@fentaris/edge 0.2.2 → 0.3.1

package/dist/index.js

@@ -1,23 +1,41 @@
 #!/usr/bin/env node
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
+import path from "node:path";
 import { createDefaultEdgeAgent, EdgeAgent, WebSocketEdgeConnectionClient } from "./agent.js";
 import { runEdgeCli } from "./cli.js";
+import { EdgePersistentAgent, FileEdgeSingletonLock } from "./daemon.js";
+import { EdgeLocalControlServer, createEdgeLocalControlCredential, edgeLocalControlAddress } from "./localControl.js";
+import { ProtectedJsonStore, defaultEdgePaths, nodeEdgePlatform } from "./platform.js";
+import { edgeServiceAdapter } from "./service.js";
 export { EdgeAgent, WebSocketEdgeConnectionClient, createDefaultEdgeAgent, runEdgeCli, };
 export { EdgeEnrollmentService, HttpDeviceAuthorizationProvider, HttpEdgeEnrollmentClient, } from "./enrollment.js";
 export { NodeProcessSupervisor, ProtectedFileCredentialStore, ProtectedJsonStore, defaultEdgePaths, nodeEdgePlatform, } from "./platform.js";
-export { redactEdgeValue, safeEdgeError } from "./redaction.js";
+export { redactEdgeValue, redactInstallerText, safeEdgeError } from "./redaction.js";
+export { BoundedInstallerRunner, FetchInstallationDownloader, InstallationConsentManager, InstallationCoordinator, InstallationExecutionError, ManagedInstallationSourceResolver, NodeInstallationCommandExecutor, NodeInstallationVerificationService, ProtectedInstallationState, SecureTarExtractor, SharedInstallationProvider, TerminalInstallationConsent, buildInstallationReview, commandIsolationAdapter, createDefaultInstallationProviders, } from "./installation.js";
 export { LocalSetupManager, NodeTerminalSetupPrompter, TerminalSetupProvider, } from "./setup.js";
 export { EdgeWorkloadSupervisor, ExecutableAllowlistPolicy } from "./supervisor.js";
 export { StdioEdgeWorkloadFactory } from "./stdioWorkload.js";
 export { EdgeAgentRuntime } from "./runtime.js";
+export { EdgePersistentAgent, FileEdgeSingletonLock, classifyReconnectError, reconnectDelay, } from "./daemon.js";
+export { EdgeLocalControlServer, callEdgeLocalControl, createEdgeLocalControlCredential, edgeLocalControlAddress, } from "./localControl.js";
+export { ForegroundEdgeServiceAdapter, LaunchdEdgeServiceAdapter, NodeEdgeServiceCommandRunner, NodeEdgeServiceFiles, SystemdUserEdgeServiceAdapter, WindowsUserEdgeServiceAdapter, edgeServiceAdapter, } from "./service.js";
 export async function main(argv, options = {}) {
     const io = options.io ?? {
         out: (value) => console.log(value),
         error: (value) => console.error(value),
     };
+    const joinUrl = argv[0] === "join" && argv[1] && !argv[1].startsWith("-") ? argv[1] : undefined;
+    const paths = defaultEdgePaths();
+    const platform = nodeEdgePlatform(paths);
+    const enrolled = await platform.configStore.load();
     const agent = options.agent ?? createDefaultEdgeAgent({
-        controlPlaneUrl: options.controlPlaneUrl ?? process.env.FENTARIS_EDGE_CONTROL_PLANE_URL ?? "",
+        controlPlaneUrl: options.controlPlaneUrl
+            ?? joinUrl
+            ?? enrolled?.controlPlaneUrl
+            ?? process.env.FENTARIS_EDGE_CONTROL_PLANE_URL
+            ?? "",
+        platform,
         onVerification: (request) => {
             io.out(JSON.stringify({
                 verificationUri: request.verificationUri,
@@ -25,7 +43,53 @@ export async function main(argv, options = {}) {
             }));
         },
     });
-    return runEdgeCli(argv, agent, io);
+    const service = edgeServiceAdapter({
+        serviceFile: process.platform === "darwin"
+            ? path.join(process.env.HOME ?? paths.dataDir, "Library", "LaunchAgents", "dev.fentaris.edge.plist")
+            : path.join(process.env.HOME ?? paths.dataDir, ".config", "systemd", "user", "fentaris-edge.service"),
+        foregroundCommand: "fentaris edge run",
+    });
+    const definition = {
+        executable: process.execPath,
+        args: [process.argv[1] ?? "fentaris-edge", "run"],
+        environment: edgeServiceEnvironment(process.env),
+    };
+    const operations = {
+        installService: () => service.install(definition),
+        service: (operation) => operation === "install" ? service.install(definition) : service[operation](),
+        run: async () => {
+            const persistent = new EdgePersistentAgent({
+                agent,
+                lock: new FileEdgeSingletonLock(path.join(paths.dataDir, "agent.lock")),
+                statusStore: new ProtectedJsonStore(path.join(paths.dataDir, "status.json")),
+            });
