@felan-ai/daemon 0.0.0-stage → 0.1.0

package/dist/daemon/ownership.js

@@ -0,0 +1,395 @@
+import { closeSync, constants, fsyncSync, futimesSync, lstatSync, lutimesSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { createHash, randomUUID } from 'node:crypto';
+import { dirname, isAbsolute, join } from 'node:path';
+import { DaemonSecurityError, tryKernelLock } from './native-ownership.js';
+import { assertPathIdentity, assertPrivateStat, canonicalProspectivePath, identityFor, openPrivateFile, pathIdentity, pathInside, pathsOverlap, pinPathAncestry, pinPathChain, prepareDaemonTarget, privateDirectory, resolveDaemonTarget, storeDirectory } from './target.js';
+const STORE_LOCK = '.felan-store.lock';
+const CLAIMS_LOCK = 'claims.lock';
+const KNOWN_ROOTS = 'daemon-store-roots.json';
+/**
+ * Temp reapers (macOS tmp_cleaner, systemd-tmpfiles) delete files whose atime, mtime and ctime are all days old.
+ * Holding a flock never updates them, and deleting a pinned lock permanently fences the running owner.
+ */
+const TIMESTAMP_REFRESH_MS = 60 * 60_000;
+/** Claims are only advisory hints about live daemons, so an unreadable ledger is rebuilt rather than trusted. */
+function readLedger(directory) {
+    let fd;
+    try {
+        fd = openSync(join(directory, 'claims.json'), constants.O_RDONLY | constants.O_NOFOLLOW);
+    }
+    catch {
+        return { version: 1, claims: [] };
+    }
+    try {
+        const value = JSON.parse(readFileSync(fd, 'utf8'));
+        if (!value || typeof value !== 'object' || !('version' in value) || value.version !== 1 || !('claims' in value) || !Array.isArray(value.claims))
+            return { version: 1, claims: [] };
+        return { version: 1, claims: value.claims.filter(validClaim) };
+    }
+    catch {
+        return { version: 1, claims: [] };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function validClaim(c) {
+    return !!c && (c.kind === 'production' || c.kind === 'isolated') && typeof c.namespaceId === 'string' && typeof c.instanceId === 'string'
+        && typeof c.lock === 'string' && /^(production|isolated-[a-f0-9]{64})\.lock$/.test(c.lock) && validNode(c.lockNode)
+        && Array.isArray(c.roots) && c.roots.every((r) => typeof r === 'string' && r.startsWith('/') && !r.includes('\0'))
+        && Array.isArray(c.nodes) && c.nodes.length === c.roots.length && c.nodes.every(validNode) && Array.isArray(c.ancestors) && c.ancestors.every(validNode);
+}
+function validNode(value) {
+    if (!value || typeof value !== 'object' || !('dev' in value) || !('ino' in value))
+        return false;
+    return typeof value.dev === 'string' && /^\d{1,32}$/.test(value.dev) && typeof value.ino === 'string' && /^\d{1,32}$/.test(value.ino);
+}
+function node(pin) { return { dev: String(pin.dev), ino: String(pin.ino) }; }
+function nodesIntersect(a, b) {
+    const keys = new Set(a.map(n => `${n.dev}:${n.ino}`));
+    return b.some(n => keys.has(`${n.dev}:${n.ino}`));
+}
+function existingNodes(paths) {
+    return paths.flatMap(path => {
+        try {
+            return [node(pathIdentity(path))];
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return [];
+            throw error;
+        }
+    });
+}
+function uniqueNodes(pins) {
+    return [...new Map(pins.map(pin => { const n = node(pin); return [`${n.dev}:${n.ino}`, n]; })).values()];
+}
+/** A claim is live only while another process still holds its registered lifetime lock. */
+function claimActive(target, claim) {
+    let fd;
+    try {
+        fd = openSync(join(target.accountDirectory, claim.lock), constants.O_RDWR | constants.O_NOFOLLOW);
+    }
+    catch {
+        return false;
+    }
+    try {
+        const pin = pathIdentity(join(target.accountDirectory, claim.lock));
+        if (String(pin.dev) !== claim.lockNode.dev || String(pin.ino) !== claim.lockNode.ino)
+            return false;
+        return !tryKernelLock(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function saveLedger(directory, uid, ledger) {
+    const temp = join(directory, `claims-${randomUUID()}.tmp`);
+    const fd = openSync(temp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        writeFileSync(fd, JSON.stringify(ledger));
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        assertPrivateStat(lstatSync(directory, { bigint: true }), uid, true);
+        renameSync(temp, join(directory, 'claims.json'));
