instar 1.3.1601 → 1.3.1602

package/dist/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1601",
+  "packageVersion": "1.3.1602",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/dist/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "4378fdb6ce78ccb6de9436ef9d3fc24352e055fe90667bb84243b19da8432d0c",
+  "sha256": "c80fc45becd1fa7131aadde7c0e03b87c2a37f73896352375c2db356e4956b3f",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1601"
+  "packageVersion": "1.3.1602"
 }

package/dist/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
   "articleCount": 93,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1601"
+  "packageVersion": "1.3.1602"
 }

package/dist/monitoring/machineMaintenance/BrowserCare.d.ts

@@ -0,0 +1,166 @@
+/**
+ * Browser and window care, watch-only (docs/specs/machine-self-maintenance.md, Part B).
+ *
+ * The ledger of the normal-Chrome browsers this agent opened, and a 15-minute sweep
+ * that decides, by the spec's rules, which of them it WOULD close. This build closes
+ * nothing: it has no way to signal a process, and
+ * `tests/unit/machine-maintenance-watch-only.test.ts` holds that. Every verdict is
+ * written to `logs/browser-care.jsonl` so seven days of would-close rows can show the
+ * rule never picks a browser that is still in use before any later build may act.
+ *
+ * Who may be closed: only a Chrome main process whose `--user-data-dir` is inside this
+ * agent's own `.instar/state/playwright-profiles/`. The operator's own Chrome has no
+ * such flag and can never match. An owned process with no ledger entry is adopted.
+ *
+ * A close needs one of: a completion signal (`completedAt`), an expired declared
+ * lifetime (`ttlDeclared`), an adopted instance's expired lease, or a confirmed absent
+ * owner (idle past `idleMinutes` and the owning tmux session gone on a fresh read).
+ * Then it must pass the keep checks: no operator input in the last 5 minutes, no open
+ * sign-in repair, no download growing, and every tab read as holding no unsaved input.
+ * Any unreadable answer keeps the instance and says so.
+ */
+export declare const SWEEP_INTERVAL_MS: number;
+export declare const OPERATOR_ACTIVE_MS: number;
+export declare const DOWNLOAD_FRESH_MS: number;
+/** At most this many instances get the per-tab check in one pass. */
+export declare const MAX_CHECKS_PER_PASS = 5;
+export interface BrowserCareSettings {
+    enabled: boolean;
+    /** Always true in this build: there is no close path. Reported so a reader sees it. */
+    dryRun: boolean;
+    maxPerAgent: number;
+    maxPerHost: number;
+    idleMinutes: number;
+    ttlMinutes: number;
+    /** Profile ids (folder names under playwright-profiles) the sweep never picks. */
+    keepProfiles: string[];
+}
+export declare const DEFAULT_BROWSER_CARE: BrowserCareSettings;
+export declare function normalizeBrowserCare(raw: unknown): BrowserCareSettings;
+/** One file per instance, written by `chrome-launch.sh` and kept current by the other helpers. */
+export interface BrowserInstanceEntry {
+    userDataDir: string;
+    pid: number | null;
+    processStartTime: string | null;
+    agent: string | null;
+    sessionName: string | null;
+    topicId: string | null;
+    purpose: string | null;
+    openedAt: string;
+    lastUsedAt: string;
+    ttlMinutes: number;
+    ttlDeclared: boolean;
+    leaseUntil: string;
+    completedAt: string | null;
+}
+/** A Chrome browser main process: no `--type=`, with a `--user-data-dir=`. */
+export interface ChromeProcess {
+    pid: number;
+    startTime: string;
+    userDataDir: string;
+}
+/** The file name the helper scripts use too: the first 16 hex of SHA-256 of the directory. */
+export declare function ledgerFileName(userDataDir: string): string;
+/**
+ * Parses `ps -axo pid=,lstart=,args=`. `lstart` is five fields ("Mon Nov  2 10:00:00 2026").
+ * Only the real Chrome app's main process counts; helpers carry `--type=`, and an automation-driven
+ * browser (Playwright, Chrome for Testing) is never counted.
