p-spore 0.1.0

package/dist/shell/shell-service.js

@@ -0,0 +1,459 @@
+var _a;
+import { createHash, randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { access, chmod, mkdir, open, readFile, realpath, stat } from "node:fs/promises";
+import { userInfo } from "node:os";
+import { basename, isAbsolute, join } from "node:path";
+import { spawn } from "node:child_process";
+const PTY_BRIDGE_SOURCE = String.raw `
+const { spawn } = require("node:child_process");
+const shell = process.env.PSPORE_PTY_SHELL;
+const command = process.env.PSPORE_PTY_COMMAND;
+const cwd = process.env.PSPORE_PTY_CWD;
+if (!shell || command === undefined || !cwd) process.exit(126);
+const child = spawn(shell, ["-l", "-c", command], { cwd, env: process.env, stdio: "inherit" });
+for (const signal of ["SIGTERM", "SIGINT", "SIGHUP"]) {
+  process.on(signal, () => {
+    try { child.kill(signal); } catch {}
+  });
+}
+child.once("error", () => process.exit(126));
+child.once("exit", (code) => process.exit(code === null ? 1 : code));
+`;
+export class ShellService {
+    #artifactRoot;
+    #baseEnv;
+    #configuredShell;
+    #passwdPath;
+    #configuredScriptPath;
+    #clock;
+    #idFactory;
+    #summaryBytesPerStream;
+    #resolvedShell;
+    #resolvedScriptPath;
+    constructor(options) {
+        this.#artifactRoot = options.artifactRoot;
+        this.#baseEnv = { ...(options.env ?? process.env) };
+        this.#configuredShell = options.configuredShell;
+        this.#passwdPath = options.passwdPath ?? "/etc/passwd";
+        this.#configuredScriptPath = options.scriptPath;
+        this.#clock = options.clock ?? (() => new Date());
+        this.#idFactory = options.idFactory ?? randomUUID;
+        this.#summaryBytesPerStream = options.summaryBytesPerStream ?? 8 * 1024;
+    }
+    async initialize() {
+        await mkdir(this.#artifactRoot, { recursive: true, mode: 0o700 });
+        await chmod(this.#artifactRoot, 0o700);
+        this.#resolvedShell = await resolveUserShell({
+            ...(this.#configuredShell ? { configuredShell: this.#configuredShell } : {}),
+            env: this.#baseEnv,
+            passwdPath: this.#passwdPath,
+        });
+        return this.#resolvedShell;
+    }
+    async doctor() {
+        const shell = await this.#shell();
+        const scriptPath = await this.#scriptPath(false);
+        return {
+            shell,
+            pipe: true,
+            pty: scriptPath ? { available: true, scriptPath } : { available: false },
+        };
+    }
+    async run(request, onChunk) {
+        return (await this.start(request, onChunk)).completion;
+    }
+    async start(request, onChunk) {
+        validateRequest(request);
+        const shell = await this.#shell();
+        const cwd = await realpath(request.cwd);
+        const cwdStat = await stat(cwd);
+        if (!cwdStat.isDirectory()) {
+            throw new Error(`Shell cwd is not a directory: ${cwd}`);
+        }
+        const processId = this.#idFactory();
+        const processArtifactDir = join(this.#artifactRoot, processId);
+        await mkdir(processArtifactDir, { recursive: false, mode: 0o700 });
+        const artifactPath = join(processArtifactDir, "output.log");
+        const artifact = await open(artifactPath, "wx", 0o600);
+        const started = this.#clock();
+        const env = { ...this.#baseEnv, ...request.envDelta };
+        const child = await this.#spawn(request, shell.path, cwd, env);
+        if (child.pid === undefined) {
+            await artifact.close();
+            throw new Error("Shell process started without a PID");
+        }
+        const pid = child.pid;
+        const stdoutSummary = new HeadTailBuffer(this.#summaryBytesPerStream);
+        const stderrSummary = new HeadTailBuffer(this.#summaryBytesPerStream);
+        const stdoutRedactor = new StreamingSecretRedactor();
+        const stderrRedactor = new StreamingSecretRedactor();
+        const digest = createHash("sha256");
+        const mutable = { state: "running", capturedBytes: 0 };
+        let writeChain = Promise.resolve();
+        let timedOut = false;
+        let aborted = false;
