harnery 0.36.0 → 0.37.0

package/dist/core/resources/service-status.js

@@ -0,0 +1,48 @@
+import { hostname } from "node:os";
+import { checkPidToken } from "../agents/state/proc-start.js";
+import { RESOURCE_SERVICE_STATUS_SCHEMA_VERSION, } from "./contract.js";
+import { readResourceServiceRecord, resourcePaths } from "./storage.js";
+const STALE_HEARTBEAT_MS = 15_000;
+export function readResourceServiceStatus(coordRoot, nowMs = Date.now()) {
+    const paths = resourcePaths(coordRoot);
+    const record = readResourceServiceRecord(coordRoot);
+    if (!validRecord(record)) {
+        return {
+            running: false,
+            stale: false,
+            status_path: paths.service,
+            snapshot_path: paths.snapshot,
+        };
+    }
+    const heartbeatAt = Date.parse(record.heartbeat_at);
+    const stale = !Number.isFinite(heartbeatAt) || nowMs - heartbeatAt > STALE_HEARTBEAT_MS;
+    const local = record.host === hostname();
+    const running = local &&
+        !stale &&
+        (record.state === "starting" || record.state === "running" || record.state === "stopping") &&
+        pidStillMatches(record.pid, record.start_token);
+    return {
+        running,
+        stale,
+        record,
+        status_path: paths.service,
+        snapshot_path: paths.snapshot,
+    };
+}
+function validRecord(value) {
+    return (value?.schema_version === RESOURCE_SERVICE_STATUS_SCHEMA_VERSION &&
+        Number.isInteger(value.pid) &&
+        value.pid > 0 &&
+        typeof value.host === "string" &&
+        typeof value.heartbeat_at === "string");
+}
+function pidStillMatches(pid, startToken) {
+    try {
+        process.kill(pid, 0);
+    }
+    catch (error) {
+        if (error.code !== "EPERM")
+            return false;
+    }
+    return checkPidToken(pid, startToken) !== "mismatch";
+}

package/dist/core/resources/service.d.ts

@@ -0,0 +1,26 @@
+import { type ResourceServiceStatus, type ResourceServiceStatusRecord } from "./contract.js";
+import { sampleResources } from "./sampler.js";
+export declare const RESOURCE_SERVICE_DEFAULT_INTERVAL_MS = 2000;
+export interface RunResourceServiceInput {
+    coordRoot: string;
+    intervalMs?: number;
+    maxSamples?: number;
+    now?: () => Date;
+    sample?: typeof sampleResources;
+    wait?: (milliseconds: number) => Promise<void>;
+}
+export type EnsureResourceServiceResult = {
+    state: "running" | "started";
+    status: ResourceServiceStatus;
+} | {
+    state: "unsupported" | "unavailable";
+    status: ResourceServiceStatus;
+    error: string;
+};
+export declare function spawnResourceService(coordRootRaw: string, options?: {
+    intervalMs?: number;
+}): Promise<ResourceServiceStatus>;
+export declare function ensureResourceServiceRunning(coordRoot: string): Promise<EnsureResourceServiceResult>;
+export declare function requestResourceServiceStop(coordRootRaw: string): ResourceServiceStatus;
+export declare function runResourceService(input: RunResourceServiceInput): Promise<ResourceServiceStatusRecord>;
+//# sourceMappingURL=service.d.ts.map

package/dist/core/resources/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/resources/service.ts"],"names":[],"mappings":"AAgBA,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAI/C,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAY1D,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,eAAe,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GAC/D;IAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAwChC;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,2BAA2B,CAAC,CAoBtC;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,qBAAqB,CAiBtF;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,2BAA2B,CAAC,CAwFtC"}

