@theford/runly 0.0.0-stage → 0.20.0

package/dist/daemon/index.js

@@ -0,0 +1,412 @@
+#!/usr/bin/env node
+/**
+ * The runly daemon: HTTP over a unix socket, auto-spawned by the CLI
+ * (decision 0009). One RPC endpoint; the CLI is a thin client. Serializes
+ * requests through a simple queue — policy code stays race-free.
+ */
+import { createServer, request } from 'node:http';
+import { existsSync, rmSync, writeFileSync, chmodSync } from 'node:fs';
+import { socketPath, pidPath, stateRoot } from '../core/paths.js';
+import { electSelf, releaseSelf } from './election.js';
+import { BrokerError } from '../core/util.js';
+import { BUILD, VERSION } from '../core/version.js';
+import { JOURNAL_SCHEMA_VERSION } from '../core/journal.js';
+import { Engine } from './engine.js';
+import { logEvent } from '../core/events.js';
+// Singleton guard: recover() and listen happen only AFTER we win the socket,
+// so a losing daemon never reaps the winner's children or mutates the journal.
+const engine = new Engine();
+// Concurrency lives in the engine: a short pool lock for claim bookkeeping and
+// one lock per environment. Requests for different environments overlap; two
+// operations on one environment never do.
+async function dispatch(verb, args, emit, signal) {
+    const cwd = String(args.cwd ?? process.cwd());
+    const holder = args.holder ? String(args.holder) : undefined;
+    const holderPid = args.holderPid !== undefined ? Number(args.holderPid) : undefined;
+    switch (verb) {
+        case 'ping':
+            // The version rides on ping because the CLI already pings on EVERY
+            // invocation (ensureDaemon), so skew detection costs no extra round trip.
+            return { pid: process.pid, version: VERSION, build: BUILD, journalSchema: JOURNAL_SCHEMA_VERSION };
+        case 'up':
+            return engine.up({
+                cwd, holder, holderPid, callerEnv: args.callerEnv, presets: args.presets,
+                hygiene: args.hygiene ?? undefined,
+                ttlMs: args.ttlMs ? Number(args.ttlMs) : undefined,
+                // [] (not undefined) so a bare `up` adds the default set — every
+                // service; undefined is reserved for the internal reset-data rebind,
+                // which adds nothing and never comes through this RPC.
+                services: Array.isArray(args.services) ? args.services.map(String) : [],
+                // Removed by decision 0034; refused by the engine if a client sends it.
+                dataOnly: Boolean(args.dataOnly),
+                rebuild: Boolean(args.rebuild),
+                onProgress: emit,
+                signal,
+            });
+        case 'down':
+            return engine.down({
+                cwd, holder,
+                services: Array.isArray(args.services) ? args.services.map(String) : [],
+                onProgress: emit,
+            });
+        case 'db-new':
+            return engine.dbNew({
+                cwd, holder, holderPid,
+                datastore: String(args.datastore ?? ''),
+                preset: args.preset === undefined ? undefined : String(args.preset),
+                onProgress: emit,
+            });
+        case 'db-drop':
+            return engine.dbDrop(String(args.name ?? ''));
+        case 'db-attach':
+            return engine.dbAttach(String(args.name ?? ''), {
+                pid: Number(args.pid),
+                start: args.start === undefined || args.start === null ? undefined : Number(args.start),
+                pgid: args.pgid === undefined || args.pgid === null ? undefined : Number(args.pgid),
+            });
+        case 'db-ls':
+            return engine.dbLs(cwd, Boolean(args.all));
+        case 'ps':
+            return engine.ps(cwd, Boolean(args.all));
+        case 'ctx':
+            return engine.ctx(cwd, holder);
+        case 'reset-data':
+            return engine.resetData(cwd, holder, emit, args.presets);
+        case 'exec-env':
+            return engine.execEnv(cwd, holder);
+        case 'exec-touch':
+            return engine.execTouch(String(args.envId ?? ''));
+        case 'logs':
