jishushell 0.4.24 → 0.4.30

package/dist/types.d.ts

@@ -26,6 +26,12 @@ export interface ServiceResult {
     eval_id?: string;
     /** Port allocation metadata from adapters (process-manager / nomad-manager). */
     port_allocation?: unknown;
+    /**
+     * Stable error code for callers that prefer machine-readable tags over
+     * regex-matching localized error messages. Populated by PR 3
+     * resolveConnections (`MISSING_REQUIRED_CONNECTION` / `AMBIGUOUS_CONNECTION` / etc).
+     */
+    code?: string;
 }
 export interface ExecResult {
     stdout: string;
@@ -157,6 +163,16 @@ export interface AppTask {
     after?: string[];
     /** Volumes: string format "src:dest[:ro]" or object { source, target, readonly? } */
     volumes?: Array<string | AppTaskVolume>;
+    /**
+     * Container task user spec. Format: "uid:gid" (numeric) or "uid". Special
+     * value "host" resolves to the panel process's `process.getuid()`:`getgid()`
+     * at job-build time — keeps bind-mounted data dirs writable by the panel
+     * user (typically `pi`) without forcing the container to run as root and
+     * without needing `chown`/`CAP_DAC_OVERRIDE` gymnastics. Mirrors how the
+     * hermes / openclaw adapters set `User`. When omitted on container tasks
+     * the unified builder falls back to "host" by default.
+     */
+    user?: string;
 }
 export interface AppTerminalCommandPreset {
     cmd: string;
@@ -173,25 +189,165 @@ export interface AppTerminalConfig {
     timeout_ms?: number;
     commands?: Record<string, Array<string | AppTerminalCommandPreset>>;
 }
+/**
+ * Health-probe spec attached to a provide. When omitted, the prober derives
+ * a default strategy from `protocol` (§5.6: http→HEAD, ws/tcp→connect,
+ * mcp→initialize, terminal→no-op).
+ */
+export interface ProvideHealthSpec {
+    kind?: "http" | "tcp" | "mcp" | "none";
+    /** HTTP path to probe (defaults to "/"). Ignored for non-http kinds. */
+    path?: string;
+    /** Custom port to probe; defaults to the provide's resolved hostPort. */
+    port?: number;
+}
 export interface AppProvide {
     capability: string;
+    /** Task that exposes this capability — required for resolveProvideEndpoint
+     *  (§5.5) to pick the right port when an app has multiple service tasks. */
+    task?: string;
+    /** Optional port-name disambiguator when multiple ports share a number. */
+    portName?: string;
     port?: number;
     path?: string;
     url?: string;
-    protocol?: "http" | "https" | "tcp" | "udp" | (string & {});
+    protocol?: "http" | "https" | "tcp" | "udp" | "ws" | "wss" | "sse" | "mcp" | "terminal" | (string & {});
     visibility?: string;
     description?: string;
     terminal?: AppTerminalConfig;
+    /** Optional explicit health probe; defaults derived from `protocol` (§5.6). */
+    health?: ProvideHealthSpec;
+    /**
+     * §17 (PR 8) — canonical MCP tool surface. Filled when this capability
+     * is meant to be re-exposed to an LLM agent through an MCP server. The
+     * jishushell MCP firewall uses these fields verbatim — upstream
+     * `tools/list` descriptions are discarded — to prevent third-party
+     * packages from prompt-injecting the LLM via their own tool wording.
+     * When absent, adapters fall back to the legacy per-capability path
+     * (PR 7 in-tree shim or direct `npx <pkg>` wiring).
+     */
+    tool_schema?: ToolSchema;
+    /**
+     * §6 — describes how a consumer that binds this `provides[]` capability
+     * should authenticate when calling the endpoint. Optional. Absent = no auth.
+     */
+    auth?: AppProvideAuth;
+}
+/**
+ * §6 — describes how a consumer that binds this `provides[]` capability
+ * should authenticate when calling the endpoint. Optional. Absent = no auth.
+ *
+ * `tokenSource` is a small DSL the apply hook resolves at apply time:
+ *   "instance.env.<NAME>"      — read from the provider instance's runtime env
+ *   "instance.config.<path>"   — read from the provider's openclaw.json (json-pointer)
+ *   "proxy.token"              — read from the embedded llm-proxy's per-instance token
+ *
+ * Validation rules (PR A): `tokenSource` is required when kind !== "none".
+ * At the type level we keep it optional because the validator catches violations.
+ */
+export interface AppProvideAuth {
+    kind: "none" | "bearer" | "header" | "query";
+    tokenSource?: string;
+    headerName?: string;
+    tokenPrefix?: string;
+}
+/**
+ * §17.3.1 — what the LLM sees for an MCP-class capability.
+ *
