@telora/daemon 0.22.245 → 0.22.289

package/dist/daemon-state/worker-pidfile.js

@@ -0,0 +1,506 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/daemon-state/lead-process-ownership.test.ts,
+//   packages/daemon/src/daemon-state/worker-pidfile.test.ts,
+//   packages/daemon/src/focus/session-health-passes.test.ts,
+//   packages/daemon/src/focus/session-health-poll-sweep.test.ts,
+//   packages/daemon/src/focus/session-process-reap.test.ts,
+//   packages/daemon/src/merge/resolution-agent-budget.test.ts,
+//   packages/daemon/src/session/one-shot-process-ownership.test.ts,
+//   packages/daemon/src/shell/shutdown-ownership-wiring.test.ts,
+//   packages/daemon/src/spawn/lead-launch.test.ts, packages/daemon/src/spawn/spawn-and-acknowledge.test.ts,
+//   packages/daemon/src/spawn/spawn-team-process-ownership.test.ts,
+//   packages/daemon/src/spawn/untracked-lead-sweep.test.ts,
+//   packages/daemon/src/worktree/worktree-state.test.ts
+// PINNED-BY-END
+/**
+ * Persisted team-lead pid registry -- closes the hard-kill orphan gap.
+ *
+ * Team leads are spawned detached (their own process group; focus-executor
+ * spawnCrashIsolated). The daemon's graceful shutdown reaps them via
+ * reapWorkerFleet, but a HARD kill (stop --force, a stop timeout, or an
+ * external `kill -9` on the daemon PID) tears the daemon down WITHOUT running
+ * that reap -- and because the leads are detached, they survive and orphan to
+ * init.
+ *
+ * The in-memory activeTeams map dies with the daemon, so a separate process
+ * (the `telora-daemon stop` CLI, or the NEXT daemon at boot) has no way to find
+ * those orphans. This module persists each live lead pid to a small JSON file
+ * in the global state dir so:
+ *
+ *   - the CLI stop --force / timeout path can group-kill (`kill(-pid)`) every
+ *     recorded lead after it SIGKILLs the daemon, and
+ *   - the next daemon boot can reap any lead left alive by a prior hard kill
+ *     (the only closure available for a bare external `kill -9 <daemon>`, which
+ *     no in-process handler can intercept).
+ *
+ * No file op throws. But "never throws" is not "always empty": the REAP paths
+ * read tolerantly (their worst case is signalling nothing), while a reader that
+ * would treat an empty fleet as PROOF that nothing is running reads through
+ * `readWorkerPidfileStrict`, which answers null for a file it could not read.
+ * Writes report whether they landed, because the spawn path refuses to create a
+ * lead it cannot record. One daemon per host (PID lock) makes read-modify-write
+ * races a non-issue.
+ */
+import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { resolveGlobalStateDir } from './daemon-process.js';
+import { createLogger } from '../log/daemon-log.js';
+const log = createLogger({ module: 'worker-pidfile' });
+/** The placeholder pid a reservation carries until the real one is recorded. */
+export const PENDING_PID = 0;
+function optionalString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+/** Parse one raw pidfile element, or null when it is not a usable entry. */
+function parseWorkerPidEntry(e) {
+    if (typeof e !== 'object' || e === null)
+        return null;
+    const raw = e;
+    const pending = raw.pending === true;
+    if (typeof raw.pid !== 'number')
+        return null;
+    if (!pending && raw.pid <= 1)
+        return null;
+    if (pending && raw.pid !== PENDING_PID)
+        return null;
+    const entry = { pid: raw.pid, label: typeof raw.label === 'string' ? raw.label : 'unknown' };
+    if (pending)
+        entry.pending = true;
+    const reservedBy = optionalString(raw.reservedBy);
+    if (reservedBy)
+        entry.reservedBy = reservedBy;
+    const focusId = optionalString(raw.focusId);
+    const sessionId = optionalString(raw.sessionId);
+    const startIdentity = optionalString(raw.startIdentity);
+    if (focusId)
+        entry.focusId = focusId;
+    if (sessionId)
+        entry.sessionId = sessionId;
+    if (startIdentity)
+        entry.startIdentity = startIdentity;
+    if (typeof raw.recordedAt === 'number')
+        entry.recordedAt = raw.recordedAt;
+    return entry;
+}
+/** Resolve the worker pidfile path in the global state dir (~/.telora/). */
+export function resolveWorkerPidfilePath() {
+    return resolve(resolveGlobalStateDir(), 'daemon.workers.json');
+}
+/**
+ * Read the persisted fleet, DISTINGUISHING an absent record from an unreadable
+ * one. Returns null when the file exists but could not be read or parsed as a
+ * fleet -- an EACCES, a truncated write, a hand-edit, anything that is not an
+ * array of entries.
