@xioflow/kernel 0.4.0 → 0.5.1

package/dist/supervisor/process-monitor.js

@@ -0,0 +1,230 @@
+import { finalizeOperation, indeterminateResult } from './finalize.js';
+import { buildProcessResult, openOutputCapture } from './process-output.js';
+import { crashpoint } from '../fault/crashpoint.js';
+const ROOT_EXIT_WAIT_MS = 1000;
+/**
+ * 已 active 的进程：监督运行、有界排空与流式转储、身份核验、结果落盘。
+ * 需要在调用方 finally 中执行的清理（排空器、定时器）登记到 cleanups。
+ */
+export async function superviseActive(ctx, plan, handle, cleanups) {
+    const { options, opState } = plan;
+    // 崩溃点：进程已放行运行、结果尚未落盘
+    crashpoint('supervisor:process-running');
+    const capture = openOutputCapture(ctx, plan, handle);
+    cleanups.push(() => capture.stdout.forceFinalize(), () => capture.stderr.forceFinalize());
+    // 检查在 spawn 途中是否已被请求取消：若已请求取消，立即触发停止流水线向底层发送终止信号
+    if (opState.cancelRequested) {
+        ctx.stop(options.opId, 'user_cancelled', opState.cancelGraceMs ?? 2000).catch(() => { });
+    }
+    let timeoutTimer = null;
+    const timeoutPromise = options.timeoutMs && options.timeoutMs > 0
+        ? new Promise((resolve) => {
+            timeoutTimer = setTimeout(() => resolve('timeout'), options.timeoutMs);
+        })
+        : new Promise(() => { });
+    const clearTimer = () => {
+        if (timeoutTimer)
+            clearTimeout(timeoutTimer);
+    };
+    const sampler = startBudgetSampler(ctx, plan, handle);
+    cleanups.push(clearTimer, sampler.stop);
+    const outcome = await raceRootOutcome(plan, handle, timeoutPromise);
+    clearTimer();
+    sampler.stop();
+    const settled = await settleRootOutcome(ctx, plan, handle, outcome);
+    if ('final' in settled)
+        return settled.final;
+    const drained = await drainOrReap(ctx, plan, handle, capture, {
+        exit: settled.exit,
+        exitedNaturally: outcome.type === 'exit',
+    });
+    if ('final' in drained)
+        return drained.final;
+    const result = buildProcessResult(plan, capture, {
+        exit: settled.exit,
+        residualProcessesReaped: drained.residualProcessesReaped,
+        peaks: sampler.peaks(),
+        identityVerification: await ctx.driver.verifyIdentity(handle.identity),
+    });
+    if (opState.stopPromise) {
+        const stopRes = await opState.stopPromise;
+        if (stopRes.stopped !== 'confirmed_stopped') {
+            return recordUnconfirmedStop(ctx, plan, handle, stopRes, true);
+        }
+    }
+    // 6. [事务提交结果与释放资源 - Single Writer]
+    return finalizeOperation(ctx.domain, options.opId, result, {
+        requiredResources: options.requiredResources,
+        artifactsDir: capture.artifactsDir,
+    });
+}
+/** Soft / Observe 模式资源采样治理：记录峰值，soft 超限时走停止流水线。 */
+function startBudgetSampler(ctx, plan, handle) {
+    const { options, opState } = plan;
+    const budget = options.resourceBudget;
+    let peakMemoryBytes = 0;
+    let peakCpuTimeMs = 0;
+    let samplingInterval = null;
+    const stop = () => {
+        if (samplingInterval)
+            clearInterval(samplingInterval);
+    };
+    const peaks = () => ({ peakMemoryBytes, peakCpuTimeMs });
+    if (!ctx.driver.sampleMetrics || !budget || (budget.enforcement !== 'soft' && budget.enforcement !== 'observe')) {
+        return { stop, peaks };
+    }
+    const stopFor = async (reason) => {
+        opState.terminationReason = reason;
+        stop();
+        await ctx.stop(options.opId, reason, 1000);
+    };
+    samplingInterval = setInterval(async () => {
+        try {
+            const metrics = await ctx.driver.sampleMetrics(handle.identity);
+            peakMemoryBytes = Math.max(peakMemoryBytes, metrics.rssBytes);
+            peakCpuTimeMs = Math.max(peakCpuTimeMs, metrics.cpuTimeMs);
+            if (budget.enforcement !== 'soft')
+                return;
+            if (budget.maxMemoryBytes && metrics.rssBytes > budget.maxMemoryBytes) {
+                await stopFor('memory_exceeded');
+            }
+            else if (budget.maxCpuTimeMs && metrics.cpuTimeMs > budget.maxCpuTimeMs) {
+                await stopFor('cpu_exceeded');
+            }
+            else if (budget.maxPids && metrics.pidsCount > budget.maxPids) {
+                await stopFor('pids_exceeded');
+            }
+        }
+        catch { }
+    }, 100);
+    return { stop, peaks };
+}
+/** 等待根进程退出、超时触发、或外部停止完成（三者取先）。 */
+async function raceRootOutcome(plan, handle, timeoutPromise) {
+    const { opState } = plan;
+    let notifyStop;
+    const stopTriggerPromise = new Promise((resolve) => {
+        notifyStop = resolve;
+    });
+    const previousResolve = opState.stopResolve;
+    opState.stopResolve = (res) => {
+        previousResolve?.(res);
+        notifyStop?.(res);
+    };
+    const rootExitPromise = handle.onRootExit ?? handle.onExit;
+    const stopCandidate = opState.stopPromise ? opState.stopPromise : stopTriggerPromise;
+    return Promise.race([
+        rootExitPromise.then((res) => ({ type: 'exit', res })),
+        timeoutPromise.then(() => ({ type: 'timeout' })),
+        stopCandidate.then((stopRes) => ({ type: 'stop', stopRes })),
