@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/database/slave-migrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/slave-migrations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAkB,MAAM,0BAA0B,CAAC;AACjF,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAC;AAE1D,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAgB;IAC3C,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,kEAAkE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;CACpI,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAmB;IACtD,MAAM,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7E,CAAC"}

package/dist/diagnostics/index.d.ts

@@ -0,0 +1,16 @@
+/** Shared operational diagnostics, usable without starting the daemon. */
+export { describeError, redactDiagnosticText, sanitizeDiagnostic } from '@omnitron-dev/titan/diagnostics';
+export type { DiagnosticFinding, DiagnosticEvent, DiagnosticSink, DiagnosticReceipt, DiagnosticSeverity } from '@omnitron-dev/titan/diagnostics';
+import { type DiagnosticSink } from '@omnitron-dev/titan/diagnostics';
+/** Payload delivered to monitoring.alertSink by the existing alert outbox. */
+export interface AlertDiagnosticInput {
+    eventId: string;
+    status: 'firing' | 'resolved';
+    ruleName: string;
+    value: string;
+    summary: string;
+    host: string;
+}
+/** Bridge an exposed alert handler to any Titan diagnostic sink. No second queue or retries. */
+export declare function createAlertDiagnosticHandler(sink: DiagnosticSink): (input: AlertDiagnosticInput) => Promise<import("@omnitron-dev/titan/diagnostics").DiagnosticReceipt>;
+//# sourceMappingURL=index.d.ts.map

package/dist/diagnostics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/diagnostics/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1G,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACjJ,OAAO,EAAsB,KAAK,cAAc,EAAwB,MAAM,iCAAiC,CAAC;AAEhH,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,gGAAgG;AAChG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,cAAc,WAC1C,oBAAoB,0EAa1C"}

package/dist/diagnostics/index.js

@@ -0,0 +1,22 @@
+/** Shared operational diagnostics, usable without starting the daemon. */
+export { describeError, redactDiagnosticText, sanitizeDiagnostic } from '@omnitron-dev/titan/diagnostics';
+import { sanitizeDiagnostic } from '@omnitron-dev/titan/diagnostics';
+/** Bridge an exposed alert handler to any Titan diagnostic sink. No second queue or retries. */
+export function createAlertDiagnosticHandler(sink) {
+    return async (input) => {
+        if (!input || !['firing', 'resolved'].includes(input.status))
+            throw new Error('Invalid alert transition');
+        if (typeof input.eventId !== 'string' || !/^[\w.-]{1,160}$/.test(input.eventId))
+            throw new Error('Invalid alert event id');
+        const event = sanitizeDiagnostic({
+            eventId: `${input.eventId}:${input.status}`, id: 'monitoring.alert', timestamp: Date.now(),
+            source: 'omnitron.alerts', state: input.status === 'firing' ? 'raised' : 'resolved',
+            severity: 'critical', title: input.ruleName, evidence: [input.value, input.summary],
+            correlationId: input.eventId, resource: input.host,
+            remedy: 'Inspect the alert rule, the affected node and its correlated logs.',
+        });
+        // Rejection must reach the outbox so it retains and retries this transition.
+        return sink.deliver(event);
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/diagnostics/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/diagnostics/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1G,OAAO,EAAE,kBAAkB,EAA6C,MAAM,iCAAiC,CAAC;AAYhH,gGAAgG;AAChG,MAAM,UAAU,4BAA4B,CAAC,IAAoB;IAC/D,OAAO,KAAK,EAAE,KAA2B,EAAE,EAAE;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1G,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3H,MAAM,KAAK,GAAoB,kBAAkB,CAAC;YAChD,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YAC1F,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;YACnF,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnF,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI;YAClD,MAAM,EAAE,oEAAoE;SAC7E,CAAC,CAAC;QACH,6EAA6E;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/execution/command-failure.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Read a failed command's diagnostic, never its stdout (which can be private
+ * machine data). Also embedded in the remote supervisor probe, before its
+ * child process's stderr is wrapped in another error.
+ */
+export declare function commandFailure(stderr: string, fallback: string): string;
+//# sourceMappingURL=command-failure.d.ts.map

package/dist/execution/command-failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-failure.d.ts","sourceRoot":"","sources":["../../src/execution/command-failure.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoBvE"}

package/dist/execution/command-failure.js

@@ -0,0 +1,29 @@
+/**
+ * Read a failed command's diagnostic, never its stdout (which can be private
+ * machine data). Also embedded in the remote supervisor probe, before its
+ * child process's stderr is wrapped in another error.
+ */
+export function commandFailure(stderr, fallback) {
+    let lines = stderr.trim().split(/\r?\n/);
+    // Omnitron --json writes its failure to stderr. A Node warning may precede it.
+    for (const line of lines) {
+        if (!line.startsWith('{'))
+            continue;
+        try {
+            const response = JSON.parse(line);
+            if (response?.ok === false && typeof response.error === 'string' && response.error.trim()) {
+                lines = response.error.trim().split(/[\r\n]+/);
+                break;
+            }
+        }
+        catch { /* Other tools can write non-JSON stderr. */ }
+    }
+    // Uncaught Node errors start with a source location, source and a caret.
+    // Only an error header at the start of a line is a diagnostic.
+    const header = lines.find(line => /^(?:Error|[A-Z]\w*Error)(?: \[[\w-]+\])?:\s*\S/.test(line) && !line.startsWith('Error: Command failed:'));
+    const first = header?.replace(/^Error:\s*/, '') ?? lines[0]?.trim();
+    if (!first || /^(?:file:\/\/|\[eval\b|node:|at\s|Node\.js v|(?:Error: )?Command failed:)/.test(first))
+        return fallback;
+    return first;
+}
+//# sourceMappingURL=command-failure.js.map

