rightsize 0.1.2 → 0.2.0

package/dist/core/network.js.map

@@ -1 +1 @@
-{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/core/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwB1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,OAAO;IAClB,yDAAyD;IAChD,EAAE,CAAS;IACH,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IACpD,OAAO,GAAuB,EAAE,CAAC;IAC1C,WAAW,CAA6B;IAEhD,YAAoB,EAAU;QAC5B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,2HAA2H;IAC3H,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,OAAO,CAAC,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,qGAAqG;IACrG,OAAO,CAAC,KAAa,EAAE,SAAiB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,EAAE,iBAAiB,KAAK,yBAAyB,SAAS,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,iBAAiB;QACf,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBACjD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAqB,EAAE,OAA8B,EAAE,OAAuB;QACrF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACjD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACzB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/core/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAuBlD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,OAAO;IAClB,yDAAyD;IAChD,EAAE,CAAS;IACH,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IACpD,OAAO,GAAuB,EAAE,CAAC;IAC1C,WAAW,CAA6B;IAEhD,YAAoB,EAAU;QAC5B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,2HAA2H;IAC3H,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,OAAO,CAAC,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,qGAAqG;IACrG,OAAO,CAAC,KAAa,EAAE,SAAiB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,EAAE,iBAAiB,KAAK,yBAAyB,SAAS,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,iBAAiB;QACf,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBACjD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAqB,EAAE,OAA8B,EAAE,OAAuB;QACrF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACjD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACzB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/core/reaper/env.d.ts

@@ -0,0 +1,14 @@
+/** `RIGHTSIZE_REAPER`'s three modes: both layers, sweep only, or fully disabled. */
+export type ReaperMode = "on" | "sweep" | "off";
+/**
+ * Parses `RIGHTSIZE_REAPER`. Unset or unrecognized values both mean `"on"` —
+ * the same "unknown values are treated as the safe default" convention the
+ * rest of this library's env vars follow, rather than failing a whole
+ * process over a typo'd opt-out.
+ */
+export declare function reaperMode(env: Record<string, string | undefined>): ReaperMode;
+/** `sweep` and `on` both run the init-time sweep; only `off` turns it off. */
+export declare function sweepEnabled(mode: ReaperMode): boolean;
+/** Only `on` (the default) spawns the per-run watchdog process. */
+export declare function watchdogEnabled(mode: ReaperMode): boolean;
+//# sourceMappingURL=env.d.ts.map

package/dist/core/reaper/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/core/reaper/env.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,OAAO,GAAG,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,UAAU,CAM9E;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAEtD;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAEzD"}

package/dist/core/reaper/env.js

@@ -0,0 +1,22 @@
+/**
+ * Parses `RIGHTSIZE_REAPER`. Unset or unrecognized values both mean `"on"` —
+ * the same "unknown values are treated as the safe default" convention the
+ * rest of this library's env vars follow, rather than failing a whole
+ * process over a typo'd opt-out.
+ */
+export function reaperMode(env) {
+    const raw = env["RIGHTSIZE_REAPER"];
+    if (raw === "sweep" || raw === "off") {
+        return raw;
+    }
+    return "on";
+}
+/** `sweep` and `on` both run the init-time sweep; only `off` turns it off. */
+export function sweepEnabled(mode) {
+    return mode !== "off";
+}
+/** Only `on` (the default) spawns the per-run watchdog process. */
+export function watchdogEnabled(mode) {
+    return mode === "on";
+}
+//# sourceMappingURL=env.js.map

package/dist/core/reaper/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/core/reaper/env.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAuC;IAChE,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,OAAO,IAAI,KAAK,KAAK,CAAC;AACxB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,OAAO,IAAI,KAAK,IAAI,CAAC;AACvB,CAAC"}

