@stratusagent/cli 0.11.2 → 0.11.3

package/dist/commands/serve.js

@@ -0,0 +1,612 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { createFileCommandWhitelist, createPermissionPolicy, describeCommandScope, describeOriginScope, describeToolGrant, } from '@stratusagent/permissions';
+import { agentsDirPath, loadChannelCredentials, readProcessEnv, logsDirPath, resolveAgentApprovals, resolveAgentPrincipals, servedRuntimes, } from '@stratusagent/state';
+import { createLogWriter, truncateRedirectLogs } from "../logs.js";
+import { describePrincipals, describeApprovers } from "../approvals.js";
+import { HomeHeldError, legacyDaemonServing, describeHeldHome } from "../daemon.js";
+import { formatEvent, eventDetail } from "../events.js";
+import { writeLine } from "../io.js";
+import { loadSlackAdapter, loadControlApi } from "../loaders.js";
+import { warnOnCredentialOverride } from "../runtime.js";
+import { RESTART_EXIT_CODE, UNDRAINED_RESTART_EXIT_CODE, SUPERVISED_ENV, BOUND_API_PORT_ENV, defaultSupervisorLink, superviseRestarts, } from "../supervisor.js";
+import { loadServeApprovals, loadServePrincipals, loadServeApi, loadServePlugins, } from "../trusted-config.js";
+export const runServe = async (command, streams, env = {}) => {
+    // First, before anything that can throw. A broken install makes the
+    // gateway import below fail, the manager restarts, and the CLI's error
+    // and help text append to the redirect file again — the crash loop this
+    // bounding exists for. Running it after the import would skip exactly
+    // that case.
+    if (command.logToFile !== false) {
+        await truncateRedirectLogs(logsDirPath(env)).catch(() => undefined);
+    }
+    // Loaded lazily: the gateway pulls in node:sqlite, which every other CLI
+    // command neither needs nor should pay for (Node still prints an
+    // experimental warning for it).
+    const { createGateway, claimHome, HomeClaimedError } = await import('@stratusagent/gateway');
+    // Before anything of this daemon's is written or opened: a second daemon
+    // on this home is refused here, with no log line, no store, and no sweep
+    // or firing of its own.
+    let claim;
+    try {
+        claim = claimHome(env);
+    }
+    catch (error) {
+        if (error instanceof HomeClaimedError) {
+            throw new HomeHeldError(await describeHeldHome(env));
+        }
+        throw error;
+    }
+    let outcome;
+    try {
+        // The one daemon the claim cannot see: one that predates it.
+        if (await legacyDaemonServing(env)) {
+            throw new HomeHeldError(await describeHeldHome(env));
+        }
+        outcome = await serveHeldHome(command, streams, env, createGateway);
+    }
+    finally {
+        // After everything: the store closed by stop(), or whatever a throw
+        // reached — a preflight that rejected before the gateway existed
+        // included, so a host that calls runServe again is not refused for a
+        // daemon that never started. And never sooner, so a replacement cannot
+        // open the store while this one still writes.
+        claim.release();
+    }
+    // An announced restart, once the home is let go — the replacement claims
+    // it next. A daemon the supervisor started asks it for the next one by
+    // exiting; the first daemon becomes the supervisor itself. Either way the
+    // process the service manager (or the terminal) started is what stays.
+    if (outcome.code === RESTART_EXIT_CODE && !readProcessEnv(env)[SUPERVISED_ENV]) {
+        return superviseRestarts(command, { ...(outcome.boundApiPort !== undefined ? { boundApiPort: outcome.boundApiPort } : {}), sessions: outcome.sessions }, streams, env);
+    }
+    return outcome.code;
+};
+const serveHeldHome = async (command, streams, env, createGateway) => {
+    // Under a service manager the daemon's stdout is gone, so everything it
+    // says is also written to ~/.stratus/logs — that file is what `stratus
+    // logs` reads, and the only record of an overnight run.
+    const logWriter = command.logToFile === false
+        ? undefined
+        : createLogWriter({
+            dir: logsDirPath(env),
+            onError: (error) => writeLine(streams.stderr, `Warning: could not write the log file (${error instanceof Error ? error.message : String(error)}); continuing.`),
+        });
+    const log = (line) => {
+        writeLine(streams.stdout, line);
+        void logWriter?.write({ ts: new Date().toISOString(), level: 'info', msg: line });
+    };
+    const warn = (line) => {
+        writeLine(streams.stderr, `Warning: ${line}`);
+        void logWriter?.write({ ts: new Date().toISOString(), level: 'warn', msg: line });
+    };
+    // Agents with stored Slack tokens go live in Slack automatically — the
+    // tokens are gateway infrastructure secrets in the channels namespace of
+    // ~/.stratus/credentials.json (see @stratusagent/channel-slack's README
+    // for the 2-minute per-agent app setup).
+    // The approval policy and the Slack approver sets come from the same
+    // config block, resolved once here: the daemon must not answer "who can
+    // approve this" differently from "is anyone being asked at all".
