@smthrs/platform-node 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/internal/AtomicFileSystemProtocol.js

@@ -0,0 +1,412 @@
+/**
+ * The adapter's half of the helper wire protocol: the request frame it sends,
+ * the response frame it accepts, and the typed value or `PlatformError` each
+ * operation's answer decodes to. Every check a helper answer has to pass lives
+ * here, so a malformed or hostile response fails closed in one place.
+ * @since 1.0.0
+ */
+import { Effect, Option, PlatformError, Result } from "effect";
+import * as ByteSize from "effect/ByteSize";
+import { TextDecoder } from "node:util";
+import { atomicHelperFault, AtomicHelperRejection } from "./AtomicHelperFault.js";
+/**
+ * The `module` every `PlatformError` this adapter reports names.
+ * @private
+ * @since 1.0.0
+ */
+export const moduleName = "AtomicFileSystem";
+const protocol = "flows-atomic/1";
+/**
+ * Room for `flows-atomic/1 <digits>\n` above the payload ceiling.
+ * @private
+ * @since 1.0.0
+ */
+export const frameHeaderBytes = 64;
+const decimal = /^[0-9]+$/;
+const fatalUtf8 = new TextDecoder("utf-8", { fatal: true });
+/**
+ * The errno-to-reason table `@effect/platform-node` applies to a Node
+ * `ErrnoException`, so a caller reads the same typed reason it would get from
+ * the native filesystem. `EPERM` and `ENOTSUP` are added because they are how
+ * this helper reports its own refusals — outside the pinned root, a hard link,
+ * a symlink, a special file, the root itself, or a host without
+ * descriptor-relative POSIX. `EFBIG` and `ENXIO` are how it reports a payload
+ * over the documented limit and a write-only open of a reader-less FIFO.
+ * `EPROTO` is a framing failure and stays fail-closed. `EOPNOTSUPP` is the
+ * same number as `ENOTSUP` on Linux, where which of the two names Python
+ * reports for it is an implementation detail.
+ */
+const reasons = {
+    EACCES: "PermissionDenied",
+    EBUSY: "Busy",
+    EEXIST: "AlreadyExists",
+    EFBIG: "BadResource",
+    EISDIR: "BadResource",
+    ELOOP: "BadResource",
+    ENOENT: "NotFound",
+    ENOTDIR: "BadResource",
+    ENOTSUP: "PermissionDenied",
+    ENXIO: "BadResource",
+    EOPNOTSUPP: "PermissionDenied",
+    EPERM: "PermissionDenied",
+    EPROTO: "PermissionDenied"
+};
+/** The operand a framed request names, for a failure's `pathOrDescriptor`. */
+const operand = (request) => "path" in request ?
+    request.path :
+    request.operation === "rename" ?
+        request.from :
+        request.operation === "glob" ?
+            request.pattern :
+            undefined;
+/**
+ * A rejection carrying no errno is a transport or host failure — an absent
+ * helper, a killed child, output that is not a helper result — and stays
+ * `PermissionDenied` so the boundary fails closed rather than reporting a
+ * benign-looking reason for an operation that never ran.
+ * @private
+ * @since 1.0.0
+ */
+export const failure = (request, cause, rejection) => {
+    const method = request.operation;
+    if (rejection?.badArgument === true) {
+        return PlatformError.badArgument({ module: moduleName, method, description: rejection.message, cause });
+    }
+    const code = rejection?.code ?? undefined;
+    return PlatformError.systemError({
+        module: moduleName,
+        method,
+        pathOrDescriptor: operand(request),
+        // `@effect/platform-node` sets `syscall` on every system error it reports,
+        // so a consumer that switches on it has to read a populated field here too.
+        // It names the operation's own syscall rather than whichever of the calls
+        // that operation makes actually raised, so it says what was attempted, not
+        // which step failed. A transport failure names no syscall at all, because
+        // no syscall ran.
+        syscall: rejection?.syscall ?? undefined,
+        _tag: code === undefined ? "PermissionDenied" : reasons[code] ?? "Unknown",
+        // The cause is repeated into the description because a fail-closed refusal
+        // that says only "failed closed" is unactionable: an absent helper, a
+        // response over the limit, and a mangled frame all look alike otherwise.
+        description: code === undefined
+            ? `descriptor-relative filesystem isolation failed closed: ${String(cause)}`
+            : rejection?.message,
+        // Match the native Node adapter's errno contract. Artifact path checks
+        // distinguish a non-link (EINVAL) from a helper or transport failure.
+        cause: code === undefined ? cause : new AtomicHelperRejection({
+            code,
+            syscall: rejection?.syscall ?? undefined,
+            message: rejection?.message ?? "",
+            cause
+        })
+    });
+};
+/**
+ * Frames a serialized request: the protocol tag, the body length, and the
+ * request, content, and response ceilings the helper enforces on its side,
+ * then the body.
+ * @private
+ * @since 1.0.0
+ */
+export const encode = (body, limits) => {
+    const header = Buffer.from(`${protocol} ${body.byteLength} ${limits.request} ${limits.content} ${limits.response}\n`, "ascii");
+    return Buffer.concat([header, body], header.byteLength + body.byteLength);
+};
+/**
+ * Decodes one complete response frame into a result envelope. Anything that
+ * is not exactly one well-formed frame within the response ceiling throws.
+ * @private
+ * @since 1.0.0
+ */
+export const decode = (frame, limits) => {
+    const newline = frame.indexOf(10);
+    if (newline < 0 || newline >= frameHeaderBytes) {
+        throw atomicHelperFault("response_unframed", "atomic helper response is not framed");
+    }
+    const fields = frame.subarray(0, newline).toString("ascii").split(" ");
+    if (fields.length !== 2 || fields[0] !== protocol) {
+        throw atomicHelperFault("response_tag_unknown", "atomic helper response carries an unknown protocol tag");
+    }
+    const declared = fields[1];
+    if (!decimal.test(declared)) {
+        throw atomicHelperFault("response_length_invalid", `atomic helper declared a non-decimal response length: ${declared}`);
+    }
+    const length = Number(declared);
+    if (!Number.isSafeInteger(length) || length < 0 || length > limits.response) {
+        throw atomicHelperFault("response_length_invalid", `atomic helper declared an out-of-range response length: ${declared}`);
+    }
+    const body = frame.subarray(newline + 1);
+    if (body.byteLength !== length) {
+        // Fewer bytes is a truncated response (a killed helper); more is a second
+        // frame appended to the first. Either way the stream is not one answer.
