@openrig/cli 0.6.11 → 0.6.13

package/daemon/context-packs/skills/process/agent-browser/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "agent-browser"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to \"open a website\", \"fill out a form\", \"click a button\", \"take a screenshot\", \"scrape data from a page\", \"test this web app\", \"login to a site\", \"automate browser actions\", or any task requiring programmatic web interaction."
 files:

package/daemon/context-packs/skills/process/context-engineering/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "context-engineering"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when designing, reviewing, or debugging how an agent's context window gets filled, pruned, or shared — choosing what loads at boot versus on demand, sizing an install or an always-loaded file, fixing an agent that drifts, repeats itself, or forgets constraints mid-task, planning compaction or summarization, deciding single-agent versus subagents, engineering handoffs between agents, or picking a tool loadout. NOT for rewording a prompt's tone, choosing which model to pin, or debugging busine"
 files:

package/daemon/context-packs/skills/process/dogfood/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "dogfood"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Systematically explore and test a web application to find bugs, UX issues, and other problems. Use when asked to \"dogfood\", \"QA\", \"exploratory test\", \"find issues\", \"bug hunt\", \"test this app/site/platform\", or review the quality of a web application. Produces a structured report with full reproduction evidence -- step-by-step screenshots, repro videos, and detailed repro steps for every issue -- so findings can be handed directly to the responsible teams."
 files:

package/daemon/context-packs/skills/process/frontend-design/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "frontend-design"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications (examples include websites, landing pages, dashboards, React components, HTML/CSS layouts, or when styling/beautifying any web UI). Generates creative, polished code and UI design that avoids generic AI aesthetics."
 files:

package/daemon/context-packs/skills/process/systematic-debugging/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "systematic-debugging"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes"
 files:

package/daemon/context-packs/skills/process/test-driven-development/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "test-driven-development"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when implementing any feature or bugfix, before writing implementation code"
 files:

package/daemon/context-packs/skills/process/verification-before-completion/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "verification-before-completion"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always"
 files:

package/daemon/context-packs/skills/queue-handoff/SKILL.md

@@ -114,6 +114,14 @@ reaching for `--notify`, stop — that flag does not exist on the
 shipped 0.3.1 CLI; you may be following a stale instruction that
 inverted the default-nudge polarity.
 
+## Every queue row
+
+- **`--summary "<what it is and why this seat>"`** on every `create`, `handoff` and `handoff-and-complete`: one or two plain sentences. It is the row's subject in RECENT, the story and the needs-you view, and a handoff does not inherit it from the source row.
+- **Scope tags `project:<id>`, `mission:<id>`, `slice:<id>`** on project work, set when you create the row (`--tags`; `create` also takes `--mission` and `--slice`). Tags can't be edited afterwards. A handoff keeps the source row's tags unless you pass `--tags` or `--gate`, either of which replaces them; repeat the scope tags in `--tags` when you use `--gate`.
+- **Pass work on with `handoff-and-complete`.** It closes your row as done and records the next row as its successor in one step. A `create` followed by `update --state done --closure-reason handed_off_to` records no successor, and the stuck sweep raises a recovery item for it.
+- **Close what you hold.** A row you claimed ends in a handoff or an `update --state done --closure-reason …`; `rig queue overdue` lists claimed rows past their deadline.
+- **Brief for the model that will read it.** Before handing a peer open-ended work, check which model it runs: `delegating-work`, "Check what kind of agent you're handing it to".
+
 ## Queue-body hygiene (token + parse safety)
 