+        let outputLimitExceeded = false;
+        let settled = false;
+        let timeout;
+        const enqueueArtifact = (buffer) => {
+            if (buffer.length === 0)
+                return;
+            digest.update(buffer);
+            writeChain = writeChain.then(async () => {
+                await artifact.write(buffer);
+            });
+        };
+        const terminate = (signal) => {
+            if (mutable.state === "settled")
+                return;
+            killProcessGroup(child, signal);
+        };
+        const persistOutput = (stream, buffer) => {
+            if (buffer.length === 0)
+                return;
+            enqueueArtifact(buffer);
+            if (stream === "stdout")
+                stdoutSummary.append(buffer);
+            else
+                stderrSummary.append(buffer);
+            onChunk?.({
+                processId,
+                stream,
+                data: buffer.toString("utf8"),
+                ts: this.#clock().toISOString(),
+            });
+        };
+        const capture = (stream, chunk) => {
+            if (mutable.state === "settled")
+                return;
+            const remaining = request.maxOutputBytes - mutable.capturedBytes;
+            const accepted = remaining > 0 ? chunk.subarray(0, remaining) : Buffer.alloc(0);
+            if (accepted.length > 0) {
+                mutable.capturedBytes += accepted.length;
+                const redactor = stream === "stdout" ? stdoutRedactor : stderrRedactor;
+                persistOutput(stream, redactor.push(accepted));
+            }
+            if (accepted.length < chunk.length && !outputLimitExceeded) {
+                outputLimitExceeded = true;
+                const marker = Buffer.from("\n[pSpore: output limit exceeded; process terminated]\n", "utf8");
+                enqueueArtifact(marker);
+                terminate("SIGTERM");
+            }
+        };
+        child.stdout.on("data", (chunk) => capture("stdout", Buffer.from(chunk)));
+        child.stderr.on("data", (chunk) => capture("stderr", Buffer.from(chunk)));
+        if (request.timeoutMs > 0) {
+            timeout = setTimeout(() => {
+                timedOut = true;
+                terminate("SIGTERM");
+                setTimeout(() => terminate("SIGKILL"), 1_000).unref();
+            }, request.timeoutMs);
+            timeout.unref();
+        }
+        const completion = new Promise((resolve) => {
+            const finish = async (exitCode, signal, spawnError) => {
+                if (settled)
+                    return;
+                settled = true;
+                mutable.state = "settled";
+                if (timeout)
+                    clearTimeout(timeout);
+                if (spawnError) {
+                    const message = Buffer.from(`\n[pSpore: spawn error: ${spawnError.message}]\n`, "utf8");
+                    enqueueArtifact(message);
+                    stderrSummary.append(message);
+                }
+                persistOutput("stdout", stdoutRedactor.flush());
+                persistOutput("stderr", stderrRedactor.flush());
+                await writeChain;
+                await artifact.sync();
+                await artifact.close();
+                const ended = this.#clock();
+                resolve({
+                    processId,
+                    pid,
+                    shell: shell.path,
+                    mode: request.mode,
+                    exitCode,
+                    signal,
+                    durationMs: Math.max(0, ended.getTime() - started.getTime()),
+                    timedOut,
+                    aborted,
+                    outputLimitExceeded,
+                    stdout: stdoutSummary.toString(),
+                    stderr: stderrSummary.toString(),
+                    capturedBytes: mutable.capturedBytes,
+                    artifactPath,
+                    artifactSha256: digest.digest("hex"),
+                });
+            };
+            child.once("error", (error) => void finish(null, null, error));
+            child.once("close", (code, signal) => void finish(code, signal));