package/dist/core/reaper/init.d.ts

@@ -0,0 +1,39 @@
+import type { SandboxBackend } from "../backend.js";
+import { type WatchdogHandle } from "./watchdog.js";
+/**
+ * Runs the full reaper bring-up exactly once per process: writes this run's
+ * record, sweeps every OTHER dead run whose backend matches, and (unless
+ * disabled) spawns the watchdog. Best-effort end to end — any failure here
+ * is swallowed so a broken cache dir or a sweep hiccup never prevents the
+ * backend from being usable; `active` simply never gets set, and every
+ * ledger call for the rest of this process's life is a no-op.
+ */
+export declare function ensureReaperInitialized(backend: SandboxBackend): Promise<void>;
+/** Appends a sandbox name to this process's ledger — a no-op unless the reaper has actually initialized (or is disabled). */
+export declare function trackSandbox(name: string): Promise<void>;
+/** Removes a sandbox name from this process's ledger, pruning the run's ledger files if nothing is left tracked. */
+export declare function untrackSandbox(name: string): Promise<void>;
+/** Appends a network id to this process's ledger. */
+export declare function trackNetwork(networkId: string): Promise<void>;
+/** Removes a network id from this process's ledger, pruning the run's ledger files if nothing is left tracked. */
+export declare function untrackNetwork(networkId: string): Promise<void>;
+/**
+ * The run-record cleanup rule's other trigger (see `ledger.ts`'s
+ * `pruneIfEmpty` for the first one): called once, after the active
+ * backend's own `close()` has finished its own-run cleanup (`Backends`'
+ * `beforeExit` hook awaits `close()`, then calls this). `close()` already
+ * removed every sandbox this run still had running (via its own run-id-
+ * label/`startedNames` scan), so whatever `.sandboxes`/`.networks` still
+ * list at this point is stale — deleted unconditionally rather than only
+ * when empty, since a later container start recreates the files from
+ * scratch anyway. No-op if the reaper never initialized (or already ran
+ * this) for this process.
+ */
+export declare function notifyBackendClosed(): Promise<void>;
+/** Test seam: whether the reaper has actually initialized in this process. Never call from library code. */
+export declare function _isActiveForTests(): boolean;
+/** Test seam: the held watchdog handle, if one was spawned — so a test can close its pipe rather than leaking a blocked child process. Never call from library code. */
+export declare function _heldWatchdogForTests(): WatchdogHandle | undefined;
+/** Test seam: forces the next `ensureReaperInitialized` call to redo the full bring-up. Never call from library code. */
+export declare function _resetReaperForTests(): void;
+//# sourceMappingURL=init.d.ts.map

package/dist/core/reaper/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/core/reaper/init.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAapD,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AA8EnE;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9E;AAED,6HAA6H;AAC7H,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9D;AAED,oHAAoH;AACpH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhE;AAED,qDAAqD;AACrD,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnE;AAED,kHAAkH;AAClH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOzD;AAED,4GAA4G;AAC5G,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wKAAwK;AACxK,wBAAgB,qBAAqB,IAAI,cAAc,GAAG,SAAS,CAElE;AAED,yHAAyH;AACzH,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C"}

