@descryy/runtime-controller 0.2.1 → 0.3.1

package/dist/process-manager.d.ts

@@ -1,35 +1,25 @@
 /**
- * Process manager (plan §5): command execution, working directory,
- * environment variables, process-group tracking, stdout/stderr capture,
- * exit-code capture, cleanup with a shutdown grace period, and orphan-
- * process prevention.
+ * Process manager (§5): command execution, cwd, env, process-group tracking,
+ * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
  *
- * Orphan prevention and group-kill use POSIX process groups
- * (`detached: true` + `process.kill(-pid, signal)`), matching this
- * project's Linux development and CI targets. Not portable to Windows as
- * written — out of scope for the V1 fixture-app slice (plan §34).
+ * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
+ * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
+ * fixture-app slice (§34).
  */
 import type { FilesystemPolicy, NetworkPolicy, ProcessHandle, ResourceLimits, ServiceAttachConfiguration } from "@descryy/runtime-contracts";
+import { type AttachFence } from "./attach-fencing.ts";
 /**
- * Binds port 0 (OS picks a free one), reads it, releases it immediately.
- * A real gap remains between "free when checked" and "still free when the
- * real service binds it" (RT-024's own class of gap, one layer down) --
- * unavoidable without binding the real service directly to the probe
- * socket, which `spawnProcess`'s child-process model doesn't support, and
- * which no ordinary application would cooperate with anyway.
+ * Binds port 0, reads it, releases immediately. A real gap remains between "free
+ * when checked" and "still free when the child binds it" (RT-024's gap, one layer
+ * down) -- unavoidable without binding the real service directly to the probe
+ * socket, which the child-process model doesn't support.
  *
- * **Examined for a fix and deliberately not "fixed".** Holding the probe
- * socket open for longer does not narrow the window, it widens it: the
- * child cannot bind while we hold the port, and the dominant term is the
- * child's own startup, not our release. Retrying on the child's bind error
- * would mean parsing that error out of process output, which is
- * per-language text and has no place in a language-neutral controller.
- * What was done instead is to make the one symptom legible: `awaitReadiness`
- * now names the endpoint it probed, so a collision reads as "nothing
- * answered on this port" rather than as an unexplained application failure.
- * In practice the window is a handful of milliseconds and readiness always
- * runs afterwards, so a genuine collision fails loudly -- it is just no
- * longer misattributed.
+ * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
+ * the window rather than narrowing it (the child can't bind while we hold it).
+ * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
+ * "nothing answered on this port" rather than an unexplained failure. Window is a
+ * handful of ms in practice; a genuine collision still fails loudly, just correctly
+ * attributed.
  */
 export declare function allocateEphemeralPort(): Promise<number>;
 export interface SpawnProcessOptions {
@@ -38,29 +28,24 @@ export interface SpawnProcessOptions {
     readonly args?: readonly string[];
     readonly cwd?: string;
     readonly env?: Readonly<Record<string, string | undefined>>;
-    /** Joins the resulting ProcessHandle back to ExecutionConfiguration.services (RT-023). Omit for a process with no corresponding named service. */
+    /** Joins the resulting ProcessHandle back to ExecutionConfiguration.services (RT-023). Omit for no corresponding named service. */
     readonly serviceName?: string;
-    /** The real port this process is bound to, when the caller already knows it (e.g. an ephemeral port it allocated before spawning). Recorded on the handle, not otherwise used by this function. */
+    /** Real port this process is bound to, when the caller already knows it. Recorded on the handle only. */
     readonly port?: number;
-    /** §21's execution boundary (RT-070). Applied via `applyResourceLimits` -- see its own comment for the refuse-rather-than-silently-unconstrained contract. Re-applied on every (re)spawn, including `restart()`. */
+    /** §21 execution boundary (RT-070), via `applyResourceLimits`. Re-applied on every (re)spawn including `restart()`. */
     readonly resourceLimits?: ResourceLimits;
-    /** §21's execution boundary, filesystem half. Applied via `applySandbox` -- see its own comment. Re-applied on every (re)spawn, including `restart()`. */
+    /** §21 execution boundary, filesystem half, via `applySandbox`. Re-applied on every (re)spawn. */
     readonly filesystemPolicy?: FilesystemPolicy;
-    /** §21's execution boundary, network half. Applied via `applySandbox` -- see its own comment. Re-applied on every (re)spawn, including `restart()`. */
+    /** §21 execution boundary, network half, via `applySandbox`. Re-applied on every (re)spawn. */
     readonly networkPolicy?: NetworkPolicy;
     /**
-     * Selects which real mechanism enforces `filesystemPolicy`/`networkPolicy`.
