@earendil-works/chord 1.4.0 → 1.5.1

package/dist/node/app/app.js

@@ -0,0 +1,513 @@
+// `startServer` (slice 13 §1, §5; decisions "The app kit, point 1" to "point 5"): the server of an app built with the kit.
+// It lays out the data directory, opens the server's store, creates the server host, the HTTP component and one
+// workers component per worker kind, the plugins component over the app's required root and the user's root, loads
+// the server's plugins with the kit's own facets (the start-data object, sessions, the owner link, pairing, files),
+// and gives the app the controls it needs: the owner link, `applyChanges`, installs, export and import per address.
+// After the listen, off the start's path, it builds the bases (the surfaces' base bundles, each worker kind's worker
+// base) and records the base code the `base` mark compares.
+import { statSync } from "node:fs";
+import { join, resolve, sep } from "node:path";
+import { withAbortSignal } from "../../context/index.js";
+import { hostKind } from "../../contracts/index.js";
+import { principalKey, samePrincipal } from "../../data/principal.js";
+import { createHost } from "../../host/index.js";
+import { isJsonValue } from "../../json.js";
+import { openNodeSqliteDatabase } from "../../sqlite/node.js";
+import { openStore, sqliteBackend } from "../../store/index.js";
+import { localeChoiceFacet, themeChoiceFacet, themesFacet, translationsFacet } from "../../surfaces/index.js";
+import { telemetryIngestFacet } from "../../telemetry-ingest/index.js";
+import { createHttp } from "../http/index.js";
+import { createPlugins, } from "../plugins/index.js";
+import { processConditions, tuiSurface, WEB_PREFIX, webSurface, } from "../surfaces/index.js";
+import { createWorkers, nodeBaseInputs, processLock, } from "../workers/index.js";
+import { ARCHIVE_FORMAT, packData, unpackData } from "./archive.js";
+import { addressParam, HostData } from "./data.js";
+import { filesFacet } from "./files.js";
+import { appInfoFacet } from "./info.js";
+import { createLayout, defaultDataDir, openDataDir, privateStore, workerDirectory } from "./layout.js";
+import { OWNER_PATH, OwnerLink, ownerFacet, ownerTokenFile } from "./owner.js";
+import { Pairings, pairingFacet } from "./pairing.js";
+import { secretFile } from "./secrets.js";
+import { createSessions } from "./sessions.js";
+/** The server's host kind: the kit's server host is `Server()`. */
+export const Server = hostKind("server");
+/**
+ * Starts the app's server (§1): resolves once its plugins are loaded and it listens. A failing plugin of the app's
+ * root (or a problem discovery reports there) rejects with the plugins component's `PluginError`, everything closed.
+ * The bases are built right after the listen, from the files as they are then (`basesBuilt`): a page request waits
+ * for its surface's, a worker start for its kind's.
+ */
+export async function startServer(options, context) {
+    checkOwner(options.principal.owner, options.principal.server, context);
+    const { layout, cookieSecret, store, lock } = await openServer(resolve(options.dataDir ?? defaultDataDir(options.name)), context);
+    const { onError, api, limits = {} } = options;
+    const sessions = createSessions(cookieSecret, { maxEphemeral: limits.ephemeralSessions });
+    const { telemetry, principalAttributes } = options;
+    const host = createHost({
+        address: Server(),
+        principal: options.principal.server,
+        store,
+        telemetry,
+        ...(principalAttributes === undefined ? {} : { principalAttributes }),
+        ...options.timeouts,
+        onError: (error) => onError({ kind: "host", error }),
+    });
+    const http = createHttp(host, {
+        listen: options.listen ?? { host: "127.0.0.1", port: 0 },
+        links: { path: "/chord", opened: sessions.opened },
+        telemetry,
+        onError: (error) => onError({ kind: "http", error }),
+    }, context);
+    const plugins = createPlugins({
+        roots: [{ path: resolve(options.root ?? "plugins"), required: true }, layout.plugins],
+        api: { name: api.name, versions: api.versions },
+        kinds: Object.fromEntries(Object.entries(options.kinds).map(([name, kind]) => [
+            name,
+            { platform: kind.platform, hostPackages: hostPackagesOf(api, name, kind) },
+        ])),
+        install: options.install,
+        // The server's own base code, hashed now; each base bundle's record is added once built (`watchBase`).
+        base: (options.base ?? []).map((path) => resolve(path)),
+        publicPath: `${WEB_PREFIX}assets/`,
+        onError: (error) => onError({ kind: "plugins", error }),
+    }, context);
+    const workers = new Map();
+    // The address key of each worker by its principal's key: the principal its link stamps on its telemetry batches.
+    const workerHosts = new Map();
+    const link = new OwnerLink();
+    const { owner } = options.principal;
+    const core = [
+        { name: "chord.http", facet: http.facet },
+        {
+            name: "chord.app.info",
+            facet: appInfoFacet({ dataDir: layout.dataDir, name: options.name, version: api.versions[0] ?? "", owner }),
+        },
+        { name: "chord.app.sessions", facet: sessions.facet },
+        { name: "chord.app.owner", facet: ownerFacet(link, owner) },
+        {
+            name: "chord.app.pairing",
+            facet: pairingFacet(new Pairings({ maxPending: limits.pendingPairings, perAddress: limits.pairingsPerAddress }), owner),
+        },
+        { name: "chord.app.files", facet: filesFacet(join(layout.server, "files"), options.files, limits.uploads) },
+        { name: "chord.themes", facet: themesFacet() },
+        { name: "chord.themes.choice", facet: themeChoiceFacet() },
+        { name: "chord.translations", facet: translationsFacet() },
+        { name: "chord.locale.choice", facet: localeChoiceFacet() },
+    ];
+    if (telemetry !== undefined) {
+        const facet = telemetryIngestFacet({
+            target: telemetry,
+            workerHost: (principal) => workerHosts.get(principalKey(principal, context)),
+            principalAttributes: (principal) => host.principalAttributes(principal, context),
+        });
+        core.push({ name: "chord.telemetry", facet });
+    }
+    const surfaces = [];
+    const app = new RunningApp(host, http, workers, plugins, surfaces, { store, lock }, layout, options);
+    // What runs after the start reports nothing once the app closes (a build or scan finishing late).
+    const report = (error) => {
+        if (!app.closing())
+            onError(error);
+    };
+    try {
+        for (const kind of options.workers ?? []) {
+            workers.set(kind.kind.kind, workersOf(host, kind, options, layout, plugins, workerHosts, context));
+        }
+        for (const surface of surfacesOf(host, options, plugins)) {
+            surfaces.push(surface);
+            core.push({ name: `chord.${surface.name}`, facet: surface.surface.facet });
+        }
+        await plugins.load(host, { kind: "server", core, modules: modulesOf(api, options.kinds.server) }, context);
+        await ownerTokenFile(layout.ownerToken, owner, host, context);
+        const listening = await http.listening(context);
+        const bases = [
+            ...surfaces.map(({ name, surface }) => ({ name, build: () => surface.build() })),
+            ...[...workers].map(([name, each]) => ({ name, build: () => each.build() })),
+        ];
+        const compared = [];
+        const built = buildBases(bases, plugins, compared, report, () => app.closing());
+        const watching = watchBaseCode(plugins, built, compared, report, () => app.closing());
+        app.started(link.renew(), listening, built, watching);
+    }
+    catch (error) {
+        await app.close(context);
+        throw error;
+    }
+    return app;
+}
+/**
+ * Refuses an owner the kit could not recognize or that would act as the server (a declaration policy the types cannot
+ * express): sessions keep the owner as JSON, so a field `undefined` (or anything else not strict JSON) would never
+ * match it again; the server's principal reaches every worker's kit objects.
+ */
+function checkOwner(owner, server, context) {
+    if (!isJsonValue(owner)) {
+        throw new Error("startServer: principal.owner must be strict JSON (no undefined fields, functions or class instances)");
+    }
+    if (samePrincipal(owner, server, context)) {
+        throw new Error("startServer: principal.owner must not be the server's principal");
+    }
+}
+/**
+ * Builds every base right after the listen, at once, from the files as they are now (owner decision "A": nothing is
+ * kept between starts; the server answers meanwhile, each request needing a base waits for it). A built base's record
+ * is added to what `plugins` compares (its first comparisons pushed to `compared`); a failed one is reported
+ * (`base_build`) and the server runs on. Settles once every build ended; what ends after the close is dropped.
+ */
+async function buildBases(bases, plugins, compared, report, closed) {
+    await Promise.all(bases.map(async ({ name, build }) => {
+        const built = await build();
+        if (closed())
+            return;
+        if (built.kind === "failed")
+            report({ kind: "base_build", base: name, error: built.error });
+        else
+            compared.push(plugins.watchBase(built.inputs));
+    }));
+}
+/**
+ * Adds the server's own code to what `plugins` compares, once the bases are built (`built`; the scan's reads would
+ * contend with the builds the first requests wait for): the static graph of its entry (the start script;
+ * `nodeBaseInputs`; a file changed since the process started is recorded as differing, `editedSinceStart`). Best
+ * effort: a failed scan is reported (`server_scan`) and that code not compared. An entry under `node_modules` is
+ * installed code (an npm-installed app, a test runner), never compared. Settles once every record's first comparison
+ * did (the bases' in `compared` too: `base` knows them all). A close meanwhile ends it at its next step; a scan stalled
+ * on a read keeps it pending until the read ends (the close does not wait for it; its result is dropped).