 The qitem body is durable DATA the daemon stores and replays on every

package/daemon/context-packs/skills/queue-handoff/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "queue-handoff"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when ending a turn, finishing a slice, blocked on another agent's work, or escalating to a human — durable work handoff via queue items so the system keeps moving across compactions, missed messages, and interruptions. Covers the hot-potato terminal-turn-rule (active work ends by passing the ball, not by going idle), default-nudge semantics, and when `--no-nudge` is appropriate for intentional cold park or human gate."
 files:

package/daemon/context-packs/skills/refocusing/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "refocusing"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when a long-running agent may have lost the product outcome, when context was compacted, when work has crossed a major boundary, or when a fresh path-based trace is needed before the next consequential action. Not for fresh-session orientation, waking an idle seat, or checkpoints."
 files:

package/daemon/context-packs/skills/refocusing/scripts/trace-to-root.py

@@ -157,6 +157,27 @@ DUTY_HEADINGS = ("my job here", "standing duties")
 NOTES_STATE_HEADINGS = ("current state",)
 HEADING = re.compile(r"^(#{1,6})\s+(.*?)\s*#*\s*$")
 DEFAULT_NOTES_MAX_AGE_DAYS = 14
+# Each packet field is bounded on its own; there is no total cap. A row's summary and continuation are one line each,
+# the held and next lists show their newest rows with the full count, and a matched section's body is cut at a line.
+FIELD_CHARS = 160
+HELD_SHOWN = 20
+NEXT_SHOWN = 10
+SECTION_CHARS = 1500
+
+
+def one_line(text):
+    """(text as one line, cut to FIELD_CHARS, whether it was shortened)."""
+    flat = " ".join(str(text).split())
+    if len(flat) <= FIELD_CHARS:
+        return flat, flat != str(text).strip()
+    return flat[:FIELD_CHARS - 1].rstrip() + "…", True
+
+
+def bounded_section(body):
+    if len(body) <= SECTION_CHARS:
+        return body
+    boundary = body.rfind("\n", 0, SECTION_CHARS)
+    return body[:boundary if boundary > 0 else SECTION_CHARS].rstrip() + "\n[… use --depth full for the rest]"
 
 
 def heading_sections(text, wanted):
@@ -180,7 +201,7 @@ def heading_sections(text, wanted):
 
 def by_section(text, wanted, path):
     found = heading_sections(text, wanted)
-    shown = "\n\n".join(f"{title}\n{body}" if body else title for title, body in found)
+    shown = "\n\n".join(f"{title}\n{bounded_section(body)}" if body else title for title, body in found)
     missing = [phrase for phrase in wanted if not any(title.lower().startswith(phrase) for title, _ in found)]
     if not missing:
         return shown
@@ -335,28 +356,51 @@ def candidate_line(candidate):
     return line
 
 
+def row_fields(row, *fields):
+    """Each named field as one bounded line, and a pointer to the whole row when any was shortened."""
+    values, cut = [], False
+    for field, missing in fields:
+        value, shortened = one_line(row.get(field) or missing)
+        values.append(value)
+        cut = cut or shortened
+    pointer = f" — full row: rig queue show {row['qitemId']}" if cut and row.get("qitemId") else ""
+    return values, pointer
+
+
+def cut_notice(name, state, rows, shown, daemon_cut):
+    """The list's notice when it was cut here or by the daemon: how many are shown, of how many."""
+    if not daemon_cut and len(rows) <= shown:
+        return None
+    total = f"more than {len(rows)}" if daemon_cut else str(len(rows))
+    return (f"(the {name} list was cut: {min(len(rows), shown)} of {total} shown; "
+            f"`rig queue list --owned --state {state}` has the rest)")
+
+
 def render_held_and_next(evidence):
     output = []
+    per_list = "heldTruncated" in evidence or "nextTruncated" in evidence
     held = evidence.get("held") or []
     if held:
         output.append("HELD WORK (blocked; this is not next):")
-        for row in held:
-            output.append(f"- {row.get('qitemId') or 'a row'} — {row.get('summary') or 'no summary'} — "
-                          f"blocked on {row.get('blockedOn') or 'unknown'} — "
-                          f"continuation: {row.get('continuation') or 'none recorded'}")
+        for row in held[:HELD_SHOWN]:
+            (summary, blocked_on, continuation), pointer = row_fields(
+                row, ("summary", "no summary"), ("blockedOn", "unknown"), ("continuation", "none recorded"))
+            output.append(f"- {row.get('qitemId') or 'a row'} — {summary} — blocked on {blocked_on} — "
+                          f"continuation: {continuation}{pointer}")
     following = evidence.get("next") or []
     if following:
         output.append("POSSIBLE NEXT WORK (pending; no order implied):")
-        for row in following:
+        for row in following[:NEXT_SHOWN]:
             missions = ", ".join(row.get("missions") or [])
-            output.append(f"- {row.get('qitemId') or 'a row'} — {row.get('summary') or 'no summary'}"
-                          + (f" [mission: {missions}]" if missions else ""))
-    if "heldTruncated" in evidence or "nextTruncated" in evidence:
-        if evidence.get("heldTruncated"):
-            output.append("(the held list was cut; `rig queue list --owned --state blocked` has the rest)")
-        if evidence.get("nextTruncated"):
-            output.append("(the next list was cut; `rig queue list --owned --state pending` has the rest)")
-    elif evidence.get("heldAndNextTruncated"):
+            (summary,), pointer = row_fields(row, ("summary", "no summary"))
+            output.append(f"- {row.get('qitemId') or 'a row'} — {summary}"
+                          + (f" [mission: {missions}]" if missions else "") + pointer)
+    notices = [
+        cut_notice("held", "blocked", held, HELD_SHOWN, per_list and bool(evidence.get("heldTruncated"))),
+        cut_notice("next", "pending", following, NEXT_SHOWN, per_list and bool(evidence.get("nextTruncated"))),
+    ]
+    output.extend(notice for notice in notices if notice)
+    if not per_list and evidence.get("heldAndNextTruncated"):
         output.append("(held and next lists were cut; `rig queue list` has the rest)")
     return "\n".join(output)
 
