openryoko 2026.10.8 → 2026.10.13

package/dist/src/backup/database-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-source.d.ts","sourceRoot":"","sources":["../../../src/backup/database-source.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE;;;;;;;GAOG;AAEH,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC5B,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAEjE,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,gGAAgG;AAChG,MAAM,MAAM,cAAc,GAAG,MAAM,cAAc,GAAG,gBAAgB,GAAG,IAAI,CAAC;AAE5E,4GAA4G;AAC5G,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAMnE;AAUD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,EAAE,cAAc,CAAC,CASnH"}

package/dist/src/backup/database-source.js

@@ -0,0 +1,70 @@
+import Database from "better-sqlite3";
+import fs from "node:fs";
+import { detectRunningGateway } from "./gateway-liveness.js";
+import { databasePath } from "./layout.js";
+/** The flag that asks `ryoko backup run` for the databases too. Named here because the reports quote it. */
+export const INCLUDE_DATABASES_FLAG = "--include-databases";
+/**
+ * Opens a database read-only for copying.
+ *
+ * Read-only is not the same as harmless, and this is only for a caller that
+ * knows who else has the file open. What a read-only connection does, traced
+ * through the SQLite this ships with and measured:
+ *
+ * - The main file is opened read-only and cannot be written. The -wal is not
+ *   written, truncated or deleted either: all of that needs an exclusive lock
+ *   on the main file, which a read-only descriptor cannot take. So closing it
+ *   never checkpoints the WAL away, which is what a read-write connection does
+ *   the moment it believes itself the last one.
+ * - The -shm (the WAL's index) is opened read-write regardless. Beside other
+ *   connections it can see, this one only records where it is reading. When it
+ *   sees none it takes itself for the first, truncates the -shm to three bytes
+ *   and rebuilds it from the WAL - and creates an empty -wal and a -shm beside
+ *   a database that had neither, and leaves them there.
+ *
+ * On the machine the other connections run on, their locks are seen and this
+ * is ordinary SQLite. From the far side of a bind mount into a container they
+ * may not be, and a gateway whose index was rebuilt underneath it has not been
+ * tested and cannot be from here. Hence the two callers: the gateway, for a
+ * database in its own home, and {@link standaloneDatabaseSources}.
+ */
+export function readOnlyDatabaseSource(file) {
+    return () => {
+        if (!fs.existsSync(file))
+            return null;
+        const database = new Database(file, { readonly: true, fileMustExist: true });
+        return { database, release: () => { database.close(); } };
+    };
+}
+function refusal(liveness) {
+    return {
+        withheld: "gateway-running",
+        detail: `a gateway appears to be running on this home (${liveness.reason ?? "it was detected"}), so the database was not opened. `
+            + "To copy it from here, stop the gateway (ryoko stop), wait a minute and run this again.",
+    };
+}
+/**
+ * Sources for a command run by hand, outside the gateway.
+ *
+ * Before the first database would be opened, the home is looked at for signs
+ * of a running gateway - pid files and file timestamps, nothing that touches a
+ * database - and if there are any, neither database is opened. The answer is
+ * settled once for both: this command's own reading leaves a freshly written
+ * -shm behind, and asked again it would take that for a gateway.
+ *
+ * No sign is not proof. A gateway behind a pid this process cannot see, with
+ * nothing written for a minute, passes; so this is offered only on request
+ * (`--include-databases`), never by default.
+ */
+export function standaloneDatabaseSources(home, now) {
+    let liveness;
+    const guarded = (name) => () => {
+        const file = databasePath(home, name);
+        if (!fs.existsSync(file))
+            return null;
+        liveness ??= detectRunningGateway(home, { now: now(), databases: [databasePath(home, "workflows")] });
+        return liveness.running ? refusal(liveness) : readOnlyDatabaseSource(file)();
+    };
+    return { sessions: guarded("sessions"), workflows: guarded("workflows") };
+}
+//# sourceMappingURL=database-source.js.map

