instar 1.3.895 → 1.3.897
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dashboard/index.html +30 -0
- package/dist/commands/server.d.ts.map +1 -1
- package/dist/commands/server.js +111 -1
- package/dist/commands/server.js.map +1 -1
- package/dist/config/ConfigDefaults.d.ts.map +1 -1
- package/dist/config/ConfigDefaults.js +12 -0
- package/dist/config/ConfigDefaults.js.map +1 -1
- package/dist/core/CoherenceJournal.d.ts +17 -1
- package/dist/core/CoherenceJournal.d.ts.map +1 -1
- package/dist/core/CoherenceJournal.js +29 -2
- package/dist/core/CoherenceJournal.js.map +1 -1
- package/dist/core/FailureEpisodeLatch.d.ts +8 -0
- package/dist/core/FailureEpisodeLatch.d.ts.map +1 -1
- package/dist/core/FailureEpisodeLatch.js +14 -0
- package/dist/core/FailureEpisodeLatch.js.map +1 -1
- package/dist/core/JournalSyncApplier.d.ts.map +1 -1
- package/dist/core/JournalSyncApplier.js +11 -0
- package/dist/core/JournalSyncApplier.js.map +1 -1
- package/dist/core/MachineSshEndpoint.d.ts +47 -0
- package/dist/core/MachineSshEndpoint.d.ts.map +1 -0
- package/dist/core/MachineSshEndpoint.js +221 -0
- package/dist/core/MachineSshEndpoint.js.map +1 -0
- package/dist/core/MachineSshIdentity.d.ts +26 -0
- package/dist/core/MachineSshIdentity.d.ts.map +1 -0
- package/dist/core/MachineSshIdentity.js +97 -0
- package/dist/core/MachineSshIdentity.js.map +1 -0
- package/dist/core/MeshRpc.d.ts +6 -0
- package/dist/core/MeshRpc.d.ts.map +1 -1
- package/dist/core/MeshRpc.js +2 -0
- package/dist/core/MeshRpc.js.map +1 -1
- package/dist/core/MutualSshHealthController.d.ts +33 -0
- package/dist/core/MutualSshHealthController.d.ts.map +1 -0
- package/dist/core/MutualSshHealthController.js +113 -0
- package/dist/core/MutualSshHealthController.js.map +1 -0
- package/dist/core/MutualSshProbeScheduler.d.ts +21 -0
- package/dist/core/MutualSshProbeScheduler.d.ts.map +1 -0
- package/dist/core/MutualSshProbeScheduler.js +57 -0
- package/dist/core/MutualSshProbeScheduler.js.map +1 -0
- package/dist/core/MutualSshRuntime.d.ts +106 -0
- package/dist/core/MutualSshRuntime.d.ts.map +1 -0
- package/dist/core/MutualSshRuntime.js +423 -0
- package/dist/core/MutualSshRuntime.js.map +1 -0
- package/dist/core/MutualSshVerifier.d.ts +44 -0
- package/dist/core/MutualSshVerifier.d.ts.map +1 -0
- package/dist/core/MutualSshVerifier.js +97 -0
- package/dist/core/MutualSshVerifier.js.map +1 -0
- package/dist/core/SelfHealGate.d.ts +148 -0
- package/dist/core/SelfHealGate.d.ts.map +1 -0
- package/dist/core/SelfHealGate.js +391 -0
- package/dist/core/SelfHealGate.js.map +1 -0
- package/dist/core/SshBootstrapAdvert.d.ts +23 -0
- package/dist/core/SshBootstrapAdvert.d.ts.map +1 -0
- package/dist/core/SshBootstrapAdvert.js +43 -0
- package/dist/core/SshBootstrapAdvert.js.map +1 -0
- package/dist/core/SshHostKeyLifecycle.d.ts +43 -0
- package/dist/core/SshHostKeyLifecycle.d.ts.map +1 -0
- package/dist/core/SshHostKeyLifecycle.js +68 -0
- package/dist/core/SshHostKeyLifecycle.js.map +1 -0
- package/dist/core/SshPeerAdmissionStore.d.ts +29 -0
- package/dist/core/SshPeerAdmissionStore.d.ts.map +1 -0
- package/dist/core/SshPeerAdmissionStore.js +86 -0
- package/dist/core/SshPeerAdmissionStore.js.map +1 -0
- package/dist/core/devGatedFeatures.d.ts.map +1 -1
- package/dist/core/devGatedFeatures.js +6 -0
- package/dist/core/devGatedFeatures.js.map +1 -1
- package/dist/core/machineCoherenceManifest.d.ts.map +1 -1
- package/dist/core/machineCoherenceManifest.js +8 -0
- package/dist/core/machineCoherenceManifest.js.map +1 -1
- package/dist/core/types.d.ts +10 -0
- package/dist/core/types.d.ts.map +1 -1
- package/dist/core/types.js.map +1 -1
- package/dist/feedback-factory/drain/FeedbackFactoryDefaultsSelfHeal.d.ts +19 -0
- package/dist/feedback-factory/drain/FeedbackFactoryDefaultsSelfHeal.d.ts.map +1 -0
- package/dist/feedback-factory/drain/FeedbackFactoryDefaultsSelfHeal.js +118 -0
- package/dist/feedback-factory/drain/FeedbackFactoryDefaultsSelfHeal.js.map +1 -0
- package/dist/feedback-factory/drain/FeedbackFactoryGeneratedDefaults.d.ts +11 -1
- package/dist/feedback-factory/drain/FeedbackFactoryGeneratedDefaults.d.ts.map +1 -1
- package/dist/feedback-factory/drain/FeedbackFactoryGeneratedDefaults.js +88 -25
- package/dist/feedback-factory/drain/FeedbackFactoryGeneratedDefaults.js.map +1 -1
- package/dist/monitoring/selfaction/policies.d.ts.map +1 -1
- package/dist/monitoring/selfaction/policies.js +14 -0
- package/dist/monitoring/selfaction/policies.js.map +1 -1
- package/dist/server/AgentServer.d.ts +1 -0
- package/dist/server/AgentServer.d.ts.map +1 -1
- package/dist/server/AgentServer.js +46 -6
- package/dist/server/AgentServer.js.map +1 -1
- package/dist/server/CapabilityIndex.js +2 -2
- package/dist/server/CapabilityIndex.js.map +1 -1
- package/dist/server/routes.d.ts +2 -0
- package/dist/server/routes.d.ts.map +1 -1
- package/dist/server/routes.js +9 -0
- package/dist/server/routes.js.map +1 -1
- package/dist/testing/selfActionRegistry.d.ts.map +1 -1
