local-serverless-stack 1.0.0 → 1.1.0

package/dist/server/services/service-scanner.js

@@ -22,7 +22,7 @@ const IGNORED_DIRS = new Set([
 // Beyond this depth a hit is more likely a fixture than a service; the scan
 // stays fast on monorepos either way.
 const MAX_DEPTH = 6;
-export function scanForServices(rootDir, registeredRoots) {
+export function scanForServices(rootDir, registeredRoots, options = {}) {
     const registered = new Set([...registeredRoots].map(root => path.resolve(root)));
     const found = [];
     walk(path.resolve(rootDir), 0);
@@ -38,7 +38,11 @@ export function scanForServices(rootDir, registeredRoots) {
         }
         const configFile = CONFIG_FILES.find(name => entries.some(e => e.isFile() && e.name === name));
         if (configFile) {
-            found.push(inspect(dir, configFile));
+            // An ignored stack is still a leaf: it is a service, just not one this
+            // project registers locally, so descending into it would only surface
+            // its fixtures.
+            if (!options.isIgnored?.(dir))
+                found.push(inspect(dir, configFile));
             // A service root is a leaf: nested serverless configs under one service
             // are fixtures/templates, not independently registrable services.
             return;
@@ -63,10 +67,15 @@ export function scanForServices(rootDir, registeredRoots) {
             });
         }
         if (!packaged) {
-            warnings.push({
-                code: 'not-packaged',
-                message: 'not packaged yet — registration will package it (autoPackage) or run `serverless package` first',
-            });
+            warnings.push(options.autoPackage
+                ? {
+                    code: 'not-packaged',
+                    message: 'not packaged yet — registration will package it (autoPackage)',
+                }
+                : {
+                    code: 'not-packaged-manual',
+                    message: 'not packaged yet — autoPackage is off, so run `serverless package` before registering',
+                });
         }
         return {
             name: hints.name ?? path.basename(dir),
@@ -79,6 +88,7 @@ export function scanForServices(rootDir, registeredRoots) {
             region: hints.region,
             apiPort: hints.apiPort,
             invokePort: hints.invokePort,
+            hasFunctions: hints.hasFunctions,
             warnings,
         };
     }
@@ -139,6 +149,8 @@ function readHints(configPath, warnings) {
                 region: typeof parsed.provider?.region === 'string' ? parsed.provider.region : undefined,
                 apiPort: asPort(parsed.custom?.lss?.apiPort),
                 invokePort: asPort(parsed.custom?.lss?.invokePort),
+                // JSON leaves nothing to guess: the key is there with entries, or it is not.
+                hasFunctions: Object.keys((parsed.functions ?? {})).length > 0,
             };
         }
         catch {
@@ -146,7 +158,7 @@ function readHints(configPath, warnings) {
             return {};
         }
     }
-    const hints = {};
+    const hints = { hasFunctions: scrapeHasFunctions(raw) };
     for (const line of raw.split('\n')) {
         let match = /^service:\s*['"]?([\w-]+)['"]?\s*$/.exec(line);
         if (match && !hints.name)
@@ -165,6 +177,40 @@ function readHints(configPath, warnings) {
     }
     return hints;
 }
+/**
+ * Does this serverless.yml declare any function?
+ *
+ *   no `functions:` key at all      → false (a resources-only stack)
+ *   `functions:` + an indented key  → true
+ *   `functions: ${file(./fns.yml)}` → undefined — the value is resolved at
+ *                                     packaging time, and claiming "no
+ *                                     functions" for a service that has 23 is
+ *                                     the failure this hint must never cause.
+ *
+ * Line-oriented like the rest of readHints: this informs a form field, and the
+ * packaged state is what registration actually reads.
+ */
+function scrapeHasFunctions(raw) {
+    const lines = raw.split('\n');
+    const index = lines.findIndex(line => /^functions:/.test(line));
+    if (index === -1)
+        return false;
+    const inline = lines[index].slice('functions:'.length).trim();
+    // Anything on the same line is a reference or an inline map — neither is a
+    // count this scrape can trust. `functions: {}` is the one honest exception.
+    if (inline)
+        return inline === '{}' ? false : undefined;
+    for (const line of lines.slice(index + 1)) {
+        if (!line.trim() || /^\s*#/.test(line))
+            continue;
+        // Dedented back to column 0: the block ended without an entry.
