@descryy/runtime-controller 0.3.8 → 0.4.0

package/dist/process-manager.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Process manager (§5): command execution, cwd, env, process-group tracking,
+ * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
+ *
+ * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
+ * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
+ * fixture-app slice (§34).
+ */
+import type { FilesystemPolicy, NetworkPolicy, ProcessHandle, ResourceLimits, ServiceAttachConfiguration } from "@descryy/runtime-contracts";
+import { type AttachFence } from "./attach-fencing.ts";
+/**
+ * Binds port 0, reads it, releases immediately. A real gap remains between "free
+ * when checked" and "still free when the child binds it" (RT-024's gap, one layer
+ * down) -- unavoidable without binding the real service directly to the probe
+ * socket, which the child-process model doesn't support.
+ *
+ * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
+ * the window rather than narrowing it (the child can't bind while we hold it).
+ * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
+ * "nothing answered on this port" rather than an unexplained failure. Window is a
+ * handful of ms in practice; a genuine collision still fails loudly, just correctly
+ * attributed.
+ */
+export declare function allocateEphemeralPort(): Promise<number>;
+export interface SpawnProcessOptions {
+    readonly processId: string;
+    readonly command: string;
+    readonly args?: readonly string[];
+    readonly cwd?: string;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    /** Joins the resulting ProcessHandle back to ExecutionConfiguration.services (RT-023). Omit for no corresponding named service. */
+    readonly serviceName?: string;
+    /** Real port this process is bound to, when the caller already knows it. Recorded on the handle only. */
+    readonly port?: number;
+    /** §21 execution boundary (RT-070), via `applyResourceLimits`. Re-applied on every (re)spawn including `restart()`. */
+    readonly resourceLimits?: ResourceLimits;
+    /** §21 execution boundary, filesystem half, via `applySandbox`. Re-applied on every (re)spawn. */
+    readonly filesystemPolicy?: FilesystemPolicy;
+    /** §21 execution boundary, network half, via `applySandbox`. Re-applied on every (re)spawn. */
+    readonly networkPolicy?: NetworkPolicy;
+    /**
+     * Selects the mechanism enforcing `filesystemPolicy`/`networkPolicy`. Absent means
+     * `"bwrap"` (unchanged default); `"container"` routes through `applyContainerSandbox`.
+     *
+     * **Does not compose with `resourceLimits` in this pass** -- the container backend
+     * skips `applyResourceLimits`'s `prlimit` wrap entirely (a minimal image isn't
+     * guaranteed to carry `prlimit`, Docker's own limit flags aren't wired up).
+     * Disclosed in `container-sandbox.ts`, not silently dropped.
+     */
+    readonly sandboxBackend?: "bwrap" | "container";
+}
+export interface ProcessExitInfo {
+    readonly exitCode: number | null;
+    readonly signal: NodeJS.Signals | null;
+}
+export interface ManagedProcess {
+    handle(): ProcessHandle;
+    /**
+     * Combined stdout+stderr captured so far, in arrival order -- backing store
+     * for log-pattern readiness checks.
+     *
+     * **RT-261: bounded, not whole.** Holds the first `OUTPUT_HEAD_BYTES` and
+     * the last `OUTPUT_TAIL_BYTES` of everything the process has written; once
+     * `outputInfo().truncated` is true, the string also contains one inline
+     * marker naming how much was dropped between them. Readiness log-pattern
+     * checks run against the live head/tail as data arrives, so a pattern that
+     * only ever appears in the (dropped) middle is a real, disclosed gap, not
+     * a silent one -- see `outputInfo()`.
+     */
+    readOutput(): string;
+    /** Real total bytes seen and whether `readOutput()` is a truncated view of them (RT-261). */
+    outputInfo(): ProcessOutputInfo;
+    waitForExit(): Promise<ProcessExitInfo>;
+    /** SIGTERM the process group, wait up to `gracePeriodMs`, then SIGKILL. Idempotent. */
+    kill(gracePeriodMs?: number): Promise<void>;
+    /**
+     * Kills the current process (no-op wait if already exited) and spawns a fresh one
+     * with the same command/args/cwd/env. `handle()`/`readOutput()`/`waitForExit()`
+     * observe the new process on the same object -- no re-fetch needed. Resolves once
+     * the new process exists, not once it's ready (readiness is the caller's job).
