@descryy/runtime-controller 0.0.0

package/dist/controller.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Runtime controller (plan §4, §5, §6; plan §45's "Core" bucket: runtime
+ * controller, execution IDs, process lifecycle, readiness, timeout
+ * handling, cleanup, configuration). Owns Execution lifecycle, spawns every
+ * service declared in configuration, waits for each one's real readiness
+ * (never "process exists"), and guarantees cleanup — including on partial
+ * or total failure and on timeout. Builds no collectors and knows nothing
+ * about any specific language or framework (plan principle 8).
+ */
+import { type Execution, type ProcessHandle } from "@descryy/runtime-contracts";
+import { type ReadinessCheck, type ReadinessResult } from "./readiness.ts";
+import type { ExecutionConfiguration } from "@descryy/runtime-contracts";
+export interface CreateExecutionInput {
+    readonly application: string;
+    readonly repository: string;
+    readonly commit: string;
+    readonly configuration: ExecutionConfiguration;
+}
+export interface ServiceReadinessSpec {
+    readonly checks: (info: {
+        readonly port: number;
+    }) => readonly ReadinessCheck[];
+    readonly timeoutMs: number;
+}
+export interface RunOptions {
+    /** One entry required per key in `configuration.services` — RT-032 refuses rather than default a missing one to "spawn success is enough" (RT-024's own rule, applied per service). */
+    readonly readiness: Readonly<Record<string, ServiceReadinessSpec>>;
+    /**
+     * Optional live observer for `ProcessLifecycleEvent`. Called synchronously
+     * at each transition, in order, for the lifetime of this execution
+     * (including after `run()` itself has returned, for a service that exits
+     * later). A throwing observer is not caught here — the same "must not
+     * hang, may not silently swallow its own failure" discipline `Collector`
+     * already imposes on every callback shape in this repo; a caller wiring a
+     * `ProcessCollector`'s emit path in here that itself throws deserves to
+     * see that, not have it disappear into a promise this module owns.
+     */
+    readonly onProcessLifecycleEvent?: (event: ProcessLifecycleEvent) => void;
+}
+export interface ServiceStartResult {
+    readonly serviceName: string;
+    readonly stage: "spawn" | "readiness" | "not-attempted";
+    readonly succeeded: boolean;
+    /** Set when `stage === "readiness"`. RT-024/RT-031 apply to each entry independently — N of these is N liveness claims about N addresses, never a joint identity proof. */
+    readonly readiness: ReadinessResult | null;
+    /** Set when `stage === "spawn"` and spawning itself threw. */
+    readonly error: string | null;
+}
+/**
+ * Fires at the exact moments `run()` itself observes a service's process
+ * lifecycle — spawned, readiness settled (either way), reaped. This is a
+ * pure notification channel: `ExecutionController` stays exactly as
+ * ignorant of Evidence/Collector as its own module doc already claims
+ * ("knows nothing about any specific language or framework") — nothing
+ * here decides whether a lifecycle transition becomes Evidence, only that
+ * a caller who wants to know *when* one happened, live, has a way to ask
+ * that isn't "reconstruct it later from `Execution.processes`."
+ *
+ * That reconstruction is precisely what doesn't work for the case this
+ * exists to make observable: `Execution.processes` and
+ * `ServiceStartResults` are only complete once `run()` has already
+ * returned, but a service that is spawned, then *running* (READY reached),
+ * has not exited yet at that point — its own eventual `process-exited`
+ * event lies in the future relative to `run()` resolving. A consumer that
+ * only reads the final `Execution` after `run()` settles can see "started"
+ * and "ready" (or "ready-failed") for every service, but can never see
+ * "exited" for one still healthy when `run()` returned — only this live
+ * channel can.
