jishushell 0.4.2 → 0.4.17

package/dist/routes/backup.js

@@ -0,0 +1,370 @@
+import { join } from "path";
+import { existsSync, statSync, createReadStream, mkdirSync, rmSync } from "fs";
+import { listInstanceBackups, assertNotLocked, } from "../services/backup-manager.js";
+import { verifyArchive } from "../services/backup-verify.js";
+import { getInstance } from "../services/instance-manager.js";
+import { BACKUPS_DIR } from "../config.js";
+import { validateId } from "./instances.js";
+/**
+ * Pre-flight validation shared by backup/restore/export write routes:
+ *   1. `:id` is a well-formed instance ID (reject malformed with 400)
+ *   2. The instance actually exists (reject missing with 404)
+ *   3. The instance is not currently locked by another operation (409)
+ *
+ * Without (2), write routes enqueue a job and return {ok:true,job_id} even
+ * for nonexistent instances; the "Instance not found" error only surfaces
+ * later inside the background worker, giving CLI/frontend a misleading
+ * success response. Matches the synchronous 404 behavior of the auto-backup
+ * config routes (GET/PUT /api/instances/:id/auto-backup).
+ *
+ * Returns `null` if the reply has already been sent; otherwise returns the
+ * validated instance ID so the caller can proceed.
+ */
+function preflightInstanceWrite(req, reply) {
+    const id = req.params.id;
+    const idErr = validateId(id);
+    if (idErr) {
+        reply.status(400).send({ detail: idErr });
+        return null;
+    }
+    if (!getInstance(id)) {
+        reply.status(404).send({ detail: "Instance not found" });
+        return null;
+    }
+    try {
+        assertNotLocked(id);
+    }
+    catch (e) {
+        reply.status(e.statusCode || 409).send({ detail: e.message });
+        return null;
+    }
+    return id;
+}
+export default async function backupRoutes(app) {
+    // POST /api/instances/:id/backup — Create backup
+    app.post("/api/instances/:id/backup", async (req, reply) => {
+        const id = preflightInstanceWrite(req, reply);
+        if (!id)
+            return reply;
+        try {
+            const { enqueueJob, updateJobProgress, backupInstance } = await import("../services/backup-manager.js");
+            const includeSessions = req.body?.include_sessions;
+            const includeWorkspace = req.body?.include_workspace;
+            const onlyConfig = req.body?.only_config;
+            const scope = req.body?.scope ?? "home";
+            const job = enqueueJob(id, "manual-backup", async (j) => {
+                updateJobProgress(j.id, onlyConfig ? "Creating config backup..." : "Creating backup...");
+                const result = await backupInstance(id, {
+                    includeSessions,
+                    includeWorkspace,
+                    onlyConfig,
+                    scope,
+                });
+                return { filename: result.filename, size: result.size };
+            });
+            return { ok: true, job_id: job.id, status: job.status };
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // GET /api/instances/:id/backups — List backups
+    app.get("/api/instances/:id/backups", async (req) => {
+        return listInstanceBackups(req.params.id);
+    });
+    // GET /api/instances/:id/backup/download/:file — Download backup file
+    app.get("/api/instances/:id/backup/download/:file", async (req, reply) => {
+        const filename = req.params.file;
+        // Sanitize filename to prevent path traversal
+        if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid filename" });
+        }
+        const filePath = join(BACKUPS_DIR, req.params.id, filename);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "Backup file not found" });
+        }
+        const stat = statSync(filePath);
+        const downloadName = `${req.params.id}-${filename}`;
+        reply.header("Content-Type", "application/gzip");
+        reply.header("Content-Length", stat.size);
+        reply.header("Content-Disposition", `attachment; filename="${downloadName}"`);
+        return reply.send(createReadStream(filePath));
+    });
+    // DELETE /api/instances/:id/backups/:file — Delete a backup
+    app.delete("/api/instances/:id/backups/:file", async (req, reply) => {
+        const filename = req.params.file;
+        if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid filename" });
+        }
+        const filePath = join(BACKUPS_DIR, req.params.id, filename);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "Backup file not found" });
+        }
+        rmSync(filePath, { force: true });
+        return { ok: true };
+    });
+    // POST /api/instances/:id/restore/:file — Restore from server-side backup
+    app.post("/api/instances/:id/restore/:file", async (req, reply) => {
+        const id = preflightInstanceWrite(req, reply);
+        if (!id)
+            return reply;
+        const filename = req.params.file;