+ */
+export declare function parseChromeProcesses(psOutput: string): ChromeProcess[];
+export type BrowserCloseGround = 'completed' | 'declared-lifetime-expired' | 'adopted-lease-expired' | 'owner-absent';
+export type BrowserKeepReason = 'allowlisted' | 'in-use' | 'lease-expired-owner-alive' | 'owner-unreadable' | 'declared-lifetime-running' | 'operator-active' | 'operator-unreadable' | 'sign-in-repair-open' | 'sign-in-repair-unreadable' | 'download-active' | 'download-unreadable' | 'unsaved-input' | 'unreadable-tabs' | 'check-budget';
+export interface BrowserVerdict {
+    verdict: 'would-close' | 'keep';
+    ground: BrowserCloseGround | null;
+    reason: BrowserKeepReason | null;
+}
+/** Step one: does any close ground apply? Owner reads are fresh from the caller. */
+export declare function closeGround(entry: BrowserInstanceEntry, nowMs: number, idleMinutes: number, ownerAlive: boolean | null): BrowserVerdict;
+export type TabCheck = 'no' | 'yes' | 'unreadable';
+export interface BrowserCareDeps {
+    agentName: string;
+    /** The agent home; profiles live under `<home>/.instar/state/playwright-profiles/`. */
+    agentHome: string;
+    operatorChromeDir: string;
+    ledgerDir: string;
+    logPath: string;
+    settings: () => BrowserCareSettings;
+    /** Chrome main processes on this host, or null when the process table is unreadable. */
+    listChrome: () => Promise<ChromeProcess[] | null>;
+    /** Names of live tmux sessions, or null when unreadable. */
+    tmuxSessions: () => Promise<string[] | null>;
+    /** Milliseconds since the last console input, or null. */
+    inputIdleMs: () => Promise<number | null>;
+    /** True when a sign-in repair is open on this machine; null when unreadable. */
+    signInRepairOpen: () => boolean | null;
+    /** True when a download in this profile grew recently; null when unreadable. */
+    downloadActive: (userDataDir: string) => Promise<boolean | null>;
+    /** Read-only per-tab unsaved-input check for one instance. Every tab, or `unreadable`. */
+    checkTabs: (userDataDir: string) => Promise<TabCheck[] | 'unreadable'>;
+    now?: () => number;
+    log?: (line: string) => void;
+}
+export interface InstanceReport {
+    profile: string;
+    pid: number | null;
+    purpose: string | null;
+    sessionName: string | null;
+    openedAt: string;
+    lastUsedAt: string;
+    leaseUntil: string;
+    ttlDeclared: boolean;
+    verdict: BrowserVerdict['verdict'];
+    ground: BrowserCloseGround | null;
+    reason: BrowserKeepReason | null;
+}
+export interface BrowserCareStatus {
+    enabled: boolean;
+    dryRun: true;
+    canClose: false;
+    lastSweepAt: string | null;
+    lastError: string | null;
+    breakerUntil: string | null;
+    owned: number;
+    adopted: number;
+    hostTotal: number | null;
+    maxPerAgent: number;
+    maxPerHost: number;
+    overAgentCap: boolean;
+    overHostCap: boolean;
+    wouldClose: number;
+    keptUnsaved: number;
+    keptUnreadable: number;
+    instances: InstanceReport[];
+}
+export declare class BrowserCareSweep {
+    private readonly deps;
+    private readonly now;
+    private readonly profilesRoot;
+    private timer;
+    private running;
+    private failures;
+    private breakerUntil;
+    private lastSweepAt;
+    private lastError;
+    private hostTotal;
+    private reports;
+    /** Last verdict per instance, so the audit records changes, not every pass. */
+    private readonly lastKey;
+    constructor(deps: BrowserCareDeps);
+    start(): void;
+    stop(): void;
+    /** Owned: inside this agent's profiles folder and never the operator's own Chrome. */
+    isOwned(dir: string): boolean;
+    readLedger(): BrowserInstanceEntry[];
+    private write;
+    private remove;
+    private audit;
+    private profile;
+    sweep(): Promise<void>;
+    private pass;
+    private keepChecks;
+    status(): BrowserCareStatus;
+}
+export declare function setActiveBrowserCare(sweep: BrowserCareSweep | null): void;
