@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/esm/cli/commands/stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.js","sourceRoot":"","sources":["../../../../src/cli/commands/stop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE5C,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,OAAoB,EAAE;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAE3C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IAEjC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC7E,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAE7C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,GAAG,+CAA+C,CAAC,CAAC;QACvG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAEhC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YACjE,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;YAC5E,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;QAED,oCAAoC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC3G,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,6EAA6E;IAC7E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/esm/cli/daemon/error-tracker.d.ts

@@ -0,0 +1,119 @@
+import { type FaultShutdownController, type FaultShutdownDeps } from './fault-shutdown';
+export interface ErrorRecord {
+    ts: string;
+    level: 'error' | 'warn' | 'fatal';
+    op?: string;
+    code?: string;
+    message: string;
+    stack?: string;
+    agent_id?: string;
+    pid: number;
+}
+/** Rotate at 2 MiB. A daemon that logs an error per query must not fill a disk. */
+export declare const MAX_ERROR_LOG_BYTES: number;
+/** Keep the active file plus this many rotated archives. */
+export declare const MAX_ERROR_ARCHIVES = 3;
+/**
+ * Strip SQL text and absolute filesystem paths out of free-form text.
+ *
+ * `pg` error messages embed the offending statement and stack frames embed the
+ * absolute path of the agent home directory and of `node_modules`. Neither
+ * belongs in an error log that no operator is looking at.
+ */
+export declare function redactErrorText(input: string): string;
+/**
+ * Roll `errors.jsonl` to `errors-1.jsonl`, shifting older archives down and
+ * dropping anything past the retention window. Mirrors the rotation the audit
+ * writer performs for `audit.jsonl`.
+ */
+export declare function rotateErrorLog(): void;
+/**
+ * Track an error to the local, size-capped, rotated `errors.jsonl` log.
+ * Structured, one JSON object per line. Never throws: losing the error record
+ * must not turn a recoverable failure into a crash.
+ *
+ * The record is redacted before it is written — SQL fragments and absolute
+ * filesystem paths (the agent home directory, `node_modules`) are stripped from
+ * both `message` and `stack`. The file stays local; nothing in this module
+ * transmits it anywhere.
+ */
+export declare function trackError(err: unknown, opts?: {
+    op?: string;
+    level?: 'error' | 'warn' | 'fatal';
+}): void;
+/** Path to the active local error log file. */
+export declare function getErrorsPath(): string;
+/** Paths to every file that makes up the error log, oldest archive first. */
+export declare function getErrorLogFiles(): string[];
+export interface ErrorLogStats {
+    path: string;
+    /** Bytes across the active file and every retained archive. */
+    size_bytes: number;
+    /** Records in the active file. */
+    records: number;
+    /** Retained archive files that currently exist. */
+    archives: number;
+    /** ISO timestamp of the most recent record, if any. */
+    last_error_ts: string | null;
+}
+/**
+ * Summarise the on-disk error log for `sw-agent status` and `sw-agent debug`.
+ * A missing log is a valid state, not an error.
+ */
+export declare function getErrorLogStats(): ErrorLogStats;
+/**
+ * fsync the active error log so the record that describes a fatal fault is on
+ * the disk before the process exits.
+ *
+ * `appendLine` uses `appendFileSync`, which hands the data to the kernel and
+ * returns — it does not wait for the storage. A process that exits
+ * milliseconds later can therefore lose the one record that explains why. Best
+ * effort: a missing `errors.jsonl`, a rotated-away active file, or a filesystem
+ * that rejects `fsync` must not stop the exit, because the exit is the part that
+ * matters.
+ */
+export declare function fsyncErrorLog(): boolean;
+/** The live fault controller, or null before the handlers are installed. */
+export declare function getFaultShutdownController(): FaultShutdownController | null;
+/**
+ * Register the audit-sink and pool handles the fault path must drain before it
+ * exits. Safe to call before or after {@link installGlobalHandlers}.
