@orygn/opa-mcp 0.5.0 → 0.6.0

package/dist/lib/rego-z3.js

@@ -1,10 +1,11 @@
 /**
  * Z3 singleton initialization.
  *
- * The z3-solver WASM module takes ~500ms to load and must only be
- * initialized once per process. Concurrent calls safely await the
- * same promise. Each verification call creates its own fresh Solver
- * from the shared Context, so contexts never accumulate stale state.
+ * The z3-solver WASM module takes ~500ms to load and is initialized once,
+ * unless it faults, in which case a fresh one replaces it (see getZ3).
+ * Concurrent calls safely await the same promise. Each verification call
+ * creates its own fresh Solver from the shared Context and releases it, and
+ * its model, as it finishes; that is what keeps the heap bounded.
  *
  * A fresh Solver is NOT enough to make concurrent verification safe. The whole
  * Context lives in one single-threaded WASM heap, and `check()` is async, so two
@@ -13,19 +14,264 @@
  * inside the WASM module. Everything touching the Context must therefore run
  * under `withZ3Lock`.
  */
+import { AsyncLocalStorage } from 'node:async_hooks';
 import { init } from 'z3-solver';
+/**
+ * Ceiling on Z3's own allocations, in megabytes. Reached, Z3 raises an
+ * ordinary exception that the engine turns into an inconclusive verdict.
+ * Without it the WASM heap itself runs out, and that abort surfaces outside
+ * every try/catch as an uncaughtException that ends the server.
+ */
+export const Z3_MEMORY_MAX_MB = 1024;
+/**
+ * The solver's own bound, checked at its checkpoints, where running out
+ * degrades to an "unknown" answer. It sits well below the process ceiling on
+ * purpose: at the same value the allocator's exception won the race, and an
+ * allocation failing inside a destructor ends in an abort rather than an
+ * error. Measured in review: equal caps aborted four times in four; a lower
+ * solver bound answered "unknown" four times in four.
+ */
+export const Z3_SOLVER_MAX_MEMORY_MB = 768;
 // Module-level singleton
 let z3InitPromise = null;
+let z3Api;
+/** Set once Z3 has failed outside a try/catch; it is not trusted again. */
+let z3Unusable;
+/** Number of Z3 critical sections currently running (0 or 1). */
+let z3Depth = 0;
+/** Rejects the section in flight; set while one is running. */
+let poisonInFlight;
+/** Generation of the module in use; a finalizer from an earlier one is dropped. */
+let z3Generation = 0;
+/** Finalizers that arrived while a solve was running, to run once it is not. */
+let deferredFinalizers = [];
+/** Fresh modules this process may still bring up after a fault. */
+let recoveriesLeft = 3;
+/**
+ * The registry class this process started with, and the identity of each
+ * init along its own async chain: z3-solver builds its registry in the
+ * continuation after its WASM loads, so the store there names the init that
+ * owns it, however inits interleave.
+ */
+const NativeRegistry = globalThis.FinalizationRegistry;
+const registryGlobal = globalThis;
+const initInFlight = new AsyncLocalStorage();
+/**
+ * Inits whose window is open; the global goes back when the last closes. An
+ * init that never settles leaves it on the subclass, which behaves natively
+ * for everything off an init's chain: only the class identity differs.
+ */
+let initWindows = 0;
+/**
+ * The stack at the call, with enough frames kept to reach the caller's module
+ * whatever `Error.stackTraceLimit` the host has chosen: a limit of zero, a
+ * common speed setting, would otherwise leave nothing to read and the wrap
+ * would quietly not happen.
+ */
+function stackHere() {
+    const limit = Error.stackTraceLimit;
+    Error.stackTraceLimit = 20;
+    try {
+        return new Error().stack ?? '';
+    }
+    finally {
+        Error.stackTraceLimit = limit;
+    }
+}
+/**
+ * The registry z3-solver gets while an init runs.
