@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5685

package/dist/self-update/service.js

@@ -0,0 +1,332 @@
+import { productIdentity } from '../home/identity.js';
+import { productName } from '../home/display.js';
+import { productEnv } from '../core/product-env.js';
+import { loadWorkspaceConfig, mergeWriteWorkspaceConfig } from '../workspace/config.js';
+import { installFromLocal, installFromRegistry } from './installer.js';
+import { activateManaged, writeLaunchers } from './launcher.js';
+import { buildCheckout, discoverCheckouts } from './checkouts.js';
+import { activate, detectInstallKind, findInstalled, linkCheckout, listInstalled, packageRootOf } from './layout.js';
+import { CEZAR_REPO, fetchOpenPulls, OpenPullsCache } from './pulls.js';
+import { distTagFor, RegistryCache } from './registry.js';
+import { classifyVersion, isNewer } from './semver.js';
+const LOG_CAP = 200;
+export class SelfUpdateBusyError extends Error {
+    constructor() {
+        super('an update is already running');
+    }
+}
+export class SelfUpdateService {
+    deps;
+    installKind;
+    registry;
+    home;
+    env;
+    job = null;
+    pulls;
+    constructor(deps) {
+        this.deps = deps;
+        this.env = deps.env ?? process.env;
+        this.home = deps.home;
+        this.installKind = detectInstallKind(deps.entry, this.env, this.home);
+        this.registry = deps.registry ?? new RegistryCache(productIdentity(deps.rebrand).rebrand ? productIdentity(deps.rebrand).npmPackage : deps.pkgName);
+        this.pulls = new OpenPullsCache(deps.pulls ?? (() => fetchOpenPulls(CEZAR_REPO, { env: this.env })));
+    }
+    /** The configured channel: workspace config wins, then `CEZ_UPDATE_CHANNEL`, then stable. */
+    async channel() {
+        const config = await loadWorkspaceConfig(this.deps.home.workspaceConfig);
+        if (config.updateChannel)
+            return config.updateChannel;
+        const seed = productEnv('UPDATE_CHANNEL', this.env);
+        return seed === 'nightly' || seed === 'development' ? seed : 'stable';
+    }
+    async setChannel(channel) {
+        await mergeWriteWorkspaceConfig((config) => {
+            config.updateChannel = channel;
+        }, this.deps.home);
+    }
+    /** The channel's newest version when it is newer than the running one — what health's
+     *  `latestVersion` reports and the version chip pulses for. */
+    async updateAvailable(refresh = false) {
+        const doc = refresh ? await this.registry.refresh() : await this.registry.get();
+        const channel = await this.channel();
+        // Development runs whatever was picked by hand; nothing is ever "newer" than a worktree.
+        if (!doc || channel === 'development')
+            return null;
+        const target = doc.distTags[distTagFor(channel)];
+        return target && isNewer(target, this.deps.version) ? target : null;
+    }
+    /** Reuse a cached snapshot immediately, refreshing stale data in the background. A cold
+     *  read waits for the bounded initial registry request so the dialog receives its result.
+     *  Active jobs must report progress before restart even when the registry is unreachable. */
+    async status(opts = {}) {
+        const doc = await this.statusDocument(opts.refresh);
+        const channel = await this.channel();
+        const trim = !!(opts.registryOnly || this.deps.trimPaths?.());
+        const installed = listInstalled(this.env, this.home, this.deps.rebrand).filter(entry => !trim || entry.source === 'registry');
+        const installedIds = new Set(installed.map((entry) => entry.id));
+        const stable = doc?.distTags.latest ?? null;
+        const nightly = doc?.distTags.nightly ?? null;
+        const target = channel === 'stable' ? stable : channel === 'nightly' ? nightly : null;
+        const { canSelfUpdate, reason } = this.capability();
+        return {
+            version: this.deps.version,
+            installKind: this.installKind,
+            entry: trim ? this.deps.entry.split(/[\\/]/).pop() ?? '' : this.deps.entry,
+            canSelfUpdate,
+            ...(reason ? { reason } : {}),
+            channel,
+            restartMode: this.deps.supervised ? 'supervisor' : 'reexec',
+            latest: { stable, nightly },
+            updateAvailable: target && isNewer(target, this.deps.version) ? target : null,
+            checkedAt: doc?.fetchedAt ?? null,
+            installed: installed.map((entry) => installedView(entry, trim)),
+            available: availableVersions(doc, installedIds),
+            job: this.jobView(trim),
+            activeRuns: this.deps.activeRuns?.() ?? 0,
+        };
+    }