package/dist/src/backup/database-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-source.js","sourceRoot":"","sources":["../../../src/backup/database-source.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,oBAAoB,EAAwB,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiC3C,4GAA4G;AAC5G,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,QAAyB;IACxC,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,iDAAiD,QAAQ,CAAC,MAAM,IAAI,iBAAiB,qCAAqC;cAC9H,wFAAwF;KAC7F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,GAAe;IACrE,IAAI,QAAqC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,IAAwB,EAAkB,EAAE,CAAC,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,QAAQ,KAAK,oBAAoB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;QACtG,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/E,CAAC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5E,CAAC"}

package/dist/src/backup/format.d.ts

@@ -0,0 +1,4 @@
+/** A byte count a person can read at a glance: `512 B`, `1.2 MB`. */
+export declare function formatBytes(bytes: number): string;
+export declare function errorMessage(error: unknown): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/src/backup/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/backup/format.ts"],"names":[],"mappings":"AAEA,qEAAqE;AACrE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQjD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD"}

package/dist/src/backup/format.js

@@ -0,0 +1,15 @@
+const UNITS = ["B", "KB", "MB", "GB", "TB"];
+/** A byte count a person can read at a glance: `512 B`, `1.2 MB`. */
+export function formatBytes(bytes) {
+    let value = Math.max(0, bytes);
+    let unit = 0;
+    while (value >= 1024 && unit < UNITS.length - 1) {
+        value /= 1024;
+        unit += 1;
+    }
+    return `${unit === 0 ? value : value.toFixed(1)} ${UNITS[unit]}`;
+}
+export function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=format.js.map

package/dist/src/backup/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/backup/format.ts"],"names":[],"mappings":"AAAA,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAErD,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/backup/gateway-liveness.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Signs that a gateway is running on a home, read without touching anything a
+ * gateway might have open.
+ *
+ * The obvious way to ask "is this database in use" is to open it and see
+ * whether SQLite lets us have it. That is exactly what must not be done. File
+ * locks do not cross a container boundary: with the home bind-mounted into a
+ * container, a process on the host is granted the database outright while the
+ * gateway inside holds it, and on closing it - believing itself the last
+ * connection - SQLite checkpoints the WAL into the main file and deletes it,
+ * under a gateway that goes on appending to a WAL that is no longer there. The
+ * commits it makes afterwards are lost. A probe of that kind damaged the
+ * database it was written to protect, on the way to refusing a restore.
+ *
+ * So nothing here opens a database. It reads two small files and the
+ * modification times of a few more, and that is all.
+ */
+/** A database file written this recently counts as in use. */
+export declare const RECENT_WRITE_MS = 60000;
+export interface GatewayLiveness {
+    running: boolean;
+    /** What gave it away, in words an operator can act on. */
+    reason?: string;
+}
+export interface LivenessOptions {
+    now?: Date;
+    /** Databases to look at besides the session registry: the one a restore is about to replace. */
+    databases?: readonly string[];
+}
+/**
+ * Looks for a gateway running on `home`.
+ *
+ * `gateway.json` is written only when the interactive engine is on,
+ * `gateway.pid` only by `ryoko start --daemon`; a foreground gateway on the
+ * headless engine leaves neither, and a pid from inside a container says
+ * nothing outside it. A recent write to the registry is the sign that does not
+ * depend on how the gateway was started or where this command runs.
+ *
+ * None of it is proof of absence. A gateway that has had nothing to write for
+ * a minute, behind a pid this process cannot see, is not detected - which is
+ * why replacing a database also takes the operator's own word.
+ */
+export declare function detectRunningGateway(home: string, options?: LivenessOptions): GatewayLiveness;
+//# sourceMappingURL=gateway-liveness.d.ts.map

package/dist/src/backup/gateway-liveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-liveness.d.ts","sourceRoot":"","sources":["../../../src/backup/gateway-liveness.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;GAgBG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,gGAAgG;IAChG,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAuED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,eAAe,CASjG"}

