@sigil0/looking-glass 0.1.0 → 0.2.0

package/dist/scheduler/windows.js

@@ -0,0 +1,506 @@
+import { randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve, win32 } from "node:path";
+import { spawnSync } from "node:child_process";
+import { configDir } from "../paths.js";
+import { powershellExecutable, windowsSystemExecutable } from "../tools/shell.js";
+/** The per-user task used by the scheduler on Windows. */
+export const TASK_NAME = "Looking Glass Scheduler";
+/** Compatibility name shared with the systemd backend's public vocabulary. */
+export const SERVICE_NAME = TASK_NAME;
+export const LAUNCHER_FILE_NAME = "scheduler-launcher.ps1";
+export const TASK_XML_FILE_NAME = "scheduler-task.xml";
+function defaultCommand(command, args) {
+    const result = spawnSync(command, args, {
+        encoding: "utf8",
+        shell: false,
+        windowsHide: true,
+    });
+    const commandResult = {
+        status: result.status,
+        stdout: result.stdout ?? "",
+        stderr: result.stderr ?? "",
+    };
+    if (result.error) {
+        const errorCode = result.error.code;
+        if (errorCode !== undefined)
+            commandResult.errorCode = errorCode;
+        commandResult.errorMessage = result.error.message;
+    }
+    return commandResult;
+}
+function currentTaskUser() {
+    const domain = process.env.USERDOMAIN;
+    const user = process.env.USERNAME ?? process.env.USER;
+    if (domain && user)
+        return `${domain}\\${user}`;
+    return user ?? "";
+}
+function resolveOptions(options = {}) {
+    const directory = options.configDirectory ?? configDir();
+    const resolved = {
+        command: options.command ?? options.run ?? options.spawn ?? options.exec ?? defaultCommand,
+        configDirectory: directory,
+        taskName: options.taskName ?? TASK_NAME,
+        launcherPath: options.launcherPath ?? join(directory, LAUNCHER_FILE_NAME),
+        taskXmlPath: options.taskXmlPath ?? join(directory, TASK_XML_FILE_NAME),
+        nodePath: options.nodePath ?? process.execPath,
+        user: options.user ?? currentTaskUser(),
+        powershellPath: options.powershellPath ?? powershellExecutable(options.systemRoot),
+        schtasksPath: windowsSystemExecutable("schtasks.exe", options.systemRoot),
+    };
+    requiredText(resolved.configDirectory, "config directory");
+    requiredText(resolved.taskName, "task name");
+    requiredText(resolved.launcherPath, "launcher path");
+    requiredText(resolved.taskXmlPath, "task XML path");
+    requiredText(resolved.nodePath, "node path");
+    requiredText(resolved.user, "task user");
+    requiredText(resolved.powershellPath, "PowerShell path");
+    return resolved;
+}
+function validateXmlCharacters(value, label) {
+    for (let index = 0; index < value.length;) {
+        const codePoint = value.codePointAt(index);
+        if (codePoint === undefined)
+            break;
+        const valid = codePoint === 0x09 || codePoint === 0x0a || codePoint === 0x0d
+            || (codePoint >= 0x20 && codePoint <= 0xd7ff)
+            || (codePoint >= 0xe000 && codePoint <= 0xfffd)
+            || (codePoint >= 0x10000 && codePoint <= 0x10ffff);
+        if (!valid)
+            throw new TypeError(`${label} contains an invalid XML control character`);
+        index += codePoint > 0xffff ? 2 : 1;
+    }
+}
+function requiredText(value, label) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw new TypeError(`${label} must not be empty`);
+    }
+    validateXmlCharacters(value, label);
+    return value;
+}
+/** Escape a value used as a single-quoted PowerShell string literal. */
+export function powerShellLiteral(value) {
+    return `'${value.replaceAll("'", "''")}'`;
+}
+/** Escape XML text, rejecting characters that XML 1.0 cannot represent. */
+export function xmlText(value) {
+    if (typeof value !== "string")
+        throw new TypeError("XML text must be a string");
+    validateXmlCharacters(value, "XML text");
+    return value
+        .replaceAll("&", "&amp;")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll('"', "&quot;")
+        .replaceAll("'", "&apos;");
+}
+/**
+ * Quote one argument for the command line passed to an Exec action.  The
+ * launcher path is a Windows path (and thus cannot contain a double quote),
+ * but handling backslashes here also makes this safe for synthetic test
+ * paths and future callers.
