parasor 0.1.0

package/server/pty/host-daemon/spawn-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-daemon.js","sourceRoot":"","sources":["../../../src/pty/host-daemon/spawn-daemon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA+BzC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAG9B;IAFX,YACE,OAAe,EACN,KAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,UAAK,GAAL,KAAK,CAAQ;QAGtB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IAC1C,MAAM,KAAK,GACT,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1E;;;;;;;OAOG;IACH,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAkB,CAAC;IACvB,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,aAAa,GAAG,UAAU,CAAC;QAC3B,QAAQ,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,KAAK,GAAG;YACpD,eAAe,UAAU,IAAI,mBAAmB,KAAK;YACrD,8DAA8D;YAC9D,6DAA6D;YAC7D,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,GAAoC,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;YAC1C,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;SAC7B,CAAC,CAAC;QACH,mDAAmD;QACnD,mEAAmE;QACnE,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,gBAAgB;QAChB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,yDAAyD;QAC3D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,2CAA2C,aAAa,MAAO,GAAa,CAAC,OAAO,EAAE,EACtF,GAAY,CACb,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO;QAC/C,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,+CAA+C;IAC/C,kEAAkE;IAClE,kEAAkE;IAClE,oEAAoE;IACpE,iEAAiE;IACjE,oEAAoE;IACpE,sBAAsB;IACtB,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,SAAS,cAAc,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK;QAC/F,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,0BAA0B,CACxD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,CAAC,EAAW,EAAQ,EAAE;YACpC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;uBAKuB;AACvB,SAAS,sBAAsB;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACnC,CAAC"}

package/server/pty/host-daemon/terminate-daemon.d.ts

@@ -0,0 +1,16 @@
+import type { DaemonPaths } from "./paths.js";
+export type TerminateDaemonOutcome = "no-pidfile" | "already-dead" | "stopped" | "killed-after-timeout" | "still-alive";
+export interface TerminateDaemonResult {
+    outcome: TerminateDaemonOutcome;
+    pid: number | null;
+}
+export interface TerminateDaemonDeps {
+    killProcess: (pid: number, signal: NodeJS.Signals | 0) => boolean;
+    readPidFile: (path: string) => number | null;
+    unlinkSocket: (path: string) => void;
+    unlinkLockFile: (lockFile: string) => void;
+    sleep: (ms: number) => Promise<void>;
+    now: () => number;
+}
+export declare function terminateDaemon(paths: DaemonPaths, partial?: Partial<TerminateDaemonDeps>): Promise<TerminateDaemonResult>;
+//# sourceMappingURL=terminate-daemon.d.ts.map

package/server/pty/host-daemon/terminate-daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminate-daemon.d.ts","sourceRoot":"","sources":["../../../src/pty/host-daemon/terminate-daemon.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM9C,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,cAAc,GACd,SAAS,GACT,sBAAsB,GACtB,aAAa,CAAC;AAElB,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,sBAAsB,CAAC;IAChC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,OAAO,CAAC;IAClE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7C,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAmDD,wBAAsB,eAAe,CACnC,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACrC,OAAO,CAAC,qBAAqB,CAAC,CA8ChC"}

package/server/pty/host-daemon/terminate-daemon.js

@@ -0,0 +1,128 @@
+/*
+ * daemon protocol mismatch recovery -- server-side daemon force-termination used by the
+ * `version-mismatch` auto-recovery path in createPtyHost. The CLI's
+ * `stopCmd` is the user-facing entry point; this is the in-process
+ * variant the server invokes when handshake NACK proves the running
+ * daemon is incompatible with the freshly-installed binary.
+ *
+ * Behaviour:
+ *   1. Read pidfile. Missing -> unlink stale socket + lock, return "no-pidfile".
+ *   2. probe `kill(pid, 0)` -- already dead -> unlink socket + lock, return.
+ *   3. SIGTERM, poll ≤ SIGTERM_TIMEOUT_MS for the pid to die.