+export declare function getActiveBrowserCare(): BrowserCareSweep | null;
+//# sourceMappingURL=BrowserCare.d.ts.map

package/dist/monitoring/machineMaintenance/BrowserCare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCare.d.ts","sourceRoot":"","sources":["../../../src/monitoring/machineMaintenance/BrowserCare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAC1C,eAAO,MAAM,kBAAkB,QAAU,CAAC;AAC1C,eAAO,MAAM,iBAAiB,QAAU,CAAC;AACzC,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAKrC,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,uFAAuF;IACvF,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,eAAO,MAAM,oBAAoB,EAAE,mBAElC,CAAC;AAKF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,CAWtE;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAEtF,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1D;AAOD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CActE;AAOD,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,2BAA2B,GAAG,uBAAuB,GAAG,cAAc,CAAC;AACtH,MAAM,MAAM,iBAAiB,GACzB,aAAa,GAAG,QAAQ,GAAG,2BAA2B,GAAG,kBAAkB,GAAG,2BAA2B,GACzG,iBAAiB,GAAG,qBAAqB,GAAG,qBAAqB,GAAG,2BAA2B,GAC/F,iBAAiB,GAAG,qBAAqB,GAAG,eAAe,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAErG,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,aAAa,GAAG,MAAM,CAAC;IAChC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAClC;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,GAAG,cAAc,CAavI;AAED,MAAM,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,YAAY,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,mBAAmB,CAAC;IACpC,wFAAwF;IACxF,UAAU,EAAE,MAAM,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC;IAClD,4DAA4D;IAC5D,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,0DAA0D;IAC1D,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC;IACvC,gFAAgF;IAChF,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjE,0FAA0F;IAC1F,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC,CAAC;IACvE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,OAAO,CAAwB;IACvC,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAErD,YAAY,IAAI,EAAE,eAAe,EAIhC;IAED,KAAK,IAAI,IAAI,CAKZ;IAED,IAAI,IAAI,IAAI,CAGX;IAED,sFAAsF;IACtF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5B;IAED,UAAU,IAAI,oBAAoB,EAAE,CAYnC;IAED,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,MAAM;IAKd,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,OAAO;IAIT,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAmB3B;YAEa,IAAI;YAgEJ,UAAU;IAgBxB,MAAM,IAAI,iBAAiB,CAqB1B;CACF;AAGD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAoB;AAC9F,wBAAgB,oBAAoB,IAAI,gBAAgB,GAAG,IAAI,CAAmB"}

package/dist/monitoring/machineMaintenance/BrowserCare.js

@@ -0,0 +1,334 @@
+/**
+ * Browser and window care, watch-only (docs/specs/machine-self-maintenance.md, Part B).
+ *
+ * The ledger of the normal-Chrome browsers this agent opened, and a 15-minute sweep
+ * that decides, by the spec's rules, which of them it WOULD close. This build closes
+ * nothing: it has no way to signal a process, and
+ * `tests/unit/machine-maintenance-watch-only.test.ts` holds that. Every verdict is
+ * written to `logs/browser-care.jsonl` so seven days of would-close rows can show the
+ * rule never picks a browser that is still in use before any later build may act.
+ *
+ * Who may be closed: only a Chrome main process whose `--user-data-dir` is inside this
+ * agent's own `.instar/state/playwright-profiles/`. The operator's own Chrome has no
+ * such flag and can never match. An owned process with no ledger entry is adopted.
+ *
+ * A close needs one of: a completion signal (`completedAt`), an expired declared
+ * lifetime (`ttlDeclared`), an adopted instance's expired lease, or a confirmed absent
+ * owner (idle past `idleMinutes` and the owning tmux session gone on a fresh read).
+ * Then it must pass the keep checks: no operator input in the last 5 minutes, no open
+ * sign-in repair, no download growing, and every tab read as holding no unsaved input.
+ * Any unreadable answer keeps the instance and says so.