+ */
+export function windowsArgument(value) {
+    if (value.length > 0 && !/[\s"]/.test(value))
+        return value;
+    let result = '"';
+    let slashes = 0;
+    for (const character of value) {
+        if (character === "\\") {
+            slashes += 1;
+            continue;
+        }
+        if (character === '"') {
+            result += "\\".repeat(slashes * 2 + 1) + '"';
+            slashes = 0;
+            continue;
+        }
+        result += "\\".repeat(slashes) + character;
+        slashes = 0;
+    }
+    result += "\\".repeat(slashes * 2) + '"';
+    return result;
+}
+/** Render the PowerShell process launcher used by the scheduled task. */
+export function renderLauncher(nodePath, cliPath, dbPath) {
+    requiredText(nodePath, "node path");
+    requiredText(cliPath, "CLI path");
+    requiredText(dbPath, "database path");
+    return [
+        "$ErrorActionPreference = 'Stop'",
+        `$node = ${powerShellLiteral(nodePath)}`,
+        `$cli = ${powerShellLiteral(cliPath)}`,
+        `$env:LOOKING_GLASS_DB = ${powerShellLiteral(dbPath)}`,
+        "& $node $cli 'cron' 'daemon'",
+        "exit $LASTEXITCODE",
+        "",
+    ].join("\r\n");
+}
+/** Descriptive alias for callers that want to make the generated format explicit. */
+export const renderPowerShellLauncher = renderLauncher;
+function taskXmlOptions(userOrOptions, powershellPath, workingDirectory) {
+    if (typeof userOrOptions === "object" && userOrOptions !== null) {
+        const options = {
+            taskName: userOrOptions.taskName ?? TASK_NAME,
+            user: userOrOptions.user ?? currentTaskUser(),
+            powershellPath: userOrOptions.powershellPath ?? powershellExecutable(userOrOptions.systemRoot),
+            workingDirectory: userOrOptions.workingDirectory ?? homedir(),
+        };
+        requiredText(options.taskName, "task name");
+        requiredText(options.user, "task user");
+        requiredText(options.powershellPath, "PowerShell path");
+        requiredText(options.workingDirectory, "working directory");
+        return options;
+    }
+    const options = {
+        taskName: TASK_NAME,
+        user: userOrOptions ?? currentTaskUser(),
+        powershellPath: powershellPath ?? powershellExecutable(),
+        workingDirectory: workingDirectory ?? homedir(),
+    };
+    requiredText(options.taskName, "task name");
+    requiredText(options.user, "task user");
+    requiredText(options.powershellPath, "PowerShell path");
+    requiredText(options.workingDirectory, "working directory");
+    return options;
+}
+export function renderTaskXml(launcherPath, userOrOptions = undefined, powershellPath, workingDirectory) {
+    requiredText(launcherPath, "launcher path");
+    const options = taskXmlOptions(userOrOptions, powershellPath, workingDirectory);
+    const commandArguments = `-NoLogo -NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File ${windowsArgument(launcherPath)}`;
+    // The trigger and principal deliberately share UserId: InteractiveToken
+    // keeps execution tied to this user's interactive logon, while
+    // LeastPrivilege avoids elevating the scheduler daemon.
