@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/runtime/process/resource/policy.js

@@ -0,0 +1,501 @@
+import { isAbsolute } from "node:path";
+import { Predicate } from "effect";
+import { makeNodeRuntimeError } from "../../errors.js";
+export const processResourcePolicy = {
+    admissionWarningAvailableTrees: 8,
+    cleanupDeadlineMilliseconds: 2000,
+    launchAcknowledgementDeadline: "2 seconds",
+    maximumActiveTrees: 128,
+    maximumArgumentBytes: 64 * 1024,
+    maximumArguments: 128,
+    maximumCleanupAttempts: 2,
+    maximumConcurrentProcfsIdentityOpens: 8,
+    maximumCpuTimeMilliseconds: 30 * 24 * 60 * 60 * 1000,
+    maximumDataChunkBytes: 16 * 1024,
+    maximumEnvironmentBytes: 64 * 1024,
+    maximumEnvironmentEntries: 64,
+    maximumEnvironmentKeyBytes: 256,
+    maximumFileDescriptorsPerProcess: 65_536,
+    maximumIdentifierBytes: 128,
+    maximumIndividualArgumentBytes: 16 * 1024,
+    maximumInteractiveDataChunkBytes: 32 * 1024,
+    maximumMemoryBytes: 64 * 1024 * 1024 * 1024,
+    maximumPathBytes: 4096,
+    maximumPendingInputBytes: 64 * 1024,
+    maximumPendingOutputBytes: 256 * 1024,
+    maximumPendingOutputChunks: 256,
+    maximumProcessCount: 1024,
+    maximumProcfsIoBytes: 4096,
+    maximumPsOutputBytes: 8 * 1024 * 1024,
+    maximumPsRows: 65_536,
+    maximumRawSamplesPerTree: 60,
+    maximumTrackedMembersPerTree: 1024,
+    maximumWallTimeMilliseconds: 7 * 24 * 60 * 60 * 1000,
+    sampleInterval: "1 second",
+    samplerDeadline: "500 millis",
+    streamOfferDeadline: "250 millis",
+    terminalAcknowledgementDeadline: "2 seconds",
+    terminalCloseAcknowledgementDeadline: "4 seconds",
+};
+const utf8Bytes = (value) => Buffer.byteLength(value, "utf8");
+const boundedText = (value, maximumBytes) => value.length > 0 && utf8Bytes(value) <= maximumBytes && !value.includes("\0");
+const identifierValues = (owner) => [
+    owner.commandId,
+    owner.sessionId,
+    owner.taskId,
+    owner.terminalId,
+    owner.workspaceId,
+];
+const validPiOwner = (owner, workspaceRequired) => owner.commandId !== undefined &&
+    owner.sessionId !== undefined &&
+    owner.taskId === undefined &&
+    owner.terminalId === undefined &&
+    (workspaceRequired
+        ? owner.workspaceId !== undefined
+        : owner.workspaceId === undefined);
+const validOwner = (owner) => {
+    const identifiersValid = identifierValues(owner).every((value) => value === undefined ||
+        boundedText(value, processResourcePolicy.maximumIdentifierBytes));
+    if (!identifiersValid)
+        return false;
+    switch (owner.kind) {
+        case "codex-probe":
+            return owner.commandId !== undefined && owner.sessionId === undefined;
+        case "codex-session":
+            return owner.sessionId !== undefined && owner.workspaceId !== undefined;
+        case "git-inspection":
+            return owner.commandId !== undefined || owner.workspaceId !== undefined;
+        case "interactive-terminal":
+            return (owner.terminalId !== undefined &&
+                owner.workspaceId !== undefined &&
+                owner.sessionId === undefined);
+        case "pi-rpc-probe":
+            return validPiOwner(owner, false);
+        case "pi-rpc-session":
+            return validPiOwner(owner, true);
+    }
+};
+const interactiveTerminalEnvironmentKeys = new Set([
+    "COLORTERM",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LC_COLLATE",
+    "LC_CTYPE",
+    "LC_MESSAGES",
+    "LC_MONETARY",
+    "LC_NUMERIC",
+    "LC_TIME",
+    "LOGNAME",
+    "PATH",
+    "SHELL",
+    "TERM",
+    "USER",
+]);
+const localeEnvironmentKeys = new Set([
+    "LANG",
+    "LC_ALL",
+    "LC_COLLATE",
+    "LC_CTYPE",
+    "LC_MESSAGES",
+    "LC_MONETARY",
+    "LC_NUMERIC",
+    "LC_TIME",
+]);
+const validLocaleValue = (value) => value !== undefined &&
+    utf8Bytes(value) <= 64 &&
+    /^(?:C|POSIX|[A-Za-z]{2,3}(?:_[A-Za-z]{2})?(?:\.[A-Za-z0-9-]+)?(?:@[A-Za-z0-9-]+)?)$/u.test(value);
+const validInteractiveTerminalDimensions = (terminal) => Number.isSafeInteger(terminal.columns) &&
+    terminal.columns >= 2 &&
+    terminal.columns <= 500 &&
+    Number.isSafeInteger(terminal.generation) &&
+    terminal.generation >= 1 &&
+    terminal.generation <= 65_535 &&
+    Number.isSafeInteger(terminal.nativeOperationSequence) &&
+    terminal.nativeOperationSequence >= 1 &&
+    terminal.nativeOperationSequence <= 2_147_483_647 &&
+    Number.isSafeInteger(terminal.rows) &&
+    terminal.rows >= 2 &&
+    terminal.rows <= 300;
+const validRepositoryAuthority = (request) => {
+    const authority = request.repositoryAuthority;
+    return (authority?.rootPath === request.workingDirectory &&