+    /** The registry document `status` reads: the cached one while a job runs, a fresh one on
+     *  `refresh`, else the cache with a background refresh (a cold cache waits for its first read). */
+    async statusDocument(refresh) {
+        if (this.job?.status === 'running' || this.job?.status === 'restarting')
+            return this.registry.current();
+        if (refresh)
+            return this.registry.refresh();
+        const doc = this.registry.current();
+        if (!doc)
+            return this.registry.get();
+        void this.registry.get().catch(() => { });
+        return doc;
+    }
+    /** The job as `status` reports it. Keep raw diagnostics for local callers, but never disclose
+     *  the managed home through hosted npm command output or the final error. npm can normalize
+     *  Windows separators. */
+    jobView(trim) {
+        if (!this.job || !trim)
+            return this.job;
+        const roots = [this.home.config, this.home.state, this.home.data, this.home.cache, this.home.runtime, this.home.rootOverride]
+            .filter((root) => !!root);
+        const paths = [...new Set(roots.flatMap(root => [root, root.replaceAll('\\', '/')]))]
+            .sort((left, right) => right.length - left.length);
+        const redact = (line) => paths
+            .reduce((text, path) => text.replaceAll(path, '[cezar home]'), line);
+        return {
+            ...this.job,
+            log: this.job.log.map(redact),
+            ...(this.job.error ? { error: redact(this.job.error) } : {}),
+        };
+    }
+    /**
+     * What the development channel picks from: cezar's own worktrees and the open pull requests
+     * with a published preview build. Worktrees only on a local cockpit — linking a checkout runs
+     * whatever is in it, a local-machine gesture a hosted cockpit neither offers nor accepts (see
+     * `linkDiscovered`), and never worth a git call there.
+     */
+    async development(opts = {}) {
+        const trim = this.deps.trimPaths?.() ?? false;
+        const [checkouts, pulls, doc] = await Promise.all([
+            trim ? Promise.resolve([]) : discoverCheckouts(this.env, this.home).catch(() => []),
+            this.pulls.get(opts.refresh),
+            opts.refresh ? this.registry.refresh() : this.registry.get(),
+        ]);
+        const installedIds = new Set(listInstalled(this.env, this.home, this.deps.rebrand).map((entry) => entry.id));
+        const publishedAt = (version) => doc?.versions.find((entry) => entry.version === version)?.publishedAt ?? null;
+        const prByBranch = new Map(pulls.items.map((pull) => [pull.branch, pull.number]));
+        return {
+            checkouts: checkouts.map((checkout) => ({
+                id: checkout.id,
+                branch: checkout.branch,
+                version: checkout.version,
+                worktree: checkout.worktree,
+                built: checkout.built,
+                linked: checkout.linked,
+                commit: checkout.commit,
+                builtAt: checkout.builtAt,
+                stale: checkout.stale,
+                task: checkout.task,
+                pr: prByBranch.get(checkout.branch) ?? null,
+            })),
+            pulls: {
+                available: pulls.available,
+                ...(pulls.reason ? { reason: pulls.reason } : {}),
+                repo: CEZAR_REPO,
+                items: pulls.items.map((pull) => {
+                    const version = doc?.distTags[`pr-${pull.number}`] ?? null;
+                    return {
+                        ...pull,
+                        version,
+                        publishedAt: version ? publishedAt(version) : null,
+                        installed: version ? installedIds.has(version) : false,
+                    };
+                }),
+            },
+        };
+    }
+    /**
+     * Whether a HOSTED cockpit may apply `target` — hosted updates are forward-only, and "forward"
+     * has to mean forward in TIME, not merely in semver order. cezar's nightlies are versioned
+     * `<next-version>-nightly.<date>.<run>`, so every `0.13.0-nightly.*` outranks every later
+     * `0.12.x` patch: a semver-only rule would let a hosted cockpit on 0.12.1 install a 0.13.0
+     * nightly cut months earlier and restart into code that predates the guards this rule exists
+     * to protect. The target must be listed by the registry and may not resolve to a local or
+     * linked install. Publish dates order known releases; when dates are missing, a prerelease
+     * outranking a stable release is refused outright.
+     *
+     * Returns the refusal reason, or null when the target may be applied.
