@omnitron-dev/omnitron 0.3.1 → 0.3.3

package/dist/daemon/backend-recovery-journal.d.ts

@@ -0,0 +1,30 @@
+import type { ControllerGrant } from '@omnitron-dev/titan-pm';
+import type { BackendBootRecord, BackendHandoffState } from './backend-handoff-types.js';
+export interface BackendRecoveryRecord extends Omit<BackendBootRecord, 'state'> {
+    state: Omit<BackendHandoffState, 'ticket'>;
+    controller: ControllerGrant;
+    runtimeHash: string;
+    registryDigest: string;
+}
+export type BackendRecoveryState = {
+    status: 'invalid';
+    reason: string;
+    at: string;
+    previous?: BackendRecoveryRecord;
+} | {
+    status: 'ready';
+    record: BackendRecoveryRecord;
+    at: string;
+};
+/** Small, private FULL-synchronous journal, using the daemon's SQLite store. */
+export declare class BackendRecoveryJournal {
+    readonly directory: string;
+    private readonly store;
+    private invalid;
+    constructor(directory: string);
+    invalidate(reason: string): void;
+    publish(record: BackendRecoveryRecord): void;
+    read(): BackendRecoveryState | null;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=backend-recovery-journal.d.ts.map

package/dist/daemon/backend-recovery-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-recovery-journal.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-recovery-journal.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGzF,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC7E,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC3C,UAAU,EAAE,eAAe,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAA;CAAE,GACnF;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,gFAAgF;AAChF,qBAAa,sBAAsB;IAGrB,QAAQ,CAAC,SAAS,EAAE,MAAM;IAFtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,OAAO,CAAS;IACxB,YAAqB,SAAS,EAAE,MAAM,EAcrC;IAED,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAO/B;IAED,OAAO,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAG3C;IAED,IAAI,IAAI,oBAAoB,GAAG,IAAI,CAelC;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAgC;CAC7D"}

package/dist/daemon/backend-recovery-journal.js

@@ -0,0 +1,67 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createNullLogger } from '@omnitron-dev/titan/module/logger';
+import { DaemonStateStore } from './daemon-state-store.service.js';
+/** Small, private FULL-synchronous journal, using the daemon's SQLite store. */
+export class BackendRecoveryJournal {
+    directory;
+    store;
+    invalid = false;
+    constructor(directory) {
+        this.directory = directory;
+        const stat = fs.lstatSync(directory);
+        if (!stat.isDirectory() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0 ||
+            (process.getuid && stat.uid !== process.getuid()))
+            throw new Error('Recovery directory must be private and owned by this user');
+        const file = path.join(directory, 'recovery.db');
+        for (const suffix of ['', '-wal', '-shm', '-journal']) {
+            try {
+                const entry = fs.lstatSync(file + suffix);
+                if (!entry.isFile() || entry.isSymbolicLink() || (entry.mode & 0o077) !== 0 ||
+                    (process.getuid && entry.uid !== process.getuid()))
+                    throw new Error('Recovery state must be a private regular file');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        this.store = new DaemonStateStore(createNullLogger(), file);
+        this.store.initSync().pragma('synchronous = FULL');
+    }
+    invalidate(reason) {
+        // One durable invalidation suffices until another snapshot is published.
+        if (this.invalid)
+            return;
+        const prior = this.read();
+        const previous = prior?.status === 'ready' ? prior.record : prior?.previous;
+        this.store.kvSetSync('backend.recovery', { status: 'invalid', reason, at: new Date().toISOString(), ...(previous && { previous }) });
+        this.invalid = true;
+    }
+    publish(record) {
+        this.store.kvSetSync('backend.recovery', { status: 'ready', record, at: new Date().toISOString() });
+        this.invalid = false;
+    }
+    read() {
+        const row = this.store.initSync().prepare('SELECT value FROM state_kv WHERE key = ?').get('backend.recovery');
+        if (!row)
+            return null;
+        const state = JSON.parse(row.value);
+        if (!Number.isFinite(Date.parse(state.at)))
+            throw new Error('Invalid recovery journal timestamp');
+        if (state.status === 'invalid' && typeof state.reason === 'string')
+            return state;
+        if (state.status !== 'ready' || state.record?.protocol !== 1 || state.record.state?.protocol !== 1 ||
+            !/^[a-f0-9]{64}$/.test(state.record.runtimeHash) || !/^[a-f0-9]{64}$/.test(state.record.registryDigest) ||
+            !/^[a-f0-9]{64}$/.test(state.record.state.executionInventory) || !state.record.controller?.ownerId ||
+            !state.record.controller.controllerId || !Number.isSafeInteger(state.record.controller.epoch) || state.record.controller.epoch < 1 ||
+            !Number.isSafeInteger(state.record.previousPid) || state.record.previousPid < 1 ||
+            !path.isAbsolute(state.record.previousEntry) || !path.isAbsolute(state.record.cwd) ||
+            !state.record.daemonConfig?.executionHost?.enabled || !state.record.environment ||
+            Object.values(state.record.environment).some(value => typeof value !== 'string'))
+            throw new Error('Invalid backend recovery journal');
+        return state;
+    }
+    async close() { await this.store.dispose(); }
+}
+//# sourceMappingURL=backend-recovery-journal.js.map