+ *
+ * z3-solver frees every AST, solver and model from one FinalizationRegistry,
+ * built inside its createApi, whose callbacks run on the main thread whenever
+ * the collector gets to them. A solve runs on a worker over the same shared
+ * memory, and a callback landing mid-solve raced it on Z3's allocator and
+ * faulted the heap (measured: a collection forced mid-solve crashed inside a
+ * hundred solves; the same collection while the worker was idle ran 1500
+ * clean). So a finalizer that arrives while a section is open waits for the
+ * section to close, and one from a module that has since faulted is dropped.
+ *
+ * Each construction looks at its own stack and async context: one from
+ * z3-solver on an init's chain is wrapped with that init's generation; any
+ * other gets the real behaviour. Inits can overlap, since a recovery starts
+ * the next while the one given up on is still coming up, and each still
+ * gets its own generation: the frees of the abandoned module are dropped
+ * and the recovered module's are routed.
+ *
+ * Releasing the solver and model as each solve ends removes most of the
+ * finalizer traffic that made the race reachable; the deferral covers what
+ * a collection still frees.
+ */
+class DeferringRegistry extends NativeRegistry {
+    constructor(callback) {
+        const owner = initInFlight.getStore();
+        const mine = owner !== undefined && stackHere().includes('z3-solver') ? owner : undefined;
+        const generation = mine?.generation;
+        super(mine === undefined
+            ? callback
+            : (held) => {
+                if (generation !== z3Generation)
+                    return;
+                if (z3Depth > 0)
+                    deferredFinalizers.push(() => callback(held));
+                else
+                    callback(held);
+            });
+    }
+}
+/** Bring up z3-solver with its finalizers routed through this module. */
+async function initModule() {
+    initWindows++;
+    registryGlobal.FinalizationRegistry = DeferringRegistry;
+    try {
+        return await initInFlight.run({ generation: z3Generation }, () => init());
+    }
+    finally {
+        if (--initWindows === 0)
+            registryGlobal.FinalizationRegistry = NativeRegistry;
+    }
+}
+/**
+ * Run the finalizers held back during a solve; only called with the worker
+ * idle. Each is a dec_ref; one that throws must not take the rest, or the
+ * lock, with it.
+ */
+function runDeferredFinalizers() {
+    const run = deferredFinalizers;
+    deferredFinalizers = [];
+    for (const finalizer of run) {
+        try {
+            finalizer();
+        }
+        catch {
+            // A free that fails leaks one object; the section still closes.
+        }
+    }
+}
 /**
  * Return the shared Z3 Context, initializing WASM on first call.
  * Safe to call from concurrent async paths.
  */
 export async function getZ3() {
+    if (z3Unusable !== undefined) {
+        if (recoveriesLeft === 0) {
+            throw new Error(`Z3 is unavailable in this process after repeated failures (${z3Unusable}). Restart the server to verify again.`);
+        }
+        // The heap that faulted cannot be trusted, so bring up a fresh module.
+        // Every init() is a new WASM instance with its own memory and worker
+        // (measured: two live side by side, independent, ~100 ms each), so
+        // nothing is shared with the one that faulted; its finalizers were
+        // dropped by generation when it was given up on. The faulted instance
+        // is retained, about 30 MB and one worker each, which is why the number
+        // of recoveries is bounded for the life of the process.
+        recoveriesLeft--;
+        z3Unusable = undefined;
+        z3InitPromise = null;
+        z3Api = undefined;
+    }
     if (z3InitPromise === null) {
-        z3InitPromise = init().then(({ Context }) => Context('main'));
+        const started = initModule().then((api) => {
+            // An init a recovery superseded while it was coming up must not
+            // become the module in use; whoever was waiting on it is told.
+            if (z3InitPromise !== started)
+                throw new Error('Z3 init superseded by a recovery');
+            api.setParam('memory_max_size', Z3_MEMORY_MAX_MB);
+            z3Api = api;
+            return api.Context('main');
+        });
+        z3InitPromise = started;
     }
     return z3InitPromise;
 }
+/** Read back a Z3 global parameter, after initialisation. */
+export async function getZ3Param(name) {
+    await getZ3();
+    return z3Api?.getParam(name) ?? null;
+}
+/** Whether a Z3 critical section is running right now. */
+export function isZ3Busy() {
+    return z3Depth > 0;
+}
+/**
+ * Give up on the Z3 module in use. Called when it failed outside a try/catch:
+ * the heap it lives in cannot be trusted. The next call brings up a fresh
+ * module, a bounded number of times per process.
