@telora/daemon 0.21.26 → 0.21.82

package/dist/shell/schema-version-gate.js

@@ -0,0 +1,220 @@
+/**
+ * Schema-version gate (D3-T3).
+ *
+ * Compares the publish-time `expectedMigrations` set embedded in
+ * build-info.json (T1) against the migrations actually applied in the
+ * live DB (T2's daemon_get_applied_migrations action). On mismatch:
+ *   - fail-fast (production default): exit 1 with the missing list
+ *   - warn (dev default): log and continue
+ *   - off: skip the check entirely
+ *
+ * Runs at startup immediately after validateTrackerAuth so the daemon
+ * never reaches its write path with a deploy-order schema drift.
+ *
+ * Deploy-race tolerance: infra's apply-migrations.sh applies a migration
+ * and writes its public._migrations ledger row in SEPARATE (non-atomic)
+ * psql invocations. Across a multi-migration deploy this leaves an
+ * inter-migration window where the schema is live but the newest ledger
+ * rows are not written yet -- a daemon (re)starting in that window reads
+ * recently-applied migrations as "missing". To avoid false-tripping into
+ * read-only mode, the gate classifies the missing set: a small number of
+ * only-very-recent missing migrations is a transient eventual-consistency
+ * gap, so the gate re-polls the ledger with bounded backoff (early-exit
+ * the moment the gap closes) before deciding. A large gap, or any missing
+ * migration older than the recency margin, is genuine drift and trips
+ * immediately with no added latency.
+ *
+ * Operator runbook: docs/runbook-schema-version-gate.md
+ * Incident: 2026-05-21 escalation 4bffb633.
+ */
+import { getExpectedMigrations as defaultGetExpected } from '../update/build-info.js';
+import { getAppliedMigrations as defaultGetApplied } from '../queries/migrations.js';
+import { createLogger } from './log.js';
+import { loadEnvConfig } from '@telora/daemon-core';
+const dlog = createLogger({ module: 'schema-gate' });
+/**
+ * Resolve the operating mode from environment.
+ *   TELORA_SCHEMA_GATE=off | 0     -> 'off'
+ *   TELORA_SCHEMA_GATE=warn        -> 'warn'
+ *   TELORA_SCHEMA_GATE=fail-fast   -> 'fail-fast'
+ *   unset (default):
+ *     NODE_ENV=production -> 'fail-fast'
+ *     otherwise           -> 'warn'
+ */
+export function resolveSchemaGateMode(env = process.env) {
+    const raw = (loadEnvConfig(env).TELORA_SCHEMA_GATE ?? '').trim().toLowerCase();
+    if (raw === 'off' || raw === '0')
+        return 'off';
+    if (raw === 'warn')
+        return 'warn';
+    if (raw === 'fail-fast')
+        return 'fail-fast';
+    // Default: prod is strict, dev is permissive
+    return env.NODE_ENV === 'production' ? 'fail-fast' : 'warn';
+}
+/**
+ * Extract the supabase migration version (timestamp prefix) from a
+ * full filename: '20260521233716_daemon_get_applied_migrations.sql'
+ *   -> '20260521233716'. Returns the input unchanged if no underscore.
+ */
+export function versionPrefix(filename) {
+    const underscore = filename.indexOf('_');
+    if (underscore <= 0)
+        return filename;
+    return filename.slice(0, underscore);
+}
+export const DEFAULT_TRANSIENT_TOLERANCE = {
+    maxMissing: 3,
+    recencyMarginMs: 10 * 60 * 1000, // 10 minutes
+    repollAttempts: 6,
+    repollWindowMs: 45_000, // 45 seconds
+};
+/** Initial re-poll delay; doubles each attempt up to MAX_REPOLL_DELAY_MS. */
+const INITIAL_REPOLL_DELAY_MS = 1_000;
+const MAX_REPOLL_DELAY_MS = 8_000;
+/**
+ * Resolve transient-tolerance tunables from environment. Recency margin and
+ * the re-poll window are configured in SECONDS for operator friendliness;
+ * everything is stored internally in ms.