+        if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid filename" });
+        }
+        const filePath = join(BACKUPS_DIR, id, filename);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "Backup file not found" });
+        }
+        try {
+            const { enqueueJob, updateJobProgress, restoreInstance } = await import("../services/backup-manager.js");
+            const job = enqueueJob(id, "restore", async (j) => {
+                updateJobProgress(j.id, "Restoring...");
+                return await restoreInstance(id, filePath);
+            });
+            return { ok: true, job_id: job.id, status: job.status };
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // POST /api/instances/create-from-backup — Create new instance from backup
+    app.post("/api/instances/create-from-backup", async (req, reply) => {
+        const { source_id, backup_file, new_id, new_name, new_description } = req.body;
+        if (!source_id || !backup_file || !new_id || !new_name) {
+            return reply.status(400).send({ detail: "Missing required fields: source_id, backup_file, new_id, new_name" });
+        }
+        const srcErr = validateId(source_id);
+        if (srcErr)
+            return reply.status(400).send({ detail: `Invalid source_id: ${srcErr}` });
+        const idErr = validateId(new_id);
+        if (idErr)
+            return reply.status(400).send({ detail: idErr });
+        if (new_name.length === 0 || new_name.length > 256) {
+            return reply.status(400).send({ detail: "Name must be 1-256 characters" });
+        }
+        // Sanitize backup_file
+        if (backup_file.includes("/") || backup_file.includes("\\") || backup_file.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid backup_file" });
+        }
+        const filePath = join(BACKUPS_DIR, source_id, backup_file);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "Backup file not found" });
+        }
+        try {
+            const { enqueueJobAndWait, updateJobProgress, createFromBackup } = await import("../services/backup-manager.js");
+            const job = await enqueueJobAndWait(new_id, "create-from-backup", async (j) => {
+                updateJobProgress(j.id, "Creating instance from backup...");
+                return await createFromBackup(filePath, { newId: new_id, newName: new_name, newDescription: new_description });
+            });
+            return job.result || { ok: false, detail: "Job completed without result" };
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // POST /api/instances/:id/backup/verify/:file — Verify a backup
+    app.post("/api/instances/:id/backup/verify/:file", async (req, reply) => {
+        const filename = req.params.file;
+        if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid filename" });
+        }
+        const filePath = join(BACKUPS_DIR, req.params.id, filename);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "Backup file not found" });
+        }
+        const result = await verifyArchive(filePath);
+        return result;
+    });
+    // GET /api/backups/orphaned — List orphaned backups (instances deleted but backups remain)
+    app.get("/api/backups/orphaned", async () => {
+        const { listAllBackupInstanceIds } = await import("../services/backup-manager.js");
+        const { getInstance } = await import("../services/instance-manager.js");
+        const allBackupIds = listAllBackupInstanceIds();
+        const orphaned = [];
+        for (const id of allBackupIds) {
+            if (!getInstance(id)) {
+                orphaned.push({ instance_id: id, backups: listInstanceBackups(id) });
+            }
+        }
+        return orphaned;
+    });
+    // DELETE /api/backups/orphaned/:id/:file — Delete an orphaned backup
+    app.delete("/api/backups/orphaned/:id/:file", async (req, reply) => {
+        const { id, file } = req.params;
+        if (id.includes("/") || id.includes("\\") || id.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid id" });
+        }
+        if (file.includes("/") || file.includes("\\") || file.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid filename" });
+        }
+        const filePath = join(BACKUPS_DIR, id, file);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "File not found" });
+        }
+        rmSync(filePath, { force: true });
+        return { ok: true };
+    });
+    // ── Auto-backup configuration ──
+    // GET /api/instances/:id/auto-backup
+    app.get("/api/instances/:id/auto-backup", async (req) => {
+        const { getAutoBackupConfig } = await import("../services/backup-manager.js");
+        return (await getAutoBackupConfig(req.params.id)) || { enabled: false };
+    });
+    // PUT /api/instances/:id/auto-backup
+    app.put("/api/instances/:id/auto-backup", async (req, reply) => {
+        const { enabled, interval_hours = 24, keep_count = 7 } = req.body || {};
+        const { updateInstanceMeta, getInstance } = await import("../services/instance-manager.js");
