@descryy/runtime-controller 0.3.6 → 0.3.8

package/dist/process-identity.js

@@ -1,186 +0,0 @@
-/**
- * RT-024's named hole, closed for the two mechanisms that can carry it:
- * "none of readiness's five mechanisms confirm the listener is THIS run's
- * process -- a stale listener from a dead run satisfies http/tcp-port
- * identically." Ephemeral-by-default (`allocateEphemeralPort`) closes the
- * common case by construction; this closes the fixed-port case by
- * detection, for real, via `/proc` -- not a heuristic guess.
- *
- * **Mechanism.** A TCP listening socket on Linux is a row in `/proc/net/tcp`
- * (or `/proc/net/tcp6`) carrying an inode; a process's open file descriptors
- * are symlinks under `/proc/<pid>/fd/*` named `socket:[<inode>]` when that fd
- * is a socket. If the expected pid's fd table holds a socket whose inode
- * matches a LISTEN row for the target port, that pid really does own the
- * listener -- not a name-based guess, a kernel-backed fact.
- *
- * **Scope, disclosed rather than silently narrowed.** Linux only (`/proc`
- * doesn't exist elsewhere) and only for a process in the same pid namespace
- * as this one -- true for every spawn this repo produces today: a direct
- * spawn, and a bwrap-wrapped one (bwrap execs into the target without
- * `--unshare-pid`, so `child.pid` names the real process, not a wrapper).
- * **Not true for `sandboxBackend: "container"`** -- a published Docker port
- * is commonly owned by a host-side `docker-proxy` process, not the pid this
- * module would be asked to verify, so a mismatch there would be a false
- * positive. Callers must not invoke this for the container backend; See
- * `controller.ts`'s call site, which guards on exactly that condition.
- * Anything this function cannot determine returns `"unsupported"`, never a
- * fabricated "verified" or a false "mismatch".
- *
- * **The spawned pid, or any of its descendants.** A launcher that forks the
- * real server is the ordinary case: `sh -c "..."`, `npm run dev`, `dotnet run`
- * (which builds and then runs the app as its child). The pid this run holds is
- * the launcher's, and the listener belongs to a process under it — still this
- * run's own process tree, which is exactly the property RT-024 asked for. The
- * tree is walked from `/proc/<pid>/stat`'s parent-pid field, a kernel fact like
- * the fd table, and a decoy outside that tree is refused exactly as before.
- * Checking the spawned pid alone made every forking launcher time out at
- * readiness (every .NET managed-lifecycle test, found at release integration).
- */
-import { readFileSync, readdirSync, readlinkSync } from "node:fs";
-function hexPort(port) {
-    return port.toString(16).toUpperCase().padStart(4, "0");
-}
-/** Every inode `/proc/net/tcp{,6}` records as LISTENing on `port`, host-wide. Usually one; more than one only under `SO_REUSEPORT`. */
-function listenInodesForPort(port) {
-    const inodes = new Set();
-    const targetPort = hexPort(port);
-    const TCP_LISTEN_STATE = "0A";
-    for (const path of ["/proc/net/tcp", "/proc/net/tcp6"]) {
-        let content;
-        try {
-            content = readFileSync(path, "utf8");
-        }
-        catch {
-            // Absent entirely (non-Linux) or unreadable -- the caller sees an empty
-            // set from both paths and reports "unsupported", never a false mismatch.
-            continue;
-        }
-        for (const line of content.split("\n").slice(1)) {
-            const fields = line.trim().split(/\s+/);
-            const localAddress = fields[1];
-            const state = fields[3];
-            const inode = fields[9];
-            if (localAddress === undefined || state === undefined || inode === undefined)
-                continue;
-            if (state !== TCP_LISTEN_STATE)
-                continue;
-            const portHex = localAddress.split(":")[1];
-            if (portHex === targetPort)
-                inodes.add(inode);
-        }
-    }
-    return inodes;
-}
-/**
- * Does `expectedPid` own the socket listening on `port`, on this host, right
- * now? A real kernel-state check, not a guess -- see module header for the
- * mechanism and its disclosed scope.
