cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/managed-service-runtime-process.js

@@ -0,0 +1,188 @@
+import { constants } from 'node:fs';
+import { access, chmod, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
+import { assertManagedServiceEnvironmentBindings, readManagedRuntimeResource, resolveManagedRuntimeResource, } from './managed-service-runtime-files.js';
+import { managedServiceGenerationDirectory } from './managed-service-process.js';
+import { readManagedContainedFile, readManagedResponseBody, setManagedPointer, } from './managed-service-runtime-support.js';
+const MAX_HEALTH_BODY_BYTES = 64 * 1024;
+const MAX_PORT_FILE_BYTES = 32;
+export class ManagedServiceRuntimeProcess {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async writeConfiguration(record) {
+        const configuration = record.definition.configuration;
+        if (configuration === undefined)
+            return undefined;
+        const templatePath = await resolveManagedRuntimeResource(record, configuration.template, 'data');
+        const source = await readFile(templatePath, 'utf8');
+        const value = configuration.format === 'json' ? JSON.parse(source) : parseYaml(source);
+        for (const binding of record.definition.protectedBindings) {
+            if (binding.target !== 'configuration' || binding.source === 'composition')
+                continue;
+            const resolved = binding.source === 'host-assigned-loopback'
+                ? this.serializeAssignedLoopback(record, binding.serialization)
+                : record.secrets.get(binding.slot);
+            if (resolved === undefined)
+                throw new Error('managed service configuration binding is missing');
+            setManagedPointer(value, binding.pointer, resolved);
+        }
+        for (const binding of record.selectedMaterialization?.values ?? []) {
+            if (binding.pointer !== undefined)
+                setManagedPointer(value, binding.pointer, binding.value);
+        }
+        const directory = managedServiceGenerationDirectory(record.serviceHome, record.binding.serviceGeneration);
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+        if (process.platform !== 'win32')
+            await chmod(directory, 0o700);
+        const file = path.join(directory, configuration.format === 'json' ? 'config.json' : 'config.yaml');
+        const bytes = configuration.format === 'json' ? `${JSON.stringify(value, null, 2)}\n` : stringifyYaml(value);
+        await writeFile(file, bytes, { mode: 0o600 });
+        return file;
+    }
+    async discoverExisting(record, signal) {
+        let port;
+        if (record.definition.discovery.kind === 'fixed-loopback')
+            port = record.definition.discovery.port;
+        if (record.definition.discovery.kind === 'restricted-port-file')
+            port = await this.readRestrictedPort(record);
+        if (port === undefined)
+            return undefined;
+        const origin = `http://127.0.0.1:${port}`;
+        return await this.healthy(record, origin, signal).catch(() => false) ? origin : undefined;
+    }
+    async launch(record, configurationPath, signal) {
+        assertManagedServiceEnvironmentBindings(record);
+        const port = record.definition.discovery.kind === 'host-assigned-loopback'
+            ? record.assignedPort
+            : record.definition.discovery.kind === 'fixed-loopback'
+                ? record.definition.discovery.port
+                : undefined;
+        const executable = await this.resolveExecutable(record, record.definition.launch.executable);
+        const arguments_ = record.definition.launch.arguments.map(argument => {
+            if (typeof argument === 'string')
+                return argument;
+            if (port === undefined)
+                throw new Error('managed service port is not assigned');
+            if (argument.serialization === 'port')
+                return String(port);
+            if (argument.serialization === 'authority')
+                return `127.0.0.1:${port}`;
+            return `http://127.0.0.1:${port}`;
+        });
+        if (configurationPath !== undefined && record.definition.configuration !== undefined) {
+            arguments_.push(record.definition.configuration.delivery.argument, configurationPath);
+        }
+        for (const binding of record.definition.protectedBindings) {
+            if (binding.target !== 'environment')
+                continue;
+            const value = record.secrets.get(binding.slot);
+            if (typeof value !== 'string')
+                throw new Error('managed service environment binding must be a string');
+            record.environment[binding.variable] = value;
+        }
+        const child = this.options.spawn(executable, arguments_, {
+            cwd: record.access.artifactDirectory,
+            env: record.environment,
+            stdio: 'ignore',
+            detached: process.platform !== 'win32',
+        });
+        record.child = child;
+        let childError;
+        child.on('error', error => {
+            childError = error;
+            this.options.invalidateExitedChild(record, child);
+        });
+        child.once('exit', () => this.options.invalidateExitedChild(record, child));
+        const deadline = Date.now() + record.definition.launch.startupTimeoutMs;
+        while (Date.now() < deadline) {
+            this.assertActive(record, signal);