+ */
+export function markZ3Unusable(reason) {
+    z3Unusable = reason;
+    // Move the generation now, before anything unwinds: the poison below ends
+    // the section, whose close would otherwise run every deferred free into
+    // the heap that just faulted, and any finalizer that arrives later from
+    // this module must be dropped rather than run.
+    z3Generation++;
+    deferredFinalizers = [];
+    // A heap abort arrives from the WASM worker and leaves the solve's promise
+    // unsettled for good. Settle it here, so the section releases the lock and
+    // the calls queued behind it are answered instead of hanging.
+    poisonInFlight?.(new Error(`Z3 became unusable during the solve (${reason}).`));
+}
+/**
+ * Whether an error message is one of the two this module produces once Z3
+ * has been given up on. The engine passes such a message through to the
+ * caller verbatim, since a restart is the one thing they can do about it.
+ */
+export function isZ3UnavailableMessage(detail) {
+    return /Z3 (is unavailable|became unusable)/.test(detail);
+}
+/**
+ * Whether a failure is the solve in flight being cut short by a fault, which
+ * a fresh module can answer: the engine retries such a call once.
+ */
+export function isZ3RecoverableMessage(detail) {
+    return /Z3 became unusable during the solve/.test(detail);
+}
+/**
+ * How many fresh modules this process may still bring up after a fault.
+ * Three for the life of the process, however far apart the faults: each
+ * retained instance costs memory, and a fourth fault is a pattern to
+ * restart out of, not to ride.
+ */
+export function z3RecoveriesLeft() {
+    return recoveriesLeft;
+}
+/** For tests: how many finalizers are waiting for the open section to close. */
+export function deferredFinalizersForTesting() {
+    return deferredFinalizers.length;
+}
+/**
+ * For tests: what z3-solver's finalizers go through. Runs at once when no
+ * section is open, otherwise once the open one closes.
+ */
+export function enqueueFinalizerForTesting(finalizer) {
+    if (z3Depth > 0)
+        deferredFinalizers.push(finalizer);
+    else
+        finalizer();
+}
+/**
+ * Whether an uncaught error is the WASM heap giving out, rather than some
+ * unrelated failure that happened while a solve was running.
+ */
+export function isZ3Failure(e) {
+    // A WebAssembly.RuntimeError is named just that; the global is not in this
+    // project's compiler libs, so the name is the check.
+    if (e instanceof Error && e.name === 'RuntimeError')
+        return true;
+    const message = e instanceof Error ? e.message : String(e);
+    // A call-stack overflow was also seen once as a symptom of a corrupted
+    // heap; it counts only when the stack shows it came from the WASM glue,
+    // so an overflow elsewhere does not spend a recovery. With no frames to
+    // read (a host that keeps none) the conservative answer stands: while a
+    // solve is running, the overflow is Z3's.
+    if (/Maximum call stack size exceeded/.test(message)) {
+        if (!(e instanceof Error))
+            return false;
+        const stack = e.stack ?? '';
+        if (!/\n\s+at /.test(stack))
+            return true;
+        return stack.includes('z3-built');
+    }
+    return /Aborted\(|memory access out of bounds|out of memory|unreachable executed/i.test(message);
+}
 /**
  * Tail of the queue of pending Z3 critical sections. Each acquirer waits on the
  * current tail and installs its own completion as the new tail, so sections run
@@ -49,11 +295,27 @@ export async function withZ3Lock(fn) {
     const predecessor = z3LockTail;
     z3LockTail = predecessor.then(() => mine);
     await predecessor;
+    z3Depth++;
+    const poisoned = new Promise((_resolve, reject) => {
+        poisonInFlight = reject;
+    });
     try {
-        return await fn();
+        return await Promise.race([fn(), poisoned]);
     }
     finally {
-        release();
+        poisonInFlight = undefined;
+        z3Depth--;
+        try {
+            // The worker is idle: whatever the collector noticed mid-solve can be
+            // freed now.
