@cluesmith/codev 3.2.3 → 3.2.4

package/dist/agent-farm/commands/whoami.js

@@ -0,0 +1,196 @@
+/**
+ * Whoami command — report this terminal's agent identity (Spec 1134).
+ *
+ * Answers "who am I, from Tower/global.db's perspective?" for any terminal:
+ * builders resolve from their worktree cwd against global.db, architects from
+ * the Tower-injected CODEV_ARCHITECT_NAME env var. Identity precedence is
+ * fixed by the spec: builder-worktree cwd match → CODEV_ARCHITECT_NAME →
+ * unknown (exit non-zero). There is deliberately NO implicit fallback to
+ * 'main' — an unverified identity misroutes downstream consumers (issue
+ * #1094), so unknown must fail loud.
+ *
+ * Read-only invariant: this command never opens global.db read-write. Builder
+ * resolution reuses detectCurrentBuilderId() (its own read-only connection);
+ * all whoami-specific queries share one read-only connection opened here.
+ *
+ * The identity helpers are imported from ./send.js rather than relocated:
+ * they are already exported and tested there, and whoami is only their second
+ * consumer (extraction deferred until a third appears).
+ */
+import { basename } from 'node:path';
+import Database from 'better-sqlite3';
+import { detectCurrentBuilderId, detectWorkspaceRoot, BuilderIdResolutionError } from './send.js';
+import { lookupBuilderSpawningArchitect } from '../state.js';
+import { getGlobalDbPath } from '../db/index.js';
+import { normalizeWorkspacePath } from '../utils/workspace-path.js';
+/** Thrown when no identity signal resolves. Message is the user-facing text. */
+export class WhoamiError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WhoamiError';
+    }
+}
+/**
+ * Open global.db read-only, or return null when it is missing/unopenable.
+ * Null degrades gracefully: the informational lookups (workspace display
+ * name, spawning architect, architect-row cross-check) are skipped. Identity
+ * itself never depends on this handle — the builder path already verified
+ * against the db inside detectCurrentBuilderId(), and the architect path is
+ * env-based.
+ */
+function openReadonlyGlobalDb() {
+    try {
+        return new Database(getGlobalDbPath(), { readonly: true });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Display name for the workspace: the `known_workspaces` registry entry when
+ * present, else the directory basename. Informational context only — the
+ * spec's fail-loud rule applies to type/name, not this field.
+ */
+function workspaceDisplayName(workspaceRoot, db) {
+    const root = workspaceRoot ?? process.cwd();
+    if (db) {
+        try {
+            const row = db
+                .prepare('SELECT name FROM known_workspaces WHERE workspace_path = ?')
+                .get(normalizeWorkspacePath(root));
+            if (row?.name)
+                return row.name;
+        }
+        catch {
+            // Table missing or query failure — informational field, fall through.
+        }
+    }
+    return basename(root);
+}
+/**
+ * Resolve the current terminal's identity per the spec precedence.
+ *
+ * Throws `BuilderIdResolutionError` when cwd IS a builder worktree whose
+ * identity cannot be verified (no fallthrough to the env check — #1094), and
+ * `WhoamiError` when no identity signal resolves at all.
+ */
+export function resolveIdentity(env = process.env) {
+    // 1. Builder-worktree cwd match. A BuilderIdResolutionError propagates
+    //    verbatim: inside a confirmed worktree, an unverifiable identity is an
+    //    error, never a reason to consult the env var.
+    const builderId = detectCurrentBuilderId();
+    const workspaceRoot = detectWorkspaceRoot();
+    const db = openReadonlyGlobalDb();
+    try {
+        if (builderId) {
+            const identity = {
+                type: 'builder',
+                workspace: workspaceDisplayName(workspaceRoot, db),
+                name: builderId,
+            };
+            if (db) {
+                try {
+                    const spawnedBy = lookupBuilderSpawningArchitect(builderId, workspaceRoot ?? undefined, db);
+                    if (spawnedBy)
+                        identity.architect = spawnedBy;
+                }
+                catch {
+                    // Enrichment only — the identity is already verified; a lookup
+                    // failure means "not recorded", not "unknown identity".