+            if (childError !== undefined)
+                throw childError;
+            if (child.exitCode !== null || child.signalCode !== null)
+                throw new Error('managed service exited during startup');
+            const discoveredPort = port ?? await this.readRestrictedPort(record);
+            if (discoveredPort !== undefined) {
+                const origin = `http://127.0.0.1:${discoveredPort}`;
+                if (await this.healthy(record, origin, signal).catch(() => false)) {
+                    this.assertActive(record, signal);
+                    if (childError !== undefined || record.child !== child) {
+                        throw childError ?? new Error('managed service exited');
+                    }
+                    return origin;
+                }
+            }
+            await new Promise(resolve => setTimeout(resolve, Math.min(50, Math.max(1, deadline - Date.now()))));
+        }
+        throw new Error('managed service startup timed out');
+    }
+    async resolveExecutable(record, executable) {
+        if (executable.kind === 'named-command')
+            return executable.command;
+        const file = await resolveManagedRuntimeResource(record, executable.path, 'executable');
+        await access(file, process.platform === 'win32' ? constants.F_OK : constants.X_OK);
+        return file;
+    }
+    async healthy(record, origin, signal) {
+        const timeout = AbortSignal.timeout(record.definition.health.timeoutMs);
+        const response = await this.options.fetch(new URL(record.definition.health.path, origin), {
+            method: 'GET',
+            headers: this.authorizationHeaders(record),
+            signal: signal === undefined ? timeout : AbortSignal.any([signal, timeout]),
+        });
+        const healthy = response.ok;
+        await readManagedResponseBody(response, MAX_HEALTH_BODY_BYTES);
+        return healthy;
+    }
+    async ensureServiceHome(record) {
+        await mkdir(record.serviceHome, { recursive: true, mode: 0o700 });
+        if (process.platform !== 'win32')
+            await chmod(record.serviceHome, 0o700);
+    }
+    async removeGenerationDirectory(record) {
+        const directory = managedServiceGenerationDirectory(record.serviceHome, record.binding.serviceGeneration);
+        await rm(directory, { recursive: true, force: true });
+    }
+    serializeAssignedLoopback(record, serialization) {
+        const port = record.assignedPort;
+        if (port === undefined)
+            throw new Error('managed service loopback port is not assigned');
+        if (serialization === 'port')
+            return port;
+        if (serialization === 'host')
+            return '127.0.0.1';
+        if (serialization === 'authority')
+            return `127.0.0.1:${port}`;
+        return `http://127.0.0.1:${port}`;
+    }
+    async readRestrictedPort(record) {
+        if (record.definition.discovery.kind !== 'restricted-port-file')
+            return undefined;
+        const bytes = await (record.definition.discovery.root === 'package'
+            ? readManagedRuntimeResource(record, record.definition.discovery.file, 'data', MAX_PORT_FILE_BYTES)
+            : readManagedContainedFile(record.serviceHome, record.definition.discovery.file, MAX_PORT_FILE_BYTES)).catch((error) => {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        });
+        if (bytes === undefined)
+            return undefined;
+        const port = Number(bytes.toString('utf8').trim());
+        return Number.isSafeInteger(port) && port > 0 && port < 65_536 ? port : undefined;
+    }
+    authorizationHeaders(record) {
+        if (record.definition.httpAuthentication.mode === 'none')
+            return {};
+        const value = record.secrets.get(record.definition.httpAuthentication.slot);
+        if (value === undefined)
+            throw new Error('managed service authorization is unavailable');
+        return { Authorization: `${record.definition.httpAuthentication.scheme} ${value}` };
+    }
+    assertActive(record, signal) {
+        if (record.disposed || signal.aborted)
+            throw signal.reason ?? new Error('managed service operation cancelled');
+    }
+}
+//# sourceMappingURL=managed-service-runtime-process.js.map

package/dist/src/launcher/managed-service-runtime-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-process.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAA;AACrE,OAAO,EACL,uCAAuC,EACvC,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,oCAAoC,CAAA;AAE3C,OAAO,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAA;AAEhF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,sCAAsC,CAAA;AAE7C,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAA;AACvC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAS9B,MAAM,OAAO,4BAA4B;IACV;IAA7B,YAA6B,OAA4C;QAA5C,YAAO,GAAP,OAAO,CAAqC;IAAG,CAAC;IAE7E,KAAK,CAAC,kBAAkB,CAAC,MAA4B;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAA;QACrD,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAChG,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAY,CAAA;QAC5G,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa;gBAAE,SAAQ;YACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,wBAAwB;gBAC1D,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC;gBAC/D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;YAC/F,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACrD,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,uBAAuB,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YACnE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;gBAAE,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,SAAS,GAAG,iCAAiC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACzG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;QAClG,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAC5G,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA4B,EAAE,MAAoB;QACvE,IAAI,IAAwB,CAAA;QAC5B,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;YAAE,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAA;QAClG,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,sBAAsB;YAAE,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC7G,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACxC,MAAM,MAAM,GAAG,oBAAoB,IAAI,EAAE,CAAA;QACzC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3F,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAA4B,EAC5B,iBAAqC,EACrC,MAAmB;QAEnB,uCAAuC,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,wBAAwB;YACxE,CAAC,CAAC,MAAM,CAAC,YAAY;YACrB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;gBACvD,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI;gBAClC,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YACjD,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAC/E,IAAI,QAAQ,CAAC,aAAa,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,QAAQ,CAAC,aAAa,KAAK,WAAW;gBAAE,OAAO,aAAa,IAAI,EAAE,CAAA;YACtE,OAAO,oBAAoB,IAAI,EAAE,CAAA;QACnC,CAAC,CAAC,CAAA;QACF,IAAI,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QACvF,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa;gBAAE,SAAQ;YAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;YACtG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAA;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE;YACvD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;YACpC,GAAG,EAAE,MAAM,CAAC,WAAW;YACvB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;QACpB,IAAI,UAA6B,CAAA;QACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YACxB,UAAU,GAAG,KAAK,CAAA;YAClB,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAA;QACvE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,IAAI,UAAU,KAAK,SAAS;gBAAE,MAAM,UAAU,CAAA;YAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;YAClH,MAAM,cAAc,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;YACpE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,oBAAoB,cAAc,EAAE,CAAA;gBACnD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;oBACjC,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;wBACvD,MAAM,UAAU,IAAI,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;oBACzD,CAAC;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC;YACH,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACrG,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,MAA4B,EAC5B,UAA8D;QAE9D,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO,UAAU,CAAC,OAAO,CAAA;QAClE,MAAM,IAAI,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QACvF,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAClF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA4B,EAAE,MAAc,EAAE,MAAoB;QAC9E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACxF,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAC1C,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAC5E,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAA;QAC3B,MAAM,uBAAuB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAA;QAC9D,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA4B;QAClD,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAA4B;QAC1D,MAAM,SAAS,GAAG,iCAAiC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACzG,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,CAAC;IAEO,yBAAyB,CAC/B,MAA4B,EAC5B,aAAuD;QAEvD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAA;QAChC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QACxF,IAAI,aAAa,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QACzC,IAAI,aAAa,KAAK,MAAM;YAAE,OAAO,WAAW,CAAA;QAChD,IAAI,aAAa,KAAK,WAAW;YAAE,OAAO,aAAa,IAAI,EAAE,CAAA;QAC7D,OAAO,oBAAoB,IAAI,EAAE,CAAA;IACnC,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAA4B;QAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,sBAAsB;YAAE,OAAO,SAAS,CAAA;QACjF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;YACjE,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC;YACnG,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAC1G,CAAC,KAA4B,EAAE,EAAE;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC7C,MAAM,KAAK,CAAA;QACb,CAAC,CACF,CAAA;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAClD,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,CAAC;IAEO,oBAAoB,CAAC,MAA4B;QACvD,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,CAAA;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC3E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACxF,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,IAAI,KAAK,EAAE,EAAE,CAAA;IACrF,CAAC;IAEO,YAAY,CAAC,MAA4B,EAAE,MAAmB;QACpE,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAChH,CAAC;CACF"}

package/dist/src/launcher/managed-service-runtime-record.d.ts

@@ -0,0 +1,81 @@
+import type { PluginManifestManagedBackendServiceV14 } from '@cordisx/protocol/plugin-manifest/v14';
+import type { ManagedServiceBindingV1, ManagedServiceControlResultV1, ManagedServiceDefinitionV1, ManagedServiceDiagnosticV1, ManagedServiceLeaseV1, ManagedServiceOwnerV1, ManagedServiceProjectionV1, ManagedServiceSafeValueV1 } from '@cordisx/protocol/managed-service-runtime/v1';