+            const credentialStoreKey = "local-control-credential";
+            let credential = await platform.credentialStore.get(credentialStoreKey);
+            if (!credential) {
+                credential = createEdgeLocalControlCredential();
+                await platform.credentialStore.set(credentialStoreKey, credential);
+            }
+            const control = new EdgeLocalControlServer({
+                endpoint: { address: edgeLocalControlAddress(paths.dataDir), credential },
+                agent: persistent,
+                ...(agent.installationControl() ? { installation: agent.installationControl() } : {}),
+            });
+            await persistent.start();
+            try {
+                await control.start();
+                await persistent.wait();
+            }
+            finally {
+                try {
+                    await control.stop();
+                }
+                finally {
+                    await persistent.stop();
+                }
+            }
+        },
+    };
+    return runEdgeCli(argv, agent, io, operations);
 }
 export function isDirectCliInvocation(entrypointUrl = import.meta.url, argvPath = process.argv[1]) {
     if (!argvPath)
@@ -45,4 +109,8 @@ function resolvePath(value) {
         return value;
     }
 }
+function edgeServiceEnvironment(environment) {
+    const stateDir = environment.FENTARIS_EDGE_STATE_DIR?.trim();
+    return stateDir ? { FENTARIS_EDGE_STATE_DIR: stateDir } : undefined;
+}
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAkB,MAAM,UAAU,CAAC;AAEtD,OAAO,EACL,SAAS,EACT,6BAA6B,EAC7B,sBAAsB,EACtB,UAAU,GACX,CAAC;AASF,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAezB,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAYvB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AA8BhD,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAuB,EACvB,UAII,EAAE;IAEN,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI;QACvB,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1C,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;KAC/C,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAAC;QACpD,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,EAAE;QAC7F,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC1B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACpB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,IAAI,qBAAqB,EAAE,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAC9F,OAAO,EAAE,UAAU,EAA0C,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAA6B,MAAM,aAAa,CAAC;AACpG,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EACL,SAAS,EACT,6BAA6B,EAC7B,sBAAsB,EACtB,UAAU,GACX,CAAC;AASF,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAgBzB,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAYvB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC1B,iCAAiC,EACjC,+BAA+B,EAC/B,mCAAmC,EACnC,0BAA0B,EAC1B,kBAAkB,EAClB,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,kCAAkC,GACnC,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,GACf,MAAM,aAAa,CAAC;AASrB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAuCtB,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAuB,EACvB,UAII,EAAE;IAEN,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI;QACvB,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1C,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;KAC/C,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAAC;QACpD,eAAe,EAAE,OAAO,CAAC,eAAe;eACnC,OAAO;eACP,QAAQ,EAAE,eAAe;eACzB,OAAO,CAAC,GAAG,CAAC,+BAA+B;eAC3C,EAAE;QACP,QAAQ;QACR,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC1B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACpB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,kBAAkB,CAAC;QACjC,WAAW,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ;YACxC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,yBAAyB,CAAC;YACpG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC;QACvG,iBAAiB,EAAE,mBAAmB;KACvC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,KAAK,CAAC;QACjD,WAAW,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC;KACjD,CAAC;IACF,MAAM,UAAU,GAAsB;QACpC,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;QACjD,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;QACpG,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC;gBACzC,KAAK;gBACL,IAAI,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACvE,WAAW,EAAE,IAAI,kBAAkB,CAAuB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;aACnG,CAAC,CAAC;YACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;YACtD,IAAI,UAAU,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACxE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,gCAAgC,EAAE,CAAC;gBAChD,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC;gBACzC,QAAQ,EAAE,EAAE,OAAO,EAAE,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE;gBACzE,KAAK,EAAE,UAAU;gBACjB,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1B,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACvB,CAAC;wBAAS,CAAC;oBACT,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,IAAI,qBAAqB,EAAE,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,WAA8B;IAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC"}