+        });
+        const handle = {
+            id: processId,
+            pid,
+            completion,
+            write: async (data, options) => {
+                if (mutable.state !== "running" || !child.stdin.writable) {
+                    throw new Error(`Process ${processId} is not accepting input`);
+                }
+                const buffer = typeof data === "string" ? Buffer.from(data) : Buffer.from(data);
+                if (options?.secret) {
+                    stdoutRedactor.addSecret(buffer);
+                    stderrRedactor.addSecret(buffer);
+                }
+                await new Promise((resolve, reject) => {
+                    child.stdin.write(buffer, (error) => (error ? reject(error) : resolve()));
+                });
+            },
+            signal: (signal) => {
+                aborted = true;
+                terminate(signal);
+            },
+            poll: () => ({
+                processId,
+                pid,
+                state: mutable.state,
+                capturedBytes: mutable.capturedBytes,
+                startedAt: started.toISOString(),
+            }),
+        };
+        completion.catch(() => undefined);
+        return handle;
+    }
+    async #spawn(request, shellPath, cwd, env) {
+        if (request.mode === "pipe") {
+            return spawn(shellPath, ["-l", "-c", request.command], {
+                cwd,
+                env,
+                detached: true,
+                stdio: ["pipe", "pipe", "pipe"],
+            });
+        }
+        const scriptPath = await this.#scriptPath(true);
+        const bridgeCommand = `${quoteShellWord(process.execPath)} --input-type=commonjs -e ${quoteShellWord(PTY_BRIDGE_SOURCE)}`;
+        return spawn(scriptPath, ["-qefc", bridgeCommand, "/dev/null"], {
+            cwd,
+            env: {
+                ...env,
+                PSPORE_PTY_SHELL: shellPath,
+                PSPORE_PTY_COMMAND: request.command,
+                PSPORE_PTY_CWD: cwd,
+            },
+            detached: true,
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+    }
+    async #shell() {
+        return this.#resolvedShell ?? this.initialize();
+    }
+    async #scriptPath(required) {
+        if (this.#resolvedScriptPath)
+            return this.#resolvedScriptPath;
+        const configured = this.#configuredScriptPath;
+        if (configured) {
+            this.#resolvedScriptPath = await validateExecutable(configured);
+            return this.#resolvedScriptPath;
+        }
+        const discovered = await findExecutable("script", this.#baseEnv["PATH"]);
+        if (discovered) {
+            this.#resolvedScriptPath = discovered;
+            return discovered;
+        }
+        if (required) {
+            throw new Error("PTY mode requires the util-linux `script` executable");
+        }
+        return undefined;
+    }
+}
+export async function resolveUserShell(options = {}) {
+    const env = options.env ?? process.env;
+    if (options.configuredShell) {
+        return { path: await validateExecutable(options.configuredShell), source: "config" };
+    }
+    const environmentShell = env["SHELL"];
+    if (environmentShell && isAbsolute(environmentShell)) {
+        try {
+            return { path: await validateExecutable(environmentShell), source: "environment" };
+        }
+        catch {
+            // Invalid inherited SHELL is ignored; passwd remains authoritative fallback.
+        }
+    }
+    const uid = options.uid ?? userInfo().uid;
+    try {
+        const passwd = await readFile(options.passwdPath ?? "/etc/passwd", "utf8");
+        for (const line of passwd.split("\n")) {
+            if (!line || line.startsWith("#"))
+                continue;
+            const fields = line.split(":");
+            if (Number(fields[2]) !== uid)
+                continue;
+            const shell = fields[6];
+            if (shell && isAbsolute(shell)) {
+                return { path: await validateExecutable(shell), source: "passwd" };
+            }
+        }
+    }
+    catch {
+        // Fall through to a known POSIX shell.
