@descryy/runtime-controller 0.3.8 → 0.4.0

package/dist/preflight.js

@@ -0,0 +1,177 @@
+/**
+ * Ready check before a run (RT-263). A broken setup used to be discovered only after a
+ * full readiness wait (up to `RunOptions.readiness[*].timeoutMs`, often ~30s-2min) had
+ * already failed. This runs a short, read-only pass first — the same declared checks a
+ * run is about to depend on, single-shot rather than polled to a full timeout — and
+ * reports a plain-words problem and fix before the caller starts anything.
+ *
+ * Deliberately generic: this module owns the engine (status, timing, disclosure), never
+ * a specific check's mechanism it would have to import a language, a browser, a graph
+ * store or a database driver to perform. `customCheck` is the seam every one of those
+ * uses — `chromiumCanLaunch`, `graphExists`, and any future "database reachable" check
+ * are built by the caller that already depends on the thing being checked, and handed in
+ * as a probe. Nothing here decides what a broken setup is, only how many of the caller's
+ * own answers it takes to call one "ready", "partial" or "broken".
+ *
+ * **Read-only, always.** Every probe built here (`portFreeCheck`, `portAnswersCheck`,
+ * `readinessTargetCheck`) only ever connects or asks; none binds a port, starts a
+ * process or writes anything. A `customCheck` probe is the caller's own code and this
+ * module cannot enforce that discipline on it, but every caller in this codebase that
+ * builds one must hold to it too (Build A step 4).
+ */
+import { createConnection } from "node:net";
+import { awaitReadiness } from "./readiness.js";
+export const PREFLIGHT_CHECK_KINDS = ["port", "readiness", "chromium", "graph", "database", "custom"];
+export const PREFLIGHT_STATUSES = ["ready", "partial", "broken"];
+/**
+ * Bounds one check's own probe — not the whole preflight. Every check in a call runs
+ * concurrently (`Promise.all`), so a caller with several checks still finishes near this
+ * bound rather than their sum. Starting value, not a measurement: it is what lets a
+ * `broken` setup report within the lane's 5s target while still giving a slow-but-honest
+ * TCP probe (a loaded machine, a container cold-starting) more than an instant to answer.
+ */
+export const PREFLIGHT_CHECK_TIMEOUT_MS = 4_000;
+/**
+ * Runs every check concurrently and folds the results into one status. Never throws —
+ * a probe that rejects or hangs past its own bound is recorded as a failed check
+ * (`runOne` below), not a crash of the preflight itself, because "the check broke" and
+ * "the setup is broken" are different facts the caller still needs told apart... except
+ * they aren't told apart here: a check that cannot even answer is exactly as blocking as
+ * one that answered "no", which is why it is folded in as `!ok` rather than a third
+ * outcome. What is preserved is the message, which always names which check and why.
+ */
+export async function runPreflight(checks) {
+    const startedAt = Date.now();
+    const results = await Promise.all(checks.map((check) => runOne(check)));
+    const elapsedMs = Date.now() - startedAt;
+    const brokenChecks = results.filter((result) => result.required && !result.ok);
+    const gaps = results.filter((result) => !result.required && !result.ok);
+    const status = brokenChecks.length > 0 ? "broken" : gaps.length > 0 ? "partial" : "ready";
+    return { status, elapsedMs, checks: results, disclosures: gaps.map((gap) => gap.message) };
+}
+async function runOne(check) {
+    try {
+        const outcome = await withTimeout(check.probe(), PREFLIGHT_CHECK_TIMEOUT_MS, check.label);
+        return { kind: check.kind, label: check.label, required: check.required, ok: outcome.ok, message: outcome.message };
+    }
+    catch (error) {
+        return {
+            kind: check.kind,
+            label: check.label,
+            required: check.required,
+            ok: false,
+            message: `${check.label}: the check itself did not complete — ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}
+function withTimeout(promise, ms, label) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(`no answer within ${String(ms)}ms while checking ${label}`)), ms);
+        promise.then((value) => {
+            clearTimeout(timer);
+            resolve(value);
+        }, (error) => {
+            clearTimeout(timer);
+            reject(error instanceof Error ? error : new Error(String(error)));