package/dist/execution/command-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-failure.js","sourceRoot":"","sources":["../../src/execution/command-failure.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,QAAgB;IAC7D,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,EAAE,EAAE,KAAK,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1F,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC/C,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IACD,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/B,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,CAAC,KAAK,IAAI,2EAA2E,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/execution/data-channel.d.ts

@@ -9,7 +9,7 @@
  * held the node. An attestation line whose probe output said `password=…`
  * was cut through its closing quote and refused as «printed no JSON», or
  * edited and stored as evidence. And the first operator account made on
- * daos/test (2026-09-23) arrived as `"password": [REDACTED]` and was lost.
+ * sample/test (2026-09-23) arrived as `"password": [REDACTED]` and was lost.
  *
  * The engine has no switch for one call — masking is set per adapter, and
  * turning it off around a call would unmask whatever else runs meanwhile.

package/dist/execution/data-channel.js

@@ -9,7 +9,7 @@
  * held the node. An attestation line whose probe output said `password=…`
  * was cut through its closing quote and refused as «printed no JSON», or
  * edited and stored as evidence. And the first operator account made on
- * daos/test (2026-09-23) arrived as `"password": [REDACTED]` and was lost.
+ * sample/test (2026-09-23) arrived as `"password": [REDACTED]` and was lost.
  *
  * The engine has no switch for one call — masking is set per adapter, and
  * turning it off around a call would unmask whatever else runs meanwhile.

package/dist/execution/execution.service.d.ts

@@ -9,6 +9,7 @@
  *   const result = await executionService.ssh('prod-1')`systemctl status app`;
  *   const result = await executionService.docker('container-name')`cat /etc/config`;
  */
+import type { SSHAdapterOptions } from '@xec-sh/core';
 import type { ILogger } from '@omnitron-dev/titan/module/logger';
 export interface ExecResult {
     stdout: string;
@@ -20,11 +21,16 @@ export interface SSHTarget {
     host: string;
     port?: number;
     username?: string;
+    expectedHostFingerprint?: string;
     privateKey?: string;
     /** Passphrase for encrypted private keys */
     passphrase?: string;
     password?: string;
 }
+export interface UploadOptions {
+    /** A deployment may fence verification and promotion under its node lease. */
+    runControl(command: string, timeout: number): Promise<Pick<ExecResult, 'stdout' | 'stderr' | 'exitCode'>>;
+}
 export interface DockerTarget {
     container: string;
     /** Execute via SSH to remote Docker host */
@@ -80,7 +86,7 @@ export declare function describeXecError(error: unknown): string;
  * `idleTimeout`, which defaults to 300 s. Sweeps land at 60, 120 … 300
  * (300 is not greater than 300, so it survives) and 360, where it closes.
  *
- * Measured on `daos/test`, 2026-09-22: 51 mesh drops in a day, «Socket
+ * Measured on `sample/test`, 2026-09-22: 51 mesh drops in a day, «Socket
  * closed during RPC», median interval between them 360 s with 32 of 45
  * inside 360 ± 5, each followed by a rejoin about nine seconds later. An
  * interval that precise is a timer, and this is the timer.
@@ -110,7 +116,7 @@ export declare const SSH_CONNECTION_POOL: {
  * no less than 32 KiB/s.
  *
  * A transfer had no bound at all, and on 2026-09-24 three of them never
- * ended: `daos/test` stood «delivering 6 artifact(s)» for 19 minutes, holding
+ * ended: `sample/test` stood «delivering 6 artifact(s)» for 19 minutes, holding
  * the node's deploy lease, until the master was restarted. The chain is in
  * `@xec-sh/core`: every channel to a node rides ONE pooled SSH connection, a
  * command that timed out behind the transfers made the pool close that
@@ -123,7 +129,9 @@ export declare const SSH_CONNECTION_POOL: {
  * artifacts crossed in ~70 s, about 0.4 MB/s — so a slow link still delivers,
  * and a dead one fails in minutes, with its words, instead of never.
  */
+export declare const UPLOAD_STALL_MS = 120000;
 export declare function uploadDeadlineMs(bytes: number): number;
+export declare function sshConfig(target: SSHTarget): Omit<SSHAdapterOptions, 'type'>;
 export declare class ExecutionService {
     private readonly logger;
     private engine;
@@ -171,7 +179,9 @@ export declare class ExecutionService {
         port: number;
         close(): Promise<void>;
     }>;
-    ssh(target: SSHTarget, command: string, options?: ExecOptions): Promise<ExecResult>;
+    ssh(target: SSHTarget, command: string, options?: ExecOptions & {
+        stdin?: string | Buffer;
+    }): Promise<ExecResult>;
     /**
      * Copy a local file to a remote host over the SSH connection.
      *
@@ -185,9 +195,11 @@ export declare class ExecutionService {
      * The engine speaks SFTP over the same authenticated connection as
      * `ssh()`, so one credential path serves both.
      */
-    uploadFile(target: SSHTarget, localPath: string, remotePath: string): Promise<void>;
+    uploadFile(target: SSHTarget, localPath: string, remotePath: string, options?: UploadOptions): Promise<void>;
     /** Transfers still to finish, per node — see `uploadFile`. */
     private transfersByNode?;
+    /** Bulk channels must never share a pool with deployment lease/control commands. */
+    private createTransferEngine;
     private transferOnce;
     /**
      * `work`, or a rejection once `ms` have passed. The work itself is not