+import type { ChildProcess } from 'node:child_process';
+import type { ManagedServiceSchemaRegistry } from './managed-service-schema.js';
+export interface ManagedServiceActivationAccess {
+    readonly owner: ManagedServiceOwnerV1;
+    readonly source: `https://${string}`;
+    readonly declaration: PluginManifestManagedBackendServiceV14;
+    readonly artifactDirectory: string;
+    readonly runtimeResources?: readonly {
+        readonly path: `./${string}`;
+        readonly mode: 'executable' | 'data';
+        readonly byteLength: number;
+        readonly digest: `sha256:${string}`;
+    }[];
+}
+export interface ManagedServiceClientState {
+    readonly key: string;
+    readonly pluginId: string;
+    readonly pluginGeneration: string;
+    active: boolean;
+    readonly leases: Set<string>;
+}
+export interface ManagedServiceLeaseState {
+    readonly client: ManagedServiceClientState;
+    readonly lease: ManagedServiceLeaseV1;
+}
+export interface ManagedServiceMaterializationState {
+    readonly handle: `msm_${string}`;
+    readonly revision: `sha256:${string}`;
+    readonly values: readonly {
+        readonly slot: string;
+        readonly pointer: `/${string}` | undefined;
+        readonly value: ManagedServiceSafeValueV1;
+        readonly safeLiteral: boolean;
+    }[];
+    readonly sources: readonly {
+        readonly source: string;
+        readonly binding: ManagedServiceBindingV1;
+    }[];
+}
+interface ManagedServiceInvocationState {
+    readonly leaseHandle: string;
+    readonly value: ManagedServiceSafeValueV1;
+}
+export interface ManagedServiceRecord {
+    readonly access: ManagedServiceActivationAccess;
+    readonly serviceHome: string;
+    readonly revision: `sha256:${string}`;
+    readonly definition: ManagedServiceDefinitionV1;
+    readonly schemas: ManagedServiceSchemaRegistry;
+    readonly environment: NodeJS.ProcessEnv;
+    readonly registrationHandle: `msr_${string}`;
+    readonly ownerHandle: string;
+    readonly lifecycle: AbortController;
+    readonly operations: Set<Promise<unknown>>;
+    binding: ManagedServiceBindingV1;
+    state: ManagedServiceProjectionV1['state'];
+    health: ManagedServiceProjectionV1['health'];
+    processOwnership: ManagedServiceProjectionV1['processOwnership'];
+    diagnostic: ManagedServiceDiagnosticV1 | undefined;
+    child: ChildProcess | undefined;
+    origin: string | undefined;
+    brokerHandle: `msb_${string}` | undefined;
+    authenticationHandle: `msa_${string}` | undefined;
+    authorizationHandle: `msa_${string}` | undefined;
+    readonly secrets: Map<string, string>;
+    readonly leases: Map<string, ManagedServiceLeaseState>;
+    readonly materializations: Map<string, ManagedServiceMaterializationState>;
+    selectedMaterialization: ManagedServiceMaterializationState | undefined;
+    readonly invocations: Map<string, ManagedServiceInvocationState>;
+    assignedPort: number | undefined;
+    preparing: Promise<ManagedServiceControlResultV1> | undefined;
+    restarting: Promise<ManagedServiceControlResultV1> | undefined;
+    healthMonitor: AbortController | undefined;
+    disposal: Promise<ManagedServiceControlResultV1> | undefined;
+    disposed: boolean;
+}
+export declare function projectManagedServiceRecord(record: ManagedServiceRecord): ManagedServiceProjectionV1;
+export {};
+//# sourceMappingURL=managed-service-runtime-record.d.ts.map

package/dist/src/launcher/managed-service-runtime-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-record.d.ts","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-record.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAA;AACnG,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,8CAA8C,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAA;AAE/E,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,sCAAsC,CAAA;IAC5D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS;QACnC,QAAQ,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAA;QAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAAA;QACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAA;KACpC,EAAE,CAAA;CACJ;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;IAC1C,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;CACtC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,MAAM,EAAE,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,GAAG,SAAS,CAAA;QAC1C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAA;QACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;KAC9B,EAAE,CAAA;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;KAAE,EAAE,CAAA;CACpG;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAA;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAA;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,MAAM,EAAE,CAAA;IACrC,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAA;IAC/C,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAA;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IACvC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,MAAM,EAAE,CAAA;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAC1C,OAAO,EAAE,uBAAuB,CAAA;IAChC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAA;IAC5C,gBAAgB,EAAE,0BAA0B,CAAC,kBAAkB,CAAC,CAAA;IAChE,UAAU,EAAE,0BAA0B,GAAG,SAAS,CAAA;IAClD,KAAK,EAAE,YAAY,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,YAAY,EAAE,OAAO,MAAM,EAAE,GAAG,SAAS,CAAA;IACzC,oBAAoB,EAAE,OAAO,MAAM,EAAE,GAAG,SAAS,CAAA;IACjD,mBAAmB,EAAE,OAAO,MAAM,EAAE,GAAG,SAAS,CAAA;IAChD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;IACtD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAA;IAC1E,uBAAuB,EAAE,kCAAkC,GAAG,SAAS,CAAA;IACvE,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAA;IAChE,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,SAAS,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAA;IAC7D,UAAU,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAA;IAC9D,aAAa,EAAE,eAAe,GAAG,SAAS,CAAA;IAC1C,QAAQ,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAA;IAC5D,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,oBAAoB,GAAG,0BAA0B,CAqCpG"}

