@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/terminal/routes.js

@@ -0,0 +1,455 @@
+/*
+ * routes.ts — embedded-terminal HTTP + WebSocket surface (iterate-2026-05-03).
+ *
+ * The WebSocket upgrade at GET /api/terminal/:taskId/ws is the AUTHORITATIVE
+ * lifecycle entrypoint: it ensure-or-creates the pty atomically. The
+ * separate POST /spawn route is retained only as an idempotent prewarm
+ * (returns the existing handle if one exists; never duplicates).
+ *
+ * External-review (2026-05-03) drove these contracts:
+ *   - WS upgrade rejects unknown Origin (loopback CORS posture mirrored).
+ *   - Writer ownership tied to the live WS conn identity; cleared on close.
+ *   - Backpressure handled inside PtyManager via WS.bufferedAmount.
+ *   - PTY persists across last-connection detach (ADR-068-A1 Replay-on-
+ *     Attach). Orphan GC runs via the 30-min idle ceiling + explicit
+ *     "Stop terminal session" / DELETE task cascade.
+ *
+ * Auth posture: same loopback-only CORS gate as the rest of the HTTP
+ * surface. A future remote-access mode would need additional auth (see
+ * ADR-067).
+ *
+ * Iterate-2026-05-27 (ADR-103 retirement candidate #1): the WS upgrade
+ * BODY moved to `ws-upgrade-handler.ts`. This file retains:
+ *   - reject-the-upgrade validations (origin, task, trustedCwd) — they
+ *     MUST stay synchronous here, otherwise failure mode degrades from
+ *     "HTTP upgrade rejection" to "silent WS disconnect" (external plan
+ *     review HIGH #1, 2026-05-27);
+ *   - HTTP route handlers (spawn, close, clear-scrollback, paste-image,
+ *     append-gitignore);
+ *   - the spawn-env factory (buildSpawnEnv, createNodePtySpawnFn).
+ */
+import os from "node:os";
+import { spawnSync } from "node:child_process";
+import { existsSync, realpathSync } from "node:fs";
+import { stat as fsStat } from "node:fs/promises";
+import { pathGuard, realPathGuard } from "../core/path-guard.js";
+import { resolveTrustedOrigins } from "../lib/resolveTrustedOrigins.js";
+import { buildSpawnEnv } from "./spawn-env.js";
+import { PtySpawnFailedError, quotePathForShell } from "./pty-manager.js";
+import { appendGitignoreLine, ImagePasteError, savePastedImage, } from "./image-paste.js";
+import { buildWsHandlers, } from "./ws-upgrade-handler.js";
+// Re-export `deriveTerminalReset` for any historical importer. The
+// canonical home is `./terminal-reset.js` (extracted in iterate-2026-
+// 05-27-ws-upgrade-handler-split to break the routes.ts ↔ ws-upgrade-
+// handler.ts cycle — external plan review MED #3, 2026-05-27).
+export { deriveTerminalReset } from "./terminal-reset.js";
+// Iterate v0.8.4 — the WS upgrade Origin gate now defers to
+// `resolveTrustedOrigins(process.env)` so it widens consistently with
+// `HONO_HOST` / `WEBUI_TRUSTED_ORIGINS`. The default (no env vars set)
+// remains loopback-only, identical to the pre-iterate behaviour.
+//
+// External code-review F4 still binds: `null` / empty Origin is
+// rejected unconditionally (browsers always send an Origin header on
+// WS upgrades from a real page; absent = non-browser caller, which
+// falls outside the CORS contract regardless of policy mode).
+function defaultAllowedOrigins(origin) {
+    return resolveTrustedOrigins(process.env).isAllowed(origin);
+}
+/**
+ * Probe the Windows shell fallback chain pwsh → powershell → cmd. Returns
+ * the first executable we can resolve via the PATH. Cached per-process —
+ * shells don't disappear during a server lifetime. ESM-safe (no require).
+ */
+let cachedWinShell = null;
+function resolveWindowsShell() {
+    if (cachedWinShell !== null)
+        return cachedWinShell;
+    for (const candidate of ["pwsh.exe", "powershell.exe", "cmd.exe"]) {
+        const r = spawnSync("where", [candidate], { stdio: "ignore" });
+        if (r.status === 0) {
+            cachedWinShell = candidate;
+            return candidate;
+        }
+    }
+    // Last-resort: cmd.exe is essentially always present on Windows.