package/dist/installation.d.ts

@@ -0,0 +1,232 @@
+import { type InstallationApprovalRecord, type InstallationArtifactRecord, type InstallationAttemptSummary, type InstallationDigest, type InstallationLifecycleSummary, type InstallationMutationLock, type InstallationProviderAdapter, type InstallationProviderContext, type InstallationProviderKind, type InstallationReasonCode, type InstallationRecipe, type InstallationResolvedSource, type InstallationSource, type InstalledArtifactReference, type EdgeInstallationTelemetry } from "@fentaris/core";
+import type { CredentialStore, JsonStore } from "./platform.js";
+export interface DurableInstallationAttempt extends InstallationAttemptSummary {
+    readonly deploymentId: string;
+    readonly desiredVersion: number;
+    readonly processIds?: readonly number[];
+    readonly diagnostics?: readonly string[];
+}
+export interface InstallationStateDocument {
+    readonly schemaVersion: 1;
+    readonly attempts: Readonly<Record<string, DurableInstallationAttempt>>;
+    readonly approvals: Readonly<Record<string, InstallationApprovalRecord>>;
+    readonly lifecycle: Readonly<Record<string, InstallationLifecycleSummary>>;
+    readonly artifacts: Readonly<Record<string, InstallationArtifactRecord>>;
+    readonly activePointers: Readonly<Record<string, InstallationDigest>>;
+    readonly retentionReferences: Readonly<Record<string, readonly InstallationDigest[]>>;
+}
+/** Protected durable installation state persisted atomically by the platform store. */
+export declare class ProtectedInstallationState {
+    private readonly store;
+    private queue;
+    constructor(store: JsonStore<InstallationStateDocument>);
+    snapshot(): Promise<InstallationStateDocument>;
+    update<T>(mutation: (document: InstallationStateDocument) => readonly [InstallationStateDocument, T]): Promise<T>;
+    putAttempt(attempt: DurableInstallationAttempt): Promise<void>;
+    putApproval(approval: InstallationApprovalRecord): Promise<void>;
+    putLifecycle(value: InstallationLifecycleSummary): Promise<void>;
+    putArtifact(value: InstallationArtifactRecord): Promise<void>;
+    approval(digest: InstallationDigest, cleanup?: boolean): Promise<InstallationApprovalRecord | undefined>;
+    lifecycle(deploymentId: string): Promise<InstallationLifecycleSummary | undefined>;
+    artifact(digest: InstallationDigest): Promise<InstallationArtifactRecord | undefined>;
+    attempts(digest: InstallationDigest): Promise<readonly DurableInstallationAttempt[]>;
+    activate(deploymentId: string, artifact: InstallationArtifactRecord, retain: number): Promise<void>;
+    removeReference(deploymentId: string, digest: InstallationDigest): Promise<InstallationArtifactRecord | undefined>;
+    rollbackCandidate(deploymentId: string): Promise<InstallationArtifactRecord | undefined>;
+    clear(): Promise<void>;
+}
+export interface InstallationReviewModel {
+    readonly approvalDigest: InstallationDigest;
+    readonly recipeDigest: InstallationDigest;
+    readonly provider: InstallationProviderKind;
+    readonly providerDetails: Readonly<Record<string, unknown>>;
+    readonly source?: Readonly<Record<string, unknown>>;
+    readonly entrypoint?: string;
+    readonly interpreter?: string;
+    readonly arguments: readonly string[];
+    readonly permissions: InstallationRecipe["permissions"];
+    readonly outputs: InstallationRecipe["outputs"];
+    readonly verification: InstallationRecipe["verification"];
+    readonly cleanup: InstallationRecipe["cleanup"];
+}
+/** Build exact bounded custom-install review material without credential values. */
+export declare function buildInstallationReview(recipe: InstallationRecipe, localPolicy: unknown): InstallationReviewModel;
+export declare class InstallationConsentManager {
+    private readonly state;
+    private readonly now;
+    constructor(state: ProtectedInstallationState, now?: () => number);
+    review(recipe: InstallationRecipe, localPolicy: unknown): InstallationReviewModel;
+    decide(review: InstallationReviewModel, decision: "approved" | "denied" | "revoked", cleanup?: boolean): Promise<void>;
