@descryy/runtime-controller 0.3.7 → 0.3.8

package/dist/process-manager.js

@@ -1,365 +0,0 @@
-/**
- * Process manager (§5): command execution, cwd, env, process-group tracking,
- * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
- *
- * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
- * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
- * fixture-app slice (§34).
- */
-import { execFile, spawn } from "node:child_process";
-import { readFileSync } from "node:fs";
-import { createServer } from "node:net";
-import { promisify } from "node:util";
-import { applyResourceLimits } from "./execution-safety.js";
-import { applySandbox } from "./sandbox.js";
-import { applyContainerSandbox } from "./container-sandbox.js";
-import { computeAttachFence } from "./attach-fencing.js";
-/**
- * Binds port 0, reads it, releases immediately. A real gap remains between "free
- * when checked" and "still free when the child binds it" (RT-024's gap, one layer
- * down) -- unavoidable without binding the real service directly to the probe
- * socket, which the child-process model doesn't support.
- *
- * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
- * the window rather than narrowing it (the child can't bind while we hold it).
- * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
- * "nothing answered on this port" rather than an unexplained failure. Window is a
- * handful of ms in practice; a genuine collision still fails loudly, just correctly
- * attributed.
- */
-export function allocateEphemeralPort() {
-    return new Promise((resolve, reject) => {
-        const probe = createServer();
-        probe.once("error", reject);
-        probe.listen(0, () => {
-            const address = probe.address();
-            if (address === null || typeof address === "string") {
-                probe.close();
-                reject(new Error("could not determine an ephemeral port"));
-                return;
-            }
-            const { port } = address;
-            probe.close(() => resolve(port));
-        });
-    });
-}
-const DEFAULT_GRACE_PERIOD_MS = 5000;
-/**
- * RT-261: `outputBuffer += chunk` grew without bound for the process's whole
- * life -- a chatty service (or one stuck in a crash-log loop) grew Descry's
- * own memory, not the app's. Bounded to head + tail per service instead: the
- * first bytes usually carry the startup/config story, the last bytes carry
- * whatever just happened, and the (likely repetitive) middle is the part a
- * reader least needs verbatim. Starting values, not measurements.
- */
-const OUTPUT_HEAD_BYTES = 64 * 1024;
-const OUTPUT_TAIL_BYTES = 1024 * 1024;
-/** Marks the gap between head and tail; never confused with real process output because it names its own bound. */
-function truncationMarker(totalBytes, keptBytes) {
-    return `\n\n...[Descry truncated ${String(totalBytes - keptBytes)} of ${String(totalBytes)} bytes of output here -- head/tail kept, middle dropped]...\n\n`;
-}
-export function spawnProcess(options) {
-    let startedAt = "";
-    let exitedAt = null;
-    let exitCode = null;
-    let signal = null;
-    // Bounded head/tail buffer (RT-261) -- see OUTPUT_HEAD_BYTES/OUTPUT_TAIL_BYTES.
-    let headBuffer = "";
-    let tailBuffer = "";
-    let totalBytesSeen = 0;
-    let killStarted = false;
-    let child;
-    let settled = false;
-    // Set only for the container backend -- see kill() for why it needs a separate
-    // stop mechanism from bwrap's group-kill.
-    let containerName = null;
-    let resolveExit;
-    let exitPromise;
-    // Everything a (re)spawn needs to reset, in one place -- construction and
-    // restart() must not drift into resetting different subsets of this state.
-    function spawnChild() {
-        startedAt = new Date().toISOString();
-        exitedAt = null;
-        exitCode = null;
-        signal = null;
-        headBuffer = "";
-        tailBuffer = "";
-        totalBytesSeen = 0;
-        killStarted = false;
-        settled = false;
-        exitPromise = new Promise((resolve) => {
-            resolveExit = resolve;
-        });
-        // "container" skips applyResourceLimits entirely (see SpawnProcessOptions.
-        // sandboxBackend) -- "bwrap" (default) is unchanged.