package/dist/src/backup/gateway-liveness.js

@@ -0,0 +1,120 @@
+import fs from "node:fs";
+import path from "node:path";
+import { SQLITE_SIDECAR_SUFFIXES } from "../sessions/backup.js";
+import { GATEWAY_INFO_FILE, PID_FILE } from "../shared/paths.js";
+import { databasePath, inHome } from "./layout.js";
+/**
+ * Signs that a gateway is running on a home, read without touching anything a
+ * gateway might have open.
+ *
+ * The obvious way to ask "is this database in use" is to open it and see
+ * whether SQLite lets us have it. That is exactly what must not be done. File
+ * locks do not cross a container boundary: with the home bind-mounted into a
+ * container, a process on the host is granted the database outright while the
+ * gateway inside holds it, and on closing it - believing itself the last
+ * connection - SQLite checkpoints the WAL into the main file and deletes it,
+ * under a gateway that goes on appending to a WAL that is no longer there. The
+ * commits it makes afterwards are lost. A probe of that kind damaged the
+ * database it was written to protect, on the way to refusing a restore.
+ *
+ * So nothing here opens a database. It reads two small files and the
+ * modification times of a few more, and that is all.
+ */
+/** A database file written this recently counts as in use. */
+export const RECENT_WRITE_MS = 60_000;
+function isAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // EPERM: it exists and belongs to someone else. Only ESRCH means gone.
+        return error.code === "EPERM";
+    }
+}
+function usablePid(value) {
+    const pid = typeof value === "string" ? Number(value.trim()) : value;
+    return typeof pid === "number" && Number.isInteger(pid) && pid > 0 ? pid : null;
+}
+function pidFromInfoFile(file) {
+    try {
+        return usablePid(JSON.parse(fs.readFileSync(file, "utf8"))?.pid);
+    }
+    catch {
+        return null;
+    }
+}
+function pidFromPidFile(file) {
+    try {
+        const text = fs.readFileSync(file, "utf8").trim();
+        return /^\d+$/.test(text) ? usablePid(text) : null;
+    }
+    catch {
+        return null;
+    }
+}
+function alivePid(home) {
+    const infoFile = inHome(home, GATEWAY_INFO_FILE);
+    const infoPid = pidFromInfoFile(infoFile);
+    if (infoPid !== null && isAlive(infoPid))
+        return `${path.basename(infoFile)} names pid ${infoPid}, which is alive`;
+    const pidFile = inHome(home, PID_FILE);
+    const daemonPid = pidFromPidFile(pidFile);
+    if (daemonPid !== null && isAlive(daemonPid))
+        return `${path.basename(pidFile)} names pid ${daemonPid}, which is alive`;
+    return null;
+}
+/**
+ * The database file or sidecar that was written within the last minute, if
+ * any. A pid means nothing in another pid namespace and a lock does not leave
+ * the container, but when a file was last written reads the same from both
+ * sides of a bind mount. A timestamp slightly ahead of this clock counts too:
+ * the writer may be on a machine whose clock is not quite ours.
+ */
+function recentWrite(home, database, now) {
+    for (const suffix of ["", ...SQLITE_SIDECAR_SUFFIXES]) {
+        const file = `${database}${suffix}`;
+        let written;
+        try {
+            written = fs.statSync(file).mtimeMs;
+        }
+        catch {
+            continue;
+        }
+        const age = now.getTime() - written;
+        if (age >= RECENT_WRITE_MS || age <= -RECENT_WRITE_MS)
+            continue;
+        const seconds = Math.round(Math.abs(age) / 1000);
+        const when = age >= 0
+            ? `was written ${seconds} second${seconds === 1 ? "" : "s"} ago`
+            : `carries a timestamp ${seconds} second${seconds === 1 ? "" : "s"} ahead of this clock`;
+        return `${path.relative(home, file)} ${when}`;
+    }
+    return null;
+}
+/**
+ * Looks for a gateway running on `home`.
+ *
+ * `gateway.json` is written only when the interactive engine is on,
+ * `gateway.pid` only by `ryoko start --daemon`; a foreground gateway on the
+ * headless engine leaves neither, and a pid from inside a container says
+ * nothing outside it. A recent write to the registry is the sign that does not
+ * depend on how the gateway was started or where this command runs.
+ *
+ * None of it is proof of absence. A gateway that has had nothing to write for
+ * a minute, behind a pid this process cannot see, is not detected - which is
+ * why replacing a database also takes the operator's own word.
+ */
+export function detectRunningGateway(home, options = {}) {
+    const pid = alivePid(home);
+    if (pid)
+        return { running: true, reason: pid };
+    const now = options.now ?? new Date();
+    for (const database of new Set([databasePath(home, "sessions"), ...(options.databases ?? [])])) {
+        const written = recentWrite(home, database, now);
+        if (written)
+            return { running: true, reason: written };
+    }
+    return { running: false };
+}
+//# sourceMappingURL=gateway-liveness.js.map