+    decision(review: InstallationReviewModel, cleanup?: boolean): Promise<InstallationApprovalRecord | undefined>;
+}
+export interface InstallationReviewPrompter {
+    present(review: InstallationReviewModel): void | Promise<void>;
+    confirm(message: string): Promise<boolean>;
+}
+/** Interactive local approval flow that presents the complete bounded review. */
+export declare class TerminalInstallationConsent {
+    private readonly consent;
+    private readonly prompt;
+    constructor(consent: InstallationConsentManager, prompt: InstallationReviewPrompter);
+    reviewAndDecide(recipe: InstallationRecipe, localPolicy: unknown, cleanup?: boolean): Promise<InstallationApprovalRecord>;
+}
+export interface InstallationIsolationAdapter {
+    readonly filesystem: boolean;
+    readonly network: boolean;
+    wrap(input: InstallerRunRequest): Promise<InstallerRunRequest>;
+}
+/** Build an enforceable platform adapter when an approved sandbox command is configured. */
+export declare function commandIsolationAdapter(options?: {
+    readonly platform?: NodeJS.Platform;
+    readonly executable?: string;
+}): InstallationIsolationAdapter;
+export interface InstallerRunRequest {
+    readonly command: string;
+    readonly args?: readonly string[];
+    readonly cwd: string;
+    readonly env?: Readonly<Record<string, string>>;
+    readonly secrets?: readonly string[];
+    readonly timeoutMs: number;
+    readonly maxOutputBytes: number;
+    readonly maxDiskBytes: number;
+    readonly allowedExecutables?: readonly string[];
+    readonly requireFilesystemIsolation?: boolean;
+    readonly requireNetworkIsolation?: boolean;
+}
+export interface InstallerRunResult {
+    readonly code: number;
+    readonly output: string;
+    readonly startedAt: number;
+    readonly finishedAt: number;
+    readonly pid?: number;
+}
+/** Process-tree supervised, bounded, no-elevation installer execution. */
+export declare class BoundedInstallerRunner {
+    private readonly isolation;
+    private readonly now;
+    constructor(isolation?: InstallationIsolationAdapter, now?: () => number);
+    run(input: InstallerRunRequest): Promise<InstallerRunResult>;
+}
+export interface InstallationCommandExecutor {
+    run(command: string, args: readonly string[], options: {
+        cwd: string;
+        env?: Readonly<Record<string, string>>;
+    }): Promise<string>;
+}
+export declare class NodeInstallationCommandExecutor implements InstallationCommandExecutor {
+    private readonly runner;
+    constructor(runner?: BoundedInstallerRunner);
+    run(command: string, args: readonly string[], options: {
+        cwd: string;
+        env?: Readonly<Record<string, string>>;
+    }): Promise<string>;
+}
+export interface InstallationDownloadAdapter {
+    download(url: string, destination: string, credential?: string, maxBytes?: number): Promise<void>;
+}
+export declare class FetchInstallationDownloader implements InstallationDownloadAdapter {
+    download(url: string, destination: string, credential?: string, maxBytes?: number): Promise<void>;
+}
+/** Tar archive extraction with preflight type/path checks and post-extract containment. */
+export declare class SecureTarExtractor {
+    private readonly commands;
+    constructor(commands?: InstallationCommandExecutor);
+    extract(archive: string, destination: string): Promise<void>;
+}
+export interface LocalInstallationGrantResolver {
+    resolve(grantRef: string): Promise<string>;
+}
+export interface EnterpriseInstallationResolver {
+    readonly adapter: string;
+    resolve(artifactRef: string, destination: string, credential?: string): Promise<void>;
+}
+/** Immutable Git/archive/inline/local/enterprise staging implementation. */
+export declare class ManagedInstallationSourceResolver {
+    private readonly options;
+    constructor(options?: {
+        readonly commands?: InstallationCommandExecutor;
+        readonly downloader?: InstallationDownloadAdapter;
+        readonly extractor?: SecureTarExtractor;
+        readonly credentials?: CredentialStore;
+        readonly local?: LocalInstallationGrantResolver;
+        readonly enterprise?: readonly EnterpriseInstallationResolver[];
+    });
+    resolve(source: InstallationSource, destination: string): Promise<InstallationResolvedSource>;
+    private git;
+    private archive;
+    private inline;
+    private local;
+    private enterprise;
+}
+export interface InstallationVerificationService {
+    verify(recipe: InstallationRecipe, root: string): Promise<Readonly<Record<string, string>>>;