package/dist/execution/execution.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.service.d.ts","sourceRoot":"","sources":["../../src/execution/execution.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAMjE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAmCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQvD;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,mBAAmB;aAC9B,WAAW;aACX,WAAW,EAAE,CAAC;CACN,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAgBD,qBAAa,gBAAgB;IAIf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,WAAW,CAAS;IAE5B,YAA6B,MAAM,EAAE,OAAO,EAAI;IAEhD;;;OAGG;YACW,SAAS;IAqDvB;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAgCtE;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,MAAM,CACV,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACpD,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CAkCjE;IAEK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA+BxF;IAED;;;;;;;;;;;;OAYG;IACG,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBxF;IAED,8DAA8D;IAC9D,OAAO,CAAC,eAAe,CAAC,CAA6B;YAEvC,YAAY;IAsD1B;;;OAGG;YACW,cAAc;IAY5B;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAM9F;IAED;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAM7B;IAED;;OAEG;IACH,WAAW,IAAI,OAAO,CAErB;YAMa,YAAY;CA4B3B"}
+{"version":3,"file":"execution.service.d.ts","sourceRoot":"","sources":["../../src/execution/execution.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAMjE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;CAC3G;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAmCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQvD;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,mBAAmB;aAC9B,WAAW;aACX,WAAW,EAAE,CAAC;CACN,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,eAAe,SAAU,CAAC;AAEvC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAc5E;AAED,qBAAa,gBAAgB;IAIf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,WAAW,CAAS;IAE5B,YAA6B,MAAM,EAAE,OAAO,EAAI;IAEhD;;;OAGG;YACW,SAAS;IAqDvB;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAgCtE;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,MAAM,CACV,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACpD,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CA+BjE;IAEK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CA4BtH;IAED;;;;;;;;;;;;OAYG;IACG,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAcjH;IAED,8DAA8D;IAC9D,OAAO,CAAC,eAAe,CAAC,CAA6B;IAErD,oFAAoF;YACtE,oBAAoB;YASpB,YAAY;IAsG1B;;;OAGG;YACW,cAAc;IAY5B;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAM9F;IAED;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAM7B;IAED;;OAEG;IACH,WAAW,IAAI,OAAO,CAErB;YAMa,YAAY;CA4B3B"}