+ */
+async function watchBaseCode(plugins, built, compared, report, closed) {
+    await built;
+    if (closed())
+        return;
+    const entry = process.argv[1];
+    if (entry !== undefined && !entry.split(sep).includes("node_modules")) {
+        const conditions = processConditions(process.execArgv, process.env.NODE_OPTIONS);
+        const scanned = await nodeBaseInputs(entry, conditions).then((inputs) => inputs, (error) => report({ kind: "server_scan", error }));
+        if (closed())
+            return;
+        if (scanned !== undefined)
+            compared.push(plugins.watchBase(editedSinceStart(scanned)));
+    }
+    await Promise.all(compared);
+}
+/** What the scan records for a file changed since the process started: a hash no bytes have. */
+const EDITED_SINCE_START = "changed since the server started";
+/** How far in the future a file's timestamp may be and still count as an edit since the start: clock skew. */
+const FUTURE_SLACK_MS = 5_000;
+/**
+ * The scan's record `inputs` with every file changed since this process started (its mtime or ctime after
+ * `performance.timeOrigin`) recorded as differing: Node may have loaded other bytes than the scan read, so its first
+ * comparison marks `base` (until a restart: the bytes Node loaded are unknown). Conservative: an edit Node loaded
+ * anyway (made during the module loading, before the file was read) or a change of metadata only (ctime) marks too.
+ * Per timestamp: one later than now (plus `FUTURE_SLACK_MS`) is no edit since the start (a file stamped in the future,
+ * by a skewed clock or an archive, would mark every start until that time); a file neither of whose timestamps is in
+ * range keeps its hash, compared by content alone.
+ */
+function editedSinceStart(inputs) {
+    const started = performance.timeOrigin;
+    const latest = Date.now() + FUTURE_SLACK_MS;
+    return new Map([...inputs].map(([path, hash]) => {
+        try {
+            const { mtimeMs, ctimeMs } = statSync(path);
+            const edited = [mtimeMs, ctimeMs].some((time) => time > started && time <= latest);
+            return [path, edited ? EDITED_SINCE_START : hash];
+        }
+        catch {
+            // Gone: its first comparison finds it so.
+            return [path, hash];
+        }
+    }));
+}
+/** The app's client surfaces, in order: the web's, the terminal's (their base bundles built after the listen). */
+function surfacesOf(host, options, plugins) {
+    const surfaces = [];
+    if (options.web !== undefined)
+        surfaces.push({ name: "web", surface: webSurface(host, { ...options.web, plugins }) });
+    if (options.tui !== undefined)
+        surfaces.push({ name: "tui", surface: tuiSurface(host, { ...options.tui, plugins }) });
+    return surfaces;
+}
+/** How long a second server waits for the data directory's lock before it is refused. */
+const SERVER_LOCK_MS = 1000;
+/**
+ * The server's own part of the data directory `path`: its lock (one server per data directory, by its real path: a
+ * second one, also through a symbolic link, would share its stores and secrets), the layout made private, the cookie
+ * secret and the server's store; the lock released when the rest fails.
+ */
+async function openServer(path, context) {
+    const dataDir = await openDataDir(path);
+    const waited = AbortSignal.timeout(SERVER_LOCK_MS);
+    const lock = await processLock(`chord-app:${dataDir}`, withAbortSignal(waited, context)).catch((error) => {
+        throw waited.aborted ? new Error(`startServer: another server runs on ${dataDir}`) : error;
+    });
+    try {
+        const layout = await createLayout(dataDir);
+        const cookieSecret = await secretFile(layout.cookieSecret);
+        await privateStore(layout.serverStore);
+        const store = await openStore(sqliteBackend(await openNodeSqliteDatabase(layout.serverStore)), context);
+        return { layout, cookieSecret, store, lock };
+    }
+    catch (error) {
+        await lock.release();
+        throw error;
+    }
+}
+/** The host packages of kind `name`: the API's shared and per-kind module of every version, and its packages. */
+function hostPackagesOf(api, name, kind) {
+    const modules = api.versions.flatMap((version) => [`${api.name}/${version}`, `${api.name}/${version}/${name}`]);
+    return [...modules, ...Object.keys(kind.packages ?? {})];
+}
+/** This process's modules for a kind: the API's and the kind's packages. */
+function modulesOf(api, kind) {
+    return { ...api.modules, ...kind?.packages };
+}
+/**
+ * The workers component of one worker kind (its base built after the listen, into the kind's directory under
+ * `cache/workers/`): started with the kit's part of the start data beside the app's.
+ */
+function workersOf(host, kind, options, layout, plugins, workerHosts, context) {
+    const { dataDir } = layout;
+    const facet = kind.facet ?? "worker";
+    // `AppOptions` admits worker kinds only with `principal.worker`.
+    const worker = options.principal.worker;
+    const { server } = options.principal;
+    return createWorkers(host, 
+    // A host kind of the app: any params; its addresses come back from its route as the kit hands them on.
+    kind.kind, {
+        kind: facet,
+        entry: kind.entry,
+        ...(kind.execArgv === undefined ? {} : { execArgv: kind.execArgv }),
+        ...(kind.env === undefined ? {} : { env: kind.env }),
+        baseDir: join(layout.workerBases, kind.kind.kind),
+        compileCache: layout.compileCache,
+        // The server reaches its workers' kit objects (`HostData`) whatever the app admits.
+        authorize: (principal, address) => samePrincipal(principal, server, context) || kind.authorize(principal, address),
+        principal: worker,
+        start: async (address, ctx) => {
+            const principal = worker(address);
+            workerHosts.set(principalKey(principal, ctx), address.key);
+            const kit = {
+                dir: workerDirectory(dataDir, address),
+                facet,
+                // Principals are JSON (they cross links).
+                principal: principal,
+                server: server,
+                files: { ...options.files },
+                telemetry: options.telemetry !== undefined,
+                ...(options.limits?.uploads === undefined ? {} : { uploads: options.limits.uploads }),
+                timeouts: { ...options.timeouts },
+            };
+            return { kit, app: await kind.start(address, ctx) };
+        },
+        lock: (address) => workerLock(options.name, dataDir, address),
+        ...(kind.idleMs === undefined ? {} : { idleMs: kind.idleMs }),
+        plugins,
+        onError: (error) => options.onError({ kind: "workers", error }),
+    }, context);
+}
+/** The process lock of the worker at `address`: its worker holds it while it runs, an export or import meanwhile. */
+function workerLock(name, dataDir, address) {
+    return `${name}:${dataDir}:${address.key}`;
+}
+/** How long an export or import waits for a worker's lock: past it a worker holds it (it runs or starts). */
+const ADDRESS_LOCK_MS = 2000;
+/** The host of the owner link for the address listened on: loopback for a wildcard, an IPv6 address in brackets. */
+function linkHost(host) {
+    if (host === "0.0.0.0" || host === "")
+        return "127.0.0.1";
+    if (host === "::")
+        return "[::1]";
+    return host.includes(":") ? `[${host}]` : host;
+}
+class RunningApp {
+    host;
+    http;
+    workers;
+    plugins;
+    dataDir;
+    ownerTokenFile;
+    #component;
+    /** The client surfaces, filled before the server's load. */
+    #surfaces;
+    #store;
+    #lock;
+    #options;
+    #link = "";
+    /** The bases' builds after the start (`buildBases`). */
+    #building = Promise.resolve();
+    /** The recording of the base code after the start (`watchBaseCode`). */
+    #scanning = Promise.resolve();
+    #closing;
+    /** The latest `applyChanges`, settled to nothing: the next one starts after it. */
+    #applying = Promise.resolve();
+    constructor(host, http, workers, plugins, surfaces, server, layout, options) {
+        this.host = host;
+        this.http = http;
+        this.workers = workers;
+        this.#component = plugins;
+        this.#surfaces = surfaces;
+        this.#store = server.store;
+        this.#lock = server.lock;
+        this.#options = options;
+        this.dataDir = layout.dataDir;
+        this.ownerTokenFile = layout.ownerToken;
+        this.plugins = {
+            state: plugins.state,
+            install: (source, context) => plugins.installPlugin(source, layout.plugins, context),
+            component: plugins,
+        };
+    }
+    /**
+     * The start finished: the owner link's token and the address it names (the one listened on), the bases' builds and
+     * the recording of the base code under way (`basesBuilt`, `baseWatched`).
+     */
+    started(token, listening, building, scanning) {
+        this.#link = `http://${linkHost(listening.host)}:${listening.port}${OWNER_PATH}#${token}`;
+        this.#building = building;
+        this.#scanning = scanning;
+    }
+    ownerLink() {
+        return this.#link;
+    }
+    get basesBuilt() {
+        return this.#building;
+    }
+    get baseWatched() {
+        return this.#scanning;
+    }
+    get web() {
+        return this.#surfaceBase("web");
+    }
+    get tui() {
+        return this.#surfaceBase("tui");
+    }
+    /** The surface `name`'s base hash once built, when the app has that surface. */
+    #surfaceBase(name) {
+        const found = this.#surfaces.find((each) => each.name === name);
+        if (found === undefined)
+            return undefined;
+        const { built } = found.surface;
+        return { base: built?.kind === "built" ? built.base : undefined };
+    }
+    applyChanges(context) {
+        // One build and rollout at a time: a later build rolled out before an earlier one would leave the older code
+        // deployed (each host applies the last set it is handed).
