@legioncodeinc/nectar 0.0.1

package/dist/service/argv.js

@@ -0,0 +1,127 @@
+/**
+ * Exact argv construction for every service-manager command (PRD-003b).
+ *
+ * Mirrors doctor's `service/argv.ts` with nectar's unit/task names. Each
+ * operation - install, uninstall, status - maps to one or more ordered argv arrays.
+ * This module is the single source of truth for those argv arrays; it is pure (a
+ * {@link ServicePlan} in, argv arrays out) so a test asserts the EXACT command line
+ * per platform without ever executing it.
+ *
+ * Every command goes through the injected {@link CommandRunner} (execFile, no shell),
+ * so a unit path or label can never be re-parsed as a shell metacharacter.
+ *
+ * launchd: `launchctl bootstrap gui/<uid> <plist>` (modern) to load, `bootout` to unload.
+ * systemd: `systemctl --user enable --now nectar.service` to install+start,
+ *          `disable --now` to remove, `is-active` for status.
+ * schtasks: `/Create /XML <file> /TN nectar /F` (per-user, no admin),
+ *           `/Delete /TN nectar /F`, `/Query /TN nectar` for status.
+ * sc.exe:  `create` + `start` (system service, enterprise opt-in), `stop`+`delete`,
+ *          `query` for status.
+ *
+ * Built-ins only; pure functions.
+ */
+import { LEGACY_SERVICE_LABEL, LEGACY_SYSTEMD_UNIT_NAME, LEGACY_WINDOWS_TASK_NAME, SYSTEMD_UNIT_NAME, WINDOWS_TASK_NAME, } from "./platform.js";
+/** Build the launchd `gui/<uid>` domain-target string used by bootstrap/bootout. */
+export function launchdDomainTarget(plan, uid) {
+    return plan.scope === "system" ? "system" : `gui/${uid}`;
+}
+/** The launchd service target (`<domain>/<label>`) used by `bootout` + `kickstart`. */
+export function launchdServiceTarget(plan, uid) {
+    return `${launchdDomainTarget(plan, uid)}/${plan.label}`;
+}
+/**
+ * The argv to INSTALL (register + start) the service for this plan. Returns the
+ * ordered list of commands to run; the caller writes the unit file first (when the
+ * plan has a unitPath), then runs these.
+ */
+export function installCommands(plan, uid) {
+    switch (plan.manager) {
+        case "launchd": {
+            const domain = launchdDomainTarget(plan, uid);
+            return [
+                { command: "launchctl", args: ["bootstrap", domain, plan.unitPath] },
+                { command: "launchctl", args: ["kickstart", "-k", launchdServiceTarget(plan, uid)] },
+            ];
+        }
+        case "systemd": {
+            const scopeArgs = plan.scope === "user" ? ["--user"] : [];
+            // NEC-042 item 3 / AC-018l.10: `daemon-reload` BEFORE `enable --now`, so a
+            // reinstall over a changed unit file makes systemd re-read it instead of
+            // keeping the cached (stale) unit definition running.
+            return [
+                { command: "systemctl", args: [...scopeArgs, "daemon-reload"] },
+                { command: "systemctl", args: [...scopeArgs, "enable", "--now", SYSTEMD_UNIT_NAME] },
+            ];
+        }
+        case "schtasks": {
+            return [
+                { command: "schtasks", args: ["/Create", "/XML", plan.unitPath, "/TN", WINDOWS_TASK_NAME, "/F"] },
+                { command: "schtasks", args: ["/Run", "/TN", WINDOWS_TASK_NAME] },
+            ];
+        }
+        case "sc": {
+            const binPath = `"${process.execPath}" "${plan.execPath}" daemon`;
+            return [
+                { command: "sc", args: ["create", WINDOWS_TASK_NAME, `binPath=${binPath}`, "start=", "auto"] },
+                { command: "sc", args: ["start", WINDOWS_TASK_NAME] },
+            ];
+        }
+    }
+}
+/** The argv to UNINSTALL (stop + remove) the service for this plan, in order. */
+export function uninstallCommands(plan, uid) {
+    switch (plan.manager) {
+        case "launchd":
+            return [{ command: "launchctl", args: ["bootout", launchdServiceTarget(plan, uid)] }];
+        case "systemd": {
+            const scopeArgs = plan.scope === "user" ? ["--user"] : [];
+            return [{ command: "systemctl", args: [...scopeArgs, "disable", "--now", SYSTEMD_UNIT_NAME] }];
+        }
+        case "schtasks":
+            return [{ command: "schtasks", args: ["/Delete", "/TN", WINDOWS_TASK_NAME, "/F"] }];
+        case "sc":
+            return [
+                { command: "sc", args: ["stop", WINDOWS_TASK_NAME] },
+                { command: "sc", args: ["delete", WINDOWS_TASK_NAME] },
+            ];
+    }
+}
+/**
+ * The argv to deregister the PRE-decision-#32 unit names (`com.hivenectar.daemon` /
+ * `hivenectar.service` / `HivenectarDaemon`). Run best-effort at the start of every
+ * install so a re-run migrates a legacy unit; when no legacy unit exists these
+ * commands fail harmlessly and the install proceeds.
