@descryy/runtime-orchestrator 0.4.7 → 0.4.9

package/dist/instrumented-execution.js

@@ -1,547 +0,0 @@
-/**
- * The assembly wiring the runtime's pieces together in production code (previously
- * only connected ad hoc by tests). Runs an `ExecutionController` over a `services`
- * configuration; wraps each spawned process in a live `ProcessOutputSource`
- * (polls the buffer, yields each line once); builds a `CollectorContext` with a
- * real `resolveSourceRoot` closed over the execution's own processes; starts,
- * drains and stops the adapter's collectors; writes every emitted item through
- * `EvidenceStore` so redaction runs (plan §28).
- *
- * Deliberately does not decide whether a finding exists, correlate to graph
- * nodes, or drive a browser — separate stages, separate contracts.
- */
-import { delimiter } from "node:path";
-import { resolveServiceRootForOrigin } from "@descryy/runtime-contracts";
-import { createInboundProxy } from "@descryy/runtime-backend-observation";
-import { createExternalRequestCollector } from "@descryy/runtime-external-service-observation";
-import { ExecutionController, checkDependencyVersions, checkEnvironmentVersion, } from "@descryy/runtime-controller";
-import { EvidenceStore } from "@descryy/runtime-evidence-store";
-import { createPollingProcessOutputSource } from "./polling-output-source.js";
-import { COLLECTOR_VERSION } from "./collector-version.js";
-/**
- * Every spawned service's captured output, read off the controller at the
- * moment the result is built. Keyed by service name, which is also the only
- * thing that can be joined back to `ExecutionConfiguration.services`; a handle
- * with no service name has nothing to key on and is skipped.
- */
-function captureServiceOutput(controller) {
-    const output = {};
-    for (const handle of controller.execution.processes) {
-        if (handle.serviceName === null)
-            continue;
-        output[handle.serviceName] = controller.readProcessOutput(handle.serviceName);
-    }
-    return output;
-}
-/**
- * Builds the origin → source-root lookup a collector reads through
- * `CollectorContext.resolveSourceRoot`. Closes over the execution's own
- * processes, which is what makes the port→service join possible at all — under
- * ephemeral ports only the running process knows its own port.
- */
-export function createSourceRootResolver(processes, configuration) {
-    return (origin) => resolveServiceRootForOrigin(origin, { processes, configuration });
-}
-/**
- * Rewrites every spawnable service so it launches with outbound
- * instrumentation in place.
- *
- * The declaration comes from the adapter and names no language; this function
- * applies it and also names none. `attach`-mode services are skipped: their
- * process is already running, so there is no launch left to influence, and
- * pretending otherwise would claim instrumentation that is not there.
- */
-export function applyOutboundLaunch(execution, launch) {
-    const services = {};
-    for (const [name, service] of Object.entries(execution.configuration.services)) {
-        if (service.command === undefined) {
-            services[name] = service;
-            continue;
-        }
-        const prepend = new Set(launch.prependToExisting ?? []);
-        const env = { ...service.env };
-        for (const [key, value] of Object.entries(launch.env ?? {})) {
-            // extend, don't replace, a variable the target relies on (PYTHONPATH is the
-            // live case) -- replacing it breaks the app's own module resolution
-            const existing = prepend.has(key) ? (service.env?.[key] ?? process.env[key] ?? "") : "";
-            env[key] = existing === "" ? value : `${value}${delimiter}${existing}`;
-        }
-        services[name] = {
-            ...service,
-            ...(Object.keys(env).length === 0 ? {} : { env }),
-            ...(launch.interpreterArgs === undefined || launch.interpreterArgs.length === 0
-                ? {}
-                : { interpreterArgs: [...(service.interpreterArgs ?? []), ...launch.interpreterArgs] }),
-        };
-    }
-    return { ...execution, configuration: { ...execution.configuration, services } };
-}
-export async function runInstrumentedExecution(input) {
-    // outbound observation needs two things: a collector to read the marker lines,
-    // and a launch that installs client instrumentation before app code can capture
-    // an unpatched client. The launch is adapter-declared and language-specific; an
-    // adapter that declares nothing gets neither.
-    //
-    // budget clock starts here, not at controller.run() -- marginally earlier than
-    // the controller's own timer, so a caller never waits past its declared bound
-    const budgetStartedAt = Date.now();
-    const outboundLaunch = input.adapter.outboundHttpLaunch?.() ?? null;
-    const launchedExecution = outboundLaunch === null ? input.execution : applyOutboundLaunch(input.execution, outboundLaunch);
-    const configuration = launchedExecution.configuration;
-    // closure, not repeated per-return: there are four returns, and one quietly
-    // reporting a different number is the bug this field exists to catch
-    const budgetOutcome = (observedForMs) => {
-        const elapsedMs = Date.now() - budgetStartedAt;
-        return {
-            declaredMs: configuration.timeoutMs,
-            elapsedMs,
-            requestedObservationMs: input.observeForMs,
-            observedForMs,
-            exceeded: elapsedMs > configuration.timeoutMs,
-        };
-    };
-    const controller = ExecutionController.create(launchedExecution);
-    // B7: the execution row, minted here and nowhere else in production.
