agent-hitch 0.2.9 → 0.2.10

package/dist/src/inference/model-store.js

@@ -0,0 +1,439 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { chmod, copyFile, lstat, open, readdir, readFile, rename, rm, stat } from "node:fs/promises";
+import path from "node:path";
+import { HitchError, atomicWriteJSON, ensureDir, invalidInput, readJSON, sha256Bytes, sha256JSON, statePaths, withFileLock, } from "../foundation/index.js";
+import { localModelIdentity, parseLocalModelManifest } from "./manifest.js";
+const ALIAS = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+const FORBIDDEN = /(?:^|\/)(?:[^/]+\.(?:bin|pt|pth|pkl|pickle|py|so|dylib|dll))$/i;
+const MAX_FILES = 100_000;
+export async function addLocalModel(options) {
+    return withFileLock(statePaths(options.root).inferenceOperationLocks, "model-store", () => addLocalModelLocked(options));
+}
+/** Persist a manifest only after the caller has verified its content on an explicit model node. */
+export async function addModelManifest(options) {
+    if (!ALIAS.test(options.name))
+        throw invalidInput("model name must use lowercase letters, digits, '.', '_' or '-'");
+    const manifest = parseLocalModelManifest(options.manifest), paths = statePaths(options.root);
+    return withFileLock(paths.inferenceOperationLocks, "model-store", async () => {
+        const directory = path.join(paths.models, manifest.model_id.slice(7));
+        let existing;
+        try {
+            existing = parseLocalModelManifest(await readJSON(path.join(directory, "manifest.json")));
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        if (existing && existing.model_id !== manifest.model_id)
+            throw integrityError("stored model identity differs");
+        await ensureDir(directory);
+        await atomicWriteJSON(path.join(directory, "manifest.json"), existing ?? manifest);
+        await writeAlias(paths.modelAliases, paths.inferenceOperationLocks, options.name, manifest.model_id, options.force === true);
+        return existing ?? manifest;
+    });
+}
+async function addLocalModelLocked(options) {
+    if (!ALIAS.test(options.name))
+        throw invalidInput("model name must use lowercase letters, digits, '.', '_' or '-'");
+    const source = path.resolve(options.directory);
+    const paths = statePaths(options.root);
+    const rootRelative = path.relative(paths.root, source);
+    if (rootRelative === "" || (!rootRelative.startsWith("..") && !path.isAbsolute(rootRelative))) {
+        throw invalidInput("model source directory must be outside HITCH_ROOT");
+    }
+    let sourceStat;
+    try {
+        sourceStat = await stat(source);
+    }
+    catch (error) {
+        throw new HitchError(`local model directory does not exist: ${source}`, { code: "local_model_not_found", exitCode: 2, cause: error });
+    }
+    if (!sourceStat.isDirectory())
+        throw invalidInput("local model source must be a directory");
+    const relativeFiles = await walkModelFiles(source);
+    validateRequiredFiles(relativeFiles);
+    const config = await readModelJSON(path.join(source, "config.json"), "config.json");
+    rejectDynamicModelCode(config);
+    validateSafetensorsIndex(source, relativeFiles, await optionalModelJSON(path.join(source, "model.safetensors.index.json")));
+    for (const relative of relativeFiles.filter((file) => file.endsWith(".safetensors"))) {
+        await validateSafetensorsFile(path.join(source, ...relative.split("/")), relative);
+    }
+    await ensureDir(paths.modelFiles);
+    const files = [];
+    for (const relative of relativeFiles)
+        files.push(await importFile(paths.modelFiles, source, relative));
+    const tokenizerFiles = files.filter((file) => /(?:^|\/)(?:tokenizer|special_tokens_map|added_tokens|tokenizer_config)(?:\.|$)/.test(file.path));
+    const template = await discoverTemplate(source, relativeFiles);
+    const quantization = modelQuantization(config);
+    const identityInput = {
+        schema_version: "1",
+        format: "hf-safetensors",
+        files,
+        architecture: firstString(config.architectures) || "unknown",
+        model_type: stringValue(config.model_type) || "unknown",
+        dtype: stringValue(config.torch_dtype) || stringValue(config.dtype) || "unknown",
+        quantization,
+        context_tokens: positiveIntegerValue(config.max_position_embeddings),
+        tokenizer_digest: sha256JSON(tokenizerFiles.map(({ path: filePath, sha256 }) => ({ path: filePath, sha256 }))),
+        template_digest: template === null ? null : sha256Bytes(template),
+    };
+    const manifest = {
+        ...identityInput,
+        model_id: localModelIdentity(identityInput),
+        source: {
+            kind: "local-directory",
+            label: path.basename(source),
+            license: stringValue(config.license),
+        },
+        created_at: new Date().toISOString(),
+    };
+    const modelDirectory = path.join(paths.models, manifest.model_id.slice("sha256:".length));
+    await ensureDir(modelDirectory);
+    await atomicWriteJSON(path.join(modelDirectory, "manifest.json"), manifest);