package/dist/src/launcher/managed-service-runtime-record.js

@@ -0,0 +1,37 @@
+export function projectManagedServiceRecord(record) {
+    const materialization = record.selectedMaterialization;
+    const configuration = record.definition.configuration === undefined
+        ? { state: 'not-required' }
+        : materialization === undefined
+            ? { state: 'missing' }
+            : {
+                state: 'materialized',
+                materializationHandle: materialization.handle,
+                revision: materialization.revision,
+            };
+    const authentication = record.definition.authentication.mode === 'none'
+        ? { state: 'not-required' }
+        : record.authenticationHandle === undefined
+            ? { state: 'missing' }
+            : { state: 'configured', sessionHandle: record.authenticationHandle };
+    const httpAuthorization = record.definition.httpAuthentication.mode === 'none'
+        ? { state: 'not-required' }
+        : record.authorizationHandle === undefined
+            ? { state: 'missing' }
+            : { state: 'configured', authorizationHandle: record.authorizationHandle };
+    return Object.freeze({
+        $schema: 'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/managed-service-projection.v1.schema.json',
+        contract: 'cordisx.managed-service-projection/v1',
+        schemaVersion: 1,
+        binding: record.binding,
+        state: record.state,
+        health: record.health,
+        processOwnership: record.processOwnership,
+        configuration,
+        authentication,
+        httpAuthorization,
+        ...(record.brokerHandle === undefined ? {} : { connection: { brokerHandle: record.brokerHandle } }),
+        ...(record.diagnostic === undefined ? {} : { diagnostic: record.diagnostic }),
+    });
+}
+//# sourceMappingURL=managed-service-runtime-record.js.map

package/dist/src/launcher/managed-service-runtime-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-record.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-record.ts"],"names":[],"mappings":"AA2FA,MAAM,UAAU,2BAA2B,CAAC,MAA4B;IACtE,MAAM,eAAe,GAAG,MAAM,CAAC,uBAAuB,CAAA;IACtD,MAAM,aAAa,GAAgD,MAAM,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;QAC9G,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;QAC3B,CAAC,CAAC,eAAe,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;YACtB,CAAC,CAAC;gBACA,KAAK,EAAE,cAAc;gBACrB,qBAAqB,EAAE,eAAe,CAAC,MAAM;gBAC7C,QAAQ,EAAE,eAAe,CAAC,QAAQ;aACnC,CAAA;IACH,MAAM,cAAc,GAAiD,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,MAAM;QACnH,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;QAC3B,CAAC,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;YACtB,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAA;IACvE,MAAM,iBAAiB,GACrB,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,KAAK,MAAM;QAClD,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;QAC3B,CAAC,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;YACtB,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAA;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EACL,mHAAmH;QACrH,QAAQ,EAAE,uCAAuC;QACjD,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,aAAa;QACb,cAAc;QACd,iBAAiB;QACjB,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QACnG,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;KAC9E,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/launcher/managed-service-runtime-support.d.ts

@@ -0,0 +1,28 @@
+import type { ManagedServiceBindingV1, ManagedServiceControlResultV1, ManagedServiceDiagnosticV1, ManagedServiceIdentityV1, ManagedServiceSafeValueV1 } from '@cordisx/protocol/managed-service-runtime/v1';
+import type { FileHandle } from 'node:fs/promises';
+export declare function managedHandle(prefix: string): `${string}_${string}`;
+export declare function managedDiagnostic(code: ManagedServiceDiagnosticV1['code'], retryable: boolean): ManagedServiceDiagnosticV1;
+type ManagedServiceFailure = Exclude<ManagedServiceControlResultV1, {
+    readonly status: 'ready' | 'accepted';
+}>;
+export declare function managedFailure(status: Exclude<ManagedServiceControlResultV1['status'], 'ready' | 'accepted'>, code: ManagedServiceDiagnosticV1['code'], retryable: boolean): ManagedServiceFailure;
+export declare function managedIdentityKey(identity: ManagedServiceIdentityV1): string;
+export declare function managedBindingCurrent(expected: ManagedServiceBindingV1, actual: ManagedServiceBindingV1, disposed: boolean): boolean;
+export declare function assertManagedMaterializationOverlap(left: {
+    readonly slot: string;
+    readonly pointer: `/${string}` | undefined;
+    readonly safeLiteral: boolean;
+}, right: {
+    readonly slot: string;
+    readonly pointer: `/${string}` | undefined;
+    readonly safeLiteral: boolean;
+}): void;
