@elaraai/e3-rack 0.0.0-bootstrap.0 → 1.0.94

package/dist/src/testing/test-rack-agent.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { type EastType, type ValueTypeOf } from '@elaraai/east';
+import { RackCompleteResponseType, RackHeartbeatResponseType, RackStorageResponseType, type RackLeaseGrant, type RackLeaseRef, type RackLogChunk, type RackStorageRequest } from '../protocol/rack-wire.js';
+import type { RackLeaseResult } from '../protocol/task-envelope.js';
+/** Configures deterministic failures of an in-process protocol peer. */
+export interface TestRackAgentFaults {
+    /** Completes this many claims with an infrastructure failure, without an exit code. */
+    infraFailNext?: number;
+    /** Completes this many claims with exit code 1 without executing the task. */
+    taskFailNext?: number;
+    /** Holds this many claims silently until the agent stops. */
+    hangNext?: number;
+    /** Executes this many claims but never posts their completion. */
+    dropCompletionNext?: number;
+    /** Delays every claim request. */
+    claimDelayMs?: number;
+}
+/** Configures a protocol peer backed by a real local runner repository. */
+export interface TestRackAgentOptions {
+    /** Origin hosting /api/rack. */
+    apiUrl: string;
+    /** Transports control requests and object transfers. */
+    fetch?: typeof fetch;
+    /** Pins a TLS hub's certificate by its SHA-256, as a worker does; ignored when fetch is given. */
+    certificateSha256?: string;
+    /** Advertises supported runner tiers. */
+    tiers?: string[];
+    /** Limits concurrent executions. */
+    capacity?: number;
+    /** Labels the rack registration. */
+    label?: string;
+    /** Reports the agent and bundled e3 version. */
+    agentVersion?: string;
+    /** Holds the isolated scratch repository in its repo subdirectory. */
+    workDir: string;
+    /** Overrides heartbeat and lease-extension intervals. */
+    timings?: {
+        heartbeatMs?: number;
+        extendMs?: number;
+    };
+    /** Consumes counters in place, permitting faults to be armed during a test. */
+    faults?: TestRackAgentFaults;
+}
+/**
+ * Exercises the real rack HTTP protocol over an isolated local runner store.
+ * It runs e3-core task/unit execution instead of a microVM; it is not a
+ * security or isolation boundary, or a substitute for the pinned e3-cloud agent's VM/installer acceptance test.
+ * Every input travels through storage descriptors and every output through
+ * checksum-bound PUTs and per-object commits.
+ * @example
+ * const agent = await TestRackAgent.enroll(origin, token);
+ * await agent.runOne();
+ * await agent.close();
+ */
+export declare class TestRackAgent {
+    private readonly options;
+    /** Stable identity assigned by enrollment. */
+    rackId: string;
+    /** Boot identity reported in every poll and heartbeat. */
+    readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
+    /** Runs against a separate repository, like the guest's staged store. */
+    readonly repo: string;
+    /** Consumes deterministic faults before executing each claim. */
+    readonly faults: TestRackAgentFaults;
+    private readonly storage;
+    private token;
+    private readonly abort;
+    private readonly transport;
+    private readonly tiers;
+    private readonly version;
+    private readonly capacity;
+    private readonly active;
+    private loop;
+    private loopError;
+    private temporaryHome;
+    /** Creates an unenrolled peer; enroll before starting its claim loop.
+     * @param options - Transport, scratch directory, capacity and deterministic faults.
+     */
+    constructor(options: TestRackAgentOptions);
+    /** Enrolls one protocol peer with an automatically cleaned temporary store. */
+    static enroll(origin: string, enrollmentToken: string, options?: Omit<TestRackAgentOptions, 'apiUrl' | 'workDir' | 'agentVersion'> & {
+        version?: string;
+    }): Promise<TestRackAgent>;
+    /** Consumes a single-use token and publishes this boot's health.
+     * @param enrollmentToken - Token minted by the control plane.