+    await writeAlias(paths.modelAliases, paths.inferenceOperationLocks, options.name, manifest.model_id, options.force === true);
+    return manifest;
+}
+export async function gcLocalModels(root, apply = false) {
+    const paths = statePaths(root);
+    return withFileLock(paths.inferenceOperationLocks, "model-store", async () => {
+        const aliases = await loadAliasIndex(paths.modelAliases);
+        const referenced = new Set(Object.values(aliases.aliases));
+        await collectLockedModelIds(paths.inferenceLocks, referenced);
+        const manifests = await listStoredModels(paths.models);
+        const removed = manifests.filter((manifest) => !referenced.has(manifest.model_id));
+        const keptFiles = new Set(manifests.filter((manifest) => referenced.has(manifest.model_id))
+            .flatMap((manifest) => manifest.files.map((file) => file.sha256)));
+        const files = new Map();
+        for (const manifest of removed)
+            for (const file of manifest.files) {
+                if (!keptFiles.has(file.sha256))
+                    files.set(file.sha256, file.size);
+            }
+        if (apply) {
+            for (const manifest of removed) {
+                await rm(path.join(paths.models, manifest.model_id.slice("sha256:".length)), { recursive: true, force: true });
+            }
+            for (const digest of files.keys())
+                await rm(path.join(paths.modelFiles, digest.slice("sha256:".length)), { force: true });
+        }
+        return {
+            schema_version: "1",
+            applied: apply,
+            models: removed.map((manifest) => manifest.model_id).sort(),
+            files: [...files.keys()].sort(),
+            reclaimed_bytes: [...files.values()].reduce((total, size) => total + size, 0),
+        };
+    });
+}
+async function collectLockedModelIds(directory, referenced) {
+    let entries;
+    try {
+        entries = await readdir(directory, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return;
+        throw error;
+    }
+    for (const entry of entries) {
+        if (!entry.isDirectory() || !/^[a-f0-9]{64}$/.test(entry.name))
+            continue;
+        const value = await readJSON(path.join(directory, entry.name, "lock.json"));
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw integrityError("inference lock index is invalid");
+        const record = value;
+        if (record.inference_id !== `sha256:${entry.name}` || typeof record.model_id !== "string" || !/^sha256:[a-f0-9]{64}$/.test(record.model_id)) {
+            throw integrityError("inference lock index is invalid");
+        }
+        referenced.add(record.model_id);
+    }
+}
+async function listStoredModels(directory) {
+    let entries;
+    try {
+        entries = await readdir(directory, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    const manifests = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory() || !/^[a-f0-9]{64}$/.test(entry.name))
+            continue;
+        const manifest = parseLocalModelManifest(await readJSON(path.join(directory, entry.name, "manifest.json")));
+        if (manifest.model_id !== `sha256:${entry.name}`)
+            throw integrityError("model directory identity is invalid");
+        manifests.push(manifest);
+    }
+    return manifests;
+}
+export async function resolveLocalModel(root, reference) {
+    const paths = statePaths(root);
+    let modelId;
+    if (/^local\/sha256:[a-f0-9]{64}$/.test(reference)) {
+        modelId = reference.slice("local/".length);
+    }
+    else {
+        const match = reference.match(/^local\/([a-z0-9][a-z0-9._-]{0,63})$/);
+        if (!match)
+            throw invalidInput("local model must be local/<name> or local/sha256:<digest>");
+        const index = await loadAliasIndex(paths.modelAliases);
+        const resolved = index.aliases[match[1]];
+        if (!resolved)
+            throw new HitchError(`local model is not registered: ${reference}`, { code: "local_model_not_found", exitCode: 2 });
+        modelId = resolved;
+    }
+    try {
+        return parseLocalModelManifest(await readJSON(path.join(paths.models, modelId.slice("sha256:".length), "manifest.json")));
+    }
+    catch (error) {
+        if (error instanceof HitchError)
+            throw error;
+        throw new HitchError(`local model manifest is unavailable or invalid: ${modelId}`, {
+            code: "local_model_integrity_failed", exitCode: 5, cause: error,
+        });
+    }
+}
+export async function verifyLocalModel(root, manifest) {
+    const paths = statePaths(root);
+    for (const file of manifest.files) {
+        const stored = path.join(paths.modelFiles, file.sha256.slice("sha256:".length));
+        let fileStat;
+        try {
+            fileStat = await stat(stored);
+        }
+        catch (error) {
+            throw integrityError(`model content is missing: ${file.path}`, error);
+        }
+        if (!fileStat.isFile() || fileStat.size !== file.size || await hashFile(stored) !== file.sha256) {
+            throw integrityError(`model content failed verification: ${file.path}`);
+        }
+    }