+            if (z3Depth === 0)
+                runDeferredFinalizers();
+        }
+        finally {
+            // Whatever happened above, the lock must pass on, or every later call
+            // waits for ever.
+            release();
+        }
     }
 }
 /**
@@ -62,6 +324,13 @@ export async function withZ3Lock(fn) {
  */
 export function resetZ3ForTesting() {
     z3InitPromise = null;
+    z3Api = undefined;
+    z3Unusable = undefined;
+    z3Depth = 0;
+    poisonInFlight = undefined;
     z3LockTail = Promise.resolve();
+    z3Generation++;
+    deferredFinalizers = [];
+    recoveriesLeft = 3;
 }
 //# sourceMappingURL=rego-z3.js.map

package/dist/lib/rego-z3.js.map

@@ -1 +1 @@
-{"version":3,"file":"rego-z3.js","sourceRoot":"","sources":["../../src/lib/rego-z3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,yBAAyB;AACzB,IAAI,aAAa,GAA4B,IAAI,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,aAAa,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,aAAmC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,EAAoB;IACtD,IAAI,OAAoB,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,UAAU,CAAC;IAC/B,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,WAAW,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,aAAa,GAAG,IAAI,CAAC;IACrB,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"rego-z3.js","sourceRoot":"","sources":["../../src/lib/rego-z3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,yBAAyB;AACzB,IAAI,aAAa,GAA4B,IAAI,CAAC;AAClD,IAAI,KAAwB,CAAC;AAC7B,2EAA2E;AAC3E,IAAI,UAA8B,CAAC;AACnC,iEAAiE;AACjE,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,+DAA+D;AAC/D,IAAI,cAAgD,CAAC;AAErD,mFAAmF;AACnF,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,gFAAgF;AAChF,IAAI,kBAAkB,GAAsB,EAAE,CAAC;AAC/C,mEAAmE;AACnE,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB;;;;;GAKG;AACH,MAAM,cAAc,GAAG,UAAU,CAAC,oBAAoB,CAAC;AACvD,MAAM,cAAc,GAAG,UAA0D,CAAC;AAClF,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAA0B,CAAC;AACrE;;;;GAIG;AACH,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB;;;;;GAKG;AACH,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC;IACpC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,iBAAkB,SAAQ,cAAuB;IACrD,YAAY,QAAiC;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,IAAI,SAAS,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC;QACpC,KAAK,CACH,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,CAAC,IAAa,EAAE,EAAE;gBAChB,IAAI,UAAU,KAAK,YAAY;oBAAE,OAAO;gBACxC,IAAI,OAAO,GAAG,CAAC;oBAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;;oBAC1D,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC,CACN,CAAC;IACJ,CAAC;CACF;AAED,yEAAyE;AACzE,KAAK,UAAU,UAAU;IACvB,WAAW,EAAE,CAAC;IACd,cAAc,CAAC,oBAAoB,GAAG,iBAAiB,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,WAAW,KAAK,CAAC;YAAE,cAAc,CAAC,oBAAoB,GAAG,cAAc,CAAC;IAChF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB;IAC5B,MAAM,GAAG,GAAG,kBAAkB,CAAC;IAC/B,kBAAkB,GAAG,EAAE,CAAC;IACxB,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,8DAA8D,UAAU,wCAAwC,CACjH,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,wDAAwD;QACxD,cAAc,EAAE,CAAC;QACjB,UAAU,GAAG,SAAS,CAAC;QACvB,aAAa,GAAG,IAAI,CAAC;QACrB,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAqB,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1D,gEAAgE;YAChE,+DAA+D;YAC/D,IAAI,aAAa,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACnF,GAAG,CAAC,QAAQ,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YAClD,KAAK,GAAG,GAAG,CAAC;YACZ,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,aAAa,GAAG,OAAO,CAAC;IAC1B,CAAC;IACD,OAAO,aAAmC,CAAC;AAC7C,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,KAAK,EAAE,CAAC;IACd,OAAO,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,UAAU,GAAG,MAAM,CAAC;IACpB,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,+CAA+C;IAC/C,YAAY,EAAE,CAAC;IACf,kBAAkB,GAAG,EAAE,CAAC;IACxB,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