- */
-/** The parent pid recorded in `/proc/<pid>/stat`, or null if it cannot be read. The command name
- *  field is parenthesised and may itself contain spaces or parentheses, so the fields are read
- *  from after its LAST closing parenthesis. */
-function parentPidOf(pid) {
-    let stat;
-    try {
-        stat = readFileSync(`/proc/${pid}/stat`, "utf8");
-    }
-    catch {
-        return null;
-    }
-    const afterName = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
-    // afterName[0] is the state, afterName[1] the parent pid.
-    return afterName[1] ?? null;
-}
-/** `root` and every live process below it, from one pass over `/proc`'s parent-pid fields. */
-function processTree(root) {
-    const childrenOf = new Map();
-    let entries;
-    try {
-        entries = readdirSync("/proc");
-    }
-    catch {
-        return [String(root)];
-    }
-    for (const entry of entries) {
-        if (!/^\d+$/.test(entry))
-            continue;
-        const parent = parentPidOf(entry);
-        if (parent === null)
-            continue;
-        const siblings = childrenOf.get(parent);
-        if (siblings === undefined)
-            childrenOf.set(parent, [entry]);
-        else
-            siblings.push(entry);
-    }
-    const tree = [];
-    const pending = [String(root)];
-    const seen = new Set();
-    while (pending.length > 0) {
-        const pid = pending.pop();
-        if (seen.has(pid))
-            continue;
-        seen.add(pid);
-        tree.push(pid);
-        for (const child of childrenOf.get(pid) ?? [])
-            pending.push(child);
-    }
-    return tree;
-}
-/** Whether `pid`'s fd table holds one of `inodes`; `null` when that table cannot be read at all. */
-function ownsOneOf(pid, inodes) {
-    let fds;
-    try {
-        fds = readdirSync(`/proc/${pid}/fd`);
-    }
-    catch {
-        // Permission denied, or the pid is already gone -- cannot look inside its
-        // fd table, so no claim either way.
-        return null;
-    }
-    const SOCKET_FD_PATTERN = /^socket:\[(\d+)\]$/;
-    for (const fd of fds) {
-        let link;
-        try {
-            link = readlinkSync(`/proc/${pid}/fd/${fd}`);
-        }
-        catch {
-            // A fd can close between readdir and readlink -- not this pid's fault,
-            // just skip it and keep looking at the rest.
-            continue;
-        }
-        const match = SOCKET_FD_PATTERN.exec(link);
-        if (match !== null && inodes.has(match[1]))
-            return true;
-    }
-    return false;
-}
-/**
- * Does `expectedPid` -- or a process descended from it -- own the socket
- * listening on `port`, on this host, right now? A real kernel-state check, not
- * a guess -- see module header for the mechanism and its disclosed scope.
- */
-export function verifyListeningSocketOwner(port, expectedPid) {
-    const inodes = listenInodesForPort(port);
-    if (inodes.size === 0) {
-        // Either `/proc/net/tcp*` doesn't exist (non-Linux) or nothing is
-        // actually listening there yet -- either way this function cannot make
-        // a claim, so it declines rather than guessing.
-        return "unsupported";
-    }
-    // The spawned pid itself first: its fd table being unreadable is the one
-    // case that says nothing about ownership at all.
-    const own = ownsOneOf(String(expectedPid), inodes);
-    if (own === null)
-        return "unsupported";
-    if (own)
-        return "verified";
-    // Then its descendants. One that vanished or cannot be read is skipped --
-    // it cannot turn a real mismatch into a claim either way.
-    for (const pid of processTree(expectedPid).slice(1)) {
-        if (ownsOneOf(pid, inodes) === true)
-            return "verified";
-    }
-    return "mismatch";
-}
-//# sourceMappingURL=process-identity.js.map

package/dist/process-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../src/process-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIlE,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,uIAAuI;AACvI,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACvD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,yEAAyE;YACzE,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,YAAY,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACvF,IAAI,KAAK,KAAK,gBAAgB;gBAAE,SAAS;YACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH;;+CAE+C;AAC/C,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnE,0DAA0D;IAC1D,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;YACvD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,SAAS,CAAC,GAAW,EAAE,MAA2B;IACzD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,oCAAoC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,6CAA6C;YAC7C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,WAAmB;IAC1E,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,kEAAkE;QAClE,uEAAuE;QACvE,gDAAgD;QAChD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACvC,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAE3B,0EAA0E;IAC1E,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;IACzD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/process-manager.d.ts

@@ -1,118 +0,0 @@
-/**
- * Process manager (§5): command execution, cwd, env, process-group tracking,
- * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
- *
- * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
- * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
- * fixture-app slice (§34).