@@ -390,8 +434,9 @@ def render_candidates(evidence, root, depth, failures):
         output.extend(candidate_line(candidate) for candidate in candidates)
     if unknown:
         output.append("In-progress rows the queue cannot place:")
-        output.extend(f"- {row.get('qitemId') or 'a row'} — {row.get('summary') or 'no summary'}: {row.get('reason')}"
-                      for row in unknown)
+        for row in unknown:
+            (summary,), pointer = row_fields(row, ("summary", "no summary"))
+            output.append(f"- {row.get('qitemId') or 'a row'} — {summary}: {row.get('reason')}{pointer}")
     if not candidates:
         names = evidence.get("missionsOnHost") or []
         if names:

package/daemon/context-packs/skills/retiring-and-inheriting-a-seat/SKILL.md

@@ -137,8 +137,11 @@ generation's session token → resume it for **one question**, then let it sleep
 - Claude: `claude -p --resume <session>`
 - Codex: `codex exec` (resume the rollout)
 
-Use `rig ask <rig> "<q>" --wake <seat[@gen]|token>` for an explicit bounded
-consultation (introduced in CLI 0.5.1). Check `rig ask --help` for `--runtime`
+Use `rig ask <rig> "<q>" --wake <target>` for an explicit bounded consultation
+(introduced in CLI 0.5.1). Wake seat targets must include the rig: `member@rig` or
+`member@rig@N` (1 = newest tenure). Values without `@` go unchanged to the runtime
+as a session ID or title; a bare member name is not resolved within `<rig>`.
+Check `rig ask --help` for `--runtime`
 and `--wake-timeout`. The wrapper uses a runtime resume; its presence is not
 proof that a particular retained history is available. For a Claude history,
 `claude -p --resume <full-uuid>` is the runtime-level fallback when supported.

package/daemon/context-packs/skills/retiring-and-inheriting-a-seat/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "retiring-and-inheriting-a-seat"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when you are a sitting agent near your context threshold (~85%) and a PLANNED seat transition is due — retire deliberately and hand your seat to a fresh successor primed from a packet, rather than let compaction degrade you. Covers the handover packet, the append-only lineage ledger (one row per tenure), physical-seat continuity, the do-not-over-inherit framing, the optional warm-handoff window, and wake-v0 (consulting a retired predecessor). NOT for unplanned compaction/crash recovery (sess"
 files:

package/daemon/context-packs/skills/seat-continuity-and-handover/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "seat-continuity-and-handover"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when replacing a seat's occupant (rebuild/handover/swap), reasoning about stable-seat-identity vs fluid-occupant-identity, choosing an old-occupant disposition (retire/advise/shadow), or recording provenance for an occupant change. Two independent outcomes (continuityOutcome + seatBindingOutcome) and the 5 failure modes that prevent silent dishonesty."
 files:

package/daemon/context-packs/skills/session-compaction-and-restore/SKILL.md

@@ -79,6 +79,25 @@ OpenRig activity **hooks** and `[features]`, never session or auth state. So the
 rule is "never edits native session/auth/transcript files," NOT "never touches any
 provider-owned file."
 