+                }
+            }
+            return identity;
+        }
+        // 2. Tower-injected architect env var. Read directly, NOT via
+        //    currentArchitectName() — its default of 'main' is exactly the
+        //    implicit fallback whoami must not have.
+        const architectName = env.CODEV_ARCHITECT_NAME?.trim();
+        if (architectName) {
+            const identity = {
+                type: 'architect',
+                workspace: workspaceDisplayName(workspaceRoot, db),
+                name: architectName,
+            };
+            // Best-effort cross-check against the architect table (diagnostics
+            // only): a missing row is a warning, never a failure — rows are
+            // legitimately absent in the crash-recovery scenarios whoami serves.
+            if (db && workspaceRoot) {
+                try {
+                    const row = db
+                        .prepare('SELECT 1 AS present FROM architect WHERE workspace_path = ? AND id = ?')
+                        .get(normalizeWorkspacePath(workspaceRoot), architectName);
+                    if (!row)
+                        identity.rowMissing = true;
+                }
+                catch {
+                    // Swallowed by design — this check never affects output or exit code.
+                }
+            }
+            return identity;
+        }
+    }
+    finally {
+        db?.close();
+    }
+    // 3. Fail loud. No implicit 'main'.
+    throw new WhoamiError('Cannot determine agent identity: the current directory is not inside a ' +
+        '.builders/<id>/ worktree and CODEV_ARCHITECT_NAME is not set. ' +
+        'Likely causes: a plain shell, a terminal not started by Tower, or a ' +
+        'pre-#786 architect terminal. Refusing to guess (issue #1094) — ' +
+        'identity must come from a verified signal, never a default.');
+}
+/** Format an identity as the human-readable `key: value` lines. */
+export function formatIdentity(identity) {
+    const lines = [`workspace: ${identity.workspace}`, `type: ${identity.type}`, `name: ${identity.name}`];
+    if (identity.type === 'builder' && identity.architect) {
+        lines.push(`architect: ${identity.architect}`);
+    }
+    return lines.join('\n');
+}
+/** Format an identity as the JSON payload (`architect` omitted when unknown). */
+export function identityToJson(identity) {
+    const payload = {
+        workspace: identity.workspace,
+        type: identity.type,
+        name: identity.name,
+    };
+    if (identity.type === 'builder' && identity.architect) {
+        payload.architect = identity.architect;
+    }
+    return payload;
+}
+/**
+ * `afx whoami` — print this terminal's identity.
+ *
+ * Success: identity to stdout (text or --json), exit 0.
+ * Unknown identity: explanation to stderr (always), `{ "error": ... }` to
+ * stdout under --json, exit 1 via process.exitCode (streams flush).