+    ]);
+}
+function waitRootExit(handle) {
+    return Promise.race([
+        (handle.onRootExit ?? handle.onExit).then((res) => ({ exited: true, res })),
+        new Promise((resolve) => setTimeout(() => resolve({ exited: false }), ROOT_EXIT_WAIT_MS)),
+    ]);
+}
+async function settleRootOutcome(ctx, plan, handle, outcome) {
+    const { options, opState } = plan;
+    if (outcome.type === 'exit') {
+        return { exit: outcome.res };
+    }
+    if (outcome.type === 'stop') {
+        if (outcome.stopRes.stopped !== 'confirmed_stopped') {
+            if (handle.rawProcess && typeof handle.rawProcess.kill === 'function') {
+                try {
+                    handle.rawProcess.kill('SIGKILL');
+                }
+                catch { }
+            }
+            try {
+                handle.stdout.destroy?.();
+                handle.stderr.destroy?.();
+            }
+            catch { }
+            return { final: recordUnconfirmedStop(ctx, plan, handle, outcome.stopRes, false) };
+        }
+        const rootExit = await waitRootExit(handle);
+        return { exit: rootExit.exited ? rootExit.res : { exitCode: null, signal: 'SIGKILL' } };
+    }
+    opState.timedOut = true;
+    opState.terminationReason = 'timed_out';
+    const stopRes = await ctx.stop(options.opId, 'timed_out', 1500);
+    // 超时路径：根进程已由停止流水线终止，等待根进程退出事实（避免被持有管道的逃逸后代挂死）。
+    // 有界上限内未确认停止或根进程仍未退出，转入 indeterminate
+    const rootExit = await waitRootExit(handle);
+    if (stopRes.stopped === 'confirmed_stopped' && rootExit.exited) {
+        return { exit: rootExit.res };
+    }
+    const stored = ctx.domain.getStore().getOperation(options.opId);
+    if (stored && stored.status === 'done' && stored.result?.status === 'indeterminate') {
+        return { final: stored.result };
+    }
+    const indet = indeterminateResult({
+        reason: `Process ${handle.identity.pid} timed out and root process could not be confirmed exited within ${ROOT_EXIT_WAIT_MS}ms bound: ${stopRes.errorDetails || 'root process still alive'}`,
+        startTime: opState.startTime,
+    });
+    return { final: holdLeases(ctx, plan, indet) };
+}
+/** 停止未被确认：若停止流水线已写下结果则沿用，否则记为 indeterminate 并保留租约。 */
+function recordUnconfirmedStop(ctx, plan, handle, stopRes, withCapability) {
+    const stored = ctx.domain.getStore().getOperation(plan.options.opId);
+    if (stored && stored.status === 'done') {
+        return (stored.result ?? null);
+    }
+    const indet = indeterminateResult({
+        reason: `Process ${handle.identity.pid} was cancelled or stopped but could not be confirmed: ${stopRes.errorDetails || 'residual processes still alive'}`,
+        startTime: plan.opState.startTime,
+        capabilityId: withCapability ? plan.options.capabilityId : undefined,
+    });
+    return holdLeases(ctx, plan, indet);
+}
+function holdLeases(ctx, plan, indet) {
+    return finalizeOperation(ctx.domain, plan.options.opId, indet, {
+        requiredResources: plan.options.requiredResources,
+        releaseResourceLock: false,
+    });
+}
+/**
+ * 有界等待流排空。排空超时说明根进程已退出但仍有后代持有管道：回收整个进程组，
+ * 否则操作会一直挂到超时，且 root 的真实退出事实会被超时掩盖。
+ */
+async function drainOrReap(ctx, plan, handle, capture, facts) {
+    const { options, opState } = plan;
+    const drainTimeoutMs = options.drainTimeoutMs ?? 2000;
+    const drainPromise = Promise.all([capture.stdout.finishPromise, capture.stderr.finishPromise]);
+    const drainedWithin = (ms) => Promise.race([drainPromise.then(() => true), new Promise((resolve) => setTimeout(() => resolve(false), ms))]);
+    let drained = await drainedWithin(drainTimeoutMs);
+    let residualProcessesReaped = false;
+    if (!drained && facts.exitedNaturally) {
+        const reapResult = await ctx.driver.terminate(handle.identity, 1500);
+        if (reapResult.stopped !== 'confirmed_stopped') {
+            const indet = indeterminateResult({
+                reason: `Process ${handle.identity.pid} exited but residual descendants could not be confirmed stopped: ${reapResult.errorDetails}`,
+                startTime: opState.startTime,
+            });
+            return { final: holdLeases(ctx, plan, indet) };
+        }
+        residualProcessesReaped = true;
+        // 被杀死的后代释放管道后，给排空最后一次机会
+        drained = await drainedWithin(250);
+    }
+    if (drained) {
+        return { residualProcessesReaped };
+    }
+    // 排空超时路径强制调用 fsyncSync + closeSync 结清刷盘
+    capture.stdout.forceFinalize();
+    capture.stderr.forceFinalize();
+    // 走到这里时进程组已被确认停止，管道写端却仍被持有：
+    // 必然存在一个驱动未观测到的逃逸进程（例如 setsid 后被 init 收养、采样器没来得及记录）。
+    // 无法确认隔离，不能报告 succeeded / residualProcessesReaped，必须如实判 indeterminate 并保留租约。
+    const indet = indeterminateResult({
+        reason: `Process ${handle.identity.pid} exited (exitCode=${facts.exit.exitCode}, signal=${facts.exit.signal}) and its process group was confirmed stopped, but stdout/stderr pipes are still held by an unobserved escaped process`,
+        recoveryGuidance: 'An escaped process outside the observed process tree still holds the output pipes. Inspect system processes manually before adjudicating and releasing resources.',