+ *
+ * That distinction is the whole point. The tolerant read below collapses both
+ * into [], and a caller asking "was a lead recorded for this session?" then
+ * reads a corrupt file as PROOF that nothing was spawned -- which is how a live
+ * team's session row gets closed. An absent file is real evidence (no lead was
+ * reserved); an unreadable one is not evidence at all.
+ *
+ * A malformed ELEMENT inside a well-formed array is still dropped: that is one
+ * unusable record, not an unreadable file.
+ */
+export function readWorkerPidfileStrict(path = resolveWorkerPidfilePath()) {
+    if (!existsSync(path))
+        return [];
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch (err) {
+        log.warn(`[worker-pidfile] ${path} exists but could not be read/parsed -- treating the fleet as UNKNOWN, not empty`, { error: String(err?.message ?? err) });
+        return null;
+    }
+    if (!Array.isArray(raw)) {
+        log.warn(`[worker-pidfile] ${path} is not a fleet array -- treating the fleet as UNKNOWN, not empty`);
+        return null;
+    }
+    const out = [];
+    for (const e of raw) {
+        const entry = parseWorkerPidEntry(e);
+        if (!entry) {
+            // A record we cannot parse may be a LIVE lead this host can no longer
+            // name. Dropping it silently -- and then writing the survivors back --
+            // converts "one unreadable record" into "that lead does not exist".
+            log.warn(`[worker-pidfile] ${path} holds an unparseable record -- treating the fleet as UNKNOWN, not partial`);
+            return null;
+        }
+        out.push(entry);
+    }
+    return out;
+}
+/**
+ * Read for a MUTATION. Every writer goes through here, because a write-back is
+ * what makes an unknown read permanent: the tolerant read answers [], the writer
+ * appends its own entry, and the file now DEFINITELY records one lead where a
+ * moment ago it recorded an unreadable number of them. Every other live lead has
+ * just become `no_process_recorded`, which is reapable.
+ *
+ * So a mutation reads strictly and REFUSES when the state is unknown. The caller
+ * learns the write did not land (and, on the spawn path, declines to leave a
+ * process it cannot name).
+ */
+function readForMutation(path) {
+    return readWorkerPidfileStrict(path);
+}
+/**
+ * Read the persisted worker fleet, tolerantly: a missing, unreadable, or
+ * malformed file returns []. Kept for the REAP callers, whose worst case on an
+ * unreadable file is that they signal nothing. A caller that would treat [] as
+ * proof of absence must use {@link readWorkerPidfileStrict} instead.
+ */
+export function readWorkerPidfile(path = resolveWorkerPidfilePath()) {
+    // RESOLVED entries only. A reservation carries PENDING_PID (0) instead of a
+    // pid, and every consumer of this reader treats an entry as a pid it may
+    // probe, remove, or SIGNAL -- and `kill(-0, ...)` signals the caller's OWN
+    // process group, which here is the daemon. The reservation shape was added to
+    // the file without being taught to those passes; keeping it out of this reader
+    // is the source-level fix, rather than a pid guard in each of them.
+    return (readWorkerPidfileStrict(path) ?? []).filter((e) => !e.pending);
+}
+/**
+ * The whole file, reservations included. Only for readers that reason ABOUT
+ * reservations -- the retention pass and the by-session index. A caller that
+ * wants pids wants {@link readWorkerPidfile}.