+    const approvalsConfig = await loadServeApprovals(env, command.configPath, warn);
+    const approvalMode = command.approvals ?? approvalsConfig.mode ?? 'headless';
+    const principalsConfig = await loadServePrincipals(env, command.configPath, warn);
+    // Read here rather than inside the gateway for the same reason as the two
+    // blocks above: the trust boundary is a property of *which file* said it,
+    // and this is where the file precedence is already understood.
+    const pluginsConfig = await loadServePlugins(env, command.configPath, warn);
+    // Every kind of grant an agent holds — command scopes, origins, standing
+    // tool grants — in one file per agent beside its soul, through one store
+    // instance for the whole daemon. One instance, because the store caches
+    // each file for the life of the process: the control API's list and
+    // revoke go through this same object, which is what lets a revoke take
+    // effect on the policy's very next decision rather than at the next
+    // restart. A whitelist that exists and will not read is said here, once,
+    // and never written over — the daemon's log is where a grant list going
+    // quiet would otherwise go unnoticed.
+    const grantStore = createFileCommandWhitelist({ directory: agentsDirPath(env), warn });
+    // The control API is a channel adapter like any other: started after the
+    // roster loads, stopped before the store drains. It is optional because
+    // installing it is how an operator says they want a port open.
+    const apiConfig = await loadServeApi(env, command.configPath, warn);
+    const apiWanted = command.api ?? apiConfig.enabled ?? true;
+    // Typed as the seam, not as whatever the first push happens to be: the
+    // list holds the control API and the Slack adapter alike.
+    const controlApiChannels = [];
+    /** The API adapter itself, for what the seam does not carry: its address, and the sessions it hands across a restart. */
+    let boundApi;
+    if (apiWanted) {
+        const createControlApi = await loadControlApi();
+        // Resolved into locals first. Inlined, `a ?? b !== undefined` parses as
+        // `a ?? (b !== undefined)` — so an explicit `--api-port 0`, which is how
+        // you ask for any free port, was falsy and fell through to the default.
+        // Everything still bound and every test still passed, on whichever port
+        // nobody happened to be using.
+        const apiHost = command.apiHost ?? apiConfig.host;
+        const requestedPort = command.apiPort ?? apiConfig.port;
+        // The port the last daemon bound, from the supervisor that started
+        // this one — taken only where this daemon's own request is still for
+        // any free port. See BOUND_API_PORT_ENV.
+        const hinted = Number(readProcessEnv(env)[BOUND_API_PORT_ENV]);
+        const apiPort = requestedPort === 0 && Number.isInteger(hinted) && hinted > 0 ? hinted : requestedPort;
+        if (createControlApi) {
+            const api = createControlApi({
+                env,
+                ...(apiHost !== undefined ? { host: apiHost } : {}),
+                ...(apiPort !== undefined ? { port: apiPort } : {}),
+                ...(command.configPath ? { configPath: command.configPath } : {}),
+                grants: grantStore,
+                log,
+                warn,
+            });
+            boundApi = api;
+            controlApiChannels.push(api);
+        }
+        else if (command.api === true || apiConfig.enabled === true) {
+            // Only when someone asked for it explicitly. A daemon that was never
+            // told to serve an API should not complain about not having one.
+            warn('the control API was requested, but @stratusagent/control-api is not installed. '
+                + 'Run `npm install -g @stratusagent/control-api` to bring it online; starting without it.');
+        }
+    }
+    // Listening before anything else is awaited: what the supervisor hands
+    // this daemon is queued in the channel until then, and the API keeps it
+    // until it is serving.
+    const supervised = Boolean(readProcessEnv(env)[SUPERVISED_ENV]);
+    const link = env.supervisorLink ?? defaultSupervisorLink;
+    if (supervised) {
+        link.receive((message) => {
+            if (message.type === 'stratusd.sessions') {
+                boundApi?.adoptSessions(message.sessions);
+            }
+        });
+    }
+    const channelCredentials = await loadChannelCredentials(env);
+    const slackAgents = Object.entries(channelCredentials.slack ?? {});
+    const channels = [...controlApiChannels];
+    // Tracked on its own, never as `channels.length`: the list now holds the
+    // control API too, and "can anyone be asked for an approval" is a question
+    // about the Slack adapter specifically. Reading it off the list length
+    // would tell a daemon with an API and no Slack app that every agent is
+    // reachable, and its gated calls would park with nobody rendering them.
+    let slackAdapterUp = false;
+    if (slackAgents.length > 0) {
+        // Channel packages are optional peers: the CLI never bundles a
+        // transport nobody asked for (the Slack SDKs alone are ~9 MB). A
+        // missing one degrades like a broken app does — the daemon serves
+        // every other channel — with an actionable line instead of a
+        // module-not-found stack.