+        throw atomicHelperFault("response_length_mismatch", `atomic helper declared ${length} response bytes and wrote ${body.byteLength}`);
+    }
+    // Decoded from the complete frame, so a multi-byte character split across
+    // two stdout chunks is never mangled on the way in.
+    return resultEnvelope(JSON.parse(fatalUtf8.decode(body)));
+};
+const resultEnvelope = (input) => {
+    const value = input;
+    if (value === null || typeof value !== "object" || typeof value.ok !== "boolean") {
+        throw atomicHelperFault("envelope_malformed", "atomic helper response is not a result envelope");
+    }
+    if (value.code !== undefined && value.code !== null && typeof value.code !== "string") {
+        throw atomicHelperFault("envelope_malformed", "atomic helper response carries a non-string error code");
+    }
+    if (value.syscall !== undefined && value.syscall !== null && typeof value.syscall !== "string") {
+        throw atomicHelperFault("envelope_malformed", "atomic helper response carries a non-string syscall");
+    }
+    if (value.badArgument !== undefined && typeof value.badArgument !== "boolean") {
+        throw atomicHelperFault("envelope_malformed", "atomic helper response carries a non-boolean badArgument flag");
+    }
+    if (value.message !== undefined && typeof value.message !== "string") {
+        throw atomicHelperFault("envelope_malformed", "atomic helper response carries a non-string message");
+    }
+    return value;
+};
+const record = (value, what) => {
+    if (value === null || typeof value !== "object") {
+        throw atomicHelperFault("field_malformed", `atomic helper returned a non-object ${what}`);
+    }
+    return value;
+};
+const finite = (value, field) => {
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        throw atomicHelperFault("field_malformed", `atomic helper returned a non-numeric ${field}`);
+    }
+    return value;
+};
+const integer = (value, field) => {
+    const numeric = finite(value, field);
+    if (!Number.isSafeInteger(numeric) || numeric < 0) {
+        throw atomicHelperFault("field_malformed", `atomic helper returned an out-of-range ${field}: ${numeric}`);
+    }
+    return numeric;
+};
+const date = (value, field) => {
+    const result = new Date(finite(value, field));
+    if (!Number.isFinite(result.getTime())) {
+        throw atomicHelperFault("field_malformed", `atomic helper returned an out-of-range ${field}`);
+    }
+    return result;
+};
+const size = (value, field) => {
+    if (typeof value === "string" && decimal.test(value)) {
+        return ByteSize.bytes(BigInt(value));
+    }
+    return ByteSize.bytes(BigInt(integer(value, field)));
+};
+const optional = (value, read) => value === null || value === undefined ? Option.none() : Option.some(read(value));
+/** Effect's own `FileSystem.File.Type`; anything else is a helper defect. */
+const fileTypes = new Set([
+    "File",
+    "Directory",
+    "SymbolicLink",
+    "BlockDevice",
+    "CharacterDevice",
+    "FIFO",
+    "Socket",
+    "Unknown"
+]);
+const toInfo = (value) => {
+    const info = record(value, "stat");
+    if (!fileTypes.has(info.type)) {
+        throw atomicHelperFault("file_type_unknown", `atomic helper returned an unknown file type: ${String(info.type)}`);
+    }
+    return {
+        type: info.type,
+        mtime: Option.some(date(info.mtime, "mtime")),
+        atime: Option.some(date(info.atime, "atime")),
+        birthtime: optional(info.birthtime, (raw) => date(raw, "birthtime")),
+        dev: integer(info.dev, "dev"),
+        ino: optional(info.ino, (raw) => integer(raw, "ino")),
+        mode: integer(info.mode, "mode"),
+        nlink: Option.some(integer(info.nlink, "nlink")),
+        uid: Option.some(integer(info.uid, "uid")),
+        gid: Option.some(integer(info.gid, "gid")),
+        rdev: Option.some(integer(info.rdev, "rdev")),
+        size: size(info.size, "size"),
+        blksize: optional(info.blksize, (raw) => size(raw, "blksize")),
+        blocks: optional(info.blocks, (raw) => integer(raw, "blocks"))
+    };
+};
+const isBase64 = (encoded) => {
+    if (encoded.length % 4 !== 0)
+        return false;
+    let end = encoded.length;
+    if (encoded.endsWith("=")) {
+        end--;
+        if (encoded[end - 1] === "=")
+            end--;
+    }
+    // A repeated-group regexp exhausts V8's stack on ordinary multi-MiB reads.
+    // Scan the alphabet once, excluding at most two trailing padding characters.
+    for (let index = 0; index < end; index++) {
+        const code = encoded.charCodeAt(index);
+        if (!(code >= 65 && code <= 90) && !(code >= 97 && code <= 122) &&
+            !(code >= 48 && code <= 57) && code !== 43 && code !== 47)
+            return false;
+    }
+    return true;
+};
+const toBytes = (value, limit) => {
+    const payload = record(value, "read result");
+    const encoded = payload.base64;
+    // Buffer.from silently drops characters it does not recognise, so the shape
+    // is checked before the decode rather than inferred from its output.
+    if (typeof encoded !== "string" || !isBase64(encoded)) {
+        throw atomicHelperFault("payload_malformed", "atomic helper returned a malformed base64 payload");
+    }
+    const bytes = Buffer.from(encoded, "base64");
+    if (bytes.byteLength > limit) {
+        throw atomicHelperFault("read_limit_exceeded", `atomic helper returned ${bytes.byteLength} bytes, over the ${limit} byte read limit`);
+    }
+    return Uint8Array.from(bytes);
+};
+const toStringResult = (value, what) => {
+    if (typeof value !== "string" || value.includes("\0")) {
+        throw atomicHelperFault("entries_malformed", `atomic helper returned an invalid ${what}`);
+    }
+    return value;
+};
+const maxListingEntries = 100_000;
+const toStringArray = (value, what) => {
+    if (!Array.isArray(value) || value.length > maxListingEntries) {
+        throw atomicHelperFault("entries_malformed", `atomic helper returned an invalid ${what}`);
+    }
+    const result = value.map((entry) => toStringResult(entry, `${what} entry`));
+    if (new Set(result).size !== result.length) {
+        throw atomicHelperFault("entries_malformed", `atomic helper returned duplicate ${what} entries`);
+    }
+    return result;
+};
+/**
+ * Converts a successful helper value into the result the request's operation
+ * promises, and throws when the value does not have that shape.
