instar 1.3.61 → 1.3.63

package/dist/core/ReapGuard.d.ts

@@ -0,0 +1,79 @@
+/**
+ * ReapGuard — the shared, stateless "is it safe to reap this session?" guard.
+ *
+ * Spec: docs/specs/unified-session-lifecycle-robustness.md §P2.
+ *
+ * Extracted from `SessionReaper.evaluate()` so that EVERY autonomous killer —
+ * not just the careful new reaper — consults the same positive-evidence KEEP
+ * checks before a session is ended. The single ReapAuthority
+ * (`SessionManager.terminateSession`) calls this guard; a non-null result means
+ * the session must be KEPT and the terminate is a no-op.
+ *
+ * Scope is the STATELESS guards only (deps-driven, no per-tick observation
+ * state): protected, spawn-grace, recovery-in-flight, pending-injection,
+ * relay-lease, recent-user-message, open-commitment, active-subagent,
+ * structural-long-work, active-process, main-process-uninspectable/active.
+ *
+ * The STATEFUL checks — transcript-growth (compares against the previous tick)
+ * and positive-idle proof (needs a captured pane frame) — stay inside
+ * `SessionReaper.evaluate()`, which calls this guard FIRST (preserving the exact
+ * keptBy ordering) and then layers its own per-instance checks.
+ *
+ * Ordering is identical to the original `evaluate()` so a refactor preserves
+ * every `keptBy` reason for the same input (asserted by the reaper's tests).
+ */
+import type { Session } from './types.js';
+export type ReapConfidence = 'high' | 'low';
+/** A KEEP verdict: the reason a session must not be reaped, + a confidence. */
+export interface ReapKeepReason {
+    reason: string;
+    confidence: ReapConfidence;
+}
+/**
+ * Signal sources for the stateless guards. A subset of `SessionReaperDeps` so a
+ * single set of closures (built once in server.ts) can back both the reaper and
+ * the authority. Every "cannot inspect" path resolves to KEEP, never to reap.
+ */
+export interface ReapGuardDeps {
+    protectedSessions: () => string[];
+    isRecoveryActive: (session: Session) => boolean;
+    hasPendingInjection: (tmuxSession: string) => boolean;
+    isRelayLeaseActive: (sessionId: string) => boolean;
+    topicBinding: (tmuxSession: string) => number | null;
+    recentUserMessage: (topicId: number, withinMs: number) => boolean;
+    activeCommitmentForTopic: (topicId: number) => boolean;
+    activeSubagentCount: (claudeSessionId: string | undefined) => number;
+    buildOrAutonomousActive: (topicId: number | null) => boolean;
+    hasActiveProcesses: (tmuxSession: string) => boolean;
+    /** Optional main-process CPU/IO liveness. `undefined` ⇒ cannot inspect ⇒ KEEP. */
+    mainProcessActive?: (tmuxSession: string) => boolean | undefined;
+    now?: () => number;
+}
+export interface ReapGuardOptions {
+    /** Minimum session age before reap-eligibility (spawn grace). 0 disables. */
+    minAgeMs: number;
+    /** Window for "recent user message" on a bound topic. */
+    recentUserWindowMs: number;
+    /** Whether an open commitment on the bound topic blocks reaping. */
+    protectOpenCommitments: boolean;
+}
+export declare const DEFAULT_REAP_GUARD_OPTIONS: ReapGuardOptions;
+export declare class ReapGuard {
+    private readonly deps;
+    private readonly opts;
+    private readonly now;
+    constructor(deps: ReapGuardDeps, opts?: Partial<ReapGuardOptions>);
+    /**
+     * Returns the reason this session must be KEPT (not reaped), or `null` if all
+     * stateless guards clear. Cheap-first ordering: in-memory checks before any
+     * subprocess fork (process tree / main-process probe) so a guarded session is
+     * rejected without paying for a capture.
+     *
+     * Never throws — a thrown signal source is caught and resolved to KEEP
+     * ('guard-error'), because we can never reason about a session we cannot
+     * inspect, and the safe answer is always "keep".
