instar 0.28.76 → 0.28.78

package/dist/monitoring/delivery-failure-sentinel.js

@@ -0,0 +1,598 @@
+/**
+ * DeliveryFailureSentinel — Layer 3 of telegram-delivery-robustness.
+ *
+ * Spec: docs/specs/telegram-delivery-robustness.md § 4 Layer 3.
+ *
+ * Reads the SQLite queue created by Layer 2 (`pending-relay-store`),
+ * runs the recovery state machine, and is feature-flag-gated default-OFF.
+ *
+ * State machine (per row):
+ *
+ *   queued ──claim──► claimed ──/whoami──► (mismatch → retry)
+ *                                  │
+ *                                  └──tone-gate──► (422 → delivered-tone-gated)
+ *                                          │
+ *                                          └──/telegram/reply──► (200 → delivered-recovered
+ *                                                                  408 → delivered-ambiguous
+ *                                                                  5xx/conn-refused → retry)
+ *                                          │
+ *                                          └──ttl/attempts exhausted ──► escalated
+ *
+ * The sentinel never overrides the tone-gate authority (§5 signal-vs-
+ * authority compliance). On 422 it finalizes the entry as
+ * `delivered-tone-gated` and emits the fixed-template meta-notice on the
+ * original topic.
+ *
+ * Lifecycle: `start()` registers the watchdog tick + (when wsManager is
+ * provided) an SSE handler for `delivery_failed` events. `stop()` clears
+ * timers and detaches from the event stream. `tick()` is exposed for
+ * tests so the recovery loop can be driven without waiting for the
+ * 5-minute backstop interval.
+ *
+ * **Default-OFF.** The constructor enforces nothing; the AgentServer
+ * gates instantiation on `config.monitoring.deliveryFailureSentinel.enabled`.
+ * Layer 1 + Layer 2 ship unconditionally; Layer 3 is opt-in until the
+ * canary criteria in spec § 3i are met.
+ */
+import { EventEmitter } from 'node:events';
+import http from 'node:http';
+import { createHash } from 'node:crypto';
+import { promises as fsp } from 'node:fs';
+import path from 'node:path';
+import { evaluatePolicy, reasonToCategory } from './delivery-failure-sentinel/recovery-policy.js';
+import { WhoamiCache } from '../messaging/whoami-cache.js';
+import { checkToneLocally } from '../messaging/local-tone-check.js';
+import { TEMPLATES, renderEscalation, renderStampedeDigest, renderRecoveredMarker, verifyTemplateIntegrity, } from '../messaging/system-templates.js';
+import { redact } from '../messaging/secret-patterns.js';
+import { DegradationReporter } from './DegradationReporter.js';
+const DEFAULTS = {
+    watchdogIntervalMs: 5 * 60 * 1000,
+    leaseDurationMs: 90 * 1000,
+    perTopicRateMs: 30 * 1000,
+    maxConcurrent: 4,
+    stampedeThreshold: 5,
+    circuitBreakerCount: 5,
+    circuitBreakerWindowMs: 60 * 60 * 1000,
+    restorePurgeAgeMs: 5 * 60 * 1000,
+};
+export class DeliveryFailureSentinel extends EventEmitter {
+    cfg;
+    deps;
+    watchdog = null;
+    unsubscribe = null;
+    running = false;
+    suspended = false;
+    escalationFailures = []; // ms timestamps
+    inFlight = 0;
+    lastTopicDelivery = new Map(); // topic → last delivered ms
+    /** Templates verified at start(). False disables escalation path. */
+    templatesValid = true;
+    /** Restored on first start(); used to keep restore-purge a one-shot. */
+    restorePurged = false;
+    constructor(deps, config = {}) {
+        super();
+        this.cfg = {
+            watchdogIntervalMs: config.watchdogIntervalMs ?? DEFAULTS.watchdogIntervalMs,
+            leaseDurationMs: config.leaseDurationMs ?? DEFAULTS.leaseDurationMs,
+            perTopicRateMs: config.perTopicRateMs ?? DEFAULTS.perTopicRateMs,
+            maxConcurrent: config.maxConcurrent ?? DEFAULTS.maxConcurrent,
+            stampedeThreshold: config.stampedeThreshold ?? DEFAULTS.stampedeThreshold,
+            circuitBreakerCount: config.circuitBreakerCount ?? DEFAULTS.circuitBreakerCount,
+            circuitBreakerWindowMs: config.circuitBreakerWindowMs ?? DEFAULTS.circuitBreakerWindowMs,
+            restorePurgeAgeMs: config.restorePurgeAgeMs ?? DEFAULTS.restorePurgeAgeMs,
+        };
+        this.deps = {
+            store: deps.store,
+            configPath: deps.configPath,
+            readConfig: deps.readConfig,
+            bootId: deps.bootId,
+            toneGate: deps.toneGate,
+            subscribeFailureEvents: deps.subscribeFailureEvents,
+            now: deps.now ?? (() => Date.now()),
+            postReply: deps.postReply ?? defaultPostReply,
+            whoamiCache: deps.whoamiCache ?? new WhoamiCache(),
+        };
+    }
+    /**
+     * Start the sentinel. Verifies template integrity, performs a one-shot
+     * restore-purge of stale rows, registers the SSE listener (if available),
+     * and arms the watchdog tick. Idempotent — calling start() while running
+     * is a no-op.
