botmux 3.2.0 → 3.2.1

package/dist/codex-rpc-engine.d.ts

@@ -0,0 +1,110 @@
+type LogFn = (msg: string) => void;
+export interface CodexRpcEngineOpts {
+    /** Absolute path to the codex-family CLI binary (codex / traex / …). */
+    cliBin: string;
+    /** Working directory / agent root for the session. */
+    cwd: string;
+    /** Child env (must carry CODEX_HOME + proxy vars + BOTMUX_SESSION_ID). */
+    env: NodeJS.ProcessEnv;
+    /** botmux session id — used to name the app-server orphan-cleanup marker so a
+     *  new incarnation of this session can reap a prior app-server (P0 teardown). */
+    sessionId?: string;
+    log?: LogFn;
+    /** Optional model + reasoning effort forwarded to thread config (P1). */
+    model?: string;
+    reasoningEffort?: string;
+    /** Override the per-request JSON-RPC timeout (default REQUEST_TIMEOUT_MS).
+     *  Mainly for tests that assert the wedged-app-server recovery path. */
+    requestTimeoutMs?: number;
+    /** Called once if the app-server dies unexpectedly (not via stop()). The
+     *  worker uses it to kill the now-orphaned `codex --remote` pane so the normal
+     *  exit→daemon-refork→resume path re-engages RPC on a fresh app-server (P1). */
+    onDead?: () => void;
+}
+export declare class CodexRpcEngine {
+    private readonly opts;
+    private child?;
+    private ws?;
+    private nextId;
+    private pending;
+    private port;
+    private threadId?;
+    private closed;
+    private deadNotified;
+    private lastStderr;
+    private readonly log;
+    constructor(opts: CodexRpcEngineOpts);
+    get wsUrl(): string;
+    get activeThreadId(): string | undefined;
+    get appServerPid(): number | undefined;
+    /** Spawn the app-server, connect, and complete the initialize handshake. */
+    start(): Promise<void>;
+    /** Create a fresh session thread. Its id (== codex rollout session id) is what
+     *  the TUI resumes and what botmux persists for future resume. */
+    startThread(): Promise<string>;
+    /** Resume the persisted thread after a botmux reconnect (P0 resume-survival),
+     *  so RPC mode stays engaged across daemon restarts instead of reverting to
+     *  the paste path. */
+    resumeThread(threadId: string): Promise<string>;
+    private threadParams;
+    /** Inject one user message as a turn. Resolves when the app-server acks the
+     *  turn start (fast); the turn itself streams to the attached TUI.
+     *  `clientUserMessageId` (a stable botmux turn id) is forwarded so codex can
+     *  CORRELATE the message — NOT relied on for dedupe (the 0.144.1 schema carries
+     *  it but promises no idempotency). Correctness comes from the caller never
+     *  auto-resending an accepted turn (P1-1).
+     *  opts.fatalOnTimeout=false makes a timeout reject only THIS request instead of
+     *  tearing the engine down — used for the fresh first turn, whose ambiguity is
+     *  then resolved against rollout persistence (see sendFirstTurn). */
+    sendTurn(content: string, clientUserMessageId?: string, opts?: {
+        timeoutMs?: number;
+        fatalOnTimeout?: boolean;
+    }): Promise<void>;
+    /** Deliver the FRESH first turn and resolve its outcome as one of THREE states,
+     *  prioritising exactly-once over never-lost (P1-1). An empty thread can't be
+     *  resumed by the TUI, so the first turn must persist the rollout before the
+     *  pane spawns — but a lost/late ack must NOT be blindly re-pasted (that would
+     *  double-execute, the failure users care about most):
+     *    - 'accepted'  — ack received, OR (ack lost) the rollout already contains
+     *                    THIS turn's user message → engaged, never resend.
+     *    - 'not-sent'  — the turn/start FRAME was never dispatched (ws not open /
+     *                    send threw) → the turn cannot have run → safe paste once.
+     *    - 'ambiguous' — the frame WAS dispatched but no ack AND no positive rollout
+     *                    evidence (timeout / transport / server / unknown error) →
+     *                    it may have executed → NEVER auto-paste; the caller notifies
+     *                    the user and lets the viewer resume (recovers if it landed).