+            return engine.logs(cwd, String(args.service), Number(args.lines ?? 40), holder);
+        case 'logs-spec':
+            return engine.logsSpec(cwd, Array.isArray(args.services) ? args.services.map(String) : [], Boolean(args.build), holder);
+        case 'plan':
+            return engine.plan(cwd, Array.isArray(args.services) ? args.services.map(String) : [], Boolean(args.rebuild), holder);
+        case 'destroy':
+            return engine.destroy(cwd);
+        case 'pool-doctor':
+            return engine.poolDoctor(cwd, Boolean(args.fix));
+        case 'token':
+            return engine.token(cwd, String(args.role ?? 'admin'), holder);
+        case 'warm':
+            return engine.warm(cwd, emit);
+        case 'release':
+            return engine.release(cwd, holder);
+        case 'preview':
+            return engine.previewStart(cwd, String(args.service), holder, args.ttlMs ? Number(args.ttlMs) : undefined, args.httpsPort !== undefined ? Number(args.httpsPort) : undefined);
+        case 'preview-stop':
+            return engine.previewStop(cwd, holder);
+        case 'appliance-ls':
+            return engine.applianceLs(cwd);
+        case 'appliance-start':
+            return engine.applianceStart(cwd, args.name ? String(args.name) : undefined);
+        case 'appliance-stop':
+            return engine.applianceStop(cwd, String(args.name));
+        case 'status':
+            return engine.status();
+        case 'doctor':
+            // The CLI's own version is passed in because only the CALLER knows it,
+            // and skew belongs in the diagnosis every RPC client reads — not just in
+            // the CLI that happens to have the comparison in front of it.
+            return engine.doctor(args.cliVersion === undefined ? undefined : String(args.cliVersion));
+        case 'update-plan':
+            return engine.updatePlan(args.cliVersion === undefined ? undefined : String(args.cliVersion));
+        case 'daemon-restart':
+            // The refusal lives in the ENGINE, not the CLI, so any
+            // other RPC caller cannot restart past an in-flight operation just by
+            // not implementing the check (the same reason the old --data-only
+            // contradictions were moved out of the CLI in 0.8.0).
+            engine.assertRestartable({
+                force: Boolean(args.force),
+                cliVersion: args.cliVersion === undefined ? undefined : String(args.cliVersion),
+            });
+            stopDaemon();
+            return { stopping: true, was: VERSION, holders: engine.leaseHolders() };
+        case 'pool-recycle':
+            return engine.poolRecycle({
+                envId: args.envId ? String(args.envId) : undefined,
+                force: Boolean(args.force ?? args.all),
+            });
+        case 'pool-reconcile':
+            // Local substrate: reconcile = doctor + reap anything degraded/stuck.
+            return engine.poolReconcile();
+        case 'pool-gc':
+            return engine.poolGc();
+        case 'shutdown':
+            stopDaemon();
+            return { stopping: true };
+        default:
+            throw new BrokerError('env-error', `daemon does not know verb '${verb}'`, 'rpc');
+    }
+}
+const sock = socketPath();
+let ownsSocket = false;
+let ownsLock = false;
+/**
+ * Stop this daemon after answering the caller.
+ *
+ * The 50ms delay is what lets the result frame reach the client before the
+ * process goes: exiting inside the handler leaves the CLI reading a socket that
+ * closed without a result. `runly update` and `daemon stop` share this path
+ * on purpose — a restart is a stop plus the next verb's autospawn (decision
+ * 0009), so there is no second teardown implementation to keep in step.
+ */
+function stopDaemon() {
+    stopSweeper();
+    setTimeout(async () => {
+        await engine.shutdown();
+        // Clean up what we own, exactly as the signal path does — a stale lock
+        // is recoverable (the next daemon sees a dead holder) but leaving one
+        // behind makes every restart pay a lock-break round.