+export declare function assertManagedSafeValue(value: unknown, seen?: Set<object>): asserts value is ManagedServiceSafeValueV1;
+export declare function managedPointerValue(value: ManagedServiceSafeValueV1, pointer: `/${string}`): ManagedServiceSafeValueV1;
+export declare function setManagedPointer(root: unknown, pointer: `/${string}`, value: ManagedServiceSafeValueV1): void;
+export declare function managedContainedFile(root: string, relative: `./${string}`): Promise<string>;
+export declare function readManagedContainedFile(root: string, relative: `./${string}`, maxBytes: number): Promise<Buffer>;
+export declare function readManagedBoundedFile(handle: Pick<FileHandle, 'read' | 'stat'>, maxBytes: number): Promise<Buffer>;
+export declare function readManagedResponseBody(response: Response, maxBytes: number): Promise<Uint8Array>;
+export {};
+//# sourceMappingURL=managed-service-runtime-support.d.ts.map

package/dist/src/launcher/managed-service-runtime-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-support.d.ts","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-support.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,8CAA8C,CAAA;AAIrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAgBlD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAEnE;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC,EACxC,SAAS,EAAE,OAAO,GACjB,0BAA0B,CAE5B;AAED,KAAK,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAA;CAAE,CAAC,CAAA;AAE9G,wBAAgB,cAAc,CAC5B,MAAM,EAAE,OAAO,CAAC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC,EAC9E,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC,EACxC,SAAS,EAAE,OAAO,GACjB,qBAAqB,CAEvB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,MAAM,CAE7E;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,uBAAuB,EAC/B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAMT;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,EAC1G,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GAC1G,IAAI,CAeN;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,cAAoB,GACvB,OAAO,CAAC,KAAK,IAAI,yBAAyB,CAmB5C;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,yBAAyB,EAChC,OAAO,EAAE,IAAI,MAAM,EAAE,GACpB,yBAAyB,CAgB3B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAoC9G;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBjG;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,KAAK,MAAM,EAAE,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,EACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BvG"}

package/dist/src/launcher/managed-service-runtime-support.js

@@ -0,0 +1,230 @@
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import path from 'node:path';
+const FORBIDDEN_RESULT_KEYS = new Set([
+    'authorization',
+    'authority',
+    'connection',
+    'credential',
+    'headers',
+    'origin',
+    'password',
+    'port',
+    'secret',
+    'token',
+]);
+export function managedHandle(prefix) {
+    return `${prefix}_${randomUUID().replaceAll('-', '')}`;
+}
+export function managedDiagnostic(code, retryable) {
+    return Object.freeze({ code, retryable });
+}
+export function managedFailure(status, code, retryable) {
+    return Object.freeze({ status, diagnostic: managedDiagnostic(code, retryable) });
+}
+export function managedIdentityKey(identity) {
+    return `${identity.source}\u0000${identity.pluginId}\u0000${identity.serviceId}`;
+}
+export function managedBindingCurrent(expected, actual, disposed) {
+    return !disposed
+        && actual.registrationHandle === expected.registrationHandle
+        && actual.serviceHandle === expected.serviceHandle
+        && actual.hostGeneration === expected.hostGeneration
+        && actual.serviceGeneration === expected.serviceGeneration;
+}
+export function assertManagedMaterializationOverlap(left, right) {
+    if (left.pointer === undefined || right.pointer === undefined) {
+        if (left.slot === right.slot)
+            throw new Error('duplicate environment materialization');
+        return;
+    }
+    const leftAncestor = right.pointer.startsWith(`${left.pointer}/`);
+    const rightAncestor = left.pointer.startsWith(`${right.pointer}/`);
+    if (left.pointer !== right.pointer && !leftAncestor && !rightAncestor)
+        return;
+    const ancestor = leftAncestor ? left : rightAncestor ? right : undefined;
+    const descendant = leftAncestor ? right : rightAncestor ? left : undefined;
+    if (ancestor !== undefined && descendant !== undefined && ancestor.slot === descendant.slot
+        && ancestor.safeLiteral && !descendant.safeLiteral)
+        return;
+    throw new Error('managed service materialization pointers overlap');
+}
+export function assertManagedSafeValue(value, seen = new Set()) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('managed service returned a non-finite number');
+        return;
+    }
+    if (typeof value !== 'object')
+        throw new Error('managed service returned an unsafe value');
+    if (seen.has(value))
+        throw new Error('managed service returned a cyclic value');
+    seen.add(value);
+    if (Array.isArray(value))
+        value.forEach(item => assertManagedSafeValue(item, seen));
+    else {
+        for (const [key, item] of Object.entries(value)) {
+            if (FORBIDDEN_RESULT_KEYS.has(key.toLowerCase())) {
+                throw new Error('managed service returned an authority-shaped field');
+            }
+            assertManagedSafeValue(item, seen);
+        }
+    }
