@dsh-enhanced/lark-channel 0.1.47 → 0.1.49

package/lib/rsi-install-inputs.js

@@ -0,0 +1,342 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+import { delimiter, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { PROTECTED_PLUGIN_DENYLIST, resolveLocalExecutable, runtimeConfigDigest, validateHostDeploymentInputs } from '@dsh-enhanced/plugin-control-plane';
+import { isMap, isSeq, parseDocument } from 'yaml';
+import { rawLoaderConfig } from './rsi-bootstrap-manifest.js';
+import { readRsiLocalCohort, verifyRsiLocalInstalledPackages } from './rsi-local-cohort.js';
+const pluginPattern = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
+const profilePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+const versionPattern = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z]+(?:[.-][0-9A-Za-z]+)*)?$/u;
+const stableObserverRows = [
+    { entryId: 'dsh-enhanced-assistant-delivery', module: '@dsh-enhanced/assistant-delivery', services: ['assistantDelivery'] },
+    { entryId: 'dsh-enhanced-lark-channel', module: '@dsh-enhanced/lark-channel', services: ['larkChannel'] },
+];
+function fail(message) { throw new Error(`rsi installed inputs: ${message}`); }
+export class RsiInstalledInputsUnavailableError extends Error {
+    constructor(message) { super(`rsi installed inputs unavailable: ${message}`); }
+}
+function canonical(value, label) {
+    if (typeof value !== 'string' || !isAbsolute(value) || resolve(value) !== value
+        || value.includes('\0') || /[\r\n]/u.test(value))
+        fail(`${label} must be canonical absolute`);
+    return value;
+}
+function within(root, path, label) {
+    const child = relative(root, path);
+    if (!child || child === '..' || child.startsWith(`..${sep}`) || isAbsolute(child))
+        fail(`${label} escapes installed root`);
+}
+function relativeJs(value, label, requireLib) {
+    if (typeof value !== 'string' || !/^\.\/[A-Za-z0-9._/-]+\.js$/u.test(value)
+        || requireLib && !value.startsWith('./lib/')
+        || value.slice(2).split('/').some(part => !part || part === '.' || part === '..')) {
+        fail(`${label} must be a package-local ${requireLib ? 'lib ' : ''}JS entry`);
+    }
+    return value.slice(2);
+}
+async function bytes(path, limit, label) {
+    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const before = await file.stat({ bigint: true }), named = await lstat(path, { bigint: true });
+        if (!before.isFile() || before.size > BigInt(limit) || before.size < 1n
+            || before.dev !== named.dev || before.ino !== named.ino || (before.mode & 18n) !== 0n
+            || (before.mode & 3584n) !== 0n
+            || process.getuid && before.uid !== 0n && before.uid !== BigInt(process.getuid()))
+            fail(`${label} is not a trusted regular file`);
+        const value = await file.readFile(), after = await file.stat({ bigint: true });
+        if (BigInt(value.length) !== before.size || before.dev !== after.dev || before.ino !== after.ino
+            || before.mtimeNs !== after.mtimeNs || before.ctimeNs !== after.ctimeNs)
+            fail(`${label} changed during read`);
+        return value;
+    }
+    finally {
+        await file.close();
+    }
+}
+async function json(path, label) {
+    let value;
+    try {
+        value = JSON.parse((await bytes(path, 1_048_576, label)).toString('utf8'));
+    }
+    catch (error) {
+        fail(`${label} is invalid: ${String(error)}`);
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        fail(`${label} must be an object`);
+    return value;
+}
+async function pin(path, label) {
+    canonical(path, label);
+    if (await realpath(path) !== path)
+        fail(`${label} path changed`);
+    const data = await bytes(path, 64 * 1024 * 1024, label);
+    const metadata = await lstat(path);
+    if ((metadata.mode & 0o111) === 0)
+        fail(`${label} is not executable`);
+    return { path, sha256: createHash('sha256').update(data).digest('hex') };
+}
+function executableCandidates(command, environment) {
+    return (environment.PATH ?? '').split(delimiter).filter(isAbsolute).map(directory => join(directory, command));
+}
+function assertPackagePatch(bytes, plugin) {
+    const document = parseDocument(bytes.toString('utf8'), { uniqueKeys: true });
+    if (document.errors.length || !isSeq(document.contents))
+        fail(`${plugin} package patch is invalid`);
+    let matches = 0;
+    for (const operation of document.contents.items) {
+        if (!isMap(operation))
+            fail(`${plugin} package patch operation is invalid`);