+     *  Only "frame not dispatched" is treated as safe; every dispatched-then-failed
+     *  case is ambiguous, and a timeout is non-fatal so the engine survives to serve
+     *  the accepted/ambiguous cases. `rolloutProbe` is the ground-truth positive
+     *  check (matches this turn's user_message in the persisted rollout). */
+    sendFirstTurn(content: string, clientUserMessageId: string | undefined, rolloutProbe: (threadId: string) => Promise<boolean>): Promise<'accepted' | 'not-sent' | 'ambiguous'>;
+    stop(): void;
+    private markerPath;
+    /** Verify a pid is actually OUR app-server before signalling it — the marker
+     *  can outlive a SIGKILLed worker and its pid may be REUSED by an unrelated
+     *  process (daemon runs as root → mis-kill would be severe). Match the process
+     *  argv against `app-server` AND, when recorded, the exact `--listen <url>` a
+     *  reused pid could not carry (P1-2). */
+    private processIsOurAppServer;
+    /** Kill an app-server left behind by a prior incarnation of this session
+     *  (e.g. the worker was SIGKILLed so its exit hooks never ran). Identity-checked
+     *  so a reused pid is never mis-killed. */
+    private reapStaleAppServer;
+    private writeMarker;
+    /** Remove the marker ONLY if it still names THIS engine's app-server (pid +
+     *  wsUrl). Prevents an ABA race: a same-session engine B may have already
+     *  reaped + rewritten the marker with its own pid/url by the time this (old)
+     *  engine's child exits late — an unconditional delete would orphan B's live
+     *  app-server (no marker → next incarnation can't reap it). P1-2. */
+    private removeMarkerIfOwned;
+    private waitReady;
+    private connect;
+    private request;
+    private notify;
+    private respond;
+    private send;
+    private onMessage;
+    private failAll;
+}
+export {};
+//# sourceMappingURL=codex-rpc-engine.d.ts.map

package/dist/codex-rpc-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-rpc-engine.d.ts","sourceRoot":"","sources":["../src/codex-rpc-engine.ts"],"names":[],"mappings":"AAgCA,KAAK,KAAK,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;AAwBnC,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB;qFACiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;4EACwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;oFAEgF;IAChF,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAwBD,qBAAa,cAAc;IAYb,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,OAAO,CAAC,KAAK,CAAC,CAAe;IAC7B,OAAO,CAAC,EAAE,CAAC,CAAY;IACvB,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAsH;IACrI,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,UAAU,CAAM;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;gBAEC,IAAI,EAAE,kBAAkB;IAIrD,IAAI,KAAK,IAAI,MAAM,CAA0C;IAC7D,IAAI,cAAc,IAAI,MAAM,GAAG,SAAS,CAA0B;IAClE,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAA4B;IAElE,4EAA4E;IACtE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B5B;sEACkE;IAC5D,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAOpC;;0BAEsB;IAChB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQrD,OAAO,CAAC,YAAY;IAmBpB;;;;;;;;yEAQqE;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAarI;;;;;;;;;;;;;;;;6EAgByE;IACnE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IA6BnL,IAAI,IAAI,IAAI;IAoBZ,OAAO,CAAC,UAAU;IAKlB;;;;6CAIyC;IACzC,OAAO,CAAC,qBAAqB;IAY7B;;+CAE2C;IAC3C,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,WAAW;IAQnB;;;;yEAIqE;IACrE,OAAO,CAAC,mBAAmB;IAW3B,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,OAAO;IAqCf,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,OAAO;CAShB"}

package/dist/codex-rpc-engine.js

@@ -0,0 +1,496 @@
+// Hybrid Codex input engine.
+//
+// Runs one `codex app-server --listen ws://127.0.0.1:<port>` per session (the
+// shared engine) and speaks JSON-RPC to it. The session's tmux pane runs the
+// real `codex --remote ws://... resume <threadId>` TUI, so rendering / web
+// terminal / idle detection are unchanged. User input is delivered via
+// `turn/start` (an acked RPC) instead of a tmux paste — bypassing the terminal
+// entirely, which is where codex drops bracketed pastes during its startup /
+// settings-churn terminal re-init (see codex-0144 investigation).