+     */
+    enroll(enrollmentToken: string): Promise<void>;
+    /** Starts long-polling while slots are free; stop drains all active runners. */
+    start(): void;
+    private poll;
+    /** Posts a typed agent request with a finite transport deadline. */
+    raw<T extends EastType>(path: string, type: T, value: ValueTypeOf<T>): Promise<Response>;
+    /** Decodes one standard response, raising its typed error. */
+    post<Req extends EastType, Res extends EastType>(path: string, type: Req, value: ValueTypeOf<Req>, responseType: Res): Promise<ValueTypeOf<Res>>;
+    /** Reports health and returns the leases the hub asks this agent to stop. */
+    heartbeat(runningLeases?: RackLeaseRef[]): Promise<ValueTypeOf<typeof RackHeartbeatResponseType>>;
+    /** Claims a lease, or answers null after an idle poll window. */
+    claim(): Promise<RackLeaseGrant | null>;
+    /** Resolves storage descriptors and write receipts for a held lease. */
+    storageRequest(lease: RackLeaseRef, request?: Partial<Omit<RackStorageRequest, 'repo' | 'leaseId'>>): Promise<ValueTypeOf<typeof RackStorageResponseType>>;
+    /** Streams an ordered log batch through the rack endpoint. */
+    logs(lease: RackLeaseRef, chunks: RackLogChunk[]): Promise<boolean>;
+    /** Posts an outcome without hiding accepted-and-discarded semantics. */
+    complete(lease: RackLeaseRef, result: RackLeaseResult): Promise<ValueTypeOf<typeof RackCompleteResponseType>>;
+    /** Fetches a closure through inline descriptors or capability URLs. */
+    private fetchObjects;
+    /** Executes one claimed task/unit with the production core over the fetched closure. */
+    execute(lease: RackLeaseGrant): Promise<RackLeaseResult>;
+    private consume;
+    private executeClaim;
+    /** Claims and executes the next task. */
+    runOne(): Promise<RackLeaseResult | null>;
+    /** Aborts requests and removes the isolated guest store. */
+    close(): Promise<void>;
+    /** Stops polling, aborts active executions and waits for runner cleanup. */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=test-rack-agent.d.ts.map

package/dist/src/testing/test-rack-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-rack-agent.d.ts","sourceRoot":"","sources":["../../../src/testing/test-rack-agent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAA0E,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAOxI,OAAO,EAA2B,wBAAwB,EACP,yBAAyB,EAC7B,uBAAuB,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAC5G,KAAK,YAAY,EAAyB,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACtG,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpF,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,+EAA+E;IAC/E,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;IAwBZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAvBpC,8CAA8C;IAC9C,MAAM,SAAM;IACZ,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,sDAAgB;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,KAAK,CAAM;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsH;IAC7I,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,aAAa,CAAqB;IAE1C;;OAEG;gBAC0B,OAAO,EAAE,oBAAoB;IAa1D,+EAA+E;WAClE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EACzD,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,SAAS,GAAG,cAAc,CAAC,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAQjI;;OAEG;IACG,MAAM,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpD,gFAAgF;IAChF,KAAK,IAAI,IAAI;YAMC,IAAI;IAclB,oEAAoE;IAC9D,GAAG,CAAC,CAAC,SAAS,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAM9F,8DAA8D;IACxD,IAAI,CAAC,GAAG,SAAS,QAAQ,EAAE,GAAG,SAAS,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAQtJ,6EAA6E;IACvE,SAAS,CAAC,aAAa,GAAE,YAAY,EAA2F,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAC;IAQ/L,iEAAiE;IAC3D,KAAK,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAU7C,wEAAwE;IACxE,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC,CAAM,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;IAK9J,8DAA8D;IAC9D,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;IAIhD,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAK7G,uEAAuE;YACzD,YAAY;IAiB1B,wFAAwF;IACxF,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAQxD,OAAO,CAAC,OAAO;YAOD,YAAY;IAgE1B,yCAAyC;IACnC,MAAM,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAE/C,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,4EAA4E;IACtE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAM5B"}

