zcode-acp-server 0.46.7 → 0.47.1

package/dist/settings/coding-plan.js

@@ -0,0 +1,299 @@
+/**
+ * Coding-plan quota reset cards.
+ *
+ * The desktop app exposes "reset cards" — a limited number of quota resets the
+ * user can spend to clear a 5-hour or weekly window. This module is the headless
+ * equivalent: the same four endpoints, the same headers, the same credentials,
+ * so a client that cannot open the app still gets the feature.
+ *
+ * Credentials are the hard part. They live in `~/.zcode/v2/credentials.json`,
+ * AES-256-GCM encrypted, keyed by `ZCODE_CREDENTIAL_SECRET` or a machine-bound
+ * fallback string. Two tokens are needed and they are NOT interchangeable:
+ *
+ *  - `zcodejwttoken` → `Authorization: Bearer …`
+ *  - the OAuth access token for the CURRENT provider family → `X-Bigmodel-Authorization`
+ *
+ * Picking the family correctly matters: a `zai`-only account has no bigmodel
+ * token, and falling back across families would send a token the backend
+ * rejects. The family is read from the provider id (`account:zai-…` vs
+ * `account:bigmodel-…`), which is the same spelling the registry uses.
+ *
+ * Known limit: a TEAM plan's requests need `Bigmodel-Organization` /
+ * `Bigmodel-Project` headers, and the ids are not in the credential store a
+ * headless process can read. Team-plan resets therefore answer a backend error
+ * rather than working; personal plans (the common case) are unaffected.
+ *
+ * This is the ONLY irreversible operation in the settings API. A spent card is
+ * gone. `use()` therefore takes an idempotency key so a retry (a dropped
+ * response, a double tap) cannot burn two cards, and the route layer requires a
+ * fresh status nonce before it will call it.
+ */
+import { createDecipheriv, createHash, randomUUID } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { homedir, platform, userInfo } from "node:os";
+import { log, zcodeCredentialsPath } from "../utils.js";
+/** The only provider ids that own a coding plan. */
+const CODING_PLAN_PROVIDER_PREFIX = "account:";
+const ENCRYPTED_PREFIX = "enc:v1:";
+const CIPHER_ALGORITHM = "aes-256-gcm";
+const ZCODE_JWT_KEY = "zcodejwttoken";
+const OAUTH_TOKEN_KEYS = {
+    bigmodel: "oauth:bigmodel:access_token",
+    zai: "oauth:zai:access_token",
+};
+/** The API origin; overridable for testing and for a self-hosted gateway. */
+function apiOrigin(env = process.env) {
+    return env.ZCODE_ENDPOINT_ORIGIN ?? env.ZCODE_BASE_URL ?? "https://zcode.z.ai";
+}
+const RESET_BASE_PATH = "/api/v1/coding-plan/reset";
+const REQUEST_TIMEOUT_MS = 15_000;
+/** Machine-bound fallback secret, mirroring ZCode's credential cipher. */
+function resolveCredentialSecret(env) {
+    const configured = env.ZCODE_CREDENTIAL_SECRET?.trim();
+    if (configured)
+        return configured;
+    let username = "unknown";
+    try {
+        username = userInfo().username;
+    }
+    catch {
+        /* sandboxed runtimes may not resolve it */
+    }
+    return `zcode-credential-fallback:${platform()}:${homedir()}:${username}`;
+}
+/**
+ * Decrypt one `enc:v1:` credential value.
+ *
+ * The wire form is `enc:v1:<iv>.<authTag>.<ciphertext>`, all base64url. A value
+ * without the prefix is returned as-is (plaintext entries exist in the wild).
+ */
+function decryptCredential(value, secret) {
+    if (!value.startsWith(ENCRYPTED_PREFIX))
+        return value;
+    const payload = value.slice(ENCRYPTED_PREFIX.length);
+    const parts = payload.split(".");
+    if (parts.length !== 3)
+        throw new Error("credential_decrypt_malformed");
+    const [ivRaw, tagRaw, cipherRaw] = parts;
+    const iv = Buffer.from(ivRaw, "base64url");
+    const authTag = Buffer.from(tagRaw, "base64url");
+    const cipherText = Buffer.from(cipherRaw, "base64url");
+    const key = createHash("sha256").update(secret).digest();
+    try {
+        const decipher = createDecipheriv(CIPHER_ALGORITHM, key, iv);
+        decipher.setAuthTag(authTag);
+        return Buffer.concat([decipher.update(cipherText), decipher.final()]).toString("utf8");
+    }
+    catch {
+        throw new Error("credentials_unavailable");
+    }
+}
+/** Read and decrypt the credential store. Throws `credentials_unavailable`. */
+async function loadCredentials(env) {
+    let raw;
+    try {
+        raw = await readFile(zcodeCredentialsPath(), "utf8");
+    }
+    catch {
+        throw new Error("credentials_unavailable");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("credentials_unavailable");
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error("credentials_unavailable");
+    }
+    const secret = resolveCredentialSecret(env);
+    const out = {};
+    for (const [key, value] of Object.entries(parsed)) {
+        if (typeof value !== "string")
+            continue;
+        try {
+            out[key] = decryptCredential(value, secret);
+        }
+        catch (error) {
+            // One undecryptable entry must not sink the rest — the store holds OAuth
+            // discovery state and other unrelated secrets.