+     */
+    blockedReason(session: Session): ReapKeepReason | null;
+    private evaluate;
+}
+//# sourceMappingURL=ReapGuard.d.ts.map

package/dist/core/ReapGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReapGuard.d.ts","sourceRoot":"","sources":["../../src/core/ReapGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,CAAC;AAE5C,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,iBAAiB,EAAE,MAAM,MAAM,EAAE,CAAC;IAClC,gBAAgB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IAChD,mBAAmB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;IACtD,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACnD,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClE,wBAAwB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACvD,mBAAmB,EAAE,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;IACrE,uBAAuB,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;IAC7D,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAAC;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,eAAO,MAAM,0BAA0B,EAAE,gBAIxC,CAAC;AAEF,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC;IAMjE;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI;IAQtD,OAAO,CAAC,QAAQ;CAkDjB"}

package/dist/core/ReapGuard.js

@@ -0,0 +1,114 @@
+/**
+ * ReapGuard — the shared, stateless "is it safe to reap this session?" guard.
+ *
+ * Spec: docs/specs/unified-session-lifecycle-robustness.md §P2.
+ *
+ * Extracted from `SessionReaper.evaluate()` so that EVERY autonomous killer —
+ * not just the careful new reaper — consults the same positive-evidence KEEP
+ * checks before a session is ended. The single ReapAuthority
+ * (`SessionManager.terminateSession`) calls this guard; a non-null result means
+ * the session must be KEPT and the terminate is a no-op.
+ *
+ * Scope is the STATELESS guards only (deps-driven, no per-tick observation
+ * state): protected, spawn-grace, recovery-in-flight, pending-injection,
+ * relay-lease, recent-user-message, open-commitment, active-subagent,
+ * structural-long-work, active-process, main-process-uninspectable/active.
+ *
+ * The STATEFUL checks — transcript-growth (compares against the previous tick)
+ * and positive-idle proof (needs a captured pane frame) — stay inside
+ * `SessionReaper.evaluate()`, which calls this guard FIRST (preserving the exact
+ * keptBy ordering) and then layers its own per-instance checks.
+ *
+ * Ordering is identical to the original `evaluate()` so a refactor preserves
+ * every `keptBy` reason for the same input (asserted by the reaper's tests).
+ */
+export const DEFAULT_REAP_GUARD_OPTIONS = {
+    minAgeMs: 30 * 60_000,
+    recentUserWindowMs: 30 * 60_000,
+    protectOpenCommitments: true,
+};
+export class ReapGuard {
+    deps;
+    opts;
+    now;
+    constructor(deps, opts) {
+        this.deps = deps;
+        this.opts = { ...DEFAULT_REAP_GUARD_OPTIONS, ...(opts ?? {}) };
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /**
+     * Returns the reason this session must be KEPT (not reaped), or `null` if all
+     * stateless guards clear. Cheap-first ordering: in-memory checks before any
+     * subprocess fork (process tree / main-process probe) so a guarded session is
+     * rejected without paying for a capture.
+     *
+     * Never throws — a thrown signal source is caught and resolved to KEEP
+     * ('guard-error'), because we can never reason about a session we cannot
+     * inspect, and the safe answer is always "keep".
+     */
+    blockedReason(session) {
+        try {
+            return this.evaluate(session);
+        }
+        catch {
+            return { reason: 'guard-error', confidence: 'low' };
+        }
+    }
+    evaluate(session) {
+        const keep = (reason, confidence = 'high') => ({
+            reason,
+            confidence,
+        });
+        // ── Cheap, in-memory guards first (no subprocess fork) ──
+        // A. Protected set.
+        if (this.deps.protectedSessions().includes(session.tmuxSession))
+            return keep('protected');
+        // M. Spawn grace — a freshly-spawned session that hasn't had time to produce
+        //    output yet must not be reaped. Skipped when minAgeMs is 0.
+        if (this.opts.minAgeMs > 0 && session.startedAt) {
+            const ageMs = this.now() - Date.parse(session.startedAt);
+            if (!(ageMs >= this.opts.minAgeMs))
+                return keep('spawn-grace');
+        }
+        // G. Recovery in flight — a kill-to-respawn is mid-flight; never race it.
+        if (this.deps.isRecoveryActive(session))
+            return keep('recovery-in-flight');
+        // H. Pending injection (a message is waiting to be delivered to the session).