- */
-import type { FilesystemPolicy, NetworkPolicy, ProcessHandle, ResourceLimits, ServiceAttachConfiguration } from "@descryy/runtime-contracts";
-import { type AttachFence } from "./attach-fencing.ts";
-/**
- * Binds port 0, reads it, releases immediately. A real gap remains between "free
- * when checked" and "still free when the child binds it" (RT-024's gap, one layer
- * down) -- unavoidable without binding the real service directly to the probe
- * socket, which the child-process model doesn't support.
- *
- * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
- * the window rather than narrowing it (the child can't bind while we hold it).
- * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
- * "nothing answered on this port" rather than an unexplained failure. Window is a
- * handful of ms in practice; a genuine collision still fails loudly, just correctly
- * attributed.
- */
-export declare function allocateEphemeralPort(): Promise<number>;
-export interface SpawnProcessOptions {
-    readonly processId: string;
-    readonly command: string;
-    readonly args?: readonly string[];
-    readonly cwd?: string;
-    readonly env?: Readonly<Record<string, string | undefined>>;
-    /** Joins the resulting ProcessHandle back to ExecutionConfiguration.services (RT-023). Omit for no corresponding named service. */
-    readonly serviceName?: string;
-    /** Real port this process is bound to, when the caller already knows it. Recorded on the handle only. */
-    readonly port?: number;
-    /** §21 execution boundary (RT-070), via `applyResourceLimits`. Re-applied on every (re)spawn including `restart()`. */
-    readonly resourceLimits?: ResourceLimits;
-    /** §21 execution boundary, filesystem half, via `applySandbox`. Re-applied on every (re)spawn. */
-    readonly filesystemPolicy?: FilesystemPolicy;
-    /** §21 execution boundary, network half, via `applySandbox`. Re-applied on every (re)spawn. */
-    readonly networkPolicy?: NetworkPolicy;
-    /**
-     * Selects the mechanism enforcing `filesystemPolicy`/`networkPolicy`. Absent means
-     * `"bwrap"` (unchanged default); `"container"` routes through `applyContainerSandbox`.
-     *
-     * **Does not compose with `resourceLimits` in this pass** -- the container backend
-     * skips `applyResourceLimits`'s `prlimit` wrap entirely (a minimal image isn't
-     * guaranteed to carry `prlimit`, Docker's own limit flags aren't wired up).
-     * Disclosed in `container-sandbox.ts`, not silently dropped.
-     */
-    readonly sandboxBackend?: "bwrap" | "container";
-}
-export interface ProcessExitInfo {
-    readonly exitCode: number | null;
-    readonly signal: NodeJS.Signals | null;
-}
-export interface ManagedProcess {
-    handle(): ProcessHandle;
-    /** Combined stdout+stderr captured so far, in arrival order -- backing store for log-pattern readiness checks. */
-    readOutput(): string;
-    waitForExit(): Promise<ProcessExitInfo>;
-    /** SIGTERM the process group, wait up to `gracePeriodMs`, then SIGKILL. Idempotent. */
-    kill(gracePeriodMs?: number): Promise<void>;
-    /**
-     * Kills the current process (no-op wait if already exited) and spawns a fresh one
-     * with the same command/args/cwd/env. `handle()`/`readOutput()`/`waitForExit()`
-     * observe the new process on the same object -- no re-fetch needed. Resolves once
-     * the new process exists, not once it's ready (readiness is the caller's job).