+    cachedWinShell = "cmd.exe";
+    return "cmd.exe";
+}
+/**
+ * Resolve task.cwd through realpath BEFORE using it as the trusted root
+ * for any path-guard check. Without this, a symlinked task.cwd could
+ * pass child-path checks while pointing the new write surface outside
+ * the intended project root (external review F2 v2 — security HIGH).
+ *
+ * Returns the realpath-resolved absolute cwd, or null if cwd is missing
+ * or unresolvable. Caller must hard-fail (404 / 403) on null.
+ */
+function resolveTrustedCwd(rawCwd) {
+    if (!rawCwd || typeof rawCwd !== "string")
+        return null;
+    if (rawCwd.indexOf("\0") !== -1)
+        return null;
+    if (!existsSync(rawCwd))
+        return null;
+    try {
+        return realpathSync(rawCwd);
+    }
+    catch {
+        return null;
+    }
+}
+function defaultResolveShell() {
+    if (os.platform() === "win32") {
+        return process.env.SHIPWRIGHT_TERMINAL_SHELL ?? resolveWindowsShell();
+    }
+    return process.env.SHIPWRIGHT_TERMINAL_SHELL ?? process.env.SHELL ?? "/bin/bash";
+}
+export function createTerminalRoutes(deps) {
+    const { store, ptyManager, upgradeWebSocket } = deps;
+    const allowedOrigins = deps.allowedOrigins ?? defaultAllowedOrigins;
+    const resolveShell = deps.resolveShell ?? defaultResolveShell;
+    const pastesKeepLast = deps.pastesKeepLast ?? 20;
+    const scrollbackStore = deps.scrollbackStore;
+    const snapshotStore = deps.snapshotStore;
+    const expectedTerminalVersion = deps.expectedTerminalVersion;
+    // Iterate v0.8.2 AC-9: defaults match config.ts so a wired path is
+    // always preferred but the constructor stays optional.
+    const retentionDays = deps.retentionDays ?? 1;
+    const scrollbackDirHint = deps.scrollbackDirHint ?? "<scrollback>";
+    return (app) => {
+        // --- POST /api/terminal/:taskId/spawn — idempotent prewarm ------------
+        app.post("/api/terminal/:taskId/spawn", async (c) => {
+            const taskId = c.req.param("taskId");
+            if (!taskId)
+                return c.json({ error: "missing_task_id" }, 400);
+            const task = store.get(taskId);
+            if (!task)
+                return c.json({ error: "task_not_found" }, 404);
+            const trustedCwd = resolveTrustedCwd(task.cwd);
+            if (!trustedCwd)
+                return c.json({ error: "task_cwd_unresolvable" }, 404);
+            try {
+                // ptyManager.spawn() is the in-house pty API; `shell` is a whitelisted
+                // shell binary NAME (ADR-067 basename-allowlist + loopback Origin gate),
+                // NOT child_process({shell:true}). Semgrep false positive.
+                // nosemgrep: javascript.lang.security.audit.spawn-shell-true.spawn-shell-true
+                const meta = ptyManager.spawn(taskId, {
+                    cwd: trustedCwd,
+                    shell: resolveShell(),
+                });
+                return c.json({
+                    taskId: meta.taskId,
+                    shell: meta.shell,
+                    shellKind: meta.shellKind,
+                    cwd: meta.cwd,
+                });
+            }
+            catch (err) {
+                // iterate-2026-07-15 — a spawn failure is NOT a whitelist rejection: a
+                // vanished cwd (267/ENOENT/ENOTDIR) → 409 task_cwd_unusable; anything
+                // else (EMFILE/EPERM) → neutral 500 pty_spawn_failed.
+                if (err instanceof PtySpawnFailedError) {
+                    return err.isLikelyCwdError
+                        ? c.json({ error: "task_cwd_unusable", detail: err.message }, 409)
+                        : c.json({ error: "pty_spawn_failed", detail: err.message }, 500);
+                }
+                return c.json({ error: "pty_spawn_rejected", detail: String(err.message) }, 400);
+            }
+        });
+        // --- POST /api/terminal/:taskId/close ---------------------------------
+        // ADR-068-A1: kill pty only — scrollback is RETAINED on disk.
+        // Re-attach replays the history. Use /clear-scrollback to delete.