-     * Absent means `"bwrap"` -- exactly today's behavior, unchanged.
-     * `"container"` routes through `applyContainerSandbox` (`./container-sandbox.ts`)
-     * instead. See `ExecutionConfiguration.sandboxBackend`'s own comment.
+     * Selects the mechanism enforcing `filesystemPolicy`/`networkPolicy`. Absent means
+     * `"bwrap"` (unchanged default); `"container"` routes through `applyContainerSandbox`.
      *
-     * **Does not compose with `resourceLimits` in this pass**: the container
-     * backend applies directly to `command`/`args`, skipping
-     * `applyResourceLimits`'s `prlimit` wrap entirely (a minimal container
-     * image is not guaranteed to carry `prlimit`, and Docker's own
-     * `--memory`/`--cpus`/`--pids-limit` equivalent is not wired up here) --
-     * disclosed in `container-sandbox.ts`'s own module doc, not silently
-     * dropped.
+     * **Does not compose with `resourceLimits` in this pass** -- the container backend
+     * skips `applyResourceLimits`'s `prlimit` wrap entirely (a minimal image isn't
+     * guaranteed to carry `prlimit`, Docker's own limit flags aren't wired up).
+     * Disclosed in `container-sandbox.ts`, not silently dropped.
      */
     readonly sandboxBackend?: "bwrap" | "container";
 }
@@ -70,36 +55,34 @@ export interface ProcessExitInfo {
 }
 export interface ManagedProcess {
     handle(): ProcessHandle;
-    /** Combined stdout+stderr captured so far, in arrival order — the backing store for log-pattern readiness checks. */
+    /** Combined stdout+stderr captured so far, in arrival order -- backing store for log-pattern readiness checks. */
     readOutput(): string;
     waitForExit(): Promise<ProcessExitInfo>;
-    /** SIGTERM the process group, wait up to `gracePeriodMs`, then SIGKILL if still alive. Idempotent. */
+    /** SIGTERM the process group, wait up to `gracePeriodMs`, then SIGKILL. Idempotent. */
     kill(gracePeriodMs?: number): Promise<void>;
     /**
-     * Kills the current process (if still alive — a no-op wait if it already
-     * exited on its own) and spawns a fresh one with the SAME `command`/
-     * `args`/`cwd`/`env`. `handle()`, `readOutput()` and `waitForExit()` all
-     * observe the new process afterward — this is the same `ManagedProcess`
-     * object, not a new one, so a caller holding the original reference does
-     * not need to re-fetch anything. Readiness is the caller's job, same as
-     * after the original `spawnProcess` — this resolves once the new process
-     * EXISTS, not once it is ready.
+     * Kills the current process (no-op wait if already exited) and spawns a fresh one
+     * with the same command/args/cwd/env. `handle()`/`readOutput()`/`waitForExit()`
+     * observe the new process on the same object -- no re-fetch needed. Resolves once
+     * the new process exists, not once it's ready (readiness is the caller's job).
      */
     restart(gracePeriodMs?: number): Promise<void>;
+    /**
+     * The attach-time fence (RT-N3), or `null` for a process this runtime spawned
+     * itself -- fencing only exists to mark content that predates OBSERVATION, and
+     * a spawned process has no output before Descry started it. See
+     * `computeAttachFence` (`attach-fencing.ts`) for what it records and why.