+ */
+export function readWorkerPidfileWithReservations(path = resolveWorkerPidfilePath()) {
+    return readWorkerPidfileStrict(path) ?? [];
+}
+/** Write the fleet. Never throws; returns whether the bytes actually landed. */
+function writeWorkerPidfile(entries, path) {
+    try {
+        // ESTABLISH THE PRECONDITION, do not weaken the refusal. The only code that
+        // ever created the state dir is ensureGlobalStateDir(), called at daemon
+        // STARTUP -- so any process writing the fleet record without having started
+        // a daemon on this host (a fresh install, a rebuilt VM, a CI container with
+        // HOME=/root) found no directory, ENOENT'd, returned false, and the callers
+        // correctly REFUSED the spawn. The refusal was right; the missing parent was
+        // not. 0o700 matches ensureGlobalStateDir: the fleet record is 0o600 and
+        // names this host's live processes, so its directory must not be looser.
+        // Inside the try on purpose -- a failure here still returns false.
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+        writeFileSync(path, JSON.stringify(entries), { mode: 0o600 });
+        return true;
+    }
+    catch (err) {
+        // Orphan prevention is a backstop -- never fail a spawn/exit on this.
+        log.debug('Orphan prevention is a backstop -- never fail a spawn/exit on this', { error: String(err?.message ?? err) });
+        return false;
+    }
+}
+/**
+ * Record a live team lead with its ownership record (focus, session, start
+ * identity). Idempotent per pid (a re-record replaces the entry). No-op for an
+ * invalid/init pid (<= 1).
+ */
+export function recordWorkerProcess(entry, path = resolveWorkerPidfilePath()) {
+    if (!Number.isInteger(entry.pid) || entry.pid <= PENDING_PID)
+        return false;
+    const current = readForMutation(path);
+    if (current === null)
+        return false; // never overwrite unknown state
+    const entries = current.filter((e) => e.pid !== entry.pid && !(e.pending && e.sessionId !== undefined && e.sessionId === entry.sessionId));
+    entries.push(entry);
+    return writeWorkerPidfile(entries, path);
+}
+/**
+ * Reserve a lead record BEFORE the process is spawned.
+ *
+ * `launchLeadProcess` used to spawn first and record after, so a hard kill (or
+ * a failed write) in between left a LIVE detached lead with no record anywhere
+ * -- and a reader that takes "no record" for "nothing spawned" then closes that
+ * team's session row. Reserving first removes the window: the record exists
+ * before the process can, and the caller REFUSES the spawn when this returns
+ * false, so a live lead this host cannot name is never created.
+ */
+export function reserveLeadRecord(reservation, path = resolveWorkerPidfilePath()) {
+    const current = readForMutation(path);
+    if (current === null)
+        return false; // never overwrite unknown state
+    const entries = current.filter((e) => !(e.pending && e.sessionId === reservation.sessionId));
+    const entry = {
+        pid: PENDING_PID,
+        label: reservation.label,
+        sessionId: reservation.sessionId,
+        pending: true,
+        // WHO reserved it. A reservation is "in flight" only while the instance that
+        // made it is still running; once that instance is provably gone nothing will
+        // ever resolve it, and it must not hold a worktree open forever.
+        reservedBy: reservation.reservedBy,
+        recordedAt: Date.now(),
+    };
+    if (reservation.focusId)
+        entry.focusId = reservation.focusId;
+    entries.push(entry);
+    return writeWorkerPidfile(entries, path);
+}
+/** Drop a reservation whose spawn never produced a process. */
+export function releaseLeadReservation(sessionId, path = resolveWorkerPidfilePath()) {
+    const entries = readForMutation(path);
+    if (entries === null)
+        return; // never overwrite unknown state
+    const next = entries.filter((e) => !(e.pending && e.sessionId === sessionId));
+    if (next.length === entries.length)
+        return;
+    if (next.length === 0) {
+        clearWorkerPidfile(path);
+        return;
+    }
+    writeWorkerPidfile(next, path);
+}
+/** Remove a lead pid on its exit. No-op when absent. */
+export function removeWorkerPid(pid, path = resolveWorkerPidfilePath()) {
+    const entries = readForMutation(path);
+    if (entries === null)
+        return; // never overwrite unknown state
+    const next = entries.filter((e) => e.pid !== pid);
+    if (next.length === entries.length)
+        return;
+    if (next.length === 0) {
+        clearWorkerPidfile(path);
+        return;
+    }
+    writeWorkerPidfile(next, path);
+}
+/**
+ * Delete the pidfile entirely. MODULE-PRIVATE, deliberately.