+            log(`coding-plan: credential '${key}' could not be read (${error instanceof Error ? error.message : String(error)})`);
+        }
+    }
+    return out;
+}
+/** Which family a provider id belongs to. */
+export function resetFamilyFor(providerId) {
+    return providerId.includes(":zai-") ? "zai" : "bigmodel";
+}
+/** True when the provider id can own a coding plan. */
+export function isCodingPlanProvider(providerId) {
+    if (!providerId.startsWith(CODING_PLAN_PROVIDER_PREFIX))
+        return false;
+    return /^account:(zai|bigmodel)-(individual|team)-coding-plan$/u.test(providerId);
+}
+/**
+ * Resolve both tokens for a reset request.
+ *
+ * @throws `coding_plan_provider_required` for a non-account provider,
+ *         `credentials_unavailable` when the store cannot be decrypted, and
+ *         `coding_plan_<x>_jwt_required` when a token is missing.
+ */
+export async function resolveResetAuthorization(providerId, env = process.env) {
+    if (!isCodingPlanProvider(providerId)) {
+        throw new Error("coding_plan_provider_required");
+    }
+    const credentials = await loadCredentials(env);
+    const zcodeJwt = credentials[ZCODE_JWT_KEY]?.trim();
+    if (!zcodeJwt)
+        throw new Error("coding_plan_zcode_jwt_required");
+    const family = resetFamilyFor(providerId);
+    const codingPlanJwt = credentials[OAUTH_TOKEN_KEYS[family]]?.trim();
+    if (!codingPlanJwt)
+        throw new Error("coding_plan_maas_jwt_required");
+    return {
+        zcodeAuthorization: /^Bearer\s/iu.test(zcodeJwt) ? zcodeJwt : `Bearer ${zcodeJwt}`,
+        codingPlanAuthorization: codingPlanJwt,
+    };
+}
+function resetHeaders(auth, includeScope) {
+    const headers = {
+        Authorization: auth.zcodeAuthorization,
+        // The contract sends the MaaS JWT verbatim — no Bearer prefix.
+        "X-Bigmodel-Authorization": auth.codingPlanAuthorization,
+    };
+    if (!includeScope)
+        return headers;
+    headers["Bigmodel-Target-Type"] = auth.teamContext ? "TEAM" : "PERSONAL";
+    if (auth.teamContext) {
+        headers["Bigmodel-Organization"] = auth.teamContext.organizationId;
+        headers["Bigmodel-Project"] = auth.teamContext.projectId;
+    }
+    return headers;
+}
+/**
+ * Read one reset endpoint, honouring its envelope contract.
+ *
+ * The backend reports business failures as `{code}` even on HTTP 4xx, so the
+ * code — never the message — decides success. Codes the caller expects are
+ * passed in so a "denied" answer can be surfaced as data instead of a throw.