+        const insert = operation.get('insert', true);
+        const entries = isSeq(insert) ? insert.items : [operation];
+        for (const value of entries) {
+            if (!isMap(value))
+                continue;
+            if (value.get('id') === `dsh-enhanced-${plugin}`) {
+                if (value.get('name') !== `@dsh-enhanced/${plugin}`)
+                    fail(`${plugin} package patch mounts the wrong package`);
+                matches++;
+            }
+        }
+    }
+    if (matches !== 1)
+        fail(`${plugin} package patch has no unique mounted entry`);
+}
+async function locateDsh(environment) {
+    for (const candidate of executableCandidates('dsh', environment)) {
+        try {
+            return await realpath(candidate);
+        }
+        catch { /* try next PATH entry */ }
+    }
+    fail('dsh executable is absent from PATH');
+}
+/** Inspect only the installed CLI package and its exact bin target. */
+export async function resolveInstalledRsiDsh(environment = process.env, installedDshRoot) {
+    const executable = installedDshRoot === undefined ? await locateDsh(environment) : undefined;
+    let root;
+    if (installedDshRoot !== undefined) {
+        root = canonical(installedDshRoot, 'DSH package root');
+        if (await realpath(root) !== root)
+            fail('DSH package root is not physical');
+    }
+    else {
+        let directory = dirname(executable);
+        for (let depth = 0; depth < 5; depth++, directory = dirname(directory)) {
+            try {
+                const manifest = await json(join(directory, 'package.json'), 'DSH manifest');
+                if (manifest.name === '@deepseek-ai/dsh') {
+                    root = directory;
+                    break;
+                }
+            }
+            catch { /* bounded ancestor search */ }
+            if (dirname(directory) === directory)
+                break;
+        }
+    }
+    if (!root)
+        fail('dsh executable has no installed @deepseek-ai/dsh package');
+    const manifest = await json(join(root, 'package.json'), 'DSH manifest');
+    const bin = manifest.bin;
+    if (manifest.name !== '@deepseek-ai/dsh' || typeof manifest.version !== 'string'
+        || !versionPattern.test(manifest.version) || !bin || typeof bin !== 'object' || Array.isArray(bin)
+        || Object.keys(bin).length !== 1 || typeof bin.dsh !== 'string')
+        fail('DSH package identity is invalid');
+    const main = relativeJs(`./${bin.dsh.replace(/^\.\//u, '')}`, 'DSH bin', false);
+    const path = join(root, main);
+    if (await realpath(path) !== path || executable !== undefined && executable !== path)
+        fail('dsh PATH entry differs from installed package bin');
+    return { root, path, version: manifest.version, pin: await pin(path, 'DSH executable') };
+}
+/** Caller holds the installation lifecycle lock and supplies one pre-mutation
+ * dump. These are declared Host disk inputs, not a claim of complete transitive
+ * JavaScript module coverage. */
+export async function collectRsiInstalledInputs(input) {
+    canonical(input.dshHome, 'DSH_HOME');
+    if (!profilePattern.test(input.targetProfile) || typeof input.targetEffective !== 'string'
+        || Buffer.byteLength(input.targetEffective) > 2_097_152)
+        fail('invalid target profile or effective dump');
+    const profile = join(input.dshHome, 'profiles', input.targetProfile);
+    if (await realpath(profile) !== profile)
+        fail('installed profile is not physical');
+    const dsh = await resolveInstalledRsiDsh(input.environment, input.installedDshRoot);
+    const document = parseDocument(input.targetEffective, { uniqueKeys: true });
+    if (document.errors.length || !isSeq(document.contents))
+        fail('effective dump is not an entry list');
+    const rows = new Map();
+    const plugins = [];
+    const activeBundles = [];
+    const learnerId = 'dsh-enhanced-assistant-memory-learning';
+    for (const value of document.contents.items) {
+        if (!isMap(value))
+            fail('effective entry is not a mapping');
+        const row = value;
+        const id = row.get('id'), name = row.get('name');
+        if (typeof id !== 'string' || !id || rows.has(id))
+            fail('effective entry identity is duplicate or invalid');
+        rows.set(id, row);
+        // The learning bundle ships disabled without configuration. Owner setup
+        // enables this one exact installed row after its grants are frozen.
