dodo-mcp 1.2.1 → 1.3.0

package/dist/services/recovery/configVault.js

@@ -0,0 +1,361 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createCipheriv, createDecipheriv, createHmac, randomBytes } from 'node:crypto';
+import { z } from 'zod';
+import { DodoError } from '../../errors.js';
+import { digestOf, newId } from '../../util/hash.js';
+import { assertPrivatePath } from '../../platform/privateFs.js';
+import { rootIdentity } from './storage.js';
+import { OSRecoveryKeys } from './configKeys.js';
+const MAX_BYTES = 1024 * 1024;
+const Definition = z.object({ name: z.string().min(1).max(80), path: z.string().min(1).max(1024),
+    retention: z.number().int().min(2).max(100).default(10) }).strict();
+const fileIdentity = (s) => `${s.dev}:${s.ino}:${s.birthtimeMs}`;
+/** Explicit owner-only encrypted private-file backups. No source-tool/resource
+ * export, plaintext state, session-key fallback, or automatic config reload. */
+export class RecoveryConfigVault {
+    s;
+    r;
+    keys;
+    constructor(s, r, keys) {
+        this.s = s;
+        this.r = r;
+        this.keys = keys ?? new OSRecoveryKeys(s.wfs.root);
+    }
+    get db() { return this.s.store.db; }
+    target(id) {
+        this.r.assertProject();
+        const row = this.db.prepare('SELECT * FROM recovery_config_targets WHERE id=? AND workspace_id=?').get(id, this.s.workspaceId);
+        if (!row)
+            throw new DodoError('NOT_FOUND', 'private config target unavailable');
+        return row;
+    }
+    definition(target) { return Definition.parse(JSON.parse(target.payload)); }
+    resolve(target) {
+        this.r.assertProject();
+        const rel = this.definition(target).path;
+        if (this.s.wfs.normalizeRel(rel) !== rel || !this.s.wfs.ignores.isSecret(rel) || this.s.wfs.ignores.isProtected(rel))
+            throw new DodoError('PATH_DENIED', 'config backup accepts only explicit project paths denied to source tools');
+        let absolute = this.s.wfs.root;
+        for (const [i, name] of rel.split('/').entries()) {
+            absolute = path.join(absolute, name);
+            const st = fs.lstatSync(absolute), real = fs.realpathSync.native(absolute);
+            if (st.isSymbolicLink() || (process.platform === 'win32' ? real.toLowerCase() !== absolute.toLowerCase() : real !== absolute)
+                || (i < rel.split('/').length - 1 && !st.isDirectory()))
+                throw new DodoError('PATH_DENIED', 'private config path contains a link or alias');
+        }
+        // Owner must keep the original secret file private too. Never chmod the
+        // workspace or silently grant another user access during restore.
+        const stat = assertPrivatePath(absolute);
+        if (stat.size > MAX_BYTES)
+            throw new DodoError('RESOURCE_LIMIT', 'private config exceeds 1 MiB');
+        return { absolute, stat };
+    }
+    read(target) {
+        const file = this.resolve(target), fd = fs.openSync(file.absolute, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
+        let bytes, returned = false;
+        try {
+            const before = fs.fstatSync(fd);
+            if (fileIdentity(before) !== fileIdentity(file.stat) || before.nlink !== 1 || before.size > MAX_BYTES)
+                throw new DodoError('PATH_DENIED', 'private config identity changed');
+            bytes = Buffer.alloc(before.size);
+            let n = 0;
+            while (n < bytes.length) {
+                const count = fs.readSync(fd, bytes, n, bytes.length - n, n);
+                if (!count)
+                    break;
+                n += count;
+            }
+            const after = fs.fstatSync(fd), live = this.resolve(target).stat;
+            if (n !== bytes.length || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs || fileIdentity(live) !== fileIdentity(before)) {
+                bytes.fill(0);
+                throw new DodoError('FILE_CHANGED', 'private config changed while reading');
+            }
+            returned = true;
+            return { bytes, stat: after };
+        }
+        finally {
+            if (!returned)
+                bytes?.fill(0);
+            fs.closeSync(fd);
+        }
+    }
+    async createKey(revalidate) {
+        const reference = 'recoverykey_' + randomBytes(16).toString('hex'), key = randomBytes(32);
+        try {
+            revalidate();
+            await this.keys.put(reference, key);
+            revalidate();
+            return reference;
+        }
+        catch (e) {
+            try {
+                await this.keys.delete(reference);
+            }
+            catch { /* dedicated orphan reference only; never delete an older key */ }
+            throw e;
+        }
+        finally {
+            key.fill(0);
+        }
+    }
+    list() {
+        this.r.assertProject();
+        const targets = this.db.prepare('SELECT * FROM recovery_config_targets WHERE workspace_id=? ORDER BY id').all(this.s.workspaceId)
+            .map(t => ({ id: t.id, revision: t.revision, enabled: Boolean(t.enabled), definition: this.definition(t), keyStorage: 'os', plaintextExport: false }));