+     */
+    attachFence(): AttachFence | null;
 }
 export declare function spawnProcess(options: SpawnProcessOptions): ManagedProcess;
 /**
- * `process.kill(pid, 0)` sends no signal — it only asks the kernel whether
- * delivery would be possible. `ESRCH` means no such pid; `EPERM` means a
- * pid we don't own but that unambiguously exists, still alive for this
- * purpose. Any other error is treated as "exists" rather than guessed away.
+ * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
+ * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
  *
- * A second, deliberate copy of `packages/orchestrator/src/attach-to-running-process.ts`'s
- * function of the same name, not an import of it: `orchestrator` depends on
- * `controller` (see `orchestrator/package.json`), so the reverse import
- * would be circular. Tiny and pure, the same "duplicated because both
- * copies are easy to notice drift" precedent `attach-to-running-jvm-process.ts`'s
- * own `reconstructJvmSourcePath` already sets for exactly this reason.
+ * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
+ * same-named function, not an import -- `orchestrator` depends on `controller`, so
+ * the reverse import would be circular. Tiny and pure enough to duplicate safely.
  */
 export declare function isProcessAlive(pid: number): boolean;
 export interface AttachProcessOptions {
@@ -109,25 +92,27 @@ export interface AttachProcessOptions {
     readonly port?: number;
 }
 /**
- * `ManagedProcess` for a service `ExecutionController.run()` attaches to
- * instead of spawning (`ServiceConfiguration.attach`). Reads
- * `attach.logFilePath` fresh on every `readOutput()` call — the same
- * growing-whole-buffer contract a spawned process's in-memory pipe buffer
- * already has (`spawnProcess`'s own `outputBuffer`), so `createPollingProcessOutputSource`
- * (`@descryy/runtime-orchestrator`) needs no attach-specific branch to
- * consume either one.
+ * `ManagedProcess` for a service attached to rather than spawned. Reads
+ * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
+ * contract as a spawned process's in-memory pipe buffer.
+ *
+ * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
+ * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
+ * code in or applies changes to what it observes. Ending observation is the honest
+ * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
+ * reason: no command exists to relaunch it with.
  *
- * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this
- * process and `ATTACH_MODE_SCOPE_DISCLOSURE` (`@descryy/runtime-contracts`)
- * is unconditional: attach mode "never executes code in it or applies
- * changes to it." `ExecutionController`'s cleanup path kills every managed
- * process on failure/timeout/stop — for an attached service that would mean
- * terminating a process this runtime does not own, silently, the exact
- * thing the disclosure promises never happens. Ending observation (no
- * further polling) is the honest equivalent of "stop" here; the target
- * keeps running, as it was before Descry ever attached. `restart()` throws
- * for the same reason: there is no command this runtime could relaunch it
- * with.
+ * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
+ * (i.e. the moment of attach), how much of `logFilePath` already existed and
+ * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
+ * via `attachFence()` for a caller building a `ProcessOutputSource` over
+ * `readOutput()` to mark pre-existing content instead of reporting it as freshly
+ * observed. `readOutput()` itself additionally refuses (rather than silently
+ * mis-reading) if the file is ever found shorter than the largest size already
+ * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
+ * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
+ * here for the same reason `isProcessAlive` is: this module cannot depend on
+ * that one without a cycle, and the check is small and pure enough to repeat.
  */
 export declare function attachManagedProcess(options: AttachProcessOptions): ManagedProcess;
 //# sourceMappingURL=process-manager.d.ts.map

package/dist/process-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-manager.d.ts","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAK7I;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAevD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,kJAAkJ;IAClJ,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mMAAmM;IACnM,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,oNAAoN;IACpN,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,0JAA0J;IAC1J,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,uJAAuJ;IACvJ,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,IAAI,aAAa,CAAC;IACxB,qHAAqH;IACrH,UAAU,IAAI,MAAM,CAAC;IACrB,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,sGAAsG;IACtG,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C;;;;;;;;;OASG;IACH,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAID,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,cAAc,CAiKzE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,cAAc,CA4ElF"}
+{"version":3,"file":"process-manager.d.ts","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAI7I,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAevD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,mIAAmI;IACnI,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yGAAyG;IACzG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,uHAAuH;IACvH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,IAAI,aAAa,CAAC;IACxB,kHAAkH;IAClH,UAAU,IAAI,MAAM,CAAC;IACrB,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,uFAAuF;IACvF,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,WAAW,IAAI,WAAW,GAAG,IAAI,CAAC;CACnC;AAID,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,cAAc,CAiJzE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,cAAc,CAwFlF"}

package/dist/process-manager.js

@@ -1,13 +1,10 @@
 /**
- * Process manager (plan §5): command execution, working directory,
- * environment variables, process-group tracking, stdout/stderr capture,
- * exit-code capture, cleanup with a shutdown grace period, and orphan-
- * process prevention.
