taskflow-core 0.2.0 → 0.2.1

package/dist/resources/persistence.js

@@ -0,0 +1,522 @@
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { execFileSync } from "node:child_process";
+/** Exact, platform-native process-birth identity when the platform exposes one.
+ * Never return an uptime estimate or a lower-precision timestamp: incomparable
+ * identities could falsely reclaim a live owner's lock. */
+export function readProcessBirthToken(pid) {
+    if (!Number.isSafeInteger(pid) || pid < 1)
+        return undefined;
+    try {
+        if (process.platform === "linux") {
+            const bootId = fs.readFileSync("/proc/sys/kernel/random/boot_id", "utf8").trim();
+            const stat = fs.readFileSync(`/proc/${pid}/stat`, "utf8").trim();
+            const commandEnd = stat.lastIndexOf(")");
+            if (!bootId || commandEnd < 0)
+                return undefined;
+            // Fields after the command start at proc(5) field 3; starttime is field 22.
+            const startTicks = stat.slice(commandEnd + 1).trim().split(/\s+/)[19];
+            if (!/^\d+$/.test(startTicks ?? ""))
+                return undefined;
+            return `linux:${bootId}:${startTicks}`;
+        }
+        if (process.platform === "win32") {
+            const output = execFileSync("powershell.exe", [
+                "-NoLogo",
+                "-NoProfile",
+                "-NonInteractive",
+                "-Command",
+                `(Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToUniversalTime().ToFileTimeUtc()`,
+            ], {
+                encoding: "utf8",
+                timeout: 1_000,
+                stdio: ["ignore", "pipe", "ignore"],
+            }).trim();
+            return /^\d+$/.test(output) ? `windows:filetime:${output}` : undefined;
+        }
+        // macOS `ps lstart` is only second precision and can alias PID reuse. Until
+        // a native high-resolution token is available, liveness is fail-closed.
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+const NATIVE_PROCESS_BIRTH_TOKEN = readProcessBirthToken(process.pid);
+const PROCESS_BIRTH_TOKEN = NATIVE_PROCESS_BIRTH_TOKEN ?? `opaque:${crypto.randomUUID()}`;
+const PROCESS_BIRTH_TOKEN_KIND = NATIVE_PROCESS_BIRTH_TOKEN === undefined ? "opaque" : "native";
+export class CoordinatorTimeoutError extends Error {
+    code = "TFWS_LEASE_TIMEOUT";
+    constructor(message) {
+        super(message);
+        this.name = "CoordinatorTimeoutError";
+    }
+}
+export class CoordinatorAbortError extends Error {
+    code = "ABORT_ERR";
+    constructor(message = "Coordinator operation aborted") {
+        super(message);
+        this.name = "AbortError";
+    }
+}
+export function defaultProcessIdentity() {
+    return { pid: process.pid, birthToken: PROCESS_BIRTH_TOKEN, birthTokenKind: PROCESS_BIRTH_TOKEN_KIND };
+}
+export function defaultProcessInspector(pid) {
+    if (pid === process.pid) {
+        return { alive: true, birthToken: PROCESS_BIRTH_TOKEN, birthTokenKind: PROCESS_BIRTH_TOKEN_KIND };
+    }
+    try {
+        process.kill(pid, 0);
+        const birthToken = readProcessBirthToken(pid);
+        return birthToken === undefined
+            ? { alive: true }
+            : { alive: true, birthToken, birthTokenKind: "native" };
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "EPERM")
+            return { alive: false };
+        const birthToken = readProcessBirthToken(pid);
+        return birthToken === undefined
+            ? { alive: true }
+            : { alive: true, birthToken, birthTokenKind: "native" };
+    }
+}
+export function namespaceToken(namespace) {
+    return crypto.createHash("sha256").update(namespace).digest("hex").slice(0, 24);
+}
+export function ensureDirectory(directory) {
+    fs.mkdirSync(directory, { recursive: true });
+}
+export function fsyncDirectory(directory) {
+    try {
+        const fd = fs.openSync(directory, "r");
+        try {
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    catch {
+        // Some filesystems/platforms do not permit fsync on directories. The WAL or
+        // data file itself is still fsynced; directory sync remains best-effort.