+     */
+    async start() {
+        if (this.running)
+            return;
+        this.running = true;
+        // Template integrity check (spec §3f). If templates have been
+        // tampered with, disable the escalation path but keep the recovery
+        // mainline running — pure 200 deliveries are safe even without
+        // templates.
+        const integrity = verifyTemplateIntegrity();
+        if (!integrity.ok) {
+            this.templatesValid = false;
+            try {
+                DegradationReporter.getInstance().report({
+                    feature: 'template-integrity-failed',
+                    primary: 'compiled-in system templates with build-time SHA-256',
+                    fallback: 'sentinel disables escalation path; recovery mainline still works',
+                    reason: `templates failed boot integrity check: ${integrity.mismatched.join(', ')}`,
+                    impact: 'Escalation messages and tone-gate-rejection notices are not sent until templates are restored.',
+                });
+            }
+            catch {
+                // best-effort
+            }
+        }
+        if (!this.restorePurged) {
+            try {
+                this.purgeStaleRows();
+            }
+            catch (err) {
+                console.warn('[delivery-sentinel] restore-purge raised:', err);
+            }
+            this.restorePurged = true;
+        }
+        if (this.deps.subscribeFailureEvents) {
+            this.unsubscribe = this.deps.subscribeFailureEvents((event) => {
+                // Best-effort: kick a tick when a delivery_failed event arrives.
+                // We don't await; the tick runs async and emits its own events.
+                this.tick().catch((err) => {
+                    console.warn('[delivery-sentinel] event-driven tick failed:', err);
+                });
+            });
+        }
+        this.watchdog = setInterval(() => {
+            this.tick().catch((err) => {
+                console.warn('[delivery-sentinel] watchdog tick failed:', err);
+            });
+        }, this.cfg.watchdogIntervalMs);
+        // Don't keep the process alive just for this timer.
+        if (typeof this.watchdog.unref === 'function') {
+            this.watchdog.unref();
+        }
+        this.emit('sentinel:started');
+    }
+    /** Stop the sentinel, clearing the watchdog and detaching listeners. */
+    async stop() {
+        if (!this.running)
+            return;
+        this.running = false;
+        if (this.watchdog) {
+            clearInterval(this.watchdog);
+            this.watchdog = null;
+        }
+        if (this.unsubscribe) {
+            try {
+                this.unsubscribe();
+            }
+            catch {
+                // best-effort
+            }
+            this.unsubscribe = null;
+        }
+        this.emit('sentinel:stopped');
+    }
+    /** True iff the sentinel's circuit breaker is currently tripped. */
+    isSuspended() {
+        return this.suspended;
+    }
+    /**
+     * Run one recovery tick. Public so tests can drive recovery without
+     * waiting for the watchdog interval.
+     *
+     * Returns aggregate counters useful for assertions.
+     */
+    async tick() {
+        if (!this.running) {
+            return { processed: 0, recovered: 0, escalated: 0 };
+        }
+        if (this.suspended) {
+            this.maybeResume();
+            if (this.suspended) {
+                return { processed: 0, recovered: 0, escalated: 0 };
+            }
+        }
+        const counters = { processed: 0, recovered: 0, escalated: 0 };
+        // Pull rows that are ready (queued, or claimed-but-stale).