+ *
+ * This used to be exported, and both shutdown paths called it -- erasing the
+ * record of every worker that outlived a bounded reap. The survivor-safe
+ * {@link clearWorkerPidfileIfAllGone} replaced those calls, but while this was
+ * exported, reverting one of them was a one-word edit that no run could observe.
+ * Inside this module it is reached only where the caller has already established
+ * that nothing is left to record: an empty remainder after a removal, or a
+ * survivor set of zero.
+ */
+function clearWorkerPidfile(path = resolveWorkerPidfilePath()) {
+    try {
+        if (existsSync(path))
+            unlinkSync(path);
+    }
+    catch (err) {
+        // Best effort.
+        log.debug('Best effort', { error: String(err?.message ?? err) });
+    }
+}
+/**
+ * Group-SIGKILL every still-alive persisted lead. Because leads are spawned
+ * detached (own group, pgid == lead pid), `kill(-pid)` reaps the lead AND any
+ * host children it sub-spawned in one signal; a bare-pid fallback covers a lead
+ * that somehow is not a group leader. Pure over the injected seams. Never throws
+ * (a vanished process is success).
+ */
+export function reapPersistedWorkerGroups(entries, deps) {
+    const { kill, isAlive, readStartIdentity } = deps;
+    const result = { reaped: [], skipped: [], unsignalled: [], unverified: [] };
+    for (const entry of entries) {
+        const { pid } = entry;
+        // A reservation names no process yet: there is nothing to signal, and it is
+        // not evidence of absence either. It stays in `skipped`. This is ALSO the
+        // first of the three reasons a reservation is unnameable by every kill path,
+        // which is what makes retiring a stranded one cost no reaper anything --
+        // the retention FILTER below decides whether the record is kept, never this
+        // loop (see `isReservationInFlight`).
+        if (entry.pending || !Number.isInteger(pid) || pid <= 1) {
+            result.skipped.push(pid);
+            continue;
+        }
+        if (!isAlive(pid)) {
+            result.skipped.push(pid);
+            continue;
+        }
+        // A record now outlives its lead until the lead's whole group is confirmed
+        // gone, so its pid may have been reused. SIGKILL requires the identity to be
+        // VERIFIED -- recorded AND matching what the pid reads now. The old rule only
+        // refused a positive MISMATCH, which signalled two unverified cases anyway: a
+        // record carrying no identity (written by an older daemon), and one whose live
+        // identity cannot be read. In both the pid may belong to something that has
+        // nothing to do with us, and we would be SIGKILLing a stranger's process.
+        if (!entry.startIdentity) {
+            log.warn(`[worker-pidfile] recorded lead ${pid} carries no start identity -- not signalled, record kept`);
+            result.unverified.push(pid);
+            continue;
+        }
+        const live = readStartIdentity(pid);
+        if (live === null) {
+            log.warn(`[worker-pidfile] could not read the live start identity of ${pid} -- not signalled, record kept`);
+            result.unverified.push(pid);
+            continue;
+        }
+        if (live !== entry.startIdentity) {
+            result.skipped.push(pid);
+            continue;
+        }
+        // Group-first (detached lead => pgid == pid), bare-pid fallback. A signal
+        // that LANDED is a reap; one that raised EPERM at both is not, and must not
+        // be reported as one -- the caller decides what to keep from this list.
+        if (signalOrReport(kill, pid))
+            result.reaped.push(pid);
+        else
+            result.unsignalled.push(pid);
+    }
+    return result;
+}
+/** SIGKILL the group, then the bare pid. True iff either signal actually landed. */
+function signalOrReport(kill, pid) {
+    try {
+        kill(-pid, 'SIGKILL');
+        return true;
+    }
+    catch (groupErr) {
+        try {
+            kill(pid, 'SIGKILL');
+            return true;
+        }
+        catch (pidErr) {
+            // ESRCH at both is success by another name (it is gone). Anything else --
+            // EPERM above all -- means a live process we could not end.
