@msn-control/liftoff 0.11.2 → 0.12.0

package/dist/adapters/state/local-qualification.js

@@ -0,0 +1,299 @@
+import { randomUUID } from 'node:crypto';
+import { chmod, lstat, mkdir, readFile, rename, rm, unlink, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { StateMigrationError } from '../../domain/repair/stateful.js';
+import { assertNoResourceChanges, stateAssert, stateDigest, stateObjectDigest } from '../../domain/repair/stateful-invariants.js';
+import { inspectNativeLocalStateTools, nativeLocalStateProtocol, nativeStateHostId, runPrivateStateProcess, startPrivateStateProcess } from './native-system.js';
+import { DarwinPosixStateLockProvider } from './posix-native-lock.js';
+import { posixStateLockProgram } from './posix-lock-program.js';
+import { stopOwnedStateProcess, stopOwnedStateProcessesIn } from './owned-process.js';
+async function localVersion(filename) {
+    const info = await lstat(filename, { bigint: true });
+    return stateObjectDigest({
+        dev: String(info.dev), ino: String(info.ino), size: String(info.size),
+        mtime: String(info.mtimeNs), ctime: String(info.ctimeNs)
+    });
+}
+async function native(executable, cwd, args, signal, allowed = [0]) {
+    const result = await runPrivateStateProcess({ executable, args, cwd, signal, timeoutMs: 30_000, maximumBytes: 4 * 1024 * 1024 });
+    result.stderr.fill(0);
+    if (!allowed.includes(result.exitCode)) {
+        result.stdout.fill(0);
+        throw new StateMigrationError('native-command-failed');
+    }
+    return result.stdout;
+}
+async function nativeQuiet(executable, cwd, args, signal) {
+    (await native(executable, cwd, args, signal)).fill(0);
+}
+function oneFixtureState(bytes) {
+    const root = JSON.parse(Buffer.from(bytes).toString('utf8'));
+    stateAssert(root.version === 4 && typeof root.lineage === 'string' && Number.isSafeInteger(root.serial)
+        && root.resources?.length === 1, 'verification-incomplete');
+    const resource = root.resources[0];
+    stateAssert(resource.mode === 'managed' && resource.type === 'terraform_data' && resource.name === 'fixture'
+        && resource.instances?.length === 1 && typeof resource.instances[0].attributes?.id === 'string', 'verification-incomplete');
+    return {
+        lineage: root.lineage, serial: root.serial, id: resource.instances[0].attributes.id,
+        address: `${resource.module ? `${resource.module}.` : ''}terraform_data.fixture`
+    };
+}
+async function waitForNativeConsoleLock(filename, exited, signal, differentFrom) {
+    const end = Date.now() + 10_000;
+    while (Date.now() < end && !signal?.aborted && !exited()) {
+        const info = await readFile(filename, 'utf8').then((text) => {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return null;
+            }
+        }, () => null);
+        if (typeof info?.ID === 'string' && info.ID.length > 0 && info.ID !== differentFrom)
+            return;
+        await new Promise((resolve) => setTimeout(resolve, 25));
+    }
+    throw new StateMigrationError('native-command-failed');
+}
+const nativeQualifications = new WeakSet();
+export function isActualNativeLocalQualification(result, tools) {
+    return nativeQualifications.has(result) && result.hostRef === tools.hostId
+        && result.tofuBinaryDigest === tools.tofu.sha256 && result.pythonBinaryDigest === tools.python.sha256;
+}
+/**
+ * Explicit, opt-in qualification. It creates only a fixed terraform_data
+ * fixture in a fresh directory, with no cloud/provider credentials or downloads.
+ * This is native/backend qualification, never Azure live-resource evidence.
+ */
+export async function qualifyNativeLocalState(request) {
+    stateAssert(process.platform === 'darwin', 'unsupported-native-platform');
+    const parent = await lstat(request.scratchParent);
+    stateAssert(parent.isDirectory() && !parent.isSymbolicLink(), 'unsafe-path');
+    const root = path.join(request.scratchParent, `state-native-qualification-${randomUUID()}`);
+    await mkdir(root, { mode: 0o700 });
+    const statePath = path.join(root, 'fixture.tfstate');
+    const marker = path.join(root, '.fixture.tfstate.lock.info');
+    const checks = [];
+    let consoleProcess = null;
+    let currentLease = null;
+    try {
+        const mirror = path.join(root, 'empty-provider-mirror');
+        await mkdir(mirror, { mode: 0o700 });
+        await writeFile(path.join(root, 'liftoff.private.tfrc'), `disable_checkpoint = true\nprovider_installation {\n filesystem_mirror { path = ${JSON.stringify(mirror)} }\n}\n`, { mode: 0o600 });
+        const tools = await inspectNativeLocalStateTools({
+            pythonPath: request.pythonPath, tofuPath: request.tofuPath, workingDirectory: root, signal: request.signal
+        });
+        const provider = new DarwinPosixStateLockProvider({ python: tools.python });
+        checks.push('exact-installed-tofu-1.12.6', 'registered-cpython-3.14', 'verified-pinned-fcntl-source');
+        const backend = `terraform {\n backend "local" { path = ${JSON.stringify(statePath)} }\n}\n`;
+        const fixture = 'resource "terraform_data" "fixture" {\n input = "liftoff-synthetic-native-qualification"\n}\n';
+        await writeFile(path.join(root, 'main.tf'), backend + fixture, { mode: 0o600 });
+        await nativeQuiet(tools.tofu, root, ['init', '-input=false', '-no-color', '-get=false'], request.signal);
+        // This exact builtin fixture affects only disposable state. It has no
+        // external provider, provisioner, program, credentials or cloud resources.
