kiokuko 1.0.0

package/dist/db/serialized-backup.js

@@ -0,0 +1,647 @@
+import { createHash } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { constants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import { DatabaseSync } from 'node:sqlite';
+import path from 'node:path';
+import { KiokukoError } from '../errors.js';
+import { isWellFormedUnicode } from '../serialization/boundary-json.js';
+/**
+ * Resolve the pathname-safety flags as one mandatory POSIX capability. A
+ * supported non-Windows runtime must provide every flag; dropping one to zero
+ * would silently remove the directory, no-follow, or nonblocking guarantee.
+ */
+export function requirePosixBackupOpenFlags(platform = process.platform, openFlags = constants) {
+    if (platform === 'win32')
+        return undefined;
+    function required(name) {
+        const value = openFlags[name];
+        if (typeof value !== 'number' || !Number.isSafeInteger(value) || value <= 0) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'Required POSIX backup open flags are unavailable', { flag: name });
+        }
+        return value;
+    }
+    return Object.freeze({
+        directory: required('O_DIRECTORY'),
+        noFollow: required('O_NOFOLLOW'),
+        nonBlock: required('O_NONBLOCK'),
+    });
+}
+async function requireCanonicalDirectoryChain(directory) {
+    const parsed = path.parse(directory);
+    const relative = path.relative(parsed.root, directory);
+    let current = parsed.root;
+    for (const component of relative.split(path.sep).filter((value) => value.length > 0)) {
+        current = path.join(current, component);
+        const status = await lstat(current);
+        if (!status.isDirectory() || status.isSymbolicLink()) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'Backup directory path contains a non-directory or symbolic link');
+        }
+    }
+}
+async function bindExistingOutputDirectory(destination, posixFlags) {
+    const directory = path.dirname(destination);
+    await requireCanonicalDirectoryChain(directory);
+    const before = await lstat(directory, { bigint: true });
+    if (!before.isDirectory() || before.isSymbolicLink()) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Backup output directory must be a non-symbolic-link directory');
+    }
+    let handle;
+    try {
+        if (posixFlags !== undefined) {
+            handle = await open(directory, constants.O_RDONLY | posixFlags.directory | posixFlags.noFollow);
+            const opened = await handle.stat({ bigint: true });
+            if (!opened.isDirectory() || opened.dev !== before.dev || opened.ino !== before.ino) {
+                throw new KiokukoError('CONFLICT', 'Backup output directory changed while it was being opened');
+            }
+        }
+        const secured = handle === undefined
+            ? await lstat(directory, { bigint: true })
+            : await handle.stat({ bigint: true });
+        if (!secured.isDirectory() || secured.dev !== before.dev || secured.ino !== before.ino) {
+            throw new KiokukoError('CONFLICT', 'Backup output directory changed while it was being bound');
+        }
+        const binding = {
+            directory,
+            device: secured.dev,
+            inode: secured.ino,
+            owner: secured.uid,
+            group: secured.gid,
+            mode: secured.mode,
+            privateDirectory: false,
+            ...(handle === undefined ? {} : { handle }),
+        };
+        await requireBackupDirectory(binding);
+        return binding;
+    }
+    catch (error) {
+        if (handle === undefined)
+            throw error;
+        const pendingHandle = handle;
+        handle = undefined;
+        try {
+            await pendingHandle.close();
+        }
+        catch (closeError) {
+            throw new AggregateError([error, closeError], 'Backup output directory binding failed and closing it also failed');
+        }
+        throw error;
+    }
+}
+async function requireBackupDirectory(binding) {
+    await requireCanonicalDirectoryChain(path.dirname(binding.directory));
+    const status = await lstat(binding.directory, { bigint: true });
+    if (!status.isDirectory()
+        || status.isSymbolicLink()
+        || status.dev !== binding.device
+        || status.ino !== binding.inode
+        || status.uid !== binding.owner
+        || status.gid !== binding.group
