@0xmaxma/claude-gateway 2.0.9 → 2.0.11

package/dist/orchestration/process-platform.js

@@ -0,0 +1,396 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.darwinPlatform = exports.linuxPlatform = void 0;
+exports.windowsPowerShell = windowsPowerShell;
+exports.parsePsCpuTicks = parsePsCpuTicks;
+exports.parseDarwinPs = parseDarwinPs;
+exports.parseWindowsSnapshot = parseWindowsSnapshot;
+exports.windowsTree = windowsTree;
+exports.windowsPlatform = windowsPlatform;
+exports.processPlatform = processPlatform;
+exports.setProcessPlatform = setProcessPlatform;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const promises_1 = require("fs/promises");
+const gone = (error) => ['ENOENT', 'ESRCH'].includes(error.code ?? '');
+function signalPosixGroup(group, signal) {
+    try {
+        process.kill(-group, signal);
+    }
+    catch (error) {
+        if (error.code !== 'ESRCH')
+            return false;
+    }
+    return true;
+}
+// Absolute paths, so a PATH entry cannot substitute the tool whose output decides what gets killed.
+const PS_BIN = '/bin/ps', SYSCTL_BIN = '/usr/sbin/sysctl';
+/** `%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe` from the first of SystemRoot
+ * and windir that is a plain absolute drive path; otherwise the bare name, resolved through PATH. */
+function windowsPowerShell(systemRoot = process.env.SystemRoot, windir = process.env.windir) {
+    const root = [systemRoot, windir].find(value => value && /^[A-Za-z]:\\[^"*?<>|]*$/.test(value));
+    return root ? `${root.replace(/\\+$/, '')}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe` : 'powershell.exe';
+}
+function run(file, args, timeout = 10000) {
+    return new Promise(resolve => {
+        (0, child_process_1.execFile)(file, args, { encoding: 'utf8', timeout, windowsHide: true, maxBuffer: 32 * 1024 * 1024, env: { ...process.env, LC_ALL: 'C' } }, (error, stdout) => resolve(error ? undefined : stdout));
+    });
+}
+exports.linuxPlatform = {
+    detachWorkers: true, termGraceMs: 2000, pollMs: 25, killSettleMs: 50,
+    async groupMembers(group) {
+        const members = [];
+        try {
+            for (const entry of (0, fs_1.readdirSync)('/proc')) {
+                if (!/^\d+$/.test(entry))
+                    continue;
+                try {
+                    const stat = (0, fs_1.readFileSync)(`/proc/${entry}/stat`, 'utf8');
+                    const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+                    if (Number(fields[2]) === group && fields[0] !== 'Z' && fields[0] !== 'X')
+                        members.push(Number(entry));
+                }
+                catch (error) {
+                    if (!gone(error))
+                        return undefined;
+                }
+            }
+            return members;
+        }
+        catch {
+            return undefined;
+        }
+    },
+    async signalGroup(group, signal) { return signalPosixGroup(group, signal); },
+    async fingerprint(pid) {
+        try {
+            const stat = (0, fs_1.readFileSync)(`/proc/${pid}/stat`, 'utf8');
+            const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+            if (Number(fields[2]) !== pid)
+                return undefined;
+            return { bootId: (0, fs_1.readFileSync)('/proc/sys/kernel/random/boot_id', 'utf8').trim(), startTicks: fields[19] };
+        }
+        catch {
+            return undefined;
+        }
+    },
+    async bootId() {
+        try {
+            return (0, fs_1.readFileSync)('/proc/sys/kernel/random/boot_id', 'utf8').trim() || undefined;
+        }
+        catch {
+            return undefined;
+        }
+    },
+    async snapshot() {
+        const members = new Map();
+        const entries = await (0, promises_1.readdir)('/proc');
+        // Sequential stat reads bound open files and memory on busy shared hosts.
+        for (const entry of entries) {
+            if (!/^\d+$/.test(entry))
+                continue;
+            try {
+                const stat = await (0, promises_1.readFile)(`/proc/${entry}/stat`, 'utf8');
+                const f = stat.slice(stat.lastIndexOf(')') + 2).trim().split(/\s+/);
+                members.set(Number(entry), { pid: Number(entry), parent: Number(f[1]), group: Number(f[2]), state: f[0], start: f[19], cpu: Number(f[11]) + Number(f[12]) });
+            }
+            catch { /* Processes may exit while being sampled. */ }
+        }
+        return members;
+    },
+    async refine(m) {
+        try {
+            const io = await (0, promises_1.readFile)(`/proc/${m.pid}/io`, 'utf8');
+            // Logical I/O includes pipes/cache, so piped test output is visible.