+     */
+    restart(gracePeriodMs?: number): Promise<void>;
+    /**
+     * The attach-time fence (RT-N3), or `null` for a process this runtime spawned
+     * itself -- fencing only exists to mark content that predates OBSERVATION, and
+     * a spawned process has no output before Descry started it. See
+     * `computeAttachFence` (`attach-fencing.ts`) for what it records and why.
+     */
+    attachFence(): AttachFence | null;
+}
+export interface ProcessOutputInfo {
+    /** Every byte this process has written to stdout+stderr, whether kept or dropped. */
+    readonly totalBytesSeen: number;
+    /** True once `totalBytesSeen` exceeds what head+tail can hold -- `readOutput()` is a bounded view, not the whole thing. */
+    readonly truncated: boolean;
+}
+export declare function spawnProcess(options: SpawnProcessOptions): ManagedProcess;
+/**
+ * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
+ * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
+ *
+ * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
+ * same-named function, not an import -- `orchestrator` depends on `controller`, so
+ * the reverse import would be circular. Tiny and pure enough to duplicate safely.
+ */
+export declare function isProcessAlive(pid: number): boolean;
+export interface AttachProcessOptions {
+    readonly processId: string;
+    readonly attach: ServiceAttachConfiguration;
+    readonly serviceName?: string;
+    readonly port?: number;
+}
+/**
+ * `ManagedProcess` for a service attached to rather than spawned. Reads
+ * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
+ * contract as a spawned process's in-memory pipe buffer.
+ *
+ * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
+ * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
+ * code in or applies changes to what it observes. Ending observation is the honest
+ * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
+ * reason: no command exists to relaunch it with.
+ *
+ * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
+ * (i.e. the moment of attach), how much of `logFilePath` already existed and
+ * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
+ * via `attachFence()` for a caller building a `ProcessOutputSource` over
+ * `readOutput()` to mark pre-existing content instead of reporting it as freshly
+ * observed. `readOutput()` itself additionally refuses (rather than silently
+ * mis-reading) if the file is ever found shorter than the largest size already
+ * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
+ * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
+ * here for the same reason `isProcessAlive` is: this module cannot depend on
+ * that one without a cycle, and the check is small and pure enough to repeat.
+ */
+export declare function attachManagedProcess(options: AttachProcessOptions): ManagedProcess;
+//# sourceMappingURL=process-manager.d.ts.map

package/dist/process-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-manager.d.ts","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAI7I,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAevD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,mIAAmI;IACnI,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yGAAyG;IACzG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,uHAAuH;IACvH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,IAAI,aAAa,CAAC;IACxB;;;;;;;;;;;OAWG;IACH,UAAU,IAAI,MAAM,CAAC;IACrB,6FAA6F;IAC7F,UAAU,IAAI,iBAAiB,CAAC;IAChC,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,uFAAuF;IACvF,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,WAAW,IAAI,WAAW,GAAG,IAAI,CAAC;CACnC;AAoBD,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,2HAA2H;IAC3H,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,cAAc,CAkLzE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,cAAc,CAoHlF"}

package/dist/process-manager.js

@@ -0,0 +1,382 @@
+/**
+ * Process manager (§5): command execution, cwd, env, process-group tracking,
+ * stdout/stderr capture, exit-code capture, graceful shutdown, orphan prevention.
+ *
+ * Orphan prevention and group-kill use POSIX process groups (`detached: true` +
+ * `process.kill(-pid, signal)`) -- not portable to Windows, out of scope for the V1
+ * fixture-app slice (§34).