+        || status.mode !== binding.mode
+        || (binding.privateDirectory && process.platform !== 'win32' && (status.mode & 511n) !== 448n)) {
+        throw new KiokukoError('CONFLICT', 'Backup output directory changed during backup creation');
+    }
+    if (binding.handle !== undefined) {
+        const opened = await binding.handle.stat({ bigint: true });
+        if (!opened.isDirectory()
+            || opened.dev !== binding.device
+            || opened.ino !== binding.inode
+            || opened.uid !== binding.owner
+            || opened.gid !== binding.group
+            || opened.mode !== binding.mode
+            || (binding.privateDirectory && process.platform !== 'win32' && (opened.mode & 511n) !== 448n)) {
+            throw new KiokukoError('CONFLICT', 'Backup output directory changed during backup creation');
+        }
+    }
+}
+const WRITER_DEADLINE_MS = 30_000;
+const WRITER_PROTOCOL_LIMIT_BYTES = 64 * 1024;
+const BOUND_WRITER_SCRIPT = String.raw `
+  const { createHash } = require('node:crypto');
+  const {
+    closeSync,
+    constants,
+    fchmodSync,
+    fstatSync,
+    fsyncSync,
+    lstatSync,
+    openSync,
+    readFileSync,
+    readSync,
+    statSync,
+    writeFileSync,
+  } = require('node:fs');
+  const path = require('node:path');
+
+  function plain(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+  }
+
+  function exact(value, keys) {
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    return actual.length === expected.length
+      && actual.every((key, index) => key === expected[index]);
+  }
+
+  function unsigned(value) {
+    if (typeof value !== 'string' || !/^(?:0|[1-9][0-9]*)$/.test(value)) {
+      throw new Error('Bound backup request contains an invalid integer');
+    }
+    return BigInt(value);
+  }
+
+  function parseDirectory(value) {
+    if (!plain(value) || !exact(value, ['device', 'inode', 'owner', 'group', 'mode'])) {
+      throw new Error('Bound backup directory identity is invalid');
+    }
+    return {
+      device: unsigned(value.device),
+      inode: unsigned(value.inode),
+      owner: unsigned(value.owner),
+      group: unsigned(value.group),
+      mode: unsigned(value.mode),
+    };
+  }
+
+  function portableDestination(value) {
+    const stem = value.split('.', 1)[0].replace(/[ .]+$/u, '').toUpperCase();
+    return !/[<>:"\/\\|?*\u0000-\u001F]/u.test(value)
+      && !/[\uD800-\uDFFF]/u.test(value)
+      && !/[ .]$/u.test(value)
+      && !/^(?:CON|PRN|AUX|NUL|COM[1-9¹²³]|LPT[1-9¹²³]|CONIN\$|CONOUT\$)$/u.test(stem);
+  }
+
+  function parseRequest() {
+    const value = JSON.parse(process.argv[1]);
+    if (!plain(value)
+      || !exact(value, [
+        'destination', 'directory', 'enforcePosixFileMode', 'requirePrivateDirectory', 'sha256', 'size',
+      ])
+      || typeof value.destination !== 'string'
+      || value.destination.length === 0
+      || value.destination.includes('\0')
+      || value.destination.includes('/')
+      || value.destination.includes('\\')
+      || value.destination === '.'
+      || value.destination === '..'
+      || path.basename(value.destination) !== value.destination
+      || !portableDestination(value.destination)
+      || typeof value.enforcePosixFileMode !== 'boolean'
+      || typeof value.requirePrivateDirectory !== 'boolean'
+      || typeof value.sha256 !== 'string'
+      || !/^[0-9a-f]{64}$/.test(value.sha256)) {
+      throw new Error('Bound backup request is invalid');
+    }
+    return {
+      destination: value.destination,
+      directory: parseDirectory(value.directory),
+      enforcePosixFileMode: value.enforcePosixFileMode,
+      requirePrivateDirectory: value.requirePrivateDirectory,
+      sha256: value.sha256,
+      size: unsigned(value.size),
+    };
+  }
+
+  function requireDirectory(request) {
+    const status = statSync('.', { bigint: true });
+    if (!status.isDirectory()
+      || status.dev !== request.directory.device
+      || status.ino !== request.directory.inode
+      || status.uid !== request.directory.owner
+      || status.gid !== request.directory.group
+      || status.mode !== request.directory.mode
+      || (request.requirePrivateDirectory && (status.mode & 0o777n) !== 0o700n)) {
+      throw new Error('Bound backup directory identity changed');
+    }
+  }
+
+  function requiredOpenFlag(name) {
+    const value = constants[name];