package/dist/src/testing/test-rack-agent.js

@@ -0,0 +1,316 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { randomUUID } from 'node:crypto';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { BooleanType, decodeBeast2For, encodeBeast2For, none, printFor, variant } from '@elaraai/east';
+import { BEAST2_CONTENT_TYPE, ErrorType, ResponseType } from '@elaraai/e3-types';
+import { LocalStorage, gcObjectReaders, markReachable, repoInit, taskExecute, taskExecuteUnit } from '@elaraai/e3-core';
+import { closureHashes } from '../lease/closure.js';
+import { decodeRunnerEvent, splitUnitFromWire } from '../runner-event.js';
+import { E3_RACK_VERSION } from '../version.js';
+import { pinnedFetch } from '../tls/tls.js';
+import { RackCompleteRequestType, RackCompleteResponseType, RackEnrollRequestType, RackEnrollResponseType, RackExtendRequestType, RackHeartbeatRequestType, RackHeartbeatResponseType, RackLeaseGrantType, RackLeaseRequestType, RackLogsRequestType, RackStorageRequestType, RackStorageResponseType } from '../protocol/rack-wire.js';
+/**
+ * Exercises the real rack HTTP protocol over an isolated local runner store.
+ * It runs e3-core task/unit execution instead of a microVM; it is not a
+ * security or isolation boundary, or a substitute for the pinned e3-cloud agent's VM/installer acceptance test.
+ * Every input travels through storage descriptors and every output through
+ * checksum-bound PUTs and per-object commits.
+ * @example
+ * const agent = await TestRackAgent.enroll(origin, token);
+ * await agent.runOne();
+ * await agent.close();
+ */
+export class TestRackAgent {
+    options;
+    /** Stable identity assigned by enrollment. */
+    rackId = '';
+    /** Boot identity reported in every poll and heartbeat. */
+    bootId = randomUUID();
+    /** Runs against a separate repository, like the guest's staged store. */
+    repo;
+    /** Consumes deterministic faults before executing each claim. */
+    faults;
+    storage = new LocalStorage();
+    token = '';
+    abort = new AbortController();
+    transport;
+    tiers;
+    version;
+    capacity;
+    active = new Map();
+    loop;
+    loopError;
+    temporaryHome;
+    /** Creates an unenrolled peer; enroll before starting its claim loop.
+     * @param options - Transport, scratch directory, capacity and deterministic faults.
+     */
+    constructor(options) {
+        this.options = options;
+        this.repo = join(options.workDir, 'repo');
+        this.transport = options.fetch ?? (options.certificateSha256 === undefined ? fetch : pinnedFetch(options.certificateSha256));
+        this.tiers = options.tiers ?? ['node'];
+        this.version = options.agentVersion ?? `0.5.0+e3.${E3_RACK_VERSION}`;
+        this.capacity = options.capacity ?? 1;
+        if (!Number.isSafeInteger(this.capacity) || this.capacity < 1)
+            throw new Error('Test rack capacity must be a positive integer');
+        for (const ms of [options.timings?.heartbeatMs ?? 15000, options.timings?.extendMs ?? 20000]) {
+            if (!Number.isFinite(ms) || ms <= 0)
+                throw new Error('Test rack intervals must be positive');
+        }
+        this.faults = options.faults ?? {};
+    }
+    /** Enrolls one protocol peer with an automatically cleaned temporary store. */
+    static async enroll(origin, enrollmentToken, options = {}) {
+        const home = await mkdtemp(join(tmpdir(), 'e3a-'));
+        const agent = new TestRackAgent({ ...options, apiUrl: origin, workDir: home, agentVersion: options.version });
+        agent.temporaryHome = home;
+        try {
+            await agent.enroll(enrollmentToken);
+            return agent;
+        }
+        catch (err) {
+            await rm(home, { recursive: true, force: true });
+            throw err;
+        }
+    }
+    /** Consumes a single-use token and publishes this boot's health.