+        capabilityId: options.capabilityId,
+        startTime: opState.startTime,
+    });
+    return { final: holdLeases(ctx, plan, indet) };
+}
+//# sourceMappingURL=process-monitor.js.map

package/dist/supervisor/process-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-monitor.js","sourceRoot":"","sources":["../../src/supervisor/process-monitor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAa,iBAAiB,EAAiB,MAAM,qBAAqB,CAAC;AAEtG,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAIpD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAsB,EACtB,IAAoB,EACpB,MAA4B,EAC5B,QAA2B;IAE3B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,qBAAqB;IACrB,UAAU,CAAC,4BAA4B,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAE1F,iDAAiD;IACjD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,YAAY,GAA0B,IAAI,CAAC;IAC/C,MAAM,cAAc,GAClB,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC;QACxC,CAAC,CAAC,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;YACjC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC,CAAC;QACJ,CAAC,CAAC,IAAI,OAAO,CAAY,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,YAAY;YAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACpE,UAAU,EAAE,CAAC;IACb,OAAO,CAAC,IAAI,EAAE,CAAC;IAEf,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IAE7C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAC5D,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM;KACzC,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IAE7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE;QAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;QACtB,oBAAoB,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC;KACvE,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;YAC5C,OAAO,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE;QACzD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;AACL,CAAC;AAED,mDAAmD;AACnD,SAAS,kBAAkB,CAAC,GAAsB,EAAE,IAAoB,EAAE,MAA4B;IACpG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IACtC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,gBAAgB,GAA0B,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,gBAAgB;YAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAEzD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QAChH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,EAAE,MAA4D,EAAE,EAAE;QACrF,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC;QACnC,IAAI,EAAE,CAAC;QACP,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,gBAAgB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjE,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9D,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM;gBAAE,OAAO;YAC1C,IAAI,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;gBACtE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC1E,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;YAChC,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAChE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC,EAAE,GAAG,CAAC,CAAC;IACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAOD,kCAAkC;AAClC,KAAK,UAAU,eAAe,CAC5B,IAAoB,EACpB,MAA4B,EAC5B,cAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,IAAI,UAA0D,CAAC;IAC/D,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;QACpE,UAAU,GAAG,OAAO,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAC5C,OAAO,CAAC,WAAW,GAAG,CAAC,GAAsB,EAAE,EAAE;QAC/C,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC;QACvB,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;IAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,CAAc;QAC/B,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,CAAC,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B;IAChD,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;KAC7G,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAsB,EACtB,IAAoB,EACpB,MAA4B,EAC5B,OAAoB;IAEpB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;YACpD,IAAI,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACtE,IAAI,CAAC;oBAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACrD,CAAC;YACD,IAAI,CAAC;gBACF,MAAM,CAAC,MAAc,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClC,MAAM,CAAC,MAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,iBAAiB,GAAG,WAAW,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAEhE,+CAA+C;IAC/C,sCAAsC;IACtC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,OAAO,KAAK,mBAAmB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,eAAe,EAAE,CAAC;QACpF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAA2C,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,CAAC;QAChC,MAAM,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,oEAAoE,iBAAiB,aAAa,OAAO,CAAC,YAAY,IAAI,0BAA0B,EAAE;QAC5L,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,sDAAsD;AACtD,SAAS,qBAAqB,CAC5B,GAAsB,EACtB,IAAoB,EACpB,MAA4B,EAC5B,OAA0B,EAC1B,cAAuB;IAEvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAsC,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,CAAC;QAChC,MAAM,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,yDAAyD,OAAO,CAAC,YAAY,IAAI,gCAAgC,EAAE;QACzJ,