+        const applied = this.#applying.then(() => this.#applyChanges(context));
+        this.#applying = applied.then(() => { }, () => { });
+        return applied;
+    }
+    /** One build of the dirty plugins and its rollout: the server, every worker kind, then the clients. */
+    async #applyChanges(context) {
+        const plugins = this.#component;
+        const built = await plugins.build(plugins.state.value.dirty, context);
+        const steps = [
+            plugins.step("server", this.host),
+            ...[...this.workers].map(([name, each]) => each.step(name)),
+            ...this.#surfaces.map(({ name, surface }) => surface.step(name)),
+        ];
+        return plugins.rollout(steps, built, context);
+    }
+    async exportData(address, path, context) {
+        const workers = this.#workersOf(address);
+        const manifest = this.#manifest(address);
+        const target = resolve(path);
+        // Running: the worker packs its own store. Else the lock, unless a worker starts first: then ask it.
+        for (let attempt = 1;; attempt++) {
+            if (workers.state.value[address.key]?.status === "running") {
+                const data = await this.host.get(HostData, { address: addressParam(address) }, context);
+                try {
+                    await data.exportTo({ path: target, manifest: JSON.stringify(manifest) }, context);
+                }
+                finally {
+                    data.release();
+                }
+                return;
+            }
+            const lock = await this.#workerLock(address, context);
+            if (lock !== undefined) {
+                try {
+                    await packData(workerDirectory(this.dataDir, address), manifest, target, context);
+                }
+                finally {
+                    await lock.release();
+                }
+                return;
+            }
+            if (attempt === 5)
+                throw new Error(`exportData: the worker at ${address.key} keeps starting; try again`);
+        }
+    }
+    async importData(archive, address, context) {
+        this.#workersOf(address);
+        const { name, limits = {} } = this.#options;
+        const accept = (manifest) => {
+            // A trust boundary: an archive from anywhere.
+            if (manifest?.format !== ARCHIVE_FORMAT)
+                throw new Error(`importData: not a format ${ARCHIVE_FORMAT} archive`);
+            if (manifest.app !== name)
+                throw new Error(`importData: an archive of "${manifest.app}", not "${name}"`);
+        };
+        const lock = await this.#workerLock(address, context);
+        // A worker holds it: it runs, so the address has data, and nothing is overwritten.
+        if (lock === undefined)
+            throw new Error(`importData: ${address.key} has data (its worker runs)`);
+        try {
+            const bounds = { bytes: limits.importBytes, entries: limits.importEntries };
+            await unpackData(resolve(archive), workerDirectory(this.dataDir, address), accept, bounds, context);
+        }
+        finally {
+            await lock.release();
+        }
+    }
+    /** The process lock of the worker at `address` (the one its worker takes at start), or `undefined` while held. */
+    async #workerLock(address, context) {
+        const waited = AbortSignal.timeout(ADDRESS_LOCK_MS);
+        try {
+            return await processLock(workerLock(this.#options.name, this.dataDir, address), withAbortSignal(waited, context));
+        }
+        catch (error) {
+            if (waited.aborted)
+                return undefined;
+            throw error;
+        }
+    }
+    close(context) {
+        this.#closing ??= this.#close(context);
+        return this.#closing;
+    }
+    /** The workers of `address`'s kind. */
+    #workersOf(address) {
+        const workers = this.workers.get(address.kind);
+        if (workers === undefined)
+            throw new Error(`app: no worker kind "${address.kind}"`);
+        return workers;
+    }
+    /** The manifest of `address`'s archive. */
+    #manifest(address) {
+        const { name, api } = this.#options;
+        return {
+            format: ARCHIVE_FORMAT,
+            app: name,
+            api: api.versions[0] ?? "",
+            address: { kind: address.kind, key: address.key },
+        };
+    }
+    /** Whether the app is closing or closed: what runs after the start stops there. */
+    closing() {
+        return this.#closing !== undefined;
+    }
+    /**
+     * The close, in order: HTTP (it drains requests the host's close would seal), workers, host, store, the plugins'
+     * watcher, then the data directory's lock. The bases' builds and the recording of the base code are not waited for:
+     * what they finish after the close is dropped.
+     */
+    async #close(context) {
+        await this.http.close(context);
+        for (const workers of this.workers.values())
+            await workers.close(context);
+        await this.host.close(context);
+        await this.#store.close(context);
+        this.#component.close();
+        await this.#lock.release();
+    }
+}
+//# sourceMappingURL=app.js.map

package/dist/node/app/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/node/app/app.ts"],"names":[],"mappings":"AAAA,2HAA2H;AAC3H,gHAAgH;AAChH,mHAAmH;AACnH,oHAAoH;AACpH,oHAAoH;AACpH,qHAAqH;AACrH,4DAA4D;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAA+B,QAAQ,EAAkB,MAAM,0BAA0B,CAAC;AAEjG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAyE,MAAM,qBAAqB,CAAC;AACxH,OAAO,EAAE,WAAW,EAAkB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAc,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAA8B,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEnG,OAAO,EAAE,UAAU,EAA0D,MAAM,kBAAkB,CAAC;AACtG,OAAO,EAEN,aAAa,GAQb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,iBAAiB,EAIjB,UAAU,EACV,UAAU,EAGV,UAAU,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,aAAa,EACb,cAAc,EAEd,WAAW,GAIX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAwB,QAAQ,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAkB,UAAU,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAkB,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,mEAAmE;AACnE,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAkOzC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAsB,OAAsB,EAAE,OAAgB;IAC9F,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAC7D,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACxD,OAAO,CACP,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,QAAQ,GAAG,cAAc,CAAI,YAAY,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC7F,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAI;QAC1B,OAAO,EAAE,MAAM,EAAE;QACjB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QACnC,KAAK;QACL,SAAS;QACT,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;QACrE,GAAG,OAAO,CAAC,QAAQ;QACnB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CACtB,IAAI,EACJ;QACC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE;QACxD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;QAClD,SAAS;QACT,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;KACpD,EACD,OAAO,CACP,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAC5B;QACC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;QACrF,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;QAC/C,KAAK,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACnD,IAAI;YACJ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;SAC1E,CAAC,CACF;QACD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,uGAAuG;QACvG,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,UAAU,EAAE,GAAG,UAAU,SAAS;QAClC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;KACvD,EACD,OAAO,CACP,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,iHAAiH;IACjH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,IAAI,GAAqB;QAC9B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QACzC;YACC,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;SAC3G;QACD,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;QACrD,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;QAC3D;YACC,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,YAAY,CAClB,IAAI,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAC3F,KAAK,CACL;SACD;QACD,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC3G,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;QAC1D,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;QAC1D,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;KAC3D,CAAC;IACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,oBAAoB,CAAI;YACrC,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC5E,mBAAmB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC;SAChF,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrG,kGAAkG;IAClG,MAAM,MAAM,GAAG,CAAC,KAAe,EAAQ,EAAE;QACxC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3G,MAAM,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG;YACb,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChF,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;SAC5E,CAAC;QACF,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,KAAK,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAsB,KAAQ,EAAE,MAAS,EAAE,OAAgB;IAC7E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,sGAAsG,CACtG,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACpF,CAAC;AACF,CAAC;AAKD;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CACxB,KAAsB,EACtB,OAAgB,EAChB,QAAyB,EACzB,MAAiC,EACjC,MAAqB;IAErB,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE;YAAE,OAAO;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;;YACvF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAC3B,OAAgB,EAChB,KAAoB,EACpB,QAAyB,EACzB,MAAiC,EACjC,MAAqB;IAErB,MAAM,KAAK,CAAC;IACZ,IAAI,MAAM,EAAE;QAAE,OAAO;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAC3D,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAClB,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAC1D,CAAC;QACF,IAAI,MAAM,EAAE;YAAE,OAAO;QACrB,IAAI,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,gGAAgG;AAChG,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAE9D,8GAA8G;AAC9G,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,MAAkB;IAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;IAC5C,OAAO,IAAI,GAAG,CACb,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC;YACJ,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACR,0CAA0C;YAC1C,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;IACF,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAKD,kHAAkH;AAClH,SAAS,UAAU,CAAsB,IAAa,EAAE,OAAsB,EAAE,OAAgB;IAC/F,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,yFAAyF;AACzF,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACxB,IAAY,EACZ,OAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,aAAa,OAAO,EAAE,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACjH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxG,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,iHAAiH;AACjH,SAAS,cAAc,CAAC,GAAW,EAAE,IAAY,EAAE,IAAa;IAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAChH,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,GAAW,EAAE,IAAyB;IACxD,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CACjB,IAAa,EACb,IAAsB,EACtB,OAAsB,EACtB,MAAiB,EACjB,OAAgB,EAChB,WAAgC,EAChC,OAAgB;IAEhB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;IACrC,iEAAiE;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAiC,CAAC;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,OAAO,aAAa,CACnB,IAAI;IACJ,uGAAuG;IACvG,IAAI,CAAC,IAAgB,EACrB;QACC,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACjD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,oFAAoF;QACpF,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CACjC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC;QAChF,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAa;gBACrB,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC;gBACtC,KAAK;gBACL,0CAA0C;gBAC1C,SAAS,EAAE,SAAiC;gBAC5C,MAAM,EAAE,MAA8B;gBACtC,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;gBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrF,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE;aACjC,CAAC;YACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO;QACP,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;KAC/D,EACD,OAAO,CACP,CAAC;AACH,CAAC;AAED,qHAAqH;AACrH,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,OAAgB;IAClE,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AAC5C,CAAC;AAED,6GAA6G;AAC7G,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,oHAAoH;AACpH,SAAS,QAAQ,CAAC,IAAY;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,WAAW,CAAC;IAC1D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,UAAU;IACN,IAAI,CAAU;IACd,IAAI,CAAmB;IACvB,OAAO,CAAyC;IAChD,OAAO,CAAa;IACpB,OAAO,CAAS;IAChB,cAAc,CAAS;IACvB,UAAU,CAAU;IAC7B,4DAA4D;IACnD,SAAS,CAAwB;IACjC,MAAM,CAAQ;IACd,KAAK,CAAc;IACnB,QAAQ,CAAgB;IACjC,KAAK,GAAG,EAAE,CAAC;IACX,wDAAwD;IACxD,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,wEAAwE;IACxE,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,QAAQ,CAA4B;IACpC,mFAAmF;IACnF,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C,YACC,IAAa,EACb,IAAsB,EACtB,OAA+C,EAC/C,OAAgB,EAChB,QAA+B,EAC/B,MAA6D,EAC7D,MAA2F,EAC3F,OAAsB;QAEtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;YACpF,SAAS,EAAE,OAAO;SAClB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa,EAAE,SAAwB,EAAE,QAAuB,EAAE,QAAuB;QAChG,IAAI,CAAC,KAAK,GAAG,UAAU,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,GAAG,UAAU,IAAI,KAAK,EAAE,CAAC;QAC1F,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,SAAS;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,IAAI,WAAW;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,gFAAgF;IAChF,YAAY,CAAC,IAAmB;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACnE,CAAC;IAED,YAAY,CAAC,OAAgB;QAC5B,6GAA6G;QAC7G,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACR,CAAC;QACF,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,aAAa,CAAC,OAAgB;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG;YACb,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;YACjC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAChE,CAAC;QACF,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,IAAY,EAAE,OAAgB;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,qGAAqG;QACrG,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACxF,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACpF,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChB,CAAC;gBACD,OAAO;YACR,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACJ,MAAM,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBACnF,CAAC;wBAAS,CAAC;oBACV,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO;YACR,CAAC;YACD,IAAI,OAAO,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,GAAG,4BAA4B,CAAC,CAAC;QAC1G,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,OAAgB,EAAE,OAAgB;QACnE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5C,MAAM,MAAM,GAAG,CAAC,QAAyB,EAAQ,EAAE;YAClD,8CAA8C;YAC9C,IAAI,QAAQ,EAAE,MAAM,KAAK,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,cAAc,UAAU,CAAC,CAAC;YAC/G,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC;QAC1G,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,mFAAmF;QACnF,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,CAAC,GAAG,6BAA6B,CAAC,CAAC;QACjG,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5E,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrG,CAAC;gBAAS,CAAC;YACV,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;IACF,CAAC;IAED,kHAAkH;IAClH,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,OAAgB;QACnD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,OAAO,MAAM,WAAW,CACvB,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EACrD,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YACrC,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAgB;QACrB,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,uCAAuC;IACvC,UAAU,CAAC,OAAgB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,2CAA2C;IAC3C,SAAS,CAAC,OAAgB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,OAAO;YACN,MAAM,EAAE,cAAc;YACtB,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;YAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SACjD,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,OAAO;QACN,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC5B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;CACD","sourcesContent":["// `startServer` (slice 13 §1, §5; decisions \"The app kit, point 1\" to \"point 5\"): the server of an app built with the kit.\n// It lays out the data directory, opens the server's store, creates the server host, the HTTP component and one\n// workers component per worker kind, the plugins component over the app's required root and the user's root, loads\n// the server's plugins with the kit's own facets (the start-data object, sessions, the owner link, pairing, files),\n// and gives the app the controls it needs: the owner link, `applyChanges`, installs, export and import per address.\n// After the listen, off the start's path, it builds the bases (the surfaces' base bundles, each worker kind's worker\n// base) and records the base code the `base` mark compares.\n\nimport { statSync } from \"node:fs\";\nimport { join, resolve, sep } from \"node:path\";\nimport type { TelemetryContext } from \"@earendil-works/pi-telemetry\";\nimport { type Context, withAbortSignal } from \"../../context/index.ts\";\nimport { type Address, type HostKind, hostKind, type KindShape } from \"../../contracts/index.ts\";\nimport type { Principal } from \"../../data/index.ts\";\nimport { principalKey, samePrincipal } from \"../../data/principal.ts\";\nimport { createHost, type Host, type HostError, type PluginFacet, type PrincipalAttributes } from \"../../host/index.ts\";\nimport { isJsonValue, type JsonValue } from \"../../json.ts\";\nimport { openNodeSqliteDatabase } from \"../../sqlite/node.ts\";\nimport { openStore, type Store, sqliteBackend } from \"../../store/index.ts\";\nimport { localeChoiceFacet, themeChoiceFacet, themesFacet, translationsFacet } from \"../../surfaces/index.ts\";\nimport { type TelemetryIngestTarget, telemetryIngestFacet } from \"../../telemetry-ingest/index.ts\";\nimport type { Watchable } from \"../../watch.ts\";\nimport { createHttp, type HttpComponent, type HttpError, type ListenAddress } from \"../http/index.ts\";\nimport {\n\ttype BaseInputs,\n\tcreatePlugins,\n\ttype HostPackages,\n\ttype InstallOptions,\n\ttype PluginSource,\n\ttype Plugins,\n\ttype PluginsError,\n\ttype PluginsState,\n\ttype RolloutResult,\n} from \"../plugins/index.ts\";\nimport {\n\tprocessConditions,\n\ttype SurfaceBuilt,\n\ttype TuiSurface,\n\ttype TuiSurfaceOptions,\n\ttuiSurface,\n\tWEB_PREFIX,\n\ttype WebSurface,\n\ttype WebSurfaceOptions,\n\twebSurface,\n} from \"../surfaces/index.ts\";\nimport {\n\tcreateWorkers,\n\tnodeBaseInputs,\n\ttype ProcessLock,\n\tprocessLock,\n\ttype Workers,\n\ttype WorkersBuilt,\n\ttype WorkersError,\n} from \"../workers/index.ts\";\nimport { ARCHIVE_FORMAT, type ArchiveManifest, packData, unpackData } from \"./archive.ts\";\nimport { addressParam, HostData } from \"./data.ts\";\nimport { type FilesCaps, filesFacet } from \"./files.ts\";\nimport { appInfoFacet } from \"./info.ts\";\nimport { type AppLayout, createLayout, defaultDataDir, openDataDir, privateStore, workerDirectory } from \"./layout.ts\";\nimport { OWNER_PATH, OwnerLink, ownerFacet, ownerTokenFile } from \"./owner.ts\";\nimport { Pairings, pairingFacet } from \"./pairing.ts\";\nimport { secretFile } from \"./secrets.ts\";\nimport { createSessions } from \"./sessions.ts\";\n\n/** The server's host kind: the kit's server host is `Server()`. */\nexport const Server = hostKind(\"server\");\n\n/**\n * The app's API (slice 12): its package name, the versions it provides (newest first) and this process's modules of\n * them by specifier (`@acme/app/v3`, `@acme/app/v3/server`).