+    return `<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <RegistrationInfo>
+    <Description>${xmlText(options.taskName)} persistent scheduler</Description>
+    <URI>\\${xmlText(options.taskName)}</URI>
+  </RegistrationInfo>
+  <Triggers>
+    <LogonTrigger>
+      <UserId>${xmlText(options.user)}</UserId>
+      <Enabled>true</Enabled>
+    </LogonTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="Author">
+      <UserId>${xmlText(options.user)}</UserId>
+      <LogonType>InteractiveToken</LogonType>
+      <RunLevel>LeastPrivilege</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <AllowHardTerminate>true</AllowHardTerminate>
+    <StartWhenAvailable>true</StartWhenAvailable>
+    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
+    <RestartOnFailure>
+      <Interval>PT1M</Interval>
+      <Count>3</Count>
+    </RestartOnFailure>
+    <Priority>7</Priority>
+  </Settings>
+  <Actions Context="Author">
+    <Exec>
+      <Command>${xmlText(options.powershellPath)}</Command>
+      <Arguments>${xmlText(commandArguments)}</Arguments>
+      <WorkingDirectory>${xmlText(options.workingDirectory)}</WorkingDirectory>
+    </Exec>
+  </Actions>
+</Task>
+`;
+}
+/** Alias with a shorter name for callers that only need a pure renderer. */
+export const renderTask = renderTaskXml;
+function commandOutput(result) {
+    return [
+        result.stdout ?? "",
+        result.stderr ?? "",
+        result.errorMessage ?? result.message ?? "",
+    ].filter(Boolean).join("\n").trim();
+}
+function commandFailure(command, args, result) {
+    const code = result.errorCode ?? result.code;
+    const suffix = code === undefined ? "" : ` (code ${String(code)})`;
+    return new Error(commandOutput(result) || `${command} ${args.join(" ")} exited with ${String(result.status)}${suffix}`);
+}
+function runSchtasks(options, args, tolerateFailure = false) {
+    const result = options.command(options.schtasksPath, args);
+    if (result.status !== 0 && !tolerateFailure) {
+        throw commandFailure(options.schtasksPath, args, result);
+    }
+    return result;
+}
+function resultCode(result) {
+    return String(result.errorCode ?? result.code ?? "").toLowerCase().replaceAll("_", "");
+}
+const TASK_NOT_FOUND_SENTINEL = "LOOKING_GLASS_TASK_NOT_FOUND";
+// These are the documented Win32 / Task Scheduler values returned by the
+// schtasks operation itself.  Do not add message text (or a generic
+// "*not-found" code) here: a localized or otherwise unrelated failure must
+// never authorize removal of the generated scheduler files.
+const DOCUMENTED_MISSING_TASK_CODES = new Set([
+    "2", // ERROR_FILE_NOT_FOUND
+    "2147942402", // HRESULT_FROM_WIN32(ERROR_FILE_NOT_FOUND)
+    "0x80070002", // HRESULT_FROM_WIN32(ERROR_FILE_NOT_FOUND)
+    "2147750671", // SCHED_E_TASK_NOT_FOUND
+    "0x8004130f", // SCHED_E_TASK_NOT_FOUND
+    "errorfilenotfound",
+    "schedetasknotfound",
+]);
+/** Only the internal sentinel or documented invariant codes count as missing. */
+function isMissingTaskFailure(result) {
+    if (commandOutput(result).trim() === TASK_NOT_FOUND_SENTINEL)
+        return true;
+    return DOCUMENTED_MISSING_TASK_CODES.has(resultCode(result));
+}
+function isNotRunningFailure(result) {
+    const code = resultCode(result);
+    return code === "0x8004131f" || code === "2147750687"
+        || /(?:not currently running|is not running|no running instance|cannot be stopped because)/i.test(commandOutput(result));
+}
+function taskStateScript(taskName) {
+    return [
+        "$ErrorActionPreference = 'Stop'",
+        "try {",
+        `  $task = Get-ScheduledTask -TaskName ${powerShellLiteral(taskName)} -ErrorAction Stop`,
+        `  if ($null -eq $task) { [Console]::Error.Write('${TASK_NOT_FOUND_SENTINEL}'); exit 3 }`,
+        "  [Console]::Out.Write($task.State.ToString())",
+        "} catch {",
+        "  $id = [string]$_.FullyQualifiedErrorId",
+        // Get-ScheduledTask uses this invariant FullyQualifiedErrorId for an
+        // empty task query.  Match it exactly; ObjectNotFound/NotFound text also
+        // occurs for operational failures and is not safe to interpret broadly.
+        `  if ($id -eq 'CmdletizationQuery_NotFound,Get-ScheduledTask') { [Console]::Error.Write('${TASK_NOT_FOUND_SENTINEL}'); exit 3 }`,
+        "  [Console]::Error.Write('LOOKING_GLASS_TASK_ERROR')",
+        "  exit 4",
+        "}",
+    ].join("\r\n");
+}
+/** Query the enum-valued State property; never parse localized schtasks output. */
+function lookupTask(options) {
+    const args = ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", taskStateScript(options.taskName)];
+    const result = options.command(options.powershellPath, args);
+    if (result.status === 0) {
+        const state = (result.stdout ?? "").trim();
+        if (state.length === 0)
+            throw commandFailure(options.powershellPath, args, result);
+        return { kind: "present", state };
+    }
+    if (isMissingTaskFailure(result))
+        return { kind: "missing" };
+    throw commandFailure(options.powershellPath, args, result);
+}
+function removeFile(path) {
+    try {
+        unlinkSync(path);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+function restoreFile(path, previous) {
+    if (previous === null)
+        removeFile(path);
+    else
+        writeFileSync(path, previous, { mode: 0o600 });
+}
+function isRenameCollision(error) {
+    const code = error.code;
+    return code === "EEXIST" || code === "EPERM" || code === "ENOTEMPTY";
+}
+/** Replace a completed file atomically where the host permits it. */
+function replaceCompletedFile(temporaryPath, targetPath) {
+    try {
+        renameSync(temporaryPath, targetPath);
+        return;
+    }
+    catch (error) {
+        if (!isRenameCollision(error))
+            throw error;
+    }
+    // Windows rename does not replace an existing file. Move it aside first,
+    // then rename the complete temporary file into place; both operations are
+    // metadata changes and never expose a partially written generated file.