+        const adapter = await loadSlackAdapter();
+        if (adapter) {
+            slackAdapterUp = true;
+            channels.push(adapter({
+                agents: slackAgents.map(([agentId, tokens]) => {
+                    const route = resolveAgentApprovals(approvalsConfig, agentId);
+                    const principals = resolveAgentPrincipals(principalsConfig, agentId);
+                    return {
+                        agentId,
+                        appToken: tokens.appToken,
+                        botToken: tokens.botToken,
+                        ...(route.slackApprovers ? { approvers: route.slackApprovers } : {}),
+                        ...(route.slackChannel ? { approvalChannel: route.slackChannel } : {}),
+                        ...(principals.slackUsers ? { principals: principals.slackUsers } : {}),
+                    };
+                }),
+                log,
+                warn,
+            }));
+        }
+        else {
+            warn(`Slack tokens are stored for ${slackAgents.length} agent(s), but @stratusagent/channel-slack is not installed. `
+                + 'Run `npm install -g @stratusagent/channel-slack` to bring them online; starting without the Slack channel.');
+        }
+    }
+    // A daemon is the costliest place for a silently demoted subscription:
+    // every dispatch for as long as it runs, with nobody watching. The
+    // gateway resolves each agent's soul independently on dispatch, so an
+    // agent pinning anthropic can pick up an environment key even when the
+    // daemon's own default is openai — checking only the default selection
+    // would miss exactly the agent that is being billed. Each distinct
+    // selection is resolved once here, and duplicate warnings are collapsed
+    // so a ten-agent roster does not print ten identical lines.
+    {
+        const warned = new Set();
+        const collect = (line) => {
+            if (warned.has(line)) {
+                return;
+            }
+            warned.add(line);
+            // Through `warn`, not straight to stderr: under a service manager
+            // stderr is gone, and a cost warning that only exists there is
+            // invisible in exactly the deployment it matters for. `warn` adds
+            // its own prefix, so the one already on the line comes off.
+            warn(line.replace(/^Warning: /, ''));
+        };
+        const captured = {
+            stdout: { write: () => true },
+            stderr: { write: (chunk) => { collect(chunk.replace(/\n$/, '')); return true; } },
+        };
+        // A pinned soul does not merely add a provider — the gateway DEMOTES
+        // the daemon-wide defaults it outranks, including STRATUS_PROVIDER, so
+        // each served runtime is resolved the way a dispatch resolves it.
+        for (const served of await servedRuntimes(env, command.configPath)) {
+            await warnOnCredentialOverride(served.runtime, captured, served.env);
+        }
+    }
+    // The daemon had no policy at all: createGateway falls back to
+    // AllowAllApprovalPolicy, so every tool call from every agent
+    // auto-approved, indefinitely, with nobody watching. That was survivable
+    // while `serve` was something you ran in a terminal you were sitting at;
+    // it is not, now that setup installs it under launchd by default.
+    //
+    // There is no terminal behind a service manager, so the choice is
+    // between refusing every gated call (`headless`) and parking the turn to
+    // ask through a channel (`remote`). Headless stays the default: a daemon
+    // that starts waiting on people who were never told they are on the hook
+    // hangs turns instead of refusing them. Every refusal is logged — an
+    // unattended denial that appears nowhere reads like an agent that decided
+    // not to bother.
+    const onDecision = (decision) => {
+        if (decision.allowed) {
+            // A call that ran because somebody once said "always" is the one
+            // allowed decision the trace records: it is how something happened
+            // unattended, which is what an incident reconstruction needs to tell
+            // apart from a tool that was simply safe. Name and date, never input.
+            if (decision.grant) {
+                const by = decision.grant.grantedBy ? ` by ${decision.grant.grantedBy}` : '';
+                log(`${decision.agentId}: ${decision.toolName} ran under a standing grant (${describeToolGrant(decision.grant)}, granted ${decision.grant.grantedAt}${by}) (session ${decision.sessionId})`);
+            }
+            return;
+        }
+        warn(`${decision.agentId}: ${decision.reason} (session ${decision.sessionId})`);
+    };
+    // A factory, not a policy: remote mode parks turns on a transport the
+    // gateway owns, so the policy cannot exist until the gateway is building
+    // it. Headless takes the same path so there is one construction site.
+    // The command-scope engine, which only has a caller once a shell pack is
+    // installed. Wired unconditionally because it costs nothing without one:
+    // a tool that carries no command string is judged by its risk exactly as
+    // before. The whitelist lives beside the agent's soul, per agent.
+    const commands = {
+        whitelist: grantStore,
+        onScopeRemembered: ({ agentId, scope }) => {
+            // An approval that widens what runs unattended, for every future
+            // session, is precisely the decision that must not be the one leaving
+            // no trace.
+            log(`${agentId}: "${describeCommandScope(scope)}" now runs without asking`);
+        },
+    };
+    // The origin-scope engine, whose grants live in the same file as the
+    // command scopes: one place an operator looks to see what an agent may
+    // do unattended. Wired unconditionally for the same reason — a tool that
+    // names no origin is judged by its risk exactly as before.