,cAAc,EAAE,CAAC,IAAI,KAAK,CAAC,wCAAwC,MAAM,IAAI,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B;IAC1C,OAAO,kBAAkB,CAAC,MAAM,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAAqB;IAC9D,IAAI,OAAO,GAAG,CAAC;QAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;;QAC/C,SAAS,EAAE,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,2EAA2E;IAC3E,qDAAqD;IACrD,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,0CAA0C;IAC1C,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,2EAA2E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,EAAoB;IACtD,IAAI,OAAoB,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,UAAU,CAAC;IAC/B,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,WAAW,CAAC;IAClB,OAAO,EAAE,CAAC;IACV,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACvD,cAAc,GAAG,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,cAAc,GAAG,SAAS,CAAC;QAC3B,OAAO,EAAE,CAAC;QACV,IAAI,CAAC;YACH,sEAAsE;YACtE,aAAa;YACb,IAAI,OAAO,KAAK,CAAC;gBAAE,qBAAqB,EAAE,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACT,sEAAsE;YACtE,kBAAkB;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,aAAa,GAAG,IAAI,CAAC;IACrB,KAAK,GAAG,SAAS,CAAC;IAClB,UAAU,GAAG,SAAS,CAAC;IACvB,OAAO,GAAG,CAAC,CAAC;IACZ,cAAc,GAAG,SAAS,CAAC;IAC3B,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC;IACf,kBAAkB,GAAG,EAAE,CAAC;IACxB,cAAc,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/dist/lib/subprocess.d.ts

@@ -54,7 +54,20 @@ export interface SpawnResult {
      * valid; absent means "not truncated".
      */
     outputTruncated?: boolean;
+    /**
+     * The signal that ended the child, when one did. Set for the server's own
+     * kills (timeout, cancellation, output cap) and for kills from outside it,
+     * such as the kernel's out-of-memory killer. Optional for the same reason as
+     * `outputTruncated`.
+     */
+    signal?: NodeJS.Signals | null;
 }
+/**
+ * Signal every child still running. A child sits in its own process group on
+ * POSIX, so a signal that stops the server does not reach it on its own; the
+ * server calls this on the way out. Returns how many were signalled.
+ */
+export declare function terminateChildren(sig?: NodeJS.Signals): number;
 /**
  * Run a binary and return its captured output. Never throws -- failures are
  * reflected in `exitCode` / `timedOut` / `outputTruncated`.

package/dist/lib/subprocess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subprocess.d.ts","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,wDAAwD;IACxD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AA6CD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAmIxF"}
+{"version":3,"file":"subprocess.d.ts","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,wDAAwD;IACxD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CAChC;AAgDD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,OAAmB,GAAG,MAAM,CAOzE;AA6CD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA4MxF"}

package/dist/lib/subprocess.js

@@ -25,6 +25,61 @@ import { buildChildEnv } from './child-env.js';
  * OPA_MCP_MAX_SUBPROCESS_BYTES.
  */
 export const DEFAULT_MAX_OUTPUT_BYTES = 32 * 1024 * 1024;
+/**
+ * How long to wait for the stdio pipes to close once the child has exited.
+ *
+ * The child's own output is complete at 'exit'; 'close' follows when every
+ * holder of the pipes is gone. A grandchild that inherited them, which is the
+ * ordinary shape of a wrapper script around the binary, keeps 'close' from
+ * ever firing, and a result that waits for it never settles.
+ */
+const PIPE_DRAIN_GRACE_MS = 1_000;
+/** Grace between SIGTERM and SIGKILL. */
+const KILL_ESCALATION_MS = 2_000;
+/**
+ * Ceiling on the drain after 'exit', however often late data re-arms it. The
+ * deadline bounds the drain while it is still pending; once it has fired, a
+ * writer that survived the group signal could otherwise keep the result open
+ * for as long as it kept writing.