+    if (!Number.isSafeInteger(value) || value <= 0) {
+      throw new Error('Required POSIX backup open flag is unavailable: ' + name);
+    }
+    return value;
+  }
+
+  function descriptorHash(descriptor, size) {
+    const hash = createHash('sha256');
+    const buffer = Buffer.allocUnsafe(64 * 1024);
+    let offset = 0n;
+    while (offset < size) {
+      const length = Number(size - offset > BigInt(buffer.length) ? BigInt(buffer.length) : size - offset);
+      const bytesRead = readSync(descriptor, buffer, 0, length, Number(offset));
+      if (bytesRead === 0) throw new Error('Bound backup output was truncated');
+      hash.update(buffer.subarray(0, bytesRead));
+      offset += BigInt(bytesRead);
+    }
+    return hash.digest('hex');
+  }
+
+  function serializedError(error) {
+    return {
+      name: error instanceof Error ? error.name : 'Error',
+      message: error instanceof Error ? error.message : 'Bound backup writer failed',
+      ...(typeof error?.code === 'string' ? { code: error.code } : {}),
+    };
+  }
+
+  let descriptor;
+  let result;
+  let failure;
+  try {
+    const request = parseRequest();
+    const bytes = readFileSync(0);
+    if (BigInt(bytes.length) !== request.size
+      || createHash('sha256').update(bytes).digest('hex') !== request.sha256) {
+      throw new Error('Bound backup input bytes do not match their attestation');
+    }
+    requireDirectory(request);
+    const noFollow = request.enforcePosixFileMode ? requiredOpenFlag('O_NOFOLLOW') : 0;
+    descriptor = openSync(
+      request.destination,
+      constants.O_CREAT | constants.O_EXCL | constants.O_RDWR
+        | noFollow,
+      0o600,
+    );
+    if (request.enforcePosixFileMode) fchmodSync(descriptor, 0o600);
+    writeFileSync(descriptor, bytes);
+    fsyncSync(descriptor);
+    const opened = fstatSync(descriptor, { bigint: true });
+    if (!opened.isFile()
+      || opened.size !== request.size
+      || opened.nlink !== 1n
+      || (request.enforcePosixFileMode && (opened.mode & 0o777n) !== 0o600n)
+      || descriptorHash(descriptor, opened.size) !== request.sha256) {
+      throw new Error('Bound backup output failed descriptor attestation');
+    }
+    closeSync(descriptor);
+    descriptor = undefined;
+    const named = lstatSync(request.destination, { bigint: true });
+    if (!named.isFile()
+      || named.isSymbolicLink()
+      || named.dev !== opened.dev
+      || named.ino !== opened.ino
+      || named.uid !== opened.uid
+      || named.gid !== opened.gid
+      || named.mode !== opened.mode
+      || named.size !== opened.size
+      || named.nlink !== opened.nlink) {
+      throw new Error('Bound backup output changed before handoff');
+    }
+    requireDirectory(request);
+    result = {
+      ok: true,
+      artifact: {
+        device: opened.dev.toString(),
+        inode: opened.ino.toString(),
+        owner: opened.uid.toString(),
+        group: opened.gid.toString(),
+        mode: opened.mode.toString(),
+        size: opened.size.toString(),
+        linkCount: opened.nlink.toString(),
+        sha256: request.sha256,
+      },
+    };
+  } catch (error) {
+    failure = error;
+  }
+  if (descriptor !== undefined) {
+    try {
+      closeSync(descriptor);
+    } catch (closeError) {
+      failure = failure === undefined
+        ? closeError
+        : new AggregateError([failure, closeError], 'Bound backup write and descriptor close both failed');
+    }
+  }
+  if (failure !== undefined) result = { ok: false, error: serializedError(failure) };
+  process.stdout.write(JSON.stringify(result));
+`;
+function sha256(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+function normalizedSerializedSnapshot(database) {
+    const serialized = Buffer.from(database.serializeDatabase());
+    if (serialized.length < 100
+        || !serialized.subarray(0, 16).equals(Buffer.from('SQLite format 3\0', 'binary'))
+        || !((serialized[18] === 1 && serialized[19] === 1)
+            || (serialized[18] === 2 && serialized[19] === 2))) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Serialized SQLite backup has an invalid file header');
+    }
+    // sqlite3_serialize preserves the WAL read/write header bytes. The serialized
+    // image already contains the connection's complete logical snapshot, so set
+    // the standalone image to rollback-journal format before deserializing it.
