ftown-bridge 0.19.19 → 0.19.21

package/dist/solo/hub-manager.js

@@ -0,0 +1,381 @@
+/**
+ * Solo hub manager — downloads, verifies, configures, spawns and stops the
+ * managed Centrifugo child (contract ownership: solo/hub-manager.ts(+test)).
+ *
+ * Dependency policy (deliberate): node builtins + node:child_process + the
+ * SYSTEM `tar` binary only — no new npm deps. tar(1) ships with macOS and
+ * Linux, the only platforms resolvePlatformTriple() supports, so archive
+ * listing/extraction needs no bundled extraction library.
+ *
+ * Invariants owned here: S6 (embedded CENTRIFUGO_SHA256 verification before
+ * anything is extracted), S7 (0600 config + pidfile), S15 (child argv is
+ * exactly [binPath, '-c', configPath]; no secrets in argv/env), S16 (logs
+ * never echo secrets — stderr tails are sanitized), L2 (stale pidfile reap
+ * under dataDir/solo/ on boot).
+ */
+import { execFile as execFileCb, spawn as nodeSpawn } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { chmod, copyFile, mkdir, realpath, readdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { promisify } from 'node:util';
+import { CENTRIFUGO_SHA256, CENTRIFUGO_VERSION, HUB_JWT_AUDIENCE, } from './contract.js';
+const execFile = promisify(execFileCb);
+const defaultSpawn = (command, args, options) => nodeSpawn(command, args, options);
+export class UnsupportedPlatformError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'UnsupportedPlatformError';
+    }
+}
+export class ChecksumError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ChecksumError';
+    }
+}
+export class ArchiveSafetyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ArchiveSafetyError';
+    }
+}
+export class HubStartError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'HubStartError';
+    }
+}
+// ---------- Platform triple & release asset URL ----------
+const ARCH_ALIASES = {
+    x64: 'amd64',
+    arm64: 'arm64',
+};
+export function resolvePlatformTriple(platform = process.platform, arch = process.arch) {
+    const archAlias = ARCH_ALIASES[arch];
+    if ((platform === 'darwin' || platform === 'linux') && archAlias !== undefined) {
+        return `${platform}-${archAlias}`;
+    }
+    throw new UnsupportedPlatformError(`unsupported platform/arch pair: ${platform}/${arch}`);
+}
+export function assetUrl(version, triple) {
+    const bare = version.startsWith('v') ? version.slice(1) : version;
+    // Release assets use UNDERSCORES between parts (centrifugo_5.4.9_darwin_arm64.tar.gz)
+    // while our platform triple is dashed — verified against the v5.4.9 checksums.txt.
+    const assetTriple = triple.split('-').join('_');
+    return `https://github.com/centrifugal/centrifugo/releases/download/${version}/centrifugo_${bare}_${assetTriple}.tar.gz`;
+}
+// ---------- Binary ensure (S6) ----------
+const MAX_ARCHIVE_ENTRIES = 200;
+const TAIL_LIMIT_BYTES = 8192;
+const SANITIZED_TAIL_LIMIT = 2000;
+function sha256Hex(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+async function sha256File(filePath) {
+    return sha256Hex(new Uint8Array(await readFile(filePath)));
+}
+/**
+ * Validates tar entries against the extraction allowlist (S4/S17):
+ * names must be relative without '..' segments; entry types must be regular
+ * file ('-') or directory ('d') — symlinks, hardlinks, devices are refused.