+        await nativeQuiet(tools.tofu, root, ['apply', '-input=false', '-no-color', '-auto-approve'], request.signal);
+        await chmod(statePath, 0o600);
+        const original = await readFile(statePath);
+        const before = oneFixtureState(original);
+        stateAssert(before.address === 'terraform_data.fixture', 'verification-incomplete');
+        const preAcquireVersion = await localVersion(statePath);
+        currentLease = await provider.acquire({
+            path: statePath, expectedVersion: preAcquireVersion, operationId: randomUUID(), signal: request.signal
+        });
+        stateAssert(await localVersion(statePath) === preAcquireVersion, 'verification-incomplete');
+        checks.push('acquisition-preserves-exact-pre-acquire-metadata');
+        // The observer is another process. Closing its fd must not release the
+        // Python holder's POSIX process-associated record lock.
+        (await readFile(statePath)).fill(0);
+        const blocked = await runPrivateStateProcess({
+            executable: tools.tofu, cwd: root,
+            args: ['state', 'mv', '-lock=true', '-lock-timeout=0s', `-state=${statePath}`, 'terraform_data.fixture', 'terraform_data.unapproved'],
+            signal: request.signal
+        });
+        stateAssert(blocked.exitCode !== 0 && /lock/i.test(Buffer.from(blocked.stderr).toString('utf8')), 'verification-incomplete');
+        blocked.stdout.fill(0);
+        blocked.stderr.fill(0);
+        stateAssert(stateDigest(await readFile(statePath)) === stateDigest(original), 'verification-incomplete');
+        checks.push('native-tofu-blocked-by-fcntl-holder', 'observer-fd-close-preserves-holder-lock');
+        await currentLease.release();
+        currentLease = null;
+        stateAssert(!(await lstat(marker).then(() => true, () => false)), 'verification-incomplete');
+        consoleProcess = await startPrivateStateProcess(tools.tofu, ['console', '-no-color', '-lock=true', '-lock-timeout=0s', `-state=${statePath}`], root);
+        const consoleExit = new Promise((resolve) => consoleProcess.once('close', (code) => resolve(code ?? 1)));
+        consoleProcess.stdout.on('data', (bytes) => bytes.fill(0));
+        consoleProcess.stderr.on('data', (bytes) => bytes.fill(0));
+        consoleProcess.stdin.on('error', () => undefined);
+        await waitForNativeConsoleLock(marker, () => consoleProcess.exitCode !== null, request.signal);
+        let denied = false;
+        try {
+            const unexpected = await provider.acquire({
+                path: statePath, expectedVersion: await localVersion(statePath), operationId: randomUUID(), signal: request.signal
+            });
+            await unexpected.release();
+        }
+        catch (error) {
+            denied = error instanceof StateMigrationError && error.code === 'lock-unavailable';
+        }
+        stateAssert(denied, 'verification-incomplete');
+        consoleProcess.stdin.end('1 + 1\n');
+        stateAssert(await consoleExit === 0, 'verification-incomplete');
+        consoleProcess = null;
+        checks.push('fcntl-holder-blocked-by-native-tofu-console');
+        await mkdir(path.join(root, 'moved'), { mode: 0o700 });
+        await writeFile(path.join(root, 'moved', 'main.tf'), fixture, { mode: 0o600 });
+        await writeFile(path.join(root, 'main.tf'), backend + 'module "moved" {\n source = "./moved"\n}\n', { mode: 0o600 });
+        await nativeQuiet(tools.tofu, root, ['init', '-input=false', '-no-color'], request.signal);
+        await nativeQuiet(tools.tofu, root, [
+            'state', 'mv', '-lock=true', '-lock-timeout=0s', `-state=${statePath}`,
+            'terraform_data.fixture', 'module.moved.terraform_data.fixture'
+        ], request.signal);
+        const moved = await readFile(statePath);
+        const after = oneFixtureState(moved);
+        stateAssert(after.lineage === before.lineage && after.id === before.id && after.serial > before.serial
+            && after.address === 'module.moved.terraform_data.fixture', 'verification-incomplete');
+        const savedPlan = path.join(root, 'no-change.tfplan');
+        await nativeQuiet(tools.tofu, root, ['plan', '-input=false', '-no-color', '-detailed-exitcode', `-out=${savedPlan}`], request.signal);
+        const shown = await native(tools.tofu, root, ['show', '-json', savedPlan], request.signal);
+        try {
+            assertNoResourceChanges(JSON.parse(Buffer.from(shown).toString('utf8')), true);
+        }
+        finally {
+            shown.fill(0);
+        }
+        checks.push('actual-native-module-address-move', 'same-lineage-and-resource-identity', 'actual-native-no-change-plan');
+        const publication = path.join(root, 'publication.tfstate');
+        await writeFile(publication, original, { mode: 0o600 });
+        const inode = (await lstat(publication)).ino;
+        const expected = await localVersion(publication);
+        currentLease = await provider.acquire({ path: publication, expectedVersion: expected, operationId: randomUUID(), signal: request.signal });
+        await currentLease.replace(moved, expected);
+        stateAssert((await lstat(publication)).ino === inode && stateDigest(await readFile(publication)) === stateDigest(moved), 'verification-incomplete');
+        await currentLease.assertHeld();
+        const blockedAfterWrite = await runPrivateStateProcess({
