@1mcp/agent 0.38.1 → 0.39.0-beta.0

package/build/core/server/runtimeControl.js

@@ -0,0 +1,288 @@
+import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import fs from 'node:fs';
+import http from 'node:http';
+import path from 'node:path';
+import { credentialReadFlags, hasSafeCredentialPermissions } from '../../utils/filePermissions.js';
+import { z } from 'zod';
+import { readRuntimeScopeOwnership } from './runtimeScopeOwnership.js';
+const CONTROL_FILE = 'runtime-control.json';
+const LIMIT = 1024 * 1024;
+const nonceSchema = z.string().min(16).max(128);
+const descriptorSchema = z
+    .object({
+    version: z.literal(1),
+    configDir: z.string(),
+    claimId: nonceSchema,
+    url: z
+        .string()
+        .url()
+        .refine((value) => {
+        const url = new URL(value);
+        return (url.protocol === 'http:' &&
+            url.hostname === '127.0.0.1' &&
+            !!url.port &&
+            url.pathname === '/' &&
+            !url.username &&
+            !url.password &&
+            !url.search &&
+            !url.hash);
+    }),
+})
+    .strict();
+const methodSchema = z.enum(['describe', 'prepare-replacement', 'commit-replacement', 'operation-status', 'stop']);
+const descriptionSchema = z
+    .object({
+    runtime: z
+        .object({
+        pid: z.number().int().positive(),
+        url: z.string().url(),
+        port: z.number().int().min(1).max(65535),
+        host: z.string(),
+        transport: z.literal('http'),
+        startedAt: z.string(),
+        configDir: z.string(),
+        logFile: z.string().optional(),
+    })
+        .passthrough()
+        .nullable(),
+    runtimeScopeId: z.string().min(1),
+    version: z.string(),
+    explicitInputs: z.unknown().optional(),
+    digest: z.string(),
+    supervisorPid: z.number().int().positive(),
+    state: z.string(),
+})
+    .passthrough();
+const challengeRequestSchema = z.object({ nonce: nonceSchema }).strict();
+const challengeSchema = z
+    .object({ nonce: nonceSchema, challenge: nonceSchema, expires: z.number().int(), signature: z.string() })
+    .strict();
+const requestSchema = z
+    .object({
+    nonce: nonceSchema,
+    challenge: nonceSchema,
+    expires: z.number().int(),
+    method: methodSchema,
+    operationId: nonceSchema,
+    payload: z.unknown(),
+    signature: z.string(),
+})
+    .strict();
+const responseSchema = z.object({ ok: z.boolean(), value: z.unknown(), signature: z.string() }).strict();
+export function runtimeControlExists(configDir) {
+    try {
+        fs.lstatSync(path.join(configDir, CONTROL_FILE));
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function secretPath(configDir, claimId) {
+    return path.join(configDir, `runtime-control-${createHash('sha256').update(claimId).digest('hex')}.secret`);
+}
+// Unlike legacy credential reads, attachment must never repair or mutate files.