+ */
+export function assertSafeTarEntries(names, verboseLines) {
+    if (names.length !== verboseLines.length) {
+        throw new ArchiveSafetyError('tar listing mismatch between name and verbose output');
+    }
+    for (const name of names) {
+        if (name.startsWith('/')) {
+            throw new ArchiveSafetyError(`refusing absolute archive entry path`);
+        }
+        if (name.split('/').includes('..')) {
+            throw new ArchiveSafetyError(`refusing archive entry escaping target dir`);
+        }
+    }
+    for (const line of verboseLines) {
+        const kind = line.charAt(0);
+        if (kind !== '-' && kind !== 'd') {
+            throw new ArchiveSafetyError(`refusing non-regular-file archive entry (type "${kind}")`);
+        }
+    }
+}
+async function locateCentrifugoBinary(root) {
+    const found = [];
+    const walk = async (dir) => {
+        for (const entry of await readdir(dir, { withFileTypes: true })) {
+            const full = path.join(dir, entry.name);
+            if (entry.isSymbolicLink()) {
+                throw new ArchiveSafetyError('symlink present in extracted hub archive');
+            }
+            if (entry.isDirectory()) {
+                await walk(full);
+            }
+            else if (entry.isFile() && entry.name === 'centrifugo') {
+                found.push(full);
+            }
+        }
+    };
+    await walk(root);
+    if (found.length !== 1) {
+        throw new ChecksumError(`unexpected hub archive layout: expected exactly one "centrifugo" entry, found ${found.length}`);
+    }
+    const rootReal = await realpath(root);
+    const binaryReal = await realpath(found[0]);
+    if (!binaryReal.startsWith(rootReal + path.sep)) {
+        throw new ArchiveSafetyError('extracted hub binary resolved outside its sandbox');
+    }
+    return found[0];
+}
+export async function ensureHubBinary(opts) {
+    const version = opts.version ?? CENTRIFUGO_VERSION;
+    const triple = resolvePlatformTriple();
+    const expectedSha = (opts.digests ?? CENTRIFUGO_SHA256)[triple];
+    if (expectedSha === undefined) {
+        throw new ChecksumError(`no embedded sha256 digest for platform triple "${triple}"`);
+    }
+    const soloDir = path.join(opts.dataDir, 'solo');
+    const binDir = path.join(soloDir, 'bin');
+    const target = path.join(binDir, `centrifugo-${version}`);
+    // The embedded digests describe the RELEASE ARCHIVE, not the unpacked binary,
+    // so the cache records the verified archive digest in a sidecar at install
+    // time; a cached install is trusted only if that record still matches.
+    const targetSidecar = `${target}.sha256`;
+    await mkdir(binDir, { recursive: true });
+    const sidecarSha = existsSync(targetSidecar)
+        ? (await readFile(targetSidecar, 'utf8').catch(() => '')).trim()
+        : '';
+    if (existsSync(target) &&
+        (sidecarSha === expectedSha || (await sha256File(target)) === expectedSha)) {
+        return target;
+    }
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const url = assetUrl(version, triple);
+    const res = await fetchImpl(url);
+    if (!res.ok) {
+        throw new ChecksumError(`hub binary download failed: HTTP ${res.status} from ${url}`);
+    }
+    const archive = Buffer.from(await res.arrayBuffer());
+    const actualSha = sha256Hex(archive);
+    if (actualSha !== expectedSha) {
+        // S6: mismatch aborts BEFORE any extraction — nothing is ever unpacked or run.
+        throw new ChecksumError(`hub archive checksum mismatch for ${triple}: expected sha256 ${expectedSha}, got ${actualSha}; nothing was extracted`);
+    }
+    const archivePath = path.join(soloDir, `.download-${randomUUID()}.tar.gz`);
+    const extractDir = path.join(soloDir, `.extract-${randomUUID()}`);
+    await writeFile(archivePath, archive, { mode: 0o600 });
+    await mkdir(extractDir, { recursive: true });
+    try {
+        const tarOpts = { encoding: 'utf8', maxBuffer: 16 * 1024 * 1024 };
+        const names = (await execFile('tar', ['-tzf', archivePath], tarOpts)).stdout
+            .split('\n')
+            .map((line) => line.trim())
+            .filter((line) => line.length > 0);
+        const verbose = (await execFile('tar', ['-tvzf', archivePath], tarOpts)).stdout
+            .split('\n')
+            .filter((line) => line.trim().length > 0);
+        if (names.length > MAX_ARCHIVE_ENTRIES) {
+            throw new ArchiveSafetyError(`hub archive has too many entries (${names.length})`);
+        }
+        assertSafeTarEntries(names, verbose);
+        await execFile('tar', ['-xzf', archivePath, '-C', extractDir], tarOpts);
+        const extracted = await locateCentrifugoBinary(extractDir);
+        try {
+            await rename(extracted, target);
+        }
+        catch (err) {
+            if (err.code !== 'EXDEV')
+                throw err;
+            await copyFile(extracted, target);
+        }
+        await chmod(target, 0o700);
+        await writeFile(targetSidecar, `${expectedSha}\n`, { mode: 0o600 });
+        return target;
+    }
+    finally {
+        await rm(extractDir, { recursive: true, force: true });
+        await rm(archivePath, { force: true });
+    }
+}
+// ---------- Config write (frozen keys, S7) ----------
+/**
+ * Frozen solo hub configuration. Security keys mirror the contract block
+ * translated to actual centrifugo v5 flat key names (verified against the
+ * v5.4.9 source defaults): `admin` disables the admin web UI, `api_disable`
+ * disables the server HTTP API, `allow_anonymous_connect_without_token=false`
+ * means no anonymous client connections. address/port are operational keys so
+ * the child binds loopback on the ephemeral port the integrator assigned.
