@dsh-enhanced/plugin-control-plane 0.1.32 → 0.1.35

package/lib/runtime-observer-protocol.js

@@ -0,0 +1,280 @@
+import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { constants, closeSync, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from 'node:fs';
+import { createConnection } from 'node:net';
+import { dirname, isAbsolute, resolve } from 'node:path';
+const HEX = /^[a-f0-9]{64}$/u;
+const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/u;
+export const RUNTIME_OBSERVER_MAX_BYTES = 65_536;
+export const RUNTIME_OBSERVER_TIMEOUT = 2_000;
+export function runtimeObserverFail() { throw new Error('runtime observer: invalid configuration, authentication or runtime observation'); }
+export function assertRuntimeObserverExact(value, fields) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)
+        || Object.keys(value).sort().join('\0') !== [...fields].sort().join('\0'))
+        runtimeObserverFail();
+}
+export function assertRuntimeObserverText(value, pattern = ID) {
+    if (typeof value !== 'string' || !pattern.test(value))
+        runtimeObserverFail();
+}
+/** Bounded JSON digest; never invokes a config object's toJSON/getter. */
+export function runtimeConfigDigest(value) {
+    let remaining = RUNTIME_OBSERVER_MAX_BYTES;
+    const seen = new Set();
+    const encode = (item, depth) => {
+        if (depth > 32 || --remaining < 0)
+            runtimeObserverFail();
+        if (item === null || typeof item === 'boolean')
+            return JSON.stringify(item);
+        if (typeof item === 'number') {
+            if (!Number.isFinite(item))
+                runtimeObserverFail();
+            return JSON.stringify(item);
+        }
+        if (typeof item === 'string') {
+            remaining -= item.length;
+            if (remaining < 0)
+                runtimeObserverFail();
+            return JSON.stringify(item);
+        }
+        if (typeof item !== 'object' || item === undefined || seen.has(item))
+            runtimeObserverFail();
+        seen.add(item);
+        try {
+            if (Object.getOwnPropertySymbols(item).length)
+                runtimeObserverFail();
+            if (Array.isArray(item)) {
+                if (item.length > remaining)
+                    runtimeObserverFail();
+                const fields = Object.getOwnPropertyDescriptors(item);
+                if (Object.keys(fields).length !== item.length + 1)
+                    runtimeObserverFail();
+                return `[${Array.from({ length: item.length }, (_, index) => {
+                    const field = fields[String(index)];
+                    if (!field || !('value' in field))
+                        runtimeObserverFail();
+                    return encode(field.value, depth + 1);
+                }).join(',')}]`;
+            }
+            if (![Object.prototype, null].includes(Object.getPrototypeOf(item)))
+                runtimeObserverFail();
+            const fields = Object.getOwnPropertyDescriptors(item);
+            return `{${Object.keys(fields).sort().map(key => {
+                const field = fields[key];
+                if (!('value' in field) || !field.enumerable)
+                    runtimeObserverFail();
+                return `${encode(key, depth + 1)}:${encode(field.value, depth + 1)}`;
+            }).join(',')}}`;
+        }
+        finally {
+            seen.delete(item);
+        }
+    };
+    const bytes = encode(value, 0);
+    if (Buffer.byteLength(bytes) > RUNTIME_OBSERVER_MAX_BYTES)
+        runtimeObserverFail();
+    return createHash('sha256').update(bytes).digest('hex');
+}
+export function privateRuntimeObserverDirectory(path) {
+    const stat = lstatSync(path);
+    if (realpathSync(path) !== path || !stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 0o077) !== 0)
+        runtimeObserverFail();
+}
+export function readPrivateRuntimeObserverKey(path) {
+    privateRuntimeObserverDirectory(dirname(path));
+    if (realpathSync(path) !== path)
+        runtimeObserverFail();
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const before = fstatSync(fd, { bigint: true });
+        if (!before.isFile() || before.uid !== BigInt(process.getuid()) || before.nlink !== 1n
+            || (before.mode & 63n) !== 0n || before.size !== 32n)
+            runtimeObserverFail();
+        const bytes = readFileSync(fd);
+        const after = fstatSync(fd, { bigint: true });
+        const named = lstatSync(path, { bigint: true });
+        if (bytes.length !== 32 || before.ino !== named.ino || before.dev !== named.dev
+            || before.mtimeNs !== after.mtimeNs || before.ctimeNs !== after.ctimeNs)
+            runtimeObserverFail();
+        return bytes;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function validateRuntimeObserverConfig(value) {
+    assertRuntimeObserverExact(value, ['socketPath', 'keyPath', 'profilePath', 'targets']);
+    if (process.platform !== 'linux')
+        runtimeObserverFail();
+    for (const key of ['socketPath', 'keyPath', 'profilePath']) {
+        if (typeof value[key] !== 'string' || !isAbsolute(value[key]) || resolve(value[key]) !== value[key]
+            || ['\0', '\r', '\n'].some(char => value[key].includes(char)))
+            runtimeObserverFail();
+    }