package/dist/src/backup/gateway-liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-liveness.js","sourceRoot":"","sources":["../../../src/backup/gateway-liveness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;;;GAgBG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AActC,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,SAAS,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA8B,EAAE,GAAG,CAAC,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,OAAO,kBAAkB,CAAC;IACnH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,SAAS,kBAAkB,CAAC;IACxH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,GAAS;IAC5D,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,uBAAuB,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;QACpC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC;QACpC,IAAI,GAAG,IAAI,eAAe,IAAI,GAAG,IAAI,CAAC,eAAe;YAAE,SAAS;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC;YACnB,CAAC,CAAC,eAAe,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM;YAChE,CAAC,CAAC,uBAAuB,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC;QAC3F,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,UAA2B,EAAE;IAC9E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/src/backup/inspect.d.ts

@@ -0,0 +1,45 @@
+import { type ArchiveLimits } from "./limits.js";
+import { type BackupManifest } from "./manifest.js";
+import { readTar } from "./tar.js";
+export interface ArchiveInspection {
+    ok: boolean;
+    problems: string[];
+    /** Present whenever the archive could be read far enough to find one. */
+    manifest?: BackupManifest;
+}
+export interface InspectOptions {
+    /** What the archive may hold. Default: the limits an instance uses when its config says nothing. */
+    limits?: ArchiveLimits;
+    /**
+     * The manifest this archive was just written with. Given, the archive is
+     * checked against it in a single pass and the copy inside is only compared,
+     * never loaded; that is the read-back the gateway does after every backup.
+     */
+    expected?: BackupManifest;
+}
+/**
+ * Decompresses an archive and hands its entries to `onEntry`, in order, giving
+ * up the moment it holds more than `limits` allow. The limits are judged from
+ * each header as it arrives - before any of the data it announces is read - so
+ * an archive that promises a terabyte, or a million empty directories in a
+ * megabyte of gzip, costs neither the time nor the memory it was built to take.
+ *
+ * Two things a header does not announce are held as well. The manifest is let
+ * through once and is not an entry; a second one is refused where it starts,
+ * or manifests by the hundred would pass a limit they are not counted against.
+ * And the stream as a whole may not unpack to more than an archive at its
+ * limits could.
+ */
+export declare function readHomeArchive(file: string, onEntry: Parameters<typeof readTar>[1], limits?: ArchiveLimits): Promise<void>;
+/**
+ * Reads an archive end to end and checks it against its manifest: every entry
+ * hashed, every path in the plain relative form, nothing present that the
+ * manifest does not vouch for and nothing promised that is absent, and no more
+ * of anything than `limits` allow.
+ *
+ * Nothing is written. Defects in the archive come back as `problems` rather
+ * than as a throw, so a caller can show them - up to a point: past fifty they
+ * are only counted.
+ */
+export declare function inspectHomeArchive(file: string, options?: InspectOptions): Promise<ArchiveInspection>;
+//# sourceMappingURL=inspect.d.ts.map

package/dist/src/backup/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../../src/backup/inspect.ts"],"names":[],"mappings":"AAKA,OAAO,EAA6E,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5H,OAAO,EAAuD,KAAK,cAAc,EAAsB,MAAM,eAAe,CAAC;AAE7H,OAAO,EAAE,OAAO,EAAoC,MAAM,UAAU,CAAC;AAKrE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAwDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EACtC,MAAM,GAAE,aAAsC,GAC7C,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAiJD;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAuB/G"}