+        const candidates = this.selectClaimable();
+        if (candidates.length === 0) {
+            this.emit('sentinel:tick-complete', counters);
+            return counters;
+        }
+        // Stampede summarization (spec §3c). When a single topic has more
+        // than N entries, pick the most recent and drop the rest with a
+        // single digest message.
+        const grouped = groupByTopic(candidates);
+        const toProcess = [];
+        for (const [topicId, rows] of grouped.entries()) {
+            if (rows.length > this.cfg.stampedeThreshold) {
+                await this.handleStampede(topicId, rows);
+                toProcess.push(rows[rows.length - 1]); // most recent
+                continue;
+            }
+            // Per-topic rate cap: ≤1 delivery per topic per perTopicRateMs.
+            // Drop all but the oldest queued row for this topic on this tick.
+            const last = this.lastTopicDelivery.get(topicId) ?? 0;
+            if (this.deps.now() - last < this.cfg.perTopicRateMs) {
+                continue; // skip this topic this tick
+            }
+            // Otherwise process all rows on this topic up to maxConcurrent
+            // total — most-recent first per stampede semantics.
+            toProcess.push(rows[rows.length - 1]);
+            // Also queue the older ones for next tick — they'll be re-selected
+            // because we don't transition them on this pass.
+        }
+        for (const row of toProcess) {
+            if (this.inFlight >= this.cfg.maxConcurrent)
+                break;
+            counters.processed += 1;
+            this.inFlight += 1;
+            try {
+                const outcome = await this.processRow(row);
+                if (outcome === 'recovered')
+                    counters.recovered += 1;
+                if (outcome === 'escalated')
+                    counters.escalated += 1;
+            }
+            finally {
+                this.inFlight -= 1;
+            }
+        }
+        this.emit('sentinel:tick-complete', counters);
+        return counters;
+    }
+    // ── Internals ──────────────────────────────────────────────────────
+    selectClaimable() {
+        const nowIso = new Date(this.deps.now()).toISOString();
+        try {
+            const rows = this.deps.store.selectClaimable(nowIso, 100);
+            // Filter claimed rows whose lease has not expired AND whose bootId matches
+            // (otherwise reclaimable).
+            return rows.filter((row) => {
+                if (row.state !== 'claimed')
+                    return true;
+                return this.isLeaseStale(row);
+            });
+        }
+        catch (err) {
+            console.warn('[delivery-sentinel] selectClaimable raised:', err);
+            return [];
+        }
+    }
+    isLeaseStale(row) {
+        if (!row.claimed_by)
+            return true;
+        // Format: "<bootId>:<pid>:<leaseUntilIso>"
+        const parts = row.claimed_by.split(':');
+        if (parts.length < 3)
+            return true;
+        const [bootId, , leaseUntilIso] = [parts[0], parts[1], parts.slice(2).join(':')];
+        if (bootId !== this.deps.bootId)
+            return true;
+        const lease = Date.parse(leaseUntilIso);
+        if (Number.isNaN(lease))
+            return true;
+        return lease < this.deps.now();
+    }
+    async processRow(row) {
+        // Claim the row — write the lease.
+        const leaseUntil = new Date(this.deps.now() + this.cfg.leaseDurationMs).toISOString();
+        const claimedBy = `${this.deps.bootId}:${process.pid}:${leaseUntil}`;
+        const claimed = this.deps.store.transition(row.delivery_id, 'claimed', { claimed_by: claimedBy });
+        if (!claimed) {
+            // Lost the race — another instance grabbed it (shared worktree case).
+            return 'retry';
+        }
+        // Re-resolve config — operator may have rotated port/token since enqueue.
+        const cfg = this.deps.readConfig();
+        // Verify identity via /whoami before any send.
+        let whoami;
+        try {
+            whoami = await this.deps.whoamiCache.get(cfg.port, cfg.authToken, this.deps.configPath, cfg.agentId);
+        }
+        catch (err) {
+            // Network / auth failure → schedule next retry.
+            return this.handlePolicyDecision(row, evaluatePolicy({
+                httpCode: 0,
+                responseBody: err instanceof Error ? err.message.slice(0, 256) : null,
+                attempts: row.attempts,
+                timeSinceFirstMs: this.deps.now() - Date.parse(row.attempted_at),
+                now: this.deps.now,
+            }));
+        }
+        if (whoami.agentId !== cfg.agentId) {
+            return this.handlePolicyDecision(row, evaluatePolicy({
+                httpCode: 403,
+                responseBody: JSON.stringify({ error: 'agent_id_mismatch' }),
+                attempts: row.attempts,
+                timeSinceFirstMs: this.deps.now() - Date.parse(row.attempted_at),
+                now: this.deps.now,
+            }));
+        }
+        // Re-tone-gate the queued text. Apply redaction first so secrets in
+        // the queued body never reach the tone gate provider (defense-in-
+        // depth — they shouldn't be there in the first place, but we don't
+        // want to amplify a leak by sending it to a third-party LLM).
