pi-daddy 0.28.0 → 0.32.0

package/dist/producer-ipc.d.ts

@@ -1,55 +0,0 @@
-import { Readable } from "node:stream";
-import { type ResourcePermit, type openResourceBudget } from "./resource-budget.ts";
-import { type ChildRunResult } from "./run-child.ts";
-import { type ProducerIpcBinding, type ProducerIpcReferences } from "./producer-ipc-contract.ts";
-export { producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, PRODUCER_IPC_LIMITS, type ProducerIpcBinding, type ProducerIpcReferences } from "./producer-ipc-contract.ts";
-type Owner = ReturnType<typeof openResourceBudget>;
-export interface ProducerIpcContext {
-    readonly binding: Readonly<ProducerIpcBinding>;
-    readonly signal: AbortSignal;
-}
-export interface ProducerIpcHost {
-    readonly binding: Readonly<ProducerIpcBinding>;
-}
-interface HostState {
-    owner: Owner;
-    exchange: (frames: Readable, context: ProducerIpcContext) => Promise<ProducerIpcReferences>;
-    used: boolean;
-}
-/** Trusted host-only capability constructor, NOT approval/entitlement discovery. */
-export declare function createProducerIpcHost(input: {
-    owner: Owner;
-    binding: ProducerIpcBinding;
-    exchange: HostState["exchange"];
-}): ProducerIpcHost;
-export interface ProducerIpcSnapshot {
-    readonly binding: Readonly<ProducerIpcBinding>;
-    readonly outcome: "pending" | "completed" | "failed" | "cancelled" | "timed-out";
-    readonly reason: null | "ADMISSION_FAILED" | "RUNTIME_FAILED" | "CHILD_FAILED" | "FRAME_INVALID" | "HOST_FAILED" | "CANCELLED" | "DEADLINE";
-    readonly child: Readonly<ChildRunResult> | null;
-    readonly childState: "pending" | "not-spawned" | "settled" | "unknown";
-    readonly hostState: "not-called" | "pending" | "acknowledged" | "failed";
-    readonly frameSha256: string | null;
-    readonly references: Readonly<ProducerIpcReferences> | null;
-    readonly settlement: "pending" | "acknowledged" | "failed-or-unknown";
-    readonly acceptance: "not-assessed";
-}
-export interface ProducerIpcRun {
-    readonly started: Promise<"spawned" | "not-spawned">;
-    readonly readiness: Promise<"frame-ready" | "not-ready">;
-    readonly child: Promise<ChildRunResult | null>;
-    /** Bounded effect observation, NOT a resource-release/child-settlement receipt. */
-    readonly result: Promise<ProducerIpcSnapshot>;
-    /** May remain pending if original child, host or required accounting does not acknowledge. */
-    readonly completion: Promise<ProducerIpcSnapshot>;
-    inspect(): ProducerIpcSnapshot;
-}
-export declare function startProducerIpc(input: {
-    owner: Owner;
-    permit: ResourcePermit;
-    binding: ProducerIpcBinding;
-    host: ProducerIpcHost;
-    signal: AbortSignal;
-    timeoutMs: number;
-}): Promise<ProducerIpcRun>;
-//# sourceMappingURL=producer-ipc.d.ts.map

package/dist/producer-ipc.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"producer-ipc.d.ts","sourceRoot":"","sources":["../src/producer-ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAuB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAA6I,KAAK,kBAAkB,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC5O,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACvL,KAAK,KAAK,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnD,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,OAAO,EAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAC,WAAW,CAAA;CAAE;AAClH,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;CAAE;AAClF,UAAU,SAAS;IAAG,KAAK,EAAC,KAAK,CAAC;IAAC,QAAQ,EAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,kBAAkB,KAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAAC,IAAI,EAAC,OAAO,CAAA;CAAE;AAExI,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,KAAK,EAAC;IAAC,KAAK,EAAC,KAAK,CAAC;IAAA,OAAO,EAAC,kBAAkB,CAAC;IAAA,QAAQ,EAAC,SAAS,CAAC,UAAU,CAAC,CAAA;CAAC,GAAE,eAAe,CAKnI;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAC,SAAS,GAAC,WAAW,GAAC,QAAQ,GAAC,WAAW,GAAC,WAAW,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAC,IAAI,GAAC,kBAAkB,GAAC,gBAAgB,GAAC,cAAc,GAAC,eAAe,GAAC,aAAa,GAAC,WAAW,GAAC,UAAU,CAAC;IAC7H,QAAQ,CAAC,KAAK,EAAC,QAAQ,CAAC,cAAc,CAAC,GAAC,IAAI,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAC,SAAS,GAAC,aAAa,GAAC,SAAS,GAAC,SAAS,CAAC;IAChE,QAAQ,CAAC,SAAS,EAAC,YAAY,GAAC,SAAS,GAAC,cAAc,GAAC,QAAQ,CAAC;IAClE,QAAQ,CAAC,WAAW,EAAC,MAAM,GAAC,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAC,IAAI,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAC,SAAS,GAAC,cAAc,GAAC,mBAAmB,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAC,cAAc,CAAC;CACpC;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAC,OAAO,CAAC,SAAS,GAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAC,OAAO,CAAC,aAAa,GAAC,WAAW,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAC,OAAO,CAAC,cAAc,GAAC,IAAI,CAAC,CAAC;IAC5C,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7C,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,OAAO,IAAG,mBAAmB,CAAC;CAC/B;AAID,wBAAsB,gBAAgB,CAAC,KAAK,EAAC;IAAC,KAAK,EAAC,KAAK,CAAC;IAAA,MAAM,EAAC,cAAc,CAAC;IAAA,OAAO,EAAC,kBAAkB,CAAC;IAAA,IAAI,EAAC,eAAe,CAAC;IAAA,MAAM,EAAC,WAAW,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,GAAE,OAAO,CAAC,cAAc,CAAC,CA6D5L"}