+function readPrivate(file) {
+    const dir = fs.statSync(path.dirname(file));
+    const fd = fs.openSync(file, credentialReadFlags(), 0o600);
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > LIMIT)
+            throw new Error('Invalid runtime control file');
+        if (!hasSafeCredentialPermissions(dir, 0o022) || !hasSafeCredentialPermissions(stat, 0o077)) {
+            throw new Error('Runtime control files require owner-only permissions');
+        }
+        return fs.readFileSync(fd, 'utf8');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+function proof(secret, descriptor, purpose, value) {
+    return createHmac('sha256', Buffer.from(secret, 'base64url'))
+        .update(JSON.stringify(['1mcp-runtime-control-v1', descriptor, purpose, value]))
+        .digest('base64url');
+}
+function verify(actual, expected) {
+    const left = Buffer.from(actual, 'base64url');
+    const right = Buffer.from(expected, 'base64url');
+    if (left.length !== right.length || !timingSafeEqual(left, right))
+        throw new Error('Runtime control authentication failed');
+}
+function assertOwner(descriptor) {
+    const owner = readRuntimeScopeOwnership(descriptor.configDir);
+    if (owner?.claimId !== descriptor.claimId || owner.kind !== 'background-supervisor') {
+        throw new Error('Runtime control generation no longer owns this scope');
+    }
+}
+async function readBody(stream) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of stream) {
+        size += chunk.length;
+        if (size > LIMIT)
+            throw new Error('Runtime control message too large');
+        chunks.push(Buffer.from(chunk));
+    }
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+function isValidChallenge(challenge, request) {
+    if (!challenge)
+        return false;
+    if (challenge.nonce !== request.nonce)
+        return false;
+    if (challenge.expires !== request.expires)
+        return false;
+    return challenge.expires > Date.now();
+}
+export async function startRuntimeControl(configDir, claimId, handler) {
+    configDir = fs.realpathSync(configDir);
+    nonceSchema.parse(claimId);
+    const directory = fs.statSync(configDir);
+    if (!hasSafeCredentialPermissions(directory, 0o022)) {
+        throw new Error('Runtime control directory must be owned by the current user and not writable by others');
+    }
+    const secret = randomBytes(32).toString('base64url');
+    const challenges = new Map();
+    let descriptor;
+    const server = http.createServer(async (req, res) => {
+        try {
+            if (req.method !== 'POST')
+                throw new Error('Invalid method');
+            assertOwner(descriptor);
+            const body = await readBody(req);
+            if (req.url === '/challenge') {
+                const { nonce } = challengeRequestSchema.parse(body);
+                for (const [key, value] of challenges)
+                    if (value.expires <= Date.now())
+                        challenges.delete(key);
+                if (challenges.size >= 128)
+                    throw new Error('Too many challenges');
+                const challenge = randomBytes(32).toString('base64url');
+                const expires = Date.now() + 10_000;
+                const value = { nonce, challenge, expires };
+                challenges.set(challenge, { nonce, expires });
+                res.end(JSON.stringify({ ...value, signature: proof(secret, descriptor, 'challenge', value) }));
+                return;
+            }
+            if (req.url !== '/request')
+                throw new Error('Invalid endpoint');
+            const { signature, ...request } = requestSchema.parse(body);
+            const challenge = challenges.get(request.challenge);
+            challenges.delete(request.challenge);
+            if (!isValidChallenge(challenge, request)) {
+                throw new Error('Expired or consumed runtime control challenge');
+            }
+            verify(signature, proof(secret, descriptor, 'request', request));
+            let value;
+            let ok = true;
+            try {
+                value = await handler(request.method, request.payload, request.operationId);
+            }
+            catch {
+                ok = false;
+                value = 'Runtime control operation failed';
+            }
+            const result = { ok, value: value ?? null };
+            res.end(JSON.stringify({ ...result, signature: proof(secret, descriptor, 'response', [request, result]) }));
+        }
+        catch {
+            res.statusCode = 403;
+            res.end('Runtime control request rejected');
+        }
+    });
+    server.requestTimeout = 5_000;
+    server.headersTimeout = 5_000;
+    server.timeout = 10_000;
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', resolve);
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string')
+        throw new Error('Runtime control listener unavailable');
+    descriptor = { version: 1, configDir, claimId, url: `http://127.0.0.1:${address.port}/` };
+    const metadata = path.join(configDir, CONTROL_FILE);
+    const secretFile = secretPath(configDir, claimId);
+    let createdSecret = false;
+    try {
+        assertOwner(descriptor);
+        fs.writeFileSync(secretFile, secret, { mode: 0o600, flag: 'wx' });
+        createdSecret = true;
+        // Claim acquisition serializes publication; never overwrite another generation.