+        if (row.get('disabled') === true && id !== learnerId)
+            continue;
+        if (typeof name !== 'string' || !name.startsWith('@dsh-enhanced/')) {
+            if (id.startsWith('dsh-enhanced-'))
+                fail(`installed ${id} has no package name`);
+            continue;
+        }
+        const plugin = name.slice('@dsh-enhanced/'.length);
+        if (!pluginPattern.test(plugin) || id !== `dsh-enhanced-${plugin}`)
+            fail(`installed ${id} has inconsistent package identity`);
+        activeBundles.push(plugin);
+        if (!PROTECTED_PLUGIN_DENYLIST.has(plugin))
+            plugins.push(plugin);
+    }
+    const permission = rows.get('permission');
+    if (permission?.get('name') === '@deepseek-ai/dsh-permission-presets' && permission.get('disabled') !== true) {
+        const config = permission.get('config', true);
+        if (isMap(config)) {
+            const defaultPreset = config.get('defaultPreset');
+            const presets = config.get('presets', true);
+            if (typeof defaultPreset === 'string') {
+                const configured = isMap(presets) ? presets.has(defaultPreset)
+                    : ['workspace-write', 'danger-full-access'].includes(defaultPreset);
+                if (defaultPreset === 'auto' || !configured) {
+                    throw new RsiInstalledInputsUnavailableError(`permission.defaultPreset=${defaultPreset} is not a persistent configured preset`);
+                }
+            }
+        }
+    }
+    const learner = rows.get(learnerId);
+    if (!learner || learner.get('name') !== '@dsh-enhanced/assistant-memory-learning'
+        || learner.get('disabled') === true && learner.has('config'))
+        fail('installed memory learning row must be the unconfigured bundle entry');
+    const personal = rows.get('dsh-enhanced-personal-assistant');
+    const personalConfig = personal?.get('config', true);
+    if (!personal || personal.get('disabled') === true || personal.get('name') !== '@dsh-enhanced/personal-assistant'
+        || !isMap(personalConfig) || !isMap(personalConfig.get('personalMemory', true))) {
+        fail('enabled embedded Personal Memory is required');
+    }
+    if (!plugins.length || plugins.length > 32)
+        fail('repairable installed plugin scope is empty or too large');
+    const observerTargets = stableObserverRows.map(expected => {
+        const row = rows.get(expected.entryId);
+        if (!row || row.get('disabled') === true || row.get('name') !== expected.module)
+            fail(`required ${expected.entryId} is unavailable`);
+        const raw = rawLoaderConfig(row.get('config', true), expected.entryId);
+        if (expected.entryId === 'dsh-enhanced-lark-channel'
+            && (!raw || typeof raw !== 'object' || Array.isArray(raw) || raw.enabled !== true)) {
+            fail('installed Lark channel is not enabled');
+        }
+        return { entryId: expected.entryId, module: expected.module,
+            configDigest: runtimeConfigDigest(raw),
+            services: [...expected.services] };
+    });
+    const hostDeploymentInputs = ['package.json', 'pnpm-lock.yaml', 'cordis.patch.yml'];
+    for (const entry of hostDeploymentInputs) {
+        const path = await realpath(join(profile, entry));
+        within(profile, path, entry);
+        await bytes(path, 64 * 1024 * 1024, entry);
+    }
+    for (const plugin of plugins) {
+        const prefix = `node_modules/@dsh-enhanced/${plugin}/`, packageRoot = join(profile, 'node_modules', '@dsh-enhanced', plugin);
+        const physical = await realpath(packageRoot);
+        const child = relative(profile, physical);
+        if (!child || child === '..' || child.startsWith(`..${sep}`) || isAbsolute(child)) {
+            throw new RsiInstalledInputsUnavailableError(`${plugin} is linked outside the profile; automatic RSI requires profile-local installed packages`);
+        }
+        const manifestFile = await realpath(join(packageRoot, 'package.json'));
+        within(profile, manifestFile, `${plugin} manifest`);
+        const manifest = await json(manifestFile, `${plugin} manifest`);
+        const exported = manifest.exports && typeof manifest.exports === 'object' && !Array.isArray(manifest.exports)
+            ? manifest.exports['.'] : undefined;
+        const exportMain = exported && typeof exported === 'object' && !Array.isArray(exported)
+            ? exported.default : undefined;
+        const main = relativeJs(manifest.main, `${plugin} main`, true);