- package/dist/testing/selfActionRegistry.js +64 -0
- package/dist/testing/selfActionRegistry.js.map +1 -1
- package/package.json +3 -1
- package/src/data/builtin-manifest.json +47 -47
- package/src/data/state-coherence-registry.json +53 -0
- package/upgrades/1.3.896.md +25 -0
- package/upgrades/1.3.897.md +39 -0
- package/upgrades/side-effects/mutual-ssh-autobootstrap.md +137 -0
- package/upgrades/side-effects/self-heal-gate.md +87 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"MutualSshRuntime.js","sourceRoot":"","sources":["../../src/core/MutualSshRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAiC,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAiD,MAAM,wBAAwB,CAAC;AACxI,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAA4B,MAAM,gCAAgC,CAAC;AAC/H,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAA2B,MAAM,yBAAyB,CAAC;AAqC3H,sGAAsG;AACtG,MAAM,OAAO,gBAAgB;IAuBE;IAtBZ,eAAe,CAAqB;IACpC,cAAc,CAAwB;IACtC,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACnC,UAAU,CAA4B;IACtC,SAAS,CAA0B;IAC5C,QAAQ,CAA4B;IACpC,QAAQ,GAA8B,IAAI,CAAC;IAC3C,MAAM,GAA0C,IAAI,CAAC;IAC5C,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAChD,gBAAgB,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAClD,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IAChD,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,GAA0B,IAAI,CAAC;IACpC,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IACP,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,SAAS,CAAS;IAEnC,YAA6B,CAAuB;QAAvB,MAAC,GAAD,CAAC,CAAsB;QAClD,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC;QAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;QACvC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACpG,IAAI,CAAC,eAAe,GAAG,IAAI,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,uBAAuB,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC7D,aAAa,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACrF,kBAAkB,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxI,eAAe,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;gBAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3E,MAAM,CAAC,yBAAyB,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAClE,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBACjE,MAAM,CAAC,kCAAkC,GAAG,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAC1G,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpD,CAAC;YACD,cAAc,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;YACpH,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;SAC9H,EAAE,WAAW,CAAC,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAC;QACjF,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAClE,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YACtD,IAAI,eAAe,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,eAAe,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3I,MAAM,WAAW,GAAG,eAAe,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACpF,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,CAAC,gBAAgB,EAAE,cAAc,EAAE,eAAe,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC/I,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC;gBAChC,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;oBAClC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;oBAC9B,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;oBACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACzF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/D,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,WAAW;gBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBACjG,OAAO,KAAK,EAAE,CAAC;oBACb,oEAAoE;oBACpE,iEAAiE;oBACjE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/G,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;gBAC/P,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe,CAAC,CAAC;gBAC3I,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACjF,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;gBAC9C,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,YAAY,CAAC,GAAY,EAAE,mBAA2B;QACpD,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpF,MAAM,EAAE,gBAAgB,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1J,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,mBAAmB,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACrG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,WAAW,CAAC,GAAY,EAAE,mBAA2B;QACnD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,GAA0B,CAAC;QACzC,IAAI,KAAK,CAAC,eAAe,KAAK,mBAAmB,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACnM,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3P,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,uBAAuB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1I,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,mBAAmB,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,mBAAmB,KAAK,KAAK,CAAC,yBAAyB;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzL,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5H,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC1G,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrJ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,mBAAmB,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAClK,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,kFAAkF;IAClF,kBAAkB,CAAC,GAAY,EAAE,mBAA2B;QAC1D,IAAI,CAAC;YAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChE,OAAO,KAAK,EAAE,CAAC;YACb,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACjJ,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM;QACJ,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACrK,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO;gBACL,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC;gBAChD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;oBAC5E,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;oBAC/B,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;oBACpE,uBAAuB,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;oBACxI,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;iBACnI,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;QACpG,MAAM,UAAU,GAAG,SAAS,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACvG,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,oBAAoB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAChF,MAAM,KAAK,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC;QAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;QAC1P,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACxN,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,gBAAgB;YAAE,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE;YAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC;YACrC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc;YACzF,mBAAmB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClL,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,sBAAsB;YAClF,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC5C,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,sBAAsB,EAAE,0BAA0B,EAAE,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvM,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC;YACjZ,CAAC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,QAAQ,CAAC,0BAA0B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjG,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,sEAAsE;YACtE,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBACtC,wEAAwE;gBACxE,wEAAwE;YAC1E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,YAAoB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,YAAY;YACtE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,CAAC;YAC9F,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ;SACjD,CAAC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,QAAQ,GAAiD;YAC7D,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY;YACtE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;YAC1F,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;YAC/F,iBAAiB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3J,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;YACnG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzG,CAAC;QACF,OAAO,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAyB,CAAC;QACrJ,IAAI,QAAQ,EAAE,MAAM;YAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAEO,aAAa,CAAC,MAA0B;QAC9C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC3Q,IAAI,KAAK,IAAI,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACtD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAAC,CAAC;QAC3Q,IAAI,KAAK,IAAI,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,0BAA0B;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACrG,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,mBAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACvF,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;gBACjF,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,0BAA0B;aACvH,CAAC;YACF,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAC1B,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,wBAAwB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;gBAC1G,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC7H,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,mBAAmB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzL,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1T,CAAC;IAEO,SAAS,CAAC,IAAmB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS;YACtE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACzK,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc;YACtE,yBAAyB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,CAAC,iBAAiB;YAC5G,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB;YAC1G,0BAA0B,EAAE,IAAI,CAAC,kBAAkB;YACnD,kCAAkC,EAAE,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YACjG,qBAAqB,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;YAChG,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;SAC3C,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAA0B,EAAE,MAAc;QAC5D,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,oBAAoB,CAAC,SAAiB,EAAE,UAAkB;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,iBAAiB,KAAK,UAAU;YAAE,OAAO;QACnF,SAAS,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACrC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACpS,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB,CAAC,SAAiB;QACzC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3I,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,uBAAuB;QAC7B,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B;YAAE,OAAO;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC;QAC/I,CAAC,CAAC,CAAC;QACH,IAAI,SAAS;YAAE,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACpD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC,gBAAgB;YAAE,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IACnG,CAAC;IAEO,UAAU,CAAC,KAAsC;QACvD,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI,KAAK,CAAC,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClK,CAAC;IACO,GAAG,CAAC,MAAc,EAAE,MAAc,IAAY,OAAO,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,CAAC,KAA8B,IAAU,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3G,yBAAyB;QAC/B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACtG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAiB,CAAC;YACpE,8EAA8E;YAC9E,gFAAgF;YAChF,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAC1F,CAAC;IAEO,aAAa;QACnB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACvI,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;QACnE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/K,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;CACF;AAED,SAAS,UAAU,CAAC,IAAY,IAAa,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
export interface DirectionalSshProof {
|
|
2
|
+
sourceMachineId: string;
|
|
3
|
+
targetMachineId: string;
|
|
4
|
+
pairingEpoch: number;
|
|
5
|
+
observerBootId: string;
|
|
6
|
+
endpointId: string;
|
|
7
|
+
sourceClientKeyGeneration: number;
|
|
8
|
+
targetHostKeyGeneration: number;
|
|
9
|
+
targetHostKeyFingerprint: string;
|
|
10
|
+
verifiedAt: string;
|
|
11
|
+
expiresAt: string;
|
|
12
|
+
challengeDigest: string;
|
|
13
|
+
machineSignature?: string;
|
|
14
|
+
/** Origin-process local authority. Omitted from replicated proof payloads. */
|
|
15
|
+
monotonicDeadlineMs?: number;
|
|
16
|
+
}
|
|
17
|
+
export interface SshProbeTarget {
|
|
18
|
+
sourceMachineId: string;
|
|
19
|
+
targetMachineId: string;
|
|
20
|
+
host: string;
|
|
21
|
+
port: number;
|
|
22
|
+
endpointId: string;
|
|
23
|
+
pairingEpoch: number;
|
|
24
|
+
observerBootId: string;
|
|
25
|
+
sourceClientKeyGeneration: number;
|
|
26
|
+
targetHostKeyGeneration: number;
|
|
27
|
+
targetHostPublicKey: string;
|
|
28
|
+
clientPrivateKeyPath: string;
|
|
29
|
+
expectedMachineFingerprint: string;
|
|
30
|
+
expectedSourceClientKeyFingerprint: string;
|
|
31
|
+
verifyMachineResponse: (canonicalPayload: string, signature: string) => boolean;
|
|
32
|
+
signProof?: (canonicalPayload: string) => string;
|
|
33
|
+
}
|
|
34
|
+
export declare function canonicalDirectionalSshProof(proof: Omit<DirectionalSshProof, 'machineSignature' | 'monotonicDeadlineMs'>): string;
|
|
35
|
+
export declare class MutualSshVerifier {
|
|
36
|
+
probe(target: SshProbeTarget, now?: number): Promise<DirectionalSshProof>;
|
|
37
|
+
static mutual(aToB: DirectionalSshProof | undefined, bToA: DirectionalSshProof | undefined, now?: number, context?: {
|
|
38
|
+
monotonicNow?: number;
|
|
39
|
+
liveBootIds?: ReadonlySet<string>;
|
|
40
|
+
sourceClientGenerations?: ReadonlyMap<string, number>;
|
|
41
|
+
targetHostGenerations?: ReadonlyMap<string, number>;
|
|
42
|
+
}): boolean;
|
|
43
|
+
}
|
|
44
|
+
//# sourceMappingURL=MutualSshVerifier.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"MutualSshVerifier.d.ts","sourceRoot":"","sources":["../../src/core/MutualSshVerifier.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB,EAAE,MAAM,CAAC;IAClC,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,MAAM,CAAC;IAClC,uBAAuB,EAAE,MAAM,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,0BAA0B,EAAE,MAAM,CAAC;IACnC,kCAAkC,EAAE,MAAM,CAAC;IAC3C,qBAAqB,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAChF,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,MAAM,CAAC;CAClD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,GAAG,qBAAqB,CAAC,GAAG,MAAM,CASjI;AAED,qBAAa,iBAAiB;IACtB,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgDnF,MAAM,CAAC,MAAM,CACX,IAAI,EAAE,mBAAmB,GAAG,SAAS,EACrC,IAAI,EAAE,mBAAmB,GAAG,SAAS,EACrC,GAAG,SAAa,EAChB,OAAO,CAAC,EAAE;QACR,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtD,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACrD,GACA,OAAO;CAUX"}
|
|
@@ -0,0 +1,97 @@
|
|
|
1
|
+
import fs from 'node:fs';
|
|
2
|
+
import { createHash, randomBytes } from 'node:crypto';
|
|
3
|
+
import { Client, utils } from 'ssh2';
|
|
4
|
+
import { canonicalSshResponse } from './MachineSshEndpoint.js';
|
|
5
|
+
export function canonicalDirectionalSshProof(proof) {
|
|
6
|
+
return JSON.stringify({
|
|
7
|
+
sourceMachineId: proof.sourceMachineId, targetMachineId: proof.targetMachineId,
|
|
8
|
+
pairingEpoch: proof.pairingEpoch, observerBootId: proof.observerBootId,