+ */
+export type ProcessLifecycleEvent = {
+    readonly kind: "process-started";
+    readonly serviceName: string;
+    readonly handle: ProcessHandle;
+} | {
+    readonly kind: "process-ready";
+    readonly serviceName: string;
+    readonly handle: ProcessHandle;
+    readonly readiness: ReadinessResult;
+} | {
+    readonly kind: "process-ready-failed";
+    readonly serviceName: string;
+    readonly handle: ProcessHandle;
+    readonly readiness: ReadinessResult;
+}
+/**
+ * `phase` distinguishes "this service's own readiness had not yet
+ * succeeded when it exited" (`"starting"`) from "it had already reached
+ * READY at least once" (`"running"`) — the process-level echo of
+ * `FAILED_START` vs `FAILED` on `ExecutionState` itself (§30). Without
+ * it, `PROCESS_EXITED` alone cannot tell "crashed on boot" from
+ * "finished/was stopped after running successfully," which collapses
+ * exactly the distinction the execution lifecycle already exists to
+ * carry. Computed from THIS service's own readiness history, not from
+ * `Execution.state` at the moment of exit — a crash mid-readiness-poll
+ * fires before `run()` has itself observed the failure and moved the
+ * execution to `FAILED_START`, so reading execution state at exit time
+ * would misreport `"starting"` as whatever the execution's not-yet-
+ * updated state still says.
+ */
+ | {
+    readonly kind: "process-exited";
+    readonly serviceName: string;
+    readonly handle: ProcessHandle;
+    readonly phase: "starting" | "running";
+};
+/**
+ * `run()`'s timeout timer and a caller's `stop()`/`cancel()` can both
+ * attempt to move a finishing execution to a terminal state at nearly the
+ * same instant. Every transition attempted after an `await` goes through
+ * `#tryTransition` (returns false instead of throwing) rather than the
+ * throwing `#transition`, so whichever path loses the race degrades to a
+ * no-op instead of an unhandled rejection from a fire-and-forget timer
+ * callback.
+ */
+export declare class ExecutionController {
+    #private;
+    private constructor();
+    static create(input: CreateExecutionInput): ExecutionController;
+    get execution(): Execution;
+    /** One entry per service configured, in spawn order — including services never attempted because an earlier one failed (`stage: "not-attempted"`). Empty before `run()` returns its first result. */
+    get serviceStartResults(): readonly ServiceStartResult[];
+    /** Non-null only when `run()` refused before spawning anything — a bad `dependsOn` reference, a cycle, an undeclared placeholder dependency, or a service with no matching `RunOptions.readiness` entry. */
+    get validationError(): string | null;
+    /** Combined stdout+stderr of the named service's process so far, or "" if it was never spawned. */
+    readProcessOutput(serviceName: string): string;
+    /**
+     * Starts every service in `configuration.services`, in the dependency
+     * order `validateServicesConfiguration` computes — spawned, each on its
+     * own ephemeral port unless it opts into a fixed one, or attached to
+     * (`service.attach`, `attachManagedProcess`) when it names an already-
+     * running pid/log file instead of a `command`. Reaches RUNNING only if
+     * every service starts and reaches its own readiness. On the first
+     * failure (spawn/attach throw, or readiness never succeeding), every
+     * already-started service is killed in reverse order (a no-op for an
+     * attached one — see `attachManagedProcess`'s own doc) and every
+     * not-yet-attempted service is recorded as such — a caller can always
+     * tell "never tried" from "tried and failed" via `serviceStartResults`.
+     *
+     * Configuration itself is validated first, atomically: a bad `dependsOn`
+     * reference, a cycle, an undeclared placeholder dependency, a service
+     * declaring neither or both of `command`/`attach`, or a missing
+     * `RunOptions.readiness` entry refuses before anything is spawned, never
+     * discovered mid-sequence with other services already running.
+     *
+     * Every **spawned** service receives `PORT` (its own resolved port,
+     * ephemeral or fixed) in its environment unconditionally, on top of
+     * `service.env` — a service has no other way to learn the port RT-024
+     * chose for it. This is a real, load-bearing convention (matches
+     * `broken-invoices`'s fixture apps), not an implementation detail: a
+     * `ServiceConfiguration` whose command reads its listen port from
+     * anywhere other than `PORT` will not be reachable through readiness
+     * checks built from the same `port` this function resolves. An
+     * **attached** service receives no env and no port allocation — it is
+     * already running on whatever port it bound at its own launch, and
+     * `service.port` (when the caller supplies it) is a declaration of that
+     * fact, not a request this function can act on.