+     */
+    async forwardOnlyRefusal(target) {
+        const running = this.deps.version;
+        const suffix = `apply it on the host itself (\`${productIdentity().command} use <id>\`)`;
+        if (!isNewer(target, running)) {
+            return `a hosted cockpit can only update forward — ${target} is not newer than the running ${running}; ${suffix}`;
+        }
+        const doc = this.registry.current() ?? (await this.registry.get());
+        const sourceRefusal = this.registryTargetRefusal(target, doc);
+        if (sourceRefusal)
+            return sourceRefusal;
+        const publishedAt = (version) => doc?.versions.find((entry) => entry.version === version)?.publishedAt ?? null;
+        const targetAt = publishedAt(target);
+        const runningAt = publishedAt(running);
+        if (targetAt && runningAt) {
+            return targetAt >= runningAt
+                ? null
+                : `a hosted cockpit can only update forward — ${target} was published before the running ${running}; ${suffix}`;
+        }
+        if (classifyVersion(target) !== 'stable' && classifyVersion(running) === 'stable') {
+            return `a hosted cockpit can only update forward — ${target} is a prerelease and the registry gave no publish date to check it against; ${suffix}`;
+        }
+        return null;
+    }
+    registryTargetRefusal(target, doc = this.registry.current()) {
+        const installed = findInstalled(target, this.env, this.home, this.deps.rebrand);
+        if (!doc?.versions.some(entry => entry.version === target) ||
+            (installed && (installed.source !== 'registry' || installed.id !== target || installed.version !== target))) {
+            return `Hosted updates require a published registry version; switch local builds on the host with \`${productIdentity().command} use <id>\`.`;
+        }
+        return null;
+    }
+    capability() {
+        if (this.deps.readOnly)
+            return { canSelfUpdate: false, reason: `This ${productName('cezar')} was started without an updater.` };
+        switch (this.installKind) {
+            case 'managed':
+                return { canSelfUpdate: true };
+            case 'npx':
+                return {
+                    canSelfUpdate: false,
+                    reason: `This ${productName('cezar')} runs from the npx cache, which npx replaces on its own. Install it permanently to update from here.`,
+                };
+            case 'global-npm':
+                return {
+                    canSelfUpdate: false,
+                    reason: `This ${productName('cezar')} was installed with npm -g. Update it with npm, or install the managed layout to update from here.`,
+                };
+            case 'checkout':
+                return { canSelfUpdate: false, reason: `This ${productName('cezar')} runs from a git checkout — rebuild it instead of updating.` };
+            default:
+                return { canSelfUpdate: false, reason: `${productName('cezar')} could not tell how it was installed.` };
+        }
+    }
+    /**
+     * Install `target` (a registry version, an already-installed id such as `0.11.1+local`, or the
+     * id of a built cezar checkout `status()` lists — linked on the spot), activate it and restart.
+     * Returns as soon as the job is started; progress is on `status()`.
+     */
+    apply(target, opts = {}) {
+        if (this.job?.status === 'running' || this.job?.status === 'restarting')
+            throw new SelfUpdateBusyError();
+        const { canSelfUpdate, reason } = this.capability();
+        if (!canSelfUpdate)
+            throw new Error(reason ?? 'self-update is not available for this install');
+        const registryOnly = opts.registryOnly || this.deps.trimPaths?.();
+        if (registryOnly) {
+            const refusal = this.registryTargetRefusal(target);
+            if (refusal)
+                throw new Error(refusal);
+        }
+        const job = { status: 'running', target, startedAt: new Date().toISOString(), finishedAt: null, log: [] };
+        this.job = job;
+        const log = (line) => {
+            job.log.push(line);
+            if (job.log.length > LOG_CAP)
+                job.log.splice(0, job.log.length - LOG_CAP);
+        };
+        void (async () => {
+            try {
+                const installed = findInstalled(target, this.env, this.home, this.deps.rebrand);
+                // A linked checkout goes through discovery too: it may need a rebuild before it runs.
+                const linked = !registryOnly && (!installed || installed.source === 'link') ? await this.linkDiscovered(target, log) : null;
+                const id = linked ?? installed?.id ?? (await installFromRegistry(target, { onLog: log, env: this.env, home: this.home, rebrand: this.deps.rebrand })).id;
+                if (installed && !linked)
+                    log(`${id} is already installed`);
+                activateManaged(id, this.env, this.home, this.deps.rebrand);
+                log(`activated ${id}`);
+                job.status = 'restarting';
+                job.finishedAt = new Date().toISOString();
+                log('restarting…');
+                // Let the status poll that observes `restarting` get its answer before the listener goes.
+                setTimeout(() => this.deps.restart(), 750);
+            }
+            catch (error) {
+                job.status = 'failed';
+                job.finishedAt = new Date().toISOString();
+                job.error = error instanceof Error ? error.message : String(error);
+                log(`failed: ${job.error}`);
+            }
+        })();
+        return job;
+    }
+    /** A checkout `status()` offers under `target`: build it when it is unbuilt or older than its
+     *  last commit, link it and return its id. Null when no checkout answers to that id — the
+     *  target is then an installed entry or a registry version. A hosted cockpit never builds or
+     *  links here (`trimPaths`), and hosted apply also refuses already-installed local/link targets. */
+    async linkDiscovered(target, log) {
+        if (this.deps.trimPaths?.())
+            return null;
+        const checkout = (await discoverCheckouts(this.env, this.home)).find((entry) => entry.id === target);
+        if (!checkout)
+            return null;
+        if (!checkout.built || checkout.stale) {
+            log(`${checkout.built ? 'rebuilding' : 'building'} ${checkout.branch} first`);
+            await (this.deps.buildCheckout ?? buildCheckout)(checkout, log);
+        }
+        log(`linking ${checkout.packageRoot} (${checkout.branch})`);
+        return linkCheckout(checkout.packageRoot, checkout.branch, this.env, checkout.id, this.home).id;
+    }
+    /** `cezar install` from a checkout or the npx cache: pack the running package into the managed
+     *  layout and activate it. Headless — the CLI prints the log. */
+    async installSelf(onLog) {
+        // A local reinstall can replace the tree already selected by current. Refresh
+        // before installing too, so a failed write cannot strand the active local build.