+ * Process manager (§5): command execution, cwd, env, process-group tracking,
+ * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
  *
- * Orphan prevention and group-kill use POSIX process groups
- * (`detached: true` + `process.kill(-pid, signal)`), matching this
- * project's Linux development and CI targets. Not portable to Windows as
- * written — out of scope for the V1 fixture-app slice (plan §34).
+ * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
+ * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
+ * fixture-app slice (§34).
  */
 import { execFile, spawn } from "node:child_process";
 import { readFileSync } from "node:fs";
@@ -16,26 +13,19 @@ import { promisify } from "node:util";
 import { applyResourceLimits } from "./execution-safety.js";
 import { applySandbox } from "./sandbox.js";
 import { applyContainerSandbox } from "./container-sandbox.js";
+import { computeAttachFence } from "./attach-fencing.js";
 /**
- * Binds port 0 (OS picks a free one), reads it, releases it immediately.
- * A real gap remains between "free when checked" and "still free when the
- * real service binds it" (RT-024's own class of gap, one layer down) --
- * unavoidable without binding the real service directly to the probe
- * socket, which `spawnProcess`'s child-process model doesn't support, and
- * which no ordinary application would cooperate with anyway.
+ * Binds port 0, reads it, releases immediately. A real gap remains between "free
+ * when checked" and "still free when the child binds it" (RT-024's gap, one layer
+ * down) -- unavoidable without binding the real service directly to the probe
+ * socket, which the child-process model doesn't support.
  *
- * **Examined for a fix and deliberately not "fixed".** Holding the probe
- * socket open for longer does not narrow the window, it widens it: the
- * child cannot bind while we hold the port, and the dominant term is the
- * child's own startup, not our release. Retrying on the child's bind error
- * would mean parsing that error out of process output, which is
- * per-language text and has no place in a language-neutral controller.
- * What was done instead is to make the one symptom legible: `awaitReadiness`
- * now names the endpoint it probed, so a collision reads as "nothing
- * answered on this port" rather than as an unexplained application failure.
- * In practice the window is a handful of milliseconds and readiness always
- * runs afterwards, so a genuine collision fails loudly -- it is just no
- * longer misattributed.
+ * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
+ * the window rather than narrowing it (the child can't bind while we hold it).
+ * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
+ * "nothing answered on this port" rather than an unexplained failure. Window is a
+ * handful of ms in practice; a genuine collision still fails loudly, just correctly
+ * attributed.
  */
 export function allocateEphemeralPort() {
     return new Promise((resolve, reject) => {
@@ -63,16 +53,13 @@ export function spawnProcess(options) {
     let killStarted = false;
     let child;
     let settled = false;
-    // Set only for the container backend (applyContainerSandbox's own
-    // returned name) -- see kill()'s own comment for why the container
-    // needs a real, separate stop mechanism from the bwrap path's group-kill.
+    // Set only for the container backend -- see kill() for why it needs a separate
+    // stop mechanism from bwrap's group-kill.
     let containerName = null;
     let resolveExit;
     let exitPromise;
-    // Everything a (re)spawn needs to reset, in one place -- `restart()` calls
-    // this again after the previous child has fully exited, and the two call
-    // sites (initial construction, restart) must not drift into resetting
-    // different subsets of this state.