+    const { socketPath, keyPath, profilePath } = value;
+    if (Buffer.byteLength(socketPath) > 100 || socketPath === keyPath || realpathSync(profilePath) !== profilePath
+        || !lstatSync(profilePath).isDirectory())
+        runtimeObserverFail();
+    for (const path of [socketPath, keyPath]) {
+        if (path === profilePath || path.startsWith(`${profilePath}/`))
+            runtimeObserverFail();
+        privateRuntimeObserverDirectory(dirname(path));
+    }
+    readPrivateRuntimeObserverKey(keyPath).fill(0);
+    if (!Array.isArray(value.targets) || value.targets.length < 1 || value.targets.length > 32)
+        runtimeObserverFail();
+    const ids = new Set();
+    for (const target of value.targets) {
+        assertRuntimeObserverExact(target, ['entryId', 'module', 'configDigest', 'services']);
+        assertRuntimeObserverText(target.entryId);
+        assertRuntimeObserverText(target.configDigest, HEX);
+        if (typeof target.module !== 'string' || target.module.length < 1 || target.module.length > 512
+            || ['\0', '\r', '\n'].some(char => target.module.includes(char)))
+            runtimeObserverFail();
+        if (ids.has(target.entryId))
+            runtimeObserverFail();
+        ids.add(target.entryId);
+        if (!Array.isArray(target.services) || target.services.length > 16 || new Set(target.services).size !== target.services.length)
+            runtimeObserverFail();
+        for (const service of target.services)
+            assertRuntimeObserverText(service, /^[A-Za-z][A-Za-z0-9._-]{0,99}$/u);
+    }
+}
+export function runtimeObserverMac(key, domain, value) {
+    return createHmac('sha256', key).update(`${domain}\n${JSON.stringify(value)}`).digest('hex');
+}
+export function equalRuntimeObserverMac(actual, expected) {
+    return typeof actual === 'string' && HEX.test(actual) && timingSafeEqual(Buffer.from(actual, 'hex'), Buffer.from(expected, 'hex'));
+}
+export function assertRuntimeObservation(value) {
+    assertRuntimeObserverExact(value, ['schemaVersion', 'kind', 'observerId', 'observerConfigDigest', 'challenge', 'processId', 'invocationId', 'profilePath', 'observedAt', 'entries']);
+    if (value.schemaVersion !== 1 || value.kind !== 'dsh-runtime-observation')
+        runtimeObserverFail();
+    assertRuntimeObserverText(value.observerId, /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/u);
+    assertRuntimeObserverText(value.observerConfigDigest, HEX);
+    assertRuntimeObserverText(value.challenge, HEX);
+    for (const name of ['processId', 'observedAt'])
+        if (!Number.isSafeInteger(value[name]) || value[name] < 1)
+            runtimeObserverFail();
+    if (value.invocationId !== null)
+        assertRuntimeObserverText(value.invocationId, /^[a-f0-9]{32}$/u);
+    if (typeof value.profilePath !== 'string' || value.profilePath.length > 4096 || !isAbsolute(value.profilePath))
+        runtimeObserverFail();
+    if (!Array.isArray(value.entries) || value.entries.length < 1 || value.entries.length > 32)
+        runtimeObserverFail();
+    const instance = (item) => {
+        if (item === null)
+            return;
+        assertRuntimeObserverExact(item, ['uid', 'epoch']);
+        if (!Number.isSafeInteger(item.uid) || item.uid < 0 || !Number.isSafeInteger(item.epoch) || item.epoch < 1)
+            runtimeObserverFail();
+    };
+    const ids = new Set();
+    for (const entry of value.entries) {
+        assertRuntimeObserverExact(entry, ['entryId', 'module', 'configDigest', 'active', 'instance', 'dependencies', 'services']);
+        assertRuntimeObserverText(entry.entryId);
+        if (ids.has(entry.entryId))
+            runtimeObserverFail();
+        ids.add(entry.entryId);
+        if (entry.module !== null && (typeof entry.module !== 'string' || entry.module.length > 512))
+            runtimeObserverFail();
+        if (entry.configDigest !== null)
+            assertRuntimeObserverText(entry.configDigest, HEX);
+        if (typeof entry.active !== 'boolean' || (entry.active && (entry.instance === null || entry.module === null || entry.configDigest === null)))
+            runtimeObserverFail();
+        instance(entry.instance);
+        if (entry.active && entry.instance.uid === 0)
+            runtimeObserverFail();
+        for (const name of ['dependencies', 'services']) {
+            const services = entry[name];
+            if (!Array.isArray(services) || services.length > 128)
+                runtimeObserverFail();
+            const names = new Set();
+            for (const service of services) {
+                assertRuntimeObserverExact(service, ['name', 'instance']);
+                assertRuntimeObserverText(service.name);
+                if (names.has(service.name) || (entry.active && service.instance === null))
+                    runtimeObserverFail();
+                names.add(service.name);
+                instance(service.instance);
+            }
+        }
+    }
+}
+/** Owner caller supplies no claimed state; fresh challenge authenticates the observed response. */
+export async function queryRuntimeObserver(input) {
+    if (process.platform !== 'linux')
+        runtimeObserverFail();
+    privateRuntimeObserverDirectory(dirname(input.socketPath));
