openryoko 2026.10.8 → 2026.10.13

package/dist/src/backup/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/backup/settings.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAI1C,mEAAmE;AACnE,eAAO,MAAM,sBAAsB,EAAE,aAA2F,CAAC;AAEjI,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,iBAAiB,CAAC,GAAG,aAAa,CAE7G;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3D;AAoCD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAqB5G"}

package/dist/src/backup/settings.js

@@ -0,0 +1,91 @@
+import os from "node:os";
+import path from "node:path";
+export const DEFAULT_ARCHIVE_RETENTION = 14;
+/**
+ * A home's own files are small; one that has grown past this is carrying bulk
+ * (a dump in knowledge/, assets vendored into a skill) that fourteen daily
+ * copies would turn into gigabytes. Past the cap the archive is refused and
+ * reported rather than silently filling the disk it shares with the instance.
+ */
+export const DEFAULT_MAX_ARCHIVE_MB = 512;
+/**
+ * Files, directories and symlinks in one archive. An ordinary home holds a few
+ * thousand; this leaves it an order of magnitude to grow into, and still bounds
+ * what the gateway holds in memory while it archives one. Empty files and
+ * directories weigh nothing, so the size cap above never sees them.
+ */
+export const DEFAULT_MAX_ENTRIES = 50_000;
+const MIB = 1024 * 1024;
+/** The limits an archive is held to when nobody says otherwise. */
+export const DEFAULT_ARCHIVE_LIMITS = { maxEntries: DEFAULT_MAX_ENTRIES, maxBytes: DEFAULT_MAX_ARCHIVE_MB * MIB };
+/** The pair of limits every archive this instance writes or reads is held to. */
+export function archiveLimits(settings) {
+    return { maxEntries: settings.maxEntries, maxBytes: settings.maxArchiveBytes };
+}
+export function defaultBackupDirectory(home) {
+    return path.join(home, "backups");
+}
+function expandTilde(value) {
+    if (value === "~")
+        return os.homedir();
+    return value.startsWith("~/") || value.startsWith(`~${path.sep}`) ? path.join(os.homedir(), value.slice(2)) : value;
+}
+/**
+ * The directory the config names, or null with a reason when it cannot be used.
+ * The home and its parents are refused: retention deletes by file name there,
+ * and a directory that contains the home is not a place to keep its backups.
+ */
+function resolveDirectory(value, home) {
+    if (value === undefined)
+        return { directory: null };
+    if (typeof value !== "string" || value.trim() === "") {
+        return { directory: null, warning: "backup.directory must be a path; using the default" };
+    }
+    const resolvedHome = path.resolve(home);
+    const directory = path.resolve(resolvedHome, expandTilde(value.trim()));
+    const relative = path.relative(directory, resolvedHome);
+    const outside = relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative);
+    const containsHome = relative === "" || !outside;
+    if (containsHome) {
+        return { directory: null, warning: `backup.directory must not be the instance home or a directory above it (${directory}); using the default` };
+    }
+    return { directory };
+}
+function positive(value, fallback, label, integer, warnings) {
+    if (value === undefined)
+        return fallback;
+    const valid = typeof value === "number" && Number.isFinite(value) && value > 0 && (!integer || Number.isInteger(value));
+    if (valid)
+        return value;
+    warnings.push(`${label} must be a positive ${integer ? "whole number" : "number"}; using ${fallback}`);
+    return fallback;
+}
+/**
+ * Turns the optional `backup` section into concrete settings.
+ *
+ * Never throws. An instance arrives here with whatever its config.yaml already
+ * says, and a value this cannot use falls back to the default with a warning
+ * instead of stopping the gateway from booting.
+ */
+export function resolveBackupSettings(config, home) {
+    const section = typeof config === "object" && config !== null && !Array.isArray(config) ? config : {};
+    const warnings = [];
+    if (section.enabled !== undefined && typeof section.enabled !== "boolean") {
+        warnings.push("backup.enabled must be true or false; backups stay on");
+    }
+    const { directory, warning } = resolveDirectory(section.directory, home);
+    if (warning)
+        warnings.push(warning);
+    const fallbackDirectory = defaultBackupDirectory(path.resolve(home));
+    const resolvedDirectory = directory ?? fallbackDirectory;
+    return {
+        enabled: section.enabled !== false,
+        directory: resolvedDirectory,
+        defaultDirectory: resolvedDirectory === fallbackDirectory,
+        retention: positive(section.retention, DEFAULT_ARCHIVE_RETENTION, "backup.retention", true, warnings),
+        maxArchiveBytes: positive(section.maxArchiveMb, DEFAULT_MAX_ARCHIVE_MB, "backup.maxArchiveMb", false, warnings) * MIB,
+        maxEntries: positive(section.maxEntries, DEFAULT_MAX_ENTRIES, "backup.maxEntries", true, warnings),
+        warnings,
+    };
+}
+//# sourceMappingURL=settings.js.map

