@mono-agent/agent-app 0.6.2 → 0.9.0

package/dist/background-snapshot.js

@@ -0,0 +1,450 @@
+import { createHmac } from "node:crypto";
+import { constants as fsConstants } from "node:fs";
+import { chmod, lstat, mkdir, mkdtemp, open, readFile, realpath, rm, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { accountHomeDirectory } from "./account-home.js";
+import { loadAppCoreConfig } from "./app-config.js";
+import { loadBackgroundSnapshotKey, loadOrCreateBackgroundSnapshotKey, } from "./background-snapshot-key.js";
+import { fingerprintBackgroundOperationalEnvironment, isBackgroundOperationalEnvName, selectBackgroundOperationalEnvironment, } from "./background-environment.js";
+import { readCliConfigSnapshot, readCliDotenvSnapshot } from "./first-run-readiness.js";
+export const BACKGROUND_SNAPSHOT_SCHEMA = "mono-agent.background-snapshot.v1";
+const MAX_ENCODED_BACKGROUND_SNAPSHOT_LENGTH = 32_768;
+/**
+ * Encode the secret-free approved snapshot for the owner-private LaunchAgent
+ * ProgramArguments. base64url keeps the value XML/shell inert while remaining
+ * visible and deterministic for diagnostics.
+ */
+export function encodeBackgroundSnapshot(snapshot) {
+    return Buffer.from(JSON.stringify(snapshot), "utf8").toString("base64url");
+}
+/** Fail closed when an internal managed-worker snapshot argument is malformed. */
+export function decodeBackgroundSnapshot(encoded) {
+    if (encoded.length === 0
+        || encoded.length > MAX_ENCODED_BACKGROUND_SNAPSHOT_LENGTH
+        || !/^[A-Za-z0-9_-]+$/u.test(encoded)) {
+        throw new Error("The managed background snapshot argument is malformed.");
+    }
+    let bytes;
+    let parsed;
+    try {
+        bytes = Buffer.from(encoded, "base64url");
+        if (bytes.toString("base64url") !== encoded) {
+            throw new Error("non-canonical base64url");
+        }
+        parsed = JSON.parse(bytes.toString("utf8"));
+    }
+    catch {
+        throw new Error("The managed background snapshot argument is malformed.");
+    }
+    const snapshot = backgroundSnapshotFromMetadata({ backgroundSnapshot: parsed });
+    if (snapshot === undefined) {
+        throw new Error("The managed background snapshot argument has an invalid schema.");
+    }
+    return snapshot;
+}
+/**
+ * Reconstruct the worker environment without inheriting shell credentials or
+ * config overrides, then attest it. This mirrors managed-worker startup:
+ * operational plist values exist first and dotenv fills every other key.
+ */
+export async function captureDurableBackgroundSnapshot(input) {
+    return (await captureDurableBackgroundInputs(input)).snapshot;
+}
+/**
+ * Reconstruct and attest one indivisible durable worker input. Returning the
+ * environment with its snapshot prevents callers from accidentally validating
+ * one environment and launching with a shell-enriched variant.