+ * @private
+ * @since 1.0.0
+ */
+export const convert = (request, value, limits) => {
+    if (request.operation === "batch") {
+        const response = record(value, "batch");
+        const requests = request.requests;
+        if (response.rootIdentity !== request.rootIdentity || !Array.isArray(response.entries) ||
+            response.entries.length !== requests.length) {
+            throw atomicHelperFault("batch_malformed", "atomic helper returned a foreign or incomplete batch");
+        }
+        const seen = new Set();
+        let previous = "";
+        let previousIndex = -1;
+        const pending = response.entries.map((raw) => {
+            const entry = record(raw, "batch entry");
+            const index = integer(entry.index, "batch index");
+            const member = requests[index];
+            if (member === undefined || seen.has(index) || entry.path !== member.path ||
+                member.path < previous || (member.path === previous && index <= previousIndex)) {
+                throw atomicHelperFault("batch_malformed", "atomic helper returned an invalid batch member identity or order");
+            }
+            seen.add(index);
+            previous = member.path;
+            previousIndex = index;
+            if (Buffer.byteLength(JSON.stringify(entry.result), "utf8") > limits.batchEntry) {
+                throw atomicHelperFault("batch_malformed", "atomic helper returned an oversized batch entry");
+            }
+            const envelope = resultEnvelope(entry.result);
+            const identity = { index, path: member.path };
+            if (!envelope.ok) {
+                return Effect.succeed({
+                    ...identity,
+                    result: Result.fail(failure(member, atomicHelperFault("helper_rejected", envelope.message ?? "atomic batch member failed"), envelope))
+                });
+            }
+            if (member.operation === "digest") {
+                const measured = record(envelope.value, "digest");
+                if (typeof measured.digest !== "string" || !/^[a-f0-9]{64}$/.test(measured.digest)) {
+                    throw atomicHelperFault("digest_malformed", "atomic helper returned an invalid SHA-256 digest");
+                }
+                const sizeBytes = integer(measured.sizeBytes, "digest size");
+                if (sizeBytes > limits.content) {
+                    throw atomicHelperFault("digest_malformed", "atomic helper returned an oversized digest measurement");
+                }
+                const bytes = member.content === true ? toBytes(measured, limits.content) : undefined;
+                if (bytes !== undefined && bytes.length !== sizeBytes) {
+                    throw atomicHelperFault("digest_malformed", "atomic helper returned a mismatched digest size");
+                }
+                return Effect.succeed({
+                    ...identity,
+                    result: Result.succeed({
+                        operation: "digest",
+                        digest: measured.digest,
+                        sizeBytes,
+                        ...(bytes === undefined ? {} : { bytes })
+                    })
+                });
+            }
+            return Effect.map(convert(member, envelope.value, limits), (converted) => ({
+                ...identity,
+                result: Result.succeed(member.operation === "stat"
+                    ? { operation: "stat", info: converted }
+                    : member.operation === "resolve"
+                        ? { operation: "resolve", resolution: converted }
+                        : { operation: member.operation, paths: converted.sort() })
+            }));
+        });
+        return Effect.map(Effect.all(pending), (entries) => ({ rootIdentity: response.rootIdentity, entries }));
+    }
+    if (request.operation === "readFile" || request.operation === "readFileString") {
+        // An empty file encodes to an empty string, so the payload is read by
+        // shape: truthiness would return the raw envelope for it instead.
+        const bytes = toBytes(value, limits.content);
+        if (request.operation === "readFile") {
+            return Effect.succeed(bytes);
+        }
+        try {
+            return Effect.succeed(new TextDecoder(request.encoding).decode(bytes));
+        }
+        catch (cause) {
+            // Effect's own `readFileString` reports a rejected encoding as a
+            // BadArgument, not as a filesystem failure.
+            return Effect.fail(PlatformError.badArgument({
+                module: "FileSystem",
+                method: "readFileString",
+                description: "invalid encoding",
+                cause
+            }));
+        }
+    }
+    if (request.operation === "stat") {
+        return Effect.succeed(toInfo(value));
+    }
+    if (request.operation === "exists") {
+        if (typeof value !== "boolean") {
+            throw atomicHelperFault("result_malformed", "atomic helper returned a non-boolean exists result");
+        }
+        return Effect.succeed(value);
+    }
+    if (request.operation === "readLink" || request.operation === "realPath") {
+        return Effect.succeed(toStringResult(value, `${request.operation} result`));
+    }
+    if (request.operation === "resolve") {
+        const resolution = record(value, "resolve result");
+        const target = resolution.target === null ? null : toStringResult(resolution.target, "resolve target");
+        const answer = { path: toStringResult(resolution.path, "resolve path"), target };
+        return Effect.succeed(answer);
+    }
+    if (request.operation === "readDirectory" || request.operation === "glob") {
+        return Effect.succeed(toStringArray(value, `${request.operation} result`));
+    }
+    if (request.operation === "writeFile" ||
+        request.operation === "writeFileString" ||
+        request.operation === "chmod" ||
+        request.operation === "chown" ||
+        request.operation === "makeDirectory" ||
+        request.operation === "remove" ||
+        request.operation === "rename") {
+        if (value !== null) {
+            throw atomicHelperFault("result_malformed", `atomic helper returned a non-null ${request.operation} result`);
+        }
+        return Effect.succeed(undefined);
+    }
+    throw atomicHelperFault("operation_unsupported", `atomic helper returned success for unsupported operation ${request.operation}`);
+};
+//# sourceMappingURL=AtomicFileSystemProtocol.js.map