-     */
-    restart(gracePeriodMs?: number): Promise<void>;
-    /**
-     * The attach-time fence (RT-N3), or `null` for a process this runtime spawned
-     * itself -- fencing only exists to mark content that predates OBSERVATION, and
-     * a spawned process has no output before Descry started it. See
-     * `computeAttachFence` (`attach-fencing.ts`) for what it records and why.
-     */
-    attachFence(): AttachFence | null;
-}
-export declare function spawnProcess(options: SpawnProcessOptions): ManagedProcess;
-/**
- * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
- * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
- *
- * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
- * same-named function, not an import -- `orchestrator` depends on `controller`, so
- * the reverse import would be circular. Tiny and pure enough to duplicate safely.
- */
-export declare function isProcessAlive(pid: number): boolean;
-export interface AttachProcessOptions {
-    readonly processId: string;
-    readonly attach: ServiceAttachConfiguration;
-    readonly serviceName?: string;
-    readonly port?: number;
-}
-/**
- * `ManagedProcess` for a service attached to rather than spawned. Reads
- * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
- * contract as a spawned process's in-memory pipe buffer.
- *
- * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
- * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
- * code in or applies changes to what it observes. Ending observation is the honest
- * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
- * reason: no command exists to relaunch it with.
- *
- * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
- * (i.e. the moment of attach), how much of `logFilePath` already existed and
- * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
- * via `attachFence()` for a caller building a `ProcessOutputSource` over
- * `readOutput()` to mark pre-existing content instead of reporting it as freshly
- * observed. `readOutput()` itself additionally refuses (rather than silently
- * mis-reading) if the file is ever found shorter than the largest size already
- * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
- * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
- * here for the same reason `isProcessAlive` is: this module cannot depend on
- * that one without a cycle, and the check is small and pure enough to repeat.
- */
-export declare function attachManagedProcess(options: AttachProcessOptions): ManagedProcess;
-//# sourceMappingURL=process-manager.d.ts.map

package/dist/process-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-manager.d.ts","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAI7I,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAevD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,mIAAmI;IACnI,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yGAAyG;IACzG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,uHAAuH;IACvH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,IAAI,aAAa,CAAC;IACxB,kHAAkH;IAClH,UAAU,IAAI,MAAM,CAAC;IACrB,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,uFAAuF;IACvF,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,WAAW,IAAI,WAAW,GAAG,IAAI,CAAC;CACnC;AAID,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,cAAc,CAiJzE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,cAAc,CAwFlF"}

package/dist/process-manager.js

@@ -1,310 +0,0 @@
-/**
- * Process manager (§5): command execution, cwd, env, process-group tracking,
- * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
- *
- * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
- * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
- * fixture-app slice (§34).
- */
-import { execFile, spawn } from "node:child_process";
-import { readFileSync } from "node:fs";
-import { createServer } from "node:net";
-import { promisify } from "node:util";
-import { applyResourceLimits } from "./execution-safety.js";
-import { applySandbox } from "./sandbox.js";
-import { applyContainerSandbox } from "./container-sandbox.js";
-import { computeAttachFence } from "./attach-fencing.js";
-/**
- * Binds port 0, reads it, releases immediately. A real gap remains between "free
- * when checked" and "still free when the child binds it" (RT-024's gap, one layer
- * down) -- unavoidable without binding the real service directly to the probe
- * socket, which the child-process model doesn't support.
- *
- * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
- * the window rather than narrowing it (the child can't bind while we hold it).
- * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
- * "nothing answered on this port" rather than an unexplained failure. Window is a
- * handful of ms in practice; a genuine collision still fails loudly, just correctly
- * attributed.
- */
-export function allocateEphemeralPort() {
-    return new Promise((resolve, reject) => {
-        const probe = createServer();
-        probe.once("error", reject);
-        probe.listen(0, () => {
-            const address = probe.address();
-            if (address === null || typeof address === "string") {
-                probe.close();
-                reject(new Error("could not determine an ephemeral port"));
-                return;
-            }
-            const { port } = address;
-            probe.close(() => resolve(port));
-        });
-    });
-}
-const DEFAULT_GRACE_PERIOD_MS = 5000;
-export function spawnProcess(options) {
-    let startedAt = "";
-    let exitedAt = null;
-    let exitCode = null;
-    let signal = null;
-    let outputBuffer = "";
-    let killStarted = false;
-    let child;
-    let settled = false;
-    // Set only for the container backend -- see kill() for why it needs a separate
-    // stop mechanism from bwrap's group-kill.