+        if (ownsSocket)
+            rmSync(sock, { force: true });
+        if (ownsLock)
+            releaseSelf();
+        process.exit(0);
+    }, 50);
+}
+/** Is a LIVE daemon already answering on the socket? (vs. a stale socket file) */
+function pingExisting() {
+    return new Promise((resolve) => {
+        if (!existsSync(sock))
+            return resolve(false);
+        const req = request({ socketPath: sock, path: '/', method: 'POST', timeout: 1500 }, (res) => {
+            res.resume();
+            resolve(res.statusCode === 200);
+        });
+        req.on('error', () => resolve(false)); // ECONNREFUSED = stale socket
+        req.on('timeout', () => {
+            req.destroy();
+            resolve(false);
+        });
+        req.end(JSON.stringify({ verb: 'ping', args: {} }));
+    });
+}
+/**
+ * Recovery reconciles prior daemon state, and now genuinely waits on kills
+ * (verified reaps, orphan sweep) instead of firing signals blind. Requests are
+ * therefore held until it completes: serving `status` mid-reconcile would show
+ * a caller envs that are about to change state, which is the old synchronous
+ * contract silently broken.
+ *
+ * `ping` is exempt — the singleton election must be answerable immediately, or
+ * a second daemon would conclude the socket is stale and take over.
+ */
+let recovered = Promise.resolve();
+/** The sweeper's timer; cleared the moment a shutdown begins. */
+let sweepTimer;
+function stopSweeper() {
+    if (sweepTimer)
+        clearInterval(sweepTimer);
+    sweepTimer = undefined;
+}
+const server = createServer((req, res) => {
+    let body = '';
+    req.on('data', (d) => (body += d));
+    // A client that hangs up (Ctrl-C, a killed agent) aborts what it asked for
+    // where that is still possible: a queued `up` leaves the queue instead of
+    // binding later for nobody.
+    const aborter = new AbortController();
+    res.on('close', () => {
+        if (!res.writableFinished)
+            aborter.abort();
+    });
+    req.on('end', () => {
+        void (async () => {
+            // Response is newline-delimited JSON: zero or more {type:'progress'}
+            // frames, then exactly one {type:'result'} frame. The CLI renders
+            // progress to stderr (TTY only) and the result to stdout.
+            res.writeHead(200, { 'content-type': 'application/x-ndjson' });
+            const emit = (phase) => {
+                try {
+                    res.write(JSON.stringify({ type: 'progress', phase }) + '\n');
+                }
+                catch {
+                    /* client hung up mid-stream */
+                }
+            };
+            let verbForLog = '?';
+            try {
+                const { verb, args } = JSON.parse(body || '{}');
+                verbForLog = String(verb ?? '?');
+                if (verb !== 'ping')
+                    await recovered;
+                const data = await dispatch(verb, args ?? {}, emit, aborter.signal);
+                res.end(JSON.stringify({ type: 'result', ok: true, data }) + '\n');
+            }
+            catch (err) {
+                // An unclassified throw is a DAEMON bug, not a bad environment.
+                // Labelling it env-error told the agent to recycle an environment,
+                // which cannot fix a TypeError in the broker — and buried the defect.
+                const e = err instanceof BrokerError
+                    ? err.toJSON()
+                    : { class: 'infra-error', message: `internal daemon error: ${String(err.message ?? err)}` };
+                if (!(err instanceof BrokerError)) {
+                    logEvent({ level: 'error', kind: 'internal', detail: `${verbForLog}: ${String(err.stack ?? err)}`.slice(0, 1000) });
+                }
+                res.end(JSON.stringify({ type: 'result', ok: false, error: e }) + '\n');
+            }
+        })();
+    });
+});
+// EADDRINUSE means another daemon won the listen race between our ping and our
+// bind — concede cleanly rather than clobber it.
+server.on('error', (err) => {
+    if (err.code === 'EADDRINUSE') {
+        if (process.send)
+            process.send('ready'); // a live daemon exists; the client can proceed
+        process.exit(0);
+    }
+    throw err;
+});
+async function start() {
+    if (await pingExisting()) {
+        // A healthy daemon already owns the socket — do NOT recover() or listen.
+        if (process.send)
+            process.send('ready');
+        process.exit(0);
+    }
+    // Win the lock BEFORE touching the socket. Without this, two daemons that
+    // both saw no answer to their ping would each unlink the socket — the second
+    // deleting the first's LIVE one — and both would then bind successfully,
+    // sweeping the same journal and reaping each other's processes.