+        if (!/^\s/.test(line))
+            return false;
+        if (/^\s+[^\s#-][^:]*:/.test(line))
+            return true;
+    }
+    return false;
+}
 function asPort(value) {
     return typeof value === 'number' && Number.isInteger(value) && value >= 1 && value <= 65535
         ? value

package/dist/server/services/service-scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-scanner.js","sourceRoot":"","sources":["../../../src/server/services/service-scanner.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,6BAA6B;AAC7B,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAsCxB,MAAM,YAAY,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;AAE/F,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,4BAA4B;AAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;IACnE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO;CAC7E,CAAC,CAAC;AAEH,4EAA4E;AAC5E,sCAAsC;AACtC,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,eAAiC;IAChF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,kDAAkD;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhE,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,4CAA4C;QACtD,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YACrC,wEAAwE;YACxE,kEAAkE;YAClE,OAAO;QACT,CAAC;QAED,IAAI,KAAK,IAAI,SAAS;YAAE,OAAO;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,SAAS,OAAO,CAAC,GAAW,EAAE,UAAkB;QAC9C,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,2CAA2C,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,yFAAyF;aACnG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,iGAAiG;aAC3G,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACtC,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG;YACzD,UAAU;YACV,SAAS;YACT,QAAQ;YACR,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ;SACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,6EAA6E;AAC7E,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW,EAAE,OAAe;IACnD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,SAAS,CAAC;QACR,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC;;;;0CAIkC;QAClC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AASD,6EAA6E;AAC7E,6EAA6E;AAC7E,uCAAuC;AACvC,SAAS,SAAS,CAAC,UAAkB,EAAE,QAAuB;IAC5D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,kBAAkB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;YACtD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;SAC5C,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAI5B,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACrE,MAAM,EAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;gBAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;aACnD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACtF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK;QACzF,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}
+{"version":3,"file":"service-scanner.js","sourceRoot":"","sources":["../../../src/server/services/service-scanner.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,6BAA6B;AAC7B,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AA0DxB,MAAM,YAAY,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;AAE/F,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,4BAA4B;AAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;IACnE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO;CAC7E,CAAC,CAAC;AAEH,4EAA4E;AAC5E,sCAAsC;AACtC,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,eAAiC,EACjC,UAAuB,EAAE;IAEzB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,kDAAkD;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhE,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,4CAA4C;QACtD,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAI,UAAU,EAAE,CAAC;YACf,uEAAuE;YACvE,sEAAsE;YACtE,gBAAgB;YAChB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YACpE,wEAAwE;YACxE,kEAAkE;YAClE,OAAO;QACT,CAAC;QAED,IAAI,KAAK,IAAI,SAAS;YAAE,OAAO;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,SAAS,OAAO,CAAC,GAAW,EAAE,UAAkB;QAC9C,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,2CAA2C,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,yFAAyF;aACnG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW;gBAC/B,CAAC,CAAC;oBACA,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,+DAA+D;iBACzE;gBACD,CAAC,CAAC;oBACA,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,uFAAuF;iBACjG,CAAC,CAAC;QACP,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACtC,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG;YACzD,UAAU;YACV,SAAS;YACT,QAAQ;YACR,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ;SACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,6EAA6E;AAC7E,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW,EAAE,OAAe;IACnD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,SAAS,CAAC;QACR,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC;;;;0CAIkC;QAClC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,6EAA6E;AAC7E,6EAA6E;AAC7E,uCAAuC;AACvC,SAAS,SAAS,CAAC,UAAkB,EAAE,QAAuB;IAC5D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,kBAAkB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;YACtD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;SAC5C,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAK5B,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACrE,MAAM,EAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;gBAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;gBAClD,6EAA6E;gBAC7E,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC,CAAC,MAAM,GAAG,CAAC;aAC1F,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACtF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAU,EAAE,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAAM;QAAE,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACjD,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK;QACzF,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/server/services/source-watcher.d.ts

@@ -15,6 +15,7 @@ export declare class SourceWatcher {
     static getInstance(): SourceWatcher;
     setHandlers(handlers: ReloadHandlers): void;
     watch(serviceName: string, root: string): void;
+    private ownStatePaths;
     unwatch(serviceName: string): void;
     unwatchAll(): void;
     getStatus(serviceName: string): WatchStatus;

package/dist/server/services/source-watcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-watcher.d.ts","sourceRoot":"","sources":["../../../src/server/services/source-watcher.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAYD,MAAM,WAAW,cAAc;IAE7B,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAMD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,QAAQ,CAAC,CAAiB;IAElC,MAAM,CAAC,WAAW,IAAI,aAAa;IAOnC,WAAW,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IAe3C,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAkC9C,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAQlC,UAAU,IAAI,IAAI;IAMlB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW;IAI3C,OAAO,CAAC,QAAQ;YAmBF,MAAM;CAiBrB"}
+{"version":3,"file":"source-watcher.d.ts","sourceRoot":"","sources":["../../../src/server/services/source-watcher.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD,MAAM,WAAW,cAAc;IAE7B,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAMD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,QAAQ,CAAC,CAAiB;IAElC,MAAM,CAAC,WAAW,IAAI,aAAa;IAOnC,WAAW,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IAe3C,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IA4C9C,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAQlC,UAAU,IAAI,IAAI;IAMlB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW;IAI3C,OAAO,CAAC,QAAQ;YAoBF,MAAM;CAiBrB"}

package/dist/server/services/source-watcher.js

@@ -4,6 +4,8 @@
 // need a re-package + re-registration, which the caller wires in.