package/dist/esm/internal/AtomicFileSystemProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AtomicFileSystemProtocol.js","sourceRoot":"","sources":["../../../src/internal/AtomicFileSystemProtocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,MAAM,EAAmB,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/E,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAEvC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAiBjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAA;AAE5C,MAAM,QAAQ,GAAG,gBAAgB,CAAA;AACjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,MAAM,OAAO,GAAG,UAAU,CAAA;AAC1B,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,GAA6D;IACxE,MAAM,EAAE,kBAAkB;IAC1B,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,aAAa;IACpB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,aAAa;IACpB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE,aAAa;IACpB,UAAU,EAAE,kBAAkB;IAC9B,KAAK,EAAE,kBAAkB;IACzB,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAaD,8EAA8E;AAC9E,MAAM,OAAO,GAAG,CAAC,OAAsB,EAAsB,EAAE,CAC7D,MAAM,IAAI,OAAO,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,SAAS,CAAA;AAEb;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,OAAsB,EACtB,KAAc,EACd,SAAwB,EACK,EAAE;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAA;IAChC,IAAI,SAAS,EAAE,WAAW,KAAK,IAAI,EAAE,CAAC;QACpC,OAAO,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IACzG,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,EAAE,IAAI,IAAI,SAAS,CAAA;IACzC,OAAO,aAAa,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,UAAU;QAClB,MAAM;QACN,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC;QAClC,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,kBAAkB;QAClB,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,SAAS;QACxC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,SAAS;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,WAAW,EAAE,IAAI,KAAK,SAAS;YAC7B,CAAC,CAAC,2DAA2D,MAAM,CAAC,KAAK,CAAC,EAAE;YAC5E,CAAC,CAAC,SAAS,EAAE,OAAO;QACtB,uEAAuE;QACvE,sEAAsE;QACtE,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC;YAC5D,IAAI;YACJ,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,SAAS;YACxC,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE;YACjC,KAAK;SACN,CAAC;KACH,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAc,EAAU,EAAE;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,GAAG,QAAQ,IAAI,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EACzF,OAAO,CACR,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAA;AAC3E,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAgB,EAAE;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACjC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,gBAAgB,EAAE,CAAC;QAC/C,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,sCAAsC,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,iBAAiB,CAAC,sBAAsB,EAAE,wDAAwD,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAE,CAAA;IAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,iBAAiB,CACrB,yBAAyB,EACzB,yDAAyD,QAAQ,EAAE,CACpE,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,iBAAiB,CACrB,yBAAyB,EACzB,2DAA2D,QAAQ,EAAE,CACtE,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;IACxC,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,iBAAiB,CACrB,0BAA0B,EAC1B,0BAA0B,MAAM,6BAA6B,IAAI,CAAC,UAAU,EAAE,CAC/E,CAAA;IACH,CAAC;IACD,0EAA0E;IAC1E,oDAAoD;IACpD,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,KAAc,EAAgB,EAAE;IACtD,MAAM,KAAK,GAAG,KAAqB,CAAA;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,iDAAiD,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtF,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAA;IACzG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC/F,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAA;IACtG,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9E,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,+DAA+D,CAAC,CAAA;IAChH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAA;IACtG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,IAAY,EAA2B,EAAE;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,uCAAuC,IAAI,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,KAAa,EAAU,EAAE;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,wCAAwC,KAAK,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,KAAa,EAAU,EAAE;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,0CAA0C,KAAK,KAAK,OAAO,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;IACnD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,0CAA0C,KAAK,EAAE,CAAC,CAAA;IAC/F,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAqB,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAI,KAAc,EAAE,IAA2B,EAAoB,EAAE,CACpF,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;AAElF,6EAA6E;AAC7E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS;IAChC,MAAM;IACN,WAAW;IACX,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,SAAS;CACV,CAAC,CAAA;AAEF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAwB,EAAE;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAc,CAAC,EAAE,CAAC;QACxC,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,gDAAgD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAA4B;QACvC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACpE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1C,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;KAC/D,CAAA;AACH,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAW,EAAE;IAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA;IACxB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,GAAG,EAAE,CAAA;QACL,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,GAAG,EAAE,CAAA;IACrC,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACtC,IACE,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC;YAC3D,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;YACzD,OAAO,KAAK,CAAA;IAChB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,KAAa,EAAc,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;IAC9B,4EAA4E;IAC5E,qEAAqE;IACrE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,mDAAmD,CAAC,CAAA;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC5C,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,EAAE,CAAC;QAC7B,MAAM,iBAAiB,CACrB,qBAAqB,EACrB,0BAA0B,KAAK,CAAC,UAAU,oBAAoB,KAAK,kBAAkB,CACtF,CAAA;IACH,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,KAAc,EAAE,IAAY,EAAU,EAAE;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,OAAO,CAAA;AAEjC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,IAAY,EAAiB,EAAE;IACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC9D,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAA;IAC3E,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,oCAAoC,IAAI,UAAU,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,OAAsB,EACtB,KAAc,EACd,MAAc,EACiC,EAAE;IACjD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QACjC,IACE,QAAQ,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClF,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAC3C,CAAC;YACD,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,sDAAsD,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,IAAI,QAAQ,GAAG,EAAE,CAAA;QACjB,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;QACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC9B,IACE,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBACrE,MAAM,CAAC,IAAI,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,IAAI,aAAa,CAAC,EAC9E,CAAC;gBACD,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,kEAAkE,CAAC,CAAA;YAChH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACf,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAA;YACtB,aAAa,GAAG,KAAK,CAAA;YACrB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAChF,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,iDAAiD,CAAC,CAAA;YAC/F,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;YAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,MAAM,CAAC,OAAO,CAAC;oBACpB,GAAG,QAAQ;oBACX,MAAM,EAAE,MAAM,CAAC,IAAI,CACjB,OAAO,CACL,MAAM,EACN,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,IAAI,4BAA4B,CAAC,EACtF,QAAQ,CACT,CACF;iBACF,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBACjD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnF,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAA;gBACjG,CAAC;gBACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;gBAC5D,IAAI,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC/B,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,wDAAwD,CAAC,CAAA;gBACvG,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACrF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACtD,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,iDAAiD,CAAC,CAAA;gBAChG,CAAC;gBACD,OAAO,MAAM,CAAC,OAAO,CAAC;oBACpB,GAAG,QAAQ;oBACX,MAAM,EAAE,MAAM,CAAC,OAAO,CAAoC;wBACxD,SAAS,EAAE,QAAQ;wBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,SAAS;wBACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;qBAC1C,CAAC;iBACH,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzE,GAAG,QAAQ;gBACX,MAAM,EAAE,MAAM,CAAC,OAAO,CACpB,MAAM,CAAC,SAAS,KAAK,MAAM;oBACzB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAiC,EAAE;oBAChE,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;wBAChC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAwC,EAAE;wBAChF,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAG,SAA2B,CAAC,IAAI,EAAE,EAAE,CAChF;aACF,CAAC,CAAC,CAAA;QACL,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,CAAM,CAAC,CAAA;IAC9G,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAC/E,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAU,CAAC,CAAA;QACnC,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAM,CAAC,CAAA;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,4CAA4C;YAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;gBAC3C,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,gBAAgB;gBACxB,WAAW,EAAE,kBAAkB;gBAC/B,KAAK;aACN,CAAC,CAAC,CAAA;QACL,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAM,CAAC,CAAA;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,oDAAoD,CAAC,CAAA;QACnG,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAU,CAAC,CAAA;IACnC,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,SAAS,CAAM,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;QACtG,MAAM,MAAM,GAAgC,EAAE,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;QAC7G,OAAO,MAAM,CAAC,OAAO,CAAC,MAAW,CAAC,CAAA;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,eAAe,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,SAAS,CAAM,CAAC,CAAA;IACjF,CAAC;IACD,IACE,OAAO,CAAC,SAAS,KAAK,WAAW;QACjC,OAAO,CAAC,SAAS,KAAK,iBAAiB;QACvC,OAAO,CAAC,SAAS,KAAK,OAAO;QAC7B,OAAO,CAAC,SAAS,KAAK,OAAO;QAC7B,OAAO,CAAC,SAAS,KAAK,eAAe;QACrC,OAAO,CAAC,SAAS,KAAK,QAAQ;QAC9B,OAAO,CAAC,SAAS,KAAK,QAAQ,EAC9B,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,qCAAqC,OAAO,CAAC,SAAS,SAAS,CAAC,CAAA;QAC9G,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAc,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,iBAAiB,CACrB,uBAAuB,EACvB,4DAA6D,OAAyB,CAAC,SAAS,EAAE,CACnG,CAAA;AACH,CAAC,CAAA","sourcesContent":["/**\n * The adapter's half of the helper wire protocol: the request frame it sends,\n * the response frame it accepts, and the typed value or `PlatformError` each\n * operation's answer decodes to. Every check a helper answer has to pass lives\n * here, so a malformed or hostile response fails closed in one place.\n * @since 1.0.0\n */\n\nimport type * as KernelFileSystem from \"@smthrs/kernel/FileSystem\"\nimport { Effect, type FileSystem, Option, PlatformError, Result } from \"effect\"\nimport * as ByteSize from \"effect/ByteSize\"\nimport { TextDecoder } from \"node:util\"\nimport type { Limits } from \"../AtomicFileSystem.ts\"\nimport { atomicHelperFault, AtomicHelperRejection } from \"./AtomicHelperFault.ts\"\n\n/**\n * One helper answer: a value, or a rejection carrying the errno name and the\n * syscall the helper observed.\n * @private\n * @since 1.0.0\n */\nexport interface HelperResult {\n  readonly ok: boolean\n  readonly value?: unknown\n  readonly code?: string | null\n  readonly syscall?: string | null\n  readonly badArgument?: boolean\n  readonly message?: string\n}\n\n/**\n * The `module` every `PlatformError` this adapter reports names.\n * @private\n * @since 1.0.0\n */\nexport const moduleName = \"AtomicFileSystem\"\n\nconst protocol = \"flows-atomic/1\"\n/**\n * Room for `flows-atomic/1 <digits>\\n` above the payload ceiling.\n * @private\n * @since 1.0.0\n */\nexport const frameHeaderBytes = 64\nconst decimal = /^[0-9]+$/\nconst fatalUtf8 = new TextDecoder(\"utf-8\", { fatal: true })\n\n/**\n * The errno-to-reason table `@effect/platform-node` applies to a Node\n * `ErrnoException`, so a caller reads the same typed reason it would get from\n * the native filesystem. `EPERM` and `ENOTSUP` are added because they are how\n * this helper reports its own refusals — outside the pinned root, a hard link,\n * a symlink, a special file, the root itself, or a host without\n * descriptor-relative POSIX. `EFBIG` and `ENXIO` are how it reports a payload\n * over the documented limit and a write-only open of a reader-less FIFO.\n * `EPROTO` is a framing failure and stays fail-closed. `EOPNOTSUPP` is the\n * same number as `ENOTSUP` on Linux, where which of the two names Python\n * reports for it is an implementation detail.\n */\nconst reasons: Record<string, PlatformError.SystemErrorTag | undefined> = {\n  EACCES: \"PermissionDenied\",\n  EBUSY: \"Busy\",\n  EEXIST: \"AlreadyExists\",\n  EFBIG: \"BadResource\",\n  EISDIR: \"BadResource\",\n  ELOOP: \"BadResource\",\n  ENOENT: \"NotFound\",\n  ENOTDIR: \"BadResource\",\n  ENOTSUP: \"PermissionDenied\",\n  ENXIO: \"BadResource\",\n  EOPNOTSUPP: \"PermissionDenied\",\n  EPERM: \"PermissionDenied\",\n  EPROTO: \"PermissionDenied\"\n}\n\n/**\n * A request framed for the helper: one atomic operation, or one member of a\n * batch. The two protocols name their operands differently — a batch `glob`\n * carries the `path` it expands where an atomic `glob` carries a `pattern` —\n * so the reporting helpers read the operand by narrowing on the operation\n * rather than by taking whichever of three optional fields happened to be set.