+     */
+    run(options: RunOptions): Promise<Execution>;
+    stop(): Promise<Execution>;
+    cancel(): Promise<Execution>;
+}
+//# sourceMappingURL=controller.d.ts.map

package/dist/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../src/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAGL,KAAK,SAAS,EAEd,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAkB,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAW3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,SAAS,cAAc,EAAE,CAAC;IAChF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,uLAAuL;IACvL,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACnE;;;;;;;;;OASG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAC3E;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,eAAe,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2KAA2K;IAC3K,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAClG;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CAAE,GACrI;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CAAE;AAC9I;;;;;;;;;;;;;;GAcG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAAA;CAAE,CAAC;AAE9I;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;;IAO9B,OAAO;IAIP,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,mBAAmB;IAsB/D,IAAI,SAAS,IAAI,SAAS,CAEzB;IAED,qMAAqM;IACrM,IAAI,mBAAmB,IAAI,SAAS,kBAAkB,EAAE,CAEvD;IAED,4MAA4M;IAC5M,IAAI,eAAe,IAAI,MAAM,GAAG,IAAI,CAEnC;IAED,mGAAmG;IACnG,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IA2B9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACG,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAwQ5C,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC;IAW1B,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC;CA6CnC"}

package/dist/controller.js

@@ -0,0 +1,433 @@
+/**
+ * Runtime controller (plan §4, §5, §6; plan §45's "Core" bucket: runtime
+ * controller, execution IDs, process lifecycle, readiness, timeout
+ * handling, cleanup, configuration). Owns Execution lifecycle, spawns every
+ * service declared in configuration, waits for each one's real readiness
+ * (never "process exists"), and guarantees cleanup — including on partial
+ * or total failure and on timeout. Builds no collectors and knows nothing
+ * about any specific language or framework (plan principle 8).
+ */
+import { randomUUID } from "node:crypto";
+import { isTerminalExecutionState, isValidExecutionTransition, } from "@descryy/runtime-contracts";
+import { spawnProcess, attachManagedProcess, allocateEphemeralPort } from "./process-manager.js";
+import { awaitReadiness } from "./readiness.js";
+import { withDefaultProcessEnv } from "./env.js";
+import { validateServicesConfiguration, substitutePortPlaceholders, tokenizeCommand } from "./orchestration.js";
+import { resourceLimitCapability, networkPolicyCapability } from "./execution-safety.js";
+import { filesystemIsolationCapability, unsupportedNetworkPolicyReason } from "./sandbox.js";
+import { containerFilesystemIsolationCapability, containerNetworkIsolationCapability, unsupportedContainerNetworkPolicyReason, } from "./container-sandbox.js";
+import { captureEnvironmentMetadata } from "./environment-metadata.js";
+/**
+ * `run()`'s timeout timer and a caller's `stop()`/`cancel()` can both
+ * attempt to move a finishing execution to a terminal state at nearly the
+ * same instant. Every transition attempted after an `await` goes through
+ * `#tryTransition` (returns false instead of throwing) rather than the
+ * throwing `#transition`, so whichever path loses the race degrades to a
+ * no-op instead of an unhandled rejection from a fire-and-forget timer
+ * callback.
+ */
+export class ExecutionController {
+    #execution;
+    #processes = new Map();
+    #timeoutHandle = null;
+    #serviceStartResults = [];
+    #validationError = null;
+    constructor(execution) {
+        this.#execution = execution;
+    }
+    static create(input) {
+        const execution = {
+            executionId: randomUUID(),
+            application: input.application,
+            repository: input.repository,
+            commit: input.commit,
+            environmentMetadata: null,
+            configuration: input.configuration,
+            state: "CREATED",
+            startedAt: null,
+            endedAt: null,
+            processes: [],
+            browserSessions: [],
+            eventIds: [],
+            traceIds: [],
+            failureIds: [],
+            correlationIds: [],
+            findingIds: [],
+        };
+        return new ExecutionController(execution);
+    }
+    get execution() {
+        return this.#execution;
+    }
+    /** One entry per service configured, in spawn order — including services never attempted because an earlier one failed (`stage: "not-attempted"`). Empty before `run()` returns its first result. */
+    get serviceStartResults() {
+        return this.#serviceStartResults;
+    }