 import fs from 'fs';
 import path from 'path';
+import { ConfigManager } from './config-manager.js';
+import { ignoredSubpaths, isIgnoredSubpath } from './worker-runtime.js';
 const DEBOUNCE_MS = 500;
 const IGNORED_SEGMENTS = new Set(['node_modules', '.serverless', '.esbuild', '.build', '.git', 'dist', '.lss']);
 const FULL_RELOAD_FILES = new Set(['serverless.yml', 'serverless.yaml', 'serverless.json', 'package.json']);
@@ -34,6 +36,7 @@ export class SourceWatcher {
     watch(serviceName, root) {
         this.unwatch(serviceName);
         const watchers = [];
+        const ignored = this.ownStatePaths(root);
         const add = (dir, recursive, prefix) => {
             const watcher = fs.watch(dir, { recursive }, (_event, filename) => {
                 const name = filename ? String(filename) : '';
@@ -48,12 +51,13 @@ export class SourceWatcher {
         try {
             add(root, false, '');
             for (const entry of fs.readdirSync(root, { withFileTypes: true })) {
-                if (!entry.isDirectory() || IGNORED_SEGMENTS.has(entry.name))
+                if (!entry.isDirectory() || IGNORED_SEGMENTS.has(entry.name) || ignored.includes(entry.name))
                     continue;
                 add(path.join(root, entry.name), true, entry.name);
             }
             this.watched.set(serviceName, {
                 root,
+                ignored,
                 watchers,
                 pendingFullReload: false,
                 status: { watching: true },
@@ -66,6 +70,18 @@ export class SourceWatcher {
             console.warn(`⚠️  Could not watch ${root}: ${err instanceof Error ? err.message : err}`);
         }
     }
+    // Directories LSS itself writes to while serving: the configured stateDir
+    // (which also holds the CLI's orchestrator.pid / orchestrator.log whenever a
+    // stateDir is set) and the engine's data dir (snapshots + WAL, written on
+    // every mutation). Placed inside a service — `"stateDir": ".lss-state"` in a
+    // single-service repo is the natural spelling — each write fired a reload,
+    // the reload's own activity wrote again, and the runtime restarted forever.
+    // Only paths inside the watched root matter; the default locations live
+    // under ~/.lss and the OS temp dir and are dropped by ignoredSubpaths().
+    ownStatePaths(root) {
+        const config = ConfigManager.getInstance();
+        return ignoredSubpaths(root, [config.getStateDir(), config.getSelfEngineConfig().dataDir]);
+    }
     unwatch(serviceName) {
         const watched = this.watched.get(serviceName);
         if (!watched)
@@ -91,6 +107,8 @@ export class SourceWatcher {
         const segments = filename.split(path.sep);
         if (segments.some(s => IGNORED_SEGMENTS.has(s)))
             return;
+        if (isIgnoredSubpath(filename, watched.ignored))
+            return;
         if (FULL_RELOAD_FILES.has(path.basename(filename)) && segments.length === 1) {
             watched.pendingFullReload = true;
         }

package/dist/server/services/source-watcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-watcher.js","sourceRoot":"","sources":["../../../src/server/services/source-watcher.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,kEAAkE;AAElE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AA0BxB,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAChH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;AAE5G,MAAM,OAAO,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IAC/B,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,QAAQ,CAAkB;IAElC,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,WAAW,CAAC,QAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,oDAAoD;IACpD,EAAE;IACF,uEAAuE;IACvE,0EAA0E;IAC1E,iBAAiB;IACjB,KAAK,CAAC,WAAmB,EAAE,IAAY;QACrC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,SAAkB,EAAE,MAAc,EAAQ,EAAE;YACpE,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACxB,OAAO,CAAC,IAAI,CAAC,oBAAoB,WAAW,aAAa,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACrB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACvE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC5B,IAAI;gBACJ,QAAQ;gBACR,iBAAiB,EAAE,KAAK;gBACxB,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,0BAA0B,WAAW,MAAM,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,uBAAuB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,WAAmB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,OAAO,CAAC,QAAQ;YAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED,UAAU;QACR,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IAEO,QAAQ,CAAC,WAAmB,EAAE,QAAgB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO;QAElC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QAExD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACnC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ;YAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,OAAO,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAClC,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,EAAE,WAAW,CAAC,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,OAAuB,EAAE,IAAwB;QACzF,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC7H,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YACrC,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5E,OAAO,CAAC,KAAK,CAAC,wBAAwB,WAAW,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"source-watcher.js","sourceRoot":"","sources":["../../../src/server/services/source-watcher.