+    const backupPath = `${targetPath}.${randomUUID()}.bak`;
+    let backedUp = false;
+    try {
+        try {
+            renameSync(targetPath, backupPath);
+            backedUp = true;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        renameSync(temporaryPath, targetPath);
+    }
+    catch (error) {
+        if (backedUp) {
+            try {
+                renameSync(backupPath, targetPath);
+            }
+            catch {
+                // Preserve the original failure; the caller still rolls back both files.
+            }
+        }
+        throw error;
+    }
+    if (backedUp)
+        removeFile(backupPath);
+}
+/** End a task before replacement/deletion; stopped tasks report a benign error. */
+function endTask(options) {
+    const args = ["/End", "/TN", options.taskName];
+    const result = runSchtasks(options, args, true);
+    if (result.status !== 0 && !isMissingTaskFailure(result) && !isNotRunningFailure(result)) {
+        throw commandFailure(options.schtasksPath, args, result);
+    }
+}
+/** Best-effort recovery for a task stopped before a replacement/deletion failed. */
+function restartTask(options) {
+    try {
+        runSchtasks(options, ["/Run", "/TN", options.taskName], true);
+    }
+    catch {
+        // Recovery must never replace the failure that triggered the rollback.
+    }
+}
+/** Install or replace the current user's logon task and start it once. */
+export function installService(cliPath, dbPath, serviceOptions = {}) {
+    requiredText(cliPath, "CLI path");
+    requiredText(dbPath, "database path");
+    const options = resolveOptions(serviceOptions);
+    mkdirSync(options.configDirectory, { recursive: true, mode: 0o700 });
+    const previousLauncher = existsSync(options.launcherPath) ? readFileSync(options.launcherPath) : null;
+    const previousXml = existsSync(options.taskXmlPath) ? readFileSync(options.taskXmlPath) : null;
+    const existingTask = lookupTask(options);
+    const previousTaskWasRunning = existingTask.kind === "present" && /^running$/i.test(existingTask.state ?? "");
+    if (previousTaskWasRunning)
+        endTask(options);
+    // `process.argv[1]` is commonly relative when glass is launched as
+    // `node dist/cli.js`; Task Scheduler will not resolve it relative to the
+    // terminal that performed the install.
+    const resolvedCliPath = isAbsolute(cliPath) || win32.isAbsolute(cliPath) ? cliPath : resolve(cliPath);
+    const resolvedDbPath = isAbsolute(dbPath) || win32.isAbsolute(dbPath) ? dbPath : resolve(dbPath);
+    const launcher = renderLauncher(options.nodePath, resolvedCliPath, resolvedDbPath);
+    const xml = renderTaskXml(options.launcherPath, {
+        taskName: options.taskName,
+        user: options.user,
+        powershellPath: options.powershellPath,
+        workingDirectory: homedir(),
+    });
+    const tempSuffix = randomUUID();
+    const temporaryLauncher = `${options.launcherPath}.${tempSuffix}.tmp`;
+    const temporaryXml = `${options.taskXmlPath}.${tempSuffix}.tmp`;
+    let taskCreated = false;
+    try {
+        // Windows PowerShell 5.1 reads UTF-8 scripts reliably only when they have
+        // a BOM (important for non-ASCII usernames and installation paths).
+        writeFileSync(temporaryLauncher, Buffer.from(`\uFEFF${launcher}`, "utf8"), { mode: 0o600, flag: "wx" });
+        // Task Scheduler expects UTF-16 XML.  Include the BOM as required by its
+        // XML importer rather than relying on the host's default encoding.