+ *   4. Still alive -> SIGKILL, poll ≤ SIGKILL_TIMEOUT_MS.
+ *   5. Still alive after SIGKILL -> still unlink socket + lock and return
+ *      "still-alive". Caller treats this as fatal so the user sees a
+ *      clear failure, but we leave no stale inodes/lockdir behind that
+ *      would block a manual `parasor pty-host stop --force` recovery.
+ *
+ * Why we also break the proper-lockfile directory: a SIGKILLed daemon
+ * cannot release its `proper-lockfile` flock, and the stale-mtime
+ * window is up to 30s (refresh interval) before the next acquire would
+ * succeed. spawnDaemon does not retry on ELOCKED, so without explicit
+ * cleanup the immediate post-kill respawn would fail with
+ * `DaemonAlreadyRunningError`. We forcibly remove the
+ * `<lockFile>.lock` state directory proper-lockfile creates, which is
+ * safe because we just confirmed (or attempted to confirm) the holder
+ * is dead.
+ */
+import { existsSync, readFileSync, rmSync, unlinkSync } from "node:fs";
+const SIGTERM_TIMEOUT_MS = 5_000;
+const SIGKILL_TIMEOUT_MS = 2_000;
+const POLL_INTERVAL_MS = 50;
+function defaultReadPidFile(path) {
+    if (!existsSync(path))
+        return null;
+    try {
+        const pid = Number(readFileSync(path, "utf8").trim());
+        return Number.isFinite(pid) && pid > 0 ? pid : null;
+    }
+    catch {
+        return null;
+    }
+}
+function defaultKillProcess(pid, signal) {
+    try {
+        process.kill(pid, signal);
+        return true;
+    }
+    catch (err) {
+        return err.code === "EPERM";
+    }
+}
+function defaultUnlinkSocket(path) {
+    try {
+        unlinkSync(path);
+    }
+    catch {
+        /* ENOENT or owned-by-other-fd; spawnDaemon's lock arbitration owns the rest */
+    }
+}
+function defaultUnlinkLockFile(lockFile) {
+    // proper-lockfile records its held state as a `<lockFile>.lock` directory
+    // (see `acquireDaemonLock` in lockfile.ts). The stamp file at `lockFile`
+    // is just a touchpoint we created; the real lock is the directory. Both
+    // are safe to remove here because the daemon that owned them is dead
+    // (or assumed dead -- this is the force-termination path).
+    try {
+        rmSync(`${lockFile}.lock`, { recursive: true, force: true });
+    }
+    catch {
+        /* nothing to clean up */
+    }
+    try {
+        unlinkSync(lockFile);
+    }
+    catch {
+        /* nothing to clean up */
+    }
+}
+function defaultSleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+export async function terminateDaemon(paths, partial) {
+    const deps = {
+        killProcess: partial?.killProcess ?? defaultKillProcess,
+        readPidFile: partial?.readPidFile ?? defaultReadPidFile,
+        unlinkSocket: partial?.unlinkSocket ?? defaultUnlinkSocket,
+        unlinkLockFile: partial?.unlinkLockFile ?? defaultUnlinkLockFile,
+        sleep: partial?.sleep ?? defaultSleep,
+        now: partial?.now ?? Date.now,
+    };
+    const cleanup = () => {
+        deps.unlinkSocket(paths.socketPath);
+        deps.unlinkLockFile(paths.lockFile);
+    };
+    const pid = deps.readPidFile(paths.pidFile);
+    if (pid === null) {
+        cleanup();
+        return { outcome: "no-pidfile", pid: null };
+    }
+    if (!deps.killProcess(pid, 0)) {
+        cleanup();
+        return { outcome: "already-dead", pid };
+    }
+    deps.killProcess(pid, "SIGTERM");
+    const sigtermDeadline = deps.now() + SIGTERM_TIMEOUT_MS;
+    while (deps.now() < sigtermDeadline) {
+        if (!deps.killProcess(pid, 0)) {
+            cleanup();
+            return { outcome: "stopped", pid };
+        }
+        await deps.sleep(POLL_INTERVAL_MS);
+    }
+    deps.killProcess(pid, "SIGKILL");
+    const sigkillDeadline = deps.now() + SIGKILL_TIMEOUT_MS;
+    while (deps.now() < sigkillDeadline) {
+        if (!deps.killProcess(pid, 0)) {
+            cleanup();
+            return { outcome: "killed-after-timeout", pid };
+        }
+        await deps.sleep(POLL_INTERVAL_MS);
+    }
+    // Surviving SIGKILL is the abort signal for host.ts, but we still
+    // sweep socket + lockfile so a manual `parasor pty-host stop --force`
+    // afterward does not need to break a stale lock too.