+            m.read = Number(/^rchar:\s+(\d+)/m.exec(io)?.[1]);
+            m.write = Number(/^wchar:\s+(\d+)/m.exec(io)?.[1]);
+        }
+        catch { /* CPU/membership remain usable without I/O permission. */ }
+        try {
+            const stat = await (0, promises_1.readFile)(`/proc/${m.pid}/stat`, 'utf8');
+            return stat.slice(stat.lastIndexOf(')') + 2).trim().split(/\s+/)[19] === m.start;
+        }
+        catch {
+            return false;
+        }
+    },
+};
+/** BSD ps `time` is [[dd-]hh:]mm:ss.cc of user+system CPU. */
+function parsePsCpuTicks(value) {
+    const [days, clock] = value.includes('-') ? value.split('-') : ['0', value];
+    const seconds = clock.split(':').reduce((total, part) => total * 60 + Number(part), 0) + Number(days) * 86400;
+    return Number.isFinite(seconds) ? Math.round(seconds * 100) : 0;
+}
+/** `ps -o pid=,ppid=,pgid=,stat=,time=,lstart=[,comm=]`. lstart is always five
+ * fields ("Mon Sep 28 10:00:01 2026"); an optional comm (may hold spaces) follows. */
+function parseDarwinPs(output) {
+    const members = new Map();
+    for (const line of output.split('\n')) {
+        const match = /^\s*(\d+)\s+(\d+)\s+(\d+)\s+(\S+)\s+(\S+)\s+(\S+\s+\S+\s+\d+\s+[\d:]+\s+\d+)(?:\s+(.*?))?\s*$/.exec(line);
+        if (!match)
+            continue;
+        const pid = Number(match[1]);
+        members.set(pid, { pid, parent: Number(match[2]), group: Number(match[3]), state: match[4], start: match[6].replace(/\s+/g, ' '), cpu: parsePsCpuTicks(match[5]),
+            ...(match[7] ? { command: match[7] } : {}) });
+    }
+    return members;
+}
+const PS_COLUMNS = 'pid=,ppid=,pgid=,stat=,time=,lstart=';
+exports.darwinPlatform = {
+    detachWorkers: true, termGraceMs: 2000, pollMs: 50, killSettleMs: 50,
+    async groupMembers(group) {
+        const output = await run(PS_BIN, ['-A', '-o', 'pid=,pgid=,stat=']);
+        if (output === undefined)
+            return undefined;
+        const members = [];
+        for (const line of output.split('\n')) {
+            const [pid, pgid, state] = line.trim().split(/\s+/);
+            if (Number(pgid) === group && state && state[0] !== 'Z')
+                members.push(Number(pid));
+        }
+        return members;
+    },
+    async signalGroup(group, signal) { return signalPosixGroup(group, signal); },
+    async fingerprint(pid) {
+        // ps exits 1 for an unknown pid; that is "no identity", not an error.
+        const [output, bootId] = await Promise.all([run(PS_BIN, ['-p', String(pid), '-o', `${PS_COLUMNS},comm=`]), exports.darwinPlatform.bootId()]);
+        const record = output === undefined ? undefined : parseDarwinPs(output).get(pid);
+        if (!record?.command || record.group !== pid || record.state[0] === 'Z' || !bootId)
+            return undefined;
+        // ps offers no start time finer than lstart's 1s, so a PID reused within the
+        // same second would match on start alone; the executable (and the group-leader
+        // check above) must match too. Only this per-attempt call pays for comm.