+}
+async function walkModelFiles(root, relative = "") {
+    const directory = path.join(root, relative);
+    const entries = await readdir(directory, { withFileTypes: true });
+    const result = [];
+    for (const entry of entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
+        const candidate = relative ? `${relative}/${entry.name}` : entry.name;
+        if (entry.isSymbolicLink())
+            throw invalidInput(`model directory contains a symbolic link: ${candidate}`);
+        if (entry.isDirectory())
+            result.push(...await walkModelFiles(root, candidate));
+        else if (entry.isFile()) {
+            if (FORBIDDEN.test(candidate))
+                throw invalidInput(`model directory contains an unsafe executable or pickle file: ${candidate}`);
+            result.push(candidate);
+        }
+        else
+            throw invalidInput(`model directory contains a non-regular entry: ${candidate}`);
+        if (result.length > MAX_FILES)
+            throw invalidInput(`model directory exceeds ${MAX_FILES} files`);
+    }
+    return result;
+}
+function validateRequiredFiles(files) {
+    if (!files.includes("config.json"))
+        throw invalidInput("model directory must contain config.json");
+    if (!files.some((file) => file.endsWith(".safetensors")))
+        throw invalidInput("model directory must contain safetensors weights");
+    if (!files.some((file) => /^(?:.*\/)?tokenizer(?:\.json|\.model)$/.test(file))) {
+        throw invalidInput("model directory must contain tokenizer.json or tokenizer.model");
+    }
+}
+async function importFile(store, sourceRoot, relative) {
+    const source = path.join(sourceRoot, ...relative.split("/"));
+    const before = await lstat(source);
+    if (!before.isFile())
+        throw invalidInput(`model entry changed during import: ${relative}`);
+    const temporary = path.join(store, `.import-${process.pid}-${Date.now()}-${createHash("sha256").update(relative).digest("hex").slice(0, 12)}`);
+    try {
+        await copyFile(source, temporary);
+        const copied = await stat(temporary);
+        const fileDigest = await hashFile(temporary);
+        const after = await lstat(source);
+        if (!after.isFile() || before.dev !== after.dev || before.ino !== after.ino || before.size !== after.size
+            || before.mtimeMs !== after.mtimeMs || copied.size !== after.size) {
+            throw new HitchError(`model source changed during import: ${relative}`, { code: "local_model_integrity_failed", exitCode: 5 });
+        }
+        const target = path.join(store, fileDigest.slice("sha256:".length));
+        try {
+            const existing = await stat(target);
+            if (!existing.isFile() || existing.size !== copied.size || await hashFile(target) !== fileDigest) {
+                throw integrityError(`existing model CAS object is corrupt: ${fileDigest}`);
+            }
+            await rm(temporary, { force: true });
+        }
+        catch (error) {
+            if (error?.code !== "ENOENT")
+                throw error;
+            await rename(temporary, target);
+            await chmod(target, 0o444);
+        }
+        return { path: relative, size: copied.size, sha256: fileDigest };
+    }
+    finally {
+        await rm(temporary, { force: true }).catch(() => { });
+    }
+}
+async function hashFile(file) {
+    const hash = createHash("sha256");
+    await new Promise((resolve, reject) => {
+        const stream = createReadStream(file);
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.once("error", reject);
+        stream.once("end", resolve);
+    });
+    return `sha256:${hash.digest("hex")}`;
+}
+async function writeAlias(file, locks, name, modelId, force) {
+    await withFileLock(locks, "model-alias-index", async () => {
+        const index = await loadAliasIndex(file);
+        const current = index.aliases[name];
+        if (current && current !== modelId && !force)
+            throw invalidInput(`model name already refers to ${current}; use --force to replace it`);
+        await atomicWriteJSON(file, { schema_version: "1", aliases: { ...index.aliases, [name]: modelId } });
+    });
+}
+async function loadAliasIndex(file) {
+    const value = await readJSON(file, { schema_version: "1", aliases: {} });
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw integrityError("model alias index is invalid");
+    const record = value;
+    if (record.schema_version !== "1" || !record.aliases || typeof record.aliases !== "object" || Array.isArray(record.aliases)) {
+        throw integrityError("model alias index is invalid");
+    }
+    const aliases = {};
+    for (const [name, modelId] of Object.entries(record.aliases)) {
+        if (!ALIAS.test(name) || typeof modelId !== "string" || !/^sha256:[a-f0-9]{64}$/.test(modelId)) {
+            throw integrityError("model alias index contains an invalid entry");
+        }
+        aliases[name] = modelId;
+    }
+    return { schema_version: "1", aliases };
+}
+async function readModelJSON(file, label) {
+    let value;
+    try {
+        value = JSON.parse(await readFile(file, "utf8"));