package/dist/execution/execution.service.js

@@ -9,6 +9,9 @@
  *   const result = await executionService.ssh('prod-1')`systemctl status app`;
  *   const result = await executionService.docker('container-name')`cat /etc/config`;
  */
+import { createHash, randomUUID } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { shellEscape } from '../shared/shell-escape.js';
 /**
  * Render the `command:error` reason.
  *
@@ -66,7 +69,7 @@ export function describeXecError(error) {
  * `idleTimeout`, which defaults to 300 s. Sweeps land at 60, 120 … 300
  * (300 is not greater than 300, so it survives) and 360, where it closes.
  *
- * Measured on `daos/test`, 2026-09-22: 51 mesh drops in a day, «Socket
+ * Measured on `sample/test`, 2026-09-22: 51 mesh drops in a day, «Socket
  * closed during RPC», median interval between them 360 s with 32 of 45
  * inside 360 ± 5, each followed by a rejoin about nine seconds later. An
  * interval that precise is a timer, and this is the timer.
@@ -96,7 +99,7 @@ export const SSH_CONNECTION_POOL = {
  * no less than 32 KiB/s.
  *
  * A transfer had no bound at all, and on 2026-09-24 three of them never
- * ended: `daos/test` stood «delivering 6 artifact(s)» for 19 minutes, holding
+ * ended: `sample/test` stood «delivering 6 artifact(s)» for 19 minutes, holding
  * the node's deploy lease, until the master was restarted. The chain is in
  * `@xec-sh/core`: every channel to a node rides ONE pooled SSH connection, a
  * command that timed out behind the transfers made the pool close that
@@ -109,12 +112,15 @@ export const SSH_CONNECTION_POOL = {
  * artifacts crossed in ~70 s, about 0.4 MB/s — so a slow link still delivers,
  * and a dead one fails in minutes, with its words, instead of never.
  */
+export const UPLOAD_STALL_MS = 120_000;
 export function uploadDeadlineMs(bytes) {
     return 60_000 + Math.ceil(bytes / (32 * 1024)) * 1000;
 }
-function sshConfig(target) {
+export function sshConfig(target) {
     return {
         host: target.host,
+        hostKeyChecking: 'strict',
+        ...(target.expectedHostFingerprint !== undefined && { expectedHostFingerprint: target.expectedHostFingerprint }),
         port: target.port ?? 22,
         username: target.username ?? 'root',
         ...(target.privateKey && { privateKey: target.privateKey }),
@@ -173,7 +179,7 @@ export class ExecutionService {
             this.logger.info('ExecutionEngine initialized (xec/core)');
         }
         catch (err) {
-            this.logger.warn({ error: err.message }, 'Failed to initialize xec ExecutionEngine — falling back to child_process');
+            this.logger.warn({ error: err.message }, 'Xec execution engine unavailable; SSH disabled, local commands use child_process');
         }
         return this.engine;
     }
@@ -271,35 +277,35 @@ export class ExecutionService {
     async ssh(target, command, options) {
         const engine = await this.getEngine();
         const start = Date.now();
-        if (engine) {
-            try {
-                const ssh = engine.ssh(sshConfig(target));
-                // Use raw template literal to avoid options interpolation into command
-                let proc = ssh.raw([command]);
-                if (options?.timeout)
-                    proc = proc.timeout(options.timeout);
-                if (options?.env)
-                    proc = proc.env(options.env);
-                const result = await proc.nothrow();
-                return {
-                    stdout: result.stdout?.trim() ?? '',
-                    stderr: result.stderr?.trim() ?? '',
-                    exitCode: result.exitCode ?? 0,
-                    duration: Date.now() - start,
-                };
-            }
-            catch (err) {
-                return {
-                    stdout: '',
-                    stderr: err.message,
-                    exitCode: 1,
-                    duration: Date.now() - start,
-                };
-            }
+        if (!engine)
+            return { stdout: '', stderr: 'SSH requires the Xec execution engine', exitCode: 1, duration: Date.now() - start };
+        try {
+            let ssh = engine.ssh(sshConfig(target));
+            // Input travels through the SSH channel, never through the command or its logs.
+            if (options?.stdin !== undefined)
+                ssh = ssh.with({ stdin: options.stdin });
+            // Use raw template literal to avoid options interpolation into command
+            let proc = ssh.raw([command]);
+            if (options?.timeout)
+                proc = proc.timeout(options.timeout);
+            if (options?.env)
+                proc = proc.env(options.env);
+            const result = await proc.nothrow();
+            return {
+                stdout: result.stdout?.trim() ?? '',
+                stderr: result.stderr?.trim() ?? '',
+                exitCode: result.exitCode ?? 0,
+                duration: Date.now() - start,
+            };
+        }
+        catch (err) {
+            return {
+                stdout: '',
+                stderr: err.message,
+                exitCode: 1,
+                duration: Date.now() - start,
+            };
         }
-        // Fallback: ssh command via child_process
-        const sshCmd = `ssh -o StrictHostKeyChecking=no -p ${target.port ?? 22} ${target.username ?? 'root'}@${target.host} "${command.replace(/"/g, '\\"')}"`;
-        return this.execFallback(sshCmd, options);
     }
     /**
      * Copy a local file to a remote host over the SSH connection.
@@ -314,17 +320,13 @@ export class ExecutionService {
      * The engine speaks SFTP over the same authenticated connection as
      * `ssh()`, so one credential path serves both.
      */
-    async uploadFile(target, localPath, remotePath) {
-        // One transfer at a time per node. They share one SSH connection, so
-        // running three side by side is not faster — the link is the limit — and
-        // it queues megabytes in front of every small command on that connection:
-        // with 3–5 transfers in flight (each `fastPut` keeps up to 2 MB
-        // outstanding) a lease renewal waited past its 30 s, and its timeout is
-        // what closed the connection under them (see `uploadDeadlineMs`).
+    async uploadFile(target, localPath, remotePath, options) {
+        // Serialize bulk transfers per node. Each owns a dedicated connection;
+        // lease and control commands use the independent main engine.
         const node = `${target.host}:${target.port ?? 22}`;
         const queue = (this.transfersByNode ??= new Map());
         const before = queue.get(node) ?? Promise.resolve();
-        const mine = before.then(() => this.transferOnce(target, localPath, remotePath));
+        const mine = before.then(() => this.transferOnce(target, localPath, remotePath, options));
         const settled = mine.catch(() => undefined);
         queue.set(node, settled);
         try {
@@ -337,43 +339,100 @@ export class ExecutionService {
     }
     /** Transfers still to finish, per node — see `uploadFile`. */
     transfersByNode;
-    async transferOnce(target, localPath, remotePath) {
-        const engine = await this.getEngine();
-        if (!engine) {
-            // No silent fallback to `scp`. It cannot present a password, so it
-            // would fail with "Permission denied (publickey,password)" — an error
-            // that sends the reader to the node's credentials, which are fine.
-            throw new Error('Cannot transfer files: the execution engine is unavailable, and the fallback cannot use stored credentials.');
-        }
+    /** Bulk channels must never share a pool with deployment lease/control commands. */