+    const origins = {
+        whitelist: grantStore,
+        onScopeRemembered: ({ agentId, scope }) => {
+            log(`${agentId}: ${describeOriginScope(scope)} is now acted on without asking`);
+        },
+    };
+    const approvals = (transport) => {
+        // The standing-grant engine, in the same file again — and the tool's
+        // contributor from the gateway, so a grant records which package's
+        // tool the operator said yes to and stops applying when that changes.
+        const grants = {
+            store: grantStore,
+            contributorOf: transport.contributorOf,
+            onGranted: ({ agentId, grant }) => {
+                log(`${agentId}: ${describeToolGrant(grant)} now runs without asking, until revoked${grant.grantedBy ? ` (granted by ${grant.grantedBy})` : ''}`);
+            },
+        };
+        return createPermissionPolicy(
+        // The destination scope rides along in BOTH modes — it is what lets a
+        // scheduled turn report to the channel a human approved with the
+        // schedule, and headless (where every other gated call is refused) is
+        // exactly the deployment it exists for. So do the grants: a standing
+        // grant is the only path a scope-less gated tool has to running
+        // unattended, and headless is where that matters.
+        approvalMode === 'remote'
+            ? { mode: 'remote', request: transport.request, onDecision, commands, origins, grants, destinations: transport.destinations }
+            : { mode: 'headless', onDecision, commands, origins, grants, destinations: transport.destinations });
+    };
+    if (approvalMode === 'remote') {
+        // Only agents whose channel actually came up can be asked: tokens on
+        // disk with the Slack package missing means nothing renders the
+        // request, and the turn discovers that by hanging.
+        const askable = slackAdapterUp ? slackAgents.map(([agentId]) => agentId) : [];
+        log(`approvals: remote — gated calls are parked and asked in Slack (${describeApprovers(approvalsConfig, askable)})`);
+    }
+    if (slackAdapterUp) {
+        // Said at startup, because the failure it names is silent otherwise: a
+        // daemon with no principals serves every Slack message as `unknown`,
+        // and the operator finds out when their agent's memory reads that way.
+        log(`provenance: ${describePrincipals(principalsConfig, slackAgents.map(([agentId]) => agentId))}`);
+    }
+    /**
+     * The one signal handler this daemon has, for the whole of its life —
+     * installed by the wait below, removed in the finally after the drain.
+     * See the wait for why it is never `once` and never removed sooner.
+     */
+    let stopSignal;
+    let repeatWarned = false;
+    // The gateway's restart hands the process back here once it has stopped:
+    // the outcome is kept and the wait below released, and the tail of this
+    // function decides what "come back" means for this process.
+    let restart;
+    /** A signal or the host's abort asked for a stop — set when the wait ends for that reason. */
+    let stopRequested = false;
+    let requestShutdown = () => { };
+    const shutdownRequested = new Promise((resolve) => {
+        requestShutdown = resolve;
+    });
+    const gateway = createGateway({
+        env,
+        approvals,
+        onRestart: (outcome) => {
+            restart = outcome;
+            requestShutdown();
+        },
+        ...(Object.keys(pluginsConfig).length > 0
+            ? {
+                plugins: pluginsConfig,
+                // Resolved from *here*, not from inside the gateway.
+                // `import.meta.resolve` answers relative to the module that calls
+                // it, and a plugin is installed alongside the thing the operator
+                // installed — this CLI. Letting the gateway resolve from its own
+                // location works only where the layout happens to be flat.
+                pluginHost: {
+                    resolve: (specifier) => import.meta.resolve(specifier),
+                    import: (specifier) => import(__rewriteRelativeImportExtension(specifier)),
+                },
+            }
+            : {}),
+        ...(approvalsConfig.timeoutMs !== undefined ? { approvalTimeoutMs: approvalsConfig.timeoutMs } : {}),
+        ...(command.configPath ? { selection: { configPath: command.configPath } } : {}),
+        ...(command.idleTimeoutMs !== undefined ? { idleTimeoutMs: command.idleTimeoutMs } : {}),
+        ...(channels.length > 0 ? { channels } : {}),
+        log,
+        warn,
+    });
+    if (command.events) {
+        gateway.bus.subscribe((event) => {
+            const line = formatEvent(event);
+            if (line) {
+                writeLine(streams.stdout, line);
+            }
+        });
+    }
+    if (logWriter) {
+        // Only session.created carries the agent id, so it seeds a map the
+        // later events in that session read from. A session resumed after a
+        // restart never re-creates, so an unmapped id falls back to the
+        // durable store — which is exactly the case where attribution matters.
+        const agentBySession = new Map();
+        // EventBus.emit awaits its subscribers, and a streaming provider awaits
+        // the delta sink — so anything awaited here lands on the critical path
+        // of every streamed token. This handler is deliberately synchronous:
+        // provider.delta is dropped outright (it carries no detail worth
+        // keeping, one record per token), the timestamp is taken now, and the
+        // write is queued without awaiting it.