+//
+// Coordination (verified — raw-WS repro + real `codex --remote` TUI): the
+// app-server BROADCASTS a thread's turn/item events to EVERY connection that has
+// the thread open (engine `thread/start`/`resume` + TUI `resume`), and the real
+// TUI renders events for a turn another connection issued. So the engine owns the
+// thread (`thread/start`, then the first turn — an empty thread has no rollout so
+// the TUI can't resume it, hence the first turn persists the rollout BEFORE the
+// TUI attaches), the TUI `resume`s it, and every engine turn thereafter renders
+// live in the TUI via that broadcast. On a botmux resume (daemon restart /
+// re-fork), the engine `thread/resume`s the persisted thread id AND the pane is
+// respawned as a fresh `--remote resume` against the CURRENT app-server (a new
+// port each incarnation) — reattaching the prior pane would leave it pointed at
+// the now-dead prior app-server (that lifecycle bug, not any non-broadcast, is
+// what froze the Web terminal). See codex-rpc-lifecycle + worker engageCodexRpc.
+import { spawn, execFileSync } from 'node:child_process';
+import { createServer } from 'node:net';
+import { get as httpGet } from 'node:http';
+import { existsSync, readFileSync, writeFileSync, rmSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { WebSocket } from 'ws';
+async function findFreePort() {
+    return new Promise((resolve, reject) => {
+        const srv = createServer();
+        srv.once('error', reject);
+        srv.listen(0, '127.0.0.1', () => {
+            const addr = srv.address();
+            const port = addr && typeof addr === 'object' ? addr.port : 0;
+            srv.close(() => (port ? resolve(port) : reject(new Error('no free port'))));
+        });
+    });
+}
+function isAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Kill the whole process group (node wrapper + its native app-server child).
+ *  The app-server is spawned `detached`, so its pid is the group leader. */
+function killGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        try {
+            process.kill(pid, signal);
+        }
+        catch { /* gone */ }
+    }
+}
+/** Server→client requests are auto-answered so codex never blocks on a human;
+ *  botmux already runs codex with approvals bypassed. Mirrors codex-app-runner. */
+function autoApproval(method) {
+    if (method === 'item/permissions/requestApproval')
+        return { permissions: {}, scope: 'turn' };
+    if (method === 'item/tool/requestUserInput')
+        return { answers: {} };
+    if (method === 'mcpServer/elicitation/request')
+        return { action: 'cancel', content: null, _meta: null };
+    if (method === 'item/tool/call')
+        return { contentItems: [], success: false };
+    if (method === 'execCommandApproval' || method === 'applyPatchApproval')
+        return { decision: 'approved_for_session' };
+    // commandExecution / fileChange requestApproval + anything else: accept.
+    return { decision: 'acceptForSession' };
+}
+const MARKER_DIR = join(homedir(), '.botmux', 'data', 'codex-rpc-app-servers');
+/** Per JSON-RPC request timeout. Without it, a connected-but-wedged app-server
+ *  (never answers turn/start / initialize / thread/*) would leave the caller
+ *  awaiting forever — flushPending would stick in isFlushing and silently drop
+ *  every later message (P1-5). A rejected request unblocks the caller, which
+ *  fails-closed (engage) or surfaces a resync (sendTurn). Generous because the
+ *  FIRST turn on a cold app-server pays MCP/model-list startup latency. */
+const REQUEST_TIMEOUT_MS = 60_000;
+export class CodexRpcEngine {
+    opts;
+    child;
+    ws;
+    nextId = 1;
+    pending = new Map();
+    port = 0;
+    threadId;
+    closed = false;
+    deadNotified = false;
+    lastStderr = '';
+    log;
+    constructor(opts) {
+        this.opts = opts;
+        this.log = opts.log ?? (() => { });
+    }
+    get wsUrl() { return `ws://127.0.0.1:${this.port}`; }
+    get activeThreadId() { return this.threadId; }
+    get appServerPid() { return this.child?.pid; }
+    /** Spawn the app-server, connect, and complete the initialize handshake. */
+    async start() {
+        this.reapStaleAppServer();
+        this.port = await findFreePort();
+        this.child = spawn(this.opts.cliBin, ['app-server', '--listen', `ws://127.0.0.1:${this.port}`], {
+            cwd: this.opts.cwd,
+            env: this.opts.env,
+            stdio: ['ignore', 'ignore', 'pipe'],
+            // Own process group so stop()/reap can kill the node wrapper AND its
+            // native app-server child in one shot (killGroup → kill(-pid)).