+        });
+    });
+}
+function tcpAnswers(host, port) {
+    return new Promise((resolve) => {
+        const socket = createConnection({ host, port });
+        socket.setTimeout(PREFLIGHT_CHECK_TIMEOUT_MS);
+        const finish = (ok) => {
+            socket.destroy();
+            resolve(ok);
+        };
+        socket.once("connect", () => finish(true));
+        socket.once("error", () => finish(false));
+        socket.once("timeout", () => finish(false));
+    });
+}
+/**
+ * Boot precondition: nothing may already be listening at `host:port` before this run
+ * spawns its own process there — a stale listener from a dead session would otherwise
+ * be mistaken for this run's own (the same RT-024 hazard `readiness.ts` names). `ready`
+ * is `!answered` — the inverse polarity of `portAnswersCheck` below, for the attach case.
+ */
+export function portFreeCheck(host, port, label) {
+    const checkLabel = label ?? `port ${String(port)} on ${host} is free`;
+    return {
+        kind: "port",
+        label: checkLabel,
+        required: true,
+        probe: async () => {
+            const answered = await tcpAnswers(host, port);
+            return answered
+                ? {
+                    ok: false,
+                    message: `Something is already listening on ${host}:${String(port)}. Stop it, or configure a different port, before starting this run.`,
+                }
+                : { ok: true, message: "ok" };
+        },
+    };
+}
+/**
+ * Attach precondition: the caller is attaching to an app it expects to already be
+ * running, so something must already answer at `host:port`. `ready` is `answered` —
+ * the inverse polarity of `portFreeCheck` above, for the boot case.
+ */
+export function portAnswersCheck(host, port, label) {
+    const checkLabel = label ?? `${host}:${String(port)} answers`;
+    return {
+        kind: "port",
+        label: checkLabel,
+        required: true,
+        probe: async () => {
+            const answered = await tcpAnswers(host, port);
+            return answered ? { ok: true, message: "ok" } : { ok: false, message: `Nothing is listening on ${host}:${String(port)}. Is your app running?` };
+        },
+    };
+}
+/**
+ * Wraps a run's own declared `ReadinessCheck`s as a single-shot preflight probe — one
+ * pass at `PREFLIGHT_CHECK_TIMEOUT_MS`, never the full poll loop `awaitReadiness` runs
+ * once the run actually starts. Reuses `awaitReadiness` itself rather than a second
+ * probing mechanism that could drift from what the real readiness wait checks.
+ *
+ * Required by default: a target this run declared and cannot reach is this run being
+ * broken, not a gap it can disclose and continue past. A caller may mark a secondary
+ * target `required: false` when the run can genuinely proceed without it.
+ */
+export function readinessTargetCheck(label, checks, options = {}) {
+    return {
+        kind: "readiness",
+        label,
+        required: options.required ?? true,
+        probe: async () => {
+            const result = await awaitReadiness(checks, { timeoutMs: PREFLIGHT_CHECK_TIMEOUT_MS, pollIntervalMs: 200 });
+            return result.ready ? { ok: true, message: "ok" } : { ok: false, message: result.reason ?? `${label} did not answer` };
+        },
+    };
+}
+export function databaseReachableCheck(host, port, label) {
+    const checkLabel = label ?? `database at ${host}:${String(port)} answers`;
+    return {
+        kind: "database",
+        label: checkLabel,
+        required: true,
+        probe: async () => {
+            const answered = await tcpAnswers(host, port);
+            return answered
+                ? { ok: true, message: "ok" }
+                : { ok: false, message: `Nothing is listening on ${host}:${String(port)}. Is your database running?` };
+        },
+    };
+}
+/**
+ * The seam for anything this package must not name (rule 1's dependency-direction
+ * cousin: `@descryy/runtime-controller` has no browser, graph or database dependency,
+ * and must not gain one just to phrase a preflight check). A caller that already
+ * depends on the thing being checked — `@descryy/runtime-browser` for Chromium,
+ * `@descryy/mcp` for the graph — builds the probe and hands it in with this.
+ */
+export function customCheck(kind, label, required, probe) {
+    return { kind, label, required, probe };
+}
+//# sourceMappingURL=preflight.js.map