+    if (!electSelf()) {
+        if (process.send)
+            process.send('ready'); // someone else owns it; the client can proceed
+        process.exit(0);
+    }
+    ownsLock = true;
+    // The daemon inherited its cwd from whichever CLI spawned it — usually a
+    // WORKTREE, which the consumer may delete while the daemon lives on. A
+    // deleted cwd makes anything that reads it (worker_threads spawn calls
+    // uv_cwd) fail with ENOENT. Pin cwd to the state root, which the daemon
+    // owns for exactly its own lifetime; nothing daemon-side resolves against
+    // cwd (every RPC carries the client's cwd explicitly).
+    process.chdir(stateRoot());
+    // Only the election winner may remove a socket, so this can no longer be a
+    // live one: any daemon that could have been listening lost the lock.
+    if (existsSync(sock))
+        rmSync(sock, { force: true }); // stale socket from a dead daemon
+    // Create the socket ALREADY private. The chmod below runs inside the listen
+    // callback, by which point the socket exists and can accept connections, so
+    // a permissive umask left a window where it was world-reachable. The socket
+    // has no RPC auth and exposes arbitrary-shell verbs, so the window matters.
+    const callerUmask = process.umask(0o077);
+    server.listen(sock, () => {
+        // …and only the socket. Everything the daemon spawns — services, builds,
+        // upkeep, exec — inherited 077 and wrote owner-only files into the
+        // caller's worktree (a build output nobody else could read). The state
+        // root is 0700 itself, so restoring the caller's umask keeps it private.
+        process.umask(callerUmask);
+        ownsSocket = true;
+        // The socket has no RPC auth and exposes arbitrary-shell verbs (exec/token),
+        // so it must be owner-only. On macOS the socket-file mode is what actually
+        // gates connect() (the dir traversal isn't enough), so this chmod is the
+        // real boundary, not just belt-and-suspenders.
+        try {
+            chmodSync(sock, 0o600);
+        }
+        catch {
+            /* best-effort; the 0700 state dir is the backstop */
+        }
+        writeFileSync(pidPath(), String(process.pid));
+        // Only NOW, as the sole owner, reconcile prior daemon state. Recovery
+        // verifies each reap and sweeps for orphans, so it awaits real work; every
+        // non-ping request queues behind it.
+        recovered = engine.recover().catch((err) => {
+            // A failed reconcile must not wedge the daemon forever — surface it and
+            // let requests through rather than hanging every client.
+            logEvent({ level: 'error', kind: 'recover', detail: `recovery failed: ${String(err.message ?? err)}` });
+        });
+        const sweepMs = Number(process.env.BACKLOT_SWEEP_MS ?? 15_000);
+        // The sweeper must not run DURING recovery: it would act on rows recovery
+        // is still reconciling, and a stale-snapshot save could resurrect an env
+        // recovery had just deleted. Each tick also swallows its own rejection —
+        // a fire-and-forget async call whose promise rejects is an unhandled
+        // rejection, which takes the daemon down on any transient journal or FS
+        // write failure.
+        void recovered.then(() => {
+            if (engine.stopping)
+                return;
+            sweepTimer = setInterval(() => {
+                void engine.sweep().catch((err) => {
+                    logEvent({ level: 'error', kind: 'sweep', detail: `sweep failed: ${String(err.message ?? err)}` });
+                });
+            }, sweepMs);
+            sweepTimer.unref();
+        }).catch((err) => logEvent({ level: 'error', kind: 'recover', detail: `sweeper never armed: ${String(err.message ?? err)}` }));
+        // Detach from the spawning CLI's lifetime.
+        if (process.send)
+            process.send('ready');
+    });
+}
+void start().catch((err) => {
+    // Nothing has been established yet, so there is no graceful path — but dying
+    // silently left the client waiting on a daemon that would never answer.
+    console.error(`runly daemon failed to start: ${String(err.stack ?? err)}`);
+    process.exit(1);
+});
+/**
+ * Runtime-level guards.
+ *
+ * Node's default for an unhandled rejection or an uncaught exception is to kill
+ * the process — which for this daemon means every environment loses its
+ * supervisor over one missed `.catch`. Four confirmed defects in the 2026-07-18
+ * review were exactly that shape (a socket 'error', an fs.watch 'error', a
+ * spawn 'error' with no 'exit', a fire-and-forget sweep).