+## Claude's own idle compaction while managed compaction is on
+
+While `policies.claude_compaction.enabled` is true with a valid threshold (the enforcer treats any other
+threshold as off), every Claude session OpenRig launches (fresh, fork, resume and restore; ordinary, kernel,
+team-default and full-bypass seats) carries `idleCompaction: false` in its one `--settings` value. Claude Code then
+doesn't compact an idle session on its own, so managed seats compact through OpenRig's sequence (restore map, then
+`/compact` at the threshold).
+
+- **Version boundary:** Claude Code supports the key from 2.1.290. Earlier versions ignore it, so idle compaction
+  stays possible there.
+- **Precedence:** it overrides a lower-precedence `idleCompaction: true` in user or project settings for those
+  launches. Claude's managed settings still win.
+- **Native threshold auto-compaction is untouched** (`autoCompactEnabled`, `DISABLE_AUTO_COMPACT`). Where the enforcer
+  has no fresh status-line usage sample for a seat, it doesn't compact that seat, and native auto-compaction is then
+  the only compaction. Nothing guarantees a native fallback.
+- **It applies at the next launch.** Turning the policy off leaves idle compaction off in a running session until
+  that session's next launch. Turning it on doesn't reach sessions already running.
+- **Policy off, or a non-Claude runtime:** the launch command is unchanged.
+
 ## Current CLI surface (operator / kernel seats; verified vs main d37a08ad)
 
 Managed compaction/restore is driven by five shipped verbs — pick per intent, and

package/daemon/context-packs/skills/session-compaction-and-restore/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "session-compaction-and-restore"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when reasoning about what survives compaction/context-loss/restart/seat-refresh, designing a high-fidelity restore packet, or distinguishing native runtime resume vs fork vs artifact-backed mental-model rebuild. Covers the 4 failure modes that prevent honest restore (compacted seat drops hot potato; restore packet preserves details but loses product intent; runtime resume mistaken for handover or fork; rebuilt seat starts with stale instructions)."
 files:

package/daemon/context-packs/skills/software-for-agents/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "software-for-agents"
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: "skills"
 purpose: "Use when older OpenRig instructions name software-for-agents or describe agent-in-the-middle or studio software under the former skill name."
 files:

package/daemon/context-packs/world-example/manifest.yaml

@@ -1,5 +1,5 @@
 name: world-example
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: world
 purpose: "A fill-in template showing the anatomy of an OpenRig world pack."
 files:

package/daemon/context-packs/world-public/manifest.yaml

@@ -1,5 +1,5 @@
 name: world-public
-version: "0.6.11"
+version: "0.6.13"
 taxonomy: world
 purpose: "A portable operating-world primer that derives volatile facts and teaches agents to author their own world."
 files:

package/daemon/dist/adapters/bounded-probe-exec.d.ts

@@ -0,0 +1,45 @@
+import { stopGroup } from "../domain/codex-network-default.js";
+import type { ExecFn } from "./tmux.js";
+/** How long a runtime's `--version` or `--help` probe may take before it is ended and recorded as an error.
+ *  Generous on purpose: a longer bound only costs time when a binary really hangs, and loaded hosts are unmeasured. */
+export declare const RUNTIME_PROBE_TIMEOUT_MS = 30000;
+/** A probe that didn't answer within its bound; its process group has been ended. */
+export declare class ProbeTimeoutError extends Error {
+    readonly command: string;
+    readonly timeoutMs: number;
+    /** The code Node gives a command that timed out, so failure classifiers read it like any other timeout. */
+    readonly code = "ETIMEDOUT";
+    constructor(command: string, timeoutMs: number);
+}
+/** End every probe still running: its whole process group, TERM then KILL, as the timeout path does. Probes that
+ *  have finished are not in the set, so a normal probe is untouched. */
+export declare function endRunningProbeGroups(graceMs?: number): Promise<void>;
+/** The daemon is stopping: no probe starts from now on, and the ones running are ended. */
+export declare function stopRuntimeProbes(graceMs?: number): Promise<void>;
+/** While the daemon is still starting (the Codex probe runs before it listens, and the shutdown handlers aren't
+ *  installed yet), end the probes' groups on SIGINT/SIGTERM and then die of the signal as before. Returns the
+ *  disposer to call once the real shutdown handlers take over. */
+export declare function endProbeGroupsOnStartupSignal(): () => void;
+/** A probe the daemon's stop ended or refused: it has no result, and says nothing about the runtime. */
+export declare class ProbeStoppedError extends Error {
+    readonly command: string;
+    readonly code = "ESTOPPED";
+    constructor(command: string, why: "ended" | "refused");
+}
+/**
+ * An ExecFn for runtime version and help probes, which must never hold up their caller (daemon startup awaits
+ * one before it listens). Unlike execCommand: stdin is closed (a probe never needs input), the command runs in
+ * its own process group, and after `timeoutMs` that whole group is ended (TERM, then KILL, then a bounded wait
+ * for the reap; the Codex readers' stopGroup) and the promise rejects with ProbeTimeoutError. Where a group
+ * can't be signalled (Windows), the probe process itself is then killed; its own descendants may survive there.
+ * Otherwise it answers when the probe exits: what it wrote (after a short drain) on exit 0, or a rejection like
+ * execCommand's on any other exit. Only if that 200 ms drain times out (the output pipes are still held open, by
+ * a descendant) is the group ended then, so that descendant can't turn a finished probe into a timeout; a healthy
+ * probe whose pipes end within the drain never reaches stopGroup. A descendant that closed its stdio is left
+ * running, as execCommand leaves it.
+ */
+export declare function boundedProbeExec(timeoutMs?: number, graceMs?: number, deps?: {
+    stopGroup?: typeof stopGroup;
+    cwd?: (cmd: string) => string | undefined;
+}): ExecFn;
+//# sourceMappingURL=bounded-probe-exec.d.ts.map

package/daemon/dist/adapters/bounded-probe-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-probe-exec.d.ts","sourceRoot":"","sources":["../../src/adapters/bounded-probe-exec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC;uHACuH;AACvH,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAM/C,qFAAqF;AACrF,qBAAa,iBAAkB,SAAQ,KAAK;IAG9B,QAAQ,CAAC,OAAO,EAAE,MAAM;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAFhE,2GAA2G;IAC3G,QAAQ,CAAC,IAAI,eAAe;gBACP,OAAO,EAAE,MAAM,EAAW,SAAS,EAAE,MAAM;CAIjE;AAoBD;wEACwE;AACxE,wBAAsB,qBAAqB,CAAC,OAAO,SAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED,2FAA2F;AAC3F,wBAAsB,iBAAiB,CAAC,OAAO,SAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/E;AAED;;kEAEkE;AAClE,wBAAgB,6BAA6B,IAAI,MAAM,IAAI,CAY1D;AAED,wGAAwG;AACxG,qBAAa,iBAAkB,SAAQ,KAAK;IAE9B,QAAQ,CAAC,OAAO,EAAE,MAAM;IADpC,QAAQ,CAAC,IAAI,cAAc;gBACN,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS;CAI/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,SAA2B,EACpC,OAAO,SAAiB,EACxB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CAAO,GACrF,MAAM,CAiGR"}