+    const before = lstatSync(input.socketPath);
+    if (!before.isSocket() || before.uid !== process.getuid() || (before.mode & 0o077) !== 0 || realpathSync(input.socketPath) !== input.socketPath)
+        runtimeObserverFail();
+    const key = readPrivateRuntimeObserverKey(input.keyPath);
+    const challenge = randomBytes(32).toString('hex');
+    const signal = input.signal ? AbortSignal.any([input.signal, AbortSignal.timeout(RUNTIME_OBSERVER_TIMEOUT)]) : AbortSignal.timeout(RUNTIME_OBSERVER_TIMEOUT);
+    try {
+        signal.throwIfAborted();
+        return await new Promise((resolveResult, reject) => {
+            const socket = createConnection(input.socketPath);
+            const chunks = [];
+            let size = 0;
+            let settled = false;
+            const finish = (error, value) => {
+                if (settled)
+                    return;
+                settled = true;
+                signal.removeEventListener('abort', abort);
+                socket.destroy();
+                if (error)
+                    reject(error);
+                else
+                    resolveResult(value);
+            };
+            const abort = () => finish(new Error('runtime observer query cancelled or timed out'));
+            signal.addEventListener('abort', abort, { once: true });
+            socket.once('error', () => finish(new Error('runtime observer connection failed')));
+            socket.once('connect', () => {
+                if (signal.aborted) {
+                    abort();
+                    return;
+                }
+                socket.end(JSON.stringify({ schemaVersion: 1, challenge, mac: runtimeObserverMac(key, 'dsh-runtime-request/v1', challenge) }) + '\n');
+            });
+            socket.on('data', chunk => {
+                size += chunk.length;
+                if (size > RUNTIME_OBSERVER_MAX_BYTES) {
+                    finish(new Error('runtime observer response exceeds limit'));
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            socket.once('end', () => {
+                try {
+                    const bytes = Buffer.concat(chunks);
+                    if (bytes.at(-1) !== 10 || bytes.subarray(0, -1).includes(10))
+                        runtimeObserverFail();
+                    const response = JSON.parse(bytes.toString('utf8'));
+                    assertRuntimeObserverExact(response, ['observation', 'mac']);
+                    if (!equalRuntimeObserverMac(response.mac, runtimeObserverMac(key, 'dsh-runtime-response/v1', response.observation)))
+                        runtimeObserverFail();
+                    const observation = response.observation;
+                    assertRuntimeObservation(observation);
+                    if (observation.challenge !== challenge)
+                        runtimeObserverFail();
+                    const after = lstatSync(input.socketPath);
+                    if (before.ino !== after.ino || before.dev !== after.dev || !after.isSocket() || after.uid !== before.uid || (after.mode & 0o077) !== 0)
+                        runtimeObserverFail();
+                    finish(undefined, observation);
+                }
+                catch {
+                    finish(new Error('runtime observer response rejected'));
+                }
+            });
+            socket.once('close', () => { if (!settled)
+                finish(new Error('runtime observer connection closed before response')); });
+        });
+    }
+    finally {
+        key.fill(0);
+    }
+}
+//# sourceMappingURL=runtime-observer-protocol.js.map

package/lib/runtime-observer-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-observer-protocol.js","sourceRoot":"","sources":["../src/runtime-observer-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC1G,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAgBxD,MAAM,GAAG,GAAG,iBAAiB,CAAA;AAC7B,MAAM,EAAE,GAAG,sCAAsC,CAAA;AACjD,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAA;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AAE7C,MAAM,UAAU,mBAAmB,KAAY,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA,CAAC,CAAC;AAClJ,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,MAAgB;IACzE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,mBAAmB,EAAE,CAAA;AACpG,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,OAAO,GAAG,EAAE;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,mBAAmB,EAAE,CAAA;AAC9E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,SAAS,GAAG,0BAA0B,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,KAAa,EAAU,EAAE;QACtD,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC;YAAE,mBAAmB,EAAE,CAAA;QACxD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC3E,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,mBAAmB,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAChH,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC;YAAC,IAAI,SAAS,GAAG,CAAC;gBAAE,mBAAmB,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QACjI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,mBAAmB,EAAE,CAAA;QAC3F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM;gBAAE,mBAAmB,EAAE,CAAA;YACpE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;oBAAE,mBAAmB,EAAE,CAAA;gBAClD,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAA;gBACrD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,mBAAmB,EAAE,CAAA;gBACzE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;oBAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBACnC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;wBAAE,mBAAmB,EAAE,CAAA;oBACxD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBACvC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;YACjB,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAAE,mBAAmB,EAAE,CAAA;YAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAA;YACrD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;gBAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAE,CAAA;gBAC1B,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU;oBAAE,mBAAmB,EAAE,CAAA;gBACnE,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;YACtE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QACjB,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IACjC,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC9B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,0BAA0B;QAAE,mBAAmB,EAAE,CAAA;IAChF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,mBAAmB,EAAE,CAAA;AAC/I,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9C,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,mBAAmB,EAAE,CAAA;IACtD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAO,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE;eAClF,CAAC,MAAM,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;YAAE,mBAAmB,EAAE,CAAA;QAChF,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAA;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9F,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;eAC1E,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,mBAAmB,EAAE,CAAA;QAChG,OAAO,KAAK,CAAA;IACd,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,0BAA0B,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAA;IACtF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,mBAAmB,EAAE,CAAA;IACvD,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAU,EAAE,CAAC;QACpE,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC;eAC9F,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,KAAK,CAAC,GAAG,CAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,mBAAmB,EAAE,CAAA;IACpG,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,KAAyC,CAAA;IACtF,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,YAAY,CAAC,WAAW,CAAC,KAAK,WAAW;WACzG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;QAAE,mBAAmB,EAAE,CAAA;IACjE,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC;YAAE,mBAAmB,EAAE,CAAA;QACrF,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,6BAA6B,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,mBAAmB,EAAE,CAAA;IACjH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,0BAA0B,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAA;QACrF,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,yBAAyB,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;QAC9F,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;eAC1F,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,MAAM,CAAC,MAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,mBAAmB,EAAE,CAAA;QACrG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,mBAAmB,EAAE,CAAA;QAClD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;YAAE,mBAAmB,EAAE,CAAA;QACrJ,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;YAAE,yBAAyB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAA;IAC9G,CAAC;AACH,CAAC;AAyBD,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAc,EAAE,KAAc;IAC5E,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC9F,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,MAAe,EAAE,QAAgB;IACvE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;AACpI,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,0BAA0B,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;IACpL,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;QAAE,mBAAmB,EAAE,CAAA;IAChG,yBAAyB,CAAC,KAAK,CAAC,UAAU,EAAE,wEAAwE,CAAC,CAAA;IACrH,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC3G,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAK,KAAK,CAAC,IAAI,CAAY,GAAG,CAAC;YAAE,mBAAmB,EAAE,CAAA;IAC5I,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;QAAE,yBAAyB,CAAC,KAAK,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;IACjG,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,mBAAmB,EAAE,CAAA;IACrI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,mBAAmB,EAAE,CAAA;IACjH,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAQ,EAAE;QACvC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAM;QACzB,0BAA0B,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,IAAI,CAAC,GAAc,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAK,IAAI,CAAC,KAAgB,GAAG,CAAC;YAAE,mBAAmB,EAAE,CAAA;IAC3J,CAAC,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,0BAA0B,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAA;QAC1H,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,mBAAmB,EAAE,CAAA;QACjD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;YAAE,mBAAmB,EAAE,CAAA;QACnH,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;YAAE,yBAAyB,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;QACnF,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;YAAE,mBAAmB,EAAE,CAAA;QACnK,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACxB,IAAI,KAAK,CAAC,MAAM,IAAK,KAAK,CAAC,QAAoC,CAAC,GAAG,KAAK,CAAC;YAAE,mBAAmB,EAAE,CAAA;QAChG,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBAAE,mBAAmB,EAAE,CAAA;YAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;YAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,0BAA0B,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;gBAAC,yBAAyB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAClG,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;oBAAE,mBAAmB,EAAE,CAAA;gBACjG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAoE;IAC7G,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,mBAAmB,EAAE,CAAA;IACvD,+BAA+B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,mBAAmB,EAAE,CAAA;IACvK,MAAM,GAAG,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAC5J,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,MAAM,IAAI,OAAO,CAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;YACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YACjD,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAAC,IAAI,OAAO,GAAG,KAAK,CAAA;YAC9D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAA0B,EAAQ,EAAE;gBACjE,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAC;gBAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAA;gBAC5E,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBAAM,aAAa,CAAC,KAAM,CAAC,CAAA;YACtD,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAA;YAC5F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAA;YACnF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC1B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,OAAM;gBAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,wBAAwB,EAAE,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;YACvI,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;gBACxB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;gBACpB,IAAI,IAAI,GAAG,0BAA0B,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;oBAAC,OAAM;gBAAC,CAAC;gBAC/G,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACnC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAAE,mBAAmB,EAAE,CAAA;oBACpF,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;oBAC5D,0BAA0B,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC5D,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;wBAAE,mBAAmB,EAAE,CAAA;oBAC3I,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;oBACxC,wBAAwB,CAAC,WAAW,CAAC,CAAA;oBACrC,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS;wBAAE,mBAAmB,EAAE,CAAA;oBAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;oBACzC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;wBAAE,mBAAmB,EAAE,CAAA;oBAC9J,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAA;gBAAC,CAAC;YACrE,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACvH,CAAC,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAAC,CAAC;AAC3B,CAAC"}

package/lib/runtime-observer.d.ts

@@ -0,0 +1,8 @@
+import { Context } from '@deepseek-ai/cordis';
+import { type RuntimeObservation, type RuntimeObserverConfig } from './runtime-observer-protocol.js';
+export { queryRuntimeObserver, runtimeConfigDigest, validateRuntimeObserverConfig, type RuntimeEntryObservation, type RuntimeObservation, type RuntimeObserverConfig, type RuntimeObserverTarget, } from './runtime-observer-protocol.js';
+/** Reads Loader/Fiber state without importing candidates or invoking service methods. */
+export declare function createRuntimeSampler(ctx: Context, config: RuntimeObserverConfig): (challenge: string) => RuntimeObservation;
+/** One bounded request/response per connection; resources belong to this Fiber. */
+export declare function installRuntimeObserver(ctx: Context, input: RuntimeObserverConfig, attach?: (ctx: Context, sample: (challenge: string) => RuntimeObservation) => (() => void | Promise<void>)): void;
+//# sourceMappingURL=runtime-observer.d.ts.map

package/lib/runtime-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-observer.d.ts","sourceRoot":"","sources":["../src/runtime-observer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAc,MAAM,qBAAqB,CAAA;AAEzD,OAAO,EAYL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAE3B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,6BAA6B,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,gCAAgC,CAAA;AAKvC,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,kBAAkB,CAoD3H;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAC/E,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,kBAAkB,KAAK,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CA0ElH"}

package/lib/runtime-observer.js

@@ -0,0 +1,182 @@
+import { randomUUID } from 'node:crypto';
+import { chmod, lstat, unlink } from 'node:fs/promises';
+import { createServer } from 'node:net';
+import { Context } from '@deepseek-ai/cordis';
+import { RUNTIME_OBSERVER_MAX_BYTES, RUNTIME_OBSERVER_TIMEOUT, assertRuntimeObservation, assertRuntimeObserverExact, assertRuntimeObserverText, equalRuntimeObserverMac, readPrivateRuntimeObserverKey, runtimeConfigDigest, runtimeObserverFail, runtimeObserverMac, validateRuntimeObserverConfig, } from './runtime-observer-protocol.js';
+export { queryRuntimeObserver, runtimeConfigDigest, validateRuntimeObserverConfig, } from './runtime-observer-protocol.js';
+// Cordis 4.0.2 exports this as an ambient const enum, unavailable at runtime.