+            detached: true,
+        });
+        this.child.unref(); // don't let the app-server keep the worker's loop alive
+        this.child.stderr?.on('data', (c) => {
+            this.lastStderr = (this.lastStderr + c.toString('utf8')).slice(-4000);
+        });
+        this.child.once('error', err => this.failAll(new Error(`codex app-server spawn failed: ${err.message}`)));
+        this.child.once('exit', (code, signal) => {
+            this.removeMarkerIfOwned(); // child confirmed dead → drop OUR marker only (ABA-safe)
+            if (!this.closed)
+                this.failAll(new Error(`codex app-server exited (code=${code}, signal=${signal})${this.lastStderr ? `\n${this.lastStderr}` : ''}`));
+        });
+        this.writeMarker();
+        await this.waitReady(15_000);
+        await this.connect(8_000);
+        await this.request('initialize', {
+            clientInfo: { name: 'botmux', version: '0.0.0', title: 'botmux' },
+            capabilities: { experimentalApi: true },
+        });
+        this.notify('initialized');
+    }
+    /** Create a fresh session thread. Its id (== codex rollout session id) is what
+     *  the TUI resumes and what botmux persists for future resume. */
+    async startThread() {
+        const r = await this.request('thread/start', this.threadParams());
+        this.threadId = String(r?.thread?.id ?? '');
+        if (!this.threadId)
+            throw new Error('thread/start returned no thread id');
+        return this.threadId;
+    }
+    /** Resume the persisted thread after a botmux reconnect (P0 resume-survival),
+     *  so RPC mode stays engaged across daemon restarts instead of reverting to
+     *  the paste path. */
+    async resumeThread(threadId) {
+        const params = { ...this.threadParams(), threadId, excludeTurns: true };
+        delete params.serviceName; // resume keeps the original thread's identity
+        const r = await this.request('thread/resume', params);
+        this.threadId = String(r?.thread?.id ?? threadId);
+        return this.threadId;
+    }
+    threadParams() {
+        const config = {
+            // Forward the full env (incl. BOTMUX_SESSION_ID / BOTMUX_LARK_APP_ID) to
+            // shell subprocesses so `botmux send` from within codex finds its bot.
+            shell_environment_policy: { inherit: 'all', ignore_default_excludes: true },
+        };
+        if (this.opts.model)
+            config.model = this.opts.model;
+        if (this.opts.reasoningEffort)
+            config.model_reasoning_effort = this.opts.reasoningEffort;
+        return {
+            cwd: this.opts.cwd,
+            approvalPolicy: 'never',
+            sandbox: 'danger-full-access',
+            serviceName: 'botmux',
+            ephemeral: false,
+            persistExtendedHistory: true,
+            config,
+        };
+    }
+    /** Inject one user message as a turn. Resolves when the app-server acks the
+     *  turn start (fast); the turn itself streams to the attached TUI.
+     *  `clientUserMessageId` (a stable botmux turn id) is forwarded so codex can
+     *  CORRELATE the message — NOT relied on for dedupe (the 0.144.1 schema carries
+     *  it but promises no idempotency). Correctness comes from the caller never
+     *  auto-resending an accepted turn (P1-1).
+     *  opts.fatalOnTimeout=false makes a timeout reject only THIS request instead of
+     *  tearing the engine down — used for the fresh first turn, whose ambiguity is
+     *  then resolved against rollout persistence (see sendFirstTurn). */
+    async sendTurn(content, clientUserMessageId, opts) {
+        if (!this.threadId)
+            throw new Error('sendTurn before startThread/resumeThread');
+        const params = {
+            threadId: this.threadId,
+            input: [{ type: 'text', text: content, text_elements: [] }],
+            cwd: this.opts.cwd,
+            approvalPolicy: 'never',
+            sandboxPolicy: { type: 'dangerFullAccess' },
+        };
+        if (clientUserMessageId)
+            params.clientUserMessageId = clientUserMessageId;
+        await this.request('turn/start', params, opts);
+    }
+    /** Deliver the FRESH first turn and resolve its outcome as one of THREE states,
+     *  prioritising exactly-once over never-lost (P1-1). An empty thread can't be
+     *  resumed by the TUI, so the first turn must persist the rollout before the
+     *  pane spawns — but a lost/late ack must NOT be blindly re-pasted (that would
+     *  double-execute, the failure users care about most):
+     *    - 'accepted'  — ack received, OR (ack lost) the rollout already contains
+     *                    THIS turn's user message → engaged, never resend.
+     *    - 'not-sent'  — the turn/start FRAME was never dispatched (ws not open /
+     *                    send threw) → the turn cannot have run → safe paste once.
+     *    - 'ambiguous' — the frame WAS dispatched but no ack AND no positive rollout
+     *                    evidence (timeout / transport / server / unknown error) →
+     *                    it may have executed → NEVER auto-paste; the caller notifies
+     *                    the user and lets the viewer resume (recovers if it landed).