+        const { scheduleAutoBackup, cancelAutoBackup } = await import("../services/backup-manager.js");
+        const meta = getInstance(req.params.id);
+        if (!meta)
+            return reply.status(404).send({ detail: "Instance not found" });
+        const current = meta.auto_backup || {};
+        const config = {
+            ...current,
+            enabled: !!enabled,
+            interval_hours,
+            keep_count,
+        };
+        updateInstanceMeta(req.params.id, { auto_backup: config });
+        if (enabled) {
+            scheduleAutoBackup(req.params.id, config);
+        }
+        else {
+            cancelAutoBackup(req.params.id);
+        }
+        return { ok: true, config };
+    });
+    // ── Export ──
+    // POST /api/instances/:id/export — Create export package
+    app.post("/api/instances/:id/export", async (req, reply) => {
+        const id = preflightInstanceWrite(req, reply);
+        if (!id)
+            return reply;
+        try {
+            const { enqueueJob, updateJobProgress, exportInstance } = await import("../services/backup-manager.js");
+            const includeSessions = req.body?.include_sessions;
+            const job = enqueueJob(id, "export", async (j) => {
+                updateJobProgress(j.id, "Exporting...");
+                const result = await exportInstance(id, { includeSessions });
+                return { filename: result.filename, size: result.size, warnings: result.manifest?.warnings };
+            });
+            return { ok: true, job_id: job.id, status: job.status };
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // GET /api/instances/:id/export/download/:file — Download export file
+    app.get("/api/instances/:id/export/download/:file", async (req, reply) => {
+        const filename = req.params.file;
+        if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+            return reply.status(400).send({ detail: "Invalid filename" });
+        }
+        const idErr = validateId(req.params.id);
+        if (idErr)
+            return reply.status(400).send({ detail: idErr });
+        // Export files live under TMP_DIR/exports/<instanceId>/ — isolated so
+        // one instance's :id cannot reach another's archive.
+        const { TMP_DIR } = await import("../config.js");
+        const filePath = join(TMP_DIR, "exports", req.params.id, filename);
+        if (!existsSync(filePath)) {
+            return reply.status(404).send({ detail: "Export file not found or expired" });
+        }
+        const stat = statSync(filePath);
+        const downloadName = `${req.params.id}-${filename}`;
+        reply.header("Content-Type", "application/gzip");
+        reply.header("Content-Length", stat.size);
+        reply.header("Content-Disposition", `attachment; filename="${downloadName}"`);
+        return reply.send(createReadStream(filePath));
+    });
+    // ── Import (three-step flow) ──
+    // POST /api/instances/import/upload — Upload file to temp storage
+    app.post("/api/instances/import/upload", async (req, reply) => {
+        try {
+            const data = await req.file();
+            if (!data) {
+                return reply.status(400).send({ detail: "No file uploaded" });
+            }
+            // Write multipart stream to temp file
+            const { TMP_DIR } = await import("../config.js");
+            const { randomUUID } = await import("crypto");
+            const { pipeline } = await import("stream/promises");
+            const { createWriteStream } = await import("fs");
+            const tmpPath = join(TMP_DIR, `upload-${randomUUID()}.tar.gz`);
+            if (!existsSync(TMP_DIR))
+                mkdirSync(TMP_DIR, { recursive: true });
+            await pipeline(data.file, createWriteStream(tmpPath));
+            // Use storeUpload to register it
+            const { storeUpload } = await import("../services/backup-manager.js");
+            const result = await storeUpload(tmpPath);
+            // Clean up the initial upload temp file (storeUpload copies it)
+            if (existsSync(tmpPath))
+                rmSync(tmpPath, { force: true });
+            return { ok: true, temp_id: result.temp_id };
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // POST /api/instances/import/preview — Preview uploaded archive
+    app.post("/api/instances/import/preview", async (req, reply) => {
+        try {
+            if (!req.body?.temp_id) {
+                return reply.status(400).send({ detail: "Missing temp_id" });
+            }
+            const { previewImport } = await import("../services/backup-manager.js");
+            return await previewImport(req.body.temp_id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // POST /api/instances/import — Create instance from uploaded archive
+    app.post("/api/instances/import", async (req, reply) => {
+        try {
+            const { temp_id, id, name, description } = req.body || {};