\n * @private\n * @since 1.0.0\n */\nexport type FramedRequest = KernelFileSystem.AtomicRequest | KernelFileSystem.AtomicBatchRequest\n\n/** The operand a framed request names, for a failure's `pathOrDescriptor`. */\nconst operand = (request: FramedRequest): string | undefined =>\n  \"path\" in request ?\n    request.path :\n    request.operation === \"rename\" ?\n    request.from :\n    request.operation === \"glob\" ?\n    request.pattern :\n    undefined\n\n/**\n * A rejection carrying no errno is a transport or host failure — an absent\n * helper, a killed child, output that is not a helper result — and stays\n * `PermissionDenied` so the boundary fails closed rather than reporting a\n * benign-looking reason for an operation that never ran.\n * @private\n * @since 1.0.0\n */\nexport const failure = (\n  request: FramedRequest,\n  cause: unknown,\n  rejection?: HelperResult\n): PlatformError.PlatformError => {\n  const method = request.operation\n  if (rejection?.badArgument === true) {\n    return PlatformError.badArgument({ module: moduleName, method, description: rejection.message, cause })\n  }\n  const code = rejection?.code ?? undefined\n  return PlatformError.systemError({\n    module: moduleName,\n    method,\n    pathOrDescriptor: operand(request),\n    // `@effect/platform-node` sets `syscall` on every system error it reports,\n    // so a consumer that switches on it has to read a populated field here too.\n    // It names the operation's own syscall rather than whichever of the calls\n    // that operation makes actually raised, so it says what was attempted, not\n    // which step failed. A transport failure names no syscall at all, because\n    // no syscall ran.\n    syscall: rejection?.syscall ?? undefined,\n    _tag: code === undefined ? \"PermissionDenied\" : reasons[code] ?? \"Unknown\",\n    // The cause is repeated into the description because a fail-closed refusal\n    // that says only \"failed closed\" is unactionable: an absent helper, a\n    // response over the limit, and a mangled frame all look alike otherwise.\n    description: code === undefined\n      ? `descriptor-relative filesystem isolation failed closed: ${String(cause)}`\n      : rejection?.message,\n    // Match the native Node adapter's errno contract. Artifact path checks\n    // distinguish a non-link (EINVAL) from a helper or transport failure.\n    cause: code === undefined ? cause : new AtomicHelperRejection({\n      code,\n      syscall: rejection?.syscall ?? undefined,\n      message: rejection?.message ?? \"\",\n      cause\n    })\n  })\n}\n\n/**\n * Frames a serialized request: the protocol tag, the body length, and the\n * request, content, and response ceilings the helper enforces on its side,\n * then the body.\n * @private\n * @since 1.0.0\n */\nexport const encode = (body: Buffer, limits: Limits): Buffer => {\n  const header = Buffer.from(\n    `${protocol} ${body.byteLength} ${limits.request} ${limits.content} ${limits.response}\\n`,\n    \"ascii\"\n  )\n  return Buffer.concat([header, body], header.byteLength + body.byteLength)\n}\n\n/**\n * Decodes one complete response frame into a result envelope. Anything that\n * is not exactly one well-formed frame within the response ceiling throws.\n * @private\n * @since 1.0.0\n */\nexport const decode = (frame: Buffer, limits: Limits): HelperResult => {\n  const newline = frame.indexOf(10)\n  if (newline < 0 || newline >= frameHeaderBytes) {\n    throw atomicHelperFault(\"response_unframed\", \"atomic helper response is not framed\")\n  }\n  const fields = frame.subarray(0, newline).toString(\"ascii\").split(\" \")\n  if (fields.length !== 2 || fields[0] !== protocol) {\n    throw atomicHelperFault(\"response_tag_unknown\", \"atomic helper response carries an unknown protocol tag\")\n  }\n  const declared = fields[1]!\n  if (!decimal.test(declared)) {\n    throw atomicHelperFault(\n      \"response_length_invalid\",\n      `atomic helper declared a non-decimal response length: ${declared}`\n    )\n  }\n  const length = Number(declared)\n  if (!Number.isSafeInteger(length) || length < 0 || length > limits.response) {\n    throw atomicHelperFault(\n      \"response_length_invalid\",\n      `atomic helper declared an out-of-range response length: ${declared}`\n    )\n  }\n  const body = frame.subarray(newline + 1)\n  if (body.byteLength !== length) {\n    // Fewer bytes is a truncated response (a killed helper); more is a second\n    // frame appended to the first. Either way the stream is not one answer.\n    throw atomicHelperFault(\n      \"response_length_mismatch\",\n      `atomic helper declared ${length} response bytes and wrote ${body.byteLength}`\n    )\n  }\n  // Decoded from the complete frame, so a multi-byte character split across\n  // two stdout chunks is never mangled on the way in.\n  return resultEnvelope(JSON.parse(fatalUtf8.decode(body)))\n}\n\nconst resultEnvelope = (input: unknown): HelperResult => {\n  const value = input as HelperResult\n  if (value === null || typeof value !== \"object\" || typeof value.ok !== \"boolean\") {\n    throw atomicHelperFault(\"envelope_malformed\", \"atomic helper response is not a result envelope\")\n  }\n  if (value.code !== undefined && value.code !== null && typeof value.code !== \"string\") {\n    throw atomicHelperFault(\"envelope_malformed\", \"atomic helper response carries a non-string error code\")\n  }\n  if (value.syscall !== undefined && value.syscall !== null && typeof value.syscall !== \"string\") {\n    throw atomicHelperFault(\"envelope_malformed\", \"atomic helper response carries a non-string syscall\")\n  }\n  if (value.badArgument !== undefined && typeof value.badArgument !== \"boolean\") {\n    throw atomicHelperFault(\"envelope_malformed\", \"atomic helper response carries a non-boolean badArgument flag\")\n  }\n  if (value.message !== undefined && typeof value.message !== \"string\") {\n    throw atomicHelperFault(\"envelope_malformed\", \"atomic helper response carries a non-string message\")\n  }\n  return value\n}\n\nconst record = (value: unknown, what: string): Record<string, unknown> => {\n  if (value === null || typeof value !