package/dist/core/reaper/init.js

@@ -0,0 +1,140 @@
+import { cacheDir } from "../cache-dir.js";
+import { RunId } from "../run-id.js";
+import { writeRunRecord, appendSandboxName, removeSandboxName, appendNetworkId, removeNetworkId, deleteRunRecordFiles, } from "./ledger.js";
+import { recordPath, sandboxesPath, networksPath } from "./run-record.js";
+import { realProcessTimeSource, THIS_PROCESS_STARTED_ISO } from "./process-liveness.js";
+import { sweepOnce } from "./sweep.js";
+import { reaperMode, sweepEnabled, watchdogEnabled } from "./env.js";
+import { spawnWatchdog } from "./watchdog.js";
+let active;
+let initPromise;
+let heldWatchdog;
+function backendKindOf(backend) {
+    // The only two backends this library ships. A third backend module would
+    // need a third LedgerBackendKind value and an update here.
+    return backend.name === "microsandbox" ? "msb" : "docker";
+}
+async function doInit(backend) {
+    const mode = reaperMode(process.env);
+    if (!sweepEnabled(mode)) {
+        // "off": no run record, no ledger tracking, no sweep, no watchdog —
+        // this process's containers are simply never listed anywhere for a
+        // later sweep to find.
+        return;
+    }
+    const dir = cacheDir();
+    const runId = RunId.value;
+    const backendKind = backendKindOf(backend);
+    const killCommand = await backend.reaperKillCommand();
+    // msb's `remove` prefix is always `[msbPath, "rm"]` (see
+    // MsbCliBackend.reaperKillCommand) — reusing it here avoids a second SPI
+    // method whose only job would be exposing the same path.
+    const msbPath = backendKind === "msb" ? killCommand.remove[0] : undefined;
+    const record = msbPath === undefined
+        ? { pid: process.pid, startedIso: THIS_PROCESS_STARTED_ISO, backend: backendKind }
+        : { pid: process.pid, startedIso: THIS_PROCESS_STARTED_ISO, backend: backendKind, msbPath };
+    // Written BEFORE this process's first sandbox is created — the caller
+    // (Backends.reaperReady(), awaited by GenericContainer.start() before its
+    // first backend.create()) guarantees that ordering.
+    await writeRunRecord(dir, runId, record);
+    active = { cacheDir: dir, runId };
+    await sweepOnce({
+        cacheDir: dir,
+        thisRunId: runId,
+        backendKind,
+        removeByName: (name) => backend.removeByName(name),
+        removeNetwork: (networkId) => backend.removeNetwork(networkId),
+        timeSource: realProcessTimeSource,
+    });
+    if (watchdogEnabled(mode)) {
+        heldWatchdog = await spawnWatchdog({
+            cacheDir: dir,
+            sandboxesPath: sandboxesPath(dir, runId),
+            networksPath: networksPath(dir, runId),
+            recordPath: recordPath(dir, runId),
+            killCommand,
+            // The Windows script polls for this pid instead of blocking on
+            // stdin EOF; see watchdog.ts's windowsScriptContent doc.
+            ownerPid: process.pid,
+        });
+    }
+}
+/**
+ * Runs the full reaper bring-up exactly once per process: writes this run's
+ * record, sweeps every OTHER dead run whose backend matches, and (unless
+ * disabled) spawns the watchdog. Best-effort end to end — any failure here
+ * is swallowed so a broken cache dir or a sweep hiccup never prevents the
+ * backend from being usable; `active` simply never gets set, and every
+ * ledger call for the rest of this process's life is a no-op.
+ */
+export function ensureReaperInitialized(backend) {
+    if (initPromise === undefined) {
+        initPromise = doInit(backend).catch(() => {
+            // Swallowed — see the doc above.
+        });
+    }
+    return initPromise;
+}
+/** Appends a sandbox name to this process's ledger — a no-op unless the reaper has actually initialized (or is disabled). */
+export async function trackSandbox(name) {
+    if (active === undefined) {
+        return;
+    }
+    await appendSandboxName(active.cacheDir, active.runId, name);
+}
+/** Removes a sandbox name from this process's ledger, pruning the run's ledger files if nothing is left tracked. */
+export async function untrackSandbox(name) {
+    if (active === undefined) {
+        return;
+    }
+    await removeSandboxName(active.cacheDir, active.runId, name);
+}
+/** Appends a network id to this process's ledger. */
+export async function trackNetwork(networkId) {
+    if (active === undefined) {
+        return;
+    }
+    await appendNetworkId(active.cacheDir, active.runId, networkId);
+}
+/** Removes a network id from this process's ledger, pruning the run's ledger files if nothing is left tracked. */
+export async function untrackNetwork(networkId) {
+    if (active === undefined) {
+        return;
+    }
+    await removeNetworkId(active.cacheDir, active.runId, networkId);
+}
+/**
+ * The run-record cleanup rule's other trigger (see `ledger.ts`'s
+ * `pruneIfEmpty` for the first one): called once, after the active
+ * backend's own `close()` has finished its own-run cleanup (`Backends`'
+ * `beforeExit` hook awaits `close()`, then calls this). `close()` already
+ * removed every sandbox this run still had running (via its own run-id-
+ * label/`startedNames` scan), so whatever `.sandboxes`/`.networks` still
+ * list at this point is stale — deleted unconditionally rather than only
+ * when empty, since a later container start recreates the files from
+ * scratch anyway. No-op if the reaper never initialized (or already ran
+ * this) for this process.
+ */
+export async function notifyBackendClosed() {
+    if (active === undefined) {
+        return;
+    }
+    const { cacheDir, runId } = active;
+    active = undefined;
+    await deleteRunRecordFiles(cacheDir, runId);
+}
+/** Test seam: whether the reaper has actually initialized in this process. Never call from library code. */
+export function _isActiveForTests() {
+    return active !== undefined;
+}
+/** Test seam: the held watchdog handle, if one was spawned — so a test can close its pipe rather than leaking a blocked child process. Never call from library code. */
+export function _heldWatchdogForTests() {
+    return heldWatchdog;
+}
+/** Test seam: forces the next `ensureReaperInitialized` call to redo the full bring-up. Never call from library code. */
+export function _resetReaperForTests() {
+    active = undefined;
+    initPromise = undefined;
+    heldWatchdog = undefined;
+}
+//# sourceMappingURL=init.js.map

package/dist/core/reaper/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/core/reaper/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAA0C,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AAgBnE,IAAI,MAAgC,CAAC;AACrC,IAAI,WAAsC,CAAC;AAC3C,IAAI,YAAwC,CAAC;AAE7C,SAAS,aAAa,CAAC,OAAuB;IAC5C,yEAAyE;IACzE,2DAA2D;IAC3D,OAAO,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAuB;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,oEAAoE;QACpE,mEAAmE;QACnE,uBAAuB;QACvB,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACtD,yDAAyD;IACzD,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,OAAO,GAAG,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,MAAM,MAAM,GACV,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,wBAAwB,EAAE,OAAO,EAAE,WAAW,EAAE;QAClF,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,wBAAwB,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IAEhG,sEAAsE;IACtE,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAElC,MAAM,SAAS,CAAC;QACd,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,KAAK;QAChB,WAAW;QACX,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;QAClD,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC;QAC9D,UAAU,EAAE,qBAAqB;KAClC,CAAC,CAAC;IAEH,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,YAAY,GAAG,MAAM,aAAa,CAAC;YACjC,QAAQ,EAAE,GAAG;YACb,aAAa,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;YACxC,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC;YACtC,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC;YAClC,WAAW;YACX,+DAA+D;YAC/D,yDAAyD;YACzD,QAAQ,EAAE,OAAO,CAAC,GAAG;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAuB;IAC7D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACvC,iCAAiC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,6HAA6H;AAC7H,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACnC,MAAM,GAAG,SAAS,CAAC;IACnB,MAAM,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,KAAK,SAAS,CAAC;AAC9B,CAAC;AAED,wKAAwK;AACxK,MAAM,UAAU,qBAAqB;IACnC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,SAAS,CAAC;IACnB,WAAW,GAAG,SAAS,CAAC;IACxB,YAAY,GAAG,SAAS,CAAC;AAC3B,CAAC"}

package/dist/core/reaper/ledger.d.ts

@@ -0,0 +1,32 @@
+import { parseRunRecord, type RunRecord } from "./run-record.js";
+/** Best-effort delete of all three of a run's ledger files. Never throws — a file already gone is not an error. */
+export declare function deleteRunRecordFiles(cacheDir: string, runId: string): Promise<void>;
+/** Atomically writes `runs/<run-id>.json` (tmp file + rename) — called once, before this run's first sandbox is created. */
+export declare function writeRunRecord(cacheDir: string, runId: string, record: RunRecord): Promise<void>;
+/** Appends a sandbox name to `runs/<run-id>.sandboxes` — called BEFORE the backend's `create()` call. */
+export declare function appendSandboxName(cacheDir: string, runId: string, name: string): Promise<void>;
+/** Removes a sandbox name from `runs/<run-id>.sandboxes` — called AFTER a successful stop/remove; prunes the run's ledger files if this was the last thing tracked. */
+export declare function removeSandboxName(cacheDir: string, runId: string, name: string): Promise<void>;
+/** Appends a network id to `runs/<run-id>.networks` — same protocol as `appendSandboxName`. */
+export declare function appendNetworkId(cacheDir: string, runId: string, networkId: string): Promise<void>;
+/** Removes a network id from `runs/<run-id>.networks` — same protocol as `removeSandboxName`. */
+export declare function removeNetworkId(cacheDir: string, runId: string, networkId: string): Promise<void>;
+/**
+ * Reads every sandbox name currently tracked for a run. Serialized behind the
+ * same lock as the writers: writeLines truncates before it writes, so an
+ * unserialized read racing a rewrite could observe a torn (empty) file. The
+ * cross-process readers (a sweep judging a DEAD run, the watchdog after its
+ * owner died) need no lock — their run's writer no longer exists.
+ */
+export declare function readSandboxNames(cacheDir: string, runId: string): Promise<string[]>;
+/** Reads every network id currently tracked for a run — used by the sweep to know what to reap. */
+export declare function readNetworkIds(cacheDir: string, runId: string): Promise<string[]>;
+/** Every other run's `<run-id>.json` filename (without extension) currently under `runs/` — the sweep's iteration set. Missing `runs/` directory yields an empty list. */
+export declare function listRunIds(cacheDir: string): Promise<string[]>;
+/** Reads and parses one run's record, plus the file's mtime (used to age an unparseable record). `undefined` body means the file vanished (a concurrent sweep or the run's own clean shutdown already removed it). */
+export declare function readRunRecordRaw(cacheDir: string, runId: string): Promise<{
+    text: string;
+    mtimeMs: number;
+} | undefined>;
+export { parseRunRecord };
+//# sourceMappingURL=ledger.d.ts.map

package/dist/core/reaper/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../../src/core/reaper/ledger.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,cAAc,EAEd,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AAqDzB,mHAAmH;AACnH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzF;AA4BD,4HAA4H;AAC5H,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAStG;AAED,yGAAyG;AACzG,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMpG;AAED,uKAAuK;AACvK,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOpG;AAED,+FAA+F;AAC/F,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvG;AAED,iGAAiG;AACjG,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOvG;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEzF;AAED,mGAAmG;AACnG,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEvF;AAED,0KAA0K;AAC1K,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQpE;AAED,sNAAsN;AACtN,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAQxD;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/core/reaper/ledger.js