+    seen.delete(value);
+}
+export function managedPointerValue(value, pointer) {
+    let current = value;
+    for (const token of pointer.slice(1).split('/').map(item => item.replaceAll('~1', '/').replaceAll('~0', '~'))) {
+        if (Array.isArray(current)) {
+            const index = Number(token);
+            if (!Number.isSafeInteger(index) || index < 0 || index >= current.length) {
+                throw new Error('invalid invocation pointer');
+            }
+            current = current[index];
+        }
+        else if (current !== null && typeof current === 'object' && !Array.isArray(current) && Object.hasOwn(current, token)) {
+            current = current[token];
+        }
+        else
+            throw new Error('invalid invocation pointer');
+    }
+    return structuredClone(current);
+}
+export function setManagedPointer(root, pointer, value) {
+    if (root === null || typeof root !== 'object')
+        throw new Error('configuration template must be an object');
+    const tokens = pointer.slice(1).split('/').map(item => item.replaceAll('~1', '/').replaceAll('~0', '~'));
+    const isNumeric = (segment) => /^\d+$/u.test(segment);
+    let current = root;
+    for (const [index, token] of tokens.entries()) {
+        const isLast = index === tokens.length - 1;
+        const nextToken = isLast ? undefined : tokens[index + 1];
+        if (Array.isArray(current)) {
+            const item = Number(token);
+            if (!Number.isSafeInteger(item) || item < 0 || item > current.length) {
+                throw new Error('configuration pointer has an invalid array index');
+            }
+            const childToken = nextToken;
+            if (isLast) {
+                current[item] = structuredClone(value);
+                return;
+            }
+            const existing = current[item];
+            if (existing === null || typeof existing !== 'object') {
+                current[item] = isNumeric(childToken) ? [] : {};
+            }
+            current = current[item];
+            continue;
+        }
+        const childToken = nextToken;
+        if (isLast) {
+            ;
+            current[token] = structuredClone(value);
+            return;
+        }
+        const existing = current[token];
+        if (existing === null || typeof existing !== 'object') {
+            ;
+            current[token] = isNumeric(childToken) ? [] : {};
+        }
+        current = current[token];
+    }
+}
+export async function managedContainedFile(root, relative) {
+    const stableRoot = path.resolve(root);
+    const canonicalRoot = await realpath(root);
+    const target = path.resolve(stableRoot, relative.slice(2));
+    const relativeTarget = path.relative(stableRoot, target);
+    if (relativeTarget === '' || relativeTarget === '..' || relativeTarget.startsWith(`..${path.sep}`)
+        || path.isAbsolute(relativeTarget))
+        throw new Error('managed service file escapes its package');
+    let current = canonicalRoot;
+    for (const segment of relativeTarget.split(path.sep)) {
+        current = path.join(current, segment);
+        const metadata = await lstat(current).catch((error) => {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        });
+        if (metadata === undefined)
+            break;
+        if (metadata.isSymbolicLink())
+            throw new Error('managed service file uses a symbolic link');
+    }
+    return target;
+}
+export async function readManagedContainedFile(root, relative, maxBytes) {
+    const canonicalRoot = await realpath(root);
+    const target = path.resolve(canonicalRoot, relative.slice(2));
+    const relativeTarget = path.relative(canonicalRoot, target);
+    if (relativeTarget === '' || relativeTarget === '..' || relativeTarget.startsWith(`..${path.sep}`)
+        || path.isAbsolute(relativeTarget))
+        throw new Error('managed service file escapes its restricted root');
+    const canonicalTarget = await realpath(target);
+    if (canonicalTarget !== target)
+        throw new Error('managed service restricted file uses a symbolic link');
+    const handle = await open(target, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        return await readManagedBoundedFile(handle, maxBytes);
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function readManagedBoundedFile(handle, maxBytes) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)
+        throw new Error('managed service file bound is invalid');
+    const before = await handle.stat();
+    if (!before.isFile() || before.size > maxBytes) {
+        throw new Error('managed service restricted file is not a bounded regular file');
+    }
+    const buffer = Buffer.allocUnsafe(maxBytes + 1);
+    let offset = 0;
+    while (offset < buffer.byteLength) {
+        const { bytesRead } = await handle.read(buffer, offset, buffer.byteLength - offset, offset);
+        if (bytesRead === 0)
+            break;
+        offset += bytesRead;
+    }
+    const after = await handle.stat();
+    if (offset > maxBytes || after.size !== offset) {
+        throw new Error('managed service restricted file changed during bounded readback');
+    }
+    return buffer.subarray(0, offset);
+}
+export async function readManagedResponseBody(response, maxBytes) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)
+        throw new Error('managed service response bound is invalid');
+    if (response.body === null)