+    serialized[18] = 1;
+    serialized[19] = 1;
+    const verification = new DatabaseSync(':memory:', { enableForeignKeyConstraints: true });
+    let failed = false;
+    let operationError;
+    try {
+        const methods = verification;
+        if (typeof methods.deserialize !== 'function' || typeof methods.serialize !== 'function') {
+            throw new KiokukoError('INTEGRITY_ERROR', 'SQLite serialization requires Node.js 24.16.0 or newer; upgrade Node.js before backing up this database');
+        }
+        methods.deserialize(serialized);
+        const integrity = verification.prepare('PRAGMA integrity_check').get();
+        if (integrity?.integrity_check !== 'ok') {
+            throw new KiokukoError('INTEGRITY_ERROR', 'SQLite integrity check failed; the source database was not changed and must be preserved for recovery');
+        }
+        if (verification.prepare('PRAGMA foreign_key_check').all().length > 0) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'SQLite foreign-key integrity check failed; the source database was not changed and must be preserved for recovery');
+        }
+        const normalized = Buffer.from(methods.serialize());
+        if (normalized.length < 100 || normalized[18] !== 1 || normalized[19] !== 1) {
+            throw new Error('Serialized SQLite backup did not normalize to a standalone image');
+        }
+        return normalized;
+    }
+    catch (error) {
+        failed = true;
+        operationError = error;
+        throw error;
+    }
+    finally {
+        try {
+            verification.close();
+        }
+        catch (closeError) {
+            if (failed) {
+                throw new AggregateError([operationError, closeError], 'Serialized backup verification failed and closing it also failed');
+            }
+            throw closeError;
+        }
+    }
+}
+function isPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function exactKeys(value, keys) {
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    return actual.length === expected.length
+        && actual.every((key, index) => key === expected[index]);
+}
+function parseUnsigned(value) {
+    if (typeof value !== 'string' || !/^(?:0|[1-9][0-9]*)$/u.test(value)) {
+        throw new Error('Bound backup writer returned an invalid integer');
+    }
+    return BigInt(value);
+}
+function writeBoundArtifact(binding, fileName, bytes, posixFlags) {
+    const request = {
+        destination: fileName,
+        directory: {
+            device: binding.device.toString(),
+            inode: binding.inode.toString(),
+            owner: binding.owner.toString(),
+            group: binding.group.toString(),
+            mode: binding.mode.toString(),
+        },
+        enforcePosixFileMode: posixFlags !== undefined,
+        requirePrivateDirectory: binding.privateDirectory && posixFlags !== undefined,
+        sha256: sha256(bytes),
+        size: bytes.length.toString(),
+    };
+    const child = spawnSync(process.execPath, ['--input-type=commonjs', '--eval', BOUND_WRITER_SCRIPT, JSON.stringify(request)], {
+        cwd: binding.directory,
+        // The worker uses only built-in modules and an absolute executable path.
+        // Do not inherit preload, loader, search-path, or application environment.
+        env: {},
+        shell: false,
+        input: bytes,
+        timeout: WRITER_DEADLINE_MS,
+        maxBuffer: WRITER_PROTOCOL_LIMIT_BYTES,
+    });
+    if (child.error !== undefined)
+        throw child.error;
+    if (child.status !== 0 || child.signal !== null) {
+        throw new Error('Bound backup writer subprocess failed');
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(child.stdout.toString('utf8'));
+    }
+    catch (error) {
+        if (error instanceof SyntaxError)
+            throw new Error('Bound backup writer returned invalid JSON');
+        throw error;
+    }
+    if (!isPlainObject(parsed) || typeof parsed.ok !== 'boolean') {
+        throw new Error('Bound backup writer returned an invalid result');
+    }
+    if (!parsed.ok) {
+        if (!exactKeys(parsed, ['error', 'ok']) || !isPlainObject(parsed.error)
+            || !Object.hasOwn(parsed.error, 'name')
+            || !Object.hasOwn(parsed.error, 'message')
+            || Object.keys(parsed.error).some((key) => !['code', 'message', 'name'].includes(key))
+            || typeof parsed.error.name !== 'string'
+            || typeof parsed.error.message !== 'string'
+            || (Object.hasOwn(parsed.error, 'code') && typeof parsed.error.code !== 'string')) {
+            throw new Error('Bound backup writer returned an invalid result');
+        }
+        if (parsed.error.code === 'EEXIST') {
+            throw new KiokukoError('CONFLICT', 'Backup destination already exists');
+        }
+        throw Object.assign(new Error(parsed.error.message), {
+            name: parsed.error.name,
+            ...(typeof parsed.error.code === 'string' ? { code: parsed.error.code } : {}),
+        });
+    }
+    if (!exactKeys(parsed, ['artifact', 'ok']) || !isPlainObject(parsed.artifact)
+        || !exactKeys(parsed.artifact, [