+ *
+ *   TELORA_SCHEMA_GATE_TRANSIENT_MAX     -> maxMissing (count)
+ *   TELORA_SCHEMA_GATE_RECENCY_MARGIN_SEC -> recencyMarginMs
+ *   TELORA_SCHEMA_GATE_REPOLL_ATTEMPTS   -> repollAttempts (count)
+ *   TELORA_SCHEMA_GATE_REPOLL_WINDOW_SEC -> repollWindowMs
+ */
+export function resolveTransientToleranceConfig(env = process.env) {
+    const envCfg = loadEnvConfig(env);
+    return {
+        maxMissing: envCfg.TELORA_SCHEMA_GATE_TRANSIENT_MAX,
+        recencyMarginMs: envCfg.TELORA_SCHEMA_GATE_RECENCY_MARGIN_SEC * 1000,
+        repollAttempts: envCfg.TELORA_SCHEMA_GATE_REPOLL_ATTEMPTS,
+        repollWindowMs: envCfg.TELORA_SCHEMA_GATE_REPOLL_WINDOW_SEC * 1000,
+    };
+}
+/**
+ * Parse a 14-digit migration version (YYYYMMDDHHMMSS, UTC) into epoch ms.
+ * Returns NaN for anything that is not exactly 14 digits -- callers treat
+ * an unparseable timestamp as non-recent (i.e. genuine drift), which is the
+ * conservative choice.
+ */
+export function parseMigrationTimestamp(version) {
+    const m = /^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})$/.exec(version);
+    if (!m)
+        return NaN;
+    const [, y, mo, d, h, mi, s] = m;
+    return Date.UTC(Number(y), Number(mo) - 1, Number(d), Number(h), Number(mi), Number(s));
+}
+/**
+ * Classify a non-empty missing set as a transient deploy-race tail or
+ * genuine drift, given the currently-applied versions.
+ *
+ * Transient requires BOTH:
+ *   - count <= maxMissing, AND
+ *   - every missing timestamp is "very recent": newer than the newest
+ *     applied timestamp minus the recency margin.
+ *
+ * Drift otherwise -- including the degenerate cases (no applied baseline,
+ * or an unparseable timestamp), which cannot be a recoverable deploy tail.
+ */
+export function classifyMissing(missing, applied, cfg) {
+    if (missing.length > cfg.maxMissing)
+        return 'drift';
+    const appliedTs = applied.map(parseMigrationTimestamp).filter((n) => !Number.isNaN(n));
+    if (appliedTs.length === 0)
+        return 'drift'; // no baseline to call anything "recent"
+    const newestApplied = Math.max(...appliedTs);
+    const recencyThreshold = newestApplied - cfg.recencyMarginMs;
+    for (const v of missing) {
+        const ts = parseMigrationTimestamp(v);
+        if (Number.isNaN(ts))
+            return 'drift';
+        if (ts <= recencyThreshold)
+            return 'drift'; // older than the margin -> not a deploy tail
+    }
+    return 'transient';
+}
+function computeMissing(expected, applied) {
+    const appliedSet = new Set(applied);
+    return expected.filter((v) => !appliedSet.has(v));
+}
+const defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export async function checkSchemaVersion(deps = {}) {
+    const mode = deps.mode ?? resolveSchemaGateMode();
+    const cfg = deps.transientTolerance ?? resolveTransientToleranceConfig();
+    const getApplied = deps.getApplied ?? defaultGetApplied;
+    const sleep = deps.sleep ?? defaultSleep;
+    const now = deps.now ?? Date.now;
+    const log = deps.log ?? ((msg) => dlog.info(msg));
+    const expectedFilenames = (deps.getExpected ?? defaultGetExpected)();
+    const expected = expectedFilenames.map(versionPrefix);
+    // Dev mode -- build-info missing or empty. Skip the gate.