+    // Everything a (re)spawn needs to reset, in one place -- construction and
+    // restart() must not drift into resetting different subsets of this state.
     function spawnChild() {
         startedAt = new Date().toISOString();
         exitedAt = null;
@@ -85,9 +72,7 @@ export function spawnProcess(options) {
             resolveExit = resolve;
         });
         // "container" skips applyResourceLimits entirely (see SpawnProcessOptions.
-        // sandboxBackend's own comment on why prlimit composition isn't attempted
-        // for this backend yet) -- every other case (the default, "bwrap")
-        // behaves exactly as before this field existed.
+        // sandboxBackend) -- "bwrap" (default) is unchanged.
         const wrapped = options.sandboxBackend === "container"
             ? applyContainerSandbox({
                 interpreterCommand: options.command,
@@ -118,15 +103,10 @@ export function spawnProcess(options) {
         child.stderr?.on("data", (chunk) => {
             outputBuffer += chunk.toString("utf8");
         });
-        // Node does not call `spawn()`'s error path synchronously -- a bad
-        // command (ENOENT) surfaces later as an `'error'` event, never a thrown
-        // exception here, and per Node's own docs `'exit'` may never fire after
-        // an `'error'`. An EventEmitter's unhandled `'error'` event crashes the
-        // process, and with no `'exit'` guaranteed either, `exitPromise` would
-        // otherwise hang forever -- both `'exit'` and `'error'` settle the same
-        // promise exactly once, so a failed-to-spawn process reads as an
-        // ordinary never-became-ready process (no pid, no output, no readiness
-        // success) rather than crashing the caller or hanging its cleanup.
+        // A bad command (ENOENT) surfaces as an `'error'` event, not a thrown exception,
+        // and per Node's docs `'exit'` may never fire after `'error'`. Both events settle
+        // the same promise exactly once, so a failed spawn reads as an ordinary
+        // never-became-ready process rather than crashing the caller or hanging cleanup.
         function settle(info) {
             if (settled)
                 return;
@@ -164,22 +144,16 @@ export function spawnProcess(options) {
             return;
         }
         if (containerName !== null) {
-            // Real finding from this backend's own escape tests, not assumed up
-            // front: the local `docker` CLI process is not the container -- it
-            // runs under `dockerd`, a separate process tree entirely. Signaling
-            // the CLI's process group (the mechanism below, correct for bwrap,
-            // which execs the sandboxed process directly) left a real orphaned
-            // container running in testing. `docker stop` targets the actual
-            // container by name and is the real stop mechanism for this backend;
-            // `--rm` (set by applyContainerSandbox) then removes it once stopped.
-            // Still falls through to the group-kill below afterward, as a
-            // backstop for the local CLI process itself.
+            // Found via escape testing: the local `docker` CLI process is not the
+            // container -- it runs under `dockerd`, a separate process tree.
+            // Signaling the CLI's process group left a real orphaned container running.
+            // `docker stop` (by name) is the real stop mechanism here; `--rm` then
+            // removes it. Still falls through to group-kill below as a CLI backstop.
             try {
                 await execFileAsync("docker", ["stop", "--time", String(Math.max(1, Math.round(gracePeriodMs / 1000))), containerName]);
             }
             catch {
-                // Already stopped/removed (e.g. the process exited on its own
-                // first) -- not an error worth surfacing to the caller.
+                // Already stopped/removed -- not worth surfacing.
             }
         }
         signalGroup(pid, "SIGTERM");
@@ -190,11 +164,9 @@ export function spawnProcess(options) {
         }
     }
     async function restart(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
-        // Safe whether the process is still alive, already exited on its own,
-        // or already mid-kill -- `kill()` is idempotent in all three cases and
-        // this always waits for the OLD child to be fully gone before
-        // `spawnChild()` reassigns `child`/`exitPromise`/etc., so no event from
-        // the outgoing process can land on the incoming one's state.
+        // Safe regardless of the old process's state -- kill() is idempotent, and this
+        // waits for it to be fully gone before spawnChild() reassigns state, so no
+        // outgoing event can land on the incoming process.
         await kill(gracePeriodMs);
         spawnChild();
     }
@@ -204,20 +176,17 @@ export function spawnProcess(options) {
         waitForExit: () => exitPromise,
         kill,
         restart,
+        // A spawned process has no output that predates this runtime observing it.