+        const text = redact(row.text.toString('utf-8'));
+        const toneResult = await checkToneLocally(this.deps.toneGate, text, {
+            channel: 'telegram',
+        });
+        if (!toneResult.passed) {
+            return this.finalizeToneGated(row, toneResult.rule);
+        }
+        // POST /telegram/reply with the delivery-id header for server-side dedup.
+        let resp;
+        try {
+            resp = await this.deps.postReply(cfg.port, cfg.authToken, cfg.agentId, row.topic_id, text, row.delivery_id);
+        }
+        catch (err) {
+            return this.handlePolicyDecision(row, evaluatePolicy({
+                httpCode: 0,
+                responseBody: err instanceof Error ? err.message.slice(0, 256) : null,
+                attempts: row.attempts + 1,
+                timeSinceFirstMs: this.deps.now() - Date.parse(row.attempted_at),
+                now: this.deps.now,
+            }));
+        }
+        const decision = evaluatePolicy({
+            httpCode: resp.status,
+            responseBody: resp.body.slice(0, 1024),
+            attempts: row.attempts + 1,
+            timeSinceFirstMs: this.deps.now() - Date.parse(row.attempted_at),
+            now: this.deps.now,
+        });
+        if (decision.action === 'finalize-success') {
+            // Update last-delivery time for per-topic rate cap.
+            this.lastTopicDelivery.set(row.topic_id, this.deps.now());
+            this.deps.store.transition(row.delivery_id, 'delivered-recovered', {
+                attempts: row.attempts + 1,
+                http_code: resp.status,
+                error_body: null,
+            });
+            this.emit('sentinel:recovered', { delivery_id: row.delivery_id, topic_id: row.topic_id });
+            // Fire-and-forget recovered-marker follow-up (~2s later, gated on 200).
+            const shortId = row.delivery_id.slice(0, 8);
+            setTimeout(() => {
+                const marker = renderRecoveredMarker(shortId);
+                // System-template send — bypass tone gate via header. Failure
+                // is logged and dropped (spec §3e), never queued.
+                this.deps.postReply(cfg.port, cfg.authToken, cfg.agentId, row.topic_id, marker, row.delivery_id, true)
+                    .catch((err) => {
+                    console.warn(`[delivery-sentinel] recovered-marker send failed for ${shortId}:`, err);
+                });
+            }, 2000).unref();
+            return 'recovered';
+        }
+        return this.handlePolicyDecision(row, decision, resp.status);
+    }
+    async finalizeToneGated(row, rule) {
+        this.deps.store.transition(row.delivery_id, 'delivered-tone-gated', {
+            attempts: row.attempts + 1,
+        });
+        this.emit('sentinel:tone-gated', { delivery_id: row.delivery_id, topic_id: row.topic_id, rule });
+        // Send the tone-gate-rejection meta-notice on the original topic.
+        if (this.templatesValid) {
+            try {
+                const cfg = this.deps.readConfig();
+                await this.deps.postReply(cfg.port, cfg.authToken, cfg.agentId, row.topic_id, TEMPLATES.toneGateRejection, row.delivery_id, true);
+            }
+            catch (err) {
+                console.warn('[delivery-sentinel] tone-gate-rejection notice send failed:', err);
+            }
+        }
+        return 'tone-gated';
+    }
+    async handlePolicyDecision(row, decision, httpCode) {
+        switch (decision.action) {
+            case 'finalize-success':
+                // Handled inline in processRow.