+ */
+export async function captureDurableBackgroundInputs(input) {
+    const cwd = resolve(input.cwd);
+    const environment = await loadDurableBackgroundEnvironment(input);
+    const configPath = resolve(cwd, input.configPath);
+    const configBefore = await readCliConfigSnapshot(configPath);
+    const snapshot = await captureBackgroundSnapshot({
+        cwd,
+        configPath: input.configPath,
+        ...(input.envFile === undefined ? {} : { envFile: input.envFile }),
+        env: environment,
+        ...(input.proofKey === undefined ? {} : { proofKey: input.proofKey }),
+    });
+    const configAfter = await readCliConfigSnapshot(configPath);
+    if (configBefore.fingerprint !== configAfter.fingerprint) {
+        throw new Error("Refusing to prove background readiness because the config changed during durable capture.");
+    }
+    return { environment, snapshot, configSourceFingerprint: configAfter.fingerprint };
+}
+export async function loadDurableBackgroundEnvironment(input) {
+    const cwd = resolve(input.cwd);
+    const dotenvPath = resolve(cwd, input.envFile ?? ".env");
+    const dotenv = await readCliDotenvSnapshot(dotenvPath);
+    const operational = selectBackgroundOperationalEnvironment(input.operationalEnvironment);
+    return { ...dotenv.env, ...operational };
+}
+export async function captureBackgroundSnapshot(input) {
+    const cwd = resolve(input.cwd);
+    const configPath = resolve(cwd, input.configPath);
+    const dotenvPath = resolve(cwd, input.envFile ?? ".env");
+    const proofKey = normalizeProofKey(input.proofKey ?? await loadOrCreateBackgroundSnapshotKey(configPath));
+    const [config, dotenv, dotenvFingerprint] = await Promise.all([
+        readRegularFileProof(configPath, "config", proofKey),
+        readCliDotenvSnapshot(dotenvPath),
+        fingerprintOptionalRegularFile(dotenvPath, "dotenv", proofKey),
+    ]);
+    assertDotenvMatchesEffectiveEnvironment(dotenv.env, input.env, dotenvPath);
+    const core = await loadAppCoreConfig({ cwd, configPath, env: input.env });
+    const identityPath = resolve(core.context.identityPath);
+    const identityFingerprint = await fingerprintRegularFile(identityPath, "identity", proofKey);
+    const soulPath = core.context.soulPath === undefined ? undefined : resolve(core.context.soulPath);
+    const soulFingerprint = soulPath === undefined
+        ? undefined
+        : await fingerprintRegularFile(soulPath, "soul", proofKey);
+    const mcpConfigPath = core.tools.mcpConfigPath === undefined ? undefined : resolve(core.tools.mcpConfigPath);
+    const mcpConfigFingerprint = mcpConfigPath === undefined
+        ? undefined
+        : await fingerprintRegularFile(mcpConfigPath, "MCP config", proofKey);
+    // The config determines Identity/Soul/MCP paths and the effective env
+    // determines the loaded config. Re-read every durable input after resolution so a
+    // rename/write racing this capture cannot produce a self-inconsistent proof.
+    const [configAfter, dotenvAfter, dotenvFingerprintAfter, identityAfter, soulAfter, mcpConfigAfter,] = await Promise.all([
+        readRegularFileProof(configPath, "config", proofKey),
+        readCliDotenvSnapshot(dotenvPath),
+        fingerprintOptionalRegularFile(dotenvPath, "dotenv", proofKey),
+        fingerprintRegularFile(identityPath, "identity", proofKey),
+        soulPath === undefined ? Promise.resolve(undefined) : fingerprintRegularFile(soulPath, "soul", proofKey),
+        mcpConfigPath === undefined
+            ? Promise.resolve(undefined)
+            : fingerprintRegularFile(mcpConfigPath, "MCP config", proofKey),
+    ]);
+    if (config.fingerprint !== configAfter.fingerprint
+        || dotenv.fingerprint !== dotenvAfter.fingerprint
+        || dotenvFingerprint !== dotenvFingerprintAfter
+        || identityFingerprint !== identityAfter
+        || soulFingerprint !== soulAfter
+        || mcpConfigFingerprint !== mcpConfigAfter) {
+        throw new Error("Refusing to prove background readiness because a durable input changed during startup capture.");
+    }
+    assertDotenvMatchesEffectiveEnvironment(dotenvAfter.env, input.env, dotenvPath);
+    return {
+        schema: BACKGROUND_SNAPSHOT_SCHEMA,
+        configPath,
+        configFingerprint: config.fingerprint,
+        dotenvPath,
+        dotenvFingerprint,
+        identityPath,
+        identityFingerprint,
+        ...(soulPath === undefined || soulFingerprint === undefined ? {} : { soulPath, soulFingerprint }),
+        ...(mcpConfigPath === undefined || mcpConfigFingerprint === undefined
+            ? {}
+            : { mcpConfigPath, mcpConfigFingerprint }),
+        operationalEnvironmentFingerprint: fingerprintBackgroundOperationalEnvironment(input.env),
+    };
+}
+/**
+ * Freeze the exact config and context bytes attested by `snapshot` before any
+ * app/channel loader runs. The app advertises the canonical config path, but
+ * reads this private copy so an edit/revert during startup cannot produce a
+ * mixed worker while retaining the old trace proof.