+ *
+ * The two are handled ASYMMETRICALLY on purpose:
+ *
+ * - An unhandled REJECTION is almost always a missing `.catch` on an otherwise
+ *   contained operation. Logging and staying alive is right: the daemon keeps
+ *   supervising, and the event log names the gap.
+ * - An uncaught EXCEPTION leaves the process in an undefined state, and this
+ *   daemon owns a journal that is the machine's source of truth. Continuing
+ *   risks corrupting it. Exiting is safe BECAUSE of the crash-recovery contract
+ *   (decision 0009): services survive, and the next daemon reconciles them. So
+ *   log loudly, then die deliberately rather than limp.
+ */
+process.on('unhandledRejection', (reason) => {
+    logEvent({
+        level: 'error',
+        kind: 'internal',
+        detail: `unhandled rejection (daemon continuing): ${String(reason?.stack ?? reason)}`.slice(0, 2000),
+    });
+});
+process.on('uncaughtException', (err) => {
+    logEvent({
+        level: 'error',
+        kind: 'internal',
+        detail: `uncaught exception — exiting so a clean daemon can reconcile: ${String(err?.stack ?? err)}`.slice(0, 2000),
+    });
+    try {
+        if (ownsSocket)
+            rmSync(sock, { force: true });
+        if (ownsLock)
+            releaseSelf();
+    }
+    catch {
+        /* best-effort */
+    }
+    process.exit(1);
+});
+for (const sig of ['SIGINT', 'SIGTERM']) {
+    process.on(sig, () => {
+        // A daemon that LOST the election must exit without touching shared state:
+        // engine.shutdown() stops services and rewrites env rows, which would let a
+        // conceding process tear down the winner's environments.
+        if (!ownsLock && !ownsSocket)
+            process.exit(0);
+        stopSweeper();
+        void engine.shutdown().then(() => {
+            // Only remove the socket if WE own it — a losing/duplicate daemon must
+            // never delete the healthy daemon's socket.
+            if (ownsSocket)
+                rmSync(sock, { force: true });
+            if (ownsLock)
+                releaseSelf();
+            process.exit(0);
+        });
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/daemon/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/daemon/index.ts"],"names":[],"mappings":";AACA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AAC5B,+EAA+E;AAC/E,6EAA6E;AAC7E,0CAA0C;AAE1C,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAA6B,EAAE,IAA6B,EAAE,MAAoB;IACtH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,mEAAmE;YACnE,0EAA0E;YAC1E,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;QACrG,KAAK,IAAI;YACP,OAAO,MAAM,CAAC,EAAE,CAAC;gBACf,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACxE,OAAO,EAAG,IAAI,CAAC,OAAiB,IAAI,SAAS;gBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClD,iEAAiE;gBACjE,qEAAqE;gBACrE,uDAAuD;gBACvD,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtF,wEAAwE;gBACxE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAChC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9B,UAAU,EAAE,IAAI;gBAChB,MAAM;aACP,CAAC,CAAC;QACL,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC;gBACjB,GAAG,EAAE,MAAM;gBACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtF,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,KAAK,CAAC;gBAClB,GAAG,EAAE,MAAM,EAAE,SAAS;gBACtB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBACnE,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAChD,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;gBAC9C,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACvF,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACpF,CAAC,CAAC;QACL,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,KAAK,IAAI;YACP,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAClF,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACzI,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACvI,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,YAAY,CACxB,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EACpB,MAAM,EACN,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3C,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAClE,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,iBAAiB;YACpB,OAAO,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/E,KAAK,gBAAgB;YACnB,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,uEAAuE;YACvE,yEAAyE;YACzE,8DAA8D;YAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5F,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAChG,KAAK,gBAAgB;YACnB,uDAAuD;YACvD,sEAAsE;YACtE,kEAAkE;YAClE,sDAAsD;YACtD,MAAM,CAAC,iBAAiB,CAAC;gBACvB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;aAChF,CAAC,CAAC;YACH,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QAC1E,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,WAAW,CAAC;gBACxB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClD,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;aACvC,CAAC,CAAC;QACL,KAAK,gBAAgB;YACnB,sEAAsE;YACtE,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,UAAU;YACb,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B;YACE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,8BAA8B,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;AAC1B,