+     * @param enrollmentToken - Token minted by the control plane.
+     */
+    async enroll(enrollmentToken) {
+        if (this.token)
+            throw new Error('Test rack is already enrolled');
+        if (!repoInit(this.repo).success)
+            throw new Error('Could not initialize test rack repository');
+        const enrolled = await this.post('enroll', RackEnrollRequestType, { enrollmentToken,
+            hostInfo: { label: this.options.label ?? 'test rack', tiers: this.tiers, capacity: BigInt(this.capacity), agentVersion: this.version } }, RackEnrollResponseType);
+        this.rackId = enrolled.rackId;
+        this.token = enrolled.rackToken;
+        await this.heartbeat();
+    }
+    /** Starts long-polling while slots are free; stop drains all active runners. */
+    start() {
+        if (!this.token || this.abort.signal.aborted)
+            throw new Error('Test rack must be enrolled and not stopped');
+        if (this.loop)
+            return;
+        this.loop = this.poll().catch((error) => { if (!this.abort.signal.aborted)
+            this.loopError = error; this.abort.abort(); });
+    }
+    async poll() {
+        const heartbeat = setInterval(() => { void this.heartbeat().catch(() => this.abort.abort()); }, this.options.timings?.heartbeatMs ?? 15000);
+        try {
+            while (!this.abort.signal.aborted) {
+                if (this.active.size >= this.capacity) {
+                    await Promise.race([...this.active.values()].map((value) => value.done));
+                    continue;
+                }
+                const lease = await this.claim();
+                if (lease)
+                    void this.execute(lease).catch((error) => {
+                        if (!this.abort.signal.aborted)
+                            this.loopError = error;
+                        this.abort.abort();
+                    });
+            }
+        }
+        finally {
+            clearInterval(heartbeat);
+        }
+    }
+    /** Posts a typed agent request with a finite transport deadline. */
+    async raw(path, type, value) {
+        return this.transport(`${this.options.apiUrl}/api/rack/${path}`, { method: 'POST',
+            headers: { 'content-type': BEAST2_CONTENT_TYPE, ...(this.token ? { authorization: `Bearer ${this.token}` } : {}) },
+            body: encodeBeast2For(type)(value), signal: AbortSignal.any([this.abort.signal, AbortSignal.timeout(25000)]) });
+    }
+    /** Decodes one standard response, raising its typed error. */
+    async post(path, type, value, responseType) {
+        const response = await this.raw(path, type, value);
+        if (response.status !== 200)
+            throw new Error(`Rack ${path}: HTTP ${response.status}`);
+        const envelope = decodeBeast2For(ResponseType(responseType))(new Uint8Array(await response.arrayBuffer()));
+        if (envelope.type === 'error')
+            throw new Error(printFor(ErrorType)(envelope.value));
+        return envelope.value;
+    }
+    /** Reports health and returns the leases the hub asks this agent to stop. */
+    async heartbeat(runningLeases = [...this.active.values()].filter((value) => !value.silent).map((value) => value.lease)) {
+        const response = await this.post('heartbeat', RackHeartbeatRequestType, { healthy: true, freeCapacity: BigInt(Math.max(0, this.capacity - Math.max(this.active.size, runningLeases.length))),
+            runningLeases, agentVersion: this.version, bootId: this.bootId, cacheBytes: 0n }, RackHeartbeatResponseType);
+        if (response.rotatedToken.type === 'some')
+            this.token = response.rotatedToken.value;
+        for (const lease of response.stop)
+            this.active.get(lease.leaseId)?.stop.abort();
+        return response;