|
|
9
|
+
endpointId: proof.endpointId, sourceClientKeyGeneration: proof.sourceClientKeyGeneration,
|
|
10
|
+
targetHostKeyGeneration: proof.targetHostKeyGeneration,
|
|
11
|
+
targetHostKeyFingerprint: proof.targetHostKeyFingerprint, verifiedAt: proof.verifiedAt,
|
|
12
|
+
expiresAt: proof.expiresAt, challengeDigest: proof.challengeDigest,
|
|
13
|
+
});
|
|
14
|
+
}
|
|
15
|
+
export class MutualSshVerifier {
|
|
16
|
+
async probe(target, now = Date.now()) {
|
|
17
|
+
const nonce = randomBytes(24).toString('base64url');
|
|
18
|
+
const challenge = {
|
|
19
|
+
nonce, pairingEpoch: target.pairingEpoch, observerBootId: target.observerBootId,
|
|
20
|
+
clientGeneration: target.sourceClientKeyGeneration, hostGeneration: target.targetHostKeyGeneration,
|
|
21
|
+
};
|
|
22
|
+
const expectedHost = utils.parseKey(target.targetHostPublicKey);
|
|
23
|
+
if (expectedHost instanceof Error)
|
|
24
|
+
throw new Error('invalid-pinned-host-key');
|
|
25
|
+
const expectedHostFingerprint = createHash('sha256').update(expectedHost.getPublicSSH()).digest('hex');
|
|
26
|
+
const response = await withDeadline(8_000, (resolve, reject) => {
|
|
27
|
+
const client = new Client();
|
|
28
|
+
client.once('ready', () => client.subsys('instar-rpc', (error, stream) => {
|
|
29
|
+
if (error)
|
|
30
|
+
return reject(error);
|
|
31
|
+
let data = '';
|
|
32
|
+
stream.setEncoding('utf8');
|
|
33
|
+
stream.on('data', (chunk) => { data += chunk; if (data.length > 256 * 1024)
|
|
34
|
+
client.end(); });
|
|
35
|
+
stream.on('close', () => {
|
|
36
|
+
client.end();
|
|
37
|
+
try {
|
|
38
|
+
resolve(JSON.parse(data.trim()));
|
|
39
|
+
}
|
|
40
|
+
catch {
|
|
41
|
+
reject(new Error('invalid-ssh-rpc-response'));
|
|
42
|
+
}
|
|
43
|
+
});
|
|
44
|
+
stream.end(`${JSON.stringify(challenge)}\n`);
|
|
45
|
+
}));
|
|
46
|
+
client.once('error', reject);
|
|
47
|
+
client.connect({
|
|
48
|
+
host: target.host, port: target.port, username: 'instar', privateKey: fs.readFileSync(target.clientPrivateKeyPath),
|
|
49
|
+
readyTimeout: 7_500, hostVerifier: (key) => key.equals(expectedHost.getPublicSSH()),
|
|
50
|
+
algorithms: { serverHostKey: ['ssh-ed25519'], kex: ['curve25519-sha256', 'curve25519-sha256@libssh.org'] },
|
|
51
|
+
});
|
|
52
|
+
return () => client.end();
|
|
53
|
+
});
|
|
54
|
+
const { signature, ...unsigned } = response;
|
|
55
|
+
if (typeof signature !== 'string' || !target.verifyMachineResponse(canonicalSshResponse(unsigned), signature))
|
|
56
|
+
throw new Error('ssh-proof-machine-signature-invalid');
|
|
57
|
+
if (response.nonce !== nonce || response.machineId !== target.targetMachineId || response.machineFingerprint !== target.expectedMachineFingerprint
|
|
58
|
+
|| response.sourceClientKeyFingerprint !== target.expectedSourceClientKeyFingerprint
|
|
59
|
+
|| response.pairingEpoch !== target.pairingEpoch || response.observerBootId !== target.observerBootId
|
|
60
|
+
|| response.clientGeneration !== target.sourceClientKeyGeneration || response.hostGeneration !== target.targetHostKeyGeneration)
|
|
61
|
+
throw new Error('ssh-proof-identity-mismatch');
|
|
62
|
+
const proof = {
|
|
63
|
+
sourceMachineId: target.sourceMachineId, targetMachineId: target.targetMachineId,
|
|
64
|
+
pairingEpoch: target.pairingEpoch, observerBootId: target.observerBootId, endpointId: target.endpointId,
|
|
65
|
+
sourceClientKeyGeneration: target.sourceClientKeyGeneration, targetHostKeyGeneration: target.targetHostKeyGeneration,
|
|
66
|
+
targetHostKeyFingerprint: expectedHostFingerprint, verifiedAt: new Date(now).toISOString(),
|
|
67
|
+
expiresAt: new Date(now + 300_000).toISOString(), challengeDigest: createHash('sha256').update(nonce).digest('hex'),
|
|
68
|
+
monotonicDeadlineMs: performance.now() + 300_000,
|
|
69
|
+
};
|
|
70
|
+
if (target.signProof)
|
|
71
|
+
proof.machineSignature = target.signProof(canonicalDirectionalSshProof(proof));
|
|
72
|
+
return proof;
|
|
73
|
+
}
|
|
74
|
+
static mutual(aToB, bToA, now = Date.now(), context) {
|
|
75
|
+
if (!aToB || !bToA)
|
|
76
|
+
return false;
|
|
77
|
+
const proofs = [aToB, bToA];
|
|
78
|
+
if (context?.liveBootIds && proofs.some(proof => !context.liveBootIds.has(proof.observerBootId)))
|
|
79
|
+
return false;
|
|
80
|
+
if (context?.sourceClientGenerations && proofs.some(proof => context.sourceClientGenerations.get(proof.sourceMachineId) !== proof.sourceClientKeyGeneration))
|
|
81
|
+
return false;
|
|
82
|
+
if (context?.targetHostGenerations && proofs.some(proof => context.targetHostGenerations.get(proof.targetMachineId) !== proof.targetHostKeyGeneration))
|
|
83
|
+
return false;
|
|
84
|
+
if (context?.monotonicNow !== undefined && proofs.some(proof => proof.monotonicDeadlineMs === undefined || proof.monotonicDeadlineMs <= context.monotonicNow))
|
|
85
|
+
return false;
|
|
86
|
+
return aToB.sourceMachineId === bToA.targetMachineId && aToB.targetMachineId === bToA.sourceMachineId
|
|
87
|
+