+ */
+function hubConfigObject(port, secret) {
+    return {
+        address: '127.0.0.1',
+        port,
+        token_hmac_secret_key: secret,
+        token_audience: HUB_JWT_AUDIENCE,
+        allowed_origins: [],
+        websocket_compression: false,
+        allow_anonymous_connect_without_token: false,
+        admin: false,
+        api_disable: true,
+        health: true,
+    };
+}
+export async function writeHubConfig(configPath, opts) {
+    await mkdir(path.dirname(configPath), { recursive: true });
+    const body = JSON.stringify(hubConfigObject(opts.port, opts.secret), null, 2) + '\n';
+    await writeFile(configPath, body, { encoding: 'utf8', mode: 0o600 });
+    // Enforce even when overwriting a pre-existing file (mode applies at creation).
+    await chmod(configPath, 0o600);
+}
+const DEFAULT_HEALTH_INTERVAL_MS = 500;
+const DEFAULT_HEALTH_TRY_TIMEOUT_MS = 1000;
+const DEFAULT_HEALTH_DEADLINE_MS = 30_000;
+const STOP_GRACE_MS = 3_000;
+const STOP_POLL_MS = 100;
+export function hubPidFilePath(dataDir) {
+    return path.join(dataDir, 'solo', 'hub.pid');
+}
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code === 'EPERM';
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function appendTail(prev, chunk) {
+    return (prev + chunk.toString('utf8')).slice(-TAIL_LIMIT_BYTES);
+}
+/** Strips ANSI escapes and redacts the hub secret (S16). */
+function sanitizeTail(tail, secret) {
+    let out = tail.replace(/\x1b\[[0-9;]*[A-Za-z]/g, '');
+    if (secret.length >= 8) {
+        out = out.split(secret).join('[redacted]');
+    }
+    return out.slice(-SANITIZED_TAIL_LIMIT);
+}
+async function probeHealth(url, timeoutMs, fetchImpl) {
+    try {
+        const res = await fetchImpl(url, { signal: AbortSignal.timeout(timeoutMs) });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+async function reapStalePidFile(pidFile) {
+    const raw = await readFile(pidFile, 'utf8').catch(() => null);
+    await rm(pidFile, { force: true });
+    if (raw === null)
+        return;
+    const pid = Number.parseInt(raw.trim(), 10);
+    if (!Number.isInteger(pid) || pid <= 0 || !pidAlive(pid))
+        return;
+    try {
+        process.kill(pid, 'SIGTERM');
+    }
+    catch {
+        // lost the race — nothing to reap
+    }
+}
+export async function startHub(opts) {
+    let port;
+    let secret;
+    try {
+        const parsed = JSON.parse(await readFile(opts.configPath, 'utf8'));
+        port = Number(parsed.port);
+        secret = typeof parsed.token_hmac_secret_key === 'string' ? parsed.token_hmac_secret_key : '';
+    }
+    catch (err) {
+        throw new HubStartError(`cannot read hub config ${opts.configPath}: ${errorMessage(err)}`);
+    }
+    if (!Number.isInteger(port) || port <= 0 || port > 65535) {
+        throw new HubStartError(`hub config ${opts.configPath} has no usable port`);
+    }
+    const pidFile = hubPidFilePath(opts.dataDir);
+    await mkdir(path.dirname(pidFile), { recursive: true });
+    await reapStalePidFile(pidFile);
+    const spawn = opts.spawnImpl ?? defaultSpawn;
+    let child;
+    try {
+        // S15: the ONLY argv the child ever gets.
+        child = spawn(opts.binPath, ['-c', opts.configPath], { stdio: ['ignore', 'pipe', 'pipe'] });
+    }
+    catch (err) {
+        throw new HubStartError(`failed to spawn hub binary: ${errorMessage(err)}`);
+    }
+    const state = { exit: null };
+    let stderrTail = '';
+    child.stderr?.on('data', (chunk) => {
+        stderrTail = appendTail(stderrTail, chunk);
+    });
+    child.stdout?.on('data', () => { });
+    // S16: log the failure kind only — never argv, config contents, or secrets.