+    }
+}
+export function writeJsonAtomicDurable(filePath, value) {
+    ensureDirectory(path.dirname(filePath));
+    const temp = `${filePath}.tmp.${process.pid}.${crypto.randomBytes(6).toString("hex")}`;
+    const fd = fs.openSync(temp, "wx", 0o600);
+    try {
+        fs.writeFileSync(fd, JSON.stringify(value));
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    try {
+        fs.renameSync(temp, filePath);
+        fsyncDirectory(path.dirname(filePath));
+    }
+    catch (error) {
+        try {
+            fs.unlinkSync(temp);
+        }
+        catch { /* best effort */ }
+        throw error;
+    }
+}
+export function readJsonFile(filePath, fallback) {
+    try {
+        return JSON.parse(fs.readFileSync(filePath, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return fallback;
+        throw error;
+    }
+}
+export function appendJsonLinesDurable(filePath, records) {
+    if (records.length === 0)
+        return;
+    ensureDirectory(path.dirname(filePath));
+    const existed = fs.existsSync(filePath);
+    // A crash can leave a partial final JSON record. Because callers serialize WAL
+    // access with PersistentFileMutex, it is safe to truncate only that unterminated
+    // tail before appending the next durable group.
+    if (existed) {
+        const raw = fs.readFileSync(filePath);
+        if (raw.length > 0 && raw[raw.length - 1] !== 0x0a) {
+            const lastNewline = raw.lastIndexOf(0x0a);
+            const repairFd = fs.openSync(filePath, "r+");
+            try {
+                fs.ftruncateSync(repairFd, lastNewline + 1);
+                fs.fsyncSync(repairFd);
+            }
+            finally {
+                fs.closeSync(repairFd);
+            }
+        }
+    }
+    const fd = fs.openSync(filePath, "a", 0o600);
+    try {
+        for (const record of records) {
+            const data = Buffer.from(`${JSON.stringify(record)}\n`);
+            let offset = 0;
+            while (offset < data.length)
+                offset += fs.writeSync(fd, data, offset, data.length - offset);
+        }
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    if (!existed)
+        fsyncDirectory(path.dirname(filePath));
+}
+export function readJsonLines(filePath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(filePath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    const lines = raw.split("\n");
+    const hasTerminatingNewline = raw.endsWith("\n");
+    const records = [];
+    for (let index = 0; index < lines.length; index++) {
+        const line = lines[index];
+        if (!line)
+            continue;
+        try {
+            records.push(JSON.parse(line));
+        }
+        catch (error) {
+            if (!hasTerminatingNewline && index === lines.length - 1)
+                break;
+            throw new Error(`Corrupt durable JSONL record ${index + 1} in ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return records;
+}
+function ownerIsStale(record, identity, inspect) {
+    if (record.pid === identity.pid) {
+        // Opaque tokens identify one JS module/isolate, not an OS process. Worker
+        // threads share a PID but evaluate modules independently, so comparing two
+        // opaque UUIDs would let one live worker reclaim another's ticket. Only native
+        // kernel birth tokens are comparable; otherwise liveness fails closed.
+        return record.birthTokenKind === "native" && identity.birthTokenKind === "native" &&
+            record.birthToken !== identity.birthToken;
+    }
+    const observed = inspect(record.pid);
+    if (!observed.alive)
+        return true;
+    return record.birthTokenKind === "native" && observed.birthTokenKind === "native" &&
+        observed.birthToken !== undefined && observed.birthToken !== record.birthToken;
+}
+// A mutex instance can disappear after returning a completed critical-section
+// result. Keep deferred exact-ticket cleanup shared by duplicate module instances
+// in this JS realm, keyed by the immutable ticket path. The fsynced `done` state
+// on the ticket itself carries the same fact across worker isolates/processes.