+        const backups = this.db.prepare('SELECT id,target_id,bytes,created_at FROM recovery_config_backups WHERE workspace_id=? ORDER BY created_at DESC LIMIT 100').all(this.s.workspaceId);
+        const restores = this.db.prepare('SELECT id,target_id,snapshot_id,before_id,state FROM recovery_config_restores WHERE workspace_id=? ORDER BY rowid DESC LIMIT 100').all(this.s.workspaceId);
+        return { targets, backups, restores, sourceBackupIncludesSecrets: false, automaticRestart: false,
+            retention: 'unreferenced_backups_only', referencedBackupsProtected: true, quotaBytes: 32 * 1024 * 1024 };
+    }
+    async configure(raw, revalidate) {
+        const input = z.object({ targetId: z.string().max(128).optional(), expectedRevision: z.number().int().nonnegative(), enabled: z.boolean(),
+            definition: Definition, confirmEncryptedPrivateBackup: z.literal(true) }).strict().parse(raw);
+        return this.s.mutations.run(async () => {
+            this.r.assertProject();
+            revalidate();
+            const old = input.targetId ? this.target(input.targetId) : undefined;
+            if ((old?.revision ?? 0) !== input.expectedRevision)
+                throw new DodoError('CONFLICT', 'private config target revision changed');
+            if (!old && this.list().targets.length >= 10)
+                throw new DodoError('RESOURCE_LIMIT', 'private config target limit reached');
+            if (old && this.definition(old).path !== input.definition.path)
+                throw new DodoError('CONFLICT', 'create a separate target for a different private file');
+            const target = { id: old?.id ?? newId('configtarget'), workspace_id: this.s.workspaceId, revision: input.expectedRevision + 1,
+                enabled: Number(input.enabled), payload: JSON.stringify(input.definition), key_ref: old?.key_ref ?? '' };
+            // Disabling an already registered missing file must remain possible.
+            if (input.enabled || !old)
+                this.resolve(target);
+            if (!target.key_ref)
+                target.key_ref = await this.createKey(revalidate);
+            else if (input.enabled) {
+                const key = await this.keys.get(target.key_ref);
+                key.fill(0);
+            }
+            revalidate();
+            this.db.prepare(`INSERT INTO recovery_config_targets VALUES (?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET revision=excluded.revision,
+        enabled=excluded.enabled,payload=excluded.payload`).run(target.id, target.workspace_id, target.revision, target.enabled, target.payload, target.key_ref);
+            // Owner lowering the separate retention can release ciphertext quota.
+            // Plans/receipts always retain their source and pre-restore backups.
+            this.prune(target);
+            this.audit('configure', target.id, digestOf(input));
+            return { id: target.id, revision: target.revision, enabled: input.enabled, keyStorage: 'os' };
+        });
+    }
+    async seal(target, bytes, revalidate) {
+        const used = this.db.prepare('SELECT COALESCE(SUM(bytes),0) n FROM recovery_config_backups WHERE workspace_id=?').get(this.s.workspaceId).n;
+        if (used + bytes.length > 32 * 1024 * 1024)
+            throw new DodoError('RESOURCE_LIMIT', 'encrypted private config quota reached; review retention first');
+        const id = newId('configbackup'), key = await this.keys.get(target.key_ref), iv = randomBytes(12);
+        const header = { version: 1, id, workspaceId: this.s.workspaceId, root: rootIdentity(this.s.wfs.root), targetId: target.id, targetRevision: target.revision, keyRef: target.key_ref };
+        try {
+            revalidate();
+            const cipher = createCipheriv('aes-256-gcm', key, iv);
+            cipher.setAAD(Buffer.from(JSON.stringify(header)));
+            const encrypted = Buffer.concat([cipher.update(bytes), cipher.final()]);
+            const sealed = JSON.stringify({ header, iv: iv.toString('base64'), tag: cipher.getAuthTag().toString('base64'), ciphertext: encrypted.toString('base64') });
+            revalidate();
+            this.db.prepare('INSERT INTO recovery_config_backups VALUES (?,?,?,?,?,?,?,?)').run(id, this.s.workspaceId, target.id, target.revision, target.key_ref, sealed, bytes.length, Date.now());
+            return id;
+        }
+        finally {
+            key.fill(0);
+        }
+    }
+    backupRow(id) {
+        const row = this.db.prepare('SELECT * FROM recovery_config_backups WHERE id=? AND workspace_id=?').get(id, this.s.workspaceId);
+        if (!row)
+            throw new DodoError('NOT_FOUND', 'encrypted private backup unavailable');
+        return row;
+    }
+    async open(row, target, revalidate) {
+        const key = await this.keys.get(row.key_ref);
+        try {
+            revalidate();
+            const data = z.object({ header: z.object({ version: z.literal(1), id: z.literal(row.id), workspaceId: z.literal(this.s.workspaceId), root: z.literal(rootIdentity(this.s.wfs.root)),
+                    targetId: z.literal(target.id), targetRevision: z.literal(row.target_revision), keyRef: z.literal(row.key_ref) }).strict(),