+}
+export declare class NodeInstallationVerificationService implements InstallationVerificationService {
+    verify(recipe: InstallationRecipe, root: string): Promise<Readonly<Record<string, string>>>;
+}
+export declare class SharedInstallationProvider implements InstallationProviderAdapter {
+    readonly kind: InstallationProviderKind;
+    private readonly source;
+    private readonly runner;
+    private readonly verifier;
+    constructor(kind: InstallationProviderKind, source: ManagedInstallationSourceResolver, runner: BoundedInstallerRunner, verifier?: InstallationVerificationService);
+    preflight(context: InstallationProviderContext): Promise<{
+        ready: boolean;
+        reasonCode?: undefined;
+    } | {
+        ready: boolean;
+        reasonCode: "manual-prerequisite-required";
+    }>;
+    install(context: InstallationProviderContext): Promise<void>;
+    verify(context: InstallationProviderContext): Promise<Readonly<Record<string, string>>>;
+    cleanup(context: InstallationProviderContext): Promise<void>;
+}
+export interface InstallationReconcileRequest {
+    readonly deploymentId: string;
+    readonly desiredVersion: number;
+    readonly launchDigest: string;
+    readonly recipe: InstallationRecipe;
+    readonly localPolicy?: unknown;
+    readonly explicitRetry?: boolean;
+}
+export interface InstallationCoordinatorOptions {
+    readonly state: ProtectedInstallationState;
+    readonly consent: InstallationConsentManager;
+    readonly lock: InstallationMutationLock;
+    readonly providers: ReadonlyMap<InstallationProviderKind, InstallationProviderAdapter>;
+    readonly installationRoot: string;
+    readonly stagingRoot: string;
+    readonly platform?: NodeJS.Platform;
+    readonly architecture?: string;
+    readonly now?: () => number;
+    readonly attemptId?: () => string;
+    readonly terminateProcess?: (pid: number) => Promise<void>;
+    readonly telemetry?: EdgeInstallationTelemetry;
+}
+/** Idempotent, crash-aware installation lifecycle coordinator. */
+export declare class InstallationCoordinator {
+    private readonly options;
+    private readonly now;
+    private readonly attemptId;
+    constructor(options: InstallationCoordinatorOptions);
+    reconcile(request: InstallationReconcileRequest): Promise<InstallationLifecycleSummary>;
+    status(deploymentId: string): Promise<InstallationLifecycleSummary | undefined>;
+    review(recipe: InstallationRecipe, localPolicy?: unknown, cleanup?: boolean): InstallationReviewModel;
+    decide(recipe: InstallationRecipe, decision: "approved" | "denied" | "revoked", localPolicy?: unknown, cleanup?: boolean): Promise<InstallationApprovalRecord>;
+    recoverInterrupted(): Promise<readonly DurableInstallationAttempt[]>;
+    remove(deploymentId: string, recipe: InstallationRecipe, approveCleanup?: boolean): Promise<InstallationLifecycleSummary>;
+    rollback(deploymentId: string, request: InstallationReconcileRequest): Promise<InstallationLifecycleSummary>;
+    resolveArtifact(reference: InstalledArtifactReference): Promise<string>;
+    private transition;
+    private emit;
+}
+export declare function createDefaultInstallationProviders(options?: {
+    source?: ManagedInstallationSourceResolver;
+    runner?: BoundedInstallerRunner;
+    verifier?: InstallationVerificationService;
+}): ReadonlyMap<InstallationProviderKind, InstallationProviderAdapter>;
+export declare class InstallationExecutionError extends Error {
+    readonly reasonCode: InstallationReasonCode;
+    constructor(reasonCode: InstallationReasonCode, message: string);
+}
+//# sourceMappingURL=installation.d.ts.map

package/dist/installation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation.d.ts","sourceRoot":"","sources":["../src/installation.ts"],"names":[],"mappings":"AAiBA,OAAO,EAML,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EAEvB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAGhE,MAAM,WAAW,0BAA2B,SAAQ,0BAA0B;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACxE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC3E,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAAC,CAAC;CACvF;AAYD,uFAAuF;AACvF,qBAAa,0BAA0B;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IADlC,OAAO,CAAC,KAAK,CAAqB;gBACL,KAAK,EAAE,SAAS,CAAC,yBAAyB,CAAC;IAElE,QAAQ,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAI9C,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,yBAAyB,KAAK,SAAS,CAAC,yBAAyB,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAYvH,UAAU,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,WAAW,CAAC,QAAQ,