package/dist/core/resources/service.js

@@ -0,0 +1,292 @@
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, rmSync, unlinkSync, writeFileSync, } from "node:fs";
+import { hostname, platform } from "node:os";
+import { resolve } from "node:path";
+import { checkPidToken, processStartToken } from "../agents/state/proc-start.js";
+import { closeProcessLoggers, legacyLogFields, processLogger } from "../storage/logger.js";
+import { RESOURCE_SERVICE_STATUS_SCHEMA_VERSION, } from "./contract.js";
+import { sampleResources } from "./sampler.js";
+import { readResourceServiceStatus } from "./service-status.js";
+import { resourcePaths, writePrivateJsonAtomic } from "./storage.js";
+export const RESOURCE_SERVICE_DEFAULT_INTERVAL_MS = 2_000;
+const RESOURCE_SERVICE_MIN_INTERVAL_MS = 500;
+const RESOURCE_SERVICE_MAX_INTERVAL_MS = 60_000;
+export async function spawnResourceService(coordRootRaw, options = {}) {
+    const coordRoot = resolve(coordRootRaw);
+    const current = readResourceServiceStatus(coordRoot);
+    if (current.running) {
+        throw new Error(`resource observer is already running under pid ${current.record?.pid}`);
+    }
+    const intervalMs = normalizeInterval(options.intervalMs);
+    const paths = resourcePaths(coordRoot);
+    mkdirSync(paths.root, { recursive: true, mode: 0o700 });
+    rmSync(paths.stop, { force: true });
+    const harnBin = new URL("../../../bin/harn", import.meta.url).pathname;
+    if (!existsSync(harnBin))
+        throw new Error(`cannot find harn executable at ${harnBin}`);
+    let spawnError;
+    const child = spawn(harnBin, ["resources", "service", "daemon", "--root", coordRoot, "--interval-ms", String(intervalMs)], {
+        cwd: coordRoot,
+        detached: true,
+        stdio: ["ignore", "ignore", "ignore"],
+        env: {
+            ...process.env,
+            HARNERY_COORD_ROOT_OVERRIDE: coordRoot,
+            HARNERY_OUTPUT_SESSION_TEE: "0",
+        },
+    });
+    child.once("error", (error) => {
+        spawnError = error;
+    });
+    child.unref();
+    const deadline = Date.now() + 5_000;
+    while (Date.now() < deadline) {
+        await delay(50);
+        if (spawnError)
+            throw spawnError;
+        const status = readResourceServiceStatus(coordRoot);
+        if (status.running && status.record?.pid === child.pid)
+            return status;
+        if (child.exitCode !== null)
+            break;
+    }
+    throw new Error(`resource observer failed to start; inspect ${paths.service}`);
+}
+export async function ensureResourceServiceRunning(coordRoot) {
+    const status = readResourceServiceStatus(coordRoot);
+    if (status.running)
+        return { state: "running", status };
+    if (platform() !== "linux") {
+        return {
+            state: "unsupported",
+            status,
+            error: `resource observer does not yet support ${platform()}`,
+        };
+    }
+    try {
+        const started = await spawnResourceService(coordRoot);
+        return { state: "started", status: started };
+    }
+    catch (error) {
+        return {
+            state: "unavailable",
+            status: readResourceServiceStatus(coordRoot),
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+export function requestResourceServiceStop(coordRootRaw) {
+    const coordRoot = resolve(coordRootRaw);
+    const paths = resourcePaths(coordRoot);
+    const status = readResourceServiceStatus(coordRoot);
+    mkdirSync(paths.root, { recursive: true, mode: 0o700 });
+    writePrivateJsonAtomic(paths.stop, {
+        requested_at: new Date().toISOString(),
+        requested_by_pid: process.pid,
+    });
+    if (status.running && status.record?.host === hostname()) {
+        try {
+            process.kill(status.record.pid, "SIGTERM");
+        }
+        catch {
+            // The durable stop file handles a racing exit.
+        }
+    }
+    return readResourceServiceStatus(coordRoot);
+}
+export async function runResourceService(input) {
+    const coordRoot = resolve(input.coordRoot);
+    const paths = resourcePaths(coordRoot);
+    const intervalMs = normalizeInterval(input.intervalMs);
+    const now = input.now ?? (() => new Date());
+    const sample = input.sample ?? sampleResources;
+    const wait = input.wait ?? delay;
+    const lease = acquireLease(coordRoot, now());
+    rmSync(paths.stop, { force: true });
+    const startedAt = now().toISOString();
+    const daemonStartToken = processStartToken(process.pid);
+    const status = {
+        schema_version: RESOURCE_SERVICE_STATUS_SCHEMA_VERSION,
+        pid: process.pid,
+        ...(daemonStartToken ? { start_token: daemonStartToken } : {}),
+        host: hostname(),
+        nonce: lease.nonce,
+        state: "starting",
+        started_at: startedAt,
+        heartbeat_at: startedAt,
+        interval_ms: intervalMs,
+        sample_count: 0,
+    };
+    let stopping = false;
+    let previous;
+    const writeStatus = () => {
+        status.heartbeat_at = now().toISOString();
+        writePrivateJsonAtomic(paths.service, status);
+    };
+    const requestStop = () => {
+        stopping = true;
+        status.state = "stopping";
+        writeStatus();
+    };
+    process.on("SIGINT", requestStop);
+    process.on("SIGTERM", requestStop);
+    status.state = "running";
+    writeStatus();
+    log(coordRoot, "resource_observer.started", { pid: process.pid, interval_ms: intervalMs });
+    try {
+        while (!stopping && !existsSync(paths.stop)) {
+            const cycleStarted = Date.now();