+        fs.writeFileSync(metadata, JSON.stringify(descriptor), { mode: 0o600, flag: 'wx' });
+    }
+    catch (error) {
+        server.close();
+        if (createdSecret)
+            fs.unlinkSync(secretFile);
+        throw error;
+    }
+    return {
+        descriptor,
+        close: async () => {
+            await new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+            if (runtimeControlExists(configDir)) {
+                const current = descriptorSchema.parse(JSON.parse(readPrivate(metadata)));
+                if (current.claimId === claimId && current.url === descriptor.url)
+                    fs.unlinkSync(metadata);
+            }
+            fs.rmSync(secretFile, { force: true });
+        },
+    };
+}
+export async function connectRuntimeControl(configDir) {
+    if (!runtimeControlExists(configDir))
+        return null;
+    configDir = fs.realpathSync(configDir);
+    const descriptor = descriptorSchema.parse(JSON.parse(readPrivate(path.join(configDir, CONTROL_FILE))));
+    if (descriptor.configDir !== configDir)
+        throw new Error('Runtime control scope mismatch');
+    assertOwner(descriptor);
+    const secret = readPrivate(secretPath(configDir, descriptor.claimId));
+    if (!/^[A-Za-z0-9_-]{43}$/.test(secret))
+        throw new Error('Invalid runtime control credential');
+    const post = async (endpoint, value) => {
+        const response = await fetch(new URL(endpoint, descriptor.url), {
+            method: 'POST',
+            redirect: 'error',
+            signal: AbortSignal.timeout(5000),
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(value),
+        }).catch(() => {
+            throw new Error('Runtime control is unreachable. Preserve ownership metadata and use the original CLI or service manager for explicit recovery.');
+        });
+        if (!response.ok || !response.body)
+            throw new Error('Runtime control request rejected');
+        return readBody(response.body);
+    };
+    return {
+        descriptor,
+        request: async (method, payload = {}, operationId = randomUUID()) => {
+            assertOwner(descriptor);
+            const nonce = randomBytes(32).toString('base64url');
+            const { signature, ...challenge } = challengeSchema.parse(await post('challenge', { nonce }));
+            if (challenge.nonce !== nonce || challenge.expires <= Date.now())
+                throw new Error('Stale runtime control challenge');
+            verify(signature, proof(secret, descriptor, 'challenge', challenge));
+            assertOwner(descriptor);
+            const request = { ...challenge, method, operationId, payload };
+            const response = responseSchema.parse(await post('request', { ...request, signature: proof(secret, descriptor, 'request', request) }));
+            const result = { ok: response.ok, value: response.value };
+            verify(response.signature, proof(secret, descriptor, 'response', [request, result]));
+            if (!response.ok)
+                throw new Error('Runtime control operation failed');
+            if (method === 'describe') {
+                const description = descriptionSchema.parse(response.value);
+                if (description.runtime && fs.realpathSync(description.runtime.configDir) !== configDir) {
+                    throw new Error('Runtime endpoint scope mismatch');
+                }
+                return description;
+            }
+            return response.value;
+        },
+    };
+}
+//# sourceMappingURL=runtimeControl.js.map

package/build/core/server/runtimeControl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeControl.js","sourceRoot":"","sources":["../../../src/core/server/runtimeControl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAElG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1B,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAChD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,WAAW;IACpB,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,CAAC,CAAC,GAAG,CAAC,IAAI;YACV,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,MAAM;YACX,CAAC,GAAG,CAAC,IAAI,CACV,CAAC;IACJ,CAAC,CAAC;CACL,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;AAUnH,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC;KACD,WAAW,EAAE,CAAC;AAOjB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzE,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KACxG,MAAM,EAAE,CAAC;AACZ,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,MAAM,EAAE,YAAY;IACpB,WAAW,EAAE,WAAW;IACxB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEzG,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,OAAe;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC9G,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACzF,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AACD,SAAS,KAAK,CAAC,MAAc,EAAE,UAAoC,EAAE,OAAe,EAAE,KAAc;IAClG,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;SAC1D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