package/dist/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAuB,MAAM,gBAAgB,CAAC;AAErE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAG/G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAG1E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAgDhD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAEzC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAoB,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAE3G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAyB;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,0BAA0B,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1F,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACtH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACzH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAU,EAAE,KAAa;IACpE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,EAAE,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,EAAW,EAAQ,EAAE;YACnC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IACtE,MAAM,UAAU,GAAG,KAAK,IAAI,QAAQ,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO,QAAQ;gBACb,CAAC,CAAC;oBACE,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,qCAAqC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,qEAAqE;iBACxI;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IACzE,MAAM,UAAU,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9D,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,MAAiC,EACjC,UAA2C,EAAE;IAE7C,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5G,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;QACzH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IAC/E,MAAM,UAAU,GAAG,KAAK,IAAI,eAAe,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;IAC1E,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO,QAAQ;gBACb,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC3G,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,IAAwB,EACxB,KAAa,EACb,QAAiB,EACjB,KAA2C;IAE3C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC"}

package/dist/process-collector.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `ProcessCollector`: turns `ProcessLifecycleEvent` (`controller.ts`) into
+ * `PROCESS_STARTED` / `PROCESS_READY` / `PROCESS_EXITED` Evidence. A plain translator
+ * with no lifecycle logic of its own — `ExecutionController` decides when each
+ * transition happens and calls `RunOptions.onProcessLifecycleEvent`; this collector
+ * just turns that call into one `context.emit()`.
+ *
+ * **Wiring order is load-bearing.** `start(context)` must run before
+ * `onProcessLifecycleEvent` can fire. `handleLifecycleEvent` throws rather than
+ * silently dropping an event on violation — a lost PROCESS_STARTED would otherwise
+ * read downstream as "never observed," a worse, quieter failure than a thrown error.
+ */
+import type { Collector } from "@descryy/runtime-contracts";
+import type { ProcessLifecycleEvent } from "./controller.ts";
+export interface ProcessCollector extends Collector {
+    /** Wire as `RunOptions.onProcessLifecycleEvent` — see the module doc for the ordering this depends on. */
+    handleLifecycleEvent(event: ProcessLifecycleEvent): void;
+}
+export declare function createProcessCollector(): ProcessCollector;
+//# sourceMappingURL=process-collector.d.ts.map

package/dist/process-collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-collector.d.ts","sourceRoot":"","sources":["../src/process-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmF,MAAM,4BAA4B,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IACjD,0GAA0G;IAC1G,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC1D;AA6DD,wBAAgB,sBAAsB,IAAI,gBAAgB,CAoDzD"}