+     *  Only "frame not dispatched" is treated as safe; every dispatched-then-failed
+     *  case is ambiguous, and a timeout is non-fatal so the engine survives to serve
+     *  the accepted/ambiguous cases. `rolloutProbe` is the ground-truth positive
+     *  check (matches this turn's user_message in the persisted rollout). */
+    async sendFirstTurn(content, clientUserMessageId, rolloutProbe) {
+        const threadId = this.threadId;
+        if (!threadId)
+            throw new Error('sendFirstTurn before startThread');
+        let dispatched = false;
+        const params = {
+            threadId,
+            input: [{ type: 'text', text: content, text_elements: [] }],
+            cwd: this.opts.cwd,
+            approvalPolicy: 'never',
+            sandboxPolicy: { type: 'dangerFullAccess' },
+        };
+        if (clientUserMessageId)
+            params.clientUserMessageId = clientUserMessageId;
+        try {
+            await this.request('turn/start', params, { timeoutMs: this.opts.requestTimeoutMs ?? 15_000, fatalOnTimeout: false }, () => { dispatched = true; });
+            return 'accepted'; // ack received
+        }
+        catch (err) {
+            if (!dispatched) {
+                this.log(`[codex-rpc] first turn/start not dispatched (${err.message}); safe to paste`);
+                return 'not-sent';
+            }
+            // Dispatched but no ack — the ONLY safe resolution is positive rollout
+            // evidence; absence is NOT proof it didn't run (it may persist >window or be
+            // queued server-side), so no-evidence stays ambiguous.
+            this.log(`[codex-rpc] first turn ack lost after dispatch (${err.message}); checking rollout for positive evidence`);
+            const landed = await rolloutProbe(threadId);
+            return landed ? 'accepted' : 'ambiguous';
+        }
+    }
+    stop() {
+        this.closed = true;
+        try {
+            this.ws?.close();
+        }
+        catch { /* already gone */ }
+        const pid = this.child?.pid;
+        if (pid) {
+            // Bounded SIGTERM → SIGKILL: don't leave a stubborn child as an untracked
+            // orphan. The marker is removed by the child 'exit' handler (confirmed
+            // dead), NOT here — if the child ignores SIGTERM and this worker then dies,
+            // the surviving marker lets the next incarnation reap it (P1-2).
+            try {
+                killGroup(pid, 'SIGTERM');
+            }
+            catch { /* already gone */ }
+            const t = setTimeout(() => { if (isAlive(pid)) {
+                try {
+                    killGroup(pid, 'SIGKILL');
+                }
+                catch { /* */ }
+            } }, 2000);
+            t.unref?.();
+        }
+        else {
+            this.removeMarkerIfOwned();
+        }
+        this.failAll(new Error('engine stopped'));
+    }
+    // ---- app-server orphan marker (P0 teardown) ------------------------------
+    markerPath() {
+        if (!this.opts.sessionId)
+            return undefined;
+        return join(MARKER_DIR, `${this.opts.sessionId}.pid`);
+    }
+    /** Verify a pid is actually OUR app-server before signalling it — the marker
+     *  can outlive a SIGKILLed worker and its pid may be REUSED by an unrelated
+     *  process (daemon runs as root → mis-kill would be severe). Match the process
+     *  argv against `app-server` AND, when recorded, the exact `--listen <url>` a
+     *  reused pid could not carry (P1-2). */
+    processIsOurAppServer(pid, markedUrl) {
+        let argv = '';
+        try {
+            argv = readFileSync(`/proc/${pid}/cmdline`, 'utf8').replace(/\0/g, ' ');
+        }
+        catch {
+            try {
+                argv = execFileSync('ps', ['-o', 'args=', '-p', String(pid)], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
+            }
+            catch {
+                return false;
+            }
+        }
+        if (!/\bapp-server\b/.test(argv))
+            return false;
+        if (markedUrl && !argv.includes(markedUrl))
+            return false;
+        return true;
+    }
+    /** Kill an app-server left behind by a prior incarnation of this session
+     *  (e.g. the worker was SIGKILLed so its exit hooks never ran). Identity-checked
+     *  so a reused pid is never mis-killed. */
+    reapStaleAppServer() {
+        const mp = this.markerPath();
+        if (!mp || !existsSync(mp))
+            return;
+        try {
+            const [pidStr, markedUrl] = readFileSync(mp, 'utf8').trim().split('\n');
+            const pid = parseInt(pidStr, 10);
+            if (Number.isInteger(pid) && pid > 0 && isAlive(pid) && this.processIsOurAppServer(pid, markedUrl)) {
+                killGroup(pid, 'SIGKILL'); // orphan from a crashed worker — no grace needed
+                this.log(`[codex-rpc] reaped stale app-server pid ${pid}`);
+            }
+            rmSync(mp, { force: true });
+        }
+        catch { /* best effort */ }
+    }
+    writeMarker() {
+        const mp = this.markerPath();
+        if (!mp || !this.child?.pid)
+            return;
+        // pid + the exact --listen url so a reused pid fails the identity check.