+    async createTransferEngine() {
+        const xec = await import('@xec-sh/core');
+        return new xec.ExecutionEngine({
+            defaultTimeout: 30_000,
+            defaultShell: '/bin/sh',
+            adapters: { ssh: { connectionPool: SSH_CONNECTION_POOL } },
+        });
+    }
+    async transferOnce(target, localPath, remotePath, options) {
         const fsp = await import('node:fs/promises');
-        const expected = (await fsp.stat(localPath)).size;
-        // The transfer is not finished when the call returns — it is finished
-        // when the bytes are there.
-        //
-        // Measured 2026-09-21 delivering the portal to `daos-test`: this method
-        // returned without error, the next step ran `tar -xzf` on the result,
-        // and the node answered `gzip: stdin: unexpected end of file`. A
-        // 19 687 584-byte archive had arrived short, and nothing between the two
-        // steps asked how long it was. The gateway was then configured with no
-        // static root at all and served nothing at `/`.
-        //
-        // `wc -c <` rather than `stat`: the flag for a file's size is spelled
-        // differently on the two systems this runs against, and a probe that
-        // fails on the healthy case is worse than none.
+        const stat = await fsp.stat(localPath);
+        if (!stat.isFile())
+            throw new Error('Upload source must be a regular file');
+        const expected = stat.size;
+        const hash = createHash('sha256');
+        for await (const chunk of createReadStream(localPath))
+            hash.update(chunk);
+        const digest = hash.digest('hex');
+        const control = async (command) => {
+            const out = await this.ssh(target, command, { timeout: 30_000 });
+            if (out.exitCode !== 0)
+                throw new Error(`Upload verification command failed (${out.exitCode}): ${out.stderr}`);
+            return out.stdout.trim();
+        };
         for (let attempt = 1; attempt <= 2; attempt++) {
-            const ssh = engine.ssh(sshConfig(target));
-            await this.withinDeadline(ssh.uploadFile(localPath, remotePath), uploadDeadlineMs(expected), (ms) => new Error(`Upload of ${localPath} (${expected} bytes) to ${target.host}:${remotePath} did not finish in ` +
-                `${Math.round(ms / 1000)} s — the transfer was abandoned; the file on the node is incomplete and was not used.`));
-            const out = await this.ssh(target, `wc -c < '${remotePath.replace(/'/g, "'\\''")}'`, {
-                timeout: 30_000,
-            });
-            const landed = Number.parseInt(out.stdout.trim(), 10);
-            if (Number.isFinite(landed) && landed === expected)
+            const temporary = remotePath + '.upload-' + randomUUID() + '.part';
+            const engine = await this.createTransferEngine();
+            let stop = false;
+            let poll;
+            let wake;
+            let watch;
+            try {
+                await control(`umask 077 && (set -C; : > ${shellEscape(temporary)})`);
+                let lastSize = 0;
+                let lastProgress = Date.now();
+                watch = (async () => {
+                    while (!stop) {
+                        await new Promise((resolve) => {
+                            wake = resolve;
+                            poll = setTimeout(resolve, 15_000);
+                        });
+                        if (stop)
+                            break;
+                        const size = Number(await control(`wc -c < ${shellEscape(temporary)}`));
+                        if (!Number.isSafeInteger(size) || size < lastSize || size > expected)
+                            throw new Error('Invalid upload progress');
+                        if (size > lastSize) {
+                            lastSize = size;
+                            lastProgress = Date.now();
+                        }
+                        if (Date.now() - lastProgress >= UPLOAD_STALL_MS)
+                            throw new Error(`Upload to ${target.host}:${remotePath} made no progress for ${UPLOAD_STALL_MS / 1000} s; temporary file was not promoted`);
+                    }
+                    return await new Promise(() => { });
+                })();
+                await this.withinDeadline(Promise.race([engine.ssh(sshConfig(target)).uploadFile(localPath, temporary), watch]), uploadDeadlineMs(expected), (ms) => new Error(`Upload of ${localPath} (${expected} bytes) to ${target.host}:${remotePath} did not finish in ${Math.round(ms / 1000)} s; temporary file was not promoted`));
+                stop = true;
+                clearTimeout(poll);
+                wake?.();
+                const landed = Number(await control(`wc -c < ${shellEscape(temporary)}`));
+                if (!Number.isSafeInteger(landed) || landed !== expected)
+                    throw new Error(`Upload landed ${Number.isFinite(landed) ? landed : 'an unreadable size'} of ${expected} bytes`);
+                const actual = (await control(`if command -v sha256sum >/dev/null 2>&1; then sha256sum ${shellEscape(temporary)}; else shasum -a 256 ${shellEscape(temporary)}; fi`)).split(/\s+/)[0];
+                if (actual !== digest)
+                    throw new Error('Uploaded file SHA256 does not match the source');
+                // The guarded command repeats byte/hash checks inside the same execution
+                // fence as rename. A lost lease may finish SFTP into its unique temporary
+                // file, but must never replace a newer owner's canonical destination.
+                const promote = `test "$(wc -c < ${shellEscape(temporary)})" -eq ${expected} && ` +
+                    `actual=$(if command -v sha256sum >/dev/null 2>&1; then sha256sum ${shellEscape(temporary)}; else shasum -a 256 ${shellEscape(temporary)}; fi) && ` +
+                    `test "\${actual%% *}" = ${shellEscape(digest)} && ` +
+                    `chmod ${(stat.mode & 0o777).toString(8)} ${shellEscape(temporary)} && test ! -d ${shellEscape(remotePath)} && mv -f -- ${shellEscape(temporary)} ${shellEscape(remotePath)}`;
+                if (options?.runControl) {
+                    const out = await options.runControl(promote, 30_000);
+                    if (out.exitCode !== 0)
+                        throw new Error(`Upload promotion rejected (${out.exitCode}): ${out.stderr}`);
+                }
+                else
+                    await control(promote);
                 return;
-            this.logger.warn({ remotePath, expected, landed, attempt }, 'The uploaded file is not the size it was sent — retrying');
-            if (attempt === 2) {
-                throw new Error(`Upload of ${localPath} to ${remotePath} landed ${Number.isFinite(landed) ? landed : 'an unreadable size'} ` +
-                    `of ${expected} bytes, twice. The file on the node is incomplete and was not used.`);
+            }
+            catch (error) {
+                if (attempt === 2)
+                    throw error;
+                this.logger.warn({ remotePath, attempt, error: describeXecError(error) }, 'Upload failed before promotion; retrying with a fresh isolated connection');
+            }
+            finally {
+                stop = true;
+                clearTimeout(poll);
+                wake?.();
+                // Disposing only this engine cannot close the lease/control connection.
+                await this.withinDeadline(engine.dispose(), 10_000, () => new Error('Isolated transfer connection did not close')).catch(() => undefined);
+                await control(`rm -f -- ${shellEscape(temporary)}`).catch(() => undefined);
             }
         }
     }