+        const dir = openSync(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        try {
+            fsyncSync(dir);
+        }
+        finally {
+            closeSync(dir);
+        }
+    }
+    finally {
+        try {
+            unlinkSync(temp);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+}
+async function coordination(target) {
+    privateDirectory(target.accountDirectory, target.uid);
+    const pins = pinPathChain(target.accountDirectory, target.uid);
+    const file = join(target.accountDirectory, CLAIMS_LOCK);
+    const fd = openPrivateFile(file, target.uid);
+    const pin = pathIdentity(file);
+    pins.push(pin);
+    try {
+        const deadline = performance.now() + 5_000;
+        while (!tryKernelLock(fd)) {
+            if (performance.now() >= deadline)
+                throw new DaemonSecurityError('ownership_busy', 'Account claim coordinator is busy; retry without removing its lock.');
+            await new Promise(resolve => setTimeout(resolve, 10));
+            for (const p of pins)
+                assertPathIdentity(p);
+        }
+        for (const p of pins)
+            assertPathIdentity(p);
+        return { fd, pins };
+    }
+    catch (error) {
+        closeSync(fd);
+        throw error;
+    }
+}
+export function namespaceLockName(target) {
+    return target.kind === 'production' ? 'production.lock' : `isolated-${createHash('sha256').update(target.namespaceId).digest('hex')}.lock`;
+}
+function storeRootAllowed(target, root) {
+    if (pathsOverlap(root, target.accountDirectory) || pathsOverlap(root, target.runtimeDirectory))
+        return false;
+    return target.kind !== 'isolated' || pathInside(dirname(target.runtimeDirectory), root);
+}
+/** Session directories used before stay addressable after restart; they are locked again when a session opens there. */
+function readKnownRoots(target) {
+    let value;
+    try {
+        value = JSON.parse(readFileSync(join(target.agentDir, KNOWN_ROOTS), 'utf8'));
+    }
+    catch {
+        return [];
+    }
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap(root => {
+        if (typeof root !== 'string' || !isAbsolute(root))
+            return [];
+        try {
+            const canonical = canonicalProspectivePath(root);
+            return storeRootAllowed(target, canonical) ? [canonical] : [];
+        }
+        catch {
+            return [];
+        }
+    });
+}
+function writeKnownRoots(agentDir, roots) {
+    const path = join(agentDir, KNOWN_ROOTS);
+    const temp = `${path}.${randomUUID()}.tmp`;
+    try {
+        writeFileSync(temp, JSON.stringify(roots), { flag: 'wx', mode: 0o600 });
+        renameSync(temp, path);
+    }
+    finally {
+        try {
+            unlinkSync(temp);
+        }
+        catch { /* Already renamed. */ }
+    }
+}
+function lockStoreRoot(root) {
+    const fd = openSync(join(root, STORE_LOCK), constants.O_RDWR | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+    if (tryKernelLock(fd))
+        return fd;
+    closeSync(fd);
+    throw new DaemonSecurityError('root_conflict', 'The canonical store has a live kernel ownership lock.');
+}
+export class DaemonOwnership {
+    instanceId;
+    fds;
+    pins;
+    lockedRoots;
+    identity;
+    lost;
+    released = false;
+    releasePromise;
+    timer;
+    listeners = new Set();
+    extraPins = [];
+    current;
+    owning = new Map();
+    refreshedAt = 0;
+    constructor(target, instanceId, fds, pins, lockedRoots = [...target.rootSet]) {
+        this.instanceId = instanceId;
+        this.fds = fds;
+        this.pins = pins;
+        this.lockedRoots = lockedRoots;
+        this.current = target;
+        const identity = identityFor(target, instanceId);
+        Object.freeze(identity.rootSet);
+        this.identity = Object.freeze(identity);
+        this.timer = setInterval(() => { try {
+            this.assertCurrent();
+            this.refreshTimestamps();
+        }
+        catch { /* assertCurrent synchronously fences and notifies. */ } }, 25);
+        this.timer.unref();
+    }
+    get target() { return this.current; }
+    assertCurrent() {
+        if (this.lost)
+            throw this.lost;
+        if (this.released)
+            throw new DaemonSecurityError('ownership_lost', 'Daemon ownership has been released.');
+        try {