+    }
+    return { path: await validateExecutable("/bin/sh"), source: "fallback" };
+}
+async function validateExecutable(path) {
+    if (!isAbsolute(path)) {
+        throw new Error(`Executable path must be absolute: ${path}`);
+    }
+    const canonical = await realpath(path);
+    const metadata = await stat(canonical);
+    if (!metadata.isFile()) {
+        throw new Error(`Executable path is not a file: ${canonical}`);
+    }
+    await access(canonical, constants.X_OK);
+    return canonical;
+}
+async function findExecutable(name, pathValue) {
+    for (const directory of (pathValue ?? "/usr/local/bin:/usr/bin:/bin").split(":")) {
+        if (!directory)
+            continue;
+        try {
+            return await validateExecutable(join(directory, name));
+        }
+        catch {
+            // Continue to the next PATH entry.
+        }
+    }
+    return undefined;
+}
+function validateRequest(request) {
+    if (!request.command.trim())
+        throw new Error("Shell command cannot be empty");
+    if (!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 0) {
+        throw new Error("timeoutMs must be a non-negative safe integer");
+    }
+    if (!Number.isSafeInteger(request.maxOutputBytes) || request.maxOutputBytes <= 0) {
+        throw new Error("maxOutputBytes must be a positive safe integer");
+    }
+    for (const key of Object.keys(request.envDelta ?? {})) {
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key) || key.startsWith("PSPORE_PTY_")) {
+            throw new Error(`Invalid or reserved environment variable name: ${key}`);
+        }
+    }
+}
+function killProcessGroup(child, signal) {
+    if (child.pid === undefined)
+        return;
+    try {
+        process.kill(-child.pid, signal);
+    }
+    catch {
+        try {
+            child.kill(signal);
+        }
+        catch {
+            // The process already exited.
+        }
+    }
+}
+function quoteShellWord(value) {
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+class HeadTailBuffer {
+    #limit;
+    #head = Buffer.alloc(0);
+    #tail = Buffer.alloc(0);
+    #total = 0;
+    constructor(limit) {
+        this.#limit = Math.max(256, limit);
+    }
+    append(chunk) {
+        this.#total += chunk.length;
+        if (this.#head.length < this.#limit) {
+            const needed = this.#limit - this.#head.length;
+            this.#head = Buffer.concat([this.#head, chunk.subarray(0, needed)]);
+        }
+        this.#tail = Buffer.concat([this.#tail, chunk]);
+        if (this.#tail.length > this.#limit) {
+            this.#tail = this.#tail.subarray(this.#tail.length - this.#limit);
+        }
+    }
+    toString() {
+        if (this.#total <= this.#limit)
+            return this.#head.toString("utf8");
+        if (this.#total <= this.#limit * 2) {
+            const overlap = this.#limit * 2 - this.#total;
+            return Buffer.concat([this.#head, this.#tail.subarray(Math.max(0, overlap))]).toString("utf8");
+        }
+        return `${this.#head.toString("utf8")}\n… ${this.#total - this.#limit * 2} bytes omitted …\n${this.#tail.toString("utf8")}`;
+    }
+}
+class StreamingSecretRedactor {
+    static #marker = Buffer.from("[REDACTED]", "utf8");
+    #patterns = [];
+    #carry = Buffer.alloc(0);
+    addSecret(input) {
+        let end = input.length;
+        while (end > 0 && (input[end - 1] === 0x0a || input[end - 1] === 0x0d))
+            end--;
+        if (end === 0)
+            return;
+        const pattern = Buffer.from(input.subarray(0, end));
+        if (!this.#patterns.some((existing) => existing.equals(pattern))) {
+            this.#patterns.push(pattern);
+            this.#patterns.sort((left, right) => right.length - left.length);
+        }
+    }
+    push(chunk) {
+        if (this.#patterns.length === 0)
+            return chunk;
+        const combined = Buffer.concat([this.#carry, chunk]);
+        const longest = this.#patterns[0]?.length ?? 1;
+        const safeBoundary = Math.max(0, combined.length - longest + 1);
+        const { output, consumed } = this.#redactUntil(combined, safeBoundary);
+        this.#carry = combined.subarray(consumed);
+        return output;
+    }
+    flush() {
+        const { output } = this.#redactUntil(this.#carry, this.#carry.length, true);
+        this.#carry = Buffer.alloc(0);
+        this.#patterns = [];
+        return output;
+    }
+    #redactUntil(input, boundary, flush = false) {
+        const parts = [];
+        let cursor = 0;
+        const target = flush ? input.length : boundary;
+        while (cursor < target) {
+            const match = this.#nextMatch(input, cursor);
+            if (!match || match.index >= target) {
+                parts.push(input.subarray(cursor, target));
+                cursor = target;
+                break;