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB;;;;;;;;GAQG;AACH,SAAS,UAAU;IACjB,WAAW,EAAE,CAAC;IACd,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,uEAAuE;QACvE,sEAAsE;QACtE,qDAAqD;QACrD,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1F,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,8BAA8B;QACrE,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,IAAI,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAEjD,iEAAiE;AACjE,IAAI,UAAsC,CAAC;AAC3C,SAAS,WAAW;IAClB,IAAI,UAAU;QAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1C,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,4BAA4B;IAC5B,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACjB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,qEAAqE;YACrE,kEAAkE;YAClE,0DAA0D;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC7B,IAAI,CAAC;oBACH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACP,+BAA+B;gBACjC,CAAC;YACH,CAAC,CAAC;YACF,IAAI,UAAU,GAAG,GAAG,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;gBAChD,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBACjC,IAAI,IAAI,KAAK,MAAM;oBAAE,MAAM,SAAS,CAAC;gBACrC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gEAAgE;gBAChE,mEAAmE;gBACnE,sEAAsE;gBACtE,MAAM,CAAC,GAAG,GAAG,YAAY,WAAW;oBAClC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;oBACd,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,0BAA0B,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACzG,IAAI,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC,EAAE,CAAC;oBAClC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,UAAU,KAAK,MAAM,CAAE,GAAa,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjI,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,iDAAiD;AACjD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;IAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,+CAA+C;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,KAAK;IAClB,IAAI,MAAM,YAAY,EAAE,EAAE,CAAC;QACzB,yEAAyE;QACzE,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,+CAA+C;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;IAChB,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,uDAAuD;IACvD,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3B,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,kCAAkC;IAEvF,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,UAAU,GAAG,IAAI,CAAC;QAClB,6EAA6E;QAC7E,2EAA2E;QAC3E,yEAAyE;QACzE,+CAA+C;QAC/C,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QACD,aAAa,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,sEAAsE;QACtE,2EAA2E;QAC3E,qCAAqC;QACrC,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACzC,wEAAwE;YACxE,yDAAyD;YACzD,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,CAAC;QAC/D,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,iBAAiB;QACjB,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO;YAC5B,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBAChC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChH,CAAC,CAAC,CAAC;YACL,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1I,2CAA2C;QAC3C,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACzB,6EAA6E;IAC7E,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAE,GAAa,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,QAAQ,CAAC;QACP,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,4CAA4C,MAAM,CAAE,MAAgB,EAAE,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;KAChH,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,QAAQ,CAAC;QACP,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,iEAAiE,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;KACpH,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,WAAW,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;QACnB,2EAA2E;QAC3E,4EAA4E;QAC5E,yDAAyD;QACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,WAAW,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YAC/B,uEAAuE;YACvE,4CAA4C;YAC5C,IAAI,UAAU;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,IAAI,QAAQ;gBAAE,WAAW,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/proxy.d.ts

@@ -0,0 +1,108 @@
+export type TargetState = 'down' | 'starting' | 'up';
+export interface ProxyStats {
+    /** The public port (what ctx reports). */
+    port: number;
+    /** The service currently behind it, when known. */
+    service?: string;
+    state: TargetState;
+    /** Where the service listens right now (diagnostics only — never hand it out). */
+    internalPort?: number;
+    /** Client→server bytes since the daemon started proxying this port. */
+    clientBytes: number;
+    /** Epoch ms of the last client→server byte; null when none arrived yet. */
+    lastActivityAt: number | null;
+    /** Connections currently piped. */
+    open: number;
+    /** Connections currently held while the service starts. */
+    held: number;
+    /** Connections accepted in total. */
+    accepted: number;
+}
+/**
+ * Called when a connection arrives for a target that is DOWN. Returning true
+ * means "a start has been requested" — the connection is held (bounded by
+ * BACKLOT_PROXY_HOLD_MS) until the engine calls `up` (forwarded) or `down`
+ * (closed). Returning false closes it at once, which is what a client saw
+ * before the proxy existed: nothing listening.