package/dist/src/backup/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/backup/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAExB,mEAAmE;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,QAAQ,EAAE,sBAAsB,GAAG,GAAG,EAAE,CAAC;AAgBjI,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,QAAgE;IAC5F,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACtH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvG,MAAM,YAAY,GAAG,QAAQ,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACjD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,2EAA2E,SAAS,sBAAsB,EAAE,CAAC;IAClJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB,EAAE,KAAa,EAAE,OAAgB,EAAE,QAAkB;IACrG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxH,IAAI,KAAK;QAAE,OAAO,KAAe,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,WAAW,QAAQ,EAAE,CAAC,CAAC;IACvG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAwC,EAAE,IAAY;IAC1F,MAAM,OAAO,GAA4B,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/H,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,SAAS,IAAI,iBAAiB,CAAC;IAEzD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK;QAClC,SAAS,EAAE,iBAAiB;QAC5B,gBAAgB,EAAE,iBAAiB,KAAK,iBAAiB;QACzD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC;QACrG,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,GAAG;QACrH,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,CAAC;QAClG,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/src/backup/space.d.ts

@@ -0,0 +1,22 @@
+import { type DiskSpaceStatus } from "../shared/storage-health.js";
+/** How much is free where something is about to be written. The gateway's own probe, replaceable in tests. */
+export type DiskSpaceProbe = (directory: string) => DiskSpaceStatus;
+/**
+ * Why `bytes` more cannot be written under `directory`, or null when they fit.
+ *
+ * They fit when the disk would not be critically low once they are there - the
+ * same judgement the gateway makes before every write to its own database, put
+ * to the space that will be left rather than the space there is. Asking only
+ * "is it low now" lets a 400 MB copy start with 300 MiB free: it passes, runs
+ * out partway, and for as long as it runs the gateway refuses to create a
+ * session or store a message.
+ *
+ * `alreadyWritten` is what this same run has put there since the probe last
+ * looked. The probe caches for half a minute, so its answer does not know yet.
+ */
+export declare function insufficientSpace(directory: string, bytes: number, probe?: DiskSpaceProbe, alreadyWritten?: number): string | null;
+/** The bytes a file occupies, or 0 when it is not there. */
+export declare function fileBytes(file: string): number;
+/** True when two paths are on the same filesystem, as far as can be told. Unknown counts as the same: the cautious answer. */
+export declare function sameFilesystem(a: string, b: string): boolean;
+//# sourceMappingURL=space.d.ts.map

package/dist/src/backup/space.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space.d.ts","sourceRoot":"","sources":["../../../src/backup/space.ts"],"names":[],"mappings":"AACA,OAAO,EAAyC,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG1G,8GAA8G;AAC9G,MAAM,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,eAAe,CAAC;AAEpE;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,cAAmC,EAC1C,cAAc,SAAI,GACjB,MAAM,GAAG,IAAI,CASf;AAED,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM9C;AAED,8HAA8H;AAC9H,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAM5D"}