+        return new Uint8Array();
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel('managed service response is too large');
+                throw new Error('managed service response is too large');
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+//# sourceMappingURL=managed-service-runtime-support.js.map

package/dist/src/launcher/managed-service-runtime-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-support.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-support.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,OAAO;CACR,CAAC,CAAA;AAEF,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAwC,EACxC,SAAkB;IAElB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;AAC3C,CAAC;AAID,MAAM,UAAU,cAAc,CAC5B,MAA8E,EAC9E,IAAwC,EACxC,SAAkB;IAElB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAkC;IACnE,OAAO,GAAG,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,QAAQ,SAAS,QAAQ,CAAC,SAAS,EAAE,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,MAA+B,EAC/B,QAAiB;IAEjB,OAAO,CAAC,QAAQ;WACX,MAAM,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;WACzD,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;WAC/C,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;WACjD,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,IAA0G,EAC1G,KAA2G;IAE3G,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QACtF,OAAM;IACR,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;IACjE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAA;IAClE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa;QAAE,OAAM;IAC7E,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACxE,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,IACE,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;WACpF,QAAQ,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW;QAClD,OAAM;IACR,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,OAAO,IAAI,GAAG,EAAU;IAExB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QAC5F,OAAM;IACR,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC1F,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC/E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;SAC9E,CAAC;QACJ,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC3E,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;YACvE,CAAC;YACD,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAgC,EAChC,OAAqB;IAErB,IAAI,OAAO,GAA8B,KAAK,CAAA;IAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9G,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAE,CAAA;QAC3B,CAAC;aAAM,IACL,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAC3G,CAAC;YACD,OAAO,GAAI,OAAiE,CAAC,KAAK,CAAE,CAAA;QACtF,CAAC;;YAAM,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,OAAqB,EAAE,KAAgC;IACtG,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC1G,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACxG,MAAM,SAAS,GAAG,CAAC,OAAe,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtE,IAAI,OAAO,GAAwC,IAA2C,CAAA;IAC9F,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAE,CAAA;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;YAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,UAAU,GAAG,SAAU,CAAA;YAC7B,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;gBACtC,OAAM;YACR,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;YACjD,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,IAAI,CAAwC,CAAA;YAC9D,SAAQ;QACV,CAAC;QACD,MAAM,UAAU,GAAG,SAAU,CAAA;QAC7B,IAAI,MAAM,EAAE,CAAC;YACX,CAAC;YAAC,OAAmC,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YACrE,OAAM;QACR,CAAC;QACD,MAAM,QAAQ,GAAI,OAAmC,CAAC,KAAK,CAAC,CAAA;QAC5D,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,CAAC;YAAC,OAAmC,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAChF,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,KAAK,CAAwC,CAAA;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAuB;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACxD,IACE,cAAc,KAAK,EAAE,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;WAC3F,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,IAAI,OAAO,GAAG,aAAa,CAAA;IAC3B,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC7C,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAK;QACjC,IAAI,QAAQ,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,QAAuB,EACvB,QAAgB;IAEhB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAC3D,IACE,cAAc,KAAK,EAAE,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;WAC3F,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC9C,IAAI,eAAe,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACvG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAA;IACnF,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACvD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAyC,EACzC,QAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC7G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IAC/C,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,OAAO,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;QAC3F,IAAI,SAAS,KAAK,CAAC;YAAE,MAAK;QAC1B,MAAM,IAAI,SAAS,CAAA;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;IACjC,IAAI,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAkB,EAAE,QAAgB;IAChF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACjH,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAA;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACxC,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAA;gBAC5D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;YAC1D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}