+        gateway.bus.subscribe((event) => {
+            if (event.type === 'provider.delta') {
+                return;
+            }
+            const ts = new Date().toISOString();
+            if (event.type === 'session.created') {
+                agentBySession.set(event.sessionId, event.agentId);
+            }
+            const detail = eventDetail(event);
+            const base = {
+                ts,
+                level: 'event',
+                event: event.type,
+                sessionId: event.sessionId,
+                ...(detail ? { detail } : {}),
+            };
+            const known = agentBySession.get(event.sessionId);
+            if (known) {
+                void logWriter.write({ ...base, agentId: known });
+            }
+            else {
+                // A session resumed after a restart never re-creates, so its agent
+                // is only in the store. That lookup is deferred off this path; the
+                // timestamp above keeps ordering honest.
+                void gateway.store.get(event.sessionId)
+                    .then((session) => {
+                    const agentId = session?.agent.id;
+                    if (agentId) {
+                        agentBySession.set(event.sessionId, agentId);
+                    }
+                    return logWriter.write({ ...base, ...(agentId ? { agentId } : {}) });
+                })
+                    .catch(() => logWriter.write(base));
+            }
+            if (event.type === 'session.completed' || event.type === 'session.failed') {
+                agentBySession.delete(event.sessionId);
+            }
+        });
+    }
+    await gateway.start();
+    // Read now, while the API is bound: its stop forgets the address, and
+    // a restart's respawn needs it (see ServeOutcome).
+    const boundApiPort = boundApi?.url !== undefined ? Number(new URL(boundApi.url).port) : undefined;
+    if (supervised && boundApiPort !== undefined && Number.isInteger(boundApiPort) && boundApiPort > 0) {
+        link.send({ type: 'stratusd.bound-api-port', port: boundApiPort });
+    }
+    // Under one finally from here: a throw anywhere after the start — a
+    // host's writable refusing a line, say — must still stop the gateway
+    // before the claim on the home is released, or a live gateway would be
+    // left behind a lock the next daemon can take.
+    let redirectTimer;
+    try {
+        // The roster is only known once the gateway has loaded it, and in remote
+        // mode an agent no channel can ask for is the quietest failure this
+        // feature has: its gated calls park with nobody rendering them and wait
+        // out the whole timeout before being denied. No channel can detect this
+        // on its own — a request is a broadcast, and no adapter knows whether
+        // another one is about to answer — so it is reported here, where the
+        // roster and the channel list are both in view.
+        if (approvalMode === 'remote') {
+            const askable = new Set(slackAdapterUp ? slackAgents.map(([agentId]) => agentId) : []);
+            const unreachable = gateway.agents().map((agent) => agent.id).filter((id) => !askable.has(id));
+            if (unreachable.length > 0) {
+                warn(`no channel can ask for ${unreachable.join(', ')}, so their gated calls will wait out the `
+                    + 'approval timeout and then be denied. Connect a Slack app for them, or run with --approvals headless.');
+            }
+        }
+        writeLine(streams.stdout, 'Press Ctrl+C to stop.');
+        // And periodically, for a long-running daemon that warns steadily
+        // without ever writing enough records to rotate. Unref'd, so it never
+        // holds the process open. Armed only once the daemon is actually
+        // serving: every step above can throw, and runServe is an exported
+        // function as much as a process entry point — in a host that survives
+        // the failure, a timer armed before the throw would outlive the call
+        // and go on truncating that environment's redirect logs. The finally
+        // below takes it down on every other exit path.
+        if (logWriter) {
+            redirectTimer = setInterval(() => void truncateRedirectLogs(logsDirPath(env)), 5 * 60_000);
+            redirectTimer.unref?.();
+        }
+        // Hold the event loop open until a shutdown request, then drain: new
+        // dispatches are refused while in-flight turns finish.
+        await new Promise((resolve) => {
+            const keepAlive = setInterval(() => { }, 2_147_000_000);
+            let settled = false;
+            const shutdown = () => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                clearInterval(keepAlive);
+                resolve();
+            };
+            stopSignal = () => {
+                if (!settled) {
+                    shutdown();
+                    return;
+                }
+                // A signal while a drain is already running — a repeat, or a stop
+                // arriving during a restart's drain. Either way the drain goes on,
+                // and a daemon told to stop does not come back.
+                stopRequested = true;
+                if (!repeatWarned) {
+                    repeatWarned = true;
+                    // Said from signal dispatch, outside the promise and its finally:
+                    // a stream that throws on write (a host's injected stderr) would
+                    // otherwise end the process from here — mid-drain, the very
+                    // thing this handler exists to prevent. The word is best effort.
+                    try {
+                        warn('stop signal received while draining; still draining, and this daemon will not come back (SIGKILL ends it at once)');
+                    }
+                    catch {
+                        // Nothing to say it to; the drain is what matters.