-    // `EvidenceStore.recordExecution` was complete and tested since the
-    // `executions` table was added -- schema, redaction, environment capture,
-    // upsert -- but this repo's and descry-core's own sources together held
-    // exactly two callers of it outside its own tests, both in
-    // evidence-store's test suite. Every evidence row this run is about to
-    // write carries `controller.execution.executionId`, so the parent row
-    // must exist before the first of them does; `controller.execution` is
-    // real the moment `create()` returns (it mints the id synchronously),
-    // which is before `controller.run()` -- and therefore before this
-    // function's own first `store.write()`, in the catch block just below.
-    input.store.recordExecution({
-        executionId: controller.execution.executionId,
-        application: controller.execution.application,
-        repository: controller.execution.repository,
-        commit: controller.execution.commit,
-        configuration: controller.execution.configuration,
-    });
-    // RT-219: controller.run()'s one throw path (spawnProcess catch/rethrow, after
-    // recording the failure in serviceStartResults) used to reject this whole
-    // function uncaught -- zero evidence trail. Caught here and written through
-    // EvidenceStore tagged "harness", same "resolves normally" contract RT-219
-    // established for collector.start(). controller.execution/serviceStartResults
-    // are both already real at this point (run() mutates state before it throws).
-    let execution;
-    try {
-        execution = await controller.run(input.runOptions);
-    }
-    catch (error) {
-        const detail = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
-        const harnessEvidence = input.store.write({
-            executionId: controller.execution.executionId,
-            timestamp: new Date().toISOString(),
-            source: "harness",
-            service: null,
-            process: null,
-            eventType: "COLLECTOR_ERROR",
-            payload: {
-                raw: `ExecutionController.run() threw instead of resolving: ${detail}`,
-                error: detail,
-            },
-            traceId: null,
-            requestId: null,
-            correlationId: null,
-            graphNodeId: null,
-            sourceLocation: null,
-            stackTrace: null,
-            confidence: 1,
-            collectorVersion: COLLECTOR_VERSION,
-        });
-        return {
-            execution: controller.execution,
-            evidence: [harnessEvidence],
-            collectorCapabilities: [],
-            validationError: `ExecutionController.run() threw: ${detail}`,
-            budget: budgetOutcome(0),
-            // The throw path is where output matters most: whatever the service
-            // printed before the run came apart is the only account of it there is.
-            serviceOutput: captureServiceOutput(controller),
-        };
-    }
-    if (controller.validationError !== null) {
-        return {
-            execution,
-            evidence: [],
-            collectorCapabilities: [],
-            validationError: controller.validationError,
-            budget: budgetOutcome(0),
-            // Refused before spawning, so nothing can have been said. Empty here is
-            // the true answer, not a default standing in for one.
-            serviceOutput: {},
-        };
-    }
-    // a handle with no serviceName can't be attributed to a config entry -- skipped
-    // declared before the sources close over it: the flip lets stop() finish rather
-    // than wait forever on a source still watching a live buffer
-    let finished = false;
-    const sources = [];
-    // second, independent source per process -- NOT shared with the backend
-    // collector's: createPollingProcessOutputSource yields each line exactly once,
-    // so sharing means two collectors race for it. Measured: sharing made the
-    // backend log collector eat every DESCRY_EXTERNAL_REQUEST line and the outbound
-    // collector report nothing, reading as "no outbound calls".
-    const namedSources = [];
-    for (const handle of execution.processes) {
-        if (handle.serviceName === null)
-            continue;
-        const serviceName = handle.serviceName;
-        // stamped here, at construction -- by the time evidence reaches
-        // correlateExecution the handle is out of scope and this association is gone
-        sources.push(createPollingProcessOutputSource({
-            processId: handle.processId,
-            serviceName,
-            readOutput: () => controller.readProcessOutput(serviceName),
-            isFinished: () => finished,
-        }));
-        namedSources.push({
-            serviceName,
-            source: createPollingProcessOutputSource({
-                processId: handle.processId,
-                serviceName,
-                readOutput: () => controller.readProcessOutput(serviceName),
-                isFinished: () => finished,
-            }),
-        });
-    }
-    const backendCollectors = input.adapter.createBackendCollectors(sources);
-    // only started when the launch above actually installed instrumentation --
-    // otherwise it would report "no outbound calls" for a service making them,
-    // worse than declining to look. createExternalRequestCollector names no
-    // language itself; the adapter's stack parser is the only language-specific bit.