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { atomicWriteFileSync } from '../../core/hostSemaphoreCore.js';
+import { SafeFsExecutor } from '../../core/SafeFsExecutor.js';
+const MIN = 60_000;
+export const SWEEP_INTERVAL_MS = 15 * MIN;
+export const OPERATOR_ACTIVE_MS = 5 * MIN;
+export const DOWNLOAD_FRESH_MS = 5 * MIN;
+/** At most this many instances get the per-tab check in one pass. */
+export const MAX_CHECKS_PER_PASS = 5;
+const BREAKER_FAILURES = 3;
+const BREAKER_PAUSE_MS = 24 * 60 * MIN;
+const MAX_LOG_BYTES = 2 * 1024 * 1024;
+export const DEFAULT_BROWSER_CARE = {
+    enabled: true, dryRun: true, maxPerAgent: 4, maxPerHost: 8, idleMinutes: 30, ttlMinutes: 120, keepProfiles: [],
+};
+const posInt = (v, d, min = 1, max = 10_000) => typeof v === 'number' && Number.isFinite(v) && v >= min && v <= max ? Math.floor(v) : d;
+export function normalizeBrowserCare(raw) {
+    const r = raw && typeof raw === 'object' ? raw : {};
+    return {
+        enabled: r.enabled !== false,
+        dryRun: true,
+        maxPerAgent: posInt(r.maxPerAgent, DEFAULT_BROWSER_CARE.maxPerAgent, 1, 100),
+        maxPerHost: posInt(r.maxPerHost, DEFAULT_BROWSER_CARE.maxPerHost, 1, 200),
+        idleMinutes: posInt(r.idleMinutes, DEFAULT_BROWSER_CARE.idleMinutes, 5, 7 * 24 * 60),
+        ttlMinutes: posInt(r.ttlMinutes, DEFAULT_BROWSER_CARE.ttlMinutes, 5, 30 * 24 * 60),
+        keepProfiles: Array.isArray(r.keepProfiles) ? r.keepProfiles.filter((p) => typeof p === 'string' && p.length > 0).slice(0, 100) : [],
+    };
+}
+/** The file name the helper scripts use too: the first 16 hex of SHA-256 of the directory. */
+export function ledgerFileName(userDataDir) {
+    return `${crypto.createHash('sha256').update(userDataDir).digest('hex').slice(0, 16)}.json`;
+}
+/** The macOS Chrome app binary, exactly. `Google Chrome for Testing.app` does not match. */
+const NORMAL_CHROME_MAIN = /\/Google Chrome\.app\/Contents\/MacOS\/Google Chrome( |$)/;
+/** Flags an automation-driven browser carries; chrome-launch.sh adds no flags at all. */
+const AUTOMATION_FLAGS = /--remote-debugging-(port|pipe)|--enable-automation|--test-type/;
+/**
+ * Parses `ps -axo pid=,lstart=,args=`. `lstart` is five fields ("Mon Nov  2 10:00:00 2026").
+ * Only the real Chrome app's main process counts; helpers carry `--type=`, and an automation-driven
+ * browser (Playwright, Chrome for Testing) is never counted.
+ */
+export function parseChromeProcesses(psOutput) {
+    const out = [];
+    for (const line of psOutput.split('\n')) {
+        const m = /^\s*(\d+)\s+(\w{3}\s+\w{3}\s+\d{1,2}\s+\d{1,2}:\d{2}:\d{2}\s+\d{4})\s+(.*)$/.exec(line);
+        if (!m)
+            continue;
+        const args = m[3];
+        // The real Chrome app only: not "Google Chrome for Testing" or a Chromium, and not a browser
+        // started for automation (the Playwright MCP's), which the normal-Chrome launcher never is.