+ */
+export function legacyUninstallCommands(plan, uid) {
+    switch (plan.manager) {
+        case "launchd":
+            return [{ command: "launchctl", args: ["bootout", `${launchdDomainTarget(plan, uid)}/${LEGACY_SERVICE_LABEL}`] }];
+        case "systemd": {
+            const scopeArgs = plan.scope === "user" ? ["--user"] : [];
+            return [{ command: "systemctl", args: [...scopeArgs, "disable", "--now", LEGACY_SYSTEMD_UNIT_NAME] }];
+        }
+        case "schtasks":
+            return [{ command: "schtasks", args: ["/Delete", "/TN", LEGACY_WINDOWS_TASK_NAME, "/F"] }];
+        case "sc":
+            return [
+                { command: "sc", args: ["stop", LEGACY_WINDOWS_TASK_NAME] },
+                { command: "sc", args: ["delete", LEGACY_WINDOWS_TASK_NAME] },
+            ];
+    }
+}
+/** The single argv to QUERY status. The caller interprets the command's exit/stdout. */
+export function statusCommand(plan, uid) {
+    switch (plan.manager) {
+        case "launchd":
+            return { command: "launchctl", args: ["print", launchdServiceTarget(plan, uid)] };
+        case "systemd": {
+            const scopeArgs = plan.scope === "user" ? ["--user"] : [];
+            return { command: "systemctl", args: [...scopeArgs, "is-active", SYSTEMD_UNIT_NAME] };
+        }
+        case "schtasks":
+            return { command: "schtasks", args: ["/Query", "/TN", WINDOWS_TASK_NAME] };
+        case "sc":
+            return { command: "sc", args: ["query", WINDOWS_TASK_NAME] };
+    }
+}
+//# sourceMappingURL=argv.js.map

package/dist/service/argv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argv.js","sourceRoot":"","sources":["../../src/service/argv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,eAAe,CAAC;AAUvB,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,IAAiB,EAAE,GAAW;IAChE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;AAC3D,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,IAAiB,EAAE,GAAW;IACjE,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiB,EAAE,GAAW;IAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,OAAO;gBACL,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACpE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE;aACrF,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,2EAA2E;YAC3E,yEAAyE;YACzE,sDAAsD;YACtD,OAAO;gBACL,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,eAAe,CAAC,EAAE;gBAC/D,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE;aACrF,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,OAAO;gBACL,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE;gBACjG,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE;aAClE,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,UAAU,CAAC;YAClE,OAAO;gBACL,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,WAAW,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBAC9F,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE;aACtD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,IAAiB,EAAE,GAAW;IAC9D,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACxF,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,UAAU;YACb,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,KAAK,IAAI;YACP,OAAO;gBACL,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE;gBACpD,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE;aACvD,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiB,EAAE,GAAW;IACpE,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QACpH,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,wBAAwB,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,KAAK,UAAU;YACb,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,KAAK,IAAI;YACP,OAAO;gBACL,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAAE;gBAC3D,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE;aAC9D,CAAC;IACN,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,IAAiB,EAAE,GAAW;IAC1D,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACpF,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxF,CAAC;QACD,KAAK,UAAU;YACb,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7E,KAAK,IAAI;YACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/service/command-runner.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Injectable command-runner boundary for the service module (PRD-003b).
+ *
+ * Every OS-service shell-out (`launchctl`, `systemctl`, `schtasks`, `sc`) goes
+ * through this {@link CommandRunner} interface so the service module is hermetic
+ * and testable: a unit test injects a fake that records the argv and returns a
+ * canned {@link CommandResult}, and the CLI wires the real built-in runner
+ * ({@link createExecFileRunner}) in production.
+ *
+ * The real runner uses `node:child_process.execFile` (NOT `exec`): execFile takes
+ * an argv array and does NOT spawn a shell, so a unit path or label can never be
+ * interpreted as a shell metacharacter. Mirrors doctor's `CommandRunner` seam
+ * (doctor/src/rungs/command-runner.ts), scoped to nectar's OS-service
+ * commands (no npm-launch special-casing needed here).