+ */
+import { execFile, spawn } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { createServer } from "node:net";
+import { promisify } from "node:util";
+import { applyResourceLimits } from "./execution-safety.js";
+import { applySandbox } from "./sandbox.js";
+import { applyContainerSandbox } from "./container-sandbox.js";
+import { computeAttachFence } from "./attach-fencing.js";
+/**
+ * Binds port 0, reads it, releases immediately. A real gap remains between "free
+ * when checked" and "still free when the child binds it" (RT-024's gap, one layer
+ * down) -- unavoidable without binding the real service directly to the probe
+ * socket, which the child-process model doesn't support.
+ *
+ * **Examined and deliberately not "fixed".** Holding the probe socket longer widens
+ * the window rather than narrowing it (the child can't bind while we hold it).
+ * Instead, `awaitReadiness` names the endpoint it probed, so a collision reads as
+ * "nothing answered on this port" rather than an unexplained failure. Window is a
+ * handful of ms in practice; a genuine collision still fails loudly, just correctly
+ * attributed.
+ */
+export function allocateEphemeralPort() {
+    return new Promise((resolve, reject) => {
+        const probe = createServer();
+        probe.once("error", reject);
+        probe.listen(0, () => {
+            const address = probe.address();
+            if (address === null || typeof address === "string") {
+                probe.close();
+                reject(new Error("could not determine an ephemeral port"));
+                return;
+            }
+            const { port } = address;
+            probe.close(() => resolve(port));
+        });
+    });
+}
+const DEFAULT_GRACE_PERIOD_MS = 5000;
+/**
+ * RT-261: `outputBuffer += chunk` grew without bound for the process's whole
+ * life -- a chatty service (or one stuck in a crash-log loop) grew Descry's
+ * own memory, not the app's. Bounded to head + tail per service instead: the
+ * first bytes usually carry the startup/config story, the last bytes carry
+ * whatever just happened, and the (likely repetitive) middle is the part a
+ * reader least needs verbatim. Starting values, not measurements.
+ */
+const OUTPUT_HEAD_BYTES = 64 * 1024;
+const OUTPUT_TAIL_BYTES = 1024 * 1024;
+/** Marks the gap between head and tail; never confused with real process output because it names its own bound. */
+function truncationMarker(totalBytes, keptBytes) {
+    return `\n\n...[Descry truncated ${String(totalBytes - keptBytes)} of ${String(totalBytes)} bytes of output here -- head/tail kept, middle dropped]...\n\n`;
+}
+export function spawnProcess(options) {
+    let startedAt = "";
+    let exitedAt = null;
+    let exitCode = null;
+    let signal = null;
+    // Bounded head/tail buffer (RT-261) -- see OUTPUT_HEAD_BYTES/OUTPUT_TAIL_BYTES.
+    let headBuffer = "";
+    let tailBuffer = "";
+    let totalBytesSeen = 0;
+    let killStarted = false;
+    let child;
+    let settled = false;
+    // Set only for the container backend -- see kill() for why it needs a separate
+    // stop mechanism from bwrap's group-kill.
+    let containerName = null;
+    let resolveExit;
+    let exitPromise;
+    // Everything a (re)spawn needs to reset, in one place -- construction and
+    // restart() must not drift into resetting different subsets of this state.
+    function spawnChild() {
+        startedAt = new Date().toISOString();
+        exitedAt = null;
+        exitCode = null;
+        signal = null;
+        headBuffer = "";
+        tailBuffer = "";
+        totalBytesSeen = 0;
+        killStarted = false;
+        settled = false;
+        exitPromise = new Promise((resolve) => {
+            resolveExit = resolve;
+        });
+        // "container" skips applyResourceLimits entirely (see SpawnProcessOptions.
+        // sandboxBackend) -- "bwrap" (default) is unchanged.