== \"object\") {\n    throw atomicHelperFault(\"field_malformed\", `atomic helper returned a non-object ${what}`)\n  }\n  return value as Record<string, unknown>\n}\n\nconst finite = (value: unknown, field: string): number => {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    throw atomicHelperFault(\"field_malformed\", `atomic helper returned a non-numeric ${field}`)\n  }\n  return value\n}\n\nconst integer = (value: unknown, field: string): number => {\n  const numeric = finite(value, field)\n  if (!Number.isSafeInteger(numeric) || numeric < 0) {\n    throw atomicHelperFault(\"field_malformed\", `atomic helper returned an out-of-range ${field}: ${numeric}`)\n  }\n  return numeric\n}\n\nconst date = (value: unknown, field: string): Date => {\n  const result = new Date(finite(value, field))\n  if (!Number.isFinite(result.getTime())) {\n    throw atomicHelperFault(\"field_malformed\", `atomic helper returned an out-of-range ${field}`)\n  }\n  return result\n}\n\nconst size = (value: unknown, field: string): ByteSize.ByteSize => {\n  if (typeof value === \"string\" && decimal.test(value)) {\n    return ByteSize.bytes(BigInt(value))\n  }\n  return ByteSize.bytes(BigInt(integer(value, field)))\n}\n\nconst optional = <A>(value: unknown, read: (value: unknown) => A): Option.Option<A> =>\n  value === null || value === undefined ? Option.none() : Option.some(read(value))\n\n/** Effect's own `FileSystem.File.Type`; anything else is a helper defect. */\nconst fileTypes = new Set<string>([\n  \"File\",\n  \"Directory\",\n  \"SymbolicLink\",\n  \"BlockDevice\",\n  \"CharacterDevice\",\n  \"FIFO\",\n  \"Socket\",\n  \"Unknown\"\n])\n\nconst toInfo = (value: unknown): FileSystem.File.Info => {\n  const info = record(value, \"stat\")\n  if (!fileTypes.has(info.type as string)) {\n    throw atomicHelperFault(\"file_type_unknown\", `atomic helper returned an unknown file type: ${String(info.type)}`)\n  }\n  return {\n    type: info.type as FileSystem.File.Type,\n    mtime: Option.some(date(info.mtime, \"mtime\")),\n    atime: Option.some(date(info.atime, \"atime\")),\n    birthtime: optional(info.birthtime, (raw) => date(raw, \"birthtime\")),\n    dev: integer(info.dev, \"dev\"),\n    ino: optional(info.ino, (raw) => integer(raw, \"ino\")),\n    mode: integer(info.mode, \"mode\"),\n    nlink: Option.some(integer(info.nlink, \"nlink\")),\n    uid: Option.some(integer(info.uid, \"uid\")),\n    gid: Option.some(integer(info.gid, \"gid\")),\n    rdev: Option.some(integer(info.rdev, \"rdev\")),\n    size: size(info.size, \"size\"),\n    blksize: optional(info.blksize, (raw) => size(raw, \"blksize\")),\n    blocks: optional(info.blocks, (raw) => integer(raw, \"blocks\"))\n  }\n}\n\nconst isBase64 = (encoded: string): boolean => {\n  if (encoded.length % 4 !== 0) return false\n  let end = encoded.length\n  if (encoded.endsWith(\"=\")) {\n    end--\n    if (encoded[end - 1] === \"=\") end--\n  }\n  // A repeated-group regexp exhausts V8's stack on ordinary multi-MiB reads.\n  // Scan the alphabet once, excluding at most two trailing padding characters.\n  for (let index = 0; index < end; index++) {\n    const code = encoded.charCodeAt(index)\n    if (\n      !(code >= 65 && code <= 90) && !(code >= 97 && code <= 122) &&\n      !(code >= 48 && code <= 57) && code !== 43 && code !== 47\n    ) return false\n  }\n  return true\n}\n\nconst toBytes = (value: unknown, limit: number): Uint8Array => {\n  const payload = record(value, \"read result\")\n  const encoded = payload.base64\n  // Buffer.from silently drops characters it does not recognise, so the shape\n  // is checked before the decode rather than inferred from its output.\n  if (typeof encoded !== \"string\" || !isBase64(encoded)) {\n    throw atomicHelperFault(\"payload_malformed\", \"atomic helper returned a malformed base64 payload\")\n  }\n  const bytes = Buffer.from(encoded, \"base64\")\n  if (bytes.byteLength > limit) {\n    throw atomicHelperFault(\n      \"read_limit_exceeded\",\n      `atomic helper returned ${bytes.byteLength} bytes, over the ${limit} byte read limit`\n    )\n  }\n  return Uint8Array.from(bytes)\n}\n\nconst toStringResult = (value: unknown, what: string): string => {\n  if (typeof value !== \"string\" || value.includes(\"\\0\")) {\n    throw atomicHelperFault(\"entries_malformed\", `atomic helper returned an invalid ${what}`)\n  }\n  return value\n}\n\nconst maxListingEntries = 100_000\n\nconst toStringArray = (value: unknown, what: string): Array<string> => {\n  if (!Array.isArray(value) || value.length > maxListingEntries) {\n    throw atomicHelperFault(\"entries_malformed\", `atomic helper returned an invalid ${what}`)\n  }\n  const result = value.map((entry) => toStringResult(entry, `${what} entry`))\n  if (new Set(result).size !== result.length) {\n    throw atomicHelperFault(\"entries_malformed\", `atomic helper returned duplicate ${what} entries`)\n  }\n  return result\n}\n\n/**\n * Converts a successful helper value into the result the request's operation\n * promises, and throws when the value does not have that shape.\n * @private\n * @since 1.0.0\n */\nexport const convert = <A>(\n  request: FramedRequest,\n  value: unknown,\n  limits: Limits\n): Effect.Effect<A, PlatformError.PlatformError> => {\n  if (request.operation === \"batch\") {\n    const response = record(value, \"batch\")\n    const requests = request.requests\n    if (\n      response.rootIdentity !== request.rootIdentity || !Array.isArray(response.entries) ||\n      response.entries.length !== requests.length\n    ) {\n      throw atomicHelperFault(\"batch_malformed\", \"atomic helper returned a foreign or incomplete batch\")\n    }\n    const seen = new Set<number>()\n    let previous = \"\"\n    let previousIndex = -1\n    const pending = response.entries.map((raw) => {\n      const entry = record(raw, \"batch entry\")\n      const index = integer(entry.index, \"batch index\")\n      const member = requests[index]\n      if (\n        member === undefined || seen.has(index) || entry.path !== member.path ||\n        member.path < previous || (member.path === previous && index <= previousIndex)\n      ) {\n        throw atomicHelperFault(\"batch_malformed\", \"atomic helper returned an invalid batch member identity or order\")\n      }\n      seen.add(index)\n      previous = member.path\n      previousIndex = index\n      if (Buffer.byteLength(JSON.stringify(entry.result), \"utf8\") > limits.batchEntry) {\n        throw atomicHelperFault(\"batch_malformed\", \"atomic helper returned an oversized batch entry\")\n      }\n      const envelope = resultEnvelope(entry.result)\n      const identity = { index, path: member.path }\n      if (!envelope.ok) {\n        return Effect.succeed({\n          ...identity,\n          result: Result.fail(\n            failure(\n              member,\n              atomicHelperFault(\"helper_rejected\", envelope.message ?? \"atomic batch member failed\"),\n              envelope\n            )\n          )\n        })\n      }\n      if (member.operation === \"digest\") {\n        const measured = record(envelope.value, \"digest\")\n        if (typeof measured.digest !== \"string\" || !