+                return 'recovered';
+            case 'finalize-tone-gated':
+                return this.finalizeToneGated(row);
+            case 'finalize-ambiguous':
+                this.deps.store.transition(row.delivery_id, 'delivered-ambiguous', {
+                    attempts: row.attempts + 1,
+                    http_code: httpCode ?? null,
+                });
+                return 'ambiguous';
+            case 'retry':
+                this.deps.store.transition(row.delivery_id, 'queued', {
+                    attempts: row.attempts + 1,
+                    next_attempt_at: decision.nextAttemptAt ?? null,
+                    claimed_by: null,
+                    http_code: httpCode ?? null,
+                });
+                return 'retry';
+            case 'escalate':
+                return this.escalate(row, decision);
+        }
+    }
+    async escalate(row, decision) {
+        const category = reasonToCategory(decision.reason);
+        this.deps.store.transition(row.delivery_id, 'escalated', {
+            attempts: row.attempts + 1,
+        });
+        this.emit('sentinel:escalated', { delivery_id: row.delivery_id, topic_id: row.topic_id, category });
+        if (!this.templatesValid) {
+            this.recordEscalationFailure();
+            return 'escalated';
+        }
+        const duration = humanDuration(this.deps.now() - Date.parse(row.attempted_at));
+        const shortId = row.delivery_id.slice(0, 8);
+        const body = renderEscalation({ duration, category, shortId });
+        const cfg = this.deps.readConfig();
+        let topicSent = false;
+        for (let attempt = 0; attempt < 2 && !topicSent; attempt++) {
+            try {
+                const r = await this.deps.postReply(cfg.port, cfg.authToken, cfg.agentId, row.topic_id, body, row.delivery_id, true);
+                if (r.status >= 200 && r.status < 300)
+                    topicSent = true;
+            }
+            catch {
+                // try once more
+            }
+        }
+        if (!topicSent) {
+            this.recordEscalationFailure();
+        }
+        else {
+            // Successful escalation — don't count as a failure.
+            this.escalationFailures = [];
+        }
+        return 'escalated';
+    }
+    recordEscalationFailure() {
+        const now = this.deps.now();
+        this.escalationFailures.push(now);
+        // Keep only failures within the window.
+        const cutoff = now - this.cfg.circuitBreakerWindowMs;
+        this.escalationFailures = this.escalationFailures.filter((t) => t >= cutoff);
+        if (this.escalationFailures.length >= this.cfg.circuitBreakerCount && !this.suspended) {
+            this.suspended = true;
+            try {
+                DegradationReporter.getInstance().report({
+                    feature: 'delivery-sentinel-suspended',
+                    primary: 'autonomous recovery via /telegram/reply',
+                    fallback: 'queue continues to grow; no retries until config rotates or operator resumes',
+                    reason: `circuit breaker tripped after ${this.escalationFailures.length} consecutive escalation failures within ${Math.round(this.cfg.circuitBreakerWindowMs / 60_000)}m`,
+                    impact: 'Recovery is paused. Operator may rotate config (auth-relevant fields: port, authToken, agentId) or run `instar sentinel resume` to attempt unsuspend.',
+                });
+            }
+            catch {
+                // best-effort
+            }
+            this.emit('sentinel:circuit-breaker-tripped', { consecutiveFailures: this.escalationFailures.length });
+            this.lastConfigHash = this.computeConfigAuthHash();
+        }
+    }
+    lastConfigHash = null;
+    maybeResume() {
+        // Resume if the auth-relevant config fields have changed since
+        // suspension. mtime-based detection is forbidden by spec §3f
+        // (forgeable, bumped by unrelated jobs); we hash port + token + agentId.
+        const current = this.computeConfigAuthHash();
+        if (this.lastConfigHash !== null && current !== this.lastConfigHash) {
+            this.suspended = false;
+            this.escalationFailures = [];
+            this.emit('sentinel:circuit-breaker-resumed');
+        }
+    }
+    computeConfigAuthHash() {
+        try {
+            const cfg = this.deps.readConfig();
+            return createHash('sha256')
+                .update(`${cfg.port}\0${cfg.authToken}\0${cfg.agentId}`)
+                .digest('hex');
+        }
+        catch {
+            return '';
+        }
+    }
+    /** Manual resume — used by `instar sentinel resume` CLI handler. */
+    resume() {
+        this.suspended = false;
+        this.escalationFailures = [];
+        this.emit('sentinel:circuit-breaker-resumed');
+    }
+    async handleStampede(topicId, rows) {
+        const last = this.lastTopicDelivery.get(topicId) ?? 0;
+        if (this.deps.now() - last < this.cfg.perTopicRateMs)
+            return;
+        if (!this.templatesValid)
+            return;
+        const cfg = this.deps.readConfig();
+        const digest = renderStampedeDigest(rows.length);
+        try {
+            await this.deps.postReply(cfg.port, cfg.authToken, cfg.agentId, topicId, digest, rows[rows.length - 1].delivery_id, true);
+            this.lastTopicDelivery.set(topicId, this.deps.now());
+        }
+        catch (err) {
+            console.warn('[delivery-sentinel] stampede digest send failed:', err);
+        }
+        // Drop all but the latest with `delivered-ambiguous` (we don't know
+        // if duplicate would have landed; dropping is intentional).