+    cleanup();
+    return { outcome: "still-alive", pid };
+}
+//# sourceMappingURL=terminate-daemon.js.map

package/server/pty/host-daemon/terminate-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminate-daemon.js","sourceRoot":"","sources":["../../../src/pty/host-daemon/terminate-daemon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGvE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAuB5B,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,MAA0B;IACjE,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;IACjF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkB,EAClB,OAAsC;IAEtC,MAAM,IAAI,GAAwB;QAChC,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,kBAAkB;QACvD,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,kBAAkB;QACvD,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,mBAAmB;QAC1D,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,qBAAqB;QAChE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,YAAY;QACrC,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG;KAC9B,CAAC;IACF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,CAAC;IACD,kEAAkE;IAClE,sEAAsE;IACtE,qDAAqD;IACrD,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;AACzC,CAAC"}

package/server/pty/host-protocol/frames.d.ts

@@ -0,0 +1,110 @@
+export declare const FRAME_HEADER_BYTES: number;
+/**
+ * Hard cap on payload size. Defends against a malformed/hostile sender
+ * advertising a huge `len` and forcing the peer to allocate. 16 MiB is
+ * far above any legitimate frame (the largest realistic payload is a
+ * scrollback snapshot, which is line-segmented and typically <1 MiB).
+ */
+export declare const MAX_PAYLOAD_BYTES: number;
+export declare const FrameType: {
+    readonly HELLO: 1;
+    readonly HELLO_ACK: 2;
+    readonly NACK: 3;
+    readonly CREATE_REQ: 16;
+    readonly CREATE_ACK: 17;
+    readonly RESTART_REQ: 18;
+    readonly RESTART_ACK: 19;
+    readonly DISPOSE_REQ: 20;
+    readonly DISPOSE_ACK: 21;
+    readonly DISPOSE_ALL_REQ: 22;
+    readonly DISPOSE_ALL_ACK: 23;
+    readonly SHUTDOWN_ALL_REQ: 24;
+    readonly SHUTDOWN_ALL_ACK: 25;
+    readonly INIT_CLIENT_REQ: 26;
+    readonly INIT_CLIENT_ACK: 27;
+    readonly PERSIST_PROJECT_DOMAINS_REQ: 28;
+    readonly PERSIST_PROJECT_DOMAINS_ACK: 29;
+    readonly WRITE: 32;
+    readonly RESIZE: 33;
+    readonly REFRESH: 34;
+    readonly DETACH_CLIENT: 35;
+    readonly SET_TITLE: 36;
+    readonly SET_PINNED: 37;
+    readonly SET_PTY_ENV: 38;
+    readonly PAUSE_OUTPUT: 39;
+    readonly RESUME_OUTPUT: 40;
+    readonly DATA: 48;
+    readonly SESSION_UPDATE: 49;
+    readonly SESSION_LIST: 50;
+    readonly SESSION_EXIT: 51;
+    readonly SESSION_INPUT: 52;
+};
+export type FrameTypeValue = (typeof FrameType)[keyof typeof FrameType];
+/**
+ * Stream-payload frames carry session-routed binary data. Format:
+ *   `[sessionIdLen:u8][sessionId:utf8][raw bytes]`
+ *
+ * Avoids JSON+base64 (~33% inflation) and UTF-8 boundary corruption on
+ * partial writes. Used by WRITE / DATA / SESSION_INPUT -- every other
+ * frame type carries a JSON payload (see `messages.ts`).