+        app.post("/api/terminal/:taskId/close", (c) => {
+            const taskId = c.req.param("taskId");
+            if (!taskId)
+                return c.json({ error: "missing_task_id" }, 400);
+            ptyManager.kill(taskId);
+            return c.body(null, 204);
+        });
+        // --- POST /api/terminal/:taskId/clear-scrollback (ADR-068-A1) --------
+        // Loud destructive: deletes <taskId>.log + <taskId>.log.1. Throws on
+        // failure (5xx) so the UI surfaces an inline error. Independent of
+        // /close — the user can clear history while the pty stays alive
+        // (the next pty.onData will re-create the file).
+        app.post("/api/terminal/:taskId/clear-scrollback", async (c) => {
+            const taskId = c.req.param("taskId");
+            if (!taskId)
+                return c.json({ error: "missing_task_id" }, 400);
+            if (!scrollbackStore) {
+                // No store wired (test config) — treat as no-op success.
+                return c.body(null, 204);
+            }
+            try {
+                await scrollbackStore.clear(taskId);
+                return c.body(null, 204);
+            }
+            catch (err) {
+                const detail = String(err.message);
+                // ScrollbackStoreError("invalid_task_id") → 400; everything else
+                // (path-guard escape, EACCES, …) → 500.
+                const code = err.code;
+                if (code === "invalid_task_id") {
+                    return c.json({ error: "invalid_task_id", detail }, 400);
+                }
+                if (code === "scrollback_path_outside_dir") {
+                    return c.json({ error: "scrollback_path_outside_dir", detail }, 403);
+                }
+                return c.json({ error: "clear_failed", detail }, 500);
+            }
+        });
+        // --- POST /api/terminal/:taskId/paste-image ---------------------------
+        // Multipart/form-data with field "image: File". Saves to
+        // <task.cwd>/.shipwright-webui/pastes/img-<ts>-<rand>.<ext> (iterate v0.8.2
+        // AC-6 — moved from `.claude-pastes/`), prunes to keep-last-N, and
+        // pty.write()s the shell-quoted absolute path into the buffer
+        // (followed by a trailing space). 413 fast-fail on large Content-Length.
+        app.post("/api/terminal/:taskId/paste-image", async (c) => {
+            // Iterate v0.8.2 AC-4: structured timing logs gated by
+            // SHIPWRIGHT_DEBUG_PASTE_TIMING. Off in prod by default; flip on
+            // when diagnosing the latency of the full clipboard→pty roundtrip.
+            const debugTiming = process.env.SHIPWRIGHT_DEBUG_PASTE_TIMING === "1" ||
+                process.env.SHIPWRIGHT_DEBUG_PASTE_TIMING === "true";
+            const t0 = debugTiming ? performance.now() : 0;
+            const mark = (label) => {
+                if (!debugTiming)
+                    return;
+                const elapsed = (performance.now() - t0).toFixed(1);
+                // eslint-disable-next-line no-console
+                console.log(`[paste-image] ${label} t+${elapsed}ms`);
+            };
+            const taskId = c.req.param("taskId");
+            if (!taskId)
+                return c.json({ error: "missing_task_id" }, 400);
+            const task = store.get(taskId);
+            if (!task)
+                return c.json({ error: "task_not_found" }, 404);
+            const trustedCwd = resolveTrustedCwd(task.cwd);
+            if (!trustedCwd)
+                return c.json({ error: "task_cwd_unresolvable" }, 404);
+            // Content-Length precheck — refuse before buffering. 9 MiB ceiling
+            // gives 1 MiB of headroom over the 8 MiB blob cap (multipart envelope
+            // overhead). External review F2 v2: also refuse missing/invalid
+            // Content-Length so chunked-transfer can't bypass the precheck.
+            const rawLen = c.req.header("content-length");
+            if (!rawLen) {
+                return c.json({ error: "content_length_required" }, 411);
+            }
+            const contentLength = parseInt(rawLen, 10);
+            if (!Number.isFinite(contentLength) || contentLength <= 0) {
+                return c.json({ error: "content_length_invalid" }, 400);
+            }
+            if (contentLength > 9 * 1024 * 1024) {
+                return c.json({ error: "image_too_large" }, 413);
+            }
+            let body;
+            try {
+                body = await c.req.parseBody();
+            }
+            catch (err) {
+                return c.json({ error: "invalid_multipart", detail: String(err.message) }, 400);
+            }
+            mark("parseBody-done");
+            const file = body.image;
+            if (!(file instanceof File)) {
+                return c.json({ error: "missing_image_field" }, 400);
+            }
+            let bytes;
+            try {
+                bytes = new Uint8Array(await file.arrayBuffer());
+            }
+            catch (err) {
+                return c.json({ error: "image_read_failed", detail: String(err.message) }, 400);
+            }
+            mark(`bytes-extracted size=${bytes.byteLength}`);
+            // External review F3 (v2): if no pty exists yet, ensure-or-create
+            // it so paste-image works even when the user pastes into a freshly
+            // opened terminal tab. The writer-gate still applies — paste-image
+            // never writes if the current writer is a different tab.
