,IAAI,YAAY,CAAC,iBAAiB,KAAK,IAAI,IAAI,YAAY,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,CAAC,qBAAqB,KAAK,IAAI;YAAE,IAAI,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAA;QAClM,OAAO,YAAiD,CAAA;IAC1D,CAAC;YAAS,CAAC;QAAC,cAAc,CAAC,SAAS,CAAC,CAAA;IAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,SAA0B;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,UAA8B,CAAA;QAClC,IAAI,CAAC;YAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAChL,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAA;QAAC,CAAC;gBACtH,CAAC;YAAC,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAC/D,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC;AACD,SAAS,4BAA4B,CAAC,SAA0B;IAC9D,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAChD,IAAI,SAAS,CAAA;QACb,IAAI,CAAC;YAAC,SAAS,GAAG,SAAS,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC;QACjF,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAA;QAC5Q,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,GAAG,cAAc,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,cAAc,EAAE,CAAA;YACnE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;YACnD,IAAI,MAAM,CAAA;YACV,IAAI,CAAC;gBAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,iBAAiB,EAAE,8BAA8B,IAAI,yBAAyB,CAAC,CAAA;YAAC,CAAC;YACvJ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;gBAAE,IAAI,CAAC,iBAAiB,EAAE,8BAA8B,IAAI,4BAA4B,CAAC,CAAA;YACtQ,IAAI,UAA8B,CAAA;YAClC,IAAI,CAAC;gBACH,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;gBAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBAChH,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE;oBAAE,IAAI,CAAC,iBAAiB,EAAE,8BAA8B,IAAI,6BAA6B,CAAC,CAAA;gBAC/K,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAA;gBACxC,IAAI,OAAO,CAAC,UAAU,GAAG,sBAAsB,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,iBAAiB,EAAE,8BAA8B,IAAI,sBAAsB,CAAC,CAAA;YACpK,CAAC;oBAAS,CAAC;gBAAC,IAAI,UAAU,KAAK,SAAS;oBAAE,SAAS,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,wCAAwC,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QACtH,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,cAAc,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,cAAc,EAAE,CAAC,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAC;YAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;IACzN,CAAC;IACD,IAAI,OAAO;QAAE,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;AAC9C,CAAC;AACD,SAAS,mBAAmB,CAAC,SAA0B,EAAE,qBAA6B;IACpF,2EAA2E;IAC3E,6EAA6E;IAC7E,4DAA4D;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAA;IACzC,IAAI,QAAkC,CAAA;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,QAAQ,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAA;QAChG,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACjC,MAAM,OAAO,GAAI,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAiC,CAAC,YAAY,CAAA;QAC1G,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,MAAM,iBAAiB,GAAG,UAAU,EAAE,CAAA;YACtC,QAAQ,CAAC,IAAI,CAAC,oKAAoK,CAAC,CAAA;YACnL,QAAQ,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAA;YACxK,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;QAClE,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAA;QACzF,yBAAyB,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,6FAA6F,CAAC,CAAC,GAAG,EAAuF,CAAA;QACtN,IAAI,OAAO,GAAG,EAAE,mBAAmB,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,wBAAwB,KAAK,qBAAqB;YAAE,IAAI,CAAC,UAAU,EAAE,kDAAkD,CAAC,CAAA;QACtO,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAA;IAC9F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC3C,QAAQ,EAAE,KAAK,EAAE,CAAA;QACjB,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,IAAI,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAA;IACpD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAsB;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;QAC9D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,0BAA0B;YAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACtF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AACD,SAAS,sBAAsB,CAAC,QAAsB;IACpD,MAAM,WAAW,GAAI,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAiC,CAAC,YAAY,CAAA;IAC9G,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,EAAqC,CAAA;IACpI,IAAI,WAAW,KAAK,aAAa,IAAI,MAAM,EAAE,KAAK,KAAK,MAAM,CAAC,aAAa,CAAC;QAAE,IAAI,CAAC,gBAAgB,EAAE,uCAAuC,CAAC,CAAA;IAC7I,MAAM,SAAS,GAAI,QAAQ,CAAC,OAAO,CAAC,gGAAgG,CAAC,CAAC,GAAG,EAA6B,CAAC,QAAQ,CAAA;IAC/K,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,gBAAgB,EAAE,uCAAuC,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,0IAA0I,CAAC,CAAC,GAAG,EAA4E,CAAA;IAC3P,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,IAAI,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAA;IACnO,OAAO,SAAS,CAAA;AAClB,CAAC;AACD,SAAS,kBAAkB,CAAC,KAAsB;IAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,QAAkC,CAAA;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACvE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACtH,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,IAAI,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAA;QACrG,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAA;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC3C,QAAQ,EAAE,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC/C,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,OAAO,IAAI,CAAC,gBAAgB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAA;IAC3G,CAAC;AACH,CAAC;AACD,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,gBAAgB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAA;IAAC,CAAC;YAC9J,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;AACvE,CAAC;AACD,SAAS,SAAS,CAAC,GAAa,EAAE,gBAAwB;IACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;WAC7I,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,IAAI,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAA;IACrR,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAgC,CAAA;AACzL,CAAC;AACD,SAAS,YAAY,CAAC,IAAiC,EAAE,KAAkC,IAAa,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AACrJ,SAAS,YAAY,CAAC,iBAAyB,EAAE,qBAA6B,EAAE,aAAqB,EAAE,YAAoB,EAAE,KAAa,EAAE,uBAA+B,EAAE,cAA6B;IACxM,OAAO,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,gCAAgC,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;AACrO,CAAC;AACD,SAAS,UAAU,CAAC,QAAuC,EAAE,OAA+C;IAC1G,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAClH,CAAC;AACD,SAAS,OAAO,CAAC,SAA0B,EAAE,OAAe;IAC1D,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAC7B,IAAI,OAAO,CAAC,UAAU,GAAG,sBAAsB;QAAE,IAAI,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAA;IAC1H,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,EAAE,CAAC;IAAC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnJ,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,gBAAgB,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,UAAU,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAA;QACpJ,kBAAkB,CAAC,SAAS,CAAC,CAAA;QAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IACxD,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,cAAc,GAAG,aAAa,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACpJ,IAAI,UAA8B,CAAC;IAAC,IAAI,MAAM,GAAG,KAAK,CAAA;IACtD,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QACzH,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;QAAC,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;QACzH,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAA;QAC7P,SAAS,CAAC,UAAU,CAAC,CAAC;QAAC,UAAU,GAAG,SAAS,CAAA;QAC7C,IAAI,CAAC;YACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAAC,MAAM,GAAG,IAAI,CAAA;YAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9G,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,WAAW,CAAC,KAAK,KAAK,EAAE;gBAAE,IAAI,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAA;QAC1I,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,gBAAgB,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,UAAU,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAA;QACtJ,CAAC;QACD,UAAU,CAAC,SAAS,CAAC,CAAA;QACrB,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAC/B,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QACrI,kBAAkB,CAAC,SAAS,CAAC,CAAA;QAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACjE,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,IAAI,CAAC,IAAI,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;AACH,CAAC;AACD,SAAS,eAAe,CAAC,OAA4E;IACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;WAC3J,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;QAAE,IAAI,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAA;IAClJ,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACzD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,cAAc;QAAE,IAAI,CAAC,eAAe,EAAE,qDAAqD,CAAC,CAAA;IACxI,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,SAAS,EAAE,CAAA;AAChG,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,OAA4E;IAChH,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAA;IACtE,IAAI,OAAoC,CAAC;IAAC,IAAI,OAAiC,CAAC;IAAC,IAAI,gBAAoC,CAAC;IAAC,IAAI,QAAkC,CAAC;IAAC,IAAI,WAAW,GAAG,KAAK,CAAA;IAC1L,IAAI,CAAC;QACH,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAA;QACtF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,cAAc,EAAE,mDAAmD,CAAC,CAAA;QACxL,wEAAwE;QACxE,sEAAsE;QACtE,uDAAuD;QACvD,eAAe,CAAC,KAAK,CAAC,CAAA;QACtB,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAA;QACpG,4BAA4B,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAAC,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAAC;QAAC,WAAW,GAAG,IAAI,CAAA;QACpI,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;QACpC,IAAI,QAAQ,CAAC,YAAY,CAAC,eAAe,GAAG,SAAS,IAAI,QAAQ,CAAC,YAAY,CAAC,uBAAuB,GAAG,SAAS;YAAE,IAAI,CAAC,UAAU,EAAE,8CAA8C,CAAC,CAAA;QACpL,IAAI,aAAa,GAAG,CAAC,CAAA;QACrB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;YAAE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,sGAAsG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAyB,CAAA;gBACjL,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAAE,IAAI,CAAC,UAAU,EAAE,yDAAyD,CAAC,CAAA;gBAC/I,aAAa,IAAI,CAAC,CAAA;YACpB,CAAC;QACD,IAAI,aAAa,KAAK,QAAQ,CAAC,YAAY,CAAC,eAAe;YAAE,IAAI,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAA;QAC5H,MAAM,YAAY,GAAa,EAAE,CAAC;QAAC,IAAI,cAAc,GAAG,CAAC,CAAC;QAAC,IAAI,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAC;QAAC,IAAI,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAA;QAC3K,IAAI,SAAS,KAAK,CAAC,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YACtJ,IAAI,WAAW,CAAC,OAAO;gBAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YAC5D,cAAc,GAAG,WAAW,CAAC,MAAM,CAAA;QACrC,CAAC;QACD,OAAO,aAAa,GAAG,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,oJAAoJ,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAe,CAAA;YAChP,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAA;YACnF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YACnF,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAkC,EAAE,CAAA;gBACjD,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;oBACnE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAE,CAAA;oBAClC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAA;oBACpC,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;oBACpL,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,GAAG,sBAAsB,EAAE,CAAC;wBAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;4BAAE,IAAI,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;wBAAC,MAAK;oBAAC,CAAC;oBACrL,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAC,MAAM,IAAI,CAAC,CAAA;gBACtC,CAAC;gBACD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;gBAC1L,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;gBACnE,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;oBAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;oBAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAA;gBAAC,CAAC;gBAClG,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC;gBAAC,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAA;YAC/E,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,YAAY,CAAA;QACrG,IAAI,YAAY,CAAC,eAAe,KAAK,SAAS,IAAI,YAAY,CAAC,UAAU,KAAK,cAAc,IAAI,YAAY,CAAC,iBAAiB,KAAK,IAAI,IAAI,YAAY,CAAC,qBAAqB,KAAK,IAAI;YAAE,IAAI,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAA;QAC9P,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC3B,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,WAAW,GAAG,KAAK,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtB,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,YAAiD,EAAE,CAAC,CAAA;IACxI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW;YAAE,IAAI,CAAC;gBAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QAC5D,IAAI,CAAC;YAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC1C,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAA;QAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAA;IACpF,CAAC;YAAS,CAAC;QACT,QAAQ,EAAE,KAAK,EAAE,CAAA;QACjB,IAAI,gBAAgB,KAAK,SAAS;YAAE,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC/D,OAAO,EAAE,KAAK,EAAE,CAAA;QAChB,IAAI,OAAO;YAAE,cAAc,CAAC,OAAO,CAAC,CAAA;QACpC,cAAc,CAAC,KAAK,CAAC,CAAA;IACvB,CAAC;AACH,CAAC"}