+ *
+ * Without this, a fault still exits non-zero and still fsyncs `errors.jsonl`, but
+ * the audit sink is left unflushed, so the final record of the action that
+ * caused the fault may never reach the chain. See the report's
+ * OTHER-FILE CHANGE REQUESTED for the one-line call site in `runtime.ts`.
+ */
+export declare function registerFaultShutdownHooks(hooks: Pick<FaultShutdownDeps, 'flushAudit' | 'closePools'>): void;
+/**
+ * Install process-level handlers for an uncaught exception or an unhandled
+ * promise rejection.
+ *
+ * Both are FAIL-CLOSED: the fault is recorded and redacted, the audit
+ * sink and the pools are drained on a bounded timer, and the process then exits
+ * non-zero so `Restart=on-failure` brings up a clean one. The previous version
+ * only recorded the fault, which OVERRODE Node's terminate-by-default behaviour
+ * and left a daemon serving database traffic in an undefined state.
+ *
+ * `unhandledRejection` is the one place that continues — and only for a reason
+ * a call site explicitly tagged with `markNonFatalRejection`. See
+ * `fault-shutdown.ts` for why the tag is a non-enumerable symbol.
+ *
+ * Also emits the startup posture lines. This is the daemon-startup hook the
+ * runtime already owns (`runAgent()` calls it right after
+ * `stripUnrecognisedSecurityEnv()`), and the resolved agent home has to be
+ * logged from somewhere that runs exactly once per daemon start. An
+ * `AgentHomeMismatchError` thrown from here propagates out of `runAgent()` and
+ * is reported by the CLI with a non-zero exit, which is the intended
+ * fail-closed outcome: a daemon running against a home nobody configured would
+ * apply a different permission default, a different database scope and a
+ * different audit key.
+ */
+export declare function installGlobalHandlers(currentAgentId?: string, hooks?: Pick<FaultShutdownDeps, 'flushAudit' | 'closePools'>): void;
+/** Reset the install latch. Test helper; a second install in one process is a no-op. */
+export declare function resetGlobalHandlersForTests(): void;
+/** Read recent error records from the local log, newest last. */
+export declare function readRecentErrors(limit: number): Promise<ErrorRecord[]>;
+/** Reset the cached active-file size and directory memo. Test and lifecycle helper. */
+export declare function resetErrorLogCache(): void;
+//# sourceMappingURL=error-tracker.d.ts.map

package/dist/esm/cli/daemon/error-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracker.d.ts","sourceRoot":"","sources":["../../../../src/cli/daemon/error-tracker.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,QAAkB,CAAC;AAEnD,4DAA4D;AAC5D,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAsEpC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrD;AAsBD;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAyBrC;AA2BD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,OAAO,EACZ,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;CAAO,GAC7D,IAAI,CAkBN;AAED,+CAA+C;AAC/C,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAQ3C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAuChD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAkBvC;AAeD,4EAA4E;AAC5E,wBAAgB,0BAA0B,IAAI,uBAAuB,GAAG,IAAI,CAE3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,YAAY,CAAC,GAC1D,IAAI,CAGN;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,CAAC,EAAE,MAAM,EACvB,KAAK,GAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,YAAY,CAAM,GAC/D,IAAI,CAmEN;AAED,wFAAwF;AACxF,wBAAgB,2BAA2B,IAAI,IAAI,CAKlD;AAED,iEAAiE;AACjE,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAuB5E;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC"}

package/dist/esm/cli/daemon/error-tracker.js

@@ -0,0 +1,451 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { getSwAgentDir } from '../../config/paths';
+import { createFaultShutdownController, } from './fault-shutdown';
+import { assertAndLogResolvedAgentHome } from './state';
+/** Rotate at 2 MiB. A daemon that logs an error per query must not fill a disk. */
+export const MAX_ERROR_LOG_BYTES = 2 * 1024 * 1024;
+/** Keep the active file plus this many rotated archives. */
+export const MAX_ERROR_ARCHIVES = 3;
+/** Longest persisted `message`, in characters. */
+const MAX_MESSAGE_CHARS = 500;
+/** Longest persisted `stack`, in characters. */
+const MAX_STACK_CHARS = 2_000;
+let initialized = false;
+let agentId;
+/* ------------------------------------------------------------------ */
+/* Redaction                                                           */
+/* ------------------------------------------------------------------ */
+/**
+ * `pg` quotes the offending token with double quotes (`syntax error at or near
+ * "DROP TABLE users"`) and embeds single-quoted literals
+ * (`duplicate key value violates unique constraint "u_email": Key (email)=(a@b.c)`
+ * / `unterminated quoted string at or near "'alice@corp.com'"`). Both forms
+ * carry user data out of the database and into a file that nobody thinks of as
+ * sensitive, so they are replaced with a placeholder before persistence.