+    }
+    catch (error) {
+        throw invalidInput(`${label} is not valid JSON`, { cause: error });
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw invalidInput(`${label} must contain a JSON object`);
+    return value;
+}
+async function optionalModelJSON(file) {
+    try {
+        return await readModelJSON(file, path.basename(file));
+    }
+    catch (error) {
+        if (error?.code === "ENOENT" || error.cause && error.cause.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+function rejectDynamicModelCode(config) {
+    if (config.auto_map !== undefined || config.trust_remote_code === true) {
+        throw invalidInput("models requiring trust_remote_code or auto_map are not supported");
+    }
+}
+function validateSafetensorsIndex(source, files, index) {
+    if (!index)
+        return;
+    const weights = index.weight_map;
+    if (!weights || typeof weights !== "object" || Array.isArray(weights))
+        throw invalidInput("safetensors index weight_map is invalid");
+    for (const target of Object.values(weights)) {
+        if (typeof target !== "string" || !target.endsWith(".safetensors") || target.includes("\\") || path.isAbsolute(target)
+            || target.split("/").some((part) => !part || part === "." || part === "..") || !files.includes(target)) {
+            throw invalidInput("safetensors index references a missing or unsafe shard");
+        }
+        if (!path.resolve(source, target).startsWith(`${source}${path.sep}`))
+            throw invalidInput("safetensors index escapes the model directory");
+    }
+}
+async function validateSafetensorsFile(file, label) {
+    const handle = await open(file, "r");
+    try {
+        const fileStat = await handle.stat();
+        if (!fileStat.isFile() || fileStat.size < 11)
+            throw invalidInput(`safetensors file is truncated: ${label}`);
+        const prefix = Buffer.alloc(8);
+        if ((await handle.read(prefix, 0, prefix.length, 0)).bytesRead !== prefix.length)
+            throw invalidInput(`safetensors header is truncated: ${label}`);
+        const headerLength = prefix.readBigUInt64LE();
+        if (headerLength < 2n || headerLength > 100n * 1024n * 1024n || headerLength > BigInt(fileStat.size - 8)) {
+            throw invalidInput(`safetensors header length is invalid: ${label}`);
+        }
+        const header = Buffer.alloc(Number(headerLength));
+        if ((await handle.read(header, 0, header.length, 8)).bytesRead !== header.length)
+            throw invalidInput(`safetensors header is truncated: ${label}`);
+        let value;
+        try {
+            value = JSON.parse(header.toString("utf8").trimEnd());
+        }
+        catch (error) {
+            throw invalidInput(`safetensors header is not valid JSON: ${label}`, { cause: error });
+        }
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw invalidInput(`safetensors header must be an object: ${label}`);
+        const dataBytes = fileStat.size - 8 - header.length;
+        let tensors = 0;
+        for (const [name, descriptor] of Object.entries(value)) {
+            if (name === "__metadata__") {
+                if (!descriptor || typeof descriptor !== "object" || Array.isArray(descriptor))
+                    throw invalidInput(`safetensors metadata is invalid: ${label}`);
+                continue;
+            }
+            tensors += 1;
+            if (!descriptor || typeof descriptor !== "object" || Array.isArray(descriptor))
+                throw invalidInput(`safetensors tensor descriptor is invalid: ${label}`);
+            const record = descriptor;
+            if (typeof record.dtype !== "string" || !record.dtype || !Array.isArray(record.shape)
+                || record.shape.some((dimension) => !Number.isSafeInteger(dimension) || dimension < 0)
+                || !Array.isArray(record.data_offsets) || record.data_offsets.length !== 2
+                || record.data_offsets.some((offset) => !Number.isSafeInteger(offset) || offset < 0)
+                || record.data_offsets[0] > record.data_offsets[1]
+                || record.data_offsets[1] > dataBytes) {
+                throw invalidInput(`safetensors tensor descriptor is invalid: ${label}`);
+            }
+        }
+        if (tensors === 0)
+            throw invalidInput(`safetensors file contains no tensors: ${label}`);
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function discoverTemplate(source, files) {
+    if (files.includes("chat_template.jinja"))
+        return readFile(path.join(source, "chat_template.jinja"), "utf8");
+    if (!files.includes("tokenizer_config.json"))
+        return null;
+    const config = await readModelJSON(path.join(source, "tokenizer_config.json"), "tokenizer_config.json");
+    return typeof config.chat_template === "string" ? config.chat_template : null;
+}
+function modelQuantization(config) {
+    const quantization = config.quantization_config;
+    if (!quantization || typeof quantization !== "object" || Array.isArray(quantization))
+        return null;
+    return stringValue(quantization.quant_method);