+            if (!temp_id || !id || !name) {
+                return reply.status(400).send({ detail: "Missing required fields: temp_id, id, name" });
+            }
+            const idErr = validateId(id);
+            if (idErr)
+                return reply.status(400).send({ detail: idErr });
+            if (name.length === 0 || name.length > 256) {
+                return reply.status(400).send({ detail: "Name must be 1-256 characters" });
+            }
+            const { enqueueJobAndWait, updateJobProgress, importInstance } = await import("../services/backup-manager.js");
+            const job = await enqueueJobAndWait(id, "import", async (j) => {
+                updateJobProgress(j.id, "Importing...");
+                return await importInstance(temp_id, { id, name, description });
+            });
+            return job.result || { ok: false, detail: "Job completed without result" };
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 500).send({ detail: e.message });
+        }
+    });
+    // ── Job Queue ──
+    // GET /api/backup/queue — Get queue status
+    app.get("/api/backup/queue", async () => {
+        const { getQueueStatus } = await import("../services/backup-manager.js");
+        return getQueueStatus();
+    });
+    // GET /api/backup/jobs/:id — Get specific job
+    app.get("/api/backup/jobs/:id", async (req, reply) => {
+        const { getJob } = await import("../services/backup-manager.js");
+        const job = getJob(req.params.id);
+        if (!job)
+            return reply.status(404).send({ detail: "Job not found" });
+        return job;
+    });
+    // DELETE /api/backup/jobs/:id — Cancel a queued job
+    app.delete("/api/backup/jobs/:id", async (req, reply) => {
+        const { cancelJob } = await import("../services/backup-manager.js");
+        const cancelled = cancelJob(req.params.id);
+        if (!cancelled)
+            return reply.status(404).send({ detail: "Job not found or already running" });
+        return { ok: true };
+    });
+}
+//# sourceMappingURL=backup.js.map

package/dist/routes/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/routes/backup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC/E,OAAO,EACL,mBAAmB,EAEnB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C;;;;;;;;;;;;;;GAcG;AACH,SAAS,sBAAsB,CAC7B,GAA+B,EAC/B,KAAiE;IAEjE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACtE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAChG,IAAI,CAAC;QACH,eAAe,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,YAAY,CAAC,GAAoB;IAE7D,iDAAiD;IACjD,GAAG,CAAC,IAAI,CASN,2BAA2B,EAC3B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACxG,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC;YACnD,MAAM,gBAAgB,GAAG,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACrD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC;YACzC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC;YACxC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACtD,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;gBACzF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;oBACtC,eAAe;oBACf,gBAAgB;oBAChB,UAAU;oBACV,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1D,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,gDAAgD;IAChD,GAAG,CAAC,GAAG,CACL,4BAA4B,EAC5B,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;IAEF,sEAAsE;IACtE,GAAG,CAAC,GAAG,CACL,0CAA0C,EAC1C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QACpD,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACjD,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,YAAY,GAAG,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,4DAA4D;IAC5D,GAAG,CAAC,MAAM,CACR,kCAAkC,EAClC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CACN,kCAAkC,EAClC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACzG,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAChD,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;gBACxC,OAAO,MAAM,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,2EAA2E;IAC3E,GAAG,CAAC,IAAI,CAGN,mCAAmC,EACnC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC/E,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,MAAM,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,uBAAuB;QACvB,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1F,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACjH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC5E,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAC;gBAC5D,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;YACjH,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,gEAAgE;IAChE,GAAG,CAAC,IAAI,CACN,wCAAwC,EACxC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC,CACF,CAAC;IAEF,2FAA2F;IAC3F,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACnF,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,wBAAwB,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAoF,EAAE,CAAC;QACrG,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,GAAG,CAAC