+        attachFence: () => null,
     };
 }
 /**
- * `process.kill(pid, 0)` sends no signal — it only asks the kernel whether
- * delivery would be possible. `ESRCH` means no such pid; `EPERM` means a
- * pid we don't own but that unambiguously exists, still alive for this
- * purpose. Any other error is treated as "exists" rather than guessed away.
+ * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
+ * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
  *
- * A second, deliberate copy of `packages/orchestrator/src/attach-to-running-process.ts`'s
- * function of the same name, not an import of it: `orchestrator` depends on
- * `controller` (see `orchestrator/package.json`), so the reverse import
- * would be circular. Tiny and pure, the same "duplicated because both
- * copies are easy to notice drift" precedent `attach-to-running-jvm-process.ts`'s
- * own `reconstructJvmSourcePath` already sets for exactly this reason.
+ * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
+ * same-named function, not an import -- `orchestrator` depends on `controller`, so
+ * the reverse import would be circular. Tiny and pure enough to duplicate safely.
  */
 export function isProcessAlive(pid) {
     try {
@@ -230,25 +199,27 @@ export function isProcessAlive(pid) {
 }
 const DEFAULT_ATTACH_POLL_INTERVAL_MS = 50;
 /**
- * `ManagedProcess` for a service `ExecutionController.run()` attaches to
- * instead of spawning (`ServiceConfiguration.attach`). Reads
- * `attach.logFilePath` fresh on every `readOutput()` call — the same
- * growing-whole-buffer contract a spawned process's in-memory pipe buffer
- * already has (`spawnProcess`'s own `outputBuffer`), so `createPollingProcessOutputSource`
- * (`@descryy/runtime-orchestrator`) needs no attach-specific branch to
- * consume either one.
+ * `ManagedProcess` for a service attached to rather than spawned. Reads
+ * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
+ * contract as a spawned process's in-memory pipe buffer.
  *
- * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this
- * process and `ATTACH_MODE_SCOPE_DISCLOSURE` (`@descryy/runtime-contracts`)
- * is unconditional: attach mode "never executes code in it or applies
- * changes to it." `ExecutionController`'s cleanup path kills every managed
- * process on failure/timeout/stop — for an attached service that would mean
- * terminating a process this runtime does not own, silently, the exact
- * thing the disclosure promises never happens. Ending observation (no
- * further polling) is the honest equivalent of "stop" here; the target
- * keeps running, as it was before Descry ever attached. `restart()` throws
- * for the same reason: there is no command this runtime could relaunch it
- * with.
+ * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
+ * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
+ * code in or applies changes to what it observes. Ending observation is the honest
+ * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
+ * reason: no command exists to relaunch it with.
+ *
+ * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
+ * (i.e. the moment of attach), how much of `logFilePath` already existed and
+ * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
+ * via `attachFence()` for a caller building a `ProcessOutputSource` over
+ * `readOutput()` to mark pre-existing content instead of reporting it as freshly
+ * observed. `readOutput()` itself additionally refuses (rather than silently
+ * mis-reading) if the file is ever found shorter than the largest size already
+ * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
+ * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
+ * here for the same reason `isProcessAlive` is: this module cannot depend on
+ * that one without a cycle, and the check is small and pure enough to repeat.
  */
 export function attachManagedProcess(options) {
     const { pid, logFilePath } = options.attach;
@@ -256,6 +227,8 @@ export function attachManagedProcess(options) {
         throw new Error(`attachManagedProcess: pid ${String(pid)} for "${options.processId}" is not running — attach requires ` +
             `a target that already exists.`);
     }
+    const fence = computeAttachFence(pid, logFilePath);
+    let maxObservedByteLength = fence.attachOffsetBytes;
     const startedAt = new Date().toISOString();
     let exitedAt = null;
     let exitPromise = null;
@@ -265,16 +238,12 @@ export function attachManagedProcess(options) {
         }
         return {
             processId: options.processId,
-            // No command to report — this runtime never launched this process,
-            // so there is nothing here that isn't a guess. Disclosed rather than
-            // fabricated.