-    const outboundCollectors = outboundLaunch === null
-        ? []
-        : namedSources.map(({ source, serviceName }) => createExternalRequestCollector({
-            source,
-            service: serviceName,
-            stackTraceParser: input.adapter.stackTraceParser,
-        }));
-    const emitted = [];
-    // dependency/environment version-mismatch checks (DEC-NEXT-fault-layer-empirical-
-    // confirmation.md): tagged "dependency-check"/"environment-check" rather than the
-    // service's own source, so a reader can tell version drift from an app
-    // observation. Run once per service (own cwd/lockfile/engines.node),
-    // unconditionally, but only emitted as evidence on an actual mismatch.
-    //
-    // observedNodeVersion is process.version captured once during controller.run();
-    // never re-probed here.
-    const observedNodeVersion = execution.environmentMetadata?.nodeVersion ?? process.version;
-    for (const handle of execution.processes) {
-        if (handle.serviceName === null)
-            continue;
-        const serviceConfig = configuration.services[handle.serviceName];
-        if (serviceConfig === undefined)
-            continue;
-        const dependencyResult = checkDependencyVersions(serviceConfig.cwd);
-        for (const mismatch of dependencyResult.mismatches) {
-            emitted.push(input.store.write({
-                executionId: execution.executionId,
-                timestamp: new Date().toISOString(),
-                source: "dependency-check",
-                service: handle.serviceName,
-                process: handle.processId,
-                eventType: "DEPENDENCY_VERSION_MISMATCH",
-                payload: {
-                    raw: `dependency "${mismatch.name}": lockfile declares ${mismatch.declaredVersion}, resolved ${mismatch.resolvedVersion}`,
-                    name: mismatch.name,
-                    declaredVersion: mismatch.declaredVersion,
-                    resolvedVersion: mismatch.resolvedVersion,
-                },
-                traceId: null,
-                requestId: null,
-                correlationId: null,
-                graphNodeId: null,
-                sourceLocation: null,
-                stackTrace: null,
-                confidence: 1,
-                collectorVersion: COLLECTOR_VERSION,
-            }));
-        }
-        const environmentResult = checkEnvironmentVersion(serviceConfig.cwd, observedNodeVersion);
-        if (environmentResult.mismatch) {
-            emitted.push(input.store.write({
-                executionId: execution.executionId,
-                timestamp: new Date().toISOString(),
-                source: "environment-check",
-                service: handle.serviceName,
-                process: handle.processId,
-                eventType: "ENVIRONMENT_VERSION_MISMATCH",
-                payload: {
-                    raw: `declared node version ${environmentResult.declaredVersion ?? "unknown"} (${environmentResult.declaredSource ?? "unknown"}), observed ${environmentResult.observedVersion}`,
-                    declaredVersion: environmentResult.declaredVersion,
-                    declaredSource: environmentResult.declaredSource,
-                    observedVersion: environmentResult.observedVersion,
-                },
-                traceId: null,
-                requestId: null,
-                correlationId: null,
-                graphNodeId: null,
-                sourceLocation: null,
-                stackTrace: null,
-                confidence: 1,
-                collectorVersion: COLLECTOR_VERSION,
-            }));
-        }
-    }
-    // opt-in InboundProxy wiring (RT-192, DEC-271), see frontWithInboundProxy's doc.
-    // Built after controller.run() returns, so readiness already exists in
-    // serviceStartResults -- this loop reads that answer, never re-derives it.