+}
+function firstString(value) {
+    return Array.isArray(value) && typeof value[0] === "string" && value[0] ? value[0] : null;
+}
+function stringValue(value) {
+    return typeof value === "string" && value.trim() ? value : null;
+}
+function positiveIntegerValue(value) {
+    return Number.isSafeInteger(value) && value > 0 ? value : null;
+}
+function integrityError(message, cause) {
+    return new HitchError(message, { code: "local_model_integrity_failed", exitCode: 5, cause });
+}
+//# sourceMappingURL=model-store.js.map

package/dist/src/inference/model-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-store.js","sourceRoot":"","sources":["../../../src/inference/model-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAS,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,UAAU,EACV,eAAe,EACf,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,UAAU,EACV,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE5E,MAAM,KAAK,GAAG,6BAA6B,CAAC;AAC5C,MAAM,SAAS,GAAG,gEAAgE,CAAC;AACnF,MAAM,SAAS,GAAG,OAAO,CAAC;AAc1B,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,OAAO,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwF;IAC7H,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,gEAAgE,CAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7F,OAAO,YAAY,CAAC,KAAK,CAAC,uBAAuB,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,QAA0C,CAAC;QAC/C,IAAI,CAAC;YAAC,QAAQ,GAAG,uBAAuB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAClG,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACtF,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YAAE,MAAM,cAAc,CAAC,+BAA+B,CAAC,CAAC;QAC/G,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,QAAQ,IAAI,QAAQ,CAAC,CAAC;QACnF,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAC7H,OAAO,QAAQ,IAAI,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA6B;IAC9D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,gEAAgE,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,YAAY,KAAK,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,YAAY,CAAC,mDAAmD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QAAC,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,UAAU,CAAC,yCAAyC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QAAE,MAAM,YAAY,CAAC,wCAAwC,CAAC,CAAC;IAE5F,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;IACpF,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,wBAAwB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,QAAQ,IAAI,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvG,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gFAAgF,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG;QACpB,cAAc,EAAE,GAAY;QAC5B,MAAM,EAAE,gBAAyB;QACjC,KAAK;QACL,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;QAC5D,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,SAAS;QACvD,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS;QAChF,YAAY;QACZ,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC,uBAAuB,CAAC;QACpE,gBAAgB,EAAE,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9G,eAAe,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;KAClE,CAAC;IACF,MAAM,QAAQ,GAAyB;QACrC,GAAG,aAAa;QAChB,QAAQ,EAAE,kBAAkB,CAAC,aAAa,CAAC;QAC3C,MAAM,EAAE;YACN,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;SACrC;QACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC;IAChC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5E,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC7H,OAAO,QAAQ,CAAC;AAClB,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,YAAY,CAAC,KAAK,CAAC,uBAAuB,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,MAAM,qBAAqB,CAAC,KAAK,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACxF,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,KAAK,MAAM,QAAQ,IAAI,OAAO;YAAE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjH,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;gBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO;YACL,cAAc,EAAE,GAAG;YACnB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;YAC3D,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC/B,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC;SAC9E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,UAAuB;IAC7E,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClF,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,cAAc,CAAC,iCAAiC,CAAC,CAAC;QACzH,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,KAAK,CAAC,IAAI,EAAE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5I,MAAM,cAAc,CAAC,iCAAiC,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAkB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClF,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5G,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,cAAc,CAAC,qCAAqC,CAAC,CAAC;QAC9G,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAiB;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAW,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,YAAY,CAAC,2DAA2D,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACnI,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5H,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU;YAAE,MAAM,KAAK,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