+ */
+export async function whoami(options = {}) {
+    let identity;
+    try {
+        identity = resolveIdentity();
+    }
+    catch (err) {
+        if (!(err instanceof WhoamiError) && !(err instanceof BuilderIdResolutionError))
+            throw err;
+        process.stderr.write(`${err.message}\n`);
+        if (options.json) {
+            process.stdout.write(`${JSON.stringify({ error: err.message })}\n`);
+        }
+        process.exitCode = 1;
+        return;
+    }
+    if (identity.type === 'architect' && identity.rowMissing) {
+        process.stderr.write(`warning: CODEV_ARCHITECT_NAME='${identity.name}' but no matching architect row ` +
+            `in global.db for this workspace (Tower may not have registered this terminal, ` +
+            `or it predates a crash). Identity is reported from the env signal.\n`);
+    }
+    if (options.json) {
+        process.stdout.write(`${JSON.stringify(identityToJson(identity))}\n`);
+    }
+    else {
+        process.stdout.write(`${formatIdentity(identity)}\n`);
+    }
+}
+//# sourceMappingURL=whoami.js.map

package/dist/agent-farm/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../../src/agent-farm/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAClG,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAiBpE,gFAAgF;AAChF,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,aAA4B,EAAE,EAA4B;IACtF,MAAM,IAAI,GAAG,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5C,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CAAC,4DAA4D,CAAC;iBACrE,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAiC,CAAC;YACrE,IAAI,GAAG,EAAE,IAAI;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,uEAAuE;IACvE,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAC5C,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAmB;gBAC/B,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,oBAAoB,CAAC,aAAa,EAAE,EAAE,CAAC;gBAClD,IAAI,EAAE,SAAS;aAChB,CAAC;YACF,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,8BAA8B,CAAC,SAAS,EAAE,aAAa,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC5F,IAAI,SAAS;wBAAE,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;oBAC/D,wDAAwD;gBAC1D,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,8DAA8D;QAC9D,mEAAmE;QACnE,6CAA6C;QAC7C,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAmB;gBAC/B,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,oBAAoB,CAAC,aAAa,EAAE,EAAE,CAAC;gBAClD,IAAI,EAAE,aAAa;aACpB,CAAC;YACF,mEAAmE;YACnE,gEAAgE;YAChE,qEAAqE;YACrE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,EAAE;yBACX,OAAO,CAAC,wEAAwE,CAAC;yBACjF,GAAG,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC7D,IAAI,CAAC,GAAG;wBAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,sEAAsE;gBACxE,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,EAAE,KAAK,EAAE,CAAC;IACd,CAAC;IAED,oCAAoC;IACpC,MAAM,IAAI,WAAW,CACnB,yEAAyE;QACvE,gEAAgE;QAChE,sEAAsE;QACtE,iEAAiE;QACjE,6DAA6D,CAChE,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,QAAwB;IACrD,MAAM,KAAK,GAAG,CAAC,cAAc,QAAQ,CAAC,SAAS,EAAE,EAAE,SAAS,QAAQ,CAAC,IAAI,EAAE,EAAE,SAAS,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,QAAwB;IACrD,MAAM,OAAO,GAA2B;QACtC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAyB,EAAE;IACtD,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,wBAAwB,CAAC;YAAE,MAAM,GAAG,CAAC;QAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,QAAQ,CAAC,IAAI,kCAAkC;YAC/E,gFAAgF;YAChF,sEAAsE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/agent-farm/lib/tower-client.d.ts

@@ -4,7 +4,7 @@
  * All implementation lives in packages/core/src/tower-client.ts.
  * This file preserves the import path for existing consumers.
  */
-export { TowerClient, getTowerClient, type TowerClientOptions, type TowerWorkspace, type TowerWorkspaceStatus, type TowerHealth, type TowerTunnelStatus, type TowerStatus, type TowerTerminal, } from '@cluesmith/codev-core/tower-client';
+export { TowerClient, getTowerClient, type TowerClientOptions, type TowerWorkspace, type TowerWorkspaceStatus, type TowerHealth, type TowerTunnelStatus, type TowerStatus, type TowerTerminal, type HuskCandidate, type HuskPreview, type HuskSweepResult, } from '@cluesmith/codev-core/tower-client';
 export { encodeWorkspacePath, decodeWorkspacePath } from '@cluesmith/codev-core/workspace';
 export { DEFAULT_TOWER_PORT, AGENT_FARM_DIR } from '@cluesmith/codev-core/constants';
 //# sourceMappingURL=tower-client.d.ts.map

package/dist/agent-farm/lib/tower-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tower-client.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"tower-client.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/agent-farm/lib/tower-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"tower-client.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,GAQf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"tower-client.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,GAWf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/agent-farm/servers/architect-session-holder.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Issue #1224: detect and reclaim live processes that hold an architect's
+ * conversation session id, so an architect launch never bakes a colliding
+ * `claude --resume <id>` into a permanent crash loop.