+    }
+    /** Claims a lease, or answers null after an idle poll window. */
+    async claim() {
+        if (this.faults.claimDelayMs)
+            await delay(this.faults.claimDelayMs, undefined, { signal: this.abort.signal });
+        const response = await this.raw('lease', RackLeaseRequestType, { tiers: this.tiers, bootId: this.bootId });
+        if (response.status === 204)
+            return null;
+        if (response.status !== 200)
+            throw new Error(`Rack claim: HTTP ${response.status}`);
+        const envelope = decodeBeast2For(ResponseType(RackLeaseGrantType))(new Uint8Array(await response.arrayBuffer()));
+        if (envelope.type === 'error')
+            throw new Error(printFor(ErrorType)(envelope.value));
+        return envelope.value;
+    }
+    /** Resolves storage descriptors and write receipts for a held lease. */
+    storageRequest(lease, request = {}) {
+        return this.post('storage', RackStorageRequestType, { repo: lease.repo, leaseId: lease.leaseId,
+            need: [], output: none, envManifest: none, outputs: [], commits: [], ...request }, RackStorageResponseType);
+    }
+    /** Streams an ordered log batch through the rack endpoint. */
+    logs(lease, chunks) {
+        return this.post('logs', RackLogsRequestType, { repo: lease.repo, leaseId: lease.leaseId, chunks }, BooleanType);
+    }
+    /** Posts an outcome without hiding accepted-and-discarded semantics. */
+    complete(lease, result) {
+        return this.post('complete', RackCompleteRequestType, { repo: lease.repo, leaseId: lease.leaseId,
+            resultJson: JSON.stringify(result), inlineOutput: none, outputUploadId: none }, RackCompleteResponseType);
+    }
+    /** Fetches a closure through inline descriptors or capability URLs. */
+    async fetchObjects(lease, hashes) {
+        for (let from = 0; from < hashes.length; from += 256) {
+            const need = [];
+            for (const hash of hashes.slice(from, from + 256))
+                if (!await this.storage.objects.exists(this.repo, hash))
+                    need.push(hash);
+            if (need.length === 0)
+                continue;
+            const response = await this.storageRequest(lease, { need });
+            for (const object of response.objects) {
+                const bytes = object.type === 'inline' ? object.value.data : await (async () => {
+                    const response = await this.transport(object.value.url, { signal: AbortSignal.any([this.abort.signal, AbortSignal.timeout(30000)]) });
+                    if (!response.ok)
+                        throw new Error(`Rack input GET: HTTP ${response.status}`);
+                    return new Uint8Array(await response.arrayBuffer());
+                })();
+                if (await this.storage.objects.write(this.repo, bytes) !== object.value.hash)
+                    throw new Error('Rack input checksum mismatch');
+            }
+        }
+    }
+    /** Executes one claimed task/unit with the production core over the fetched closure. */
+    execute(lease) {
+        if (this.active.has(lease.leaseId))
+            throw new Error('Test rack lease is already executing');
+        const stop = new AbortController();
+        const done = this.executeClaim(lease, stop).finally(() => { this.active.delete(lease.leaseId); });
+        this.active.set(lease.leaseId, { lease, stop, done, silent: false });
+        return done;
+    }
+    consume(fault) {
+        const count = this.faults[fault] ?? 0;
+        if (count <= 0)
+            return false;
+        this.faults[fault] = count - 1;
+        return true;
+    }
+    async executeClaim(lease, stop) {
+        // Let execute register the active slot before starting callbacks or faults.