+            try {
+                const result = sample(coordRoot, previous);
+                previous = result.state;
+                writePrivateJsonAtomic(paths.snapshot, result.snapshot);
+                status.sample_count += 1;
+                status.last_sample_at = result.snapshot.sampled_at;
+                status.last_error_code = undefined;
+                log(coordRoot, "resource_observer.sample", {
+                    sample_count: status.sample_count,
+                    cpu_percent: result.snapshot.machine.cpu_percent ?? -1,
+                    memory_percent: result.snapshot.machine.memory_percent ?? -1,
+                    visible_processes: result.snapshot.visible_process_count,
+                    unattributed_processes: result.snapshot.unattributed_process_count,
+                    duration_ms: result.snapshot.sample_duration_ms,
+                    collector_cpu_ms: result.snapshot.collector_cpu_ms,
+                });
+            }
+            catch (error) {
+                status.last_error_code = resourceErrorCode(error);
+                status.state = "error";
+                log(coordRoot, "resource_observer.sample_error", { reason_code: status.last_error_code }, error);
+            }
+            if (status.state === "error")
+                status.state = "running";
+            writeStatus();
+            if (input.maxSamples !== undefined && status.sample_count >= input.maxSamples)
+                break;
+            const remaining = Math.max(0, intervalMs - (Date.now() - cycleStarted));
+            if (!stopping && !existsSync(paths.stop))
+                await wait(remaining);
+        }
+    }
+    finally {
+        process.off("SIGINT", requestStop);
+        process.off("SIGTERM", requestStop);
+        status.state = "stopped";
+        status.stopped_at = now().toISOString();
+        writeStatus();
+        log(coordRoot, "resource_observer.stopped", { sample_count: status.sample_count });
+        try {
+            await closeProcessLoggers();
+        }
+        finally {
+            releaseLease(paths.lease, lease.nonce);
+        }
+    }
+    return status;
+}
+function acquireLease(coordRoot, now) {
+    const paths = resourcePaths(coordRoot);
+    mkdirSync(paths.root, { recursive: true, mode: 0o700 });
+    for (let attempt = 0; attempt < 2; attempt++) {
+        const daemonStartToken = processStartToken(process.pid);
+        const lease = {
+            pid: process.pid,
+            ...(daemonStartToken ? { start_token: daemonStartToken } : {}),
+            host: hostname(),
+            nonce: randomUUID(),
+            created_at: now.toISOString(),
+        };
+        try {
+            const fd = openSync(paths.lease, "wx", 0o600);
+            try {
+                writeFileSync(fd, `${JSON.stringify(lease)}\n`, "utf8");
+            }
+            finally {
+                closeSync(fd);
+            }
+            return lease;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            const existing = readLease(paths.lease);
+            if (existing && leaseIsLive(existing)) {
+                throw new Error(`resource observer lease is held by pid ${existing.pid}`);
+            }
+            try {
+                unlinkSync(paths.lease);
+            }
+            catch {
+                // A concurrent starter may have replaced or removed the stale lease.
+            }
+        }
+    }
+    throw new Error("resource observer could not acquire its singleton lease");
+}
+function releaseLease(path, nonce) {
+    const current = readLease(path);
+    if (current?.nonce !== nonce)
+        return;
+    try {
+        unlinkSync(path);
+    }
+    catch {
+        // A missing lease is already released.
+    }
+}
+function readLease(path) {
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        return value && Number.isInteger(value.pid) && typeof value.nonce === "string"
+            ? value
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function leaseIsLive(lease) {
+    if (lease.host !== hostname())
+        return true;
+    try {
+        process.kill(lease.pid, 0);
+    }
+    catch (error) {
+        if (error.code !== "EPERM")
+            return false;
+    }
+    return checkPidToken(lease.pid, lease.start_token) !== "mismatch";
+}
+function log(coordRoot, event, fields, error) {
+    try {
+        const logger = processLogger(coordRoot, "resource-observer");
+        if (error)
+            logger.error(event, legacyLogFields(fields), error);
+        else
+            logger.info(event, legacyLogFields(fields));
+    }
+    catch {
+        // Observability must never break the observer loop.
+    }
+}
+function resourceErrorCode(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/procfs|\/proc\//i.test(message))
+        return "procfs_read_failed";
+    if (/permission|EACCES|EPERM/i.test(message))
+        return "permission_denied";
+    return "sample_failed";
+}
+function normalizeInterval(value) {
+    const interval = value ?? RESOURCE_SERVICE_DEFAULT_INTERVAL_MS;
+    if (!Number.isFinite(interval) ||
+        interval < RESOURCE_SERVICE_MIN_INTERVAL_MS ||
+        interval > RESOURCE_SERVICE_MAX_INTERVAL_MS) {
+        throw new Error(`resource observer interval must be ${RESOURCE_SERVICE_MIN_INTERVAL_MS}-${RESOURCE_SERVICE_MAX_INTERVAL_MS} ms`);
+    }
+    return Math.round(interval);
+}
+function delay(milliseconds) {
+    return new Promise((resolveDelay) => setTimeout(resolveDelay, milliseconds));
+}