,MAAM,CACR,iCAAiC,EACjC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;IAEF,kCAAkC;IAElC,qCAAqC;IACrC,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAC9E,OAAO,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC,CACF,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,EAAE,EAAE,UAAU,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACxE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC5F,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAE/F,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAE3E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG;YACb,GAAG,OAAO;YACV,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,cAAc;YACd,UAAU;SACX,CAAC;QAEF,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3D,IAAI,OAAO,EAAE,CAAC;YACZ,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,eAAe;IAEf,yDAAyD;IACzD,GAAG,CAAC,IAAI,CACN,2BAA2B,EAC3B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACxG,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC;YACnD,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC/C,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;YAC/F,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,sEAAsE;IACtE,GAAG,CAAC,GAAG,CACL,0CAA0C,EAC1C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QACpD,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACjD,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,YAAY,GAAG,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,iCAAiC;IAEjC,kEAAkE;IAClE,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,sCAAsC;YACtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACrD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,UAAU,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAElE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;YAEtD,iCAAiC;YACjC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAE1C,gEAAgE;YAChE,IAAI,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,GAAG,CAAC,IAAI,CACN,+BAA+B,EAC/B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACxE,OAAO,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,qEAAqE;IACrE,GAAG,CAAC,IAAI,CACN,uBAAuB,EACvB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YAC/G,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC5D,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;gBACxC,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,kBAAkB;IAElB,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACzE,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,GAAG,CAAC,GAAG,CACL,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACrE,OAAO,GAAG,CAAC;IACb,CAAC,CACF,CAAC;IAEF,oDAAoD;IACpD,GAAG,CAAC,MAAM,CACR,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/routes/instances.d.ts

@@ -1,2 +1,3 @@
 import { FastifyInstance } from "fastify";
+export declare function validateId(id: string): string | null;
 export declare function instanceRoutes(app: FastifyInstance): Promise<void>;

package/dist/routes/instances.js

@@ -5,10 +5,12 @@ import { request as httpRequest } from "http";
 import { join } from "path";
 import { getServiceManagerType } from "../config.js";
 import { PROXY_IDENTITY_HEADERS } from "../constants.js";
+import { assertNotLocked } from "../services/backup-manager.js";
 import * as instanceManager from "../services/instance-manager.js";
 import * as llmProxy from "../services/llm-proxy/index.js";
 import * as pluginInstaller from "../services/plugin-installer.js";
 import { TtlMap } from "../utils/ttl-cache.js";
+import { writeConfigFile, writeSecretFile, ensureDirContainer } from "../utils/fs.js";
 // Hop-by-hop headers that must not be forwarded by a proxy (RFC 2616 §13.5.1)
 const HOP_BY_HOP = new Set([
     "connection", "keep-alive", "proxy-authenticate", "proxy-authorization",
@@ -68,7 +70,7 @@ async function getSvc() {
     _svcType = currentType;
     return _svc;
 }
-function validateId(id) {
+export function validateId(id) {
     if (!/^[a-z0-9][a-z0-9-]{0,62}$/.test(id)) {
         return "ID must be lowercase alphanumeric with hyphens, 1-63 chars";
     }
@@ -138,7 +140,8 @@ export async function instanceRoutes(app) {
                 return reply.status(400).send({ detail: `Source instance '${req.body.clone_from}' not found` });
         }
         try {
-            const meta = await instanceManager.createInstance(req.body.id, req.body.name, req.body.description || "", req.body.clone_from, req.body.openclaw_home);
+            const meta = await instanceManager.createInstance(req.body.id, req.body.name, req.body.description || "", req.body.clone_from, req.body.openclaw_home, undefined, // appSpec — not used from HTTP route
+            req.body.clone_options);
             // Auto-start if default provider is configured (model ready to use)
             const { getPanelConfig } = await import("../config.js");
             const dp = getPanelConfig().default_provider;
@@ -165,7 +168,7 @@ export async function instanceRoutes(app) {
         if (!inst)
             return reply.status(404).send({ detail: "Instance not found" });