,yBAAyB,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;SAC/E,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,MAAM,CAAC,MAAc,EAAE,QAAgB;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,WAAW,CAAC,UAAoC;IACvD,MAAM,KAAK,GAAG,yBAAyB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,KAAK,EAAE,OAAO,KAAK,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,MAAiC;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CACvB,SAAyD,EACzD,OAA2C;IAE3C,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,OAAe,EACf,OAA8B;IAK9B,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACvC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8C,CAAC;IACzE,IAAI,UAAoC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC7D,WAAW,CAAC,UAAU,CAAC,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;gBAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU;oBAAE,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;wBAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/F,IAAI,UAAU,CAAC,IAAI,IAAI,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACnE,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;gBACpC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC5C,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChG,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,IAAI,KAAc,CAAC;YACnB,IAAI,EAAE,GAAG,IAAI,CAAC;YACd,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,KAAK,CAAC;gBACX,KAAK,GAAG,kCAAkC,CAAC;YAC7C,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YAC5C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9G,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrG,UAAU,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,oBAAoB,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,WAAW,CAAC,UAAU,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,aAAa,GAAG,IAAI,CAAC;QACrB,gFAAgF;QAChF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,aAAa;YAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO;QACL,UAAU;QACV,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3G,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1E,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG;oBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC7F,CAAC;YACD,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAI3D,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1F,WAAW,CAAC,UAAU,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAE,KAAc,EAAoB,EAAE;QACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,OAAO;QACL,UAAU;QACV,OAAO,EAAE,KAAK,EACZ,MAA4B,EAC5B,UAAmB,EAAE,EACrB,cAAsB,UAAU,EAAE,EACtB,EAAE;YACd,WAAW,CAAC,UAAU,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9F,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YACrE,WAAW,CAAC,UAAU,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CACnC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAChG,CAAC;YACF,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtE,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC5D,IAAI,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;oBACxF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,WAAgB,CAAC;YAC1B,CAAC;YACD,OAAO,QAAQ,CAAC,KAAU,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/core/server/runtimeDrain.d.ts

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+export declare const admissionSnapshotSchema: z.ZodObject<{
+    closed: z.ZodBoolean;
+    active: z.ZodNumber;
+    committed: z.ZodBoolean;
+}, z.core.$strip>;
+export type AdmissionSnapshot = z.infer<typeof admissionSnapshotSchema>;
+export declare class RuntimeDrainingError extends Error {
+    readonly code = -32004;
+    readonly data: {
+        retryable: boolean;
+        reason: string;
+    };
+    constructor();
+}
+/** Admission and increment are synchronous. Nested dispatch retains its root until all work settles. */
+export declare class RuntimeAdmission {
+    private closed;
+    private committed;
+    private active;
+    private readonly context;
+    private readonly listeners;
+    snapshot(): AdmissionSnapshot;
+    subscribe(listener: (snapshot: AdmissionSnapshot) => void): () => void;
+    private changed;
+    begin(): () => void;
+    /** Retain only an existing admitted root; transport observers never admit background work. */
+    retain(): (() => void) | undefined;
+    run<T>(work: () => Promise<T>): Promise<T>;
+    close(): AdmissionSnapshot;
+    resume(): void;
+    commit(): AdmissionSnapshot;
+}
+export declare const runtimeAdmission: RuntimeAdmission;
+export declare function withRuntimeAdmission<T, Args extends readonly unknown[]>(work: (...args: Args) => Promise<T>): (...args: Args) => Promise<T>;
+export interface ReplacementDrainStatus {
+    operationId: string;
+    digest: string;
+    state: 'preparing' | 'draining' | 'drained' | 'committing' | 'aborted';
+    deadlineUnixMs: number;
+    active: number;
+}
+export interface ReplacementDrainPorts {
+    close(): Promise<AdmissionSnapshot>;
+    resume(): Promise<void>;