+ *
+ * Two holder classes were observed after a workspace restart (forensic timeline
+ * on the issue):
+ *   1. OUR OWN superseded shellper for the same architect identity — a remnant
+ *      from before the restart, or a previous crash-looping instance. Its claude
+ *      child dies within seconds of every respawn, so the child is absent most
+ *      of the time; the durable evidence is the *shellper parent's* argv, which
+ *      carries the session id in its JSON config (`"--session-id","<id>"`).
+ *   2. A FOREIGN process — e.g. an interactive `claude` the user started by hand
+ *      on their own tty (holder case in incident 3). This must NEVER be touched:
+ *      it is not ours to kill.
+ *
+ * The policy: reclaim (kill + resume) only OUR OWN superseded shellper, proven
+ * by shellper-main.js + matching session id + matching cwd + matching
+ * CODEV_ARCHITECT_NAME. Anything else that holds the id is foreign → mint fresh.
+ */
+export interface ProcessEntry {
+    pid: number;
+    /** The full joined argv (as `ps ... -o args=` reports it). */
+    cmdline: string;
+}
+/**
+ * The session-flag needle forms a live holder's argv can carry the id in:
+ *   - `--session-id <id>` / `--resume <id>` — a claude CHILD's shell argv
+ *   - `--session-id=<id>` / `--resume=<id>` — the `=`-joined shell variant
+ *   - `"--session-id","<id>"` / `"--resume","<id>"` — the shellper PARENT's
+ *     JSON config argv (Issue #1224: catches a remnant shellper whose child is
+ *     dead between crash-loop respawns).
+ */
+export declare function sessionIdNeedles(sessionId: string): string[];
+/** True when a process's argv references `sessionId` as a session-flag argument. */
+export declare function cmdlineHoldsSession(cmdline: string, sessionId: string): boolean;
+export interface ArchitectIdentity {
+    /** Absolute workspace path the shellper runs in (`cwd` in its config). */
+    workspacePath: string;
+    /** The architect name (shellper config env `CODEV_ARCHITECT_NAME`). */
+    architectName: string;
+}
+/**
+ * True when `cmdline` is one of OUR OWN shellper processes for `identity`:
+ * a `shellper-main.js` whose JSON config carries the matching workspace cwd and
+ * `CODEV_ARCHITECT_NAME`. The cwd match tolerates symlink variants (macOS
+ * `/tmp` vs `/private/tmp`), mirroring verifySessionOwnership.
+ *
+ * This is the airtight-identity gate before any kill: if any field cannot be
+ * positively confirmed, this returns false and the caller must not reclaim.
+ */
+export declare function isOwnArchitectShellper(cmdline: string, identity: ArchitectIdentity): boolean;
+/**
+ * Snapshot every running process as {pid, cmdline}. `ps -ww` prevents argv
+ * truncation (the shellper config blob is large) on both BSD and coreutils.
+ * Throws on `ps` failure; callers decide how to degrade.
+ */
+export declare function listProcessEntries(): ProcessEntry[];
+export interface SessionHolderClassification {
+    /** PIDs of OUR OWN superseded shellpers holding this session (safe to reap). */
+    reclaimable: number[];
+    /** True when some holder is NOT positively ours — must not be touched. */
+    foreign: boolean;
+}
+/**
+ * Classify every live holder of `sessionId` into reclaimable-own vs foreign.
+ * A holder is reclaimable only when it is one of our own architect shellpers
+ * (identity-matched); any other holder (a bare `claude`, a shellper for a
+ * different identity, an unparseable match) is foreign.
+ *
+ * On `ps` failure returns `{reclaimable: [], foreign: false}` — no positive
+ * evidence, so the caller resumes as it would have before this guard existed.
+ */
+export declare function classifyArchitectSessionHolder(opts: {
+    sessionId: string;
+    identity: ArchitectIdentity;
+    /** Exclude this pid (e.g. Tower's own) from consideration. */
+    selfPid?: number;
+    /** Test seam: override the process snapshot. */
+    list?: () => ProcessEntry[];
+}): SessionHolderClassification;
+/**
+ * Find PIDs of OUR OWN architect shellpers for `identity`, regardless of which
+ * session they hold. Used by remove-architect to reap a live-process-without-a-
+ * registry-row zombie (Issue #1224 symptom B) — there is no stored session id to
+ * key on, so identity (shellper-main.js + cwd + CODEV_ARCHITECT_NAME) is the key.