+        if (productIdentity(this.deps.rebrand).rebrand)
+            writeLaunchers(this.env, this.home, this.deps.rebrand);
+        const result = await installFromLocal(packageRootOf(this.deps.entry), { onLog, env: this.env, home: this.home, rebrand: this.deps.rebrand });
+        activate(result.id, this.env, this.home, this.deps.rebrand);
+        return result;
+    }
+}
+function installedView(entry, trim) {
+    return {
+        id: entry.id,
+        version: entry.version,
+        source: entry.source,
+        installedAt: entry.installedAt,
+        active: entry.active,
+        ...(entry.branch ? { branch: entry.branch } : {}),
+        ...(entry.checkout && !trim ? { checkout: entry.checkout } : {}),
+    };
+}
+/** Previews (`-pr123.`, `-develop.`) are noise in a picker meant for stable ↔ nightly moves;
+ *  the picker lists stable releases and nightlies only. */
+function availableVersions(doc, installedIds) {
+    return (doc?.versions ?? [])
+        .filter((entry) => entry.channel !== 'preview')
+        .slice(0, 60)
+        .map((entry) => ({
+        version: entry.version,
+        channel: entry.channel,
+        publishedAt: entry.publishedAt,
+        installed: installedIds.has(entry.version),
+    }));
+}
+//# sourceMappingURL=service.js.map

package/dist/self-update/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/self-update/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAWpD,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAyC,MAAM,aAAa,CAAC;AAC5J,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,OAAO,GAAG,GAAG,CAAC;AA2BpB,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAQC,IAAI;IAPxB,WAAW,CAAc;IACjB,QAAQ,CAAgB;IACxB,IAAI,CAAO;IACX,GAAG,CAAoB;IAChC,GAAG,GAAyB,IAAI,CAAC;IACxB,KAAK,CAAiB;IAEvC,YAA6B,IAAoB;oBAApB,IAAI;QAC/B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpJ,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,aAAa;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC;QACtD,MAAM,IAAI,GAAG,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAsB;QACrC,MAAM,yBAAyB,CAAC,CAAC,MAAM,EAAE,EAAE;YACzC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;QACjC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED;mEAC+D;IAC/D,KAAK,CAAC,eAAe,CAAC,OAAO,GAAG,KAAK;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,yFAAyF;QACzF,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,OAAO,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAED;;iGAE6F;IAC7F,KAAK,CAAC,MAAM,CAAC,IAAI,GAAkD,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAC9H,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAC1E,aAAa;YACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,OAAO;YACP,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;YAC3D,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3B,eAAe,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC7E,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/D,SAAS,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED;uGACmG;IAC3F,KAAK,CAAC,cAAc,CAAC,OAA4B;QACvD,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxG,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACrC,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;8BAE0B;IAClB,OAAO,CAAC,IAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;aAC1H,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAClF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK;aACnC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,OAAO;YACL,GAAG,IAAI,CAAC,GAAG;YACX,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,IAAI,GAA0B,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,KAAK,CAAC;QAC9C,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;SAC7D,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7G,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,WAAW,IAAI,IAAI,CAAC;QACvH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO;YACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACtC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI;aAC5C,CAAC,CAAC;YACH,KAAK,EAAE;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC9B,MAAM,OAAO,GAAG,GAAG,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC;oBAC3D,OAAO;wBACL,GAAG,IAAI;wBACP,OAAO;wBACP,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;wBAClD,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK;qBACvD,CAAC;gBACJ,CAAC,CAAC;aACH;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,MAAM,MAAM,GAAG,kCAAkC,eAAe,EAAE,CAAC,OAAO,cAAc,CAAC;QACzF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,8CAA8C,MAAM,kCAAkC,OAAO,KAAK,MAAM,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,WAAW,IAAI,IAAI,CAAC;QACvH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC1B,OAAO,QAAQ,IAAI,SAAS;gBAC1B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,8CAA8C,MAAM,qCAAqC,OAAO,KAAK,MAAM,EAAE,CAAC;QACpH,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClF,OAAO,8CAA8C,MAAM,+EAA+E,MAAM,EAAE,CAAC;QACrJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,qBAAqB,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