+const ACTIVE = 2;
+/** Reads Loader/Fiber state without importing candidates or invoking service methods. */
+export function createRuntimeSampler(ctx, config) {
+    const observerId = randomUUID();
+    const observerConfigDigest = runtimeConfigDigest(config);
+    const epochs = new WeakMap();
+    let nextEpoch = 0;
+    const instance = (fiber) => {
+        if (!fiber || fiber.uid === null || fiber.state !== ACTIVE || fiber.inertia || !fiber.store)
+            return null;
+        let epoch = epochs.get(fiber.store);
+        if (epoch === undefined) {
+            epoch = ++nextEpoch;
+            epochs.set(fiber.store, epoch);
+        }
+        return { uid: fiber.uid, epoch };
+    };
+    const ownedBy = (fiber, owner) => {
+        for (let depth = 0; depth < 128; depth++) {
+            if (fiber.uid !== null && fiber.uid === owner.uid)
+                return true;
+            if (fiber === fiber.parent.fiber)
+                return false;
+            fiber = fiber.parent.fiber;
+        }
+        return false;
+    };
+    return challenge => {
+        assertRuntimeObserverText(challenge, /^[a-f0-9]{64}$/u);
+        if (ctx.fiber.uid === null || ctx.fiber.state !== ACTIVE)
+            runtimeObserverFail();
+        // Resolve the current injected provider on every sample, never cache a proxy.
+        const loader = ctx.loader;
+        const entries = config.targets.map(target => {
+            let entry;
+            try {
+                entry = loader.resolve(target.entryId);
+            }
+            catch {
+                return { entryId: target.entryId, module: null, configDigest: null, active: false, instance: null, dependencies: [], services: [] };
+            }
+            const fiber = entry.fiber;
+            const current = instance(fiber);
+            const options = Object.getOwnPropertyDescriptors(entry.options);
+            if (!options.name || !('value' in options.name) || typeof options.name.value !== 'string'
+                || (options.config && !('value' in options.config)) || (options.disabled && !('value' in options.disabled)))
+                runtimeObserverFail();
+            const module = options.name.value;
+            const configDigest = runtimeConfigDigest(options.config?.value ?? null);
+            const dependencies = Object.keys(fiber?.inject ?? {}).sort().map(name => ({ name, instance: instance(fiber?.store?.[name]?.fiber) }));
+            const services = target.services.map(name => {
+                const realm = fiber?.ctx[Context.isolate][name];
+                const impl = realm ? fiber?.ctx.reflect.store[realm] : undefined;
+                return { name, instance: impl && fiber && ownedBy(impl.fiber, fiber) && fiber.ctx.get(name) !== undefined ? instance(impl.fiber) : null };
+            });
+            return { entryId: entry.id, module, configDigest,
+                active: !entry.disabled && module === target.module && configDigest === target.configDigest
+                    && current !== null && current.uid > 0 && dependencies.every(item => item.instance !== null) && services.every(item => item.instance !== null),
+                instance: current, dependencies, services };
+        });
+        const observation = { schemaVersion: 1, kind: 'dsh-runtime-observation', observerId, observerConfigDigest, challenge,
+            processId: process.pid, invocationId: /^[a-f0-9]{32}$/u.test(process.env.INVOCATION_ID ?? '') ? process.env.INVOCATION_ID : null,
+            profilePath: config.profilePath, observedAt: Date.now(), entries };
+        assertRuntimeObservation(observation);
+        return observation;
+    };
+}
+/** One bounded request/response per connection; resources belong to this Fiber. */
+export function installRuntimeObserver(ctx, input, attach) {
+    validateRuntimeObserverConfig(input);
+    const config = structuredClone(input);
+    ctx.inject(['loader'], observerCtx => {
+        observerCtx.effect(async () => {
+            const key = readPrivateRuntimeObserverKey(config.keyPath);
+            const sample = createRuntimeSampler(observerCtx, config);
+            const sockets = new Set();
+            let closing = false;
+            let detach;
+            let identity;