-    let containerName = null;
-    let resolveExit;
-    let exitPromise;
-    // Everything a (re)spawn needs to reset, in one place -- construction and
-    // restart() must not drift into resetting different subsets of this state.
-    function spawnChild() {
-        startedAt = new Date().toISOString();
-        exitedAt = null;
-        exitCode = null;
-        signal = null;
-        outputBuffer = "";
-        killStarted = false;
-        settled = false;
-        exitPromise = new Promise((resolve) => {
-            resolveExit = resolve;
-        });
-        // "container" skips applyResourceLimits entirely (see SpawnProcessOptions.
-        // sandboxBackend) -- "bwrap" (default) is unchanged.
-        const wrapped = options.sandboxBackend === "container"
-            ? applyContainerSandbox({
-                interpreterCommand: options.command,
-                command: options.command,
-                args: options.args ?? [],
-                cwd: options.cwd ?? process.cwd(),
-                processEnv: { ...process.env, ...options.env },
-                ...(options.filesystemPolicy === undefined ? {} : { filesystemPolicy: options.filesystemPolicy }),
-                ...(options.networkPolicy === undefined ? {} : { networkPolicy: options.networkPolicy }),
-            })
-            : applySandbox({
-                interpreterCommand: options.command,
-                ...applyResourceLimits(options.command, options.args ?? [], options.resourceLimits),
-                cwd: options.cwd ?? process.cwd(),
-                ...(options.filesystemPolicy === undefined ? {} : { filesystemPolicy: options.filesystemPolicy }),
-                ...(options.networkPolicy === undefined ? {} : { networkPolicy: options.networkPolicy }),
-            });
-        containerName = wrapped.containerName ?? null;
-        child = spawn(wrapped.command, wrapped.args, {
-            cwd: options.cwd,
-            env: { ...process.env, ...options.env },
-            detached: true,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        child.stdout?.on("data", (chunk) => {
-            outputBuffer += chunk.toString("utf8");
-        });
-        child.stderr?.on("data", (chunk) => {
-            outputBuffer += chunk.toString("utf8");
-        });
-        // A bad command (ENOENT) surfaces as an `'error'` event, not a thrown exception,
-        // and per Node's docs `'exit'` may never fire after `'error'`. Both events settle
-        // the same promise exactly once, so a failed spawn reads as an ordinary
-        // never-became-ready process rather than crashing the caller or hanging cleanup.
-        function settle(info) {
-            if (settled)
-                return;
-            settled = true;
-            exitedAt = new Date().toISOString();
-            exitCode = info.exitCode;
-            signal = info.signal;
-            resolveExit(info);
-        }
-        child.once("exit", (code, exitSignal) => settle({ exitCode: code, signal: exitSignal }));
-        child.once("error", () => settle({ exitCode: null, signal: null }));
-    }
-    spawnChild();
-    function handle() {
-        return {
-            processId: options.processId,
-            command: options.command,
-            pid: child.pid ?? null,
-            startedAt,
-            exitedAt,
-            exitCode,
-            signal,
-            serviceName: options.serviceName ?? null,
-            port: options.port ?? null,
-        };
-    }
-    async function kill(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
-        if (killStarted || exitedAt !== null) {
-            await exitPromise;
-            return;
-        }
-        killStarted = true;
-        const pid = child.pid;
-        if (pid === undefined) {
-            return;
-        }
-        if (containerName !== null) {
-            // Found via escape testing: the local `docker` CLI process is not the
-            // container -- it runs under `dockerd`, a separate process tree.
-            // Signaling the CLI's process group left a real orphaned container running.
-            // `docker stop` (by name) is the real stop mechanism here; `--rm` then
-            // removes it. Still falls through to group-kill below as a CLI backstop.