+ */
+export declare function findOwnArchitectShellpers(opts: {
+    identity: ArchitectIdentity;
+    selfPid?: number;
+    list?: () => ProcessEntry[];
+}): number[];
+/**
+ * Reap the given superseded-shellper PIDs: SIGTERM the process group, poll for
+ * death, then SIGKILL any survivor. Resolves once every pid is gone (or the
+ * SIGKILL grace elapses). The wait matters: the killed shellper's child must
+ * release the session lock before the caller's fresh `claude --resume` runs,
+ * else the collision recurs.
+ *
+ * Seams (`isAlive`, `kill`, `wait`) keep it unit-testable without real signals.
+ */
+export declare function reapShellpers(pids: number[], opts?: {
+    isAlive?: (pid: number) => boolean;
+    kill?: (pid: number, signal: NodeJS.Signals) => void;
+    wait?: (ms: number) => Promise<void>;
+    graceMs?: number;
+    killGraceMs?: number;
+    pollMs?: number;
+}): Promise<void>;
+export type ArchitectLogger = (level: 'INFO' | 'WARN' | 'ERROR', message: string) => void;
+/**
+ * Reconcile a stored architect session id against the live process table before
+ * launch, resolving whether the caller may resume it.
+ *
+ * - A FOREIGN holder → `{ foreignHolder: true }`: the caller must mint fresh
+ *   (the session is genuinely in use by something we must not touch).
+ * - Only OUR OWN superseded shellper(s) hold it → reap them and return
+ *   `{ foreignHolder: false }`: the session is now free, resume it (mint-or-
+ *   RECLAIM, preserving the conversation instead of abandoning it).
+ * - No holder → `{ foreignHolder: false }`: resume as usual.
+ */
+export declare function reconcileArchitectSessionHolder(opts: {
+    sessionId: string;
+    identity: ArchitectIdentity;
+    selfPid?: number;
+    log?: ArchitectLogger;
+    list?: () => ProcessEntry[];
+    reap?: (pids: number[]) => Promise<void>;
+}): Promise<{
+    foreignHolder: boolean;
+    reclaimedPids: number[];
+}>;
+//# sourceMappingURL=architect-session-holder.d.ts.map

package/dist/agent-farm/servers/architect-session-holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architect-session-holder.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/architect-session-holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5D;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAG/E;AAsBD,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAc5F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,EAAE,CAgBnD;AAED,MAAM,WAAW,2BAA2B;IAC1C,gFAAgF;IAChF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;CAC7B,GAAG,2BAA2B,CAqB9B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;CAC7B,GAAG,MAAM,EAAE,CAcX;AA6BD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;IACL,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CAAC,IAAI,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C,GAAG,OAAO,CAAC;IAAE,aAAa,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA4B/D"}

package/dist/agent-farm/servers/architect-session-holder.js

@@ -0,0 +1,268 @@
+/**
+ * Issue #1224: detect and reclaim live processes that hold an architect's
+ * conversation session id, so an architect launch never bakes a colliding
+ * `claude --resume <id>` into a permanent crash loop.
+ *
+ * Two holder classes were observed after a workspace restart (forensic timeline
+ * on the issue):
+ *   1. OUR OWN superseded shellper for the same architect identity — a remnant
+ *      from before the restart, or a previous crash-looping instance. Its claude
+ *      child dies within seconds of every respawn, so the child is absent most
+ *      of the time; the durable evidence is the *shellper parent's* argv, which
+ *      carries the session id in its JSON config (`"--session-id","<id>"`).
+ *   2. A FOREIGN process — e.g. an interactive `claude` the user started by hand
+ *      on their own tty (holder case in incident 3). This must NEVER be touched:
+ *      it is not ours to kill.