+            }
+            if (match.index > cursor)
+                parts.push(input.subarray(cursor, match.index));
+            parts.push(_a.#marker);
+            cursor = match.index + match.length;
+        }
+        return { output: Buffer.concat(parts), consumed: cursor };
+    }
+    #nextMatch(input, offset) {
+        let best;
+        for (const pattern of this.#patterns) {
+            const index = input.indexOf(pattern, offset);
+            if (index === -1)
+                continue;
+            if (!best || index < best.index || (index === best.index && pattern.length > best.length)) {
+                best = { index, length: pattern.length };
+            }
+        }
+        return best;
+    }
+}
+_a = StreamingSecretRedactor;
+export function shellDisplayName(path) {
+    return basename(path);
+}
+//# sourceMappingURL=shell-service.js.map

package/dist/shell/shell-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-service.js","sourceRoot":"","sources":["../../src/shell/shell-service.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAoFhF,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;CAcnC,CAAC;AAEF,MAAM,OAAO,YAAY;IACd,aAAa,CAAS;IACtB,QAAQ,CAAoB;IAC5B,gBAAgB,CAAqB;IACrC,WAAW,CAAS;IACpB,qBAAqB,CAAqB;IAC1C,MAAM,CAAa;IACnB,UAAU,CAAe;IACzB,sBAAsB,CAAS;IACxC,cAAc,CAAiB;IAC/B,mBAAmB,CAAU;IAE7B,YAAY,OAA4B;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC;QACvD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;QAClD,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,MAAM,gBAAgB,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,EAAE,IAAI,CAAC,QAAQ;YAClB,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM;QAKV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO;YACL,KAAK;YACL,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;SACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAqB,EAAE,OAAqC;QACpE,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB,EAAE,OAAqC;QACtE,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,MAAM,aAAa,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,OAAO,GAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAmC,CAAC;QAExC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAQ,EAAE;YAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,CAAC,MAAsB,EAAQ,EAAE;YACjD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO;YACxC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,MAAmB,EAAE,MAAc,EAAQ,EAAE;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAChC,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,MAAM,KAAK,QAAQ;gBAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;gBACjD,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,EAAE,CAAC;gBACR,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC7B,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;aAChC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,MAAmB,EAAE,KAAa,EAAQ,EAAE;YAC3D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;YACjE,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;gBACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;gBACvE,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3D,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,MAAM,CAAC,CAAC;gBAC9F,eAAe,CAAC,MAAM,CAAC,CAAC;gBACxB,SAAS,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3F,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE3F,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS,CAAC,SAAS,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YACxD,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,KAAK,EAAE,QAAuB,EAAE,MAA6B,EAAE,UAAkB,EAAE,EAAE;gBAClG,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;gBAC1B,IAAI,OAAO;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,2BAA2B,UAAU,CAAC,OAAO,KAAK,EAAE,MAAM,CAAC,CAAC;oBACxF,eAAe,CAAC,OAAO,CAAC,CAAC;oBACzB,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBACD,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,MAAM,UAAU,CAAC;gBACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,CAAC;oBACN,SAAS;oBACT,GAAG;oBACH,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,QAAQ;oBACR,MAAM;oBACN,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC5D,QAAQ;oBACR,OAAO;oBACP,mBAAmB;oBACnB,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;oBAChC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;oBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,YAAY;oBACZ,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;iBACrC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAuB;YACjC,EAAE,EAAE,SAAS;YACb,GAAG;YACH,UAAU;YACV,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACzD,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,yBAAyB,CAAC,CAAC;gBACjE,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;oBACpB,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;oBACjC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC5E,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;gBACjB,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;YACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS;gBACT,GAAG;gBACH,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE;aACjC,CAAC;SACH,CAAC;QAEF,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAqB,EACrB,SAAiB,EACjB,GAAW,EACX,GAAsB;QAEtB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACrD,GAAG;gBACH,GAAG;gBACH,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAA6B,cAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1H,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE;YAC9D,GAAG;YACH,GAAG,EAAE;gBACH,GAAG,GAAG;gBACN,gBAAgB,EAAE,SAAS;gBAC3B,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,cAAc,EAAE,GAAG;aACpB;YACD,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAID,KAAK,CAAC,WAAW,CAAC,QAAiB;QACjC,IAAI,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,mBAAmB,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,mBAAmB,CAAC;QAClC,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC;YACtC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAA+B,EAAE;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC,GAAG,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,EAAE,MAAM,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,SAAS;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,SAA6B;IACvE,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,IAAI,8BAA8B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,OAAqB;IAC5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAqC,EAAE,MAAsB;IACrF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,MAAM,cAAc;IACT,MAAM,CAAS;IACxB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,CAAC,CAAC;IAEX,YAAY,KAAa;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9H,CAAC;CACF;AAED,MAAM,uBAAuB;IAC3B,MAAM,CAAU,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC5D,SAAS,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEzB,SAAS,CAAC,KAAa;QACrB,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;QACvB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;YAAE,GAAG,EAAE,CAAC;QAC9E,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAK,GAAG,KAAK;QACzD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/C,OAAO,MAAM,GAAG,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC;gBAChB,MAAM;YACR,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,EAAuB,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,MAAc;QACtC,IAAI,IAAmD,CAAC;QACxD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC3B,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1F,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;;;AAGH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/storage/atomic.d.ts

@@ -0,0 +1,4 @@
+export declare function atomicWriteFile(path: string, content: string | Uint8Array, mode?: number): Promise<void>;
+export declare function atomicWriteJson(path: string, value: unknown, mode?: number): Promise<void>;
+export declare function appendJsonLine(path: string, value: unknown, mode?: number): Promise<void>;
+//# sourceMappingURL=atomic.d.ts.map

package/dist/storage/atomic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.d.ts","sourceRoot":"","sources":["../../src/storage/atomic.ts"],"names":[],"mappings":"AAIA,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB7G;AAMD,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ9F"}

package/dist/storage/atomic.js

@@ -0,0 +1,49 @@
+import { randomUUID } from "node:crypto";
+import { open, rename, unlink } from "node:fs/promises";
+import { dirname, join } from "node:path";
+export async function atomicWriteFile(path, content, mode = 0o600) {
+    const directory = dirname(path);
+    const temporary = join(directory, `.${randomUUID()}.tmp`);
+    try {
+        const file = await open(temporary, "wx", mode);
+        try {
+            await file.writeFile(content);
+            await file.sync();
+        }
+        finally {
+            await file.close();
+        }
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await unlink(temporary).catch((cleanupError) => {
+            if (!isNodeError(cleanupError) || cleanupError.code !== "ENOENT")
+                throw cleanupError;
+        });
+        throw error;
+    }
+    const directoryHandle = await open(directory, "r");
+    try {
+        await directoryHandle.sync();
+    }
+    finally {
+        await directoryHandle.close();
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+export async function atomicWriteJson(path, value, mode = 0o600) {
+    await atomicWriteFile(path, `${JSON.stringify(value, null, 2)}\n`, mode);
+}
+export async function appendJsonLine(path, value, mode = 0o600) {
+    const file = await open(path, "a", mode);
+    try {
+        await file.writeFile(`${JSON.stringify(value)}\n`, "utf8");