;QACzE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC;YACtD,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC;YAChH,OAAO,+FAA+F,eAAe,EAAE,CAAC,OAAO,cAAc,CAAC;QAChJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,WAAW,CAAC,OAAO,CAAC,kCAAkC,EAAE,CAAC;QAChI,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,KAAK,SAAS;gBACZ,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YACjC,KAAK,KAAK;gBACR,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,MAAM,EAAE,QAAQ,WAAW,CAAC,OAAO,CAAC,sGAAsG;iBAC3I,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,MAAM,EAAE,QAAQ,WAAW,CAAC,OAAO,CAAC,oGAAoG;iBACzI,CAAC;YACJ,KAAK,UAAU;gBACb,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,WAAW,CAAC,OAAO,CAAC,6DAA6D,EAAE,CAAC;YACrI;gBACE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,uCAAuC,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAc,EAAE,IAAI,GAA+B,EAAE;QACzD,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,YAAY;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzG,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACpD,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,+CAA+C,CAAC,CAAC;QAC/F,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAClE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QACzH,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE;YAC3B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;QAC5E,CAAC,CAAC;QACF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAChF,sFAAsF;gBACtF,MAAM,MAAM,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5H,MAAM,EAAE,GAAG,MAAM,IAAI,SAAS,EAAE,EAAE,IAAI,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzJ,IAAI,SAAS,IAAI,CAAC,MAAM;oBAAE,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC5D,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5D,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC;gBAC1B,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1C,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnB,0FAA0F;gBAC1F,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACtB,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1C,GAAG,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,GAAG,CAAC,WAAW,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;wGAGoG;IAC5F,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,GAA2B;QACtE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACrG,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACtC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,GAAG,CAAC,WAAW,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5D,OAAO,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAClG,CAAC;IAED;qEACiE;IACjE,KAAK,CAAC,WAAW,CAAC,KAA6B;QAC7C,8EAA8E;QAC9E,iFAAiF;QACjF,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO;YAAE,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7I,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAqB,EAAE,IAAa;IACzD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED;2DAC2D;AAC3D,SAAS,iBAAiB,CAAC,GAA2B,EAAE,YAAiC;IACvF,OAAO,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;SAC9C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/self-update/supervisor.d.ts

@@ -0,0 +1,10 @@
+/** A desktop child follows its supervisor down, without confusing EPERM with death. */
+export declare function supervisorGone(pid: number, initialPpid: number, ppid: number, probe?: (pid: number, signal?: string | number) => true): boolean;
+/**
+ * Follow the desktop shell. Two stop paths, each calling `shutdown` at most once between them:
+ * the supervisor pid going away (a force-quit shell), and, when the shell opts in with
+ * `CEZ_SUPERVISOR_STDIN=1`, the end of stdin, which is how the shell asks for a graceful stop on
+ * quit or before a version switch. A pipe closes the same way on Windows, where no POSIX signal
+ * reaches us. Without the opt-in, an older shell's `/dev/null` stdin must not read as a stop.
+ */
+export declare function watchSupervisor(shutdown: () => void, env?: NodeJS.ProcessEnv, stdin?: NodeJS.ReadableStream): () => void;

package/dist/self-update/supervisor.js

@@ -0,0 +1,52 @@
+import { shellProductEnv } from '../core/product-env.js';
+/** A desktop child follows its supervisor down, without confusing EPERM with death. */
+export function supervisorGone(pid, initialPpid, ppid, probe = process.kill) {
+    if (initialPpid > 1 && ppid !== initialPpid)
+        return true;
+    try {
+        probe(pid, 0);
+        return false;
+    }
+    catch (error) {
+        return error.code === 'ESRCH';
+    }
+}
+/**
+ * Follow the desktop shell. Two stop paths, each calling `shutdown` at most once between them:
+ * the supervisor pid going away (a force-quit shell), and, when the shell opts in with
+ * `CEZ_SUPERVISOR_STDIN=1`, the end of stdin, which is how the shell asks for a graceful stop on
+ * quit or before a version switch. A pipe closes the same way on Windows, where no POSIX signal
+ * reaches us. Without the opt-in, an older shell's `/dev/null` stdin must not read as a stop.