+ */
+export declare const STREAM_FRAME_TYPES: ReadonlySet<number>;
+/**
+ * Generation-tagged stream payload (PTY generation gate). Wire format:
+ *   `[sessionIdLen:u8][sessionId:utf8][generation:u32 BE][raw bytes]`
+ *
+ * Used by both directions of the auto-resume race fix:
+ * - WRITE (server -> daemon): `generation` tags the PTY generation the
+ *   client believes is current. Daemon drops on mismatch.
+ * - DATA (daemon -> server): `generation` tags the PTY generation that
+ *   produced this OUTPUT batch. Server forwards to the WS client so
+ *   the client knows which generation to echo back on subsequent
+ *   INPUT.
+ *
+ * Kept separate from `encodeStreamPayload` because SESSION_INPUT does
+ * not need a generation tag -- it is a server-side echo for hooks
+ * (osc7 / port-detect) and never feeds back into the input gate.
+ */
+export declare const STREAM_GENERATION_BYTES = 4;
+export declare function encodeGenerationStreamPayload(sessionId: string, data: Buffer, generation: number): Buffer;
+export declare function decodeGenerationStreamPayload(payload: Buffer): {
+    sessionId: string;
+    generation: number;
+    data: Buffer;
+};
+export declare function encodeStreamPayload(sessionId: string, data: Buffer): Buffer;
+export declare function decodeStreamPayload(payload: Buffer): {
+    sessionId: string;
+    data: Buffer;
+};
+export interface Frame {
+    type: number;
+    connectionId: number;
+    generation: bigint;
+    requestId: number;
+    payload: Buffer;
+}
+export declare class FrameError extends Error {
+    readonly code: "FRAME_TOO_LARGE" | "FRAME_INVALID";
+    constructor(code: "FRAME_TOO_LARGE" | "FRAME_INVALID", message: string);
+}
+export declare function encodeFrame(frame: Frame): Buffer;
+/**
+ * Stream-safe frame decoder. Push raw chunks as they arrive on the
+ * socket; the parser yields zero or more complete frames per push and
+ * keeps any trailing partial frame buffered for the next push.
+ *
+ * Throws `FrameError("FRAME_TOO_LARGE")` synchronously from `push()` if
+ * a peer advertises a length above the cap -- caller MUST close the
+ * connection rather than continue draining the buffer.
+ */
+export declare class FrameParser {
+    private chunks;
+    private size;
+    push(chunk: Buffer): Frame[];
+    /** Bytes currently buffered (partial/unparsed). Useful for diagnostics. */
+    bufferedBytes(): number;
+    private takeOne;
+    private materialize;
+}
+//# sourceMappingURL=frames.d.ts.map

package/server/pty/host-protocol/frames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../../src/pty/host-protocol/frames.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,kBAAkB,QAAgB,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAclD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CZ,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAIjD,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,MAAM,CAgBR;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAoBA;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAa3E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,CAiBA;AAED,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,UAAW,SAAQ,KAAK;aAEjB,IAAI,EAAE,iBAAiB,GAAG,eAAe;gBAAzC,IAAI,EAAE,iBAAiB,GAAG,eAAe,EACzD,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAqChD;AAED;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,IAAI,CAAK;IAEjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE;IAa5B,2EAA2E;IAC3E,aAAa,IAAI,MAAM;IAIvB,OAAO,CAAC,OAAO;IAmCf,OAAO,CAAC,WAAW;CAMpB"}

package/server/pty/host-protocol/frames.js

@@ -0,0 +1,255 @@
+/*
+ * Wire frame format for the PtyHost daemon IPC.