+            for (const pin of [...this.pins, ...this.extraPins])
+                assertPathIdentity(pin);
+            for (const fd of this.fds)
+                if (!tryKernelLock(fd))
+                    throw new Error('kernel lock lost');
+        }
+        catch {
+            this.lost = new DaemonSecurityError('ownership_lost', 'Daemon lock or path identity changed; admission is permanently fenced for this instance.');
+            clearInterval(this.timer);
+            for (const listener of this.listeners) {
+                try {
+                    listener(this.lost);
+                }
+                catch { /* One observer must not suppress the remaining fences. */ }
+            }
+            throw this.lost;
+        }
+    }
+    /** Wall-clock throttling refreshes on the first tick after sleep, when reapers may run immediately. */
+    refreshTimestamps() {
+        const now = Date.now();
+        const elapsed = now - this.refreshedAt;
+        if (elapsed >= 0 && elapsed < TIMESTAMP_REFRESH_MS)
+            return;
+        this.refreshedAt = now;
+        const time = new Date(now);
+        for (const fd of this.fds)
+            futimesSync(fd, time, time);
+        lutimesSync(join(this.current.accountDirectory, CLAIMS_LOCK), time, time);
+    }
+    watchPath(path) {
+        this.assertCurrent();
+        const pin = pathIdentity(path);
+        this.extraPins.push(pin);
+        return () => { this.extraPins = this.extraPins.filter(item => item !== pin); };
+    }
+    assertOwnsPath(path) {
+        this.assertCurrent();
+        const canonical = canonicalProspectivePath(path);
+        if (!this.current.rootSet.some(root => pathInside(root, canonical)))
+            throw new DaemonSecurityError('root_not_owned', 'This path is outside the daemon store roots.');
+        this.assertCurrent();
+        return canonical;
+    }
+    /** Adds a session directory to the owned stores, locking it against other daemons. */
+    ownRoot(directory) {
+        this.assertCurrent();
+        const root = canonicalProspectivePath(directory);
+        if (this.lockedRoots.some(owned => pathInside(owned, root)))
+            return Promise.resolve();
+        let pending = this.owning.get(root);
+        if (!pending) {
+            pending = this.lockRoot(root).finally(() => this.owning.delete(root));
+            this.owning.set(root, pending);
+        }
+        return pending;
+    }
+    async lockRoot(root) {
+        if (!storeRootAllowed(this.current, root))
+            throw new DaemonSecurityError('root_not_owned', 'Session stores cannot use daemon runtime paths or leave an isolated fixture.');
+        storeDirectory(root);
+        const coordinator = await coordination(this.current);
+        try {
+            this.assertCurrent();
+            const ledger = readLedger(this.current.accountDirectory);
+            if (ledger.claims.some(claim => claim.instanceId !== this.instanceId && claim.roots.some(other => pathsOverlap(other, root)) && claimActive(this.current, claim))) {
+                throw new DaemonSecurityError('root_conflict', 'Another daemon owns an overlapping canonical store root.');
+            }
+            this.fds.push(lockStoreRoot(root));
+            this.lockedRoots.push(root);
+            const own = ledger.claims.find(claim => claim.instanceId === this.instanceId);
+            if (own) {
+                own.roots.push(root);
+                own.nodes.push(node(pathIdentity(root)));
+                saveLedger(this.current.accountDirectory, this.current.uid, ledger);
+            }
+        }
+        finally {
+            closeSync(coordinator.fd);
+        }
+        if (this.current.rootSet.includes(root))
+            return;
+        const rootSet = Object.freeze([...this.current.rootSet, root]);
+        this.current = Object.freeze({ ...this.current, rootSet });
+        writeKnownRoots(this.current.agentDir, rootSet.filter(known => known !== this.current.agentDir));
+    }
+    onLost(listener) {
+        this.listeners.add(listener);
+        if (this.lost)
+            listener(this.lost);
+        return () => this.listeners.delete(listener);
+    }
+    release() { return this.releasePromise ??= this.releaseOnce(); }
+    async releaseOnce() {
+        // Call only after all owned writers have settled, including after loss.