+            const gone = pidErr?.code === 'ESRCH';
+            if (!gone) {
+                log.warn(`[worker-pidfile] could not signal recorded lead ${pid}; its record is kept`, {
+                    groupError: String(groupErr?.message ?? groupErr),
+                    pidError: String(pidErr?.message ?? pidErr),
+                });
+            }
+            return gone;
+        }
+    }
+}
+/**
+ * True when this recorded lead is STILL RUNNING and still the process that was
+ * recorded -- alive, and with a start identity that has not changed under it.
+ *
+ * A pid whose start identity no longer matches was recycled: the recorded lead
+ * is gone and an unrelated process now holds its number.
+ */
+export function recordedLeadStillRunning(entry, deps) {
+    const { isAlive, isGroupAlive, readStartIdentity, reservationInFlight } = deps;
+    // A reservation's PROCESS cannot be confirmed gone -- it may not have been
+    // spawned yet, or may be running under a pid we never got to write. So the
+    // question is not about the process at all, it is about the INSTANCE that made
+    // the reservation: while that daemon runs, the reservation is in flight and
+    // must be kept (`launchLeadProcess` REFUSES a spawn whose record could not be
+    // reserved, so deleting a live daemon's reservation reopens the pre-spawn
+    // window the reservation exists to close). Once that instance is provably
+    // gone, nothing will EVER resolve the reservation -- no pid write, no release,
+    // no reap -- and keeping it only makes its session permanently unprovable. A
+    // reservation naming no instance at all is unattributable, and fails safe to
+    // in flight. See `isReservationInFlight` (daemon-state/instance-liveness.ts) for why
+    // retiring a pid-0 row costs no reaper anything.
+    if (entry.pending)
+        return reservationInFlight(entry.reservedBy);
+    if (!Number.isInteger(entry.pid) || entry.pid <= 1)
+        return false;
+    // Ask the GROUP as well as the pid. A detached lead is a group leader, and its
+    // children outlive it: once the leader exits, the bare-pid probe reads dead
+    // while the group is still writing the worktree. Dropping the record there is
+    // exactly how a live writer loses the only evidence that it exists.
+    if (isGroupAlive(entry.pid))
+        return true;
+    if (!isAlive(entry.pid))
+        return false;
+    if (!entry.startIdentity)
+        return true; // nothing to contradict it
+    const live = readStartIdentity(entry.pid);
+    return live === null || live === entry.startIdentity;
+}
+/**
+ * Read + reap the persisted fleet, then RETAIN whatever it could not confirm
+ * gone. Used by the CLI hard stop (after SIGKILLing the daemon) and by the next
+ * daemon boot (to reap leads a prior hard kill orphaned).
+ *
+ * It used to clear the file unconditionally, which threw away the record of
+ * exactly the processes the reap FAILED to end -- a kill that raised EPERM, or
+ * a group that outlived SIGKILL. Those survivors are precisely what the next
+ * reader needs to know about: crash recovery runs after this and must not close
+ * a session row whose team is still running, and with the file cleared it had no
+ * way to tell. Retaining until CONFIRMED GONE is also the rule the one-shot
+ * ownership records already follow.
+ *
+ * Returns the reap result for logging.
+ */
+export function reapAndClearWorkerPidfile(path, deps) {
+    const entries = readForMutation(path);
+    if (entries === null) {
+        // We cannot read the fleet, so we cannot reap it and we certainly cannot
+        // declare it empty. Deleting the file here would turn "unknown" into a
+        // permanent, confident "nothing was running".