+            'device', 'group', 'inode', 'linkCount', 'mode', 'owner', 'sha256', 'size',
+        ])
+        || typeof parsed.artifact.sha256 !== 'string'
+        || parsed.artifact.sha256 !== request.sha256) {
+        throw new Error('Bound backup writer returned an invalid artifact attestation');
+    }
+    const attestation = Object.freeze({
+        device: parseUnsigned(parsed.artifact.device),
+        inode: parseUnsigned(parsed.artifact.inode),
+        owner: parseUnsigned(parsed.artifact.owner),
+        group: parseUnsigned(parsed.artifact.group),
+        mode: parseUnsigned(parsed.artifact.mode),
+        size: parseUnsigned(parsed.artifact.size),
+        linkCount: parseUnsigned(parsed.artifact.linkCount),
+        sha256: parsed.artifact.sha256,
+    });
+    if (attestation.size !== BigInt(bytes.length)
+        || attestation.linkCount !== 1n
+        || (process.platform !== 'win32' && (attestation.mode & 511n) !== 384n)) {
+        throw new Error('Bound backup writer returned an invalid artifact attestation');
+    }
+    return attestation;
+}
+async function descriptorSha256(handle, size) {
+    if (size < 0n || size > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Serialized backup artifact size is unsupported');
+    }
+    const expectedLength = Number(size);
+    const hash = createHash('sha256');
+    const buffer = Buffer.allocUnsafe(64 * 1024);
+    let offset = 0;
+    while (offset < expectedLength) {
+        const length = Math.min(buffer.length, expectedLength - offset);
+        const { bytesRead } = await handle.read(buffer, 0, length, offset);
+        if (bytesRead === 0) {
+            throw new KiokukoError('CONFLICT', 'Serialized backup artifact changed during verification');
+        }
+        hash.update(buffer.subarray(0, bytesRead));
+        offset += bytesRead;
+    }
+    return hash.digest('hex');
+}
+function sameArtifactStatus(status, attestation) {
+    return status.isFile()
+        && status.dev === attestation.device
+        && status.ino === attestation.inode
+        && status.uid === attestation.owner
+        && status.gid === attestation.group
+        && status.mode === attestation.mode
+        && status.size === attestation.size
+        && status.nlink === attestation.linkCount
+        && status.size > 0n
+        && status.nlink === 1n
+        && (process.platform === 'win32' || (status.mode & 511n) === 384n);
+}
+async function requireBoundArtifact(output, attestation, posixFlags) {
+    let handle;
+    let operationFailed = false;
+    let operationError;
+    try {
+        handle = await open(output, posixFlags === undefined
+            ? constants.O_RDONLY
+            : constants.O_RDONLY | posixFlags.noFollow | posixFlags.nonBlock);
+        const opened = await handle.stat({ bigint: true });
+        const named = await lstat(output, { bigint: true });
+        if (!sameArtifactStatus(opened, attestation)
+            || !named.isFile()
+            || named.isSymbolicLink()
+            || named.dev !== opened.dev
+            || named.ino !== opened.ino
+            || named.uid !== opened.uid
+            || named.gid !== opened.gid
+            || named.mode !== opened.mode
+            || named.size !== opened.size
+            || named.nlink !== opened.nlink
+            || await descriptorSha256(handle, opened.size) !== attestation.sha256) {
+            throw new KiokukoError('CONFLICT', 'Serialized backup artifact changed before parent verification');
+        }
+        const after = await handle.stat({ bigint: true });
+        if (!sameArtifactStatus(after, attestation)) {
+            throw new KiokukoError('CONFLICT', 'Serialized backup artifact changed during parent verification');
+        }
+    }
+    catch (error) {
+        operationFailed = true;
+        operationError = error;
+        throw error;
+    }
+    finally {
+        if (handle !== undefined) {
+            try {
+                await handle.close();
+            }
+            catch (closeError) {
+                if (operationFailed) {
+                    throw new AggregateError([operationError, closeError], 'Serialized backup verification failed and closing its descriptor also failed');
+                }
+                throw closeError;
+            }
+        }
+    }
+}
+function directoryAttestation(binding) {
+    return Object.freeze({
+        path: binding.directory,
+        device: binding.device,
+        inode: binding.inode,
+        owner: binding.owner,
+        group: binding.group,
+        mode: binding.mode,
+    });
+}
+async function normalizedDestination(destination) {
+    if (typeof destination !== 'string'
+        || destination.length === 0
+        || destination.includes('\0')
+        || !isWellFormedUnicode(destination)
+        || /[\\/]$/u.test(destination)) {
+        throw new KiokukoError('VALIDATION_ERROR', 'Backup destination must be a non-empty pathname');
+    }
+    const requestedOutput = path.resolve(destination);
+    const fileName = path.basename(requestedOutput);
+    const portableStem = fileName.split('.', 1)[0]?.replace(/[ .]+$/u, '').toUpperCase();
+    if (fileName.length === 0
+        || fileName === '.'