+        writeFileSync(temporaryXml, `\uFEFF${xml}`, { encoding: "utf16le", mode: 0o600, flag: "wx" });
+        // Both temporary files are complete before either target is replaced.
+        replaceCompletedFile(temporaryLauncher, options.launcherPath);
+        replaceCompletedFile(temporaryXml, options.taskXmlPath);
+        runSchtasks(options, ["/Create", "/TN", options.taskName, "/XML", options.taskXmlPath, "/F"]);
+        taskCreated = true;
+        runSchtasks(options, ["/Run", "/TN", options.taskName]);
+    }
+    catch (error) {
+        try {
+            removeFile(temporaryLauncher);
+        }
+        catch {
+            // Preserve the replacement failure below.
+        }
+        try {
+            removeFile(temporaryXml);
+        }
+        catch {
+            // Preserve the replacement failure below.
+        }
+        // Once Create succeeded, retain the matching generated files even if an
+        // immediate Run is unavailable.  The logon trigger still has a valid
+        // task and will start it at the next interactive logon.
+        if (!taskCreated) {
+            try {
+                restoreFile(options.launcherPath, previousLauncher);
+                restoreFile(options.taskXmlPath, previousXml);
+            }
+            catch {
+                // Preserve the replacement failure below.
+            }
+            if (previousTaskWasRunning)
+                restartTask(options);
+        }
+        throw error;
+    }
+    return options.taskName;
+}
+/**
+ * Return a stable ActiveState line in addition to useful Task Scheduler
+ * details. A confirmed missing task is inactive; access/operational failures
+ * are surfaced instead of being misreported as an absent task.
+ */
+export function serviceStatus(serviceOptions = {}) {
+    const options = resolveOptions(serviceOptions);
+    const task = lookupTask(options);
+    if (task.kind === "missing") {
+        return `ActiveState=inactive\nTask=${options.taskName} is not installed`;
+    }
+    const status = task.state ?? "unknown";
+    const active = /^running$/i.test(status);
+    return [
+        `TaskName=${options.taskName}`,
+        `TaskStatus=${status.trim() || "unknown"}`,
+        `ActiveState=${active ? "active" : "inactive"}`,
+    ].join("\n");
+}
+/** Remove the task and only the generated scheduler definition files. */
+export function uninstallService(serviceOptions = {}) {
+    const options = resolveOptions(serviceOptions);
+    const task = lookupTask(options);
+    if (task.kind === "missing") {
+        // A confirmed not-found result is sufficient to clean up stale generated
+        // definitions; operational failures above intentionally leave them alone.
+        removeFile(options.launcherPath);
+        removeFile(options.taskXmlPath);
+        return false;
+    }
+    const deleteArgs = ["/Delete", "/TN", options.taskName, "/F"];
+    const previousTaskWasRunning = /^running$/i.test(task.state ?? "");
+    if (previousTaskWasRunning)
+        endTask(options);
+    try {
+        const deleted = runSchtasks(options, deleteArgs, true);
+        if (deleted.status !== 0 && !isMissingTaskFailure(deleted)) {
+            throw commandFailure(options.schtasksPath, deleteArgs, deleted);
+        }
+    }
+    catch (error) {
+        if (previousTaskWasRunning)
+            restartTask(options);
+        throw error;
+    }
+    // Only a successful delete or a confirmed race-to-not-found permits file cleanup.