+ */
+export async function materializeBackgroundRuntimeInputs(input) {
+    const snapshot = input.snapshot;
+    const cwd = resolve(input.cwd);
+    const proofKey = normalizeProofKey(input.proofKey ?? await loadBackgroundSnapshotKey(snapshot.configPath));
+    const root = await ensureRuntimeInputsRoot(input.runtimeRoot, input.homeDir);
+    const directory = await mkdtemp(join(root, "worker-"));
+    await chmod(directory, 0o700);
+    let disposed = false;
+    try {
+        const [config, dotenvFingerprint, identity, soul, mcpConfig] = await Promise.all([
+            readRegularFileProof(snapshot.configPath, "config", proofKey),
+            fingerprintOptionalRegularFile(snapshot.dotenvPath, "dotenv", proofKey),
+            readRegularFileProof(snapshot.identityPath, "identity", proofKey),
+            snapshot.soulPath === undefined
+                ? Promise.resolve(undefined)
+                : readRegularFileProof(snapshot.soulPath, "soul", proofKey),
+            snapshot.mcpConfigPath === undefined
+                ? Promise.resolve(undefined)
+                : readRegularFileProof(snapshot.mcpConfigPath, "MCP config", proofKey),
+        ]);
+        if (config.fingerprint !== snapshot.configFingerprint
+            || dotenvFingerprint !== snapshot.dotenvFingerprint
+            || identity.fingerprint !== snapshot.identityFingerprint
+            || (snapshot.soulPath === undefined) !== (snapshot.soulFingerprint === undefined)
+            || (snapshot.soulPath !== undefined
+                && (soul === undefined || soul.fingerprint !== snapshot.soulFingerprint))
+            || (snapshot.mcpConfigPath === undefined) !== (snapshot.mcpConfigFingerprint === undefined)
+            || (snapshot.mcpConfigPath !== undefined
+                && (mcpConfig === undefined || mcpConfig.fingerprint !== snapshot.mcpConfigFingerprint))) {
+            throw new Error("Refusing to materialize background runtime inputs because the approved snapshot changed.");
+        }
+        const configPath = join(directory, "mono-agent.config.json");
+        const identityPath = join(directory, "IDENTITY.md");
+        const soulPath = soul === undefined ? undefined : join(directory, "SOUL.md");
+        const mcpConfigPath = mcpConfig === undefined ? undefined : join(directory, "mcp-config.json");
+        await writeFile(configPath, config.bytes, { flag: "wx", mode: 0o400 });
+        await writeFile(identityPath, identity.bytes, { flag: "wx", mode: 0o400 });
+        if (soulPath !== undefined && soul !== undefined) {
+            await writeFile(soulPath, soul.bytes, { flag: "wx", mode: 0o400 });
+        }
+        if (mcpConfigPath !== undefined && mcpConfig !== undefined) {
+            await writeFile(mcpConfigPath, mcpConfig.bytes, { flag: "wx", mode: 0o400 });
+        }
+        await Promise.all([
+            chmod(configPath, 0o400),
+            chmod(identityPath, 0o400),
+            ...(soulPath === undefined ? [] : [chmod(soulPath, 0o400)]),
+            ...(mcpConfigPath === undefined ? [] : [chmod(mcpConfigPath, 0o400)]),
+        ]);
+        const [copiedConfig, copiedIdentity, copiedSoul, copiedMcpConfig] = await Promise.all([
+            readFile(configPath),
+            readFile(identityPath),
+            soulPath === undefined ? Promise.resolve(undefined) : readFile(soulPath),
+            mcpConfigPath === undefined ? Promise.resolve(undefined) : readFile(mcpConfigPath),
+        ]);
+        if (!copiedConfig.equals(config.bytes)
+            || !copiedIdentity.equals(identity.bytes)
+            || (soul !== undefined && (copiedSoul === undefined || !copiedSoul.equals(soul.bytes)))
+            || (mcpConfig !== undefined
+                && (copiedMcpConfig === undefined || !copiedMcpConfig.equals(mcpConfig.bytes)))) {
+            throw new Error("The private background runtime input copy failed exact verification.");
+        }
+        // Re-attest every canonical input after materialisation. File fingerprints
+        // include ctime, so even an edit followed by byte-for-byte restoration is
+        // detected rather than accepted as the approved snapshot.