+        isAbsolute(authority.rootPath) &&
+        isAbsolute(authority.gitCommonDirectory) &&
+        [
+            authority.rootDevice,
+            authority.rootInode,
+            authority.gitCommonDevice,
+            authority.gitCommonInode,
+        ].every((value) => /^(?:0|[1-9]\d*)$/u.test(value)));
+};
+const validInteractiveEnvironment = (environment) => {
+    const keys = Object.keys(environment);
+    const user = environment.USER;
+    return (typeof environment.HOME === "string" &&
+        isAbsolute(environment.HOME) &&
+        typeof user === "string" &&
+        /^[A-Za-z0-9._-]{1,128}$/u.test(user) &&
+        environment.LOGNAME === user &&
+        environment.SHELL === "/bin/zsh" &&
+        environment.PATH === "/usr/bin:/bin:/usr/sbin:/sbin" &&
+        environment.TERM === "xterm-256color" &&
+        environment.COLORTERM === "truecolor" &&
+        keys
+            .filter((key) => localeEnvironmentKeys.has(key))
+            .every((key) => validLocaleValue(environment[key])) &&
+        keys.every((key) => interactiveTerminalEnvironmentKeys.has(key)));
+};
+const validInteractiveTerminalPolicy = (request) => {
+    const terminal = request.interactiveTerminal;
+    if (request.owner.kind !== "interactive-terminal") {
+        return terminal === undefined;
+    }
+    if (terminal === undefined)
+        return false;
+    return (request.executable === "/bin/zsh" &&
+        request.arguments_.length === 1 &&
+        request.arguments_[0] === "-l" &&
+        request.standardInput === "pipe" &&
+        validInteractiveTerminalDimensions(terminal) &&
+        terminal.terminalId === request.owner.terminalId &&
+        validRepositoryAuthority(request) &&
+        validInteractiveEnvironment(request.environment));
+};
+const snapshotRepositoryAuthority = (value) => {
+    if (!Predicate.isObjectOrArray(value))
+        return;
+    if (inspectArrayShape(value) !== "non_array")
+        return;
+    const gitCommonDirectory = dataProperty(value, "gitCommonDirectory");
+    const gitCommonDevice = dataProperty(value, "gitCommonDevice");
+    const gitCommonInode = dataProperty(value, "gitCommonInode");
+    const rootDevice = dataProperty(value, "rootDevice");
+    const rootInode = dataProperty(value, "rootInode");
+    const rootPath = dataProperty(value, "rootPath");
+    if (typeof gitCommonDirectory !== "string" ||
+        typeof gitCommonDevice !== "string" ||
+        typeof gitCommonInode !== "string" ||
+        typeof rootDevice !== "string" ||
+        typeof rootInode !== "string" ||
+        typeof rootPath !== "string") {
+        return;
+    }
+    return Object.freeze({
+        gitCommonDevice,
+        gitCommonDirectory,
+        gitCommonInode,
+        rootDevice,
+        rootInode,
+        rootPath,
+    });
+};
+const environmentSize = (environment) => Object.entries(environment).reduce((total, [key, value]) => total + utf8Bytes(key) + (value === undefined ? 0 : utf8Bytes(value)), 0);
+const argumentsSize = (arguments_) => arguments_.reduce((total, value) => total + utf8Bytes(value), 0);
+const invalidLaunch = (message) => makeNodeRuntimeError("transport_failed", message);
+const malformedLaunch = () => invalidLaunch("The managed process launch request is invalid.");
+const validateLaunchPaths = (request) => isAbsolute(request.executable) &&
+    isAbsolute(request.workingDirectory) &&
+    boundedText(request.executable, processResourcePolicy.maximumPathBytes) &&
+    boundedText(request.workingDirectory, processResourcePolicy.maximumPathBytes)
+    ? undefined
+    : invalidLaunch("The managed process path is invalid.");
+const validateLaunchArguments = (request) => request.arguments_.length <= processResourcePolicy.maximumArguments &&
+    argumentsSize(request.arguments_) <=
+        processResourcePolicy.maximumArgumentBytes &&
+    request.arguments_.every((argument) => utf8Bytes(argument) <=
+        processResourcePolicy.maximumIndividualArgumentBytes &&
+        !argument.includes("\0"))
+    ? undefined
+    : invalidLaunch("The managed process arguments exceed their bound.");
+const validateLaunchEnvironment = (request) => {
+    const entries = Object.entries(request.environment);
+    const invalid = entries.length > processResourcePolicy.maximumEnvironmentEntries ||
+        environmentSize(request.environment) >
+            processResourcePolicy.maximumEnvironmentBytes ||
+        entries.some(([key, value]) => !boundedText(key, processResourcePolicy.maximumEnvironmentKeyBytes) ||
+            !/^[A-Za-z_][A-Za-z0-9_]*$/u.test(key) ||
+            value?.includes("\0") === true);
+    return invalid
+        ? invalidLaunch("The managed process environment exceeds its bound.")