+const persistenceGlobal = globalThis;
+const PROCESS_PENDING_TICKET_RELEASES = persistenceGlobal.__taskflowPendingMutexTicketReleasesV1 ??= new Map();
+function delay(ms, signal) {
+    if (signal?.aborted)
+        return Promise.reject(new CoordinatorAbortError());
+    return new Promise((resolve, reject) => {
+        const finish = () => signal?.removeEventListener("abort", onAbort);
+        const timer = setTimeout(() => {
+            finish();
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            finish();
+            reject(new CoordinatorAbortError());
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+export class PersistentFileMutex {
+    lockPath;
+    identity;
+    inspectProcess;
+    pollMs;
+    corruptLockStaleMs;
+    now;
+    constructor(lockPath, options = {}) {
+        this.lockPath = lockPath;
+        this.identity = options.processIdentity ?? defaultProcessIdentity();
+        this.inspectProcess = options.inspectProcess ?? defaultProcessInspector;
+        this.pollMs = options.pollMs ?? 20;
+        this.corruptLockStaleMs = options.corruptLockStaleMs ?? 30_000;
+        this.now = options.now ?? Date.now;
+    }
+    #queueDirectory() {
+        return `${this.lockPath}.queue`;
+    }
+    #removeTicketBestEffort(ticketPath, queueDirectory) {
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                fs.unlinkSync(ticketPath);
+                fsyncDirectory(queueDirectory);
+                return true;
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    return true;
+            }
+        }
+        return false;
+    }
+    #markQueueRecordDone(recordPath, expected) {
+        const noFollow = typeof fs.constants.O_NOFOLLOW === "number" ? fs.constants.O_NOFOLLOW : 0;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            let fd;
+            try {
+                fd = fs.openSync(recordPath, fs.constants.O_RDWR | noFollow);
+                const raw = fs.readFileSync(fd, "utf8");
+                const current = JSON.parse(raw);
+                if (current.kind !== expected.kind || current.token !== expected.token ||
+                    (current.kind === "ticket" && expected.kind === "ticket" && current.ticket !== expected.ticket) ||
+                    current.pid !== expected.pid ||
+                    current.birthToken !== expected.birthToken || current.birthTokenKind !== expected.birthTokenKind) {
+                    return false;
+                }
+                if (current.state === "done")
+                    return true;
+                if (current.state !== "held")
+                    return false;
+                const terminal = Buffer.from(JSON.stringify({ ...current, state: "done" }));
+                if (terminal.byteLength !== Buffer.byteLength(raw))
+                    return false;
+                let offset = 0;
+                while (offset < terminal.byteLength) {
+                    offset += fs.writeSync(fd, terminal, offset, terminal.byteLength - offset, offset);
+                }
+                fs.fsyncSync(fd);
+                return true;
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    return true;
+            }
+            finally {
+                if (fd !== undefined)
+                    fs.closeSync(fd);
+            }
+        }
+        return false;
+    }
+    #drainPendingTicketReleases() {
+        const ownQueueDirectory = this.#queueDirectory();
+        for (const [ticketPath, queueDirectory] of PROCESS_PENDING_TICKET_RELEASES) {
+            if (queueDirectory !== ownQueueDirectory)
+                continue;
+            if (this.#removeTicketBestEffort(ticketPath, queueDirectory)) {
+                PROCESS_PENDING_TICKET_RELEASES.delete(ticketPath);
+            }
+        }
+        if ([...PROCESS_PENDING_TICKET_RELEASES.values()].some((queueDirectory) => queueDirectory === ownQueueDirectory)) {
+            throw new Error("TFWS_CONTROL_PLANE_CLEANUP: a prior mutex ticket could not be released");
+        }
+    }
+    #readQueueRecord(filePath) {
+        try {
+            const record = readJsonFile(filePath, undefined);
+            if (!record || (record.kind !== "choosing" && record.kind !== "ticket") ||
+                typeof record.token !== "string" || !Number.isSafeInteger(record.pid) ||
+                typeof record.birthToken !== "string" || record.birthToken.length === 0 ||
+                (record.birthTokenKind !== "native" && record.birthTokenKind !== "opaque") ||
+                (record.state !== "held" && record.state !== "done")) {
+                throw new Error("invalid mutex queue record");
+            }
+            if (record.kind === "ticket" &&
+                (!Number.isSafeInteger(record.ticket) || record.ticket < 1)) {
+                throw new Error("invalid mutex ticket");
+            }
+            return record;
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return undefined;
+            try {
+                const stat = fs.statSync(filePath);
+                if (this.now() - stat.mtimeMs >= this.corruptLockStaleMs) {
+                    // Queue filenames contain a never-reused UUID. Removing this exact
+                    // corrupt path cannot delete a newer owner's ticket (unlike renaming
+                    // one shared lockPath after a stale read).