package/dist/daemon/backend-recovery-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-recovery-journal.js","sourceRoot":"","sources":["../../src/daemon/backend-recovery-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAanE,gFAAgF;AAChF,MAAM,OAAO,sBAAsB;IAGZ,SAAS;IAFb,KAAK,CAAmB;IACjC,OAAO,GAAG,KAAK,CAAC;IACxB,YAAqB,SAAiB;yBAAjB,SAAS;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YACzE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACpI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACjD,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;oBACvE,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC3H,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACrI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,MAA6B;QACnC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAkC,CAAC;QAC/I,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAyB,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClG,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,CAAC;YAC9F,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;YACvG,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO;YAClG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;YAClI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC;YAC/E,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YAClF,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW;YAC/E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC1I,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,KAAoB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;CAC7D"}

package/dist/daemon/backend-recovery-monitor.d.ts

@@ -0,0 +1,35 @@
+import type { BackendArtifact } from './backend-candidate.js';
+import type { ExecutionClient } from './execution-client.js';
+import type { IEcosystemConfig, IDaemonConfig } from '../config/types.js';
+import type { ProjectService } from '../services/project.service.js';
+import type { InfrastructureService } from '../infrastructure/infrastructure.service.js';
+/** Certify quiet controller state without draining public ingress or Docker. */
+export declare class BackendRecoveryMonitor {
+    private readonly artifact;
+    private readonly config;
+    private readonly execution;
+    private readonly snapshot;
+    private readonly journal;
+    private readonly detach;
+    private readonly startedAt;
+    private timer;
+    private busyRetry;
+    private capturing;
+    private closed;
+    private lastRecord;
+    private state;
+    constructor(directory: string, artifact: BackendArtifact, config: IDaemonConfig, execution: ExecutionClient, snapshot: () => {
+        watchConfig: IEcosystemConfig;
+        projects: ProjectService;
+        infrastructure: InfrastructureService | null;
+    });
+    status(): {
+        status: 'pending' | 'ready' | 'unavailable';
+        at: string | null;
+        reason: string | null;
+    };
+    start(): Promise<void>;
+    capture(retryBusy?: boolean): Promise<void>;
+    close(invalidate: boolean): Promise<void>;
+}
+//# sourceMappingURL=backend-recovery-monitor.d.ts.map

package/dist/daemon/backend-recovery-monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-recovery-monitor.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-recovery-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AAIzF,gFAAgF;AAChF,qBAAa,sBAAsB;IAaF,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAiB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAd3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,KAAK,CAEX;IAEF,YAAY,SAAS,EAAE,MAAM,EAAmB,QAAQ,EAAE,eAAe,EACtD,MAAM,EAAE,aAAa,EAAmB,SAAS,EAAE,eAAe,EAClE,QAAQ,EAAE,MAAM;QAAE,WAAW,EAAE,gBAAgB,CAAC;QAAC,QAAQ,EAAE,cAAc,CAAC;QAAC,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAA;KAAE,EAQ3I;IAED,MAAM;gBAhBmB,SAAS,GAAG,OAAO,GAAG,aAAa;YAAM,MAAM,GAAG,IAAI;gBAAU,MAAM,GAAG,IAAI;MAgBhE;IAEhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3B;IAEK,OAAO,CAAC,SAAS,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD7C;IAEK,KAAK,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9C;CACF"}