+        : undefined;
+};
+const positiveBoundedInteger = (value, maximum) => Number.isSafeInteger(value) && value > 0 && value <= maximum;
+const validateResourceLimits = (request) => {
+    const { limits } = request;
+    const valid = positiveBoundedInteger(limits.maximumCpuTimeMilliseconds, processResourcePolicy.maximumCpuTimeMilliseconds) &&
+        positiveBoundedInteger(limits.maximumProcessCount, processResourcePolicy.maximumProcessCount) &&
+        positiveBoundedInteger(limits.maximumMemoryBytes, processResourcePolicy.maximumMemoryBytes) &&
+        positiveBoundedInteger(limits.maximumWallTimeMilliseconds, processResourcePolicy.maximumWallTimeMilliseconds);
+    return valid
+        ? undefined
+        : invalidLaunch("The managed process limits are invalid.");
+};
+const validateStreamLimits = (request) => {
+    const { owner, streamLimits } = request;
+    const maximumDataChunkBytes = owner.kind === "interactive-terminal"
+        ? processResourcePolicy.maximumInteractiveDataChunkBytes
+        : processResourcePolicy.maximumDataChunkBytes;
+    const valid = positiveBoundedInteger(streamLimits.maximumDataChunkBytes, maximumDataChunkBytes) &&
+        positiveBoundedInteger(streamLimits.maximumPendingInputBytes, processResourcePolicy.maximumPendingInputBytes) &&
+        positiveBoundedInteger(streamLimits.maximumPendingOutputBytes, processResourcePolicy.maximumPendingOutputBytes);
+    return valid
+        ? undefined
+        : invalidLaunch("The managed process stream limits are invalid.");
+};
+const validateNormalizedLaunch = (request) => {
+    const invalid = validateLaunchPaths(request) ??
+        validateLaunchArguments(request) ??
+        validateLaunchEnvironment(request) ??
+        validateResourceLimits(request) ??
+        validateStreamLimits(request);
+    if (invalid !== undefined)
+        return invalid;
+    return validOwner(request.owner) && validInteractiveTerminalPolicy(request)
+        ? undefined
+        : invalidLaunch("The managed process owner is invalid.");
+};
+const invalidValue = Symbol("invalid process launch value");
+const dataProperty = (value, key) => {
+    try {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return descriptor !== undefined && "value" in descriptor
+            ? descriptor.value
+            : invalidValue;
+    }
+    catch {
+        return invalidValue;
+    }
+};
+const optionalDataProperty = (value, key) => {
+    try {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (descriptor === undefined)
+            return undefined;
+        return "value" in descriptor ? descriptor.value : invalidValue;
+    }
+    catch {
+        return invalidValue;
+    }
+};
+/** Array.isArray throws for a revoked Proxy, so caller-owned shape inspection
+ * must stay behind the same fail-closed boundary as the other Proxy traps. */
+const inspectArrayShape = (value) => {
+    try {
+        return Array.isArray(value) ? "array" : "non_array";
+    }
+    catch {
+        return "uninspectable";
+    }
+};
+const snapshotArguments = (value) => {
+    if (!Predicate.isObjectOrArray(value))
+        return;
+    if (inspectArrayShape(value) !== "array")
+        return;
+    const length = dataProperty(value, "length");
+    if (typeof length !== "number" ||
+        !Number.isSafeInteger(length) ||
+        length < 0 ||
+        length > processResourcePolicy.maximumArguments) {
+        return;
+    }
+    const copied = Array.from({ length }, (_, index) => dataProperty(value, String(index)));
+    if (!copied.every((argument) => typeof argument === "string")) {
+        return;
+    }
+    return Object.freeze(copied);
+};
+const environmentKeys = (value) => {
+    try {
+        return Reflect.ownKeys(value);
+    }
+    catch {
+        return;
+    }
+};
+const snapshotEnvironment = (value) => {
+    if (!Predicate.isObjectOrArray(value))
+        return;
+    if (inspectArrayShape(value) !== "non_array")
+        return;
+    const keys = environmentKeys(value);
+    if (keys === undefined ||
+        keys.length > processResourcePolicy.maximumEnvironmentEntries ||
+        keys.some((key) => typeof key !== "string")) {
+        return;
+    }
+    const entries = keys.map((key) => [key, dataProperty(value, key)]);
+    const invalidEntry = entries.some(([, entry]) => entry !== undefined && typeof entry !== "string");
+    if (invalidEntry)
+        return;
+    return Object.freeze(Object.fromEntries(entries.filter((entry) => typeof entry[1] === "string")));
+};
+const snapshotLimits = (value) => {
+    if (!Predicate.isObjectOrArray(value))
+        return;
+    if (inspectArrayShape(value) !== "non_array")
+        return;
+    const cpuTime = dataProperty(value, "maximumCpuTimeMilliseconds");
+    const processCount = dataProperty(value, "maximumProcessCount");
+    const memoryBytes = dataProperty(value, "maximumMemoryBytes");
+    const wallTime = dataProperty(value, "maximumWallTimeMilliseconds");
+    if (typeof cpuTime !== "number" ||
+        typeof processCount !== "number" ||
+        typeof memoryBytes !== "number" ||
+        typeof wallTime !== "number") {
+        return;
+    }
+    return Object.freeze({
+        maximumCpuTimeMilliseconds: cpuTime,
+        maximumMemoryBytes: memoryBytes,
+        maximumProcessCount: processCount,
+        maximumWallTimeMilliseconds: wallTime,