/^[a-f0-9]{64}$/.test(measured.digest)) {\n          throw atomicHelperFault(\"digest_malformed\", \"atomic helper returned an invalid SHA-256 digest\")\n        }\n        const sizeBytes = integer(measured.sizeBytes, \"digest size\")\n        if (sizeBytes > limits.content) {\n          throw atomicHelperFault(\"digest_malformed\", \"atomic helper returned an oversized digest measurement\")\n        }\n        const bytes = member.content === true ? toBytes(measured, limits.content) : undefined\n        if (bytes !== undefined && bytes.length !== sizeBytes) {\n          throw atomicHelperFault(\"digest_malformed\", \"atomic helper returned a mismatched digest size\")\n        }\n        return Effect.succeed({\n          ...identity,\n          result: Result.succeed<KernelFileSystem.AtomicBatchValue>({\n            operation: \"digest\",\n            digest: measured.digest,\n            sizeBytes,\n            ...(bytes === undefined ? {} : { bytes })\n          })\n        })\n      }\n      return Effect.map(convert(member, envelope.value, limits), (converted) => ({\n        ...identity,\n        result: Result.succeed<KernelFileSystem.AtomicBatchValue>(\n          member.operation === \"stat\"\n            ? { operation: \"stat\", info: converted as FileSystem.File.Info }\n            : member.operation === \"resolve\"\n            ? { operation: \"resolve\", resolution: converted as KernelFileSystem.Resolution }\n            : { operation: member.operation, paths: (converted as Array<string>).sort() }\n        )\n      }))\n    })\n    return Effect.map(Effect.all(pending), (entries) => ({ rootIdentity: response.rootIdentity, entries }) as A)\n  }\n  if (request.operation === \"readFile\" || request.operation === \"readFileString\") {\n    // An empty file encodes to an empty string, so the payload is read by\n    // shape: truthiness would return the raw envelope for it instead.\n    const bytes = toBytes(value, limits.content)\n    if (request.operation === \"readFile\") {\n      return Effect.succeed(bytes as A)\n    }\n    try {\n      return Effect.succeed(new TextDecoder(request.encoding).decode(bytes) as A)\n    } catch (cause) {\n      // Effect's own `readFileString` reports a rejected encoding as a\n      // BadArgument, not as a filesystem failure.\n      return Effect.fail(PlatformError.badArgument({\n        module: \"FileSystem\",\n        method: \"readFileString\",\n        description: \"invalid encoding\",\n        cause\n      }))\n    }\n  }\n  if (request.operation === \"stat\") {\n    return Effect.succeed(toInfo(value) as A)\n  }\n  if (request.operation === \"exists\") {\n    if (typeof value !== \"boolean\") {\n      throw atomicHelperFault(\"result_malformed\", \"atomic helper returned a non-boolean exists result\")\n    }\n    return Effect.succeed(value as A)\n  }\n  if (request.operation === \"readLink\" || request.operation === \"realPath\") {\n    return Effect.succeed(toStringResult(value, `${request.operation} result`) as A)\n  }\n  if (request.operation === \"resolve\") {\n    const resolution = record(value, \"resolve result\")\n    const target = resolution.target === null ? null : toStringResult(resolution.target, \"resolve target\")\n    const answer: KernelFileSystem.Resolution = { path: toStringResult(resolution.path, \"resolve path\"), target }\n    return Effect.succeed(answer as A)\n  }\n  if (request.operation === \"readDirectory\" || request.operation === \"glob\") {\n    return Effect.succeed(toStringArray(value, `${request.operation} result`) as A)\n  }\n  if (\n    request.operation === \"writeFile\" ||\n    request.operation === \"writeFileString\" ||\n    request.operation === \"chmod\" ||\n    request.operation === \"chown\" ||\n    request.operation === \"makeDirectory\" ||\n    request.operation === \"remove\" ||\n    request.operation === \"rename\"\n  ) {\n    if (value !== null) {\n      throw atomicHelperFault(\"result_malformed\", `atomic helper returned a non-null ${request.operation} result`)\n    }\n    return Effect.succeed(undefined as A)\n  }\n  throw atomicHelperFault(\n    \"operation_unsupported\",\n    `atomic helper returned success for unsupported operation ${(request as FramedRequest).operation}`\n  )\n}\n"]}

package/dist/esm/internal/AtomicFileSystemTransport.d.ts

@@ -0,0 +1,44 @@
+/**
+ * The process transport beneath the atomic filesystem: resolving the
+ * configured helper to a file the confined workspace cannot have
+ * supplied, and running one isolated, bounded helper process per framed
+ * request.
+ * @since 1.0.0
+ */
+import type * as KernelFileSystem from "@smthrs/kernel/FileSystem";
+import { Effect, type PlatformError } from "effect";
+import type { Limits } from "../AtomicFileSystem.ts";
+/**
+ * Process-local helper starts, including helpers later cancelled or refused.
+ * @private
+ * @since 1.0.0
+ */
+export declare const started: () => number;
+/**
+ * True when `target` is at or below `root`. Both are absolute and already
+ * canonical. A different Windows drive produces an absolute relative result.
+ * @private
+ * @since 1.0.0
+ */
+export declare const inside: (root: string, target: string) => boolean;
+/**
+ * Resolves the configured helper to an absolute, executable regular file
+ * that the confined workspace cannot have supplied. Every failure throws, and
+ * every throw becomes a fail-closed `PermissionDenied`, so a host without a
+ * usable helper performs no filesystem operation at all.
+ * @private
+ * @since 1.0.0
+ */
+export declare const usableExecutable: (configured: string, boundaryRoot: string | undefined) => string;
+/**
+ * Runs one helper over one framed request and settles with its converted
+ * answer. Every exit path kills the child, releases its pipes, and waits for
+ * the operating system to report that the process has closed.
+ * @private
+ * @since 1.0.0
+ */
+export declare const spawnHelper: <A>(request: KernelFileSystem.AtomicRequest, executable: string, payload: Buffer, settings: {
+    readonly limits: Limits;
+    readonly timeoutMs: number;
+}) => Effect.Effect<A, PlatformError.PlatformError>;
+//# sourceMappingURL=AtomicFileSystemTransport.d.ts.map

package/dist/esm/internal/AtomicFileSystemTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AtomicFileSystemTransport.d.ts","sourceRoot":"","sources":["../../../src/internal/AtomicFileSystemTransport.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,gBAAgB,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAA;AAInD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAOpD;;;;GAIG;AACH,eAAO,MAAM,OAAO,QAAO,MAAwB,CAAA;AAKnD;;;;;GAKG;AACH,eAAO,MAAM,MAAM,GAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,KAAG,OAGrD,CAAA;AA6BD;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,YAAY,MAAM,EAAE,cAAc,MAAM,GAAG,SAAS,KAAG,MAwBvF,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GAAI,CAAC,EAC3B,SAAS,gBAAgB,CAAC,aAAa,EACvC,YAAY,MAAM,EAClB,SAAS,MAAM,EACf,UAAU;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KAChE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,aAAa,CA6J3C,CAAA"}