package/dist/core/resources/storage.d.ts

@@ -0,0 +1,13 @@
+import type { ResourceServiceStatusRecord, ResourceSnapshot } from "./contract.js";
+export { writePrivateJsonAtomic } from "../storage/atomic-json.js";
+export interface ResourcePaths {
+    root: string;
+    service: string;
+    lease: string;
+    stop: string;
+    snapshot: string;
+}
+export declare function resourcePaths(coordRootRaw: string): ResourcePaths;
+export declare function readResourceSnapshot(coordRoot: string): ResourceSnapshot | undefined;
+export declare function readResourceServiceRecord(coordRoot: string): ResourceServiceStatusRecord | undefined;
+//# sourceMappingURL=storage.d.ts.map

package/dist/core/resources/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/core/resources/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,CASjE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEpF;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,GAChB,2BAA2B,GAAG,SAAS,CAEzC"}

package/dist/core/resources/storage.js

@@ -0,0 +1,30 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+export { writePrivateJsonAtomic } from "../storage/atomic-json.js";
+export function resourcePaths(coordRootRaw) {
+    const root = join(resolve(coordRootRaw), ".harnery", "resources");
+    return {
+        root,
+        service: join(root, "service.json"),
+        lease: join(root, "service.lease.json"),
+        stop: join(root, "stop.json"),
+        snapshot: join(root, "snapshot.json"),
+    };
+}
+export function readResourceSnapshot(coordRoot) {
+    return readJson(resourcePaths(coordRoot).snapshot);
+}
+export function readResourceServiceRecord(coordRoot) {
+    return readJson(resourcePaths(coordRoot).service);
+}
+function readJson(path) {
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        return value && typeof value === "object" ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/core/storage/atomic-json.d.ts