+        return { bootId, startTicks: `${record.start}|${record.command}` };
+    },
+    async bootId() { return (await run(SYSCTL_BIN, ['-n', 'kern.bootsessionuuid']))?.trim() || undefined; },
+    async snapshot() {
+        const output = await run(PS_BIN, ['-A', '-o', PS_COLUMNS]);
+        return output === undefined ? undefined : parseDarwinPs(output);
+    },
+};
+/** Windows has no process groups and no reparenting: a child keeps the PID of
+ * its dead parent. A tree edge is trusted only when the child was created no
+ * earlier than that parent, which rejects edges to a reused parent PID. */
+// Plain .NET WMI (System.Management), never a cmdlet: resolving a cmdlet such as
+// Get-CimInstance makes PowerShell run module discovery, which without a warm
+// module-analysis cache (e.g. under the minimal env a desktop app gives its
+// sidecar) takes 20-70s and outlives the timeout, so no stop could be proven.
+const WIN_WMI = "$ErrorActionPreference='Stop';$null=[Reflection.Assembly]::Load('System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a');";
+const winQuery = (wql, row) => `${WIN_WMI}foreach($p in [Management.ManagementObjectSearcher]::new('${wql}').Get()){${row}}`;
+const winTime = (field) => `[Management.ManagementDateTimeConverter]::ToDateTime($p['${field}']).ToFileTimeUtc()`;
+const WIN_SNAPSHOT = winQuery('SELECT ProcessId,ParentProcessId,CreationDate,KernelModeTime,UserModeTime,ReadTransferCount,WriteTransferCount FROM Win32_Process', `if($p['CreationDate']){'{0} {1} {2} {3} {4} {5}' -f $p['ProcessId'],$p['ParentProcessId'],${winTime('CreationDate')},([uint64]$p['KernelModeTime']+[uint64]$p['UserModeTime']),$p['ReadTransferCount'],$p['WriteTransferCount']}`);
+// LastBootUpTime is the boot identity. It does not follow wall-clock changes
+// (checked on a Windows runner: a +/-3h Set-Date left it identical to the 100ns),
+// so it is compared exactly.
+const WIN_BOOT = winQuery('SELECT LastBootUpTime FROM Win32_OperatingSystem', winTime('LastBootUpTime'));
+function parseWindowsSnapshot(output) {
+    const members = new Map();
+    for (const line of output.split(/\r?\n/)) {
+        const match = /^(\d+) (\d+) (\d+) (\d+) (\d*) (\d*)$/.exec(line.trim());
+        if (!match)
+            continue;
+        const pid = Number(match[1]);
+        // 100ns units -> 10ms ticks, matching Linux USER_HZ accounting.
+        members.set(pid, { pid, parent: Number(match[2]), group: 0, state: 'R', start: match[3], cpu: Math.floor(Number(match[4]) / 100000),
+            ...(match[5] ? { read: Number(match[5]) } : {}), ...(match[6] ? { write: Number(match[6]) } : {}) });
+    }
+    return members;
+}
+const filetime = (value) => /^\d+$/.test(value) ? BigInt(value) : undefined;
+const notBefore = (child, parent) => filetime(parent) !== undefined && filetime(child) >= filetime(parent);
+/** Members of the tree rooted at `root`. `known` holds pid->start of members owned
+ * at the previous snapshot, so a grandchild orphaned by an exited intermediate is
+ * still owned. Undefined when nothing is proven: the root PID now belongs to a
+ * different process (its original tree may still have orphans that cannot be told
+ * apart), or the root is gone and no start identity anchors its orphans. */
+function windowsTree(snapshot, root, known = new Map(), rootStart) {
+    const expected = known.get(root) ?? rootStart;
+    const lineage = new Map(known);
+    if (expected !== undefined)
+        lineage.set(root, expected);
+    const owned = new Map();
+    const current = snapshot.get(root);
+    if (current && expected !== undefined && current.start !== expected)
+        return undefined;
+    if (!current && expected === undefined)
+        return undefined;
+    if (current) {
+        owned.set(root, current.start);
+        lineage.set(root, current.start);
+    }
+    let changed = true;
+    while (changed) {
+        changed = false;
+        for (const m of snapshot.values()) {
+            if (owned.has(m.pid) || m.pid === m.parent)
+                continue;
+            // A live parent must itself be owned; a dead one is trusted from lineage.
+            // Residual gap: if a member dies, an unrelated process reuses its PID, starts
+            // a child and dies too, all between two snapshots, that child passes the
+            // creation-time check against the member's recorded start. Closing it needs
+            // each member's exit time, which WMI does not report; the lineage is kept
+            // for one snapshot only, so the window is one poll interval.