+ */
+const SQL_DOUBLE_QUOTED = /"(?:[^"\\\n]|\\.)*"/g;
+const SQL_SINGLE_QUOTED = /'(?:[^']|'')*'/g;
+/** `Key (col)=(value)` detail emitted by a unique/pk violation. */
+const PG_KEY_VALUE_DETAIL = /=\(([^)]*)\)/g;
+/** Two or more `/`-separated segments: an absolute POSIX path. */
+const POSIX_ABSOLUTE_PATH = /\/(?:[A-Za-z0-9_.~+@-]+)(?:\/[A-Za-z0-9_.~+@-]+){1,}\/?/g;
+/** `C:\Users\...` — matched before the POSIX rule so the drive is not split. */
+const WINDOWS_ABSOLUTE_PATH = /[A-Za-z]:\\(?:[^\\\s"'|,;]+\\)*[^\\\s"'|,;]*/g;
+function shortenPosixPath(p) {
+    for (const home of homeDirPrefixes()) {
+        if (p === home)
+            return '~';
+        if (p.startsWith(home + '/'))
+            return '~/' + p.slice(home.length + 1);
+    }
+    const marker = '/node_modules/';
+    const nm = p.lastIndexOf(marker);
+    if (nm >= 0)
+        return 'node_modules/' + p.slice(nm + marker.length);
+    const segments = p.replace(/\/+$/, '').split('/').filter(Boolean);
+    if (segments.length <= 1)
+        return p;
+    return '<path>/' + segments.slice(-2).join('/');
+}
+function shortenWindowsPath(p) {
+    const segments = p.replace(/\\+$/, '').split('\\').filter(Boolean);
+    if (segments.length <= 2)
+        return '<path>/' + (segments[segments.length - 1] ?? '');
+    return '<path>/' + segments.slice(-2).join('/');
+}
+function homeDirPrefixes() {
+    const prefixes = [];
+    try {
+        const agentHome = getSwAgentDir();
+        if (agentHome)
+            prefixes.push(agentHome.replace(/\/+$/, ''));
+    }
+    catch {
+        // The home directory may not exist yet; os.homedir() is still useful.
+    }
+    try {
+        const home = os.homedir();
+        if (home)
+            prefixes.push(home.replace(/\/+$/, ''));
+    }
+    catch {
+        // ignore
+    }
+    return prefixes.filter(Boolean);
+}
+/**
+ * Strip SQL text and absolute filesystem paths out of free-form text.
+ *
+ * `pg` error messages embed the offending statement and stack frames embed the
+ * absolute path of the agent home directory and of `node_modules`. Neither
+ * belongs in an error log that no operator is looking at.
+ */
+export function redactErrorText(input) {
+    return input
+        .replace(PG_KEY_VALUE_DETAIL, '=(?)')
+        .replace(SQL_DOUBLE_QUOTED, '"?"')
+        .replace(SQL_SINGLE_QUOTED, "'?'")