+ * `name` / `description` / `parameters` are forwarded verbatim by the
+ * MCP firewall's `tools/list` response, replacing whatever the upstream
+ * package would have advertised. `upstream` tells the firewall how to
+ * spawn the actual implementation.
+ */
+export interface ToolSchema {
+    /** MCP tool name. Must match `^[a-z][a-z0-9_]*$`. */
+    name: string;
+    /**
+     * Human-language description shown to the LLM. Keep minimal —
+     * "news / recent events / today" style suggestions invite query
+     * rewriting in some models (see §17.1).
+     */
+    description: string;
+    /**
+     * MCP `inputSchema`. Stored under the `parameters` key in yaml for
+     * brevity; the firewall publishes it as `inputSchema` on the wire.
+     */
+    parameters: {
+        type: "object";
+        properties: Record<string, Record<string, any>>;
+        required?: string[];
+    };
+    /**
+     * How the firewall spawns the actual upstream MCP server. Args are
+     * passed through unchanged. `env_template` values may reference
+     * `${SLOT}` placeholders that the writeMcpEntry helper resolves
+     * against the connection-resolver's env output before serializing
+     * into firewall config.
+     */
+    upstream: {
+        command: string;
+        args?: string[];
+        env_template?: Record<string, string>;
+    };
+    /**
+     * When true (default), wrap each `tools/call` result in
+     * `{untrusted: true, source: <capability_id>, content: ...}` so the
+     * LLM treats output as untrusted data, not instructions. Mirrors
+     * OpenClaw's `wrapWebContent` defense.
+     */
+    wrap_outputs?: boolean;
 }
 export interface AppRequire {
     capability: string;
     inject_as: string;
     required?: boolean;
+    /**
+     * Multi-candidate semantics. `"one"` (default) lets the user pick exactly
+     * one provider; `"many"` allows multiple providers (e.g. several MCP
+     * servers merged together).
+     */
+    cardinality?: "one" | "many";
+    /**
+     * LLM apply mode (§7.1.2). Only meaningful when `capability` resolves to
+     * the `llm` category. `"proxy-upstream"` writes the consumer instance's
+     * `x-jishushell.proxy.upstream` (OpenClaw / Hermes default); `"openai-env"`
+     * injects `OPENAI_API_BASE_URL` / `OPENAI_API_KEY` directly into runtime
+     * env (Open WebUI / generic OpenAI clients). Omit to fall back to the
+     * adapter-type default.
+     */
+    apply?: "proxy-upstream" | "openai-env";
+}
+/**
+ * Persisted binding state. Stored under `instance.json.connections[slot]`.
+ * `null` denotes user-explicit disconnect (do not auto-fall-back).
+ * Missing slot = "never set" (legacy single-candidate fallback may apply).
+ */
+export interface InstanceConnectionSingle {
+    kind: "single";
+    providerId: string;
+    capability: string;
+    /** LLM-only: which model the user picked. */
+    selectedModelId?: string;
+}
+export interface InstanceConnectionMany {
+    kind: "many";
+    providers: Array<{
+        providerId: string;
+        capability: string;
+    }>;
+}
+export type InstanceConnection = InstanceConnectionSingle | InstanceConnectionMany | null;
+export type InstanceConnections = Record<string, InstanceConnection>;
+export interface DismissedSuggestion {
+    slot: string;
+    until: string;
 }
 export type AppLifecycleStep = {
     run: string;
     timeout_ms?: number;
     successIfCommandExists?: string;
+    sudo?: boolean;
+    ifFileExists?: string;
 } | {
     downloadImage: string;
     timeout_ms?: number;
@@ -207,6 +363,12 @@ export type AppLifecycleStep = {
     deleteBinary: string;
 } | {
     mkdir: string;
+} | {
+    chown: {
+        path: string;
+        owner: string;
+        recursive?: boolean;
+    };
 } | {
     deleteDir: string;
 } | {
@@ -217,6 +379,14 @@ export interface AppLifecycle {
     pre_install?: AppLifecycleStep[];
     /** Steps run during `app install`, before the job is created. */
     install?: AppLifecycleStep[];
+    /**
+     * Steps run on every app start, immediately before the Nomad job is
+     * submitted. Use for idempotent invariants the runtime depends on but
+     * that may drift between starts (e.g. chowning a bind-mount to match
+     * the container's runtime user when `cap_drop: ALL` strips
+     * CAP_DAC_OVERRIDE).
+     */
+    pre_start?: AppLifecycleStep[];
     /** Steps run during `app uninstall`, before files are removed. */
     uninstall?: AppLifecycleStep[];
     /** Steps run after the Nomad job transitions to `running`. */