+        if (!NORMAL_CHROME_MAIN.test(args) || /--type=/.test(args) || AUTOMATION_FLAGS.test(args))
+            continue;
+        const dir = /--user-data-dir=(\S+)/.exec(args);
+        if (!dir)
+            continue;
+        out.push({ pid: Number(m[1]), startTime: m[2].replace(/\s+/g, ' '), userDataDir: dir[1] });
+    }
+    return out;
+}
+function isInside(dir, root) {
+    const rel = path.relative(root, dir);
+    return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel);
+}
+/** Step one: does any close ground apply? Owner reads are fresh from the caller. */
+export function closeGround(entry, nowMs, idleMinutes, ownerAlive) {
+    const keep = (reason) => ({ verdict: 'keep', ground: null, reason });
+    const ground = (g) => ({ verdict: 'would-close', ground: g, reason: null });
+    if (entry.completedAt)
+        return ground('completed');
+    const leaseOver = Date.parse(entry.leaseUntil) < nowMs;
+    const idle = nowMs - Date.parse(entry.lastUsedAt) > idleMinutes * MIN;
+    if (entry.ttlDeclared)
+        return leaseOver ? ground('declared-lifetime-expired') : keep('declared-lifetime-running');
+    if (entry.purpose === 'adopted')
+        return leaseOver ? ground('adopted-lease-expired') : keep('in-use');
+    if (!idle && !leaseOver)
+        return keep('in-use');
+    if (!idle)
+        return keep('lease-expired-owner-alive');
+    if (!entry.sessionName || ownerAlive === null)
+        return keep('owner-unreadable');
+    if (ownerAlive)
+        return keep(leaseOver ? 'lease-expired-owner-alive' : 'in-use');
+    return ground('owner-absent');
+}
+export class BrowserCareSweep {
+    deps;
+    now;
+    profilesRoot;
+    timer = null;
+    running = false;
+    failures = 0;
+    breakerUntil = 0;
+    lastSweepAt = null;
+    lastError = null;
+    hostTotal = null;
+    reports = [];
+    /** Last verdict per instance, so the audit records changes, not every pass. */
+    lastKey = new Map();
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? Date.now;
+        this.profilesRoot = path.join(deps.agentHome, '.instar', 'state', 'playwright-profiles');
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => { void this.sweep(); }, SWEEP_INTERVAL_MS);
+        this.timer.unref?.();
+        setTimeout(() => { void this.sweep(); }, 60_000).unref?.();
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /** Owned: inside this agent's profiles folder and never the operator's own Chrome. */
+    isOwned(dir) {
+        return isInside(dir, this.profilesRoot) && !isInside(dir, this.deps.operatorChromeDir) && dir !== this.deps.operatorChromeDir;
+    }
+    readLedger() {
+        let names;
+        try {
+            names = fs.readdirSync(this.deps.ledgerDir).filter((n) => n.endsWith('.json'));
+        }
+        catch {
+            return [];
+        } // @silent-fallback-ok — no ledger folder is an empty ledger; adoption fills it.
+        const out = [];
+        for (const name of names) {
+            try {
+                const e = JSON.parse(fs.readFileSync(path.join(this.deps.ledgerDir, name), 'utf-8'));
+                if (typeof e.userDataDir === 'string' && typeof e.openedAt === 'string' && typeof e.lastUsedAt === 'string' && typeof e.leaseUntil === 'string')
+                    out.push(e);
+            }
+            catch { /* @silent-fallback-ok — a half-written or foreign file is skipped; adoption rewrites it. */ }
+        }
+        return out;
+    }
+    write(entry) {
+        fs.mkdirSync(this.deps.ledgerDir, { recursive: true });
+        atomicWriteFileSync(path.join(this.deps.ledgerDir, ledgerFileName(entry.userDataDir)), JSON.stringify(entry, null, 2), { mode: 0o600, operation: 'BrowserCareSweep.writeLedger' });
+    }
+    remove(entry) {
+        try {
+            SafeFsExecutor.safeUnlinkSync(path.join(this.deps.ledgerDir, ledgerFileName(entry.userDataDir)), { operation: 'browser-care: ledger entry for an instance that has exited' });
+        }
+        catch { /* @silent-fallback-ok — a stale entry is removed on the next pass. */ }
+    }
+    audit(row) {
+        try {
+            fs.mkdirSync(path.dirname(this.deps.logPath), { recursive: true });
+            try {
+                if (fs.statSync(this.deps.logPath).size > MAX_LOG_BYTES)
+                    fs.renameSync(this.deps.logPath, `${this.deps.logPath}.1`);
+            }
+            catch { /* @silent-fallback-ok — no log yet. */ }
+            fs.appendFileSync(this.deps.logPath, `${JSON.stringify({ ts: new Date(this.now()).toISOString(), agent: this.deps.agentName, dryRun: true, ...row })}\n`);
+        }
+        catch (err) {
+            this.deps.log?.(`browser-care audit write failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    profile(dir) {
+        return path.relative(this.deps.agentHome, dir);
+    }
+    async sweep() {
+        const settings = this.deps.settings();
+        if (!settings.enabled || this.running || this.now() < this.breakerUntil)
+            return;
+        this.running = true;
+        try {
+            await this.pass(settings);
+            this.failures = 0;
+            this.lastError = null;
+        }
+        catch (err) {
+            this.failures++;
+            this.lastError = err instanceof Error ? err.message : String(err);
+            if (this.failures >= BREAKER_FAILURES) {
+                this.breakerUntil = this.now() + BREAKER_PAUSE_MS;
+                this.audit({ event: 'breaker-open', failures: this.failures, error: this.lastError });
+                this.failures = 0;
+            }
+        }
+        finally {
+            this.running = false;
+        }
+    }
+    async pass(settings) {
+        const now = this.now();
+        const procs = await this.deps.listChrome();
+        if (procs === null)
+            throw new Error('process table unreadable');
+        // Every agent's normal-Chrome profiles on this host, read from the process table.