+            executable: tools.tofu, cwd: root,
+            args: ['state', 'mv', '-lock=true', '-lock-timeout=0s', `-state=${publication}`,
+                'module.moved.terraform_data.fixture', 'module.concurrent.terraform_data.fixture'],
+            signal: request.signal
+        });
+        stateAssert(blockedAfterWrite.exitCode !== 0 && /lock/i.test(Buffer.from(blockedAfterWrite.stderr).toString('utf8')), 'verification-incomplete');
+        blockedAfterWrite.stdout.fill(0);
+        blockedAfterWrite.stderr.fill(0);
+        stateAssert(stateDigest(await readFile(publication)) === stateDigest(moved), 'verification-incomplete');
+        checks.push('native-exclusion-survives-in-place-publication');
+        let removalRejected = false;
+        try {
+            await currentLease.remove(await localVersion(publication));
+        }
+        catch (error) {
+            removalRejected = error instanceof StateMigrationError && error.code === 'unsupported-local-state-operation';
+        }
+        stateAssert(removalRejected, 'verification-incomplete');
+        let stale = false;
+        try {
+            await currentLease.replace(original, expected);
+        }
+        catch (error) {
+            stale = error instanceof StateMigrationError && error.code === 'stale-state';
+        }
+        stateAssert(stale && stateDigest(await readFile(publication)) === stateDigest(moved), 'verification-incomplete');
+        await currentLease.release();
+        currentLease = null;
+        currentLease = await provider.acquire({
+            path: publication, expectedVersion: await localVersion(publication), operationId: randomUUID(), signal: request.signal
+        });
+        const replacement = path.join(root, 'uncoordinated-replacement.tfstate');
+        await writeFile(replacement, moved, { mode: 0o600 });
+        await rename(replacement, publication);
+        // Deliberately demonstrate the unsafe alternative on a disposable file:
+        // the native writer CAN lock the new inode while our holder has the old one.
+        await nativeQuiet(tools.tofu, root, [
+            'state', 'mv', '-lock=true', '-lock-timeout=0s', `-state=${publication}`,
+            'module.moved.terraform_data.fixture', 'module.concurrent.terraform_data.fixture'
+        ], request.signal);
+        const concurrentBytes = await readFile(publication);
+        const concurrent = oneFixtureState(concurrentBytes);
+        stateAssert(concurrent.address === 'module.concurrent.terraform_data.fixture' && concurrent.id === after.id
+            && concurrent.lineage === after.lineage && concurrent.serial > after.serial, 'verification-incomplete');
+        let inodeChangeDetected = false;
+        try {
+            await currentLease.assertHeld();
+        }
+        catch (error) {
+            inodeChangeDetected = error instanceof StateMigrationError && error.code === 'lock-lost';
+        }
+        stateAssert(inodeChangeDetected && stateDigest(await readFile(publication)) === stateDigest(concurrentBytes), 'verification-incomplete');
+        await currentLease.release();
+        currentLease = null;
+        checks.push('native-writer-can-lock-a-replaced-inode', 'newer-native-write-preserved-after-lock-loss');
+        const unlinkRoot = path.join(root, 'unlink-probe');
+        await mkdir(unlinkRoot, { mode: 0o700 });
+        await writeFile(path.join(unlinkRoot, 'liftoff.private.tfrc'), `disable_checkpoint = true\nprovider_installation {\n filesystem_mirror { path = ${JSON.stringify(mirror)} }\n}\n`, { mode: 0o600 });
+        await writeFile(path.join(unlinkRoot, 'main.tf'), `terraform {\n backend "local" { path = ${JSON.stringify(publication)} }\n}\n${fixture}`, { mode: 0o600 });
+        await nativeQuiet(tools.tofu, unlinkRoot, ['init', '-input=false', '-no-color', '-get=false'], request.signal);
+        const unlinkOperation = randomUUID();
+        const oldInode = (await lstat(publication)).ino;
+        currentLease = await provider.acquire({
+            path: publication, expectedVersion: await localVersion(publication), operationId: unlinkOperation, signal: request.signal
+        });
+        await unlink(publication);
+        consoleProcess = await startPrivateStateProcess(tools.tofu, ['apply', '-input=true', '-no-color', '-lock=true', '-lock-timeout=0s', `-state=${publication}`], unlinkRoot);
+        const recreatedExit = new Promise((resolve) => consoleProcess.once('close', (code) => resolve(code ?? 1)));
+        consoleProcess.stdout.on('data', (bytes) => bytes.fill(0));
+        consoleProcess.stderr.on('data', (bytes) => bytes.fill(0));
+        consoleProcess.stdin.on('error', () => undefined);
+        await waitForNativeConsoleLock(path.join(root, '.publication.tfstate.lock.info'), () => consoleProcess.exitCode !== null, request.signal, unlinkOperation);
+        stateAssert((await lstat(publication)).ino !== oldInode, 'verification-incomplete');
+        let unlinkDetected = false;
+        try {
+            await currentLease.assertHeld();
+        }
+        catch (error) {
+            unlinkDetected = error instanceof StateMigrationError && error.code === 'lock-lost';
+        }
+        stateAssert(unlinkDetected, 'verification-incomplete');
+        await currentLease.release();
+        currentLease = null;
+        // Releasing the old holder must not remove the new native owner's metadata.