+    if (expected.length === 0) {
+        return { mode, expected: [], applied: [], missing: [], ok: true, classification: 'ok', attempts: 0 };
+    }
+    let applied = await getApplied();
+    let attempts = 1;
+    let missing = computeMissing(expected, applied);
+    if (missing.length === 0) {
+        return { mode, expected, applied, missing, ok: true, classification: 'ok', attempts };
+    }
+    // Something is missing -- transient deploy tail, or genuine drift?
+    const classification = classifyMissing(missing, applied, cfg);
+    if (classification === 'drift') {
+        // Genuine drift: trip immediately, no re-poll, no added latency.
+        return { mode, expected, applied, missing, ok: false, classification: 'drift', attempts };
+    }
+    // Transient: re-poll the ledger with bounded backoff, exiting early the
+    // moment the gap closes. Bounded by BOTH the attempt count and the total
+    // wall-clock window so a never-resolving gap still trips read-only.
+    log(`[schema-gate] Transient gap: ${missing.length} very-recent migration(s) missing ` +
+        `(<= ${cfg.maxMissing}); re-polling up to ${cfg.repollAttempts}x over ${Math.round(cfg.repollWindowMs / 1000)}s ` +
+        'before deciding (deploy-race tolerance).');
+    const start = now();
+    let delay = INITIAL_REPOLL_DELAY_MS;
+    let repolls = 0;
+    while (repolls < cfg.repollAttempts) {
+        const elapsed = now() - start;
+        if (elapsed >= cfg.repollWindowMs)
+            break;
+        const remaining = cfg.repollWindowMs - elapsed;
+        await sleep(Math.min(delay, remaining));
+        applied = await getApplied();
+        attempts += 1;
+        repolls += 1;
+        missing = computeMissing(expected, applied);
+        if (missing.length === 0) {
+            log(`Transient gap closed after ${repolls} re-poll(s) -- proceeding in write mode.`);
+            return { mode, expected, applied, missing, ok: true, classification: 'transient', attempts };
+        }
+        delay = Math.min(delay * 2, MAX_REPOLL_DELAY_MS);
+    }
+    // Window exhausted and the gap remains -- treat as drift for the decision.
+    log(`[schema-gate] Transient gap did not close after ${repolls} re-poll(s) -- ${missing.length} migration(s) still missing.`);
+    return { mode, expected, applied, missing, ok: false, classification: 'transient', attempts };
+}
+export function reportSchemaGateResult(result) {
+    if (result.mode === 'off')
+        return;
+    if (result.ok) {
+        const repolled = result.classification === 'transient'
+            ? ` (transient deploy-race gap closed after ${result.attempts} ledger read(s))`
+            : '';
+        dlog.info(`[schema-gate] OK -- all ${result.expected.length} expected migrations applied${repolled}`);
+        return;
+    }
+    const cause = result.classification === 'transient'
+        ? ' (transient gap did not close within the re-poll window)'
+        : ' (genuine drift -- large gap or non-recent missing migration)';
+    const lines = result.missing.map((m) => `  - ${m}`).join('\n');
+    const body = `[schema-gate] Missing ${result.missing.length} migration(s) in live DB${cause}:\n${lines}`;
+    if (result.mode === 'fail-fast') {
+        dlog.error(body);
+        dlog.error('[schema-gate] Refusing to start. Apply missing migrations or set TELORA_SCHEMA_GATE=warn to override. ' +
+            'See docs/runbook-schema-version-gate.md.');
+    }
+    else {
+        dlog.warn(body);
+        dlog.warn('[schema-gate] Continuing with TELORA_SCHEMA_GATE=warn -- writes that depend on these migrations will fail.');
+    }
+}
+//# sourceMappingURL=schema-version-gate.js.map

package/dist/shell/schema-version-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-version-gate.js","sourceRoot":"","sources":["../../src/shell/schema-version-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,qBAAqB,IAAI,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,oBAAoB,IAAI,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AA8BrD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/E,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC5C,6CAA6C;IAC7C,OAAO,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AA2BD,MAAM,CAAC,MAAM,2BAA2B,GAA6B;IACnE,UAAU,EAAE,CAAC;IACb,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IAC9C,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,aAAa;CACtC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,gCAAgC;QACnD,eAAe,EAAE,MAAM,CAAC,qCAAqC,GAAG,IAAI;QACpE,cAAc,EAAE,MAAM,CAAC,kCAAkC;QACzD,cAAc,EAAE,MAAM,CAAC,oCAAoC,GAAG,IAAI;KACnE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,CAAC,GAAG,8CAA8C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAiB,EACjB,OAAiB,EACjB,GAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IAEpD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,wCAAwC;IACpF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC;IAE7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC;QACrC,IAAI,EAAE,IAAI,gBAAgB;YAAE,OAAO,OAAO,CAAC,CAAC,6CAA6C;IAC3F,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB,EAAE,OAAiB;IAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAgBtG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA+B,EAAE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,IAAI,+BAA+B,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1D,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAEtD,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvG,CAAC;IAED,IAAI,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACjC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACxF,CAAC;IAED,mEAAmE;IACnE,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,iEAAiE;QACjE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC5F,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,GAAG,CACD,gCAAgC,OAAO,CAAC,MAAM,oCAAoC;QAChF,OAAO,GAAG,CAAC,UAAU,uBAAuB,GAAG,CAAC,cAAc,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI;QACjH,0CAA0C,CAC7C,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,IAAI,KAAK,GAAG,uBAAuB,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9B,IAAI,OAAO,IAAI,GAAG,CAAC,cAAc;YAAE,MAAM;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC;QAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAExC,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,QAAQ,IAAI,CAAC,CAAC;QACd,OAAO,IAAI,CAAC,CAAC;QACb,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,8BAA8B,OAAO,0CAA0C,CAAC,CAAC;YACrF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QAC/F,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,2EAA2E;IAC3E,GAAG,CACD,mDAAmD,OAAO,kBAAkB,OAAO,CAAC,MAAM,8BAA8B,CACzH,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO;IAClC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,QAAQ,GACZ,MAAM,CAAC,cAAc,KAAK,WAAW;YACnC,CAAC,CAAC,4CAA4C,MAAM,CAAC,QAAQ,kBAAkB;YAC/E,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,CACP,2BAA2B,MAAM,CAAC,QAAQ,CAAC,MAAM,+BAA+B,QAAQ,EAAE,CAC3F,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GACT,MAAM,CAAC,cAAc,KAAK,WAAW;QACnC,CAAC,CAAC,0DAA0D;QAC5D,CAAC,CAAC,+DAA+D,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,yBAAyB,MAAM,CAAC,OAAO,CAAC,MAAM,2BAA2B,KAAK,MAAM,KAAK,EAAE,CAAC;IACzG,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,CACR,wGAAwG;YACxG,0CAA0C,CAC3C,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,CACP,4GAA4G,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/shell/shutdown-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-state.d.ts","sourceRoot":"","sources":["../../src/shell/shutdown-state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}

package/dist/shell/shutdown-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-state.js","sourceRoot":"","sources":["../../src/shell/shutdown-state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC"}

package/dist/shell/stop-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-request.d.ts","sourceRoot":"","sources":["../../src/shell/stop-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,oEAAoE;AACpE,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;AAEvC,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EACd,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,GAAE,MAAiC,GACtC,IAAI,CAQN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAiC,GAAG,WAAW,GAAG,IAAI,CAY3F;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAiC,GAAG,IAAI,CAO9E;AAED,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,GAAG,IAAI,EAC3B,UAAU,EAAE,OAAO,GAClB,UAAU,CAKZ"}

package/dist/shell/stop-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-request.js","sourceRoot":"","sources":["../../src/shell/stop-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAarD,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,0BAA0B,CAAC,CAAC;AACtE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAC9B,IAAc,EACd,WAAoB,EACpB,OAAe,sBAAsB,EAAE;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAgB,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5E,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACjB,4EAA4E;QACxE,GAAG,CAAC,KAAK,CAAC,0EAA0E,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,sBAAsB,EAAE;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC;QAC/D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,IAAI,GAAI,GAAmB,CAAC,IAAI,CAAC;QACvC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,WAAW,GAAI,GAAmB,CAAC,WAAW,CAAC;QACrD,OAAO,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,OAAe,sBAAsB,EAAE;IACtE,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACjB,eAAe;QACX,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAKD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,OAA2B,EAC3B,UAAmB;IAEnB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,UAAU;QAAE,OAAO,WAAW,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/shell/unified-engine-lifecycle.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Engine creation, initialization, and diagnostic signal registration
+ * for the unified daemon shell.