+ *
+ * Crash-safety: `run` resolves to a {@link CommandResult} for BOTH success and
+ * failure - a non-zero exit, a spawn error (manager not found), or a timeout all
+ * become a result with `ok:false`, never a thrown error.
+ *
+ * Built-ins only: node:child_process.
+ */
+/** The outcome of running one external command. Never throws; failure is a value. */
+export interface CommandResult {
+    /** True iff the process exited 0 within the timeout and did not fail to spawn. */
+    readonly ok: boolean;
+    /** The exit code, or null when the process was killed / failed to spawn. */
+    readonly code: number | null;
+    /** Captured stdout (size-capped). */
+    readonly stdout: string;
+    /** Captured stderr (size-capped). */
+    readonly stderr: string;
+    /** A short failure note (spawn error class / timeout), when `ok` is false. */
+    readonly detail?: string;
+}
+/** Options for a single {@link CommandRunner.run} call. */
+export interface CommandRunOptions {
+    /** Hard timeout in ms; the process is killed and the result is `ok:false` after it. */
+    readonly timeoutMs?: number;
+}
+/** The injectable boundary the service module calls. */
+export interface CommandRunner {
+    /**
+     * Run `command` with `args` (argv, no shell). Resolves to a {@link CommandResult}
+     * for success AND failure - NEVER rejects.
+     */
+    run(command: string, args: readonly string[], options?: CommandRunOptions): Promise<CommandResult>;
+}
+/**
+ * Build the REAL command runner over `node:child_process.execFile`, no shell. Every
+ * failure mode (non-zero exit, ENOENT spawn failure, timeout kill) is mapped to a
+ * {@link CommandResult} rather than a thrown error.
+ */
+export declare function createExecFileRunner(): CommandRunner;
+//# sourceMappingURL=command-runner.d.ts.map

package/dist/service/command-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-runner.d.ts","sourceRoot":"","sources":["../../src/service/command-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACpG;AAQD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,aAAa,CA4BpD"}

package/dist/service/command-runner.js

@@ -0,0 +1,55 @@
+/**
+ * Injectable command-runner boundary for the service module (PRD-003b).
+ *
+ * Every OS-service shell-out (`launchctl`, `systemctl`, `schtasks`, `sc`) goes
+ * through this {@link CommandRunner} interface so the service module is hermetic
+ * and testable: a unit test injects a fake that records the argv and returns a
+ * canned {@link CommandResult}, and the CLI wires the real built-in runner
+ * ({@link createExecFileRunner}) in production.
+ *
+ * The real runner uses `node:child_process.execFile` (NOT `exec`): execFile takes
+ * an argv array and does NOT spawn a shell, so a unit path or label can never be
+ * interpreted as a shell metacharacter. Mirrors doctor's `CommandRunner` seam
+ * (doctor/src/rungs/command-runner.ts), scoped to nectar's OS-service
+ * commands (no npm-launch special-casing needed here).
+ *
+ * Crash-safety: `run` resolves to a {@link CommandResult} for BOTH success and
+ * failure - a non-zero exit, a spawn error (manager not found), or a timeout all
+ * become a result with `ok:false`, never a thrown error.
+ *
+ * Built-ins only: node:child_process.
+ */
+import { execFile } from "node:child_process";
+/** The default per-command timeout (these are fast, local commands): 15 seconds. */
+const DEFAULT_TIMEOUT_MS = 15_000;
+/** Cap captured output so a chatty service manager can never balloon memory. */
+const MAX_BUFFER_BYTES = 1024 * 1024;
+/**
+ * Build the REAL command runner over `node:child_process.execFile`, no shell. Every
+ * failure mode (non-zero exit, ENOENT spawn failure, timeout kill) is mapped to a
+ * {@link CommandResult} rather than a thrown error.