+        await Promise.resolve();
+        const event = JSON.parse(lease.eventJson);
+        const signal = AbortSignal.any([stop.signal, this.abort.signal]);
+        if (this.consume('hangNext')) {
+            this.active.get(lease.leaseId).silent = true;
+            await delay(2147483647, undefined, { signal }).catch(() => { });
+            return { taskName: event.taskName, status: 'failed', state: 'error', cancelled: true, error: 'Test rack stopped a silent claim' };
+        }
+        const infra = this.consume('infraFailNext');
+        if (infra || this.consume('taskFailNext')) {
+            const result = { taskName: event.taskName, status: 'failed', state: infra ? 'error' : 'failed',
+                ...(infra ? {} : { exitCode: 1 }), error: infra ? 'Injected infrastructure failure' : 'Injected task failure' };
+            await this.complete(lease, result);
+            return result;
+        }
+        const run = decodeRunnerEvent(event.runnerEvent);
+        if (run.mode !== 'task' && run.mode !== 'unit')
+            throw new Error('Test agent runs tasks and units');
+        const heartbeat = setInterval(() => {
+            void this.heartbeat().catch(() => stop.abort());
+        }, this.options.timings?.heartbeatMs ?? 15000);
+        const extend = setInterval(() => {
+            void this.post('lease/extend', RackExtendRequestType, { repo: lease.repo, leaseId: lease.leaseId }, BooleanType).then((held) => { if (!held)
+                stop.abort(); }).catch(() => stop.abort());
+        }, this.options.timings?.extendMs ?? 20000);
+        heartbeat.unref();
+        extend.unref();
+        const chunks = [];
+        try {
+            if ('object' in event.closure)
+                await this.fetchObjects(lease, [event.closure.object]);
+            await this.fetchObjects(lease, await closureHashes(event.closure, (hash) => this.storage.objects.read(this.repo, hash)));
+            const options = { force: true, signal, timeout: run.timeoutMs, verbose: run.verbose,
+                onStdout: (data) => { chunks.push({ stream: variant('stdout', null), data }); },
+                onStderr: (data) => { chunks.push({ stream: variant('stderr', null), data }); } };
+            const result = run.mode === 'task'
+                ? await taskExecute(this.storage, this.repo, run.taskHash, [...run.inputHashes], options)
+                : await taskExecuteUnit(this.storage, this.repo, run.taskHash, splitUnitFromWire(run.unit), options);
+            if (chunks.length > 0)
+                await this.logs(lease, chunks);
+            if (result.state === 'success' && result.outputHash !== null) {
+                const readers = gcObjectReaders(this.storage, this.repo);
+                const hashes = [...await markReachable(readers.readObject, new Set([result.outputHash]), { readHead: readers.readHead })];
+                for (const hash of hashes) {
+                    const bytes = await this.storage.objects.read(this.repo, hash);
+                    const size = BigInt(bytes.length);
+                    const targets = await this.storageRequest(lease, { outputs: [{ hash, size }] });
+                    const target = targets.targets[0].target;
+                    if (target.type === 'held')
+                        continue;
+                    const put = await this.transport(target.value.url, { method: 'PUT', headers: Object.fromEntries(target.value.headers), body: bytes,
+                        signal: AbortSignal.any([signal, AbortSignal.timeout(30000)]) });
+                    if (!put.ok)
+                        throw new Error(`Rack output PUT: HTTP ${put.status}`);
+                    const version = put.headers.get('x-amz-version-id');
+                    await put.arrayBuffer();
+                    if (version === null)
+                        throw new Error('Rack upload has no receipt');
+                    const commit = { hash, size, version };
+                    if (!(await this.storageRequest(lease, { commits: [commit] })).committed[0]?.committed)
+                        throw new Error('Rack output commit refused');
+                }
+            }
+            const output = { taskName: event.taskName, status: result.state === 'success' ? 'success' : 'failed',
+                state: result.state, ...(result.outputHash === null ? {} : { outputHash: result.outputHash }),
+                ...(result.exitCode == null ? {} : { exitCode: result.exitCode }), ...(result.error == null ? {} : { error: result.error }),
+                ...(result.peakBytes === undefined ? {} : { peakBytes: result.peakBytes }), cancelled: signal.aborted };
+            if (!this.consume('dropCompletionNext') && !this.abort.signal.aborted)
+                await this.complete(lease, output);
+            return output;
+        }
+        finally {
+            clearInterval(heartbeat);
+            clearInterval(extend);
+        }
+    }
+    /** Claims and executes the next task. */
+    async runOne() { const lease = await this.claim(); return lease === null ? null : this.execute(lease); }
+    /** Aborts requests and removes the isolated guest store. */
+    async close() {
+        try {
+            await this.stop();
+        }
+        finally {
+            await rm(this.temporaryHome ?? this.repo, { recursive: true, force: true });
+        }
+    }
+    /** Stops polling, aborts active executions and waits for runner cleanup. */
+    async stop() {
+        this.abort.abort();
+        await this.loop;
+        await Promise.allSettled([...this.active.values()].map((value) => value.done));
+        if (this.loopError)
+            throw this.loopError;
+    }
+}
+//# sourceMappingURL=test-rack-agent.js.map