-        const wrapped = options.sandboxBackend === "container"
-            ? applyContainerSandbox({
-                interpreterCommand: options.command,
-                command: options.command,
-                args: options.args ?? [],
-                cwd: options.cwd ?? process.cwd(),
-                processEnv: { ...process.env, ...options.env },
-                ...(options.filesystemPolicy === undefined ? {} : { filesystemPolicy: options.filesystemPolicy }),
-                ...(options.networkPolicy === undefined ? {} : { networkPolicy: options.networkPolicy }),
-            })
-            : applySandbox({
-                interpreterCommand: options.command,
-                ...applyResourceLimits(options.command, options.args ?? [], options.resourceLimits),
-                cwd: options.cwd ?? process.cwd(),
-                ...(options.filesystemPolicy === undefined ? {} : { filesystemPolicy: options.filesystemPolicy }),
-                ...(options.networkPolicy === undefined ? {} : { networkPolicy: options.networkPolicy }),
-            });
-        containerName = wrapped.containerName ?? null;
-        child = spawn(wrapped.command, wrapped.args, {
-            cwd: options.cwd,
-            env: { ...process.env, ...options.env },
-            detached: true,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        // Shared by both streams -- stdout/stderr are already interleaved into one
-        // combined buffer (this module's existing contract), so head/tail bounding
-        // applies to the combined stream, not per-fd.
-        function appendOutput(chunk) {
-            totalBytesSeen += chunk.length;
-            if (headBuffer.length < OUTPUT_HEAD_BYTES) {
-                headBuffer += chunk.toString("utf8");
-                if (headBuffer.length > OUTPUT_HEAD_BYTES) {
-                    headBuffer = headBuffer.slice(0, OUTPUT_HEAD_BYTES);
-                }
-            }
-            tailBuffer += chunk.toString("utf8");
-            if (tailBuffer.length > OUTPUT_TAIL_BYTES) {
-                tailBuffer = tailBuffer.slice(tailBuffer.length - OUTPUT_TAIL_BYTES);
-            }
-        }
-        child.stdout?.on("data", appendOutput);
-        child.stderr?.on("data", appendOutput);
-        // A bad command (ENOENT) surfaces as an `'error'` event, not a thrown exception,
-        // and per Node's docs `'exit'` may never fire after `'error'`. Both events settle
-        // the same promise exactly once, so a failed spawn reads as an ordinary
-        // never-became-ready process rather than crashing the caller or hanging cleanup.
-        function settle(info) {
-            if (settled)
-                return;
-            settled = true;
-            exitedAt = new Date().toISOString();
-            exitCode = info.exitCode;
-            signal = info.signal;
-            resolveExit(info);
-        }
-        child.once("exit", (code, exitSignal) => settle({ exitCode: code, signal: exitSignal }));
-        child.once("error", () => settle({ exitCode: null, signal: null }));
-    }
-    spawnChild();
-    function handle() {
-        return {
-            processId: options.processId,
-            command: options.command,
-            pid: child.pid ?? null,
-            startedAt,
-            exitedAt,
-            exitCode,
-            signal,
-            serviceName: options.serviceName ?? null,
-            port: options.port ?? null,
-        };
-    }
-    async function kill(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
-        if (killStarted || exitedAt !== null) {
-            await exitPromise;
-            return;
-        }
-        killStarted = true;
-        const pid = child.pid;
-        if (pid === undefined) {
-            return;
-        }
-        if (containerName !== null) {
-            // Found via escape testing: the local `docker` CLI process is not the
-            // container -- it runs under `dockerd`, a separate process tree.
-            // Signaling the CLI's process group left a real orphaned container running.
-            // `docker stop` (by name) is the real stop mechanism here; `--rm` then
-            // removes it. Still falls through to group-kill below as a CLI backstop.
-            try {
-                await execFileAsync("docker", ["stop", "--time", String(Math.max(1, Math.round(gracePeriodMs / 1000))), containerName]);
-            }
-            catch {
-                // Already stopped/removed -- not worth surfacing.
-            }
-        }
-        signalGroup(pid, "SIGTERM");
-        const exited = await Promise.race([exitPromise.then(() => true), sleep(gracePeriodMs).then(() => false)]);
-        if (!exited) {
-            signalGroup(pid, "SIGKILL");
-            await exitPromise;
-        }
-    }
-    async function restart(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
-        // Safe regardless of the old process's state -- kill() is idempotent, and this
-        // waits for it to be fully gone before spawnChild() reassigns state, so no
-        // outgoing event can land on the incoming process.