&& aToB.pairingEpoch === bToA.pairingEpoch && Date.parse(aToB.expiresAt) > now && Date.parse(bToA.expiresAt) > now;
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
function withDeadline(ms, run) {
|
|
91
|
+
return new Promise((resolve, reject) => {
|
|
92
|
+
let cleanup = () => { };
|
|
93
|
+
const timer = setTimeout(() => { cleanup(); reject(new Error('ssh-probe-timeout')); }, ms);
|
|
94
|
+
cleanup = run(value => { clearTimeout(timer); resolve(value); }, error => { clearTimeout(timer); reject(error); });
|
|
95
|
+
});
|
|
96
|
+
}
|
|
97
|
+
//# sourceMappingURL=MutualSshVerifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"MutualSshVerifier.js","sourceRoot":"","sources":["../../src/core/MutualSshVerifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAA6C,MAAM,yBAAyB,CAAC;AAqC1G,MAAM,UAAU,4BAA4B,CAAC,KAA4E;IACvH,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe;QAC9E,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;QACtE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QACxF,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;QACtF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe;KACnE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAClD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAoB;YACjC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;YAC/E,gBAAgB,EAAE,MAAM,CAAC,yBAAyB,EAAE,cAAc,EAAE,MAAM,CAAC,uBAAuB;SACnG,CAAC;QACF,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,YAAY,YAAY,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9E,MAAM,uBAAuB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAiB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7E,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACvE,IAAI,KAAK;oBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI;oBAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrG,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,MAAM,CAAC,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBAAC,CAAC;gBACpG,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,OAAO,CAAC;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBAClH,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;gBAC3F,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,EAAE;aAC3G,CAAC,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACtK,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,kBAAkB,KAAK,MAAM,CAAC,0BAA0B;eAC7I,QAAQ,CAAC,0BAA0B,KAAK,MAAM,CAAC,kCAAkC;eACjF,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;eAClG,QAAQ,CAAC,gBAAgB,KAAK,MAAM,CAAC,yBAAyB,IAAI,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAClL,MAAM,KAAK,GAAwB;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe;YAChF,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;YACvG,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACpH,wBAAwB,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAC1F,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACnH,mBAAmB,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO;SACjD,CAAC;QACF,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;QACrG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,MAAM,CACX,IAAqC,EACrC,IAAqC,EACrC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,OAKC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAY,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAChH,IAAI,OAAO,EAAE,uBAAuB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,uBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,yBAAyB,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5K,IAAI,OAAO,EAAE,qBAAqB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,qBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,uBAAuB,CAAC;YAAE,OAAO,KAAK,CAAC;QACtK,IAAI,OAAO,EAAE,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI,KAAK,CAAC,mBAAmB,IAAI,OAAO,CAAC,YAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7K,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;eAChG,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;IACvH,CAAC;CACF;AAED,SAAS,YAAY,CAAI,EAAU,EAAE,GAAgF;IACnH,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3F,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,148 @@
|
|
|
1
|
+
import { type FailureEpisodeSnapshot } from './FailureEpisodeLatch.js';
|
|
2
|
+
import type { Admission, AdmissionToken, AdmitOpts, DerivedTarget } from '../monitoring/selfaction/types.js';
|
|
3
|
+
export type SelfHealSeverity = 'recoverable' | 'irreversible' | 'data-loss' | 'security' | 'unknown';
|
|
4
|
+
export type SelfHealEvidenceCode = 'source-absent' | 'schema-stale' | 'repaired' | 'already-healthy' | 'malformed-json' | 'access-denied' | 'io-error' | 'symlink-refused' | 'non-regular-refused' | 'sqlite-busy' | 'fence-stale' | 'verification-failed';
|
|
5
|
+
export type SelfHealRemediationResult = {
|
|
6
|
+
outcome: 'healed' | 'pending-restart' | 'not-healed';
|
|
7
|
+
evidence: SelfHealEvidenceCode;
|
|
8
|
+
};
|
|
9
|
+
type NoticeReason = 'unknown-severity' | 'irreversible' | 'data-loss' | 'security' | 'latency' | 'max-attempts' | 'wall-clock' | 'flap' | 'state-failure';
|
|
10
|
+
type NoticeState = {