package/dist/src/testing/test-rack-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-rack-agent.js","sourceRoot":"","sources":["../../../src/testing/test-rack-agent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAmC,MAAM,eAAe,CAAC;AACxI,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,sBAAsB,EACvG,qBAAqB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,oBAAoB,EACpH,mBAAmB,EAAE,sBAAsB,EAAE,uBAAuB,EACD,MAAM,0BAA0B,CAAC;AAyCtG;;;;;;;;;;GAUG;AACH,MAAM,OAAO,aAAa;IAwBK;IAvB7B,8CAA8C;IAC9C,MAAM,GAAG,EAAE,CAAC;IACZ,0DAA0D;IACjD,MAAM,GAAG,UAAU,EAAE,CAAC;IAC/B,yEAAyE;IAChE,IAAI,CAAS;IACtB,iEAAiE;IACxD,MAAM,CAAsB;IACpB,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IACtC,KAAK,GAAG,EAAE,CAAC;IACF,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9B,SAAS,CAAe;IACxB,KAAK,CAAW;IAChB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,MAAM,GAAG,IAAI,GAAG,EAA2G,CAAC;IACrI,IAAI,CAA4B;IAChC,SAAS,CAAU;IACnB,aAAa,CAAqB;IAE1C;;OAEG;IACH,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,YAAY,eAAe,EAAE,CAAC;QACrE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAChI,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,IAAI,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,+EAA+E;IAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,eAAuB,EACzD,UAAoG,EAAE;QACtG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9G,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,MAAM,GAAG,CAAC;QAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,eAAuB;QAClC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,eAAe;YACjF,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACpK,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/D,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,gFAAgF;IAChF,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5G,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC,CAAC;QAC5I,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC9H,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,KAAK;oBAAE,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBAC3D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;4BAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;wBACvD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACrB,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IACzC,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,GAAG,CAAqB,IAAY,EAAE,IAAO,EAAE,KAAqB;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM;YAC/E,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAClH,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,IAAI,CAA6C,IAAY,EAAE,IAAS,EAAE,KAAuB,EAAE,YAAiB;QACxH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3G,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,SAAS,CAAC,gBAAgC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QACpI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1L,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC/G,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,MAAM;YAAE,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;QACpF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3G,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACjH,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,wEAAwE;IACxE,cAAc,CAAC,KAAmB,EAAE,UAAiE,EAAE;QACrG,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC5F,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAChH,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,KAAmB,EAAE,MAAsB;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IACnH,CAAC;IAED,wEAAwE;IACxE,QAAQ,CAAC,KAAmB,EAAE,MAAuB;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC9F,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC9G,CAAC;IAED,uEAAuE;IAC/D,KAAK,CAAC,YAAY,CAAC,KAAmB,EAAE,MAAyB;QACvE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC;YACrD,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC;gBAAE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5H,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;oBAC7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACtI,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC7E,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtD,CAAC,CAAC,EAAE,CAAC;gBACL,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,OAAO,CAAC,KAAqB;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,KAAsD;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAqB,EAAE,IAAqB;QACrE,4EAA4E;QAC5E,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAmB,CAAC;QAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,MAAM,GAAG,IAAI,CAAC;YAC9C,MAAM,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC/D,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACpI,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBAC7G,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;YAClH,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QACpD,CAAC;QACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;YAAG,KAAK,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,qBAAqB,EACrF,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC;QAC5C,SAAS,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACzH,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;gBACjF,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvF,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM;gBAChC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;gBACzF,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACvG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC1H,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;oBAChF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;oBAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;wBAAE,SAAS;oBACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK;wBAChI,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACnE,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;oBACpE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBACpD,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;oBACxB,IAAI,OAAO,KAAK,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBACpE,MAAM,MAAM,GAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACzD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACxI,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACnH,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC7F,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3H,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1G,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1G,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;IAChE,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,MAAM,KAAsC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEzI,4DAA4D;IAC5D,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAClB,CAAC;YAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC1F,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,IAAI,CAAC;QAChB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC;IAC3C,CAAC;CACF"}

package/dist/src/tls/tls.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { Agent } from 'node:https';
+/** A hub's self-signed certificate and its private key, both PEM. */
+export interface HubCertificate {
+    /** The X.509 certificate a rack pins by its SHA-256 fingerprint. */
+    certificatePem: string;
+    /** The PKCS#8 private key; it never leaves the hub's private state. */
+    privateKeyPem: string;
+}
+/**
+ * Creates a hub's self-signed ECDSA P-256 certificate, valid from an hour ago
+ * (a rack's clock may lag) for ten years, naming `e3-rack-hub` only.