package/dist/src/backup/inspect.js

@@ -0,0 +1,291 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import { pipeline } from "node:stream/promises";
+import zlib from "node:zlib";
+import { errorMessage, formatBytes } from "./format.js";
+import { ArchiveTooLargeError, manifestByteLimit, pathByteLimit, unpackedByteLimit } from "./limits.js";
+import { findManifestEntry, parseManifest, serializeManifest } from "./manifest.js";
+import { DEFAULT_ARCHIVE_LIMITS } from "./settings.js";
+import { readTar } from "./tar.js";
+import { MANIFEST_ENTRY_PATH, unsafePathReason } from "./targets.js";
+const MAX_REPORTED_PROBLEMS = 50;
+/** What is wrong with an archive, kept to a length somebody can read. The count goes on past it. */
+class ProblemList {
+    kept = [];
+    dropped = 0;
+    add(problem) {
+        if (this.kept.length < MAX_REPORTED_PROBLEMS)
+            this.kept.push(problem);
+        else
+            this.dropped += 1;
+    }
+    get isEmpty() {
+        return this.kept.length === 0;
+    }
+    list() {
+        return this.dropped === 0 ? this.kept : [...this.kept, `... and ${this.dropped} more`];
+    }
+}
+/** The archive could be read; it is its manifest that is missing, repeated or not one this version understands. */
+class ManifestProblem extends Error {
+}
+const isManifestEntry = (entry) => entry.path === MANIFEST_ENTRY_PATH && entry.type === "file";
+/**
+ * Passes the decompressed stream on, and stops it once it has delivered more
+ * than `allowed` bytes. The limits on entries and on content are judged from
+ * headers; this is the one that holds whatever the headers say or leave out.
+ */
+function unpackedUpTo(source, allowed) {
+    // An iterator by hand, not a generator looping over the stream: leaving such
+    // a loop by throwing closes the stream first, and the pipeline then reports
+    // that it was aborted instead of why.
+    return {
+        [Symbol.asyncIterator]() {
+            const chunks = source[Symbol.asyncIterator]();
+            let unpacked = 0;
+            return {
+                next: async () => {
+                    const step = await chunks.next();
+                    if (step.done)
+                        return step;
+                    unpacked += step.value.length;
+                    if (unpacked > allowed) {
+                        throw new ArchiveTooLargeError(`the archive unpacks to more than ${formatBytes(allowed)}, past anything its limits account for (backup.maxArchiveMb, backup.maxEntries)`);
+                    }
+                    return step;
+                },
+            };
+        },
+    };
+}
+/**
+ * Decompresses an archive and hands its entries to `onEntry`, in order, giving
+ * up the moment it holds more than `limits` allow. The limits are judged from
+ * each header as it arrives - before any of the data it announces is read - so
+ * an archive that promises a terabyte, or a million empty directories in a
+ * megabyte of gzip, costs neither the time nor the memory it was built to take.
+ *
+ * Two things a header does not announce are held as well. The manifest is let
+ * through once and is not an entry; a second one is refused where it starts,
+ * or manifests by the hundred would pass a limit they are not counted against.
+ * And the stream as a whole may not unpack to more than an archive at its
+ * limits could.
+ */
+export async function readHomeArchive(file, onEntry, limits = DEFAULT_ARCHIVE_LIMITS) {
+    const pathLimit = pathByteLimit(limits);
+    let entries = 0;
+    let declared = 0;
+    let manifests = 0;
+    const admit = (entry) => {
+        if (Buffer.byteLength(entry.path) > pathLimit || Buffer.byteLength(entry.linkTarget ?? "") > pathLimit) {
+            throw new ArchiveTooLargeError(`the archive holds a path longer than ${pathLimit} bytes`);
+        }
+        if (isManifestEntry(entry)) {
+            manifests += 1;
+            if (manifests > 1)
+                throw new ManifestProblem("the manifest appears more than once");
+            if (entry.size > manifestByteLimit(limits))
+                throw new ArchiveTooLargeError("the archive's manifest is larger than backup.maxEntries allows");
+            return;
+        }
+        entries += 1;
+        declared += entry.size;
+        if (entries > limits.maxEntries)