+    removeFile(options.launcherPath);
+    removeFile(options.taskXmlPath);
+    return true;
+}
+/** Bind injectable options once for the platform dispatcher and tests. */
+export function createWindowsScheduler(options = {}) {
+    return {
+        installService: (cliPath, dbPath) => installService(cliPath, dbPath, options),
+        serviceStatus: () => serviceStatus(options),
+        uninstallService: () => uninstallService(options),
+    };
+}
+//# sourceMappingURL=windows.js.map

package/dist/scheduler/windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows.js","sourceRoot":"","sources":["../../src/scheduler/windows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAElF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,SAAS,GAAG,yBAAyB,CAAC;AACnD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;AAEtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AA0DvD,SAAS,cAAc,CAAC,OAAe,EAAE,IAAc;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,aAAa,GAAyB;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,SAAS,GAAI,MAAM,CAAC,KAA+B,CAAC,IAAI,CAAC;QAC/D,IAAI,SAAS,KAAK,SAAS;YAAE,aAAa,CAAC,SAAS,GAAG,SAAS,CAAC;QACjE,aAAa,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACpD,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtD,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC;IAChD,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,UAAiC,EAAE;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,cAAc;QAC1F,eAAe,EAAE,SAAS;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;QACvC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACzE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACvE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC9C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,eAAe,EAAE;QACvC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;QAClF,YAAY,EAAE,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC;KAC1E,CAAC;IACF,YAAY,CAAC,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAC3D,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC7C,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACpD,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC7C,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,YAAY,CAAC,QAAQ,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM;QACnC,MAAM,KAAK,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;eACvE,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,MAAM,CAAC;eAC1C,CAAC,SAAS,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,CAAC;eAC5C,CAAC,SAAS,IAAI,OAAO,IAAI,SAAS,IAAI,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;QACtF,KAAK,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpD,CAAC;IACD,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAChF,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACzC,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;YAC7C,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;QAC3C,OAAO,GAAG,CAAC,CAAC;IACd,CAAC;IACD,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAe,EAAE,MAAc;IAC9E,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtC,OAAO;QACL,iCAAiC;QACjC,WAAW,iBAAiB,CAAC,QAAQ,CAAC,EAAE;QACxC,UAAU,iBAAiB,CAAC,OAAO,CAAC,EAAE;QACtC,2BAA2B,iBAAiB,CAAC,MAAM,CAAC,EAAE;QACtD,8BAA8B;QAC9B,oBAAoB;QACpB,EAAE;KACH,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AAEvD,SAAS,cAAc,CACrB,aAAkD,EAClD,cAAkC,EAClC,gBAAoC;IAEpC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,aAAa,CAAC,QAAQ,IAAI,SAAS;YAC7C,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI,eAAe,EAAE;YAC7C,cAAc,EAAE,aAAa,CAAC,cAAc,IAAI,oBAAoB,CAAC,aAAa,CAAC,UAAU,CAAC;YAC9F,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,IAAI,OAAO,EAAE;SAC9D,CAAC;QACF,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC5C,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACxC,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACxD,YAAY,CAAC,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,aAAa,IAAI,eAAe,EAAE;QACxC,cAAc,EAAE,cAAc,IAAI,oBAAoB,EAAE;QACxD,gBAAgB,EAAE,gBAAgB,IAAI,OAAO,EAAE;KAChD,CAAC;IACF,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5C,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACxC,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACxD,YAAY,CAAC,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD,MAAM,UAAU,aAAa,CAC3B,YAAoB,EACpB,gBAAqD,SAAS,EAC9D,cAAuB,EACvB,gBAAyB;IAEzB,YAAY,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,wFAAwF,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;IACjJ,wEAAwE;IACxE,+DAA+D;IAC/D,wDAAwD;IACxD,OAAO;;;mBAGU,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;aAC/B,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;gBAItB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;;;;gBAMrB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;iBAoBpB,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;mBAC7B,OAAO,CAAC,gBAAgB,CAAC;0BAClB,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;;;;CAI1D,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC;AAExC,SAAS,aAAa,CAAC,MAA4B;IACjD,OAAO;QACL,MAAM,CAAC,MAAM,IAAI,EAAE;QACnB,MAAM,CAAC,MAAM,IAAI,EAAE;QACnB,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE;KAC5C,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,IAAc,EAAE,MAA4B;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IACnE,OAAO,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;AAC1H,CAAC;AAED,SAAS,WAAW,CAAC,OAAsC,EAAE,IAAc,EAAE,eAAe,GAAG,KAAK;IAClG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,MAA4B;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAE/D,yEAAyE;AACzE,oEAAoE;AACpE,2EAA2E;AAC3E,4DAA4D;AAC5D,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC;IAC5C,GAAG,EAAE,uBAAuB;IAC5B,YAAY,EAAE,2CAA2C;IACzD,YAAY,EAAE,2CAA2C;IACzD,YAAY,EAAE,yBAAyB;IACvC,YAAY,EAAE,yBAAyB;IACvC,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAEH,iFAAiF;AACjF,SAAS,oBAAoB,CAAC,MAA4B;IACxD,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,6BAA6B,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA4B;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;WAChD,yFAAyF,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO;QACL,iCAAiC;QACjC,OAAO;QACP,yCAAyC,iBAAiB,CAAC,QAAQ,CAAC,oBAAoB;QACxF,oDAAoD,uBAAuB,cAAc;QACzF,gDAAgD;QAChD,WAAW;QACX,0CAA0C;QAC1C,qEAAqE;QACrE,yEAAyE;QACzE,wEAAwE;QACxE,4FAA4F,uBAAuB,cAAc;QACjI,sDAAsD;QACtD,UAAU;QACV,GAAG;KACJ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAOD,mFAAmF;AACnF,SAAS,UAAU,CAAC,OAAsC;IACxD,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7D,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAuB;IACxD,IAAI,QAAQ,KAAK,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC;;QACnC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;IACnD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,WAAW,CAAC;AACvE,CAAC;AAED,qEAAqE;AACrE,SAAS,oBAAoB,CAAC,aAAqB,EAAE,UAAkB;IACrE,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7C,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,CAAC;YACH,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACnC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ;QAAE,UAAU,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,OAAsC;IACrD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,MAAM,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,OAAsC;IACzD,IAAI,CAAC;QACH,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc,EAAE,iBAAwC,EAAE;IACxG,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IAC/C,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,sBAAsB,GAAG,YAAY,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9G,IAAI,sBAAsB;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,mEAAmE;IACnE,yEAAyE;IACzE,uCAAuC;IACvC,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtG,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,gBAAgB,EAAE,OAAO,EAAE;KAC5B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,UAAU,MAAM,CAAC;IACtE,MAAM,YAAY,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,MAAM,CAAC;IAChE,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,0EAA0E;QAC1E,oEAAoE;QACpE,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,yEAAyE;QACzE,mEAAmE;QACnE,aAAa,CAAC,YAAY,EAAE,SAAS,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,sEAAsE;QACtE,oBAAoB,CAAC,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9D,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,WAAW,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9F,WAAW,GAAG,IAAI,CAAC;QACnB,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;QACD,IAAI,CAAC;YACH,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBACpD,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;YACD,IAAI,sBAAsB;gBAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,iBAAwC,EAAE;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,8BAA8B,OAAO,CAAC,QAAQ,mBAAmB,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO;QACL,YAAY,OAAO,CAAC,QAAQ,EAAE;QAC9B,cAAc,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE;QAC1C,eAAe,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,iBAAwC,EAAE;IACzE,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,yEAAyE;QACzE,0EAA0E;QAC1E,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACjC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,sBAAsB,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnE,IAAI,sBAAsB;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,MAAM,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,sBAAsB;YAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,kFAAkF;IAClF,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,UAAiC,EAAE;IACxE,OAAO;QACL,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;QAC7E,aAAa,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/storage/artifact-store.d.ts

@@ -11,7 +11,8 @@ export interface ArtifactRecord {
 export declare class ArtifactStore {
     private readonly db;
     private readonly directory;
-    constructor(db: GlassDatabase, directory: string);
+    private readonly platform;
+    constructor(db: GlassDatabase, directory: string, platform?: NodeJS.Platform);
     save(sessionId: string | null, kind: string, content: string | Buffer, metadata?: Record<string, unknown>): ArtifactRecord;
     get(idOrUri: string): ArtifactRecord | null;
     read(idOrUri: string, offset?: number, limit?: number): Buffer;

package/dist/storage/artifact-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/storage/artifact-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAWD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,EAAE,EAAE,aAAa,EACjB,SAAS,EAAE,MAAM;IAGpC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,cAAc;IAc9H,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAe3C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,KAAK,SAAY,GAAG,MAAM;CAM7D"}
+{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/storage/artifact-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAWD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAFR,EAAE,EAAE,aAAa,EACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAAM,CAAC,QAA2B;IAG/D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,cAAc;IAe9H,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAe3C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,KAAK,SAAY,GAAG,MAAM;CAM7D"}

package/dist/storage/artifact-store.js

@@ -1,19 +1,24 @@