+        if (this.deps.hasPendingInjection(session.tmuxSession))
+            return keep('pending-injection');
+        // Relay lease (an agent-to-agent relay holds this session).
+        if (this.deps.isRelayLeaseActive(session.id))
+            return keep('relay-lease');
+        const topicId = this.deps.topicBinding(session.tmuxSession);
+        // I. Recent user interaction on the bound topic.
+        if (topicId != null && this.deps.recentUserMessage(topicId, this.opts.recentUserWindowMs)) {
+            return keep('recent-user-message');
+        }
+        // J. Open commitment on the bound topic.
+        if (this.opts.protectOpenCommitments && topicId != null && this.deps.activeCommitmentForTopic(topicId)) {
+            return keep('open-commitment');
+        }
+        // K. Active subagent spawned by this session.
+        if (this.deps.activeSubagentCount(session.claudeSessionId) > 0)
+            return keep('active-subagent');
+        // L. Structural long-work (build / autonomous) on the topic/project.
+        if (this.deps.buildOrAutonomousActive(topicId))
+            return keep('structural-long-work');
+        // ── Activeness (positive-evidence) — may fork a subprocess ──
+        // C. Process tree: any non-baseline child ⇒ working.
+        if (this.deps.hasActiveProcesses(session.tmuxSession))
+            return keep('active-process');
+        // C(main). Main-process CPU/IO delta. undefined ⇒ cannot inspect ⇒ KEEP (low).
+        if (this.deps.mainProcessActive) {
+            const mp = this.deps.mainProcessActive(session.tmuxSession);
+            if (mp === undefined)
+                return keep('process-uninspectable', 'low');
+            if (mp === true)
+                return keep('main-process-active');
+        }
+        // All stateless guards clear. (The reaper layers transcript-growth +
+        // positive-idle after this; other killers proceed to terminate.)
+        return null;
+    }
+}
+//# sourceMappingURL=ReapGuard.js.map

package/dist/core/ReapGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReapGuard.js","sourceRoot":"","sources":["../../src/core/ReapGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA0CH,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,QAAQ,EAAE,EAAE,GAAG,MAAM;IACrB,kBAAkB,EAAE,EAAE,GAAG,MAAM;IAC/B,sBAAsB,EAAE,IAAI;CAC7B,CAAC;AAEF,MAAM,OAAO,SAAS;IACH,IAAI,CAAgB;IACpB,IAAI,CAAmB;IACvB,GAAG,CAAe;IAEnC,YAAY,IAAmB,EAAE,IAAgC;QAC/D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,0BAA0B,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAgB;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,OAAgB;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,aAA6B,MAAM,EAAkB,EAAE,CAAC,CAAC;YACrF,MAAM;YACN,UAAU;SACX,CAAC,CAAC;QAEH,2DAA2D;QAC3D,oBAAoB;QACpB,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1F,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QACjE,CAAC;QACD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC3E,8EAA8E;QAC9E,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzF,4DAA4D;QAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC5D,iDAAiD;QACjD,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1F,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrC,CAAC;QACD,yCAAyC;QACzC,IAAI,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;YACvG,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;QACD,8CAA8C;QAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/F,qEAAqE;QACrE,IAAI,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAEpF,+DAA+D;QAC/D,qDAAqD;QACrD,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrF,+EAA+E;QAC/E,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAClE,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACtD,CAAC;QAED,qEAAqE;QACrE,iEAAiE;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/core/SessionLivenessOracle.d.ts

@@ -0,0 +1,104 @@
+/**
+ * SessionLivenessOracle — the single, tri-state answer to "is this tmux session
+ * alive?" for every autonomous session killer.
+ *
+ * Spec: docs/specs/unified-session-lifecycle-robustness.md §P1.
+ *
+ * The 2026-05-27 incident: the boot purge probed `tmux has-session` with a 1s
+ * timeout inside a bare try/catch, so a *timeout* (tmux busy at boot) threw the
+ * same error as "session gone" — and live sessions were mass-purged. The oracle
+ * is the structural fix:
+ *
+ *   - `dead` is returned ONLY on a definitive negative: the tmux server is
+ *     reachable (a `list-sessions` succeeded) AND the session's exact canonical
+ *     id is absent from that list. Never inferred from a prefix match, an
+ *     unrecognized error string, or an exit code.