package/dist/daemon/backend-recovery-monitor.js

@@ -0,0 +1,113 @@
+import { BackendRecoveryJournal } from './backend-recovery-journal.js';
+import { recoveryState, RecoveryBusyError } from './recovery-state.js';
+import { runtimeDiagnostics } from '../monitoring/runtime-diagnostics.js';
+import { OMNITRON_HOME } from '../config/defaults.js';
+/** Certify quiet controller state without draining public ingress or Docker. */
+export class BackendRecoveryMonitor {
+    artifact;
+    config;
+    execution;
+    snapshot;
+    journal;
+    detach;
+    startedAt = new Date().toISOString();
+    timer = null;
+    busyRetry = null;
+    capturing = false;
+    closed = false;
+    lastRecord = null;
+    state = {
+        status: 'pending', at: null, reason: 'Waiting for a stable ownership snapshot',
+    };
+    constructor(directory, artifact, config, execution, snapshot) {
+        this.artifact = artifact;
+        this.config = config;
+        this.execution = execution;
+        this.snapshot = snapshot;
+        this.journal = new BackendRecoveryJournal(directory);
+        this.detach = recoveryState.attach(reason => {
+            this.journal.invalidate(reason);
+            this.lastRecord = null;
+            this.state = { ...this.state, status: 'pending', reason: `Ownership mutation: ${reason}` };
+        });
+    }
+    status() { return { ...this.state }; }
+    async start() {
+        await this.capture();
+        if (this.closed)
+            return;
+        this.timer = setInterval(() => { void this.capture(); }, 5000);
+        this.timer.unref();
+    }
+    async capture(retryBusy = true) {
+        if (this.closed || this.capturing)
+            return;
+        const token = recoveryState.token();
+        if (token === null)
+            return;
+        this.capturing = true;
+        try {
+            const owner = await this.execution.recoverySnapshot();
+            if (owner.status.phase !== 'active' || owner.status.inFlight !== 0)
+                throw new RecoveryBusyError('Execution mutations have not settled');
+            const source = this.snapshot();
+            const record = {
+                protocol: 1, state: { protocol: 1, watchConfig: structuredClone(source.watchConfig),
+                    projects: source.projects.captureRecoveryState(), infrastructure: source.infrastructure?.captureRecoveryState() ?? null,
+                    executionInventory: owner.inventoryDigest },
+                controller: owner.status.controller, runtimeHash: this.artifact.runtimeHash,
+                registryDigest: source.projects.recoveryRegistryDigest(),
+                daemonConfig: this.config, previousEntry: this.artifact.entry, previousPid: process.pid,
+                createdAt: this.startedAt, cwd: process.cwd(),
+                environment: { ...Object.fromEntries(Object.entries(process.env).filter((entry) => entry[1] !== undefined)), OMNITRON_HOME },
+            };
+            if (this.closed || !recoveryState.unchanged(token))
+                return;
+            const serialized = JSON.stringify(record);
+            if (serialized !== this.lastRecord) {
+                this.journal.publish(record);
+                this.lastRecord = serialized;
+            }
+            this.state = { status: 'ready', at: new Date().toISOString(), reason: null };
+            runtimeDiagnostics.resolve('execution.recovery-checkpoint');
+        }
+        catch (error) {
+            if (!this.closed) {
+                this.state = { ...this.state, status: error instanceof RecoveryBusyError ? 'pending' : 'unavailable', reason: error instanceof Error ? error.message : String(error) };
+                if (error instanceof RecoveryBusyError) {
+                    // Sampling drains and this monitor can share a five-second period.
+                    // One offset retry avoids repeatedly observing the same brief mutation,
+                    // without polling a genuinely busy owner continuously or relaxing its fence.
+                    if (retryBusy && !this.busyRetry) {
+                        this.busyRetry = setTimeout(() => {
+                            this.busyRetry = null;
+                            void this.capture(false);
+                        }, 250);
+                        this.busyRetry.unref();
+                    }
+                    return;
+                }
+                runtimeDiagnostics.record({ id: 'execution.recovery-checkpoint', severity: 'warning',
+                    title: 'A current automatic backend recovery checkpoint is unavailable', evidence: [this.state.reason],
+                    remedy: 'Inspect ownership operations and the private recovery journal. Applications remain with their execution owner.' });
+            }
+        }
+        finally {
+            this.capturing = false;
+        }
+    }
+    async close(invalidate) {
+        this.closed = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        if (this.busyRetry)
+            clearTimeout(this.busyRetry);
+        this.busyRetry = null;
+        if (invalidate)
+            this.journal.invalidate('Explicit application shutdown or backend replacement');
+        this.detach();
+        await this.journal.close();
+    }
+}
+//# sourceMappingURL=backend-recovery-monitor.js.map