+ */
+const PIPE_DRAIN_MAX_MS = 5 * PIPE_DRAIN_GRACE_MS;
+/**
+ * Signal the child, and on POSIX its whole process group, so a grandchild
+ * started by a wrapper script dies with it. The child is spawned as a group
+ * leader for this purpose; when the group is already gone, or the platform
+ * has no groups, fall back to the child alone.
+ */
+function signalTree(child, sig) {
+    // The group is addressed by the child's pid, which the kernel may hand to
+    // an unrelated process once the child has been reaped. Past that point only
+    // the handle is safe to use, and Node's kill on a dead handle is a no-op.
+    const unreaped = child.exitCode === null && child.signalCode === null;
+    if (unreaped && process.platform !== 'win32' && child.pid !== undefined) {
+        try {
+            process.kill(-child.pid, sig);
+            return;
+        }
+        catch {
+            // ESRCH or EPERM: no group to signal. The child itself may still be there.
+        }
+    }
+    child.kill(sig);
+}
+/** Children that have been spawned and have not settled yet. */
+const liveChildren = new Set();
+/**
+ * Signal every child still running. A child sits in its own process group on
+ * POSIX, so a signal that stops the server does not reach it on its own; the
+ * server calls this on the way out. Returns how many were signalled.
+ */
+export function terminateChildren(sig = 'SIGTERM') {
+    let n = 0;
+    for (const child of liveChildren) {
+        signalTree(child, sig);
+        n++;
+    }
+    return n;
+}
 /** Accumulates a stream's chunks up to a byte ceiling. */
 class CappedBuffer {
     limit;
@@ -88,6 +143,9 @@ export async function runBinary(binary, opts) {
             env: buildChildEnv(opts.env),
             shell: false,
             windowsHide: true,
+            // A process group of its own on POSIX, so a kill reaches a grandchild
+            // as well. See signalTree.
+            detached: process.platform !== 'win32',
         });
         const limit = opts.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
         const stdout = new CappedBuffer(limit);
@@ -96,27 +154,53 @@ export async function runBinary(binary, opts) {
         let aborted = false;
         let settled = false;
         let killTimer;
+        let drainTimer;
+        /** Set once 'exit' has fired: the child is gone, only its pipes remain. */
+        let exited;
+        /** Absolute time by which the drain finishes regardless of late data. */
+        let drainUntil = 0;
+        liveChildren.add(child);
+        // Whether the child has actually ended. `child.killed` is not that: Node
+        // sets it as soon as a signal was sent, whether or not the child obeyed,
+        // so a guard on it never escalated and a child that trapped SIGTERM hung
+        // the call for good.
+        const alive = () => child.exitCode === null && child.signalCode === null;
         const killChild = () => {
-            child.kill('SIGTERM');
+            if (settled)
+                return;
+            signalTree(child, 'SIGTERM');
             killTimer = setTimeout(() => {
-                if (!child.killed)
-                    child.kill('SIGKILL');
-            }, 2_000);
+                if (alive())
+                    signalTree(child, 'SIGKILL');
+            }, KILL_ESCALATION_MS);
         };
         const timer = setTimeout(() => {
+            // The child is already gone and only the drain is pending: settle from
+            // what was captured. Calling that a timeout would be wrong.
+            if (exited) {
+                finishFromCapture();
+                return;
+            }
             timedOut = true;
             killChild();
         }, opts.timeoutMs);
-        if (opts.signal) {
-            opts.signal.addEventListener('abort', () => {
-                aborted = true;
-                killChild();
-            }, { once: true });
-        }
+        // Once the child has exited there is nothing to cancel, and a listener
+        // left behind after settling would signal a pid the kernel may have
+        // handed to someone else. rego_test_multiroot passes one signal through
+        // a whole sequence of runs, so the listener has to go when the run does.