+        const after = await captureBackgroundSnapshot({
+            cwd,
+            configPath: snapshot.configPath,
+            envFile: snapshot.dotenvPath,
+            env: input.env,
+            proofKey,
+        });
+        if (!sameBackgroundSnapshot(after, snapshot)) {
+            throw new Error("Refusing to start because durable inputs changed while the private runtime snapshot was created.");
+        }
+        await chmod(directory, 0o500);
+        return {
+            configPath,
+            environment: {
+                ...input.env,
+                MONO_AGENT_IDENTITY_PATH: identityPath,
+                ...(soulPath === undefined ? {} : { MONO_AGENT_SOUL_PATH: soulPath }),
+                ...(mcpConfigPath === undefined ? {} : { MONO_AGENT_MCP_CONFIG_PATH: mcpConfigPath }),
+            },
+            async dispose() {
+                if (disposed)
+                    return;
+                disposed = true;
+                await chmod(directory, 0o700).catch(() => undefined);
+                await rm(directory, { recursive: true, force: true });
+            },
+        };
+    }
+    catch (error) {
+        await chmod(directory, 0o700).catch(() => undefined);
+        await rm(directory, { recursive: true, force: true }).catch(() => undefined);
+        throw error;
+    }
+}
+function assertDotenvMatchesEffectiveEnvironment(dotenv, env, dotenvPath) {
+    const dotenvNames = new Set(Object.keys(dotenv));
+    for (const [name, value] of Object.entries(dotenv)) {
+        // launchd explicitly materialises operational values and Node's dotenv
+        // semantics leave them in precedence. Every other dotenv entry must be the
+        // value the worker is actually about to use.
+        if (!isBackgroundOperationalEnvName(name) && env[name] !== value) {
+            throw new Error(`Refusing to prove background readiness because the effective ${name} value does not match ${dotenvPath}.`);
+        }
+    }
+    for (const [name, value] of Object.entries(env)) {
+        if (value !== undefined
+            && !isBackgroundOperationalEnvName(name)
+            && !dotenvNames.has(name)) {
+            throw new Error(`Refusing to prove background readiness because the effective ${name} value is not present in ${dotenvPath}.`);
+        }
+    }
+}
+export function sameBackgroundSnapshot(left, right) {
+    return left.schema === right.schema
+        && left.configPath === right.configPath
+        && left.configFingerprint === right.configFingerprint
+        && left.dotenvPath === right.dotenvPath
+        && left.dotenvFingerprint === right.dotenvFingerprint
+        && left.identityPath === right.identityPath
+        && left.identityFingerprint === right.identityFingerprint
+        && left.soulPath === right.soulPath
+        && left.soulFingerprint === right.soulFingerprint
+        && left.mcpConfigPath === right.mcpConfigPath
+        && left.mcpConfigFingerprint === right.mcpConfigFingerprint
+        && left.operationalEnvironmentFingerprint === right.operationalEnvironmentFingerprint;
+}
+/** Fail-closed parser for untrusted trace-source metadata. */
+export function backgroundSnapshotFromMetadata(metadata) {
+    const value = metadata?.backgroundSnapshot;
+    if (!isRecord(value) || value.schema !== BACKGROUND_SNAPSHOT_SCHEMA)
+        return undefined;
+    const allowedFields = new Set([
+        "schema",
+        "configPath",
+        "configFingerprint",
+        "dotenvPath",
+        "dotenvFingerprint",
+        "identityPath",
+        "identityFingerprint",
+        "soulPath",
+        "soulFingerprint",
+        "mcpConfigPath",
+        "mcpConfigFingerprint",
+        "operationalEnvironmentFingerprint",
+    ]);
+    if (Object.keys(value).some((field) => !allowedFields.has(field)))
+        return undefined;
+    const fields = [
+        "configPath",
+        "configFingerprint",
+        "dotenvPath",
+        "dotenvFingerprint",
+        "identityPath",
+        "identityFingerprint",
+        "operationalEnvironmentFingerprint",
+    ];
+    if (fields.some((field) => typeof value[field] !== "string" || value[field].length === 0))
+        return undefined;
+    if ((value.soulPath === undefined) !== (value.soulFingerprint === undefined)
+        || (value.soulPath !== undefined && (typeof value.soulPath !== "string" || value.soulPath.length === 0))
+        || (value.soulFingerprint !== undefined
+            && (typeof value.soulFingerprint !== "string" || value.soulFingerprint.length === 0)))
+        return undefined;
+    if ((value.mcpConfigPath === undefined) !== (value.mcpConfigFingerprint === undefined)
+        || (value.mcpConfigPath !== undefined