+            const server = createServer({ allowHalfOpen: true }, socket => {
+                if (closing || sockets.size >= 8) {
+                    socket.destroy();
+                    return;
+                }
+                sockets.add(socket);
+                const deadline = setTimeout(() => socket.destroy(), RUNTIME_OBSERVER_TIMEOUT);
+                socket.setTimeout(RUNTIME_OBSERVER_TIMEOUT, () => socket.destroy());
+                socket.on('error', () => socket.destroy());
+                socket.once('close', () => { clearTimeout(deadline); sockets.delete(socket); });
+                let bytes = Buffer.alloc(0);
+                let received = false;
+                socket.on('data', chunk => {
+                    if (received || bytes.length + chunk.length > 1024) {
+                        socket.destroy();
+                        return;
+                    }
+                    bytes = Buffer.concat([bytes, chunk]);
+                    if (!bytes.includes(10))
+                        return;
+                    received = true;
+                    try {
+                        if (bytes.at(-1) !== 10 || bytes.subarray(0, -1).includes(10))
+                            runtimeObserverFail();
+                        const request = JSON.parse(bytes.toString('utf8'));
+                        assertRuntimeObserverExact(request, ['schemaVersion', 'challenge', 'mac']);
+                        if (request.schemaVersion !== 1)
+                            runtimeObserverFail();
+                        assertRuntimeObserverText(request.challenge, /^[a-f0-9]{64}$/u);
+                        if (!equalRuntimeObserverMac(request.mac, runtimeObserverMac(key, 'dsh-runtime-request/v1', request.challenge)))
+                            runtimeObserverFail();
+                        const observation = sample(request.challenge);
+                        const response = JSON.stringify({ observation, mac: runtimeObserverMac(key, 'dsh-runtime-response/v1', observation) }) + '\n';
+                        if (Buffer.byteLength(response) > RUNTIME_OBSERVER_MAX_BYTES)
+                            runtimeObserverFail();
+                        socket.end(response);
+                    }
+                    catch {
+                        socket.destroy();
+                    }
+                });
+            });
+            server.maxConnections = 8;
+            let closeTask;
+            const close = () => closeTask ??= (async () => {
+                closing = true;
+                for (const socket of sockets)
+                    socket.destroy();
+                try {
+                    const [detached] = await Promise.allSettled([Promise.resolve().then(() => detach?.())]);
+                    if (server.listening)
+                        await new Promise((resolveClose, reject) => server.close(error => error ? reject(error) : resolveClose()));
+                    if (identity) {
+                        try {
+                            const current = await lstat(config.socketPath);
+                            if (current.ino === identity.ino && current.dev === identity.dev && current.isSocket())
+                                await unlink(config.socketPath);
+                        }
+                        catch (error) {
+                            if (error.code !== 'ENOENT')
+                                throw error;
+                        }
+                    }
+                    if (detached.status === 'rejected')
+                        throw detached.reason;
+                }
+                finally {
+                    key.fill(0);
+                }
+            })();
+            try {
+                // Never remove an existing socket, including an unknown stale one.
+                await new Promise((resolveListen, reject) => {
+                    server.once('error', reject);
+                    server.listen(config.socketPath, () => { server.off('error', reject); resolveListen(); });
+                });
+                identity = await lstat(config.socketPath);
+                await chmod(config.socketPath, 0o600);
+                // In-process consumers must share this sampler's observer ID and Fiber
+                // epochs with the authenticated supervisor channel.