+ */
+export type WakeHook = (envId: string, key: string) => boolean;
+/** How long a connection may wait for its service to become ready. */
+export declare const HOLD_MS: () => number;
+/** What every connection carries for a replay right now (tests, `status`). */
+export declare const replayCarriedBytes: () => number;
+/**
+ * May bytes a process already received be sent to the next one? Only when the
+ * connection's first bytes are an HTTP request with a method that is safe to
+ * repeat: the dead process may have acted on what it read (charged a card,
+ * inserted a row) before it died, and a replay would act a second time. Any
+ * other request — POST, PUT, PATCH, DELETE, a database or TLS wire protocol,
+ * a first chunk too short to tell — is not replayed once delivered.
+ */
+export declare function replayable(chunks: readonly Buffer[]): boolean;
+export declare class PortInUse extends Error {
+    readonly port: number;
+    readonly host: string;
+    constructor(port: number, host: string);
+}
+export declare class ProxyHub {
+    private targets;
+    /**
+     * Internal ports handed to a start that is not `up` yet, by env/key. A port
+     * is probed free when it is allocated, and the service binds it seconds
+     * later; without this, two starts in that window were given the same port
+     * and one environment's public URL served the other's process.
+     */
+    private reservedInternal;
+    private wakeHook?;
+    private activityHook?;
+    private id;
+    /** The engine installs this (decision 0035): start a stopped service on its first connection. */
+    setWakeHook(hook: WakeHook | undefined): void;
+    /** Optional observer of client bytes (idle bookkeeping lives with the caller). */
+    setActivityHook(hook: ((envId: string, key: string) => void) | undefined): void;
+    wake(envId: string, key: string): boolean;
+    noteActivity(envId: string, key: string): void;
+    /** Where the service behind env/key listens, also while it restarts (decision 0035). */
+    internalPortOf(envId: string, key: string): number | undefined;
+    /** Start a target's activity clock from the journal, so a daemon restart keeps it (decision 0035). */
+    seedActivity(envId: string, key: string, at: number): void;
+    /** The last client byte per port key of an environment (null = none yet). */
+    activity(envId: string): Record<string, number | null>;
+    /** Every env id with a listener (doctor's stale-listener check, decision 0037). */
+    envIds(): Set<string>;
+    /** Is the public listener for this env/key currently held, on this port? */
+    holds(envId: string, key: string, port: number): boolean;
+    /** Every public port this daemon is listening on. */
+    heldPorts(): Set<number>;
+    /** Every internal port currently assigned to a target (up or not) or reserved for a start, so none is handed out twice. */
+    assignedInternalPorts(): Set<number>;
+    /** Hold `port` for the start of env/key until it is `up` (then the target owns it) or goes down. */
+    reserveInternal(envId: string, key: string, port: number): void;
+    private release;
+    /**
+     * Listen on `port` for env/key (idempotent). Throws PortInUse when another
+     * process holds it; any previous listener for this env/key on a different
+     * port is closed first, and its counters carried over.
+     */
+    listen(envId: string, key: string, port: number): Promise<void>;
+    /** New connections are held until `up` (or dropped by `down`). */
+    starting(envId: string, key: string, service?: string): void;
+    /** The service behind env/key is ready on `internalPort`; held connections go through. */
+    up(envId: string, key: string, internalPort: number, service?: string): void;
+    /** Nothing is (or will soon be) behind env/key: held connections are closed. */
+    down(envId: string, key: string): void;
+    /** A service was stopped: its targets go down unless a restart already marked them starting. */
+    serviceStopped(envId: string, service: string): void;
+    /** Every `starting` target of an env that never reached `up` goes down (a failed bind). */
+    settle(envId: string): void;
+    state(envId: string, key: string): TargetState | undefined;
+    /** Close one env/key listener (a port key the manifest dropped). */
+    closeKey(envId: string, key: string): void;
+    /** The port keys this daemon holds a listener for, for one environment. */
+    keysOf(envId: string): string[];
+    /** Release every listener of an environment (teardown). */
+    closeEnv(envId: string): void;
+    closeAll(): void;
+    /** Stats by port key for one environment. */
+    stats(envId: string): Record<string, ProxyStats>;
+}