@@ -0,0 +1,3 @@
+/** Write one private JSON projection without exposing a partial frame to readers. */
+export declare function writePrivateJsonAtomic(path: string, value: unknown): void;
+//# sourceMappingURL=atomic-json.d.ts.map

package/dist/core/storage/atomic-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-json.d.ts","sourceRoot":"","sources":["../../../src/core/storage/atomic-json.ts"],"names":[],"mappings":"AAGA,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAUzE"}

package/dist/core/storage/atomic-json.js

@@ -0,0 +1,15 @@
+import { chmodSync, mkdirSync, renameSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+/** Write one private JSON projection without exposing a partial frame to readers. */
+export function writePrivateJsonAtomic(path, value) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.tmp.${process.pid}.${Date.now()}`;
+    writeFileSync(temporary, `${JSON.stringify(value)}\n`, { encoding: "utf8", mode: 0o600 });
+    try {
+        chmodSync(temporary, 0o600);
+    }
+    catch {
+        // Windows does not expose POSIX modes. The atomic write still applies.
+    }
+    renameSync(temporary, path);
+}

package/dist/core/storage/builtins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../../src/core/storage/builtins.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAIV,oBAAoB,EAKrB,MAAM,eAAe,CAAC;AAwDvB,wBAAgB,sBAAsB,IAAI,SAAS,oBAAoB,EAAE,CAUxE"}
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../../src/core/storage/builtins.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAIV,oBAAoB,EAKrB,MAAM,eAAe,CAAC;AA0DvB,wBAAgB,sBAAsB,IAAI,SAAS,oBAAoB,EAAE,CAUxE"}