+                detach = attach?.(observerCtx, challenge => {
+                    if (closing)
+                        runtimeObserverFail();
+                    return sample(challenge);
+                });
+                server.on('error', () => { void close().catch(() => observerCtx.logger.error('runtime observer teardown failed')); });
+                return close;
+            }
+            catch (error) {
+                await close();
+                throw error;
+            }
+        }, 'plugin-control-plane.runtime-observer');
+    });
+}
+//# sourceMappingURL=runtime-observer.js.map

package/lib/runtime-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-observer.js","sourceRoot":"","sources":["../src/runtime-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAe,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,OAAO,EAAc,MAAM,qBAAqB,CAAA;AAEzD,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,6BAA6B,GAI9B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,6BAA6B,GAK9B,MAAM,gCAAgC,CAAA;AAEvC,8EAA8E;AAC9E,MAAM,MAAM,GAAG,CAAC,CAAA;AAEhB,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,MAA6B;IAC9E,MAAM,UAAU,GAAG,UAAU,EAAE,CAAA;IAC/B,MAAM,oBAAoB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,OAAO,EAAkB,CAAC;IAAC,IAAI,SAAS,GAAG,CAAC,CAAA;IAC/D,MAAM,QAAQ,GAAG,CAAC,KAAwB,EAAkC,EAAE;QAC5E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACxG,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,GAAG,EAAE,SAAS,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;QAChF,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,CAAA;IAClC,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,KAAY,EAAW,EAAE;QACtD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAA;YAC9D,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAA;YAC9C,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAA;QAC5B,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IACD,OAAO,SAAS,CAAC,EAAE;QACjB,yBAAyB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;QACvD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,mBAAmB,EAAE,CAAA;QAC/E,8EAA8E;QAC9E,MAAM,MAAM,GAAW,GAAG,CAAC,MAAM,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YAC1C,IAAI,KAAoC,CAAA;YACxC,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBACpD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;YACrI,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC/D,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;mBACpF,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAE,mBAAmB,EAAE,CAAA;YACpI,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAe,CAAA;YAC3C,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAA;YACvE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YACrI,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBAC1C,MAAM,KAAK,GAAG,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;gBAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC3I,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY;gBAC9C,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM,CAAC,YAAY;uBACtF,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;gBAChJ,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;QAC/C,CAAC,CAAC,CAAA;QACF,MAAM,WAAW,GAAuB,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS;YACtI,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAc,CAAC,CAAC,CAAC,IAAI;YACjI,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAA;QACpE,wBAAwB,CAAC,WAAW,CAAC,CAAA;QACrC,OAAO,WAAW,CAAA;IACpB,CAAC,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,KAA4B,EAC/E,MAA0G;IAC1G,6BAA6B,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACrC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,EAAE;QACnC,WAAW,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,GAAG,GAAG,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACzD,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;YACjC,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,IAAI,MAAgD,CAAA;YACpD,IAAI,QAAuD,CAAA;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE;gBAC5D,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;oBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAAC,OAAM;gBAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACnB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAA;gBAC7E,MAAM,CAAC,UAAU,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;gBACnE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;gBAC9E,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,QAAQ,GAAG,KAAK,CAAA;gBACjD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;oBACxB,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;wBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAAC,OAAM;oBAAC,CAAC;oBAChF,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;oBACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAAE,OAAM;oBAC/B,QAAQ,GAAG,IAAI,CAAA;oBACf,IAAI,CAAC;wBACH,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAAE,mBAAmB,EAAE,CAAA;wBACpF,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;wBAC3D,0BAA0B,CAAC,OAAO,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAA;wBAC1E,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC;4BAAE,mBAAmB,EAAE,CAAA;wBACtD,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;wBAC/D,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,wBAAwB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;4BAAE,mBAAmB,EAAE,CAAA;wBACtI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;wBAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,EAAE,WAAW,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;wBAC7H,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,0BAA0B;4BAAE,mBAAmB,EAAE,CAAA;wBACnF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;oBACtB,CAAC;oBAAC,MAAM,CAAC;wBAAC,MAAM,CAAC,OAAO,EAAE,CAAA;oBAAC,CAAC;gBAC9B,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,cAAc,GAAG,CAAC,CAAA;YACzB,IAAI,SAAoC,CAAA;YACxC,MAAM,KAAK,GAAG,GAAkB,EAAE,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC3D,OAAO,GAAG,IAAI,CAAA;gBACd,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;gBAC9C,IAAI,CAAC;oBACH,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;oBACvF,IAAI,MAAM,CAAC,SAAS;wBAAE,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;oBACtI,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;4BAC9C,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE;gCAAE,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;wBACzH,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gCAAE,MAAM,KAAK,CAAA;wBAAC,CAAC;oBACzF,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;wBAAE,MAAM,QAAQ,CAAC,MAAM,CAAA;gBAC3D,CAAC;wBAAS,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAAC,CAAC;YAC3B,CAAC,CAAC,EAAE,CAAA;YACJ,IAAI,CAAC;gBACH,mEAAmE;gBACnE,MAAM,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;oBAChD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;gBAC1F,CAAC,CAAC,CAAA;gBACF,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;gBACzC,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;gBACrC,uEAAuE;gBACvE,oDAAoD;gBACpD,MAAM,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE;oBACzC,IAAI,OAAO;wBAAE,mBAAmB,EAAE,CAAA;oBAClC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;gBAC1B,CAAC,CAAC,CAAA;gBACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;gBACpH,OAAO,KAAK,CAAA;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;QAChD,CAAC,EAAE,uCAAuC,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC"}