+            throw new ArchiveTooLargeError(`the archive holds more than ${limits.maxEntries} entries (backup.maxEntries)`);
+        if (declared > limits.maxBytes) {
+            throw new ArchiveTooLargeError(`the archive declares more than ${formatBytes(limits.maxBytes)} of content (backup.maxArchiveMb)`);
+        }
+    };
+    await pipeline(fs.createReadStream(file), zlib.createGunzip(), async (source) => {
+        await readTar(unpackedUpTo(source, unpackedByteLimit(limits)), (entry) => {
+            admit(entry);
+            return onEntry(entry);
+        });
+    });
+}
+/**
+ * Finds the manifest in an archive nobody vouches for, keeping nothing else. It
+ * travels last, so this reads the archive through once to reach it; the entries
+ * on the way are counted against the limits and let go.
+ */
+async function loadManifest(file, limits) {
+    let bytes;
+    let copies = 0;
+    await readHomeArchive(file, (entry) => {
+        if (!isManifestEntry(entry))
+            return undefined;
+        copies += 1;
+        const chunks = [];
+        return {
+            write: (chunk) => { chunks.push(Buffer.from(chunk)); },
+            end: () => { bytes = Buffer.concat(chunks); },
+        };
+    }, limits);
+    if (!bytes)
+        throw new ManifestProblem("the archive carries no manifest");
+    if (copies > 1)
+        throw new ManifestProblem("the manifest appears more than once");
+    try {
+        return { manifest: parseManifest(bytes), digest: crypto.createHash("sha256").update(bytes).digest("hex") };
+    }
+    catch (error) {
+        throw new ManifestProblem(errorMessage(error));
+    }
+}
+/**
+ * An entry below something that is not a directory would be written through it:
+ * `skills/link -> /etc` followed by `skills/link/passwd` is how an archive
+ * leaves the home. Looked up in the manifest itself, which is in path order, so
+ * no index of the archive has to be built to ask.
+ */
+function nonDirectoryAbove(entries, entryPath) {
+    const segments = entryPath.split("/");
+    for (let depth = 1; depth < segments.length; depth += 1) {
+        const ancestor = segments.slice(0, depth).join("/");
+        const found = findManifestEntry(entries, ancestor);
+        if (found && found.type !== "directory")
+            return ancestor;
+    }
+    return null;
+}
+/**
+ * Checks the manifest on its own terms: within the limits, every path in the
+ * plain relative form, in strict path order (which also rules out a path listed
+ * twice), nothing inside a non-directory. Returns false when it is not fit to
+ * compare an archive against at all.
+ */
+function validateManifest(manifest, limits, problems) {
+    if (manifest.entries.length > limits.maxEntries) {
+        problems.add(`the manifest lists more than ${limits.maxEntries} entries (backup.maxEntries)`);
+        return false;
+    }
+    let previous;
+    for (const entry of manifest.entries) {
+        const reason = unsafePathReason(entry.path);
+        if (reason) {
+            problems.add(`unsafe path in the manifest (${reason}): ${JSON.stringify(entry.path)}`);
+            return false;
+        }
+        if (previous !== undefined && entry.path <= previous) {
+            problems.add(entry.path === previous ? `${entry.path}: listed more than once in the manifest` : "the manifest lists its entries out of order");
+            return false;
+        }
+        previous = entry.path;
+    }
+    for (const entry of manifest.entries) {
+        const blocker = nonDirectoryAbove(manifest.entries, entry.path);
+        if (blocker)
+            problems.add(`${entry.path}: is inside ${blocker}, which is not a directory`);
+    }
+    return true;
+}
+/** Holds one archive entry to the manifest entry of the same path. Files are hashed as they stream past. */
+function checkEntry(entry, listed, problems) {
+    if (entry.type !== listed.type) {
+        problems.add(`${listed.path}: is a ${entry.type} in the archive but a ${listed.type} in the manifest`);
+        return undefined;
+    }
+    if (listed.type === "symlink" && (entry.linkTarget ?? "") !== listed.target)
+        problems.add(`${listed.path}: symlink target does not match the manifest`);
+    if (listed.type !== "file")
+        return undefined;
+    if (entry.size !== listed.size) {
+        problems.add(`${listed.path}: expected ${listed.size} bytes, found ${entry.size}`);