+ */
+export function watchSupervisor(shutdown, env = process.env, stdin = process.stdin) {
+    if (shellProductEnv('DESKTOP', env) !== '1')
+        return () => { };
+    let stopped = false;
+    const stop = () => {
+        if (stopped)
+            return;
+        stopped = true;
+        cancel();
+        shutdown();
+    };
+    const cancels = [];
+    const cancel = () => { for (const fn of cancels.splice(0))
+        fn(); };
+    if (shellProductEnv('SUPERVISOR_STDIN', env) === '1') {
+        stdin.once('end', stop).once('close', stop).once('error', stop);
+        stdin.resume();
+        cancels.push(() => { stdin.off('end', stop).off('close', stop).off('error', stop); });
+    }
+    const pid = Number(shellProductEnv('SUPERVISOR_PID', env));
+    if (Number.isInteger(pid) && pid > 1) {
+        const initialPpid = process.ppid;
+        const timer = setInterval(() => {
+            if (supervisorGone(pid, initialPpid, process.ppid))
+                stop();
+        }, 2_000);
+        timer.unref();
+        cancels.push(() => clearInterval(timer));
+    }
+    return cancel;
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/self-update/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/self-update/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,WAAmB,EAAE,IAAY,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI;IACjG,IAAI,WAAW,GAAG,CAAC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACpC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC7E,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAoB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,GAA0B,OAAO,CAAC,KAAK;IACnH,IAAI,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,GAAG;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,EAAE,CAAC;QACT,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC;IACF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;gBAAE,IAAI,EAAE,CAAC;QAC7D,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/serve-boot.d.ts

@@ -0,0 +1,60 @@
+import type { detectEnvironment } from './core/backend-detect.ts';
+import type { DelegationController } from './delegation/provision.ts';
+import type { startServer } from './server/server.ts';
+import { recoverWithProviderRuntimeAuthObservation, type ProviderRuntimeAuthObserver } from './server/provider-auth-runtime.ts';
+import type { Home } from './home/home.ts';
+import { readNpmConfiguration } from './application-update/npm-process.ts';
+import { ApplicationUpdateService } from './application-update/service.ts';
+import { SelfUpdateService } from './self-update/service.ts';
+import { type RestartOptions } from './self-update/restart.ts';
+import { pruneOrphans } from './git-worktree.ts';
+import { resolveWorktreeRetention } from './config.ts';
+import { reclaimWorktrees } from './runs/retention.ts';
+import { sweepMergedBranches } from './server/repo-branch-sweep.ts';
+import type { RunStore } from './runs/store.ts';
+import type { RunManager } from './workflows/run.ts';
+import type { PreviewHost } from './preview/host.ts';
+import type { getRepoInfo } from './server/git.ts';
+export declare function reconcileServeWorktrees(repoRoot: string, repo: Awaited<ReturnType<typeof getRepoInfo>>, store: RunStore, manager: RunManager, previewHost: PreviewHost | undefined, steps: {
+    pruneOrphans: typeof pruneOrphans;
+    resolveWorktreeRetention: typeof resolveWorktreeRetention;
+    reclaimWorktrees: typeof reclaimWorktrees;
+    sweepMergedBranches: typeof sweepMergedBranches;
+    log: (line: string) => void;
+} | undefined, home: Home): Promise<void>;
+export declare function recoverServeProject(store: RunStore, manager: RunManager, providerRuntimeAuth: ProviderRuntimeAuthObserver, delegation: DelegationController, bootProjectId?: string, recover?: typeof recoverWithProviderRuntimeAuthObservation): Promise<void>;
+export declare function warnServeBind(bindHost: string | undefined, port: number): void;
+export declare function createServeApplicationUpdate(repoRoot: string, update: {
+    latest?: string;
+}, getServer: () => ReturnType<typeof startServer>, readNpm: typeof readNpmConfiguration | undefined, store: Pick<RunStore, 'close'> | undefined, home: Home): ApplicationUpdateService | undefined;
+type StoppableServer = Pick<ReturnType<typeof startServer>, 'shutdownForRestart'>;
+/** How long a stop waits for the server's own shutdown. A socket the listener still holds, or a
+ *  step that hangs, must not keep this process, its store or its agents alive. */
+export declare const STOP_SERVE_BOUND_MS = 5000;
+export interface StopServeOptions {
+    /** The boot store: closed here when the server's shutdown failed or did not finish in time. */
+    store?: Pick<RunStore, 'close'> | undefined;
+    boundMs?: number;
+    forward?: (signal: NodeJS.Signals) => void;
+}
+/**
+ * The one teardown every exit from `serve` runs: a signal, the desktop shell closing stdin, and
+ * both updaters' restarts. The server's own shutdown stops dev servers, delegation, the listener
+ * and the store, waited for at most `boundMs`. Whatever happened there, the store is closed and
+ * the signal goes to every agent session group: agents lead their own process groups
+ * (hearsay-tools/cezarion#890), so nothing above reaches them. The signal goes last: with the store
+ * closed, an agent it ends cannot settle its run, and the next process's recovery resumes it.