+    commit(): Promise<AdmissionSnapshot>;
+}
+/** The supervisor owns this state; worker acknowledgements are supplied over its private IPC channel. */
+export declare class RuntimeReplacementDrain {
+    private readonly ports;
+    private operation?;
+    private readonly history;
+    private timer?;
+    private snapshot?;
+    private resuming?;
+    private closing?;
+    private commitment?;
+    constructor(ports: ReplacementDrainPorts);
+    prepare(operationId: string, digest: string, timeoutMs?: number): Promise<ReplacementDrainStatus>;
+    /** Called only after observing the particular worker exit, before allowing a respawn. */
+    workerExited(): boolean;
+    update(snapshot: AdmissionSnapshot): void;
+    status(operationId: string): ReplacementDrainStatus;
+    commit(operationId: string, digest: string): Promise<ReplacementDrainStatus>;
+    private match;
+    private abort;
+}
+//# sourceMappingURL=runtimeDrain.d.ts.map

package/build/core/server/runtimeDrain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeDrain.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeDrain.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAOxE,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,IAAI;;;MAAmD;;CAIjE;AAED,wGAAwG;AACxG,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqE;IAC7F,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAE9E,QAAQ,IAAI,iBAAiB;IAI7B,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI;IAKtE,OAAO,CAAC,OAAO;IAIf,KAAK,IAAI,MAAM,IAAI;IAanB,8FAA8F;IAC9F,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS;IAc5B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAYhD,KAAK,IAAI,iBAAiB;IAM1B,MAAM,IAAI,IAAI;IAMd,MAAM,IAAI,iBAAiB;CAM5B;AAED,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;AAEvD,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,IAAI,SAAS,SAAS,OAAO,EAAE,EACrE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAClC,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAE/B;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACtC;AAED,yGAAyG;AACzG,qBAAa,uBAAuB;IAStB,OAAO,CAAC,QAAQ,CAAC,KAAK;IARlC,OAAO,CAAC,SAAS,CAAC,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,KAAK,CAAC,CAAgC;IAC9C,OAAO,CAAC,QAAQ,CAAC,CAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAC,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAAC,CAA6B;gBAEnB,KAAK,EAAE,qBAAqB;IAEnD,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA4CvG,yFAAyF;IACzF,YAAY,IAAI,OAAO;IASvB,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI;IAczC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB;IAO7C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAwBlF,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,KAAK;CAUd"}

package/build/core/server/runtimeDrain.js

@@ -0,0 +1,248 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { z } from 'zod';
+export const admissionSnapshotSchema = z.object({
+    closed: z.boolean(),
+    active: z.number().int().nonnegative(),
+    committed: z.boolean(),
+});
+function isDrained(snapshot) {
+    if (!snapshot?.closed)
+        return false;
+    return snapshot.active === 0;
+}
+export class RuntimeDrainingError extends Error {
+    code = -32004;
+    data = { retryable: true, reason: 'runtime_draining' };
+    constructor() {
+        super('Runtime is draining for replacement; retry after it resumes or the replacement activates.');
+    }
+}
+/** Admission and increment are synchronous. Nested dispatch retains its root until all work settles. */
+export class RuntimeAdmission {
+    closed = false;
+    committed = false;
+    active = 0;
+    context = new AsyncLocalStorage();
+    listeners = new Set();
+    snapshot() {
+        return { closed: this.closed, active: this.active, committed: this.committed };
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    changed() {
+        for (const listener of this.listeners)
+            listener(this.snapshot());
+    }
+    begin() {
+        if (this.closed)
+            throw new RuntimeDrainingError();
+        this.active++;
+        this.changed();
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            this.active--;
+            this.changed();
+        };
+    }
+    /** Retain only an existing admitted root; transport observers never admit background work. */
+    retain() {
+        const root = this.context.getStore();
+        if (!root)
+            return undefined;
+        if (root.pending === 0)
+            return undefined;
+        root.pending++;
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            root.pending--;
+            if (root.pending === 0)
+                root.release();
+        };
+    }
+    async run(work) {
+        const inherited = this.context.getStore();
+        const root = inherited && inherited.pending > 0 ? inherited : { pending: 0, release: this.begin() };
+        root.pending++;
+        try {
+            return await this.context.run(root, work);
+        }
+        finally {