+                    fs.unlinkSync(filePath);
+                    return undefined;
+                }
+            }
+            catch (statError) {
+                if (statError.code === "ENOENT")
+                    return undefined;
+            }
+            throw error;
+        }
+    }
+    #queueSnapshot(queueDirectory) {
+        const choosing = [];
+        const tickets = [];
+        let names;
+        try {
+            names = fs.readdirSync(queueDirectory);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return { choosing, tickets };
+            throw error;
+        }
+        for (const name of names) {
+            const choosingName = /^choosing-([0-9a-f-]+)\.json$/.exec(name);
+            const ticketName = /^ticket-([0-9a-f-]+)\.json$/.exec(name);
+            if (!choosingName && !ticketName)
+                continue;
+            const filePath = path.join(queueDirectory, name);
+            const record = this.#readQueueRecord(filePath);
+            if (!record)
+                continue;
+            if (record.token !== (choosingName?.[1] ?? ticketName?.[1])) {
+                throw new Error("mutex queue token does not match its immutable filename");
+            }
+            if (record.state === "done") {
+                // The owner durably ended its critical section before cleanup failed.
+                // Any process/worker may remove this exact immutable terminal ticket;
+                // no birth-token inference is involved.
+                try {
+                    fs.unlinkSync(filePath);
+                }
+                catch (error) {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                }
+                continue;
+            }
+            if (ownerIsStale(record, this.identity, this.inspectProcess)) {
+                // Every contender owns a unique immutable file, so stale recovery is
+                // exact-path deletion with no shared-name ABA window.
+                try {
+                    fs.unlinkSync(filePath);
+                }
+                catch (error) {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                }
+                continue;
+            }
+            if (record.kind === "choosing" && choosingName)
+                choosing.push({ path: filePath, record });
+            if (record.kind === "ticket" && ticketName)
+                tickets.push({ path: filePath, record });
+        }
+        return { choosing, tickets };
+    }
+    async acquire(options = {}) {
+        // A completed critical section must keep its result even if immutable-ticket
+        // cleanup was temporarily unavailable. This exact mutex fails closed on its
+        // next acquisition until the deferred cleanup succeeds.
+        this.#drainPendingTicketReleases();
+        const timeoutMs = options.timeoutMs ?? 10_000;
+        const deadline = this.now() + timeoutMs;
+        const queueDirectory = this.#queueDirectory();
+        ensureDirectory(queueDirectory);
+        const token = crypto.randomUUID();
+        const choosingPath = path.join(queueDirectory, `choosing-${token}.json`);
+        const ticketPath = path.join(queueDirectory, `ticket-${token}.json`);
+        const choosing = {
+            kind: "choosing",
+            ...this.identity,
+            token,
+            createdAt: this.now(),
+            state: "held",
+        };
+        let publishedTicket = false;
+        let own;
+        try {
+            writeJsonAtomicDurable(choosingPath, choosing);
+            if (options.signal?.aborted)
+                throw new CoordinatorAbortError();
+            const initial = this.#queueSnapshot(queueDirectory);
+            const maxTicket = initial.tickets.reduce((max, item) => Math.max(max, item.record.ticket), 0);
+            if (maxTicket >= Number.MAX_SAFE_INTEGER)
+                throw new Error("mutex ticket space exhausted");
+            const ticketRecord = {
+                kind: "ticket",
+                ...this.identity,
+                token,
+                ticket: maxTicket + 1,
+                createdAt: this.now(),
+                state: "held",
+            };
+            own = ticketRecord;
+            writeJsonAtomicDurable(ticketPath, ticketRecord);
+            publishedTicket = true;
+            fs.unlinkSync(choosingPath);
+            fsyncDirectory(queueDirectory);
+            while (true) {
+                if (options.signal?.aborted)
+                    throw new CoordinatorAbortError();
+                const snapshot = this.#queueSnapshot(queueDirectory);
+                const otherChoosing = snapshot.choosing.some((item) => item.record.token !== token);
+                const earlier = snapshot.tickets.some((item) => item.record.token !== token &&
+                    (item.record.ticket < ticketRecord.ticket ||
+                        (item.record.ticket === ticketRecord.ticket && item.record.token < token)));
+                if (!otherChoosing && !earlier) {
+                    let released = false;
+                    return () => {
+                        if (released)
+                            return;
+                        const terminal = this.#markQueueRecordDone(ticketPath, ticketRecord);
+                        if (this.#removeTicketBestEffort(ticketPath, queueDirectory)) {
+                            released = true;
+                            PROCESS_PENDING_TICKET_RELEASES.delete(ticketPath);
+                            return;
+                        }
+                        PROCESS_PENDING_TICKET_RELEASES.set(ticketPath, queueDirectory);
+                        console.warn(`[taskflow] mutex ticket cleanup deferred for ${path.basename(ticketPath)}` +
+                            (terminal ? " (critical section durably released)" : " (release marker unavailable; fail-closed)"));
+                    };
+                }
+                if (this.now() >= deadline) {
+                    throw new CoordinatorTimeoutError(`Coordinator lock timeout after ${timeoutMs}ms`);
+                }
+                await delay(Math.min(this.pollMs, Math.max(1, deadline - this.now())), options.signal);
+            }
+        }
+        catch (error) {
+            const candidates = [
+                [choosingPath, choosing],
+                ...(publishedTicket && own ? [[ticketPath, own]] : []),
+            ];
+            for (const [candidate, record] of candidates) {
+                // A cancelled/timed-out contender is no longer live. Persist that fact in
+                // the immutable queue record before unlink so permission failures cannot
+                // leave a same-process ticket that blocks the queue forever.