+ *
+ * Extracted from unified-shell.ts -- pure structural refactor, no behavioral
+ * changes.
+ */
+import { type ExecutionEngine, type UnifiedConfig, type ProductEntry, ResourceGovernor } from '@telora/daemon-core';
+import type { BaseConfig } from '@telora/daemon-core';
+import type { UnifiedDaemonOptions } from './unified-shell-config.js';
+import { type ResolvedConfigLike, type LacunaTransition } from './config-hot-reload.js';
+import type { LacunaConfig } from '../types/index.js';
+/**
+ * Create engine instances from config, set up the resource governor, and
+ * inject it into each engine. Exits the process if no engines are available.
+ */
+export declare function createEnginesAndGovernor(config: UnifiedConfig, pidFilePath: string): Promise<{
+    engines: ExecutionEngine[];
+    governor: ResourceGovernor;
+}>;
+/**
+ * Resolve the full runtime config for a named engine -- THE single resolver.
+ *
+ * One per-engine base merge (focus section, loop section, or the focus
+ * section as the unknown-engine fallback) followed by daemon-level defaults
+ * applied UNIFORMLY to every engine: telemetry, lacuna, and the verification
+ * carriage (products[].defaultVerification + the top-level default).
+ *
+ * WHY uniform: every engine's config can become the shared global config
+ * singleton (queries/shared.ts initSupabase) -- engines init in sequence and
+ * each calls initSupabase, so the LAST writer wins. The spawn paths read
+ * telemetry / lacuna / defaultVerification off that singleton; the focus-loop
+ * audit spawn crashed in buildSpawnEnvironment when a non-focus engine's
+ * config (which the old hand-synced second resolver did not enrich) had won.
+ * With one resolver there is no second path to hand-sync: adding a new
+ * spawn-read config field means adding it HERE, once, for every engine.
+ */
+export declare function resolveEngineConfig(engineName: string, config: UnifiedConfig): BaseConfig & Record<string, unknown>;
+/**
+ * Back-compat alias for the single resolver. Prefer resolveEngineConfig in
+ * new code; existing importers and tests keep working through this name.
+ */
+export declare const buildEngineRuntimeConfig: typeof resolveEngineConfig;
+/**
+ * Initialize, run crash recovery, and start each engine. On failure, stops
+ * any engines that already started, releases the PID lock, and exits.
+ */
+export declare function initializeAndStartEngines(engines: ExecutionEngine[], config: UnifiedConfig, opts: UnifiedDaemonOptions, pidFilePath: string): Promise<Map<string, BaseConfig & Record<string, unknown>>>;
+/** The four distinct causes a single product-claim attempt can resolve to. */
+export type ClaimOutcomeKind = 'success' | 'auth_fault' | 'rival' | 'transient';
+/** Parsed body shape of the `daemon_claim_product` response we care about. */
+export interface ClaimResponseBody {
+    claimed?: boolean;
+    claimedBy?: string;
+}
+/** A classified single-product claim outcome + the truthful operator message. */
+export interface ClaimOutcome {
+    kind: ClaimOutcomeKind;
+    message: string;
+    /** Set only for the `rival` kind: the host currently holding the product. */
+    claimedBy?: string;
+}
+/**
+ * Classify ONE product-claim attempt by HTTP status class + body, and produce
+ * a message that names the real cause. Pure -- no network, no logging -- so the
+ * whole diagnosis is unit-testable.
