@vibesdotdev/pm 0.0.0-stage → 1.0.0-rc.3

package/dist/daemon/executable-freshness-reconciler.js

@@ -0,0 +1,396 @@
+/**
+ * Executable-freshness reconciler — the PM daemon rolls what runs a replaced binary.
+ *
+ * A managed process keeps executing the inode it was spawned from. When a
+ * release installs a new `vibes` executable by atomic rename, every managed
+ * process — and this daemon — is silently behind. Measured 2026-08-28: 7 of 9
+ * vibes daemons on one host ran a deleted inode (the PM daemon since Aug 25)
+ * while `vibes pm status` showed all green. Drew's rule: staleness is surfaced
+ * and self-repaired; never worked around.
+ *
+ * TWO PREDICATES, not one. Under the thin host the executable is recompiled
+ * VERY RARELY: almost every real change arrives as a change to the MODULE GRAPH
+ * under the resolution root R (`vibes update` → `bun install`/`bun update`, a
+ * linked provider moving, a plugin added or removed). A body that imported that
+ * graph once at boot is exactly as stale as one running a replaced inode, and
+ * the executable nerve cannot see it — the binary is byte-identical. So a child
+ * is stale when EITHER its executable was replaced OR the graph under the root
+ * it was spawned against was replaced. PM records `VIBES_HOST_ROOT` and the
+ * lock digest per child at spawn time (`services/lifecycle.ts`) precisely so
+ * the second predicate compares against what that child actually loaded rather
+ * than against a wall-clock guess.
+ *
+ * THE ONE PLACE that stamp lives is the child's persisted `config.env` — the
+ * `ProcessConfig` that `services/lifecycle.ts` hands to `registry.register`
+ * after spawn. This reconciler and `cli/pm.status.impl.ts` both read that and
+ * only that, so the daemon and the CLI can never disagree about a child.
+ *
+ * A child WITHOUT a persisted stamp is UNKNOWN, never stale. Measured
+ * 2026-09-01: this daemon substituted its own boot digest for children it could
+ * not judge and rolled four healthy services every tick for hours
+ * (`lock e5ee7529efe9 → 96fb19f6d739`, where `e5ee…` was the DAEMON's digest,
+ * not anything a child had loaded). The daemon's identity is evidence about the
+ * daemon; it is never evidence about a child.
+ *
+ * Each tick (30s):
+ *   1. Roll ONE stale first-party child (config.command is this daemon's own
+ *      executable) per tick, oldest first, once the new file has settled —
+ *      spacing restarts so a fleet never thunders. Finite tasks are skipped.
+ *      A child rolled `maxIdenticalRolls` times without its recorded digest
+ *      changing trips a circuit breaker: one warning, no further rolls, and it
+ *      stops holding the daemon back — a respawn that changes nothing is the
+ *      supervisor's defect, and repeating it is not a repair.
+ *   2. When no child is genuinely stale-and-still-rolling and this daemon
+ *      itself is stale, hand off: spawn `vibes pm daemon restart` detached
+ *      through the host's declared self-spawn argv. That argv names the
+ *      executable PATH the daemon was launched from, and an atomic-rename
+ *      release put the NEW file at that path — so the handoff runs the new
+ *      build without guessing a binary. The restart command stops this daemon
+ *      (pid exit AND socket refusal) and starts a fresh one, which then owns
+ *      the children with the new build. Unknown and breaker-tripped children
+ *      do not block the handoff.
+ *
+ * Opt out with VIBES_PM_EXECUTABLE_FRESHNESS=0 (for debugging a pinned build).
+ */
+import { getRuntimeExecution } from '@vibesdotdev/kernel/execution';
+import { getRuntimeHostCommands, getRuntimeHostIdentity } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { valueFreeFailure } from '@vibesdotdev/kernel';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+import { composePMHostEnv } from "../helpers/process-env.js";
+import { toEpochMs } from "../services/startup-warmup.js";
+import { attempt } from "../utils/attempt.js";
+import { resolveExistingPrefix } from "../helpers/runtime-files.js";
+import { getPMDaemonLogger } from "../utils/logging.js";
+/**
+ * `input` with its symlinks resolved through the filesystem kind's `realpath`.
+ * A path that does not exist is canonical as far as it does exist, with the
+ * rest as written; a symlink loop is `INVALID_INPUT pm-symlink-loop`; any other
+ * resolution failure is real and propagates.