+        log.warn(`[worker-pidfile] ${path} is unreadable -- reaping nothing and KEEPING the file`);
+        return { reaped: [], skipped: [], unsignalled: [], unverified: [] };
+    }
+    const result = reapPersistedWorkerGroups(entries, deps);
+    const survivors = entries.filter((e) => recordedLeadStillRunning(e, deps));
+    if (survivors.length === 0) {
+        clearWorkerPidfile(path);
+    }
+    else {
+        log.warn(`[worker-pidfile] ${survivors.length} recorded lead(s) survived the reap and stay recorded: ` +
+            survivors.map((e) => e.pid).join(', '));
+        writeWorkerPidfile(survivors, path);
+    }
+    return result;
+}
+/**
+ * Clear the pidfile ONLY when nothing it records survives.
+ *
+ * The graceful-stop and auto-update paths cleared it unconditionally, on the
+ * reasoning that `reapWorkerFleet` had just ended everything. It has not
+ * necessarily: that reap is bounded and best-effort, so a worker that outlived
+ * SIGKILL, one that could not be signalled, and a reservation whose spawn is
+ * still in flight all survive it -- and clearing here erases the record of
+ * exactly those, right before a re-exec'd daemon's boot reap would have acted on
+ * them. (A reservation whose reserving instance is provably GONE is not a
+ * survivor: `recordedLeadStillRunning` retires it here and in the boot reap.)
+ *
+ * Same rule as {@link reapAndClearWorkerPidfile}: retain until CONFIRMED GONE.
+ * Returns the survivors it kept.
+ */
+export function clearWorkerPidfileIfAllGone(path, deps) {
+    const entries = readForMutation(path);
+    if (entries === null) {
+        log.warn(`[worker-pidfile] ${path} is unreadable at shutdown -- KEEPING it rather than declaring it empty`);
+        return [];
+    }
+    const survivors = entries.filter((e) => recordedLeadStillRunning(e, deps));
+    if (survivors.length === 0) {
+        clearWorkerPidfile(path);
+        return [];
+    }
+    log.warn(`[worker-pidfile] ${survivors.length} recorded worker(s) survived shutdown and stay recorded ` +
+        `for the next boot reap: ${survivors.map((e) => (e.pending ? `${e.label} (reservation)` : String(e.pid))).join(', ')}`);
+    writeWorkerPidfile(survivors, path);
+    return survivors;
+}
+/**
+ * The leads this host has a durable record of, by the agent_sessions row each
+ * was spawned for. Null when the record cannot be read at all -- which is NOT
+ * the same as "no leads": a caller must treat an unreadable record as unknown
+ * rather than as proof that nothing is running.
+ *
+ * This is the correlation crash recovery needs. `launchLeadProcess` writes the
+ * record BEFORE `spawnTeamProcess` persists the row's `running` status and pid,
+ * so a row still reading `starting` with no pid -- the window a hard kill or a
+ * failed API write leaves behind -- is exactly the case where the DB knows
+ * nothing and this file knows everything.
+ */
+export function readLeadRecordsBySession(path = resolveWorkerPidfilePath()) {
+    // STRICT, and reservations included: this reader's null is what makes an
+    // unreadable record `unprovable` rather than `no_process_recorded`, and its
+    // reservations are what make the pre-spawn window decidable.
+    const entries = readWorkerPidfileStrict(path);
+    if (entries === null)
+        return null;
+    const bySession = new Map();
+    for (const entry of entries) {
+        if (!entry.sessionId)
+            continue;
+        // A resolved record wins over a stale reservation for the same session.