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,kEAAkE;AAElE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AA6BxE,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAChH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;AAE5G,MAAM,OAAO,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IAC/B,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,QAAQ,CAAkB;IAElC,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,WAAW,CAAC,QAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,oDAAoD;IACpD,EAAE;IACF,uEAAuE;IACvE,0EAA0E;IAC1E,iBAAiB;IACjB,KAAK,CAAC,WAAmB,EAAE,IAAY;QACrC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,SAAkB,EAAE,MAAc,EAAQ,EAAE;YACpE,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACxB,OAAO,CAAC,IAAI,CAAC,oBAAoB,WAAW,aAAa,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACrB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACvG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC5B,IAAI;gBACJ,OAAO;gBACP,QAAQ;gBACR,iBAAiB,EAAE,KAAK;gBACxB,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,0BAA0B,WAAW,MAAM,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,uBAAuB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACjE,aAAa,CAAC,IAAY;QAChC,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,CAAC,WAAmB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,OAAO,CAAC,QAAQ;YAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED,UAAU;QACR,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IAEO,QAAQ,CAAC,WAAmB,EAAE,QAAgB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO;QAElC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QACxD,IAAI,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO;QAExD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACnC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ;YAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,OAAO,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAClC,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,EAAE,WAAW,CAAC,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,OAAuB,EAAE,IAAwB;QACzF,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC7H,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YACrC,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5E,OAAO,CAAC,KAAK,CAAC,wBAAwB,WAAW,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF"}

package/dist/server/services/worker-runtime.d.ts

@@ -0,0 +1,82 @@
+export interface WorkerEnvOptions {
+    region: string;
+    engineEndpoint: string;
+    serviceRoot: string;
+    serviceEnv?: Record<string, string>;
+}
+/**
+ * The environment a forked runtime worker starts with.
+ *
+ * Every SDK client a handler creates without an explicit endpoint must land on
+ * the engine, not on AWS: `AWS_ENDPOINT_URL` is the variable AWS SDK v3 (and
+ * the CLI, boto3, SDK v2 >= 2.1580) reads for that — `AWS_ENDPOINT`, which
+ * many templates set, is only a convention that code has to read by hand.
+ * Credentials are the engine's dummy pair and the region is the service's.
+ *
+ * What the orchestrator inherited is the BASE, not the authority: a
+ * service-specific `AWS_ENDPOINT_URL_<SERVICE>` exported in the operator's
+ * shell would outrank the generic endpoint inside the SDK, so those are dropped
+ * too. A template or override that sets any of these explicitly still wins —
+ * `serviceEnv` here at fork, function env per invocation in the worker.
+ */
+export declare function buildWorkerEnv(parentEnv: NodeJS.ProcessEnv, options: WorkerEnvOptions): NodeJS.ProcessEnv;
+/**
+ * The env one invocation runs with. Precedence, lowest first: the template's
+ * function environment (provider + function level, already merged by the
+ * packager), then `serviceRuntime.<svc>.env`, then
+ * `serviceRuntime.<svc>.functions.<fn>.env` — the override closest to the
+ * function wins, the way a function-level `environment:` beats the provider's.
+ */
+export declare function resolveInvocationEnv(templateEnv: Record<string, string> | undefined, serviceEnv: Record<string, string> | undefined, functionEnv: Record<string, string> | undefined): Record<string, string>;
+/**
+ * Every `node_modules` directory the service would resolve through, nearest
+ * first — its own, then each ancestor's (a workspace monorepo hoists most
+ * dependencies to the repo root, so the service's own dir is often partial or
+ * absent).
+ */
+export declare function ancestorNodeModules(serviceRoot: string): string[];
+/**
+ * Make bare specifiers resolve from an artifact extracted OUTSIDE the service.
+ *
+ * The extraction lives under ~/.lss, so a bundle that keeps a package external
+ * (`import pg from 'pg'`) has no node_modules anywhere above it. CommonJS gets
+ * by on NODE_PATH; ESM does not — the ESM resolver ignores NODE_PATH entirely
+ * and only walks the importing file's parent directories. So the walk is given
+ * something to find: `<extractDir>/node_modules` links to the nearest
+ * node_modules of the service, and `<extractDir>/../node_modules` (the
+ * per-service directory that holds the content-addressed extractions) to the
+ * next one up — which covers the service's own dependencies plus a monorepo's
+ * hoisted root. Node resolves a package to its realpath, so the package's own
+ * imports then resolve from inside the service tree as usual.
+ *
+ * An artifact that ships its own node_modules (non-bundled packaging) is
+ * self-contained and left untouched. A link already pointing at the right
+ * place is kept; one pointing elsewhere (the service moved) is replaced.