package/dist/process-collector.js

@@ -0,0 +1,116 @@
+/**
+ * `ProcessCollector`: turns `ProcessLifecycleEvent` (`controller.ts`) into
+ * `PROCESS_STARTED` / `PROCESS_READY` / `PROCESS_EXITED` Evidence. A plain translator
+ * with no lifecycle logic of its own — `ExecutionController` decides when each
+ * transition happens and calls `RunOptions.onProcessLifecycleEvent`; this collector
+ * just turns that call into one `context.emit()`.
+ *
+ * **Wiring order is load-bearing.** `start(context)` must run before
+ * `onProcessLifecycleEvent` can fire. `handleLifecycleEvent` throws rather than
+ * silently dropping an event on violation — a lost PROCESS_STARTED would otherwise
+ * read downstream as "never observed," a worse, quieter failure than a thrown error.
+ */
+import { COLLECTOR_VERSION } from "./collector-version.js";
+// None of `CollectorCapabilities`' fields is "process lifecycle observation" — the
+// one thing this collector does. Reported `unavailable` on the others with an honest
+// reason rather than inventing a field outside this lane's boundary (`contracts`).
+// This collector doing its job while capabilities() shows all-unavailable is a
+// disclosed gap in the capability model, not a bug here.
+function computeCapabilities() {
+    const reason = "ProcessCollector observes process lifecycle (started/ready/exited) only — the capability model has no field for that yet.";
+    const status = { availability: "unavailable", reason };
+    return {
+        domObservation: status,
+        consoleObservation: status,
+        networkObservation: status,
+        backendLogAccess: status,
+        distributedTrace: status,
+        sourceMapping: status,
+        stackCapture: status,
+        processLifecycle: { availability: "available", reason: null },
+        databaseObservation: status,
+        externalServiceObservation: status,
+    };
+}
+function eventTypeOf(kind) {
+    switch (kind) {
+        case "process-started":
+            return "PROCESS_STARTED";
+        case "process-ready":
+        case "process-ready-failed":
+            return "PROCESS_READY";
+        case "process-exited":
+            return "PROCESS_EXITED";
+    }
+}
+// `process-ready-failed` still emits `PROCESS_READY` — no separate vocabulary type,
+// and adding one here is the wrong layer. `payload.ready: false` plus the full
+// `ReadinessResult` lets a reader distinguish success from failure via payload, not
+// event type (same shape as `ServiceStartResult`'s `succeeded` + `stage`).
+function payloadOf(event) {
+    switch (event.kind) {
+        case "process-started":
+            return { processId: event.handle.processId, serviceName: event.serviceName, pid: event.handle.pid, command: event.handle.command, startedAt: event.handle.startedAt };
+        case "process-ready":
+        case "process-ready-failed":
+            return { processId: event.handle.processId, serviceName: event.serviceName, ready: event.readiness.ready, readiness: event.readiness };
+        case "process-exited":
+            // `phase` distinguishes "crashed on boot" from "finished/stopped after
+            // running" — see `ProcessLifecycleEvent` in controller.ts.
+            return {
+                processId: event.handle.processId,
+                serviceName: event.serviceName,
+                exitCode: event.handle.exitCode,
+                signal: event.handle.signal,
+                exitedAt: event.handle.exitedAt,
+                phase: event.phase,
+            };
+    }
+}
+export function createProcessCollector() {
+    const capabilities = computeCapabilities();
+    let context = null;
+    return {
+        collectorId: "process-collector",
+        start(ctx) {
+            context = ctx;
+            return Promise.resolve({ available: true });
+        },
+        stop() {
+            // Idempotent per the Collector contract; nothing to release -- owns
+            // only a reference to the emit context, no process/socket/file handle.
+            context = null;
+            return Promise.resolve();
+        },
+        capabilities() {
+            return capabilities;
+        },
+        handleLifecycleEvent(event) {
+            if (context === null) {
+                throw new Error(`ProcessCollector.handleLifecycleEvent("${event.kind}") called before start() — ` +
+                    `wire handleLifecycleEvent as RunOptions.onProcessLifecycleEvent only after start() has resolved, ` +
+                    `or this event (and everything downstream of it) is silently unobserved rather than loudly wrong.`);
+            }
+            context.emit({
+                timestamp: new Date().toISOString(),
+                source: event.kind === "process-exited" ? "process-exit" : "backend-process",
+                service: event.serviceName,
+                process: event.handle.processId,
+                eventType: eventTypeOf(event.kind),
+                payload: payloadOf(event),
+                traceId: null,
+                requestId: null,
+                correlationId: null,
+                graphNodeId: null,
+                sourceLocation: null,
+                stackTrace: null,
+                // Direct observation of our own orchestration state, never inferred --
+                // same basis as LogCollector's verbatim-capture confidence of 1.
+                confidence: 1,
+                redactionStatus: "pending-redaction",
+                collectorVersion: COLLECTOR_VERSION,
+            });
+        },
+    };
+}
+//# sourceMappingURL=process-collector.js.map

package/dist/process-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-collector.js","sourceRoot":"","sources":["../src/process-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAO3D,mFAAmF;AACnF,qFAAqF;AACrF,mFAAmF;AACnF,+EAA+E;AAC/E,yDAAyD;AACzD,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,2HAA2H,CAAC;IAC3I,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,aAAsB,EAAE,MAAM,EAAE,CAAC;IAChE,OAAO;QACL,cAAc,EAAE,MAAM;QACtB,kBAAkB,EAAE,MAAM;QAC1B,kBAAkB,EAAE,MAAM;QAC1B,gBAAgB,EAAE,MAAM;QACxB,gBAAgB,EAAE,MAAM;QACxB,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7D,mBAAmB,EAAE,MAAM;QAC3B,0BAA0B,EAAE,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAmC;IACtD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,eAAe,CAAC;QACrB,KAAK,sBAAsB;YACzB,OAAO,eAAe,CAAC;QACzB,KAAK,gBAAgB;YACnB,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,+EAA+E;AAC/E,oFAAoF;AACpF,2EAA2E;AAC3E,SAAS,SAAS,CAAC,KAA4B;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACxK,KAAK,eAAe,CAAC;QACrB,KAAK,sBAAsB;YACzB,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzI,KAAK,gBAAgB;YACnB,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBACjC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC3B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,OAAO,GAA4B,IAAI,CAAC;IAE5C,OAAO;QACL,WAAW,EAAE,mBAAmB;QAEhC,KAAK,CAAC,GAAqB;YACzB,OAAO,GAAG,GAAG,CAAC;YACd,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI;YACF,oEAAoE;YACpE,uEAAuE;YACvE,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,YAAY;YACV,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,oBAAoB,CAAC,KAA4B;YAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,0CAA0C,KAAK,CAAC,IAAI,6BAA6B;oBAC/E,mGAAmG;oBACnG,kGAAkG,CACrG,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB;gBAC5E,OAAO,EAAE,KAAK,CAAC,WAAW;gBAC1B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBAC/B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;gBAClC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC;gBACzB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,uEAAuE;gBACvE,iEAAiE;gBACjE,UAAU,EAAE,CAAC;gBACb,eAAe,EAAE,mBAAmB;gBACpC,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/process-identity.d.ts

@@ -0,0 +1,46 @@
+/**
+ * RT-024's named hole, closed for the two mechanisms that can carry it:
+ * "none of readiness's five mechanisms confirm the listener is THIS run's
+ * process -- a stale listener from a dead run satisfies http/tcp-port
+ * identically." Ephemeral-by-default (`allocateEphemeralPort`) closes the
+ * common case by construction; this closes the fixed-port case by
+ * detection, for real, via `/proc` -- not a heuristic guess.
+ *
+ * **Mechanism.** A TCP listening socket on Linux is a row in `/proc/net/tcp`
+ * (or `/proc/net/tcp6`) carrying an inode; a process's open file descriptors
+ * are symlinks under `/proc/<pid>/fd/*` named `socket:[<inode>]` when that fd
+ * is a socket. If the expected pid's fd table holds a socket whose inode
+ * matches a LISTEN row for the target port, that pid really does own the
+ * listener -- not a name-based guess, a kernel-backed fact.
+ *
+ * **Scope, disclosed rather than silently narrowed.** Linux only (`/proc`
+ * doesn't exist elsewhere) and only for a process in the same pid namespace
+ * as this one -- true for every spawn this repo produces today: a direct
+ * spawn, and a bwrap-wrapped one (bwrap execs into the target without
+ * `--unshare-pid`, so `child.pid` names the real process, not a wrapper).
+ * **Not true for `sandboxBackend: "container"`** -- a published Docker port
+ * is commonly owned by a host-side `docker-proxy` process, not the pid this
+ * module would be asked to verify, so a mismatch there would be a false
+ * positive. Callers must not invoke this for the container backend; See
+ * `controller.ts`'s call site, which guards on exactly that condition.
+ * Anything this function cannot determine returns `"unsupported"`, never a
+ * fabricated "verified" or a false "mismatch".
+ *
+ * **The spawned pid, or any of its descendants.** A launcher that forks the
+ * real server is the ordinary case: `sh -c "..."`, `npm run dev`, `dotnet run`
+ * (which builds and then runs the app as its child). The pid this run holds is
+ * the launcher's, and the listener belongs to a process under it — still this
+ * run's own process tree, which is exactly the property RT-024 asked for. The
+ * tree is walked from `/proc/<pid>/stat`'s parent-pid field, a kernel fact like
+ * the fd table, and a decoy outside that tree is refused exactly as before.
+ * Checking the spawned pid alone made every forking launcher time out at
+ * readiness (every .NET managed-lifecycle test, found at release integration).
+ */
+export type IdentityVerification = "verified" | "mismatch" | "unsupported";
+/**
+ * Does `expectedPid` -- or a process descended from it -- own the socket
+ * listening on `port`, on this host, right now? A real kernel-state check, not
+ * a guess -- see module header for the mechanism and its disclosed scope.
+ */
+export declare function verifyListeningSocketOwner(port: number, expectedPid: number): IdentityVerification;
+//# sourceMappingURL=process-identity.d.ts.map

package/dist/process-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.d.ts","sourceRoot":"","sources":["../src/process-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAgH3E;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,oBAAoB,CAqBlG"}