package/dist/core/storage/builtins.js

@@ -22,6 +22,8 @@ const LOG_PARTITIONS = [
     "agent-operational",
     "web-performance",
     "semantic-service",
+    "resource-observer",
+    "supervisor",
     "governor-service",
     "presence-relay",
     "tunnel-process",
@@ -44,8 +46,8 @@ const V3_ARCHIVE_PROVIDER = {
     provider_id: "event-v3-archive-provider",
     kind: "filesystem",
     inventory: "filesystem",
-    maintenance: "none",
-    lifecycle_authority: "Event Ledger V3 logical authority reader",
+    maintenance: "delegated",
+    lifecycle_authority: "Event Ledger V3 closed-epoch retention policy",
     partitions: ["canonical", "support"],
 };
 export function harneryStorageFamilies() {
@@ -64,7 +66,7 @@ function eventFamilies() {
         family({
             id: "event-v3-canonical-active",
             owner: "Event Ledger V3 authority",
-            storage_class: "canonical-authority",
+            storage_class: "durable-object-history",
             roots: (context) => [
                 exact(context, ".harnery/ledgers/v3/active.ndjson", "file"),
                 exact(context, ".harnery/ledgers/v3/catalog.json", "file"),
@@ -95,14 +97,14 @@ function eventFamilies() {
             format: "canonical-ndjson",
             durability: "immutable",
             writer_model: "object-owned",
-            policy: authorityPolicy("event-v3-archive-canonical-v1"),
+            policy: closedEpochPolicy("event-v3-archive-canonical-v2"),
             consumers: ["Event Ledger V3 logical authority reader", "recovery verifier"],
             provider: V3_ARCHIVE_PROVIDER,
         }),
         family({
             id: "event-v3-support-active",
             owner: "Event Ledger V3 producer recovery",
-            storage_class: "recovery-state",
+            storage_class: "durable-object-history",
             roots: (context) => [
                 subtree(context, ".harnery/ledgers/v3/diagnostics", OWNER_PROTOCOL_LINKS),
                 subtree(context, ".harnery/ledgers/v3/diagnostic-summaries", OWNER_PROTOCOL_LINKS),
@@ -144,7 +146,7 @@ function eventFamilies() {
             format: "files",
             durability: "immutable",
             writer_model: "object-owned",
-            policy: recoveryPolicy("event-v3-archive-support-v1"),
+            policy: closedEpochPolicy("event-v3-archive-support-v2"),
             consumers: ["Event Ledger V3 support reader", "recovery verifier", "agents health"],
             provider: V3_ARCHIVE_PROVIDER,
         }),
@@ -247,6 +249,8 @@ function logFamilies() {
         operationalFamily("agent-operational-log", "agent coordination services", "agent-operational", 30, 128 * MIB),
         withCurrentRoots(operationalFamily("web-performance-log", "dashboard server", "web-performance", 14, 64 * MIB), (context) => [pattern(context, ".harnery/logs", ["web-performance.jsonl*"])]),
         withCurrentRoots(operationalFamily("semantic-service-log", "semantic service", "semantic-service", 30, 128 * MIB), (context) => [exact(context, ".harnery/semantic/v2/service.log", "file")]),
+        operationalFamily("resource-observer-log", "resource observer", "resource-observer", 14, 64 * MIB),
+        operationalFamily("supervisor-log", "local supervisor", "supervisor", 14, 64 * MIB),
         withCurrentRoots(operationalFamily("governor-service-log", "governor service", "governor-service", 30, 128 * MIB), (context) => [
             exact(context, ".harnery/governor-service/service.log", "file"),
             exact(context, ".harnery/governor-service/events.jsonl", "file"),
@@ -357,6 +361,30 @@ function cacheFamilies() {
             consumers: ["semantic service", "storage inventory", "storage health"],
             provider: filesystemProvider("semantic-cache-provider", "canonical events and source documents"),
         }),
+        family({
+            id: "resource-observer-cache",
+            owner: "resource observer",
+            storage_class: "repairable-cache",
+            roots: (context) => [subtree(context, ".harnery/resources")],
+            format: "json",
+            durability: "reconstructable",
+            writer_model: "object-owned",
+            policy: cachePolicy("resource-observer-cache-v1", "local process and machine samples"),
+            consumers: ["resource observer", "dashboard", "storage inventory", "storage health"],
+            provider: filesystemProvider("resource-observer-cache-provider", "local process and machine samples"),
+        }),
+        family({
+            id: "supervisor-cache",
+            owner: "local supervisor",
+            storage_class: "repairable-cache",
+            roots: (context) => [subtree(context, ".harnery/supervisor")],
+            format: "json",
+            durability: "reconstructable",
+            writer_model: "object-owned",
+            policy: cachePolicy("supervisor-cache-v1", "local resources, service health, log cursors, and finding projections"),
+            consumers: ["local supervisor", "dashboard", "storage inventory", "storage health"],
+            provider: filesystemProvider("supervisor-cache-provider", "bounded local diagnostic observations"),
+        }),
         family({
             id: "structured-log-metrics",
             owner: "structured log provider",
@@ -582,6 +610,17 @@ function ownerHistoryPolicy(version) {
         reason: "Durable history follows its owning product object's lifecycle.",
     });
 }
+function closedEpochPolicy(version) {
+    return policy(version, "active", "private", "owner-content", {
+        status: "active",
+        mode: "delegated",
+        maxAge: bounded(7 * DAY_MS, "milliseconds"),
+        maxBytes: bounded(1024 * MIB, "bytes"),
+        maxFiles: unbounded("files", "complete epoch directories are the deletion unit"),
+        maxRecords: unbounded("records", "complete epoch directories are the deletion unit"),
+        reason: "The Event Ledger owner keeps the newest two complete epochs and revalidates each closed epoch before removal.",
+    });
+}
 function delegatedHistoryPolicy(version) {
     const result = ownerHistoryPolicy(version);
     result.retention.mode = "delegated";

package/dist/core/storage/logger.d.ts

@@ -72,6 +72,8 @@ declare const PROCESS_LOGGER_BINDINGS: {
     readonly "agent-hook": "agent-hook-debug-log";
     readonly "agent-coord": "agent-coord-debug-log";
     readonly "semantic-service": "semantic-service-log";
+    readonly "resource-observer": "resource-observer-log";
+    readonly supervisor: "supervisor-log";
     readonly "governor-service": "governor-service-log";
     readonly "presence-relay": "presence-relay-log";
 };