-        await kill(gracePeriodMs);
-        spawnChild();
-    }
-    function readOutput() {
-        const droppedBytes = totalBytesSeen - headBuffer.length - tailBuffer.length;
-        if (droppedBytes <= 0) {
-            // No real gap yet -- tailBuffer alone already covers everything seen so
-            // far (headBuffer is a redundant prefix of it in this regime, since it
-            // hasn't been outgrown by the tail window sliding past it).
-            return tailBuffer;
-        }
-        return headBuffer + truncationMarker(totalBytesSeen, headBuffer.length + tailBuffer.length) + tailBuffer;
-    }
-    function outputInfo() {
-        return { totalBytesSeen, truncated: totalBytesSeen > headBuffer.length + tailBuffer.length };
-    }
-    return {
-        handle,
-        readOutput,
-        outputInfo,
-        waitForExit: () => exitPromise,
-        kill,
-        restart,
-        // A spawned process has no output that predates this runtime observing it.
-        attachFence: () => null,
-    };
-}
-/**
- * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
- * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
- *
- * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
- * same-named function, not an import -- `orchestrator` depends on `controller`, so
- * the reverse import would be circular. Tiny and pure enough to duplicate safely.
- */
-export function isProcessAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return error.code === "EPERM";
-    }
-}
-const DEFAULT_ATTACH_POLL_INTERVAL_MS = 50;
-/**
- * `ManagedProcess` for a service attached to rather than spawned. Reads
- * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
- * contract as a spawned process's in-memory pipe buffer.
- *
- * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
- * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
- * code in or applies changes to what it observes. Ending observation is the honest
- * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
- * reason: no command exists to relaunch it with.
- *
- * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
- * (i.e. the moment of attach), how much of `logFilePath` already existed and
- * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
- * via `attachFence()` for a caller building a `ProcessOutputSource` over
- * `readOutput()` to mark pre-existing content instead of reporting it as freshly
- * observed. `readOutput()` itself additionally refuses (rather than silently
- * mis-reading) if the file is ever found shorter than the largest size already
- * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
- * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
- * here for the same reason `isProcessAlive` is: this module cannot depend on
- * that one without a cycle, and the check is small and pure enough to repeat.
- */
-export function attachManagedProcess(options) {
-    const { pid, logFilePath } = options.attach;
-    if (!isProcessAlive(pid)) {
-        throw new Error(`attachManagedProcess: pid ${String(pid)} for "${options.processId}" is not running — attach requires ` +
-            `a target that already exists.`);
-    }
-    const fence = computeAttachFence(pid, logFilePath);
-    let maxObservedByteLength = fence.attachOffsetBytes;
-    const startedAt = new Date().toISOString();
-    let exitedAt = null;
-    let exitPromise = null;
-    function handle() {
-        if (exitedAt === null && !isProcessAlive(pid)) {
-            exitedAt = new Date().toISOString();
-        }
-        return {
-            processId: options.processId,
-            // No real command to report -- disclosed rather than guessed.
-            command: `<attached: pid ${String(pid)}, ${logFilePath}>`,
-            pid,
-            startedAt,
-            exitedAt,
-            // Not observable for a process we don't spawn or reap.
-            exitCode: null,
-            signal: null,
-            serviceName: options.serviceName ?? null,
-            port: options.port ?? null,
-            attached: true,
-        };
-    }
-    function readOutput() {
-        let content;
-        try {
-            content = readFileSync(logFilePath, "utf8");
-        }
-        catch (error) {
-            const detail = error instanceof Error ? error.message : String(error);
-            throw new Error(`attachManagedProcess: could not read log file "${logFilePath}" for pid ${String(pid)}: ${detail}`);
-        }
-        const byteLength = Buffer.byteLength(content, "utf8");
-        if (byteLength < maxObservedByteLength) {
-            throw new Error(`attachManagedProcess: log file "${logFilePath}" for pid ${String(pid)} shrank from ${String(maxObservedByteLength)} ` +
-                `to ${String(byteLength)} bytes between reads -- this looks like log rotation or truncation, not new output. ` +
-                "The file-tail contract can't reconstruct a rotated/truncated buffer without either duplicating or dropping " +
-                `lines. Reported rather than guessed. (This run's own attach offset was ${String(fence.attachOffsetBytes)} bytes.)`);
-        }
-        maxObservedByteLength = byteLength;
-        return content;
-    }
-    function waitForExit() {
-        exitPromise ??= new Promise((resolve) => {
-            const poll = () => {
-                if (!isProcessAlive(pid)) {
-                    exitedAt ??= new Date().toISOString();
-                    resolve({ exitCode: null, signal: null });
-                    return;
-                }
-                setTimeout(poll, DEFAULT_ATTACH_POLL_INTERVAL_MS);
-            };
-            poll();
-        });
-        return exitPromise;
-    }
-    function kill() {
-        // Deliberate no-op -- see module doc above.