package/dist/daemon/backend-recovery-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-recovery-monitor.js","sourceRoot":"","sources":["../../src/daemon/backend-recovery-monitor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAA8B,MAAM,+BAA+B,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,gFAAgF;AAChF,MAAM,OAAO,sBAAsB;IAae,QAAQ;IACrC,MAAM;IAAkC,SAAS;IACjD,QAAQ;IAdV,OAAO,CAAyB;IAChC,MAAM,CAAa;IACnB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,KAAK,GAA0B,IAAI,CAAC;IACpC,SAAS,GAA0B,IAAI,CAAC;IACxC,SAAS,GAAG,KAAK,CAAC;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,UAAU,GAAkB,IAAI,CAAC;IACjC,KAAK,GAA8F;QACzG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC;KAC/E,CAAC;IAEF,YAAY,SAAiB,EAAmB,QAAyB,EACtD,MAAqB,EAAmB,SAA0B,EAClE,QAAyH;wBAF5F,QAAQ;sBACrC,MAAM;yBAAkC,SAAS;wBACjD,QAAQ;QAEzB,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,MAAM,EAAE,EAAE,CAAC;QAC7F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEtC,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI;QAC5B,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAC;YACxI,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAA0B;gBACpC,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC;oBACjF,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,oBAAoB,EAAE,IAAI,IAAI;oBACvH,kBAAkB,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC7C,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBAC3E,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE;gBACxD,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG;gBACvF,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC7C,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,aAAa,EAAE;aACxJ,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC7E,kBAAkB,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvK,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBACvC,mEAAmE;oBACnE,wEAAwE;oBACxE,6EAA6E;oBAC7E,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;wBACjC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;4BAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;4BACtB,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC3B,CAAC,EAAE,GAAG,CAAC,CAAC;wBACR,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACzB,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,+BAA+B,EAAE,QAAQ,EAAE,SAAS;oBAClF,KAAK,EAAE,gEAAgE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAO,CAAC;oBACvG,MAAM,EAAE,gHAAgH,EAAE,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,UAAU;YAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,sDAAsD,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/daemon/backend-supervisor-entry.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backend-supervisor-entry.d.ts.map

package/dist/daemon/backend-supervisor-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-supervisor-entry.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-supervisor-entry.ts"],"names":[],"mappings":""}

package/dist/daemon/backend-supervisor-entry.js

@@ -0,0 +1,3 @@
+import { guardEntry } from './entry-guard.js';
+await guardEntry('backend-supervisor', () => import('./backend-supervisor-main.js'));
+//# sourceMappingURL=backend-supervisor-entry.js.map

package/dist/daemon/backend-supervisor-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-supervisor-entry.js","sourceRoot":"","sources":["../../src/daemon/backend-supervisor-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,UAAU,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC"}

package/dist/daemon/backend-supervisor-main.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backend-supervisor-main.d.ts.map

package/dist/daemon/backend-supervisor-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-supervisor-main.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-supervisor-main.ts"],"names":[],"mappings":""}

package/dist/daemon/backend-supervisor-main.js

@@ -0,0 +1,45 @@
+import { Netron } from '@omnitron-dev/titan/netron';
+import { UnixSocketTransport } from '@omnitron-dev/titan/netron/transport/unix';
+import { AuthenticationManager, AuthorizationManager } from '@omnitron-dev/titan/netron/auth';
+import { LoggerService } from '@omnitron-dev/titan/module/logger';
+import { ADMIN_ROLES } from '../shared/roles.js';
+import { readManagedRuntime, managedSupervisorSocket, managedJobPid } from './managed-runtime.js';
+import { BackendSupervisorService } from './backend-supervisor.js';
+const config = await readManagedRuntime();
+if (!config)
+    throw new Error('Independent supervision has not been configured');
+if (await managedJobPid(config, 'backend') !== process.pid)
+    throw new Error('Only the configured OS service may own the supervisor socket');
+Object.assign(process.env, config.environment);
+const logger = new LoggerService({ level: 'info' }).child({ component: 'backend-supervisor' });
+const netron = new Netron(logger, { id: `supervisor-${process.pid}` });
+netron.registerTransport('unix', () => new UnixSocketTransport());
+netron.registerTransportServer('unix', { name: 'backend-supervisor', options: { path: managedSupervisorSocket(config), mode: 0o600, force: true, requestTimeout: 600_000 } });
+netron.configureAuth(new AuthenticationManager(logger, {
+    authenticate: async () => { throw new Error('Supervisor control requires the private local socket'); },
+    validateToken: async () => { throw new Error('Supervisor control does not accept bearer tokens'); },
+    tokenCache: { enabled: false },
+}), new AuthorizationManager(logger));
+netron.setTransportAuthContext('unix', { userId: 'supervisor-local', roles: [...ADMIN_ROLES], permissions: [] });
+const service = new BackendSupervisorService(config, code => { void netron.stop().finally(() => process.exit(code)); });
+await netron.peer.exposeService(service);
+await netron.start();
+let stopping = false;
+async function stop() {
+    if (stopping)
+        return;
+    stopping = true;
+    try {
+        await service.stop();
+        await netron.stop();
+        process.exit(0);
+    }
+    catch (error) {
+        logger.error({ error }, 'Backend supervisor shutdown failed');
+        process.exit(1);
+    }
+}
+process.on('SIGTERM', () => { void stop(); });
+process.on('SIGINT', () => { void stop(); });
+await service.start();
+//# sourceMappingURL=backend-supervisor-main.js.map