package/lib/cleanup-receipt.d.ts

@@ -0,0 +1,26 @@
+export interface CleanupResourceReceipt {
+    kind: 'container' | 'volume';
+    name: string;
+    removalExitCode: number | null;
+    inspectionConfirmedAbsent: true;
+}
+export interface CleanupReceiptData {
+    dockerPath: string;
+    socketPath: string;
+    containerName: string;
+    checkedAt: number;
+    resources: readonly CleanupResourceReceipt[];
+}
+/** Nominal, capability-like receipt. Only this module can mint one. */
+export type IsolationCleanupReceipt = object;
+/**
+ * Deletes and then independently inspects all three deterministic resources.
+ * The returned opaque receipt is evidence of this exact cleanup pass only.
+ */
+export declare function cleanupIsolationResources(dockerPath: string, name: string, options?: {
+    socketPath?: string;
+    signal?: AbortSignal;
+}): Promise<IsolationCleanupReceipt | undefined>;
+/** Returns immutable receipt data only for receipts minted by this module. */
+export declare function receiptData(receipt: unknown): CleanupReceiptData | undefined;
+//# sourceMappingURL=cleanup-receipt.d.ts.map

package/lib/cleanup-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-receipt.d.ts","sourceRoot":"","sources":["../src/cleanup-receipt.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,yBAAyB,EAAE,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAA;CAC7C;AAED,uEAAuE;AACvE,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAmE5C;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CA0B3L;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CAE5E"}