+                    }
+                }
+            };
+            // `on`, never `once`, and not removed until the drain is over (the
+            // finally below). `once` drops the listener before running it, Node
+            // uninstalls its native handler the moment no listener is left, and
+            // a second SIGTERM landing in that window ends the process by the
+            // default action — mid-drain, with nothing said. The second signal
+            // is the normal case, not an edge: a stop delivered to the process
+            // group, as systemd's KillMode=control-group and a terminal's Ctrl+C
+            // deliver it, reaches a supervised daemon once from the kernel and
+            // once more forwarded by its supervisor. Reproduced two runs in
+            // three: the replacement died and the supervisor exited 1 on a
+            // `stratus service stop` after a restart. SIGKILL still ends the
+            // process at once.
+            process.on('SIGTERM', stopSignal);
+            process.on('SIGINT', stopSignal);
+            void shutdownRequested.then(shutdown);
+            if (env.shutdownSignal?.aborted) {
+                shutdown();
+            }
+            else {
+                env.shutdownSignal?.addEventListener('abort', shutdown, { once: true });
+            }
+        });
+        // Decided now, before the stop below: a restart's drain can still be
+        // running when a stop signal releases this wait, and `onRestart` then
+        // fires during that stop. A daemon told to stop does not come back,
+        // whatever it was told before.
+        if (!restart) {
+            stopRequested = true;
+        }
+        if (restart) {
+            // Already stopped: the gateway drained and closed before handing the
+            // process over, and the stop() below finds nothing to do. Said here,
+            // while the structured log still takes writes — the next lines
+            // belong to a process that has none.
+            if (!restart.drained) {
+                // A turn that ignored its abort is still running in this process,
+                // possibly still writing sessions. Starting a fresh daemon beside
+                // it would be two processes on one store; exiting instead leaves
+                // the service manager, where there is one, to bring it back.
+                warn(`restart: something did not let go; exiting with status ${UNDRAINED_RESTART_EXIT_CODE} for the service manager to restart, instead of starting a new daemon beside it`);
+            }
+            else {
+                log(`restarting stratusd${restart.reason ? ` (${restart.reason})` : ''}`);
+            }
+        }
+        else {
+            writeLine(streams.stdout, 'Stopping — draining in-flight turns.');
+        }
+    }
+    finally {
+        try {
+            await gateway.stop();
+            // Writes are queued and dropped on the hot path so logging never sits
+            // on a streamed token. That makes the tail of the log the part most
+            // likely to be lost — and the tail is the shutdown reason, the last
+            // warning, the line explaining a restart.
+            await logWriter?.flush();
+        }
+        finally {
+            // The shutdown is over, the flush included: a stop signal from here
+            // on is the process's to handle by default again — and a host that
+            // calls runServe repeatedly (the tests) must not accumulate handlers.
+            // Last, and under its own finally, because the listener is on the
+            // global process: taken off before the flush, a repeated signal
+            // landing during it would end the process by the default action
+            // (which a supervisor reports as a failure, and a service manager
+            // set to restart on failure would then bring back a daemon an
+            // operator just stopped); left on by a stop() that rejects (its last
+            // log line can throw through an injected stream), a settled handler
+            // would swallow the host's next signal.
+            if (stopSignal) {
+                process.off('SIGTERM', stopSignal);
+                process.off('SIGINT', stopSignal);
+            }
+            if (redirectTimer) {
+                clearInterval(redirectTimer);
+            }
+        }
+    }
+    const bound = boundApiPort !== undefined && Number.isInteger(boundApiPort) && boundApiPort > 0
+        ? { boundApiPort }
+        : {};
+    if (!restart || stopRequested) {
+        return { code: 0, ...bound, sessions: [] };
+    }
+    if (!restart.drained) {
+        (env.exitProcess ?? process.exit)(UNDRAINED_RESTART_EXIT_CODE);
+        return { code: UNDRAINED_RESTART_EXIT_CODE, ...bound, sessions: [] };
+    }
+    // Coming back: the browser sessions live at the stop go to the
+    // replacement — up the channel to the supervisor when this daemon has
+    // one, else with the outcome to the supervisor this process becomes.
+    const sessions = boundApi?.sessionsAtStop() ?? [];
+    if (supervised && sessions.length > 0) {
+        link.send({ type: 'stratusd.sessions', sessions });
+    }
+    // Asked to come back. Whether this process starts the next daemon or
+    // exits for its supervisor to is `runServe`'s decision, after the home
+    // is released: the claim is held until this returns, and a daemon
+    // started before that would be refused as a second one on the home.