+ */
+async function callReset(path, init, auth, acceptedCodes = [], fetchImpl = globalThis.fetch, env = process.env) {
+    const response = await fetchImpl(`${apiOrigin(env)}${path}`, {
+        method: init.method,
+        headers: {
+            ...resetHeaders(auth, init.includeScope),
+            ...(init.body !== undefined ? { "content-type": "application/json" } : {}),
+        },
+        ...(init.body !== undefined ? { body: JSON.stringify(init.body) } : {}),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+    let payload;
+    try {
+        payload = JSON.parse(await response.text());
+    }
+    catch {
+        payload = null;
+    }
+    const envelope = (payload ?? {});
+    if (typeof envelope.code === "number" && envelope.code !== 0) {
+        if (acceptedCodes.includes(envelope.code))
+            return envelope;
+        throw new Error(`coding_plan_reset_api_error:${envelope.code}`);
+    }
+    if (!response.ok) {
+        throw new Error(`coding_plan_reset_http_error:${response.status}`);
+    }
+    return envelope;
+}
+/** 3301 is the backend's "not now" answer for an opportunity request. */
+const OPPORTUNITY_DENIED_CODE = 3301;
+/** Fetch the current card inventory. */
+export async function readResetStatus(providerId, fetchImpl = globalThis.fetch, env = process.env) {
+    const auth = await resolveResetAuthorization(providerId, env);
+    const envelope = (await callReset(`${RESET_BASE_PATH}/status`, { method: "GET", includeScope: true }, auth, [], fetchImpl, env));
+    const data = envelope.data ?? {};
+    const readList = (key) => {
+        const value = data[key];
+        if (!Array.isArray(value))
+            return [];
+        return value
+            .filter((item) => typeof item === "object" &&
+            item !== null &&
+            typeof item.expire_at === "number")
+            .map((item) => ({ expireAt: item.expire_at }));
+    };
+    const readHistory = (key) => {
+        const value = data[key];
+        if (typeof value !== "object" || value === null)
+            return null;
+        const usedAt = value.used_at;
+        return typeof usedAt === "number" ? { usedAt } : null;
+    };
+    return {
+        availableFiveHour: readList("available_five_hour_resets"),
+        availableWeek: readList("available_week_resets"),
+        latestFiveHour: readHistory("latest_five_hour_reset_history"),
+        latestWeek: readHistory("latest_week_reset_history"),
+        hasUnreadHistory: data["has_unread_history"] === true,
+        nonce: randomUUID(),
+    };
+}
+/**
+ * Spend one card.
+ *
+ * The idempotency key is what makes a retry safe: the same key always answers
+ * the same outcome instead of consuming a second card. The caller supplies it
+ * (the route layer derives one per request), so a client that retries can
+ * reuse the value it already sent.
+ */
+export async function useResetCard(providerId, resetType, idempotencyKey, fetchImpl = globalThis.fetch, env = process.env) {
+    const key = idempotencyKey.trim();
+    if (!key || key.length > 64)
+        throw new Error("coding_plan_reset_invalid_idempotency_key");
+    const auth = await resolveResetAuthorization(providerId, env);
+    const envelope = (await callReset(`${RESET_BASE_PATH}/use`, {
+        method: "POST",
+        includeScope: true,
+        body: { idempotency_key: key, reset_type: resetType },
+    }, auth, [], fetchImpl, env));
+    return { used: envelope.data?.used === true };
+}
+/**
+ * Ask whether a reset would be granted right now.
+ *
+ * A denial (code 3301) is a normal answer carrying `next_try_at`, not a
+ * failure — the UI shows a countdown rather than an error.
+ */
+export async function requestResetOpportunity(providerId, idempotencyKey, fetchImpl = globalThis.fetch, env = process.env) {
+    const key = idempotencyKey.trim();
+    if (!key || key.length > 64)
+        throw new Error("coding_plan_reset_invalid_idempotency_key");
+    const auth = await resolveResetAuthorization(providerId, env);
+    const envelope = (await callReset(`${RESET_BASE_PATH}/opportunity`, { method: "POST", includeScope: true, body: { idempotency_key: key } }, auth, [OPPORTUNITY_DENIED_CODE], fetchImpl, env));
+    if (envelope.code === OPPORTUNITY_DENIED_CODE) {
+        const nextTryAt = envelope.data?.next_try_at;
+        return { granted: false, nextTryAt: typeof nextTryAt === "number" ? nextTryAt : null };
+    }
+    return { granted: envelope.data?.granted === true, nextTryAt: null };
+}
+/** Mark the reset history read (clears the unread badge). */
+export async function markResetHistoryRead(providerId, fetchImpl = globalThis.fetch, env = process.env) {
+    const auth = await resolveResetAuthorization(providerId, env);
+    // No target scope on this one: it validates identity but shares a read
+    // cursor across the account.
+    await callReset(`${RESET_BASE_PATH}/history/read`, { method: "POST", includeScope: false }, auth, [], fetchImpl, env);
+}
+/** Exposed for the eligibility check the route layer runs before any spend. */
+export function codingPlanProviderIds() {
+    // The registry spelling is the source of truth; these are the ids a coding
+    // plan can be attached to, and only they may spend a card.