+        || fileName === '..'
+        || /[<>:"\/\\|?*\u0000-\u001F]/u.test(fileName)
+        || /[ .]$/u.test(fileName)
+        || portableStem === undefined
+        || /^(?:CON|PRN|AUX|NUL|COM[1-9¹²³]|LPT[1-9¹²³]|CONIN\$|CONOUT\$)$/u.test(portableStem)) {
+        throw new KiokukoError('VALIDATION_ERROR', 'Backup destination must name one portable standalone file');
+    }
+    const directory = await realpath(path.dirname(requestedOutput));
+    await requireCanonicalDirectoryChain(directory);
+    return { output: path.join(directory, fileName), fileName };
+}
+async function syncBackupDirectory(binding) {
+    if (process.platform !== 'win32' && binding.handle !== undefined) {
+        await binding.handle.sync();
+    }
+}
+/**
+ * Serialize the exact already-open source and install one create-only backup.
+ * The output directory must already exist and is never chmodded by this path.
+ */
+export async function createSerializedBackupArtifact(database, destination, hooks = {}) {
+    const posixFlags = requirePosixBackupOpenFlags();
+    const { output, fileName } = await normalizedDestination(destination);
+    await hooks.validateDestination?.(output);
+    let directoryBinding;
+    let operationFailed = false;
+    let operationError;
+    try {
+        await hooks.beforeSerialization?.();
+        const bytes = normalizedSerializedSnapshot(database);
+        directoryBinding = await bindExistingOutputDirectory(output, posixFlags);
+        await hooks.afterDirectoryBound?.();
+        await hooks.beforeArtifactWrite?.(output);
+        const artifact = writeBoundArtifact(directoryBinding, fileName, bytes, posixFlags);
+        await requireBoundArtifact(output, artifact, posixFlags);
+        await hooks.afterArtifactWritten?.(output);
+        await requireBoundArtifact(output, artifact, posixFlags);
+        await requireBackupDirectory(directoryBinding);
+        await syncBackupDirectory(directoryBinding);
+        return Object.freeze({
+            path: output,
+            directory: directoryAttestation(directoryBinding),
+            artifact,
+        });
+    }
+    catch (error) {
+        operationFailed = true;
+        operationError = error;
+        throw error;
+    }
+    finally {
+        if (directoryBinding?.handle !== undefined) {
+            try {
+                await directoryBinding.handle.close();
+            }
+            catch (closeError) {
+                if (operationFailed) {
+                    throw new AggregateError([operationError, closeError], 'Serialized backup creation failed and closing its directory also failed');
+                }
+                throw closeError;
+            }
+        }
+    }
+}
+//# sourceMappingURL=serialized-backup.js.map

package/dist/db/serialized-backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialized-backup.js","sourceRoot":"","sources":["../../src/db/serialized-backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAmB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAmExE;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,YAA8C,SAAS;IAEvD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,SAAS,QAAQ,CAAC,IAAmC;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,kDAAkD,EAClD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC;QAClC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC;KACjC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,SAAiB;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,iEAAiE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,WAAmB,EACnB,UAA4C;IAE5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,+DAA+D,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,GAAG,MAAM,IAAI,CACjB,SAAS,EACT,SAAS,CAAC,QAAQ,GAAG,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAChE,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;gBACpF,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,2DAA2D,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1C,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YACvF,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,0DAA0D,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,OAAO,GAA2B;YACtC,SAAS;YACT,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,KAAK,EAAE,OAAO,CAAC,GAAG;YAClB,KAAK,EAAE,OAAO,CAAC,GAAG;YAClB,KAAK,EAAE,OAAO,CAAC,GAAG;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,gBAAgB,EAAE,KAAK;YACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACtC,MAAM,aAAa,GAAG,MAAM,CAAC;QAC7B,MAAM,GAAG,SAAS,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,UAAU,CAAC,EACnB,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,OAA+B;IACnE,MAAM,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;WACpB,MAAM,CAAC,cAAc,EAAE;WACvB,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM;WAC7B,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK;WAC5B,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK;WAC5B,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK;WAC5B,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;WAC5B,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,IAAM,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;eACpB,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM;eAC7B,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK;eAC5B,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK;eAC5B,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK;eAC5B,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;eAC5B,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,IAAM,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2MrC,CAAC;AAEF,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAqC;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;WACtB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;WAC9E,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;eAC9C,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC;IACnG,CAAC;IAED