-    const proxies = [];
-    if (input.frontWithInboundProxy !== undefined) {
-        for (const handle of execution.processes) {
-            const serviceName = handle.serviceName;
-            if (serviceName === null)
-                continue;
-            if (input.frontWithInboundProxy[serviceName] !== true)
-                continue;
-            const readinessOutcome = controller.serviceStartResults.find((result) => result.serviceName === serviceName && result.stage === "readiness");
-            if (readinessOutcome?.succeeded !== true || handle.port === null) {
-                // requested but never proven live -- reported as COLLECTOR_ERROR, not a
-                // silent no-proxy fallback (plan §17: "not observed" vs "nothing there")
-                emitted.push(input.store.write({
-                    executionId: execution.executionId,
-                    timestamp: new Date().toISOString(),
-                    source: "backend-process",
-                    service: serviceName,
-                    process: handle.processId,
-                    eventType: "COLLECTOR_ERROR",
-                    payload: {
-                        raw: `service "${serviceName}" was flagged frontWithInboundProxy but its own readiness never succeeded -- never fronting a process that was not proven live`,
-                        collectorId: `inbound-proxy:${handle.processId}`,
-                    },
-                    traceId: null,
-                    requestId: null,
-                    correlationId: null,
-                    graphNodeId: null,
-                    sourceLocation: null,
-                    stackTrace: null,
-                    confidence: 1,
-                    collectorVersion: COLLECTOR_VERSION,
-                }));
-                continue;
-            }
-            proxies.push({
-                serviceName,
-                proxy: createInboundProxy({
-                    targetHost: "127.0.0.1",
-                    targetPort: handle.port,
-                    processId: handle.processId,
-                    service: serviceName,
-                }),
-            });
-        }
-    }
-    const collectors = [...backendCollectors, ...outboundCollectors, ...proxies.map((entry) => entry.proxy.collector)];
-    const context = {
-        executionId: execution.executionId,
-        configuration,
-        // redaction runs here, on the way in -- EvidenceStore.write() is the only
-        // path that sets redactionStatus (plan §28)
-        emit: (evidenceInput) => {
-            emitted.push(input.store.write({ ...evidenceInput, executionId: execution.executionId }));
-        },
-        resolveSourceRoot: createSourceRootResolver(execution.processes, configuration),
-    };
-    // RT-219: collector.start()'s documented failure path resolves {available:
-    // false, reason}, handled below. A collector that instead THROWS out of
-    // start() is a different claim -- the harness's own machinery breaking, not
-    // "I looked and could not" -- so it's caught here and tagged "harness" rather
-    // than the collector's domain source, instead of aborting this Promise.all
-    // uncaught with zero evidence trail.
-    const startOutcomes = await Promise.all(collectors.map(async (collector) => {
-        try {
-            return { collector, result: await collector.start(context), threw: false };
-        }
-        catch (error) {
-            const detail = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
-            emitted.push(input.store.write({
-                executionId: execution.executionId,
-                timestamp: new Date().toISOString(),
-                source: "harness",
-                service: null,
-                process: null,
-                eventType: "COLLECTOR_ERROR",
-                payload: {
-                    raw: `collector "${collector.collectorId}" threw during start() instead of resolving {available:false}: ${detail}`,
-                    collectorId: collector.collectorId,
-                    error: detail,
-                },
-                traceId: null,
-                requestId: null,
-                correlationId: null,
-                graphNodeId: null,
-                sourceLocation: null,
-                stackTrace: null,
-                confidence: 1,
-                collectorVersion: COLLECTOR_VERSION,
-            }));
-            return { collector, result: { available: false, reason: `start() threw: ${detail}` }, threw: true };
-        }
-    }));
-    // a thrown start() was already reported above under "harness" -- excluded here
-    // to avoid double-reporting the same failure under "backend-process"
-    const unavailable = startOutcomes.filter((entry) => !entry.threw && !entry.result.available);
-    // reported, never silently absent (plan §17: "not observed" vs "nothing there")
-    for (const entry of unavailable) {
-        emitted.push(input.store.write({
-            executionId: execution.executionId,
-            timestamp: new Date().toISOString(),
-            source: "backend-process",
-            service: null,
-            process: null,
-            eventType: "COLLECTOR_ERROR",
-            payload: {
-                raw: `collector "${entry.collector.collectorId}" reported unavailable at start: ${entry.result.available ? "" : (entry.result.reason ?? "no reason given")}`,
-                collectorId: entry.collector.collectorId,
-            },
-            traceId: null,
-            requestId: null,
-            correlationId: null,
-            graphNodeId: null,
-            sourceLocation: null,
-            stackTrace: null,
-            confidence: 1,
-            collectorVersion: COLLECTOR_VERSION,
-        }));
-    }
-    // proxies with available:false above never reach here -- port stayed null
-    const proxyPorts = {};
-    for (const entry of proxies) {
-        const port = entry.proxy.port();
-        if (port !== null)
-            proxyPorts[entry.serviceName] = port;
-    }
-    // Wrapped because a throw above teardown used to leak the whole execution.
-    // onReady is caller code, documented not to be caught -- but "not caught" and
-    // "not cleaned up" are different promises: when onReady threw, finished stayed
-    // false, so collector.stop()/controller.stop() were skipped, sources kept
-    // polling, the spawned child was never killed, and the timer held the event
-    // loop open. Measured: rejects in 270ms, process then never exits. Exception
-    // still propagates unchanged to the caller; only the leak goes away.
-    //
-    // Found the hard way: a worktree missing node_modules made a test's onReady
-    // throw after a correctly bounded readiness wait, then the suite hung for
-    // twenty minutes.