+ */
+export function createExecFileRunner() {
+    return {
+        run(command, args, options) {
+            const timeout = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+            return new Promise((resolve) => {
+                execFile(command, args, { timeout, maxBuffer: MAX_BUFFER_BYTES, shell: false, windowsHide: true }, (error, stdout, stderr) => {
+                    if (error === null) {
+                        resolve({ ok: true, code: 0, stdout, stderr });
+                        return;
+                    }
+                    const errWithMeta = error;
+                    const numericCode = typeof errWithMeta.code === "number" ? errWithMeta.code : null;
+                    const detail = typeof errWithMeta.code === "string"
+                        ? errWithMeta.code
+                        : error instanceof Error
+                            ? error.message
+                            : "command-failed";
+                    resolve({ ok: false, code: numericCode, stdout, stderr, detail });
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=command-runner.js.map

package/dist/service/command-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-runner.js","sourceRoot":"","sources":["../../src/service/command-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AA+B9C,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,GAAG,CAAC,OAAe,EAAE,IAAuB,EAAE,OAA2B;YACvE,MAAM,OAAO,GAAG,OAAO,EAAE,SAAS,IAAI,kBAAkB,CAAC;YACzD,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;gBAC5C,QAAQ,CACN,OAAO,EACP,IAAI,EACJ,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EACzE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;oBACxB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;wBAC/C,OAAO;oBACT,CAAC;oBACD,MAAM,WAAW,GAAG,KAA2D,CAAC;oBAChF,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;oBACnF,MAAM,MAAM,GACV,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;wBAClC,CAAC,CAAC,WAAW,CAAC,IAAI;wBAClB,CAAC,CAAC,KAAK,YAAY,KAAK;4BACtB,CAAC,CAAC,KAAK,CAAC,OAAO;4BACf,CAAC,CAAC,gBAAgB,CAAC;oBACzB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACpE,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/service/index.d.ts

@@ -0,0 +1,83 @@
+/**
+ * nectar's OS-service manager (PRD-003b) - the module the CLI's `install` /
+ * `uninstall` commands delegate to.
+ *
+ * It does the three things PRD-003b's Goals describe:
+ *   - install()   : resolve the platform plan, write the unit file (when file-based),
+ *                   then run the manager's install argv. Userland scope by default,
+ *                   privileged fallback ordering computed in {@link resolveServicePlan}.
+ *   - uninstall() : run the manager's uninstall argv, then delete the unit file, so
+ *                   the unit does not resurrect on next boot (US-003b.4).
+ *   - status()    : run the manager's status argv and classify the result.
+ *
+ * Crash-safe: every shell-out is the injected {@link CommandRunner} (execFile, no
+ * shell) which never throws; every fs call is behind the injected {@link ServiceFs}
+ * and wrapped, so a permission error becomes a returned {@link ServiceResult}, never
+ * a thrown stack. Mirrors doctor's service module (doctor/src/service/index.ts)
+ * with nectar's own templates/argv/run command.
+ *
+ * Built-ins only: the production fs uses node:fs, the runner uses node:child_process.
+ */
+import { type CommandRunner } from "./command-runner.js";
+import { type ServiceEnvironment } from "./platform.js";
+/** A coarse, classified service status (what `nectar service-status` reports). */
+export type ServiceStatus = "running" | "not-running" | "unknown";
+/** The outcome of an install/uninstall call. */
+export interface ServiceResult {
+    /** True iff the operation fully succeeded. */
+    readonly ok: boolean;
+    /** A human-readable, secret-free result line. */
+    readonly message: string;
+}
+/** The minimal filesystem surface the service module needs (injected so tests are hermetic). */
+export interface ServiceFs {
+    /** Create a directory (recursive). Must be idempotent (no throw if it already exists). */
+    mkdirp(dir: string): void;
+    /** Write a file's text content, overwriting. */
+    writeFile(path: string, content: string): void;
+    /** Remove a file. Must NOT throw when the file is already absent. */
+    removeFile(path: string): void;
+}
+/** The production {@link ServiceFs} over node:fs. */
+export declare function createNodeServiceFs(): ServiceFs;
+/** Construction deps for {@link createServiceModule}. All have production defaults. */
+export interface ServiceModuleDeps {
+    /** The absolute path to the `nectar` bin the unit execs. */
+    readonly execPath: string;
+    /** Opt into a system-scoped unit when privileged (enterprise path). Default false. */
+    readonly preferSystemScope?: boolean;
+    /** The command runner (execFile, no shell). Default: the real {@link createExecFileRunner}. */
+    readonly runner?: CommandRunner;
+    /** The filesystem seam. Default: the real {@link createNodeServiceFs}. */
+    readonly fs?: ServiceFs;
+    /** The numeric uid for launchd's `gui/<uid>` domain. Default: live uid (0 when unavailable). */
+    readonly uid?: number;
+    /** Override the resolved environment (tests inject a fixed platform/home/privilege). */
+    readonly environment?: ServiceEnvironment;
+    /** Structured log sink; defaults to a no-op. */
+    readonly log?: (line: Record<string, unknown>) => void;
+}
+/** The service module surface: install / uninstall the OS service unit. */
+export interface ServiceModule {
+    install(): Promise<ServiceResult>;
+    uninstall(): Promise<ServiceResult>;
+}
+/**
+ * Build the real {@link ServiceModule}. The CLI injects the resolved exec path;
+ * tests inject the runner + fs + a fixed environment so nothing real runs.