+ */
+export declare function stopServe(server: StoppableServer, signal?: NodeJS.Signals, opts?: StopServeOptions): Promise<void>;
+/** Stop this serve (`stopServe`), then re-exec it on the same port or exit 75 to its supervisor. */
+export declare function restartServe(server: StoppableServer & Pick<ReturnType<typeof startServer>, 'address'>, restart: ((opts: RestartOptions) => void) | undefined, opts: StopServeOptions | undefined, home: Home): Promise<void>;
+/** The managed desktop updater; a restart re-execs this serve on the same port. */
+export declare function createServeSelfUpdate(opts: {
+    pkgName: string;
+    version: string;
+    store: RunStore;
+    bindHost: string | undefined;
+    home: Home;
+}, getServer: () => ReturnType<typeof startServer>): SelfUpdateService;
+export declare function printServeBanner(version: string, repoRoot: string, repo: Awaited<ReturnType<typeof getRepoInfo>>, checks: Awaited<ReturnType<typeof detectEnvironment>>, url: string): void;
+export {};

package/dist/serve-boot.js

@@ -0,0 +1,142 @@
+import { productName } from './home/display.js';
+import { productEnv } from './core/product-env.js';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { recoverWithProviderRuntimeAuthObservation } from './server/provider-auth-runtime.js';
+import { currentEntry } from './self-update/layout.js';
+import { readNpmConfiguration } from './application-update/npm-process.js';
+import { restartEndpoint } from './application-update/helper.js';
+import { armRestartHelper } from './application-update/launcher.js';
+import { ApplicationUpdateService } from './application-update/service.js';
+import { SelfUpdateService } from './self-update/service.js';
+import { isSupervised, restartProcess } from './self-update/restart.js';
+import { forwardToSessionGroups } from './core/session-process.js';
+import { resolveCapabilities } from './server/capabilities.js';
+import { pruneOrphans } from './git-worktree.js';
+import { DEFAULT_WORKTREE_RETENTION, resolveWorktreeRetention } from './config.js';
+import { reclaimWorktrees } from './runs/retention.js';
+import { sweepMergedBranches } from './server/repo-branch-sweep.js';
+const reconcileDefaults = { pruneOrphans, resolveWorktreeRetention, reclaimWorktrees, sweepMergedBranches, log: (line) => console.log(line) };
+export async function reconcileServeWorktrees(repoRoot, repo, store, manager, previewHost, steps = reconcileDefaults, home) {
+    // Startup reconcile (spec 006): sweep worktrees whose run no longer exists. Never over a store
+    // that could not open (#779): its runs are unknown, and every worktree would look orphaned.
+    if (repo && !store.unavailable) {
+        const orphans = await steps.pruneOrphans(repoRoot, new Set(store.listRunIds())).catch(() => []);
+        if (orphans.length > 0) {
+            steps.log(`  cleaned ${orphans.length} orphaned worktree(s): ${orphans.map((id) => id.slice(0, 8)).join(', ')}`);
+        }
+        // Count-based worktree retention (#483): reclaim finished worktrees beyond
+        // the keep-limit (directory only — `cez/<id8>` branch kept, so recoverable).
+        // Best-effort; never blocks boot.
+        const keep = await steps.resolveWorktreeRetention(repoRoot, home).catch(() => DEFAULT_WORKTREE_RETENTION);
+        const reclaimed = await steps.reclaimWorktrees(repoRoot, store, keep, { previewHost }).catch(() => []);
+        if (reclaimed.length > 0) {
+            steps.log(`  reclaimed ${reclaimed.length} old worktree(s), branch kept: ${reclaimed.map((id) => id.slice(0, 8)).join(', ')}`);
+        }
+        // Branches whose work landed (hearsay-tools/cezarion#2268). In the background: it may ask
+        // GitHub, and boot never waits on the network.
+        void steps.sweepMergedBranches({ root: repoRoot, store, manager, home }, { keep });
+    }
+}
+export async function recoverServeProject(store, manager, providerRuntimeAuth, delegation, bootProjectId, recover = recoverWithProviderRuntimeAuthObservation) {
+    const recovered = store
+        .listRuns()
+        .filter((r) => ['queued', 'waiting', 'running'].includes(r.status)).length;
+    if (!store.unavailable) {
+        await recover(store, () => manager.recover(), providerRuntimeAuth);
+        // Boot project never enters ProjectContexts.build(); same sweep that path runs after recover.
+        store.compressArchivedHistory();
+        delegation.service.armDestroyRetries(bootProjectId ?? 'default');
+    }
+    if (recovered > 0)
+        console.log(`  recovered ${recovered} run(s) from the previous session`);
+}
+export function warnServeBind(bindHost, port) {
+    // SECURITY: cezar executes agents. A non-loopback bind exposes that box to
+    // whatever can reach the interface, and cezar itself has NO auth — it is only
+    // for a deliberate hosted setup where a reverse proxy in front provides TLS +
+    // auth (see `server-install --external-proxy`). Say so, loudly, every start.