\n */\nexport type AppApi = {\n\treadonly name: string;\n\treadonly versions: readonly string[];\n\treadonly modules: HostPackages;\n};\n\n/**\n * A facet kind of the app: where its builds run, and the packages besides the API its plugins share (`react`). Its API\n * modules are named by convention: `<api>/<version>` and `<api>/<version>/<kind>` for every version.\n */\nexport type AppKind = { readonly platform: \"node\" | \"browser\"; readonly packages?: HostPackages };\n\n/** A worker kind: a host kind of the app and how its workers start (the workers component's options). */\nexport type AppWorkerKind<P extends Principal> = {\n\t/** The host kind (`hostKind(\"project\", { id: str() })`). */\n\treadonly kind: KindShape;\n\t/**\n\t * The worker's entry module (it calls `startWorker`), bundled with the base code it imports at start (every worker of\n\t * the kind runs that snapshot until the server restarts); its Node flags and environment.\n\t */\n\treadonly entry: string;\n\treadonly execArgv?: readonly string[];\n\treadonly env?: Readonly<Record<string, string>>;\n\t/** The facet kind its workers load: `worker` by default. */\n\treadonly facet?: string;\n\t/** The app's start data for the worker at `address` (JSON), before each start. */\n\treadonly start: (address: Address, context: Context) => Promise<JsonValue> | JsonValue;\n\t/** Whether `principal` may reach the worker at `address` (synchronous). */\n\treadonly authorize: (principal: P, address: Address) => boolean;\n\t/** How long a worker idles before it stops: 5 minutes by default. */\n\treadonly idleMs?: () => number;\n};\n\n/**\n * What the kit reports: from its host, its HTTP component, its workers or its plugins, a base that did not build after\n * the start (`base_build`: `base` is `web`, `tui` or the worker kind's name; the server runs on, the page answers 503,\n * the kind's workers fail their start), or a failed scan of the server's own code (`server_scan`: the server runs on,\n * that code is not compared).\n */\nexport type AppError =\n\t| { readonly kind: \"host\"; readonly error: HostError }\n\t| { readonly kind: \"http\"; readonly error: HttpError }\n\t| { readonly kind: \"workers\"; readonly error: WorkersError }\n\t| { readonly kind: \"plugins\"; readonly error: PluginsError }\n\t| { readonly kind: \"base_build\"; readonly base: string; readonly error: unknown }\n\t| { readonly kind: \"server_scan\"; readonly error: unknown };\n\n/**\n * What `startServer` takes. Worker kinds need `principal.worker`: a type error without it, also for a `workers` list\n * typed as an array (not a tuple) that is empty.\n */\nexport type AppOptions<P extends Principal> = {\n\t/** The app's name: its default data directory is `~/.<name>`, its archives carry it. */\n\treadonly name: string;\n\t/** The data directory (the start script's to decide; no environment variables): `~/.<name>` by default. */\n\treadonly dataDir?: string;\n\t/** The app's built-in plugins root (required): `plugins/` of the working directory by default. */\n\treadonly root?: string;\n\t/** Where the server listens: `127.0.0.1`, a free port by default. */\n\treadonly listen?: ListenAddress;\n\treadonly api: AppApi;\n\t/** The app's facet kinds: `server` and each worker kind's facet kind among them. */\n\treadonly kinds: Readonly<Record<string, AppKind>>;\n\t/**\n\t * The server's principal, each worker's (stamped on its link; only with worker kinds) and the owner's: whom the owner\n\t * link, the owner token file and device pairing sign in, and who approves pairings and makes invites (`AppInfo.owner`).\n\t * The owner must be strict JSON and not the server's principal (refused at start).\n\t */\n\treadonly principal: { readonly server: P; readonly worker?: (address: Address) => P; readonly owner: P };\n\t/** The worker kinds; none: a server with clients only. */\n\treadonly workers?: readonly AppWorkerKind<P>[];\n\t/** The caps of each host's files (the server's and every worker's). */\n\treadonly files?: FilesCaps;\n\t/** The bounds of what public endpoints and imports may cost. */\n\treadonly limits?: AppLimits;\n\t/** How installs run npm (slice 12's `InstallOptions`): `npm` on the `PATH` by default. */\n\treadonly install?: InstallOptions;\n\t/**\n\t * The web surface (slice 11): the app's web entry (the base bundle's), its page template, the paths serving the\n\t * page (`[\"/\"]`), whether the page is public, the conditions its packages resolve with (the server process's by\n\t * default); the `web` facet kind. None: no web surface.\n\t */\n\treadonly web?: AppWeb;\n\t/**\n\t * The terminal surface (slice 11): the app's terminal entry and the conditions its packages resolve with (the server\n\t * process's by default); the `tui` facet kind. None: no terminal clients.\n\t */\n\treadonly tui?: Pick<TuiSurfaceOptions, \"entry\" | \"conditions\">;\n\t/**\n\t * The app's telemetry store (§29; decision \"The server is the one place telemetry is stored\"): the server's host,\n\t * its HTTP requests and the kit's ingest record to it (`createSqliteTelemetry`'s store). With one, every worker\n\t * records in memory and sends its spans and metrics to the server's `WorkerTelemetry`, and pages that record\n\t * (`startPage({ telemetry: true })`) theirs to `PageTelemetry`; carriers join them into one trace. None: NOOP.\n\t */\n\treadonly telemetry?: TelemetryContext & TelemetryIngestTarget;\n\t/**\n\t * Who a span was for (`createHost`'s `principalAttributes`): the server's hook, also stamped on the spans pages\n\t * send (the principal of their link). Each worker's is its `startWorker`'s.\n\t */\n\treadonly principalAttributes?: PrincipalAttributes<P>;\n\t/**\n\t * The app's base code beside what the kit knows (files or directories: its API modules, its start script), hashed at\n\t * start: `plugins.state.base` is true while a file differs from what the server or a base bundle read (or a source\n\t * file is new in one of the directories). The kit adds every file its base bundles were built from, with the bytes\n\t * they read: the web's, the terminal's and each worker kind's.\n\t */\n\treadonly base?: readonly string[];\n\t/**\n\t * The `closeTimeout`, `readyTimeout` and `reloadDrainTimeout` of every host (the server's and each worker's): 30 s,\n\t * 60 s and 5 s by default.\n\t */\n\treadonly timeouts?: AppTimeouts;\n\treadonly onError: (error: AppError) => void;\n} & ({ readonly workers?: readonly [] } | { readonly principal: { readonly worker: (address: Address) => P } });\n\n/**\n * The bounds of what public endpoints, clients and imports may cost: live ephemeral sessions (1,000; past it the\n * oldest ends, signed out), pairings under way that anonymous clients started (100 in all, 10 per client address; past\n * them 429; the owner's own are not counted), uploads under way per `Files` object (64; past it `unavailable`, `busy`),\n * an archive's unpacked bytes (4 GiB) and entries (100,000).\n */\nexport type AppLimits = {\n\treadonly uploads?: number;\n\treadonly ephemeralSessions?: number;\n\treadonly pendingPairings?: number;\n\treadonly pairingsPerAddress?: number;\n\treadonly importBytes?: number;\n\treadonly importEntries?: number;\n};\n\n/**\n * The hosts' timeouts in milliseconds (`HostOptions.closeTimeout`, `HostOptions.readyTimeout`,\n * `HostOptions.reloadDrainTimeout`).\n */\nexport type AppTimeouts = {\n\treadonly closeTimeout?: number;\n\treadonly readyTimeout?: number;\n\treadonly reloadDrainTimeout?: number;\n};\n\n/** The kit's web surface options (`webSurface`'s, its kind `web` and plugins the kit's). */\nexport type AppWeb = Pick<WebSurfaceOptions, \"entry\" | \"page\" | \"paths\" | \"public\" | \"conditions\">;\n\n/** The plugins of a running app, for its \"apply changes\" control and its installs. */\nexport type AppPlugins = {\n\t/** The marks (`dirty`, `install`, `set`, `base`): what the app's button shows. */\n\treadonly state: Watchable<PluginsState>;\n\t/** Installs plugins from git or npm into the user's root (slice 12's `installPlugin`); their names. */\n\tinstall(source: PluginSource, context: Context): Promise<readonly string[]>;\n\t/** The plugins component itself. */\n\treadonly component: Plugins;\n};\n\n/** A running app. */\nexport interface App<P extends Principal> {\n\treadonly host: Host<P>;\n\treadonly http: HttpComponent<P>;\n\t/** The workers components, by host kind name. */\n\treadonly workers: ReadonlyMap<string, Workers<HostKind>>;\n\treadonly plugins: AppPlugins;\n\t/**\n\t * The web surface, when the app has one: its base bundle's hash once built (`basesBuilt`); `undefined` before, and\n\t * when its build failed.