package/dist/producer-ipc.js

@@ -1,143 +0,0 @@
-import { Readable } from "node:stream";
-import { createHash } from "node:crypto";
-import { performance } from "node:perf_hooks";
-import { claimResourcePermit } from "./resource-budget.js";
-import { digestRuntime, digestNamespaceArgs } from "./effect-profile-runtime.js";
-import { runChild } from "./run-child.js";
-import { ipcShape, ipcReferences, producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, producerIpcFrame, PRODUCER_IPC_LIMITS as LIMITS } from "./producer-ipc-contract.js";
-export { producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, PRODUCER_IPC_LIMITS } from "./producer-ipc-contract.js";
-const hosts = new WeakMap();
-/** Trusted host-only capability constructor, NOT approval/entitlement discovery. */
-export function createProducerIpcHost(input) {
-    ipcShape(input, ["owner", "binding", "exchange"]);
-    if (typeof input.exchange !== "function")
-        throw new TypeError("original host exchange required");
-    const port = Object.freeze({ binding: producerIpcBinding(input.binding) });
-    hosts.set(port, { owner: input.owner, exchange: input.exchange, used: false });
-    return port;
-}
-// This is a separate fixed model-free emitter, not a new operation on linux-bwrap-digest-v1.
-const WORKER = "/* producer-ipc-v1 */process.stdout.write(Buffer.from(process.argv[1],'base64'));";
-function deferred() { let resolve; const promise = new Promise(r => { resolve = r; }); return { promise, resolve }; }
-export async function startProducerIpc(input) {
-    ipcShape(input, ["owner", "permit", "binding", "host", "signal", "timeoutMs"]);
-    const binding = producerIpcBinding(input.binding), host = hosts.get(input.host);
-    if (!host || host.used || host.owner !== input.owner || producerIpcBindingDigest(input.host.binding) !== producerIpcBindingDigest(binding))
-        throw Error("original unused host with exact owner/charter/invocation required");
-    if (!(input.signal instanceof AbortSignal) || !Number.isSafeInteger(input.timeoutMs) || input.timeoutMs < 50 || input.timeoutMs > LIMITS.maxElapsedMs)
-        throw new TypeError("bounded original cancellation/deadline required");
-    const permit = claimResourcePermit(input.owner, input.permit, binding.budgetDigest, producerIpcDemand(binding));
-    host.used = true;
-    const caller = input.signal, deadline = performance.now() + input.timeoutMs, abort = new AbortController(), signal = AbortSignal.any([caller, abort.signal]);
-    const started = deferred(), readiness = deferred(), result = deferred();
-    let outcome = "pending", reason = null, child = null;
-    let childState = "pending", hostState = "not-called", settlement = "pending";
-    let references = null, frameSha256 = null, frames, timer;
-    const inspect = () => Object.freeze({ binding, outcome, reason, child: child ? Object.freeze({ ...child }) : null, childState, hostState, frameSha256, references, settlement, acceptance: "not-assessed" });
-    const latch = (next, why) => {
-        if (outcome !== "pending")
-            return;
-        outcome = next;
-        reason = why;
-        clearTimeout(timer);
-        caller.removeEventListener("abort", cancel);
-        result.resolve(inspect());
-    };
-    const cancel = () => { latch("cancelled", "CANCELLED"); abort.abort(); frames?.destroy(); };
-    const expire = () => { latch("timed-out", "DEADLINE"); abort.abort(); frames?.destroy(); };
-    const current = () => { if (outcome !== "pending")
-        return false; if (caller.aborted)
-        cancel();
-    else if (performance.now() >= deadline)
-        expire(); return outcome === "pending"; };
-    timer = setTimeout(expire, input.timeoutMs);
-    caller.addEventListener("abort", cancel, { once: true });
-    if (caller.aborted)
-        cancel();
-    let stdout = Buffer.alloc(0), overflow = false, eof = false, spawned = false;
-    const childPromise = (async () => {
-        try {
-            await permit.admission;
-        }
-        catch {
-            latch("failed", "ADMISSION_FAILED");
-            return null;
-        }
-        if (!current())
-            return null;
-        try {
-            const runtime = await digestRuntime();
-            if (!current())
-                return null;
-            return Object.freeze(await runChild({ command: "/usr/bin/bwrap", args: digestNamespaceArgs(runtime, WORKER, [producerIpcFrame(binding).toString("base64")]), env: {}, cwd: "/", signal,
-                timeoutMs: LIMITS.childMs, killGraceMs: LIMITS.graceMs, hardDeadlineAt: Date.now() + LIMITS.childMs + 500, maxOutputBytes: LIMITS.frameBytes,
-                onSpawn: () => { spawned = true; started.resolve("spawned"); }, onStreamEnd: s => { if (s === "stdout")
-                    eof = true; },
-                onObservation: (s, b) => { if (s !== "stdout" || overflow)
-                    return; if (stdout.length + b.length > LIMITS.frameBytes) {
-                    overflow = true;
-                    return;
-                } stdout = Buffer.concat([stdout, Buffer.from(b)]); } }));
-        }
-        catch {
-            latch("failed", "RUNTIME_FAILED");
-            return null;
-        }
-    })();
-    const completion = (async () => {
-        child = await childPromise;
-        childState = spawned ? (child ? "settled" : "unknown") : "not-spawned";
-        started.resolve("not-spawned");
-        if (childState === "unknown") {
-            readiness.resolve("not-ready");
-            settlement = "failed-or-unknown";
-            return inspect();
-        }
-        if (current()) {
-            if (!child || child.code !== 0 || child.aborted || child.timedOut || child.truncated || child.spawnError || child.signal)
-                latch("failed", "CHILD_FAILED");
-            else if (!eof || overflow || !stdout.equals(producerIpcFrame(binding)))
-                latch("failed", "FRAME_INVALID");
-            else {
-                frameSha256 = createHash("sha256").update(stdout).digest("hex");
-                readiness.resolve("frame-ready");
-                // Replay ONLY exact bytes from the original completed pipe; never reconstruct a host-authored frame.
-                frames = Readable.from([Buffer.from(stdout)]);
-                try {
-                    if (current()) {
-                        hostState = "pending";
-                        references = ipcReferences(await host.exchange(frames, Object.freeze({ binding, signal })));
-                        if (!frames.readableEnded)
-                            throw Error("original host frame not consumed");
-                        hostState = "acknowledged";
-                        if (current())
-                            latch("completed", null);
-                    }
-                }
-                catch {
-                    hostState = "failed";
-                    if (current())
-                        latch("failed", "HOST_FAILED");
-                }
-                finally {
-                    frames.destroy();
-                }
-            }
-        }
-        readiness.resolve("not-ready");
-        // Observation timeout never reaches here until the ORIGINAL child and invoked host have acknowledged.
-        const terminal = inspect().outcome;
-        try {
-            await permit.settle(terminal === "completed" ? "completed" : terminal === "cancelled" ? "cancelled" : "failed");
-            settlement = "acknowledged";
-        }
-        catch {
-            settlement = "failed-or-unknown";
-        }
-        clearTimeout(timer);
-        caller.removeEventListener("abort", cancel);
-        return inspect();
-    })();
-    return Object.freeze({ started: started.promise, readiness: readiness.promise, child: childPromise, result: result.promise, completion, inspect });
-}
-//# sourceMappingURL=producer-ipc.js.map