+            && (typeof value.mcpConfigPath !== "string" || value.mcpConfigPath.length === 0))
+        || (value.mcpConfigFingerprint !== undefined
+            && (typeof value.mcpConfigFingerprint !== "string" || value.mcpConfigFingerprint.length === 0)))
+        return undefined;
+    return {
+        schema: BACKGROUND_SNAPSHOT_SCHEMA,
+        configPath: value.configPath,
+        configFingerprint: value.configFingerprint,
+        dotenvPath: value.dotenvPath,
+        dotenvFingerprint: value.dotenvFingerprint,
+        identityPath: value.identityPath,
+        identityFingerprint: value.identityFingerprint,
+        ...(value.soulPath === undefined
+            ? {}
+            : { soulPath: value.soulPath, soulFingerprint: value.soulFingerprint }),
+        ...(value.mcpConfigPath === undefined
+            ? {}
+            : {
+                mcpConfigPath: value.mcpConfigPath,
+                mcpConfigFingerprint: value.mcpConfigFingerprint,
+            }),
+        operationalEnvironmentFingerprint: value.operationalEnvironmentFingerprint,
+    };
+}
+async function fingerprintRegularFile(path, label, proofKey) {
+    return (await readRegularFileProof(path, label, proofKey)).fingerprint;
+}
+async function fingerprintOptionalRegularFile(path, label, proofKey) {
+    try {
+        return await fingerprintRegularFile(path, label, proofKey);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "missing";
+        throw error;
+    }
+}
+async function readRegularFileProof(path, label, proofKey) {
+    let handle;
+    try {
+        handle = await open(path, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (["ELOOP", "EMLINK"].includes(error.code ?? "")) {
+            throw new Error(`Refusing to read ${label} path ${path} because it is a symbolic link.`);
+        }
+        throw error;
+    }
+    try {
+        const before = await handle.stat({ bigint: true });
+        if (!before.isFile()) {
+            throw new Error(`Refusing to read ${label} path ${path} because it is not a regular file.`);
+        }
+        const bytes = await handle.readFile();
+        const [afterHandle, afterPath] = await Promise.all([
+            handle.stat({ bigint: true }),
+            lstat(path, { bigint: true }),
+        ]);
+        if (afterPath.isSymbolicLink()
+            || !afterPath.isFile()
+            || !sameRegularFileVersion(before, afterHandle)
+            || !sameRegularFileVersion(before, afterPath)) {
+            throw new Error(`Refusing to read ${label} path ${path} because it changed during startup.`);
+        }
+        return { bytes, fingerprint: [
+                "file",
+                before.dev.toString(),
+                before.ino.toString(),
+                before.size.toString(),
+                before.mtimeNs.toString(),
+                before.ctimeNs.toString(),
+                before.mode.toString(8),
+                createHmac("sha256", proofKey)
+                    .update("mono-agent.background-file.v1\0", "utf8")
+                    .update(label, "utf8")
+                    .update("\0", "utf8")
+                    .update(path, "utf8")
+                    .update("\0", "utf8")
+                    .update(bytes)
+                    .digest("hex"),
+            ].join(":") };
+    }
+    finally {
+        await handle.close();
+    }
+}
+function sameRegularFileVersion(left, right) {
+    return left.dev === right.dev
+        && left.ino === right.ino
+        && left.size === right.size
+        && left.mtimeNs === right.mtimeNs
+        && left.ctimeNs === right.ctimeNs
+        && left.mode === right.mode;
+}
+function normalizeProofKey(value) {
+    if (value.byteLength !== 32) {
+        throw new Error("The background snapshot proof key must contain exactly 32 bytes.");
+    }
+    return Buffer.from(value);
+}
+async function ensureRuntimeInputsRoot(runtimeRoot, homeDir) {
+    if (runtimeRoot !== undefined) {
+        await mkdir(resolve(runtimeRoot), { recursive: true, mode: 0o700 });
+        const canonical = await realpath(resolve(runtimeRoot));
+        await assertPrivateDirectory(canonical, "background runtime input root");
+        return canonical;
+    }
+    const home = await realpath(resolve(homeDir ?? accountHomeDirectory()));
+    let current = home;
+    for (const segment of [".mono-agent", "runtime-inputs"]) {
+        current = join(current, segment);
+        await mkdir(current, { mode: 0o700 }).catch((error) => {
+            if (error.code !== "EEXIST")
+                throw error;
+        });
+        await assertPrivateDirectory(current, "background runtime input root");
+    }