+        if (manifest.name !== `@dsh-enhanced/${plugin}` || manifest.version !== input.source.version
+            || exportMain !== manifest.main || manifest.dsh?.bundle?.patch !== './cordis.patch.yml') {
+            fail(`${plugin} installed package identity or entry differs from source cohort`);
+        }
+        const declared = [`${prefix}package.json`, `${prefix}cordis.patch.yml`, `${prefix}${main}`];
+        for (const entry of declared.slice(1)) {
+            const path = await realpath(join(profile, entry));
+            within(profile, path, entry);
+            const content = await bytes(path, 64 * 1024 * 1024, entry);
+            if (entry.endsWith('/cordis.patch.yml'))
+                assertPackagePatch(content, plugin);
+        }
+        hostDeploymentInputs.push(...declared);
+    }
+    // Personal Assistant embeds Memory as a runtime dependency. Pin the package
+    // it actually resolves, and require the learner's peer to resolve to the same
+    // physical provider. The embedded package is not an independent Loader row.
+    const resolvedMemory = async (parent) => {
+        const parentManifest = await realpath(join(profile, 'node_modules', '@dsh-enhanced', parent, 'package.json'));
+        within(profile, parentManifest, `${parent} manifest`);
+        const resolved = createRequire(parentManifest).resolve('@dsh-enhanced/personal-memory/package.json');
+        const path = await realpath(resolved);
+        within(profile, path, `${parent} Personal Memory dependency`);
+        return path;
+    };
+    const memoryManifestPath = await resolvedMemory('personal-assistant');
+    if (await resolvedMemory('assistant-memory-learning') !== memoryManifestPath)
+        fail('learner and embedded Personal Memory resolve different providers');
+    const memoryManifest = await json(memoryManifestPath, 'embedded Personal Memory manifest');
+    const memoryExport = memoryManifest.exports && typeof memoryManifest.exports === 'object' && !Array.isArray(memoryManifest.exports)
+        ? memoryManifest.exports['.'] : undefined;
+    const memoryMain = memoryExport && typeof memoryExport === 'object' && !Array.isArray(memoryExport)
+        ? memoryExport.default : undefined;
+    const memoryEntry = relativeJs(memoryManifest.main, 'embedded Personal Memory main', true);
+    if (memoryManifest.name !== '@dsh-enhanced/personal-memory' || memoryManifest.version !== input.source.version
+        || memoryMain !== memoryManifest.main
+        || memoryManifest.dsh?.bundle?.patch !== './cordis.patch.yml') {
+        fail('embedded Personal Memory package identity or entry differs from source cohort');
+    }
+    const memoryRoot = dirname(memoryManifestPath);
+    for (const filename of ['package.json', 'cordis.patch.yml', memoryEntry]) {
+        const path = await realpath(join(memoryRoot, filename));
+        within(profile, path, `embedded Personal Memory ${filename}`);
+        const content = await bytes(path, 64 * 1024 * 1024, `embedded Personal Memory ${filename}`);
+        if (filename === 'cordis.patch.yml')
+            assertPackagePatch(content, 'personal-memory');
+        hostDeploymentInputs.push(relative(profile, path).split(sep).join('/'));
+    }
+    validateHostDeploymentInputs(hostDeploymentInputs);
+    if (input.source.origin?.kind === 'local-head') {
+        const cohort = await readRsiLocalCohort({ dshHome: input.dshHome, profile: input.targetProfile, source: input.source });
+        await verifyRsiLocalInstalledPackages({ cohort, profilePath: profile, bundles: [...new Set([...cohort.bundles, ...activeBundles])] });
+    }
+    if (input.resources.schemaVersion !== 1 || input.resources.root !== join(input.dshHome, 'rsi-authorities', input.targetProfile)
+        || input.source.schemaVersion !== 1)
+        fail('authority resources or source cohort differs from installation');
+    const environment = input.environment ?? process.env;
+    const git = await pin(await resolveLocalExecutable('git', environment), 'Git');
+    let systemctlPath;
+    for (const candidate of executableCandidates('systemctl', environment)) {
+        try {
+            systemctlPath = await realpath(candidate);
+            break;
+        }
+        catch { /* next candidate */ }
+    }
+    if (!systemctlPath)
+        fail('systemctl executable is absent from PATH');
+    if (!(await bytes(systemctlPath, 64 * 1024 * 1024, 'systemctl')).subarray(0, 4).equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46]))) {