+            const parentStart = snapshot.has(m.parent) ? owned.get(m.parent) : lineage.get(m.parent);
+            if (known.get(m.pid) === m.start || (parentStart !== undefined && notBefore(m.start, parentStart))) {
+                owned.set(m.pid, m.start);
+                changed = true;
+            }
+        }
+    }
+    return owned;
+}
+const bounded = (map, key, value) => {
+    map.delete(key);
+    map.set(key, value);
+    for (const oldest of map.keys()) {
+        if (map.size <= 256)
+            break;
+        map.delete(oldest);
+    }
+};
+function windowsPlatform(powershell = windowsPowerShell()) {
+    // Latest root identity per PID: its start (`spawned` when recorded while the
+    // child handle was held), or null when the root exited before it could be
+    // recorded (a live process at that PID is then someone else).
+    // Use refreshes an entry's place in the 256-entry budget, so a long-running
+    // worker is not evicted by later spawns.
+    const roots = new Map();
+    // Roots whose tree was proven empty move here, on their own budget: they no
+    // longer displace live roots, yet a stop retried after the PID is reused is
+    // still refused rather than adopting the new process.
+    const retired = new Map();
+    const recordedRoot = (pid) => {
+        const live = roots.get(pid);
+        if (live)
+            bounded(roots, pid, live);
+        return live ?? retired.get(pid);
+    };
+    // Lineage per root identity (pid:start), replaced by every snapshot: a dead
+    // member is trusted as a parent only in the first snapshot that misses it, so
+    // an entry never outlives its PID into a later reuse. Dropped once the tree is
+    // proven empty; the root entry is retired, never dropped, so the PID is never
+    // re-adopted blindly.
+    const lineages = new Map();
+    const ps = (script) => run(powershell, ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command', script], 30000);
+    const snapshot = async () => { const output = await ps(WIN_SNAPSHOT); return output === undefined ? undefined : parseWindowsSnapshot(output); };
+    // The boot time cannot change while this process runs, so one query serves
+    // every fingerprint; a failed query is retried on the next call.
+    let bootQuery;
+    const bootTime = () => {
+        const pending = bootQuery ?? (bootQuery = ps(WIN_BOOT).then(output => output?.trim() || undefined));
+        void pending.then(value => { if (value === undefined && bootQuery === pending)
+            bootQuery = undefined; });
+        return pending;
+    };
+    const tree = async (group, rootStart) => {
+        const entry = recordedRoot(group);
+        const recorded = await entry;
+        const processes = await snapshot();
+        if (!processes || (rootStart === undefined && recorded === null))
+            return undefined;
+        // An unrecorded root is adopted only while it is alive; a dead one proves nothing.
+        const start = rootStart ?? recorded?.start ?? processes.get(group)?.start;
+        if (start === undefined)
+            return undefined;
+        const key = `${group}:${start}`;
+        const owned = windowsTree(processes, group, lineages.get(key), start);
+        if (!owned)
+            return undefined;
+        if (owned.size)
+            bounded(lineages, key, owned);
+        else
+            lineages.delete(key);
+        // Only for the recorded identity, and unless a new root was recorded at this PID meanwhile.
+        if (roots.get(group) === entry && (recorded === undefined || recorded?.start === start)) {
+            const root = recorded === undefined ? Promise.resolve({ start, spawned: false }) : entry;
+            if (owned.size)
+                bounded(roots, group, root);
+            else {
+                roots.delete(group);
+                bounded(retired, group, root);
+            }
+        }
+        return owned;
+    };
+    return {
+        // Each poll is a PowerShell WMI snapshot (0.4-4s), so poll far less often than POSIX.
+        detachWorkers: false, termGraceMs: 2000, pollMs: 500, killSettleMs: 500,
+        async groupMembers(group, rootStart) { const owned = await tree(group, rootStart); return owned && [...owned.keys()]; },
+        // Console processes cannot be asked to exit politely, so both signals terminate
+        // every creation-time-verified member individually. Never taskkill /T: it
+        // follows bare parent PIDs, which Windows keeps after the parent dies.
+        // Termination is by PID, right after the snapshot that verified each creation
+        // time; a PID that exits and is reused in that gap (milliseconds) cannot be
+        // re-checked without another snapshot. Only a job object, assigned at spawn,
+        // would close that window.