-            try {
-                await execFileAsync("docker", ["stop", "--time", String(Math.max(1, Math.round(gracePeriodMs / 1000))), containerName]);
-            }
-            catch {
-                // Already stopped/removed -- not worth surfacing.
-            }
-        }
-        signalGroup(pid, "SIGTERM");
-        const exited = await Promise.race([exitPromise.then(() => true), sleep(gracePeriodMs).then(() => false)]);
-        if (!exited) {
-            signalGroup(pid, "SIGKILL");
-            await exitPromise;
-        }
-    }
-    async function restart(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
-        // Safe regardless of the old process's state -- kill() is idempotent, and this
-        // waits for it to be fully gone before spawnChild() reassigns state, so no
-        // outgoing event can land on the incoming process.
-        await kill(gracePeriodMs);
-        spawnChild();
-    }
-    return {
-        handle,
-        readOutput: () => outputBuffer,
-        waitForExit: () => exitPromise,
-        kill,
-        restart,
-        // A spawned process has no output that predates this runtime observing it.
-        attachFence: () => null,
-    };
-}
-/**
- * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
- * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
- *
- * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
- * same-named function, not an import -- `orchestrator` depends on `controller`, so
- * the reverse import would be circular. Tiny and pure enough to duplicate safely.
- */
-export function isProcessAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return error.code === "EPERM";
-    }
-}
-const DEFAULT_ATTACH_POLL_INTERVAL_MS = 50;
-/**
- * `ManagedProcess` for a service attached to rather than spawned. Reads
- * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
- * contract as a spawned process's in-memory pipe buffer.
- *
- * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
- * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
- * code in or applies changes to what it observes. Ending observation is the honest
- * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
- * reason: no command exists to relaunch it with.
- *
- * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
- * (i.e. the moment of attach), how much of `logFilePath` already existed and
- * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
- * via `attachFence()` for a caller building a `ProcessOutputSource` over
- * `readOutput()` to mark pre-existing content instead of reporting it as freshly
- * observed. `readOutput()` itself additionally refuses (rather than silently
- * mis-reading) if the file is ever found shorter than the largest size already
- * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
- * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
- * here for the same reason `isProcessAlive` is: this module cannot depend on
- * that one without a cycle, and the check is small and pure enough to repeat.
- */
-export function attachManagedProcess(options) {
-    const { pid, logFilePath } = options.attach;
-    if (!isProcessAlive(pid)) {
-        throw new Error(`attachManagedProcess: pid ${String(pid)} for "${options.processId}" is not running — attach requires ` +
-            `a target that already exists.`);
-    }
-    const fence = computeAttachFence(pid, logFilePath);
-    let maxObservedByteLength = fence.attachOffsetBytes;
-    const startedAt = new Date().toISOString();
-    let exitedAt = null;
-    let exitPromise = null;
-    function handle() {
-        if (exitedAt === null && !isProcessAlive(pid)) {
-            exitedAt = new Date().toISOString();
-        }
-        return {
-            processId: options.processId,
-            // No real command to report -- disclosed rather than guessed.
-            command: `<attached: pid ${String(pid)}, ${logFilePath}>`,
-            pid,
-            startedAt,
-            exitedAt,
-            // Not observable for a process we don't spawn or reap.
-            exitCode: null,
-            signal: null,
-            serviceName: options.serviceName ?? null,
-            port: options.port ?? null,
-            attached: true,
-        };
-    }
-    function readOutput() {
-        let content;
-        try {
-            content = readFileSync(logFilePath, "utf8");
-        }
-        catch (error) {
-            const detail = error instanceof Error ? error.message : String(error);
-            throw new Error(`attachManagedProcess: could not read log file "${logFilePath}" for pid ${String(pid)}: ${detail}`);
-        }
-        const byteLength = Buffer.byteLength(content, "utf8");
-        if (byteLength < maxObservedByteLength) {
-            throw new Error(`attachManagedProcess: log file "${logFilePath}" for pid ${String(pid)} shrank from ${String(maxObservedByteLength)} ` +
-                `to ${String(byteLength)} bytes between reads -- this looks like log rotation or truncation, not new output. ` +
-                "The file-tail contract can't reconstruct a rotated/truncated buffer without either duplicating or dropping " +
-                `lines. Reported rather than guessed. (This run's own attach offset was ${String(fence.attachOffsetBytes)} bytes.)`);
-        }
-        maxObservedByteLength = byteLength;
-        return content;
-    }
-    function waitForExit() {
-        exitPromise ??= new Promise((resolve) => {
-            const poll = () => {
-                if (!isProcessAlive(pid)) {
-                    exitedAt ??= new Date().toISOString();
-                    resolve({ exitCode: null, signal: null });
-                    return;
-                }
-                setTimeout(poll, DEFAULT_ATTACH_POLL_INTERVAL_MS);
-            };
-            poll();
-        });
-        return exitPromise;
-    }
-    function kill() {
-        // Deliberate no-op -- see module doc above.