+ * Linking is best effort: a filesystem that refuses links (some Windows setups)
+ * costs only the ESM externals, so it warns instead of failing the boot.
+ *
+ * Returns the links that now exist, as `[link, target]` pairs.
+ */
+export declare function linkArtifactNodeModules(extractDir: string, serviceRoot: string): Array<[string, string]>;
+/** Null when `value` is an acceptable execArgv list, else the error message. */
+export declare function execArgvError(key: string, value: unknown): string | null;
+/**
+ * A warning when the functions declare a Node runtime (`nodejs20.x`) whose
+ * major differs from the Node the workers run on — handlers are executed by
+ * the orchestrator's own Node, so a template targeting 18 that leans on an API
+ * only 22 has (or the reverse) would pass locally and fail deployed. Null when
+ * every declared Node runtime matches, or none is a Node runtime at all.
+ */
+export declare function runtimeMismatchWarning(serviceName: string, runtimes: Array<string | undefined>, nodeVersion: string): string | null;
+/**
+ * The paths among `candidates` that sit strictly INSIDE `root`, returned
+ * relative to it (platform separators) — the form the watcher's event
+ * filenames arrive in. Candidates outside the root, or equal to it, are
+ * dropped: ignoring the root itself would silently disable the watch. Both
+ * sides are realpath-resolved when they exist, so a symlinked checkout still
+ * matches.
+ */
+export declare function ignoredSubpaths(root: string, candidates: Array<string | undefined>): string[];
+/** True when `filename` (relative to the watched root) is, or is under, one of `ignored`. */
+export declare function isIgnoredSubpath(filename: string, ignored: string[]): boolean;
+//# sourceMappingURL=worker-runtime.d.ts.map

package/dist/server/services/worker-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-runtime.d.ts","sourceRoot":"","sources":["../../../src/server/services/worker-runtime.ts"],"names":[],"mappings":"AAqCA,MAAM,WAAW,gBAAgB;IAE/B,MAAM,EAAE,MAAM,CAAC;IAEf,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IAGpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,CAAC,UAAU,EAC5B,OAAO,EAAE,gBAAgB,GACxB,MAAM,CAAC,UAAU,CAoBnB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC9C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAExB;AAcD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAUjE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAmCxG;AAyDD,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAoBxE;AAMD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EACnC,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAWf;AAcD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAU7F;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAE7E"}

package/dist/server/services/worker-runtime.js

@@ -0,0 +1,303 @@
+// Pure helpers behind the Lambda runtime worker's process setup: the env a
+// forked worker starts with, the per-invocation env merge, the node_modules
+// links that let an extracted artifact resolve bare ESM specifiers, the
+// execArgv fence for the config API, the `runtime` vs Node major check, and
+// the paths the source watcher must never react to.
+//
+// Split out of LambdaRuntimeManager / SourceWatcher (both integration-only:
+// they fork processes and drive fs.watch) so every rule here is unit-tested.
+import fs from 'fs';
+import path from 'path';
+// ---------------------------------------------------------------------------
+// Worker environment
+// ---------------------------------------------------------------------------
+// Credential and profile variables the ORCHESTRATOR may carry from the
+// operator's shell. A forked worker must never inherit them: a handler with
+// the developer's real session token, pointed at an endpoint it did not
+// expect, is how local code ends up writing to a real account. The AWS SDK
+// credential chain reads env credentials first, then the profile — so the
+// session token (which would be paired with the dummy key below and rejected,
+// or worse, accepted) and the profile selectors all go.
+const INHERITED_AWS_VARS_TO_DROP = [
+    'AWS_SESSION_TOKEN',
+    'AWS_SECURITY_TOKEN',
+    'AWS_PROFILE',
+    'AWS_DEFAULT_PROFILE',
+    'AWS_ROLE_ARN',
+    'AWS_ROLE_SESSION_NAME',
+    'AWS_WEB_IDENTITY_TOKEN_FILE',
+    'AWS_CREDENTIAL_EXPIRATION',
+    'AWS_CONTAINER_CREDENTIALS_RELATIVE_URI',
+    'AWS_CONTAINER_CREDENTIALS_FULL_URI',
+    'AWS_CONTAINER_AUTHORIZATION_TOKEN',
+];
+/**
+ * The environment a forked runtime worker starts with.
+ *
+ * Every SDK client a handler creates without an explicit endpoint must land on
+ * the engine, not on AWS: `AWS_ENDPOINT_URL` is the variable AWS SDK v3 (and
+ * the CLI, boto3, SDK v2 >= 2.1580) reads for that — `AWS_ENDPOINT`, which
+ * many templates set, is only a convention that code has to read by hand.
+ * Credentials are the engine's dummy pair and the region is the service's.