+    });
+};
+const snapshotStreamLimits = (value) => {
+    if (!Predicate.isObjectOrArray(value))
+        return;
+    if (inspectArrayShape(value) !== "non_array")
+        return;
+    const dataChunkBytes = dataProperty(value, "maximumDataChunkBytes");
+    const pendingInputBytes = dataProperty(value, "maximumPendingInputBytes");
+    const pendingOutputBytes = dataProperty(value, "maximumPendingOutputBytes");
+    if (typeof dataChunkBytes !== "number" ||
+        typeof pendingInputBytes !== "number" ||
+        typeof pendingOutputBytes !== "number") {
+        return;
+    }
+    return Object.freeze({
+        maximumDataChunkBytes: dataChunkBytes,
+        maximumPendingInputBytes: pendingInputBytes,
+        maximumPendingOutputBytes: pendingOutputBytes,
+    });
+};
+const optionalString = (value) => value === undefined || typeof value === "string";
+const isProcessOwnerKind = (value) => value === "codex-probe" ||
+    value === "codex-session" ||
+    value === "git-inspection" ||
+    value === "interactive-terminal" ||
+    value === "pi-rpc-probe" ||
+    value === "pi-rpc-session";
+const freezeSnapshotOwner = (kind, optionalFields) => {
+    const [commandId, sessionId, taskId, terminalId, workspaceId] = optionalFields;
+    return Object.freeze({
+        ...(commandId === undefined ? {} : { commandId }),
+        kind,
+        ...(sessionId === undefined ? {} : { sessionId }),
+        ...(taskId === undefined ? {} : { taskId }),
+        ...(terminalId === undefined ? {} : { terminalId }),
+        ...(workspaceId === undefined ? {} : { workspaceId }),
+    });
+};
+const snapshotOwner = (value) => {
+    if (!Predicate.isObjectOrArray(value) ||
+        inspectArrayShape(value) !== "non_array") {
+        return;
+    }
+    const kind = dataProperty(value, "kind");
+    const commandId = optionalDataProperty(value, "commandId");
+    const sessionId = optionalDataProperty(value, "sessionId");
+    const taskId = optionalDataProperty(value, "taskId");
+    const terminalId = optionalDataProperty(value, "terminalId");
+    const workspaceId = optionalDataProperty(value, "workspaceId");
+    const optionalFields = [
+        commandId,
+        sessionId,
+        taskId,
+        terminalId,
+        workspaceId,
+    ];
+    if (!isProcessOwnerKind(kind) || !optionalFields.every(optionalString)) {
+        return;
+    }
+    return freezeSnapshotOwner(kind, optionalFields);
+};
+const snapshotInteractiveTerminal = (value) => {
+    if (!Predicate.isObjectOrArray(value))
+        return;
+    if (inspectArrayShape(value) !== "non_array")
+        return;
+    const columns = dataProperty(value, "columns");
+    const generation = dataProperty(value, "generation");
+    const nativeOperationSequence = dataProperty(value, "nativeOperationSequence");
+    const rows = dataProperty(value, "rows");
+    const terminalId = dataProperty(value, "terminalId");
+    if (typeof columns !== "number" ||
+        typeof generation !== "number" ||
+        typeof nativeOperationSequence !== "number" ||
+        typeof rows !== "number" ||
+        typeof terminalId !== "string") {
+        return;
+    }
+    return Object.freeze({
+        columns,
+        generation,
+        nativeOperationSequence,
+        rows,
+        terminalId,
+    });
+};
+const snapshotLaunchFieldValues = (input, context) => ({
+    arguments_: snapshotArguments(dataProperty(input, "arguments_")),
+    environment: snapshotEnvironment(dataProperty(input, "environment")),
+    executable: dataProperty(input, "executable"),
+    interactiveTerminal: snapshotInteractiveTerminal(context.interactiveTerminalValue),
+    limits: snapshotLimits(dataProperty(input, "limits")),
+    owner: snapshotOwner(dataProperty(input, "owner")),
+    repositoryAuthority: snapshotRepositoryAuthority(context.repositoryAuthorityValue),
+    standardInput: dataProperty(input, "standardInput"),
+    streamLimits: snapshotStreamLimits(dataProperty(input, "streamLimits")),
+    workingDirectory: dataProperty(input, "workingDirectory"),
+});
+const validSnapshotLaunchFields = (fields, context) => fields.arguments_ !== undefined &&
+    fields.environment !== undefined &&
+    typeof fields.executable === "string" &&
+    fields.limits !== undefined &&
+    fields.owner !== undefined &&
+    (fields.standardInput === "ignore" || fields.standardInput === "pipe") &&
+    fields.streamLimits !== undefined &&
+    typeof fields.workingDirectory === "string" &&
+    (context.interactiveTerminalValue === undefined ||
+        fields.interactiveTerminal !== undefined) &&
+    (context.repositoryAuthorityValue === undefined ||
+        fields.repositoryAuthority !== undefined);
+const snapshotLaunchFields = (input) => {
+    const context = {
+        interactiveTerminalValue: optionalDataProperty(input, "interactiveTerminal"),
+        repositoryAuthorityValue: optionalDataProperty(input, "repositoryAuthority"),
+    };
+    const fields = snapshotLaunchFieldValues(input, context);
+    return validSnapshotLaunchFields(fields, context)
+        ? fields
+        : undefined;
+};
+/**
+ * Reads every caller-controlled launch field at most once, copies it into a
+ * deeply frozen snapshot, and validates that snapshot. It rejects accessors
+ * without execution; later Proxy/getter changes cannot affect the launch.