+        for (let i = 0; i < rows.length - 1; i++) {
+            this.deps.store.transition(rows[i].delivery_id, 'delivered-ambiguous', {});
+        }
+    }
+    purgeStaleRows() {
+        const cutoff = new Date(this.deps.now() - this.cfg.restorePurgeAgeMs).toISOString();
+        try {
+            const deleted = this.deps.store.purgeStaleClaimable(cutoff);
+            if (deleted > 0) {
+                console.log(`[delivery-sentinel] restore-purged ${deleted} stale rows (older than ${this.cfg.restorePurgeAgeMs}ms)`);
+            }
+        }
+        catch (err) {
+            console.warn('[delivery-sentinel] purgeStaleRows raised:', err);
+        }
+    }
+}
+// ── Helpers ──────────────────────────────────────────────────────────
+function groupByTopic(rows) {
+    const out = new Map();
+    for (const row of rows) {
+        const list = out.get(row.topic_id);
+        if (list)
+            list.push(row);
+        else
+            out.set(row.topic_id, [row]);
+    }
+    // Sort each topic's list by attempted_at ascending so [0] is oldest,
+    // [length-1] is newest (matches spec §3c "most recent").
+    for (const list of out.values()) {
+        list.sort((a, b) => a.attempted_at.localeCompare(b.attempted_at));
+    }
+    return out;
+}
+function humanDuration(ms) {
+    if (ms < 60_000)
+        return '<1m';
+    const minutes = Math.floor(ms / 60_000);
+    if (minutes < 60)
+        return `${minutes}m`;
+    const hours = Math.floor(minutes / 60);
+    const remMinutes = minutes % 60;
+    return `${hours}h ${remMinutes}m`;
+}
+async function defaultPostReply(port, token, agentId, topicId, text, deliveryId, isSystem = false) {
+    return new Promise((resolve, reject) => {
+        const payload = JSON.stringify({ text });
+        const headers = {
+            'Content-Type': 'application/json',
+            'Content-Length': String(Buffer.byteLength(payload, 'utf-8')),
+            Authorization: `Bearer ${token}`,
+            'X-Instar-AgentId': agentId,
+            'X-Instar-DeliveryId': deliveryId,
+        };
+        if (isSystem)
+            headers['X-Instar-System'] = 'true';
+        const req = http.request({
+            host: '127.0.0.1',
+            port,
+            path: `/telegram/reply/${topicId}`,
+            method: 'POST',
+            headers,
+            timeout: 30_000,
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                resolve({
+                    status: res.statusCode ?? 0,
+                    body: Buffer.concat(chunks).toString('utf-8'),
+                });
+            });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => {
+            req.destroy(new Error('telegram-reply request timed out'));
+        });
+        req.write(payload);
+        req.end();
+    });
+}
+// Suppress unused warnings for path/fsp imports kept for future use.