+        try {
+            mkdirSync(MARKER_DIR, { recursive: true });
+            writeFileSync(mp, `${this.child.pid}\n${this.wsUrl}`, { mode: 0o600 });
+        }
+        catch { /* best effort */ }
+    }
+    /** Remove the marker ONLY if it still names THIS engine's app-server (pid +
+     *  wsUrl). Prevents an ABA race: a same-session engine B may have already
+     *  reaped + rewritten the marker with its own pid/url by the time this (old)
+     *  engine's child exits late — an unconditional delete would orphan B's live
+     *  app-server (no marker → next incarnation can't reap it). P1-2. */
+    removeMarkerIfOwned() {
+        const mp = this.markerPath();
+        if (!mp)
+            return;
+        try {
+            const [pidStr, url] = readFileSync(mp, 'utf8').trim().split('\n');
+            if (parseInt(pidStr, 10) === this.child?.pid && url === this.wsUrl)
+                rmSync(mp, { force: true });
+        }
+        catch { /* no marker / unreadable → leave it (next reap handles it) */ }
+    }
+    // ---- internals -----------------------------------------------------------
+    waitReady(timeoutMs) {
+        const deadline = Date.now() + timeoutMs;
+        return new Promise((resolve, reject) => {
+            const attempt = () => {
+                if (this.closed)
+                    return reject(new Error('engine closed during startup'));
+                const req = httpGet({ host: '127.0.0.1', port: this.port, path: '/readyz', timeout: 1500 }, res => {
+                    res.resume();
+                    if (res.statusCode && res.statusCode < 500)
+                        return resolve();
+                    retry();
+                });
+                req.once('error', retry);
+                req.once('timeout', () => { req.destroy(); retry(); });
+            };
+            const retry = () => {
+                if (this.closed)
+                    return reject(new Error('engine closed during startup'));
+                if (Date.now() > deadline)
+                    return reject(new Error(`app-server not ready in ${timeoutMs}ms${this.lastStderr ? `\n${this.lastStderr}` : ''}`));
+                setTimeout(attempt, 250);
+            };
+            attempt();
+        });
+    }
+    connect(timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const ws = new WebSocket(this.wsUrl);
+            const timer = setTimeout(() => { try {
+                ws.terminate();
+            }
+            catch { /* */ } reject(new Error('ws connect timeout')); }, timeoutMs);
+            ws.on('open', () => { clearTimeout(timer); this.ws = ws; resolve(); });
+            ws.on('message', (data) => this.onMessage(data.toString('utf8')));
+            ws.on('error', (err) => { clearTimeout(timer); if (!this.ws)
+                reject(err);
+            else
+                this.failAll(err); });
+            ws.on('close', () => { if (!this.closed)
+                this.failAll(new Error('ws closed')); });
+        });
+    }
+    request(method, params, opts, onDispatch) {
+        const timeoutMs = opts?.timeoutMs ?? this.opts.requestTimeoutMs ?? REQUEST_TIMEOUT_MS;
+        const fatalOnTimeout = opts?.fatalOnTimeout !== false; // default fatal
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                if (!this.pending.has(id))
+                    return;
+                const err = new Error(`codex app-server request '${method}' timed out after ${timeoutMs}ms`);
+                if (fatalOnTimeout) {
+                    // A connected-but-wedged app-server is FATAL for live turns: rejecting
+                    // just this request would leave the engine + pane alive and every later
+                    // turn/start would time out again. Route through failAll so ALL inflight
+                    // requests reject AND onDead fires — the worker then replaces the pane
+                    // and re-engages on a fresh app-server (P1-5).
+                    this.failAll(err);
+                }
+                else {
+                    // Non-fatal (the fresh first turn): reject only THIS request and keep
+                    // the engine alive, so its ambiguity can be resolved against rollout
+                    // persistence and the viewer can still resume if the turn landed (P1-1).