-    let observationMs = 0;
-    let bodyFailure = null;
-    let teardownFailure = null;
-    try {
-        await input.onReady?.({ execution, proxyPorts });
-        // observation window is bounded by the declared budget, not just observeForMs
-        // -- unconditionally sleeping the full window used to leave timeoutMs bounding
-        // only the service, not the wait; measured, a 1500ms budget with a 12000ms
-        // window returned after 12288ms with zero evidence (services dead the whole
-        // remainder). Clamped rather than aborted: teardown still owns OS resources
-        // and must run; the overshoot is reported via budget.exceeded, not hidden.
-        const remainingMs = budgetStartedAt + configuration.timeoutMs - Date.now();
-        observationMs = Math.max(0, Math.min(input.observeForMs, remainingMs));
-        if (observationMs > 0) {
-            await new Promise((resolve) => setTimeout(resolve, observationMs));
-        }
-        // rule 7: cut-short window is a labelled degradation. execution.state's
-        // TIMED_OUT says the services stopped early, not that observation did --
-        // tagged "harness"/COLLECTOR_ERROR to keep "found nothing" apart from
-        // "stopped looking".
-        if (observationMs < input.observeForMs) {
-            emitted.push(input.store.write({
-                executionId: execution.executionId,
-                timestamp: new Date().toISOString(),
-                source: "harness",
-                service: null,
-                process: null,
-                eventType: "COLLECTOR_ERROR",
-                payload: {
-                    raw: `the observation window was cut short by the declared whole-execution budget: ` +
-                        `observed for ${String(observationMs)}ms of the ${String(input.observeForMs)}ms requested, ` +
-                        `against a ${String(configuration.timeoutMs)}ms budget. Evidence from this run is partial — ` +
-                        `absence of an event is not evidence the application did not produce one.`,
-                    collectorId: "orchestrator:execution-budget",
-                },
-                traceId: null,
-                requestId: null,
-                correlationId: null,
-                graphNodeId: null,
-                sourceLocation: null,
-                stackTrace: null,
-                confidence: 1,
-                collectorVersion: COLLECTOR_VERSION,
-            }));
-        }
-    }
-    catch (error) {
-        // held, not handled -- rethrown below, unchanged, once teardown has run
-        bodyFailure = { error };
-    }
-    finally {
-        // order matters: sources must be told the process is done before stop()
-        // awaits their drain, or it waits forever on a generator polling a live buffer
-        finished = true;
-        try {
-            await Promise.all(collectors.map((collector) => collector.stop()));
-            // timeout() vs stop() is decided here, not left to whichever of this
-            // function's clamp or the controller's own timer fires first -- measured
-            // TIMED_OUT at 1534ms and COMPLETED at 1515ms for the same case under load.
-            // descry-core's observe_runtime reads this to choose ok vs timed_out, so
-            // losing that race silently hid a real truncation; this function already
-            // knows the answer (observationMs < input.observeForMs) and states it
-            // directly instead.
-            if (observationMs < input.observeForMs) {
-                await controller.timeout();
-            }
-            else {
-                await controller.stop();
-            }
-        }
-        catch (teardownError) {
-            // held and rethrown below rather than thrown inside finally, which can
-            // discard an in-flight exception
-            if (bodyFailure === null) {
-                teardownFailure = { error: teardownError };
-            }
-            else {
-                // caller's error is the actionable one; a teardown failure must not
-                // silently replace it -- written to the evidence store instead (tagged
-                // "harness", RT-219) rather than thrown. Not in the returned array, but
-                // the store is durable so the record survives the throw.
-                input.store.write({
-                    executionId: execution.executionId,
-                    timestamp: new Date().toISOString(),
-                    source: "harness",
-                    service: null,
-                    process: null,
-                    eventType: "COLLECTOR_ERROR",
-                    payload: {
-                        raw: "teardown also failed while unwinding from an earlier failure, and is recorded rather than " +
-                            `thrown so it does not mask it: ${teardownError instanceof Error ? `${teardownError.name}: ${teardownError.message}` : String(teardownError)}`,
-                        collectorId: "orchestrator:teardown",
-                    },
-                    traceId: null,
-                    requestId: null,
-                    correlationId: null,
-                    graphNodeId: null,
-                    sourceLocation: null,
-                    stackTrace: null,
-                    confidence: 1,
-                    collectorVersion: COLLECTOR_VERSION,
-                });
-            }
-        }
-    }
-    // rethrown untouched, same object/stack; caller's failure wins over teardown's
-    if (bodyFailure !== null)
-        throw bodyFailure.error;
-    if (teardownFailure !== null)