package/dist/producer-ipc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"producer-ipc.js","sourceRoot":"","sources":["../src/producer-ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAgD,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAuB,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,IAAI,MAAM,EAAuD,MAAM,4BAA4B,CAAC;AAC5O,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,mBAAmB,EAAuD,MAAM,4BAA4B,CAAC;AAKvL,MAAM,KAAK,GAAG,IAAI,OAAO,EAA6B,CAAC;AACvD,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,KAA6E;IACjH,QAAQ,CAAC,KAAK,EAAC,CAAC,OAAO,EAAC,SAAS,EAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,IAAG,OAAO,KAAK,CAAC,QAAQ,KAAG,UAAU;QAAC,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC;IACtE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AACrF,CAAC;AAuBD,6FAA6F;AAC7F,MAAM,MAAM,GAAG,mFAAmF,CAAC;AACnG,SAAS,QAAQ,KAAQ,IAAI,OAAwB,CAAC,CAAA,MAAM,OAAO,GAAC,IAAI,OAAO,CAAI,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,CAAC,CAAC,CAAC;AAC/H,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA6H;IAClK,QAAQ,CAAC,KAAK,EAAC,CAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,WAAW,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,GAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAG,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,IAAI,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAG,wBAAwB,CAAC,OAAO,CAAC;QAAC,MAAM,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvN,IAAG,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAC,EAAE,IAAI,KAAK,CAAC,SAAS,GAAC,MAAM,CAAC,YAAY;QAAC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACxN,MAAM,MAAM,GAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,CAAC,YAAY,EAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAAA,IAAI,CAAC,IAAI,GAAC,IAAI,CAAC;IAC1H,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAC,WAAW,CAAC,GAAG,EAAE,GAAC,KAAK,CAAC,SAAS,EAAE,KAAK,GAAC,IAAI,eAAe,EAAE,EAAE,MAAM,GAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAClJ,MAAM,OAAO,GAAC,QAAQ,EAA2B,EAAE,SAAS,GAAC,QAAQ,EAA6B,EAAE,MAAM,GAAC,QAAQ,EAAuB,CAAC;IAC3I,IAAI,OAAO,GAAgC,SAAS,EAAE,MAAM,GAA+B,IAAI,EAAE,KAAK,GAAqB,IAAI,CAAC;IAChI,IAAI,UAAU,GAAmC,SAAS,EAAC,SAAS,GAAkC,YAAY,EAAC,UAAU,GAAmC,SAAS,CAAC;IAC1K,IAAI,UAAU,GAAsC,IAAI,EAAC,WAAW,GAAa,IAAI,EAAC,MAAyB,EAAC,KAA8B,CAAC;IAC/I,MAAM,OAAO,GAAC,GAAsB,EAAE,CAAA,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,KAAK,EAAC,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,WAAW,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,cAAc,EAAC,CAAC,CAAC;IAC1M,MAAM,KAAK,GAAC,CAAC,IAAsD,EAAC,GAAiC,EAAC,EAAE;QACtG,IAAG,OAAO,KAAG,SAAS;YAAC,OAAO;QAAA,OAAO,GAAC,IAAI,CAAC;QAAA,MAAM,GAAC,GAAG,CAAC;QAAA,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QAAA,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,GAAE,EAAE,GAAC,KAAK,CAAC,WAAW,EAAC,WAAW,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;IACnF,MAAM,MAAM,GAAC,GAAE,EAAE,GAAC,KAAK,CAAC,WAAW,EAAC,UAAU,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;IAClF,MAAM,OAAO,GAAC,GAAE,EAAE,GAAC,IAAG,OAAO,KAAG,SAAS;QAAC,OAAO,KAAK,CAAC,CAAA,IAAG,MAAM,CAAC,OAAO;QAAC,MAAM,EAAE,CAAC;SAAK,IAAG,WAAW,CAAC,GAAG,EAAE,IAAE,QAAQ;QAAC,MAAM,EAAE,CAAC,CAAA,OAAO,OAAO,KAAG,SAAS,CAAC,CAAA,CAAC,CAAC;IAC5J,KAAK,GAAC,UAAU,CAAC,MAAM,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,OAAO;QAAC,MAAM,EAAE,CAAC;IACxH,IAAI,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,QAAQ,GAAC,KAAK,EAAC,GAAG,GAAC,KAAK,EAAC,OAAO,GAAC,KAAK,CAAC;IAClE,MAAM,YAAY,GAAC,CAAC,KAAK,IAAE,EAAE;QAC3B,IAAI,CAAC;YAAA,MAAM,MAAM,CAAC,SAAS,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,KAAK,CAAC,QAAQ,EAAC,kBAAkB,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACrF,IAAG,CAAC,OAAO,EAAE;YAAC,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAC,MAAM,aAAa,EAAE,CAAC;YACpC,IAAG,CAAC,OAAO,EAAE;gBAAC,OAAO,IAAI,CAAC;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAC,OAAO,EAAC,gBAAgB,EAAC,IAAI,EAAC,mBAAmB,CAAC,OAAO,EAAC,MAAM,EAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,GAAG,EAAC,MAAM;gBACzK,SAAS,EAAC,MAAM,CAAC,OAAO,EAAC,WAAW,EAAC,MAAM,CAAC,OAAO,EAAC,cAAc,EAAC,IAAI,CAAC,GAAG,EAAE,GAAC,MAAM,CAAC,OAAO,GAAC,GAAG,EAAC,cAAc,EAAC,MAAM,CAAC,UAAU;gBACjI,OAAO,EAAC,GAAE,EAAE,GAAC,OAAO,GAAC,IAAI,CAAC,CAAA,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,EAAC,WAAW,EAAC,CAAC,CAAA,EAAE,GAAC,IAAG,CAAC,KAAG,QAAQ;oBAAC,GAAG,GAAC,IAAI,CAAC,CAAA,CAAC;gBACjG,aAAa,EAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,GAAC,IAAG,CAAC,KAAG,QAAQ,IAAE,QAAQ;oBAAC,OAAO,CAAA,IAAG,MAAM,CAAC,MAAM,GAAC,CAAC,CAAC,MAAM,GAAC,MAAM,CAAC,UAAU,EAAC,CAAC;oBAAA,QAAQ,GAAC,IAAI,CAAC;oBAAA,OAAO;gBAAA,CAAC,CAAA,MAAM,GAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC,CAAC;QACjL,CAAC;QAAC,MAAM,CAAC;YAAA,KAAK,CAAC,QAAQ,EAAC,gBAAgB,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;IACzD,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,UAAU,GAAC,CAAC,KAAK,IAAE,EAAE;QACzB,KAAK,GAAC,MAAM,YAAY,CAAC;QAAA,UAAU,GAAC,OAAO,CAAA,CAAC,CAAA,CAAC,KAAK,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC,CAAA,aAAa,CAAC;QAAA,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACrH,IAAG,UAAU,KAAG,SAAS,EAAC,CAAC;YAAA,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAA,UAAU,GAAC,mBAAmB,CAAC;YAAA,OAAO,OAAO,EAAE,CAAC;QAAA,CAAC;QAC3G,IAAG,OAAO,EAAE,EAAE,CAAC;YACb,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAG,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM;gBAAC,KAAK,CAAC,QAAQ,EAAC,cAAc,CAAC,CAAC;iBAChJ,IAAG,CAAC,GAAG,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAAC,KAAK,CAAC,QAAQ,EAAC,eAAe,CAAC,CAAC;iBACjG,CAAC;gBACJ,WAAW,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAA,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC/F,qGAAqG;gBACrG,MAAM,GAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5C,IAAI,CAAC;oBACH,IAAG,OAAO,EAAE,EAAE,CAAC;wBACb,SAAS,GAAC,SAAS,CAAC;wBAAA,UAAU,GAAC,aAAa,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAC;wBAC1G,IAAG,CAAC,MAAM,CAAC,aAAa;4BAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;wBACzE,SAAS,GAAC,cAAc,CAAC;wBAAA,IAAG,OAAO,EAAE;4BAAC,KAAK,CAAC,WAAW,EAAC,IAAI,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC;oBAAA,SAAS,GAAC,QAAQ,CAAC;oBAAA,IAAG,OAAO,EAAE;wBAAC,KAAK,CAAC,QAAQ,EAAC,aAAa,CAAC,CAAC;gBAAA,CAAC;wBAC9D,CAAC;oBAAA,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAA,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,sGAAsG;QACtG,MAAM,QAAQ,GAAC,OAAO,EAAE,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC;YAAA,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAG,WAAW,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,KAAG,WAAW,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,CAAC,CAAC;YAAA,UAAU,GAAC,cAAc,CAAC;QAAA,CAAC;QACpI,MAAM,CAAC;YAAA,UAAU,GAAC,mBAAmB,CAAC;QAAA,CAAC;QACvC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QAAA,OAAO,OAAO,EAAE,CAAC;IAClF,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,SAAS,EAAC,SAAS,CAAC,OAAO,EAAC,KAAK,EAAC,YAAY,EAAC,MAAM,EAAC,MAAM,CAAC,OAAO,EAAC,UAAU,EAAC,OAAO,EAAC,CAAC,CAAC;AAC1I,CAAC"}