+ */
+export const normalizeProcessLaunch = (input) => {
+    if (!Predicate.isObjectOrArray(input)) {
+        return { error: malformedLaunch(), state: "invalid" };
+    }
+    if (inspectArrayShape(input) !== "non_array") {
+        return { error: malformedLaunch(), state: "invalid" };
+    }
+    const fields = snapshotLaunchFields(input);
+    if (fields === undefined) {
+        return { error: malformedLaunch(), state: "invalid" };
+    }
+    const request = Object.freeze(fields);
+    const error = validateNormalizedLaunch(request);
+    return error === undefined
+        ? { request, state: "valid" }
+        : { error, state: "invalid" };
+};
+export const validateProcessLaunch = (request) => {
+    const normalized = normalizeProcessLaunch(request);
+    return normalized.state === "invalid" ? normalized.error : undefined;
+};
+//# sourceMappingURL=policy.js.map

package/dist/runtime/process/resource/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEnC,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAO9E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,8BAA8B,EAAE,CAAC;IACjC,2BAA2B,EAAE,IAAI;IACjC,6BAA6B,EAAE,WAAW;IAC1C,kBAAkB,EAAE,GAAG;IACvB,oBAAoB,EAAE,EAAE,GAAG,IAAI;IAC/B,gBAAgB,EAAE,GAAG;IACrB,sBAAsB,EAAE,CAAC;IACzB,oCAAoC,EAAE,CAAC;IACvC,0BAA0B,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACpD,qBAAqB,EAAE,EAAE,GAAG,IAAI;IAChC,uBAAuB,EAAE,EAAE,GAAG,IAAI;IAClC,yBAAyB,EAAE,EAAE;IAC7B,0BAA0B,EAAE,GAAG;IAC/B,gCAAgC,EAAE,MAAM;IACxC,sBAAsB,EAAE,GAAG;IAC3B,8BAA8B,EAAE,EAAE,GAAG,IAAI;IACzC,gCAAgC,EAAE,EAAE,GAAG,IAAI;IAC3C,kBAAkB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;IAC3C,gBAAgB,EAAE,IAAI;IACtB,wBAAwB,EAAE,EAAE,GAAG,IAAI;IACnC,yBAAyB,EAAE,GAAG,GAAG,IAAI;IACrC,0BAA0B,EAAE,GAAG;IAC/B,mBAAmB,EAAE,IAAI;IACzB,oBAAoB,EAAE,IAAI;IAC1B,oBAAoB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACrC,aAAa,EAAE,MAAM;IACrB,wBAAwB,EAAE,EAAE;IAC5B,4BAA4B,EAAE,IAAI;IAClC,2BAA2B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACpD,cAAc,EAAE,UAAU;IAC1B,eAAe,EAAE,YAAY;IAC7B,mBAAmB,EAAE,YAAY;IACjC,+BAA+B,EAAE,WAAW;IAC5C,oCAAoC,EAAE,WAAW;CACzC,CAAC;AAEX,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAE9E,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,YAAoB,EAAW,EAAE,CACnE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,gBAAgB,GAAG,CACvB,KAA2B,EACM,EAAE,CAAC;IACpC,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,MAAM;IACZ,KAAK,CAAC,UAAU;IAChB,KAAK,CAAC,WAAW;CAClB,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,KAA2B,EAC3B,iBAA0B,EACjB,EAAE,CACX,KAAK,CAAC,SAAS,KAAK,SAAS;IAC7B,KAAK,CAAC,SAAS,KAAK,SAAS;IAC7B,KAAK,CAAC,MAAM,KAAK,SAAS;IAC1B,KAAK,CAAC,UAAU,KAAK,SAAS;IAC9B,CAAC,iBAAiB;QAChB,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;QACjC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;AAEvC,MAAM,UAAU,GAAG,CAAC,KAA2B,EAAW,EAAE;IAC1D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,CACpD,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,SAAS;QACnB,WAAW,CAAC,KAAK,EAAE,qBAAqB,CAAC,sBAAsB,CAAC,CACnE,CAAC;IACF,IAAI,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACxE,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;QAC1E,KAAK,gBAAgB;YACnB,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;QAC1E,KAAK,sBAAsB;YACzB,OAAO,CACL,KAAK,CAAC,UAAU,KAAK,SAAS;gBAC9B,KAAK,CAAC,WAAW,KAAK,SAAS;gBAC/B,KAAK,CAAC,SAAS,KAAK,SAAS,CAC9B,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,KAAK,gBAAgB;YACnB,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC;IACjD,WAAW;IACX,MAAM;IACN,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;IACT,SAAS;IACT,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,KAAyB,EAAW,EAAE,CAC9D,KAAK,KAAK,SAAS;IACnB,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE;IACtB,sFAAsF,CAAC,IAAI,CACzF,KAAK,CACN,CAAC;AAEJ,MAAM,kCAAkC,GAAG,CACzC,QAA0E,EACjE,EAAE,CACX,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;IACtC,QAAQ,CAAC,OAAO,IAAI,CAAC;IACrB,QAAQ,CAAC,OAAO,IAAI,GAAG;IACvB,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;IACzC,QAAQ,CAAC,UAAU,IAAI,CAAC;IACxB,QAAQ,CAAC,UAAU,IAAI,MAAM;IAC7B,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACtD,QAAQ,CAAC,uBAAuB,IAAI,CAAC;IACrC,QAAQ,CAAC,uBAAuB,IAAI,aAAa;IACjD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC;AAEvB,MAAM,wBAAwB,GAAG,CAC/B,OAAqC,EAC5B,EAAE;IACX,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAC9C,OAAO,CACL,SAAS,EAAE,QAAQ,KAAK,OAAO,CAAC,gBAAgB;QAChD,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC9B,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC;QACxC;YACE,SAAS,CAAC,UAAU;YACpB,SAAS,CAAC,SAAS;YACnB,SAAS,CAAC,eAAe;YACzB,SAAS