+        .replace(WINDOWS_ABSOLUTE_PATH, shortenWindowsPath)
+        .replace(POSIX_ABSOLUTE_PATH, shortenPosixPath);
+}
+function clamp(text, max) {
+    return text.length > max ? text.slice(0, max) + '…' : text;
+}
+/* ------------------------------------------------------------------ */
+/* Rotation                                                            */
+/* ------------------------------------------------------------------ */
+let cachedActiveSize = null;
+function activeSize() {
+    if (cachedActiveSize !== null)
+        return cachedActiveSize;
+    try {
+        cachedActiveSize = fs.statSync(getErrorsPath()).size;
+    }
+    catch {
+        cachedActiveSize = 0;
+    }
+    return cachedActiveSize;
+}
+/**
+ * Roll `errors.jsonl` to `errors-1.jsonl`, shifting older archives down and
+ * dropping anything past the retention window. Mirrors the rotation the audit
+ * writer performs for `audit.jsonl`.
+ */
+export function rotateErrorLog() {
+    const active = getErrorsPath();
+    for (let i = MAX_ERROR_ARCHIVES; i >= 1; i--) {
+        const from = path.join(path.dirname(active), `errors-${i}.jsonl`);
+        const to = path.join(path.dirname(active), `errors-${i + 1}.jsonl`);
+        try {
+            fs.renameSync(from, to);
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                throw err;
+        }
+    }
+    try {
+        fs.renameSync(active, path.join(path.dirname(active), 'errors-1.jsonl'));
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT')
+            throw err;
+    }
+    // Prune anything left over from a larger previous retention window.
+    for (let i = MAX_ERROR_ARCHIVES + 1; i <= MAX_ERROR_ARCHIVES + 5; i++) {
+        try {
+            fs.unlinkSync(path.join(path.dirname(active), `errors-${i}.jsonl`));
+        }
+        catch {
+            // ignore
+        }
+    }
+    cachedActiveSize = 0;
+}
+let dirEnsured = null;
+function appendLine(line) {
+    const errorsPath = getErrorsPath();
+    const dir = path.dirname(errorsPath);
+    if (dirEnsured !== dir) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        dirEnsured = dir;
+    }
+    const lineBytes = Buffer.byteLength(line, 'utf8');
+    let current = activeSize();
+    if (current > 0 && current + lineBytes > MAX_ERROR_LOG_BYTES) {
+        rotateErrorLog();
+        current = 0;
+    }
+    fs.appendFileSync(errorsPath, line, { encoding: 'utf8', mode: 0o600 });
+    cachedActiveSize = current + lineBytes;
+}
+/* ------------------------------------------------------------------ */
+/* Public API                                                          */
+/* ------------------------------------------------------------------ */
+/**
+ * Track an error to the local, size-capped, rotated `errors.jsonl` log.
+ * Structured, one JSON object per line. Never throws: losing the error record
+ * must not turn a recoverable failure into a crash.
+ *
+ * The record is redacted before it is written — SQL fragments and absolute
+ * filesystem paths (the agent home directory, `node_modules`) are stripped from
+ * both `message` and `stack`. The file stays local; nothing in this module
+ * transmits it anywhere.
+ */
+export function trackError(err, opts = {}) {
+    try {
+        const isErr = err instanceof Error;
+        const record = {
+            ts: new Date().toISOString(),
+            level: opts.level ?? 'error',
+            op: opts.op,
+            code: isErr ? err.code : undefined,
+            message: clamp(redactErrorText(isErr ? err.message : String(err)), MAX_MESSAGE_CHARS),
+            stack: isErr && err.stack ? clamp(redactErrorText(err.stack), MAX_STACK_CHARS) : undefined,
+            agent_id: agentId,
+            pid: process.pid,
+        };
+        appendLine(JSON.stringify(record) + '\n');
+    }
+    catch {
+        // Never let error-tracking itself throw.