+    return current;
+}
+async function assertPrivateDirectory(path, label) {
+    const details = await lstat(path);
+    if (!details.isDirectory() || details.isSymbolicLink()) {
+        throw new Error(`${label} ${path} must be a real directory.`);
+    }
+    if (typeof process.getuid === "function" && details.uid !== process.getuid()) {
+        throw new Error(`${label} ${path} must be owned by the current user.`);
+    }
+    await chmod(path, 0o700);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=background-snapshot.js.map

package/dist/background-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-snapshot.js","sourceRoot":"","sources":["../src/background-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,IAAI,WAAW,EAAoB,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,2CAA2C,EAC3C,8BAA8B,EAC9B,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAExF,MAAM,CAAC,MAAM,0BAA0B,GAAG,mCAAmC,CAAC;AAC9E,MAAM,sCAAsC,GAAG,MAAM,CAAC;AAsBtD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA4B;IACnE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC7E,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;WACjB,OAAO,CAAC,MAAM,GAAG,sCAAsC;WACvD,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,8BAA8B,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAuCD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAA4C;IAE5C,OAAO,CAAC,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA4C;IAE5C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC;QAC/C,GAAG;QACH,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,EAAE,WAAW;QAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,YAAY,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,uBAAuB,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAAgG;IAEhG,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,sCAAsC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzF,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,iBAAiB,CAChC,KAAK,CAAC,QAAQ,IAAI,MAAM,iCAAiC,CAAC,UAAU,CAAC,CACtE,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5D,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACpD,qBAAqB,CAAC,UAAU,CAAC;QACjC,8BAA8B,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC/D,CAAC,CAAC;IACH,uCAAuC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,mBAAmB,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClG,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS;QAC5C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7G,MAAM,oBAAoB,GAAG,aAAa,KAAK,SAAS;QACtD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxE,sEAAsE;IACtE,kFAAkF;IAClF,6EAA6E;IAC7E,MAAM,CACJ,WAAW,EACX,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,SAAS,EACT,cAAc,EACf,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACpD,qBAAqB,CAAC,UAAU,CAAC;QACjC,8BAA8B,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC9D,sBAAsB,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC1D,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACxG,aAAa,KAAK,SAAS;YACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5B,CAAC,CAAC,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC;KAClE,CAAC,CAAC;IACH,IACE,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;WAC3C,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;WAC9C,iBAAiB,KAAK,sBAAsB;WAC5C,mBAAmB,KAAK,aAAa;WACrC,eAAe,KAAK,SAAS;WAC7B,oBAAoB,KAAK,cAAc,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,uCAAuC,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChF,OAAO;QACL,MAAM,EAAE,0BAA0B;QAClC,UAAU;QACV,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,UAAU;QACV,iBAAiB;QACjB,YAAY;QACZ,mBAAmB;QACnB,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;QACjG,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS;YACnE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC;QAC5C,iCAAiC,EAAE,2CAA2C,CAAC,KAAK,CAAC,GAAG,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAUxD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,iBAAiB,CAChC,KAAK,CAAC,QAAQ,IAAI,MAAM,yBAAyB,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvE,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/E,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;YAC7D,8BAA8B,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACvE,oBAAoB,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;YACjE,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAC7B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5B,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YAC7D,QAAQ,CAAC,aAAa,KAAK,SAAS;gBAClC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5B,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC;SACzE,CAAC,CAAC;QACH,IACE,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,iBAAiB;eAC9C,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