+        this.released = true;
+        clearInterval(this.timer);
+        let coordinator;
+        try {
+            for (const pin of this.pins.filter(p => p.path === this.current.accountDirectory || p.path.startsWith(`${this.current.accountDirectory}/`)))
+                assertPathIdentity(pin);
+            coordinator = await coordination(this.current);
+            const ledger = readLedger(this.current.accountDirectory);
+            ledger.claims = ledger.claims.filter(c => c.instanceId !== this.instanceId);
+            saveLedger(this.current.accountDirectory, this.current.uid, ledger);
+        }
+        finally {
+            for (const fd of this.fds.splice(0).reverse())
+                closeSync(fd);
+            if (coordinator)
+                closeSync(coordinator.fd);
+            this.listeners.clear();
+        }
+    }
+}
+export async function acquireDaemonOwnership(input) {
+    let target = resolveDaemonTarget(input);
+    const coordinator = await coordination(target);
+    const held = [];
+    try {
+        const guardedRoots = [...target.rootSet, target.kind === 'isolated' ? dirname(target.runtimeDirectory) : target.runtimeDirectory];
+        const candidateNodes = existingNodes(guardedRoots);
+        const candidateAncestors = target.pins.map(node);
+        const lock = namespaceLockName(target);
+        const lifetime = openPrivateFile(join(target.accountDirectory, lock), target.uid);
+        held.push(lifetime);
+        if (!tryKernelLock(lifetime))
+            throw new DaemonSecurityError('owner_running', 'This OS account/namespace already has a daemon. Attach using its pinned roots; do not delete locks.');
+        const live = readLedger(target.accountDirectory).claims.filter(claim => claim.lock !== lock && claimActive(target, claim));
+        for (const claim of live) {
+            if (claim.roots.some(root => guardedRoots.some(other => pathsOverlap(root, other))) || nodesIntersect(claim.nodes, candidateAncestors) || nodesIntersect(candidateNodes, claim.ancestors)) {
+                throw new DaemonSecurityError('root_conflict', 'Another daemon owns an overlapping canonical store root.');
+            }
+        }
+        target = prepareDaemonTarget(target);
+        const nodes = guardedRoots.map(root => node(pathIdentity(root)));
+        const ancestors = uniqueNodes(guardedRoots.flatMap(pinPathAncestry));
+        for (const claim of live) {
+            if (nodesIntersect(claim.nodes, ancestors) || nodesIntersect(nodes, claim.ancestors))
+                throw new DaemonSecurityError('root_conflict', 'A store inode or ancestor is already registered under another path.');
+        }
+        for (const root of target.rootSet)
+            held.push(lockStoreRoot(root));
+        const instanceId = randomUUID();
+        const lockPin = pathIdentity(join(target.accountDirectory, lock));
+        for (const pin of coordinator.pins)
+            assertPathIdentity(pin);
+        saveLedger(target.accountDirectory, target.uid, { version: 1, claims: [...live, { kind: target.kind, namespaceId: target.namespaceId, instanceId, lock, lockNode: node(lockPin), roots: guardedRoots, nodes, ancestors }] });
+        const lockPins = [join(target.accountDirectory, lock), ...target.rootSet.map(root => join(root, STORE_LOCK))].map(pathIdentity);
+        const lockedRoots = [...target.rootSet];
+        const known = [...new Set(readKnownRoots(target))].filter(root => !lockedRoots.some(owned => pathInside(owned, root)));
+        const owned = known.length ? Object.freeze({ ...target, rootSet: Object.freeze([...target.rootSet, ...known]) }) : target;
+        return new DaemonOwnership(owned, instanceId, held, [...coordinator.pins, ...target.pins, ...lockPins], lockedRoots);
+    }
+    catch (error) {
+        for (const fd of held.reverse())
+            closeSync(fd);
+        throw error;
+    }
+    finally {
+        closeSync(coordinator.fd);
+    }
+}
+//# sourceMappingURL=ownership.js.map

package/dist/daemon/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../src/daemon/ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9J,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAmE,MAAM,aAAa,CAAC;AAQhV,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C;;;GAGG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEzC,iHAAiH;AACjH,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACjG,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnL,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAAC,CAAC;YACtC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,CAAQ;IAC1B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;WACpI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;WAChH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;WACxH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC7J,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,OAAO,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACxI,CAAC;AACD,SAAS,IAAI,CAAC,GAAiB,IAAkB,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,SAAS,cAAc,CAAC,CAA0B,EAAE,CAA0B;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,aAAa,CAAC,KAAwB;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1B,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC1C,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,WAAW,CAAC,IAA6B;IAChD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACpH,CAAC;AAED,2FAA2F;AAC3F,SAAS,WAAW,CAAC,MAA4B,EAAE,KAAY;IAC7D,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAC1G,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACnG,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,GAAW,EAAE,MAAc;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACnH,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5F,IAAI,CAAC;QACH,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACnG,IAAI,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QAAC,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAAC,CAAC;AAChI,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAA4B;IACtD,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAC3C,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,qEAAqE,CAAC,CAAC;YAC1J,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,OAAO,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;AAC7I,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4B,EAAE,IAAY;IAClE,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,wHAAwH;AACxH,SAAS,cAAc,CAAC,MAA4B;IAClD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAC1G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