+                this.#markQueueRecordDone(candidate, record);
+                this.#removeTicketBestEffort(candidate, queueDirectory);
+            }
+            fsyncDirectory(queueDirectory);
+            throw error;
+        }
+    }
+    async runExclusive(fn, options = {}) {
+        const release = await this.acquire(options);
+        try {
+            return await fn();
+        }
+        finally {
+            release();
+        }
+    }
+}
+export function isPersistedOwnerStale(record, identity, inspect) {
+    return ownerIsStale(record, identity, inspect);
+}
+//# sourceMappingURL=persistence.js.map

package/dist/resources/persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["../../src/resources/persistence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;2DAE2D;AAC3D,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,CAAC;QACJ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAChD,4EAA4E;YAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;gBAAE,OAAO,SAAS,CAAC;YACtD,OAAO,SAAS,MAAM,IAAI,UAAU,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,EAAE;gBAC7C,SAAS;gBACT,YAAY;gBACZ,iBAAiB;gBACjB,UAAU;gBACV,oBAAoB,GAAG,iEAAiE;aACxF,EAAE;gBACF,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACnC,CAAC,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,CAAC;QACD,4EAA4E;QAC5E,wEAAwE;QACxE,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAID,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACtE,MAAM,mBAAmB,GAAG,0BAA0B,IAAI,UAAU,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;AAC1F,MAAM,wBAAwB,GAA0B,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AA8CvH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACxC,IAAI,GAAG,oBAAoB,CAAC;IACrC,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACvC,CAAC;CACD;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACtC,IAAI,GAAG,WAAW,CAAC;IAC5B,YAAY,OAAO,GAAG,+BAA+B;QACpD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,CAAC;CACD;AAED,MAAM,UAAU,sBAAsB;IACrC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,wBAAwB,EAAE,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW;IAClD,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,wBAAwB,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,UAAU,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACjB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,UAAU,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACjB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAChD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,4EAA4E;QAC5E,yEAAyE;IAC1E,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,KAAc;IACtE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QACJ,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;YAAS,CAAC;QACV,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAI,QAAgB,EAAE,QAAW;IAC5D,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAM,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACxE,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,OAA2B;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,+EAA+E;IAC/E,iFAAiF;IACjF,gDAAgD;IAChD,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACJ,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;gBAC5C,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACV,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACJ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAC7F,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;YAAS,CAAC;QACV,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAI,QAAgB;IAChD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACb,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,qBAAqB,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM;YAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,GAAG,CAAC,OAAO,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxI,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB,EAAE,QAAyB,EAAE,OAAyB;IAClG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjC,0EAA0E;QAC1E,2EAA2E;QAC3E,+EAA+E;QAC/E,uEAAuE;QACvE,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ;YAChF,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAChF,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;AACjF,CAAC;AAMD,8EAA8E;AAC9E,kFAAkF;AAClF,iFAAiF;AACjF,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,UAA2D,CAAC;AACtF,MAAM,+BAA+B,GACpC,iBAAiB,CAAC,sCAAsC,KAAK,IAAI,GAAG,EAAkB,CAAC;AAExF,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC9C,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;IACxE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;QACX,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACJ,CAAC;AAOD,MAAM,OAAO,mBAAmB;IACtB,QAAQ,CAAS;IACjB,QAAQ,CAAkB;IAC1B,cAAc,CAAmB;IACjC,MAAM,CAAS;IACf,kBAAkB,CAAS;IAC3B,GAAG,CAAe;IAE3B,YAAY,QAAgB,EAAE,OAAO,GAAoD,EAAE;QAC1F,