+        const wrapped = options.sandboxBackend === "container"
+            ? applyContainerSandbox({
+                interpreterCommand: options.command,
+                command: options.command,
+                args: options.args ?? [],
+                cwd: options.cwd ?? process.cwd(),
+                processEnv: { ...process.env, ...options.env },
+                ...(options.filesystemPolicy === undefined ? {} : { filesystemPolicy: options.filesystemPolicy }),
+                ...(options.networkPolicy === undefined ? {} : { networkPolicy: options.networkPolicy }),
+            })
+            : applySandbox({
+                interpreterCommand: options.command,
+                ...applyResourceLimits(options.command, options.args ?? [], options.resourceLimits),
+                cwd: options.cwd ?? process.cwd(),
+                ...(options.filesystemPolicy === undefined ? {} : { filesystemPolicy: options.filesystemPolicy }),
+                ...(options.networkPolicy === undefined ? {} : { networkPolicy: options.networkPolicy }),
+            });
+        containerName = wrapped.containerName ?? null;
+        child = spawn(wrapped.command, wrapped.args, {
+            cwd: options.cwd,
+            env: { ...process.env, ...options.env },
+            detached: true,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        // Shared by both streams -- stdout/stderr are already interleaved into one
+        // combined buffer (this module's existing contract), so head/tail bounding
+        // applies to the combined stream, not per-fd.
+        function appendOutput(chunk) {
+            totalBytesSeen += chunk.length;
+            if (headBuffer.length < OUTPUT_HEAD_BYTES) {
+                headBuffer += chunk.toString("utf8");
+                if (headBuffer.length > OUTPUT_HEAD_BYTES) {
+                    headBuffer = headBuffer.slice(0, OUTPUT_HEAD_BYTES);
+                }
+            }
+            tailBuffer += chunk.toString("utf8");
+            if (tailBuffer.length > OUTPUT_TAIL_BYTES) {
+                tailBuffer = tailBuffer.slice(tailBuffer.length - OUTPUT_TAIL_BYTES);
+            }
+        }
+        child.stdout?.on("data", appendOutput);
+        child.stderr?.on("data", appendOutput);
+        // A bad command (ENOENT) surfaces as an `'error'` event, not a thrown exception,
+        // and per Node's docs `'exit'` may never fire after `'error'`. Both events settle
+        // the same promise exactly once, so a failed spawn reads as an ordinary
+        // never-became-ready process rather than crashing the caller or hanging cleanup.
+        function settle(info) {
+            if (settled)
+                return;
+            settled = true;
+            exitedAt = new Date().toISOString();
+            exitCode = info.exitCode;
+            signal = info.signal;
+            resolveExit(info);
+        }
+        child.once("exit", (code, exitSignal) => settle({ exitCode: code, signal: exitSignal }));
+        child.once("error", () => settle({ exitCode: null, signal: null }));
+    }
+    spawnChild();
+    function handle() {
+        return {
+            processId: options.processId,
+            command: options.command,
+            pid: child.pid ?? null,
+            startedAt,
+            exitedAt,
+            exitCode,
+            signal,
+            serviceName: options.serviceName ?? null,
+            port: options.port ?? null,
+        };
+    }
+    async function kill(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
+        if (killStarted || exitedAt !== null) {
+            await exitPromise;
+            return;
+        }
+        killStarted = true;
+        const pid = child.pid;
+        if (pid === undefined) {
+            return;
+        }
+        if (containerName !== null) {
+            // Found via escape testing: the local `docker` CLI process is not the
+            // container -- it runs under `dockerd`, a separate process tree.
+            // Signaling the CLI's process group left a real orphaned container running.
+            // `docker stop` (by name) is the real stop mechanism here; `--rm` then
+            // removes it. Still falls through to group-kill below as a CLI backstop.
+            try {
+                await execFileAsync("docker", ["stop", "--time", String(Math.max(1, Math.round(gracePeriodMs / 1000))), containerName]);
+            }
+            catch {
+                // Already stopped/removed -- not worth surfacing.
+            }
+        }
+        signalGroup(pid, "SIGTERM");
+        const exited = await Promise.race([exitPromise.then(() => true), sleep(gracePeriodMs).then(() => false)]);
+        if (!exited) {
+            signalGroup(pid, "SIGKILL");
+            await exitPromise;
+        }
+    }
+    async function restart(gracePeriodMs = DEFAULT_GRACE_PERIOD_MS) {
+        // Safe regardless of the old process's state -- kill() is idempotent, and this
+        // waits for it to be fully gone before spawnChild() reassigns state, so no
+        // outgoing event can land on the incoming process.