-        return Promise.resolve();
-    }
-    function restart() {
-        return Promise.reject(new Error(`attachManagedProcess: cannot restart an attached process (pid ${String(pid)}) — Descry did not spawn ` +
-            `it and has no command to relaunch it with.`));
-    }
-    return { handle, readOutput, waitForExit, kill, restart, attachFence: () => fence };
-}
-const execFileAsync = promisify(execFile);
-function signalGroup(pid, signal) {
-    try {
-        // Negative pid targets the whole process group (orphan-prevention mechanism).
-        process.kill(-pid, signal);
-    }
-    catch {
-        // Group already gone -- not an error.
-    }
-}
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-//# sourceMappingURL=process-manager.js.map

package/dist/process-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-manager.js","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAoB,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AA0DD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAmB,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,WAA6C,CAAC;IAClD,IAAI,WAAqC,CAAC;IAE1C,0EAA0E;IAC1E,2EAA2E;IAC3E,SAAS,UAAU;QACjB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,GAAG,EAAE,CAAC;QAClB,WAAW,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,WAAW,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;YACrD,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,OAAO,GACX,OAAO,CAAC,cAAc,KAAK,WAAW;YACpC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC9C,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC;YACJ,CAAC,CAAC,YAAY,CAAC;gBACX,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC;gBACnF,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACT,aAAa,GAAI,OAA+C,CAAC,aAAa,IAAI,IAAI,CAAC;QACvF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,iFAAiF;QACjF,kFAAkF;QAClF,wEAAwE;QACxE,iFAAiF;QACjF,SAAS,MAAM,CAAC,IAAqB;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,UAAU,EAAE,CAAC;IAEb,SAAS,MAAM;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,aAAa,GAAG,uBAAuB;QACzD,IAAI,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,sEAAsE;YACtE,iEAAiE;YACjE,4EAA4E;YAC5E,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,aAAa,GAAG,uBAAuB;QAC5D,+EAA+E;QAC/E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC;IACf,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY;QAC9B,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;QAC9B,IAAI;QACJ,OAAO;QACP,2EAA2E;QAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AASD,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,SAAS,qCAAqC;YACrG,+BAA+B,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,qBAAqB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAEpD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,WAAW,GAAoC,IAAI,CAAC;IAExD,SAAS,MAAM;QACb,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,8DAA8D;YAC9D,OAAO,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,KAAK,WAAW,GAAG;YACzD,GAAG;YACH,SAAS;YACT,QAAQ;YACR,uDAAuD;YACvD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,qBAAqB,CAAC,GAAG;gBACpH,MAAM,MAAM,CAAC,UAAU,CAAC,sFAAsF;gBAC9G,6GAA6G;gBAC7G,0EAA0E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CACtH,CAAC;QACJ,CAAC;QACD,qBAAqB,GAAG,UAAU,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,WAAW;QAClB,WAAW,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACtC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,SAAS,IAAI;QACX,4CAA4C;QAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,OAAO;QACd,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,iEAAiE,MAAM,CAAC,GAAG,CAAC,2BAA2B;YACrG,4CAA4C,CAC/C,CACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,WAAW,CAAC,GAAW,EAAE,MAAsB;IACtD,IAAI,CAAC;QACH,8EAA8E;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}