+ */
+async function canonicalPath(files, input) {
+    const { resolved, absent } = await resolveExistingPrefix(files, input);
+    return absent.length > 0 ? files.join(resolved, ...absent) : resolved;
+}
+async function samePath(files, a, b) {
+    return (await canonicalPath(files, a)) === (await canonicalPath(files, b));
+}
+/**
+ * The handoff command line: the host's declared self-spawn argv plus
+ * `pm daemon restart`. Fails closed when no host declared re-entry — a
+ * daemon that cannot name its own CLI must not guess `process.execPath`.
+ */
+export async function composeDaemonRestartHandoffArgv(runtime) {
+    const [command, ...hostArgs] = (await getRuntimeHostCommands(runtime)).selfSpawnArgv('PM daemon handoff');
+    return [command, ...hostArgs, 'pm', 'daemon', 'restart'];
+}
+/**
+ * Default handoff: let the shipping command do the stop/start dance from the
+ * new file. It runs on the daemon's own runtime and carries only PM's base set
+ * and the host's re-entry facts and roots (C15); `VIBES_PM_HANDOFF` had no
+ * reader and is gone.
+ */
+export async function spawnDaemonRestartHandoff(runtime) {
+    const [command, ...args] = await composeDaemonRestartHandoffArgv(runtime);
+    const child = await (await getRuntimeExecution(runtime)).spawn({
+        command, args,
+        detached: true,
+        stdout: 'ignore', stderr: 'ignore',
+        env: composePMHostEnv(runtime),
+        envMode: 'replace'
+    });
+    child.unref?.();
+}
+export class ExecutableFreshnessReconciler {
+    deps;
+    injectedLogger;
+    enabled;
+    settleMs;
+    cooldownMs;
+    maxIdenticalRolls;
+    now;
+    /** Physical launch facts survive provider replacement; probe implementations do not. */
+    host;
+    handoff;
+    lastRolledAt = new Map();
+    rollLedger = new Map();
+    handoffRequestedAt = null;
+    /** The injected logger, else the daemon runtime's Logging per entry, following hot-reload generations (C083a). */
+    get logger() {
+        return this.injectedLogger ?? getPMDaemonLogger(this.deps.getRuntime(), 'global').child('executable-freshness');
+    }
+    constructor(deps) {
+        this.deps = deps;
+        this.injectedLogger = deps.logger;
+        this.enabled = deps.enabled ?? deps.getRuntime().getEnvSnapshot().VIBES_PM_EXECUTABLE_FRESHNESS !== '0';
+        this.settleMs = deps.settleMs ?? 30_000;
+        this.cooldownMs = deps.cooldownMs ?? 5 * 60_000;
+        this.maxIdenticalRolls = deps.maxIdenticalRolls ?? 3;
+        this.now = deps.now ?? (() => Date.now());
+        this.handoff = deps.handoff ?? (() => spawnDaemonRestartHandoff(deps.getRuntime()));
+    }
+    /**
+     * Pin the daemon's physical launch facts once, but resolve probe implementations
+     * through the current runtime on every tick. Test seams replace members.
+     * The daemon's own graph digest is the one its host pinned at boot
+     * (`graphFreshness().loaded`): a digest read later would already be the
+     * post-update one and the daemon would judge itself fresh forever.
+     */
+    async resolveHost() {
+        const deps = this.deps;
+        const identity = await getRuntimeHostIdentity(deps.getRuntime());
+        if (!this.host) {
+            const selfHostRoot = deps.selfHostRoot !== undefined ? deps.selfHostRoot : identity.hostRoot();
+            const selfPath = deps.selfExecutablePath ?? identity.captureExecutableIdentity()?.path ?? null;
+            this.host = {
+                selfPath,
+                selfHostRoot,
+                selfGraphDigest: deps.selfGraphDigest !== undefined
+                    ? deps.selfGraphDigest
+                    : selfHostRoot
+                        ? (identity.graphFreshness(selfHostRoot).loaded?.digest ?? null)
+                        : null
+            };
+        }
+        return {
+            ...this.host,
+            readProcessStart: deps.readProcessStart ?? ((pid) => identity.readProcessStartMs(pid)),
+            readProcessExecutable: deps.readProcessExecutable ?? ((pid) => identity.readProcessExecutablePath(pid)),
+            graphReplaced: deps.graphReplaced ?? ((root, startMs, digest) => identity.graphReplacedSince(root, startMs, digest)),
+            executableReplaced: deps.executableReplaced ?? ((path, startMs) => identity.executableReplacedSince(path, startMs))
+        };
+    }
+    settled(mtimeMs) {
+        return mtimeMs !== null && this.now() - mtimeMs >= this.settleMs;
+    }
+    async tick() {
+        const report = {
+            enabled: this.enabled,
+            selfReplaced: null,
+            selfGraphReplaced: null,
+            handoffRequested: false,
+            stale: [],
+            staleReasons: {},
+            unknown: [],
+            unknownReasons: {},
+            tripped: [],
+            rolled: null,
+            deferred: []
+        };
+        if (!this.enabled)
+            return report;
+        const host = await this.resolveHost();
+        // 1. Children first, so the handoff (which re-parents everything) finds
+        //    a fleet that already runs the new build.