,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAGf,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACzF,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAA+C,CAAC;QACpH,IAAI,SAAS,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,mHAAmH,CACpH,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,IAAI,CAAC;QACd,cAAc,GAAG,KAAK,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,cAAc,CACtB,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,kEAAkE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAc;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;WACnC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA+B,EAC/B,QAAgB,EAChB,KAAa,EACb,UAA4C;IAE5C,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE;YACT,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;YACjC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE;SAC9B;QACD,oBAAoB,EAAE,UAAU,KAAK,SAAS;QAC9C,uBAAuB,EAAE,OAAO,CAAC,gBAAgB,IAAI,UAAU,KAAK,SAAS;QAC7E,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,CAAC,QAAQ,EAChB,CAAC,uBAAuB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACjF;QACE,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,yEAAyE;QACzE,2EAA2E;QAC3E,GAAG,EAAE,EAAE;QACP,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,2BAA2B;KACvC,CACF,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;eAClE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;eACpC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;eACvC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;eACnF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;eACrC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;eACxC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACnD,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YACvB,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;WACxE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;SAC3E,CAAC;WACC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;WAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;QAChC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QACnD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;KAC/B,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;WACxC,WAAW,CAAC,SAAS,KAAK,EAAE;WAC5B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,IAAM,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAkB,EAAE,IAAY;IAC9D,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC,CAAC;QAChE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA+C,EAC/C,WAAsC;IAEtC,OAAO,MAAM,CAAC,MAAM,EAAE;WACjB,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,MAAM;WACjC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,KAAK;WAChC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,KAAK;WAChC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,KAAK;WAChC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;WAChC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;WAChC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,SAAS;WACtC,MAAM,CAAC,IAAI,GAAG,EAAE;WAChB,MAAM,CAAC,KAAK,KAAK,EAAE;WACnB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,IAAM,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,WAAsC,EACtC,UAA4C;IAE5C,IAAI,MAA8B,CAAC;IACnC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CACjB,MAAM,EACN,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC,QAAQ;YACpB,CAAC,CAAC,SAAS,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CACnE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC;eACvC,CAAC,KAAK,CAAC,MAAM,EAAE;eACf,KAAK,CAAC,cAAc,EAAE;eACtB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;eACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;eACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;eACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;eACxB,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eAC1B,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eAC1B,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;eAC5B,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACxE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+DAA+D,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+DAA+D,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,IAAI,CAAC;QACvB,cAAc,GAAG,KAAK,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,IAAI,cAAc,CACtB,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,8EAA8E,CAC/E,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA+B;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,SAAS;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,WAAmB;IACtD,IAAI,OAAO,WAAW,KAAK,QAAQ;WAC9B,WAAW,CAAC,MAAM,KAAK,CAAC;WACxB,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1B,CAAC,mBAAmB,CAAC,WAAW,CAAC;WACjC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,iDAAiD,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;WACpB,QAAQ,KAAK,GAAG;WAChB,QAAQ,KAAK,IAAI;WACjB,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC;WAC5C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;WACvB,YAAY,KAAK,SAAS;WAC1B,iEAAiE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IAChE,MAAM,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA+B;IAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,QAAqC,EACrC,WAAmB,EACnB,QAAuC,EAAE;IAEzC,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;IACjD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,gBAAoD,CAAC;IACzD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QACrD,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACnF,MAAM,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,oBAAoB,CAAC,gBAAgB,CAAC;YACjD,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,IAAI,CAAC;QACvB,cAAc,GAAG,KAAK,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,gBAAgB,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACxC,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,IAAI,cAAc,CACtB,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,yEAAyE,CAC1E,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}