+ */
+export declare function createServiceModule(deps: ServiceModuleDeps): ServiceModule;
+/**
+ * Probe the current service status. Returns a coarse {@link ServiceStatus}; never
+ * throws.
+ */
+export declare function serviceStatus(deps: ServiceModuleDeps): Promise<ServiceStatus>;
+export { resolveServicePlan, resolveServiceContext } from "./platform.js";
+export type { ServicePlan, ServiceEnvironment } from "./platform.js";
+export { SERVICE_LABEL, SYSTEMD_UNIT_NAME, WINDOWS_TASK_NAME, LEGACY_SERVICE_LABEL, LEGACY_SYSTEMD_UNIT_NAME, LEGACY_WINDOWS_TASK_NAME, legacyUnitPath, } from "./platform.js";
+export { NECTAR_RUN_COMMAND, RESTART_SEC, WINDOWS_RESTART_INTERVAL, renderUnit } from "./templates.js";
+export { installCommands, uninstallCommands, legacyUninstallCommands, statusCommand } from "./argv.js";
+export type { ServiceCommand } from "./argv.js";
+export { createExecFileRunner } from "./command-runner.js";
+export type { CommandRunner, CommandResult, CommandRunOptions } from "./command-runner.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EAA4C,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQnG,OAAO,EAIL,KAAK,kBAAkB,EAExB,MAAM,eAAe,CAAC;AAGvB,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAElE,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAKD,gGAAgG;AAChG,MAAM,WAAW,SAAS;IACxB,0FAA0F;IAC1F,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gDAAgD;IAChD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,qEAAqE;IACrE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,qDAAqD;AACrD,wBAAgB,mBAAmB,IAAI,SAAS,CAY/C;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;IACxB,gGAAgG;IAChG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,gDAAgD;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACxD;AAqED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAClC,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CAqI1E;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqBnF;AAED,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACvG,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/service/index.js

@@ -0,0 +1,270 @@
+/**
+ * nectar's OS-service manager (PRD-003b) - the module the CLI's `install` /
+ * `uninstall` commands delegate to.
+ *
+ * It does the three things PRD-003b's Goals describe:
+ *   - install()   : resolve the platform plan, write the unit file (when file-based),
+ *                   then run the manager's install argv. Userland scope by default,
+ *                   privileged fallback ordering computed in {@link resolveServicePlan}.
+ *   - uninstall() : run the manager's uninstall argv, then delete the unit file, so
+ *                   the unit does not resurrect on next boot (US-003b.4).
+ *   - status()    : run the manager's status argv and classify the result.
+ *
+ * Crash-safe: every shell-out is the injected {@link CommandRunner} (execFile, no
+ * shell) which never throws; every fs call is behind the injected {@link ServiceFs}
+ * and wrapped, so a permission error becomes a returned {@link ServiceResult}, never
+ * a thrown stack. Mirrors doctor's service module (doctor/src/service/index.ts)
+ * with nectar's own templates/argv/run command.
+ *
+ * Built-ins only: the production fs uses node:fs, the runner uses node:child_process.
+ */
+import { mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { createExecFileRunner } from "./command-runner.js";
+import { installCommands, legacyUninstallCommands, statusCommand, uninstallCommands, } from "./argv.js";
+import { legacyUnitPath, resolveServiceContext, resolveServicePlan, } from "./platform.js";
+import { renderUnit, launchdLogDir } from "./templates.js";
+/** Per-command timeout for a service-manager shell-out (these are fast, local commands). */
+const SERVICE_COMMAND_TIMEOUT_MS = 15_000;
+/** The production {@link ServiceFs} over node:fs. */
+export function createNodeServiceFs() {
+    return {
+        mkdirp(dir) {
+            mkdirSync(dir, { recursive: true });
+        },
+        writeFile(path, content) {
+            writeFileSync(path, content, { encoding: "utf8" });
+        },
+        removeFile(path) {
+            rmSync(path, { force: true });
+        },
+    };
+}
+/** Read the live numeric uid, defaulting to 0 when the platform does not expose it. */
+function liveUid() {
+    try {
+        const getuid = process.getuid;
+        return typeof getuid === "function" ? getuid() : 0;
+    }
+    catch {
+        return 0;
+    }
+}
+/** Human-readable scope phrase for the result line. */
+function scopePhrase(plan) {
+    const base = plan.scope === "user" ? "user scope" : "system scope";
+    return plan.fellBackToUser ? `${base} (fell back from system - unprivileged)` : base;
+}
+/** Cap how much of a command's own output we ever echo back in a result message. */
+const MAX_FAILURE_DETAIL_CHARS = 200;
+/**
+ * Reduce a failed {@link CommandResult} to one short, secret-free line worth
+ * surfacing to the operator (e.g. "Access is denied.", "ENOENT"). Prefers the
+ * runner's own `detail` (a spawn-error code or timeout marker); otherwise falls
+ * back to the last non-empty line of stderr, then stdout, since most service
+ * managers (schtasks, launchctl, systemctl) print their real error there and a
+ * generic "a command failed" with no reason is not actionable. Output is a
+ * fixed-format OS/service-manager message, never a credential, but is still
+ * length-capped defensively in case a manager is unexpectedly chatty.