+    if (bindHost && !['127.0.0.1', 'localhost', '::1'].includes(bindHost)) {
+        console.log(`\n  ⚠ binding ${bindHost}:${port} — ${productName('cezar')} has no built-in auth.\n` +
+            `    Only do this behind a reverse proxy that enforces authentication,\n` +
+            `    and make sure this interface is not reachable from the internet.\n`);
+    }
+}
+export function createServeApplicationUpdate(repoRoot, update, getServer, readNpm = readNpmConfiguration, store, home) {
+    // Discovery reads npm metadata only; a missing npm or source checkout degrades to manual update.
+    const npm = readNpm();
+    const npmPrefix = npm?.prefix;
+    const npmCache = npm?.cache;
+    return (npmPrefix && npmCache) || productEnv('DRY_RUN') === '1'
+        ? new ApplicationUpdateService({
+            packageRoot: join(dirname(fileURLToPath(import.meta.url)), '..'),
+            launchEntry: resolve(process.argv[1] ?? ''),
+            npmPrefix: npmPrefix ?? home.dryPrefix,
+            npmCache: npmCache ?? home.dryCache, npmBin: npm?.npmBin, home: home.root, targetVersion: () => update.latest,
+            dryRun: productEnv('DRY_RUN') === '1',
+            armRestart: (plan) => armRestartHelper(plan, { repoRoot, ...restartEndpoint(getServer().address()), npmBin: npm?.npmBin ?? 'npm' }),
+            handoff: () => { void stopServe(getServer(), 'SIGTERM', { store }).then(() => process.exit(0)); },
+        }) : undefined;
+}
+/** How long a stop waits for the server's own shutdown. A socket the listener still holds, or a
+ *  step that hangs, must not keep this process, its store or its agents alive. */
+export const STOP_SERVE_BOUND_MS = 5_000;
+/**
+ * The one teardown every exit from `serve` runs: a signal, the desktop shell closing stdin, and
+ * both updaters' restarts. The server's own shutdown stops dev servers, delegation, the listener
+ * and the store, waited for at most `boundMs`. Whatever happened there, the store is closed and
+ * the signal goes to every agent session group: agents lead their own process groups
+ * (hearsay-tools/cezarion#890), so nothing above reaches them. The signal goes last: with the store
+ * closed, an agent it ends cannot settle its run, and the next process's recovery resumes it.
+ */
+export async function stopServe(server, signal = 'SIGTERM', opts = {}) {
+    const { store, boundMs = STOP_SERVE_BOUND_MS, forward = forwardToSessionGroups } = opts;
+    let finished = false;
+    const shutdown = Promise.resolve().then(() => server.shutdownForRestart()).then(() => { finished = true; });
+    let timer;
+    // Not unref'd: the bound is what ends this wait when nothing else keeps the process alive.
+    const bound = new Promise((resolve) => { timer = setTimeout(resolve, boundMs); });
+    try {
+        await Promise.race([shutdown, bound]);
+    }
+    catch {
+        // A failed step must not skip the rest; the finally block below runs it.
+    }
+    finally {
+        clearTimeout(timer);
+        shutdown.catch(() => undefined);
+        if (!finished) {
+            try {
+                store?.close();
+            }
+            catch { /* the step that failed may have closed it already */ }
+        }
+        forward(signal);
+    }
+}
+/** Stop this serve (`stopServe`), then re-exec it on the same port or exit 75 to its supervisor. */
+export async function restartServe(server, restart = restartProcess, opts = {}, home) {
+    const port = restartEndpoint(server.address()).port;
+    await stopServe(server, 'SIGTERM', opts);
+    restart({ server: null, args: process.argv.slice(2), port, supervised: isSupervised(), entry: currentEntry(process.env, home) });
+}
+/** The managed desktop updater; a restart re-execs this serve on the same port. */
+export function createServeSelfUpdate(opts, getServer) {
+    return new SelfUpdateService({
+        home: opts.home, pkgName: opts.pkgName, version: opts.version, entry: resolve(process.argv[1] ?? ''), supervised: isSupervised(),
+        activeRuns: () => opts.store.listRuns().filter(r => ['queued', 'waiting', 'running'].includes(r.status)).length,
+        trimPaths: () => !resolveCapabilities(process.env, opts.bindHost).localHandoff,
+        restart: () => { void restartServe(getServer(), restartProcess, { store: opts.store }, opts.home); },
+    });
+}
+export function printServeBanner(version, repoRoot, repo, checks, url) {
+    console.log(`\n  ${productName('cezar')} v${version} — ${repoRoot}`);
+    console.log(`  ${repo ? `branch ${repo.branch}` : 'not a git repository (tasks run in place, one at a time; repo view is empty)'}`);
+    for (const check of checks) {
+        const mark = check.available ? '✓' : '✗';
+        const detail = check.available ? (check.version ?? 'ok') : (check.hint ?? 'missing');
+        console.log(`  ${mark} ${check.name.padEnd(6)} ${detail}`);
+    }
+    console.log(`\n  cockpit → ${url}\n`);
+}
+//# sourceMappingURL=serve-boot.js.map