package/lib/cleanup-receipt.js

@@ -0,0 +1,131 @@
+import { spawn } from 'node:child_process';
+import { chmod, mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const NAME = /^dsh-isolation-[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/;
+const OUTPUT_LIMIT = 4096;
+const COMMAND_TIMEOUT_MS = 10_000;
+const receipts = new WeakMap();
+function validSocket(path) {
+    return path.startsWith('/') && !/[\p{Cc}]/u.test(path);
+}
+function environment() {
+    return { PATH: process.env.PATH || '/usr/bin:/bin', LANG: 'C', LC_ALL: 'C' };
+}
+async function command(dockerPath, configDirectory, socketPath, args, signal) {
+    return await new Promise(resolve => {
+        let child;
+        let stderr = '';
+        let settled = false;
+        let timer;
+        const finish = (code, timedOut, aborted) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer !== undefined)
+                clearTimeout(timer);
+            signal?.removeEventListener('abort', abort);
+            resolve({ code, stderr, timedOut, aborted });
+        };
+        const abort = () => { child?.kill('SIGKILL'); finish(null, false, true); };
+        if (signal?.aborted) {
+            finish(null, false, true);
+            return;
+        }
+        signal?.addEventListener('abort', abort, { once: true });
+        try {
+            child = spawn(dockerPath, ['--config', configDirectory, '-H', `unix://${socketPath}`, ...args], {
+                shell: false, env: environment(), stdio: ['ignore', 'ignore', 'pipe'],
+            });
+        }
+        catch {
+            finish(null, false, false);
+            return;
+        }
+        child.stderr?.on('data', (chunk) => {
+            const remaining = OUTPUT_LIMIT - Buffer.byteLength(stderr);
+            if (remaining <= 0) {
+                child?.kill('SIGKILL');
+                finish(null, false, false);
+                return;
+            }
+            const value = Buffer.from(chunk);
+            if (value.length > remaining) {
+                stderr += value.subarray(0, remaining).toString('utf8');
+                child?.kill('SIGKILL');
+                finish(null, false, false);
+                return;
+            }
+            stderr += value.toString('utf8');
+        });
+        child.once('error', () => finish(null, false, false));
+        child.once('close', (code, signalName) => finish(signalName === null ? code : null, false, false));
+        timer = setTimeout(() => { child?.kill('SIGKILL'); finish(null, true, false); }, COMMAND_TIMEOUT_MS);
+        timer.unref();
+    });
+}
+function absent(result) {
+    return !result.timedOut && !result.aborted && result.code !== null
+        && result.code !== 0 && /no such (object|container|volume)/i.test(result.stderr);
+}
+async function removeOne(dockerPath, configDirectory, socketPath, kind, name, signal) {
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const removal = await command(dockerPath, configDirectory, socketPath, kind === 'volume' ? ['volume', 'rm', name] : ['rm', '-f', name], signal);
+        // A failed or ambiguous remove invalidates this cleanup pass even if a later
+        // inspect happens to find the resource absent.
+        if (removal.timedOut || removal.aborted || removal.code === null)
+            return undefined;
+        const inspection = await command(dockerPath, configDirectory, socketPath, ['inspect', '--type', kind, name], signal);
+        if (absent(inspection))
+            return Object.freeze({ kind, name, removalExitCode: removal.code, inspectionConfirmedAbsent: true });
+        if (inspection.timedOut || inspection.aborted || inspection.code === null)
+            return undefined;
+        if (attempt < 2)
+            await new Promise(resolve => setTimeout(resolve, 100));
+    }
+    return undefined;
+}
+/**
+ * Deletes and then independently inspects all three deterministic resources.
+ * The returned opaque receipt is evidence of this exact cleanup pass only.
+ */
+export async function cleanupIsolationResources(dockerPath, name, options = {}) {
+    const socketPath = options.socketPath ?? '/var/run/docker.sock';
+    if (!NAME.test(name) || !dockerPath.startsWith('/') || !validSocket(socketPath) || options.signal?.aborted)
+        return undefined;
+    let configDirectory;
+    try {
+        configDirectory = await mkdtemp(join(tmpdir(), 'dsh-isolation-docker-'));
+        await chmod(configDirectory, 0o700);
+    }
+    catch {
+        return undefined;
+    }
+    try {
+        const targets = [
+            ['container', name], ['container', `${name}-keeper`], ['volume', `${name}-workspace`],
+        ];
+        const resources = [];
+        let complete = true;
+        for (const [kind, target] of targets) {
+            const receipt = await removeOne(dockerPath, configDirectory, socketPath, kind, target, options.signal);
+            if (receipt === undefined)
+                complete = false;
+            else
+                resources.push(receipt);
+        }
+        if (!complete || options.signal?.aborted)
+            return undefined;
+        const receipt = Object.freeze({});
+        receipts.set(receipt, Object.freeze({ dockerPath, socketPath, containerName: name, checkedAt: Date.now(), resources: Object.freeze(resources) }));
+        return receipt;
+    }
+    finally {
+        await rm(configDirectory, { recursive: true, force: true }).catch(() => undefined);
+    }
+}
+/** Returns immutable receipt data only for receipts minted by this module. */
+export function receiptData(receipt) {
+    return typeof receipt === 'object' && receipt !== null ? receipts.get(receipt) : undefined;
+}
+//# sourceMappingURL=cleanup-receipt.js.map

package/lib/cleanup-receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-receipt.js","sourceRoot":"","sources":["../src/cleanup-receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,IAAI,GAAG,6DAA6D,CAAA;AAC1E,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAmBjC,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA8B,CAAA;AAE1D,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAC9E,CAAC;AAID,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,eAAuB,EAAE,UAAkB,EAAE,IAAuB,EAAE,MAAoB;IACnI,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QACjC,IAAI,KAA2C,CAAA;QAC/C,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,KAAiC,CAAA;QACrC,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,QAAiB,EAAE,OAAgB,EAAQ,EAAE;YAChF,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5C,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC3C,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC9C,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA;QAC/E,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAC1D,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE;gBAC9F,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;aACtE,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAC9C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC1D,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACrJ,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;QACrD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;QAClG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAA;QACnG,KAAK,CAAC,KAAK,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAqB;IACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;WAC7D,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACpF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,eAAuB,EAAE,UAAkB,EAAE,IAA4B,EAAE,IAAY,EAAE,MAAoB;IACxJ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QAC/I,6EAA6E;QAC7E,+CAA+C;QAC/C,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAClF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QACpH,IAAI,MAAM,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5H,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAC3F,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,IAAY,EAAE,UAAyD,EAAE;IAC3I,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,sBAAsB,CAAA;IAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,SAAS,CAAA;IAC5H,IAAI,eAAmC,CAAA;IACvC,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;QACxE,MAAM,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAqD;YAChE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,YAAY,CAAC;SACtF,CAAA;QACD,MAAM,SAAS,GAA6B,EAAE,CAAA;QAC9C,IAAI,QAAQ,GAAG,IAAI,CAAA;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACtG,IAAI,OAAO,KAAK,SAAS;gBAAE,QAAQ,GAAG,KAAK,CAAA;;gBACtC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,SAAS,CAAA;QAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACjC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;QACjJ,OAAO,OAAO,CAAA;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACpF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5F,CAAC"}

package/lib/cli.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import { type IsolationStorageMaintenance } from './storage.js';
+/** Operator entry point, separate from the model's tool registry. */
+export declare function revokeIsolationGrant(stateRoot: string, grantId: string, revision: number, dockerPath?: string): Promise<{
+    revoked: true;
+    containersRemoved: boolean;
+}>;
+/** Reconcile only settled requests; a live Host owns its own background sweep. */
+export declare function reconcileIsolation(stateRoot: string, dockerPath?: string, signal?: AbortSignal): Promise<{
+    checked: number;
+    released: number;
+    retained: number;
+}>;
+/** Operator-only one-page maintenance; positive retention explicitly enables body pruning. */
+export declare function maintainIsolation(stateRoot: string, resultRetentionMs?: number, afterId?: string): Promise<IsolationStorageMaintenance>;
+//# sourceMappingURL=cli.d.ts.map