\n\t */\n\treadonly web: { readonly base: string | undefined } | undefined;\n\t/** The terminal surface, when the app has one: its base bundle's hash, as `web`'s. */\n\treadonly tui: { readonly base: string | undefined } | undefined;\n\t/** The data directory. */\n\treadonly dataDir: string;\n\t/** The owner link of this start (single use, 10 minutes): `http://127.0.0.1:<port>/_chord/owner#<token>`. */\n\townerLink(): string;\n\t/** The owner token file's path (a device session of the owner, mode 0600). */\n\treadonly ownerTokenFile: string;\n\t/**\n\t * Settles once every base (the web and terminal base bundles, each worker kind's worker base) was built after the\n\t * start, or failed (reported, `base_build`). Never rejects.\n\t */\n\treadonly basesBuilt: Promise<void>;\n\t/**\n\t * Settles once the base code is recorded, watched and compared once, after the start: the bases' records (after\n\t * `basesBuilt`) and the scan of the server's own code. Until then `plugins.state.base` is not known (`false` may\n\t * mean \"not compared yet\"); a file of the server's own code changed since the process started marks it until a\n\t * restart (Node may have loaded other bytes than the scan read).\n\t */\n\treadonly baseWatched: Promise<void>;\n\t/**\n\t * Builds the dirty plugins and rolls them out: the server, every worker kind, then the clients; never by itself. Calls\n\t * run one after another (a later one builds after the earlier one rolled out).\n\t */\n\tapplyChanges(context: Context): Promise<RolloutResult>;\n\t/**\n\t * Writes the data the worker at `address` created (its store and finished files) as an archive at `path`, stopping\n\t * nothing: a running worker packs its own store at one consistent point; without one the server packs it under the\n\t * worker's lock (no worker starts meanwhile).\n\t */\n\texportData(address: Address, path: string, context: Context): Promise<void>;\n\t/**\n\t * Makes the data of `address` (which must have none yet: nothing is overwritten) from the archive at `archive`,\n\t * under the worker's lock; its next hold starts it.\n\t */\n\timportData(archive: string, address: Address, context: Context): Promise<void>;\n\t/** Closes the HTTP component, the workers, the host, the store, the watcher and the data directory's lock. */\n\tclose(context: Context): Promise<void>;\n}\n\n/** What `startWorker` reads from its start data besides the app's: the kit's part. */\nexport type KitStart = {\n\treadonly dir: string;\n\treadonly facet: string;\n\treadonly principal: JsonValue;\n\treadonly server: JsonValue;\n\treadonly files: { readonly maxFile?: number; readonly maxTotal?: number };\n\t/** Whether the server has a telemetry store: the worker then sends what it records to `WorkerTelemetry`. */\n\treadonly telemetry: boolean;\n\t/** The cap of uploads under way per `Files` object (`limits.uploads`). */\n\treadonly uploads?: number;\n\t/** The app's host timeouts (`timeouts`), the worker's host takes them too. */\n\treadonly timeouts: AppTimeouts;\n};\n\n/**\n * Starts the app's server (§1): resolves once its plugins are loaded and it listens. A failing plugin of the app's\n * root (or a problem discovery reports there) rejects with the plugins component's `PluginError`, everything closed.\n * The bases are built right after the listen, from the files as they are then (`basesBuilt`): a page request waits\n * for its surface's, a worker start for its kind's.\n */\nexport async function startServer<P extends Principal>(options: AppOptions<P>, context: Context): Promise<App<P>> {\n\tcheckOwner(options.principal.owner, options.principal.server, context);\n\tconst { layout, cookieSecret, store, lock } = await openServer(\n\t\tresolve(options.dataDir ?? defaultDataDir(options.name)),\n\t\tcontext,\n\t);\n\tconst { onError, api, limits = {} } = options;\n\tconst sessions = createSessions<P>(cookieSecret, { maxEphemeral: limits.ephemeralSessions });\n\tconst { telemetry, principalAttributes } = options;\n\tconst host = createHost<P>({\n\t\taddress: Server(),\n\t\tprincipal: options.principal.server,\n\t\tstore,\n\t\ttelemetry,\n\t\t...(principalAttributes === undefined ? {} : { principalAttributes }),\n\t\t...options.timeouts,\n\t\tonError: (error) => onError({ kind: \"host\", error }),\n\t});\n\tconst http = createHttp(\n\t\thost,\n\t\t{\n\t\t\tlisten: options.listen ?? { host: \"127.0.0.1\", port: 0 },\n\t\t\tlinks: { path: \"/chord\", opened: sessions.opened },\n\t\t\ttelemetry,\n\t\t\tonError: (error) => onError({ kind: \"http\", error }),\n\t\t},\n\t\tcontext,\n\t);\n\tconst plugins = createPlugins(\n\t\t{\n\t\t\troots: [{ path: resolve(options.root ?? \"plugins\"), required: true }, layout.plugins],\n\t\t\tapi: { name: api.name, versions: api.versions },\n\t\t\tkinds: Object.fromEntries(\n\t\t\t\tObject.entries(options.kinds).map(([name, kind]) => [\n\t\t\t\t\tname,\n\t\t\t\t\t{ platform: kind.platform, hostPackages: hostPackagesOf(api, name, kind) },\n\t\t\t\t]),\n\t\t\t),\n\t\t\tinstall: options.install,\n\t\t\t// The server's own base code, hashed now; each base bundle's record is added once built (`watchBase`).\n\t\t\tbase: (options.base ?? []).map((path) => resolve(path)),\n\t\t\tpublicPath: `${WEB_PREFIX}assets/`,\n\t\t\tonError: (error) => onError({ kind: \"plugins\", error }),\n\t\t},\n\t\tcontext,\n\t);\n\tconst workers = new Map<string, Workers<HostKind>>();\n\t// The address key of each worker by its principal's key: the principal its link stamps on its telemetry batches.\n\tconst workerHosts = new Map<string, string>();\n\tconst link = new OwnerLink();\n\tconst { owner } = options.principal;\n\tconst core: PluginFacet<P>[] = [\n\t\t{ name: \"chord.http\", facet: http.facet },\n\t\t{\n\t\t\tname: \"chord.app.info\",\n\t\t\tfacet: appInfoFacet({ dataDir: layout.dataDir, name: options.name, version: api.versions[0] ?? \"\", owner }),\n\t\t},\n\t\t{ name: \"chord.app.sessions\", facet: sessions.facet },\n\t\t{ name: \"chord.app.owner\", facet: ownerFacet(link, owner) },\n\t\t{\n\t\t\tname: \"chord.app.pairing\",\n\t\t\tfacet: pairingFacet(\n\t\t\t\tnew Pairings({ maxPending: limits.pendingPairings, perAddress: limits.pairingsPerAddress }),\n\t\t\t\towner,\n\t\t\t),\n\t\t},\n\t\t{ name: \"chord.app.files\", facet: filesFacet(join(layout.server, \"files\"), options.files, limits.uploads) },\n\t\t{ name: \"chord.themes\", facet: themesFacet() },\n\t\t{ name: \"chord.themes.choice\", facet: themeChoiceFacet() },\n\t\t{ name: \"chord.translations\", facet: translationsFacet() },\n\t\t{ name: \"chord.locale.choice\", facet: localeChoiceFacet() },\n\t];\n\tif (telemetry !== undefined) {\n\t\tconst facet = telemetryIngestFacet<P>({\n\t\t\ttarget: telemetry,\n\t\t\tworkerHost: (principal) => workerHosts.get(principalKey(principal, context)),\n\t\t\tprincipalAttributes: (principal) => host.principalAttributes(principal, context),\n\t\t});\n\t\tcore.push({ name: \"chord.telemetry\", facet });\n\t}\n\tconst surfaces: Surface<P>[] = [];\n\tconst app = new RunningApp(host, http, workers, plugins, surfaces, { store, lock }, layout, options);\n\t// What runs after the start reports nothing once the app closes (a build or scan finishing late).\n\tconst report = (error: AppError): void => {\n\t\tif (!app.closing()) onError(error);\n\t};\n\ttry {\n\t\tfor (const kind of options.workers ?? []) {\n\t\t\tworkers.set(kind.kind.kind, workersOf(host, kind, options, layout, plugins, workerHosts, context));\n\t\t}\n\t\tfor (const surface of surfacesOf(host, options, plugins)) {\n\t\t\tsurfaces.push(surface);\n\t\t\tcore.push({ name: `chord.${surface.name}`, facet: surface.surface.facet });\n\t\t}\n\t\tawait plugins.load(host, { kind: \"server\", core, modules: modulesOf(api, options.kinds.server) }, context);\n\t\tawait ownerTokenFile(layout.ownerToken, owner, host, context);\n\t\tconst listening = await http.listening(context);\n\t\tconst bases = [\n\t\t\t...surfaces.map(({ name, surface }) => ({ name, build: () => surface.build() })),\n\t\t\t...[...workers].map(([name, each]) => ({ name, build: () => each.build() })),\n\t\t];\n\t\tconst compared: Promise<void>[] = [];\n\t\tconst built = buildBases(bases, plugins, compared, report, () => app.closing());\n\t\tconst watching = watchBaseCode(plugins, built, compared, report, () => app.closing());\n\t\tapp.started(link.renew(), listening, built, watching);\n\t} catch (error) {\n\t\tawait app.close(context);\n\t\tthrow error;\n\t}\n\treturn app;\n}\n\n/**\n * Refuses an owner the kit could not recognize or that would act as the server (a declaration policy the types cannot\n * express): sessions keep the owner as JSON, so a field `undefined` (or anything else not strict JSON) would never\n * match it again; the server's principal reaches every worker's kit objects.