+ * @param now - The issue time
+ * @returns The certificate and its private key
+ * @example
+ * const { certificatePem, privateKeyPem } = createHubCertificate();
+ */
+export declare function createHubCertificate(now?: Date): HubCertificate;
+/**
+ * The SHA-256 fingerprint a rack pins: uppercase hex pairs joined by colons,
+ * as `openssl x509 -fingerprint -sha256` prints it.
+ * @param certificatePem - A PEM certificate
+ * @returns Its fingerprint
+ * @example
+ * console.log(certificateSha256(certificatePem)); // 'AB:CD:…'
+ */
+export declare function certificateSha256(certificatePem: string): string;
+/**
+ * Reads a pinned fingerprint as an operator writes it: 64 hex digits, with or
+ * without colons, in either case.
+ * @param text - The fingerprint
+ * @returns It in {@link certificateSha256}'s form
+ * @throws {Error} When it is not a SHA-256 fingerprint
+ * @example
+ * parseCertificateSha256('abcd…'); // 'AB:CD:…'
+ */
+export declare function parseCertificateSha256(text: string): string;
+/**
+ * Makes an HTTPS agent that trusts exactly the certificate whose SHA-256 is
+ * pinned. A first handshake, which sends nothing, reads the certificate the
+ * origin presents; it is refused unless its fingerprint is the pin. Every
+ * request then verifies the server against that certificate alone, and its
+ * fingerprint again, so a different certificate is refused before any
+ * request or credential is written.
+ * @param origin - An https:// origin
+ * @param certificateSha256 - The pinned fingerprint
+ * @param timeoutMs - The first handshake's deadline
+ * @returns The agent
+ * @throws {Error} When the origin is not HTTPS or presents another certificate
+ * @example
+ * const agent = await pinnedHttpsAgent('https://10.0.0.2:7331', pin);
+ */
+export declare function pinnedHttpsAgent(origin: string, certificateSha256: string, timeoutMs?: number): Promise<Agent>;
+/**
+ * A fetch that reaches HTTPS origins only through {@link pinnedHttpsAgent},
+ * one agent per origin; any other scheme is refused.
+ * @param certificateSha256 - The pinned fingerprint
+ * @returns A fetch-compatible function
+ * @throws {Error} When the fingerprint is malformed
+ * @example
+ * const response = await pinnedFetch(pin)('https://10.0.0.2:7331/api/rack/heartbeat', { method: 'POST', body });
+ */
+export declare function pinnedFetch(certificateSha256: string): typeof fetch;
+//# sourceMappingURL=tls.d.ts.map

package/dist/src/tls/tls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../../src/tls/tls.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,KAAK,EAAW,MAAM,YAAY,CAAC;AAW5C,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;CACvB;AAqCD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,OAAa,GAAG,cAAc,CAiBrE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI3D;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAUpH;AAMD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,KAAK,CAwCnE"}