+void path;
+void fsp;
+//# sourceMappingURL=delivery-failure-sentinel.js.map

package/dist/monitoring/delivery-failure-sentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-failure-sentinel.js","sourceRoot":"","sources":["../../src/monitoring/delivery-failure-sentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAwB,MAAM,gDAAgD,CAAC;AAExH,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AA8D/D,MAAM,QAAQ,GAA6B;IACzC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;IACjC,eAAe,EAAE,EAAE,GAAG,IAAI;IAC1B,cAAc,EAAE,EAAE,GAAG,IAAI;IACzB,aAAa,EAAE,CAAC;IAChB,iBAAiB,EAAE,CAAC;IACpB,mBAAmB,EAAE,CAAC;IACtB,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACtC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;CACjC,CAAC;AAeF,MAAM,OAAO,uBAAwB,SAAQ,YAAY;IACtC,GAAG,CAA2B;IAC9B,IAAI,CAEnB;IACM,QAAQ,GAA0C,IAAI,CAAC;IACvD,WAAW,GAAwB,IAAI,CAAC;IACxC,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAG,KAAK,CAAC;IAClB,kBAAkB,GAAa,EAAE,CAAC,CAAC,gBAAgB;IACnD,QAAQ,GAAG,CAAC,CAAC;IACb,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,4BAA4B;IACnF,qEAAqE;IAC7D,cAAc,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IAChE,aAAa,GAAG,KAAK,CAAC;IAE9B,YAAY,IAAkB,EAAE,SAAyB,EAAE;QACzD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG;YACT,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,QAAQ,CAAC,kBAAkB;YAC5E,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;YACnE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;YAChE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;YAC7D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;YACzE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,QAAQ,CAAC,mBAAmB;YAC/E,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,QAAQ,CAAC,sBAAsB;YACxF,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;SAC1E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,gBAAgB;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,WAAW,EAAE;SACnD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,8DAA8D;QAC9D,mEAAmE;QACnE,+DAA+D;QAC/D,aAAa;QACb,MAAM,SAAS,GAAG,uBAAuB,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;YAC5B,IAAI,CAAC;gBACH,mBAAmB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;oBACvC,OAAO,EAAE,2BAA2B;oBACpC,OAAO,EAAE,sDAAsD;oBAC/D,QAAQ,EAAE,kEAAkE;oBAC5E,MAAM,EAAE,0CAA0C,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACnF,MAAM,EAAE,gGAAgG;iBACzG,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC5D,iEAAiE;gBACjE,gEAAgE;gBAChE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACxB,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACxB,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,oDAAoD;QACpD,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,oEAAoE;IACpE,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAE9D,2DAA2D;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,kEAAkE;QAClE,gEAAgE;QAChE,yBAAyB;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACzC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;gBACrD,SAAS;YACX,CAAC;YACD,gEAAgE;YAChE,kEAAkE;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;gBACrD,SAAS,CAAC,4BAA4B;YACxC,CAAC;YACD,+DAA+D;YAC/D,oDAAoD;YACpD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACtC,mEAAmE;YACnE,iDAAiD;QACnD,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,MAAM;YACnD,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC3C,IAAI,OAAO,KAAK,WAAW;oBAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;gBACrD,IAAI,OAAO,KAAK,WAAW;oBAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACvD,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,sEAAsE;IAE9D,eAAe;QACrB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1D,2EAA2E;YAC3E,2BAA2B;YAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACzC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,GAAoB;QACvC,IAAI,CAAC,GAAG,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACjC,2CAA2C;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,CAAC,MAAM,EAAE,AAAD,EAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAoB;QAC3C,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QACtF,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,sEAAsE;YACtE,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,0EAA0E;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAEnC,+CAA+C;QAC/C,IAAI,MAAyC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gDAAgD;YAChD,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC;gBACnD,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBACrE,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;gBAChE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC;gBACnD,QAAQ,EAAE,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;gBAC5D,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;gBAChE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;YAClE,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QAED,0EAA0E;QAC1E,IAAI,IAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAC9B,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,EACZ,IAAI,EACJ,GAAG,CAAC,WAAW,CAChB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC;gBACnD,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBACrE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;gBAC1B,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;gBAChE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;YACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;YAC1B,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;YAChE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC3C,oDAAoD;YACpD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,EAAE;gBACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;gBAC1B,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1F,wEAAwE;YACxE,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5C,UAAU,CAAC,GAAG,EAAE;gBACd,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBAC9C,8DAA8D;gBAC9D,kDAAkD;gBAClD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC;qBACnG,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,OAAO,CAAC,IAAI,CAAC,wDAAwD,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxF,CAAC