         const status = await svc.getStatus(req.params.id);
-        return { ...inst, service: status };
+        return { ...inst, service: status, llmError: llmProxy.getLastProxyError(req.params.id) ?? null };
     });
     // Update
     app.put("/api/instances/:id", async (req, reply) => {
@@ -178,6 +181,12 @@ export async function instanceRoutes(app) {
         if (req.body.description !== undefined && req.body.description.length > 2048) {
             return reply.status(400).send({ detail: "Description must be at most 2048 characters" });
         }
+        try {
+            assertNotLocked(req.params.id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 409).send({ detail: e.message });
+        }
         const inst = instanceManager.updateInstance(req.params.id, req.body.name, req.body.description);
         if (!inst)
             return reply.status(404).send({ detail: "Instance not found" });
@@ -188,6 +197,12 @@ export async function instanceRoutes(app) {
         const idErr = validateId(req.params.id);
         if (idErr)
             return reply.status(400).send({ detail: idErr });
+        try {
+            assertNotLocked(req.params.id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 409).send({ detail: e.message });
+        }
         const svc = await getSvc();
         let stopFailed = false;
         try {
@@ -212,7 +227,8 @@ export async function instanceRoutes(app) {
         catch { /* ignore */ }
         statusCache.delete(req.params.id);
         llmProxy.cleanupInstance(req.params.id);
-        const result = instanceManager.deleteInstance(req.params.id);
+        const purgeBackups = req.query.purge_backups === "true";
+        const result = await instanceManager.deleteInstance(req.params.id, purgeBackups);
         if (!result.ok && result.warnings?.some(w => w.includes("not found"))) {
             return reply.status(404).send({ detail: "Instance not found" });
         }
@@ -247,6 +263,7 @@ export async function instanceRoutes(app) {
             return reply.status(400).send({ detail: "Config too large (max 512KB)" });
         }
         try {
+            assertNotLocked(req.params.id);
             const saved = await llmProxy.saveInstanceConfig(req.params.id, body);
             return { ok: true, config: saved };
         }
@@ -272,6 +289,12 @@ export async function instanceRoutes(app) {
         const idErr = validateId(req.params.id);
         if (idErr)
             return reply.status(400).send({ detail: idErr });
+        try {
+            assertNotLocked(req.params.id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 409).send({ detail: e.message });
+        }
         const svc = await getSvc();
         if (!instanceManager.getInstance(req.params.id)) {
             return reply.status(404).send({ detail: "Instance not found" });
@@ -286,6 +309,12 @@ export async function instanceRoutes(app) {
         const idErr = validateId(req.params.id);
         if (idErr)
             return reply.status(400).send({ detail: idErr });
+        try {
+            assertNotLocked(req.params.id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 409).send({ detail: e.message });
+        }
         const svc = await getSvc();
         if (!instanceManager.getInstance(req.params.id)) {
             return reply.status(404).send({ detail: "Instance not found" });
@@ -300,6 +329,12 @@ export async function instanceRoutes(app) {
         const idErr = validateId(req.params.id);
         if (idErr)
             return reply.status(400).send({ detail: idErr });
+        try {
+            assertNotLocked(req.params.id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 409).send({ detail: e.message });
+        }
         const svc = await getSvc();
         if (!instanceManager.getInstance(req.params.id)) {
             return reply.status(404).send({ detail: "Instance not found" });
@@ -434,7 +469,7 @@ export async function instanceRoutes(app) {
         const openclawHome = instanceManager.getOpenclawHome(req.params.id);
         const workspaceDir = join(openclawHome, ".openclaw", "workspace");
         const mcporterCfgPath = join(workspaceDir, "config", "mcporter.json");
-        const { readFileSync, writeFileSync, mkdirSync } = await import("fs");
+        const { readFileSync } = await import("fs");
         let cfg = { mcpServers: {}, imports: [] };
         try {
             cfg = JSON.parse(readFileSync(mcporterCfgPath, "utf8"));
@@ -450,8 +485,8 @@ export async function instanceRoutes(app) {
                 cfg.mcpServers[k] = v;
         }
         try {
-            mkdirSync(join(workspaceDir, "config"), { recursive: true });
-            writeFileSync(mcporterCfgPath, JSON.stringify(cfg, null, 2), "utf8");
+            ensureDirContainer(join(workspaceDir, "config"));
+            writeConfigFile(mcporterCfgPath, JSON.stringify(cfg, null, 2));
         }
         catch (err) {