+    child.on('error', (err) => {
+        console.error(`[ftown-solo] hub process error: ${err.message}`);
+    });
+    child.once('exit', (code, signal) => {
+        state.exit = { code, signal };
+    });
+    if (typeof child.pid === 'number') {
+        await writeFile(pidFile, `${child.pid}\n`, { mode: 0o600 });
+        await chmod(pidFile, 0o600);
+    }
+    const base = (opts.healthBaseUrl ?? `http://127.0.0.1:${port}`).replace(/\/+$/, '');
+    const healthUrl = `${base}/health`;
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const intervalMs = opts.healthIntervalMs ?? DEFAULT_HEALTH_INTERVAL_MS;
+    const tryTimeoutMs = opts.healthTryTimeoutMs ?? DEFAULT_HEALTH_TRY_TIMEOUT_MS;
+    const deadlineMs = opts.healthDeadlineMs ?? DEFAULT_HEALTH_DEADLINE_MS;
+    const deadline = Date.now() + deadlineMs;
+    let healthy = false;
+    while (Date.now() < deadline && !state.exit) {
+        if (await probeHealth(healthUrl, tryTimeoutMs, fetchImpl)) {
+            healthy = true;
+            break;
+        }
+        await sleep(intervalMs);
+    }
+    if (!healthy) {
+        const exitBeforeKill = state.exit;
+        child.kill('SIGKILL');
+        await rm(pidFile, { force: true });
+        const reason = exitBeforeKill
+            ? `hub exited early (code=${exitBeforeKill.code}, signal=${exitBeforeKill.signal})`
+            : `hub did not become healthy within ${deadlineMs}ms`;
+        throw new HubStartError(`${reason}; last hub stderr:\n${sanitizeTail(stderrTail, secret)}`);
+    }
+    return { child, pid: child.pid, port };
+}
+/** SIGTERM → 3s grace → SIGKILL; always unlinks the pidfile. Returns whether a live process was stopped. */
+export async function stopHub(dataDir) {
+    const pidFile = hubPidFilePath(dataDir);
+    const raw = await readFile(pidFile, 'utf8').catch(() => null);
+    await rm(pidFile, { force: true });
+    if (raw === null)
+        return false;
+    const pid = Number.parseInt(raw.trim(), 10);
+    if (!Number.isInteger(pid) || pid <= 0 || !pidAlive(pid))
+        return false;
+    process.kill(pid, 'SIGTERM');
+    const deadline = Date.now() + STOP_GRACE_MS;
+    while (pidAlive(pid) && Date.now() < deadline) {
+        await sleep(STOP_POLL_MS);
+    }
+    if (pidAlive(pid)) {
+        try {
+            process.kill(pid, 'SIGKILL');
+        }
+        catch {
+            // already gone
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=hub-manager.js.map

package/dist/solo/hub-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-manager.js","sourceRoot":"","sources":["../../src/solo/hub-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAuBvC,MAAM,YAAY,GAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CACzD,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAA+B,CAAC;AAElE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,4DAA4D;AAE5D,MAAM,YAAY,GAAqC;IACrD,GAAG,EAAE,OAAO;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,GAAG,QAAQ,IAAI,SAAS,EAAoB,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,wBAAwB,CAAC,mCAAmC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,MAAsB;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAClE,sFAAsF;IACtF,mFAAmF;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,+DAA+D,OAAO,eAAe,IAAI,IAAI,WAAW,SAAS,CAAC;AAC3H,CAAC;AAED,2CAA2C;AAE3C,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAalC,SAAS,SAAS,CAAC,IAAgB;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,OAAO,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAwB,EAAE,YAA+B;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAAC,sDAAsD,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAkB,CAAC,4CAA4C,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,IAAI,IAAI,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,0CAA0C,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CACrB,iFAAiF,KAAK,CAAC,MAAM,EAAE,CAChG,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC;IACnD,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,kDAAkD,MAAM,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,OAAO,EAAE,CAAC,CAAC;IAC1D,8EAA8E;IAC9E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,aAAa,GAAG,GAAG,MAAM,SAAS,CAAC;IACzC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC;QAC1C,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QAChE,CAAC,CAAC,EAAE,CAAC;IACP,IACE,UAAU,CAAC,MAAM,CAAC;QAClB,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,WAAW,CAAC,EAC1E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CAAC,oCAAoC,GAAG,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,+EAA+E;QAC/E,MAAM,IAAI,aAAa,CACrB,qCAAqC,MAAM,qBAAqB,WAAW,SAAS,SAAS,yBAAyB,CACvH,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAe,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM;aACzE,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM;aAC5E,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,GAAG,CAAC;YAC/D,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,WAAW,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,uDAAuD;AAEvD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc;IACnD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,IAAI;QACJ,qBAAqB,EAAE,MAAM;QAC7B,cAAc,EAAE,gBAAgB;QAChC,eAAe,EAAE,EAAE;QACnB,qBAAqB,EAAE,KAAK;QAC5B,qCAAqC,EAAE,KAAK;QAC5C,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAAsC;IAEtC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACrF,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,gFAAgF;IAChF,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAuBD,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAC3C,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAsB;IACtD,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;AAClE,CAAC;AAED,4DAA4D;AAC5D,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACvB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,SAAiB,EAAE,SAAoB;IAC7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAe;IAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO;IACjE,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,IAAI,IAAY,CAAC;IACjB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAGhE,CAAC;QACF,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,GAAG,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,0BAA0B,IAAI,CAAC,UAAU,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACzD,MAAM,IAAI,aAAa,CAAC,cAAc,IAAI,CAAC,UAAU,qBAAqB,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC;IAC7C,IAAI,KAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,0CAA0C;QAC1C,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,+BAA+B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,KAAK,GAEP,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QAClD,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QAC/B,OAAO,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAClC,KAAK,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,oBAAoB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,GAAG,IAAI,SAAS,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IAEzC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,MAAM,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;YAC1D,OAAO,GAAG,IAAI,CAAC;YACf,MAAM;QACR,CAAC;QACD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,cAAc;YAC3B,CAAC,CAAC,0BAA0B,cAAc,CAAC,IAAI,YAAY,cAAc,CAAC,MAAM,GAAG;YACnF,CAAC,CAAC,qCAAqC,UAAU,IAAI,CAAC;QACxD,MAAM,IAAI,aAAa,CAAC,GAAG,MAAM,uBAAuB,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAe;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/solo/panel-manager.d.ts

@@ -0,0 +1,129 @@
+/**
+ * ftown Solo — panel-manager.
+ *
+ * Owns the managed Next.js STANDALONE child ("the panel"):
+ *   - bundle URL templating from PANEL_BUNDLE_URL_TEMPLATE
+ *   - bundle fetch + sha256 sidecar verification (S6, first-party trust root)
+ *   - extraction hardened per S4 (zip-slip, entry-type allowlist) and S17
+ *     (per-entry / total uncompressed / entry-count caps — decompression bombs)
+ *   - spawn on 127.0.0.1:<port>, pinned via HOSTNAME/PORT env (private binding),
+ *     argv carries ONLY [interpreter, server.js] — no secrets ever (S15)
+ *   - lifecycle L2: pidfile under <dataDir>/solo/panel.pid with stale-orphan
+ *     reap on boot; SIGTERM → 3s → SIGKILL shutdown
+ *   - pinned health probe: HEAD http://127.0.0.1:<port>/ , status <500 = up,
+ *     1s probe timeout, 45s give-up (cold-start budget)
+ *
+ * EXTERNAL TOOLING CHOICE (documented): the system `tar` binary is used for
+ * extraction (`tar -xzf --no-same-owner`) and for the entry-name pre-listing
+ * (`tar -tzf`). Structural enforcement (S4 type allowlist, S17 byte caps) is
+ * performed by walking the ustar headers of the gunzipped stream with node
+ * builtins only: `-t` output is prose whose layout differs between bsdtar and
+ * GNU tar (and is ambiguous for filenames containing whitespace), whereas raw
+ * ustar headers are exact, portable, and let us abort MID-STREAM on cap
+ * breach instead of after extraction. No third-party dependencies.
+ */
+import { spawn as nodeSpawn } from 'node:child_process';
+import type { ChildProcess } from 'node:child_process';
+/** Any panel bundle acquisition/installation failure. */
+export declare class PanelBundleError extends Error {
+    constructor(message: string);
+}
+/** sha256 sidecar verification failure (S6) — install aborted, nothing ran. */
+export declare class ChecksumError extends PanelBundleError {
+    constructor(message: string);
+}
+/** Panel child failed to spawn or never became healthy. */
+export declare class PanelStartError extends Error {
+    constructor(message: string);
+}
+/** Per-entry uncompressed size cap (decompression-bomb defense). */
+export declare const MAX_ENTRY_BYTES: number;
+/** Total uncompressed size cap across all entries. */
+export declare const MAX_TOTAL_BYTES: number;
+/** Maximum number of archive entries. */
+export declare const MAX_ENTRIES = 20000;
+/** Pinned panel health-probe parameters (contract: probe table). */
+export declare const PANEL_HEALTH_PROBE_TIMEOUT_MS = 1000;
+export declare const PANEL_HEALTH_MAX_WAIT_MS = 45000;
+/** L2 shutdown: SIGTERM → 3s → SIGKILL. */
+export declare const STOP_GRACE_MS = 3000;
+/** Substitute every `<version>` placeholder in the frozen template. */
+export declare function panelBundleUrl(version: string): string;
+/**
+ * Normalize a user- or config-supplied panel version into the bare semver
+ * expected by {@link panelBundleUrl} (the template already supplies the
+ * `v` prefix for the release-tag segment). Trims surrounding whitespace and
+ * strips a single leading `v`/`V`, so `v0.19.20`, `V0.19.20`, and `0.19.20`
+ * all resolve to the same bundle URL.