+ *
+ * What the orchestrator inherited is the BASE, not the authority: a
+ * service-specific `AWS_ENDPOINT_URL_<SERVICE>` exported in the operator's
+ * shell would outrank the generic endpoint inside the SDK, so those are dropped
+ * too. A template or override that sets any of these explicitly still wins —
+ * `serviceEnv` here at fork, function env per invocation in the worker.
+ */
+export function buildWorkerEnv(parentEnv, options) {
+    const env = { ...parentEnv };
+    for (const key of INHERITED_AWS_VARS_TO_DROP)
+        delete env[key];
+    for (const key of Object.keys(env)) {
+        if (key.startsWith('AWS_ENDPOINT_URL_'))
+            delete env[key];
+    }
+    Object.assign(env, {
+        AWS_ENDPOINT_URL: options.engineEndpoint,
+        AWS_ACCESS_KEY_ID: 'test',
+        AWS_SECRET_ACCESS_KEY: 'test',
+        AWS_REGION: options.region,
+        AWS_DEFAULT_REGION: options.region,
+        // Bundled artifacts with externalized deps still resolve against the
+        // service's own node_modules — for CommonJS. ESM ignores NODE_PATH; see
+        // linkArtifactNodeModules() for that half.
+        NODE_PATH: [path.join(options.serviceRoot, 'node_modules'), parentEnv.NODE_PATH || '']
+            .filter(Boolean)
+            .join(path.delimiter),
+    });
+    return { ...env, ...(options.serviceEnv ?? {}) };
+}
+/**
+ * The env one invocation runs with. Precedence, lowest first: the template's
+ * function environment (provider + function level, already merged by the
+ * packager), then `serviceRuntime.<svc>.env`, then
+ * `serviceRuntime.<svc>.functions.<fn>.env` — the override closest to the
+ * function wins, the way a function-level `environment:` beats the provider's.
+ */
+export function resolveInvocationEnv(templateEnv, serviceEnv, functionEnv) {
+    return { ...(templateEnv ?? {}), ...(serviceEnv ?? {}), ...(functionEnv ?? {}) };
+}
+// ---------------------------------------------------------------------------
+// Artifact node_modules
+// ---------------------------------------------------------------------------
+function isDirectory(target) {
+    try {
+        return fs.statSync(target).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Every `node_modules` directory the service would resolve through, nearest
+ * first — its own, then each ancestor's (a workspace monorepo hoists most
+ * dependencies to the repo root, so the service's own dir is often partial or
+ * absent).
+ */
+export function ancestorNodeModules(serviceRoot) {
+    const found = [];
+    let dir = path.resolve(serviceRoot);
+    for (;;) {
+        const candidate = path.join(dir, 'node_modules');
+        if (isDirectory(candidate))
+            found.push(candidate);
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return found;
+        dir = parent;
+    }
+}
+/**
+ * Make bare specifiers resolve from an artifact extracted OUTSIDE the service.
+ *
+ * The extraction lives under ~/.lss, so a bundle that keeps a package external
+ * (`import pg from 'pg'`) has no node_modules anywhere above it. CommonJS gets
+ * by on NODE_PATH; ESM does not — the ESM resolver ignores NODE_PATH entirely
+ * and only walks the importing file's parent directories. So the walk is given
+ * something to find: `<extractDir>/node_modules` links to the nearest
+ * node_modules of the service, and `<extractDir>/../node_modules` (the
+ * per-service directory that holds the content-addressed extractions) to the
+ * next one up — which covers the service's own dependencies plus a monorepo's
+ * hoisted root. Node resolves a package to its realpath, so the package's own
+ * imports then resolve from inside the service tree as usual.
+ *
+ * An artifact that ships its own node_modules (non-bundled packaging) is
+ * self-contained and left untouched. A link already pointing at the right
+ * place is kept; one pointing elsewhere (the service moved) is replaced.
+ * Linking is best effort: a filesystem that refuses links (some Windows setups)
+ * costs only the ESM externals, so it warns instead of failing the boot.
+ *
+ * Returns the links that now exist, as `[link, target]` pairs.
+ */
+export function linkArtifactNodeModules(extractDir, serviceRoot) {
+    const own = path.join(extractDir, 'node_modules');
+    const ownStat = lstatOrNull(own);
+    if (ownStat && !ownStat.isSymbolicLink())
+        return [];
+    const targets = ancestorNodeModules(serviceRoot);
+    const slots = [extractDir, path.dirname(extractDir)];
+    const links = [];
+    slots.forEach((slot, index) => {
+        const target = targets[index];
+        if (!target)
+            return;
+        const link = path.join(slot, 'node_modules');
+        try {
+            const existing = lstatOrNull(link);
+            if (existing) {
+                // Anything that is not one of our links is someone else's directory.