,CAAC,CAAC;YACP,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAoB,EAAE,IAAa;QACjE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,sBAAsB,EAAE;YAClE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjG,kEAAkE;QAClE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,iBAAiB,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACpI,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,6DAA6D,EAAE,GAAG,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,GAAoB,EACpB,QAAwB,EACxB,QAAiB;QAEjB,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,kBAAkB;gBACrB,gCAAgC;gBAChC,OAAO,WAAW,CAAC;YAErB,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAErC,KAAK,oBAAoB;gBACvB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,EAAE;oBACjE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,SAAS,EAAE,QAAQ,IAAI,IAAI;iBAC5B,CAAC,CAAC;gBACH,OAAO,WAAW,CAAC;YAErB,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE;oBACpD,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,eAAe,EAAE,QAAQ,CAAC,aAAa,IAAI,IAAI;oBAC/C,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,QAAQ,IAAI,IAAI;iBAC5B,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC;YAEjB,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAoB,EAAE,QAAwB;QACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE;YACvD,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEpG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBACrH,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;oBAAE,SAAS,GAAG,IAAI,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,oDAAoD;YACpD,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,uBAAuB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,wCAAwC;QACxC,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACrD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACtF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC;gBACH,mBAAmB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;oBACvC,OAAO,EAAE,6BAA6B;oBACtC,OAAO,EAAE,yCAAyC;oBAClD,QAAQ,EAAE,8EAA8E;oBACxF,MAAM,EAAE,iCAAiC,IAAI,CAAC,kBAAkB,CAAC,MAAM,2CAA2C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC,GAAG;oBACzK,MAAM,EAAE,uJAAuJ;iBAChK,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,cAAc,GAAkB,IAAI,CAAC;IAErC,WAAW;QACjB,+DAA+D;QAC/D,6DAA6D;QAC7D,yEAAyE;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YACpE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC,QAAQ,CAAC;iBACxB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;iBACvD,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM;QACJ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,IAAuB;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO;QAE7D,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC1H,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,oEAAoE;QACpE,4DAA4D;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,2BAA2B,IAAI,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC;YACvH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AAExE,SAAS,YAAY,CAAC,IAAuB;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YACpB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,qEAAqE;IACrE,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,IAAI,EAAE,GAAG,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,GAAG,EAAE,CAAC;IAChC,OAAO,GAAG,KAAK,KAAK,UAAU,GAAG,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,KAAa,EACb,OAAe,EACf,OAAe,EACf,IAAY,EACZ,UAAkB,EAClB,QAAQ,GAAG,KAAK;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7D,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,kBAAkB,EAAE,OAAO;YAC3B,qBAAqB,EAAE,UAAU;SAClC,CAAC;QACF,IAAI,QAAQ;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;QAElD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,IAAI,EAAE,WAAW;YACjB,IAAI;YACJ,IAAI,EAAE,mBAAmB,OAAO,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,OAAO,EAAE,MAAM;SAChB,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,KAAK,IAAI,CAAC;AACV,KAAK,GAAG,CAAC"}

package/dist/monitoring/probes/PlatformProbe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PlatformProbe.d.ts","sourceRoot":"","sources":["../../../src/monitoring/probes/PlatformProbe.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAe,MAAM,sBAAsB,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;AA2FD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,KAAK,EAAE,CAmIrE"}
+{"version":3,"file":"PlatformProbe.d.ts","sourceRoot":"","sources":["../../../src/monitoring/probes/PlatformProbe.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAe,MAAM,sBAAsB,CAAC;AAG/D,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAyFD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,KAAK,EAAE,CAmIrE"}

package/dist/monitoring/probes/PlatformProbe.js

@@ -10,6 +10,7 @@ import os from 'node:os';
 import fs from 'node:fs';
 import path from 'node:path';
 import { execSync } from 'node:child_process';
+import { SafeFsExecutor } from '../../core/SafeFsExecutor.js';
 /**
  * Test whether a command run inside a tmux session can access
  * TCC-protected directories without triggering a permission popup.
@@ -51,9 +52,8 @@ function testTmuxFdaAccess(tmuxPath) {
         }
         const output = fs.readFileSync(tmpFile, 'utf-8');
         // Clean up temp file
-        // safe-git-allow: incremental-migration
         try {
-            fs.unlinkSync(tmpFile);
+            SafeFsExecutor.safeUnlinkSync(tmpFile, { operation: 'src/monitoring/probes/PlatformProbe.ts:68' });
         }
         catch { /* ok */ }
         // Parse exit code from output
@@ -77,9 +77,8 @@ function testTmuxFdaAccess(tmuxPath) {
             execSync(`${tmuxPath} kill-session -t ${testSessionName} 2>/dev/null`, { timeout: 3000 });
         }
         catch { /* ok */ }
-        // safe-git-allow: incremental-migration
         try {
-            fs.unlinkSync(tmpFile);
+            SafeFsExecutor.safeUnlinkSync(tmpFile, { operation: 'src/monitoring/probes/PlatformProbe.ts:91' });
         }
         catch { /* ok */ }
         return { hasAccess: true, error: `Probe failed: ${err instanceof Error ? err.message : String(err)}` };