+ *
+ * Discrimination (see the server contract in
+ * supabase/functions/product-api/handlers/daemon-session-handlers.ts):
+ *   - 401 / 403  -> `auth_fault`. These come ONLY from the daemon_* gate /
+ *     invalid-or-inactive tracker, NEVER from a rival. The bearer is not an
+ *     active ai_tracker credential -- the onboarding failure mode. This must
+ *     NOT be reported as "claimed by another host".
+ *   - 2xx + {claimed:true}                -> `success` (happy path).
+ *   - 2xx + {claimed:false, claimedBy}    -> `rival`. The ONLY path that emits
+ *     reassign / stop-other-daemon guidance, and it names `claimedBy`.
+ *   - anything else (5xx / 404 / network / parse) -> `transient`.
+ */
+export declare function classifyClaimOutcome(status: number, body: ClaimResponseBody | null): ClaimOutcome;
+/**
+ * Given every failed claim outcome for this host, build the zero-claims throw
+ * message reflecting the DOMINANT status class -- so an all-auth-fault run
+ * throws an auth-fault message (name the credential cause), not the rival
+ * "reassign / stop the other daemon" misdirection.
+ *
+ * Dominance is by count; ties break auth_fault > rival > transient (the
+ * misdiagnosis this whole change fixes is the most actionable to surface).
+ */
+export declare function aggregateClaimFailureMessage(outcomes: ClaimOutcome[], myHostname: string): string;
+/**
+ * Claim products for this daemon's hostname. Unclaimed products are
+ * auto-claimed; products already claimed by another host are skipped.
+ *
+ * Each attempt is classified by HTTP status class ({@link classifyClaimOutcome})
+ * so a credential/authorization fault (401/403 -- the daemon bearer is not an
+ * active ai_tracker) is diagnosed truthfully instead of being blamed on a rival
+ * daemon. The zero-claims throw reflects the dominant failure class.
+ *
+ * Mutates `config.base.products` in place to contain only claimed products.
+ * Uses a direct fetch call to avoid needing the full API client infrastructure
+ * (which is initialized per-engine later).
+ */
+export declare function claimProducts(config: UnifiedConfig): Promise<void>;
+/**
+ * Register SIGUSR1 (status dump) and SIGUSR2 (circuit breaker reset) handlers.
+ */
+export declare function registerDiagnosticSignals(engines: ExecutionEngine[], governor: ResourceGovernor): void;
+/** Governor surface the hot-reload apply needs (live session-cap setters). */
+export interface HotReloadGovernor {
+    setEngineLimit(engine: string, limit: number): void;
+    setMaxGlobalSessions(max: number): void;
+    getUtilization(): {
+        max: number;
+    };
+}
+/** Lacuna sidecar lifecycle seam (injected so the apply is unit-testable). */
+export interface HotReloadLacunaOps {
+    start: (cfg: LacunaConfig) => Promise<unknown>;
+    stop: () => Promise<void>;
+}
+/** Injected side-effect seams for {@link applyConfigHotReload}. */
+export interface ApplyConfigHotReloadDeps {
+    governor: HotReloadGovernor;
+    lacuna: HotReloadLacunaOps;
+    /** Logger seam (defaults to console.log). */
+    log?: (msg: string) => void;
+}
+/** What a hot-reload apply did -- returned for logging + tests. */
+export interface ConfigHotReloadSummary {
+    appliedScalars: string[];
+    sessionCap: number | null;
+    lacunaTransition: LacunaTransition;
+    restartRequired: string[];
+}
+/**
+ * Apply a classified config diff to the LIVE engine config object + governor +
+ * Lacuna sidecar -- the in-place apply path that generalizes the reconcile-live
+ * seam beyond the products array. No running team is ever killed:
+ *
+ *   - Live-applicable scalars are written onto `liveConfig` in place, so the
+ *     next poll/spawn (which reads the same object via configForProduct) sees
+ *     the new value.
+ *   - maxTotalSessions additionally drives the ResourceGovernor per-engine cap
+ *     (the authoritative concurrency limit the listener gates spawns on), and
+ *     raises the global cap if it would otherwise throttle the new limit.