+                iv: z.string().max(24), tag: z.string().max(32), ciphertext: z.string().max(2 * MAX_BYTES) }).strict().parse(JSON.parse(row.sealed));
+            if (row.target_id !== target.id || row.bytes > MAX_BYTES)
+                throw new Error();
+            const iv = Buffer.from(data.iv, 'base64'), tag = Buffer.from(data.tag, 'base64');
+            if (iv.length !== 12 || tag.length !== 16)
+                throw new Error();
+            const decipher = createDecipheriv('aes-256-gcm', key, iv);
+            decipher.setAAD(Buffer.from(JSON.stringify(data.header)));
+            decipher.setAuthTag(tag);
+            const partial = decipher.update(Buffer.from(data.ciphertext, 'base64'));
+            let bytes, returned = false;
+            try {
+                bytes = Buffer.concat([partial, decipher.final()]);
+                if (bytes.length !== row.bytes)
+                    throw new Error();
+                revalidate();
+                returned = true;
+                return bytes;
+            }
+            finally {
+                partial.fill(0);
+                if (!returned)
+                    bytes?.fill(0);
+            }
+        }
+        catch {
+            throw new DodoError('RECOVERY_REQUIRED', 'encrypted backup integrity or current authority could not be verified; plaintext withheld');
+        }
+        finally {
+            key.fill(0);
+        }
+    }
+    async backup(targetId, revalidate) {
+        return this.s.mutations.run(async () => {
+            revalidate();
+            const target = this.target(targetId);
+            if (!target.enabled)
+                throw new DodoError('FORBIDDEN', 'private config backup is disabled');
+            const current = this.read(target);
+            try {
+                const id = await this.seal(target, current.bytes, revalidate);
+                this.audit('backup', id, digestOf({ targetId }));
+                this.prune(target);
+                return { id, bytes: current.bytes.length, encrypted: true };
+            }
+            finally {
+                current.bytes.fill(0);
+            }
+        });
+    }
+    prune(target) {
+        const rows = this.db.prepare('SELECT id FROM recovery_config_backups WHERE target_id=? ORDER BY created_at DESC,id DESC').all(target.id);
+        for (const row of rows.slice(this.definition(target).retention)) {
+            if (this.db.prepare('SELECT 1 FROM recovery_config_restores WHERE snapshot_id=? OR before_id=? LIMIT 1').get(row.id, row.id))
+                continue;
+            this.db.prepare('DELETE FROM recovery_config_backups WHERE id=?').run(row.id);
+        }
+    }
+    async rotate(targetId, expectedRevision, revalidate) {
+        return this.s.mutations.run(async () => {
+            revalidate();
+            const target = this.target(targetId);
+            if (target.revision !== expectedRevision)
+                throw new DodoError('CONFLICT', 'private config target revision changed');
+            const reference = await this.createKey(revalidate);
+            revalidate();
+            this.db.prepare('UPDATE recovery_config_targets SET key_ref=?,revision=revision+1 WHERE id=?').run(reference, target.id);
+            this.audit('rotate', target.id, digestOf({ expectedRevision }));
+            return { targetId, revision: expectedRevision + 1, oldBackupsKeepOldOSKeys: true, oldBackupsReencrypted: false };
+        });
+    }
+    async preview(backupId, revalidate) {
+        return this.s.mutations.run(async () => {
+            revalidate();
+            if (this.db.prepare('SELECT COUNT(*) n FROM recovery_config_restores WHERE workspace_id=?').get(this.s.workspaceId).n >= 1000)
+                throw new DodoError('RESOURCE_LIMIT', 'private config restore history limit reached');
+            const backup = this.backupRow(backupId), target = this.target(backup.target_id);
+            if (!target.enabled)
+                throw new DodoError('FORBIDDEN', 'private config target is disabled');
+            let desired, current, key;
+            try {
+                desired = await this.open(backup, target, revalidate);
+                current = this.read(target);
+                key = await this.keys.get(target.key_ref);
+                revalidate();
+                const plan = { id: newId('configrestore'), targetId: target.id, targetRevision: target.revision, backupId,
+                    epoch: this.s.epoch, root: rootIdentity(this.s.wfs.root), expiresAt: Date.now() + 10 * 60000, keyRef: target.key_ref,
+                    expectedMac: createHmac('sha256', key).update(current.bytes).digest('hex'), fileIdentity: fileIdentity(current.stat), backupDigest: digestOf(backup.sealed) };
+                const planHash = digestOf(plan);
+                this.db.prepare("INSERT INTO recovery_config_restores VALUES (?,?,?,?,NULL,?,?,'PREVIEW',NULL)").run(plan.id, this.s.workspaceId, target.id, backup.id, JSON.stringify(plan), planHash);
+                return { planId: plan.id, planHash, expiresAt: plan.expiresAt, targetId: target.id, changed: !current.bytes.equals(desired),