package/lib/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAUA,OAAO,EAA4B,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAA;AAczF,qEAAqE;AACrE,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,SAAoB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,iBAAiB,EAAE,OAAO,CAAA;CAAE,CAAC,CAiBvL;AAED,kFAAkF;AAClF,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,SAAoB,EAAE,MAAM,GAAE,WAA0C,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA6BhN;AAED,8FAA8F;AAC9F,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,SAAI,EAAE,OAAO,SAAK,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAepI"}

package/lib/cli.js

@@ -0,0 +1,183 @@
+#!/usr/bin/env node
+import { probeIsolationRuntime } from './probe.js';
+import { randomUUID } from 'node:crypto';
+import { reconcileUnknownJob } from './reconcile.js';
+import { lstatSync, realpathSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { IsolationLedger } from './ledger.js';
+import { removeIsolatedContainer } from './runner.js';
+import { defaultStoragePolicy, validateStoragePolicy } from './storage-policy.js';
+import { maintainIsolationStorage } from './storage.js';
+import { archiveIsolationAudit, verifyIsolationAuditArchive } from './audit-archive.js';
+function privateLedger(stateRoot, dockerPath) {
+    if (!isAbsolute(stateRoot) || realpathSync(stateRoot) !== stateRoot)
+        throw new Error('canonical state root required');
+    const root = lstatSync(stateRoot);
+    const file = join(stateRoot, 'ledger.sqlite');
+    const database = lstatSync(file);
+    if (!root.isDirectory() || root.uid !== process.getuid?.() || (root.mode & 0o077) !== 0
+        || !database.isFile() || database.isSymbolicLink() || database.uid !== root.uid || database.nlink !== 1 || (database.mode & 0o077) !== 0)
+        throw new Error('private owned ledger required');
+    if (!isAbsolute(dockerPath))
+        throw new Error('absolute Docker path required');
+    return file;
+}
+/** Operator entry point, separate from the model's tool registry. */
+export async function revokeIsolationGrant(stateRoot, grantId, revision, dockerPath = '/usr/bin/docker') {
+    const file = privateLedger(stateRoot, dockerPath);
+    const ledger = new IsolationLedger(file);
+    try {
+        ledger.revoke(grantId, revision, 'external-operator-revoke');
+        let containersRemoved = true;
+        let cursor = '';
+        for (;;) {
+            const page = ledger.recoverable(cursor);
+            if (page.length === 0)
+                break;
+            cursor = page.at(-1).id;
+            for (const job of page)
+                if (job.grantId === grantId && !await removeIsolatedContainer(dockerPath, job.containerName))
+                    containersRemoved = false;
+        }
+        // Revocation is durable. A running controller also polls it and prevents any
+        // pending create from starting; late daemon responses may remain unknown.
+        return { revoked: true, containersRemoved };
+    }
+    finally {
+        ledger.close();
+    }
+}
+/** Reconcile only settled requests; a live Host owns its own background sweep. */
+export async function reconcileIsolation(stateRoot, dockerPath = '/usr/bin/docker', signal = new AbortController().signal) {
+    const ledger = new IsolationLedger(privateLedger(stateRoot, dockerPath));
+    const abort = new AbortController();
+    let timer;
+    let authority;
+    try {
+        authority = ledger.claimController(randomUUID(), 30_000);
+        const controller = authority;
+        timer = setInterval(() => { try {
+            if (!ledger.renewController(controller, 30_000))
+                abort.abort();
+        }
+        catch {
+            abort.abort();
+        } }, 5000);
+        timer.unref();
+        const counts = { checked: 0, released: 0, retained: 0 };
+        let cursor = '';
+        for (;;) {
+            const page = ledger.recoverable(cursor);
+            if (page.length === 0)
+                break;
+            cursor = page.at(-1).id;
+            for (const job of page) {
+                signal.throwIfAborted();
+                abort.signal.throwIfAborted();
+                counts.checked++;
+                const combined = AbortSignal.any([signal, abort.signal, AbortSignal.timeout(30_000)]);
+                if (await reconcileUnknownJob(ledger, controller, job, dockerPath, combined))
+                    counts.released++;
+                else
+                    counts.retained++;
+            }
+        }
+        return counts;
+    }
+    finally {
+        if (timer)
+            clearInterval(timer);
+        try {
+            if (authority)
+                ledger.releaseController(authority);
+        }
+        finally {
+            ledger.close();
+        }
+    }
+}
+/** Operator-only one-page maintenance; positive retention explicitly enables body pruning. */
+export async function maintainIsolation(stateRoot, resultRetentionMs = 0, afterId = '') {
+    const policy = validateStoragePolicy({ ...defaultStoragePolicy, resultRetentionMs });
+    const ledger = new IsolationLedger(privateLedger(stateRoot, '/usr/bin/docker'));
+    let authority;
+    let timer;
+    try {
+        authority = ledger.claimController(randomUUID(), 30_000);
+        const controller = authority;
+        timer = setInterval(() => { try {
+            ledger.renewController(controller, 30_000);
+        }
+        catch { /* The maintenance fence fails closed. */ } }, 5000);
+        timer.unref();
+        return await maintainIsolationStorage(ledger, controller, stateRoot, policy, afterId);
+    }
+    finally {
+        if (timer)
+            clearInterval(timer);
+        try {
+            if (authority)
+                ledger.releaseController(authority);
+        }
+        finally {
+            ledger.close();
+        }
+    }
+}
+if (process.argv[1] !== undefined && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    const [command, stateRoot, grantId, revision, dockerPath, ...extra] = process.argv.slice(2);
+    try {
+        if (command === 'probe') {
+            if (!stateRoot || revision !== undefined)
+                throw new Error('usage: dsh-isolation probe sha256:image-id [/absolute/docker]');
+            process.stdout.write(`${JSON.stringify(await probeIsolationRuntime(stateRoot, grantId))}\n`);
+        }
+        else if (command === 'maintain') {
+            if (stateRoot === undefined || dockerPath !== undefined || (grantId !== undefined && !/^(0|[1-9][0-9]*)$/.test(grantId)))
+                throw new Error('usage: dsh-isolation maintain /absolute/private/state-root [result-retention-ms [after-job-id]]');
+            process.stdout.write(`${JSON.stringify(await maintainIsolation(stateRoot, grantId === undefined ? 0 : Number(grantId), revision))}\n`);
+        }
+        else if (command === 'reconcile') {
+            if (stateRoot === undefined || revision !== undefined)
+                throw new Error('usage: dsh-isolation reconcile /absolute/private/state-root [/absolute/docker]');
+            const abort = new AbortController();
+            const cancel = () => abort.abort();
+            process.once('SIGINT', cancel);
+            process.once('SIGTERM', cancel);
+            try {
+                process.stdout.write(`${JSON.stringify(await reconcileIsolation(stateRoot, grantId, abort.signal))}\n`);
+            }
+            finally {
+                process.removeListener('SIGINT', cancel);
+                process.removeListener('SIGTERM', cancel);
+            }
+        }
+        else if (command === 'archive-audit') {
+            if (stateRoot === undefined || grantId === undefined || dockerPath !== undefined || extra.length > 0
+                || (revision !== undefined && (!/^[1-9][0-9]*$/.test(revision) || !Number.isSafeInteger(Number(revision)) || Number(revision) > 1_000))) {
+                throw new Error('usage: dsh-isolation archive-audit /absolute/private/state-root /absolute/private/archive-directory [batch-size]');
+            }
+            process.stdout.write(`${JSON.stringify(archiveIsolationAudit({ stateRoot, archiveDirectory: grantId, ...(revision === undefined ? {} : { batchSize: Number(revision) }) }))}\n`);
+        }
+        else if (command === 'verify-audit') {
+            if (stateRoot === undefined || grantId !== undefined || revision !== undefined || dockerPath !== undefined || extra.length > 0) {
+                throw new Error('usage: dsh-isolation verify-audit /absolute/private/archive-directory');
+            }
+            process.stdout.write(`${JSON.stringify(verifyIsolationAuditArchive(stateRoot))}\n`);
+        }
+        else {
+            if (command !== 'revoke' || stateRoot === undefined || grantId === undefined || revision === undefined || extra.length > 0 || !/^[1-9][0-9]*$/.test(revision))
+                throw new Error('usage: dsh-isolation revoke /absolute/private/state-root grant-id revision [/absolute/docker]');
+            const result = await revokeIsolationGrant(stateRoot, grantId, Number(revision), dockerPath);
+            process.stdout.write(`${JSON.stringify(result)}\n`);
+            if (!result.containersRemoved)
+                process.exitCode = 2;
+        }
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : 'isolation revoke failed'}\n`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=cli.js.map