+        const newOwner = JSON.parse(await readFile(path.join(root, '.publication.tfstate.lock.info'), 'utf8'));
+        stateAssert(newOwner.ID && newOwner.ID !== unlinkOperation, 'verification-incomplete');
+        // Decline the fixed builtin fixture proposal: observe its native lock,
+        // but never approve or execute this proposed resource creation.
+        consoleProcess.stdin.end('no\n');
+        stateAssert(await recreatedExit !== 0, 'verification-incomplete');
+        consoleProcess = null;
+        checks.push('native-pending-apply-can-lock-an-unlinked-path', 'new-native-lock-metadata-preserved');
+        let absentRejected = false;
+        try {
+            await provider.acquire({ path: path.join(root, 'absent.tfstate'), expectedVersion: null, operationId: randomUUID() });
+        }
+        catch (error) {
+            absentRejected = error instanceof StateMigrationError && error.code === 'unsupported-local-state-operation';
+        }
+        stateAssert(absentRejected, 'verification-incomplete');
+        stateAssert(!(await lstat(path.join(root, 'absent.tfstate')).then(() => true, () => false)), 'verification-incomplete');
+        checks.push('inode-preserving-conditional-publication', 'stale-publication-rejected', 'absent-destination-unsupported', 'unlink-retirement-unsupported', 'uncoordinated-inode-replacement-detected');
+        original.fill(0);
+        moved.fill(0);
+        concurrentBytes.fill(0);
+        const result = Object.freeze({
+            schemaVersion: 1, kind: 'native-local-state-qualification', status: 'verified', platform: 'darwin',
+            hostRef: nativeStateHostId(), tofuVersion: '1.12.6', tofuBinaryDigest: tools.tofu.sha256,
+            pythonBinaryDigest: tools.python.sha256,
+            protocolDigest: stateObjectDigest({ protocol: nativeLocalStateProtocol, helper: stateDigest(posixStateLockProgram) }),
+            sourceCommit: nativeLocalStateProtocol.sourceCommit, observedAt: Date.now(), checks: Object.freeze(checks),
+            stateScope: 'synthetic-disposable-only', azureLiveQualification: 'not-performed', atomicStateReplacement: false
+        });
+        nativeQualifications.add(result);
+        return { tools, result };
+    }
+    finally {
+        if (consoleProcess) {
+            consoleProcess.stdin.end();
+            await stopOwnedStateProcess(consoleProcess);
+        }
+        await stopOwnedStateProcessesIn(root);
+        await currentLease?.release();
+        await rm(root, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=local-qualification.js.map

package/dist/adapters/state/local-qualification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-qualification.js","sourceRoot":"","sources":["../../../src/adapters/state/local-qualification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,mBAAmB,EAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAClI,OAAO,EACL,4BAA4B,EAAE,wBAAwB,EAAE,iBAAiB,EACzE,sBAAsB,EAAE,wBAAwB,EACjD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEtF,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,iBAAiB,CAAC;QACvB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACrE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,UAAqC,EAAE,GAAW,EAAE,IAAuB,EAAE,MAAoB,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IAEhH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACjI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,UAAqC,EAAE,GAAW,EAAE,IAAuB,EAAE,MAAoB;IAC1H,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,WAAW,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;WAClG,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,WAAW,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;WACvG,QAAQ,CAAC,SAAS,EAAE,MAAM,KAAK,CAAC,IAAI,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,KAAK,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IAC9H,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;QACnF,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,wBAAwB;KACjF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAgB,EAAE,MAAqB,EAAE,MAAoB,EAAE,aAAsB;IAC3H,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAChC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1D,IAAI,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAC5E,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,aAAa;YAAE,OAAO;QAC5F,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAkC,CAAC;AAE3E,MAAM,UAAU,gCAAgC,CAC9C,MAAsC,EAAE,KAA4B;IAEpE,OAAO,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM;WACrE,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;AAC1G,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAK7C;IACC,WAAW,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,8BAA8B,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,cAAc,GAAgE,IAAI,CAAC;IACvF,IAAI,YAAY,GAAwE,IAAI,CAAC;IAC7F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QACxD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,mFAAmF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9L,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC;YAC/C,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;SAC3G,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;QACtG,MAAM,OAAO,GAAG,0CAA0C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC;QAC7F,MAAM,OAAO,GAAG,+FAA+F,CAAC;QAChH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzG,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7G,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,WAAW,CAAC,MAAM,CAAC,OAAO,KAAK,wBAAwB,EAAE,yBAAyB,CAAC,CAAC;QACpF,MAAM,iBAAiB,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QACxD,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YACpC,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;SACvG,CAAC,CAAC;QACH,WAAW,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,KAAK,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;QAC5F,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAChE,uEAAuE;QACvE,wDAAwD;QACxD,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;YAC3C,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI;YACjC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,SAAS,EAAE,EAAE,wBAAwB,EAAE,2BAA2B,CAAC;YACrI,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,WAAW,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC7H,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,WAAW,CAAC,WAAW,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,yCAAyC,CAAC,CAAC;QAC9F,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,YAAY,GAAG,IAAI,CAAC;QACpB,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC7F,cAAc,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,IAAI,EACxD,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3F,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,cAAe,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,wBAAwB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAe,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAChG,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACxC,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;aACnH,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC;QAAC,CAAC;QACvG,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC/C,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,WAAW,CAAC,MAAM,WAAW,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAChE,cAAc,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,GAAG,4CAA4C,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrH,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;YAClC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,SAAS,EAAE;YACtE,wBAAwB,EAAE,qCAAqC;SAChE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,WAAW,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;eACjG,KAAK,CAAC,OAAO,KAAK,qCAAqC,EAAE,yBAAyB,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACtD,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtI,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC;YAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;gBAC/E,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,oCAAoC,EAAE,8BAA8B,CAAC,CAAC;QACvH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QACjD,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3I,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,WAAW,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACpJ,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CAAC;YACrD,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI;YACjC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,WAAW,EAAE;gBAC7E,qCAAqC,EAAE,0CAA0C,CAAC;YACpF,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,WAAW,CAAC,iBAAiB,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACjJ,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnE,WAAW,CAAC,WAAW,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YAAC,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC;QACnE,OAAO,KAAK,EAAE,CAAC;YAAC,eAAe,GAAG,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,mCAAmC,CAAC;QAAC,CAAC;QAC/H,WAAW,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;QACxD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YAAC,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAAC,CAAC;QACvD,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,GAAG,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;QAAC,CAAC;QAC/F,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACjH,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,YAAY,GAAG,IAAI,CAAC;QACpB,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YACpC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;SACvH,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACzE,MAAM,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACvC,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;YAClC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,WAAW,EAAE;YACxE,qCAAqC,EAAE,0CAA0C;SAClF,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QACpD,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,0CAA0C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;eACtG,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC1G,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC;YAAC,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;QAAC,CAAC;QACxC,OAAO,KAAK,EAAE,CAAC;YAAC,mBAAmB,GAAG,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;QAAC,CAAC;QAC3G,WAAW,CAAC,mBAAmB,IAAI,WAAW,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,WAAW,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACzI,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,8CAA8C,CAAC,CAAC;QAEvG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAC3D,mFAAmF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvI,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAC9C,0CAA0C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7G,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/G,MAAM,eAAe,GAAG,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YACpC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;SAC1H,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1B,cAAc,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,IAAI,EACxD,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,WAAW,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAChH,MAAM,aAAa,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,cAAe,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpH,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,CAAC,EAC9E,GAAG,EAAE,CAAC,cAAe,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC5E,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACpF,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;QAAC,CAAC;QACxC,OAAO,KAAK,EAAE,CAAC;YAAC,cAAc,GAAG,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;QAAC,CAAC;QACtG,WAAW,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;QACvD,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,YAAY,GAAG,IAAI,CAAC;QACpB,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACvG,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,KAAK,eAAe,EAAE,yBAAyB,CAAC,CAAC;QACvF,uEAAuE;QACvE,gEAAgE;QAChE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,WAAW,CAAC,MAAM,aAAa,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAClE,cAAc,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,oCAAoC,CAAC,CAAC;QACpG,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9H,OAAO,KAAK,EAAE