+        await kill(gracePeriodMs);
+        spawnChild();
+    }
+    function readOutput() {
+        const droppedBytes = totalBytesSeen - headBuffer.length - tailBuffer.length;
+        if (droppedBytes <= 0) {
+            // No real gap yet -- tailBuffer alone already covers everything seen so
+            // far (headBuffer is a redundant prefix of it in this regime, since it
+            // hasn't been outgrown by the tail window sliding past it).
+            return tailBuffer;
+        }
+        return headBuffer + truncationMarker(totalBytesSeen, headBuffer.length + tailBuffer.length) + tailBuffer;
+    }
+    function outputInfo() {
+        return { totalBytesSeen, truncated: totalBytesSeen > headBuffer.length + tailBuffer.length };
+    }
+    return {
+        handle,
+        readOutput,
+        outputInfo,
+        waitForExit: () => exitPromise,
+        kill,
+        restart,
+        // A spawned process has no output that predates this runtime observing it.
+        attachFence: () => null,
+    };
+}
+/**
+ * `process.kill(pid, 0)` sends no signal, only asks the kernel if delivery is
+ * possible. `ESRCH` = no such pid; `EPERM` = a pid we don't own but that exists.
+ *
+ * Deliberate second copy of `orchestrator/src/attach-to-running-process.ts`'s
+ * same-named function, not an import -- `orchestrator` depends on `controller`, so
+ * the reverse import would be circular. Tiny and pure enough to duplicate safely.
+ */
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+const DEFAULT_ATTACH_POLL_INTERVAL_MS = 50;
+/**
+ * `ManagedProcess` for a service attached to rather than spawned. Reads
+ * `attach.logFilePath` fresh on every `readOutput()` -- same growing-whole-buffer
+ * contract as a spawned process's in-memory pipe buffer.
+ *
+ * **`kill()` is a deliberate no-op, not a stub.** Descry did not spawn this process,
+ * and `ATTACH_MODE_SCOPE_DISCLOSURE` is unconditional: attach mode never executes
+ * code in or applies changes to what it observes. Ending observation is the honest
+ * equivalent of "stop" -- the target keeps running. `restart()` throws for the same
+ * reason: no command exists to relaunch it with.
+ *
+ * **Attach fencing (RT-N3).** `computeAttachFence` snapshots, at construction time
+ * (i.e. the moment of attach), how much of `logFilePath` already existed and
+ * whether some other process also holds it open -- see `attach-fencing.ts`. Exposed
+ * via `attachFence()` for a caller building a `ProcessOutputSource` over
+ * `readOutput()` to mark pre-existing content instead of reporting it as freshly
+ * observed. `readOutput()` itself additionally refuses (rather than silently
+ * mis-reading) if the file is ever found shorter than the largest size already
+ * seen -- the same "cannot reconstruct a rotated/truncated buffer" rule
+ * `orchestrator/src/polling-output-source.ts` enforces one layer up, duplicated
+ * here for the same reason `isProcessAlive` is: this module cannot depend on
+ * that one without a cycle, and the check is small and pure enough to repeat.
+ */
+export function attachManagedProcess(options) {
+    const { pid, logFilePath } = options.attach;
+    if (!isProcessAlive(pid)) {
+        throw new Error(`attachManagedProcess: pid ${String(pid)} for "${options.processId}" is not running — attach requires ` +
+            `a target that already exists.`);
+    }
+    // H-attach-log-discovery: `logFilePath` is now optional -- absent means either
+    // a stream source was discovered instead (`options.attach.discoveredLogSource`,
+    // consumed by the orchestrator directly, never through this file-tail path) or
+    // nothing was found at all. Either way there is no file for RT-N3's fence to
+    // reason about, so `fence` is honestly `null` here, same as `spawnProcess`'s own
+    // "nothing predates observation" case -- `ManagedProcess.attachFence()` already
+    // admits `null` for exactly this.