+        const states = await this.deps.pm.getAllStatus();
+        const running = states
+            .flatMap((state) => (state.status === 'running' && state.pid !== undefined ? [{ state, pid: state.pid }] : []))
+            .sort((a, b) => startedMs(a.state) - startedMs(b.state));
+        const files = await resolveFileSystemAdapter(this.deps.getRuntime(), { binding: false });
+        const path = await getRuntimePath(this.deps.getRuntime());
+        for (const { state, pid } of running) {
+            const config = await this.deps.pm.getConfig(state.id);
+            if (!config)
+                continue;
+            if (config.task)
+                continue; // a finite task is never "rolled"
+            // The file the process actually runs (OS truth), else an absolute
+            // configured command; a bare PATH name like `vibes` cannot be judged.
+            const command = host.readProcessExecutable(pid) ??
+                (config.command && path.isAbsolute(config.command) ? config.command : null);
+            if (!command || host.selfPath === null || !(await samePath(files, command, host.selfPath)))
+                continue;
+            // The OS start time only: null means the child exited, and a table
+            // this host cannot read throws. PM's recorded start never stands in.
+            const startMs = host.readProcessStart(pid);
+            if (startMs === null || !Number.isFinite(startMs))
+                continue;
+            const verdict = host.executableReplaced(command, startMs);
+            // SECOND PREDICATE. `config.env` is what PM persisted for the child at
+            // spawn, so `VIBES_HOST_ROOT` names the graph THAT child imported and
+            // `VIBES_HOST_GRAPH_LOCK` is the digest it imported. Comparing against
+            // the recorded digest — not against a wall-clock mtime — is what stops
+            // a `bun install` that rewrites an identical lock from rolling the
+            // whole fleet for nothing.
+            //
+            // NEVER substitute this daemon's own root or digest for a child's.
+            // Without a persisted stamp the honest verdict is UNKNOWN, and the
+            // mtime signal is not consulted either: "the lock was written after
+            // this child started" is a guess about what the child loaded, and
+            // guessing is what produced the 2026-09-01 storm.
+            const childRoot = readChildEnv(config, 'VIBES_HOST_ROOT');
+            const childDigest = readChildEnv(config, 'VIBES_HOST_GRAPH_LOCK');
+            const graph = !childRoot
+                ? {
+                    replaced: null,
+                    digest: null,
+                    mtimeMs: null,
+                    reason: 'no VIBES_HOST_ROOT persisted for this process at spawn — module graph freshness is unknown'
+                }
+                : !childDigest
+                    ? {
+                        replaced: null,
+                        digest: null,
+                        mtimeMs: null,
+                        reason: `no VIBES_HOST_GRAPH_LOCK persisted for this process at spawn (root ${childRoot}) — module graph freshness is unknown`
+                    }
+                    : host.graphReplaced(childRoot, startMs, childDigest);
+            if (verdict.replaced !== true && graph.replaced !== true) {
+                // Fresh or unknown: whatever count the breaker held is resolved.
+                this.rollLedger.delete(state.id);
+                if (verdict.replaced === null || graph.replaced === null) {
+                    report.unknown.push(state.id);
+                    report.unknownReasons[state.id] = verdict.replaced === null ? verdict.reason : graph.reason;
+                }
+                continue;
+            }
+            report.stale.push(state.id);
+            report.staleReasons[state.id] =
+                verdict.replaced === true && graph.replaced === true
+                    ? 'executable+graph'
+                    : verdict.replaced === true
+                        ? 'executable'
+                        : 'graph';
+            // CIRCUIT BREAKER. The ledger key is the digest this child was stale
+            if (config.codeUpdatePolicy === 'runtime') {
+                report.deferred.push({ id: state.id, reason: 'runtime publication or kernel maintenance required' });
+                continue;
+            }
+            // CIRCUIT BREAKER. The ledger key is the digest this child was stale
+            // AGAINST. A respawn that comes back with the same key changed nothing
+            // the nerve can see; after `maxIdenticalRolls` of those, stop.