@@ -0,0 +1,160 @@
+import * as fsp from "node:fs/promises";
+import * as path from "node:path";
+import { recordPath, runsDir, sandboxesPath, networksPath, parseRunRecord, serializeRunRecord, } from "./run-record.js";
+/**
+ * Every write this module makes is guarded by a single process-wide chain —
+ * this process only ever owns its own ledger files, so one chain (not one
+ * per file) is enough to make append/remove/prune read-modify-write safe
+ * against concurrent callers within THIS process. Cross-process safety is a
+ * non-goal by design: the feature spec only requires "atomic enough for
+ * single-process use," since two different processes never share a run id.
+ */
+let chain = Promise.resolve();
+function withLock(fn) {
+    const result = chain.then(fn, fn);
+    chain = result.then(() => undefined, () => undefined);
+    return result;
+}
+async function readLines(filePath) {
+    let text;
+    try {
+        text = await fsp.readFile(filePath, "utf8");
+    }
+    catch {
+        return [];
+    }
+    return text.split("\n").filter((line) => line.length > 0);
+}
+// A plain truncating write is safe here ONLY because every reader of a live
+// run's file goes through the same lock as its writers (see readSandboxNames/
+// readNetworkIds below); the sole lock-free readers — the watchdog process and
+// another process's sweep — read a run's files strictly after its owning
+// process is dead, when no writer can exist. A tmp+rename swap is deliberately
+// NOT used: on Windows, renaming over a file a reader has open fails EPERM,
+// which would turn a benign read race into a lost ledger update.
+async function writeLines(filePath, lines) {
+    if (lines.length === 0) {
+        await fsp.unlink(filePath).catch(() => { });
+        return;
+    }
+    await fsp.writeFile(filePath, lines.join("\n") + "\n");
+}
+function removeFirstOccurrence(lines, value) {
+    const idx = lines.indexOf(value);
+    if (idx === -1) {
+        return [...lines];
+    }
+    return [...lines.slice(0, idx), ...lines.slice(idx + 1)];
+}
+/** Best-effort delete of all three of a run's ledger files. Never throws — a file already gone is not an error. */
+export async function deleteRunRecordFiles(cacheDir, runId) {
+    await Promise.all([recordPath(cacheDir, runId), sandboxesPath(cacheDir, runId), networksPath(cacheDir, runId)].map((p) => fsp.unlink(p).catch(() => { })));
+}
+async function isEmptyOrMissing(filePath) {
+    try {
+        const text = await fsp.readFile(filePath, "utf8");
+        return text.trim().length === 0;
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * The run-record cleanup rule: once BOTH `.sandboxes` and `.networks` are
+ * empty (or missing), this run has nothing left in flight, so its ledger
+ * files are deleted — a later container start recreates them from scratch.
+ * Called after every removal, never after an append (an append can only
+ * grow a file, never trigger this).
+ */
+async function pruneIfEmpty(cacheDir, runId) {
+    const [sandboxesEmpty, networksEmpty] = await Promise.all([
+        isEmptyOrMissing(sandboxesPath(cacheDir, runId)),
+        isEmptyOrMissing(networksPath(cacheDir, runId)),
+    ]);
+    if (sandboxesEmpty && networksEmpty) {
+        await deleteRunRecordFiles(cacheDir, runId);
+    }
+}
+/** Atomically writes `runs/<run-id>.json` (tmp file + rename) — called once, before this run's first sandbox is created. */
+export async function writeRunRecord(cacheDir, runId, record) {
+    return withLock(async () => {
+        const dir = runsDir(cacheDir);
+        await fsp.mkdir(dir, { recursive: true });
+        const target = recordPath(cacheDir, runId);
+        const tmp = path.join(dir, `.${runId}.json.tmp-${process.pid}-${Date.now()}`);