+    return [
+        "account:bigmodel-individual-coding-plan",
+        "account:bigmodel-team-coding-plan",
+        "account:zai-individual-coding-plan",
+        "account:zai-team-coding-plan",
+    ];
+}
+//# sourceMappingURL=coding-plan.js.map

package/dist/settings/coding-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-plan.js","sourceRoot":"","sources":["../../src/settings/coding-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEtD,OAAO,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,oDAAoD;AACpD,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAE/C,MAAM,gBAAgB,GAAG,SAAS,CAAC;AACnC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,6BAA6B;IACvC,GAAG,EAAE,wBAAwB;CACrB,CAAC;AAEX,6EAA6E;AAC7E,SAAS,SAAS,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrD,OAAO,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,cAAc,IAAI,oBAAoB,CAAC;AACjF,CAAC;AAED,MAAM,eAAe,GAAG,2BAA2B,CAAC;AACpD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AA2BlC,0EAA0E;AAC1E,SAAS,uBAAuB,CAAC,GAAsB;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,OAAO,6BAA6B,QAAQ,EAAE,IAAI,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAc;IACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,KAAiC,CAAC;IACrE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,eAAe,CAAC,GAAsB;IACnD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;QAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,+CAA+C;YAC/C,GAAG,CACD,4BAA4B,GAAG,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CACjH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,yDAAyD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrE,OAAO;QACL,kBAAkB,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE;QAClF,uBAAuB,EAAE,aAAa;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,YAAqB;IACnE,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,IAAI,CAAC,kBAAkB;QACtC,+DAA+D;QAC/D,0BAA0B,EAAE,IAAI,CAAC,uBAAuB;KACzD,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC;IAClC,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC;QACnE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CACtB,IAAY,EACZ,IAAuE,EACvE,IAAwB,EACxB,gBAAmC,EAAE,EACrC,YAAqC,UAAU,CAAC,KAAK,EACrD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE;QAC3D,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE;YACP,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC;IACH,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAa,CAAC;IAC7C,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7D,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,YAAqC,UAAU,CAAC,KAAK,EACrD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAC/B,GAAG,eAAe,SAAS,EAC3B,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EACrC,IAAI,EACJ,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAuC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAA+B,EAAE;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,KAAK;aACT,MAAM,CACL,CAAC,IAAI,EAAiC,EAAE,CACtC,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,OAAQ,IAAgC,CAAC,SAAS,KAAK,QAAQ,CAClE;aACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,GAAW,EAA6B,EAAE;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7D,MAAM,MAAM,GAAI,KAA+B,CAAC,OAAO,CAAC;QACxD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC,CAAC;IACF,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,4BAA4B,CAAC;QACzD,aAAa,EAAE,QAAQ,CAAC,uBAAuB,CAAC;QAChD,cAAc,EAAE,WAAW,CAAC,gCAAgC,CAAC;QAC7D,UAAU,EAAE,WAAW,CAAC,2BAA2B,CAAC;QACpD,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,KAAK,IAAI;QACrD,KAAK,EAAE,UAAU,EAAE;KACpB,CAAC;AACJ,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,SAAoB,EACpB,cAAsB,EACtB,YAAqC,UAAU,CAAC,KAAK,EACrD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAC/B,GAAG,eAAe,MAAM,EACxB;QACE,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE;KACtD,EACD,IAAI,EACJ,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAkC,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,cAAsB,EACtB,YAAqC,UAAU,CAAC,KAAK,EACrD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAC/B,GAAG,eAAe,cAAc,EAChC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,EACtE,IAAI,EACJ,CAAC,uBAAuB,CAAC,EACzB,SAAS,EACT,GAAG,CACJ,CAA0E,CAAC;IAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,YAAqC,UAAU,CAAC,KAAK,EACrD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9D,uEAAuE;IACvE,6BAA6B;IAC7B,MAAM,SAAS,CACb,GAAG,eAAe,eAAe,EACjC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,EACvC,IAAI,EACJ,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB;IACnC,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO;QACL,yCAAyC;QACzC,mCAAmC;QACnC,oCAAoC;QACpC,8BAA8B;KAC/B,CAAC;AACJ,CAAC"}

package/dist/settings/file-lock.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Cross-process file lock — the same protocol the ZCode desktop app uses.
+ *
+ * The settings API writes config files the desktop app also writes. An atomic
+ * rename makes each individual write safe, but it does NOT make two writers
+ * mutually exclusive: a settings write that lands while the app is writing the
+ * same file silently discards the app's change. Sharing the app's lock is the
+ * only way to avoid that, so this module re-implements its protocol exactly
+ * (ADR-0026):
+ *
+ *   - lock directory `<path>.lock`, created with `mkdir` (atomic on POSIX)
+ *   - one `owner-<pid>-<ts>-<rand>.json` per holder, written `wx`
+ *   - a holder is authoritative only while its own owner file is the sole
+ *     entry and the directory identity (dev+ino) has not changed
+ *   - stale reclaim: owner pid no longer alive, or an ownerless lock past the
+ *     grace window. Never steal from a live holder.