+            // No real command to report -- disclosed rather than guessed.
             command: `<attached: pid ${String(pid)}, ${logFilePath}>`,
             pid,
             startedAt,
             exitedAt,
-            // Neither is observable for a process we did not spawn and do not
-            // reap — see this function's own module doc on why `kill()` never
-            // signals it, which is exactly what would let us learn either.
+            // Not observable for a process we don't spawn or reap.
             exitCode: null,
             signal: null,
             serviceName: options.serviceName ?? null,
@@ -283,13 +252,23 @@ export function attachManagedProcess(options) {
         };
     }
     function readOutput() {
+        let content;
         try {
-            return readFileSync(logFilePath, "utf8");
+            content = readFileSync(logFilePath, "utf8");
         }
         catch (error) {
             const detail = error instanceof Error ? error.message : String(error);
             throw new Error(`attachManagedProcess: could not read log file "${logFilePath}" for pid ${String(pid)}: ${detail}`);
         }
+        const byteLength = Buffer.byteLength(content, "utf8");
+        if (byteLength < maxObservedByteLength) {
+            throw new Error(`attachManagedProcess: log file "${logFilePath}" for pid ${String(pid)} shrank from ${String(maxObservedByteLength)} ` +
+                `to ${String(byteLength)} bytes between reads -- this looks like log rotation or truncation, not new output. ` +
+                "The file-tail contract can't reconstruct a rotated/truncated buffer without either duplicating or dropping " +
+                `lines. Reported rather than guessed. (This run's own attach offset was ${String(fence.attachOffsetBytes)} bytes.)`);
+        }
+        maxObservedByteLength = byteLength;
+        return content;
     }
     function waitForExit() {
         exitPromise ??= new Promise((resolve) => {
@@ -306,25 +285,23 @@ export function attachManagedProcess(options) {
         return exitPromise;
     }
     function kill() {
-        // Deliberate no-op — see this function's own module doc.
+        // Deliberate no-op -- see module doc above.
         return Promise.resolve();
     }
     function restart() {
         return Promise.reject(new Error(`attachManagedProcess: cannot restart an attached process (pid ${String(pid)}) — Descry did not spawn ` +
             `it and has no command to relaunch it with.`));
     }
-    return { handle, readOutput, waitForExit, kill, restart };
+    return { handle, readOutput, waitForExit, kill, restart, attachFence: () => fence };
 }
 const execFileAsync = promisify(execFile);
 function signalGroup(pid, signal) {
     try {
-        // Negative pid targets the whole process group (the child is its
-        // leader, per `detached: true`), not just the immediate process --
-        // this is the orphan-prevention mechanism.
+        // Negative pid targets the whole process group (orphan-prevention mechanism).
         process.kill(-pid, signal);
     }
     catch {
-        // Group already gone -- nothing to signal, not an error.
+        // Group already gone -- not an error.