+        this.hostTotal = procs.filter((p) => /\/\.instar\/state\/playwright-profiles\//.test(p.userDataDir)).length;
+        const owned = new Map(procs.filter((p) => this.isOwned(p.userDataDir)).map((p) => [p.userDataDir, p]));
+        // Reconcile the ledger with what is running. An entry whose process is gone is removed;
+        // a process with no entry, or a different (pid, start time), is adopted afresh.
+        const entries = new Map();
+        for (const e of this.readLedger()) {
+            if (!this.isOwned(e.userDataDir))
+                continue;
+            const p = owned.get(e.userDataDir);
+            if (!p) {
+                this.remove(e);
+                this.lastKey.delete(e.userDataDir);
+                continue;
+            }
+            if (e.pid === null) {
+                const bound = { ...e, pid: p.pid, processStartTime: p.startTime };
+                this.write(bound);
+                entries.set(e.userDataDir, bound);
+            }
+            else if (e.pid === p.pid && e.processStartTime === p.startTime) {
+                entries.set(e.userDataDir, e);
+            }
+        }
+        for (const [dir, p] of owned) {
+            if (entries.has(dir))
+                continue;
+            const at = new Date(now).toISOString();
+            const adopted = {
+                userDataDir: dir, pid: p.pid, processStartTime: p.startTime, agent: this.deps.agentName,
+                sessionName: null, topicId: null, purpose: 'adopted', openedAt: at, lastUsedAt: at,
+                ttlMinutes: settings.ttlMinutes, ttlDeclared: false,
+                leaseUntil: new Date(now + settings.ttlMinutes * MIN).toISOString(), completedAt: null,
+            };
+            this.write(adopted);
+            entries.set(dir, adopted);
+            this.audit({ event: 'adopted', profile: this.profile(dir) });
+        }
+        const tmux = await this.deps.tmuxSessions();
+        const idleMs = await this.deps.inputIdleMs();
+        const repair = this.deps.signInRepairOpen();
+        let checks = 0;
+        const reports = [];
+        for (const e of [...entries.values()].sort((a, b) => a.openedAt.localeCompare(b.openedAt))) {
+            const ownerAlive = e.sessionName ? (tmux === null ? null : tmux.includes(e.sessionName)) : null;
+            let v = settings.keepProfiles.includes(path.basename(e.userDataDir))
+                ? { verdict: 'keep', ground: null, reason: 'allowlisted' }
+                : closeGround(e, now, settings.idleMinutes, ownerAlive);
+            if (v.verdict === 'would-close')
+                v = await this.keepChecks(e, v, idleMs, repair, checks++ < MAX_CHECKS_PER_PASS);
+            reports.push({
+                profile: this.profile(e.userDataDir), pid: e.pid, purpose: e.purpose, sessionName: e.sessionName,
+                openedAt: e.openedAt, lastUsedAt: e.lastUsedAt, leaseUntil: e.leaseUntil, ttlDeclared: e.ttlDeclared,
+                verdict: v.verdict, ground: v.ground, reason: v.reason,
+            });
+            const key = `${v.verdict}:${v.ground}:${v.reason}`;
+            if (this.lastKey.get(e.userDataDir) !== key) {
+                this.lastKey.set(e.userDataDir, key);
+                this.audit({ event: v.verdict === 'would-close' ? 'would-close' : 'keep', profile: this.profile(e.userDataDir), purpose: e.purpose, ground: v.ground, reason: v.reason });
+            }
+        }
+        this.reports = reports;
+        this.lastSweepAt = now;
+        if (reports.length > settings.maxPerAgent)
+            this.audit({ event: 'over-agent-cap', owned: reports.length, cap: settings.maxPerAgent });
+    }
+    async keepChecks(e, v, idleMs, repair, budget) {
+        const keep = (reason) => ({ verdict: 'keep', ground: v.ground, reason });
+        if (idleMs === null)
+            return keep('operator-unreadable');
+        if (idleMs < OPERATOR_ACTIVE_MS)
+            return keep('operator-active');
+        if (repair === null)
+            return keep('sign-in-repair-unreadable');
+        if (repair)
+            return keep('sign-in-repair-open');
+        if (!budget)
+            return keep('check-budget');
+        const download = await this.deps.downloadActive(e.userDataDir).catch(() => null); // @silent-fallback-ok — unknown download state keeps the browser
+        if (download === null)
+            return keep('download-unreadable');
+        if (download)
+            return keep('download-active');
+        const tabs = await this.deps.checkTabs(e.userDataDir).catch(() => 'unreadable'); // @silent-fallback-ok — unreadable tabs keep the browser
+        if (tabs === 'unreadable' || tabs.includes('unreadable'))
+            return keep('unreadable-tabs');
+        if (tabs.includes('yes'))
+            return keep('unsaved-input');
+        return v;
+    }
+    status() {
+        const s = this.deps.settings();
+        return {