+ *
+ * Timestamps in owner files are validated against a clock-skew ceiling so a
+ * malformed or future-dated `createdAt` cannot keep a lock permanently
+ * unreclaimable.
+ *
+ * Everything is best-effort in the caller's favour: reaching the wait cap
+ * throws a lock-timeout error rather than deleting a newer writer's lock.
+ */
+export interface FileLockOptions {
+    lockRetryDelaysMs?: readonly number[];
+    lockOwnerlessGraceMs?: number;
+    lockMaxWaitMs?: number;
+}
+/** Error code for a lock that could not be acquired within the wait cap. */
+export declare const FILE_LOCK_TIMEOUT_ERROR_CODE = "ZCODE_FILE_LOCK_TIMEOUT";
+/**
+ * Run `operation` while holding ZCode's lock for `filePath`.
+ *
+ * @throws with code {@link FILE_LOCK_TIMEOUT_ERROR_CODE} when the lock could
+ *         not be acquired within `lockMaxWaitMs`.
+ */
+export declare function withFileLock<T>(filePath: string, operation: () => Promise<T>, options?: FileLockOptions): Promise<T>;
+//# sourceMappingURL=file-lock.d.ts.map

package/dist/settings/file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../../src/settings/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAeH,MAAM,WAAW,eAAe;IAC9B,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4EAA4E;AAC5E,eAAO,MAAM,4BAA4B,4BAA4B,CAAC;AA4JtE;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,CAAC,CAAC,CA2BZ"}

package/dist/settings/file-lock.js

@@ -0,0 +1,282 @@
+/**
+ * Cross-process file lock — the same protocol the ZCode desktop app uses.
+ *
+ * The settings API writes config files the desktop app also writes. An atomic
+ * rename makes each individual write safe, but it does NOT make two writers
+ * mutually exclusive: a settings write that lands while the app is writing the
+ * same file silently discards the app's change. Sharing the app's lock is the
+ * only way to avoid that, so this module re-implements its protocol exactly
+ * (ADR-0026):
+ *
+ *   - lock directory `<path>.lock`, created with `mkdir` (atomic on POSIX)
+ *   - one `owner-<pid>-<ts>-<rand>.json` per holder, written `wx`
+ *   - a holder is authoritative only while its own owner file is the sole
+ *     entry and the directory identity (dev+ino) has not changed
+ *   - stale reclaim: owner pid no longer alive, or an ownerless lock past the
+ *     grace window. Never steal from a live holder.
+ *
+ * Timestamps in owner files are validated against a clock-skew ceiling so a
+ * malformed or future-dated `createdAt` cannot keep a lock permanently
+ * unreclaimable.
+ *
+ * Everything is best-effort in the caller's favour: reaching the wait cap
+ * throws a lock-timeout error rather than deleting a newer writer's lock.
+ */
+import { mkdir, readFile, readdir, rm, rmdir, stat, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
+/** Retry ladder while waiting for a contended lock (ms, last value repeats). */
+const LOCK_RETRY_DELAYS_MS = [25, 50, 100, 200, 400];
+/** How long an ownerless lock (no pid) must sit before it is considered stale. */
+const DEFAULT_OWNERLESS_GRACE_MS = 100;
+/** Total wait before giving up. Mirrors the upstream's 8s. */
+const DEFAULT_MAX_WAIT_MS = 8_000;
+/** Timestamps further in the future than this are treated as unusable. */
+const MAX_CLOCK_SKEW_MS = 5 * 60_000;
+/** Error code for a lock that could not be acquired within the wait cap. */
+export const FILE_LOCK_TIMEOUT_ERROR_CODE = "ZCODE_FILE_LOCK_TIMEOUT";
+function errorCode(error) {
+    if (typeof error !== "object" || error === null)
+        return undefined;
+    const code = error.code;
+    return typeof code === "string" ? code : undefined;
+}
+function isFileExistsError(error) {
+    return errorCode(error) === "EEXIST";
+}
+/**
+ * A usable timestamp: finite, non-negative, not beyond the skew ceiling. A
+ * garbage `createdAt` makes the caller fall back to the file's mtime.
+ */
+function parseLockTimestamp(value, observedAt) {
+    if (typeof value !== "number")
+        return null;
+    if (!Number.isFinite(value) || value < 0)
+        return null;
+    if (value > observedAt + MAX_CLOCK_SKEW_MS)
+        return null;
+    return value;
+}
+function parseLockMetadata(raw, observedAt) {
+    try {
+        const parsed = JSON.parse(raw);
+        return {
+            createdAt: parseLockTimestamp(parsed.createdAt, observedAt),
+            // Only a positive safe integer carries owner semantics: 0, negatives and
+            // fractions reach process.kill as junk and a dead lock would look alive.