     }
 }
 function sleep(ms) {

package/dist/process-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-manager.js","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AA4DD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAmB,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,kEAAkE;IAClE,mEAAmE;IACnE,0EAA0E;IAC1E,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,WAA6C,CAAC;IAClD,IAAI,WAAqC,CAAC;IAE1C,2EAA2E;IAC3E,yEAAyE;IACzE,sEAAsE;IACtE,mCAAmC;IACnC,SAAS,UAAU;QACjB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,GAAG,EAAE,CAAC;QAClB,WAAW,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,WAAW,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;YACrD,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,gDAAgD;QAChD,MAAM,OAAO,GACX,OAAO,CAAC,cAAc,KAAK,WAAW;YACpC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC9C,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC;YACJ,CAAC,CAAC,YAAY,CAAC;gBACX,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC;gBACnF,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACT,aAAa,GAAI,OAA+C,CAAC,aAAa,IAAI,IAAI,CAAC;QACvF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,iEAAiE;QACjE,uEAAuE;QACvE,mEAAmE;QACnE,SAAS,MAAM,CAAC,IAAqB;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,UAAU,EAAE,CAAC;IAEb,SAAS,MAAM;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,aAAa,GAAG,uBAAuB;QACzD,IAAI,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,qEAAqE;YACrE,sEAAsE;YACtE,8DAA8D;YAC9D,6CAA6C;YAC7C,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,wDAAwD;YAC1D,CAAC;QACH,CAAC;QAED,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,aAAa,GAAG,uBAAuB;QAC5D,sEAAsE;QACtE,uEAAuE;QACvE,8DAA8D;QAC9D,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC;IACf,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY;QAC9B,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;QAC9B,IAAI;QACJ,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AASD,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,SAAS,qCAAqC;YACrG,+BAA+B,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,WAAW,GAAoC,IAAI,CAAC;IAExD,SAAS,MAAM;QACb,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,mEAAmE;YACnE,qEAAqE;YACrE,cAAc;YACd,OAAO,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,KAAK,WAAW,GAAG;YACzD,GAAG;YACH,SAAS;YACT,QAAQ;YACR,kEAAkE;YAClE,kEAAkE;YAClE,+DAA+D;YAC/D,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IAED,SAAS,WAAW;QAClB,WAAW,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACtC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,SAAS,IAAI;QACX,yDAAyD;QACzD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,OAAO;QACd,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,iEAAiE,MAAM,CAAC,GAAG,CAAC,2BAA2B;YACrG,4CAA4C,CAC/C,CACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,WAAW,CAAC,GAAW,EAAE,MAAsB;IACtD,IAAI,CAAC;QACH,iEAAiE;QACjE,mEAAmE;QACnE,2CAA2C;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"process-manager.js","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAoB,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AA0DD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAmB,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,WAA6C,CAAC;IAClD,IAAI,WAAqC,CAAC;IAE1C,0EAA0E;IAC1E,2EAA2E;IAC3E,SAAS,UAAU;QACjB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,GAAG,EAAE,CAAC;QAClB,WAAW,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,WAAW,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;YACrD,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,OAAO,GACX,OAAO,CAAC,cAAc,KAAK,WAAW;YACpC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC9C,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC;YACJ,CAAC,CAAC,YAAY,CAAC;gBACX,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC;gBACnF,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACT,aAAa,GAAI,OAA+C,CAAC,aAAa,IAAI,IAAI,CAAC;QACvF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,iFAAiF;QACjF,kFAAkF;QAClF,wEAAwE;QACxE,iFAAiF;QACjF,SAAS,MAAM,CAAC,IAAqB;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,UAAU,EAAE,CAAC;IAEb,SAAS,MAAM;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,aAAa,GAAG,uBAAuB;QACzD,IAAI,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,sEAAsE;YACtE,iEAAiE;YACjE,4EAA4E;YAC5E,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,aAAa,GAAG,uBAAuB;QAC5D,+EAA+E;QAC/E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC;IACf,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY;QAC9B,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;QAC9B,IAAI;QACJ,OAAO;QACP,2EAA2E;QAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AASD,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,SAAS,qCAAqC;YACrG,+BAA+B,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,qBAAqB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAEpD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,WAAW,GAAoC,IAAI,CAAC;IAExD,SAAS,MAAM;QACb,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,8DAA8D;YAC9D,OAAO,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,KAAK,WAAW,GAAG;YACzD,GAAG;YACH,SAAS;YACT,QAAQ;YACR,uDAAuD;YACvD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,qBAAqB,CAAC,GAAG;gBACpH,MAAM,MAAM,CAAC,UAAU,CAAC,sFAAsF;gBAC9G,6GAA6G;gBAC7G,0EAA0E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CACtH,CAAC;QACJ,CAAC;QACD,qBAAqB,GAAG,UAAU,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,WAAW;QAClB,WAAW,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACtC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,SAAS,IAAI;QACX,4CAA4C;QAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,OAAO;QACd,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,iEAAiE,MAAM,CAAC,GAAG,CAAC,2BAA2B;YACrG,4CAA4C,CAC/C,CACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,WAAW,CAAC,GAAW,EAAE,MAAsB;IACtD,IAAI,CAAC;QACH,8EAA8E;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}