package/dist/process-identity.js

@@ -0,0 +1,186 @@
+/**
+ * RT-024's named hole, closed for the two mechanisms that can carry it:
+ * "none of readiness's five mechanisms confirm the listener is THIS run's
+ * process -- a stale listener from a dead run satisfies http/tcp-port
+ * identically." Ephemeral-by-default (`allocateEphemeralPort`) closes the
+ * common case by construction; this closes the fixed-port case by
+ * detection, for real, via `/proc` -- not a heuristic guess.
+ *
+ * **Mechanism.** A TCP listening socket on Linux is a row in `/proc/net/tcp`
+ * (or `/proc/net/tcp6`) carrying an inode; a process's open file descriptors
+ * are symlinks under `/proc/<pid>/fd/*` named `socket:[<inode>]` when that fd
+ * is a socket. If the expected pid's fd table holds a socket whose inode
+ * matches a LISTEN row for the target port, that pid really does own the
+ * listener -- not a name-based guess, a kernel-backed fact.
+ *
+ * **Scope, disclosed rather than silently narrowed.** Linux only (`/proc`
+ * doesn't exist elsewhere) and only for a process in the same pid namespace
+ * as this one -- true for every spawn this repo produces today: a direct
+ * spawn, and a bwrap-wrapped one (bwrap execs into the target without
+ * `--unshare-pid`, so `child.pid` names the real process, not a wrapper).
+ * **Not true for `sandboxBackend: "container"`** -- a published Docker port
+ * is commonly owned by a host-side `docker-proxy` process, not the pid this
+ * module would be asked to verify, so a mismatch there would be a false
+ * positive. Callers must not invoke this for the container backend; See
+ * `controller.ts`'s call site, which guards on exactly that condition.
+ * Anything this function cannot determine returns `"unsupported"`, never a
+ * fabricated "verified" or a false "mismatch".
+ *
+ * **The spawned pid, or any of its descendants.** A launcher that forks the
+ * real server is the ordinary case: `sh -c "..."`, `npm run dev`, `dotnet run`
+ * (which builds and then runs the app as its child). The pid this run holds is
+ * the launcher's, and the listener belongs to a process under it — still this
+ * run's own process tree, which is exactly the property RT-024 asked for. The
+ * tree is walked from `/proc/<pid>/stat`'s parent-pid field, a kernel fact like
+ * the fd table, and a decoy outside that tree is refused exactly as before.
+ * Checking the spawned pid alone made every forking launcher time out at
+ * readiness (every .NET managed-lifecycle test, found at release integration).
+ */
+import { readFileSync, readdirSync, readlinkSync } from "node:fs";
+function hexPort(port) {
+    return port.toString(16).toUpperCase().padStart(4, "0");
+}
+/** Every inode `/proc/net/tcp{,6}` records as LISTENing on `port`, host-wide. Usually one; more than one only under `SO_REUSEPORT`. */
+function listenInodesForPort(port) {
+    const inodes = new Set();
+    const targetPort = hexPort(port);
+    const TCP_LISTEN_STATE = "0A";
+    for (const path of ["/proc/net/tcp", "/proc/net/tcp6"]) {
+        let content;
+        try {
+            content = readFileSync(path, "utf8");
+        }
+        catch {
+            // Absent entirely (non-Linux) or unreadable -- the caller sees an empty
+            // set from both paths and reports "unsupported", never a false mismatch.
+            continue;
+        }
+        for (const line of content.split("\n").slice(1)) {
+            const fields = line.trim().split(/\s+/);
+            const localAddress = fields[1];
+            const state = fields[3];
+            const inode = fields[9];
+            if (localAddress === undefined || state === undefined || inode === undefined)
+                continue;
+            if (state !== TCP_LISTEN_STATE)
+                continue;
+            const portHex = localAddress.split(":")[1];
+            if (portHex === targetPort)
+                inodes.add(inode);
+        }
+    }
+    return inodes;
+}
+/**
+ * Does `expectedPid` own the socket listening on `port`, on this host, right
+ * now? A real kernel-state check, not a guess -- see module header for the
+ * mechanism and its disclosed scope.
+ */
+/** The parent pid recorded in `/proc/<pid>/stat`, or null if it cannot be read. The command name
+ *  field is parenthesised and may itself contain spaces or parentheses, so the fields are read
+ *  from after its LAST closing parenthesis. */
+function parentPidOf(pid) {
+    let stat;
+    try {
+        stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+    }
+    catch {
+        return null;
+    }
+    const afterName = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+    // afterName[0] is the state, afterName[1] the parent pid.