,mDAAmD,OAAO,EAAE,EAAE;YACjF,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAA8B;IACjF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChF,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACpD,MAAM,cAAc,CAAC,6BAA6B,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChG,MAAM,cAAc,CAAC,sCAAsC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,QAAQ,GAAG,EAAE;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACtE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,YAAY,CAAC,6CAA6C,SAAS,EAAE,CAAC,CAAC;QACzG,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;aAC1E,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACxB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,MAAM,YAAY,CAAC,iEAAiE,SAAS,EAAE,CAAC,CAAC;YAChI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;;YAAM,MAAM,YAAY,CAAC,iDAAiD,SAAS,EAAE,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,YAAY,CAAC,2BAA2B,SAAS,QAAQ,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAe;IAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,MAAM,YAAY,CAAC,0CAA0C,CAAC,CAAC;IACnG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAAE,MAAM,YAAY,CAAC,kDAAkD,CAAC,CAAC;IACjI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,YAAY,CAAC,gEAAgE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,UAAkB,EAAE,QAAgB;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,YAAY,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/I,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eACpG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACpE,MAAM,IAAI,UAAU,CAAC,uCAAuC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBACjG,MAAM,cAAc,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACrE,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,KAAc;IAClG,MAAM,YAAY,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK;YAAE,MAAM,YAAY,CAAC,gCAAgC,OAAO,6BAA6B,CAAC,CAAC;QACvI,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAU,IAAI,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,cAAc,CAAC,8BAA8B,CAAC,CAAC;IACtH,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,cAAc,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5H,MAAM,cAAc,CAAC,8BAA8B,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAkC,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/F,MAAM,cAAc,CAAC,6CAA6C,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,OAAiB,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACvE,MAAM,YAAY,CAAC,GAAG,KAAK,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC3H,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QAAC,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC5E,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ,IAAK,KAAe,CAAC,KAAK,IAAM,KAAe,CAAC,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACtK,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA+B;IAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACvE,MAAM,YAAY,CAAC,kEAAkE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc,EAAE,KAAe,EAAE,KAAqC;IACtG,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,YAAY,CAAC,yCAAyC,CAAC,CAAC;IACrI,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAkC,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;eACjH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzG,MAAM,YAAY,CAAC,wDAAwD,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAAE,MAAM,YAAY,CAAC,+CAA+C,CAAC,CAAC;IAC5I,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,KAAa;IAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,EAAE;YAAE,MAAM,YAAY,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,YAAY,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;QAClJ,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QAC9C,IAAI,YAAY,GAAG,EAAE,IAAI,YAAY,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,IAAI,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;YACzG,MAAM,YAAY,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,YAAY,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;QAClJ,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAC5E,MAAM,YAAY,CAAC,yCAAyC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,YAAY,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QACtI,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACpD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAClF,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5B,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;oBAAE,MAAM,YAAY,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;gBAChJ,SAAS;YACX,CAAC;YACD,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,MAAM,YAAY,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;YACzJ,MAAM,MAAM,GAAG,UAAqC,CAAC;YACrD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;mBAChF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAK,SAAoB,GAAG,CAAC,CAAC;mBAC/F,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;mBACvE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAK,MAAiB,GAAG,CAAC,CAAC;mBAC5F,MAAM,CAAC,YAAY,CAAC,CAAC,CAAY,GAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAY;mBACtE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAY,GAAG,SAAS,EAAE,CAAC;gBACpD,MAAM,YAAY,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,CAAC;YAAE,MAAM,YAAY,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAe;IAC7D,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7G,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACxG,OAAO,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA+B;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAChD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAClG,OAAO,WAAW,CAAE,YAAwC,CAAC,YAAY,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,KAAe;IACtD,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/src/inference/node-client.js