+    }
+}
+/** Path to the active local error log file. */
+export function getErrorsPath() {
+    return path.join(getSwAgentDir(), 'errors.jsonl');
+}
+/** Paths to every file that makes up the error log, oldest archive first. */
+export function getErrorLogFiles() {
+    const dir = getSwAgentDir();
+    const files = [];
+    for (let i = MAX_ERROR_ARCHIVES; i >= 1; i--) {
+        files.push(path.join(dir, `errors-${i}.jsonl`));
+    }
+    files.push(getErrorsPath());
+    return files;
+}
+/**
+ * Summarise the on-disk error log for `sw-agent status` and `sw-agent debug`.
+ * A missing log is a valid state, not an error.
+ */
+export function getErrorLogStats() {
+    const active = getErrorsPath();
+    let sizeBytes = 0;
+    let records = 0;
+    let archives = 0;
+    let lastErrorTs = null;
+    for (const file of getErrorLogFiles()) {
+        let stat;
+        try {
+            stat = fs.statSync(file);
+        }
+        catch {
+            continue;
+        }
+        sizeBytes += stat.size;
+        if (file !== active) {
+            archives++;
+            continue;
+        }
+        try {
+            const content = fs.readFileSync(file, 'utf8');
+            const lines = content.split('\n');
+            records = 0;
+            for (const line of lines) {
+                if (line.trim().length === 0)
+                    continue;
+                records++;
+                try {
+                    const parsed = JSON.parse(line);
+                    if (parsed.ts)
+                        lastErrorTs = parsed.ts;
+                }
+                catch {
+                    // ignore malformed
+                }
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    return { path: active, size_bytes: sizeBytes, records, archives, last_error_ts: lastErrorTs };
+}
+/**
+ * fsync the active error log so the record that describes a fatal fault is on
+ * the disk before the process exits.
+ *
+ * `appendLine` uses `appendFileSync`, which hands the data to the kernel and
+ * returns — it does not wait for the storage. A process that exits
+ * milliseconds later can therefore lose the one record that explains why. Best
+ * effort: a missing `errors.jsonl`, a rotated-away active file, or a filesystem
+ * that rejects `fsync` must not stop the exit, because the exit is the part that
+ * matters.
+ */
+export function fsyncErrorLog() {
+    const target = getErrorsPath();
+    let fd;
+    try {
+        fd = fs.openSync(target, 'r+');
+        fs.fsyncSync(fd);
+        return true;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== undefined) {
+            try {
+                fs.closeSync(fd);
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+}
+/** The controller installed by {@link installGlobalHandlers}. Test seam. */
+let faultController = null;
+/**
+ * Hooks registered before the handlers were installed.
+ *
+ * `runAgent()` builds its audit sink and `PoolManager` after it installs the
+ * process handlers — the handlers must exist before the parser load, so a
+ * startup crash is tracked — so the runtime cannot pass them in. It calls
+ * {@link registerFaultShutdownHooks} instead.
+ */
+let lateHooks = {};
+/** The live fault controller, or null before the handlers are installed. */
+export function getFaultShutdownController() {
+    return faultController;
+}
+/**
+ * Register the audit-sink and pool handles the fault path must drain before it
+ * exits. Safe to call before or after {@link installGlobalHandlers}.
+ *
+ * Without this, a fault still exits non-zero and still fsyncs `errors.jsonl`, but
+ * the audit sink is left unflushed, so the final record of the action that
+ * caused the fault may never reach the chain. See the report's
+ * OTHER-FILE CHANGE REQUESTED for the one-line call site in `runtime.ts`.
+ */
+export function registerFaultShutdownHooks(hooks) {
+    lateHooks = { ...lateHooks, ...hooks };
+    faultController?.setHooks(hooks);
+}
+/**
+ * Install process-level handlers for an uncaught exception or an unhandled
+ * promise rejection.
+ *
+ * Both are FAIL-CLOSED: the fault is recorded and redacted, the audit
+ * sink and the pools are drained on a bounded timer, and the process then exits
+ * non-zero so `Restart=on-failure` brings up a clean one. The previous version
+ * only recorded the fault, which OVERRODE Node's terminate-by-default behaviour
+ * and left a daemon serving database traffic in an undefined state.