package/daemon/dist/adapters/bounded-probe-exec.js

@@ -0,0 +1,204 @@
+import { spawn } from "node:child_process";
+import { stopGroup } from "../domain/codex-network-default.js";
+/** How long a runtime's `--version` or `--help` probe may take before it is ended and recorded as an error.
+ *  Generous on purpose: a longer bound only costs time when a binary really hangs, and loaded hosts are unmeasured. */
+export const RUNTIME_PROBE_TIMEOUT_MS = 30_000;
+const PROBE_GRACE_MS = 1_000;
+const MAX_OUTPUT_BYTES = 1024 * 1024;
+/** After the probe exits, how long to wait for the rest of its output before answering. */
+const DRAIN_MS = 200;
+/** A probe that didn't answer within its bound; its process group has been ended. */
+export class ProbeTimeoutError extends Error {
+    command;
+    timeoutMs;
+    /** The code Node gives a command that timed out, so failure classifiers read it like any other timeout. */
+    code = "ETIMEDOUT";
+    constructor(command, timeoutMs) {
+        super(`${command} did not answer within ${Math.round(timeoutMs / 1000)} s; the probe was ended`);
+        this.command = command;
+        this.timeoutMs = timeoutMs;
+        this.name = "ProbeTimeoutError";
+    }
+}
+/** Probes running now, so the daemon can end their process groups when it stops: a probe's group is detached,
+ *  and nothing else ends it when the daemon goes away first. */
+const runningProbes = new Set();
+/** Probes `endRunningProbeGroups` ended, so their rejection reads as stopped, not as a failed runtime. */
+const endedByStop = new WeakSet();
+let exitHookInstalled = false;
+/** Set once the daemon is stopping: an ended probe's caller may fall back to another probe (`--version` to
+ *  `--help`), and that one must not start. */
+let stopping = false;
+/** Last resort for a process that is already exiting: no waiting, so no TERM first. */
+function killRunningProbeGroupsNow() {
+    for (const child of runningProbes) {
+        if (child.pid === undefined)
+            continue;
+        try {
+            process.kill(-child.pid, "SIGKILL");
+        }
+        catch { /* gone, or no process groups here (Windows) */ }
+    }
+}
+/** End every probe still running: its whole process group, TERM then KILL, as the timeout path does. Probes that
+ *  have finished are not in the set, so a normal probe is untouched. */
+export async function endRunningProbeGroups(graceMs = PROBE_GRACE_MS) {
+    await Promise.all([...runningProbes].map((child) => { endedByStop.add(child); return stopGroup(child, graceMs); }));
+}
+/** The daemon is stopping: no probe starts from now on, and the ones running are ended. */
+export async function stopRuntimeProbes(graceMs = PROBE_GRACE_MS) {
+    stopping = true;
+    await endRunningProbeGroups(graceMs);
+}
+/** While the daemon is still starting (the Codex probe runs before it listens, and the shutdown handlers aren't
+ *  installed yet), end the probes' groups on SIGINT/SIGTERM and then die of the signal as before. Returns the
+ *  disposer to call once the real shutdown handlers take over. */
+export function endProbeGroupsOnStartupSignal() {
+    const handlers = new Map();
+    const dispose = () => { for (const [signal, handler] of handlers)
+        process.off(signal, handler); handlers.clear(); };
+    for (const signal of ["SIGINT", "SIGTERM"]) {
+        const handler = () => {
+            dispose();
+            void stopRuntimeProbes().finally(() => process.kill(process.pid, signal));
+        };
+        handlers.set(signal, handler);
+        process.on(signal, handler);
+    }
+    return dispose;
+}
+/** A probe the daemon's stop ended or refused: it has no result, and says nothing about the runtime. */
+export class ProbeStoppedError extends Error {
+    command;
+    code = "ESTOPPED";
+    constructor(command, why) {
+        super(why === "ended" ? `${command} was ended: the daemon is stopping` : `${command} was not started: the daemon is stopping`);
+        this.command = command;
+        this.name = "ProbeStoppedError";
+    }
+}
+/**
+ * An ExecFn for runtime version and help probes, which must never hold up their caller (daemon startup awaits
+ * one before it listens). Unlike execCommand: stdin is closed (a probe never needs input), the command runs in
+ * its own process group, and after `timeoutMs` that whole group is ended (TERM, then KILL, then a bounded wait
+ * for the reap; the Codex readers' stopGroup) and the promise rejects with ProbeTimeoutError. Where a group
+ * can't be signalled (Windows), the probe process itself is then killed; its own descendants may survive there.
+ * Otherwise it answers when the probe exits: what it wrote (after a short drain) on exit 0, or a rejection like
+ * execCommand's on any other exit. Only if that 200 ms drain times out (the output pipes are still held open, by
+ * a descendant) is the group ended then, so that descendant can't turn a finished probe into a timeout; a healthy
+ * probe whose pipes end within the drain never reaches stopGroup. A descendant that closed its stdio is left
+ * running, as execCommand leaves it.
+ */
+export function boundedProbeExec(timeoutMs = RUNTIME_PROBE_TIMEOUT_MS, graceMs = PROBE_GRACE_MS, deps = {}) {