+            const ledgerKey = childDigest ?? 'no-stamp';
+            let ledger = this.rollLedger.get(state.id);
+            if (ledger && ledger.key !== ledgerKey) {
+                this.rollLedger.delete(state.id);
+                ledger = undefined;
+            }
+            if (ledger && (ledger.tripped || ledger.rolls >= this.maxIdenticalRolls)) {
+                if (!ledger.tripped) {
+                    ledger.tripped = true;
+                    this.logger.warn('circuit breaker open — rolled this process repeatedly without its recorded graph digest changing; not rolling it again', {
+                        processId: state.id,
+                        pid: state.pid,
+                        rolls: ledger.rolls,
+                        recordedDigest: childDigest,
+                        currentDigest: graph.digest,
+                        nerve: report.staleReasons[state.id],
+                        reason: 'each respawn came back stale against the same recorded digest — PM is not persisting a fresh stamp on spawn; a further roll cannot repair that'
+                    });
+                }
+                report.tripped.push(state.id);
+                report.deferred.push({ id: state.id, reason: 'circuit breaker open' });
+                continue;
+            }
+            if (report.rolled) {
+                report.deferred.push({ id: state.id, reason: 'one roll per tick' });
+                continue;
+            }
+            // Settle on whichever artifact actually moved. A half-written lockfile
+            // is as bad to exec against as a half-copied binary.
+            const settleMtime = verdict.replaced === true ? verdict.mtimeMs : graph.mtimeMs;
+            if (!this.settled(settleMtime)) {
+                report.deferred.push({
+                    id: state.id,
+                    reason: verdict.replaced === true ? 'new executable not settled' : 'new module graph not settled'
+                });
+                continue;
+            }
+            const last = this.lastRolledAt.get(state.id);
+            if (last !== undefined && this.now() - last < this.cooldownMs) {
+                report.deferred.push({ id: state.id, reason: 'cooldown' });
+                continue;
+            }
+            this.logger.info('build moved after start — rolling managed process onto the new build', {
+                processId: state.id,
+                pid: state.pid,
+                executable: command,
+                nerve: report.staleReasons[state.id],
+                reason: verdict.replaced === true ? verdict.reason : graph.reason
+            });
+            this.lastRolledAt.set(state.id, this.now());
+            this.rollLedger.set(state.id, { key: ledgerKey, rolls: (ledger?.rolls ?? 0) + 1, tripped: false });
+            const restarted = await attempt(() => this.deps.pm.restart(state.id));
+            if (restarted.ok) {
+                report.rolled = state.id;
+            }
+            else {
+                this.logger.error('rolling restart failed', {
+                    processId: state.id,
+                    failure: valueFreeFailure(restarted.failure)
+                });
+            }
+        }
+        // 2. Self. Only once every child that CAN be brought onto the new build
+        //    is there. Unknown children are not evidence of staleness, and a
+        //    breaker-tripped child will not get fresher by this daemon rolling
+        //    it again — a fresh daemon is its best chance. Neither holds us back.
+        const self = host.selfPath === null
+            ? { replaced: null, mtimeMs: null, reason: 'the host names no executable for this daemon' }
+            : host.executableReplaced(host.selfPath, this.deps.selfStartedAtMs);
+        report.selfReplaced = self.replaced;
+        const selfGraph = host.selfHostRoot
+            ? host.graphReplaced(host.selfHostRoot, this.deps.selfStartedAtMs, host.selfGraphDigest)
+            : { replaced: null, digest: null, mtimeMs: null, reason: 'no host root pinned' };
+        report.selfGraphReplaced = selfGraph.replaced;
+        if (self.replaced !== true && selfGraph.replaced !== true)
+            return report;
+        // PM owns live children and in-flight mutators. Disk freshness alone
+        // never authorizes surrendering that custody to a new process.