package/dist/execution/execution.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution.service.js","sourceRoot":"","sources":["../../src/execution/execution.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwEH;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,IAAI,eAAe,CAAC;IAC/D,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IAC/D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAI,KAA+B,CAAC,OAAO,CAAC;QACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC,gBAAgB;IACpC,WAAW,EAAE,CAAC;CACN,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB;IAClC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrD,YAAY,EAAE,MAAM;QACpB,iBAAiB,EAAE,MAAM;QACzB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAIE,MAAM;IAH3B,MAAM,GAAQ,IAAI,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,MAAe;sBAAf,MAAM;IAAY,CAAC;IAEhD;;;OAGG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC;gBACpC,cAAc,EAAE,MAAM;gBACtB,YAAY,EAAE,SAAS;gBACvB,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,yBAAyB;gBACzB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE;aAC3D,CAAC,CAAC;YAEH,iCAAiC;YACjC,EAAE;YACF,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;YAChE,kEAAkE;YAClE,mEAAmE;YACnE,wDAAwD;YACxD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAyB,EAAE,EAAE;gBAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC7F,eAAe,CAChB,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EACzG,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACjC,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,uEAAuE;gBACvE,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACxC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;oBACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;oBAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,MAAM,CACV,MAAiB,EACjB,UAAkB,EAClB,OAAqD;QAErD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,sEAAsE;QACtE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,WAAW;YAC5C,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,WAAW;YAC9C,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,EAC9D,iBAAiB,CAClB,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,WAAW;YACrC,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAiB,EAAE,OAAe,EAAE,OAAqB;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1C,uEAAuE;gBACvE,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACrC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,GAAG,CAAC,OAAO;oBACnB,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,MAAM,GAAG,sCAAsC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;QACvJ,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,MAAiB,EAAE,SAAiB,EAAE,UAAkB;QACvE,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,gEAAgE;QAChE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,GAAG,EAAyB,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,8DAA8D;IACtD,eAAe,CAA8B;IAE7C,KAAK,CAAC,YAAY,CAAC,MAAiB,EAAE,SAAiB,EAAE,UAAkB;QACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,mEAAmE;YACnE,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAElD,sEAAsE;QACtE,4BAA4B;QAC5B,EAAE;QACF,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,yEAAyE;QACzE,uEAAuE;QACvE,gDAAgD;QAChD,EAAE;QACF,sEAAsE;QACtE,qEAAqE;QACrE,gDAAgD;QAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAClG,IAAI,KAAK,CACP,aAAa,SAAS,KAAK,QAAQ,cAAc,MAAM,CAAC,IAAI,IAAI,UAAU,qBAAqB;gBAC7F,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,uFAAuF,CAClH,CACF,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;gBACnF,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO;YAE3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EACzC,0DAA0D,CAC3D,CAAC;YACF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,aAAa,SAAS,OAAO,UAAU,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,GAAG;oBAC1G,MAAM,QAAQ,qEAAqE,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAI,IAAgB,EAAE,EAAU,EAAE,KAA4B;QACxF,IAAI,KAAgD,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,OAAe,EAAE,OAAqB;QACvE,0CAA0C;QAC1C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,iDAAiD;IACjD,8EAA8E;IAEtE,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAqB;QAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBACrE,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;gBAClE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM;gBACnC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;gBACzC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"execution.service.js","sourceRoot":"","sources":["../../src/execution/execution.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AA8ExD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,IAAI,eAAe,CAAC;IAC/D,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IAC/D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAI,KAA+B,CAAC,OAAO,CAAC;QACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC,gBAAgB;IACpC,WAAW,EAAE,CAAC;CACN,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAiB;IACzC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,eAAe,EAAE,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS,IAAI,EAAE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAChH,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrD,YAAY,EAAE,MAAM;QACpB,iBAAiB,EAAE,MAAM;QACzB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAIE,MAAM;IAH3B,MAAM,GAAQ,IAAI,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,MAAe;sBAAf,MAAM;IAAY,CAAC;IAEhD;;;OAGG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC;gBACpC,cAAc,EAAE,MAAM;gBACtB,YAAY,EAAE,SAAS;gBACvB,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,yBAAyB;gBACzB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE;aAC3D,CAAC,CAAC;YAEH,iCAAiC;YACjC,EAAE;YACF,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;YAChE,kEAAkE;YAClE,mEAAmE;YACnE,wDAAwD;YACxD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAyB,EAAE,EAAE;gBAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC7F,eAAe,CAChB,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EACzG,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACjC,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,uEAAuE;gBACvE,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;gBACxC,IAAI,OAAO,EAAE,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;oBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;oBACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;oBAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,MAAM,CACV,MAAiB,EACjB,UAAkB,EAClB,OAAqD;QAErD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,sEAAsE;QACtE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,WAAW;YAC5C,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,WAAW;YAC9C,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAErG,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,WAAW;YACrC,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAiB,EAAE,OAAe,EAAE,OAAmD;QAC/F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,uCAAuC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/H,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,gFAAgF;YAChF,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;gBAAE,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3E,uEAAuE;YACvE,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAQ,CAAC,CAAC;YACrC,IAAI,OAAO,EAAE,OAAO;gBAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,OAAO,EAAE,GAAG;gBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;gBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,MAAiB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAuB;QAChG,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,GAAG,EAAyB,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,8DAA8D;IACtD,eAAe,CAA8B;IAErD,oFAAoF;IAC5E,KAAK,CAAC,oBAAoB;QAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACzC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,cAAc,EAAE,MAAM;YACtB,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAiB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAuB;QAC1G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAe,EAAmB,EAAE;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/G,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CAAC;QACF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACjD,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,IAAI,IAA+C,CAAC;YACpD,IAAI,IAA8B,CAAC;YACnC,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,6BAA6B,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACtE,IAAI,QAAQ,GAAG,CAAC,CAAC;gBACjB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9B,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;oBAClB,OAAO,CAAC,IAAI,EAAE,CAAC;wBACb,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BAClC,IAAI,GAAG,OAAO,CAAC;4BACf,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;wBACrC,CAAC,CAAC,CAAC;wBACH,IAAI,IAAI;4BAAE,MAAM;wBAChB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC,WAAW,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,QAAQ,IAAI,IAAI,GAAG,QAAQ;4BACnE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBAC7C,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;4BACpB,QAAQ,GAAG,IAAI,CAAC;4BAChB,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC5B,CAAC;wBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,IAAI,eAAe;4BAC9C,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,CAAC,IAAI,IAAI,UAAU,yBAAyB,eAAe,GAAG,IAAI,qCAAqC,CAC3H,CAAC;oBACN,CAAC;oBACD,OAAO,MAAM,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,EAAE,CAAC;gBACL,MAAM,IAAI,CAAC,cAAc,CACvB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,EACrF,gBAAgB,CAAC,QAAQ,CAAC,EAC1B,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,KAAK,CACP,aAAa,SAAS,KAAK,QAAQ,cAAc,MAAM,CAAC,IAAI,IAAI,UAAU,sBAAsB,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,qCAAqC,CAC3J,CACJ,CAAC;gBACF,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,EAAE,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC,WAAW,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,QAAQ;oBACtD,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,OAAO,QAAQ,QAAQ,CAChG,CAAC;gBACJ,MAAM,MAAM,GAAG,CACb,MAAM,OAAO,CACX,2DAA2D,WAAW,CAAC,SAAS,CAAC,wBAAwB,WAAW,CAAC,SAAS,CAAC,MAAM,CACtI,CACF,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACzF,yEAAyE;gBACzE,0EAA0E;gBAC1E,sEAAsE;gBACtE,MAAM,OAAO,GACX,mBAAmB,WAAW,CAAC,SAAS,CAAC,UAAU,QAAQ,MAAM;oBACjE,oEAAoE,WAAW,CAAC,SAAS,CAAC,wBAAwB,WAAW,CAAC,SAAS,CAAC,WAAW;oBACnJ,2BAA2B,WAAW,CAAC,MAAM,CAAC,MAAM;oBACpD,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,iBAAiB,WAAW,CAAC,UAAU,CAAC,gBAAgB,WAAW,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChL,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACtD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClF,CAAC;;oBAAM,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,EACvD,2EAA2E,CAC5E,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,EAAE,EAAE,CAAC;gBACT,wEAAwE;gBACxE,MAAM,IAAI,CAAC,cAAc,CACvB,MAAM,CAAC,OAAO,EAAE,EAChB,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAC9D,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzB,MAAM,OAAO,CAAC,YAAY,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAI,IAAgB,EAAE,EAAU,EAAE,KAA4B;QACxF,IAAI,KAAgD,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,OAAe,EAAE,OAAqB;QACvE,0CAA0C;QAC1C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,iDAAiD;IACjD,8EAA8E;IAEtE,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAqB;QAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBACrE,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;gBAClE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM;gBACnC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO;gBACzC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/files/archive-codec.d.ts