-        throw teardownFailure.error;
-    return {
-        execution: controller.execution,
-        evidence: emitted,
-        collectorCapabilities: collectors.map((collector) => ({ collectorId: collector.collectorId, capabilities: collector.capabilities() })),
-        validationError: null,
-        budget: budgetOutcome(observationMs),
-        serviceOutput: captureServiceOutput(controller),
-    };
-}
-//# sourceMappingURL=instrumented-execution.js.map

package/dist/instrumented-execution.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"instrumented-execution.js","sourceRoot":"","sources":["../src/instrumented-execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAUtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EACL,mBAAmB,EAGnB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAgG3D;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,UAA+B;IAC3D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QAC1C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmC,EACnC,aAAqC;IAErC,OAAO,CAAC,MAAc,EAAE,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAA+B,EAC/B,MAA0B;IAE1B,MAAM,QAAQ,GAA+D,EAAE,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,GAA2B,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,4EAA4E;YAC5E,oEAAoE;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG;YACf,GAAG,OAAO;YACV,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;gBAC7E,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;SAC1F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,EAAE,GAAG,SAAS,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAiC;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,8CAA8C;IAC9C,EAAE;IACF,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,IAAI,IAAI,CAAC;IACpE,MAAM,iBAAiB,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAE3H,MAAM,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC;IAEtD,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,aAAa,GAAG,CAAC,aAAqB,EAA0B,EAAE;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAC/C,OAAO;YACL,UAAU,EAAE,aAAa,CAAC,SAAS;YACnC,SAAS;YACT,sBAAsB,EAAE,KAAK,CAAC,YAAY;YAC1C,aAAa;YACb,QAAQ,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS;SAC9C,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAEjE,qEAAqE;IACrE,oEAAoE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,2DAA2D;IAC3D,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,uEAAuE;IACvE,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;QAC1B,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW;QAC7C,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW;QAC7C,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,UAAU;QAC3C,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM;QACnC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,aAAa;KAClD,CAAC,CAAC;IAEH,+EAA+E;IAC/E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1F,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;YACxC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW;YAC7C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE;gBACP,GAAG,EAAE,yDAAyD,MAAM,EAAE;gBACtE,KAAK,EAAE,MAAM;aACd;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,CAAC,eAAe,CAAC;YAC3B,qBAAqB,EAAE,EAAE;YACzB,eAAe,EAAE,oCAAoC,MAAM,EAAE;YAC7D,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;YACxB,oEAAoE;YACpE,wEAAwE;YACxE,aAAa,EAAE,oBAAoB,CAAC,UAAU,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,EAAE;YACZ,qBAAqB,EAAE,EAAE;YACzB,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;YACxB,wEAAwE;YACxE,sDAAsD;YACtD,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,gFAAgF;IAChF,6DAA6D;IAC7D,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,wEAAwE;IACxE,+EAA+E;IAC/E,0EAA0E;IAC1E,gFAAgF;IAChF,4DAA4D;IAC5D,MAAM,YAAY,GAA6E,EAAE,CAAC;IAClG,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,gEAAgE;QAChE,6EAA6E;QAC7E,OAAO,CAAC,IAAI,CACV,gCAAgC,CAAC;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW;YACX,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC;YAC3D,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;SAC3B,CAAC,CACH,CAAC;QACF,YAAY,CAAC,IAAI,CAAC;YAChB,WAAW;YACX,MAAM,EAAE,gCAAgC,CAAC;gBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW;gBACX,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC;gBAC3D,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;aAC3B,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEzE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,iFAAiF;IACjF,MAAM,kBAAkB,GACtB,cAAc,KAAK,IAAI;QACrB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAC3C,8BAA8B,CAAC;YAC7B,MAAM;YACN,OAAO,EAAE,WAAW;YACpB,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB;SACjD,CAAC,CACH,CAAC;IAER,MAAM,OAAO,GAAe,EAAE,CAAC;IAE/B,kFAAkF;IAClF,kFAAkF;IAClF,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,EAAE;IACF,gFAAgF;IAChF,wBAAwB;IACxB,MAAM,mBAAmB,GAAG,SAAS,CAAC,mBAAmB,EAAE,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAC1F,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QAC1C,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,aAAa,KAAK,SAAS;YAAE,SAAS;QAE1C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,MAAM,QAAQ,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;gBAChB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,MAAM,CAAC,WAAW;gBAC3B,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,SAAS,EAAE,6BAA6B;gBACxC,OAAO,EAAE;oBACP,GAAG,EAAE,eAAe,QAAQ,CAAC,IAAI,wBAAwB,QAAQ,CAAC,eAAe,cAAc,QAAQ,CAAC,eAAe,EAAE;oBACzH,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,eAAe,EAAE,QAAQ,CAAC,eAAe;iBAC1C;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC1F,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;gBAChB