package/dist/daemon/backend-supervisor-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-supervisor-main.js","sourceRoot":"","sources":["../../src/daemon/backend-supervisor-main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;AAC1C,IAAI,CAAC,MAAM;IAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AAChF,IAAI,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,OAAO,CAAC,GAAG;IAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;AAC5I,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAC/F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,cAAc,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACvE,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;AAClE,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9K,MAAM,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC,MAAM,EAAE;IACrD,YAAY,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC,CAAC;IACtG,aAAa,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC,CAAC;IACnG,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;CAC/B,CAAC,EAAE,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AACtC,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AACjH,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AACzC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,KAAK,UAAU,IAAI;IACjB,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACnE,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACnG,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/daemon/backend-supervisor.d.ts

@@ -0,0 +1,61 @@
+import { type KernelHandoffFence, type BackendReplacementResult } from './backend-upgrade.js';
+import { type ManagedRuntime } from './managed-runtime.js';
+import type { BackendArtifact } from './backend-candidate.js';
+export interface SupervisorStatus {
+    kernelHandoff?: 1;
+    migrationChecksumMetadata?: 1;
+    operationPending?: boolean;
+    pid: number;
+    backendPid: number | null;
+    ownerPid: number | null;
+    state: 'starting' | 'ready' | 'recovering' | 'blocked' | 'stopping';
+    reason: string | null;
+    persistenceError?: string;
+    at: string;
+}
+/** Owns every backend generation inside the OS service; never owns applications. */
+export declare class BackendSupervisorService {
+    private readonly config;
+    private readonly finish;
+    private busy;
+    private operationClaimed;
+    private inspection;
+    private stopping;
+    private timer;
+    private readonly children;
+    private detach;
+    private readonly daemonConfig;
+    private state;
+    private nextAttempt;
+    private failures;
+    private lastExit;
+    constructor(config: ManagedRuntime, finish: (code: number) => void);
+    private observe;
+    status(): Promise<SupervisorStatus>;
+    upgrade(data: {
+        directory: string;
+        checkOnly?: boolean;
+        schemaPlan?: string;
+    }): Promise<BackendReplacementResult | {
+        checked: true;
+        build: BackendArtifact['build'];
+    }>;
+    upgradeIfCurrent(fence: KernelHandoffFence): Promise<BackendReplacementResult | {
+        checked: true;
+        build: BackendArtifact['build'];
+    }>;
+    private replace;
+    recover(data: {
+        checkpoint?: string;
+    }): Promise<BackendReplacementResult>;
+    private exclusive;
+    private publish;
+    private reportFailure;
+    private isolation;
+    private ready;
+    private coldStart;
+    start(): Promise<void>;
+    private tick;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=backend-supervisor.d.ts.map

package/dist/daemon/backend-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-supervisor.d.ts","sourceRoot":"","sources":["../../src/daemon/backend-supervisor.ts"],"names":[],"mappings":"AAeA,OAAO,EAA4D,KAAK,kBAAkB,EAAE,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGxJ,OAAO,EAA2D,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,UAAU,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,GAAG,UAAU,CAAC;IACpE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,oFAAoF;AACpF,qBACa,wBAAwB;IAcvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAkB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAb5E,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkF;IAC/G,OAAO,CAAC,KAAK,CAA2I;IACxJ,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,QAAQ,CAA+D;IAE/E,YAA6B,MAAM,EAAE,cAAc,EAAmB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAAI;IAExG,OAAO,CAAC,OAAO;IAYT,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAExC;IAGK,OAAO,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAE3K;IAGK,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAGxI;YAEa,OAAO;IAgBf,OAAO,CAAC,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAO9E;YAEa,SAAS;YAsBT,OAAO;IAOrB,OAAO,CAAC,aAAa;YAKP,SAAS;YAQT,KAAK;YAaL,SAAS;IAyBjB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;YAEa,IAAI;IA4DZ,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAU1B;CACF"}