+    return afterName[1] ?? null;
+}
+/** `root` and every live process below it, from one pass over `/proc`'s parent-pid fields. */
+function processTree(root) {
+    const childrenOf = new Map();
+    let entries;
+    try {
+        entries = readdirSync("/proc");
+    }
+    catch {
+        return [String(root)];
+    }
+    for (const entry of entries) {
+        if (!/^\d+$/.test(entry))
+            continue;
+        const parent = parentPidOf(entry);
+        if (parent === null)
+            continue;
+        const siblings = childrenOf.get(parent);
+        if (siblings === undefined)
+            childrenOf.set(parent, [entry]);
+        else
+            siblings.push(entry);
+    }
+    const tree = [];
+    const pending = [String(root)];
+    const seen = new Set();
+    while (pending.length > 0) {
+        const pid = pending.pop();
+        if (seen.has(pid))
+            continue;
+        seen.add(pid);
+        tree.push(pid);
+        for (const child of childrenOf.get(pid) ?? [])
+            pending.push(child);
+    }
+    return tree;
+}
+/** Whether `pid`'s fd table holds one of `inodes`; `null` when that table cannot be read at all. */
+function ownsOneOf(pid, inodes) {
+    let fds;
+    try {
+        fds = readdirSync(`/proc/${pid}/fd`);
+    }
+    catch {
+        // Permission denied, or the pid is already gone -- cannot look inside its
+        // fd table, so no claim either way.
+        return null;
+    }
+    const SOCKET_FD_PATTERN = /^socket:\[(\d+)\]$/;
+    for (const fd of fds) {
+        let link;
+        try {
+            link = readlinkSync(`/proc/${pid}/fd/${fd}`);
+        }
+        catch {
+            // A fd can close between readdir and readlink -- not this pid's fault,
+            // just skip it and keep looking at the rest.
+            continue;
+        }
+        const match = SOCKET_FD_PATTERN.exec(link);
+        if (match !== null && inodes.has(match[1]))
+            return true;
+    }
+    return false;
+}
+/**
+ * Does `expectedPid` -- or a process descended from it -- own the socket
+ * listening on `port`, on this host, right now? A real kernel-state check, not
+ * a guess -- see module header for the mechanism and its disclosed scope.
+ */
+export function verifyListeningSocketOwner(port, expectedPid) {
+    const inodes = listenInodesForPort(port);
+    if (inodes.size === 0) {
+        // Either `/proc/net/tcp*` doesn't exist (non-Linux) or nothing is
+        // actually listening there yet -- either way this function cannot make
+        // a claim, so it declines rather than guessing.
+        return "unsupported";
+    }
+    // The spawned pid itself first: its fd table being unreadable is the one
+    // case that says nothing about ownership at all.
+    const own = ownsOneOf(String(expectedPid), inodes);
+    if (own === null)
+        return "unsupported";
+    if (own)
+        return "verified";
+    // Then its descendants. One that vanished or cannot be read is skipped --
+    // it cannot turn a real mismatch into a claim either way.
+    for (const pid of processTree(expectedPid).slice(1)) {
+        if (ownsOneOf(pid, inodes) === true)
+            return "verified";
+    }
+    return "mismatch";
+}
+//# sourceMappingURL=process-identity.js.map

package/dist/process-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../src/process-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIlE,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,uIAAuI;AACvI,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACvD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,yEAAyE;YACzE,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,YAAY,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACvF,IAAI,KAAK,KAAK,gBAAgB;gBAAE,SAAS;YACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH;;+CAE+C;AAC/C,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnE,0DAA0D;IAC1D,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;YACvD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,SAAS,CAAC,GAAW,EAAE,MAA2B;IACzD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,oCAAoC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,6CAA6C;YAC7C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,WAAmB;IAC1E,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,kEAAkE;QAClE,uEAAuE;QACvE,gDAAgD;QAChD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACvC,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAE3B,0EAA0E;IAC1E,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;IACzD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}