+        await fsp.writeFile(tmp, serializeRunRecord(record));
+        await fsp.rename(tmp, target);
+    });
+}
+/** Appends a sandbox name to `runs/<run-id>.sandboxes` — called BEFORE the backend's `create()` call. */
+export async function appendSandboxName(cacheDir, runId, name) {
+    return withLock(async () => {
+        const filePath = sandboxesPath(cacheDir, runId);
+        await fsp.mkdir(path.dirname(filePath), { recursive: true });
+        await fsp.appendFile(filePath, name + "\n");
+    });
+}
+/** Removes a sandbox name from `runs/<run-id>.sandboxes` — called AFTER a successful stop/remove; prunes the run's ledger files if this was the last thing tracked. */
+export async function removeSandboxName(cacheDir, runId, name) {
+    return withLock(async () => {
+        const filePath = sandboxesPath(cacheDir, runId);
+        const lines = removeFirstOccurrence(await readLines(filePath), name);
+        await writeLines(filePath, lines);
+        await pruneIfEmpty(cacheDir, runId);
+    });
+}
+/** Appends a network id to `runs/<run-id>.networks` — same protocol as `appendSandboxName`. */
+export async function appendNetworkId(cacheDir, runId, networkId) {
+    return withLock(async () => {
+        const filePath = networksPath(cacheDir, runId);
+        await fsp.mkdir(path.dirname(filePath), { recursive: true });
+        await fsp.appendFile(filePath, networkId + "\n");
+    });
+}
+/** Removes a network id from `runs/<run-id>.networks` — same protocol as `removeSandboxName`. */
+export async function removeNetworkId(cacheDir, runId, networkId) {
+    return withLock(async () => {
+        const filePath = networksPath(cacheDir, runId);
+        const lines = removeFirstOccurrence(await readLines(filePath), networkId);
+        await writeLines(filePath, lines);
+        await pruneIfEmpty(cacheDir, runId);
+    });
+}
+/**
+ * Reads every sandbox name currently tracked for a run. Serialized behind the
+ * same lock as the writers: writeLines truncates before it writes, so an
+ * unserialized read racing a rewrite could observe a torn (empty) file. The
+ * cross-process readers (a sweep judging a DEAD run, the watchdog after its
+ * owner died) need no lock — their run's writer no longer exists.
+ */
+export async function readSandboxNames(cacheDir, runId) {
+    return withLock(() => readLines(sandboxesPath(cacheDir, runId)));
+}
+/** Reads every network id currently tracked for a run — used by the sweep to know what to reap. */
+export async function readNetworkIds(cacheDir, runId) {
+    return withLock(() => readLines(networksPath(cacheDir, runId)));
+}
+/** Every other run's `<run-id>.json` filename (without extension) currently under `runs/` — the sweep's iteration set. Missing `runs/` directory yields an empty list. */
+export async function listRunIds(cacheDir) {
+    let entries;
+    try {
+        entries = await fsp.readdir(runsDir(cacheDir));
+    }
+    catch {
+        return [];
+    }
+    return entries.filter((name) => name.endsWith(".json")).map((name) => name.slice(0, -".json".length));
+}
+/** Reads and parses one run's record, plus the file's mtime (used to age an unparseable record). `undefined` body means the file vanished (a concurrent sweep or the run's own clean shutdown already removed it). */
+export async function readRunRecordRaw(cacheDir, runId) {
+    const filePath = recordPath(cacheDir, runId);
+    try {
+        const [text, stat] = await Promise.all([fsp.readFile(filePath, "utf8"), fsp.stat(filePath)]);
+        return { text, mtimeMs: stat.mtimeMs };
+    }
+    catch {
+        return undefined;
+    }
+}
+export { parseRunRecord };
+//# sourceMappingURL=ledger.js.map