+ *   - Anything else — timeout, server-unreachable, ENOENT/EPIPE, unknown failure
+ *     — is `indeterminate`. The hard rule (enforced by every caller) is: NEVER
+ *     transition a session to killed on `indeterminate`. Indeterminate means
+ *     "ask again next tick," never "reap now."
+ *
+ * Performance contract (§P1): liveness for the whole set is resolved from ONE
+ * `tmux list-sessions` (no per-session fork), cached for a short TTL so multiple
+ * killers in one tick never re-probe. The list call is async (never
+ * execFileSync), retried once with backoff, and bounded by a total wall-clock
+ * cap so a slow tmux can never block boot — unresolved sessions are left
+ * `indeterminate` and finished by the first monitoring tick.
+ */
+export type Liveness = 'alive' | 'dead' | 'indeterminate';
+export interface LivenessResult {
+    liveness: Liveness;
+    /** Diagnostic reason — for the reap-log / debugging, never user-facing prose. */
+    reason: string;
+}
+export interface SessionLivenessOracleConfig {
+    /** Per-attempt timeout for the `list-sessions` probe (ms). Must be > a floor. */
+    probeTimeoutMs: number;
+    /** Retries (in addition to the first attempt) on a transient/unreachable result. */
+    probeRetries: number;
+    /** Backoff between retries (ms). */
+    probeBackoffMs: number;
+    /** Total wall-clock cap across all attempts (ms). On cap → indeterminate. */
+    bootCapMs: number;
+    /** How long a successful list snapshot is trusted before a refresh (ms). */
+    cacheTtlMs: number;
+}
+export declare const DEFAULT_LIVENESS_CONFIG: SessionLivenessOracleConfig;
+/** Floors enforced at startup validation (a 0ms timeout would re-create the death spiral). */
+export declare const LIVENESS_FLOORS: {
+    readonly minProbeTimeoutMs: 1000;
+    readonly minBootCapMs: 2000;
+};
+type ExecFn = (file: string, args: string[], opts: {
+    timeout: number;
+}) => Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+export interface SessionLivenessOracleDeps {
+    tmuxPath: string;
+    /** promisified execFile — injected for testability. */
+    exec: ExecFn;
+    now?: () => number;
+    /** Optional sink for diagnostics. */
+    log?: (msg: string) => void;
+}
+/**
+ * Validate a liveness config against the floors. Returns an array of human-readable
+ * problems (empty = valid). Called at startup so a nonsensical knob is rejected
+ * loudly rather than silently re-creating the boot-purge bug.
+ */
+export declare function validateLivenessConfig(cfg: Partial<SessionLivenessOracleConfig>): string[];
+export declare class SessionLivenessOracle {
+    private readonly cfg;
+    private readonly deps;
+    private readonly now;
+    private snapshot;
+    private snapshotAt;
+    /** Coalesce concurrent refreshes so N killers in one tick share one tmux call. */
+    private inflight;
+    constructor(deps: SessionLivenessOracleDeps, cfg?: Partial<SessionLivenessOracleConfig>);
+    /**
+     * Liveness for a single session. Uses the cached list snapshot when fresh,
+     * otherwise refreshes (one shared tmux call). Never throws.
+     */
+    probe(tmuxSession: string): Promise<LivenessResult>;
+    /**
+     * Liveness for many sessions resolved from ONE snapshot. This is the boot-purge
+     * path: one `tmux list-sessions` for the whole tracked set, no per-session fork.
+     */
+    probeAll(tmuxSessions: string[]): Promise<Map<string, LivenessResult>>;
+    /** Force the next probe to re-read tmux (used by tests / after a known change). */
+    invalidate(): void;
+    private classify;
+    private ensureSnapshot;
+    /**
+     * One `tmux list-sessions`, retried up to probeRetries on a transient/unreachable
+     * result, bounded by bootCapMs total. Returns an authoritative snapshot only when
+     * tmux answered definitively (success, or a clean "no server running").