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,MAAM,CAAC,WAAW;gBAC3B,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,SAAS,EAAE,8BAA8B;gBACzC,OAAO,EAAE;oBACP,GAAG,EAAE,yBAAyB,iBAAiB,CAAC,eAAe,IAAI,SAAS,KAAK,iBAAiB,CAAC,cAAc,IAAI,SAAS,eAAe,iBAAiB,CAAC,eAAe,EAAE;oBAChL,eAAe,EAAE,iBAAiB,CAAC,eAAe;oBAClD,cAAc,EAAE,iBAAiB,CAAC,cAAc;oBAChD,eAAe,EAAE,iBAAiB,CAAC,eAAe;iBACnD;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,OAAO,GAA8F,EAAE,CAAC;IAC9G,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACvC,IAAI,WAAW,KAAK,IAAI;gBAAE,SAAS;YACnC,IAAI,KAAK,CAAC,qBAAqB,CAAC,WAAW,CAAC,KAAK,IAAI;gBAAE,SAAS;YAEhE,MAAM,gBAAgB,GAAG,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAC1D,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,CAC/E,CAAC;YACF,IAAI,gBAAgB,EAAE,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACjE,wEAAwE;gBACxE,yEAAyE;gBACzE,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;oBAChB,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,iBAAiB;oBACzB,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE,MAAM,CAAC,SAAS;oBACzB,SAAS,EAAE,iBAAiB;oBAC5B,OAAO,EAAE;wBACP,GAAG,EAAE,YAAY,WAAW,gIAAgI;wBAC5J,WAAW,EAAE,iBAAiB,MAAM,CAAC,SAAS,EAAE;qBACjD;oBACD,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,IAAI;oBACnB,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,IAAI;oBAChB,UAAU,EAAE,CAAC;oBACb,gBAAgB,EAAE,iBAAiB;iBACpC,CAAC,CACH,CAAC;gBACF,SAAS;YACX,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACX,WAAW;gBACX,KAAK,EAAE,kBAAkB,CAAC;oBACxB,UAAU,EAAE,WAAW;oBACvB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,WAAW;iBACrB,CAAC;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAqB;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,aAAa;QACb,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,EAAE,CAAC,aAAa,EAAE,EAAE;YACtB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,iBAAiB,EAAE,wBAAwB,CAAC,SAAS,CAAC,SAAS,EAAE,aAAa,CAAC;KAChF,CAAC;IAEF,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACtF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;gBAChB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE;oBACP,GAAG,EAAE,cAAc,SAAS,CAAC,WAAW,kEAAkE,MAAM,EAAE;oBAClH,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,KAAK,EAAE,MAAM;iBACd;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CACH,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAc,EAAE,MAAM,EAAE,kBAAkB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAa,EAAE,CAAC;QACxH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE7F,gFAAgF;IAChF,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;YAChB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE;gBACP,GAAG,EAAE,cAAc,KAAK,CAAC,SAAS,CAAC,WAAW,oCAAoC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC,EAAE;gBAC5J,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;aACzC;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI;YAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IAC1D,CAAC;IACD,2EAA2E;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,EAAE;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,kBAAkB;IAClB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,WAAW,GAAuC,IAAI,CAAC;IAC3D,IAAI,eAAe,GAAuC,IAAI,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAEjD,8EAA8E;QAC9E,+EAA+E;QAC/E,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,WAAW,GAAG,eAAe,GAAG,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3E,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,qBAAqB;QACrB,IAAI,aAAa,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;gBAChB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE;oBACP,GAAG,EACD,+EAA+E;wBAC/E,gBAAgB,MAAM,CAAC,aAAa,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB;wBAC5F,aAAa,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,iDAAiD;wBAC7F,0EAA0E;oBAC5E,WAAW,EAAE,+BAA+B;iBAC7C;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,wEAAwE;QACxE,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,+EAA+E;QAC/E,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,qEAAqE;YACrE,yEAAyE;YACzE,4EAA4E;YAC5E,yEAAyE;YACzE,yEAAyE;YACzE,sEAAsE;YACtE,oBAAoB;YACpB,IAAI,aAAa,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvC,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,aAAsB,EAAE,CAAC;YAChC,uEAAuE;YACvE,iCAAiC;YACjC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,eAAe,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,oEAAoE;gBACpE,uEAAuE;gBACvE,wEAAwE;gBACxE,yDAAyD;gBACzD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;oBAChB,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,iBAAiB;oBAC5B,OAAO,EAAE;wBACP,GAAG,EACD,4FAA4F;4BAC5F,kCAAkC,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;wBAChJ,WAAW,EAAE,uBAAuB;qBACrC;oBACD,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,IAAI;oBACnB,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,IAAI;oBAChB,UAAU,EAAE,CAAC;oBACb,gBAAgB,EAAE,iBAAiB;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,IAAI,WAAW,KAAK,IAAI;QAAE,MAAM,WAAW,CAAC,KAAK,CAAC;IAClD,IAAI,eAAe,KAAK,IAAI;QAAE,MAAM,eAAe,CAAC,KAAK,CAAC;IAE1D,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,QAAQ,EAAE,OAAO;QACjB,qBAAqB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACtI,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC;QACpC,aAAa,EAAE,oBAAoB,CAAC,UAAU,CAAC;KAChD,CAAC;AACJ,CAAC"}

package/dist/jvm-agent/build.d.ts

@@ -1,48 +0,0 @@
-/**
- * Compiles `Agent.java` into `agent.jar` and `Attacher.java` into `Attacher.class`,
- * once, only when source is newer than build output (same mtime-cache rule
- * `kotlin-server/build.ts` uses). This is shipped product code —
- * `attach-to-running-jvm-process.ts` runs the compiled artifacts, never compiles
- * them at call time.