package/dist/product-files.d.ts

@@ -1,6 +0,0 @@
-export declare const privateDirectory: (path: string) => Promise<void>;
-/** Pi's shared resource directory may be searchable; retained text files/subdirectories remain owner-only. */
-export declare const projectProductDirectory: (path: string) => Promise<void>;
-export declare function readProductJson(path: string, limit?: number): Promise<unknown | null>;
-export declare function writeProductJson(path: string, value: unknown, replace?: boolean): Promise<void>;
-//# sourceMappingURL=product-files.d.ts.map

package/dist/product-files.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"product-files.d.ts","sourceRoot":"","sources":["../src/product-files.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,gBAAgB,GAAI,MAAK,MAAM,kBAAyB,CAAC;AACtE,8GAA8G;AAC9G,eAAO,MAAM,uBAAuB,GAAI,MAAK,MAAM,kBAA0B,CAAC;AAQ9E,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAQ/F;AACD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnG"}

package/dist/product-files.js

@@ -1,55 +0,0 @@
-import { lstat, mkdir, realpath, rename, rm, writeFile } from "node:fs/promises";
-import { basename, dirname, resolve } from "node:path";
-import { randomUUID } from "node:crypto";
-import { readDailySnapshot } from "./daily-view-input.js";
-import { parseRetentionJson } from "./retention-json.js";
-import { runWithFinalizers } from "./finalization.js";
-export const privateDirectory = (path) => directory(path, true);
-/** Pi's shared resource directory may be searchable; retained text files/subdirectories remain owner-only. */
-export const projectProductDirectory = (path) => directory(path, false);
-async function directory(path, ownerOnly) {
-    if (resolve(path) !== path)
-        throw Error("absolute canonical product directory required");
-    try {
-        await mkdir(path, { mode: 0o700 });
-    }
-    catch (error) {
-        if (error.code !== "EEXIST")
-            throw error;
-    }
-    const state = await lstat(path);
-    if (!state.isDirectory() || state.isSymbolicLink() || state.mode & (ownerOnly ? 0o077 : 0o022) || state.uid !== process.getuid?.() || await realpath(path) !== path)
-        throw Error(`owned non-writable${ownerOnly ? " private" : ""} directory required: ${path}; existing permissions were not changed`);
-}
-export async function readProductJson(path, limit = 128 * 1024) {
-    try {
-        const state = await lstat(path);
-        if (!state.isFile() || state.isSymbolicLink() || state.mode & 0o077 || state.uid !== process.getuid?.() || state.nlink !== 1 || await realpath(path) !== path)
-            throw Error(`private regular product file required: ${path}`);
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return null;
-        throw error;
-    }
-    const snapshot = await readDailySnapshot(path, limit);
-    if (snapshot.status !== "read")
-        throw Error(`product file unavailable: ${path}`);
-    const state = await lstat(path);
-    if (state.mode & 0o077 || state.uid !== process.getuid?.() || state.nlink !== 1 || await realpath(path) !== path)
-        throw Error(`private regular product file required: ${path}`);
-    return parseRetentionJson(new TextDecoder("utf-8", { fatal: true }).decode(snapshot.bytes), limit);
-}
-export async function writeProductJson(path, value, replace = false) {
-    await (basename(dirname(path)) === ".pi" ? projectProductDirectory : privateDirectory)(dirname(path));
-    const text = JSON.stringify(value, null, 2) + "\n";
-    if (Buffer.byteLength(text) > 128 * 1024)
-        throw Error("product file bound exceeded");
-    if (!replace) {
-        await writeFile(path, text, { mode: 0o600, flag: "wx" });
-        return;
-    }
-    const temporary = `${path}.${randomUUID()}.tmp`;
-    await runWithFinalizers(async () => { await writeFile(temporary, text, { mode: 0o600, flag: "wx" }); await rename(temporary, path); }, [{ label: "product temporary cleanup", run: async () => { await rm(temporary, { force: true }); } }]);
-}
-//# sourceMappingURL=product-files.js.map