+    const fence = logFilePath === undefined ? null : computeAttachFence(pid, logFilePath);
+    let maxObservedByteLength = fence?.attachOffsetBytes ?? 0;
+    const startedAt = new Date().toISOString();
+    let exitedAt = null;
+    let exitPromise = null;
+    function handle() {
+        if (exitedAt === null && !isProcessAlive(pid)) {
+            exitedAt = new Date().toISOString();
+        }
+        return {
+            processId: options.processId,
+            // No real command to report -- disclosed rather than guessed.
+            command: `<attached: pid ${String(pid)}${logFilePath === undefined ? "" : `, ${logFilePath}`}>`,
+            pid,
+            startedAt,
+            exitedAt,
+            // Not observable for a process we don't spawn or reap.
+            exitCode: null,
+            signal: null,
+            serviceName: options.serviceName ?? null,
+            port: options.port ?? null,
+            attached: true,
+        };
+    }
+    function readOutput() {
+        // No file to tail -- either a stream source was discovered (the
+        // orchestrator reads that directly, never through here) or nothing was
+        // found at all. Empty is the honest answer, not a guess standing in for
+        // one: this function has never had anything to read in that case.
+        if (logFilePath === undefined)
+            return "";
+        let content;
+        try {
+            content = readFileSync(logFilePath, "utf8");
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : String(error);
+            throw new Error(`attachManagedProcess: could not read log file "${logFilePath}" for pid ${String(pid)}: ${detail}`);
+        }
+        const byteLength = Buffer.byteLength(content, "utf8");
+        if (byteLength < maxObservedByteLength) {
+            throw new Error(`attachManagedProcess: log file "${logFilePath}" for pid ${String(pid)} shrank from ${String(maxObservedByteLength)} ` +
+                `to ${String(byteLength)} bytes between reads -- this looks like log rotation or truncation, not new output. ` +
+                "The file-tail contract can't reconstruct a rotated/truncated buffer without either duplicating or dropping " +
+                // Non-null: `fence` is only ever null when `logFilePath` is undefined (set together,
+                // once, above), and this line is only reached when it is defined (the early return
+                // above covers the other case) -- the two are the same fact, just not one narrowing
+                // TS can see across this closure on its own.
+                `lines. Reported rather than guessed. (This run's own attach offset was ${String(fence.attachOffsetBytes)} bytes.)`);
+        }
+        maxObservedByteLength = byteLength;
+        return content;
+    }
+    function waitForExit() {
+        exitPromise ??= new Promise((resolve) => {
+            const poll = () => {
+                if (!isProcessAlive(pid)) {
+                    exitedAt ??= new Date().toISOString();
+                    resolve({ exitCode: null, signal: null });
+                    return;
+                }
+                setTimeout(poll, DEFAULT_ATTACH_POLL_INTERVAL_MS);
+            };
+            poll();
+        });
+        return exitPromise;
+    }
+    function kill() {
+        // Deliberate no-op -- see module doc above.
+        return Promise.resolve();
+    }
+    function restart() {
+        return Promise.reject(new Error(`attachManagedProcess: cannot restart an attached process (pid ${String(pid)}) — Descry did not spawn ` +
+            `it and has no command to relaunch it with.`));
+    }
+    /**
+     * RT-261's head/tail bound is a spawnProcess concern -- this path re-reads
+     * `logFilePath` fresh on every call rather than accumulating a growing
+     * in-memory buffer, so there is nothing here for that bound to apply to.
+     * `truncated` stays honestly false; `totalBytesSeen` reports the real file
+     * size observed on the most recent read (0 before the first one).
+     */
+    function outputInfo() {
+        return { totalBytesSeen: maxObservedByteLength, truncated: false };
+    }
+    return { handle, readOutput, outputInfo, waitForExit, kill, restart, attachFence: () => fence };
+}
+const execFileAsync = promisify(execFile);
+function signalGroup(pid, signal) {
+    try {
+        // Negative pid targets the whole process group (orphan-prevention mechanism).