package/dist/utils/instance-lock.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Per-instance promise-chain mutex for serializing operations that mutate
+ * a single instance's durable state across multiple files (instance.json,
+ * provider.env, openclaw.json, mcporter.json, …).
+ *
+ * Mirrors the existing pattern in `llm-proxy/index.ts:_configSaveLocks`:
+ * each `withInstanceLock(id, fn)` call chains onto whatever promise was
+ * last queued for that id, so concurrent callers see strict FIFO ordering.
+ * The map self-cleans entries when the chain settles to keep memory flat.
+ *
+ * Use this for any code path that performs more than one file write on a
+ * given instance id (PUT /connections transactor, startApp, stopApp,
+ * restartApp). Operations on different instance ids never block each other.
+ */
+/**
+ * Run `fn` exclusively against `instanceId`. Returns `fn`'s value (or
+ * propagates its rejection). Pending callers form a FIFO chain — each
+ * waits for prior ones to settle, even if they reject.
+ */
+export declare function withInstanceLock<T>(instanceId: string, fn: () => Promise<T>): Promise<T>;
+/** Test-only helper for verifying the chain is empty between cases. */
+export declare function __instanceLockSize(): number;

package/dist/utils/instance-lock.js

@@ -0,0 +1,48 @@
+/**
+ * Per-instance promise-chain mutex for serializing operations that mutate
+ * a single instance's durable state across multiple files (instance.json,
+ * provider.env, openclaw.json, mcporter.json, …).
+ *
+ * Mirrors the existing pattern in `llm-proxy/index.ts:_configSaveLocks`:
+ * each `withInstanceLock(id, fn)` call chains onto whatever promise was
+ * last queued for that id, so concurrent callers see strict FIFO ordering.
+ * The map self-cleans entries when the chain settles to keep memory flat.
+ *
+ * Use this for any code path that performs more than one file write on a
+ * given instance id (PUT /connections transactor, startApp, stopApp,
+ * restartApp). Operations on different instance ids never block each other.
+ */
+const _instanceLocks = new Map();
+/**
+ * Run `fn` exclusively against `instanceId`. Returns `fn`'s value (or
+ * propagates its rejection). Pending callers form a FIFO chain — each
+ * waits for prior ones to settle, even if they reject.
+ */
+export async function withInstanceLock(instanceId, fn) {
+    const prev = _instanceLocks.get(instanceId) ?? Promise.resolve();
+    // Swallow prior rejections so the chain doesn't break — each caller still
+    // gets its own promise's result. The map only tracks ordering, not health.
+    const current = prev.catch(() => undefined).then(() => fn());
+    // Identity check uses the same reference we store; .finally() returns a
+    // new promise, so we must store `current` and attach the cleanup as a
+    // side-effect, not store the .finally() result. The trailing .catch()
+    // swallows the cleanup-promise's rejection — without it Node logs an
+    // "unhandled rejection" each time `fn()` throws even though the caller
+    // already handled it via the returned `current`.
+    current
+        .finally(() => {
+        if (_instanceLocks.get(instanceId) === current) {
+            _instanceLocks.delete(instanceId);
+        }
+    })
+        .catch(() => {
+        // intentional no-op — caller handles the original rejection
+    });
+    _instanceLocks.set(instanceId, current);
+    return current;
+}
+/** Test-only helper for verifying the chain is empty between cases. */
+export function __instanceLockSize() {
+    return _instanceLocks.size;
+}
+//# sourceMappingURL=instance-lock.js.map