package/dist/core/reaper/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/core/reaper/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,UAAU,EACV,OAAO,EACP,aAAa,EACb,YAAY,EACZ,cAAc,EACd,kBAAkB,GAEnB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;GAOG;AACH,IAAI,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;AAChD,SAAS,QAAQ,CAAI,EAAoB;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,KAAK,GAAG,MAAM,CAAC,IAAI,CACjB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,yEAAyE;AACzE,+EAA+E;AAC/E,4EAA4E;AAC5E,iEAAiE;AACjE,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAwB;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAwB,EAAE,KAAa;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB,EAAE,KAAa;IACxE,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAC9B,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,KAAa;IACzD,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,gBAAgB,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;KAChD,CAAC,CAAC;IACH,IAAI,cAAc,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,4HAA4H;AAC5H,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,KAAa,EAAE,MAAiB;IACrF,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,aAAa,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,KAAa,EAAE,IAAY;IACnF,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uKAAuK;AACvK,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,KAAa,EAAE,IAAY;IACnF,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAa,EAAE,SAAiB;IACtF,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAa,EAAE,SAAiB;IACtF,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAa;IACpE,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,KAAa;IAClE,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,0KAA0K;AAC1K,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,sNAAsN;AACtN,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,KAAa;IAEb,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/core/reaper/process-liveness.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The two operations a sweep needs about ANY pid on this machine — not
+ * necessarily this process's own. Abstracted behind an interface so unit
+ * tests can fabricate arbitrary (pid, start-time) combinations without
+ * shelling out to the real OS, matching the feature spec's testing
+ * requirement ("same-pid-different-start-time counts as dead" — a scenario
+ * that's essentially impossible to provoke against a real process on
+ * demand).
+ */
+export interface ProcessTimeSource {
+    /** Whether a process with this pid currently exists. */
+    isAlive(pid: number): boolean;
+    /** That process's start time, ISO-8601, or `undefined` if it can't be determined (including "no longer exists"). */
+    startedIso(pid: number): Promise<string | undefined>;
+}
+/** `process.kill(pid, 0)`: no signal sent, just existence-checked. EPERM means "exists but not ours" — still alive. */
+export declare function isProcessAlive(pid: number): boolean;
+/** Test-only access to the pure `ps -o etime=` duration parser, exercised against fabricated strings without shelling out. */
+export declare function _parseEtimeMsForTests(text: string): number | undefined;
+/** The real, OS-backed `ProcessTimeSource` — production sweeps and the watchdog's liveness checks use this. */
+export declare const realProcessTimeSource: ProcessTimeSource;
+/** Cross-process liveness protocol: a run is ALIVE iff its pid exists AND its actual start time matches the recorded one within 2 seconds — this window is what defeats PID reuse. */
+export declare const LIVENESS_TOLERANCE_MS = 2000;
+/**
+ * Judges a `(pid, startedIso)` pair against a time source. `undefined` from
+ * `startedIso()` (pid vanished between the alive-check and the start-time
+ * probe, or the platform command failed) is treated as dead — a run this
+ * module can't positively confirm alive is reaped, matching the reaper's
+ * bias toward cleaning up rather than leaking.
+ */
+export declare function isRecordAlive(source: ProcessTimeSource, pid: number, recordedStartedIso: string): Promise<boolean>;
+/**
+ * This process's own start time, ISO-8601 — computed once at module load
+ * from `process.uptime()` (Node has no direct "process start instant" API).
+ * Close enough to true process start for the ±2s liveness tolerance even if
+ * this module is first imported a little into the process's life.
+ */
+export declare const THIS_PROCESS_STARTED_ISO: string;
+//# sourceMappingURL=process-liveness.d.ts.map