@@ -0,0 +1,57 @@
+import { Writable, type WritableOptions } from 'node:stream';
+import type { FileArchiveCapabilities, FileArchiveFormat, FileArchiveManifest } from '../shared/dto/files.js';
+export declare const ARCHIVE_LIMITS: {
+    readonly entries: 10000;
+    readonly depth: 32;
+    readonly bytes: number;
+    readonly pathBytes: 4096;
+};
+interface ArchiveOperation {
+    format: FileArchiveFormat;
+    manifest: FileArchiveManifest;
+    signal: AbortSignal;
+    /** Bytes written by this phase; archiving reports encoded bytes, restoring reports source bytes. */
+    onProgress?: (completedBytes: number) => void;
+}
+export interface CreateArchiveOptions extends ArchiveOperation {
+    sourceDirectory: string;
+    outputFile: string;
+}
+export interface RestoreArchiveOptions extends ArchiveOperation {
+    archiveFile: string;
+    outputDirectory: string;
+    /** A publisher can verify the private tree before applying its final permissions. */
+    preserveModes?: boolean;
+}
+/** One admission rule shared by source snapshots and destination uploads. */
+export declare function validateArchiveManifest(manifest: FileArchiveManifest): void;
+/** Only bounded stdout bytes enter this sink; the external decoder never controls paths. */
+export declare class ArchivePayloadWriter extends Writable {
+    private readonly directory;
+    private readonly signal;
+    private readonly progress?;
+    private readonly files;
+    private index;
+    private file;
+    private hash;
+    private offset;
+    private bytes;
+    private pending;
+    private readonly preserveModes;
+    constructor(directory: string, manifest: FileArchiveManifest, signal: AbortSignal, progress?: ((bytes: number) => void) | undefined, options?: WritableOptions & {
+        preserveModes?: boolean;
+    });
+    private advance;
+    private consume;
+    _write(chunk: Buffer, _encoding: BufferEncoding, callback: (error?: Error | null) => void): void;
+    _final(callback: (error?: Error | null) => void): void;
+    _destroy(error: Error | null, callback: (error?: Error | null) => void): void;
+}
+/** Archives are built from a private immutable snapshot, with an explicit ordered entry list. */
+export declare function createArchive(options: CreateArchiveOptions): Promise<void>;
+/** Native tools only write stdout. Validated manifest paths are the sole filesystem authority. */
+export declare function restoreArchive(options: RestoreArchiveOptions): Promise<void>;
+/** The selected node proves actual encoding/decoding, rather than guessing from executable versions. */
+export declare function probeArchiveFormats(): Promise<FileArchiveCapabilities>;
+export {};
+//# sourceMappingURL=archive-codec.d.ts.map