+ *
+ *   [len:u32be][type:u8][connectionId:u32be][generation:u64be][requestId:u32be][payload]
+ *
+ * `len` covers everything after itself (type + connectionId + generation +
+ * requestId + payload). One TCP/Unix-socket recv may deliver any number
+ * of bytes -- fewer than one frame, exactly one, or several plus a partial
+ * tail. `FrameParser` buffers raw chunks and yields whole frames only.
+ *
+ * The envelope is fixed for every frame type. HELLO (the first frame on a
+ * fresh connection) uses connectionId=0 / generation=0n / requestId=0
+ * because daemon assigns them in HELLO_ACK; subsequent frames carry the
+ * assigned triple verbatim, which is what  epoch fencing relies on.
+ */
+export const FRAME_HEADER_BYTES = 1 + 4 + 8 + 4; // type + connId + generation + reqId
+/**
+ * Hard cap on payload size. Defends against a malformed/hostile sender
+ * advertising a huge `len` and forcing the peer to allocate. 16 MiB is
+ * far above any legitimate frame (the largest realistic payload is a
+ * scrollback snapshot, which is line-segmented and typically <1 MiB).
+ */
+export const MAX_PAYLOAD_BYTES = 16 * 1024 * 1024;
+/*
+ * Frame type registry. Numbering blocks:
+ *   0x01-0x0F handshake / control
+ *   0x10-0x1F request frames (paired with 0x10|0x01 = ACK pattern below)
+ *   0x20-0x2F fire-and-forget mutators (no ack)
+ *   0x30-0x3F daemon->server one-way events / streams
+ *
+ * Per the ack-semantics decision: only Promise<X>-returning PtyHost
+ * methods get a request/ACK pair. Sync-returning methods (write/resize/
+ * setTitle/setPinned/...) ride on fire-and-forget mutators and rely on
+ * SESSION_UPDATE broadcasts to reconcile the optimistic mirror.
+ */
+export const FrameType = {
+    // 0x01-0x0F handshake / control
+    HELLO: 0x01,
+    HELLO_ACK: 0x02,
+    NACK: 0x03,
+    // 0x10-0x1F request -> ack pairs (request awaits ACK with same requestId)
+    CREATE_REQ: 0x10,
+    CREATE_ACK: 0x11,
+    RESTART_REQ: 0x12,
+    RESTART_ACK: 0x13,
+    DISPOSE_REQ: 0x14,
+    DISPOSE_ACK: 0x15,
+    DISPOSE_ALL_REQ: 0x16,
+    DISPOSE_ALL_ACK: 0x17,
+    SHUTDOWN_ALL_REQ: 0x18, // Remote: detach-only (by design). Daemon does NOT kill sessions.
+    SHUTDOWN_ALL_ACK: 0x19,
+    INIT_CLIENT_REQ: 0x1a,
+    INIT_CLIENT_ACK: 0x1b,
+    // daemon state ownership -- server forwards project-domain snapshot for daemon to persist
+    // (single-writer-of-state.json invariant). Daemon adopts via
+    // internalMutate + flush; ACK gates on persistence success.
+    PERSIST_PROJECT_DOMAINS_REQ: 0x1c,
+    PERSIST_PROJECT_DOMAINS_ACK: 0x1d,
+    // 0x20-0x2F fire-and-forget mutators (caller does not await; epoch fencing only)
+    WRITE: 0x20,
+    RESIZE: 0x21,
+    REFRESH: 0x22,
+    DETACH_CLIENT: 0x23,
+    SET_TITLE: 0x24,
+    SET_PINNED: 0x25,
+    SET_PTY_ENV: 0x26,
+    PAUSE_OUTPUT: 0x27,
+    RESUME_OUTPUT: 0x28,
+    // 0x30-0x3F daemon -> server events (no ack expected)
+    DATA: 0x30,
+    SESSION_UPDATE: 0x31,
+    SESSION_LIST: 0x32,
+    SESSION_EXIT: 0x33,
+    SESSION_INPUT: 0x34, // echo of WRITE input for server hooks (osc7 / port detect)
+};
+/**
+ * Stream-payload frames carry session-routed binary data. Format:
+ *   `[sessionIdLen:u8][sessionId:utf8][raw bytes]`
+ *
+ * Avoids JSON+base64 (~33% inflation) and UTF-8 boundary corruption on
+ * partial writes. Used by WRITE / DATA / SESSION_INPUT -- every other
+ * frame type carries a JSON payload (see `messages.ts`).