package/dist/core/storage/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/core/storage/logger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,8BAA8B,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EAMxB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;IAC3C,KAAK,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CAAC;IACjD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACvE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAAC;IACxE,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAEjF,qBAAa,iCAAkC,SAAQ,KAAK;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM;CAItC;AAgBD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,oBAAoB,CAQvB;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1C,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B,GAAG,oBAAoB,GAAG;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAa3D;AAED,wBAAgB,uBAAuB,IAAI,oBAAoB,CAc9D;AAyPD,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,8BAA8B,CAAC;IACvC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,eAAe,CAgBlB;AAgCD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAwBhF;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,mFAAmF;AACnF,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAChE,yBAAyB,CA+C3B;AAID,QAAA,MAAM,uBAAuB;;;;;;CAMnB,CAAC;AAEX,MAAM,MAAM,6BAA6B,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEjF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,6BAA6B,GACzC,aAAa,CAaf;AACD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGzD"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/core/storage/logger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,8BAA8B,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EAMxB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;IAC3C,KAAK,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CAAC;IACjD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACvE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxE,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAAC;IACxE,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAEjF,qBAAa,iCAAkC,SAAQ,KAAK;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM;CAItC;AAgBD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,oBAAoB,CAQvB;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1C,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B,GAAG,oBAAoB,GAAG;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAa3D;AAED,wBAAgB,uBAAuB,IAAI,oBAAoB,CAc9D;AAyPD,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,8BAA8B,CAAC;IACvC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,eAAe,CAgBlB;AAgCD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAwBhF;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,mFAAmF;AACnF,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAChE,yBAAyB,CA+C3B;AAID,QAAA,MAAM,uBAAuB;;;;;;;;CAQnB,CAAC;AAEX,MAAM,MAAM,6BAA6B,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEjF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,6BAA6B,GACzC,aAAa,CAaf;AACD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGzD"}

package/dist/core/storage/logger.js

@@ -388,6 +388,8 @@ const PROCESS_LOGGER_BINDINGS = {
     "agent-hook": "agent-hook-debug-log",
     "agent-coord": "agent-coord-debug-log",
     "semantic-service": "semantic-service-log",
+    "resource-observer": "resource-observer-log",
+    supervisor: "supervisor-log",
     "governor-service": "governor-service-log",
     "presence-relay": "presence-relay-log",
 };

package/dist/core/storage/query.d.ts

@@ -23,8 +23,22 @@ export interface HarneryLogFollowCursor {
     manifest_sequence: number;
     active_offset: number;
 }
+export interface HarneryRecentActiveLogResult {
+    records: readonly HarneryLogRecordV1[];
+    bytes_examined: number;
+    truncated: boolean;
+}
 export declare function queryLogs(families: readonly HarneryRegisteredStorageFamily[], query: HarneryLogQuery): Promise<HarneryLogQueryResult>;
 export declare function rotationFollowCursor(family: HarneryRegisteredStorageFamily): HarneryLogFollowCursor;
+/**
+ * Read the newest complete records from one family's active segment without
+ * walking sealed history. Dashboard-style live views need a cheap bounded
+ * snapshot; the full `queryLogs` surface remains the historical query path.
+ */
+export declare function readRecentActiveLogs(family: HarneryRegisteredStorageFamily, options: {
+    max_records: number;
+    max_bytes: number;
+}): HarneryRecentActiveLogResult;
 export declare function readLogFollow(family: HarneryRegisteredStorageFamily, cursor: HarneryLogFollowCursor, maxBytes: number): Promise<{
     records: readonly HarneryLogRecordV1[];
     cursor: HarneryLogFollowCursor;

package/dist/core/storage/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/core/storage/query.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIrD,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,SAAS,8BAA8B,EAAE,EACnD,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,8BAA8B,GACrC,sBAAsB,CASxB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,8BAA8B,EACtC,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CAyED"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/core/storage/query.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIrD,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB;AAMD,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,SAAS,8BAA8B,EAAE,EACnD,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,8BAA8B,GACrC,sBAAsB,CASxB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,8BAA8B,EACtC,OAAO,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClD,4BAA4B,CA0C9B;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,8BAA8B,EACtC,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CAyED"}