 import { randomUUID } from "node:crypto";
 import { chmodSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { shouldEnforcePosixPermissions } from "../paths.js";
 export class ArtifactStore {
     db;
     directory;
-    constructor(db, directory) {
+    platform;
+    constructor(db, directory, platform = process.platform) {
         this.db = db;
         this.directory = directory;
+        this.platform = platform;
     }
     save(sessionId, kind, content, metadata = {}) {
         const id = randomUUID();
         const path = join(this.directory, id);
         const data = typeof content === "string" ? Buffer.from(content) : content;
-        writeFileSync(path, data, { mode: 0o600, flag: "wx" });
-        chmodSync(path, 0o600);
+        const enforcePermissions = shouldEnforcePosixPermissions(this.platform);
+        writeFileSync(path, data, { flag: "wx", ...(enforcePermissions ? { mode: 0o600 } : {}) });
+        if (enforcePermissions)
+            chmodSync(path, 0o600);
         const createdAt = Date.now();
         this.db.prepare(`
       INSERT INTO artifacts(id, session_id, kind, file_path, byte_count, metadata_json, created_at)

package/dist/storage/artifact-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/storage/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsBjC,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,EAAiB,EACjB,SAAiB;QADjB,OAAE,GAAF,EAAE,CAAe;QACjB,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEJ,IAAI,CAAC,SAAwB,EAAE,IAAY,EAAE,OAAwB,EAAE,WAAoC,EAAE;QAC3G,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;QACxF,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtG,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA4B,CAAC;QACvG,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,GAAG,EAAE,cAAc,GAAG,CAAC,EAAE,EAAE;YAC3B,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAA4B;YAClE,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/storage/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAsB5D,MAAM,OAAO,aAAa;IAEL;IACA;IACA;IAHnB,YACmB,EAAiB,EACjB,SAAiB,EACjB,WAA4B,OAAO,CAAC,QAAQ;QAF5C,OAAE,GAAF,EAAE,CAAe;QACjB,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAoC;IAC5D,CAAC;IAEJ,IAAI,CAAC,SAAwB,EAAE,IAAY,EAAE,OAAwB,EAAE,WAAoC,EAAE;QAC3G,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,MAAM,kBAAkB,GAAG,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1F,IAAI,kBAAkB;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;QACxF,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtG,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA4B,CAAC;QACvG,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,GAAG,EAAE,cAAc,GAAG,CAAC,EAAE,EAAE;YAC3B,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAA4B;YAClE,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/storage/database.d.ts

@@ -1,5 +1,5 @@
 import Database from "better-sqlite3";
 export type GlassDatabase = Database.Database;
-export declare function openDatabase(path: string): GlassDatabase;
+export declare function openDatabase(path: string, platform?: NodeJS.Platform): GlassDatabase;
 export declare function checkpointDatabase(db: GlassDatabase): void;
 //# sourceMappingURL=database.d.ts.map

package/dist/storage/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/storage/database.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAiTtC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAE9C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA+FxD;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAE1D"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/storage/database.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAkTtC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAE9C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,aAAa,CAgGtG;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAE1D"}

package/dist/storage/database.js

@@ -1,6 +1,7 @@
 import Database from "better-sqlite3";
 import { dirname } from "node:path";
 import { chmodSync, existsSync, mkdirSync } from "node:fs";
+import { shouldEnforcePosixPermissions } from "../paths.js";
 import { bashApprovalExecutable } from "../tools/safety.js";
 const SESSION_SCHEMA = `
 CREATE TABLE IF NOT EXISTS schema_migrations (
@@ -292,25 +293,28 @@ function migrateBashApprovalScopes(db) {
         }
     }
 }
-export function openDatabase(path) {
-    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
-    const previousUmask = process.umask(0o077);
+export function openDatabase(path, platform = process.platform) {
+    const enforcePermissions = shouldEnforcePosixPermissions(platform);
+    mkdirSync(dirname(path), { recursive: true, ...(enforcePermissions ? { mode: 0o700 } : {}) });
+    const previousUmask = enforcePermissions ? process.umask(0o077) : null;
     let db;
     try {
         db = new Database(path, { timeout: 5_000 });
-        chmodSync(path, 0o600);
+        if (enforcePermissions)
+            chmodSync(path, 0o600);
         db.pragma("journal_mode = WAL");
         db.pragma("synchronous = FULL");
         db.pragma("foreign_keys = ON");
         db.pragma("busy_timeout = 5000");
         db.pragma("wal_autocheckpoint = 1000");
         for (const sidecar of [`${path}-wal`, `${path}-shm`]) {
-            if (existsSync(sidecar))
+            if (enforcePermissions && existsSync(sidecar))
                 chmodSync(sidecar, 0o600);
         }
     }
     finally {
-        process.umask(previousUmask);
+        if (previousUmask !== null)
+            process.umask(previousUmask);
     }
     const migrate = db.transaction(() => {
         db.exec(SESSION_SCHEMA);