+                    this.pending.delete(id);
+                    reject(err);
+                }
+            }, timeoutMs);
+            timer.unref?.();
+            this.pending.set(id, { resolve, reject, timer });
+            // onDispatch fires ONLY after send() succeeds (ws was OPEN + no throw) — the
+            // frame is then on the socket, so any later failure is "dispatched" and must
+            // be treated as ambiguous, never not-sent (Codex P1-1 boundary).
+            try {
+                this.send({ jsonrpc: '2.0', id, method, params });
+                onDispatch?.();
+            }
+            catch (e) {
+                this.pending.delete(id);
+                clearTimeout(timer);
+                reject(e);
+            }
+        });
+    }
+    notify(method, params) {
+        this.send(params !== undefined ? { jsonrpc: '2.0', method, params } : { jsonrpc: '2.0', method });
+    }
+    respond(id, result) {
+        try {
+            this.send({ jsonrpc: '2.0', id, result });
+        }
+        catch { /* connection gone */ }
+    }
+    send(msg) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN)
+            throw new Error('app-server ws not open');
+        this.ws.send(JSON.stringify(msg));
+    }
+    onMessage(line) {
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            return;
+        }
+        // Response to one of our requests.
+        if (typeof msg.id === 'number' && (msg.result !== undefined || msg.error !== undefined)) {
+            const p = this.pending.get(msg.id);
+            if (!p)
+                return;
+            this.pending.delete(msg.id);
+            clearTimeout(p.timer);
+            if (msg.error)
+                p.reject(new Error(typeof msg.error === 'object' ? JSON.stringify(msg.error) : String(msg.error)));
+            else
+                p.resolve(msg.result);
+            return;
+        }
+        // Server→client request (approvals / elicitations): auto-answer.
+        if (typeof msg.id === 'number' && typeof msg.method === 'string') {
+            this.respond(msg.id, autoApproval(msg.method));
+            return;
+        }
+        // Notifications (turn/item/mcp events) are ignored here — the attached TUI
+        // renders them; botmux reads the pane as usual.
+    }
+    failAll(err) {
+        if (this.pending.size)
+            this.log(`[codex-rpc] ${err.message}`);
+        for (const p of this.pending.values()) {
+            clearTimeout(p.timer);
+            p.reject(err);
+        }
+        this.pending.clear();
+        if (!this.closed && !this.deadNotified) {
+            this.deadNotified = true;
+            try {
+                this.opts.onDead?.();
+            }
+            catch { /* best effort */ }
+        }
+    }
+}
+//# sourceMappingURL=codex-rpc-engine.js.map

package/dist/codex-rpc-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-rpc-engine.js","sourceRoot":"","sources":["../src/codex-rpc-engine.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AACvE,+EAA+E;AAC/E,6EAA6E;AAC7E,kEAAkE;AAClE,EAAE;AACF,0EAA0E;AAC1E,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAK/B,KAAK,UAAU,YAAY;IACzB,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AAED;4EAC4E;AAC5E,SAAS,SAAS,CAAC,GAAW,EAAE,MAAsB;IACpD,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;AACvG,CAAC;AAyBD;mFACmF;AACnF,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,MAAM,KAAK,kCAAkC;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC7F,IAAI,MAAM,KAAK,4BAA4B;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpE,IAAI,MAAM,KAAK,+BAA+B;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxG,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7E,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,oBAAoB;QAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACrH,yEAAyE;IACzE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE/E;;;;;2EAK2E;AAC3E,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,cAAc;IAYI;IAXrB,KAAK,CAAgB;IACrB,EAAE,CAAa;IACf,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,IAAI,GAAG,EAA2G,CAAC;IAC7H,IAAI,GAAG,CAAC,CAAC;IACT,QAAQ,CAAU;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,YAAY,GAAG,KAAK,CAAC;IACrB,UAAU,GAAG,EAAE,CAAC;IACP,GAAG,CAAQ;IAE5B,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,KAAa,OAAO,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,IAAI,cAAc,KAAyB,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,IAAI,YAAY,KAAyB,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAElE,4EAA4E;IAC5E,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE;YAC9F,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,qEAAqE;YACrE,gEAAgE;YAChE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,wDAAwD;QAC5E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC1C,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,yDAAyD;YACrF,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,YAAY,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;YAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE;YACjE,YAAY,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IAED;sEACkE;IAClE,KAAK,CAAC,WAAW;QACf,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;0BAEsB;IACtB,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,MAAM,GAAS,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,8CAA8C;QACzE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,QAAQ,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,YAAY;QAClB,MAAM,MAAM,GAAS;YACnB,yEAAyE;YACzE,uEAAuE;YACvE,wBAAwB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE;SAC5E,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACzF,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,cAAc,EAAE,OAAO;YACvB,OAAO,EAAE,oBAAoB;YAC7B,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,KAAK;YAChB,sBAAsB,EAAE,IAAI;YAC5B,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;;;;;;;yEAQqE;IACrE,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,mBAA4B,EAAE,IAAuD;QACnH,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChF,MAAM,MAAM,GAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;YAC3D,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;SAC5C,CAAC;QACF,IAAI,mBAAmB;YAAE,MAAM,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC1E,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;;;;;6EAgByE;IACzE,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,mBAAuC,EAAE,YAAoD;QAChI,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACnE,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,MAAM,GAAS;YACnB,QAAQ;YACR,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;YAC3D,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;SAC5C,CAAC;QACF,IAAI,mBAAmB;YAAE,MAAM,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACnJ,OAAO,UAAU,CAAC,CAAC,eAAe;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,gDAAiD,GAAa,CAAC,OAAO,kBAAkB,CAAC,CAAC;gBACnG,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,uEAAuE;YACvE,6EAA6E;YAC7E,uDAAuD;YACvD,IAAI,CAAC,GAAG,CAAC,mDAAoD,GAAa,CAAC,OAAO,2CAA2C,CAAC,CAAC;YAC/H,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;QAC5B,IAAI,GAAG,EAAE,CAAC;YACR,0EAA0E;YAC1E,uEAAuE;YACvE,4EAA4E;YAC5E,iEAAiE;YACjE,IAAI,CAAC;gBAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/G,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,6EAA6E;IAErE,UAAU;QAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;;;6CAIyC;IACjC,qBAAqB,CAAC,GAAW,EAAE,SAAkB;QAC3D,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAChF,MAAM,CAAC;YACL,IAAI,CAAC;gBAAC,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACjI,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;+CAE2C;IACnC,kBAAkB;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;gBACnG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,iDAAiD;gBAC5E,IAAI,CAAC,GAAG,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAEO,WAAW;QACjB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG;YAAE,OAAO;QACpC,yEAAyE;QACzE,IAAI,CAAC;YAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3H,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;IAED;;;;yEAIqE;IAC7D,mBAAmB;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,GAAG,KAAK,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC,CAAC,8DAA8D,CAAC,CAAC;IAC5E,CAAC;IAED,6EAA6E;IAErE,SAAS,CAAC,SAAiB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE;oBAChG,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG;wBAAE,OAAO,OAAO,EAAE,CAAC;oBAC7D,KAAK,EAAE,CAAC;gBACV,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAS,EAAE;gBACvB,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBAC1E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;oBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,SAAS,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC9I,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAChI,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1E,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CACb,MAAc,EACd,MAAe,EACf,IAAuD,EACvD,UAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC;QACtF,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,KAAK,KAAK,CAAC,CAAC,gBAAgB;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,OAAO;gBAClC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,6BAA6B,MAAM,qBAAqB,SAAS,IAAI,CAAC,CAAC;gBAC7F,IAAI,cAAc,EAAE,CAAC;oBACnB,uEAAuE;oBACvE,wEAAwE;oBACxE,yEAAyE;oBACzE,uEAAuE;oBACvE,+CAA+C;oBAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,sEAAsE;oBACtE,qEAAqE;oBACrE,yEAAyE;oBACzE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,6EAA6E;YAC7E,6EAA6E;YAC7E,iEAAiE;YACjE,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,UAAU,EAAE,EAAE,CAAC;YAAC,CAAC;YAC1E,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,CAAC,CAAU,CAAC,CAAC;YAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAAc,EAAE,MAAgB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACpG,CAAC;IAEO,OAAO,CAAC,EAAU,EAAE,MAAe;QACzC,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACpF,CAAC;IAEO,IAAI,CAAC,GAAS;QACpB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACjG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,IAAI,GAAS,CAAC;QACd,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACjD,mCAAmC;QACnC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YACxF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,GAAG,CAAC,KAAK;gBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;gBAC7G,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,iEAAiE;QACjE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,2EAA2E;QAC3E,gDAAgD;IAClD,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}