+    /** Non-null only when `run()` refused before spawning anything — a bad `dependsOn` reference, a cycle, an undeclared placeholder dependency, or a service with no matching `RunOptions.readiness` entry. */
+    get validationError() {
+        return this.#validationError;
+    }
+    /** Combined stdout+stderr of the named service's process so far, or "" if it was never spawned. */
+    readProcessOutput(serviceName) {
+        return this.#processes.get(serviceName)?.readOutput() ?? "";
+    }
+    #transition(to) {
+        if (!isValidExecutionTransition(this.#execution.state, to)) {
+            throw new Error(`invalid execution transition: ${this.#execution.state} -> ${to}`);
+        }
+        this.#execution = { ...this.#execution, state: to };
+    }
+    #tryTransition(to) {
+        if (!isValidExecutionTransition(this.#execution.state, to)) {
+            return false;
+        }
+        this.#transition(to);
+        return true;
+    }
+    #recordProcesses() {
+        const handles = [];
+        for (const managed of this.#processes.values()) {
+            handles.push(managed.handle());
+        }
+        this.#execution = { ...this.#execution, processes: handles };
+    }
+    /**
+     * Starts every service in `configuration.services`, in the dependency
+     * order `validateServicesConfiguration` computes — spawned, each on its
+     * own ephemeral port unless it opts into a fixed one, or attached to
+     * (`service.attach`, `attachManagedProcess`) when it names an already-
+     * running pid/log file instead of a `command`. Reaches RUNNING only if
+     * every service starts and reaches its own readiness. On the first
+     * failure (spawn/attach throw, or readiness never succeeding), every
+     * already-started service is killed in reverse order (a no-op for an
+     * attached one — see `attachManagedProcess`'s own doc) and every
+     * not-yet-attempted service is recorded as such — a caller can always
+     * tell "never tried" from "tried and failed" via `serviceStartResults`.
+     *
+     * Configuration itself is validated first, atomically: a bad `dependsOn`
+     * reference, a cycle, an undeclared placeholder dependency, a service
+     * declaring neither or both of `command`/`attach`, or a missing
+     * `RunOptions.readiness` entry refuses before anything is spawned, never
+     * discovered mid-sequence with other services already running.
+     *
+     * Every **spawned** service receives `PORT` (its own resolved port,
+     * ephemeral or fixed) in its environment unconditionally, on top of
+     * `service.env` — a service has no other way to learn the port RT-024
+     * chose for it. This is a real, load-bearing convention (matches
+     * `broken-invoices`'s fixture apps), not an implementation detail: a
+     * `ServiceConfiguration` whose command reads its listen port from
+     * anywhere other than `PORT` will not be reachable through readiness
+     * checks built from the same `port` this function resolves. An
+     * **attached** service receives no env and no port allocation — it is
+     * already running on whatever port it bound at its own launch, and
+     * `service.port` (when the caller supplies it) is a declaration of that
+     * fact, not a request this function can act on.
+     */
+    async run(options) {
+        this.#transition("STARTING");
+        this.#armTimeout();
+        const services = this.#execution.configuration.services;
+        const validation = validateServicesConfiguration(services);
+        if (!validation.valid) {
+            return this.#refuseToStart(validation.reason, Object.keys(services));
+        }
+        // §21's execution boundary (RT-070): the same "refuse atomically before
+        // anything is spawned" discipline `tokenizeCommand` already gets, one
+        // check up. Requesting a limit this platform cannot enforce and finding
+        // out only when the first `spawnProcess()` throws would mean earlier
+        // services in `validation.order` are already running by the time the
+        // refusal happens -- recoverable via the existing cleanup path, but
+        // needlessly, since nothing about this check needs a process to exist.
+        const resourceLimits = this.#execution.configuration.resourceLimits;
+        if (resourceLimits !== undefined) {
+            const capability = resourceLimitCapability();
+            if (capability.availability !== "available") {
+                return this.#refuseToStart(`resourceLimits was configured but cannot be enforced on this platform: ${capability.reason}`, Object.keys(services));
+            }
+        }
+        // Which real mechanism backs filesystemPolicy/networkPolicy for this
+        // execution -- absent means "bwrap", exactly today's behavior. See
+        // ExecutionConfiguration.sandboxBackend's own comment.
+        const sandboxBackend = this.#execution.configuration.sandboxBackend ?? "bwrap";
+        // RT-193, same atomic-refusal placement as resourceLimits above.