+                if (!existing.isSymbolicLink())
+                    return;
+                if (fs.readlinkSync(link) === target) {
+                    links.push([link, target]);
+                    return;
+                }
+                fs.unlinkSync(link);
+            }
+            // 'junction' makes the call succeed on Windows without the symlink
+            // privilege; it is ignored everywhere else.
+            fs.symlinkSync(target, link, 'junction');
+            links.push([link, target]);
+        }
+        catch (err) {
+            console.warn(`⚠️  Could not link ${link} -> ${target}: ${err instanceof Error ? err.message : String(err)} ` +
+                '(ESM imports of external packages from the artifact will not resolve)');
+        }
+    });
+    return links;
+}
+function lstatOrNull(target) {
+    try {
+        return fs.lstatSync(target);
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// execArgv fence
+// ---------------------------------------------------------------------------
+// Node flags a worker may be forked with when the value arrives through
+// PUT /api/config. That endpoint is unauthenticated and execArgv reaches
+// fork() verbatim, so an open list would be code execution one flag away
+// (`--import data:…`, `--require /tmp/x.js`, `--loader`, `--eval`). An
+// allowlist rather than a blocklist, because node grows new code-loading flags
+// and a blocklist silently goes stale. The set is what a developer actually
+// reaches for: a debugger, source maps, heap/stack sizing, diagnostics.
+//
+// Like every other fence in config-manager.ts this guards the API only — a
+// hand-edited lss.config.json is the operator's own shell and is read as is.
+const EXEC_ARGV_BARE_FLAGS = new Set([
+    '--enable-source-maps',
+    '--trace-warnings',
+    '--trace-deprecation',
+    '--trace-uncaught',
+    '--no-warnings',
+    '--no-deprecation',
+    '--expose-gc',
+    '--experimental-strip-types',
+    '--no-experimental-strip-types',
+    '--experimental-transform-types',
+    '--experimental-vm-modules',
+    '--experimental-require-module',
+    '--inspect',
+    '--inspect-brk',
+    '--inspect-wait',
+]);
+const EXEC_ARGV_NUMERIC_FLAGS = new Set([
+    '--max-old-space-size',
+    '--max-semi-space-size',
+    '--stack-size',
+    '--stack-trace-limit',
+]);
+const INSPECT_FLAGS = new Set(['--inspect', '--inspect-brk', '--inspect-wait', '--inspect-port']);
+const UNHANDLED_REJECTION_MODES = new Set(['throw', 'strict', 'warn', 'none', 'warn-with-error-code']);
+// A debugger is remote code execution for whoever can reach its port, so the
+// inspector may only bind the loopback: `--inspect=9230`,
+// `--inspect=127.0.0.1:9230`, `--inspect=localhost:9230`, `--inspect=[::1]:9230`.
+const LOOPBACK_INSPECT_VALUE = /^(?:(?:127\.0\.0\.1|localhost|\[::1\]):)?\d{1,5}$/;
+/** Null when `value` is an acceptable execArgv list, else the error message. */
+export function execArgvError(key, value) {
+    if (!Array.isArray(value) || !value.every(v => typeof v === 'string')) {
+        return `"${key}" must be an array of strings`;
+    }
+    for (const [index, flag] of value.entries()) {
+        const eq = flag.indexOf('=');
+        const name = eq === -1 ? flag : flag.slice(0, eq);
+        const arg = eq === -1 ? undefined : flag.slice(eq + 1);
+        const ok = arg === undefined
+            ? EXEC_ARGV_BARE_FLAGS.has(name)
+            : (INSPECT_FLAGS.has(name) && LOOPBACK_INSPECT_VALUE.test(arg))
+                || (EXEC_ARGV_NUMERIC_FLAGS.has(name) && /^\d+$/.test(arg))
+                || (name === '--unhandled-rejections' && UNHANDLED_REJECTION_MODES.has(arg));
+        if (!ok) {
+            return `"${key}[${index}]": "${flag}" is not an allowed worker flag — through the config API execArgv accepts ` +
+                'only debugger (loopback), source-map, memory/stack sizing and diagnostic flags; ' +
+                'set anything else by editing lss.config.json';
+        }
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// runtime vs Node major
+// ---------------------------------------------------------------------------
+/**
+ * A warning when the functions declare a Node runtime (`nodejs20.x`) whose
+ * major differs from the Node the workers run on — handlers are executed by
+ * the orchestrator's own Node, so a template targeting 18 that leans on an API
+ * only 22 has (or the reverse) would pass locally and fail deployed. Null when
+ * every declared Node runtime matches, or none is a Node runtime at all.