-        return Promise.resolve();
-    }
-    function restart() {
-        return Promise.reject(new Error(`attachManagedProcess: cannot restart an attached process (pid ${String(pid)}) — Descry did not spawn ` +
-            `it and has no command to relaunch it with.`));
-    }
-    /**
-     * RT-261's head/tail bound is a spawnProcess concern -- this path re-reads
-     * `logFilePath` fresh on every call rather than accumulating a growing
-     * in-memory buffer, so there is nothing here for that bound to apply to.
-     * `truncated` stays honestly false; `totalBytesSeen` reports the real file
-     * size observed on the most recent read (0 before the first one).
-     */
-    function outputInfo() {
-        return { totalBytesSeen: maxObservedByteLength, truncated: false };
-    }
-    return { handle, readOutput, outputInfo, waitForExit, kill, restart, attachFence: () => fence };
-}
-const execFileAsync = promisify(execFile);
-function signalGroup(pid, signal) {
-    try {
-        // Negative pid targets the whole process group (orphan-prevention mechanism).
-        process.kill(-pid, signal);
-    }
-    catch {
-        // Group already gone -- not an error.
-    }
-}
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-//# sourceMappingURL=process-manager.js.map

package/dist/process-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-manager.js","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAoB,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAuED,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtC,mHAAmH;AACnH,SAAS,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC7D,OAAO,4BAA4B,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,iEAAiE,CAAC;AAC9J,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,gFAAgF;IAChF,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAmB,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,WAA6C,CAAC;IAClD,IAAI,WAAqC,CAAC;IAE1C,0EAA0E;IAC1E,2EAA2E;IAC3E,SAAS,UAAU;QACjB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;QACd,UAAU,GAAG,EAAE,CAAC;QAChB,UAAU,GAAG,EAAE,CAAC;QAChB,cAAc,GAAG,CAAC,CAAC;QACnB,WAAW,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,WAAW,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;YACrD,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,OAAO,GACX,OAAO,CAAC,cAAc,KAAK,WAAW;YACpC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC9C,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC;YACJ,CAAC,CAAC,YAAY,CAAC;gBACX,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC;gBACnF,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACT,aAAa,GAAI,OAA+C,CAAC,aAAa,IAAI,IAAI,CAAC;QACvF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,2EAA2E;QAC3E,8CAA8C;QAC9C,SAAS,YAAY,CAAC,KAAa;YACjC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;YAC/B,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC1C,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;oBAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YACD,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACvC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAEvC,iFAAiF;QACjF,kFAAkF;QAClF,wEAAwE;QACxE,iFAAiF;QACjF,SAAS,MAAM,CAAC,IAAqB;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,UAAU,EAAE,CAAC;IAEb,SAAS,MAAM;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,aAAa,GAAG,uBAAuB;QACzD,IAAI,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,sEAAsE;YACtE,iEAAiE;YACjE,4EAA4E;YAC5E,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,aAAa,GAAG,uBAAuB;QAC5D,+EAA+E;QAC/E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC;IACf,CAAC;IAED,SAAS,UAAU;QACjB,MAAM,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC5E,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACtB,wEAAwE;YACxE,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,UAAU,GAAG,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAC3G,CAAC;IAED,SAAS,UAAU;QACjB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU;QACV,UAAU;QACV,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;QAC9B,IAAI;QACJ,OAAO;QACP,2EAA2E;QAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AASD,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,SAAS,qCAAqC;YACrG,+BAA+B,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,qBAAqB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAEpD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,WAAW,GAAoC,IAAI,CAAC;IAExD,SAAS,MAAM;QACb,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,8DAA8D;YAC9D,OAAO,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,KAAK,WAAW,GAAG;YACzD,GAAG;YACH,SAAS;YACT,QAAQ;YACR,uDAAuD;YACvD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,qBAAqB,CAAC,GAAG;gBACpH,MAAM,MAAM,CAAC,UAAU,CAAC,sFAAsF;gBAC9G,6GAA6G;gBAC7G,0EAA0E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CACtH,CAAC;QACJ,CAAC;QACD,qBAAqB,GAAG,UAAU,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,WAAW;QAClB,WAAW,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACtC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,SAAS,IAAI;QACX,4CAA4C;QAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,OAAO;QACd,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,iEAAiE,MAAM,CAAC,GAAG,CAAC,2BAA2B;YACrG,4CAA4C,CAC/C,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,SAAS,UAAU;QACjB,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,WAAW,CAAC,GAAW,EAAE,MAAsB;IACtD,IAAI,CAAC;QACH,8EAA8E;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/readiness.d.ts

@@ -1,122 +0,0 @@
-/**
- * Readiness (§6): "readiness must not equal 'process exists.'" Mechanisms: HTTP
- * check, TCP/port check, log pattern, subprocess command, or a caller hook
- * (consolidates the plan's "framework readiness hook" and "user-defined readiness"
- * into one predicate shape).