+        // `networkPolicyCapability()` is real on Linux now (sandbox-isolation
+        // lane: a bwrap network namespace) but still `unavailable` on
+        // macOS/Windows, and even where the mechanism exists it only
+        // implements one shape (full denial) -- both refusals happen here,
+        // atomically, before anything is spawned, never silently accepted and
+        // left unenforced. `sandboxBackend: "container"` checks the container
+        // mechanism's own capability/shape functions instead -- same refusal
+        // discipline, different real mechanism underneath.
+        const networkPolicy = this.#execution.configuration.networkPolicy;
+        if (networkPolicy !== undefined) {
+            const shapeReason = sandboxBackend === "container" ? unsupportedContainerNetworkPolicyReason(networkPolicy) : unsupportedNetworkPolicyReason(networkPolicy);
+            if (shapeReason !== null) {
+                return this.#refuseToStart(`networkPolicy was configured but cannot be enforced: ${shapeReason}`, Object.keys(services));
+            }
+            const capability = sandboxBackend === "container" ? containerNetworkIsolationCapability() : networkPolicyCapability();
+            if (capability.availability !== "available") {
+                return this.#refuseToStart(`networkPolicy was configured but cannot be enforced on this platform: ${capability.reason}`, Object.keys(services));
+            }
+        }
+        // Sandbox-isolation lane, filesystem half: same atomic-refusal
+        // placement and precedent -- real on Linux via `applySandbox`'s bwrap
+        // mount namespace, refused rather than silently unconstrained where
+        // that mechanism doesn't exist. `sandboxBackend: "container"` checks
+        // Docker's own capability instead.
+        const filesystemPolicy = this.#execution.configuration.filesystemPolicy;
+        if (filesystemPolicy !== undefined) {
+            const capability = sandboxBackend === "container" ? containerFilesystemIsolationCapability() : filesystemIsolationCapability();
+            if (capability.availability !== "available") {
+                return this.#refuseToStart(`filesystemPolicy was configured but cannot be enforced on this platform: ${capability.reason}`, Object.keys(services));
+            }
+        }
+        for (const name of validation.order) {
+            if (options.readiness[name] === undefined) {
+                return this.#refuseToStart(`service "${name}" has no matching RunOptions.readiness entry`, validation.order);
+            }
+        }
+        // RT-193: captured once real spawning is committed to happen, from the
+        // real host -- see `EnvironmentMetadata`'s own comment for why `commit`
+        // alone does not make a run reproducible.
+        const environmentMetadata = await captureEnvironmentMetadata(services);
+        this.#execution = { ...this.#execution, startedAt: new Date().toISOString(), environmentMetadata };
+        const resolvedPorts = new Map();
+        for (let i = 0; i < validation.order.length; i++) {
+            const name = validation.order[i];
+            if (name === undefined)
+                continue;
+            if (isTerminalExecutionState(this.#execution.state)) {
+                // A concurrent timeout/stop/cancel already finished this execution
+                // while we were mid-sequence.
+                return this.#execution;
+            }
+            const service = services[name];
+            if (service === undefined)
+                continue;
+            const readinessSpec = options.readiness[name];
+            if (readinessSpec === undefined)
+                continue;
+            let managed;
+            let port;
+            if (service.attach !== undefined) {
+                // Attach mode (RT-attach-mode-service-configuration): the target is
+                // already running and already bound to whatever it bound at its own
+                // launch -- nothing here can allocate a port on its behalf, only
+                // record the one the caller already knows about. `0` (never a real
+                // listening port) when they did not supply one, so a readiness
+                // check that actually needs a port fails legibly against it
+                // ("nothing answered") instead of this function inventing an
+                // ephemeral port that has nothing to do with the real target.
+                // `resourceLimits`/`filesystemPolicy`/`networkPolicy`/`sandboxBackend`
+                // are deliberately never passed through — see `ServiceConfiguration.attach`'s
+                // own comment on why they cannot apply to a process this runtime
+                // did not spawn.