+            pid: typeof parsed.pid === "number" && Number.isSafeInteger(parsed.pid) && parsed.pid > 0
+                ? parsed.pid
+                : null,
+        };
+    }
+    catch {
+        return { createdAt: null, pid: null };
+    }
+}
+/** `process.kill(pid, 0)` liveness probe; EPERM means the process exists. */
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return errorCode(error) !== "ESRCH";
+    }
+}
+async function isOwnerFileReclaimable(ownerFile, ownerlessGraceMs, observedAt) {
+    const raw = await readFile(ownerFile, "utf-8");
+    const metadata = parseLockMetadata(raw, observedAt);
+    let createdAt = metadata.createdAt;
+    if (createdAt === null) {
+        const ownerStat = await stat(ownerFile);
+        createdAt = parseLockTimestamp(ownerStat.mtimeMs, observedAt) ?? observedAt;
+    }
+    const ownerExited = metadata.pid !== null && !isProcessAlive(metadata.pid);
+    const ownerlessLockIsStale = metadata.pid === null && observedAt - createdAt >= ownerlessGraceMs;
+    return ownerExited || ownerlessLockIsStale;
+}
+/**
+ * Reclaim an abandoned lock. Conservative by construction: it only removes
+ * entries it has positively determined to be stale, and any read/stat failure
+ * reads as "not removed" so the caller keeps waiting instead of destroying a
+ * lock it does not understand.
+ */
+async function removeAbandonedLock(lockFile, ownerlessGraceMs) {
+    const observedAt = Date.now();
+    try {
+        const lockStat = await stat(lockFile);
+        if (lockStat.isDirectory()) {
+            const entries = await readdir(lockFile);
+            const owners = entries.filter((e) => e.startsWith("owner-") && e.endsWith(".json"));
+            if (owners.length === 1) {
+                // A single owner file is the ownership check: deleting it plus the
+                // directory can only ever reclaim that holder's lock.
+                if (!(await isOwnerFileReclaimable(join(lockFile, owners[0]), ownerlessGraceMs, observedAt))) {
+                    return { removed: false };
+                }
+                await rm(join(lockFile, owners[0]), { force: true });
+                await rmdir(lockFile);
+                return { removed: true };
+            }
+            const directoryTimestamp = parseLockTimestamp(lockStat.mtimeMs, observedAt) ?? observedAt;
+            if (observedAt - directoryTimestamp < ownerlessGraceMs) {
+                return { removed: false };
+            }
+            for (const owner of owners) {
+                if (!(await isOwnerFileReclaimable(join(lockFile, owner), ownerlessGraceMs, observedAt))) {
+                    return { removed: false };
+                }
+            }
+            // An empty directory (crash between mkdir and owner write) or a corrupt
+            // directory with several owners. Only the entries observed as stale are
+            // removed; a concurrent new owner makes the rmdir fail harmlessly.
+            await Promise.all(entries.map((e) => rm(join(lockFile, e), { force: true })));
+            await rmdir(lockFile);
+            return { removed: true };
+        }
+        // Legacy single-file lock from before the directory form. Re-read before
+        // deleting so a lock replaced meanwhile is not the one removed.
+        const raw = await readFile(lockFile, "utf-8");
+        if (!(await isOwnerFileReclaimable(lockFile, ownerlessGraceMs, observedAt))) {
+            return { removed: false };
+        }
+        if ((await readFile(lockFile, "utf-8")) !== raw)
+            return { removed: false };
+        await rm(lockFile, { force: true });
+        return { removed: true };
+    }
+    catch (error) {
+        // ENOENT: somebody else already reclaimed it — retry the acquire.
+        // ENOTEMPTY: a new owner appeared mid-sweep — keep waiting.
+        if (errorCode(error) === "ENOENT" || errorCode(error) === "ENOTEMPTY") {
+            return { removed: false };
+        }
+        return { removed: false, error };
+    }
+}
+function createLockTimeoutError(filePath, waitedMs, cause) {
+    const error = new Error(`Timed out after ${waitedMs}ms waiting for the ZCode file lock: ${filePath}`);
+    error.code = FILE_LOCK_TIMEOUT_ERROR_CODE;
+    error.cause = cause;
+    return error;
+}
+// Process-internal FIFO in front of the OS lock: dozens of in-process callers
+// polling a directory lock is a thundering herd, and the back of the queue
+// would keep hitting the wait cap long after the actual write finished.
+const processFileLockTails = new Map();
+/**
+ * Run `operation` while holding ZCode's lock for `filePath`.