package/dist/product-files.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"product-files.js","sourceRoot":"","sources":["../src/product-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;AACtE,8GAA8G;AAC9G,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;AAC9E,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB;IACtD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACzF,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,qBAAqB,SAAS,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,EAAE,wBAAwB,IAAI,yCAAyC,CAAC,CAAC;AAClS,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAK,GAAG,GAAG,GAAG,IAAI;IACpE,IAAI,CAAC;QAAC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACtQ,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IAChL,OAAO,kBAAkB,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACrG,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc,EAAE,OAAO,GAAG,KAAK;IAClF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAG,KAAK,CAAA,CAAC,CAAA,uBAAuB,CAAA,CAAC,CAAA,gBAAgB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI;QAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrF,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACnF,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,iBAAiB,CAAC,KAAK,IAAE,EAAE,GAAC,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,EAAC,KAAK,EAAC,2BAA2B,EAAC,GAAG,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,EAAE,CAAC,SAAS,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC,CAAC;AAC3N,CAAC"}

package/dist/progress.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../src/progress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,+GAA+G;AAC/G,eAAO,MAAM,UAAU,IAAI,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,MAAM,CAAC;AAQlC,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,WAAW,IAAI;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wEAAwE;IACxE,IAAI,EAAE,OAAO,CAAC;CACf;AAED,eAAO,MAAM,SAAS,EAAE,IAAiC,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;CACZ;AAaD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAsB1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAEjD;AAmBD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAmBhH;AAED,gHAAgH;AAChH,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CA0BpG"}

package/dist/progress.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"progress.js","sourceRoot":"","sources":["../src/progress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAElC,gGAAgG;AAChG,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,MAAM,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,cAAc,SAAS,CAAC;AACtF,CAAC;AAmBD,MAAM,CAAC,MAAM,SAAS,GAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAe1D;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,KAAa;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAE9B,2EAA2E;IAC3E,EAAE;IACF,yGAAyG;IACzG,2GAA2G;IAC3G,2FAA2F;IAC3F,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC;SAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC;AAED,2GAA2G;AAC3G,SAAS,OAAO,CAAC,KAAoB,EAAE,GAAW;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IACzF,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,YAAiC,EAAE,GAAW;IACtG,MAAM,KAAK,GAAG,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACjF,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAEpG,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,4GAA4G;QAC5G,oFAAoF;QACpF,4GAA4G;QAC5G,qFAAqF;QACrF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAc,EAAE,UAAkB;IACzD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAiC,CAAC;IAEtC,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE;QACzB,IAAI,GAAG,EAAE,CAAC;QACV,KAAK,GAAG,SAAS,CAAC;QAClB,EAAE,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,GAAG,EAAE;YACT,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,IAAI,IAAI,UAAU;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,sGAAsG;YACtG,2EAA2E;YAC3E,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,EAAW,CAAC;QAC1F,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,GAAG,SAAS,CAAC;YAClB,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClB,EAAE,EAAE,CAAC;QACP,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/propagation.d.ts