+        const onAbort = () => {
+            if (settled || exited)
+                return;
+            aborted = true;
+            killChild();
+        };
+        opts.signal?.addEventListener('abort', onAbort, { once: true });
         const clearTimers = () => {
             clearTimeout(timer);
             if (killTimer)
                 clearTimeout(killTimer);
+            if (drainTimer)
+                clearTimeout(drainTimer);
         };
         /**
          * Resolve at most once. 'error' and 'close' can both fire -- killing a child
@@ -128,16 +212,51 @@ export async function runBinary(binary, opts) {
                 return;
             settled = true;
             clearTimers();
+            liveChildren.delete(child);
+            opts.signal?.removeEventListener('abort', onAbort);
             resolvePromise(result);
         };
-        child.stdout?.on('data', (chunk) => {
-            if (stdout.push(chunk))
-                killChild();
-        });
-        child.stderr?.on('data', (chunk) => {
-            if (stderr.push(chunk))
+        /**
+         * Build the result from the capture and let go of the pipes. Used once the
+         * child has exited but something it left behind still holds its stdio.
+         */
+        const finishFromCapture = () => {
+            if (settled || !exited)
+                return;
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+            finish(exited.code, exited.signal);
+        };
+        // (Re)start the wait for 'close'. Bytes can still be sitting in the pipe
+        // at 'exit', and on a loaded machine the reads that deliver them may
+        // queue behind an expired timer; each chunk that arrives pushes the
+        // grace out again, and the deadline above bounds the whole thing.
+        const armDrain = () => {
+            if (drainTimer)
+                clearTimeout(drainTimer);
+            const left = drainUntil - Date.now();
+            if (left <= 0) {
+                finishFromCapture();
+                return;
+            }
+            drainTimer = setTimeout(finishFromCapture, Math.min(PIPE_DRAIN_GRACE_MS, left));
+        };
+        const onData = (buf, chunk) => {
+            const overflowed = buf.push(chunk);
+            if (exited) {
+                // Nothing left to kill; a writer that outlived the child is either
+                // done, or has just been cut off by the cap.
+                if (overflowed)
+                    finishFromCapture();
+                else
+                    armDrain();
+                return;
+            }
+            if (overflowed)
                 killChild();
-        });
+        };
+        child.stdout?.on('data', (chunk) => onData(stdout, chunk));
+        child.stderr?.on('data', (chunk) => onData(stderr, chunk));
         // Killing a child mid-write can surface an EPIPE on the pipe. Without a
         // listener that is an unhandled 'error' event, which would take the whole
         // server down -- the exact failure mode this cap exists to prevent.
@@ -153,9 +272,10 @@ export async function runBinary(binary, opts) {
                 aborted,
                 durationMs: Date.now() - start,
                 outputTruncated: false,
+                signal: null,
             });
         });
-        child.on('close', (code) => {
+        const finish = (code, signal) => {
             // Decoding runs here, in an async callback whose throw would escape every
             // try/catch upstream and reach the process as an uncaughtException. The
             // byte cap is what makes that unreachable; this is the belt to its braces.
@@ -168,6 +288,7 @@ export async function runBinary(binary, opts) {
                     aborted,
                     durationMs: Date.now() - start,
                     outputTruncated: stdout.didOverflow || stderr.didOverflow,
+                    signal,
                 });
             }
             catch (e) {
@@ -179,9 +300,23 @@ export async function runBinary(binary, opts) {
                     aborted,
                     durationMs: Date.now() - start,
                     outputTruncated: true,
+                    signal,
                 });
             }
+        };
+        // 'close' carries the complete output and is the normal way to finish.
+        // 'exit' starts a short grace for it: when the pipes are still held open
+        // by something the child left behind, the result is built from what was
+        // captured and the server's ends of the pipes are released.
+        child.on('exit', (code, signal) => {
+            // A spawn failure settles on 'error' and may still be followed by 'exit'.