@@ -0,0 +1,167 @@
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { createReadStream } from "node:fs";
+import path from "node:path";
+import { lstat, mkdir } from "node:fs/promises";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { HitchError, atomicWriteJSON, hitchRootId, readJSON, runCommand, sha256JSON, statePaths, withFileLock } from "../foundation/index.js";
+import { verifyLocalModel } from "./model-store.js";
+import { modelNodeSnapshot } from "./model-location.js";
+import { parseLocalModelManifest } from "./manifest.js";
+const quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+/** Gear node protocol v2. Model bytes use separate bounded-header binary CAS. */
+export class PythonInferenceNodeClient {
+    connection;
+    node;
+    env;
+    constructor(connection, node, env = process.env) {
+        this.connection = connection;
+        this.node = node;
+        this.env = env;
+        if (!connection.python.length || connection.python.some(arg => typeof arg !== "string" || !arg || arg.includes("\0"))
+            || !path.posix.isAbsolute(connection.configPath) || !node.nodeId || !node.generation
+            || [connection.gateway.localPort, connection.gateway.nodePort].some(port => !Number.isInteger(port) || port < 1 || port > 65535)
+            || (connection.transport.type === "ssh" && !/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(connection.transport.host))) {
+            throw new TypeError("invalid explicit model-node connection");
+        }
+    }
+    command(action) {
+        const command = [...this.connection.python, "-m", "gear_training.node", action, "--config", this.connection.configPath];
+        return this.connection.transport.type === "local" ? command
+            : ["ssh", "-T", "-o", "BatchMode=yes", "-o", "ConnectTimeout=15", "--", this.connection.transport.host, command.map(quote).join(" ")];
+    }
+    envelope(operation, payload) {
+        return { schemaVersion: 2, requestId: randomUUID(), node: this.node, operation, inputDigest: sha256JSON(payload), payload };
+    }
+    response(value, envelope) {
+        const data = value;
+        if (!data || data.schemaVersion !== 2 || data.requestId !== envelope.requestId || data.inputDigest !== envelope.inputDigest
+            || sha256JSON(data.node ?? null) !== sha256JSON(this.node) || !("result" in data)) {
+            throw new HitchError("model-node reply identity or generation changed", { code: "inference_runtime_mismatch", exitCode: 12 });
+        }
+        return data.result;
+    }
+    async exchange(action, envelope, file) {
+        const command = this.command(action);
+        const child = spawn(command[0], command.slice(1), { env: this.env, stdio: ["pipe", "pipe", "pipe"] });
+        child.stderr.resume();
+        child.stdin.on("error", () => { });
+        const timer = setTimeout(() => child.kill("SIGKILL"), file ? 3_600_000 : 120_000);
+        const completed = new Promise((resolve, reject) => {
+            child.once("error", reject);
+            child.once("close", resolve);
+        });
+        void completed.catch(() => { });
+        let output = "";
+        let length = 0;
+        const read = async () => {
+            for await (const chunk of child.stdout) {
+                length += chunk.byteLength;
+                if (length > 4 * 1024 * 1024)
+                    throw new TypeError("model-node response exceeds control protocol limit");
+                output += chunk.toString();
+            }
+        };
+        async function* input() { yield Buffer.from(JSON.stringify(envelope) + "\n"); if (file)
+            yield* createReadStream(file); }
+        try {
+            const [, , code] = await Promise.all([pipeline(Readable.from(input()), child.stdin), read(), completed]);
+            if (code !== 0) {
+                let reason = "transport-failed";
+                try {
+                    const parsed = JSON.parse(output);
+                    if (/^[a-z][a-z0-9_-]{0,100}$/.test(parsed.error?.code))
+                        reason = parsed.error.code;
+                }
+                catch { }
+                throw new HitchError(`model-node ${envelope.operation} failed (${reason}); resource ownership remains unresolved`, { code: "inference_route_unavailable", exitCode: 12 });
+            }
+            return this.response(JSON.parse(output), envelope);
+        }
+        finally {
+            clearTimeout(timer);
+            if (child.exitCode === null)
+                child.kill("SIGKILL");
+        }
+    }