+            try {
+                let meta = ptyManager.get(taskId);
+                if (!meta) {
+                    try {
+                        // ptyManager.spawn(): `shell` is a whitelisted binary NAME (ADR-067),
+                        // not child_process({shell:true}). Semgrep false positive.
+                        // nosemgrep: javascript.lang.security.audit.spawn-shell-true.spawn-shell-true
+                        meta = ptyManager.spawn(taskId, {
+                            cwd: trustedCwd,
+                            shell: resolveShell(),
+                        });
+                    }
+                    catch {
+                        // Spawn failure is non-fatal here — the file save still
+                        // succeeds; the response will report ptyWritten=false.
+                        meta = undefined;
+                    }
+                }
+                const result = await savePastedImage({
+                    cwd: trustedCwd,
+                    bytes,
+                    keepLast: pastesKeepLast,
+                });
+                mark("savePastedImage-done");
+                let ptyWritten = false;
+                if (meta && ptyManager.hasActiveWriter(taskId)) {
+                    const quoted = quotePathForShell(result.absolutePath, meta.shellKind);
+                    ptyManager.write(taskId, quoted + " ");
+                    ptyWritten = true;
+                }
+                mark(`response-out ptyWritten=${ptyWritten}`);
+                return c.json({
+                    path: result.absolutePath,
+                    kind: result.kind,
+                    gitignoreSuggestion: result.gitignoreSuggestion,
+                    ptyWritten,
+                    kept: result.prune.kept,
+                    deleted: result.prune.deleted,
+                });
+            }
+            catch (err) {
+                if (err instanceof ImagePasteError) {
+                    const status = err.code === "image_too_large" ? 413 : 400;
+                    return c.json({ error: err.code, detail: err.message }, status);
+                }
+                return c.json({ error: "internal_error", detail: String(err.message) }, 500);
+            }
+        });
+        // --- POST /api/terminal/:taskId/append-gitignore ----------------------
+        // Idempotent append of `.shipwright-webui/` to <task.cwd>/.gitignore
+        // (iterate v0.8.2 AC-6). realpath-guarded so a symlinked .gitignore can't
+        // redirect the write outside cwd (external review F11).
+        app.post("/api/terminal/:taskId/append-gitignore", async (c) => {
+            const taskId = c.req.param("taskId");
+            if (!taskId)
+                return c.json({ error: "missing_task_id" }, 400);
+            const task = store.get(taskId);
+            if (!task)
+                return c.json({ error: "task_not_found" }, 404);
+            const trustedCwd = resolveTrustedCwd(task.cwd);
+            if (!trustedCwd)
+                return c.json({ error: "task_cwd_unresolvable" }, 404);
+            const guard = pathGuard(trustedCwd, ".gitignore");
+            if (!guard.ok) {
+                return c.json({ error: "path_guard_traversal", detail: guard.reason }, 403);
+            }
+            // External code-review F2: existence FIRST, then realPathGuard.
+            // realPathGuard internally calls realpathSync, which throws on
+            // ENOENT — without this ordering, a missing .gitignore returns
+            // 403 gitignore_symlink_escape (wrong) instead of 404
+            // gitignore_missing (the spec'd behavior).
+            try {
+                await fsStat(guard.absolute);
+            }
+            catch {
+                return c.json({ error: "gitignore_missing" }, 404);
+            }
+            const real = realPathGuard(trustedCwd, guard.absolute);
+            if (!real.ok) {
+                return c.json({ error: "gitignore_symlink_escape", detail: real.reason }, 403);
+            }
+            try {
+                const did = await appendGitignoreLine(real.absolute);
+                if (!did) {
+                    // Already present (we already proved the file exists).