+        fail('systemctl is not a native executable');
+    }
+    const systemctl = { ...await pin(systemctlPath, 'systemctl'), interpreter: null };
+    const policies = plugins.map(plugin => ({
+        targetBranch: input.source.baseline.targetBranch, candidateId: plugin,
+        packageName: `@dsh-enhanced/${plugin}`, packagePath: `plugins/${plugin}`,
+        dshBaseline: dsh.version, capabilities: ['owner-installed'], authorities: ['owner-installed'], requires: [],
+        registryId: input.resources.registry.id, registryLocator: input.resources.registry.locator,
+        catalogId: input.resources.catalog.id, catalogPath: input.resources.catalog.path,
+        minimumReproducibleBuilds: 2,
+    }));
+    return { dsh, plugins, hostDeploymentInputs, observerTargets,
+        executor: { id: 'dsh', version: dsh.version, path: dsh.path,
+            sha256: dsh.pin.sha256, environmentAllowlist: [] }, git, systemctl, policies };
+}
+//# sourceMappingURL=rsi-install-inputs.js.map

package/lib/rsi-install-inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-install-inputs.js","sourceRoot":"","sources":["../src/rsi-install-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACxF,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,mBAAmB,EAC7E,4BAA4B,EACO,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAA2B,MAAM,MAAM,CAAA;AAE3E,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAI7D,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAA;AAE3F,MAAM,aAAa,GAAG,kCAAkC,CAAA;AACxD,MAAM,cAAc,GAAG,oCAAoC,CAAA;AAC3D,MAAM,cAAc,GAAG,kEAAkE,CAAA;AACzF,MAAM,kBAAkB,GAAG;IACzB,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kCAAkC,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE;IAC3H,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE;CACjG,CAAA;AAEV,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAC7F,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAC3D,YAAY,OAAe,IAAI,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;CACvF;AACD,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK;WAC1E,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;AAC5H,CAAC;AACD,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa,EAAE,UAAmB;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;WACtE,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;WACzC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC,GAAG,KAAK,4BAA4B,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACvB,CAAC;AACD,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7F,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE;eAClE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE;eACrF,CAAC,MAAM,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,EAAE;eAC9B,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,IAAI,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAA;QACnI,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9E,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;eAC3F,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAA;QAC/G,OAAO,KAAK,CAAA;IACd,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AAClC,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAAC,CAAC;IAClF,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,KAAK,gBAAgB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAA;IACnG,OAAO,KAAgC,CAAA;AACzC,CAAC;AACD,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa;IAC5C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtB,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IAChE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAA;IACrE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC1E,CAAC;AACD,SAAS,oBAAoB,CAAC,OAAe,EAAE,WAA8B;IAC3E,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;AAChH,CAAC;AACD,SAAS,kBAAkB,CAAC,KAAa,EAAE,MAAc;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,MAAM,2BAA2B,CAAC,CAAA;IACnG,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,GAAG,MAAM,qCAAqC,CAAC,CAAA;QAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAC3B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,gBAAgB,MAAM,EAAE,EAAE,CAAC;gBACjD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,iBAAiB,MAAM,EAAE;oBAAE,IAAI,CAAC,GAAG,MAAM,yCAAyC,CAAC,CAAA;gBAC7G,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,MAAM,4CAA4C,CAAC,CAAA;AAChF,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,WAA8B;IACrD,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,oCAAoC,CAAC,CAAA;AAC5C,CAAC;AAID,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