+    async call(operation, payload) { return this.exchange("rpc", this.envelope(operation, payload)); }
+    payload(input) {
+        return { serviceId: input.serviceId, ownerId: hitchRootId(input.root), model: input.model, runtime: input.runtime, lock: input.lock };
+    }
+    async prepare(input) {
+        const snapshotRef = input.lock.model_node ? await modelNodeSnapshot(input.root, input.model, input.lock.model_node) : null;
+        if (snapshotRef) {
+            const observed = parseLocalModelManifest(await this.call("cas.hfManifest", { snapshotRef }));
+            if (observed.model_id !== input.model.model_id)
+                throw new TypeError("model-node content differs from its registered model");
+            await this.call("inference.prepare", this.payload(input));
+            return;
+        }
+        await verifyLocalModel(input.root, input.model);
+        for (const file of input.model.files) {
+            const state = await this.call("cas.stat", { digest: file.sha256 });
+            if (state.present && state.size === file.size)
+                continue;
+            if (state.present)
+                throw new TypeError("model-node object size differs from the model manifest");
+            const result = await this.exchange("cas-import", this.envelope("cas.import", { digest: file.sha256, size: file.size }), path.join(statePaths(input.root).modelFiles, file.sha256.slice(7)));
+            if (!result.present || result.size !== file.size)
+                throw new TypeError("node did not acknowledge durable model import");
+        }
+        await this.call("inference.prepare", this.payload(input));
+    }
+    start(input) { return this.call("inference.start", this.payload(input)); }
+    inspect(owner) { return this.call("inference.inspect", owner); }
+    attach(input) {
+        const original = { serviceId: input.record.service_id, ownerId: hitchRootId(input.root), model: input.model, runtime: input.runtime, lock: input.lock };
+        return this.call("inference.attach", { serviceId: original.serviceId, ownerId: original.ownerId,
+            inferenceId: input.lock.inference_id, inputDigest: sha256JSON(original), expectedHandle: input.record.service_handle });
+    }
+    stop(owner) { return this.call("inference.stop", owner); }
+    async route(root, nodePort) {
+        const { gateway, transport } = this.connection;
+        if (nodePort !== gateway.nodePort || (transport.type === "local" && gateway.localPort !== gateway.nodePort)) {
+            throw new TypeError("model-node service port differs from its configured route");
+        }
+        if (transport.type === "ssh") {
+            const directory = statePaths(root).inferenceOperationLocks;
+            const identity = sha256JSON({ node: this.node, connection: this.connection });
+            // Short absolute socket paths fit the Unix-domain limit on macOS/Linux.
+            const socketDirectory = path.join("/tmp", `hitch-node-${process.getuid?.() ?? "user"}-${hitchRootId(root).slice(-12)}`);
+            await mkdir(socketDirectory, { mode: 0o700, recursive: true });
+            const permissions = await lstat(socketDirectory);
+            if (!permissions.isDirectory() || permissions.isSymbolicLink() || (permissions.mode & 0o077) !== 0
+                || (process.getuid && permissions.uid !== process.getuid()))
+                throw new TypeError("model-node SSH socket directory is not private");
+            const socket = path.join(socketDirectory, `${identity.slice(-20)}.sock`);
+            const recordPath = path.join(directory, identity.slice(7) + ".tunnel.json");
+            await withFileLock(directory, identity.slice(7), async () => {
+                let prior;
+                try {
+                    prior = await readJSON(recordPath);
+                }
+                catch (error) {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                }
+                if (prior && prior.identity !== identity)
+                    throw new TypeError("model-node tunnel ownership changed");
+                const invoke = (args) => runCommand("ssh", args, { env: this.env, timeoutMs: 30_000, failureCode: "inference_route_unavailable", failureExitCode: 12 });
+                const common = ["-S", socket, "-o", "BatchMode=yes", "-o", "ConnectTimeout=15"];
+                if (prior) {
+                    try {
+                        await invoke([...common, "-O", "check", "--", transport.host]);
+                        return;
+                    }
+                    catch { }
+                }
+                await atomicWriteJSON(recordPath, { identity, node: this.node, connection: this.connection });
+                await invoke([...common, "-M", "-fNT", "-o", "ExitOnForwardFailure=yes", "-o", "ServerAliveInterval=15", "-o", "ServerAliveCountMax=3",
+                    "-L", `127.0.0.1:${gateway.localPort}:127.0.0.1:${gateway.nodePort}`, "--", transport.host]);
+            });
+        }
+        return `http://127.0.0.1:${gateway.localPort}`;
+    }
+}
+//# sourceMappingURL=node-client.js.map