+                    return c.json({ ok: true, appended: false, reason: "already_present" });
+                }
+                return c.body(null, 204);
+            }
+            catch (err) {
+                return c.json({ error: "internal_error", detail: String(err.message) }, 500);
+            }
+        });
+        // Iterate C (ADR-087): the legacy chunked-replay path
+        // (replay_start → replay_chunk* → replay_separator → replay_end)
+        // has been RETIRED. Cell-state snapshots produced by the
+        // @xterm/headless mirror (ADR-088/089) are the sole replay
+        // primitive. When a snapshot is unavailable (missing on disk,
+        // version mismatch, or `headlessMirrorEnabled=false`), the client
+        // gets a blank terminal with a live shell — per the plan's
+        // explicit trade-off.
+        // --- GET /api/terminal/:taskId/ws — authoritative lifecycle entry ----
+        //
+        // VALIDATION TIMING contract (external plan review HIGH #1,
+        // 2026-05-27): every reject-the-upgrade check below MUST throw
+        // synchronously inside the `upgradeWebSocket((c) => …)` factory
+        // BEFORE `buildWsHandlers` returns its handler object. A throw
+        // here rejects the HTTP Upgrade; a throw inside `onOpen` only
+        // closes an already-upgraded socket — silently from the client's
+        // perspective. Do NOT move any of these checks into the
+        // ws-upgrade-handler.ts body.
+        app.get("/api/terminal/:taskId/ws", upgradeWebSocket((c) => {
+            const taskId = c.req.param("taskId");
+            if (!taskId)
+                throw new Error("missing_task_id");
+            const origin = c.req.header("origin") ?? null;
+            if (!allowedOrigins(origin)) {
+                // Refuse via upgrade rejection: throw so onError handles it,
+                // and the client sees the WS connection close immediately.
+                throw new Error("origin_not_allowed");
+            }
+            const task = store.get(taskId);
+            if (!task)
+                throw new Error("task_not_found");
+            const trustedCwd = resolveTrustedCwd(task.cwd);
+            if (!trustedCwd)
+                throw new Error("task_cwd_unresolvable");
+            const ctx = {
+                taskId,
+                task,
+                trustedCwd,
+                ptyManager,
+                store,
+                scrollbackStore,
+                snapshotStore,
+                expectedTerminalVersion,
+                retentionDays,
+                scrollbackDirHint,
+                resolveShell,
+            };
+            // iterate-2026-07-15 — `buildWsHandlers` calls `ptyManager.spawn()`
+            // synchronously; if the cwd validated above but CreateProcess can't use
+            // it (removed / delete-pending), it throws PtySpawnFailedError. Reject
+            // the upgrade deterministically instead of an uncaught 267 log line.
+            try {
+                return buildWsHandlers(ctx);
+            }
+            catch (err) {
+                if (err instanceof PtySpawnFailedError) {
+                    const reason = err.isLikelyCwdError
+                        ? "task_cwd_unusable"
+                        : "pty_spawn_failed";
+                    // eslint-disable-next-line no-console
+                    console.warn(`[terminal] pty spawn failed for ${taskId} (${reason}` +
+                        `${err.code !== null ? `, code ${err.code}` : ""}); rejecting WS upgrade`);
+                    throw new Error(reason);
+                }
+                throw err;
+            }
+        }));
+        return app;
+    };
+}
+// ---------------------------------------------------------------------------
+// PtySpawnFn factory — wraps @lydell/node-pty so PtyManager stays
+// dependency-injection-friendly + native-binary-free in tests.
+// ---------------------------------------------------------------------------
+export async function createNodePtySpawnFn() {
+    // Lazy import keeps the native binary out of the module-load path for
+    // unit tests that mock PtyManager.
+    const { spawn: nodePtySpawn } = await import("@lydell/node-pty");
+    return (shell, args, opts) => {
+        const termEnv = buildSpawnEnv(process.env, opts.env);
+        const handle = nodePtySpawn(shell, args, {
+            cwd: opts.cwd,
+            cols: opts.cols ?? 120,
+            rows: opts.rows ?? 30,
+            env: termEnv,
+            // node-pty's own `name` is the conpty pseudo-terminal name (some Win32
+            // conpty paths key off it); keep "xterm". Independent of `env.TERM`
+            // (now `xterm-256color` by default — FR-01.44 / spawn-env.ts).