;eAChD,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,mBAAmB;eACrD,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS,CAAC;eAC9E,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;mBAC9B,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,eAAe,CAAC,CAAC;eACxE,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,CAAC;eACxF,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS;mBACnC,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,oBAAoB,CAAC,CAAC,EAC1F,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;QAC9G,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC/F,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,aAAa,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;YACxB,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC;YAC1B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpF,QAAQ,CAAC,UAAU,CAAC;YACpB,QAAQ,CAAC,YAAY,CAAC;YACtB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;SACnF,CAAC,CAAC;QACH,IACE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;eAC/B,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;eACtC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;eACpF,CAAC,SAAS,KAAK,SAAS;mBACtB,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EACjF,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC;YAC5C,GAAG;YACH,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,QAAQ,CAAC,UAAU;YAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;QACtH,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO;YACL,UAAU;YACV,WAAW,EAAE;gBACX,GAAG,KAAK,CAAC,GAAG;gBACZ,wBAAwB,EAAE,YAAY;gBACtC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;gBACrE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,aAAa,EAAE,CAAC;aACtF;YACD,KAAK,CAAC,OAAO;gBACX,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACrD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uCAAuC,CAC9C,MAAwC,EACxC,GAAiD,EACjD,UAAkB;IAElB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,uEAAuE;QACvE,2EAA2E;QAC3E,6CAA6C;QAC7C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,gEAAgE,IAAI,yBAAyB,UAAU,GAAG,CAC3G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IACE,KAAK,KAAK,SAAS;eAChB,CAAC,8BAA8B,CAAC,IAAI,CAAC;eACrC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gEAAgE,IAAI,4BAA4B,UAAU,GAAG,CAC9G,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAwB,EAAE,KAAyB;IACxF,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;WAC9B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;WACpC,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WAClD,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;WACpC,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WAClD,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;WACxC,IAAI,CAAC,mBAAmB,KAAK,KAAK,CAAC,mBAAmB;WACtD,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;WAChC,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;WAC9C,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WAC1C,IAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB;WACxD,IAAI,CAAC,iCAAiC,KAAK,KAAK,CAAC,iCAAiC,CAAC;AAC1F,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,8BAA8B,CAAC,QAA6C;IAC1F,MAAM,KAAK,GAAG,QAAQ,EAAE,kBAAkB,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,0BAA0B;QAAE,OAAO,SAAS,CAAC;IACtF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,QAAQ;QACR,YAAY;QACZ,mBAAmB;QACnB,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,qBAAqB;QACrB,UAAU;QACV,iBAAiB;QACjB,eAAe;QACf,sBAAsB;QACtB,mCAAmC;KACpC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,MAAM,MAAM,GAAG;QACb,YAAY;QACZ,mBAAmB;QACnB,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,qBAAqB;QACrB,mCAAmC;KAC3B,CAAC;IACX,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,IACE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC;WACrE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;WACrG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;eAClC,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,IACE,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC;WAC/E,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;eAChC,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;WAChF,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;eACvC,CAAC,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACjG,OAAO,SAAS,CAAC;IACnB,OAAO;QACL,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,KAAK,CAAC,UAAoB;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAA2B;QACpD,UAAU,EAAE,KAAK,CAAC,UAAoB;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAA2B;QACpD,YAAY,EAAE,KAAK,CAAC,YAAsB;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAA6B;QACxD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAkB,EAAE,eAAe,EAAE,KAAK,CAAC,eAAyB,EAAE,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