+            root.pending--;
+            if (root.pending === 0)
+                root.release();
+        }
+    }
+    close() {
+        this.closed = true;
+        this.changed();
+        return this.snapshot();
+    }
+    resume() {
+        if (this.committed)
+            throw new Error('Committed admission cannot resume');
+        this.closed = false;
+        this.changed();
+    }
+    commit() {
+        if (!isDrained(this.snapshot()))
+            throw new Error('Runtime is not drained');
+        this.committed = true;
+        this.changed();
+        return this.snapshot();
+    }
+}
+export const runtimeAdmission = new RuntimeAdmission();
+export function withRuntimeAdmission(work) {
+    return (...args) => runtimeAdmission.run(() => work(...args));
+}
+/** The supervisor owns this state; worker acknowledgements are supplied over its private IPC channel. */
+export class RuntimeReplacementDrain {
+    ports;
+    operation;
+    history = new Map();
+    timer;
+    snapshot;
+    resuming;
+    closing;
+    commitment;
+    constructor(ports) {
+        this.ports = ports;
+    }
+    async prepare(operationId, digest, timeoutMs = 30_000) {
+        if (!operationId || !digest || !Number.isSafeInteger(timeoutMs) || timeoutMs <= 0) {
+            throw new Error('Invalid replacement preparation');
+        }
+        if (this.history.has(operationId)) {
+            this.match(operationId, digest);
+            return this.status(operationId);
+        }
+        if (this.operation && this.operation.state !== 'aborted')
+            throw new Error('Replacement already in progress');
+        if (this.closing)
+            await this.closing.catch(() => undefined);
+        if (this.resuming)
+            await this.resuming;
+        // Recheck after awaiting a previous resume: a competing prepare may have won.
+        if (this.operation && this.operation.state !== 'aborted')
+            throw new Error('Replacement already in progress');
+        if (this.history.size >= 128)
+            throw new Error('Replacement operation capacity reached; restart the runtime');
+        const operation = {
+            operationId,
+            digest,
+            state: 'preparing',
+            deadlineUnixMs: Date.now() + timeoutMs,
+            active: 0,
+        };
+        this.operation = operation;
+        this.history.set(operationId, operation);
+        this.snapshot = undefined;
+        this.timer = setTimeout(() => this.abort(operation), timeoutMs);
+        this.timer.unref?.();
+        try {
+            this.closing = this.ports.close();
+            const snapshot = await this.closing;
+            if (operation.state === 'aborted' || Date.now() >= operation.deadlineUnixMs) {
+                this.abort(operation);
+                // A late close acknowledgement may arrive after the deadline's resume.
+                this.resuming = this.ports.resume();
+                await this.resuming;
+                return { ...operation };
+            }
+            this.update(snapshot);
+        }
+        catch (error) {
+            this.abort(operation);
+            throw error;
+        }
+        return { ...operation };
+    }
+    /** Called only after observing the particular worker exit, before allowing a respawn. */
+    workerExited() {
+        this.snapshot = undefined;
+        const operation = this.operation;
+        if (!operation)
+            return false;
+        if (operation.state === 'committing')
+            return true;
+        this.abort(operation);
+        return false;
+    }
+    update(snapshot) {
+        this.snapshot = admissionSnapshotSchema.parse(snapshot);
+        const operation = this.operation;
+        if (!operation)
+            return;
+        if (operation.state === 'aborted')
+            return;
+        if (operation.state === 'committing')
+            return;
+        if (Date.now() >= operation.deadlineUnixMs) {
+            this.abort(operation);
+            return;
+        }
+        operation.active = snapshot.active;
+        operation.state = isDrained(snapshot) ? 'drained' : 'draining';
+    }
+    status(operationId) {
+        const operation = this.match(operationId);
+        if (operation.state === 'committing')
+            return { ...operation };
+        if (Date.now() >= operation.deadlineUnixMs)
+            this.abort(operation);
+        return { ...operation };
+    }
+    async commit(operationId, digest) {
+        const operation = this.match(operationId, digest);
+        if (operation.state === 'committing') {
+            await this.commitment;
+            return { ...operation };
+        }
+        this.status(operationId);
+        if (operation.state !== 'drained' || !isDrained(this.snapshot)) {
+            throw new Error('Replacement operation is not drained');
+        }
+        // The irreversible decision and expiry exclusion happen in one synchronous turn.