+        if (!this.deps.handoff) {
+            report.deferred.push({ id: 'pm-daemon', reason: 'runtime publication or kernel maintenance required' });
+            return report;
+        }
+        const stillRolling = report.stale.filter((id) => !report.tripped.includes(id));
+        if (stillRolling.length > 0) {
+            report.deferred.push({ id: 'pm-daemon', reason: 'children still stale' });
+            return report;
+        }
+        const selfSettleMtime = self.replaced === true ? self.mtimeMs : selfGraph.mtimeMs;
+        if (!this.settled(selfSettleMtime)) {
+            report.deferred.push({
+                id: 'pm-daemon',
+                reason: self.replaced === true ? 'new executable not settled' : 'new module graph not settled'
+            });
+            return report;
+        }
+        if (this.handoffRequestedAt !== null && this.now() - this.handoffRequestedAt < this.cooldownMs) {
+            report.deferred.push({ id: 'pm-daemon', reason: 'handoff already requested' });
+            return report;
+        }
+        this.handoffRequestedAt = this.now();
+        this.logger.warn('PM daemon build moved after start — handing off to a fresh daemon', {
+            executable: host.selfPath,
+            hostRoot: host.selfHostRoot,
+            nerve: self.replaced === true ? 'executable' : 'graph',
+            reason: self.replaced === true ? self.reason : selfGraph.reason
+        });
+        const handedOff = await attempt(() => this.handoff());
+        if (handedOff.ok) {
+            report.handoffRequested = true;
+        }
+        else {
+            this.logger.error('daemon handoff failed; will retry after cooldown', {
+                failure: valueFreeFailure(handedOff.failure)
+            });
+        }
+        return report;
+    }
+}
+/** A persisted env value: text with content (trimmed), anything else is no stamp. */
+const ChildEnvValueSchema = z.string().trim().min(1);
+/**
+ * Read one env value PM persisted for a child at spawn time. `config.env` on the
+ * REGISTERED config is the one place `services/lifecycle.ts` is expected to
+ * persist `VIBES_HOST_ROOT` / `VIBES_HOST_GRAPH_LOCK`; a config that lacks them
+ * was spawned by a PM that did not persist its stamp, and is judged UNKNOWN.
+ */
+function readChildEnv(config, key) {
+    const value = ChildEnvValueSchema.safeParse(config.env?.[key]);
+    return value.success ? value.data : null;
+}
+function startedMs(state) {
+    return toEpochMs(state.startedAt) ?? Number.NaN;
+}
+//# sourceMappingURL=executable-freshness-reconciler.js.map

package/dist/daemon/executable-freshness-reconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-freshness-reconciler.js","sourceRoot":"","sources":["../../src/daemon/executable-freshness-reconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EAItB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAG1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAYxD;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,KAAiC,EAAE,KAAa;IAC5E,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAiC,EAAE,CAAS,EAAE,CAAS;IAC9E,OAAO,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,OAA8C;IAE9C,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC1G,OAAO,CAAC,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAA0B;IACzE,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;QAClC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AACjB,CAAC;AAcD,MAAM,OAAO,6BAA6B;IACxB,IAAI,CAAoC;IACxC,cAAc,CAA+B;IAC7C,OAAO,CAAU;IACjB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,iBAAiB,CAAS;IAC1B,GAAG,CAAe;IACnC,wFAAwF;IAChF,IAAI,CAAoF;IAC/E,OAAO,CAAsB;IAC7B,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IACpD,kBAAkB,GAAkB,IAAI,CAAC;IAEjD,kHAAkH;IAClH,IAAY,MAAM;QACjB,OAAO,IAAI,CAAC,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjH,CAAC;IAED,YAAY,IAAuC;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC,6BAA6B,KAAK,GAAG,CAAC;QACxG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,MAAM,CAAC;QAChD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,IAAI,QAAQ,CAAC,yBAAyB,EAAE,EAAE,IAAI,IAAI,IAAI,CAAC;YAC/F,IAAI,CAAC,IAAI,GAAG;gBACX,QAAQ;gBACR,YAAY;gBACZ,eAAe,EACd,IAAI,CAAC,eAAe,KAAK,SAAS;oBACjC,CAAC,CAAC,IAAI,CAAC,eAAe;oBACtB,CAAC,CAAC,YAAY;wBACb,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;wBAChE,CAAC,CAAC,IAAI;aACT,CAAC;QACH,CAAC;QACD,OAAO;YACN,GAAG,IAAI,CAAC,IAAI;YACZ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACtF,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACvG,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACpH,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SACnH,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,OAAsB;QACrC,OAAO,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,IAAI;QACT,MAAM,MAAM,GAAoB;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI;YAClB,iBAAiB,EAAE,IAAI;YACvB,gBAAgB,EAAE,KAAK;YACvB,KAAK,EAAE,EAAE;YACT,YAAY,EAAE,EAAE;YAChB,OAAO,EAAE,EAAE;YACX,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,EAAE;SACZ,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEtC,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM;aACpB,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC9G,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,MAAM,CAAC,IAAI;gBAAE,SAAS,CAAC,kCAAkC;YAC7D,kEAAkE;YAClE,sEAAsE;YACtE,MAAM,OAAO,GACZ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC;gBAC/B,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAE,SAAS;YACrG,mEAAmE;YACnE,qEAAqE;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE1D,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,mEAAmE;YACnE,2BAA2B;YAC3B,EAAE;YACF,mEAAmE;YACnE,mEAAmE;YACnE,oEAAoE;YACpE,kEAAkE;YAClE,kDAAkD;YAClD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;YAClE,MAAM,KAAK,GAA8B,CAAC,SAAS;gBAClD,CAAC,CAAC;oBACA,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,4FAA4F;iBACpG;gBACF,CAAC,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC;wBACA,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,sEAAsE,SAAS,uCAAuC;qBAC9H;oBACF,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAExD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC1D,iEAAiE;gBACjE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC1D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC9B,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC7F,CAAC;gBACD,SAAS;YACV,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;oBACnD,CAAC,CAAC,kBAAkB;oBACpB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI;wBAC1B,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,OAAO,CAAC;YAEb,qEAAqE;YACrE,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC;gBACrG,SAAS;YACV,CAAC;YAED,qEAAqE;YACrE,uEAAuE;YACvE,+DAA+D;YAC/D,MAAM,SAAS,GAAG,WAAW,IAAI,UAAU,CAAC;YAC5C,IAAI,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,wHAAwH,EACxH;wBACC,SAAS,EAAE,KAAK,CAAC,EAAE;wBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,cAAc,EAAE,WAAW;wBAC3B,aAAa,EAAE,KAAK,CAAC,MAAM;wBAC3B,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpC,MAAM,EACL,gJAAgJ;qBACjJ,CACD,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACvE,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACpE,SAAS;YACV,CAAC;YACD,uEAAuE;YACvE,qDAAqD;YACrD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACpB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,MAAM,EACL,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,8BAA8B;iBAC1F,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC3D,SAAS;YACV,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE;gBACxF,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,UAAU,EAAE,OAAO;gBACnB,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;aACjE,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACnG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACtE,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBAC3C,SAAS,EAAE,KAAK,CAAC,EAAE;oBACnB,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;iBAC5C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,0EAA0E;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI;YAClC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8CAA8C,EAAE;YAC3F,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY;YAClC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC;YACxF,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAClF,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC9C,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACzE,qEAAqE;QACrE,+DAA+D;QAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC;YACxG,OAAO,MAAM,CAAC;QACf,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC1E,OAAO,MAAM,CAAC;QACf,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,EAAE,EAAE,WAAW;gBACf,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,8BAA8B;aAC9F,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC;QACf,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,EAAE;YACrF,UAAU,EAAE,IAAI,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;YACtD,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM;SAC/D,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAChC,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBACrE,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;aAC5C,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;CACD;AAED,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAErD;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAqB,EAAE,GAAW;IACvD,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB;IACrC,OAAO,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC;AACjD,CAAC"}

package/dist/daemon/fleet-attach-state.d.ts

@@ -0,0 +1,22 @@
+/**
+ * In-daemon fleet attach state shared by liveness-set and config-watcher.
+ * Real attach only — never store fabricated slice/preview ids.
+ *
+ * One instance per PM daemon (its host's state, never a module singleton):
+ * two daemons, or two hot-reload generations' tests, in one process never
+ * share an attach.
+ */
+import type { PMProfileProxy as FleetProcessProxy } from '../schemas/liveness-profile.ts';
+export type { PMProfileProxy as FleetProcessProxy } from '../schemas/liveness-profile.ts';
+export declare class FleetAttachState {
+    private readonly proxies;
+    set(scope: string, proxy: FleetProcessProxy): void;
+    clear(scope: string): void;
+    /**
+     * The proxy attached for `scope`; with no scope (or none attached there),
+     * the http-delta receiver if one is attached, else the latest attach.