+ */
+export const STREAM_FRAME_TYPES = new Set([
+    FrameType.WRITE,
+    FrameType.DATA,
+    FrameType.SESSION_INPUT,
+]);
+/**
+ * Generation-tagged stream payload (PTY generation gate). Wire format:
+ *   `[sessionIdLen:u8][sessionId:utf8][generation:u32 BE][raw bytes]`
+ *
+ * Used by both directions of the auto-resume race fix:
+ * - WRITE (server -> daemon): `generation` tags the PTY generation the
+ *   client believes is current. Daemon drops on mismatch.
+ * - DATA (daemon -> server): `generation` tags the PTY generation that
+ *   produced this OUTPUT batch. Server forwards to the WS client so
+ *   the client knows which generation to echo back on subsequent
+ *   INPUT.
+ *
+ * Kept separate from `encodeStreamPayload` because SESSION_INPUT does
+ * not need a generation tag -- it is a server-side echo for hooks
+ * (osc7 / port-detect) and never feeds back into the input gate.
+ */
+export const STREAM_GENERATION_BYTES = 4;
+export function encodeGenerationStreamPayload(sessionId, data, generation) {
+    const idBuf = Buffer.from(sessionId, "utf8");
+    if (idBuf.length > 0xff) {
+        throw new FrameError("FRAME_INVALID", `sessionId byte length ${idBuf.length} exceeds u8 max 255`);
+    }
+    const out = Buffer.allocUnsafe(1 + idBuf.length + STREAM_GENERATION_BYTES + data.length);
+    out.writeUInt8(idBuf.length, 0);
+    idBuf.copy(out, 1);
+    out.writeUInt32BE(generation >>> 0, 1 + idBuf.length);
+    data.copy(out, 1 + idBuf.length + STREAM_GENERATION_BYTES);
+    return out;
+}
+export function decodeGenerationStreamPayload(payload) {
+    if (payload.length < 1) {
+        throw new FrameError("FRAME_INVALID", "generation stream payload missing sessionIdLen");
+    }
+    const idLen = payload.readUInt8(0);
+    if (payload.length < 1 + idLen + STREAM_GENERATION_BYTES) {
+        throw new FrameError("FRAME_INVALID", `generation stream payload truncated (need 1+${idLen}+${STREAM_GENERATION_BYTES}, got ${payload.length})`);
+    }
+    const sessionId = payload.subarray(1, 1 + idLen).toString("utf8");
+    const generation = payload.readUInt32BE(1 + idLen);
+    const data = Buffer.from(payload.subarray(1 + idLen + STREAM_GENERATION_BYTES));
+    return { sessionId, generation, data };
+}
+export function encodeStreamPayload(sessionId, data) {
+    const idBuf = Buffer.from(sessionId, "utf8");
+    if (idBuf.length > 0xff) {
+        throw new FrameError("FRAME_INVALID", `sessionId byte length ${idBuf.length} exceeds u8 max 255`);
+    }
+    const out = Buffer.allocUnsafe(1 + idBuf.length + data.length);
+    out.writeUInt8(idBuf.length, 0);
+    idBuf.copy(out, 1);
+    data.copy(out, 1 + idBuf.length);
+    return out;
+}
+export function decodeStreamPayload(payload) {
+    if (payload.length < 1) {
+        throw new FrameError("FRAME_INVALID", "stream payload missing sessionIdLen");
+    }
+    const idLen = payload.readUInt8(0);
+    if (payload.length < 1 + idLen) {
+        throw new FrameError("FRAME_INVALID", `stream payload truncated (need 1+${idLen}, got ${payload.length})`);
+    }
+    const sessionId = payload.subarray(1, 1 + idLen).toString("utf8");
+    const data = Buffer.from(payload.subarray(1 + idLen));
+    return { sessionId, data };
+}
+export class FrameError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "FrameError";
+    }
+}
+export function encodeFrame(frame) {
+    if (frame.payload.length > MAX_PAYLOAD_BYTES) {
+        throw new FrameError("FRAME_TOO_LARGE", `payload size ${frame.payload.length} exceeds cap ${MAX_PAYLOAD_BYTES}`);
+    }