+    return { code: RESTART_EXIT_CODE, ...bound, sessions };
+};
+//# sourceMappingURL=serve.js.map

package/dist/commands/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":";;;;;;;;AAOA,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAKlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAkB,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEpF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAuB,cAAc,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EACL,iBAAiB,EACjB,2BAA2B,EAC3B,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAC3B,OAA2B,EAC3B,OAAmB,EACnB,MAAsB,EAAE,EACP,EAAE;IACnB,oEAAoE;IACpE,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,aAAa;IACb,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,oBAAoB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,yEAAyE;IACzE,iEAAiE;IACjE,gCAAgC;IAChC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAE7F,yEAAyE;IACzE,yEAAyE;IACzE,wBAAwB;IACxB,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,6DAA6D;QAC7D,IAAI,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,oEAAoE;QACpE,iEAAiE;QACjE,qEAAqE;QACrE,uEAAuE;QACvE,8CAA8C;QAC9C,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;IACD,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/E,OAAO,iBAAiB,CACtB,OAAO,EACP,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EACrH,OAAO,EACP,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC,CAAC;AAYF,MAAM,aAAa,GAAG,KAAK,EACzB,OAA2B,EAC3B,OAAmB,EACnB,GAAmB,EACnB,aAA6B,EACN,EAAE;IACzB,wEAAwE;IACxE,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,SAAS,GAA0B,OAAO,CAAC,SAAS,KAAK,KAAK;QAClE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,CAAC;YACd,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC;YACrB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAC3B,OAAO,CAAC,MAAM,EACd,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CACjH;SACF,CAAC,CAAC;IACP,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;QAClC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QAC9C,KAAK,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yCAAyC;IACzC,qEAAqE;IACrE,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,IAAI,UAAU,CAAC;IAC7E,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAElF,0EAA0E;IAC1E,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAE5E,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,uEAAuE;IACvE,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,sCAAsC;IACtC,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvF,yEAAyE;IACzE,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC;IAC3D,uEAAuE;IACvE,0DAA0D;IAC1D,MAAM,kBAAkB,GAA4B,EAAE,CAAC;IACvD,yHAAyH;IACzH,IAAI,QAIS,CAAC;IACd,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,gBAAgB,GAAG,MAAM,cAAc,EAAE,CAAC;QAChD,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,+BAA+B;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC;QAClD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC;QACxD,mEAAmE;QACnE,qEAAqE;QACrE,yCAAyC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;QACvG,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,gBAAgB,CAAC;gBAC3B,GAAG;gBACH,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,EAAE,UAAU;gBAClB,GAAG;gBACH,IAAI;aACL,CAAC,CAAC;YACH,QAAQ,GAAG,GAAG,CAAC;YACf,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9D,qEAAqE;YACrE,iEAAiE;YACjE,IAAI,CACF,iFAAiF;kBAC/E,yFAAyF,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,uBAAuB;IACvB,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACzD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACvB,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACzC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC;IACzC,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,+DAA+D;QAC/D,iEAAiE;QACjE,kEAAkE;QAClE,6DAA6D;QAC7D,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,cAAc,GAAG,IAAI,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;gBACpB,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC5C,MAAM,KAAK,GAAG,qBAAqB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;oBAC9D,MAAM,UAAU,GAAG,sBAAsB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;oBACrE,OAAO;wBACL,OAAO;wBACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACtE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxE,CAAC;gBACJ,CAAC,CAAC;gBACF,GAAG;gBACH,IAAI;aACL,CAAC,CAAC,CAAC;QACN,CAAC;aAAM,CAAC;YACN,IAAI,CACF,+BAA+B,WAAW,CAAC,MAAM,+DAA+D;kBAC9G,4GAA4G,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,mEAAmE;IACnE,wEAAwE;IACxE,4DAA4D;IAC5D,CAAC;QACC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAQ,EAAE;YACrC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,kEAAkE;YAClE,+DAA+D;YAC/D,kEAAkE;YAClE,4DAA4D;YAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,MAAM,QAAQ,GAAe;YAC3B,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YAC7B,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE;SAC1F,CAAC;QACF,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;QAClE,KAAK,MAAM,MAAM,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,wBAAwB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,8DAA8D;IAC9D,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE,EAAE;IACF,kEAAkE;IAClE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,0EAA0E;IAC1E,iBAAiB;IACjB,MAAM,UAAU,GAAG,CAAC,QAA4B,EAAQ,EAAE;QACxD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,iEAAiE;YACjE,mEAAmE;YACnE,qEAAqE;YACrE,sEAAsE;YACtE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,gCAAgC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,QAAQ,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,cAAc,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;YAC/L,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,MAAM,aAAa,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,sEAAsE;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,UAAU;QACrB,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAA4C,EAAE,EAAE;YAClF,iEAAiE;YACjE,sEAAsE;YACtE,YAAY;YACZ,GAAG,CAAC,GAAG,OAAO,MAAM,oBAAoB,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9E,CAAC;KACF,CAAC;IACF,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,UAAU;