+     */
+    get(scope?: string): FleetProcessProxy | undefined;
+    all(): Record<string, FleetProcessProxy>;
+}
+//# sourceMappingURL=fleet-attach-state.d.ts.map

package/dist/daemon/fleet-attach-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-attach-state.d.ts","sourceRoot":"","sources":["../../src/daemon/fleet-attach-state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,IAAI,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAC1F,YAAY,EAAE,cAAc,IAAI,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAE1F,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,IAAI;IAIlD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI1B;;;OAGG;IACH,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAalD,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;CAGxC"}

package/dist/daemon/fleet-attach-state.js

@@ -0,0 +1,39 @@
+/**
+ * In-daemon fleet attach state shared by liveness-set and config-watcher.
+ * Real attach only — never store fabricated slice/preview ids.
+ *
+ * One instance per PM daemon (its host's state, never a module singleton):
+ * two daemons, or two hot-reload generations' tests, in one process never
+ * share an attach.
+ */
+export class FleetAttachState {
+    proxies = new Map();
+    set(scope, proxy) {
+        this.proxies.set(scope, proxy);
+    }
+    clear(scope) {
+        this.proxies.delete(scope);
+    }
+    /**
+     * The proxy attached for `scope`; with no scope (or none attached there),
+     * the http-delta receiver if one is attached, else the latest attach.
+     */
+    get(scope) {
+        if (scope) {
+            const scoped = this.proxies.get(scope);
+            if (scoped)
+                return scoped;
+        }
+        let latest;
+        for (const proxy of this.proxies.values()) {
+            if (proxy.remoteSync?.transport?.type === 'http-delta')
+                return proxy;
+            latest = proxy;
+        }
+        return latest;
+    }
+    all() {
+        return Object.fromEntries(this.proxies);
+    }
+}
+//# sourceMappingURL=fleet-attach-state.js.map

package/dist/daemon/fleet-attach-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-attach-state.js","sourceRoot":"","sources":["../../src/daemon/fleet-attach-state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,OAAO,gBAAgB;IACX,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEhE,GAAG,CAAC,KAAa,EAAE,KAAwB;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAa;QAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,KAAc;QACjB,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC3B,CAAC;QACD,IAAI,MAAqC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,KAAK,CAAC;YACrE,MAAM,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,GAAG;QACF,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;CACD"}

package/dist/daemon/health-monitor.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Health Monitor
+ * Monitors process health via HTTP/TCP health checks with exponential backoff
+ */
+import type { HealthCheck } from '../schemas/process.ts';
+import type { ProcessManager } from '../manager.ts';
+import type { ProcessStore } from '../store.impl.consumer.ts';
+import { type HealthResultKind } from '../services/health.ts';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+export interface HealthMonitorDeps {
+    /** The daemon's runtime: its host process and socket services observe, signal and connect. */
+    getRuntime: () => RuntimeRef;
+    /** Process manager for getting status and configs */
+    pm: Pick<ProcessManager, 'getAllStatus' | 'getConfig' | 'getStatus'>;
+    /** Process store for updating state */
+    store: Pick<ProcessStore, 'update'>;
+    /** Min consecutive failures before kill (default: 3) */
+    minHealthFailuresBeforeKill?: number;
+    /** Max concurrent health checks (default: 10) */
+    maxConcurrentChecks?: number;
+    /** Clock (default `Date.now`). Tests drive warmup and grace through it. */
+    now?: () => number;
+    /** Kill escalation (default `utils/process-tree` killProcessTree). Tests observe it. */
+    killProcessTree?: (pid: number, processId: string) => Promise<void>;
+}
+export interface HealthCheckResult {
+    healthy: boolean;
+    details?: string;
+    /** Why the probe ended this way; see services/health.ts HealthResultKind. */
+    kind?: HealthResultKind;
+    /** HTTP status the surface answered with, for http checks. */
+    status?: number;
+}
+/** Prefix of the `lastError` notice this monitor writes for a check that cannot pass on a living process. */
+export declare const HEALTH_MISCONFIGURED_PREFIX = "Health check misconfigured:";
+/**
+ * Only evidence that nothing is answering may escalate to a kill.
+ *
+ * `http-status` means something IS answering on the probed port (a vite server
+ * with no `/api/health` route says 404); `config` says nothing about the
+ * process at all. Killing on either destroys a healthy process every grace
+ * period — measured on registry-web-dev and doctor-web-dev, 2026-09-01.