package/dist/core/reaper/process-liveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-liveness.d.ts","sourceRoot":"","sources":["../../../src/core/reaper/process-liveness.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,oHAAoH;IACpH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACtD;AAED,uHAAuH;AACvH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAmDD,8HAA8H;AAC9H,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtE;AA6BD,+GAA+G;AAC/G,eAAO,MAAM,qBAAqB,EAAE,iBAInC,CAAC;AAEF,sLAAsL;AACtL,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAE,MAAiF,CAAC"}

package/dist/core/reaper/process-liveness.js

@@ -0,0 +1,117 @@
+import { spawn } from "node:child_process";
+/** `process.kill(pid, 0)`: no signal sent, just existence-checked. EPERM means "exists but not ours" — still alive. */
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code === "EPERM";
+    }
+}
+function collectStdout(cmd, args) {
+    return new Promise((resolveOut) => {
+        let out = "";
+        let settled = false;
+        const child = spawn(cmd, args, { stdio: ["ignore", "pipe", "ignore"] });
+        child.stdout.setEncoding("utf8");
+        child.stdout.on("data", (chunk) => {
+            out += chunk;
+        });
+        child.once("error", () => {
+            if (!settled) {
+                settled = true;
+                resolveOut(undefined);
+            }
+        });
+        child.once("close", (code) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            resolveOut(code === 0 ? out : undefined);
+        });
+    });
+}
+const ETIME_PATTERN = /^(?:(\d+)-)?(?:(\d{1,2}):)?(\d{1,2}):(\d{2})$/;
+/**
+ * `ps -p <pid> -o etime=` prints a DURATION — `[[dd-]hh:]mm:ss` — not a wall-
+ * clock timestamp, so unlike `lstart` (a bare, timezone-less string that
+ * different `Date` parsers and even different processes on the SAME host
+ * can disagree about — confirmed empirically: a `bun test` worker's own
+ * `Intl`/`Date` machinery reported its local timezone as UTC while a `ps`
+ * child it spawned still printed the OS's real local time, a multi-hour
+ * mismatch with no env var involved to explain it) there is no timezone to
+ * get wrong here at all: `Date.now() - etimeMs` is unambiguous everywhere.
+ */
+function parseEtimeMs(text) {
+    const trimmed = text.trim();
+    const m = ETIME_PATTERN.exec(trimmed);
+    if (m === null) {
+        return undefined;
+    }
+    const [, days, hours, minutes, seconds] = m;
+    const totalSeconds = (Number(days ?? 0) * 24 * 60 + Number(hours ?? 0) * 60 + Number(minutes)) * 60 + Number(seconds);
+    return Number.isFinite(totalSeconds) ? totalSeconds * 1000 : undefined;
+}
+/** Test-only access to the pure `ps -o etime=` duration parser, exercised against fabricated strings without shelling out. */
+export function _parseEtimeMsForTests(text) {
+    return parseEtimeMs(text);
+}
+async function posixStartedIso(pid) {
+    const before = Date.now();
+    const out = await collectStdout("ps", ["-p", String(pid), "-o", "etime="]);
+    if (out === undefined) {
+        return undefined;
+    }
+    const etimeMs = parseEtimeMs(out);
+    return etimeMs === undefined ? undefined : new Date(before - etimeMs).toISOString();
+}
+/** PowerShell prints the process's start time already converted to UTC, in round-trippable ISO-8601 — no ad hoc parsing needed. */
+async function windowsStartedIso(pid) {
+    const script = `$p = Get-Process -Id ${pid} -ErrorAction SilentlyContinue; ` +
+        `if ($p) { $p.StartTime.ToUniversalTime().ToString('o') }`;
+    const out = await collectStdout("powershell", ["-NoProfile", "-NonInteractive", "-Command", script]);
+    if (out === undefined) {
+        return undefined;
+    }
+    const trimmed = out.trim();
+    if (trimmed.length === 0) {
+        return undefined;
+    }
+    const parsed = new Date(trimmed);
+    return Number.isNaN(parsed.getTime()) ? undefined : parsed.toISOString();
+}
+/** The real, OS-backed `ProcessTimeSource` — production sweeps and the watchdog's liveness checks use this. */
+export const realProcessTimeSource = {
+    isAlive: isProcessAlive,
+    startedIso: (pid) => process.platform === "win32" ? windowsStartedIso(pid) : posixStartedIso(pid),
+};
+/** Cross-process liveness protocol: a run is ALIVE iff its pid exists AND its actual start time matches the recorded one within 2 seconds — this window is what defeats PID reuse. */
+export const LIVENESS_TOLERANCE_MS = 2000;
+/**
+ * Judges a `(pid, startedIso)` pair against a time source. `undefined` from
+ * `startedIso()` (pid vanished between the alive-check and the start-time
+ * probe, or the platform command failed) is treated as dead — a run this
+ * module can't positively confirm alive is reaped, matching the reaper's
+ * bias toward cleaning up rather than leaking.
+ */
+export async function isRecordAlive(source, pid, recordedStartedIso) {
+    if (!source.isAlive(pid)) {
+        return false;
+    }
+    const actual = await source.startedIso(pid);
+    if (actual === undefined) {
+        return false;
+    }
+    const diff = Math.abs(Date.parse(actual) - Date.parse(recordedStartedIso));
+    return Number.isFinite(diff) && diff <= LIVENESS_TOLERANCE_MS;
+}
+/**
+ * This process's own start time, ISO-8601 — computed once at module load
+ * from `process.uptime()` (Node has no direct "process start instant" API).
+ * Close enough to true process start for the ±2s liveness tolerance even if
+ * this module is first imported a little into the process's life.
+ */
+export const THIS_PROCESS_STARTED_ISO = new Date(Date.now() - Math.round(process.uptime() * 1000)).toISOString();
+//# sourceMappingURL=process-liveness.js.map

package/dist/core/reaper/process-liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-liveness.js","sourceRoot":"","sources":["../../../src/core/reaper/process-liveness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAkB3C,uHAAuH;AACvH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAuB;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,GAAG,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,UAAU,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,aAAa,GAAG,+CAA+C,CAAC;AAEtE;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAgF,CAAC;IAC3H,MAAM,YAAY,GAChB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AACtF,CAAC;AAED,mIAAmI;AACnI,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,MAAM,MAAM,GACV,wBAAwB,GAAG,kCAAkC;QAC7D,0DAA0D,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACrG,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;AAC3E,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,OAAO,EAAE,cAAc;IACvB,UAAU,EAAE,CAAC,GAAW,EAA+B,EAAE,CACvD,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC;CAC/E,CAAC;AAEF,sLAAsL;AACtL,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAyB,EACzB,GAAW,EACX,kBAA0B;IAE1B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,qBAAqB,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAW,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC"}