+ *   - The Lacuna sidecar is started/stopped/restarted per the transition; the
+ *     new lacuna block is written onto `liveConfig` so per-spawn routing reads
+ *     it. Fail-open is preserved by the lifecycle helpers.
+ *   - Identity / bound-resource changes are surfaced as a restart-required
+ *     warning and NEVER applied.
+ *
+ * Pure except for the injected governor/lacuna side effects and the in-place
+ * mutation of `liveConfig`, so it unit-tests without a live daemon or SIGHUP.
+ */
+export declare function applyConfigHotReload(liveConfig: ResolvedConfigLike, nextConfig: ResolvedConfigLike, oldLacuna: LacunaConfig, newLacuna: LacunaConfig, deps: ApplyConfigHotReloadDeps): Promise<ConfigHotReloadSummary>;
+/**
+ * Register a SIGHUP handler that re-reads daemon.json and applies live changes
+ * without a restart:
+ *
+ *   - the `config.base.products` array (added/removed/repoPath-changed) is
+ *     spliced in place so engines/listener pick it up on the next poll;
+ *   - the safe scalar config class (loop/merge thresholds, token/cost limits,
+ *     log retention, policyFailureMode, maxTotalSessions) is applied to the
+ *     live focus engine config + ResourceGovernor in place;
+ *   - the Lacuna compression sidecar is started/stopped/restarted per the
+ *     edited `engines.focus.lacuna` block.
+ *
+ * None of these disturb in-flight teams. Identity fields (teloraUrl, trackerId,
+ * organizationId) and bound-resource fields (paths, ports, worktree/integration)
+ * still require a restart and are logged as a warning.
+ *
+ * `governor` and `liveFocusConfig` are the live focus-engine handles; when the
+ * focus engine is disabled they are undefined and only products reconcile.
+ */
+export declare function registerHotReloadSignal(config: UnifiedConfig, opts: UnifiedDaemonOptions, governor?: HotReloadGovernor, liveFocusConfig?: BaseConfig & Record<string, unknown>): void;
+/**
+ * Scaffold each newly-added product's directory through the single idempotent
+ * `scaffoldProductDirectory` (CLAUDE.md self-heal + git-init when the directory
+ * has no repo). No-op for an empty additions list. The integration branch is
+ * resolved from the focus section identically to the boot path.
+ *
+ * Exported so the hot-reload scaffold behavior is unit-testable without a live
+ * daemon / SIGHUP.
+ */
+export declare function scaffoldAddedProducts(additions: ProductEntry[], config: UnifiedConfig): void;
+//# sourceMappingURL=unified-engine-lifecycle.d.ts.map

package/dist/shell/unified-engine-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified-engine-lifecycle.d.ts","sourceRoot":"","sources":["../../src/shell/unified-engine-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,aAAa,EAElB,KAAK,YAAY,EAKjB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAYtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAItE,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAUtD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,CAAC,CA8DrE;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,aAAa,GACpB,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiCtC;AAED;;;GAGG;AACH,eAAO,MAAM,wBAAwB,4BAAsB,CAAC;AAE5D;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,eAAe,EAAE,EAC1B,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,oBAAoB,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CA+C5D;AAMD,8EAA8E;AAC9E,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,WAAW,CAAC;AAEhF,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,GAAG,IAAI,GAC7B,YAAY,CAiCd;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,YAAY,EAAE,EACxB,UAAU,EAAE,MAAM,GACjB,MAAM,CA0CR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA+DxE;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,eAAe,EAAE,EAC1B,QAAQ,EAAE,gBAAgB,GACzB,IAAI,CAQN;AAMD,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,cAAc,IAAI;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,6CAA6C;IAC7C,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,kBAAkB,EAC9B,UAAU,EAAE,kBAAkB,EAC9B,SAAS,EAAE,YAAY,EACvB,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAsDjC;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,oBAAoB,EAC1B,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,eAAe,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACrD,IAAI,CAkBN;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,YAAY,EAAE,EACzB,MAAM,EAAE,aAAa,GACpB,IAAI,CAMN"}