+            enabled: s.enabled,
+            dryRun: true,
+            canClose: false,
+            lastSweepAt: this.lastSweepAt === null ? null : new Date(this.lastSweepAt).toISOString(),
+            lastError: this.lastError,
+            breakerUntil: this.breakerUntil > this.now() ? new Date(this.breakerUntil).toISOString() : null,
+            owned: this.reports.length,
+            adopted: this.reports.filter((r) => r.purpose === 'adopted').length,
+            hostTotal: this.hostTotal,
+            maxPerAgent: s.maxPerAgent,
+            maxPerHost: s.maxPerHost,
+            overAgentCap: this.reports.length > s.maxPerAgent,
+            overHostCap: this.hostTotal !== null && this.hostTotal > s.maxPerHost,
+            wouldClose: this.reports.filter((r) => r.verdict === 'would-close').length,
+            keptUnsaved: this.reports.filter((r) => r.reason === 'unsaved-input').length,
+            keptUnreadable: this.reports.filter((r) => r.reason === 'unreadable-tabs').length,
+            instances: this.reports,
+        };
+    }
+}
+let active = null;
+export function setActiveBrowserCare(sweep) { active = sweep; }
+export function getActiveBrowserCare() { return active; }
+//# sourceMappingURL=BrowserCare.js.map

package/dist/monitoring/machineMaintenance/BrowserCare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCare.js","sourceRoot":"","sources":["../../../src/monitoring/machineMaintenance/BrowserCare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,GAAG,GAAG,MAAM,CAAC;AACnB,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,GAAG,CAAC;AACzC,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;AACvC,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AActC,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE;CAC/G,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,CAAS,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,EAAU,EAAE,CACtE,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1F,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK;QAC5B,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,oBAAoB,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC;QAC5E,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,CAAC;QACzE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,oBAAoB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QACpF,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAClF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;KAClJ,CAAC;AACJ,CAAC;AAsBD,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;AAC9F,CAAC;AAED,4FAA4F;AAC5F,MAAM,kBAAkB,GAAG,2DAA2D,CAAC;AACvF,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,gEAAgE,CAAC;AAE1F;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnG,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,6FAA6F;QAC7F,4FAA4F;QAC5F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACpG,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC;AAcD,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,KAA2B,EAAE,KAAa,EAAE,WAAmB,EAAE,UAA0B;IACrH,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,CAAC,CAAqB,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,GAAG,CAAC;IACtE,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrG,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/E,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC;AA8DD,MAAM,OAAO,gBAAgB;IACV,IAAI,CAAkB;IACtB,GAAG,CAAe;IAClB,YAAY,CAAS;IAC9B,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,CAAC,CAAC;IACb,YAAY,GAAG,CAAC,CAAC;IACjB,WAAW,GAAkB,IAAI,CAAC;IAClC,SAAS,GAAkB,IAAI,CAAC;IAChC,SAAS,GAAkB,IAAI,CAAC;IAChC,OAAO,GAAqB,EAAE,CAAC;IACvC,+EAA+E;IAC9D,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YAAY,IAAqB;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,sFAAsF;IACtF,OAAO,CAAC,GAAW;QACjB,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAChI,CAAC;IAED,UAAU;QACR,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QACvF,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC,CAAC,gFAAgF;QACrG,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAyB,CAAC;gBAC7G,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/J,CAAC;YAAC,MAAM,CAAC,CAAC,4FAA4F,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,KAA2B;QACvC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACrL,CAAC;IAEO,MAAM,CAAC,KAA2B;QACxC,IAAI,CAAC;YAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,4DAA4D,EAAE,CAAC,CAAC;QAAC,CAAC;QACtL,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,GAA4B;QACxC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,aAAa;oBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAAC,CAAC;YAC5H,MAAM,CAAC,CAAC,uCAAuC,CAAC,CAAC;YACjD,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5J,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAW;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY;YAAE,OAAO;QAChF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC;gBACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;gBAClD,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBACtF,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAA6B;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3C,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChE,kFAAkF;QAClF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5G,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvG,wFAAwF;QACxF,gFAAgF;QAChF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzE,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;gBAClE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;gBACvF,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;gBAClF,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK;gBACnD,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI;aACvF,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChG,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAClE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAsB,EAAE;gBAC5E,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,OAAO,KAAK,aAAa;gBAAE,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,CAAC;YACjH,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW;gBAChG,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW;gBACpG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;aACvD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5K,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,WAAW;YAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACvI,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,CAAuB,EAAE,CAAiB,EAAE,MAAqB,EAAE,MAAsB,EAAE,MAAe;QACjI,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxD,IAAI,MAAM,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,iEAAiE;QACnJ,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC1D,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,yDAAyD;QACxJ,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM;QACJ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;YACxF,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YAC/F,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC1B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM;YACnE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW;YACjD,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,UAAU;YACrE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,MAAM;YAC1E,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,MAAM;YAC5E,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,MAAM;YACjF,SAAS,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;CACF;AAED,IAAI,MAAM,GAA4B,IAAI,CAAC;AAC3C,MAAM,UAAU,oBAAoB,CAAC,KAA8B,IAAU,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;AAC9F,MAAM,UAAU,oBAAoB,KAA8B,OAAO,MAAM,CAAC,CAAC,CAAC"}

package/dist/monitoring/machineMaintenance/lockState.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Honest lock reading (docs/specs/machine-self-maintenance.md, Part A).
+ *
+ * The session flag `CGSSessionScreenIsLocked` is one input and never the answer:
+ * on 2026-11-01 it read true on a Mac whose screensaver a keypress dismissed with
+ * no password. This is the spec's decision table, first matching row wins, with
+ * every input reported beside the verdict. Conflicting or unreadable evidence is
+ * `unknown`, never `locked`. Pure: the readings come from the caller.
+ */
+export type MachineLockState = 'unlocked' | 'locked' | 'screensaver-or-display-sleep' | 'unknown' | 'not-applicable';
+/** `sysadminctl -screenLock status`: `immediate`, `off`, a delay, or unreadable. */
+export type PasswordRequired = 'immediate' | 'off' | 'delayed' | null;
+export interface LockReadingInputs {
+    /** The session flag. Null when the helper gave no reading. */
+    flagLocked: boolean | null;
+    passwordRequired: PasswordRequired;
+    screensaverRunning: boolean | null;
+    displayAsleep: boolean | null;
+    lockShieldSeen: boolean | null;
+    consoleSession: boolean | null;
+    loginDone: boolean | null;
+}
+export interface LockVerdict {
+    lockState: MachineLockState;
+    /** The table row that decided, 1 to 5; 0 when the platform has no such reading. */
+    row: number;
+    reason: string;
+    inputs: LockReadingInputs;
+}
+export declare const EMPTY_LOCK_INPUTS: LockReadingInputs;
+export declare function decideLockState(inputs: LockReadingInputs): LockVerdict;
+/** Parses `sysadminctl -screenLock status`, which prints on stderr. */
+export declare function parsePasswordRequired(output: string): PasswordRequired;
+//# sourceMappingURL=lockState.d.ts.map

package/dist/monitoring/machineMaintenance/lockState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockState.d.ts","sourceRoot":"","sources":["../../../src/monitoring/machineMaintenance/lockState.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,QAAQ,GAAG,8BAA8B,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAErH,oFAAoF;AACpF,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,eAAO,MAAM,iBAAiB,EAAE,iBAG/B,CAAC;AAEF,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAoBtE;AAED,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAKtE"}