+                    bytesBefore: current.bytes.length, bytesAfter: desired.length, plaintext: 'REDACTED', encryptedPreRestoreBackupRequired: true,
+                    restartRequired: 'owner_managed', writeMode: 'single_existing_private_file_journaled_in_place' };
+            }
+            finally {
+                current?.bytes.fill(0);
+                desired?.fill(0);
+                key?.fill(0);
+            }
+        });
+    }
+    async apply(planId, planHash, revalidate) {
+        return this.s.mutations.run(async () => {
+            revalidate();
+            this.r.assertProject();
+            const row = this.db.prepare('SELECT * FROM recovery_config_restores WHERE id=? AND workspace_id=?').get(planId, this.s.workspaceId);
+            if (!row)
+                throw new DodoError('NOT_FOUND', 'private config restore unavailable');
+            const plan = JSON.parse(row.payload);
+            if (digestOf(plan) !== row.hash || row.hash !== planHash)
+                throw new DodoError('PLAN_HASH_MISMATCH', 'review exact private config restore');
+            if (row.state !== 'PREVIEW')
+                return { state: row.state, outcome: row.result ? JSON.parse(row.result) : null, replayed: true };
+            const target = this.target(plan.targetId), backup = this.backupRow(plan.backupId);
+            if (!target.enabled || target.revision !== plan.targetRevision || target.key_ref !== plan.keyRef || plan.epoch !== this.s.epoch || plan.expiresAt < Date.now()
+                || plan.root !== rootIdentity(this.s.wfs.root) || digestOf(backup.sealed) !== plan.backupDigest)
+                throw new DodoError('CONFLICT', 'private config plan or authority changed; preview again');
+            let desired, current, key;
+            let fd, started = false;
+            try {
+                desired = await this.open(backup, target, revalidate);
+                current = this.read(target);
+                key = await this.keys.get(target.key_ref);
+                if (fileIdentity(current.stat) !== plan.fileIdentity || createHmac('sha256', key).update(current.bytes).digest('hex') !== plan.expectedMac)
+                    throw new DodoError('FILE_CHANGED', 'private config changed after preview');
+                const beforeId = await this.seal(target, current.bytes, revalidate), file = this.resolve(target);
+                fd = fs.openSync(file.absolute, fs.constants.O_RDWR | (fs.constants.O_NOFOLLOW ?? 0));
+                const opened = fs.fstatSync(fd);
+                if (fileIdentity(opened) !== plan.fileIdentity || opened.nlink !== 1 || opened.size !== current.stat.size || opened.mtimeMs !== current.stat.mtimeMs || opened.ctimeMs !== current.stat.ctimeMs)
+                    throw new DodoError('FILE_CHANGED', 'private config changed before write');
+                revalidate();
+                this.db.prepare("UPDATE recovery_config_restores SET before_id=?,state='UNKNOWN',result=? WHERE id=?").run(beforeId, JSON.stringify({ retryAllowed: false, reason: 'write_may_have_started', encryptedBeforeId: beforeId }), plan.id);
+                started = true;
+                let n = 0;
+                while (n < desired.length) {
+                    const count = fs.writeSync(fd, desired, n, desired.length - n, n);
+                    if (!count)
+                        throw new Error('short config write');
+                    n += count;
+                }
+                fs.ftruncateSync(fd, desired.length);
+                fs.fsyncSync(fd);
+                fs.closeSync(fd);
+                fd = undefined;
+                revalidate();
+                const verified = this.read(target);
+                try {
+                    if (!verified.bytes.equals(desired))
+                        throw new DodoError('FILE_CHANGED', 'private config read-back differs');
+                }
+                finally {
+                    verified.bytes.fill(0);
+                }
+                const outcome = { verified: true, encryptedBeforeId: beforeId, restarted: false };
+                this.db.prepare("UPDATE recovery_config_restores SET state='APPLIED',result=? WHERE id=?").run(JSON.stringify(outcome), plan.id);
+                this.audit('restore', plan.id, planHash);
+                return { state: 'APPLIED', outcome, replayed: false };
+            }
+            catch (e) {
+                if (!started)
+                    throw e;
+                return { state: 'UNKNOWN', retryAllowed: false, recovery: 'inspect the private file locally; a new reviewed restore may use the encrypted pre-restore backup', replayed: false };
+            }
+            finally {
+                try {
+                    if (fd !== undefined)
+                        fs.closeSync(fd);
+                }
+                finally {
+                    current?.bytes.fill(0);
+                    desired?.fill(0);
+                    key?.fill(0);
+                }
+            }
+        });
+    }
+    reconcile() {
+        // UNKNOWN is written before the first byte: never repeat it after restart.