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QACjC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CACjB,GAAsB,EACtB,IAAoB,EACpB,KAA6C;IAE7C,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAC7D,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;QACjD,mBAAmB,EAAE,KAAK;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAsB,EACtB,IAAoB,EACpB,MAA4B,EAC5B,OAAsB,EACtB,KAAoD;IAEpD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,CAAC,EAAU,EAAE,EAAE,CACnC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzH,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,mBAAmB,CAAC;gBAChC,MAAM,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,oEAAoE,UAAU,CAAC,YAAY,EAAE;gBACnI,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,uBAAuB,GAAG,IAAI,CAAC;QAC/B,wBAAwB;QACxB,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACrC,CAAC;IACD,wCAAwC;IACxC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;IAC/B,4BAA4B;IAC5B,qDAAqD;IACrD,6EAA6E;IAC7E,MAAM,KAAK,GAAG,mBAAmB,CAAC;QAChC,MAAM,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,qBAAqB,KAAK,CAAC,IAAI,CAAC,QAAQ,YAAY,KAAK,CAAC,IAAI,CAAC,MAAM,wHAAwH;QACnO,gBAAgB,EACd,mKAAmK;QACrK,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/dist/supervisor/process-output.d.ts

@@ -0,0 +1,27 @@
+import { ManagedProcessHandle } from '../driver/types.js';
+import { ProcessOperationResult } from '../types.js';
+import { StreamDrainer } from './drainer.js';
+import type { ProcessRunContext, ProcessRunPlan } from './process-run.js';
+export type ExitFacts = {
+    exitCode: number | null;
+    signal: NodeJS.Signals | null;
+};
+export interface OutputCapture {
+    stdout: StreamDrainer;
+    stderr: StreamDrainer;
+    artifactsDir: string;
+    artifactsDirError?: string;
+    callbackError(): string | undefined;
+}
+/** 准备 artifacts 溢出目录，挂上有界排空器；chunk 同时计入输出预算并转发给流订阅者。 */
+export declare function openOutputCapture(ctx: ProcessRunContext, plan: ProcessRunPlan, handle: ManagedProcessHandle): OutputCapture;
+export declare function buildProcessResult(plan: ProcessRunPlan, capture: OutputCapture, facts: {
+    exit: ExitFacts;
+    residualProcessesReaped: boolean;
+    peaks: {
+        peakMemoryBytes: number;
+        peakCpuTimeMs: number;
+    };
+    identityVerification: ProcessOperationResult['identityVerification'];
+}): ProcessOperationResult;
+//# sourceMappingURL=process-output.d.ts.map

package/dist/supervisor/process-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-output.d.ts","sourceRoot":"","sources":["../../src/supervisor/process-output.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAsB,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE1E,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;CAAE,CAAC;AAEnF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAuD3H;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE;IACL,IAAI,EAAE,SAAS,CAAC;IAChB,uBAAuB,EAAE,OAAO,CAAC;IACjC,KAAK,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,oBAAoB,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;CACtE,GACA,sBAAsB,CAsDxB"}

package/dist/supervisor/process-output.js

@@ -0,0 +1,102 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { setupStreamDrainer } from './drainer.js';
+/** 准备 artifacts 溢出目录，挂上有界排空器；chunk 同时计入输出预算并转发给流订阅者。 */
+export function openOutputCapture(ctx, plan, handle) {
+    const { options, opState } = plan;
+    const artifactsDir = options.artifactsDir || path.join(ctx.domain.domainPath, 'artifacts');
+    let artifactsDirError;
+    if (!fs.existsSync(artifactsDir)) {
+        try {
+            fs.mkdirSync(artifactsDir, { recursive: true });
+        }
+        catch (dirErr) {
+            artifactsDirError = dirErr.message || String(dirErr);
+        }
+    }
+    let totalOutputBytes = 0;
+    const onChunk = (bytes) => {
+        totalOutputBytes += bytes;
+        const budget = options.resourceBudget;
+        if (budget?.enforcement === 'soft' &&
+            budget.maxOutputBytes &&
+            totalOutputBytes > budget.maxOutputBytes &&
+            !opState.terminationReason) {
+            opState.terminationReason = 'output_exceeded';
+            ctx.stop(options.opId, 'output_exceeded', 1000).catch(() => { });
+        }
+    };
+    let streamCallbackError;
+    const forwardChunk = (stream) => (chunk) => {
+        for (const subscriber of opState.streamSubscribers) {
+            try {
+                subscriber(stream, chunk);
+            }
+            catch (err) {
+                streamCallbackError ??= err instanceof Error ? err.message : String(err);
+            }
+        }
+    };
+    const maxBytes = options.maxOutputBytes ?? 10 * 1024 * 1024; // 默认 10MB
+    const drainer = (stream) => setupStreamDrainer(handle[stream], maxBytes, path.join(artifactsDir, `${options.opId}-${stream}.log`), onChunk, forwardChunk(stream), artifactsDirError);
+    return {
+        stdout: drainer('stdout'),
+        stderr: drainer('stderr'),
+        artifactsDir,
+        artifactsDirError,
+        callbackError: () => streamCallbackError,
+    };
+}