+ */
+export declare function normalizePanelVersion(raw: string): string;
+export interface EnsurePanelBundleOptions {
+    /** Bridge data dir (~/.ftown/data). Bundle caches under <dataDir>/solo/panel/. */
+    dataDir: string;
+    /** UI package version identifying the release asset. */
+    version: string;
+    /** Injectable fetch (tests run offline). Defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Ensure the standalone bundle for `version` is extracted under
+ * `<dataDir>/solo/panel/<version>/` and return that directory.
+ *
+ * Flow: cached-marker short-circuit → download tar.gz → download `.sha256`
+ * sidecar → lowercase-hex comparison (mismatch ⇒ cleanup + ChecksumError) →
+ * pre-scan (`tar -tzf` names + structural ustar walk enforcing S4/S17) →
+ * `tar -xzf --no-same-owner` → write `.ok` marker (0600).
+ */
+export declare function ensurePanelBundle(opts: EnsurePanelBundleOptions): Promise<string>;
+/**
+ * Locate the Next standalone output root: the directory containing server.js.
+ * Searches the extract root first, then one level deep (deterministic order).
+ */
+export declare function findPanelServerDir(extractDir: string): Promise<string>;
+export interface StartPanelOptions {
+    /** Extracted bundle directory (findPanelServerDir locates server.js inside). */
+    bundleDir: string;
+    /** Private loopback port chosen by the CALLER (free-port guarantee upstream). */
+    port: number;
+    /** Bridge data dir — pidfile lives at <dataDir>/solo/panel.pid. */
+    dataDir: string;
+    /** Extra environment merged over process.env (never carries secrets, S15). */
+    env?: Record<string, string>;
+    /** Injectable spawn (tests). Defaults to node:child_process spawn. */
+    spawnImpl?: typeof nodeSpawn;
+    /** Injectable health-probe fetch (tests run offline). */
+    healthFetchImpl?: typeof fetch;
+    /** Test seams for the pinned probe budgets (defaults per contract). */
+    probeTimeoutMs?: number;
+    probeIntervalMs?: number;
+    probeMaxWaitMs?: number;
+}
+export interface RunningPanel {
+    pid: number;
+    proc: ChildProcess;
+    /** Directory containing server.js (the standalone output root). */
+    serverDir: string;
+}
+/**
+ * Spawn the panel standalone server pinned to 127.0.0.1:<port>.
+ *
+ * - argv is exactly [process.execPath, <server.js>] — no secrets on the command
+ *   line (S15). Secrets reach children only through 0600 files, never argv/env.
+ * - HOSTNAME=127.0.0.1 pins the standalone server's binding (private port; the
+ *   front proxies everything).
+ * - A stale/orphaned pidfile is detected and reaped before spawn (L2).
+ * - Resolves only after the pinned health probe succeeds (HEAD / <500).
+ */
+export declare function startPanel(opts: StartPanelOptions): Promise<RunningPanel>;
+/**
+ * L2 stale-pidfile semantics (own implementation, mirroring hub-manager
+ * behavior without importing it): if the pidfile names a LIVE process it is an
+ * orphan from a previous run — SIGTERM → 3s → SIGKILL — then remove the
+ * pidfile. Dead/stale/garbled pidfiles are simply unlinked.
+ */
+export declare function reapOrStopByPidFile(pidfile: string, graceMs?: number): Promise<void>;
+/**
+ * Stop the panel previously started under `dataDir`: SIGTERM → 3s → SIGKILL,
+ * then remove the pidfile. Idempotent; safe when no pidfile exists.
+ */
+export declare function stopPanel(dataDir: string): Promise<void>;