@@ -1,203 +0,0 @@
-/**
- * Race-free grant propagation.
- *
- * The first implementation wrote each child's computed grant into `process.env` inside the `tool_call`
- * handler. The environment is process-global, so two concurrent spawns could read each other's values —
- * a real hole in a security control.
- *
- * The fix removes the need for a per-child channel entirely, rather than trying to build one:
- *
- *   1. Everything pushed to children is a property of the PARENT, not of the individual spawn — the
- *      parent's own grant, the child depth (parent depth + 1), and the configured bounds. Those are
- *      identical for every sibling, so concurrent spawns cannot disagree and there is nothing to race.
- *      `ENV_APPROVED` (approvals a human granted at or above this level) is safe on the same global
- *      channel for the same reason: it is intersected with the parent's own grant before being written,
- *      which is itself a parent-level fact, so it too is identical for every sibling.
- *   2. Each child derives ITS OWN grant on arrival: `inheritedParentGrant ∩ ownObservedTools`, where the
- *      observed set comes from the `tools` array of its first provider request — authoritative, because
- *      it is literally what pi sent the model.
- *
- * The environment is therefore written ONCE per session, before any spawn can occur (the first provider
- * request precedes any tool call), and never mutated per spawn.
- *
- * The invariant still holds transitively: own = observed ∩ inheritedParent ⊆ inheritedParent, so no
- * descendant can exceed the root. It is also defence in depth — even if a spawn slipped past the
- * interceptor and pi handed the child more than the parent held, the intersection clamps it back.
- */
-import type { Capability } from "./resolve.ts";
-import { type InheritableApproval } from "./approval.ts";
-export declare const ENV_GRANT = "PI_GRANTS_GRANT";
-/**
- * Total descendants this session may create in its whole subtree (`src/fanout.ts`).
- *
- * In `GRANT_ENV_KEYS` and therefore stripped from a child's environment and re-supplied only by the spawn
- * plan — like depth, and for the same reason: it is capability state that must ATTENUATE downward, not an
- * operator preference that should inherit. `PI_GRANTS_CHILD_TIMEOUT` is deliberately the other kind.
- */
-export declare const ENV_FANOUT = "PI_GRANTS_FANOUT";
-/**
- * This session's ledger id, so a child's records name their real parent (review finding F8).
- *
- * Without it every level restarts at `d0` and the ledger cannot be joined into a tree across processes.
- */
-export declare const ENV_PARENT_ID = "PI_GRANTS_PARENT_ID";
-/** Unique identity of this governed execution occurrence; unlike ENV_PARENT_ID it is never reused. */
-export declare const ENV_EXECUTION_ID = "PI_GRANTS_EXECUTION_ID";
-export declare const ENV_DEPTH = "PI_GRANTS_DEPTH";
-export declare const ENV_MAX_DEPTH = "PI_GRANTS_MAX_DEPTH";
-export declare const ENV_GATED = "PI_GRANTS_GATED";
-export declare const ENV_LEDGER = "PI_GRANTS_LEDGER";
-export declare const ENV_APPROVED = "PI_GRANTS_APPROVED";
-/**
- * Every variable this package uses to push governance state at a child.
- *
- * Named as a set so `mergeChildEnv` can guarantee that none of them survives from the parent's own
- * environment into a child's — a governance variable a child inherits by accident is one nobody decided
- * to give it.
- */
-export declare const GRANT_ENV_KEYS: readonly ["PI_GRANTS_GRANT", "PI_GRANTS_DEPTH", "PI_GRANTS_MAX_DEPTH", "PI_GRANTS_GATED", "PI_GRANTS_LEDGER", "PI_GRANTS_APPROVED", "PI_GRANTS_FANOUT", "PI_GRANTS_PARENT_ID", "PI_GRANTS_EXECUTION_ID"];
-export declare const parseList: (raw: string | undefined) => Capability[];
-/**
- * Derive this session's own grant from what it inherited and what pi actually gave it.
- *
- * `observedTools` is the bare tool-name list from the session's own provider payload, or null when it
- * has not been observed yet — in which case the inherited grant is used unchanged (it is already an
- * upper bound, so this is safe, just less tight).
- *
- * A wildcard holder stays a wildcard holder: an enumerated observation must not silently downgrade an
- * explicitly unlimited grant, or a root session would lose the authority it was configured with.
- *
- * **R-36 / ADR-0017 step 1: only tool-shaped capabilities are filtered.** The observation is a list of
- * TOOLS, so it is evidence about `tool:` and `ext:` and about nothing else. Until this was fixed, a child
- * inheriting `tool:read, skill:review` held only `tool:read` from its first provider request onward — it
- * still *had* the skill (it arrives as `--skill`), but could not re-grant it and `/grants` stopped listing
- * it. Silently, and in the narrowing direction, which is why it survived: nothing fails when a grant
- * quietly shrinks. It also made ADR-0017's `agent:` prerequisite unsatisfiable below the root.
- */
-export declare function deriveOwnGrant(inheritedParentGrant: Capability[], observedTools: string[] | null): Capability[];
-/**
- * Parse a bound from the environment, distinguishing **absent** from **malformed**.
- *
- * G7 / A-S4 + B-I4. `Number.parseInt` is the wrong tool for reading configuration: it accepts a numeric
- * prefix (`parseInt("2abc")` is `2`), returns `NaN` for anything else, and `NaN` silently passes every
- * comparison as false — so a malformed `PI_GRANTS_MAX_DEPTH` did not tighten the limit, it removed it.
- *
- * The three-way return is the point. `undefined` means "not configured, use the documented default";
- * `null` means "configured wrongly", which callers must treat as a failure rather than a default,
- * because a value someone tried to set and mistyped is not the same as one they never set.
- */
-export declare function parseBound(raw: string | undefined): number | null | undefined;
-export interface DepthConfig {
-    depth: number;
-    maxDepth: number;
-    /** Names of the variables that were set but unreadable, for an operator-facing warning. */
-    malformed: string[];
-}
-/**
- * Resolve this session's depth bounds, failing closed on anything malformed.
- *
- * **Malformed input disables spawning entirely (`maxDepth: 0`)** rather than falling back to a default,
- * and that applies to a bad `PI_GRANTS_DEPTH` just as much as a bad `PI_GRANTS_MAX_DEPTH`. The old
- * `|| 0` guard on depth failed open in a subtler way than the missing guard on maxDepth: a session that
- * could not read its own depth was treated as a **root**, which is the most permissive answer available
- * and precisely the value an attacker would choose. If we do not know how deep we are, we must not spawn.
- */
-export declare function depthConfig(depthRaw: string | undefined, maxDepthRaw: string | undefined): DepthConfig;
-/** The documented default child-depth bound when `PI_GRANTS_MAX_DEPTH` is not set. */
-export declare const DEFAULT_MAX_DEPTH = 2;
-/**
- * Gated by default in a governed session (ADR-0012).
- *
- * `bash` is not one capability among others; it is an execution primitive. A child holding it can run
- * `env -u PI_GRANTS_GRANT pi …` and obtain a completely **ungoverned** descendant — measured, not
- * theorised (`docs/probes/g5-bash-escape`). Handing that down silently is the thing worth changing.