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,sBAAsB,EAAE,CAAC;QACpE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,CAAC;IAED,eAAe;QACd,OAAO,GAAG,IAAI,CAAC,QAAQ,QAAQ,CAAC;IACjC,CAAC;IAED,uBAAuB,CAAC,UAAkB,EAAE,cAAsB;QACjE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACJ,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC1B,cAAc,CAAC,cAAc,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;YACrE,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,oBAAoB,CACnB,UAAkB,EAClB,QAAiD;QAEjD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,EAAsB,CAAC;YAC3B,IAAI,CAAC;gBACJ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;gBAC7D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4C,CAAC;gBAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;oBACrE,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC;oBAC/F,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAC5B,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;oBACnG,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC5E,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACjE,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,OAAO,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACrC,MAAM,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;gBACpF,CAAC;gBACD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;YACrE,CAAC;oBAAS,CAAC;gBACV,IAAI,EAAE,KAAK,SAAS;oBAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,2BAA2B;QAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,+BAA+B,EAAE,CAAC;YAC5E,IAAI,cAAc,KAAK,iBAAiB;gBAAE,SAAS;YACnD,IAAI,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC9D,+BAA+B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QACD,IAAI,CAAC,GAAG,+BAA+B,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,KAAK,iBAAiB,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAChC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,YAAY,CAAsD,QAAQ,EAAE,SAAS,CAAC,CAAC;YACtG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;gBACtE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACrE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBACvE,CAAC,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;gBAC1E,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAC3B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC1D,mEAAmE;oBACnE,qEAAqE;oBACrE,2CAA2C;oBAC3C,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACxB,OAAO,SAAS,CAAC;gBAClB,CAAC;YACF,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACpB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;YAC9E,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,cAAc,CAAC,cAAsB;QAIpC,MAAM,QAAQ,GAAyD,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAuD,EAAE,CAAC;QACvE,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACJ,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACrF,MAAM,KAAK,CAAC;QACb,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC7B,sEAAsE;gBACtE,sEAAsE;gBACtE,wCAAwC;gBACxC,IAAI,CAAC;oBAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAC/C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACrE,CAAC;gBACD,SAAS;YACV,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC9D,qEAAqE;gBACrE,sDAAsD;gBACtD,IAAI,CAAC;oBAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAC/C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACrE,CAAC;gBACD,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1F,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAO,GAAwB,EAAE;QAC9C,6EAA6E;QAC7E,4EAA4E;QAC5E,wDAAwD;QACxD,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,eAAe,CAAC,cAAc,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAwB;YACrC,IAAI,EAAE,UAAU;YAChB,GAAG,IAAI,CAAC,QAAQ;YAChB,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,MAAM;SACb,CAAC;QACF,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,GAAkC,CAAC;QACvC,IAAI,CAAC;YACJ,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,IAAI,SAAS,IAAI,MAAM,CAAC,gBAAgB;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC1F,MAAM,YAAY,GAAsB;gBACvC,IAAI,EAAE,QAAQ;gBACd,GAAG,IAAI,CAAC,QAAQ;gBAChB,KAAK;gBACL,MAAM,EAAE,SAAS,GAAG,CAAC;gBACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,MAAM;aACb,CAAC;YACF,GAAG,GAAG,YAAY,CAAC;YACnB,sBAAsB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACjD,eAAe,GAAG,IAAI,CAAC;YACvB,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC5B,cAAc,CAAC,cAAc,CAAC,CAAC;YAE/B,OAAO,IAAI,EAAE,CAAC;gBACb,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;gBACrD,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;gBACpF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK;oBAC3B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM;wBACxC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;oBAChC,IAAI,QAAQ,GAAG,KAAK,CAAC;oBACrB,OAAO,GAAG,EAAE;wBACX,IAAI,QAAQ;4BAAE,OAAO;wBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;wBACrE,IAAI,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;4BAC9D,QAAQ,GAAG,IAAI,CAAC;4BAChB,+BAA+B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;4BACnD,OAAO;wBACR,CAAC;wBACD,+BAA+B,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;wBAChE,OAAO,CAAC,IAAI,CACX,gDAAgD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;4BAC3E,CAAC,QAAQ,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAClG,CAAC;oBACH,CAAC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC5B,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,SAAS,IAAI,CAAC,CAAC;gBACpF,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,UAAU,GAA6D;gBAC5E,CAAC,YAAY,EAAE,QAAQ,CAAC;gBACxB,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrF,CAAC;YACF,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC9C,0EAA0E;gBAC1E,yEAAyE;gBACzE,6DAA6D;gBAC7D,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC7C,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACzD,CAAC;YACD,cAAc,CAAC,cAAc,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,YAAY,CAAI,EAAwB,EAAE,OAAO,GAAwB,EAAE;QAChF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,EAAE,CAAC;QACnB,CAAC;gBAAS,CAAC;YACV,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;CACD;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAuB,EACvB,QAAyB,EACzB,OAAyB;IAEzB,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/resources/registry.d.ts

@@ -0,0 +1,56 @@
+import { type InvocationAuthority } from "./authority.ts";
+import { type WorkspacePolicyError } from "./errors.ts";
+import { type ResourceVersion, type WorkspaceAccess } from "./schema.ts";
+declare const ROOT_GRANT: unique symbol;
+export declare const ROOT_ENFORCEMENT_MODES: readonly ["native-single-root", "native-multi-root", "resolve-only"];
+export type RootEnforcement = (typeof ROOT_ENFORCEMENT_MODES)[number];
+export interface RootGrant {
+    readonly [ROOT_GRANT]: true;
+    readonly grantId: string;
+    readonly bindingId: string;
+    readonly resourceDomainId: string;
+    /** Canonical physical path; runtime-only and never persisted in portable records. */
+    readonly physicalRoot: string;
+    readonly maxAccess: WorkspaceAccess;
+    readonly version?: Readonly<ResourceVersion>;
+    readonly allowedPrincipals: ReadonlySet<string>;
+    readonly enforcement: RootEnforcement;
+}
+export interface HostRootGrantInput {
+    grantId: string;
+    bindingId: string;
+    resourceDomainId: string;
+    physicalRoot: string;
+    maxAccess: WorkspaceAccess;
+    version?: ResourceVersion;
+    allowedPrincipals: Iterable<string>;
+    enforcement: RootEnforcement;
+}
+export interface RootRegistry {
+    readonly registryId: string;
+    authorize(grantId: string, principal: InvocationAuthority, requested: WorkspaceAccess): RootGrant | WorkspacePolicyError;
+}
+export interface RootRegistryInput {
+    registryId: string;
+    grants: readonly RootGrant[];
+}
+/** Invalid trusted host policy; detected before an invocation can start. */
+export declare class RootRegistryConfigurationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Host-only RootGrant constructor.
+ *
+ * The private symbol plus WeakSet identity make grants non-forgeable by JSON,
+ * object spread, structural casts, or structured cloning. Trusted delivery
+ * code calls this while loading its local root policy.
+ */
+export declare function createHostRootGrant(input: HostRootGrantInput): RootGrant;
+export declare function isRootGrant(value: unknown): value is RootGrant;
+/**
+ * Build a registry and reject alias configurations that could split locking,
+ * journaling, version, or cache identity for one writable physical resource.
+ */
+export declare function createRootRegistry(input: RootRegistryInput): RootRegistry;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/resources/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/resources/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwC,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvF,QAAA,MAAM,UAAU,EAAE,OAAO,MAAsC,CAAC;AAGhE,eAAO,MAAM,sBAAsB,YAAI,oBAAoB,EAAE,mBAAmB,EAAE,cAAc,CAAU,CAAC;AAC3G,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,qFAAqF;IACrF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,WAAW,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,SAAS,CACR,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,mBAAmB,EAC9B,SAAS,EAAE,eAAe,GACxB,SAAS,GAAG,oBAAoB,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;CAC7B;AAED,4EAA4E;AAC5E,qBAAa,8BAA+B,SAAQ,KAAK;IACxD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AA4BD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,CA6BxE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAmCD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CA+BzE"}