\n */\nfunction checkOwner<P extends Principal>(owner: P, server: P, context: Context): void {\n\tif (!isJsonValue(owner)) {\n\t\tthrow new Error(\n\t\t\t\"startServer: principal.owner must be strict JSON (no undefined fields, functions or class instances)\",\n\t\t);\n\t}\n\tif (samePrincipal(owner, server, context)) {\n\t\tthrow new Error(\"startServer: principal.owner must not be the server's principal\");\n\t}\n}\n\n/** A base the kit builds after the listen: its name in reports, its build. */\ntype Base = { readonly name: string; build(): Promise<SurfaceBuilt | WorkersBuilt> };\n\n/**\n * Builds every base right after the listen, at once, from the files as they are now (owner decision \"A\": nothing is\n * kept between starts; the server answers meanwhile, each request needing a base waits for it). A built base's record\n * is added to what `plugins` compares (its first comparisons pushed to `compared`); a failed one is reported\n * (`base_build`) and the server runs on. Settles once every build ended; what ends after the close is dropped.\n */\nasync function buildBases(\n\tbases: readonly Base[],\n\tplugins: Plugins,\n\tcompared: Promise<void>[],\n\treport: (error: AppError) => void,\n\tclosed: () => boolean,\n): Promise<void> {\n\tawait Promise.all(\n\t\tbases.map(async ({ name, build }) => {\n\t\t\tconst built = await build();\n\t\t\tif (closed()) return;\n\t\t\tif (built.kind === \"failed\") report({ kind: \"base_build\", base: name, error: built.error });\n\t\t\telse compared.push(plugins.watchBase(built.inputs));\n\t\t}),\n\t);\n}\n\n/**\n * Adds the server's own code to what `plugins` compares, once the bases are built (`built`; the scan's reads would\n * contend with the builds the first requests wait for): the static graph of its entry (the start script;\n * `nodeBaseInputs`; a file changed since the process started is recorded as differing, `editedSinceStart`). Best\n * effort: a failed scan is reported (`server_scan`) and that code not compared. An entry under `node_modules` is\n * installed code (an npm-installed app, a test runner), never compared. Settles once every record's first comparison\n * did (the bases' in `compared` too: `base` knows them all). A close meanwhile ends it at its next step; a scan stalled\n * on a read keeps it pending until the read ends (the close does not wait for it; its result is dropped).\n */\nasync function watchBaseCode(\n\tplugins: Plugins,\n\tbuilt: Promise<void>,\n\tcompared: Promise<void>[],\n\treport: (error: AppError) => void,\n\tclosed: () => boolean,\n): Promise<void> {\n\tawait built;\n\tif (closed()) return;\n\tconst entry = process.argv[1];\n\tif (entry !== undefined && !entry.split(sep).includes(\"node_modules\")) {\n\t\tconst conditions = processConditions(process.execArgv, process.env.NODE_OPTIONS);\n\t\tconst scanned = await nodeBaseInputs(entry, conditions).then(\n\t\t\t(inputs) => inputs,\n\t\t\t(error: unknown) => report({ kind: \"server_scan\", error }),\n\t\t);\n\t\tif (closed()) return;\n\t\tif (scanned !== undefined) compared.push(plugins.watchBase(editedSinceStart(scanned)));\n\t}\n\tawait Promise.all(compared);\n}\n\n/** What the scan records for a file changed since the process started: a hash no bytes have. */\nconst EDITED_SINCE_START = \"changed since the server started\";\n\n/** How far in the future a file's timestamp may be and still count as an edit since the start: clock skew. */\nconst FUTURE_SLACK_MS = 5_000;\n\n/**\n * The scan's record `inputs` with every file changed since this process started (its mtime or ctime after\n * `performance.timeOrigin`) recorded as differing: Node may have loaded other bytes than the scan read, so its first\n * comparison marks `base` (until a restart: the bytes Node loaded are unknown). Conservative: an edit Node loaded\n * anyway (made during the module loading, before the file was read) or a change of metadata only (ctime) marks too.\n * Per timestamp: one later than now (plus `FUTURE_SLACK_MS`) is no edit since the start (a file stamped in the future,\n * by a skewed clock or an archive, would mark every start until that time); a file neither of whose timestamps is in\n * range keeps its hash, compared by content alone.\n */\nfunction editedSinceStart(inputs: BaseInputs): BaseInputs {\n\tconst started = performance.timeOrigin;\n\tconst latest = Date.now() + FUTURE_SLACK_MS;\n\treturn new Map(\n\t\t[...inputs].map(([path, hash]) => {\n\t\t\ttry {\n\t\t\t\tconst { mtimeMs, ctimeMs } = statSync(path);\n\t\t\t\tconst edited = [mtimeMs, ctimeMs].some((time) => time > started && time <= latest);\n\t\t\t\treturn [path, edited ? EDITED_SINCE_START : hash];\n\t\t\t} catch {\n\t\t\t\t// Gone: its first comparison finds it so.\n\t\t\t\treturn [path, hash];\n\t\t\t}\n\t\t}),\n\t);\n}\n\n/** A client surface of the app and its name (`web`, `tui`). */\ntype Surface<P extends Principal> = { readonly name: \"web\" | \"tui\"; readonly surface: WebSurface<P> | TuiSurface<P> };\n\n/** The app's client surfaces, in order: the web's, the terminal's (their base bundles built after the listen). */\nfunction surfacesOf<P extends Principal>(host: Host<P>, options: AppOptions<P>, plugins: Plugins): Surface<P>[] {\n\tconst surfaces: Surface<P>[] = [];\n\tif (options.web !== undefined)\n\t\tsurfaces.push({ name: \"web\", surface: webSurface(host, { ...options.web, plugins }) });\n\tif (options.tui !== undefined)\n\t\tsurfaces.push({ name: \"tui\", surface: tuiSurface(host, { ...options.tui, plugins }) });\n\treturn surfaces;\n}\n\n/** How long a second server waits for the data directory's lock before it is refused. */\nconst SERVER_LOCK_MS = 1000;\n\n/**\n * The server's own part of the data directory `path`: its lock (one server per data directory, by its real path: a\n * second one, also through a symbolic link, would share its stores and secrets), the layout made private, the cookie\n * secret and the server's store; the lock released when the rest fails.\n */\nasync function openServer(\n\tpath: string,\n\tcontext: Context,\n): Promise<{ layout: AppLayout; cookieSecret: string; store: Store; lock: ProcessLock }> {\n\tconst dataDir = await openDataDir(path);\n\tconst waited = AbortSignal.timeout(SERVER_LOCK_MS);\n\tconst lock = await processLock(`chord-app:${dataDir}`, withAbortSignal(waited, context)).catch((error: unknown) => {\n\t\tthrow waited.aborted ? new Error(`startServer: another server runs on ${dataDir}`) : error;\n\t});\n\ttry {\n\t\tconst layout = await createLayout(dataDir);\n\t\tconst cookieSecret = await secretFile(layout.cookieSecret);\n\t\tawait privateStore(layout.serverStore);\n\t\tconst store = await openStore(sqliteBackend(await openNodeSqliteDatabase(layout.serverStore)), context);\n\t\treturn { layout, cookieSecret, store, lock };\n\t} catch (error) {\n\t\tawait lock.release();\n\t\tthrow error;\n\t}\n}\n\n/** The host packages of kind `name`: the API's shared and per-kind module of every version, and its packages. */\nfunction hostPackagesOf(api: AppApi, name: string, kind: AppKind): string[] {\n\tconst modules = api.versions.flatMap((version) => [`${api.name}/${version}`, `${api.name}/${version}/${name}`]);\n\treturn [...modules, ...Object.keys(kind.packages ?? {})];\n}\n\n/** This process's modules for a kind: the API's and the kind's packages. */\nfunction modulesOf(api: AppApi, kind: AppKind | undefined): HostPackages {\n\treturn { ...api.modules, ...kind?.packages };\n}\n\n/**\n * The workers component of one worker kind (its base built after the listen, into the kind's directory under\n * `cache/workers/`): started with the kit's part of the start data beside the app's.\n */\nfunction workersOf<P extends Principal>(\n\thost: Host<P>,\n\tkind: AppWorkerKind<P>,\n\toptions: AppOptions<P>,\n\tlayout: AppLayout,\n\tplugins: Plugins,\n\tworkerHosts: Map<string, string>,\n\tcontext: Context,\n): Workers<HostKind> {\n\tconst { dataDir } = layout;\n\tconst facet = kind.facet ?? \"worker\";\n\t// `AppOptions` admits worker kinds only with `principal.worker`.\n\tconst worker = options.principal.worker as (address: Address) => P;\n\tconst { server } = options.principal;\n\treturn createWorkers(\n\t\thost,\n\t\t// A host kind of the app: any params; its addresses come back from its route as the kit hands them on.\n\t\tkind.kind as HostKind,\n\t\t{\n\t\t\tkind: facet,\n\t\t\tentry: kind.entry,\n\t\t\t...(kind.execArgv === undefined ? {} : { execArgv: kind.execArgv }),\n\t\t\t...(kind.env === undefined ? {} : { env: kind.env }),\n\t\t\tbaseDir: join(layout.workerBases, kind.kind.kind),\n\t\t\tcompileCache: layout.compileCache,\n\t\t\t// The server reaches its workers' kit objects (`HostData`) whatever the app admits.\n\t\t\tauthorize: (principal, address) =>\n\t\t\t\tsamePrincipal(principal, server, context) || kind.authorize(principal, address),\n\t\t\tprincipal: worker,\n\t\t\tstart: async (address, ctx) => {\n\t\t\t\tconst principal = worker(address);\n\t\t\t\tworkerHosts.set(principalKey(principal, ctx), address.key);\n\t\t\t\tconst kit: KitStart = {\n\t\t\t\t\tdir: workerDirectory(dataDir, address),\n\t\t\t\t\tfacet,\n\t\t\t\t\t// Principals are JSON (they cross links).\n\t\t\t\t\tprincipal: principal as unknown as JsonValue,\n\t\t\t\t\tserver: server as unknown as JsonValue,\n\t\t\t\t\tfiles: { ...options.files },\n\t\t\t\t\ttelemetry: options.telemetry !== undefined,\n\t\t\t\t\t...(options.limits?.uploads === undefined ? {} : { uploads: options.limits.uploads }),\n\t\t\t\t\ttimeouts: { ...options.timeouts },\n\t\t\t\t};\n\t\t\t\treturn { kit, app: await kind.start(address, ctx) };\n\t\t\t},\n\t\t\tlock: (address) => workerLock(options.name, dataDir, address),\n\t\t\t...