+        const existing = bySession.get(entry.sessionId);
+        if (existing && !existing.pending && entry.pending)
+            continue;
+        bySession.set(entry.sessionId, entry);
+    }
+    return bySession;
+}
+//# sourceMappingURL=worker-pidfile.js.map

package/dist/daemon-state/worker-pidfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-pidfile.js","sourceRoot":"","sources":["../../src/daemon-state/worker-pidfile.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8EAA8E;AAC9E,6DAA6D;AAC7D,6DAA6D;AAC7D,iEAAiE;AACjE,4DAA4D;AAC5D,+DAA+D;AAC/D,oEAAoE;AACpE,iEAAiE;AACjE,4GAA4G;AAC5G,oEAAoE;AACpE,4DAA4D;AAC5D,wDAAwD;AACxD,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AA2CvD,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAE7B,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,CAAU;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC;IACrC,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,KAAK,GAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC7G,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,UAAU;QAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACrC,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3C,IAAI,aAAa;QAAE,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;IACvD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAAE,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,wBAAwB,EAAE;IAEzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,kFAAkF,EACjH,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,mEAAmE,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,4EAA4E,CAAC,CAAC;YAC/G,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,wBAAwB,EAAE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,oEAAoE;IACpE,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAe,wBAAwB,EAAE;IAEzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB,CAAC,OAAyB,EAAE,IAAY;IACjE,IAAI,CAAC;QACH,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACjB,sEAAsE;QAClE,GAAG,CAAC,KAAK,CAAC,oEAAoE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACnI,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAqB,EAAE,OAAe,wBAAwB,EAAE;IAClG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAC3G,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAuF,EACvF,OAAe,wBAAwB,EAAE;IAEzC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAmB;QAC5B,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,IAAI;QACb,6EAA6E;QAC7E,6EAA6E;QAC7E,iEAAiE;QACjE,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;IACF,IAAI,WAAW,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,OAAe,wBAAwB,EAAE;IACjG,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,gCAAgC;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC5D,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,OAAe,wBAAwB,EAAE;IACpF,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,gCAAgC;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,OAAe,wBAAwB,EAAE;IACnE,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACjB,eAAe;QACX,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAkDD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAyB,EACzB,IAAuB;IAEvB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAClD,MAAM,MAAM,GAAwB,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAEjG,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;QACtB,4EAA4E;QAC5E,0EAA0E;QAC1E,6EAA6E;QAC7E,yEAAyE;QACzE,4EAA4E;QAC5E,sCAAsC;QACtC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,0EAA0E;QAC1E,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,kCAAkC,GAAG,0DAA0D,CAAC,CAAC;YAC1G,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,8DAA8D,GAAG,gCAAgC,CAAC,CAAC;YAC5G,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,0EAA0E;QAC1E,4EAA4E;QAC5E,wEAAwE;QACxE,IAAI,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAClD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,IAAmD,EAAE,GAAW;IACtF,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,0EAA0E;YAC1E,4DAA4D;YAC5D,MAAM,IAAI,GAAI,MAAgC,EAAE,IAAI,KAAK,OAAO,CAAC;YACjE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,IAAI,CAAC,mDAAmD,GAAG,sBAAsB,EAAE;oBACrF,UAAU,EAAE,MAAM,CAAE,QAAkB,EAAE,OAAO,IAAI,QAAQ,CAAC;oBAC5D,QAAQ,EAAE,MAAM,CAAE,MAAgB,EAAE,OAAO,IAAI,MAAM,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAqB,EACrB,IAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IAC/E,2EAA2E;IAC3E,2EAA2E;IAC3E,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,qFAAqF;IACrF,iDAAiD;IACjD,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,oEAAoE;IACpE,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,aAAa,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,IAAuB;IAEvB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,yEAAyE;QACzE,uEAAuE;QACvE,8CAA8C;QAC9C,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,wDAAwD,CAAC,CAAC;QAC3F,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,oBAAoB,SAAS,CAAC,MAAM,yDAAyD;YAC7F,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,CAAC;QACF,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,IAAuB;IAEvB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,yEAAyE,CAAC,CAAC;QAC5G,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,GAAG,CAAC,IAAI,CACN,oBAAoB,SAAS,CAAC,MAAM,0DAA0D;QAC9F,2BAA2B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvH,CAAC;IACF,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAe,wBAAwB,EAAE;IAEzC,yEAAyE;IACzE,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,SAAS;QAC/B,wEAAwE;QACxE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;YAAE,SAAS;QAC7D,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/daemon-state/worker-registry.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Live one-shot worker registry.
+ *
+ * The graceful-stop worker-fleet reap (`reapWorkerFleet` in spawn/lifecycle.ts)
+ * drains the per-focus team leads tracked in `activeTeams`. But the daemon also
+ * spawns many SHORT-LIVED `claude --print` one-shots that are NOT team leads and
+ * are not in `activeTeams`: the audit assessor, merge-conflict resolution agent,
+ * ai-inspection verifier, and the loop LLM helpers (loop eval, negative-branch,
+ * de-restatement). None are spawned `detached`, so if one is still in flight
+ * when the daemon exits it orphans/reparents to init.