+ */
+function describeFailure(result) {
+    if (result === null)
+        return "unknown error";
+    const candidate = result.detail ?? lastNonEmptyLine(result.stderr) ?? lastNonEmptyLine(result.stdout) ?? "unknown error";
+    return candidate.length > MAX_FAILURE_DETAIL_CHARS
+        ? `${candidate.slice(0, MAX_FAILURE_DETAIL_CHARS)}...`
+        : candidate;
+}
+function lastNonEmptyLine(text) {
+    const lines = text
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line !== "");
+    return lines.length > 0 ? (lines[lines.length - 1] ?? null) : null;
+}
+/**
+ * Run an ordered list of commands, stopping at nothing (every result is recorded)
+ * but reporting the first hard failure (and its result, for {@link describeFailure}).
+ * Never throws (the runner never does).
+ */
+async function runAll(runner, commands) {
+    let firstFailure = null;
+    let firstFailureResult = null;
+    for (const cmd of commands) {
+        const result = await runner.run(cmd.command, cmd.args, { timeoutMs: SERVICE_COMMAND_TIMEOUT_MS });
+        if (!result.ok && firstFailure === null) {
+            firstFailure = cmd;
+            firstFailureResult = result;
+        }
+    }
+    return { allOk: firstFailure === null, firstFailure, firstFailureResult };
+}
+/**
+ * Build the real {@link ServiceModule}. The CLI injects the resolved exec path;
+ * tests inject the runner + fs + a fixed environment so nothing real runs.
+ */
+export function createServiceModule(deps) {
+    const runner = deps.runner ?? createExecFileRunner();
+    const fs = deps.fs ?? createNodeServiceFs();
+    const log = deps.log ?? (() => { });
+    const uid = deps.uid ?? liveUid();
+    const environment = deps.environment ?? resolveServiceContext(deps.execPath, deps.preferSystemScope ?? false);
+    function plan() {
+        return resolveServicePlan(environment);
+    }
+    return {
+        async install() {
+            let p;
+            try {
+                p = plan();
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    message: `Could not register the nectar service: ${error instanceof Error ? error.message : "unknown error"}.`,
+                };
+            }
+            // 0) Migrate away from the pre-decision-#32 unit names: best-effort deregister the
+            //    legacy unit (`com.hivenectar.daemon` / `hivenectar.service` / `HivenectarDaemon`)
+            //    and remove its unit file, so a re-run never leaves two units racing over one
+            //    daemon. Expected to fail harmlessly when no legacy unit exists; never blocks
+            //    the install.
+            await runAll(runner, legacyUninstallCommands(p, uid));
+            try {
+                const legacyPath = legacyUnitPath(p);
+                if (legacyPath !== "")
+                    fs.removeFile(legacyPath);
+            }
+            catch {
+                // Best-effort migration cleanup only; a remove failure never blocks the install.
+            }
+            // 1) Write the unit file FIRST (when this manager is file-based). schtasks consumes the
+            //    XML file too, so a non-empty unitPath OR the schtasks manager means we lay down text.
+            const needsFile = p.unitPath !== "" || p.manager === "schtasks";
+            let unitTarget = p.unitPath;
+            if (needsFile) {
+                try {
+                    if (p.manager === "schtasks" && unitTarget === "") {
+                        unitTarget = `${p.home}/.honeycomb/nectar/nectar-task.xml`;
+                    }
+                    fs.mkdirp(dirname(unitTarget));
+                    fs.writeFile(unitTarget, renderUnit(p));
+                    // NEC-042 item 2 / AC-018l.9: launchd writes stdout/stderr into
+                    // `<home>/.honeycomb/nectar`, but the plist lives under LaunchAgents,
+                    // so mkdirp(dirname(unitTarget)) above only created LaunchAgents. Create
+                    // the log directory too, or the daemon's macOS logs are silently lost.