+        async signalGroup(group, _signal, rootStart) {
+            const owned = await tree(group, rootStart);
+            if (!owned)
+                return false;
+            for (const pid of owned.keys()) {
+                try {
+                    process.kill(pid, 'SIGKILL');
+                }
+                catch (error) {
+                    if (!gone(error))
+                        return false;
+                }
+            }
+            return true;
+        },
+        async fingerprint(pid) {
+            const recorded = await recordedRoot(pid);
+            if (recorded === null)
+                return undefined;
+            // Recorded at spawn while the handle was held: that start is our worker's,
+            // even if the PID has been reused since, and needs no fresh snapshot.
+            if (recorded?.spawned) {
+                const boot = await bootTime();
+                return boot ? { bootId: boot, startTicks: recorded.start } : undefined;
+            }
+            const [processes, boot] = await Promise.all([snapshot(), bootTime()]);
+            const record = processes?.get(pid);
+            if (!record || !boot || (recorded && record.start !== recorded.start))
+                return undefined;
+            return { bootId: boot, startTicks: record.start };
+        },
+        bootId: bootTime,
+        snapshot,
+        tree(processes, root, known) {
+            const owned = windowsTree(processes, root, known);
+            // The activity sampler's fresher view also serves a later stop of an
+            // adopted root, without another snapshot.
+            const key = `${root}:${owned?.get(root)}`;
+            if (owned && lineages.has(key)) {
+                bounded(lineages, key, owned);
+                recordedRoot(root);
+            }
+            return owned;
+        },
+        adopt(pid, alive) {
+            const root = snapshot().then((processes) => {
+                if (!processes)
+                    return undefined;
+                const start = processes.get(pid)?.start;
+                if (start === undefined || !alive())
+                    return null;
+                // A new root at a reused PID starts a fresh lineage.
+                bounded(lineages, `${pid}:${start}`, new Map([[pid, start]]));
+                return { start, spawned: true };
+            });
+            bounded(roots, pid, root);
+            retired.delete(pid);
+            return root.then(recorded => recorded?.start);
+        },
+    };
+}
+let selected;
+/** The supervisor for this host, or undefined where orchestration cannot prove process lifetime. */
+function processPlatform() {
+    if (selected === undefined)
+        selected = process.platform === 'linux' ? exports.linuxPlatform : process.platform === 'darwin' ? exports.darwinPlatform : process.platform === 'win32' ? windowsPlatform() : null;
+    return selected ?? undefined;
+}
+/** Test hook: substitute a platform (e.g. a mocked Windows supervisor on Linux CI). */
+function setProcessPlatform(platform) { selected = platform; }
+//# sourceMappingURL=process-platform.js.map

package/dist/orchestration/process-platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-platform.js","sourceRoot":"","sources":["../../src/orchestration/process-platform.ts"],"names":[],"mappings":";;;AAmDA,8CAGC;AAiED,0CAIC;AAGD,sCAUC;AAgDD,oDAWC;AAQD,kCAyBC;AAMD,0CAuGC;AAID,0CAGC;AAED,gDAA+G;AA1V/G,iDAAyC;AACzC,2BAA+C;AAC/C,0CAAgD;AAwChD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC3G,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAA6B;IACpE,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IAAC,CAAC;IAC5H,OAAO,IAAI,CAAC;AACd,CAAC;AACD,oGAAoG;AACpG,MAAM,MAAM,GAAG,SAAS,EAAE,UAAU,GAAG,kBAAkB,CAAC;AAC1D;qGACqG;AACrG,SAAgB,iBAAiB,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM;IAChG,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qDAAqD,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACpH,CAAC;AACD,SAAS,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,OAAO,GAAG,KAAM;IACzD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,IAAA,wBAAQ,EAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EACtI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAEY,QAAA,aAAa,GAAoB;IAC5C,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;IACpE,KAAK,CAAC,YAAY,CAAC,KAAK;QACtB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,IAAA,gBAAW,EAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;oBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAChE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzG,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;gBAAC,CAAC;YACzD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,IAAI,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,WAAW,CAAC,GAAG;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,IAAA,iBAAY,EAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5G,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YAAC,OAAO,IAAA,iBAAY,EAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IACzH,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAC;QACvC,0EAA0E;QAC1E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/J,CAAC;YAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAA,mBAAQ,EAAC,SAAS,CAAC,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;YACvD,qEAAqE;YACrE,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;CACF,CAAC;AAEF,8DAA8D;AAC9D,SAAgB,eAAe,CAAC,KAAa;IAC3C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9G,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AACD;sFACsF;AACtF,SAAgB,aAAa,CAAC,MAAc;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,+FAA+F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9J,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC7C,QAAA,cAAc,GAAoB;IAC7C,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;IACpE,KAAK,CAAC,YAAY,CAAC,KAAK;QACtB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,IAAI,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,WAAW,CAAC,GAAG;QACnB,sEAAsE;QACtE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,UAAU,QAAQ,CAAC,CAAC,EAAE,sBAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrI,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACrG,6EAA6E;QAC7E,+EAA+E;QAC/E,yEAAyE;QACzE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC;IACvG,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;CACF,CAAC;AAEF;;2EAE2E;AAC3E,iFAAiF;AACjF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,OAAO,GAAG,0JAA0J,CAAC;AAC3K,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,OAAO,6DAA6D,GAAG,aAAa,GAAG,GAAG,CAAC;AAC7I,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,4DAA4D,KAAK,qBAAqB,CAAC;AAC1H,MAAM,YAAY,GAAG,QAAQ,CAAC,mIAAmI,EAC/J,6FAA6F,OAAO,CAAC,cAAc,CAAC,8GAA8G,CAAC,CAAC;AACtO,6EAA6E;AAC7E,kFAAkF;AAClF,6BAA6B;AAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,kDAAkD,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACzG,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,gEAAgE;QAChE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAO,CAAC;YAClI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAE,IAAI,QAAQ,CAAC,MAAM,CAAE,CAAC;AAC7H;;;;4EAI4E;AAC5E,SAAgB,WAAW,CAAC,QAAoC,EAAE,IAAY,EAAE,QAA6B,IAAI,GAAG,EAAE,EAAE,SAAkB;IACxI,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,CAAC,OAAO,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,OAAO,EAAE,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAClF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM;gBAAE,SAAS;YACrD,0EAA0E;YAC1E,8EAA8E;YAC9E,yEAAyE;YACzE,4EAA4E;YAC5E,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACzF,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;QACpJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,OAAO,GAAG,CAAO,GAAc,EAAE,GAAM,EAAE,KAAQ,EAAE,EAAE;IACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG;YAAE,MAAM;QAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;AACtF,CAAC,CAAC;AAEF,SAAgB,eAAe,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAC9D,6EAA6E;IAC7E,0EAA0E;IAC1E,8DAA8D;IAC9D,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,4EAA4E;IAC5E,4EAA4E;IAC5E,sDAAsD;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IACxD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,MAAM,EAAE,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,KAAM,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE,GAAG,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChJ,2EAA2E;IAC3E,iEAAiE;IACjE,IAAI,SAAkD,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,OAAO,GAAG,SAAS,KAAT,SAAS,GAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAA,CAAC;QACvF,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO;YAAE,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAa,EAAE,SAAkB,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACnF,mFAAmF;QACnF,MAAM,KAAK,GAAG,SAAS,IAAI,QAAQ,EAAE,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC1E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;;YAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzE,4FAA4F;QAC5F,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,EAAE,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAc,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC;YACvG,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;iBAAM,CAAC;gBAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;QAC3G,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO;QACL,sFAAsF;QACtF,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG;QACvE,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvH,gFAAgF;QAChF,0EAA0E;QAC1E,uEAAuE;QACvE,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,2BAA2B;QAC3B,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS;YACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;wBAAE,OAAO,KAAK,CAAC;gBAAC,CAAC;YAAC,CAAC;YAC3H,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAAG;YACnB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YACxC,2EAA2E;YAC3E,sEAAsE;YACtE,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;gBAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAAC,CAAC;YACjI,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,EAAE,QAAQ;QAChB,QAAQ;QACR,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK;YACzB