+    const endGroup = deps.stopGroup ?? stopGroup;
+    return (cmd) => new Promise((resolveProbe, rejectProbe) => {
+        let child;
+        let tracked;
+        // A settled probe is no longer running, whatever it left behind (see the exit handler below).
+        const resolve = (output) => { if (tracked)
+            runningProbes.delete(tracked); resolveProbe(output); };
+        const reject = (err) => { if (tracked)
+            runningProbes.delete(tracked); rejectProbe(err); };
+        if (stopping) {
+            reject(new ProbeStoppedError(cmd, "refused"));
+            return;
+        }
+        try {
+            child = spawn(cmd, { shell: true, stdio: ["ignore", "pipe", "pipe"], detached: true, cwd: deps.cwd?.(cmd) });
+        }
+        catch (err) {
+            reject(err);
+            return;
+        }
+        tracked = child;
+        runningProbes.add(child);
+        if (!exitHookInstalled) {
+            exitHookInstalled = true;
+            process.on("exit", killRunningProbeGroupsNow);
+        }
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.setEncoding("utf8");
+        child.stderr?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => { if (stdout.length < MAX_OUTPUT_BYTES)
+            stdout += chunk; });
+        child.stderr?.on("data", (chunk) => { if (stderr.length < MAX_OUTPUT_BYTES)
+            stderr += chunk; });
+        let settled = false;
+        const exited = new Promise((r) => {
+            if (child.exitCode !== null || child.signalCode !== null)
+                r();
+            else
+                child.once("exit", () => r());
+        });
+        // The group first; then, where group signals don't reach (Windows), the probe process itself, waiting (bounded)
+        // for its exit. Then let the pipes end by themselves, bounded, so output still in them is read before they're
+        // closed; nothing holds the caller past that.
+        const end = async () => {
+            await endGroup(child, graceMs);
+            if (child.exitCode === null && child.signalCode === null) {
+                child.kill("SIGKILL");
+                let t;
+                await Promise.race([exited, new Promise((r) => { t = setTimeout(r, graceMs); })]);
+                clearTimeout(t);
+            }
+            const ends = [child.stdout, child.stderr].filter((stream) => stream && !stream.readableEnded)
+                .map((stream) => new Promise((r) => { stream.once("end", () => r()); stream.once("close", () => r()); }));
+            let t;
+            await Promise.race([Promise.all(ends), new Promise((r) => { t = setTimeout(r, graceMs); })]);
+            clearTimeout(t);
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+        };
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            void end().then(() => reject(new ProbeTimeoutError(cmd, timeoutMs)));
+        }, timeoutMs);
+        child.once("error", (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            reject(err);
+        });
+        // Answer when the probe exits, after a short drain of what it wrote (a descendant may keep the pipes open, so
+        // don't wait for `close`). Only pipes still held open after the drain mean a descendant holds the output: then,
+        // and only then, end the group. A descendant that closed its stdio is left alone.
+        child.once("exit", (code, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            const open = () => [child.stdout, child.stderr].filter((stream) => stream && !stream.readableEnded);
+            const drained = new Promise((r) => {
+                let pending = 0;
+                const done = () => { pending -= 1; if (pending <= 0)
+                    r(); };
+                for (const stream of open()) {
+                    pending += 1;
+                    stream.once("end", done);
+                }
+                if (pending === 0)
+                    r();
+                setTimeout(r, DRAIN_MS);
+            });
+            // Yield once to I/O before deciding: if the event loop stalled past the drain timer, the pipes' end events
+            // may be queued behind it, and a closed-stdio descendant must not be taken for one holding the output.
+            void drained.then(() => new Promise((r) => setImmediate(r))).then(() => (open().length > 0 ? end() : undefined)).then(() => {
+                // The stop first: a probe it ended has no answer, even if it trapped TERM and exited 0 with a version.
+                if (endedByStop.has(child))
+                    reject(new ProbeStoppedError(cmd, "ended"));
+                else if (code === 0)
+                    resolve(stdout);
+                else {
+                    const output = [stdout.trim(), stderr.trim()].filter(Boolean).join("\n");
+                    // code, signal and stderr as execAsync's rejection carries them, for the failure classifiers.
+                    reject(Object.assign(new Error(`Command failed: ${cmd} (${signal ? `signal ${signal}` : `exit ${code}`})${output ? `\n${output}` : ""}`), { code, signal, stderr }));
+                }
+            });
+        });
+    });
+}
+//# sourceMappingURL=bounded-probe-exec.js.map