|
|
11
|
+
state: 'pending' | 'enqueued';
|
|
12
|
+
id: string;
|
|
13
|
+
};
|
|
14
|
+
type RestartState = {
|
|
15
|
+
state: 'required' | 'requested';
|
|
16
|
+
requestingBootId: string;
|
|
17
|
+
stableRequestId: string;
|
|
18
|
+
};
|
|
19
|
+
export interface SelfHealNotice {
|
|
20
|
+
id: string;
|
|
21
|
+
controllerId: string;
|
|
22
|
+
reason: NoticeReason;
|
|
23
|
+
priority: 'HIGH' | 'URGENT';
|
|
24
|
+
}
|
|
25
|
+
export interface SelfHealAuditEvent {
|
|
26
|
+
at: number;
|
|
27
|
+
controllerId: string;
|
|
28
|
+
event: string;
|
|
29
|
+
reason?: string;
|
|
30
|
+
attempt?: number;
|
|
31
|
+
elapsedMs?: number;
|
|
32
|
+
}
|
|
33
|
+
export interface SelfHealSpec<Ctx> {
|
|
34
|
+
id: string;
|
|
35
|
+
controllerResource: 'hardware-bound' | 'pool-shared';
|
|
36
|
+
episodeAuthority: 'process-local' | 'durable-machine-local';
|
|
37
|
+
classId: string;
|
|
38
|
+
severity(ctx: Ctx): SelfHealSeverity;
|
|
39
|
+
dedupeKey(ctx: Ctx): string;
|
|
40
|
+
eligible(ctx: Ctx): {
|
|
41
|
+
eligible: boolean;
|
|
42
|
+
fence: string | null;
|
|
43
|
+
};
|
|
44
|
+
remediation(ctx: Ctx): SelfHealRemediationResult;
|
|
45
|
+
maxAttempts: number;
|
|
46
|
+
maxWallClockMs: number;
|
|
47
|
+
backoffMs(attempt: number): number;
|
|
48
|
+
notificationLatencyCeilingMs: number;
|
|
49
|
+
flap: {
|
|
50
|
+
maxRecoveries: number;
|
|
51
|
+
windowMs: number;
|
|
52
|
+
};
|
|
53
|
+
remediationActions: {
|
|
54
|
+
operation: string;
|
|
55
|
+
idempotencyGuard: string;
|
|
56
|
+
compensation: string;
|
|
57
|
+
};
|
|
58
|
+
restartVerified?(ctx: Ctx): boolean;
|
|
59
|
+
}
|
|
60
|
+
export type SelfHealResult = {
|
|
61
|
+
outcome: 'healed' | 'attempted' | 'backoff' | 'busy' | 'governed' | 'exhausted' | 'invalid-severity' | 'state-failure';
|
|
62
|
+
reason: string;
|
|
63
|
+
noticeAttempted?: boolean;
|
|
64
|
+
noticeReason?: NoticeReason;
|
|
65
|
+
tokenValid?: boolean;
|
|
66
|
+
};
|
|
67
|
+
export interface SelfHealEpisodeRecord {
|
|
68
|
+
schemaVersion: 1;
|
|
69
|
+
key: string;
|
|
70
|
+
revision: number;
|
|
71
|
+
status: 'active' | 'recovered' | 'exhausted';
|
|
72
|
+
startedAt: number;
|
|
73
|
+
attempts: number;
|
|
74
|
+
nextEligibleAt: number;
|
|
75
|
+
latch: FailureEpisodeSnapshot;
|
|
76
|
+
notices: Partial<Record<NoticeReason, NoticeState>>;
|
|
77
|
+
recoveries: number[];
|
|
78
|
+
restart: RestartState | null;
|
|
79
|
+
updatedAt: number;
|
|
80
|
+
}
|
|
81
|
+
export interface SelfHealEpisodeStore {
|
|
82
|
+
load(key: string): SelfHealEpisodeRecord | null;
|
|
83
|
+
create(record: SelfHealEpisodeRecord): SelfHealEpisodeRecord | null;
|
|
84
|
+
mutate(key: string, expectedRevision: number, update: (record: SelfHealEpisodeRecord) => SelfHealEpisodeRecord, guard?: () => boolean): SelfHealEpisodeRecord | null;
|
|
85
|
+
appendAudit?(event: SelfHealAuditEvent): void;
|
|
86
|
+
close?(): void;
|
|
87
|
+
}
|
|
88
|
+
export declare class InMemorySelfHealEpisodeStore implements SelfHealEpisodeStore {
|
|
89
|
+
private readonly rows;
|
|
90
|
+
readonly audits: SelfHealAuditEvent[];
|
|
91
|
+
load(key: string): SelfHealEpisodeRecord | null;
|
|
92
|
+
create(record: SelfHealEpisodeRecord): SelfHealEpisodeRecord | null;
|
|
93
|
+
mutate(key: string, expectedRevision: number, update: (record: SelfHealEpisodeRecord) => SelfHealEpisodeRecord, guard?: () => boolean): SelfHealEpisodeRecord | null;
|
|
94
|
+
appendAudit(event: SelfHealAuditEvent): void;
|
|
95
|
+
}
|
|
96
|
+
export declare class SqliteSelfHealEpisodeStore implements SelfHealEpisodeStore {
|
|
97
|
+
private readonly db;
|
|
98
|
+
private readonly unregisterSqlite;
|
|
99
|
+
constructor(dbPath: string);
|
|
100
|
+
load(key: string): SelfHealEpisodeRecord | null;
|
|
101
|
+
create(record: SelfHealEpisodeRecord): SelfHealEpisodeRecord | null;
|
|
102
|
+
mutate(key: string, expectedRevision: number, update: (record: SelfHealEpisodeRecord) => SelfHealEpisodeRecord, guard?: () => boolean): SelfHealEpisodeRecord | null;
|
|
103
|
+
appendAudit(event: SelfHealAuditEvent): void;
|
|
104
|
+
close(): void;
|
|
105
|
+
}
|
|
106
|
+
export interface SelfHealGateDeps {
|
|
107
|
+
admit(target: DerivedTarget, opts: AdmitOpts): Promise<Admission>;
|
|
108
|
+
consumeToken(token: AdmissionToken, controllerId: string, opts: {
|
|
109
|
+
targetKey: string;
|
|
110
|
+
nowMs: number;
|
|
111
|
+
}): {
|
|
112
|
+
proceed: boolean;
|
|
113
|
+
valid: boolean;
|
|
114
|
+
reason?: string;
|
|
115
|
+
};
|
|
116
|
+
notify(notice: SelfHealNotice): void | Promise<void>;
|
|
117
|
+
audit(event: SelfHealAuditEvent): void;
|
|
118
|
+
now?: () => number;
|
|
119
|
+
episodeStore?: SelfHealEpisodeStore;
|
|
120
|
+
bootId?: string;
|
|
121
|
+
requestRestart?: (stableRequestId: string) => boolean;
|
|
122
|
+
}
|
|
123
|
+
export declare class SelfHealGate<Ctx> {
|
|
124
|
+
private readonly spec;
|
|
125
|
+
private readonly deps;
|
|
126
|
+
private readonly now;
|
|
127
|
+