+ *
+ * The policy: reclaim (kill + resume) only OUR OWN superseded shellper, proven
+ * by shellper-main.js + matching session id + matching cwd + matching
+ * CODEV_ARCHITECT_NAME. Anything else that holds the id is foreign → mint fresh.
+ */
+import { execFileSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+/** Marker identifying a Codev shellper process in a `ps` command line. */
+const SHELLPER_MARKER = 'shellper-main.js';
+/**
+ * The session-flag needle forms a live holder's argv can carry the id in:
+ *   - `--session-id <id>` / `--resume <id>` — a claude CHILD's shell argv
+ *   - `--session-id=<id>` / `--resume=<id>` — the `=`-joined shell variant
+ *   - `"--session-id","<id>"` / `"--resume","<id>"` — the shellper PARENT's
+ *     JSON config argv (Issue #1224: catches a remnant shellper whose child is
+ *     dead between crash-loop respawns).
+ */
+export function sessionIdNeedles(sessionId) {
+    return ['--session-id', '--resume'].flatMap((flag) => [
+        `${flag} ${sessionId}`,
+        `${flag}=${sessionId}`,
+        `"${flag}","${sessionId}"`,
+    ]);
+}
+/** True when a process's argv references `sessionId` as a session-flag argument. */
+export function cmdlineHoldsSession(cmdline, sessionId) {
+    const needles = sessionIdNeedles(sessionId);
+    return needles.some((needle) => cmdline.includes(needle));
+}
+/** Canonicalize a path for comparison; fall back to the input when realpath fails. */
+function realpathOrSelf(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return p;
+    }
+}
+/**
+ * Extract a `"key":"value"` string field from a shellper's JSON config as it
+ * appears verbatim in the `ps` argv. Regex rather than JSON.parse: the config
+ * embeds the full process env, so the blob is large and a partial/edge `ps`
+ * line must degrade to "field absent" rather than throw.
+ */
+function extractJsonStringField(cmdline, key) {
+    const m = cmdline.match(new RegExp(`"${key}"\\s*:\\s*"([^"]+)"`));
+    return m ? m[1] : null;
+}
+/**
+ * True when `cmdline` is one of OUR OWN shellper processes for `identity`:
+ * a `shellper-main.js` whose JSON config carries the matching workspace cwd and
+ * `CODEV_ARCHITECT_NAME`. The cwd match tolerates symlink variants (macOS
+ * `/tmp` vs `/private/tmp`), mirroring verifySessionOwnership.
+ *
+ * This is the airtight-identity gate before any kill: if any field cannot be
+ * positively confirmed, this returns false and the caller must not reclaim.
+ */
+export function isOwnArchitectShellper(cmdline, identity) {
+    if (!cmdline.includes(SHELLPER_MARKER))
+        return false;
+    const cfgName = extractJsonStringField(cmdline, 'CODEV_ARCHITECT_NAME');
+    if (cfgName !== identity.architectName)
+        return false;
+    const cfgCwd = extractJsonStringField(cmdline, 'cwd');
+    if (!cfgCwd)
+        return false;
+    const wanted = new Set([identity.workspacePath, realpathOrSelf(identity.workspacePath)]);
+    const got = new Set([cfgCwd, realpathOrSelf(cfgCwd)]);
+    const cwdMatches = [...got].some((g) => wanted.has(g));
+    if (!cwdMatches)
+        return false;
+    return true;
+}
+/**
+ * Snapshot every running process as {pid, cmdline}. `ps -ww` prevents argv
+ * truncation (the shellper config blob is large) on both BSD and coreutils.
+ * Throws on `ps` failure; callers decide how to degrade.