,CAAC;YAAC,cAAc,GAAG,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,mCAAmC,CAAC;QAAC,CAAC;QAC9H,WAAW,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;QACvD,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACxH,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,4BAA4B,EAAE,gCAAgC,EACpH,+BAA+B,EAAE,0CAA0C,CAAC,CAAC;QAC/E,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAmC,MAAM,CAAC,MAAM,CAAC;YAC3D,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ;YAClG,OAAO,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;YACxF,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACvC,cAAc,EAAE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACrH,YAAY,EAAE,wBAAwB,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1G,UAAU,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,eAAe,EAAE,sBAAsB,EAAE,KAAK;SAChH,CAAC,CAAC;QACH,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,cAAc,EAAE,CAAC;YACnB,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,YAAY,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/adapters/state/local.d.ts

@@ -0,0 +1,25 @@
+import { type LocalStateBinding, type NativeLocalStateLockProvider, type ProtectedVolumeAttestor, type StateBackendAdapter, type StateBackendLease, type StateBackendMetadata, type StateExecutionContext } from '../../domain/repair/stateful.js';
+export type { NativeLocalStateLockProvider } from '../../domain/repair/stateful.js';
+export declare class LocalStateBackend implements StateBackendAdapter {
+    #private;
+    private readonly options;
+    readonly binding: LocalStateBinding;
+    constructor(binding: LocalStateBinding, options: {
+        volume: ProtectedVolumeAttestor;
+        locks?: NativeLocalStateLockProvider;
+        now?: () => number;
+        maxStateBytes?: number;
+    });
+    toJSON(): {
+        backendRef: string;
+        kind: 'local';
+    };
+    assertAccess(context: StateExecutionContext, write: boolean): Promise<void>;
+    metadata(context: StateExecutionContext): Promise<StateBackendMetadata>;
+    readPrivate(expected: StateBackendMetadata, context: StateExecutionContext, lease?: StateBackendLease): Promise<Uint8Array>;
+    acquire(expected: StateBackendMetadata, context: StateExecutionContext, operationId: string, signal?: AbortSignal): Promise<StateBackendLease>;
+    private held;
+    private check;
+    writePrivate(request: Parameters<StateBackendAdapter['writePrivate']>[0]): Promise<StateBackendMetadata>;
+    remove(request: Parameters<StateBackendAdapter['remove']>[0]): Promise<StateBackendMetadata>;
+}

package/dist/adapters/state/local.js

@@ -0,0 +1,145 @@
+import { constants } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+import { StateMigrationError } from '../../domain/repair/stateful.js';
+import { inspectStateBytes, stateAssert, stateBindingDigest, stateMetadataMatches, stateObjectDigest, stateSnapshotMatches } from '../../domain/repair/stateful-invariants.js';
+import { assertExistingStateSourcePath, assertPrivateStatePath } from './protected-workspace.js';
+class LocalLease {
+    backendId;
+    native;
+    kind = 'native-file';
+    #released = false;
+    constructor(backendId, native) {
+        this.backendId = backendId;
+        this.native = native;
+    }
+    async assertHeld() {
+        stateAssert(!this.#released, 'lock-lost');
+        await this.native.assertHeld();
+    }
+    async release() {
+        if (!this.#released) {
+            await this.native.release();
+            this.#released = true;
+        }
+    }
+}
+export class LocalStateBackend {
+    options;
+    binding;
+    #leases = new WeakSet();
+    constructor(binding, options) {
+        this.options = options;
+        stateBindingDigest(binding);
+        this.binding = Object.freeze(structuredClone(binding));
+    }
+    toJSON() { return { backendRef: stateBindingDigest(this.binding), kind: 'local' }; }
+    async assertAccess(context, write) {
+        if (this.binding.readOnlySource)
+            await assertExistingStateSourcePath(this.binding.statePath, context);
+        else
+            await assertPrivateStatePath(this.binding.statePath, context, this.options.volume, false, this.options.now?.() ?? Date.now());
+        if (write)
+            stateAssert(this.options.locks, 'native-lock-provider-required');
+        if (write && this.options.locks?.capabilities) {
+            stateAssert(!this.binding.readOnlySource, 'unsupported-local-state-operation');
+            const existing = await lstat(this.binding.statePath).catch(() => null);
+            stateAssert(existing?.isFile(), 'unsupported-local-state-operation');
+        }
+    }
+    async metadata(context) {
+        await this.assertAccess(context, false);
+        const info = await lstat(this.binding.statePath, { bigint: true }).catch((error) => {
+            if (error.code === 'ENOENT')
+                return null;
+            throw new StateMigrationError('access-denied');
+        });
+        stateAssert(!info || (info.isFile() && !info.isSymbolicLink() && info.nlink === 1n), 'unsafe-path');
+        const version = info ? stateObjectDigest({
+            dev: String(info.dev), ino: String(info.ino), size: String(info.size),
+            mtime: String(info.mtimeNs), ctime: String(info.ctimeNs)
+        }) : null;
+        return {
+            backendId: this.binding.id, bindingDigest: stateBindingDigest(this.binding),
+            exists: info !== null, version, etag: null, size: info ? Number(info.size) : 0,
+            observedAt: this.options.now?.() ?? Date.now()
+        };
+    }
+    async readPrivate(expected, context, lease) {
+        await this.assertAccess(context, false);
+        if (lease)
+            await this.held(lease);
+        stateAssert(expected.exists && stateMetadataMatches(expected, await this.metadata(context)), 'stale-state');
+        stateAssert(expected.size <= (this.options.maxStateBytes ?? 32 * 1024 * 1024), 'storage-limit');
+        const file = await open(this.binding.statePath, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        try {
+            const info = await file.stat();