+    if (frame.type < 0 || frame.type > 0xff) {
+        throw new FrameError("FRAME_INVALID", `type ${frame.type} out of u8 range`);
+    }
+    if (frame.connectionId < 0 || frame.connectionId > 0xffffffff) {
+        throw new FrameError("FRAME_INVALID", `connectionId ${frame.connectionId} out of u32 range`);
+    }
+    if (frame.generation < 0n || frame.generation > 0xffffffffffffffffn) {
+        throw new FrameError("FRAME_INVALID", `generation ${frame.generation} out of u64 range`);
+    }
+    if (frame.requestId < 0 || frame.requestId > 0xffffffff) {
+        throw new FrameError("FRAME_INVALID", `requestId ${frame.requestId} out of u32 range`);
+    }
+    const totalAfterLen = FRAME_HEADER_BYTES + frame.payload.length;
+    const buf = Buffer.allocUnsafe(4 + totalAfterLen);
+    buf.writeUInt32BE(totalAfterLen, 0);
+    buf.writeUInt8(frame.type, 4);
+    buf.writeUInt32BE(frame.connectionId, 5);
+    buf.writeBigUInt64BE(frame.generation, 9);
+    buf.writeUInt32BE(frame.requestId, 17);
+    frame.payload.copy(buf, 21);
+    return buf;
+}
+/**
+ * Stream-safe frame decoder. Push raw chunks as they arrive on the
+ * socket; the parser yields zero or more complete frames per push and
+ * keeps any trailing partial frame buffered for the next push.
+ *
+ * Throws `FrameError("FRAME_TOO_LARGE")` synchronously from `push()` if
+ * a peer advertises a length above the cap -- caller MUST close the
+ * connection rather than continue draining the buffer.
+ */
+export class FrameParser {
+    chunks = [];
+    size = 0;
+    push(chunk) {
+        if (chunk.length === 0)
+            return [];
+        this.chunks.push(chunk);
+        this.size += chunk.length;
+        const out = [];
+        for (;;) {
+            const frame = this.takeOne();
+            if (!frame)
+                break;
+            out.push(frame);
+        }
+        return out;
+    }
+    /** Bytes currently buffered (partial/unparsed). Useful for diagnostics. */
+    bufferedBytes() {
+        return this.size;
+    }
+    takeOne() {
+        if (this.size < 4)
+            return null;
+        const buf = this.materialize();
+        const totalAfterLen = buf.readUInt32BE(0);
+        if (totalAfterLen < FRAME_HEADER_BYTES) {
+            throw new FrameError("FRAME_INVALID", `len=${totalAfterLen} smaller than header (${FRAME_HEADER_BYTES})`);
+        }
+        if (totalAfterLen - FRAME_HEADER_BYTES > MAX_PAYLOAD_BYTES) {
+            throw new FrameError("FRAME_TOO_LARGE", `payload size ${totalAfterLen - FRAME_HEADER_BYTES} exceeds cap ${MAX_PAYLOAD_BYTES}`);
+        }
+        if (buf.length < 4 + totalAfterLen)
+            return null;
+        const type = buf.readUInt8(4);
+        const connectionId = buf.readUInt32BE(5);
+        const generation = buf.readBigUInt64BE(9);
+        const requestId = buf.readUInt32BE(17);
+        const payload = Buffer.from(buf.subarray(21, 4 + totalAfterLen));
+        const remainder = buf.subarray(4 + totalAfterLen);
+        if (remainder.length > 0) {
+            this.chunks = [Buffer.from(remainder)];
+            this.size = remainder.length;
+        }
+        else {
+            this.chunks = [];
+            this.size = 0;
+        }
+        return { type, connectionId, generation, requestId, payload };
+    }
+    materialize() {
+        if (this.chunks.length === 1)
+            return this.chunks[0];
+        const merged = Buffer.concat(this.chunks, this.size);
+        this.chunks = [merged];
+        return merged;
+    }
+}
+//# sourceMappingURL=frames.js.map