,CAAC,cAAc;SACzB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,WAAwC,EAC/B,EAAE;IACX,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;IAC9B,OAAO,CACL,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;QACpC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;QAC5B,OAAO,IAAI,KAAK,QAAQ;QACxB,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,WAAW,CAAC,OAAO,KAAK,IAAI;QAC5B,WAAW,CAAC,KAAK,KAAK,UAAU;QAChC,WAAW,CAAC,IAAI,KAAK,+BAA+B;QACpD,WAAW,CAAC,IAAI,KAAK,gBAAgB;QACrC,WAAW,CAAC,SAAS,KAAK,WAAW;QACrC,IAAI;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;aAC/C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kCAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,OAAqC,EAC5B,EAAE;IACX,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAClD,OAAO,QAAQ,KAAK,SAAS,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,CACL,OAAO,CAAC,UAAU,KAAK,UAAU;QACjC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAC/B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI;QAC9B,OAAO,CAAC,aAAa,KAAK,MAAM;QAChC,kCAAkC,CAAC,QAAQ,CAAC;QAC5C,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU;QAChD,wBAAwB,CAAC,OAAO,CAAC;QACjC,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,CACjD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,KAAc,EACmD,EAAE;IACnE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW;QAAE,OAAO;IACrD,MAAM,kBAAkB,GAAG,YAAY,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,IACE,OAAO,kBAAkB,KAAK,QAAQ;QACtC,OAAO,eAAe,KAAK,QAAQ;QACnC,OAAO,cAAc,KAAK,QAAQ;QAClC,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;QACD,OAAO;IACT,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe;QACf,kBAAkB;QAClB,cAAc;QACd,UAAU;QACV,SAAS;QACT,QAAQ;KACT,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,WAAwC,EAAU,EAAE,CAC3E,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACtB,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EACvE,CAAC,CACF,CAAC;AAEJ,MAAM,aAAa,GAAG,CAAC,UAA6B,EAAU,EAAE,CAC9D,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnE,MAAM,aAAa,GAAG,CAAC,OAAe,EAAoB,EAAE,CAC1D,oBAAoB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,eAAe,GAAG,GAAqB,EAAE,CAC7C,aAAa,CAAC,gDAAgD,CAAC,CAAC;AAElE,MAAM,mBAAmB,GAAG,CAC1B,OAAqC,EACP,EAAE,CAChC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;IAC9B,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACpC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,qBAAqB,CAAC,gBAAgB,CAAC;IACvE,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,gBAAgB,CAAC;IAC3E,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,aAAa,CAAC,sCAAsC,CAAC,CAAC;AAE5D,MAAM,uBAAuB,GAAG,CAC9B,OAAqC,EACP,EAAE,CAChC,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,qBAAqB,CAAC,gBAAgB;IACnE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/B,qBAAqB,CAAC,oBAAoB;IAC5C,OAAO,CAAC,UAAU,CAAC,KAAK,CACtB,CAAC,QAAQ,EAAE,EAAE,CACX,SAAS,CAAC,QAAQ,CAAC;QACjB,qBAAqB,CAAC,8BAA8B;QACtD,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC3B;IACC,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,aAAa,CAAC,mDAAmD,CAAC,CAAC;AAEzE,MAAM,yBAAyB,GAAG,CAChC,OAAqC,EACP,EAAE;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,qBAAqB,CAAC,yBAAyB;QAChE,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC;YAClC,qBAAqB,CAAC,uBAAuB;QAC/C,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,CAAC,WAAW,CAAC,GAAG,EAAE,qBAAqB,CAAC,0BAA0B,CAAC;YACnE,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;YACtC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CACjC,CAAC;IACJ,OAAO,OAAO;QACZ,CAAC,CAAC,aAAa,CAAC,oDAAoD,CAAC;QACrE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAE,OAAe,EAAW,EAAE,CACzE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC;AAE/D,MAAM,sBAAsB,GAAG,CAC7B,OAAqC,EACP,EAAE;IAChC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,KAAK,GACT,sBAAsB,CACpB,MAAM,CAAC,0BAA0B,EACjC,qBAAqB,CAAC,0BAA0B,CACjD;QACD,sBAAsB,CACpB,MAAM,CAAC,mBAAmB,EAC1B,qBAAqB,CAAC,mBAAmB,CAC1C;QACD,sBAAsB,CACpB,MAAM,CAAC,kBAAkB,EACzB,qBAAqB,CAAC,kBAAkB,CACzC;QACD,sBAAsB,CACpB,MAAM,CAAC,2BAA2B,EAClC,qBAAqB,CAAC,2BAA2B,CAClD,CAAC;IACJ,OAAO,KAAK;QACV,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,yCAAyC,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,OAAqC,EACP,EAAE;IAChC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,qBAAqB,GACzB,KAAK,CAAC,IAAI,KAAK,sBAAsB;QACnC,CAAC,CAAC,qBAAqB,CAAC,gCAAgC;QACxD,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;IAClD,MAAM,KAAK,GACT,sBAAsB,CACpB,YAAY,CAAC,qBAAqB,EAClC,qBAAqB,CACtB;QACD,sBAAsB,CACpB,YAAY,CAAC,wBAAwB,EACrC,qBAAqB,CAAC,wBAAwB,CAC/C;QACD,sBAAsB,CACpB,YAAY,CAAC,yBAAyB,EACtC,qBAAqB,CAAC,yBAAyB,CAChD,CAAC;IACJ,OAAO,KAAK;QACV,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,gDAAgD,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,OAAqC,EACP,EAAE;IAChC,MAAM,OAAO,GACX,mBAAmB,CAAC,OAAO,CAAC;QAC5B,uBAAuB,CAAC,OAAO,CAAC;QAChC,yBAAyB,CAAC,OAAO,CAAC;QAClC,sBAAsB,CAAC,OAAO,CAAC;QAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,8BAA8B,CAAC,OAAO,CAAC;QACzE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,uCAAuC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAE5D,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,GAAgB,EAAW,EAAE;IAChE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU;YACtD,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAE,GAAgB,EAAW,EAAE;IACxE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC/C,OAAO,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC,CAAC;AAIF;8EAC8E;AAC9E,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAc,EAAE;IACtD,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAiC,EAAE;IAC1E,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,OAAO;QAAE,OAAO;IACjD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7B,MAAM,GAAG,CAAC;QACV,MAAM,GAAG,qBAAqB,CAAC,gBAAgB,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CACjD,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CACnC,CAAC;IACF,IACE,CAAC,MAAM,CAAC,KAAK,CACX,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAC/D,EACD,CAAC;QACD,OAAO;IACT,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAa,EAAsC,EAAE;IAC5E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAc,EAC2B,EAAE;IAC3C,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW;QAAE,OAAO;IACrD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,IACE,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC,yBAAyB;QAC7D,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAC3C,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAI,IAA0B,CAAC,GAAG,CAC7C,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAU,CAClD,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAChE,CAAC;IACF,IAAI,YAAY;QAAE,OAAO;IACzB,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,OAAO,CAAC,MAAM,CACZ,CAAC,KAAK,EAAsC,EAAE,CAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAC/B,CACF,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,KAAc,EACsC,EAAE;IACtD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW;QAAE,OAAO;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACpE,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,YAAY,KAAK,QAAQ;QAChC,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;QACD,OAAO;IACT,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,0BAA0B,EAAE,OAAO;QACnC,kBAAkB,EAAE,WAAW;QAC/B,mBAAmB,EAAE,YAAY;QACjC,2BAA2B,EAAE,QAAQ;KACtC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,KAAc,EAC4C,EAAE;IAC5D,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW;QAAE,OAAO;IACrD,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC1E,MAAM,kBAAkB,GAAG,YAAY,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IAC5E,IACE,OAAO,cAAc,KAAK,QAAQ;QAClC,OAAO,iBAAiB,KAAK,QAAQ;QACrC,OAAO,kBAAkB,KAAK,QAAQ,EACtC,CAAC;QACD,OAAO;IACT,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,qBAAqB,EAAE,cAAc;QACrC,wBAAwB,EAAE,iBAAiB;QAC3C,yBAAyB,EAAE,kBAAkB;KAC9C,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAA+B,EAAE,CACrE,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAEnD,MAAM,kBAAkB,GAAG,CACzB,KAAc,EACyB,EAAE,CACzC,KAAK,KAAK,aAAa;IACvB,KAAK,KAAK,eAAe;IACzB,KAAK,KAAK,gBAAgB;IAC1B,KAAK,KAAK,sBAAsB;IAChC,KAAK,KAAK,cAAc;IACxB,KAAK,KAAK,gBAAgB,CAAC;AAE7B,MAAM,mBAAmB,GAAG,CAC1B,IAAkC,EAClC,cAA+C,EACzB,EAAE;IACxB,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,GAC3D,cAAc,CAAC;IACjB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,IAAI;QACJ,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAoC,EAAE;IACzE,IACE,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QACjC,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW,EACxC,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG;QACrB,SAAS;QACT,SAAS;QACT,MAAM;QACN,UAAU;QACV,WAAW;KACH,CAAC;IACX,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACvE,OAAO;IACT,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,KAAc,EACmD,EAAE;IACnE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW;QAAE,OAAO;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,uBAAuB,GAAG,YAAY,CAC1C,KAAK,EACL,yBAAyB,CAC1B,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACrD,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,uBAAuB,KAAK,QAAQ;QAC3C,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,UAAU,KAAK,QAAQ,EAC9B,CAAC;QACD,OAAO;IACT,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO;QACP,UAAU;QACV,uBAAuB;QACvB,IAAI;QACJ,UAAU;KACX,CAAC,CAAC;AACL,CAAC,CAAC;AAmBF,MAAM,yBAAyB,GAAG,CAChC,KAAa,EACb,OAA8B,EAC9B,EAAE,CAAC,CAAC;IACJ,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAChE,WAAW,EAAE,mBAAmB,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACpE,UAAU,EAAE,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7C,mBAAmB,EAAE,2BAA2B,CAC9C,OAAO,CAAC,wBAAwB,CACjC;IACD,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,mBAAmB,EAAE,2BAA2B,CAC9C,OAAO,CAAC,wBAAwB,CACjC;IACD,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC;IACnD,YAAY,EAAE,oBAAoB,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACvE,gBAAgB,EAAE,YAAY,CAAC,KAAK,EAAE,kBAAkB,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAChC,MAAoD,EACpD,OAA8B,EACrB,EAAE,CACX,MAAM,CAAC,UAAU,KAAK,SAAS;IAC/B,MAAM,CAAC,WAAW,KAAK,SAAS;IAChC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;IACrC,MAAM,CAAC,MAAM,KAAK,SAAS;IAC3B,MAAM,CAAC,KAAK,KAAK,SAAS;IAC1B,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC;IACtE,MAAM,CAAC,YAAY,KAAK,SAAS;IACjC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;IAC3C,CAAC,OAAO,CAAC,wBAAwB,KAAK,SAAS;QAC7C,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC;IAC3C,CAAC,OAAO,CAAC,wBAAwB,KAAK,SAAS;QAC7C,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC;AAE9C,MAAM,oBAAoB,GAAG,CAC3B,KAAa,EACuB,EAAE;IACtC,MAAM,OAAO,GAA0B;QACrC,wBAAwB,EAAE,oBAAoB,CAC5C,KAAK,EACL,qBAAqB,CACtB;QACD,wBAAwB,EAAE,oBAAoB,CAC5C,KAAK,EACL,qBAAqB,CACtB;KACF,CAAC;IACF,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,OAAO,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC;QAC/C,CAAC,CAAE,MAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAc,EACc,EAAE;IAC9B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;QAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,OAAqC,EACP,EAAE;IAChC,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC,CAAC"}

package/dist/runtime/process/resource/process-identity.d.ts

@@ -0,0 +1,29 @@
+import { open } from "node:fs/promises";
+import { Effect, type Fiber, Semaphore } from "effect";
+import { type NodeRuntimeError } from "../../errors.js";
+import type { ResourceUnavailableReason } from "./contract.js";
+import { type LinuxProcessIdentity } from "./linux-process-identity.js";
+export type LaunchLeaderIdentity = {
+    readonly platform: "linux";
+    readonly state: "available";
+    readonly value: LinuxProcessIdentity;
+} | {
+    readonly platform: NodeJS.Platform;
+    readonly reason: "platform_unsupported";
+    readonly state: "unavailable";
+};
+type ProcfsFileHandle = Awaited<ReturnType<typeof open>>;
+type ProcfsFileOpener = (path: string) => Promise<ProcfsFileHandle>;
+export type ProcfsIdentityReadOptions = {
+    /** Private deterministic-test seam for observing detached caretaker completion. */
+    readonly observeCaretaker?: (fiber: Fiber.Fiber<void>) => void;
+    readonly openAdmission?: Semaphore.Semaphore;
+    readonly recordHandleCloseFailure?: Effect.Effect<void>;
+    readonly recordLateCloseFailure?: Effect.Effect<void>;
+};
+export declare const readLinuxProcessIdentityWithOpen: (processId: number, openFile: ProcfsFileOpener, options?: ProcfsIdentityReadOptions | undefined) => Effect.Effect<LinuxProcessIdentity, ResourceUnavailableReason, never>;
+export declare const readLinuxProcessIdentity: (processId: number) => Effect.Effect<LinuxProcessIdentity, ResourceUnavailableReason, never>;
+export declare const captureLaunchLeaderIdentity: (processId: number, processGroupId: number) => Effect.Effect<LaunchLeaderIdentity, NodeRuntimeError, never>;
+export declare const matchesLaunchLeaderIdentity: (expected: LaunchLeaderIdentity, current: LinuxProcessIdentity) => boolean;
+export {};
+//# sourceMappingURL=process-identity.d.ts.map

package/dist/runtime/process/resource/process-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/process-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAY,MAAM,EAAE,KAAK,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEjE,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,6BAA6B,CAAC;AAIrC,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B,CAAC;AA4BN,KAAK,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;AACzD,KAAK,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAapE,MAAM,MAAM,yBAAyB,GAAG;IACtC,mFAAmF;IACnF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC;IAC7C,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACvD,CAAC;AA6QF,eAAO,MAAM,gCAAgC,2KAgB3C,CAAC;AAEH,eAAO,MAAM,wBAAwB,8FAMpC,CAAC;AAQF,eAAO,MAAM,2BAA2B,6GAsBtC,CAAC;AAEH,eAAO,MAAM,2BAA2B,GACtC,UAAU,oBAAoB,EAC9B,SAAS,oBAAoB,KAC5B,OAEkD,CAAC"}