QACrB,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAA2C,EAAE,EAAE;YACjF,GAAG,CAAC,GAAG,OAAO,KAAK,mBAAmB,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAClF,CAAC;KACF,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,SAA4B,EAAkB,EAAE;QACjE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,MAAM,GAAG;YACb,KAAK,EAAE,UAAU;YACjB,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAyC,EAAE,EAAE;gBACvE,GAAG,CAAC,GAAG,OAAO,KAAK,iBAAiB,CAAC,KAAK,CAAC,0CAA0C,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpJ,CAAC;SACF,CAAC;QACF,OAAO,sBAAsB;QAC3B,sEAAsE;QACtE,iEAAiE;QACjE,sEAAsE;QACtE,qEAAqE;QACrE,gEAAgE;QAChE,kDAAkD;QAClD,YAAY,KAAK,QAAQ;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE;YAC7H,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CACtG,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC9B,qEAAqE;QACrE,gEAAgE;QAChE,mDAAmD;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,kEAAkE,iBAAiB,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,GAAG,CAAC,eAAe,kBAAkB,CAAC,gBAAgB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAoC,CAAC;IACzC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,yEAAyE;IACzE,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,OAAmC,CAAC;IACxC,8FAA8F;IAC9F,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,eAAe,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACtD,eAAe,GAAG,OAAO,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,GAAG;QACH,SAAS;QACT,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACrB,OAAO,GAAG,OAAO,CAAC;YAClB,eAAe,EAAE,CAAC;QACpB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC;gBACE,OAAO,EAAE,aAAa;gBACtB,qDAAqD;gBACrD,kEAAkE;gBAClE,iEAAiE;gBACjE,iEAAiE;gBACjE,2DAA2D;gBAC3D,UAAU,EAAE;oBACV,OAAO,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC9D,MAAM,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,MAAM,kCAAC,SAAS,EAAC;iBACjD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,eAAe,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG;QACH,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,mEAAmE;QACnE,oEAAoE;QACpE,gEAAgE;QAChE,uEAAuE;QACvE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QACjD,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,iEAAiE;QACjE,sEAAsE;QACtE,uCAAuC;QACvC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACrC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG;gBACX,EAAE;gBACF,KAAK,EAAE,OAAgB;gBACvB,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC;YACF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,mEAAmE;gBACnE,yCAAyC;gBACzC,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;qBACpC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;oBAChB,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;oBAClC,IAAI,OAAO,EAAE,CAAC;wBACZ,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;oBAC/C,CAAC;oBACD,OAAO,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACvE,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC1E,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAEtB,sEAAsE;IACtE,mDAAmD;IACnD,MAAM,YAAY,GAAG,QAAQ,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,UAAU,IAAI,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACnG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,+CAA+C;IAC/C,IAAI,aAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,yEAAyE;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CACF,0BAA0B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C;sBACzF,sGAAsG,CACzG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAEnD,kEAAkE;QAClE,sEAAsE;QACtE,iEAAiE;QACjE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,oBAAoB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;YAC3F,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1B,CAAC;QAED,qEAAqE;QACrE,uDAAuD;QACvD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,aAAa,CAAC,CAAC;YACvD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,QAAQ,GAAG,GAAS,EAAE;gBAC1B,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,UAAU,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,QAAQ,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBACD,kEAAkE;gBAClE,mEAAmE;gBACnE,gDAAgD;gBAChD,aAAa,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,YAAY,GAAG,IAAI,CAAC;oBACpB,kEAAkE;oBAClE,iEAAiE;oBACjE,4DAA4D;oBAC5D,iEAAiE;oBACjE,IAAI,CAAC;wBACH,IAAI,CAAC,mHAAmH,CAAC,CAAC;oBAC5H,CAAC;oBAAC,MAAM,CAAC;wBACP,mDAAmD;oBACrD,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;YACF,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,mEAAmE;YACnE,gEAAgE;YAChE,+DAA+D;YAC/D,iEAAiE;YACjE,mBAAmB;YACnB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAClC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACjC,KAAK,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;gBAChC,QAAQ,EAAE,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,qEAAqE;QACrE,sEAAsE;QACtE,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,qEAAqE;YACrE,qEAAqE;YACrE,+DAA+D;YAC/D,qCAAqC;YACrC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,6DAA6D;gBAC7D,IAAI,CAAC,0DAA0D,2BAA2B,iFAAiF,CAAC,CAAC;YAC/K,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,sBAAsB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,sCAAsC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,sEAAsE;YACtE,oEAAoE;YACpE,oEAAoE;YACpE,0CAA0C;YAC1C,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,oEAAoE;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,kEAAkE;YAClE,gEAAgE;YAChE,gEAAgE;YAChE,kEAAkE;YAClE,8DAA8D;YAC9D,qEAAqE;YACrE,oEAAoE;YACpE,wCAAwC;YACxC,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,aAAa,CAAC,aAAa,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QAC5F,CAAC,CAAC,EAAE,YAAY,EAAE;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,CAAC,OAAO,IAAI,aAAa,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,+DAA+D;IAC/D,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,QAAQ,GAAG,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,UAAU,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,qEAAqE;IACrE,uEAAuE;IACvE,kEAAkE;IAClE,oEAAoE;IACpE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC;AACzD,CAAC,CAAC"}