+ *
+ * `unhandledRejection` is the one place that continues — and only for a reason
+ * a call site explicitly tagged with `markNonFatalRejection`. See
+ * `fault-shutdown.ts` for why the tag is a non-enumerable symbol.
+ *
+ * Also emits the startup posture lines. This is the daemon-startup hook the
+ * runtime already owns (`runAgent()` calls it right after
+ * `stripUnrecognisedSecurityEnv()`), and the resolved agent home has to be
+ * logged from somewhere that runs exactly once per daemon start. An
+ * `AgentHomeMismatchError` thrown from here propagates out of `runAgent()` and
+ * is reported by the CLI with a non-zero exit, which is the intended
+ * fail-closed outcome: a daemon running against a home nobody configured would
+ * apply a different permission default, a different database scope and a
+ * different audit key.
+ */
+export function installGlobalHandlers(currentAgentId, hooks = {}) {
+    if (initialized)
+        return;
+    initialized = true;
+    agentId = currentAgentId;
+    const effective = { ...lateHooks, ...hooks };
+    const deps = {
+        track: (err, opts) => {
+            trackError(err, opts);
+        },
+        flushLocalLog: () => {
+            fsyncErrorLog();
+        },
+        log: (line) => {
+            // Two destinations, because the operator has two.
+            //
+            // 1. The journal. The shipped unit sets `StandardError=journal`, so a
+            //    narrative that only reaches `errors.jsonl` is invisible to
+            //    `journalctl -u <unit>` — which is where an operator looks first after
+            //    an unexplained restart. Writing only to the file means the most
+            //    important line the daemon ever emits is the one they cannot see.
+            try {
+                fs.writeSync(2, `${line}\n`);
+            }
+            catch {
+                try {
+                    fs.writeSync(1, `${line}\n`);
+                }
+                catch {
+                    // Nothing left to try; the exit still happens.
+                }
+            }
+            // 2. The error log, so `sw-agent debug errors` shows the shutdown
+            //    narrative and not just its cause.
+            //
+            //    The level is taken from the line's own `[warn]` / `[fatal]` prefix
+            //    rather than assumed. The survivable path — a rejection explicitly
+            //    tagged non-fatal, which the daemon deliberately keeps running
+            //    through — is logged as `warn` by the controller, and stamping it
+            //    `fatal` here put a second, contradictory `fatal` record in the file
+            //    beside it. An operator grepping `errors.jsonl` for `fatal` to answer
+            //    "did this host die on its own?" was told yes by a line describing a
+            //    rejection it survived.
+            try {
+                trackError(line, {
+                    op: 'faultShutdown',
+                    level: /^\s*\[warn\]/i.test(line) ? 'warn' : 'fatal',
+                });
+            }
+            catch {
+                // ignore
+            }
+        },
+        exit: (code) => {
+            process.exit(code);
+        },
+        ...effective,
+    };
+    faultController = createFaultShutdownController(deps);
+    const controller = faultController;
+    process.on('uncaughtException', (err) => {
+        void controller.handle('uncaughtException', err);
+    });
+    process.on('unhandledRejection', (reason) => {
+        void controller.handle('unhandledRejection', reason);
+    });
+    assertAndLogResolvedAgentHome();
+}
+/** Reset the install latch. Test helper; a second install in one process is a no-op. */
+export function resetGlobalHandlersForTests() {
+    initialized = false;
+    agentId = undefined;
+    faultController = null;
+    lateHooks = {};
+}
+/** Read recent error records from the local log, newest last. */
+export async function readRecentErrors(limit) {
+    try {
+        const records = [];
+        for (const file of getErrorLogFiles()) {
+            let content;
+            try {
+                content = await fs.promises.readFile(file, 'utf8');
+            }
+            catch {
+                continue;
+            }
+            for (const line of content.split('\n')) {
+                if (line.trim().length === 0)
+                    continue;
+                try {
+                    records.push(JSON.parse(line));
+                }
+                catch {
+                    // ignore malformed
+                }
+            }
+        }
+        return records.slice(-limit);
+    }
+    catch {
+        return [];
+    }
+}