+        this.db.prepare("UPDATE recovery_config_restores SET state='EXPIRED' WHERE workspace_id=? AND state='PREVIEW' AND json_extract(payload,'$.epoch')<>?").run(this.s.workspaceId, this.s.epoch);
+    }
+    audit(action, id, digest) {
+        this.s.store.audit({ principal: 'local-config-owner', workspaceId: this.s.workspaceId, tool: `recovery.config.${action}`, refId: id, inputDigest: digest, result: 'encrypted_owner_action' });
+    }
+}
+//# sourceMappingURL=configVault.js.map

package/dist/services/recovery/configVault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configVault.js","sourceRoot":"","sources":["../../../src/services/recovery/configVault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAyB,MAAM,iBAAiB,CAAC;AAExE,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9B,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAKtE,MAAM,YAAY,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAE3E;gFACgF;AAChF,MAAM,OAAO,mBAAmB;IAED;IAAiC;IAD7C,IAAI,CAAmB;IACxC,YAA6B,CAAc,EAAmB,CAAkB,EAAE,IAAuB;QAA5E,MAAC,GAAD,CAAC,CAAa;QAAmB,MAAC,GAAD,CAAC,CAAiB;QAC9E,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,IAAY,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,EAAU;QACvB,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAuB,CAAC;QACrJ,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC;IAC9F,CAAC;IACO,UAAU,CAAC,MAAc,IAAI,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,MAAc;QAC5B,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QACjE,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC;YAClH,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,0EAA0E,CAAC,CAAC;QACjH,IAAI,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjH,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;mBACxH,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;QAChJ,CAAC;QACD,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;QACjG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IACO,IAAI,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3H,IAAI,KAAyB,EAAE,QAAQ,GAAG,KAAK,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;YAC7K,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK;oBAAE,MAAM;gBAAC,CAAC,IAAI,KAAK,CAAC;YAAC,CAAC;YACzH,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACjE,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5K,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;YAC7F,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACjD,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,QAAQ;gBAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAChE,CAAC;IACO,KAAK,CAAC,SAAS,CAAC,UAAsB;QAC5C,MAAM,SAAS,GAAG,cAAc,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC1F,OAAO,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gEAAgE,CAAC,CAAC;YAAC,MAAM,CAAC,CAAC;QAAC,CAAC;gBACpI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,IAAI;QACF,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,OAAO,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wEAAwE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAc;aAC5I,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACzJ,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2HAA2H,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACrL,MAAM,QAAQ,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kIAAkI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC3L,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK;YAC9F,SAAS,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC7G,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,GAAY,EAAE,UAAsB;QAClD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACvI,UAAU,EAAE,UAAU,EAAE,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3G,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,gBAAgB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;YAC/H,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;YAC3H,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,uDAAuD,CAAC,CAAC;YACzJ,MAAM,MAAM,GAAW,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC;gBACnI,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;YAC3G,qEAAqE;YACrE,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;iBAClE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACzF,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;0DACoC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3J,sEAAsE;YACtE,qEAAqE;YACrE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACrJ,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,KAAa,EAAE,UAAsB;QACtE,MAAM,IAAI,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAmB,CAAC,CAAC,CAAC;QAC/J,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;QACpJ,MAAM,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACtL,IAAI,CAAC;YACH,UAAU,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC5J,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxM,OAAO,EAAE,CAAC;QACZ,CAAC;gBAAS,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC5B,CAAC;IACO,SAAS,CAAC,EAAU;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAuB,CAAC;QACrJ,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,sCAAsC,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC;IACjG,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,MAAc,EAAE,UAAsB;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/L,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;gBAC1H,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACvI,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACjF,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1D,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxE,IAAI,KAAyB,EAAE,QAAQ,GAAG,KAAK,CAAC;YAChD,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAAC,UAAU,EAAE,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;oBACnJ,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,QAAQ;oBAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,2FAA2F,CAAC,CAAC;QAAC,CAAC;gBAC1I,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,UAAsB;QACnD,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;YAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC;gBAAC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;oBACjM,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,MAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAA0B,CAAC;QAClK,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACvI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,gBAAwB,EAAE,UAAsB;QAC7E,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;YACpH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAAC,UAAU,EAAE,CAAC;YACjE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACzH,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,GAAG,CAAC,EAAE,uBAAuB,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;QACnH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,UAAsB;QACpD,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAgB,CAAC,CAAC,IAAE,IAAI;gBAAC,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAC,8CAA8C,CAAC,CAAC;YAChO,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;YAC3F,IAAI,OAA2B,EAAE,OAA4D,EAAE,GAAuB,CAAC;YACvH,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAC,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9H,UAAU,EAAE,CAAC;gBAAC,MAAM,IAAI,GAAY,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ;oBAC9H,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO;oBACpH,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChK,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACxL,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;oBACzH,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,iCAAiC,EAAE,IAAI;oBAC7H,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,iDAAiD,EAAE,CAAC;YACrG,CAAC;oBAAS,CAAC;gBAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,QAAgB,EAAE,UAAsB;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAwF,CAAC;YAC3N,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAY,CAAC;YAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAC;YAC3I,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACxI,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;mBACzJ,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,yDAAyD,CAAC,CAAC;YAC9L,IAAI,OAA2B,EAAE,OAA4D,EAAE,GAAuB,CAAC;YACvH,IAAI,EAAsB,EAAE,OAAO,GAAG,KAAK,CAAC;YAC5C,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAC,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9H,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,WAAW;oBACxI,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;gBAC9E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACvH,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO;oBAC7L,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;gBAC7E,UAAU,EAAE,CAAC;gBACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,iBAAiB,EAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBACrO,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;oBAAC,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAAC,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBAAC,CAAC,IAAI,KAAK,CAAC;gBAAC,CAAC;gBAC3K,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,EAAE,GAAG,SAAS,CAAC;gBACzF,UAAU,EAAE,CAAC;gBAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC;oBAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;gBAAC,CAAC;wBAC7G,CAAC;oBAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACnC,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gBAClF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAClG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,CAAC;gBACtB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,mGAAmG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACnL,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC;oBAAC,IAAI,EAAE,KAAK,SAAS;wBAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;QACnI,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS;QACP,2EAA2E;QAC3E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qIAAqI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/L,CAAC;IACO,KAAK,CAAC,MAAc,EAAE,EAAU,EAAE,MAAc;QACtD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,mBAAmB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChM,CAAC;CACF"}

package/dist/services/recovery/contracts.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+const GiB = 1024 ** 3;
+export const RecoveryPolicySchema = z.object({
+    version: z.literal(1).default(1),
+    enabled: z.boolean().default(true),
+    scanMs: z.number().int().min(100).max(60000).default(15000),
+    massFiles: z.number().int().min(1).max(100000).default(20),
+    massPercent: z.number().min(0).max(100).default(20),
+    deletedFiles: z.number().int().min(1).max(100000).default(10),
+    gitRequired: z.boolean().default(false),
+    gitDirectory: z.string().max(2048).nullable().default(null),
+    projectBytes: z.number().int().min(1024 * 1024).max(100 * GiB).default(5 * GiB),
+    retentionDays: z.number().int().min(1).max(3650).default(30),
+    retainedPoints: z.number().int().min(1).max(10000).default(200),
+    fileBytes: z.number().int().min(1024).max(GiB).default(64 * 1024 * 1024),
+    maxEntries: z.number().int().min(1).max(1000000).default(100000),
+    dataRoots: z.array(z.string().min(1).max(1024)).max(100).default([]),
+}).strict();
+export const RecoveryInstallationSchema = z.object({
+    version: z.literal(1).default(1),
+    storageBytes: z.number().int().min(1024 * 1024).max(1024 * GiB).default(20 * GiB),
+    freeFloorBytes: z.number().int().min(0).max(100 * GiB).default(500 * 1024 * 1024),
+}).strict();
+//# sourceMappingURL=contracts.js.map

package/dist/services/recovery/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../src/services/recovery/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AACtB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC;IAC/E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACxE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAChE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC;IACjF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;CAClF,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/services/recovery/databaseAwareness.js

@@ -0,0 +1,179 @@
+import fs from 'node:fs';
+import Database from 'better-sqlite3';
+import { z } from 'zod';
+import { DodoError } from '../../errors.js';
+import { digestOf, newId } from '../../util/hash.js';
+const identifier = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,63}$/);
+const migrationId = z.string().min(1).max(128).regex(/^[A-Za-z0-9_.-]+$/);
+export const DatabaseTargetSchema = z.object({
+    name: z.string().min(1).max(80), adapter: z.literal('sqlite-migration-table'),
+    databaseFile: z.string().min(1).max(1024).regex(/\.(?:db|sqlite|sqlite3)$/i),
+    table: identifier, column: identifier,
+    onMismatch: z.enum(['block', 'warn']).default('block'),
+}).strict();
+const identity = (s) => `${s.dev}:${s.ino}:${s.birthtimeMs}`;
+/** Read-only metadata adapter, never a generic SQL executor or database undo. */
+export class RecoveryDatabases {
+    s;
+    r;
+    constructor(s, r) {
+        this.s = s;
+        this.r = r;
+    }
+    get db() { return this.s.store.db; }
+    file(definition, expected) {
+        const rel = this.s.wfs.normalizeRel(definition.databaseFile);
+        if (rel !== definition.databaseFile)
+            throw new DodoError('PATH_DENIED', 'database path must be canonical and project-relative');
+        const file = this.s.wfs.resolve(rel), st = file.stat;
+        if (!st?.isFile() || st.nlink !== 1 || (expected && identity(st) !== expected))
+            throw new DodoError('PATH_DENIED', 'registered database identity changed or is not a regular unlinked file');
+        for (const suffix of ['-wal', '-shm', '-journal']) {
+            const side = this.s.wfs.resolve(rel + suffix, { allowMissing: true });
+            if (side.stat && (!side.stat.isFile() || side.stat.nlink !== 1))
+                throw new DodoError('PATH_DENIED', 'database sidecar is not a regular unlinked file');
+        }
+        return { ...file, stat: st };
+    }
+    row(id) {
+        this.r.assertProject();
+        const row = this.db.prepare('SELECT * FROM recovery_database_targets WHERE id=? AND workspace_id=?').get(id, this.s.workspaceId);
+        if (!row)
+            throw new DodoError('NOT_FOUND', 'database target unavailable for this project');
+        return row;
+    }
+    list() {
+        this.r.assertProject();
+        return this.db.prepare('SELECT * FROM recovery_database_targets WHERE workspace_id=? ORDER BY id').all(this.s.workspaceId)
+            .map(row => ({ id: row.id, revision: row.revision, enabled: Boolean(row.enabled), definition: DatabaseTargetSchema.parse(JSON.parse(row.definition)) }));
+    }
+    summary() {
+        const count = this.db.prepare('SELECT COUNT(*) AS n FROM recovery_database_targets WHERE workspace_id=? AND enabled=1').get(this.s.workspaceId).n;
+        return { configured: count > 0, targetCount: count, state: 'UNKNOWN', databaseRollback: 'NOT_SUPPORTED', mutationsPerformed: false };
+    }
+    read(row) {
+        const definition = DatabaseTargetSchema.parse(JSON.parse(row.definition));
+        const before = this.file(definition, row.file_identity);
+        // No URI options, credentials, extension loading, migrations or writable connection.