+ *
+ * @throws with code {@link FILE_LOCK_TIMEOUT_ERROR_CODE} when the lock could
+ *         not be acquired within `lockMaxWaitMs`.
+ */
+export async function withFileLock(filePath, operation, options = {}) {
+    const previousTail = processFileLockTails.get(filePath) ?? Promise.resolve();
+    let releaseProcessQueue;
+    const currentTail = new Promise((resolve) => {
+        releaseProcessQueue = resolve;
+    });
+    processFileLockTails.set(filePath, currentTail);
+    await previousTail;
+    let releaseLock;
+    try {
+        // The lock directory sits NEXT TO the file, so the parent must exist first
+        // — `mkdir` of `<missing-dir>/x.lock` fails with ENOENT, which the acquire
+        // loop would misread as a lost race.
+        await mkdir(dirname(filePath), { recursive: true });
+        releaseLock = await acquireFileLock(filePath, options);
+        return await operation();
+    }
+    finally {
+        try {
+            await releaseLock?.();
+        }
+        finally {
+            releaseProcessQueue();
+            if (processFileLockTails.get(filePath) === currentTail) {
+                processFileLockTails.delete(filePath);
+            }
+        }
+    }
+}
+async function acquireFileLock(filePath, options) {
+    const lockFile = `${filePath}.lock`;
+    const token = `${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const ownerFile = join(lockFile, `owner-${token}.json`);
+    const payload = `${JSON.stringify({
+        pid: process.pid,
+        createdAt: Date.now(),
+        token,
+    })}\n`;
+    const startedAt = Date.now();
+    const maxWaitMs = options.lockMaxWaitMs ?? DEFAULT_MAX_WAIT_MS;
+    const ownerlessGraceMs = Math.min(Math.max(options.lockOwnerlessGraceMs ?? DEFAULT_OWNERLESS_GRACE_MS, 0), Math.max(Math.floor(maxWaitMs / 2), 0));
+    const retryDelaysMs = options.lockRetryDelaysMs ?? LOCK_RETRY_DELAYS_MS;
+    let lastRemovalError;
+    for (let attempt = 0;; attempt += 1) {
+        let createdLock = false;
+        try {
+            await mkdir(lockFile);
+            createdLock = true;
+            const createdLockStat = await stat(lockFile);
+            await writeFile(ownerFile, payload, { encoding: "utf-8", flag: "wx" });
+            const currentLockStat = await stat(lockFile);
+            const currentOwners = (await readdir(lockFile)).filter((e) => e.startsWith("owner-") && e.endsWith(".json"));
+            // Ownership re-validation after the writes: the directory must still be
+            // the one we created and our owner file must be its only entry.
+            if (currentLockStat.dev !== createdLockStat.dev ||
+                currentLockStat.ino !== createdLockStat.ino ||
+                currentOwners.length !== 1 ||
+                currentOwners[0] !== `owner-${token}.json`) {
+                throw Object.assign(new Error("lock ownership changed during acquire"), {
+                    code: "EEXIST",
+                });
+            }
+            return async () => {
+                // Only ever remove our own owner file: a lock that has since been
+                // taken over belongs to a different token and must survive.
+                await rm(ownerFile, { force: true }).catch(() => { });
+                await rmdir(lockFile).catch(() => {
+                    // best-effort cleanup — a new owner makes this fail harmlessly
+                });
+            };
+        }
+        catch (error) {
+            if (createdLock) {
+                await rm(ownerFile, { force: true }).catch(() => { });
+                await rmdir(lockFile).catch(() => { });
+            }
+            const lostCreatedLock = createdLock && errorCode(error) === "ENOENT";
+            if (!isFileExistsError(error) && !lostCreatedLock) {
+                throw error;
+            }
+            // How long WE have waited proves nothing about whether the CURRENT lock
+            // is stale, so the wait cap is a hard stop: reaching it times out rather
+            // than sweeping a lock a newer writer may have just installed.