+/** Reset the cached active-file size and directory memo. Test and lifecycle helper. */
+export function resetErrorLogCache() {
+    cachedActiveSize = null;
+    dirEnsured = null;
+}
+//# sourceMappingURL=error-tracker.js.map

package/dist/esm/cli/daemon/error-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracker.js","sourceRoot":"","sources":["../../../../src/cli/daemon/error-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,6BAA6B,GAG9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AAaxD,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,kDAAkD;AAClD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,gDAAgD;AAChD,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,OAA2B,CAAC;AAEhC,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAC5C,kEAAkE;AAClE,MAAM,mBAAmB,GAAG,0DAA0D,CAAC;AACvF,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,+CAA+C,CAAC;AAE9E,SAAS,gBAAgB,CAAC,CAAS;IACjC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC;QAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,SAAS,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,IAAI,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK;SACT,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;SACjC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;SACjC,OAAO,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;SAClD,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C,SAAS,UAAU;IACjB,IAAI,gBAAgB,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IACvD,IAAI,CAAC;QACH,gBAAgB,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;IACD,oEAAoE;IACpE,KAAK,IAAI,CAAC,GAAG,kBAAkB,GAAG,CAAC,EAAE,CAAC,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,gBAAgB,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAAC;QAC7D,cAAc,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC,CAAC;IACd,CAAC;IAED,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,gBAAgB,GAAG,OAAO,GAAG,SAAS,CAAC;AACzC,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,GAAY,EACZ,OAA4D,EAAE;IAE9D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC;QACnC,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO;YAC5B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,GAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC7D,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;YACrF,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1F,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QAEF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACtC,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,QAAQ,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACvC,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBAC/C,IAAI,MAAM,CAAC,EAAE;wBAAE,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,mBAAmB;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAChG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,IAAI,eAAe,GAAmC,IAAI,CAAC;AAE3D;;;;;;;GAOG;AACH,IAAI,SAAS,GAAyD,EAAE,CAAC;AAEzE,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B;IACxC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAA2D;IAE3D,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB,CACnC,cAAuB,EACvB,QAA8D,EAAE;IAEhE,IAAI,WAAW;QAAE,OAAO;IACxB,WAAW,GAAG,IAAI,CAAC;IACnB,OAAO,GAAG,cAAc,CAAC;IAEzB,MAAM,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAsB;QAC9B,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACnB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,aAAa,EAAE,GAAG,EAAE;YAClB,aAAa,EAAE,CAAC;QAClB,CAAC;QACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,kDAAkD;YAClD,EAAE;YACF,sEAAsE;YACtE,gEAAgE;YAChE,2EAA2E;YAC3E,qEAAqE;YACrE,sEAAsE;YACtE,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,+CAA+C;gBACjD,CAAC;YACH,CAAC;YACD,kEAAkE;YAClE,uCAAuC;YACvC,EAAE;YACF,wEAAwE;YACxE,uEAAuE;YACvE,mEAAmE;YACnE,sEAAsE;YACtE,yEAAyE;YACzE,0EAA0E;YAC1E,yEAAyE;YACzE,4BAA4B;YAC5B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE;oBACf,EAAE,EAAE,eAAe;oBACnB,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;iBACrD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,SAAS;KACb,CAAC;IACF,eAAe,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,eAAe,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,KAAK,UAAU,CAAC,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,KAAK,UAAU,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,6BAA6B,EAAE,CAAC;AAClC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B;IACzC,WAAW,GAAG,KAAK,CAAC;IACpB,OAAO,GAAG,SAAS,CAAC;IACpB,eAAe,GAAG,IAAI,CAAC;IACvB,SAAS,GAAG,EAAE,CAAC;AACjB,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;YACtC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACvC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,mBAAmB;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB;IAChC,gBAAgB,GAAG,IAAI,CAAC;IACxB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC"}