+ *
+ * This leaf registry lets each one-shot spawn site register its child PID via
+ * `trackChildProcess(child, label)` so the reap can SIGTERM/SIGKILL any that are
+ * still alive at stop time. Children auto-untrack on exit/close/error, so the
+ * registry only ever holds genuinely-live one-shots.
+ *
+ * Deliberately dependency-free (only node:child_process types) so every spawn
+ * site -- spawn/lifecycle.ts, the one-shot model call, the verify inspector,
+ * the loop helpers -- can import it from any band without an import cycle.
+ *
+ * History: docs/daemon/history-team-lifecycle.md (daemon-state/worker-registry.ts).
+ */
+import type { ChildProcess } from 'node:child_process';
+/** A live one-shot worker the reap can terminate. */
+export interface TrackedWorker {
+    /** OS process id of the one-shot `claude --print` child. */
+    pid: number;
+    /** Human-readable label for reap logging (e.g. `audit:<focusId>`). */
+    label: string;
+}
+/**
+ * Track a spawned one-shot child so the graceful-stop reap can terminate it if
+ * it is still alive at stop time. Auto-untracks on the child's exit/close/error.
+ * No-op for a child with no pid or an invalid/init pid (<= 1).
+ */
+export declare function trackChildProcess(child: ChildProcess, label: string): void;
+/** Snapshot of the currently-live tracked one-shot workers. */
+export declare function listTrackedWorkers(): TrackedWorker[];
+/** Test-only: clear the registry between cases. */
+export declare function __resetWorkerRegistryForTesting(): void;
+//# sourceMappingURL=worker-registry.d.ts.map

package/dist/daemon-state/worker-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-registry.d.ts","sourceRoot":"","sources":["../../src/daemon-state/worker-registry.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AAKD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAU1E;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,IAAI,aAAa,EAAE,CAEpD;AAED,mDAAmD;AACnD,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD"}

package/dist/daemon-state/worker-registry.js

@@ -0,0 +1,34 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/daemon-state/worker-registry.test.ts,
+//   packages/daemon/src/focus/session-health-poll-sweep.test.ts,
+//   packages/daemon/src/merge/resolution-agent-budget.test.ts,
+//   packages/daemon/src/session/one-shot-process-ownership.test.ts
+// PINNED-BY-END
+/** pid -> label for every currently-live tracked one-shot. */
+const liveWorkers = new Map();
+/**
+ * Track a spawned one-shot child so the graceful-stop reap can terminate it if
+ * it is still alive at stop time. Auto-untracks on the child's exit/close/error.
+ * No-op for a child with no pid or an invalid/init pid (<= 1).
+ */
+export function trackChildProcess(child, label) {
+    const pid = child.pid;
+    if (typeof pid !== 'number' || pid <= 1)
+        return;
+    liveWorkers.set(pid, label);
+    const untrack = () => {
+        liveWorkers.delete(pid);
+    };
+    child.once('exit', untrack);
+    child.once('close', untrack);
+    child.once('error', untrack);
+}
+/** Snapshot of the currently-live tracked one-shot workers. */
+export function listTrackedWorkers() {
+    return [...liveWorkers.entries()].map(([pid, label]) => ({ pid, label }));
+}
+/** Test-only: clear the registry between cases. */
+export function __resetWorkerRegistryForTesting() {
+    liveWorkers.clear();
+}
+//# sourceMappingURL=worker-registry.js.map

package/dist/daemon-state/worker-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-registry.js","sourceRoot":"","sources":["../../src/daemon-state/worker-registry.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uEAAuE;AACvE,iEAAiE;AACjE,+DAA+D;AAC/D,mEAAmE;AACnE,gBAAgB;AAmChB,8DAA8D;AAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,KAAa;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO;IAChD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,+BAA+B;IAC7C,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}