+                port = service.port ?? 0;
+                try {
+                    managed = attachManagedProcess({
+                        processId: randomUUID(),
+                        attach: service.attach,
+                        serviceName: name,
+                        ...(service.port === undefined ? {} : { port: service.port }),
+                    });
+                }
+                catch (err) {
+                    this.#serviceStartResults.push({
+                        serviceName: name,
+                        stage: "spawn",
+                        succeeded: false,
+                        readiness: null,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                    this.#markRemainingNotAttempted(validation.order, i + 1);
+                    this.#tryTransition("FAILED_START");
+                    await this.#cleanup();
+                    this.#finish();
+                    throw err;
+                }
+            }
+            else {
+                port = service.port ?? (await allocateEphemeralPort());
+                const env = withDefaultProcessEnv({
+                    PORT: String(port),
+                    ...substitutePortPlaceholders(service.env, resolvedPorts),
+                });
+                // `validateServicesConfiguration` already proved every service
+                // declares exactly one of `command`/`attach` and, when it's
+                // `command`, that it tokenizes -- both branches below are
+                // unreachable in practice, kept because the alternative is a
+                // non-null assertion that would become a real crash if the two
+                // ever drift apart.
+                if (service.command === undefined) {
+                    return this.#refuseToStart(`service "${name}": neither "command" nor "attach" is set`, validation.order);
+                }
+                const tokenized = tokenizeCommand(service.command);
+                if (!tokenized.ok) {
+                    return this.#refuseToStart(`service "${name}": ${tokenized.reason}`, validation.order);
+                }
+                const { command, args } = tokenized;
+                try {
+                    managed = spawnProcess({
+                        processId: randomUUID(),
+                        command,
+                        args,
+                        cwd: service.cwd,
+                        env,
+                        serviceName: name,
+                        port,
+                        ...(resourceLimits === undefined ? {} : { resourceLimits }),
+                        ...(filesystemPolicy === undefined ? {} : { filesystemPolicy }),
+                        ...(networkPolicy === undefined ? {} : { networkPolicy }),
+                        ...(sandboxBackend === "bwrap" ? {} : { sandboxBackend }),
+                    });
+                }
+                catch (err) {
+                    this.#serviceStartResults.push({
+                        serviceName: name,
+                        stage: "spawn",
+                        succeeded: false,
+                        readiness: null,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                    this.#markRemainingNotAttempted(validation.order, i + 1);
+                    this.#tryTransition("FAILED_START");
+                    await this.#cleanup();
+                    this.#finish();
+                    throw err;
+                }
+            }
+            this.#processes.set(name, managed);
+            resolvedPorts.set(name, port);
+            this.#recordProcesses();
+            options.onProcessLifecycleEvent?.({ kind: "process-started", serviceName: name, handle: managed.handle() });
+            // Read by the exit watcher below, whenever it actually fires — true
+            // only once THIS service's own readiness has succeeded, which is
+            // what lets `phase` distinguish "died before ever confirmed up" from
+            // "died after running" regardless of how much later exit occurs.
+            let reachedReady = false;
+            // Fire-and-forget: exit can happen at any point in this process's
+            // life, including long after `run()` itself has returned (a healthy
+            // service that later crashes, or the eventual `#cleanup()` reap) —
+            // it must not be awaited inline here, which would block every
+            // service after it in `validation.order` on this one's exit.
+            void managed.waitForExit().then(() => {
+                options.onProcessLifecycleEvent?.({
+                    kind: "process-exited",
+                    serviceName: name,
+                    handle: managed.handle(),
+                    phase: reachedReady ? "running" : "starting",
+                });
+            });
+            const readinessResult = await awaitReadiness(readinessSpec.checks({ port }), {
+                timeoutMs: readinessSpec.timeoutMs,
+            });
+            if (readinessResult.ready)
+                reachedReady = true;
+            this.#serviceStartResults.push({
+                serviceName: name,
+                stage: "readiness",
+                succeeded: readinessResult.ready,
+                readiness: readinessResult,
+                error: null,
+            });
+            options.onProcessLifecycleEvent?.({
+                kind: readinessResult.ready ? "process-ready" : "process-ready-failed",