+export function buildProcessResult(plan, capture, facts) {
+    const { options, opState } = plan;
+    const stdoutData = capture.stdout.getResult();
+    const stderrData = capture.stderr.getResult();
+    const spillError = stdoutData.spillError || stderrData.spillError || capture.artifactsDirError;
+    const streamCallbackError = capture.callbackError();
+    const isResourceOrTimeoutStopped = opState.timedOut ||
+        opState.terminationReason === 'memory_exceeded' ||
+        opState.terminationReason === 'cpu_exceeded' ||
+        opState.terminationReason === 'pids_exceeded' ||
+        opState.terminationReason === 'output_exceeded';
+    const finalStatus = isResourceOrTimeoutStopped
+        ? 'failed'
+        : opState.cancelRequested
+            ? 'cancelled'
+            : facts.exit.exitCode === 0
+                ? 'succeeded'
+                : 'failed';
+    return {
+        kind: 'process',
+        status: finalStatus,
+        exitCode: facts.exit.exitCode,
+        signal: facts.exit.signal,
+        stdout: stdoutData.content,
+        stderr: stderrData.content,
+        capabilityId: options.capabilityId,
+        confined: plan.confined,
+        confinementDriver: plan.confinementDriverName,
+        isTruncated: stdoutData.isTruncated || stderrData.isTruncated,
+        stdoutTruncated: stdoutData.isTruncated,
+        stderrTruncated: stderrData.isTruncated,
+        stdoutRef: !stdoutData.spillError ? stdoutData.outputRef : undefined,
+        stderrRef: !stderrData.spillError ? stderrData.outputRef : undefined,
+        stdoutBytes: stdoutData.bytesSeen,
+        stderrBytes: stderrData.bytesSeen,
+        stdoutHash: !stdoutData.spillError ? stdoutData.outputHash : undefined,
+        stderrHash: !stderrData.spillError ? stderrData.outputHash : undefined,
+        ...(facts.residualProcessesReaped ? { residualProcessesReaped: true } : {}),
+        ...(streamCallbackError ? { streamCallbackError } : {}),
+        ...(spillError ? { spillError } : {}),
+        ...(stdoutData.spillError ? { stdoutSpillError: stdoutData.spillError } : {}),
+        ...(stderrData.spillError ? { stderrSpillError: stderrData.spillError } : {}),
+        outputRef: (!spillError && (stdoutData.outputRef || stderrData.outputRef)) || undefined,
+        outputHash: (!spillError && (stdoutData.outputHash || stderrData.outputHash)) || undefined,
+        terminationReason: opState.terminationReason || (finalStatus === 'succeeded' ? 'completed' : undefined),
+        peakMemoryBytes: facts.peaks.peakMemoryBytes,
+        cpuTimeMs: facts.peaks.peakCpuTimeMs,
+        identityVerification: facts.identityVerification,
+        durationMs: Date.now() - opState.startTime,
+        completedAt: new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=process-output.js.map

package/dist/supervisor/process-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-output.js","sourceRoot":"","sources":["../../src/supervisor/process-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,kBAAkB,EAAiB,MAAM,cAAc,CAAC;AAajE,wDAAwD;AACxD,MAAM,UAAU,iBAAiB,CAAC,GAAsB,EAAE,IAAoB,EAAE,MAA4B;IAC1G,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,iBAAqC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,MAAW,EAAE,CAAC;YACrB,iBAAiB,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;QAChC,gBAAgB,IAAI,KAAK,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;QACtC,IACE,MAAM,EAAE,WAAW,KAAK,MAAM;YAC9B,MAAM,CAAC,cAAc;YACrB,gBAAgB,GAAG,MAAM,CAAC,cAAc;YACxC,CAAC,OAAO,CAAC,iBAAiB,EAC1B,CAAC;YACD,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,mBAAuC,CAAC;IAC5C,MAAM,YAAY,GAAG,CAAC,MAA2B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;QACtE,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mBAAmB,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,UAAU;IACvE,MAAM,OAAO,GAAG,CAAC,MAA2B,EAAE,EAAE,CAC9C,kBAAkB,CAChB,MAAM,CAAC,MAAM,CAAC,EACd,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,MAAM,CAAC,EACxD,OAAO,EACP,YAAY,CAAC,MAAM,CAAC,EACpB,iBAAiB,CAClB,CAAC;IACJ,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;QACzB,YAAY;QACZ,iBAAiB;QACjB,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAoB,EACpB,OAAsB,EACtB,KAKC;IAED,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAC/F,MAAM,mBAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAEpD,MAAM,0BAA0B,GAC9B,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,iBAAiB,KAAK,iBAAiB;QAC/C,OAAO,CAAC,iBAAiB,KAAK,cAAc;QAC5C,OAAO,CAAC,iBAAiB,KAAK,eAAe;QAC7C,OAAO,CAAC,iBAAiB,KAAK,iBAAiB,CAAC;IAClD,MAAM,WAAW,GAAG,0BAA0B;QAC5C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC;gBAC3B,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,QAAQ,CAAC;IAEb,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACzB,MAAM,EAAE,UAAU,CAAC,OAAO;QAC1B,MAAM,EAAE,UAAU,CAAC,OAAO;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,iBAAiB,EAAE,IAAI,CAAC,qBAAqB;QAC7C,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW;QAC7D,eAAe,EAAE,UAAU,CAAC,WAAW;QACvC,eAAe,EAAE,UAAU,CAAC,WAAW;QACvC,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,WAAW,EAAE,UAAU,CAAC,SAAS;QACjC,WAAW,EAAE,UAAU,CAAC,SAAS;QACjC,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACtE,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACtE,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS;QACvF,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,SAAS;QAC1F,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,eAAe;QAC5C,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;QACpC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;QAC1C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC"}