+ *
+ * An unclassified failure keeps the legacy (lethal) semantics so the zombie
+ * sweep cannot silently vanish for a producer that forgets to classify.
+ */
+export declare function isLethalFailure(result: Pick<HealthCheckResult, 'kind'>): boolean;
+/** The thing the check is pointed at, for log lines and the persisted notice. */
+export declare function describeHealthTarget(healthCheck: HealthCheck, socketPath?: string): string;
+export declare class HealthMonitor {
+    private deps;
+    private readonly minHealthFailuresBeforeKill;
+    private readonly checkSemaphore;
+    private readonly now;
+    private readonly killProcessTree;
+    private healthCheckFailures;
+    private healthCheckFirstFailure;
+    private lastHealthCheckTime;
+    private pendingHealthChecks;
+    private inFlightChecks;
+    /** The daemon runtime's Logging, read per entry so it follows hot-reload generations (C083a). */
+    private get logger();
+    constructor(deps: HealthMonitorDeps);
+    /**
+     * Run health checks on all processes
+     *
+     * Runs every 1 second but respects per-process intervals.
+     * Uses AbortController to prevent overlapping checks.
+     *
+     * Purpose: Detect and forcefully clean up stuck/broken processes that can't recover on their own
+     * - Kill processes that are unresponsive to health checks for too long
+     * - Clean up orphaned sockets/resources
+     * - Mark truly broken processes as crashed so auto-restart can kick in
+     *
+     * Does NOT auto-restart - that's handled by the process manager's auto-restart config
+     */
+    runHealthChecks(): Promise<void>;
+    /** One queued check: waits its semaphore slot, runs, and reports a failed run (the slot is always released). */
+    private runCheck;
+    /**
+     * Resolves once every check fired so far has settled. Shutdown and tests
+     * use it; the daemon tick itself never waits on probes.
+     */
+    drain(): Promise<void>;
+    /**
+     * Perform health check for a single process (async, non-blocking)
+     */
+    private performHealthCheck;
+    /** One probe of `healthCheck` and what its answer means: recovery, failure tracking, or the kill past grace. */
+    private evaluateHealth;
+    /** A passing probe resets the failure tracking and persists the transition only. */
+    private recordHealthy;
+    /** Deterministic per (target, status) so write-on-change holds across ticks. */
+    private misconfiguredNotice;
+    /**
+     * Check if a process is healthy using shared health check utilities
+     * Returns object with health status and detailed failure information
+     */
+    private checkProcessHealth;
+    /**
+     * Clear all tracking state (used during shutdown)
+     */
+    clearTracking(): void;
+}
+//# sourceMappingURL=health-monitor.d.ts.map

package/dist/daemon/health-monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-monitor.d.ts","sourceRoot":"","sources":["../../src/daemon/health-monitor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAA+B,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAyC,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQ7F,MAAM,WAAW,iBAAiB;IACjC,8FAA8F;IAC9F,UAAU,EAAE,MAAM,UAAU,CAAC;IAC7B,qDAAqD;IACrD,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,cAAc,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC;IACrE,uCAAuC;IACvC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpC,wDAAwD;IACxD,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6GAA6G;AAC7G,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAEzE;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,OAAO,CAEhF;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAW1F;AAUD,qBAAa,aAAa;IACzB,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAS;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAY;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoD;IAGpF,OAAO,CAAC,mBAAmB,CAAkC;IAG7D,OAAO,CAAC,uBAAuB,CAAkC;IAGjE,OAAO,CAAC,mBAAmB,CAAkC;IAG7D,OAAO,CAAC,mBAAmB,CAA2C;IAGtE,OAAO,CAAC,cAAc,CAAiC;IAGvD,iGAAiG;IACjG,OAAO,KAAK,MAAM,GAEjB;gBAEW,IAAI,EAAE,iBAAiB;IAcnC;;;;;;;;;;;;OAYG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAmDtC,gHAAgH;YAClG,QAAQ;IAYtB;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B;;OAEG;YACW,kBAAkB;IAiChC,gHAAgH;YAClG,cAAc;IA2N5B,oFAAoF;YACtE,aAAa;IA0B3B,gFAAgF;IAChF,OAAO,CAAC,mBAAmB;IAQ3B;;;OAGG;YACW,kBAAkB;IAuBhC;;OAEG;IACH,aAAa,IAAI,IAAI;CAUrB"}