(kind.idleMs === undefined ? {} : { idleMs: kind.idleMs }),\n\t\t\tplugins,\n\t\t\tonError: (error) => options.onError({ kind: \"workers\", error }),\n\t\t},\n\t\tcontext,\n\t);\n}\n\n/** The process lock of the worker at `address`: its worker holds it while it runs, an export or import meanwhile. */\nfunction workerLock(name: string, dataDir: string, address: Address): string {\n\treturn `${name}:${dataDir}:${address.key}`;\n}\n\n/** How long an export or import waits for a worker's lock: past it a worker holds it (it runs or starts). */\nconst ADDRESS_LOCK_MS = 2000;\n\n/** The host of the owner link for the address listened on: loopback for a wildcard, an IPv6 address in brackets. */\nfunction linkHost(host: string): string {\n\tif (host === \"0.0.0.0\" || host === \"\") return \"127.0.0.1\";\n\tif (host === \"::\") return \"[::1]\";\n\treturn host.includes(\":\") ? `[${host}]` : host;\n}\n\nclass RunningApp<P extends Principal> implements App<P> {\n\treadonly host: Host<P>;\n\treadonly http: HttpComponent<P>;\n\treadonly workers: ReadonlyMap<string, Workers<HostKind>>;\n\treadonly plugins: AppPlugins;\n\treadonly dataDir: string;\n\treadonly ownerTokenFile: string;\n\treadonly #component: Plugins;\n\t/** The client surfaces, filled before the server's load. */\n\treadonly #surfaces: readonly Surface<P>[];\n\treadonly #store: Store;\n\treadonly #lock: ProcessLock;\n\treadonly #options: AppOptions<P>;\n\t#link = \"\";\n\t/** The bases' builds after the start (`buildBases`). */\n\t#building: Promise<void> = Promise.resolve();\n\t/** The recording of the base code after the start (`watchBaseCode`). */\n\t#scanning: Promise<void> = Promise.resolve();\n\t#closing: Promise<void> | undefined;\n\t/** The latest `applyChanges`, settled to nothing: the next one starts after it. */\n\t#applying: Promise<void> = Promise.resolve();\n\n\tconstructor(\n\t\thost: Host<P>,\n\t\thttp: HttpComponent<P>,\n\t\tworkers: ReadonlyMap<string, Workers<HostKind>>,\n\t\tplugins: Plugins,\n\t\tsurfaces: readonly Surface<P>[],\n\t\tserver: { readonly store: Store; readonly lock: ProcessLock },\n\t\tlayout: { readonly dataDir: string; readonly plugins: string; readonly ownerToken: string },\n\t\toptions: AppOptions<P>,\n\t) {\n\t\tthis.host = host;\n\t\tthis.http = http;\n\t\tthis.workers = workers;\n\t\tthis.#component = plugins;\n\t\tthis.#surfaces = surfaces;\n\t\tthis.#store = server.store;\n\t\tthis.#lock = server.lock;\n\t\tthis.#options = options;\n\t\tthis.dataDir = layout.dataDir;\n\t\tthis.ownerTokenFile = layout.ownerToken;\n\t\tthis.plugins = {\n\t\t\tstate: plugins.state,\n\t\t\tinstall: (source, context) => plugins.installPlugin(source, layout.plugins, context),\n\t\t\tcomponent: plugins,\n\t\t};\n\t}\n\n\t/**\n\t * The start finished: the owner link's token and the address it names (the one listened on), the bases' builds and\n\t * the recording of the base code under way (`basesBuilt`, `baseWatched`).\n\t */\n\tstarted(token: string, listening: ListenAddress, building: Promise<void>, scanning: Promise<void>): void {\n\t\tthis.#link = `http://${linkHost(listening.host)}:${listening.port}${OWNER_PATH}#${token}`;\n\t\tthis.#building = building;\n\t\tthis.#scanning = scanning;\n\t}\n\n\townerLink(): string {\n\t\treturn this.#link;\n\t}\n\n\tget basesBuilt(): Promise<void> {\n\t\treturn this.#building;\n\t}\n\n\tget baseWatched(): Promise<void> {\n\t\treturn this.#scanning;\n\t}\n\n\tget web(): { readonly base: string | undefined } | undefined {\n\t\treturn this.#surfaceBase(\"web\");\n\t}\n\n\tget tui(): { readonly base: string | undefined } | undefined {\n\t\treturn this.#surfaceBase(\"tui\");\n\t}\n\n\t/** The surface `name`'s base hash once built, when the app has that surface. */\n\t#surfaceBase(name: \"web\" | \"tui\"): { readonly base: string | undefined } | undefined {\n\t\tconst found = this.#surfaces.find((each) => each.name === name);\n\t\tif (found === undefined) return undefined;\n\t\tconst { built } = found.surface;\n\t\treturn { base: built?.kind === \"built\" ? built.base : undefined };\n\t}\n\n\tapplyChanges(context: Context): Promise<RolloutResult> {\n\t\t// One build and rollout at a time: a later build rolled out before an earlier one would leave the older code\n\t\t// deployed (each host applies the last set it is handed).\n\t\tconst applied = this.#applying.then(() => this.#applyChanges(context));\n\t\tthis.#applying = applied.then(\n\t\t\t() => {},\n\t\t\t() => {},\n\t\t);\n\t\treturn applied;\n\t}\n\n\t/** One build of the dirty plugins and its rollout: the server, every worker kind, then the clients. */\n\tasync #applyChanges(context: Context): Promise<RolloutResult> {\n\t\tconst plugins = this.#component;\n\t\tconst built = await plugins.build(plugins.state.value.dirty, context);\n\t\tconst steps = [\n\t\t\tplugins.step(\"server\", this.host),\n\t\t\t...[...this.workers].map(([name, each]) => each.step(name)),\n\t\t\t...this.#surfaces.map(({ name, surface }) => surface.step(name)),\n\t\t];\n\t\treturn plugins.rollout(steps, built, context);\n\t}\n\n\tasync exportData(address: Address, path: string, context: Context): Promise<void> {\n\t\tconst workers = this.#workersOf(address);\n\t\tconst manifest = this.#manifest(address);\n\t\tconst target = resolve(path);\n\t\t// Running: the worker packs its own store. Else the lock, unless a worker starts first: then ask it.\n\t\tfor (let attempt = 1; ; attempt++) {\n\t\t\tif (workers.state.value[address.key]?.status === \"running\") {\n\t\t\t\tconst data = await this.host.get(HostData, { address: addressParam(address) }, context);\n\t\t\t\ttry {\n\t\t\t\t\tawait data.exportTo({ path: target, manifest: JSON.stringify(manifest) }, context);\n\t\t\t\t} finally {\n\t\t\t\t\tdata.release();\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst lock = await this.#workerLock(address, context);\n\t\t\tif (lock !== undefined) {\n\t\t\t\ttry {\n\t\t\t\t\tawait packData(workerDirectory(this.dataDir, address), manifest, target, context);\n\t\t\t\t} finally {\n\t\t\t\t\tawait lock.release();\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (attempt === 5) throw new Error(`exportData: the worker at ${address.key} keeps starting; try again`);\n\t\t}\n\t}\n\n\tasync importData(archive: string, address: Address, context: Context): Promise<void> {\n\t\tthis.#workersOf(address);\n\t\tconst { name, limits = {} } = this.#options;\n\t\tconst accept = (manifest: ArchiveManifest): void => {\n\t\t\t// A trust boundary: an archive from anywhere.\n\t\t\tif (manifest?.format !== ARCHIVE_FORMAT) throw new Error(`importData: not a format ${ARCHIVE_FORMAT} archive`);\n\t\t\tif (manifest.app !== name) throw new Error(`importData: an archive of \"${manifest.app}\", not \"${name}\"`);\n\t\t};\n\t\tconst lock = await this.#workerLock(address, context);\n\t\t// A worker holds it: it runs, so the address has data, and nothing is overwritten.\n\t\tif (lock === undefined) throw new Error(`importData: ${address.key} has data (its worker runs)`);\n\t\ttry {\n\t\t\tconst bounds = { bytes: limits.importBytes, entries: limits.importEntries };\n\t\t\tawait unpackData(resolve(archive), workerDirectory(this.dataDir, address), accept, bounds, context);\n\t\t} finally {\n\t\t\tawait lock.release();\n\t\t}\n\t}\n\n\t/** The process lock of the worker at `address` (the one its worker takes at start), or `undefined` while held. */\n\tasync #workerLock(address: Address, context: Context): Promise<ProcessLock | undefined> {\n\t\tconst waited = AbortSignal.timeout(ADDRESS_LOCK_MS);\n\t\ttry {\n\t\t\treturn await processLock(\n\t\t\t\tworkerLock(this.#options.name, this.dataDir, address),\n\t\t\t\twithAbortSignal(waited, context),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (waited.aborted) return undefined;\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tclose(context: Context): Promise<void> {\n\t\tthis.#closing ??= this.#close(context);\n\t\treturn this.#closing;\n\t}\n\n\t/** The workers of `address`'s kind. */\n\t#workersOf(address: Address): Workers<HostKind> {\n\t\tconst workers = this.workers.get(address.kind);\n\t\tif (workers === undefined) throw new Error(`app: no worker kind \"${address.kind}\"`);\n\t\treturn workers;\n\t}\n\n\t/** The manifest of `address`'s archive. */\n\t#manifest(address: Address): ArchiveManifest {\n\t\tconst { name, api } = this.#options;\n\t\treturn {\n\t\t\tformat: ARCHIVE_FORMAT,\n\t\t\tapp: name,\n\t\t\tapi: api.versions[0] ?? \"\",\n\t\t\taddress: { kind: address.kind, key: address.key },\n\t\t};\n\t}\n\n\t/** Whether the app is closing or closed: what runs after the start stops there. */\n\tclosing(): boolean {\n\t\treturn this.#closing !== undefined;\n\t}\n\n\t/**\n\t * The close, in order: HTTP (it drains requests the host's close would seal), workers, host, store, the plugins'\n\t * watcher, then the data directory's lock. The bases' builds and the recording of the base code are not waited for:\n\t * what they finish after the close is dropped.\n\t */\n\tasync #close(context: Context): Promise<void> {\n\t\tawait this.http.close(context);\n\t\tfor (const workers of this.workers.values()) await workers.close(context);\n\t\tawait this.host.close(context);\n\t\tawait this.#store.close(context);\n\t\tthis.#component.close();\n\t\tawait this.#lock.release();\n\t}\n}\n"]}