package/dist/supervisor/process-run.d.ts

@@ -0,0 +1,30 @@
+import { ExecutionDomain } from '../domain.js';
+import { PlatformDriver, StopProcessResult, StructuredCommand } from '../driver/types.js';
+import { Operation, ProcessOperationResult, TerminationReason } from '../types.js';
+import { CapabilityAdmission } from './admission.js';
+import { ActiveOperationState, ExecuteProcessOptions } from './types.js';
+/** 执行期需要回调监督器的能力：停止流水线与在飞表清理都归监督器所有。 */
+export interface ProcessRunContext {
+    domain: ExecutionDomain;
+    driver: PlatformDriver;
+    stop(opId: string, reason: TerminationReason, graceMs: number): Promise<StopProcessResult>;
+    forget(opId: string): void;
+}
+export interface ProcessRunPlan {
+    options: ExecuteProcessOptions;
+    op: Operation;
+    opState: ActiveOperationState;
+    /** 已按写入限制包装后的实际启动命令。 */
+    command: StructuredCommand;
+    confined: boolean;
+    confinementDriverName?: string;
+    capAdmission?: CapabilityAdmission;
+}
+/**
+ * 启动协议：资源仲裁 -> 先持久化意图 -> 请求驱动启动 -> 登记身份并转 active -> 监督运行 -> 记录结果。
+ * 任何出口都会结清 stopResolve 并把操作移出在飞表。
+ */
+export declare function runProcess(ctx: ProcessRunContext, plan: ProcessRunPlan): Promise<ProcessOperationResult>;
+/** 进程启动前被取消：记录 cancelled（evidence: unobserved），不写虚假租约或意图事件。 */
+export declare function cancelBeforeSpawn(domain: ExecutionDomain, options: ExecuteProcessOptions, opState: ActiveOperationState): ProcessOperationResult;
+//# sourceMappingURL=process-run.d.ts.map

package/dist/supervisor/process-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-run.d.ts","sourceRoot":"","sources":["../../src/supervisor/process-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAwB,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAwB,MAAM,gBAAgB,CAAC;AAI3E,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEzE,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,qBAAqB,CAAC;IAC/B,EAAE,EAAE,SAAS,CAAC;IACd,OAAO,EAAE,oBAAoB,CAAC;IAC9B,wBAAwB;IACxB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAyD9G;AAgGD,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,oBAAoB,GAC5B,sBAAsB,CA0CxB"}

package/dist/supervisor/process-run.js

@@ -0,0 +1,191 @@
+import { recordCapabilityUsed } from './admission.js';
+import { computeInputFingerprint } from './fingerprint.js';
+import { finalizeOperation, indeterminateResult } from './finalize.js';
+import { superviseActive } from './process-monitor.js';
+/**
+ * 启动协议：资源仲裁 -> 先持久化意图 -> 请求驱动启动 -> 登记身份并转 active -> 监督运行 -> 记录结果。
+ * 任何出口都会结清 stopResolve 并把操作移出在飞表。
+ */
+export async function runProcess(ctx, plan) {
+    const { options, opState } = plan;
+    const cleanups = [];
+    try {
+        // 1. [资源分配与排队等待]
+        await ctx.domain.allocateResourcesWithWait(options.opId, options.requiredResources || [], options.waitTimeoutMs ?? 0, options.resourceBudget, () => opState.cancelRequested === true);
+        if (opState.cancelRequested) {
+            return cancelBeforeSpawn(ctx.domain, options, opState);
+        }
+        // 2. [启动协议步骤 1] 写入 SQLite (status: intent_registered)
+        try {
+            ctx.domain.getStore().registerOperationIntent(plan.op, ctx.domain.domainId);
+            opState.phase = 'intent_registered';
+        }
+        catch (err) {
+            ctx.domain.internalReleaseResources(options.opId, options.requiredResources);
+            throw err;
+        }
+        if (opState.cancelRequested) {
+            return cancelBeforeSpawn(ctx.domain, options, opState);
+        }
+        // 3. [启动协议步骤 2] 请求平台驱动启动
+        opState.phase = 'spawning';
+        let handle;
+        try {
+            handle = await ctx.driver.spawn(plan.command);
+            opState.handle = handle;
+            opState.command = plan.command;
+        }
+        catch (spawnError) {
+            return failSpawn(ctx.domain, plan, spawnError);
+        }
+        // 4. [启动协议步骤 3] 登记执行身份，状态推进为 active
+        await activateOrAbort(ctx, plan, handle);
+        // 5–6. 监督运行、有界排空、结果落盘
+        return await superviseActive(ctx, plan, handle, cleanups);
+    }
+    finally {
+        for (const cleanup of cleanups)
+            cleanup();
+        if (opState.stopResolve) {
+            const resolveFn = opState.stopResolve;
+            opState.stopResolve = undefined;
+            resolveFn({
+                stopped: 'confirmed_stopped',
+                scope: 'direct_child',
+                errorDetails: opState.phase === 'done' ? undefined : 'Operation terminated before process activation',
+            });
+        }
+        ctx.forget(options.opId);