+        operation.state = 'committing';
+        clearTimeout(this.timer);
+        this.commitment = this.ports.commit().then((snapshot) => {
+            const confirmed = admissionSnapshotSchema.parse(snapshot);
+            if (!confirmed.closed || !confirmed.committed || confirmed.active !== 0) {
+                throw new Error('Worker did not confirm replacement commit; ownership must be retained');
+            }
+            return confirmed;
+        });
+        await this.commitment;
+        return { ...operation };
+    }
+    match(operationId, digest) {
+        const operation = this.history.get(operationId);
+        if (!operation)
+            throw new Error('Unknown replacement operation');
+        if (digest !== undefined && operation.digest !== digest)
+            throw new Error('Replacement digest mismatch');
+        return operation;
+    }
+    abort(operation) {
+        if (this.operation !== operation)
+            return;
+        if (operation.state === 'committing')
+            return;
+        if (operation.state === 'aborted')
+            return;
+        operation.state = 'aborted';
+        clearTimeout(this.timer);
+        // Keep a failed resume as a rejected barrier; a new prepare must not hide loss of worker control.
+        this.resuming = this.ports.resume();
+        void this.resuming.catch(() => undefined);
+    }
+}
+//# sourceMappingURL=runtimeDrain.js.map

package/build/core/server/runtimeDrain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeDrain.js","sourceRoot":"","sources":["../../../src/core/server/runtimeDrain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAGH,SAAS,SAAS,CAAC,QAAuC;IACxD,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,CAAC,KAAK,CAAC;IACd,IAAI,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAChE;QACE,KAAK,CAAC,2FAA2F,CAAC,CAAC;IACrG,CAAC;CACF;AAED,wGAAwG;AACxG,MAAM,OAAO,gBAAgB;IACnB,MAAM,GAAG,KAAK,CAAC;IACf,SAAS,GAAG,KAAK,CAAC;IAClB,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAAG,IAAI,iBAAiB,EAA4C,CAAC;IAC5E,SAAS,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE9E,QAAQ;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACjF,CAAC;IAED,SAAS,CAAC,QAA+C;QACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,OAAO;QACb,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC;IAED,8FAA8F;IAC9F,MAAM;QACJ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAsB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACpG,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;AAEvD,MAAM,UAAU,oBAAoB,CAClC,IAAmC;IAEnC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAgBD,yGAAyG;AACzG,MAAM,OAAO,uBAAuB;IASL;IARrB,SAAS,CAA0B;IAC1B,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC7D,KAAK,CAAiC;IACtC,QAAQ,CAAqB;IAC7B,QAAQ,CAAiB;IACzB,OAAO,CAA8B;IACrC,UAAU,CAA8B;IAEhD,YAA6B,KAA4B;QAA5B,UAAK,GAAL,KAAK,CAAuB;IAAG,CAAC;IAE7D,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAAc,EAAE,SAAS,GAAG,MAAM;QACnE,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC7G,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC;QACvC,8EAA8E;QAC9E,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC7G,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC7G,MAAM,SAAS,GAA2B;YACxC,WAAW;YACX,MAAM;YACN,KAAK,EAAE,WAAW;YAClB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACtC,MAAM,EAAE,CAAC;SACV,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACpC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC5E,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACtB,uEAAuE;gBACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACpB,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,yFAAyF;IACzF,YAAY;QACV,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,QAA2B;QAChC,IAAI,CAAC,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QAC1C,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY;YAAE,OAAO;QAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACnC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,WAAmB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY;YAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,cAAc;YAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAc;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,UAAU,CAAC;YACtB,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzB,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,iFAAiF;QACjF,SAAS,CAAC,KAAK,GAAG,YAAY,CAAC;QAC/B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACtD,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1D,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAmB,EAAE,MAAe;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjE,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxG,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,SAAiC;QAC7C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO;QACzC,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY;YAAE,OAAO;QAC7C,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QAC1C,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,kGAAkG;QAClG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACpC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;CACF"}