package/dist/utils/instance-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-lock.js","sourceRoot":"","sources":["../../src/utils/instance-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,EAAoB;IAEpB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACjE,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,OAAO,GAAe,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,iDAAiD;IACjD,OAAO;SACJ,OAAO,CAAC,GAAG,EAAE;QACZ,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,EAAE,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,4DAA4D;IAC9D,CAAC,CAAC,CAAC;IACL,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,CAAC,IAAI,CAAC;AAC7B,CAAC"}

package/dist/utils/safe-json.js

@@ -1,4 +1,4 @@
-import { chmodSync, existsSync, readFileSync, writeFileSync, renameSync, copyFileSync, openSync, fdatasyncSync, closeSync, mkdirSync } from "fs";
+import { chmodSync, existsSync, readFileSync, writeFileSync, renameSync, copyFileSync, openSync, fdatasyncSync, closeSync, mkdirSync, rmSync } from "fs";
 import { dirname } from "path";
 const BACKUP_SUFFIXES = [".bak", ".bak.1", ".bak.2"];
 function recoverJson(path, label, mode) {
@@ -48,34 +48,67 @@ function withWriteLock(path, fn) {
     }
 }
 function atomicWriteJson(path, data, fsync, mode) {
-    mkdirSync(dirname(path), { recursive: true });
-    const tmp = path + ".tmp";
+    const dir = dirname(path);
+    mkdirSync(dir, { recursive: true });
+    const tmp = `${path}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`;
     const json = typeof data === "string" ? data : JSON.stringify(data);
-    writeFileSync(tmp, json, { mode });
-    chmodSync(tmp, mode);
-    JSON.parse(readFileSync(tmp, "utf-8"));
-    if (fsync) {
-        try {
-            const fd = openSync(tmp, "r");
-            fdatasyncSync(fd);
-            closeSync(fd);
+    try {
+        writeFileSync(tmp, json, { mode });
+        chmodSync(tmp, mode);
+        JSON.parse(readFileSync(tmp, "utf-8"));
+        if (fsync) {
+            let fd = null;
+            try {
+                fd = openSync(tmp, "r");
+                fdatasyncSync(fd);
+            }
+            catch { }
+            finally {
+                if (fd !== null)
+                    try {
+                        closeSync(fd);
+                    }
+                    catch { }
+            }
         }
-        catch { }
-    }
-    if (existsSync(path)) {
-        try {
-            if (existsSync(path + ".bak.1"))
-                copyFileSync(path + ".bak.1", path + ".bak.2");
+        if (existsSync(path)) {
+            try {
+                if (existsSync(path + ".bak.1"))
+                    copyFileSync(path + ".bak.1", path + ".bak.2");
+            }
+            catch { }
+            try {
+                if (existsSync(path + ".bak"))
+                    copyFileSync(path + ".bak", path + ".bak.1");
+            }
+            catch { }
+            copyFileSync(path, path + ".bak");
         }
-        catch { }
+        renameSync(tmp, path);
+        chmodSync(path, mode);
+        if (fsync) {
+            let dirFd = null;
+            try {
+                dirFd = openSync(dir, "r");
+                fdatasyncSync(dirFd);
+            }
+            catch { }
+            finally {
+                if (dirFd !== null)
+                    try {
+                        closeSync(dirFd);
+                    }
+                    catch { }
+            }
+        }
+    }
+    catch (err) {
         try {
-            if (existsSync(path + ".bak"))
-                copyFileSync(path + ".bak", path + ".bak.1");
+            rmSync(tmp, { force: true });
         }
         catch { }
-        copyFileSync(path, path + ".bak");
+        throw err;
     }
-    renameSync(tmp, path);
 }
 export function safeWriteJson(path, data, fsync = false) {
     withWriteLock(path, () => atomicWriteJson(path, data, fsync, 0o644));