,cAAiC,OAAO,CAAC,GAAG,EACvF,gBAAyB;IACzB,MAAM,UAAU,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5F,IAAI,IAAwB,CAAA;IAC5B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,GAAG,SAAS,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;QACtD,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAC7E,CAAC;SAAM,CAAC;QACN,IAAI,SAAS,GAAG,OAAO,CAAC,UAAW,CAAC,CAAA;QACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,CAAA;gBAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAAC,IAAI,GAAG,SAAS,CAAC;oBAAC,MAAK;gBAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;gBAAE,MAAK;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,0DAA0D,CAAC,CAAA;IAC3E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,CAAA;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAA;IACxB,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;WAC3E,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;WAC/F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAQ,GAA+B,CAAC,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACvI,MAAM,IAAI,GAAG,UAAU,CAAC,KAAM,GAA8B,CAAC,GAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAC5G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC7B,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI;QAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;IAC/I,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAA;AAC1F,CAAC;AAwBD;;iCAEiC;AACjC,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAgC;IAC9E,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IACpC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;WACrF,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,SAAS;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAA;IAC3G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;IACpE,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,IAAI,CAAC,mCAAmC,CAAC,CAAA;IAClF,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3E,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAA;IACvC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,MAAM,SAAS,GAAG,wCAAwC,CAAA;IAC1D,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;QAC3D,MAAM,GAAG,GAAG,KAAgB,CAAA;QAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;QAC3G,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACjB,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS;YAAE,SAAQ;QAC9D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnE,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;gBAAE,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAA;YAC/E,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,gBAAgB,MAAM,EAAE;YAAE,IAAI,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAA;QAC7H,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,qCAAqC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7G,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClB,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YAC3C,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;oBAC5D,CAAC,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;gBACrE,IAAI,aAAa,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC5C,MAAM,IAAI,kCAAkC,CAAC,4BAA4B,aAAa,wCAAwC,CAAC,CAAA;gBACjI,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,yCAAyC;WAC5E,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,qEAAqE,CAAC,CAAA;IAC3I,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;IAC5D,MAAM,cAAc,GAAG,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,kCAAkC;WAC5G,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,8CAA8C,CAAC,CAAA;IACtD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,IAAI,CAAC,yDAAyD,CAAC,CAAA;IAC3G,MAAM,eAAe,GAA4B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,YAAY,QAAQ,CAAC,OAAO,iBAAiB,CAAC,CAAA;QACpI,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAqB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC1F,IAAI,QAAQ,CAAC,OAAO,KAAK,2BAA2B;eAC/C,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,GAA+B,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YAClH,IAAI,CAAC,uCAAuC,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACzD,YAAY,EAAE,mBAAmB,CAAC,GAAG,CAAC;YACtC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;IACnF,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QAC/E,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,8BAA8B,MAAM,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,CAAC,CAAA;QAC5H,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,kCAAkC,CAAC,GAAG,MAAM,yFAAyF,CAAC,CAAA;QAClJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,WAAW,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