package/dist/files/archive-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-codec.d.ts","sourceRoot":"","sources":["../../src/files/archive-codec.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAI7D,OAAO,KAAK,EAA2B,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEvI,eAAO,MAAM,cAAc;aAAK,OAAO,EAAE,KAAM;aAAE,KAAK,EAAE,EAAE;aAAE,KAAK;aAAmB,SAAS,EAAE,IAAI;CAAW,CAAC;AAkB/G,UAAU,gBAAgB;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE,WAAW,CAAC;IACpB,oGAAoG;IACpG,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/C;AACD,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAAG,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAC9G,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAC7C,qFAAqF;IACrF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAyB3E;AAkBD,4FAA4F;AAC5F,qBAAa,oBAAqB,SAAQ,QAAQ;IASpC,OAAO,CAAC,QAAQ,CAAC,SAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAe,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IATlE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,IAAI,CAAwB;IACpC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,YAA6B,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAC1D,MAAM,EAAE,WAAW,EAAmB,QAAQ,CAAC,GAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,aAAA,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,EAKnJ;YACa,OAAO;YAaP,OAAO;IAcZ,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAExG;IACQ,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAK9D;IACQ,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAMrF;CACF;AAwFD,iGAAiG;AACjG,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhF;AAED,kGAAkG;AAClG,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBlF;AA+BD,wGAAwG;AACxG,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAI5E"}