package/server/pty/host-protocol/frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.js","sourceRoot":"","sources":["../../../src/pty/host-protocol/frames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qCAAqC;AAEtF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,gCAAgC;IAChC,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,IAAI;IAEV,0EAA0E;IAC1E,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,IAAI,EAAE,kEAAkE;IAC1F,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,0FAA0F;IAC1F,6DAA6D;IAC7D,4DAA4D;IAC5D,2BAA2B,EAAE,IAAI;IACjC,2BAA2B,EAAE,IAAI;IAEjC,iFAAiF;IACjF,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IAEnB,sDAAsD;IACtD,IAAI,EAAE,IAAI;IACV,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI,EAAE,4DAA4D;CACzE,CAAC;AAIX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS;IACrE,SAAS,CAAC,KAAK;IACf,SAAS,CAAC,IAAI;IACd,SAAS,CAAC,aAAa;CACxB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,IAAY,EACZ,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,yBAAyB,KAAK,CAAC,MAAM,qBAAqB,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAC5B,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAAC,MAAM,CACzD,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,aAAa,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAK3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,uBAAuB,EAAE,CAAC;QACzD,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,+CAA+C,KAAK,IAAI,uBAAuB,SAAS,OAAO,CAAC,MAAM,GAAG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACtB,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,GAAG,uBAAuB,CAAC,CACtD,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,yBAAyB,KAAK,CAAC,MAAM,qBAAqB,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAIjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,oCAAoC,KAAK,SAAS,OAAO,CAAC,MAAM,GAAG,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAUD,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEjB;IADlB,YACkB,IAAyC,EACzD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAqC;QAIzD,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,gBAAgB,KAAK,CAAC,OAAO,CAAC,MAAM,gBAAgB,iBAAiB,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,QAAQ,KAAK,CAAC,IAAI,kBAAkB,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,UAAU,EAAE,CAAC;QAC9D,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,gBAAgB,KAAK,CAAC,YAAY,mBAAmB,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,IAAI,KAAK,CAAC,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,cAAc,KAAK,CAAC,UAAU,mBAAmB,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,aAAa,KAAK,CAAC,SAAS,mBAAmB,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;IAClD,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACpC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACd,MAAM,GAAa,EAAE,CAAC;IACtB,IAAI,GAAG,CAAC,CAAC;IAEjB,IAAI,CAAC,KAAa;QAChB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,GAAG,GAAY,EAAE,CAAC;QACxB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,MAAM;YAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,2EAA2E;IAC3E,aAAa;QACX,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,UAAU,CAClB,eAAe,EACf,OAAO,aAAa,yBAAyB,kBAAkB,GAAG,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,GAAG,kBAAkB,GAAG,iBAAiB,EAAE,CAAC;YAC3D,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,gBAAgB,aAAa,GAAG,kBAAkB,gBAAgB,iBAAiB,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,aAAa;YAAE,OAAO,IAAI,CAAC;QAEhD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;QAEjE,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChE,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}