+                serviceName: name,
+                handle: managed.handle(),
+                readiness: readinessResult,
+            });
+            if (isTerminalExecutionState(this.#execution.state)) {
+                return this.#execution;
+            }
+            if (!readinessResult.ready) {
+                this.#markRemainingNotAttempted(validation.order, i + 1);
+                if (this.#tryTransition("FAILED_START")) {
+                    await this.#cleanup();
+                }
+                return this.#finish();
+            }
+        }
+        if (this.#tryTransition("READY")) {
+            this.#tryTransition("RUNNING");
+        }
+        return this.#execution;
+    }
+    #refuseToStart(reason, allServiceNames) {
+        this.#validationError = reason;
+        this.#serviceStartResults = allServiceNames.map((serviceName) => ({
+            serviceName,
+            stage: "not-attempted",
+            succeeded: false,
+            readiness: null,
+            error: null,
+        }));
+        this.#tryTransition("FAILED_START");
+        return this.#finish();
+    }
+    #markRemainingNotAttempted(order, fromIndex) {
+        for (let i = fromIndex; i < order.length; i++) {
+            const serviceName = order[i];
+            if (serviceName === undefined)
+                continue;
+            this.#serviceStartResults.push({
+                serviceName,
+                stage: "not-attempted",
+                succeeded: false,
+                readiness: null,
+                error: null,
+            });
+        }
+    }
+    async stop() {
+        if (isTerminalExecutionState(this.#execution.state) || this.#execution.state === "STOPPING") {
+            return this.#execution;
+        }
+        if (this.#tryTransition("STOPPING")) {
+            await this.#cleanup();
+            this.#tryTransition("COMPLETED");
+        }
+        return this.#finish();
+    }
+    async cancel() {
+        if (isTerminalExecutionState(this.#execution.state) || this.#execution.state === "STOPPING") {
+            return this.#execution;
+        }
+        await this.#cleanup();
+        this.#tryTransition("CANCELLED");
+        return this.#finish();
+    }
+    #armTimeout() {
+        this.#timeoutHandle = setTimeout(() => {
+            void this.#onTimeout();
+        }, this.#execution.configuration.timeoutMs);
+    }
+    async #onTimeout() {
+        if (isTerminalExecutionState(this.#execution.state)) {
+            return;
+        }
+        await this.#cleanup();
+        this.#tryTransition("TIMED_OUT");
+        this.#finish();
+    }
+    /** Kills every spawned service in reverse start order — last up, first down. */
+    async #cleanup() {
+        if (this.#timeoutHandle !== null) {
+            clearTimeout(this.#timeoutHandle);
+            this.#timeoutHandle = null;
+        }
+        const managed = [...this.#processes.values()].reverse();
+        for (const proc of managed) {
+            await proc.kill();
+        }
+        if (managed.length > 0) {
+            this.#recordProcesses();
+        }
+    }
+    #finish() {
+        if (this.#execution.endedAt === null) {
+            this.#execution = { ...this.#execution, endedAt: new Date().toISOString() };
+        }
+        return this.#execution;
+    }
+}
+//# sourceMappingURL=controller.js.map

package/dist/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../src/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAI3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAuB,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,cAAc,EAA6C,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACnC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAmFvE;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IAC9B,UAAU,CAAY;IACtB,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,cAAc,GAA0B,IAAI,CAAC;IAC7C,oBAAoB,GAAyB,EAAE,CAAC;IAChD,gBAAgB,GAAkB,IAAI,CAAC;IAEvC,YAAoB,SAAoB;QACtC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAA2B;QACvC,MAAM,SAAS,GAAc;YAC3B,WAAW,EAAE,UAAU,EAAE;YACzB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,mBAAmB,EAAE,IAAI;YACzB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,EAAE;SACf,CAAC;QACF,OAAO,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,qMAAqM;IACrM,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,4MAA4M;IAC5M,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,mGAAmG;IACnG,iBAAiB,CAAC,WAAmB;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED,WAAW,CAAC,EAAkB;QAC5B,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,UAAU,CAAC,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,cAAc,CAAC,EAAkB;QAC/B,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB;QACd,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,KAAK,CAAC,GAAG,CAAC,OAAmB;QAC3B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC;QACxD,MAAM,UAAU,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC;QACpE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;YAC7C,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC,cAAc,CAAC,0EAA0E,UAAU,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnJ,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,mEAAmE;QACnE,uDAAuD;QACvD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,cAAc,IAAI,OAAO,CAAC;QAE/E,iEAAiE;QACjE,sEAAsE;QACtE,8DAA8D;QAC9D,6DAA6D;QAC7D,mEAAmE;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,mDAAmD;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC;QAClE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,uCAAuC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,aAAa,CAAC,CAAC;YAC5J,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,cAAc,CAAC,wDAAwD,WAAW,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3H,CAAC;YACD,MAAM,UAAU,GAAG,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;YACtH,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC,cAAc,CAAC,yEAAyE,UAAU,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClJ,CAAC;QACH,CAAC;QACD,+DAA+D;QAC/D,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,mCAAmC;QACnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,gBAAgB,CAAC;QACxE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC,6BAA6B,EAAE,CAAC;YAC/H,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC,cAAc,CAAC,4EAA4E,UAAU,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,8CAA8C,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,mBAAmB,EAAE,CAAC;QACnG,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YAEjC,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,mEAAmE;gBACnE,8BAA8B;gBAC9B,OAAO,IAAI,CAAC,UAAU,CAAC;YACzB,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,OAAO,KAAK,SAAS;gBAAE,SAAS;YACpC,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,aAAa,KAAK,SAAS;gBAAE,SAAS;YAE1C,IAAI,OAAuB,CAAC;YAC5B,IAAI,IAAY,CAAC;YAEjB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,oEAAoE;gBACpE,oEAAoE;gBACpE,iEAAiE;gBACjE,mEAAmE;gBACnE,+DAA+D;gBAC/D,4DAA4D;gBAC5D,6DAA6D;gBAC7D,8DAA8D;gBAC9D,uEAAuE;gBACvE,8EAA8E;gBAC9E,iEAAiE;gBACjE,iBAAiB;gBACjB,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;gBACzB,IAAI,CAAC;oBACH,OAAO,GAAG,oBAAoB,CAAC;wBAC7B,SAAS,EAAE,UAAU,EAAE;wBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,WAAW,EAAE,IAAI;wBACjB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;wBAC7B,WAAW,EAAE,IAAI;wBACjB,KAAK,EAAE,OAAO;wBACd,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;oBACH,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACzD,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;oBACpC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACf,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,CAAC;gBACvD,MAAM,GAAG,GAAG,qBAAqB,CAAC;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;oBAClB,GAAG,0BAA0B,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC;iBAC1D,CAAC,CAAC;gBACH,+DAA+D;gBAC/D,4DAA4D;gBAC5D,0DAA0D;gBAC1D,6DAA6D;gBAC7D,+DAA+D;gBAC/D,oBAAoB;gBACpB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,0CAA0C,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC3G,CAAC;gBACD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;oBAClB,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;gBACzF,CAAC;gBACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC;gBAEpC,IAAI,CAAC;oBACH,OAAO,GAAG,YAAY,CAAC;wBACrB,SAAS,EAAE,UAAU,EAAE;wBACvB,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,GAAG;wBACH,WAAW,EAAE,IAAI;wBACjB,IAAI;wBACJ,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;wBAC3D,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;wBAC/D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;wBACzD,GAAG,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;qBAC1D,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;wBAC7B,WAAW,EAAE,IAAI;wBACjB,KAAK,EAAE,OAAO;wBACd,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;oBACH,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACzD,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;oBACpC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACf,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO,CAAC,uBAAuB,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5G,oEAAoE;YACpE,iEAAiE;YACjE,qEAAqE;YACrE,iEAAiE;YACjE,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,8DAA8D;YAC9D,6DAA6D;YAC7D,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnC,OAAO,CAAC,uBAAuB,EAAE,CAAC;oBAChC,IAAI,EAAE,gBAAgB;oBACtB,WAAW,EAAE,IAAI;oBACjB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;oBACxB,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;iBAC7C,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;gBAC3E,SAAS,EAAE,aAAa,CAAC,SAAS;aACnC,CAAC,CAAC;YACH,IAAI,eAAe,CAAC,KAAK;gBAAE,YAAY,GAAG,IAAI,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;gBAC7B,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,eAAe,CAAC,KAAK;gBAChC,SAAS,EAAE,eAAe;gBAC1B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBAChC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,sBAAsB;gBACtE,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;gBACxB,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YAEH,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC,UAAU,CAAC;YACzB,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;gBAC3B,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxB,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,cAAc,CAAC,MAAc,EAAE,eAAkC;QAC/D,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;QAC/B,IAAI,CAAC,oBAAoB,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAChE,WAAW;YACX,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,0BAA0B,CAAC,KAAwB,EAAE,SAAiB;QACpE,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,WAAW,KAAK,SAAS;gBAAE,SAAS;YACxC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;gBAC7B,WAAW;gBACX,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC5F,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC5F,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,WAAW;QACT,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}