- *
- * **`command` is not `custom-hook` (RT-193).** `custom-hook` runs a caller's
- * in-process predicate; `command` runs a real subprocess and reads its exit code --
- * built once so a caller with a real CLI health check (`pg_isready`) doesn't have to
- * shell out from inside a hand-written hook.
- *
- * **What `ready: true` does not claim (RT-024).** All mechanisms answer "is
- * something listening/responding," none confirm it's the process *this* spawn
- * produced -- a stale listener from an already-dead run satisfies `http`/`tcp-port`
- * identically. `log-pattern` only carries the stronger this-run guarantee if `read`
- * is wired to this execution's own `readOutput()` (caller discipline, not enforced
- * by the type). An ephemeral port closes this gap by construction; a fixed,
- * guessable port doesn't. Found via a real 30s collector timeout that looked like a
- * Playwright bug and was actually a wait on an orphaned process from a dead session
- * (RT-024).
- *
- * **A single probe attempt cannot outlive `timeoutMs` (RT-030).** `http`/`tcp-port`
- * bind I/O to the remaining time until `deadline`, not a fresh per-attempt budget --
- * measured: an unbound `fetch` here let `awaitReadiness` run 8s+ past a 3s budget.
- * `command` gets the same treatment via `execFile`'s `timeout`. `custom-hook` is not
- * wrapped this way -- a caller predicate owns its own timeout, same as every other
- * `Collector` callback contract here.
- */
-export declare const READINESS_MECHANISMS: readonly ["http", "tcp-port", "log-pattern", "command", "custom-hook"];
-export type ReadinessMechanism = (typeof READINESS_MECHANISMS)[number];
-/**
- * How strongly a successful readiness result establishes that the answering
- * process is THIS run's own -- RT-024. `"verified"`: a real kernel-state
- * check (`process-identity.ts`) or a mechanism that is this-run-bound by
- * construction (a directly-executed `command`, or `log-pattern` reading a
- * branded `ProcessOutputReader`) confirmed it. `"unverified"`: the mechanism
- * succeeded but nothing confirmed identity -- disclosed, not hidden.
- * `"not-applicable"`: nothing succeeded, so no identity claim is being made.
- */
-export declare const READINESS_IDENTITY_LEVELS: readonly ["verified", "unverified", "not-applicable"];
-export type ReadinessIdentity = (typeof READINESS_IDENTITY_LEVELS)[number];
-export interface HttpReadinessCheck {
-    readonly kind: "http";
-    readonly url: string;
-    readonly expectedStatus?: number;
-    /**
-     * The pid this run spawned (or attached to) for this service. When set, a
-     * successful connection is only accepted once `verifyListeningSocketOwner`
-     * confirms this pid actually owns the listening socket -- otherwise the
-     * probe reports not-ready rather than trusting whoever answered. Omitted
-     * means the caller has no pid to bind to (or the mechanism backing this
-     * service, e.g. a container, can't be verified this way) and the result is
-     * disclosed as `identity: "unverified"`, never silently upgraded.