+        return undefined;
+    }
+    const hash = crypto.createHash("sha256");
+    return {
+        write: (chunk) => { hash.update(chunk); },
+        end: () => { if (hash.digest("hex") !== listed.sha256)
+            problems.add(`${listed.path}: sha256 does not match the manifest`); },
+    };
+}
+/**
+ * Walks the archive and the manifest side by side. Both are in path order, so
+ * each archive entry is held to its manifest entry as it streams past and then
+ * forgotten: what is in one and not the other falls out of the order itself,
+ * and no table of everything seen is kept. Memory is the manifest, not the
+ * archive - which is what lets the gateway read back what it wrote without
+ * holding a second copy of the listing.
+ */
+async function compareWithManifest(file, manifest, manifestDigest, limits, problems) {
+    const listed = manifest.entries;
+    let next = 0;
+    let previous;
+    let manifestCopies = 0;
+    await readHomeArchive(file, (entry) => {
+        if (isManifestEntry(entry)) {
+            manifestCopies += 1;
+            const hash = crypto.createHash("sha256");
+            return {
+                write: (chunk) => { hash.update(chunk); },
+                end: () => { if (hash.digest("hex") !== manifestDigest)
+                    problems.add("the manifest inside the archive is not the one it is being checked against"); },
+            };
+        }
+        const reason = unsafePathReason(entry.path);
+        if (reason)
+            throw new Error(`unsafe path in the archive (${reason}): ${JSON.stringify(entry.path)}`);
+        if (entry.path === previous) {
+            problems.add(`${entry.path}: appears more than once`);
+            return undefined;
+        }
+        if (previous !== undefined && entry.path < previous)
+            throw new Error(`its entries are out of order at ${JSON.stringify(entry.path)}`);
+        previous = entry.path;
+        for (; next < listed.length && listed[next].path < entry.path; next += 1) {
+            problems.add(`${listed[next].path}: listed in the manifest but missing from the archive`);
+        }
+        if (next >= listed.length || listed[next].path !== entry.path) {
+            problems.add(`${entry.path}: not listed in the manifest`);
+            return undefined;
+        }
+        next += 1;
+        return checkEntry(entry, listed[next - 1], problems);
+    }, limits);
+    for (; next < listed.length; next += 1)
+        problems.add(`${listed[next].path}: listed in the manifest but missing from the archive`);
+    if (manifestCopies === 0)
+        problems.add("the archive carries no manifest");
+    if (manifestCopies > 1)
+        problems.add("the manifest appears more than once");
+}
+/**
+ * Reads an archive end to end and checks it against its manifest: every entry
+ * hashed, every path in the plain relative form, nothing present that the
+ * manifest does not vouch for and nothing promised that is absent, and no more
+ * of anything than `limits` allow.
+ *
+ * Nothing is written. Defects in the archive come back as `problems` rather
+ * than as a throw, so a caller can show them - up to a point: past fifty they
+ * are only counted.
+ */
+export async function inspectHomeArchive(file, options = {}) {
+    const limits = options.limits ?? DEFAULT_ARCHIVE_LIMITS;
+    let manifest;
+    let digest;
+    try {
+        if (options.expected) {
+            manifest = options.expected;
+            digest = crypto.createHash("sha256").update(serializeManifest(manifest)).digest("hex");
+        }
+        else {
+            ({ manifest, digest } = await loadManifest(file, limits));
+        }
+    }
+    catch (error) {
+        const reason = errorMessage(error);
+        return { ok: false, problems: [error instanceof ManifestProblem ? reason : `the archive could not be read: ${reason}`] };
+    }
+    const problems = new ProblemList();
+    if (!validateManifest(manifest, limits, problems))
+        return { ok: false, problems: problems.list(), manifest };
+    try {
+        await compareWithManifest(file, manifest, digest, limits, problems);
+    }
+    catch (error) {
+        return { ok: false, problems: [`the archive could not be read: ${errorMessage(error)}`], manifest };
+    }
+    return { ok: problems.isEmpty, problems: problems.list(), manifest };
+}
+//# sourceMappingURL=inspect.js.map