+ */
+export function runtimeMismatchWarning(serviceName, runtimes, nodeVersion) {
+    const workerMajor = Number(nodeVersion.replace(/^v/, '').split('.')[0]);
+    const declared = new Set();
+    for (const runtime of runtimes) {
+        const match = /^nodejs(\d+)\.x$/.exec(runtime ?? '');
+        if (match)
+            declared.add(Number(match[1]));
+    }
+    const mismatched = [...declared].filter(major => major !== workerMajor).sort((a, b) => a - b);
+    if (mismatched.length === 0)
+        return null;
+    return `⚠️  "${serviceName}" declares ${mismatched.map(m => `nodejs${m}.x`).join(', ')} but its Lambda workers ` +
+        `run on Node ${workerMajor} (the orchestrator's) — behaviour that differs between the two majors will not show up locally`;
+}
+// ---------------------------------------------------------------------------
+// Watcher exclusions
+// ---------------------------------------------------------------------------
+function realpathOrSelf(target) {
+    try {
+        return fs.realpathSync(target);
+    }
+    catch {
+        return target;
+    }
+}
+/**
+ * The paths among `candidates` that sit strictly INSIDE `root`, returned
+ * relative to it (platform separators) — the form the watcher's event
+ * filenames arrive in. Candidates outside the root, or equal to it, are
+ * dropped: ignoring the root itself would silently disable the watch. Both
+ * sides are realpath-resolved when they exist, so a symlinked checkout still
+ * matches.
+ */
+export function ignoredSubpaths(root, candidates) {
+    const realRoot = realpathOrSelf(path.resolve(root));
+    const result = new Set();
+    for (const candidate of candidates) {
+        if (!candidate)
+            continue;
+        const relative = path.relative(realRoot, realpathOrSelf(path.resolve(candidate)));
+        if (!relative || relative.startsWith('..') || path.isAbsolute(relative))
+            continue;
+        result.add(relative);
+    }
+    return [...result];
+}
+/** True when `filename` (relative to the watched root) is, or is under, one of `ignored`. */
+export function isIgnoredSubpath(filename, ignored) {
+    return ignored.some(rel => filename === rel || filename.startsWith(rel + path.sep));
+}
+//# sourceMappingURL=worker-runtime.js.map

package/dist/server/services/worker-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-runtime.js","sourceRoot":"","sources":["../../../src/server/services/worker-runtime.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AACxE,4EAA4E;AAC5E,oDAAoD;AACpD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAE7E,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,uEAAuE;AACvE,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,wDAAwD;AACxD,MAAM,0BAA0B,GAAG;IACjC,mBAAmB;IACnB,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,cAAc;IACd,uBAAuB;IACvB,6BAA6B;IAC7B,2BAA2B;IAC3B,wCAAwC;IACxC,oCAAoC;IACpC,mCAAmC;CACpC,CAAC;AAaF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA4B,EAC5B,OAAyB;IAEzB,MAAM,GAAG,GAAsB,EAAE,GAAG,SAAS,EAAE,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,0BAA0B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;QACjB,gBAAgB,EAAE,OAAO,CAAC,cAAc;QACxC,iBAAiB,EAAE,MAAM;QACzB,qBAAqB,EAAE,MAAM;QAC7B,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,kBAAkB,EAAE,OAAO,CAAC,MAAM;QAClC,qEAAqE;QACrE,wEAAwE;QACxE,2CAA2C;QAC3C,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;aACnF,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;KACxB,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAA+C,EAC/C,UAA8C,EAC9C,WAA+C;IAE/C,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,WAAW,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACjC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,WAAmB;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,CAAC;IAEpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,EAAE,CAAC;gBACb,qEAAqE;gBACrE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE;oBAAE,OAAO;gBACvC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBACD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,mEAAmE;YACnE,4CAA4C;YAC5C,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,sBAAsB,IAAI,OAAO,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;gBAC7F,uEAAuE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,aAAa;IACb,4BAA4B;IAC5B,+BAA+B;IAC/B,gCAAgC;IAChC,2BAA2B;IAC3B,+BAA+B;IAC/B,WAAW;IACX,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,sBAAsB;IACtB,uBAAuB;IACvB,cAAc;IACd,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACvH,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAE5H,6EAA6E;AAC7E,0DAA0D;AAC1D,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,mDAAmD,CAAC;AAEnF,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAc;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,GAAG,+BAA+B,CAAC;IAChD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAK,KAAkB,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,GAAG,KAAK,SAAS;YAC1B,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;mBAC1D,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;mBACxD,CAAC,IAAI,KAAK,wBAAwB,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,IAAI,GAAG,IAAI,KAAK,QAAQ,IAAI,4EAA4E;gBAC7G,kFAAkF;gBAClF,8CAA8C,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,QAAmC,EACnC,WAAmB;IAEnB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,QAAQ,WAAW,cAAc,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B;QAC9G,eAAe,WAAW,gGAAgG,CAAC;AAC/H,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,UAAqC;IACjF,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAClF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,OAAiB;IAClE,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtF,CAAC"}