- *
- * **`tools.jar` is JDK-8-only.** `com.sun.tools.attach.VirtualMachine` shipped in
- * `tools.jar` through JDK 8; from JDK 9 it's in the `jdk.attach` module, no extra
- * jar needed. `findToolsJarIfPresent` returns `null` when absent (JDK 9+ or no
- * `tools.jar`) and `Attacher.java` compiles/runs with no extra classpath entry —
- * correct for JDK 9+, but only exercised against JDK 8 on this machine (disclosed
- * gap, see this module's decisions-inbox entry).
- *
- * **ByteBuddy is vendored** (same pattern as `junit-platform-console-standalone`
- * for the JUnit reporter): one pinned version, fetched once from Maven Central,
- * checksum-verified, never a build tool. `Agent.java` needs real bytecode
- * manipulation for `DispatcherServlet` method-entry advice (RT-201) — hand-written
- * ASM isn't realistic, and Maven/Gradle would mean resolving a dependency tree for
- * one library. The plain `net.bytebuddy:byte-buddy` artifact (not `byte-buddy-dep`)
- * is used because it repackages its own ASM under `net.bytebuddy.jar.asm.*`
- * (verified via `unzip -l`) — one self-contained jar. **A version bump changes the
- * URL AND the digest, in one reviewable diff** (plus `MANIFEST.MF`'s `Class-Path`
- * line, which is static and version-pinned, not generated). `byte-buddy-*.jar`
- * sits beside `agent.jar` because the JDK resolves an agent JAR's `Class-Path`
- * relative to the agent JAR's own location.
- *
- * **`Agent.java`/`Attacher.java`/`MANIFEST.MF` live in `packages/orchestrator/jvm-agent/`,
- * a sibling of `src/`/`dist/`, NOT inside `src/jvm-agent/`.** Found the hard way:
- * `tsc` only emits `.js`/`.d.ts`, so a `.java` file nested inside `src/jvm-agent/`
- * has no `dist/` counterpart and `import.meta.url`-relative resolution would point
- * at a source-only directory. A relative URL walking OUT of `src/`/`dist/` to a
- * shared sibling resolves identically from either, since both sit at the same
- * depth under `packages/orchestrator/`.
- */
-export declare const JVM_AGENT_DIR: string;
-export declare const BYTEBUDDY_JAR: string;
-/** Fetches the pinned ByteBuddy jar if absent or its checksum no longer matches — refuses a mismatch rather than proceeding, since this jar is both compiled against and loaded into a target JVM. */
-export declare function ensureByteBuddyJar(): Promise<string>;
-/** `$JAVA_HOME/lib/tools.jar` if it exists, else derived from `java`'s own reported `java.home`. `null` when neither yields a real file — the JDK 9+, no-`tools.jar` case. */
-export declare function findToolsJarIfPresent(): string | null;
-/** Compiles `Agent.java` and packages it as `agent.jar` with `Agent-Class` in its manifest. Returns the jar's path. */
-export declare function buildJvmAgentJar(): Promise<string>;
-/** Compiles `Attacher.java` to `Attacher.class` in this same directory. Returns the directory to put on the classpath (the class itself, not a jar — one file, no packaging step needed). */
-export declare function buildAttacherClass(): string;
-/** Ensures a directory exists (for the caller's tmp output file), mirroring the small helper every attach module in this package already needs once for its own scratch state. */
-export declare function ensureDir(path: string): void;
-//# sourceMappingURL=build.d.ts.map

package/dist/jvm-agent/build.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/jvm-agent/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAQH,eAAO,MAAM,aAAa,QAA6D,CAAC;AAMxF,eAAO,MAAM,aAAa,QAA6D,CAAC;AAMxF,sMAAsM;AACtM,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAe1D;AAMD,8KAA8K;AAC9K,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAYrD;AAED,uHAAuH;AACvH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAuBxD;AAED,6LAA6L;AAC7L,wBAAgB,kBAAkB,IAAI,MAAM,CAY3C;AAED,kLAAkL;AAClL,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE5C"}