+            if (settled)
+                return;
+            exited = { code, signal };
+            drainUntil = Date.now() + PIPE_DRAIN_MAX_MS;
+            armDrain();
         });
+        child.on('close', (code, signal) => finish(code, signal));
         if (opts.stdin !== undefined) {
             child.stdin?.write(opts.stdin);
             child.stdin?.end();

package/dist/lib/subprocess.js.map

@@ -1 +1 @@
-{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AA6CzD,0DAA0D;AAC1D,MAAM,YAAY;IAKa;IAJZ,MAAM,GAAa,EAAE,CAAC;IAC/B,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,KAAK,CAAC;IAE3B,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE9C,qEAAqE;IACrE,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,oEAAoE;QACpE,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,2CAA2C;QAC3C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,QAAQ;QACN,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,IAAkB;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,cAAc,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YACrC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAoD,CAAC;QAEzD,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC,EAAE,KAAK,CAAC,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS,EAAE,CAAC;QACd,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAC1B,OAAO,EACP,GAAG,EAAE;gBACH,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS,EAAE,CAAC;YACd,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,GAAS,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF;;;;WAIG;QACH,MAAM,MAAM,GAAG,CAAC,MAAmB,EAAQ,EAAE;YAC3C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,0EAA0E;QAC1E,oEAAoE;QACpE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE1C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,MAAM,CAAC;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,QAAQ,EAAE,KAAK;gBACf,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,0EAA0E;YAC1E,wEAAwE;YACxE,2EAA2E;YAC3E,IAAI,CAAC;gBACH,MAAM,CAAC;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,QAAQ;oBACR,OAAO;oBACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,eAAe,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;iBAC1D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC;oBAC7E,QAAQ;oBACR,OAAO;oBACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,eAAe,EAAE,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAoDzD;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,yCAAyC;AACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAmB,EAAE,GAAmB;IAC1D,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;IACtE,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,gEAAgE;AAChE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB,SAAS;IAC/D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0DAA0D;AAC1D,MAAM,YAAY;IAKa;IAJZ,MAAM,GAAa,EAAE,CAAC;IAC/B,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,KAAK,CAAC;IAE3B,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE9C,qEAAqE;IACrE,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,oEAAoE;QACpE,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,2CAA2C;QAC3C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,QAAQ;QACN,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,IAAkB;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,cAAc,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YACrC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;YACjB,sEAAsE;YACtE,2BAA2B;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAoD,CAAC;QACzD,IAAI,UAAqD,CAAC;QAC1D,2EAA2E;QAC3E,IAAI,MAA0E,CAAC;QAC/E,yEAAyE;QACzE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAExB,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,KAAK,GAAG,GAAY,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;QAElF,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAO;YACpB,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC7B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,KAAK,EAAE;oBAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC5C,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,MAAM,EAAE,CAAC;gBACX,iBAAiB,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS,EAAE,CAAC;QACd,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO;YAC9B,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,EAAE,CAAC;QACd,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhE,MAAM,WAAW,GAAG,GAAS,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC,CAAC;QAEF;;;;WAIG;QACH,MAAM,MAAM,GAAG,CAAC,MAAmB,EAAQ,EAAE;YAC3C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF;;;WAGG;QACH,MAAM,iBAAiB,GAAG,GAAS,EAAE;YACnC,IAAI,OAAO,IAAI,CAAC,MAAM;gBAAE,OAAO;YAC/B,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC;QAEF,yEAAyE;QACzE,qEAAqE;QACrE,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACd,iBAAiB,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,UAAU,GAAG,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,KAAa,EAAQ,EAAE;YACxD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,mEAAmE;gBACnE,6CAA6C;gBAC7C,IAAI,UAAU;oBAAE,iBAAiB,EAAE,CAAC;;oBAC/B,QAAQ,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,UAAU;gBAAE,SAAS,EAAE,CAAC;QAC9B,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAEnE,wEAAwE;QACxE,0EAA0E;QAC1E,oEAAoE;QACpE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE1C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,MAAM,CAAC;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,QAAQ,EAAE,KAAK;gBACf,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,eAAe,EAAE,KAAK;gBACtB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAQ,EAAE;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,2EAA2E;YAC3E,IAAI,CAAC;gBACH,MAAM,CAAC;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,QAAQ;oBACR,OAAO;oBACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,eAAe,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;oBACzD,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC;oBAC7E,QAAQ;oBACR,OAAO;oBACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,eAAe,EAAE,IAAI;oBACrB,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QAEF,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,0EAA0E;YAC1E,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC;YAC5C,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAE1D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}