package/dist/src/backup/space.js

@@ -0,0 +1,47 @@
+import fs from "node:fs";
+import { evaluateDiskSpace, getDiskSpaceStatus } from "../shared/storage-health.js";
+import { formatBytes } from "./format.js";
+/**
+ * Why `bytes` more cannot be written under `directory`, or null when they fit.
+ *
+ * They fit when the disk would not be critically low once they are there - the
+ * same judgement the gateway makes before every write to its own database, put
+ * to the space that will be left rather than the space there is. Asking only
+ * "is it low now" lets a 400 MB copy start with 300 MiB free: it passes, runs
+ * out partway, and for as long as it runs the gateway refuses to create a
+ * session or store a message.
+ *
+ * `alreadyWritten` is what this same run has put there since the probe last
+ * looked. The probe caches for half a minute, so its answer does not know yet.
+ */
+export function insufficientSpace(directory, bytes, probe = getDiskSpaceStatus, alreadyWritten = 0) {
+    const disk = probe(directory);
+    // Unknown free space has never stopped a write here, and should not start to.
+    if (disk.freeBytes === null || disk.totalBytes === null)
+        return null;
+    const free = Math.max(0, disk.freeBytes - alreadyWritten);
+    const left = Math.max(0, free - bytes);
+    if (evaluateDiskSpace({ bsize: 1, blocks: disk.totalBytes, bavail: left }).level !== "critical")
+        return null;
+    return `not enough free disk space: this needs about ${formatBytes(bytes)} and ${formatBytes(free)} is free in ${directory}, `
+        + "which would leave the disk too low for the gateway to keep writing";
+}
+/** The bytes a file occupies, or 0 when it is not there. */
+export function fileBytes(file) {
+    try {
+        return fs.statSync(file).size;
+    }
+    catch {
+        return 0;
+    }
+}
+/** True when two paths are on the same filesystem, as far as can be told. Unknown counts as the same: the cautious answer. */
+export function sameFilesystem(a, b) {
+    try {
+        return fs.statSync(a).dev === fs.statSync(b).dev;
+    }
+    catch {
+        return true;
+    }
+}
+//# sourceMappingURL=space.js.map

package/dist/src/backup/space.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space.js","sourceRoot":"","sources":["../../../src/backup/space.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAwB,MAAM,6BAA6B,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,KAAa,EACb,QAAwB,kBAAkB,EAC1C,cAAc,GAAG,CAAC;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC;IACvC,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7G,OAAO,gDAAgD,WAAW,CAAC,KAAK,CAAC,QAAQ,WAAW,CAAC,IAAI,CAAC,eAAe,SAAS,IAAI;UAC1H,oEAAoE,CAAC;AAC3E,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/backup/state.d.ts

@@ -0,0 +1,46 @@
+import { type BackupRunReport, type BackupTargetName } from "./run.js";
+/** A target is due once its last success is this old. */
+export declare const BACKUP_INTERVAL_MS: number;
+/**
+ * A target that failed is tried again after this long, rather than on every
+ * check. That is for a failure that may have passed: a full disk, a database
+ * that could not be read. One that trying again cannot change waits a whole
+ * BACKUP_INTERVAL_MS, the next daily run, like a success would.
+ */
+export declare const RETRY_AFTER_FAILURE_MS: number;
+export declare const BACKUP_STATE_FILE = "backup-state.json";
+export interface TargetState {
+    lastAttemptAt?: string;
+    lastSuccessAt?: string;
+    /** Present while the latest attempt is a failure. */
+    lastError?: string;
+    /** Beside `lastError`, when that failure is one trying again cannot change. */
+    lastErrorPersistent?: true;
+}
+/**
+ * When each target last ran, kept beside the backups. It is what lets "daily"
+ * survive a restart, and what lets a `ryoko backup run` from the CLI count
+ * towards the gateway's schedule.
+ */
+export interface BackupState {
+    version: 1;
+    targets: Partial<Record<BackupTargetName, TargetState>>;
+}
+/** Reads the state file. Anything unreadable or unexpected counts as no history, never as an error. */
+export declare function readBackupState(directory: string): BackupState;
+export declare function writeBackupState(directory: string, state: BackupState): void;
+/**
+ * Folds a run into the state. Success is dated from the moment the run started,
+ * so the next one falls due a day after that and the schedule does not creep
+ * later by however long each backup takes.
+ *
+ * A withheld database is left out altogether. It was neither copied nor tried,
+ * and recording it like the skip it resembles would tell the gateway that its
+ * registry was backed up a moment ago by a command that never opened it.
+ */
+export declare function applyRunReport(state: BackupState, report: BackupRunReport): BackupState;
+/** Per target, whichever side attempted most recently. */
+export declare function mergeStates(a: BackupState, b: BackupState): BackupState;
+/** The targets whose last success is a day old or never happened, minus the ones still waiting out a failure. */
+export declare function dueTargets(state: BackupState, now: Date): BackupTargetName[];
+//# sourceMappingURL=state.d.ts.map