+    }
+}
+/** 启动失败（如可执行文件不存在）：不产生假运行状态，直接失败收尾并释放资源。 */
+function failSpawn(domain, plan, spawnError) {
+    const { options, opState } = plan;
+    opState.phase = 'done';
+    opState.stopResolve?.({ stopped: 'confirmed_stopped', scope: 'direct_child', errorDetails: spawnError?.message });
+    opState.stopResolve = undefined;
+    const message = spawnError?.message || String(spawnError);
+    const failResult = {
+        kind: 'process',
+        status: 'failed',
+        exitCode: 127,
+        signal: null,
+        stdout: '',
+        stderr: message,
+        spawnFailure: message,
+        capabilityId: options.capabilityId,
+        confined: plan.confined,
+        confinementDriver: plan.confinementDriverName,
+        isTruncated: false,
+        identityVerification: 'not_original_process',
+        durationMs: Date.now() - opState.startTime,
+        completedAt: new Date().toISOString(),
+    };
+    return finalizeOperation(domain, options.opId, failResult, { requiredResources: options.requiredResources });
+}
+/**
+ * 登记 active 并放行闸门。登记失败时（N4）进程已存在：先停掉它，再按停止是否确认
+ * 记为 failed 或 indeterminate，最后把原始登记错误抛给调用方，防止产生孤儿进程。
+ */
+async function activateOrAbort(ctx, plan, handle) {
+    const { options, opState } = plan;
+    try {
+        ctx.domain.getStore().updateOperationStatus(options.opId, 'active', handle.identity);
+        opState.phase = 'active';
+        handle.releaseGate?.();
+        if (options.capabilityId && plan.capAdmission) {
+            recordCapabilityUsed(ctx.domain, { runId: options.runId, opId: options.opId, capabilityId: options.capabilityId }, plan.capAdmission);
+        }
+    }
+    catch (statusError) {
+        handle.destroyGate?.();
+        opState.phase = 'stopping';
+        const stopRes = await ctx.driver.terminate(handle.identity, 2000);
+        // 有界等待退出与关闭流，防止管道悬挂
+        await Promise.race([
+            (handle.onRootExit ?? handle.onExit).catch(() => { }),
+            new Promise((resolve) => setTimeout(resolve, 500)),
+        ]);
+        try {
+            handle.stdout.destroy?.();
+            handle.stderr.destroy?.();
+        }
+        catch { }
+        opState.phase = 'done';
+        if (opState.stopResolve) {
+            const resolveFn = opState.stopResolve;
+            opState.stopResolve = undefined;
+            resolveFn(stopRes);
+        }
+        const statusMessage = statusError?.message || String(statusError);
+        if (stopRes.stopped === 'confirmed_stopped') {
+            const failResult = {
+                kind: 'process',
+                status: 'failed',
+                exitCode: null,
+                signal: null,
+                stdout: '',
+                stderr: `Failed to register active status: ${statusMessage}`,
+                spawnFailure: statusMessage,
+                isTruncated: false,
+                identityVerification: 'not_original_process',
+                durationMs: Date.now() - opState.startTime,
+                completedAt: new Date().toISOString(),
+            };
+            finalizeOperation(ctx.domain, options.opId, failResult, { requiredResources: options.requiredResources });
+        }
+        else {
+            const indet = indeterminateResult({
+                reason: `Failed to register active status: ${statusMessage}, and process ${handle.identity.pid} could not be confirmed stopped: ${stopRes.errorDetails || 'residual processes still alive'}`,
+                startTime: opState.startTime,
+            });
+            finalizeOperation(ctx.domain, options.opId, indet, {
+                requiredResources: options.requiredResources,
+                releaseResourceLock: false,
+            });
+        }
+        throw statusError;
+    }
+}
+/** 进程启动前被取消：记录 cancelled（evidence: unobserved），不写虚假租约或意图事件。 */
+export function cancelBeforeSpawn(domain, options, opState) {
+    opState.phase = 'done';
+    const stopRes = { stopped: 'confirmed_stopped', scope: 'direct_child' };
+    opState.stopResolve?.(stopRes);
+    opState.stopResolve = undefined;
+    const cancelResult = {
+        kind: 'process',
+        status: 'cancelled',
+        exitCode: null,
+        signal: null,
+        stdout: '',
+        stderr: '',
+        capabilityId: options.capabilityId,
+        isTruncated: false,
+        terminationReason: 'user_cancelled',
+        evidence: 'unobserved',
+        identityVerification: 'not_original_process',
+        durationMs: Date.now() - opState.startTime,
+        completedAt: new Date().toISOString(),
+    };
+    const stored = domain.getStore().getOperation(options.opId);
+    if (!stored) {
+        // 此时操作是在 waiting_resources 阶段就被取消，尚未获取资源租约，亦未正常注册意图。
+        // 为保证 store 中有该操作记录以便写入 cancelled 结果，直接记录预意图取消操作，
+        // 绝不向 resource_leases 写入虚假租约，亦不产生虚假的 OPERATION_INTENT_REGISTERED 事件。
+        const op = {
+            id: options.opId,
+            runId: options.runId,
+            kind: 'process',
+            name: options.name,
+            inputFingerprint: options.inputFingerprint || computeInputFingerprint(options),