+     */
+    private refresh;
+    private listOnce;
+}
+export {};
+//# sourceMappingURL=SessionLivenessOracle.d.ts.map

package/dist/core/SessionLivenessOracle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionLivenessOracle.d.ts","sourceRoot":"","sources":["../../src/core/SessionLivenessOracle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,eAAe,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,iFAAiF;IACjF,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,uBAAuB,EAAE,2BAMrC,CAAC;AAEF,8FAA8F;AAC9F,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AAEX,KAAK,MAAM,GAAG,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,KACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,qCAAqC;IACrC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAWD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,MAAM,EAAE,CAkB1F;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAAK;IACvB,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAsC;gBAE1C,IAAI,EAAE,yBAAyB,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC;IAMvF;;;OAGG;IACG,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAKzD;;;OAGG;IACG,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAO5E,mFAAmF;IACnF,UAAU,IAAI,IAAI;IAKlB,OAAO,CAAC,QAAQ;YAYF,cAAc;IAoB5B;;;;OAIG;YACW,OAAO;YAmBP,QAAQ;CA4BvB"}

package/dist/core/SessionLivenessOracle.js

@@ -0,0 +1,201 @@
+/**
+ * SessionLivenessOracle — the single, tri-state answer to "is this tmux session
+ * alive?" for every autonomous session killer.
+ *
+ * Spec: docs/specs/unified-session-lifecycle-robustness.md §P1.
+ *
+ * The 2026-05-27 incident: the boot purge probed `tmux has-session` with a 1s
+ * timeout inside a bare try/catch, so a *timeout* (tmux busy at boot) threw the
+ * same error as "session gone" — and live sessions were mass-purged. The oracle
+ * is the structural fix:
+ *
+ *   - `dead` is returned ONLY on a definitive negative: the tmux server is
+ *     reachable (a `list-sessions` succeeded) AND the session's exact canonical
+ *     id is absent from that list. Never inferred from a prefix match, an
+ *     unrecognized error string, or an exit code.
+ *   - Anything else — timeout, server-unreachable, ENOENT/EPIPE, unknown failure
+ *     — is `indeterminate`. The hard rule (enforced by every caller) is: NEVER
+ *     transition a session to killed on `indeterminate`. Indeterminate means
+ *     "ask again next tick," never "reap now."
+ *
+ * Performance contract (§P1): liveness for the whole set is resolved from ONE
+ * `tmux list-sessions` (no per-session fork), cached for a short TTL so multiple
+ * killers in one tick never re-probe. The list call is async (never
+ * execFileSync), retried once with backoff, and bounded by a total wall-clock
+ * cap so a slow tmux can never block boot — unresolved sessions are left
+ * `indeterminate` and finished by the first monitoring tick.
+ */
+export const DEFAULT_LIVENESS_CONFIG = {
+    probeTimeoutMs: 5000,
+    probeRetries: 1,
+    probeBackoffMs: 250,
+    bootCapMs: 8000,
+    cacheTtlMs: 3000,
+};
+/** Floors enforced at startup validation (a 0ms timeout would re-create the death spiral). */
+export const LIVENESS_FLOORS = {
+    minProbeTimeoutMs: 1000,
+    minBootCapMs: 2000,
+};
+/**
+ * Validate a liveness config against the floors. Returns an array of human-readable
+ * problems (empty = valid). Called at startup so a nonsensical knob is rejected
+ * loudly rather than silently re-creating the boot-purge bug.