package/dist/src/backup/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/backup/state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEvF,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,QAAsB,CAAC;AACtD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AACrD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,IAAI,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;CACzD;AAeD,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAe9D;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAW5E;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,GAAG,WAAW,CAevF;AAED,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,GAAG,WAAW,CASvE;AAUD,iHAAiH;AACjH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,GAAG,gBAAgB,EAAE,CAU5E"}

package/dist/src/backup/state.js

@@ -0,0 +1,137 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { BACKUP_TARGETS } from "./run.js";
+/** A target is due once its last success is this old. */
+export const BACKUP_INTERVAL_MS = 24 * 60 * 60 * 1000;
+/**
+ * A target that failed is tried again after this long, rather than on every
+ * check. That is for a failure that may have passed: a full disk, a database
+ * that could not be read. One that trying again cannot change waits a whole
+ * BACKUP_INTERVAL_MS, the next daily run, like a success would.
+ */
+export const RETRY_AFTER_FAILURE_MS = 60 * 60 * 1000;
+export const BACKUP_STATE_FILE = "backup-state.json";
+const emptyState = () => ({ version: 1, targets: {} });
+function parseTarget(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return null;
+    const raw = value;
+    const target = {};
+    for (const key of ["lastAttemptAt", "lastSuccessAt", "lastError"]) {
+        if (typeof raw[key] === "string")
+            target[key] = raw[key];
+    }
+    if (target.lastError !== undefined && raw.lastErrorPersistent === true)
+        target.lastErrorPersistent = true;
+    return target;
+}
+/** Reads the state file. Anything unreadable or unexpected counts as no history, never as an error. */
+export function readBackupState(directory) {
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(path.join(directory, BACKUP_STATE_FILE), "utf8"));
+    }
+    catch {
+        return emptyState();
+    }
+    const raw = parsed;
+    if (!raw || raw.version !== 1 || typeof raw.targets !== "object" || raw.targets === null || Array.isArray(raw.targets))
+        return emptyState();
+    const targets = {};
+    for (const name of BACKUP_TARGETS) {
+        const target = parseTarget(raw.targets[name]);
+        if (target)
+            targets[name] = target;
+    }
+    return { version: 1, targets };
+}
+export function writeBackupState(directory, state) {
+    const file = path.join(directory, BACKUP_STATE_FILE);
+    const temporary = `${file}.${process.pid}.${crypto.randomBytes(4).toString("hex")}.tmp`;
+    try {
+        // Created exclusively: something already sitting under this name is not written through.
+        fs.writeFileSync(temporary, `${JSON.stringify(state, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+        fs.renameSync(temporary, file);
+    }
+    catch (error) {
+        fs.rmSync(temporary, { force: true });
+        throw error;
+    }
+}
+/**
+ * When a target that did not fail was last really backed up.
+ *
+ * Normally that is this run. But a run that finds today's database copy already
+ * there has made nothing: the last success is the copy it found. Dating it