+            name: opts.name ?? "xterm",
+        });
+        // The library's IPty matches our PtyHandleApi shape; cast is safe.
+        return handle;
+    };
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/terminal/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/terminal/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAO/C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,mBAAmB,EACnB,eAAe,EAEf,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,eAAe,GAEhB,MAAM,yBAAyB,CAAC;AAEjC,mEAAmE;AACnE,sEAAsE;AACtE,sEAAsE;AACtE,+DAA+D;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAyD1D,4DAA4D;AAC5D,sEAAsE;AACtE,uEAAuE;AACvE,iEAAiE;AACjE,EAAE;AACF,gEAAgE;AAChE,qEAAqE;AACrE,mEAAmE;AACnE,8DAA8D;AAC9D,SAAS,qBAAqB,CAAC,MAAqB;IAClD,OAAO,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,IAAI,cAAc,GAAkB,IAAI,CAAC;AACzC,SAAS,mBAAmB;IAC1B,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,cAAc,GAAG,SAAS,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,cAAc,GAAG,SAAS,CAAC;IAC3B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAiC;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,mBAAmB,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,MAAM,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,CAAC;IAC7D,mEAAmE;IACnE,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,cAAc,CAAC;IAEnE,OAAO,CAAC,GAAS,EAAQ,EAAE;QACzB,yEAAyE;QACzE,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAClD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;YAExE,IAAI,CAAC;gBACH,uEAAuE;gBACvE,yEAAyE;gBACzE,2DAA2D;gBAC3D,8EAA8E;gBAC9E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;oBACpC,GAAG,EAAE,UAAU;oBACf,KAAK,EAAE,YAAY,EAAE;iBACtB,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,sEAAsE;gBACtE,sDAAsD;gBACtD,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;oBACvC,OAAO,GAAG,CAAC,gBAAgB;wBACzB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC;wBAClE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;gBACtE,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,EACvE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,yEAAyE;QACzE,8DAA8D;QAC9D,kEAAkE;QAClE,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,qEAAqE;QACrE,mEAAmE;QACnE,gEAAgE;QAChE,iDAAiD;QACjD,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,yDAAyD;gBACzD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;gBAC9C,iEAAiE;gBACjE,wCAAwC;gBACxC,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;gBAC7C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;oBAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,yEAAyE;QACzE,yDAAyD;QACzD,4EAA4E;QAC5E,mEAAmE;QACnE,8DAA8D;QAC9D,yEAAyE;QACzE,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACxD,uDAAuD;YACvD,iEAAiE;YACjE,mEAAmE;YACnE,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,GAAG;gBACjD,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,MAAM,CAAC;YACvD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,CAAC,KAAa,EAAQ,EAAE;gBACnC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBACzB,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpD,sCAAsC;gBACtC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC;YACvD,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;YAExE,mEAAmE;YACnE,sEAAsE;YACtE,gEAAgE;YAChE,gEAAgE;YAChE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,IAAiD,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,KAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,wBAAwB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAEjD,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,yDAAyD;YACzD,IAAI,CAAC;gBACH,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,sEAAsE;wBACtE,2DAA2D;wBAC3D,8EAA8E;wBAC9E,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;4BAC9B,GAAG,EAAE,UAAU;4BACf,KAAK,EAAE,YAAY,EAAE;yBACtB,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,wDAAwD;wBACxD,uDAAuD;wBACvD,IAAI,GAAG,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;oBACnC,GAAG,EAAE,UAAU;oBACf,KAAK;oBACL,QAAQ,EAAE,cAAc;iBACzB,CAAC,CAAC;gBACH,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,IAAI,IAAI,IAAI,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtE,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;oBACvC,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,IAAI,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM,CAAC,YAAY;oBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;oBAC/C,UAAU;oBACV,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,EACnE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,yEAAyE;QACzE,qEAAqE;QACrE,0EAA0E;QAC1E,wDAAwD;QACxD,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;YAExE,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9E,CAAC;YACD,gEAAgE;YAChE,+DAA+D;YAC/D,+DAA+D;YAC/D,sDAAsD;YACtD,2CAA2C;YAC3C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,uDAAuD;oBACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,EACnE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,sDAAsD;QACtD,iEAAiE;QACjE,yDAAyD;QACzD,2DAA2D;QAC3D,8DAA8D;QAC9D,kEAAkE;QAClE,2DAA2D;QAC3D,sBAAsB;QAEtB,wEAAwE;QACxE,EAAE;QACF,4DAA4D;QAC5D,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,8DAA8D;QAC9D,iEAAiE;QACjE,wDAAwD;QACxD,8BAA8B;QAC9B,GAAG,CAAC,GAAG,CACL,0BAA0B,EAC1B,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YAC9C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,6DAA6D;gBAC7D,2DAA2D;gBAC3D,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAE1D,MAAM,GAAG,GAA8B;gBACrC,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,UAAU;gBACV,KAAK;gBACL,eAAe;gBACf,aAAa;gBACb,uBAAuB;gBACvB,aAAa;gBACb,iBAAiB;gBACjB,YAAY;aACb,CAAC;YACF,oEAAoE;YACpE,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,CAAC;gBACH,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;oBACvC,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB;wBACjC,CAAC,CAAC,mBAAmB;wBACrB,CAAC,CAAC,kBAAkB,CAAC;oBACvB,sCAAsC;oBACtC,OAAO,CAAC,IAAI,CACV,mCAAmC,MAAM,KAAK,MAAM,EAAE;wBACpD,GAAG,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAC5E,CAAC;oBACF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,sEAAsE;IACtE,mCAAmC;IACnC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,aAAa,CAC3B,OAAO,CAAC,GAAyC,EACjD,IAAI,CAAC,GAAG,CACT,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,GAAG,EAAE,OAAO;YACZ,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO;SAC3B,CAAC,CAAC;QACH,mEAAmE;QACnE,OAAO,MAAiC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC"}

package/server/dist/terminal/scrollback-store.d.ts

@@ -0,0 +1,120 @@
+export type RenameFn = (from: string, to: string) => Promise<void>;
+export interface ScrollbackStoreOpts {
+    /** Cap per-task. 0 = disabled. */
+    maxBytesPerTask: number;
+    /** POSIX file mode for `<taskId>.log`. Ignored on Windows. */
+    fileMode?: number;
+    /** POSIX dir mode for the scrollback directory. Ignored on Windows. */
+    dirMode?: number;
+    /** Multiplier on rotationBuffer cap (×maxBytesPerTask). Default 4. */
+    rotationBufferMultiplier?: number;
+    /** Hook for tests to override fs.rename retry behavior. */
+    renameMaxAttempts?: number;
+    /** Custom rename function — used by tests to simulate Windows EBUSY. */
+    renameFn?: RenameFn;
+    /** Hook for tests to seed the time source (used for sweepExpired). */
+    now?: () => number;
+    /** Hook for tests to control readdir order in sweepExpired. */
+    readdirFn?: (dir: string) => Promise<string[]>;
+}
+export interface SweepOpts {
+    activeTaskIds: Set<string>;
+    maxFilesPerPass?: number;
+}
+export interface SweepResult {
+    deleted: number;
+    remaining: number;
+    errors: number;
+}
+export declare class ScrollbackStoreError extends Error {
+    readonly code: "invalid_task_id" | "rotation_buffer_overflow" | "scrollback_path_outside_dir";
+    constructor(code: "invalid_task_id" | "rotation_buffer_overflow" | "scrollback_path_outside_dir", message: string);
+}
+export declare class ScrollbackStore {
+    readonly dir: string;
+    readonly opts: ScrollbackStoreOpts;
+    private readonly states;
+    private readonly rotationBufferMultiplier;
+    private readonly fileMode;
+    private readonly dirMode;
+    private readonly renameMaxAttempts;
+    private readonly renameFn;
+    private readonly now;
+    private readonly readdirFn;
+    private resolvedDir;
+    constructor(dir: string, opts: ScrollbackStoreOpts);
+    /** Whether persistence is disabled via env var (`SHIPWRIGHT_TERMINAL_SCROLLBACK_MAX_BYTES=0`). */
+    get disabled(): boolean;
+    /** Public init — creates dir + caches resolved path. Idempotent. Call from server bootstrap. */
+    init(): Promise<void>;
+    /**
+     * Append raw pty bytes via fs.appendFileSync. Synchronous (one syscall
+     * sequence per call). May throw ScrollbackStoreError on rotation buffer
+     * overflow or invalid taskId; the caller (pty-manager.onData broadcast)
+     * MUST wrap in try/catch to keep the broadcast loop resilient.
+     *
+     * Returns true if the bytes were either buffered or written, false if
+     * disabled.