package/lib/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACjF,OAAO,EAAE,wBAAwB,EAAoC,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAEvF,SAAS,aAAa,CAAC,SAAiB,EAAE,UAAkB;IAC1D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACrH,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;WAClF,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC5L,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC7E,OAAO,IAAI,CAAA;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,OAAe,EAAE,QAAgB,EAAE,UAAU,GAAG,iBAAiB;IAC7H,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAA;QAC5D,IAAI,iBAAiB,GAAG,IAAI,CAAA;QAC5B,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC5B,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;YACxB,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,MAAM,uBAAuB,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC;oBAAE,iBAAiB,GAAG,KAAK,CAAA;QACjJ,CAAC;QACD,6EAA6E;QAC7E,0EAA0E;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAA;IAC7C,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,UAAU,GAAG,iBAAiB,EAAE,SAAsB,IAAI,eAAe,EAAE,CAAC,MAAM;IAC5I,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;IACxE,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;IACnC,IAAI,KAAiC,CAAA;IACrC,IAAI,SAAqE,CAAA;IACzE,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,SAAS,CAAA;QAC5B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QACnI,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;QACvD,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC5B,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;YACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,cAAc,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;gBACtD,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACrF,IAAI,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC;oBAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;;oBAC1F,MAAM,CAAC,QAAQ,EAAE,CAAA;YACxB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,aAAa,CAAC,KAAK,CAAC,CAAA;QAC/B,IAAI,CAAC;YAAC,IAAI,SAAS;gBAAE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,iBAAiB,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE;IAC5F,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,GAAG,oBAAoB,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACpF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC/E,IAAI,SAAqE,CAAA;IACzE,IAAI,KAAiC,CAAA;IACrC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,SAAS,CAAA;QAC5B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QAC3I,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,OAAO,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IACvF,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,aAAa,CAAC,KAAK,CAAC,CAAA;QAC/B,IAAI,CAAC;YAAC,IAAI,SAAS;gBAAE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3F,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;YAC1H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QAC9F,CAAC;aAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;YAC5O,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAA;QACxI,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;YACxJ,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;YACnC,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YACxC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAC/D,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAA;YAAC,CAAC;oBACvG,CAAC;gBAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAAC,CAAC;QACjG,CAAC;aAAM,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YACvC,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;mBAC/F,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1I,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAA;YACrI,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QAClL,CAAC;aAAM,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YACtC,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/H,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;YAC1F,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAA;QACrF,CAAC;aAAM,CAAC;YACR,IAAI,OAAO,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAA;YAC/Q,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAA;YAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnD,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IAAC,CAAC;AAC3I,CAAC"}