+            const elapsedMs = Date.now() - startedAt;
+            if (elapsedMs >= maxWaitMs) {
+                const removalErrorCode = errorCode(lastRemovalError);
+                if (removalErrorCode === "EACCES" || removalErrorCode === "EPERM") {
+                    throw lastRemovalError;
+                }
+                throw createLockTimeoutError(filePath, elapsedMs, error);
+            }
+            const removalAttempt = await removeAbandonedLock(lockFile, ownerlessGraceMs);
+            if (removalAttempt.removed)
+                continue;
+            if (removalAttempt.error !== undefined)
+                lastRemovalError = removalAttempt.error;
+            const remainingMs = Math.max(maxWaitMs - elapsedMs, 0);
+            if (retryDelaysMs.length === 0 || remainingMs === 0) {
+                const removalErrorCode = errorCode(lastRemovalError);
+                if (removalErrorCode === "EACCES" || removalErrorCode === "EPERM") {
+                    throw lastRemovalError;
+                }
+                throw createLockTimeoutError(filePath, elapsedMs, lastRemovalError ?? error);
+            }
+            const retryDelayMs = retryDelaysMs[Math.min(attempt, retryDelaysMs.length - 1)] ?? remainingMs;
+            await sleep(Math.min(retryDelayMs, remainingMs));
+        }
+    }
+}
+//# sourceMappingURL=file-lock.js.map

package/dist/settings/file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../../src/settings/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAC9D,kFAAkF;AAClF,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,8DAA8D;AAC9D,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AAQrC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAEtE,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;AACvC,CAAC;AAOD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAc,EAAE,UAAkB;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,KAAK,GAAG,UAAU,GAAG,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,UAAkB;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2C,CAAC;QACzE,OAAO;YACL,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC;YAC3D,yEAAyE;YACzE,yEAAyE;YACzE,GAAG,EACD,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC;gBAClF,CAAC,CAAC,MAAM,CAAC,GAAG;gBACZ,CAAC,CAAC,IAAI;SACX,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,gBAAwB,EACxB,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACnC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,UAAU,CAAC;IAC9E,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,UAAU,GAAG,SAAS,IAAI,gBAAgB,CAAC;IACjG,OAAO,WAAW,IAAI,oBAAoB,CAAC;AAC7C,CAAC;AAOD;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,gBAAwB;IAExB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACpF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,mEAAmE;gBACnE,sDAAsD;gBACtD,IACE,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,EACzF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAC5B,CAAC;gBACD,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YAED,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,UAAU,CAAC;YAC1F,IAAI,UAAU,GAAG,kBAAkB,GAAG,gBAAgB,EAAE,CAAC;gBACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;oBACzF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,mEAAmE;YACnE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3E,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kEAAkE;QAClE,4DAA4D;QAC5D,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,QAAgB,EAAE,KAAe;IACjF,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,mBAAmB,QAAQ,uCAAuC,QAAQ,EAAE,CAC/B,CAAC;IAChD,KAAK,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC1C,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,SAA2B,EAC3B,UAA2B,EAAE;IAE7B,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7E,IAAI,mBAAgC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAChD,mBAAmB,GAAG,OAAO,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,YAAY,CAAC;IAEnB,IAAI,WAA8C,CAAC;IACnD,IAAI,CAAC;QACH,2EAA2E;QAC3E,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,WAAW,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,WAAW,EAAE,EAAE,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,mBAAmB,EAAE,CAAC;YACtB,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,WAAW,EAAE,CAAC;gBACvD,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,OAAwB;IAExB,MAAM,QAAQ,GAAG,GAAG,QAAQ,OAAO,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,KAAK;KACN,CAAC,IAAI,CAAC;IACP,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,0BAA0B,EAAE,CAAC,CAAC,EACvE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CACvC,CAAC;IACF,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;IACxE,IAAI,gBAAyB,CAAC;IAE9B,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtB,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACrD,CAAC;YACF,wEAAwE;YACxE,gEAAgE;YAChE,IACE,eAAe,CAAC,GAAG,KAAK,eAAe,CAAC,GAAG;gBAC3C,eAAe,CAAC,GAAG,KAAK,eAAe,CAAC,GAAG;gBAC3C,aAAa,CAAC,MAAM,KAAK,CAAC;gBAC1B,aAAa,CAAC,CAAC,CAAC,KAAK,SAAS,KAAK,OAAO,EAC1C,CAAC;gBACD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,EAAE;oBACtE,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,IAAI,EAAE;gBAChB,kEAAkE;gBAClE,4DAA4D;gBAC5D,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrD,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC/B,+DAA+D;gBACjE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrD,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,eAAe,GAAG,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;YACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAClD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,wEAAwE;YACxE,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACzC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;oBAClE,MAAM,gBAAgB,CAAC;gBACzB,CAAC;gBACD,MAAM,sBAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC7E,IAAI,cAAc,CAAC,OAAO;gBAAE,SAAS;YACrC,IAAI,cAAc,CAAC,KAAK,KAAK,SAAS;gBAAE,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC;YAEhF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC;YACvD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;oBAClE,MAAM,gBAAgB,CAAC;gBACzB,CAAC;gBACD,MAAM,sBAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,IAAI,KAAK,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,YAAY,GAChB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;YAC5E,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC"}