+ */
+export function validateLivenessConfig(cfg) {
+    const problems = [];
+    if (cfg.probeTimeoutMs != null && cfg.probeTimeoutMs < LIVENESS_FLOORS.minProbeTimeoutMs) {
+        problems.push(`liveness.probeTimeoutMs (${cfg.probeTimeoutMs}) is below the floor ${LIVENESS_FLOORS.minProbeTimeoutMs}ms — ` +
+            `a too-short probe re-creates the 2026-05-27 false-purge (slow tmux read as dead).`);
+    }
+    if (cfg.probeRetries != null && cfg.probeRetries < 0) {
+        problems.push(`liveness.probeRetries (${cfg.probeRetries}) must be >= 0.`);
+    }
+    if (cfg.bootCapMs != null && cfg.bootCapMs < LIVENESS_FLOORS.minBootCapMs) {
+        problems.push(`liveness.bootCapMs (${cfg.bootCapMs}) is below the floor ${LIVENESS_FLOORS.minBootCapMs}ms.`);
+    }
+    if (cfg.cacheTtlMs != null && cfg.cacheTtlMs < 0) {
+        problems.push(`liveness.cacheTtlMs (${cfg.cacheTtlMs}) must be >= 0.`);
+    }
+    return problems;
+}
+export class SessionLivenessOracle {
+    cfg;
+    deps;
+    now;
+    snapshot = null;
+    snapshotAt = 0;
+    /** Coalesce concurrent refreshes so N killers in one tick share one tmux call. */
+    inflight = null;
+    constructor(deps, cfg) {
+        this.deps = deps;
+        this.cfg = { ...DEFAULT_LIVENESS_CONFIG, ...(cfg ?? {}) };
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /**
+     * Liveness for a single session. Uses the cached list snapshot when fresh,
+     * otherwise refreshes (one shared tmux call). Never throws.
+     */
+    async probe(tmuxSession) {
+        const snap = await this.ensureSnapshot();
+        return this.classify(tmuxSession, snap);
+    }
+    /**
+     * Liveness for many sessions resolved from ONE snapshot. This is the boot-purge
+     * path: one `tmux list-sessions` for the whole tracked set, no per-session fork.
+     */
+    async probeAll(tmuxSessions) {
+        const snap = await this.ensureSnapshot();
+        const out = new Map();
+        for (const name of tmuxSessions)
+            out.set(name, this.classify(name, snap));
+        return out;
+    }
+    /** Force the next probe to re-read tmux (used by tests / after a known change). */
+    invalidate() {
+        this.snapshot = null;
+        this.snapshotAt = 0;
+    }
+    classify(tmuxSession, snap) {
+        if (!snap.authoritative) {
+            // Could not get ground truth — slow/unreachable tmux. NEVER dead.
+            return { liveness: 'indeterminate', reason: snap.reason };
+        }
+        // Authoritative snapshot: exact-id membership is ground truth.
+        if (snap.names.has(tmuxSession)) {
+            return { liveness: 'alive', reason: 'present-in-list' };
+        }
+        return { liveness: 'dead', reason: 'absent-from-reachable-server' };
+    }
+    async ensureSnapshot() {
+        const fresh = this.snapshot && this.now() - this.snapshotAt < this.cfg.cacheTtlMs;
+        if (fresh)
+            return this.snapshot;
+        if (this.inflight)
+            return this.inflight;
+        this.inflight = this.refresh()
+            .then((snap) => {
+            // Only cache an authoritative snapshot; a transient failure must not be
+            // sticky (else one bad tick freezes liveness for the whole TTL).
+            if (snap.authoritative) {
+                this.snapshot = snap;
+                this.snapshotAt = this.now();
+            }
+            return snap;
+        })
+            .finally(() => {
+            this.inflight = null;
+        });
+        return this.inflight;
+    }
+    /**
+     * One `tmux list-sessions`, retried up to probeRetries on a transient/unreachable
+     * result, bounded by bootCapMs total. Returns an authoritative snapshot only when
+     * tmux answered definitively (success, or a clean "no server running").
+     */
+    async refresh() {
+        const deadline = this.now() + this.cfg.bootCapMs;
+        let lastReason = 'no-attempt';
+        for (let attempt = 0; attempt <= this.cfg.probeRetries; attempt++) {
+            if (attempt > 0) {
+                if (this.now() >= deadline) {
+                    return { authoritative: false, names: new Set(), reason: `boot-cap-exceeded(${lastReason})` };
+                }
+                await delay(this.cfg.probeBackoffMs);
+            }
+            const remaining = Math.max(0, deadline - this.now());
+            const timeout = Math.min(this.cfg.probeTimeoutMs, remaining || this.cfg.probeTimeoutMs);
+            const res = await this.listOnce(timeout);
+            if (res.authoritative)
+                return res;
+            lastReason = res.reason;
+        }
+        return { authoritative: false, names: new Set(), reason: lastReason };
+    }
+    async listOnce(timeout) {
+        try {
+            const { stdout } = await this.deps.exec(this.deps.tmuxPath, ['list-sessions', '-F', '#{session_name}'], { timeout });
+            const names = new Set(stdout
+                .split('\n')
+                .map((s) => s.trim())
+                .filter(Boolean));
+            return { authoritative: true, names, reason: 'list-ok' };
+        }
+        catch (err) {
+            // tmux exits non-zero with "no server running on ..." when there is no
+            // server at all. That is an AUTHORITATIVE "no sessions exist" — but we
+            // treat it conservatively: only classify it authoritative-empty when the
+            // message is the recognized no-server string. Any other error (timeout,
+            // ENOENT, EPIPE, unknown) is non-authoritative → indeterminate.