+     */
+    append(taskId: string, data: Buffer): boolean;
+    /**
+     * Read the last `maxBytesPerTask` bytes (combines `.log.1` + `.log`
+     * if rotation has happened). Returns "" if no scrollback exists or
+     * disabled. UTF-8-safe via StringDecoder — multi-byte split across
+     * rotation boundary is handled correctly.
+     */
+    read(taskId: string): Promise<string>;
+    /**
+     * Total persisted bytes for a task — sum of `.log` (live) + `.log.1`
+     * (rotated archive). The cached size in PerTaskState reflects ONLY
+     * the live `.log` and resets on rotation, so a callee using `bytes()`
+     * to gate replay-presence UI would otherwise get a false 0 right
+     * after rotation. Phase-3 review fix (HIGH).
+     */
+    bytes(taskId: string): Promise<number>;
+    /**
+     * Delete `.log` + `.log.1`. THROWS on failure (used by user-clear).
+     * Resets per-task state (size cache + rotationBuffer).
+     */
+    clear(taskId: string): Promise<void>;
+    /** Best-effort variant — used by task-delete cascade. Logs warn but does not throw. */
+    clearBestEffort(taskId: string): Promise<void>;
+    /**
+     * "Close stream" semantics — kept for API parity with the WriteStream-based
+     * implementation. Since we use appendFileSync there is no stream to close,
+     * but callers (pty-manager.kill) still call this; we drop the per-task
+     * size cache so subsequent reads pick up disk truth, and we remain
+     * idempotent.
+     */
+    closeStream(taskId: string): Promise<void>;
+    /**
+     * Sweep expired files. Bounded — max `maxFilesPerPass` per call,
+     * oldest-first by mtime. Skips files for active tasks.
+     */
+    sweepExpired(ttlDays: number, sweepOpts: SweepOpts): Promise<SweepResult>;
+    /**
+     * Graceful shutdown — wait for all per-task PQueues to drain.
+     * appendFileSync writes are already synchronous so no flush is
+     * needed; only pending rotation/read/clear operations need to
+     * finish. timeoutMs is a safety cap.
+     */
+    shutdown(timeoutMs?: number): Promise<void>;
+    private validateTaskId;
+    private getOrInitState;
+    private bufferDuringRotation;
+    private taskFilePath;
+    /**
+     * Resolve task file path with realpath-at-op-time. Used for clear / rotate
+     * — defends against mid-runtime symlink swap. Throws scrollback_path_outside_dir
+     * if the resolved target falls outside the scrollback dir.
+     */
+    private resolveTaskFile;
+    /** Idempotent — creates dir + caches resolved path. Throws on dir-creation failure. */
+    ensureDirResolved(): Promise<string>;
+    private scheduleRotation;
+    private rotateLocked;
+    private safeRename;
+    private readLocked;
+    private clearLocked;
+}
+//# sourceMappingURL=scrollback-store.d.ts.map

package/server/dist/terminal/scrollback-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrollback-store.d.ts","sourceRoot":"","sources":["../../src/terminal/scrollback-store.ts"],"names":[],"mappings":"AAgEA,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnE,MAAM,WAAW,mBAAmB;IAClC,kCAAkC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,IAAI,EAChB,iBAAiB,GACjB,0BAA0B,GAC1B,6BAA6B;gBAHjB,IAAI,EAChB,iBAAiB,GACjB,0BAA0B,GAC1B,6BAA6B,EACjC,OAAO,EAAE,MAAM;CAKlB;AA0BD,qBAAa,eAAe;aAYR,GAAG,EAAE,MAAM;aACX,IAAI,EAAE,mBAAmB;IAZ3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,WAAW,CAAuB;gBAGxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,mBAAmB;IAW3C,kGAAkG;IAClG,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,gGAAgG;IAC1F,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAyC7C;;;;;OAKG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ3C;;;;;;OAMG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2B5C;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1C,uFAAuF;IACjF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD;;;;;;OAMG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAahD;;;OAGG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,WAAW,CAAC;IAiFvB;;;;;OAKG;IACG,QAAQ,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/C,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,YAAY;IAIpB;;;;OAIG;YACW,eAAe;IAqB7B,uFAAuF;IACjF,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAO1C,OAAO,CAAC,gBAAgB;YAMV,YAAY;YA8EZ,UAAU;YAkBV,UAAU;YAsCV,WAAW;CAkD1B"}