+ */
+export function listProcessEntries() {
+    const out = execFileSync('ps', ['-ww', '-eo', 'pid=,args='], {
+        encoding: 'utf-8',
+        timeout: 5000,
+        maxBuffer: 16 * 1024 * 1024,
+    });
+    const entries = [];
+    for (const line of out.split('\n')) {
+        const trimmed = line.trimStart();
+        const sp = trimmed.indexOf(' ');
+        if (sp <= 0)
+            continue;
+        const pid = parseInt(trimmed.slice(0, sp), 10);
+        if (Number.isNaN(pid) || pid <= 0)
+            continue;
+        entries.push({ pid, cmdline: trimmed.slice(sp + 1) });
+    }
+    return entries;
+}
+/**
+ * Classify every live holder of `sessionId` into reclaimable-own vs foreign.
+ * A holder is reclaimable only when it is one of our own architect shellpers
+ * (identity-matched); any other holder (a bare `claude`, a shellper for a
+ * different identity, an unparseable match) is foreign.
+ *
+ * On `ps` failure returns `{reclaimable: [], foreign: false}` — no positive
+ * evidence, so the caller resumes as it would have before this guard existed.
+ */
+export function classifyArchitectSessionHolder(opts) {
+    const list = opts.list ?? listProcessEntries;
+    let entries;
+    try {
+        entries = list();
+    }
+    catch {
+        return { reclaimable: [], foreign: false };
+    }
+    const reclaimable = [];
+    let foreign = false;
+    for (const { pid, cmdline } of entries) {
+        if (opts.selfPid !== undefined && pid === opts.selfPid)
+            continue;
+        if (!cmdlineHoldsSession(cmdline, opts.sessionId))
+            continue;
+        if (isOwnArchitectShellper(cmdline, opts.identity)) {
+            reclaimable.push(pid);
+        }
+        else {
+            foreign = true;
+        }
+    }
+    return { reclaimable, foreign };
+}
+/**
+ * Find PIDs of OUR OWN architect shellpers for `identity`, regardless of which
+ * session they hold. Used by remove-architect to reap a live-process-without-a-
+ * registry-row zombie (Issue #1224 symptom B) — there is no stored session id to
+ * key on, so identity (shellper-main.js + cwd + CODEV_ARCHITECT_NAME) is the key.
+ */
+export function findOwnArchitectShellpers(opts) {
+    const list = opts.list ?? listProcessEntries;
+    let entries;
+    try {
+        entries = list();
+    }
+    catch {
+        return [];
+    }
+    const pids = [];
+    for (const { pid, cmdline } of entries) {
+        if (opts.selfPid !== undefined && pid === opts.selfPid)
+            continue;
+        if (isOwnArchitectShellper(cmdline, opts.identity))
+            pids.push(pid);
+    }
+    return pids;
+}
+/** Whether a pid is still alive (signal 0 probe). */
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        // ESRCH → gone; EPERM → alive but not ours to signal (treat as alive).
+        return err.code === 'EPERM';
+    }
+}
+/** Kill a shellper's whole process group (leader is detached), best-effort. */
+function killProcessGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        // Group gone or not permitted — fall back to the single pid.
+        try {
+            process.kill(pid, signal);
+        }
+        catch {
+            /* already dead */
+        }
+    }
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Reap the given superseded-shellper PIDs: SIGTERM the process group, poll for
+ * death, then SIGKILL any survivor. Resolves once every pid is gone (or the
+ * SIGKILL grace elapses). The wait matters: the killed shellper's child must
+ * release the session lock before the caller's fresh `claude --resume` runs,
+ * else the collision recurs.
+ *
+ * Seams (`isAlive`, `kill`, `wait`) keep it unit-testable without real signals.
+ */
+export async function reapShellpers(pids, opts) {
+    if (pids.length === 0)
+        return;
+    const isAlive = opts?.isAlive ?? pidAlive;
+    const kill = opts?.kill ?? killProcessGroup;
+    const wait = opts?.wait ?? sleep;
+    const graceMs = opts?.graceMs ?? 3000;
+    const killGraceMs = opts?.killGraceMs ?? 2000;
+    const pollMs = opts?.pollMs ?? 100;
+    const pollUntilDead = async (deadlineMs) => {
+        let waited = 0;
+        while (waited < deadlineMs && pids.some((pid) => isAlive(pid))) {
+            await wait(pollMs);
+            waited += pollMs;
+        }
+    };
+    for (const pid of pids)
+        kill(pid, 'SIGTERM');
+    await pollUntilDead(graceMs);
+    const survivors = pids.filter((pid) => isAlive(pid));
+    if (survivors.length > 0) {
+        for (const pid of survivors)
+            kill(pid, 'SIGKILL');
+        // Confirm SIGKILL actually took effect before returning: the caller resumes
+        // `claude --resume <id>` next, and a holder still in the kernel's exit path
+        // has not yet released the session lock — returning early would re-open the
+        // very collision race this reap exists to close (codex review, Issue #1224).