+            const msg = errText(err);
+            if (/no server running/i.test(msg)) {
+                return { authoritative: true, names: new Set(), reason: 'no-server-running' };
+            }
+            if (isTimeout(err))
+                return { authoritative: false, names: new Set(), reason: 'probe-timeout' };
+            return { authoritative: false, names: new Set(), reason: `probe-error:${truncate(msg, 80)}` };
+        }
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function errText(err) {
+    if (err && typeof err === 'object') {
+        const e = err;
+        return (e.stderr || e.message || String(err)).toString();
+    }
+    return String(err);
+}
+function isTimeout(err) {
+    if (err && typeof err === 'object') {
+        const e = err;
+        // execFile timeout kills the child with SIGTERM and sets killed=true.
+        return e.killed === true || e.signal === 'SIGTERM' || e.code === 'ETIMEDOUT';
+    }
+    return false;
+}
+function truncate(s, n) {
+    return s.length > n ? s.slice(0, n) : s;
+}
+//# sourceMappingURL=SessionLivenessOracle.js.map

package/dist/core/SessionLivenessOracle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionLivenessOracle.js","sourceRoot":"","sources":["../../src/core/SessionLivenessOracle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAuBH,MAAM,CAAC,MAAM,uBAAuB,GAAgC;IAClE,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE,CAAC;IACf,cAAc,EAAE,GAAG;IACnB,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,iBAAiB,EAAE,IAAI;IACvB,YAAY,EAAE,IAAI;CACV,CAAC;AA0BX;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAyC;IAC9E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,IAAI,GAAG,CAAC,cAAc,GAAG,eAAe,CAAC,iBAAiB,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CACX,4BAA4B,GAAG,CAAC,cAAc,wBAAwB,eAAe,CAAC,iBAAiB,OAAO;YAC5G,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,IAAI,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,YAAY,iBAAiB,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,GAAG,CAAC,SAAS,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,SAAS,wBAAwB,eAAe,CAAC,YAAY,KAAK,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,wBAAwB,GAAG,CAAC,UAAU,iBAAiB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,qBAAqB;IACf,GAAG,CAA8B;IACjC,IAAI,CAA4B;IAChC,GAAG,CAAe;IAC3B,QAAQ,GAAwB,IAAI,CAAC;IACrC,UAAU,GAAG,CAAC,CAAC;IACvB,kFAAkF;IAC1E,QAAQ,GAAiC,IAAI,CAAC;IAEtD,YAAY,IAA+B,EAAE,GAA0C;QACrF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,YAAsB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,YAAY;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mFAAmF;IACnF,UAAU;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IACtB,CAAC;IAEO,QAAQ,CAAC,WAAmB,EAAE,IAAkB;QACtD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,kEAAkE;YAClE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5D,CAAC;QACD,+DAA+D;QAC/D,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAClF,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,QAAS,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE;aAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,wEAAwE;YACxE,iEAAiE;YACjE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QACjD,IAAI,UAAU,GAAG,YAAY,CAAC;QAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;YAClE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,qBAAqB,UAAU,GAAG,EAAE,CAAC;gBAChG,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,aAAa;gBAAE,OAAO,GAAG,CAAC;YAClC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAe;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAClB,CAAC,eAAe,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAC1C,EAAE,OAAO,EAAE,CACZ,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM;iBACH,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;YACF,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,wEAAwE;YACxE,gEAAgE;YAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAChF,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAC/F,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,eAAe,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAChG,CAAC;IACH,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAA4C,CAAC;QACvD,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAA2D,CAAC;QACtE,sEAAsE;QACtE,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC"}