package/lib/config.d.ts

@@ -0,0 +1,20 @@
+import Schema from '@deepseek-ai/schemastery';
+import type { IsolationGrant, IsolationLimits, IsolationStoragePolicy } from './types.js';
+export interface Config {
+    stateRoot?: string;
+    image?: string;
+    dockerPath?: string;
+    grants?: IsolationGrant[];
+    limits?: Partial<IsolationLimits>;
+    storage?: Partial<IsolationStoragePolicy>;
+    maxConcurrentJobs?: number;
+    maxReservedMemoryMiB?: number;
+    maxReservedWorkspaceInodes?: number;
+}
+export declare const defaultLimits: IsolationLimits;
+export declare const Config: Schema<Config>;
+export declare function validateConfig(input: Config): Required<Config> & {
+    limits: IsolationLimits;
+    storage: IsolationStoragePolicy;
+};
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAI7C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEzF,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,0BAA0B,CAAC,EAAE,MAAM,CAAA;CACpC;AACD,eAAO,MAAM,aAAa,EAAE,eACwH,CAAA;AAEpJ,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAiBhC,CAAA;AACF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CA0B7H"}

package/lib/config.js

@@ -0,0 +1,61 @@
+import Schema from '@deepseek-ai/schemastery';
+import { homedir } from 'node:os';
+import { isAbsolute, join, resolve } from 'node:path';
+import { defaultStoragePolicy, plannedStorageBytes, validateStoragePolicy } from './storage-policy.js';
+export const defaultLimits = { maxDurationMs: 60_000, maxInputBytes: 1_048_576,
+    maxOutputBytes: 65_536, maxArtifactBytes: 262_144, maxFiles: 32, memoryMiB: 256, workspaceMiB: 64, workspaceInodes: 4096, pidsLimit: 64, cpus: 1 };
+const integer = (max) => Schema.number().step(1).min(1).max(max);
+export const Config = Schema.object({
+    stateRoot: Schema.string().default(join(homedir(), '.dsh', 'assistant-isolation')),
+    image: Schema.string(), dockerPath: Schema.string().default('/usr/bin/docker'),
+    grants: Schema.array(Schema.object({
+        id: Schema.string().required(), revision: integer(Number.MAX_SAFE_INTEGER).required(),
+        principalDigest: Schema.string().required(), principalRecordId: Schema.string().required(),
+        principalVersion: integer(Number.MAX_SAFE_INTEGER).required(), workspace: Schema.string().required(), agentPreset: Schema.string().required(),
+        expiresAt: integer(Number.MAX_SAFE_INTEGER).required(), maxRuns: integer(1_000_000).required(),
+        maxTotalDurationMs: integer(Number.MAX_SAFE_INTEGER).required(),
+    })).default([]),
+    limits: Schema.object({ maxDurationMs: integer(300_000), maxInputBytes: integer(1_048_576),
+        maxOutputBytes: integer(262_144), maxArtifactBytes: integer(1_048_576), maxFiles: integer(128),
+        workspaceMiB: integer(1024), workspaceInodes: integer(65_536), memoryMiB: integer(4096), pidsLimit: integer(512), cpus: Schema.number().min(0.1).max(8) }),
+    storage: Schema.object({ maxStateBytes: integer(16 * 1024 * 1024 * 1024), maxJobRecords: integer(1_000_000), resultRetentionMs: Schema.number().step(1).min(0).max(365 * 24 * 60 * 60 * 1000) }),
+    maxConcurrentJobs: integer(16).default(2),
+    maxReservedMemoryMiB: integer(65_536).default(2048),
+    maxReservedWorkspaceInodes: integer(1_048_576).default(32_768),
+});
+export function validateConfig(input) {
+    const stateRoot = input.stateRoot ?? join(homedir(), '.dsh', 'assistant-isolation');
+    const dockerPath = input.dockerPath ?? '/usr/bin/docker';
+    const grants = structuredClone(input.grants ?? []);
+    const image = input.image ?? '';
+    if (!isAbsolute(stateRoot) || resolve(stateRoot) !== stateRoot || stateRoot === '/' || /[\p{Cc},]/u.test(stateRoot)
+        || !isAbsolute(dockerPath) || resolve(dockerPath) !== dockerPath)
+        throw new Error('assistant-isolation: canonical absolute paths required');
+    if ((image !== '' && !/^sha256:[0-9a-f]{64}$/.test(image)) || (grants.length > 0 && image === ''))
+        throw new Error('assistant-isolation: grants require an immutable local image ID');
+    const limits = { ...defaultLimits, ...input.limits };
+    const storage = validateStoragePolicy({ ...defaultStoragePolicy, ...input.storage });
+    const maxima = { maxDurationMs: 300_000, maxInputBytes: 1_048_576, maxOutputBytes: 262_144,
+        maxArtifactBytes: 1_048_576, maxFiles: 128, memoryMiB: 4096, workspaceMiB: 1024, workspaceInodes: 65_536, pidsLimit: 512, cpus: 8 };
+    for (const key of Object.keys(limits)) {
+        if (!(key in maxima) || !Number.isFinite(limits[key]) || limits[key] <= 0 || limits[key] > maxima[key]
+            || (key !== 'cpus' && !Number.isSafeInteger(limits[key])) || (key === 'cpus' && limits[key] < 0.1))
+            throw new Error('assistant-isolation: invalid limits');
+    }
+    const maxConcurrentJobs = input.maxConcurrentJobs ?? 2;
+    if (!Number.isSafeInteger(maxConcurrentJobs) || maxConcurrentJobs < 1 || maxConcurrentJobs > 16)