+            stateAssert(info.isFile() && info.nlink === 1 && info.size === expected.size, 'stale-state');
+            const bytes = await file.readFile();
+            stateAssert(stateMetadataMatches(expected, await this.metadata(context)), 'stale-state');
+            if (lease)
+                await this.held(lease);
+            return bytes;
+        }
+        finally {
+            await file.close();
+        }
+    }
+    async acquire(expected, context, operationId, signal) {
+        await this.assertAccess(context, true);
+        stateAssert(stateMetadataMatches(expected, await this.metadata(context)), 'stale-state');
+        const native = await this.options.locks.acquire({ path: this.binding.statePath, operationId, expectedVersion: expected.version, signal });
+        const lease = new LocalLease(this.binding.id, native);
+        this.#leases.add(lease);
+        try {
+            await lease.assertHeld();
+            stateAssert(stateMetadataMatches(expected, await this.metadata(context)), 'stale-state');
+            return lease;
+        }
+        catch (error) {
+            await lease.release();
+            throw error;
+        }
+    }
+    async held(lease) {
+        stateAssert(lease instanceof LocalLease && this.#leases.has(lease) && lease.backendId === this.binding.id, 'lock-lost');
+        await lease.assertHeld();
+        return lease;
+    }
+    async check(expected, context, lease) {
+        const metadata = await this.metadata(context);
+        const bytes = metadata.exists ? await this.readPrivate(metadata, context, lease) : null;
+        try {
+            stateAssert(stateSnapshotMatches(expected, inspectStateBytes(metadata, bytes).snapshot), 'stale-state');
+        }
+        finally {
+            bytes?.fill(0);
+        }
+        await lease.assertHeld();
+    }
+    async writePrivate(request) {
+        stateAssert(!this.binding.readOnlySource, 'unsupported-state');
+        await this.assertAccess(request.context, true);
+        const lease = await this.held(request.lease);
+        await this.check(request.expected, request.context, lease);
+        const candidate = inspectStateBytes({ ...request.expected, exists: true, size: request.bytes.byteLength }, request.bytes).snapshot;
+        if (request.expected.exists) {
+            stateAssert(candidate.lineage === request.expected.lineage && candidate.serial >= request.expected.serial, 'stale-state');
+        }
+        await lease.native.replace(request.bytes, request.expected.version);
+        await lease.assertHeld();
+        return this.metadata(request.context);
+    }
+    async remove(request) {
+        stateAssert(!this.options.locks?.capabilities || this.options.locks.capabilities.remove, 'unsupported-local-state-operation');
+        await this.assertAccess(request.context, true);
+        const lease = await this.held(request.lease);
+        await this.check(request.expected, request.context, lease);
+        stateAssert(request.expected.exists && request.expected.version, 'stale-state');
+        await lease.native.remove(request.expected.version);
+        await lease.assertHeld();
+        const result = await this.metadata(request.context);
+        stateAssert(!result.exists, 'verification-incomplete');
+        return result;
+    }
+}
+//# sourceMappingURL=local.js.map

package/dist/adapters/state/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/adapters/state/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,mBAAmB,EASpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,oBAAoB,EAClH,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAIjG,MAAM,UAAU;IAGO,SAAS;IAAmB,MAAM;IAF9C,IAAI,GAAG,aAAsB,CAAC;IACvC,SAAS,GAAG,KAAK,CAAC;IAClB,YAAqB,SAAiB,EAAW,MAAoE;yBAAhG,SAAS;sBAAmB,MAAM;IAAiE,CAAC;IACzH,KAAK,CAAC,UAAU;QACd,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAG6B,OAAO;IAFvD,OAAO,CAAoB;IACpC,OAAO,GAAG,IAAI,OAAO,EAAc,CAAC;IACpC,YAAY,OAA0B,EAAmB,OAKxD;uBALwD,OAAO;QAM9D,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAA4C,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAE3H,KAAK,CAAC,YAAY,CAAC,OAA8B,EAAE,KAAc;QAC/D,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc;YAAE,MAAM,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;;YACjG,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnI,IAAI,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QAC5E,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;YAC9C,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACvE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA8B;QAC3C,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YACxG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACvC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACrE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SACzD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACV,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC3E,MAAM,EAAE,IAAI,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;SAC/C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAA8B,EAAE,OAA8B,EAAE,KAAyB;QACzG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,WAAW,CAAC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC5G,WAAW,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAC7F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YACzF,IAAI,KAAK;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAA8B,EAAE,OAA8B,EAAE,WAAmB,EAAE,MAAoB;QACrH,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3I,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YACzB,WAAW,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,KAAwB;QACzC,WAAW,CAAC,KAAK,YAAY,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACxH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAAuB,EAAE,OAA8B,EAAE,KAAiB;QAC5F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,IAAI,CAAC;YAAC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;QAAC,CAAC;gBACxG,CAAC;YAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3B,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA2D;QAC5E,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;QACnI,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5B,WAAW,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,SAAS,CAAC,MAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAO,EAAE,aAAa,CAAC,CAAC;QAC9H,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAqD;QAChE,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;QAC9H,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3D,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAChF,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/adapters/state/native-command.d.ts