+                    if (p.manager === "launchd")
+                        fs.mkdirp(launchdLogDir(p.home));
+                }
+                catch (error) {
+                    return {
+                        ok: false,
+                        message: `Could not write the nectar unit file at ${unitTarget}: ${error instanceof Error ? error.message : "unknown error"}.`,
+                    };
+                }
+            }
+            // 2) Run the manager's install argv. For schtasks the staged file path is the unit path.
+            const planForArgv = unitTarget === p.unitPath ? p : { ...p, unitPath: unitTarget };
+            const { allOk, firstFailure, firstFailureResult } = await runAll(runner, installCommands(planForArgv, uid));
+            if (!allOk) {
+                const detail = describeFailure(firstFailureResult);
+                log({
+                    level: "warn",
+                    scope: "service",
+                    msg: "install_command_failed",
+                    command: firstFailure?.command,
+                    detail,
+                });
+                return {
+                    ok: false,
+                    message: `Registered the nectar unit but a service-manager command failed (${firstFailure?.command ?? "unknown"}): ${detail}. It will start at next login/boot; run \`nectar service-status\` to check.`,
+                };
+            }
+            log({ level: "info", scope: "service", msg: "installed", manager: p.manager, scope2: p.scope });
+            return {
+                ok: true,
+                message: `nectar registered as a ${p.manager} service (${scopePhrase(p)}) and started. It will restart on crash and start on boot.`,
+            };
+        },
+        async uninstall() {
+            let p;
+            try {
+                p = plan();
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    message: `Could not unregister the nectar service: ${error instanceof Error ? error.message : "unknown error"}.`,
+                };
+            }
+            const { allOk, firstFailure, firstFailureResult } = await runAll(runner, uninstallCommands(p, uid));
+            const stagedXml = p.manager === "schtasks" ? `${p.home}/.honeycomb/nectar/nectar-task.xml` : "";
+            try {
+                if (p.unitPath !== "")
+                    fs.removeFile(p.unitPath);
+                if (stagedXml !== "")
+                    fs.removeFile(stagedXml);
+            }
+            catch (error) {
+                log({
+                    level: "warn",
+                    scope: "service",
+                    msg: "unit_remove_failed",
+                    reason: error instanceof Error ? error.message : "unknown",
+                });
+            }
+            if (!allOk) {
+                const detail = describeFailure(firstFailureResult);
+                log({
+                    level: "warn",
+                    scope: "service",
+                    msg: "uninstall_command_failed",
+                    command: firstFailure?.command,
+                    detail,
+                });
+                return {
+                    ok: false,
+                    message: `Removed the nectar unit file; a deregister command (${firstFailure?.command ?? "unknown"}) reported an error (often because it was already gone): ${detail}.`,
+                };
+            }
+            log({ level: "info", scope: "service", msg: "uninstalled", manager: p.manager, scope2: p.scope });
+            return {
+                ok: true,
+                message: `nectar service unregistered (${p.manager}, ${scopePhrase(p)}). It will not start on next boot.`,
+            };
+        },
+    };
+}
+/**
+ * Probe the current service status. Returns a coarse {@link ServiceStatus}; never
+ * throws.