package/dist/utils/safe-json.js.map

@@ -1 +1 @@
-{"version":3,"file":"safe-json.js","sourceRoot":"","sources":["../../src/utils/safe-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACjJ,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAErD,SAAS,WAAW,CAAI,IAAY,EAAE,KAAa,EAAE,IAAY;IAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,8BAA8B,CAAC,EAAE,CAAC,CAAC;gBAClE,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;gBAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAA0B,IAAY,EAAE,KAAa;IAC/E,OAAO,WAAW,CAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAA0B,IAAY,EAAE,KAAa;IACrF,OAAO,WAAW,CAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,SAAS,aAAa,CAAC,IAAY,EAAE,EAAc;IACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;YACnC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,6CAA6C,IAAI,eAAe,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAS,EAAE,KAAc,EAAE,IAAY;IAC5E,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpE,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACvC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACnF,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC;gBAAE,YAAY,CAAC,IAAI,GAAG,QAAQ,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACjG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC;gBAAE,YAAY,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC7F,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAS,EAAE,KAAK,GAAG,KAAK;IAClE,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAS,EAAE,KAAK,GAAG,KAAK;IACxE,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"safe-json.js","sourceRoot":"","sources":["../../src/utils/safe-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACzJ,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAErD,SAAS,WAAW,CAAI,IAAY,EAAE,KAAa,EAAE,IAAY;IAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,8BAA8B,CAAC,EAAE,CAAC,CAAC;gBAClE,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;gBAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAA0B,IAAY,EAAE,KAAa;IAC/E,OAAO,WAAW,CAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAA0B,IAAY,EAAE,KAAa;IACrF,OAAO,WAAW,CAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,SAAS,aAAa,CAAC,IAAY,EAAE,EAAc;IACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;YACnC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,6CAA6C,IAAI,eAAe,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAS,EAAE,KAAc,EAAE,IAAY;IAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9F,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,EAAE,GAAkB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;oBACpD,CAAC;gBAAC,IAAI,EAAE,KAAK,IAAI;oBAAE,IAAI,CAAC;wBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;YAAC,CAAC;QAC9D,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,IAAI,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC;oBAAE,YAAY,CAAC,IAAI,GAAG,QAAQ,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACjG,IAAI,CAAC;gBAAC,IAAI,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC;oBAAE,YAAY,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAC7F,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,CAAC;gBAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;oBAC1D,CAAC;gBAAC,IAAI,KAAK,KAAK,IAAI;oBAAE,IAAI,CAAC;wBAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;YAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC9C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAS,EAAE,KAAK,GAAG,KAAK;IAClE,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAS,EAAE,KAAK,GAAG,KAAK;IACxE,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC"}