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+}
+//# sourceMappingURL=atomic.js.map

package/dist/storage/atomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../../src/storage/atomic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,OAA4B,EAAE,IAAI,GAAG,KAAK;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,YAAqB,EAAE,EAAE;YACtD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,YAAY,CAAC;QACvF,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc,EAAE,IAAI,GAAG,KAAK;IAC9E,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc,EAAE,IAAI,GAAG,KAAK;IAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/storage/daemon-lock.d.ts

@@ -0,0 +1,17 @@
+export interface DaemonLock {
+    instanceId: string;
+    release(): Promise<void>;
+}
+export declare class DaemonAlreadyRunningError extends Error {
+    readonly pid: number;
+    constructor(pid: number);
+}
+export declare function acquireDaemonLock(path: string, now?: Date): Promise<DaemonLock>;
+export declare function writeEndpoint(path: string, value: {
+    instanceId: string;
+    socket: string;
+    pid: number;
+    state: string;
+    startedAt: string;
+}): Promise<void>;
+//# sourceMappingURL=daemon-lock.d.ts.map

package/dist/storage/daemon-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-lock.d.ts","sourceRoot":"","sources":["../../src/storage/daemon-lock.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM;CAKxB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAqC3F;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3F,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/storage/daemon-lock.js

@@ -0,0 +1,97 @@
+import { randomUUID } from "node:crypto";
+import { open, readFile, unlink } from "node:fs/promises";
+import { atomicWriteJson } from "./atomic.js";
+export class DaemonAlreadyRunningError extends Error {
+    pid;
+    constructor(pid) {
+        super(`pSpore daemon is already running with PID ${pid}`);
+        this.name = "DaemonAlreadyRunningError";
+        this.pid = pid;
+    }
+}
+export async function acquireDaemonLock(path, now = new Date()) {
+    const current = {
+        version: 1,
+        pid: process.pid,
+        processStart: await linuxProcessStart(process.pid),
+        instanceId: randomUUID(),
+        createdAt: now.toISOString(),
+    };
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            const file = await open(path, "wx", 0o600);
+            try {
+                await file.writeFile(`${JSON.stringify(current, null, 2)}\n`, "utf8");
+                await file.sync();
+            }
+            finally {
+                await file.close();
+            }
+            return {
+                instanceId: current.instanceId,
+                release: async () => {
+                    const existing = await readLock(path);
+                    if (existing?.instanceId === current.instanceId)
+                        await unlink(path);
+                },
+            };
+        }
+        catch (error) {
+            if (!isNodeError(error) || error.code !== "EEXIST")
+                throw error;
+            const existing = await readLock(path);
+            if (existing && (await isSameProcess(existing))) {
+                throw new DaemonAlreadyRunningError(existing.pid);
+            }
+            await unlink(path).catch((unlinkError) => {
+                if (!isNodeError(unlinkError) || unlinkError.code !== "ENOENT")
+                    throw unlinkError;
+            });
+        }
+    }
+    throw new Error("Could not acquire daemon lock after stale-lock recovery");
+}
+export async function writeEndpoint(path, value) {
+    await atomicWriteJson(path, { version: 1, ...value }, 0o600);
+}
+async function readLock(path) {
+    try {
+        const value = JSON.parse(await readFile(path, "utf8"));
+        if (!isRecord(value))
+            return undefined;
+        if (value["version"] !== 1 ||
+            typeof value["pid"] !== "number" ||
+            typeof value["processStart"] !== "string" ||
+            typeof value["instanceId"] !== "string" ||
+            typeof value["createdAt"] !== "string") {
+            return undefined;
+        }
+        return value;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function isSameProcess(record) {
+    try {
+        return (await linuxProcessStart(record.pid)) === record.processStart;
+    }
+    catch {
+        return false;
+    }
+}
+async function linuxProcessStart(pid) {
+    const stat = await readFile(`/proc/${pid}/stat`, "utf8");
+    const tail = stat.slice(stat.lastIndexOf(")") + 2).trim().split(/\s+/);
+    const startTime = tail[19];
+    if (!startTime)
+        throw new Error(`Could not read process start identity for PID ${pid}`);
+    return startTime;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=daemon-lock.js.map