,IAAI,CAAC;YAAC,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC/I,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAwB;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IACrF,IAAI,CAAC;QAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;YAChG,CAAC;QAAC,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChH,IAAI,aAAa,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,OAAO,eAAe;IAYyB;IAAqC;IAAgC;IACrG;IAZV,QAAQ,CAAiB;IAC1B,IAAI,CAAkC;IACtC,QAAQ,GAAG,KAAK,CAAC;IACjB,cAAc,CAA4B;IAC1C,KAAK,CAAiB;IACtB,SAAS,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC5D,SAAS,GAAmB,EAAE,CAAC;IAC/B,OAAO,CAAuB;IACrB,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IACnD,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,MAA4B,EAAW,UAAkB,EAAmB,GAAa,EAAmB,IAA6B,EAClI,cAAwB,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QADX,eAAU,GAAV,UAAU,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAU;QAAmB,SAAI,GAAJ,IAAI,CAAyB;QAClI,gBAAW,GAAX,WAAW,CAAgC;QAC5D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,KAA2B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,aAAa;QACX,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;QAC1G,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;gBAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC7E,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG;gBAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,CAAC;YACL,IAAI,CAAC,IAAI,GAAG,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,0FAA0F,CAAC,CAAC;YAClJ,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;YAAC,CAAC;YAC5I,MAAM,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,uGAAuG;IAC/F,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,oBAAoB;YAAE,OAAO;QAC3D,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG;YAAE,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,SAAS,CAAC,IAAY;QACpB,IAAI,CAAC,aAAa,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/E,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;QACrK,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,sFAAsF;IACtF,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACtF,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,IAAY;QACjC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,8EAA8E,CAAC,CAAC;QAC3K,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClK,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9E,IAAI,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;QACnJ,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,CAAC,QAA8C;QACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAoB,OAAO,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACvE,KAAK,CAAC,WAAW;QACvB,wEAAwE;QACxE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,WAAiE,CAAC;QACtE,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,CAAC,CAAC;gBAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACrK,WAAW,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5E,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;gBAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,WAAW;gBAAE,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAmB;IAC9D,IAAI,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAClI,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,qGAAqG,CAAC,CAAC;QACpL,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3H,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,kBAAkB,CAAC,IAAI,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1L,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QACD,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACrE,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,qEAAqE,CAAC,CAAC;QAC9M,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI;YAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC5D,UAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7N,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChI,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACvH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1H,OAAO,IAAI,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IACvH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;YACxE,CAAC;QAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACxC,CAAC"}

package/dist/daemon/persistence.d.ts

@@ -0,0 +1,110 @@
+import type { DaemonOwnership } from './ownership.js';
+export type PersistenceBoundary = 'before_commit' | 'after_commit';
+export declare function sha256(data: string | Buffer): string;
+export declare function guardOwnedPaths(owner: DaemonOwnership, paths: readonly string[]): () => void;
+export declare function syncOwnedDirectory(owner: DaemonOwnership, directory: string): void;
+export declare function prepareControlDirectory(owner: DaemonOwnership, directory: string): string;
+/** Session projections are stored as their own rows, keyed by `[session, key]`. */
+export declare const CONTROL_TABLES: readonly ["sessions", "requests", "interactions", "continuations", "resources", "projections"];
+export type ControlTable = typeof CONTROL_TABLES[number];
+/** A persisted record; `ord` orders a table's rows as the in-memory arrays they were written from. */
+export interface ControlRow {
+    readonly id: string;
+    readonly ord: number;
+    readonly data: string;
+}
+export interface ControlMeta {
+    readonly namespace: string;
+    readonly agentDir: string;
+    readonly clock: number;
+}
+export interface StoredControl {
+    readonly meta: ControlMeta;
+    readonly rows: Readonly<Record<ControlTable, readonly ControlRow[]>>;
+}
+export interface ControlChanges {
+    readonly meta: ControlMeta;
+    readonly upserts: readonly (readonly [ControlTable, ControlRow])[];
+    readonly deletes: readonly (readonly [ControlTable, string])[];
+}
+export interface RemoteDatabase {
+    assertCurrent(): void;
+    readonly rebuilt: boolean;
+    record(kind: string, id: string): string | undefined;
+    records(kind: string): {
+        id: string;
+        data: string;
+    }[];
+    putRecord(kind: string, id: string, data: string): void;
+    deleteRecord(kind: string, id: string): void;
+    outbox(session: string, after?: number, limit?: number): {
+        seq: number;
+        bytes: number;
+        data: string;
+    }[];
+    insertOutbox(session: string, seq: number, bytes: number, data: string): void;
+    deleteOutbox(session: string, through?: number): void;
+    transaction<T>(fn: () => T): T;
+}
+/**
+ * The control store's SQLite database. A commit writes only the rows that changed, in one
+ * synchronous-NORMAL WAL transaction, after rechecking ownership and the pinned file identities.