+            requiredResources: options.requiredResources || [],
+            status: 'done',
+        };
+        domain.getStore().recordPreIntentCancelledOperation(op, domain.domainId, cancelResult);
+        domain.internalReleaseResources(options.opId, options.requiredResources);
+        return cancelResult;
+    }
+    return finalizeOperation(domain, options.opId, cancelResult, { requiredResources: options.requiredResources });
+}
+//# sourceMappingURL=process-run.js.map

package/dist/supervisor/process-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-run.js","sourceRoot":"","sources":["../../src/supervisor/process-run.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAsBvD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAsB,EAAE,IAAoB;IAC3E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,iBAAiB;QACjB,MAAM,GAAG,CAAC,MAAM,CAAC,yBAAyB,CACxC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,iBAAiB,IAAI,EAAE,EAC/B,OAAO,CAAC,aAAa,IAAI,CAAC,EAC1B,OAAO,CAAC,cAAc,EACtB,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,CACvC,CAAC;QACF,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5E,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC7E,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,yBAAyB;QACzB,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC;QAC3B,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC;QAAC,OAAO,UAAe,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACjD,CAAC;QAED,oCAAoC;QACpC,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEzC,sBAAsB;QACtB,OAAO,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;YACtC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;YAChC,SAAS,CAAC;gBACR,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,cAAc;gBACrB,YAAY,EAAE,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gDAAgD;aACtG,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,SAAS,CAAC,MAAuB,EAAE,IAAoB,EAAE,UAAe;IAC/E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAClH,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,UAAU,GAA2B;QACzC,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;QACf,YAAY,EAAE,OAAO;QACrB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,iBAAiB,EAAE,IAAI,CAAC,qBAAqB;QAC7C,WAAW,EAAE,KAAK;QAClB,oBAAoB,EAAE,sBAAsB;QAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;QAC1C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAC/G,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,GAAsB,EAAE,IAAoB,EAAE,MAA4B;IACvG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrF,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9C,oBAAoB,CAClB,GAAG,CAAC,MAAM,EACV,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,EAChF,IAAI,CAAC,YAAY,CAClB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,WAAgB,EAAE,CAAC;QAC1B,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClE,oBAAoB;QACpB,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;YACpD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC;YACF,MAAM,CAAC,MAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAClC,MAAM,CAAC,MAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;QACvB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;YACtC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;YAChC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,aAAa,GAAG,WAAW,EAAE,OAAO,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;YAC5C,MAAM,UAAU,GAA2B;gBACzC,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,qCAAqC,aAAa,EAAE;gBAC5D,YAAY,EAAE,aAAa;gBAC3B,WAAW,EAAE,KAAK;gBAClB,oBAAoB,EAAE,sBAAsB;gBAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;gBAC1C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;YACF,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC5G,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,mBAAmB,CAAC;gBAChC,MAAM,EAAE,qCAAqC,aAAa,iBAAiB,MAAM,CAAC,QAAQ,CAAC,GAAG,oCAAoC,OAAO,CAAC,YAAY,IAAI,gCAAgC,EAAE;gBAC5L,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;gBACjD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,mBAAmB,EAAE,KAAK;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,CAAC;IACpB,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,OAA8B,EAC9B,OAA6B;IAE7B,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;IACvB,MAAM,OAAO,GAAsB,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC3F,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAEhC,MAAM,YAAY,GAA2B;QAC3C,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,gBAAgB;QACnC,QAAQ,EAAE,YAAY;QACtB,oBAAoB,EAAE,sBAAsB;QAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;QAC1C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qDAAqD;QACrD,kDAAkD;QAClD,qEAAqE;QACrE,MAAM,EAAE,GAAc;YACpB,EAAE,EAAE,OAAO,CAAC,IAAI;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,uBAAuB,CAAC,OAAO,CAAC;YAC9E,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,EAAE;YAClD,MAAM,EAAE,MAAM;SACf,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,CAAC,iCAAiC,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvF,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACzE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACjH,CAAC"}