+        throw new Error('assistant-isolation: invalid concurrency');
+    const maxReservedMemoryMiB = input.maxReservedMemoryMiB ?? 2048;
+    const maxReservedWorkspaceInodes = input.maxReservedWorkspaceInodes ?? 32_768;
+    if (!Number.isSafeInteger(maxReservedMemoryMiB) || maxReservedMemoryMiB < limits.memoryMiB + limits.workspaceMiB + 32 || maxReservedMemoryMiB > 65_536
+        || !Number.isSafeInteger(maxReservedWorkspaceInodes) || maxReservedWorkspaceInodes < limits.workspaceInodes || maxReservedWorkspaceInodes > 1_048_576)
+        throw new Error('assistant-isolation: invalid resource pool');
+    for (const grant of grants)
+        if (!isAbsolute(grant.workspace) || resolve(grant.workspace) !== grant.workspace
+            || !/^[0-9a-f]{64}$/.test(grant.principalDigest))
+            throw new Error('assistant-isolation: invalid grant scope');
+    if (storage.maxStateBytes < plannedStorageBytes(limits))
+        throw new Error('assistant-isolation: storage budget below planned job allocation');
+    return { stateRoot, dockerPath, image, grants, limits, storage, maxConcurrentJobs, maxReservedMemoryMiB, maxReservedWorkspaceInodes };
+}
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AActG,MAAM,CAAC,MAAM,aAAa,GAAoB,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS;IAC7F,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AACpJ,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACxE,MAAM,CAAC,MAAM,MAAM,GAAmB,MAAM,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAClF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAC9E,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACjC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;QACrF,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1F,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7I,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;QAC9F,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;KAChE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC;QACxF,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC;QAC9F,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5J,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAChM,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,0BAA0B,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAC/D,CAAC,CAAA;AACF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAA;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,SAAS,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;WAC9G,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC7I,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACrL,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;IACpD,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,GAAG,oBAAoB,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IACpF,MAAM,MAAM,GAAoB,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO;QACzG,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IACrI,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAiC,EAAE,CAAC;QACtE,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;eACjG,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC9J,CAAC;IACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAA;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC,IAAI,iBAAiB,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC5J,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAA;IAC/D,MAAM,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,IAAI,MAAM,CAAA;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,YAAY,GAAG,EAAE,IAAI,oBAAoB,GAAG,MAAM;WACjJ,CAAC,MAAM,CAAC,aAAa,CAAC,0BAA0B,CAAC,IAAI,0BAA0B,GAAG,MAAM,CAAC,eAAe,IAAI,0BAA0B,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACtN,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,SAAS;eACvG,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC/G,IAAI,OAAO,CAAC,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IAC5I,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,CAAA;AACvI,CAAC"}

package/lib/daemon-binding.d.ts

@@ -0,0 +1,13 @@
+import type { DaemonWitness } from './runtime-witness.js';
+export interface SystemdBinding {
+    kind: 'systemd';
+    serviceInvocationId: string;
+    socketInvocationId: string;
+}
+/**
+ * Attests the systemd configuration chain, not a kernel-level ownership proof
+ * for a particular inherited file descriptor. Every missing or changing datum
+ * is rejected so callers retain uncertainty rather than freeing work.
+ */
+export declare function captureSystemdBinding(daemon: DaemonWitness): Promise<SystemdBinding | undefined>;
+//# sourceMappingURL=daemon-binding.d.ts.map

package/lib/daemon-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-binding.d.ts","sourceRoot":"","sources":["../src/daemon-binding.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,SAAS,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE;AAmE5G;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAUtG"}