package/dist/src/backup/inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.js","sourceRoot":"","sources":["../../../src/backup/inspect.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAsB,MAAM,aAAa,CAAC;AAC5H,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAA2C,MAAM,eAAe,CAAC;AAC7H,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,OAAO,EAAoC,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAoBjC,oGAAoG;AACpG,MAAM,WAAW;IACE,IAAI,GAAa,EAAE,CAAC;IAC7B,OAAO,GAAG,CAAC,CAAC;IAEpB,GAAG,CAAC,OAAe;QACjB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,qBAAqB;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YACjE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,OAAO,CAAC,CAAC;IACzF,CAAC;CACF;AAED,mHAAmH;AACnH,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAEtC,MAAM,eAAe,GAAG,CAAC,KAAe,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;AAElH;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAA6B,EAAE,OAAe;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,sCAAsC;IACtC,OAAO;QACL,CAAC,MAAM,CAAC,aAAa,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,KAAK,IAAI,EAAE;oBACf,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjC,IAAI,IAAI,CAAC,IAAI;wBAAE,OAAO,IAAI,CAAC;oBAC3B,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC9B,IAAI,QAAQ,GAAG,OAAO,EAAE,CAAC;wBACvB,MAAM,IAAI,oBAAoB,CAC5B,oCAAoC,WAAW,CAAC,OAAO,CAAC,iFAAiF,CAC1I,CAAC;oBACJ,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAAsC,EACtC,SAAwB,sBAAsB;IAE9C,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,KAAe,EAAQ,EAAE;QACtC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC;YACvG,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,SAAS,QAAQ,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;YACpF,IAAI,KAAK,CAAC,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,oBAAoB,CAAC,gEAAgE,CAAC,CAAC;YAC7I,OAAO;QACT,CAAC;QACD,OAAO,IAAI,CAAC,CAAC;QACb,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,OAAO,GAAG,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,MAAM,CAAC,UAAU,8BAA8B,CAAC,CAAC;QAChJ,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACpI,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,MAA6B,EAAE,EAAE;QACrG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;YACvE,KAAK,CAAC,KAAK,CAAC,CAAC;YACb,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,MAAqB;IAC7D,IAAI,KAAyB,CAAC;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9C,CAAC;IACJ,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAC;IACzE,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,OAAwB,EAAE,SAAiB;IACpE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,QAAQ,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,QAAwB,EAAE,MAAqB,EAAE,QAAqB;IAC9F,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,UAAU,8BAA8B,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAA4B,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,CAAC,gCAAgC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,yCAAyC,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC;YAC/I,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,eAAe,OAAO,4BAA4B,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4GAA4G;AAC5G,SAAS,UAAU,CAAC,KAAe,EAAE,MAAqB,EAAE,QAAqB;IAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,UAAU,KAAK,CAAC,IAAI,yBAAyB,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACvG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,8CAA8C,CAAC,CAAC;IACxJ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,IAAI,iBAAiB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC,CAAC,CAAC;KAC7H,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,QAAwB,EACxB,cAAsB,EACtB,MAAqB,EACrB,QAAqB;IAErB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAA4B,CAAC;IACjC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QACpC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,cAAc,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,cAAc;oBAAE,QAAQ,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC,CAAC,CAAC;aACtJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,0BAA0B,CAAC,CAAC;YACtD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtI,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC1E,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAE,CAAC,IAAI,uDAAuD,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/D,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,8BAA8B,CAAC,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAE,CAAC,IAAI,uDAAuD,CAAC,CAAC;IACnI,IAAI,cAAc,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC1E,IAAI,cAAc,GAAG,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,UAA0B,EAAE;IACjF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC;IACxD,IAAI,QAAwB,CAAC;IAC7B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5B,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kCAAkC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC3H,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;IAC7G,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,kCAAkC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;AACvE,CAAC"}