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,qEAAqE;YACrE,0CAA0C;YAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YACtF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,KAAK;YACd,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAe,EAAE;gBACtD,IAAI,CAAC,SAAS;oBAAE,OAAO,SAAS,CAAC;gBACjC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;gBACxC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;oBAAE,OAAO,IAAI,CAAC;gBACjD,qDAAqD;gBACrD,OAAO,CAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,IAAI,QAA4C,CAAC;AACjD,oGAAoG;AACpG,SAAgB,eAAe;IAC7B,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAa,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAc,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/L,OAAO,QAAQ,IAAI,SAAS,CAAC;AAC/B,CAAC;AACD,uFAAuF;AACvF,SAAgB,kBAAkB,CAAC,QAA4C,IAAU,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC"}

package/dist/orchestration/process-supervisor.d.ts

@@ -1,15 +1,39 @@
-/** Linux process-group evidence ignores exited zombies. Escaped/detached
- * process groups are outside this proof and must be reconciled separately. */
-export declare function liveGroupMembers(group: number): number[] | undefined;
+import type { ChildProcess } from 'child_process';
+import { type Fingerprint } from './process-platform';
+/** Hosts where orchestration can prove a worker's processes stopped. */
+export declare function processSupervisorSupported(): boolean;
+/** `detached` for a worker spawn: POSIX workers lead their own process group
+ * (also on hosts without a supervisor); Windows workers stay attached and are
+ * supervised as a tree. */
+export declare function workerSpawnDetached(): boolean;
+type RootChild = Pick<ChildProcess, 'pid' | 'exitCode' | 'signalCode'>;
+/** Call right after spawning a supervised worker or probe root. Windows records
+ * the root's start identity while the child handle still pins its PID, so a stop
+ * can anchor orphans after the root exits and a reused PID is never adopted. */
+export declare function recordProcessRoot(child: RootChild): void;
+/** Process-group evidence ignores exited zombies. On POSIX, escaped/detached
+ * process groups are outside this proof and must be reconciled separately; on
+ * Windows the group is the tree rooted at `group` (see windowsTree). */
+export declare function liveGroupMembers(group: number, rootStart?: string): Promise<number[] | undefined>;
 export declare function stopProcessGroup(group: number): Promise<boolean>;
 /** Kernel identity prevents signalling an unrelated process after PID reuse. */
-export declare function processFingerprint(pid: number): {
-    bootId: string;
-    startTicks: string;
-} | undefined;
+export declare function processFingerprint(pid: number): Promise<Fingerprint | undefined>;
 export declare function cleanupPersistedProcess(identity?: {
     pid: number;
     bootId?: string;
     startTicks?: string;
 }): Promise<boolean>;
+type ProbeChild = RootChild & Pick<ChildProcess, 'kill'>;
+/** Stop a short-lived probe (spawned with `detached: workerSpawnDetached()` and
+ * passed to `recordProcessRoot`) and every process it started. Synchronous
+ * callers may ignore the promise.
+ *
+ * POSIX signals the probe's process group. Windows has no polite console
+ * signal, so SIGTERM only leaves the probe its grace period to exit on stdin
+ * EOF; SIGKILL then terminates the whole tree once, only the creation-time-
+ * verified members of the root identity recorded at spawn, so a reused PID is
+ * refused. A probe whose identity could not be recorded (it exited first) is
+ * not signalled beyond its own handle. */
+export declare function terminateProbeTree(child: ProbeChild, signal: 'SIGTERM' | 'SIGKILL'): Promise<void>;
+export {};
 //# sourceMappingURL=process-supervisor.d.ts.map

package/dist/orchestration/process-supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-supervisor.d.ts","sourceRoot":"","sources":["../../src/orchestration/process-supervisor.ts"],"names":[],"mappings":"AAEA;8EAC8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAcpE;AACD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAatE;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQlG;AACD,wBAAsB,uBAAuB,CAAC,QAAQ,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAQhI"}
+{"version":3,"file":"process-supervisor.d.ts","sourceRoot":"","sources":["../../src/orchestration/process-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGvE,wEAAwE;AACxE,wBAAgB,0BAA0B,IAAI,OAAO,CAAuC;AAC5F;;2BAE2B;AAC3B,wBAAgB,mBAAmB,IAAI,OAAO,CAA6E;AAE3H,KAAK,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC;AAIvE;;gFAEgF;AAChF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAKxD;AAED;;wEAEwE;AACxE,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAIvG;AACD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CActE;AAED,gFAAgF;AAChF,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAItF;AACD,wBAAsB,uBAAuB,CAAC,QAAQ,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAYhI;AAED,KAAK,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAGzD;;;;;;;;;0CAS0C;AAC1C,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxG"}