- *
- * Subsumption-aware gating (also ADR-0012) means this single entry covers `write`, `edit`, `read`,
- * `grep`, `find` and `ls` as well, since `bash` confers all of them.
- */
-export declare const DEFAULT_GATED: Capability[];
-/**
- * Read the gate list, distinguishing **absent** from **explicitly empty**.
- *
- * `parseList` alone cannot: it maps both `undefined` and `""` to `[]`. That distinction is the operator's
- * only way to turn the default off — without it, someone who wants no gates would have to stop governing
- * altogether, which is strictly worse than the thing they were trying to avoid.
- */
-export declare function gatedFromEnv(raw: string | undefined): Capability[];
-export interface ChildEnvInput {
-    /** This session's own grant — becomes the child's inherited parent grant. */
-    ownGrant: Capability[];
-    /** This session's depth; children are one deeper. */
-    depth: number;
-    maxDepth: number;
-    gated: Capability[];
-    /**
-     * Gated capabilities a human approved at or above this level.
-     *
-     * Safe to push on the GLOBAL channel because it is intersected with THIS session's own grant, which is
-     * a parent-level fact — identical for every sibling, so there is nothing to race on. Each child then
-     * re-intersects with its own grant on arrival, exactly as it does for the grant itself.
-     */
-    /**
-     * Approvals eligible to cross the boundary (ADR-0014): capability, subject and scope. `once` is
-     * dropped by `inheritApprovals`, and the subject is preserved so it cannot satisfy another one.
-     */
-    approved?: InheritableApproval[];
-    ledgerPath?: string;
-    /**
-     * Whether THIS session is governed — i.e. `PI_GRANTS_GRANT` was set for it.
-     *
-     * G7 / B-I8. Governance is opt-in: with the variable unset the README promises "nothing is blocked".
-     * That was true of the session itself and false of its children, because this function still exported
-     * a grant, a depth and a bound, so an ungoverned parent silently started governing its descendants —
-     * and the grant it exported was its own observed tool surface, which is a real restriction arrived at
-     * by accident. An ungoverned session must be transparent, not a source of policy.
-     *
-     * Defaults to `true` so that every existing caller keeps publishing; only the extension, which alone
-     * knows whether the variable was set, passes `false`.
-     */
-    governed?: boolean;
-}
-/**
- * The environment a child should inherit. Constant across all of this session's children by
- * construction, which is what makes concurrent spawning safe.
- *
- * **The wildcard is never inherited.** A root may HOLD `tool:*` — that is authority to grant anything —
- * but handing it down would let every descendant reacquire the full catalog, which makes attenuation
- * meaningless below the root. Children therefore inherit the ENUMERATED grant only.
- *
- * Consequence, deliberate: a wildcard root that has not yet observed its own tools hands children an
- * empty grant, so they can spawn nothing. That fails closed. It is also unreachable in normal flow,
- * because a session's first provider request always precedes its first tool call.
- */
-/**
- * The part of a grant a child may inherit: everything but the wildcards that are HELD, never handed down.
- *
- * `tool:*` for R-26's reason — a root that handed it down let every descendant reacquire the full catalog.
- * `workspace:*` for the same reason one namespace over (R-131): a descendant holding it could route anywhere
- * the registry lists, which is the attenuation failure ADR-0035 exists to close. `agent:*` is deliberately
- * NOT stripped — ADR-0023 decided that a session authorised for any definition passes that on, because
- * definitions are ceilings rather than roots.
- *
- * **Exported, and there is exactly one spelling of this rule on purpose.** It shipped as a filter inline in
- * `childEnv` and nowhere else, so a grant travelling the OTHER path — `delegate.ts` building a child's
- * `PI_GRANTS_GRANT` from `result.effective` — carried `workspace:*` straight down. The test written beside
- * that fix exercised `childEnv`, which is not the path a delegated child's grant travels, so it could not
- * catch it. R-28's shape: two routes for one rule, with the guard on the quieter one. Both call this now.
- */
-export declare function inheritableGrant(grant: readonly Capability[]): Capability[];
-export declare function childEnv(input: ChildEnvInput): Record<string, string>;
-/**
- * The environment for a child this process spawns itself: the parent's environment with every governance
- * variable stripped, then the per-child plan applied.
- *
- * Spreading `{ ...process.env, ...plan.env }` is not enough. `plan.env` omits keys that do not apply to
- * this child (an empty approval set, no gated list), and an omitted key does not overwrite — so the
- * parent's own value survives into the child. Stripping first makes the plan the ONLY source of every
- * governance variable, which is what `delegate.ts`'s "nothing is written to the shared `process.env`"
- * claim actually requires. Consumers re-clamp anyway; this is the defence in depth behind that.
- */
-export declare function mergeChildEnv(parentEnv: NodeJS.ProcessEnv, planEnv: Record<string, string>): NodeJS.ProcessEnv;
-/** Extract bare tool names from a provider payload's tool array, tolerating provider shape differences. */
-export declare function observeToolNames(payload: unknown): string[] | null;
-//# sourceMappingURL=propagation.d.ts.map

package/dist/propagation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"propagation.d.ts","sourceRoot":"","sources":["../src/propagation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAoB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG3E,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAC3C;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,qBAAqB,CAAC;AAC7C;;;;GAIG;AACH,eAAO,MAAM,aAAa,wBAAwB,CAAC;AACnD,sGAAsG;AACtG,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAC3C,eAAO,MAAM,aAAa,wBAAwB,CAAC;AACnD,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAC3C,eAAO,MAAM,UAAU,qBAAqB,CAAC;AAC7C,eAAO,MAAM,YAAY,uBAAuB,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,0MAUjB,CAAC;AAEX,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,GAAG,SAAS,KAAG,UAAU,EACW,CAAC;AAkB1E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAC5B,oBAAoB,EAAE,UAAU,EAAE,EAClC,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,GAC7B,UAAU,EAAE,CAgBd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAO7E;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,2FAA2F;IAC3F,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAStG;AAED,sFAAsF;AACtF,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,EAAE,UAAU,EAAkB,CAAC;AAEzD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,EAAE,CAGlE;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB;;;;;;OAMG;IACH;;;OAGG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,EAAE,CAE3E;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,CAAC,UAAU,EAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,UAAU,CAInB;AAED,2GAA2G;AAC3G,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAoBlE"}