+        const db = new Database(before.abs, { readonly: true, fileMustExist: true, timeout: 1000 });
+        try {
+            db.pragma('query_only=ON');
+            db.pragma('trusted_schema=OFF');
+            db.exec('BEGIN');
+            const table = db.prepare('SELECT type,sql FROM sqlite_schema WHERE name=?').get(definition.table);
+            if (!table || table.type !== 'table' || /CREATE\s+VIRTUAL\s+TABLE/i.test(table.sql))
+                throw new DodoError('NOT_SUPPORTED', 'migration metadata must be an ordinary SQLite table');
+            // Identifiers are strictly parsed above; no user-supplied SQL clauses.
+            const values = db.prepare(`SELECT m."${definition.column}" AS migration_id FROM "${definition.table}" AS m LIMIT 1001`).all();
+            if (values.length > 1000)
+                throw new DodoError('RESOURCE_LIMIT', 'migration metadata exceeds the bounded adapter limit');
+            const ids = values.map(value => migrationId.parse(value.migration_id));
+            if (new Set(ids).size !== ids.length)
+                throw new DodoError('CONFLICT', 'migration metadata contains duplicate IDs');
+            db.exec('COMMIT');
+            this.file(definition, row.file_identity);
+            return ids.sort();
+        }
+        catch {
+            throw new DodoError('RECOVERY_REQUIRED', 'migration metadata could not be verified; database contents and SQL errors are withheld');
+        }
+        finally {
+            db.close();
+        }
+    }
+    /** Authenticated owner only; caller must supply a current owner lease. */
+    async configure(raw, revalidate) {
+        const input = z.object({ targetId: z.string().max(128).optional(), expectedRevision: z.number().int().nonnegative(),
+            enabled: z.boolean(), confirmReadOnlyAccess: z.literal(true), definition: DatabaseTargetSchema }).strict().parse(raw);
+        return this.s.mutations.run(async () => {
+            this.r.assertProject();
+            revalidate();
+            const old = input.targetId ? this.row(input.targetId) : undefined;
+            if ((old?.revision ?? 0) !== input.expectedRevision)
+                throw new DodoError('CONFLICT', 'database target revision changed');
+            if (!old && this.list().length >= 4)
+                throw new DodoError('RESOURCE_LIMIT', 'database target limit reached');
+            const file = this.file(input.definition), id = old?.id ?? newId('dbtarget'), revision = input.expectedRevision + 1;
+            const row = { id, workspace_id: this.s.workspaceId, revision, enabled: Number(input.enabled), definition: JSON.stringify(input.definition), file_identity: identity(file.stat) };
+            if (input.enabled)
+                this.read(row); // Readiness first; never save a false ready state.