+        await pollUntilDead(killGraceMs);
+    }
+}
+/**
+ * Reconcile a stored architect session id against the live process table before
+ * launch, resolving whether the caller may resume it.
+ *
+ * - A FOREIGN holder → `{ foreignHolder: true }`: the caller must mint fresh
+ *   (the session is genuinely in use by something we must not touch).
+ * - Only OUR OWN superseded shellper(s) hold it → reap them and return
+ *   `{ foreignHolder: false }`: the session is now free, resume it (mint-or-
+ *   RECLAIM, preserving the conversation instead of abandoning it).
+ * - No holder → `{ foreignHolder: false }`: resume as usual.
+ */
+export async function reconcileArchitectSessionHolder(opts) {
+    const { reclaimable, foreign } = classifyArchitectSessionHolder({
+        sessionId: opts.sessionId,
+        identity: opts.identity,
+        selfPid: opts.selfPid,
+        list: opts.list,
+    });
+    const shortId = opts.sessionId.slice(0, 8);
+    if (foreign) {
+        opts.log?.('WARN', `Architect '${opts.identity.architectName}' session ${shortId}… is held by a foreign process; minting a fresh session (holder left untouched) in ${opts.identity.workspacePath}`);
+        return { foreignHolder: true, reclaimedPids: [] };
+    }
+    if (reclaimable.length === 0) {
+        return { foreignHolder: false, reclaimedPids: [] };
+    }
+    opts.log?.('WARN', `Architect '${opts.identity.architectName}' session ${shortId}… is held by our own superseded shellper(s) [${reclaimable.join(', ')}]; reaping to reclaim the conversation in ${opts.identity.workspacePath}`);
+    const reap = opts.reap ?? ((pids) => reapShellpers(pids));
+    await reap(reclaimable);
+    return { foreignHolder: false, reclaimedPids: reclaimable };
+}
+//# sourceMappingURL=architect-session-holder.js.map

package/dist/agent-farm/servers/architect-session-holder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architect-session-holder.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/architect-session-holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,0EAA0E;AAC1E,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAQ3C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,GAAG,IAAI,IAAI,SAAS,EAAE;QACtB,GAAG,IAAI,IAAI,SAAS,EAAE;QACtB,IAAI,IAAI,MAAM,SAAS,GAAG;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,OAAe,EAAE,GAAW;IAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,qBAAqB,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,QAA2B;IACjF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,QAAQ,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE;QAC3D,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QAC5C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAO9C;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAC7C,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACjE,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5D,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAC7C,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACjE,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qDAAqD;AACrD,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,GAAW,EAAE,MAAsB;IAC3D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAc,EACd,IAOC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,gBAAgB,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC;IAEnC,MAAM,aAAa,GAAG,KAAK,EAAE,UAAkB,EAAiB,EAAE;QAChE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,MAAM,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,SAAS;YAAE,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAID;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,IAOrD;IACC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,8BAA8B,CAAC;QAC9D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,EAAE,CACR,MAAM,EACN,cAAc,IAAI,CAAC,QAAQ,CAAC,aAAa,aAAa,OAAO,sFAAsF,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CACjL,CAAC;QACF,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CACR,MAAM,EACN,cAAc,IAAI,CAAC,QAAQ,CAAC,aAAa,aAAa,OAAO,gDAAgD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAC9M,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAC9D,CAAC"}