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE,YAAY,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYhE,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAItG,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAIlF,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAIrF,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC;IAMpF,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBnG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAYlH,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAM9F,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;CACjD;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,GAAG,uBAAuB,CAgBjH;AAED,qBAAa,0BAA0B;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAA8B,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAvD,KAAK,EAAE,0BAA0B,EAAmB,GAAG,GAAE,MAAM,MAAiB;IAC7G,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,GAAG,uBAAuB;IAC3E,MAAM,CAAC,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAGpH,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,OAAO,UAAQ;CAChE;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5C;AAED,iFAAiF;AACjF,qBAAa,2BAA2B;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAA8B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAA5D,OAAO,EAAE,0BAA0B,EAAmB,MAAM,EAAE,0BAA0B;IAC/G,eAAe,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAS9H;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAChE;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CAAC,OAAO,GAAE;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,4BAA4B,CAuBpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,0EAA0E;AAC1E,qBAAa,sBAAsB;IAE/B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,SAAS,GAAE,4BAAiD,EAC5D,GAAG,GAAE,MAAM,MAAiB;IAGzC,GAAG,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CA0DnE;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClI;AAED,qBAAa,+BAAgC,YAAW,2BAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,yBAA+B;IAC5D,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAGvI;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnG;AAED,qBAAa,2BAA4B,YAAW,2BAA2B;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CAe7G;AAED,2FAA2F;AAC3F,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,GAAE,2BAAmE;IACpG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAYnE;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AAED,4EAA4E;AAC5E,qBAAa,iCAAiC;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE;QACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;QAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;QACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,8BAA8B,CAAC;QAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAC;KAC5D;IAEA,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;YAiBrF,GAAG;YA+BH,OAAO;YAWP,MAAM;YAMN,KAAK;YAUL,UAAU;CAQzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CAC7F;AAED,qBAAa,mCAAoC,YAAW,+BAA+B;IACnF,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAalG;AAED,qBAAa,0BAA2B,YAAW,2BAA2B;IAE1E,QAAQ,CAAC,IAAI,EAAE,wBAAwB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAHhB,IAAI,EAAE,wBAAwB,EACtB,MAAM,EAAE,iCAAiC,EACzC,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,GAAE,+BAA2E;IAGlG,SAAS,CAAC,OAAO,EAAE,2BAA2B;;;;;;;IAY9C,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAsDlE,MAAM,CAAC,OAAO,EAAE,2BAA2B;IAMrC,OAAO,CAAC,OAAO,EAAE,2BAA2B;CAYnD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;IACvF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;CAChD;AAED,kEAAkE;AAClE,qBAAa,uBAAuB;IAGtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBACZ,OAAO,EAAE,8BAA8B;IAK9D,SAAS,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAiE7F,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAI/E,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,GAAE,OAAY,EAAE,OAAO,UAAQ,GAAG,uBAAuB;IAIjG,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,EAAE,WAAW,GAAE,OAAY,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAMhK,kBAAkB,IAAI,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC;IAYpE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,UAAQ,GAAG,OAAO,CAAC,4BAA4B,CAAC;IA+BvH,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAU5G,eAAe,CAAC,SAAS,EAAE,0BAA0B,GAAG,OAAO,CAAC,MAAM,CAAC;YAO/D,UAAU;YAsBV,IAAI;CAQnB;AAED,wBAAgB,kCAAkC,CAAC,OAAO,GAAE;IAC1D,MAAM,CAAC,EAAE,iCAAiC,CAAC;IAC3C,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,QAAQ,CAAC,EAAE,+BAA+B,CAAC;CACvC,GAAG,WAAW,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAK1E;AA4ID,qBAAa,0BAA2B,SAAQ,KAAK;IACvC,QAAQ,CAAC,UAAU,EAAE,sBAAsB;gBAAlC,UAAU,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM;CACzE"}