+            revalidate();
+            this.db.prepare(`INSERT INTO recovery_database_targets VALUES (?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET revision=excluded.revision,
+        enabled=excluded.enabled,definition=excluded.definition,file_identity=excluded.file_identity`)
+                .run(id, this.s.workspaceId, revision, row.enabled, row.definition, row.file_identity);
+            this.audit('configure', id, digestOf(input));
+            return { id, revision, enabled: input.enabled, readOnly: true };
+        });
+    }
+    inspectOwner(id, revalidate) {
+        revalidate();
+        const row = this.row(id), ids = this.read(row);
+        revalidate();
+        return { targetId: id, revision: row.revision, appliedMigrationIds: ids, appliedDigest: digestOf(ids), databaseRollback: 'NOT_SUPPORTED' };
+    }
+    async bind(raw, revalidate) {
+        const input = z.object({ targetId: z.string().max(128), expectedRevision: z.number().int().positive(), checkpointId: z.string().max(128),
+            requiredMigrationIds: z.array(migrationId).max(1000), allowExtra: z.boolean().default(false), confirmCompatibilityRule: z.literal(true) }).strict().parse(raw);
+        return this.s.mutations.run(async () => {
+            revalidate();
+            const row = this.row(input.targetId);
+            if (!row.enabled || row.revision !== input.expectedRevision)
+                throw new DodoError('CONFLICT', 'database target disabled or revision changed');
+            if (new Set(input.requiredMigrationIds).size !== input.requiredMigrationIds.length)
+                throw new DodoError('INVALID_INPUT', 'duplicate required migration ID');
+            const manifest = await this.r.history.manifest(input.checkpointId, { id: 'local-config-owner', owner: true });
+            revalidate();
+            this.db.prepare(`INSERT INTO recovery_database_bindings VALUES (?,?,?,?,?,?) ON CONFLICT(target_id,snapshot_id) DO UPDATE SET
+        target_revision=excluded.target_revision,manifest_hash=excluded.manifest_hash,expected_ids=excluded.expected_ids,allow_extra=excluded.allow_extra`)
+                .run(row.id, manifest.id, row.revision, digestOf(manifest), JSON.stringify([...input.requiredMigrationIds].sort()), Number(input.allowExtra));
+            this.audit('bind', row.id, digestOf(input));
+            return { targetId: row.id, checkpointId: manifest.id, requiredCount: input.requiredMigrationIds.length, ruleSource: 'explicit_owner', databaseChanged: false };
+        });
+    }
+    async compatibility(snapshotIds) {
+        this.r.assertProject();
+        const rows = this.db.prepare('SELECT * FROM recovery_database_targets WHERE workspace_id=? AND enabled=1 ORDER BY id').all(this.s.workspaceId);
+        const items = [];
+        for (const row of rows) {
+            const definition = DatabaseTargetSchema.parse(JSON.parse(row.definition));
+            let result = { targetId: row.id, revision: row.revision, state: 'UNKNOWN', reason: 'no_single_snapshot_compatibility_rule', blocking: definition.onMismatch === 'block' };
+            try {
+                if (snapshotIds.length === 1) {
+                    const binding = this.db.prepare('SELECT * FROM recovery_database_bindings WHERE target_id=? AND snapshot_id=?').get(row.id, snapshotIds[0]);
+                    if (binding && binding.target_revision === row.revision) {
+                        const manifest = await this.r.history.manifest(snapshotIds[0], { id: 'local-config-owner', owner: true });
+                        if (binding.manifest_hash !== digestOf(manifest))
+                            throw new DodoError('RECOVERY_REQUIRED', 'manifest binding changed');
+                        const applied = this.read(row), required = z.array(migrationId).max(1000).parse(JSON.parse(binding.expected_ids));
+                        const compatible = required.every(id => applied.includes(id)) && (Boolean(binding.allow_extra) || required.length === applied.length);
+                        result = { ...result, state: compatible ? 'COMPATIBLE' : 'INCOMPATIBLE', reason: compatible ? 'owner_rule_matches_applied_ids' : 'applied_ids_differ_from_owner_rule',
+                            blocking: !compatible && definition.onMismatch === 'block', appliedDigest: digestOf(applied), appliedCount: applied.length, requiredCount: required.length };
+                    }
+                }
+            }
+            catch {
+                result = { ...result, reason: 'metadata_or_manifest_unavailable' };
+            }
+            items.push(result);
+        }
+        const value = { configured: rows.length > 0, state: !rows.length || items.some(i => i.state === 'UNKNOWN') ? 'UNKNOWN' : items.some(i => i.state === 'INCOMPATIBLE') ? 'INCOMPATIBLE' : 'COMPATIBLE',
+            items, blocking: items.some(i => i.blocking), databaseChanged: false, databaseRollback: 'NOT_SUPPORTED' };
+        return { ...value, digest: digestOf(value) };
+    }
+    async unbind(raw, revalidate) {
+        const input = z.object({ targetId: z.string().max(128), expectedRevision: z.number().int().positive(), checkpointId: z.string().max(128), confirmCompatibilityRemoval: z.literal(true) }).strict().parse(raw);
+        return this.s.mutations.run(async () => {
+            revalidate();
+            const target = this.row(input.targetId);
+            if (target.revision !== input.expectedRevision)
+                throw new DodoError('CONFLICT', 'database target revision changed');
+            const changed = this.db.prepare('DELETE FROM recovery_database_bindings WHERE target_id=? AND snapshot_id=?').run(target.id, input.checkpointId).changes;
+            this.audit('unbind', target.id, digestOf(input));
+            return { targetId: target.id, checkpointId: input.checkpointId, removed: changed > 0, databaseChanged: false };
+        });
+    }
+    audit(action, id, digest) {
+        this.s.store.audit({ principal: 'local-config-owner', workspaceId: this.s.workspaceId, tool: `recovery.database.${action}`, refId: id, inputDigest: digest, result: 'owner_readonly_rule' });
+    }
+}
+//# sourceMappingURL=databaseAwareness.js.map