+ * from the run instead let a `ryoko backup run` late in the day push the next
+ * copy a full day past it - up to two days after the last one that was made.
+ * The record moves up to the existing copy if that is newer than what was
+ * known, and never past it.
+ */
+function lastSuccess(target, previous, startedAt) {
+    if (target.status !== "skipped" || !target.copiedAt)
+        return startedAt;
+    return previous?.lastSuccessAt && previous.lastSuccessAt > target.copiedAt ? previous.lastSuccessAt : target.copiedAt;
+}
+/**
+ * Folds a run into the state. Success is dated from the moment the run started,
+ * so the next one falls due a day after that and the schedule does not creep
+ * later by however long each backup takes.
+ *
+ * A withheld database is left out altogether. It was neither copied nor tried,
+ * and recording it like the skip it resembles would tell the gateway that its
+ * registry was backed up a moment ago by a command that never opened it.
+ */
+export function applyRunReport(state, report) {
+    const targets = { ...state.targets };
+    for (const target of report.targets) {
+        if (target.status === "withheld")
+            continue;
+        const previous = state.targets[target.name];
+        targets[target.name] = target.status === "failed"
+            ? {
+                lastAttemptAt: report.startedAt,
+                ...(previous?.lastSuccessAt ? { lastSuccessAt: previous.lastSuccessAt } : {}),
+                lastError: target.error ?? "failed",
+                ...(target.persistent ? { lastErrorPersistent: true } : {}),
+            }
+            : { lastAttemptAt: report.startedAt, lastSuccessAt: lastSuccess(target, previous, report.startedAt) };
+    }
+    return { version: 1, targets };
+}
+/** Per target, whichever side attempted most recently. */
+export function mergeStates(a, b) {
+    const targets = {};
+    for (const name of BACKUP_TARGETS) {
+        const left = a.targets[name];
+        const right = b.targets[name];
+        const chosen = !left ? right : !right ? left : (right.lastAttemptAt ?? "") > (left.lastAttemptAt ?? "") ? right : left;
+        if (chosen)
+            targets[name] = chosen;
+    }
+    return { version: 1, targets };
+}
+/** Milliseconds since `timestamp`, or null when it is missing, unreadable or still in the future. */
+function elapsedSince(timestamp, now) {
+    if (!timestamp)
+        return null;
+    const elapsed = now.getTime() - Date.parse(timestamp);
+    // A time ahead of the clock says the clock moved, not that a backup is recent.
+    return Number.isFinite(elapsed) && elapsed >= 0 ? elapsed : null;
+}
+/** The targets whose last success is a day old or never happened, minus the ones still waiting out a failure. */
+export function dueTargets(state, now) {
+    return BACKUP_TARGETS.filter((name) => {
+        const target = state.targets[name] ?? {};
+        const sinceSuccess = elapsedSince(target.lastSuccessAt, now);
+        if (sinceSuccess !== null && sinceSuccess < BACKUP_INTERVAL_MS)
+            return false;
+        if (target.lastError === undefined)
+            return true;
+        const sinceAttempt = elapsedSince(target.lastAttemptAt, now);
+        const wait = target.lastErrorPersistent ? BACKUP_INTERVAL_MS : RETRY_AFTER_FAILURE_MS;
+        return sinceAttempt === null || sinceAttempt >= wait;
+    });
+}
+//# sourceMappingURL=state.js.map