+ */
+export declare class ControlDatabase implements RemoteDatabase {
+    readonly owner: DaemonOwnership;
+    private readonly fault?;
+    readonly directory: string;
+    private readonly path;
+    private readonly initialization;
+    private initializationPin;
+    private pin;
+    private unwatch;
+    private db;
+    private statements;
+    private poisoned;
+    private closed;
+    private storeId;
+    private wasRebuilt;
+    private inTransaction;
+    get rebuilt(): boolean;
+    constructor(owner: DaemonOwnership, directory: string, fault?: ((boundary: PersistenceBoundary) => void) | undefined);
+    private open;
+    /**
+     * False when no database exists. A database or sidecar that is not a regular file is quarantined, because
+     * SQLite follows links. Unreadable files fail retryably.
+     */
+    private present;
+    private connect;
+    private create;
+    /** Null until the first state is written. */
+    read(): StoredControl | null;
+    /** Moves the database aside for inspection and starts an empty one. */
+    quarantine(): void;
+    write(changes: ControlChanges): void;
+    record(kind: string, id: string): string | undefined;
+    records(kind: string): {
+        id: string;
+        data: string;
+    }[];
+    putRecord(kind: string, id: string, data: string): void;
+    deleteRecord(kind: string, id: string): void;
+    outbox(session: string, after?: number, limit?: number): {
+        seq: number;
+        bytes: number;
+        data: string;
+    }[];
+    insertOutbox(session: string, seq: number, bytes: number, data: string): void;
+    deleteOutbox(session: string, through?: number): void;
+    private assertTransaction;
+    transaction<T>(fn: () => T): T;
+    private fence;
+    assertCurrent(): void;
+    close(): void;
+    private release;
+    private disconnect;
+    private meta;
+    private quarantineFiles;
+    private readFile;
+    private syncDirectory;
+}
+//# sourceMappingURL=persistence.d.ts.map

package/dist/daemon/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/daemon/persistence.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAItD,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,cAAc,CAAC;AACnE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAA4D;AAEjH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,IAAI,CAuB5F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CASlF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAWzF;AAED,mFAAmF;AACnF,eAAO,MAAM,cAAc,gGAAiG,CAAC;AAC7H,MAAM,MAAM,YAAY,GAAG,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AACzD,sGAAsG;AACtG,MAAM,WAAW,UAAU;IAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChG,MAAM,WAAW,WAAW;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC9G,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC,CAAA;CAAE;AACnI,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;IACnE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,IAAI,IAAI,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9E,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAoCD;;;GAGG;AACH,qBAAa,eAAgB,YAAW,cAAc;IAiBxC,QAAQ,CAAC,KAAK,EAAE,eAAe;IAAqB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAhBvF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,iBAAiB,CAAgB;IACzC,OAAO,CAAC,GAAG,CAA2B;IACtC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAS;IAE9B,IAAI,OAAO,IAAI,OAAO,CAA4B;gBAE7B,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAmB,KAAK,CAAC,GAAE,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,aAAA;IAiBhI,OAAO,CAAC,IAAI;IAmCZ;;;OAGG;IACH,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,OAAO;IAwBf,OAAO,CAAC,MAAM;IAed,6CAA6C;IAC7C,IAAI,IAAI,aAAa,GAAG,IAAI;IAS5B,uEAAuE;IACvE,UAAU,IAAI,IAAI;IAIlB,KAAK,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAWpC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMpD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE;IAMrD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAGvD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAG5C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAK,EAAE,KAAK,SAAK,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE;IAO/F,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAK7E,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAA0B,GAAG,IAAI;IAKtE,OAAO,CAAC,iBAAiB;IAIzB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IA6B9B,OAAO,CAAC,KAAK;IAIb,aAAa,IAAI,IAAI;IAMrB,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,IAAI;IAGZ,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,aAAa;CAGtB"}