private readonly store;
|
|
128
|
+
private readonly bootId;
|
|
129
|
+
private readonly stateFailureNotices;
|
|
130
|
+
constructor(spec: SelfHealSpec<Ctx>, deps: SelfHealGateDeps);
|
|
131
|
+
needsRestartVerification(ctx: Ctx): boolean;
|
|
132
|
+
attempt(ctx: Ctx): Promise<SelfHealResult>;
|
|
133
|
+
recordHealthy(ctx: Ctx): SelfHealResult;
|
|
134
|
+
private attemptInner;
|
|
135
|
+
private runAdmitted;
|
|
136
|
+
private requestPendingRestart;
|
|
137
|
+
private ensureNotice;
|
|
138
|
+
private noticeAndReturn;
|
|
139
|
+
private exhaust;
|
|
140
|
+
private stateFailure;
|
|
141
|
+
private stateFailureWithNotice;
|
|
142
|
+
private key;
|
|
143
|
+
private newEpisode;
|
|
144
|
+
private cas;
|
|
145
|
+
private audit;
|
|
146
|
+
}
|
|
147
|
+
export {};
|
|
148
|
+
//# sourceMappingURL=SelfHealGate.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SelfHealGate.d.ts","sourceRoot":"","sources":["../../src/core/SelfHealGate.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuB,KAAK,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAE5F,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAE7G,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AACrG,MAAM,MAAM,oBAAoB,GAAG,eAAe,GAAG,cAAc,GAAG,UAAU,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,GAAG,UAAU,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,aAAa,GAAG,aAAa,GAAG,qBAAqB,CAAC;AAC3P,MAAM,MAAM,yBAAyB,GAAG;IAAE,OAAO,EAAE,QAAQ,GAAG,iBAAiB,GAAG,YAAY,CAAC;IAAC,QAAQ,EAAE,oBAAoB,CAAA;CAAE,CAAC;AACjI,KAAK,YAAY,GAAG,kBAAkB,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,MAAM,GAAG,eAAe,CAAC;AAC1J,KAAK,WAAW,GAAG;IAAE,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AACjE,KAAK,YAAY,GAAG;IAAE,KAAK,EAAE,UAAU,GAAG,WAAW,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3G,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAA;CAAE;AACvH,MAAM,WAAW,kBAAkB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9I,MAAM,WAAW,YAAY,CAAC,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAAC,gBAAgB,EAAE,eAAe,GAAG,uBAAuB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAC/I,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAAC;IAAC,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnI,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,yBAAyB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClI,4BAA4B,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,kBAAkB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1F,eAAe,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;CACrC;AACD,MAAM,MAAM,cAAc,GAAG;IAAE,OAAO,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,kBAAkB,GAAG,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtP,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IACnI,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IACjI,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CACjD;AACD,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,IAAI,CAAC;IACpE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,qBAAqB,EAAE,KAAK,CAAC,EAAE,MAAM,OAAO,GAAG,qBAAqB,GAAG,IAAI,CAAC;IACrK,WAAW,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,IAAI,IAAI,CAAC;CAC/D;AAcD,qBAAa,4BAA6B,YAAW,oBAAoB;IACvE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4C;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAM;IAC7G,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;IAC/C,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,IAAI;IACnE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,qBAAqB,EAAE,KAAK,CAAC,EAAE,MAAM,OAAO,GAAG,qBAAqB,GAAG,IAAI;IAQpK,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI;CAC7C;AAED,qBAAa,0BAA2B,YAAW,oBAAoB;IACrE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAa;gBAClC,MAAM,EAAE,MAAM;IAS1B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;IAC/C,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,IAAI;IAOnE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,qBAAqB,EAAE,KAAK,CAAC,EAAE,MAAM,OAAO,GAAG,qBAAqB,GAAG,IAAI;IASpK,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAC5C,KAAK,IAAI,IAAI;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAAC,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChO,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACtJ,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC;CACxE;AAED,qBAAa,YAAY,CAAC,GAAG;IAGf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAqB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAF3E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuB;IAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAClH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;gBAC5B,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,EAAmB,IAAI,EAAE,gBAAgB;IAM7F,wBAAwB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO;IACrC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC;IAChD,aAAa,CAAC,GAAG,EAAE,GAAG,GAAG,cAAc;YAMzB,YAAY;YAkCZ,WAAW;IAyBzB,OAAO,CAAC,qBAAqB;YAIf,YAAY;YAMZ,eAAe;YACf,OAAO;IACrB,OAAO,CAAC,YAAY;YACN,sBAAsB;IASpC,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,KAAK;CACd"}
|