-     */
-    readonly expectedPid?: number;
-}
-export interface TcpPortReadinessCheck {
-    readonly kind: "tcp-port";
-    readonly host: string;
-    readonly port: number;
-    /** See `HttpReadinessCheck.expectedPid` -- same guarantee, same disclosure. */
-    readonly expectedPid?: number;
-}
-declare const PROCESS_OUTPUT_READER_BRAND: unique symbol;
-/**
- * A `LogPatternReadinessCheck.read` may only be one of these, and the only
- * way to make one is `createProcessOutputReader`. This is RT-024's own
- * finding turned into a type: "log-pattern only carries the stronger
- * this-run guarantee if `read` is wired to this execution's own
- * `readOutput()` -- caller discipline, not enforced by the type." A plain
- * `() => string` closure -- however it's actually wired -- no longer
- * type-checks; a caller must go through the constructor below, which exists
- * precisely so the only inputs are a real `ManagedProcess.readOutput` (or an
- * equivalent this execution actually owns).
- */
-export interface ProcessOutputReader {
-    readonly [PROCESS_OUTPUT_READER_BRAND]: true;
-    read(): string;
-}
-/** The only way to mint a `ProcessOutputReader` -- wrap the real output source this execution owns (`ManagedProcess.readOutput`, or an equivalent). */
-export declare function createProcessOutputReader(readOutput: () => string): ProcessOutputReader;
-export interface LogPatternReadinessCheck {
-    readonly kind: "log-pattern";
-    /**
-     * Tested against `read.read()`'s full return value on every poll. Backed by
-     * `readOutput()`, an unbounded, growing stdout+stderr buffer -- an unbounded
-     * quantifier before an absent-able literal (the ReDoS shape RT-069/RT-070 already
-     * fixed elsewhere) would backtrack catastrophically here on every poll. Disclosed
-     * risk, not fixed: the regex is the caller's to bound, not this module's.
-     */
-    readonly pattern: RegExp;
-    /** A `ProcessOutputReader` — see that type's doc. Only `createProcessOutputReader` can produce one, which is what makes this-execution's-own-output a type guarantee rather than a convention. */
-    readonly read: ProcessOutputReader;
-}
-export interface CommandReadinessCheck {
-    readonly kind: "command";
-    readonly command: string;
-    readonly args?: readonly string[];
-    /** Defaults to this process's own `cwd` (`execFile`'s own default) when omitted. */
-    readonly cwd?: string;
-}
-export interface CustomHookReadinessCheck {
-    readonly kind: "custom-hook";
-    readonly check: () => Promise<boolean>;
-}
-export type ReadinessCheck = HttpReadinessCheck | TcpPortReadinessCheck | LogPatternReadinessCheck | CommandReadinessCheck | CustomHookReadinessCheck;
-export interface ReadinessResult {
-    readonly ready: boolean;
-    /** Which mechanism succeeded — null when none did within the timeout. */
-    readonly mechanism: ReadinessMechanism | null;
-    readonly elapsedMs: number;
-    readonly reason: string | null;
-    /** How strongly `ready: true` establishes this-run's-own-process (RT-024). See `ReadinessIdentity`. `"not-applicable"` whenever `ready` is `false` — nothing succeeded, so no identity claim is made either way. */
-    readonly identity: ReadinessIdentity;
-}
-export interface AwaitReadinessOptions {
-    readonly timeoutMs: number;
-    readonly pollIntervalMs?: number;
-}
-export declare function awaitReadiness(checks: readonly ReadinessCheck[], options: AwaitReadinessOptions): Promise<ReadinessResult>;
-export {};
-//# sourceMappingURL=readiness.d.ts.map

package/dist/readiness.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,eAAO,MAAM,oBAAoB,wEAAyE,CAAC;AAC3G,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,uDAAwD,CAAC;AAC/F,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAOD,QAAA,MAAM,2BAA2B,eAAgC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,CAAC,2BAA2B,CAAC,EAAE,IAAI,CAAC;IAC7C,IAAI,IAAI,MAAM,CAAC;CAChB;AAED,uJAAuJ;AACvJ,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,MAAM,GAAG,mBAAmB,CAEvF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kMAAkM;IAClM,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oFAAoF;IACpF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,qBAAqB,GACrB,wBAAwB,GACxB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,oNAAoN;IACpN,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAID,wBAAsB,cAAc,CAClC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAyC1B"}