+ */
+export async function serviceStatus(deps) {
+    const runner = deps.runner ?? createExecFileRunner();
+    const uid = deps.uid ?? liveUid();
+    const environment = deps.environment ?? resolveServiceContext(deps.execPath, deps.preferSystemScope ?? false);
+    let p;
+    try {
+        p = resolveServicePlan(environment);
+    }
+    catch {
+        return "unknown";
+    }
+    const cmd = statusCommand(p, uid);
+    const result = await runner.run(cmd.command, cmd.args, { timeoutMs: SERVICE_COMMAND_TIMEOUT_MS });
+    if (!result.ok) {
+        if (result.detail !== undefined && /ENOENT|spawn/i.test(result.detail))
+            return "unknown";
+        return "not-running";
+    }
+    if (p.manager === "systemd") {
+        return /\bactive\b/.test(result.stdout) && !/inactive|failed/.test(result.stdout) ? "running" : "not-running";
+    }
+    return "running";
+}
+export { resolveServicePlan, resolveServiceContext } from "./platform.js";
+export { SERVICE_LABEL, SYSTEMD_UNIT_NAME, WINDOWS_TASK_NAME, LEGACY_SERVICE_LABEL, LEGACY_SYSTEMD_UNIT_NAME, LEGACY_WINDOWS_TASK_NAME, legacyUnitPath, } from "./platform.js";
+export { NECTAR_RUN_COMMAND, RESTART_SEC, WINDOWS_RESTART_INTERVAL, renderUnit } from "./templates.js";
+export { installCommands, uninstallCommands, legacyUninstallCommands, statusCommand } from "./argv.js";
+export { createExecFileRunner } from "./command-runner.js";
+//# sourceMappingURL=index.js.map

package/dist/service/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAA0C,MAAM,qBAAqB,CAAC;AACnG,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,iBAAiB,GAElB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAa3D,4FAA4F;AAC5F,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAY1C,qDAAqD;AACrD,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,MAAM,CAAC,GAAW;YAChB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,SAAS,CAAC,IAAY,EAAE,OAAe;YACrC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,UAAU,CAAC,IAAY;YACrB,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAoBD,uFAAuF;AACvF,SAAS,OAAO;IACd,IAAI,CAAC;QACH,MAAM,MAAM,GAAI,OAAsD,CAAC,MAAM,CAAC;QAC9E,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;IACnE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED,oFAAoF;AACpF,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,MAA4B;IACnD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;IACzG,OAAO,SAAS,CAAC,MAAM,GAAG,wBAAwB;QAChD,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,KAAK;QACtD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,MAAM,CACnB,MAAqB,EACrB,QAAmC;IAEnC,IAAI,YAAY,GAA0B,IAAI,CAAC;IAC/C,IAAI,kBAAkB,GAAyB,IAAI,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YACxC,YAAY,GAAG,GAAG,CAAC;YACnB,kBAAkB,GAAG,MAAM,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAC5E,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,mBAAmB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,GAAE,CAAC,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IAClC,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;IAE5F,SAAS,IAAI;QACX,OAAO,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,OAAO;YACX,IAAI,CAAc,CAAC;YACnB,IAAI,CAAC;gBACH,CAAC,GAAG,IAAI,EAAE,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,GAAG;iBAC/G,CAAC;YACJ,CAAC;YAED,mFAAmF;YACnF,uFAAuF;YACvF,kFAAkF;YAClF,kFAAkF;YAClF,kBAAkB;YAClB,MAAM,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;gBACrC,IAAI,UAAU,KAAK,EAAE;oBAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,iFAAiF;YACnF,CAAC;YAED,wFAAwF;YACxF,2FAA2F;YAC3F,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC;YAChE,IAAI,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC5B,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;wBAClD,UAAU,GAAG,GAAG,CAAC,CAAC,IAAI,oCAAoC,CAAC;oBAC7D,CAAC;oBACD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;oBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxC,gEAAgE;oBAChE,sEAAsE;oBACtE,yEAAyE;oBACzE,uEAAuE;oBACvE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;wBAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,2CAA2C,UAAU,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,GAAG;qBAC/H,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,yFAAyF;YACzF,MAAM,WAAW,GAAgB,UAAU,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAChG,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5G,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;gBACnD,GAAG,CAAC;oBACF,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,wBAAwB;oBAC7B,OAAO,EAAE,YAAY,EAAE,OAAO;oBAC9B,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,oEAAoE,YAAY,EAAE,OAAO,IAAI,SAAS,MAAM,MAAM,6EAA6E;iBACzM,CAAC;YACJ,CAAC;YAED,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAChG,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,0BAA0B,CAAC,CAAC,OAAO,aAAa,WAAW,CAAC,CAAC,CAAC,4DAA4D;aACpI,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,SAAS;YACb,IAAI,CAAc,CAAC;YACnB,IAAI,CAAC;gBACH,CAAC,GAAG,IAAI,EAAE,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,4CAA4C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,GAAG;iBACjH,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAEpG,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;oBAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,SAAS,KAAK,EAAE;oBAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC;oBACF,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,oBAAoB;oBACzB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;iBAC3D,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;gBACnD,GAAG,CAAC;oBACF,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,0BAA0B;oBAC/B,OAAO,EAAE,YAAY,EAAE,OAAO;oBAC9B,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,uDAAuD,YAAY,EAAE,OAAO,IAAI,SAAS,4DAA4D,MAAM,GAAG;iBACxK,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAClG,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,gCAAgC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,oCAAoC;aAC1G,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IAClC,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;IAC5F,IAAI,CAAc,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACzF,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IAChH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEvG,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}