package/daemon/dist/adapters/bounded-probe-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-probe-exec.js","sourceRoot":"","sources":["../../src/adapters/bounded-probe-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAG/D;uHACuH;AACvH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,qFAAqF;AACrF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGrB;IAA0B;IAF/C,2GAA2G;IAClG,IAAI,GAAG,WAAW,CAAC;IAC5B,YAAqB,OAAe,EAAW,SAAiB;QAC9D,KAAK,CAAC,GAAG,OAAO,0BAA0B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAD9E,YAAO,GAAP,OAAO,CAAQ;QAAW,cAAS,GAAT,SAAS,CAAQ;QAE9D,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;gEACgE;AAChE,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;AAC1D,0GAA0G;AAC1G,MAAM,WAAW,GAAG,IAAI,OAAO,EAA4B,CAAC;AAC5D,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B;8CAC8C;AAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,uFAAuF;AACvF,SAAS,yBAAyB;IAChC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED;wEACwE;AACxE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAO,GAAG,cAAc;IAClE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAO,GAAG,cAAc;IAC9D,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,6BAA6B;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,KAAK,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wGAAwG;AACxG,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAErB;IADZ,IAAI,GAAG,UAAU,CAAC;IAC3B,YAAqB,OAAe,EAAE,GAAwB;QAC5D,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,oCAAoC,CAAC,CAAC,CAAC,GAAG,OAAO,0CAA0C,CAAC,CAAC;QAD5G,YAAO,GAAP,OAAO,CAAQ;QAElC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAS,GAAG,wBAAwB,EACpC,OAAO,GAAG,cAAc,EACxB,OAAoF,EAAE;IAEtF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAC7C,OAAO,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,OAAO,CAAS,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;QACxE,IAAI,KAA+B,CAAC;QACpC,IAAI,OAA6C,CAAC;QAClD,8FAA8F;QAC9F,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,GAAG,IAAI,OAAO;YAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE,GAAG,IAAI,OAAO;YAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;QAChB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;;gBACzD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,gHAAgH;QAChH,8GAA8G;QAC9G,8CAA8C;QAC9C,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACrB,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,IAAI,CAA4C,CAAC;gBACjD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClF,YAAY,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;iBAC1F,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,GAAG,MAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpH,IAAI,CAA4C,CAAC;YACjD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,8GAA8G;QAC9G,gHAAgH;QAChH,kFAAkF;QAClF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACpG,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;gBACtC,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC;oBAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5D,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;oBAAC,OAAO,IAAI,CAAC,CAAC;oBAAC,MAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBACzE,IAAI,OAAO,KAAK,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACvB,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,2GAA2G;YAC3G,uGAAuG;YACvG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzH,uGAAuG;gBACvG,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;qBACnE,IAAI,IAAI,KAAK,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;qBAChC,CAAC;oBACJ,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACzE,8FAA8F;oBAC9F,MAAM,CAAC,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CAAC,mBAAmB,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACnH,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}