,aAAa,EAAE,KAAK,CAAC,aAAuB;gBAC5C,oBAAoB,EAAE,KAAK,CAAC,oBAA8B;aAC3D,CAAC;QACN,iCAAiC,EAAE,KAAK,CAAC,iCAA2C;KACrF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,KAAa,EAAE,QAAgB;IACjF,OAAO,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,IAAY,EAAE,KAAa,EAAE,QAAgB;IACzF,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,KAAa,EACb,QAAgB;IAEhB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,iCAAiC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,oCAAoC,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IACE,SAAS,CAAC,cAAc,EAAE;eACvB,CAAC,SAAS,CAAC,MAAM,EAAE;eACnB,CAAC,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC;eAC5C,CAAC,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,qCAAqC,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE;gBAC3B,MAAM;gBACN,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACtB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACzB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACzB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvB,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;qBAC3B,MAAM,CAAC,iCAAiC,EAAE,MAAM,CAAC;qBACjD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;qBACrB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;qBACpB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;qBACpB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;qBACpB,MAAM,CAAC,KAAK,CAAC;qBACb,MAAM,CAAC,KAAK,CAAC;aACjB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAiB,EACjB,KAAkB;IAElB,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACxB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACtB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;WACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC9B,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,WAA+B,EAAE,OAA2B;IACjG,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACvD,MAAM,sBAAsB,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,MAAM,sBAAsB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,KAAa;IAC/D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,4BAA4B,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,qCAAqC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/background-worker-lease.d.ts

@@ -0,0 +1,39 @@
+import type { ProcessIncarnation, SameProcessIncarnation } from "./process-incarnation.js";
+export interface BackgroundWorkerLease {
+    readonly configPath: string;
+    readonly path: string;
+    readonly ownerPid: number;
+    /** Idempotently release only this process's exact lease token. */
+    release(): Promise<void>;
+}
+export interface BackgroundWorkerLeaseOptions {
+    readonly homeDir?: string;
+    readonly pid?: number;
+    readonly now?: () => number;
+    /** Test/embed seam for the owner record written by this acquisition. */
+    readonly processIncarnation?: ProcessIncarnation;
+    /** Test/embed seam; production checks boot session plus process birth. */
+    readonly isSameProcessIncarnation?: SameProcessIncarnation;
+    readonly randomToken?: () => string;
+    readonly ownerlessGraceMs?: number;
+    /** Narrow deterministic seams for filesystem-race tests. */
+    readonly hooks?: {
+        readonly afterLeaseDirectoryCreated?: () => Promise<void>;
+        readonly beforeStaleLeaseRename?: () => Promise<void>;
+    };
+}
+/**
+ * Stable owner-private lifetime-lease path for one exact resolved config.
+ * The full path digest avoids relying on the shorter human-facing launchd hash.
+ */
+export declare function backgroundWorkerLeasePath(configPath: string, homeDir?: string): string;
+/**
+ * Acquire the process-lifetime singleton for a config.
+ *
+ * `undefined` means either a live owner or a fresh ownerless directory (the
+ * atomic mkdir -> owner.json initialization window) already holds the lease.
+ * Dead owners and old ownerless crash debris are atomically quarantined before
+ * one bounded retry. The returned lease must be held until worker shutdown.
+ */
+export declare function acquireBackgroundWorkerLease(configPath: string, options?: BackgroundWorkerLeaseOptions): Promise<BackgroundWorkerLease | undefined>;
+//# sourceMappingURL=background-worker-lease.d.ts.map

package/dist/background-worker-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-worker-lease.d.ts","sourceRoot":"","sources":["../src/background-worker-lease.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAe3F,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,0EAA0E;IAC1E,QAAQ,CAAC,wBAAwB,CAAC,EAAE,sBAAsB,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KACvD,CAAC;CACH;AAWD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAA4B,GACpC,MAAM,CAIR;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAkG5C"}