             return reply.status(500).send({ detail: `Write failed: ${err.message}` });
@@ -473,7 +508,7 @@ export async function instanceRoutes(app) {
         const openclawHome = instanceManager.getOpenclawHome(req.params.id);
         const workspaceDir = join(openclawHome, ".openclaw", "workspace");
         const mcporterCfgPath = join(workspaceDir, "config", "mcporter.json");
-        const { readFileSync, writeFileSync } = await import("fs");
+        const { readFileSync } = await import("fs");
         let cfg = { mcpServers: {}, imports: [] };
         try {
             cfg = JSON.parse(readFileSync(mcporterCfgPath, "utf8"));
@@ -484,7 +519,7 @@ export async function instanceRoutes(app) {
         }
         delete cfg.mcpServers[serverName];
         try {
-            writeFileSync(mcporterCfgPath, JSON.stringify(cfg, null, 2), "utf8");
+            writeConfigFile(mcporterCfgPath, JSON.stringify(cfg, null, 2));
         }
         catch (err) {
             return reply.status(500).send({ detail: `Write failed: ${err.message}` });
@@ -525,6 +560,12 @@ export async function instanceRoutes(app) {
         if (!instanceManager.getInstance(req.params.id)) {
             return reply.status(404).send({ detail: "Instance not found" });
         }
+        try {
+            assertNotLocked(req.params.id);
+        }
+        catch (e) {
+            return reply.status(e.statusCode || 409).send({ detail: e.message });
+        }
         const { channelId } = req.body;
         if (!channelId || typeof channelId !== "string") {
             return reply.status(400).send({ detail: "channelId is required" });
@@ -959,7 +1000,7 @@ export async function instanceRoutes(app) {
     app.post("/api/admin/migrate-secrets", async (_req, reply) => {
         const { getAesKey, getJwtSecret } = await import("../config.js");
         const { scryptSync, createDecipheriv, createCipheriv, randomBytes } = await import("crypto");
-        const { readFileSync, writeFileSync, existsSync } = await import("fs");
+        const { readFileSync, existsSync: fsExistsSync } = await import("fs");
         const instances = instanceManager.listInstances();
         const results = [];
         const currentKey = getAesKey();
@@ -967,7 +1008,7 @@ export async function instanceRoutes(app) {
         for (const inst of instances) {
             const envFiles = instanceManager.getRuntimeEnvFiles(inst.id);
             const providerEnvFile = envFiles[0]?.replace(/model\.env$/, "provider.env");
-            if (!providerEnvFile || !existsSync(providerEnvFile)) {
+            if (!providerEnvFile || !fsExistsSync(providerEnvFile)) {
                 results.push({ id: inst.id, status: "skipped", error: "no provider.env" });
                 continue;
             }
@@ -1019,7 +1060,7 @@ export async function instanceRoutes(app) {
                 const newEncrypted = "enc:" + Buffer.concat([newIv, newTag, enc]).toString("base64");
                 // Write back
                 const newContent = envContent.replace(/UPSTREAM_API_KEY=.+/, `UPSTREAM_API_KEY=${newEncrypted}`);
-                writeFileSync(providerEnvFile, newContent, { mode: 0o600 });
+                writeSecretFile(providerEnvFile, newContent);
                 results.push({ id: inst.id, status: "migrated" });
             }
         }
@@ -1073,8 +1114,13 @@ export async function instanceRoutes(app) {
         const gwHost = await instanceManager.getGatewayHost(id);
         const suffix = request.params["*"] || "";
         const qs = request.url.includes("?") ? request.url.slice(request.url.indexOf("?")) : "";
-        // Raw HTTP proxy — stream the request body and preserve headers
-        const targetUrl = `http://${gwHost}:${port}/${suffix}${qs}`;
+        // Raw HTTP proxy — stream the request body and preserve headers.
+        // Bracket IPv6 literals (`::1`) because `http://::1:18789/` is not a
+        // valid URL; see instance-manager.urlHost. Nomad 1.6.5 on Linux with
+        // `network_interface = "lo"` can allocate the task port to `::1`
+        // whenever the kernel enumerates the lo interface's v6 address first.
+        const urlGwHost = instanceManager.urlHost(gwHost);
+        const targetUrl = `http://${urlGwHost}:${port}/${suffix}${qs}`;
         try {
             // Build upstream headers: keep everything except hop-by-hop, rewrite host/origin
             const fwdHeaders = {};
@@ -1092,7 +1138,7 @@ export async function instanceRoutes(app) {
                     continue;
                 fwdHeaders[k] = Array.isArray(v) ? v.join(", ") : v;
             }
-            fwdHeaders["host"] = `${gwHost}:${port}`;
+            fwdHeaders["host"] = `${urlGwHost}:${port}`;
             // Request uncompressed responses — avoids having to decompress before HTML injection,
             // and lets us stream non-HTML bodies without content-encoding mismatch.
             fwdHeaders["accept-encoding"] = "identity";