@@ -0,0 +1,21 @@
+import { type NativeStateHost, type PrivateStateCommand, type PrivateStateCommandResult, type PrivateStateCommandRunner } from '../../domain/repair/stateful.js';
+export type { NativeStateHost, PrivateStateCommand, PrivateStateCommandResult, PrivateStateCommandRunner } from '../../domain/repair/stateful.js';
+export declare class SpawnPrivateStateCommandRunner implements PrivateStateCommandRunner {
+    #private;
+    private readonly options;
+    readonly identityDigest: string;
+    constructor(options: {
+        executable: string;
+        executableDigest: string;
+        host: NativeStateHost;
+        timeoutMs?: number;
+        maxCaptureBytes?: number;
+        cleanupTimeoutMs?: number;
+    });
+    toJSON(): {
+        command: string;
+        identityDigest: string;
+    };
+    run(command: PrivateStateCommand): Promise<PrivateStateCommandResult>;
+    quiesce(): Promise<void>;
+}

package/dist/adapters/state/native-command.js

@@ -0,0 +1,82 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { stateAssert, stateDigest } from '../../domain/repair/stateful-invariants.js';
+import { OwnedPrivateStateProcessRunner } from './owned-process.js';
+const environmentNames = new Set([
+    'PATH', 'PATHEXT', 'SystemRoot', 'SYSTEMROOT', 'WINDIR',
+    'ARM_CLIENT_ID', 'ARM_TENANT_ID', 'ARM_SUBSCRIPTION_ID', 'ARM_USE_OIDC',
+    'ARM_OIDC_TOKEN', 'ARM_OIDC_TOKEN_FILE_PATH', 'ARM_USE_MSI',
+    'ARM_MSI_ENDPOINT', 'ARM_CLIENT_SECRET', 'ARM_USE_AZUREAD',
+    'ARM_USE_CLI',
+    'HTTPS_PROXY', 'HTTP_PROXY', 'NO_PROXY', 'SSL_CERT_FILE', 'SSL_CERT_DIR'
+]);
+export class SpawnPrivateStateCommandRunner {
+    options;
+    identityDigest;
+    #processes;
+    #generation = 0;
+    constructor(options) {
+        this.options = options;
+        stateAssert(path.isAbsolute(options.executable) && /^[a-f0-9]{64}$/.test(options.executableDigest), 'tool-unavailable');
+        this.identityDigest = options.executableDigest;
+        this.#processes = new OwnedPrivateStateProcessRunner(options.cleanupTimeoutMs);
+    }
+    toJSON() {
+        return { command: 'registered-opentofu', identityDigest: this.identityDigest };
+    }
+    async run(command) {
+        const generation = this.#generation;
+        stateAssert(!command.signal?.aborted, 'cancelled');
+        stateAssert(path.isAbsolute(command.cwd) && ['init', 'plan', 'show', 'state', 'apply'].includes(command.args[0]), 'unsafe-planning-contract');
+        stateAssert(command.args.every((arg) => typeof arg === 'string' && !/[\x00\r\n]/.test(arg)), 'unsafe-planning-contract');
+        stateAssert(!command.args.some((arg) => /^-+(?:force|force-copy|force-unlock|reconfigure|lock=false|target|replace)(?:=|$)/.test(arg))
+            && !(command.args[0] === 'state' && ['push', 'rm', 'replace-provider'].includes(command.args[1])), 'unsafe-planning-contract');
+        if (command.operation === 'inspect') {
+            stateAssert(command.args[0] !== 'apply' && !command.args.includes('-migrate-state')
+                && (command.args[0] !== 'state' || (command.args[1] === 'mv' && command.args.includes('-dry-run'))), 'unsafe-planning-contract');
+        }
+        stateAssert(stateDigest(await readFile(this.options.executable)) === this.identityDigest, 'tool-unavailable');
+        const host = await this.options.host.verify(command.cwd, command.operation);
+        stateAssert(host.directory === command.cwd && host.encryptedVolume && host.isolated
+            && host.providerIdentityReadOnly && host.providerRegistrationDisabled, 'unsafe-planning-contract');
+        const supplied = await this.options.host.privateEnvironment(command.cwd);
+        const env = {};
+        for (const [name, value] of Object.entries(supplied)) {
+            stateAssert(environmentNames.has(name) && !/[\x00]/.test(value), 'unsafe-planning-contract');
+            env[name] = value;
+        }
+        Object.assign(env, {
+            HOME: command.cwd, USERPROFILE: command.cwd, XDG_CONFIG_HOME: command.cwd,
+            TMPDIR: command.cwd, TMP: command.cwd, TEMP: command.cwd,
+            TF_DATA_DIR: path.join(command.cwd, '.terraform'),
+            TF_CLI_CONFIG_FILE: path.join(command.cwd, 'liftoff.private.tfrc'),
+            TF_IN_AUTOMATION: '1', CHECKPOINT_DISABLE: '1', TF_LOG: 'OFF',
+            ARM_SKIP_PROVIDER_REGISTRATION: 'true', ARM_RESOURCE_PROVIDER_REGISTRATIONS: 'none'
+        });
+        stateAssert(generation === this.#generation && !command.signal?.aborted, 'cancelled');
+        try {
+            const result = await this.#processes.run({
+                executable: this.options.executable, args: command.args, cwd: command.cwd, environment: env,
+                stdin: command.stdin, signal: command.signal, timeoutMs: this.options.timeoutMs ?? 60_000,
+                maximumBytes: this.options.maxCaptureBytes ?? 32 * 1024 * 1024, captureStderr: false
+            });
+            result.stderr.fill(0);
+            return { exitCode: result.exitCode, stdout: result.stdout };
+        }
+        finally {
+            for (const name of Object.keys(env))
+                delete env[name];
+        }
+    }
+    async quiesce() {
+        this.#generation++;
+        const stopped = await Promise.allSettled([
+            this.#processes.quiesce(),
+            this.options.host.quiesce?.() ?? Promise.resolve()
+        ]);
+        const failure = stopped.find((entry) => entry.status === 'rejected');
+        if (failure?.status === 'rejected')
+            throw failure.reason;
+    }
+}
+//# sourceMappingURL=native-command.js.map