,WAAW,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC3G,CAAC,CAAE,QAAQ,CAAC,OAAmC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAClE,MAAM,UAAU,GAAG,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrF,CAAC,CAAE,QAAoC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,MAAM,OAAO,EAAE,IAAI,CAAC,CAAA;QAC9D,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,MAAM,EAAE,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO;eACvF,UAAU,KAAK,QAAQ,CAAC,IAAI,IAAK,QAAQ,CAAC,GAAmD,EAAE,MAAM,EAAE,KAAK,KAAK,oBAAoB,EAAE,CAAC;YAC3I,IAAI,CAAC,GAAG,MAAM,iEAAiE,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,cAAc,EAAE,GAAG,MAAM,kBAAkB,EAAE,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAA;QAC3F,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;YAC/E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9E,CAAC;QACD,oBAAoB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAA;IACxC,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,cAAc,GAAG,KAAK,EAAE,MAA0D,EAAE,EAAE;QAC1F,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;QAC7G,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,WAAW,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAA;QACpG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACrC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,6BAA6B,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,CAAA;IACrE,IAAI,MAAM,cAAc,CAAC,2BAA2B,CAAC,KAAK,kBAAkB;QAAE,IAAI,CAAC,kEAAkE,CAAC,CAAA;IACtJ,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAA;IAC1F,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,IAAI,OAAO,cAAc,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC;QACjI,CAAC,CAAE,cAAc,CAAC,OAAmC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxE,MAAM,UAAU,GAAG,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QACjG,CAAC,CAAE,YAAwC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACjE,MAAM,WAAW,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,+BAA+B,EAAE,IAAI,CAAC,CAAA;IAC1F,IAAI,cAAc,CAAC,IAAI,KAAK,+BAA+B,IAAI,cAAc,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO;WACzG,UAAU,KAAK,cAAc,CAAC,IAAI;WACjC,cAAc,CAAC,GAAmD,EAAE,MAAM,EAAE,KAAK,KAAK,oBAAoB,EAAE,CAAC;QACjH,IAAI,CAAC,+EAA+E,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9C,KAAK,MAAM,QAAQ,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,4BAA4B,QAAQ,EAAE,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,4BAA4B,QAAQ,EAAE,CAAC,CAAA;QAC3F,IAAI,QAAQ,KAAK,kBAAkB;YAAE,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;QACnF,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACzE,CAAC;IACD,4BAA4B,CAAC,oBAAoB,CAAC,CAAA;IAClD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,OAAO,EAAC,KAAK,CAAC,aAAa,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAA;QAChH,MAAM,+BAA+B,CAAC,EAAC,MAAM,EAAC,WAAW,EAAC,OAAO,EAAC,OAAO,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAC,GAAG,aAAa,CAAC,CAAC,CAAC,EAAC,CAAC,CAAA;IAChI,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC;WAC1H,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC;QAAE,IAAI,CAAC,gEAAgE,CAAC,CAAA;IAC7G,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAA;IACpD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,sBAAsB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAA;IAC9E,IAAI,aAAiC,CAAA;IACrC,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC;YAAC,aAAa,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAC,MAAK;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9H,IAAI,CAAC,sCAAsC,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IACjF,MAAM,QAAQ,GAAsD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM;QACrE,WAAW,EAAE,iBAAiB,MAAM,EAAE,EAAE,WAAW,EAAE,WAAW,MAAM,EAAE;QACxE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE;QAC3G,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1F,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI;QAChF,yBAAyB,EAAE,CAAC;KAC7B,CAAC,CAAC,CAAA;IACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,eAAe;QAC1D,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI;YACzD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AACpF,CAAC"}

package/lib/rsi-install.d.ts

@@ -0,0 +1,54 @@
+import { listActiveAutomationsLocally } from '@dsh-enhanced/assistant-automations';
+import { type RsiCreationBuildEnvironment } from './rsi-creation-build.js';
+import { prepareRsiOwnerConfiguration } from './rsi-bootstrap.js';
+import { collectRsiInstalledInputs } from './rsi-install-inputs.js';
+import { captureRsiSystemdUnitProperties, readRsiSystemdUnitProperties } from './rsi-systemd-bootstrap.js';
+import { configureRsiSetupLocked, type RsiSetupPorts } from './rsi-setup.js';
+import type { RsiSetupManifest } from './rsi-profile.js';
+import type { RsiAuthorityConfigInput } from './rsi-authority-config.js';
+export interface RsiInstallInput {
+    dshHome: string;
+    profile: string;
+    sourceRepository?: string | undefined;
+    signal?: AbortSignal;
+    ackExistingAutomations?: boolean | undefined;
+}
+export type RsiInstallResult = {
+    mode: 'not-ready';
+    reason: string;
+} | {
+    mode: 'ready';
+    profiles: readonly string[];
+    manifestPath: string;
+};
+/** Stable per-target name, including for a maximum-length target profile. */
+export declare function rsiCoordinatorProfile(profile: string): string;
+declare function prepareResources(input: RsiInstallInput, signal: AbortSignal): Promise<{
+    creationBuild?: RsiCreationBuildEnvironment;
+    source: import("./rsi-source.js").RsiSourceWorkspace;
+    runtime: import("./rsi-authority-runtime.js").RsiAuthorityRuntime;
+    resources: import("./rsi-authority-resources.js").RsiAuthorityResources;
+    build: import("./rsi-build.js").RsiBuildEnvironment;
+    release: import("./rsi-release-build.js").RsiReleaseBuildEnvironment;
+}>;
+declare function ensureCoordinator(input: RsiInstallInput, coordinator: string, executor: RsiAuthorityConfigInput['executor'], signal: AbortSignal, systemctlPin: RsiAuthorityConfigInput['systemctl']): Promise<void>;
+declare function stopManaged(input: RsiInstallInput, profile: string, pin: RsiAuthorityConfigInput['systemctl'], signal: AbortSignal): Promise<boolean>;
+export declare function assertRsiMemoryScanActivation(manifest: RsiSetupManifest, records: ReturnType<typeof listActiveAutomationsLocally>): void;
+declare function ready(manifest: RsiSetupManifest, pin: RsiAuthorityConfigInput['systemctl'], signal: AbortSignal, startedAt: number): Promise<void>;
+export interface RsiInstallPorts {
+    prepare: typeof prepareResources;
+    collect: typeof collectRsiInstalledInputs;
+    coordinator: typeof ensureCoordinator;
+    setup: RsiSetupPorts;
+    capture: typeof captureRsiSystemdUnitProperties;
+    stop: typeof stopManaged;
+    readUnit: typeof readRsiSystemdUnitProperties;
+    ready: typeof ready;
+    configure: typeof configureRsiSetupLocked;
+    prepareOwner: typeof prepareRsiOwnerConfiguration;
+}
+export declare const rsiInstallPorts: RsiInstallPorts;
+/** Installer-owned process, never invoked from the Host being restarted. */
+export declare function installRsiOwnerDeployment(input: RsiInstallInput, ports?: RsiInstallPorts): Promise<RsiInstallResult>;
+export {};
+//# sourceMappingURL=rsi-install.d.ts.map

package/lib/rsi-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-install.d.ts","sourceRoot":"","sources":["../src/rsi-install.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAA;AAWlF,OAAO,EAAsC,KAAK,2BAA2B,EAAE,MAAM,yBAAyB,CAAA;AAE9G,OAAO,EAAgC,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AAC/F,OAAO,EAAE,yBAAyB,EAAsC,MAAM,yBAAyB,CAAA;AACvG,OAAO,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AAC1G,OAAO,EAAE,uBAAuB,EAAiB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAWxE,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE;AAChL,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAA;AAI3I,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG7D;AACD,iBAAe,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW;;;;;;;GAqB1E;AACD,iBAAe,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAC1E,QAAQ,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,uBAAuB,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvI;AAaD,iBAAe,WAAW,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAYpJ;AAYD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,EACtE,OAAO,EAAE,UAAU,CAAC,OAAO,4BAA4B,CAAC,GAAG,IAAI,CAoBhE;AACD,iBAAe,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuCjJ;AACD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,gBAAgB,CAAA;IAChC,OAAO,EAAE,OAAO,yBAAyB,CAAA;IACzC,WAAW,EAAE,OAAO,iBAAiB,CAAA;IACrC,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,OAAO,+BAA+B,CAAA;IAC/C,IAAI,EAAE,OAAO,WAAW,CAAA;IACxB,QAAQ,EAAE,OAAO,4BAA4B,CAAA;IAC7C,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,SAAS,EAAE,OAAO,uBAAuB,CAAA;IACzC,YAAY,EAAE,OAAO,4BAA4B,CAAA;CAClD;AACD,eAAO,MAAM,eAAe,EAAE,eAG7B,CAAA;AAED,4EAA4E;AAC5E,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,GAAE,eAAiC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiI3I"}