+        process.kill(-pid, signal);
+    }
+    catch {
+        // Group already gone -- not an error.
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=process-manager.js.map

package/dist/process-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-manager.js","sourceRoot":"","sources":["../src/process-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAoB,MAAM,qBAAqB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAuED,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtC,mHAAmH;AACnH,SAAS,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC7D,OAAO,4BAA4B,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,iEAAiE,CAAC;AAC9J,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,gFAAgF;IAChF,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAmB,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,WAA6C,CAAC;IAClD,IAAI,WAAqC,CAAC;IAE1C,0EAA0E;IAC1E,2EAA2E;IAC3E,SAAS,UAAU;QACjB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;QACd,UAAU,GAAG,EAAE,CAAC;QAChB,UAAU,GAAG,EAAE,CAAC;QAChB,cAAc,GAAG,CAAC,CAAC;QACnB,WAAW,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,WAAW,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;YACrD,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,OAAO,GACX,OAAO,CAAC,cAAc,KAAK,WAAW;YACpC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC9C,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC;YACJ,CAAC,CAAC,YAAY,CAAC;gBACX,kBAAkB,EAAE,OAAO,CAAC,OAAO;gBACnC,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC;gBACnF,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACT,aAAa,GAAI,OAA+C,CAAC,aAAa,IAAI,IAAI,CAAC;QACvF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,2EAA2E;QAC3E,8CAA8C;QAC9C,SAAS,YAAY,CAAC,KAAa;YACjC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;YAC/B,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC1C,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;oBAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YACD,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACvC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAEvC,iFAAiF;QACjF,kFAAkF;QAClF,wEAAwE;QACxE,iFAAiF;QACjF,SAAS,MAAM,CAAC,IAAqB;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,UAAU,EAAE,CAAC;IAEb,SAAS,MAAM;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,aAAa,GAAG,uBAAuB;QACzD,IAAI,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,sEAAsE;YACtE,iEAAiE;YACjE,4EAA4E;YAC5E,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,aAAa,GAAG,uBAAuB;QAC5D,+EAA+E;QAC/E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC;IACf,CAAC;IAED,SAAS,UAAU;QACjB,MAAM,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC5E,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACtB,wEAAwE;YACxE,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,UAAU,GAAG,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAC3G,CAAC;IAED,SAAS,UAAU;QACjB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU;QACV,UAAU;QACV,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;QAC9B,IAAI;QACJ,OAAO;QACP,2EAA2E;QAC3E,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AASD,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,SAAS,qCAAqC;YACrG,+BAA+B,CAClC,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,kCAAkC;IAClC,MAAM,KAAK,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,qBAAqB,GAAG,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,WAAW,GAAoC,IAAI,CAAC;IAExD,SAAS,MAAM;QACb,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,8DAA8D;YAC9D,OAAO,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,GAAG;YAC/F,GAAG;YACH,SAAS;YACT,QAAQ;YACR,uDAAuD;YACvD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,SAAS,UAAU;QACjB,gEAAgE;QAChE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAEzC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,qBAAqB,CAAC,GAAG;gBACpH,MAAM,MAAM,CAAC,UAAU,CAAC,sFAAsF;gBAC9G,6GAA6G;gBAC7G,qFAAqF;gBACrF,mFAAmF;gBACnF,oFAAoF;gBACpF,6CAA6C;gBAC7C,0EAA0E,MAAM,CAAC,KAAM,CAAC,iBAAiB,CAAC,UAAU,CACvH,CAAC;QACJ,CAAC;QACD,qBAAqB,GAAG,UAAU,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,WAAW;QAClB,WAAW,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACtC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,SAAS,IAAI;QACX,4CAA4C;QAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,OAAO;QACd,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,iEAAiE,MAAM,CAAC,GAAG,CAAC,2BAA2B;YACrG,4CAA4C,CAC/C,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,SAAS,UAAU;QACjB,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,WAAW,CAAC,GAAW,EAAE,MAAsB;IACtD,IAAI,CAAC;QACH,8EAA8E;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}