package/dist/src/backup/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/backup/state.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAA+C,MAAM,UAAU,CAAC;AAEvF,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAqBrD,MAAM,UAAU,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAEpE,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,WAAW,CAAU,EAAE,CAAC;QAC3E,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI;QAAE,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAG,MAAyD,CAAC;IACtE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5I,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAE,GAAG,CAAC,OAAmC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,KAAkB;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC;QACH,yFAAyF;QACzF,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,MAA0C,EAAE,QAAiC,EAAE,SAAiB;IACnH,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,QAAQ,EAAE,aAAa,IAAI,QAAQ,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;AACxH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAkB,EAAE,MAAuB;IACxE,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC/C,CAAC,CAAC;gBACA,aAAa,EAAE,MAAM,CAAC,SAAS;gBAC/B,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,QAAQ;gBACnC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1G,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,WAAW,CAAC,CAAc,EAAE,CAAc;IACxD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACvH,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,qGAAqG;AACrG,SAAS,YAAY,CAAC,SAA6B,EAAE,GAAS;IAC5D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,+EAA+E;IAC/E,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,UAAU,CAAC,KAAkB,EAAE,GAAS;IACtD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,kBAAkB;YAAE,OAAO,KAAK,CAAC;QAC7E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACtF,OAAO,YAAY,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/backup/tar.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The subset of tar a home archive needs, read and written in-process.
+ *
+ * No external `tar` is spawned: the gateway runs in containers with a read-only
+ * root and whatever userland the image happens to ship, and a restore has to
+ * inspect every entry before a single byte is written - which a child process
+ * extracting on its own does not allow. The format stays plain ustar with pax
+ * records for long or non-ASCII names, so any system tar can still open an
+ * archive by hand.
+ *
+ * Only files, directories and symlinks exist here. Hard links, devices and the
+ * GNU extensions are refused on read rather than interpreted.
+ */
+export declare const TAR_BLOCK_BYTES = 512;
+/** Two zero blocks close an archive. */
+export declare const TAR_TRAILER: Buffer<ArrayBuffer>;
+/**
+ * How much may follow the end-of-archive marker. Tar writers round an archive
+ * up to their record size with zeroes - ten kilobytes by default - and that is
+ * all that belongs there.
+ */
+export declare const MAX_TRAILING_PADDING_BYTES: number;
+export type TarEntryType = "file" | "directory" | "symlink";
+export interface TarEntry {
+    /** Slash-separated, relative, with no trailing slash. */
+    path: string;
+    type: TarEntryType;
+    mode: number;
+    /** Bytes of data that follow the header. Always 0 unless `type` is "file". */
+    size: number;
+    mtimeSeconds: number;
+    linkTarget?: string;
+}
+/** Receives one entry's data. `end` runs once the last byte has been written. */
+export interface TarEntrySink {
+    write(chunk: Buffer): void | Promise<void>;
+    end(): void | Promise<void>;
+}
+export interface TarHeaderFields {
+    name: string;
+    mode: number;
+    size: number;
+    mtimeSeconds: number;
+    typeflag: string;
+    linkname?: string;
+}
+/** One raw 512-byte ustar header. Exposed so tests can build entries the writer never would. */
+export declare function encodeTarHeaderBlock(fields: TarHeaderFields): Buffer;
+/** Zero bytes that bring `size` bytes of data up to the next block boundary. */
+export declare function tarPadding(size: number): Buffer;
+/** The header block(s) for one entry: a pax header first when ustar cannot hold it. */
+export declare function encodeTarEntry(entry: TarEntry): Buffer;
+/**
+ * Walks a tar stream entry by entry.
+ *
+ * `onEntry` decides what happens to each entry's data: return a sink to receive
+ * it, or nothing to have it skipped. A sound archive is read to its end - the
+ * caller's decompressor only verifies its checksum once it is drained - and
+ * anything other than padding after the end-of-archive marker is refused. So
+ * is padding that goes on: zeroes compress to nothing, and a stream of them
+ * after the marker would otherwise be read for as long as it lasted.
+ */
+export declare function readTar(source: AsyncIterable<Uint8Array>, onEntry: (entry: TarEntry) => TarEntrySink | undefined | void | Promise<TarEntrySink | undefined | void>): Promise<void>;
+//# sourceMappingURL=tar.d.ts.map

package/dist/src/backup/tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.d.ts","sourceRoot":"","sources":["../../../src/backup/tar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,wCAAwC;AACxC,eAAO,MAAM,WAAW,qBAAoC,CAAC;AAC7D;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAcpD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5D,MAAM,WAAW,QAAQ;IACvB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,GAAG,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAeD,gGAAgG;AAChG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAiBpE;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAuBD,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAwBtD;AAqHD;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,EACjC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,YAAY,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,GAAG,IAAI,CAAC,GACvG,OAAO,CAAC,IAAI,CAAC,CAyBf"}