smol-symphony 0.2.0 → 0.3.1

package/dist/reconciler/vm.js

@@ -1,243 +0,0 @@
-// VM reaper resource (issue 33 / reconciler stage 2; Gondolin migration Phase 4).
-// Owns the lifecycle of `symphony-*` VMs: anything outside the orchestrator's
-// intended set is an orphan and gets reaped.
-//
-// Observation source = Gondolin's session registry, NOT the earlier CLI machine
-// registry + `_boot-vm` /proc scraping. Gondolin owns one host runner process
-// per VM and tracks it in a session registry keyed by uuid, carrying the
-// `sessionLabel` the orchestrator minted (`symphony-<identifier>`) and the host
-// `pid`. The reaper reaps in two complementary ways:
-//
-//   1. STALE sessions (dead-pid orphans + orphan socket files) are collected by
-//      Gondolin's own `gc()` — the shell calls it at the start of each pass.
-//      This subsumes the old "`machine delete -f` succeeded but left the worker
-//      alive" cleanup: Gondolin reconciles its own registry against live pids.
-//   2. LIVE orphans — a session whose host process is still alive but whose
-//      `symphony-` label is NOT in the intended set (a botched teardown, or a
-//      SIGKILL'd symphony whose runner child survived) — are reaped HERE by
-//      SIGTERM→SIGKILL on the host `pid`. `gc()` can't touch these because the
-//      pid is alive; only the orchestrator knows the intended set.
-//
-// Label safety: a session with no label, or a label outside the
-// `symphony-` namespace (an operator's own VM, a sibling tool's session), is
-// never touched. The reaper acts only on confidently-symphony-owned, never-
-// intended sessions.
-//
-// Effects-as-data (issue 69): the decision of WHAT to do is a pure function
-// (`decideVm`) of the observed session state; HOW it's done (Gondolin gc,
-// listSessions, process.kill, sleep) is the shell's job. This module is
-// import-pure: no `node:fs`, no timers, no adapter imports. The reaper's local
-// session shape (`ReaperSession`) is declared here — mirroring the existing
-// `VmRegistryPort` local-interface convention — so vm.ts never reaches for the
-// concrete `VmClient` adapter or the `vm-port` module; the shell adapts
-// `VmClient.listSessions()` → `ReaperSession[]`.
-import { log } from '../logging.js';
-import { ResourceActionLedger } from './ledger.js';
-// Domain constant. Every VM the orchestrator creates is labelled with this
-// prefix (the runner mints `sessionLabel = symphony-<identifier>`); the reaper
-// only acts on labels that match. The vm-port adapter mirrors the same value —
-// keep them in sync.
-export const SYMPHONY_VM_PREFIX = 'symphony-';
-const DEFAULT_KILL_GRACE_MS = 3_000;
-const MAX_ACTION_HISTORY = 32;
-/**
- * Pure decision: given the observed Gondolin session state, return the effects
- * the shell should apply. No IO, no clock reads, no logging.
- *
- * Effect rule:
- *   • Session has a `label` that starts with SYMPHONY_VM_PREFIX and isn't
- *     intended, AND a sane, non-self host pid → `kill_session` (SIGTERM→SIGKILL
- *     its host pid).
- *
- * Pid safety: a host signal is only ever emitted for a `pid` that is a safe
- * positive integer and is NOT the reaper's own pid. This matters because the
- * shell delivers the signal with `process.kill(pid, sig)`, which signals the
- * whole PROCESS GROUP for `pid <= 0` and would target the orchestrator itself
- * for `pid === selfPid`. A session carrying a `0`/`NaN`/negative/self pid is a
- * registry anomaly, never a legitimate orphan, so it is left untouched here.
- *
- * Anything outside the symphony-prefixed namespace — a session with no label,
- * or a label that doesn't start with the prefix — is left untouched (operator
- * VMs, sibling tools' sessions). STALE/dead-pid sessions and orphan sockets are
- * NOT this function's concern; Gondolin's `gc()` collects them in the shell
- * before the live session set reaches here.
- */
-export function decideVm(state) {
-    const out = [];
-    for (const s of state.sessions) {
-        const label = s.label;
-        if (label === undefined)
-            continue;
-        if (!label.startsWith(SYMPHONY_VM_PREFIX))
-            continue;
-        if (state.intended.has(label))
-            continue;
-        // Pid safety: skip anomalous pids (0/NaN/negative — process-group / invalid)
-        // and never signal the reaper's own process.
-        if (!Number.isSafeInteger(s.pid) || s.pid <= 0)
-            continue;
-        if (s.pid === state.selfPid)
-            continue;
-        out.push({ kind: 'kill_session', pid: s.pid, label });
-    }
-    return out;
-}
-/**
- * VM resource. Desired = orchestrator's intended VM (session-label) set.
- * Actual = Gondolin's live session set (filtered by `symphony-` label).
- * `reconcile()` is the thin shell loop: gc → observe → `decideVm` → apply.
- *
- * Independent of bake (`dependsOn: []`). Doesn't gate dispatch.
- */
-export class VmResource {
-    opts;
-    id = 'vm';
-    dependsOn = [];
-    gc;
-    listSessions;
-    killProcess;
-    killGraceMs;
-    selfPid;
-    ledger = new ResourceActionLedger(this.id, { maxHistory: MAX_ACTION_HISTORY });
-    lastError = null;
-    constructor(opts) {
-        this.opts = opts;
-        this.gc = opts.gc;
-        this.listSessions = opts.listSessions;
-        this.killProcess = opts.killProcess;
-        this.killGraceMs = opts.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
-        this.selfPid = opts.selfPid;
-    }
-    ready() {
-        // VM reaping is a janitorial task — it doesn't gate dispatch. The bake
-        // resource is the only thing dispatch waits on today; reaping just runs
-        // alongside.
-        return true;
-    }
-    async reconcile() {
-        const desired = this.opts.intended.intendedVmNames();
-        // Gondolin's own GC first: collect STALE (dead-pid) sessions + orphan
-        // sockets. This subsumes the earlier "worker survived the daemon
-        // destroy" cleanup — Gondolin reconciles its registry against live pids.
-        await this.runGc();
-        // Now enumerate the LIVE session set. `decideVm` compares it against the
-        // intended set; survivors with a never-intended `symphony-` label are
-        // LIVE orphans (alive pid, so gc() can't reach them) and get SIGTERM'd.
-        const sessions = await this.observeSessions();
-        const effects = decideVm({ intended: desired, sessions, selfPid: this.selfPid });
-        if (effects.length === 0)
-            return;
-        log.info('vm reaper: killing orphan sessions', { orphans: effects.length });
-        await Promise.all(effects.map((e) => this.killSession(e)));
-    }
-    snapshot() {
-        return {
-            id: this.id,
-            ready: true,
-            desired_hash: null,
-            last_error: this.lastError,
-            actions: this.ledger.snapshot(),
-        };
-    }
-    async runGc() {
-        try {
-            const reaped = await this.gc();
-            if (reaped > 0)
-                log.info('vm reaper: gondolin gc collected stale sessions', { reaped });
-        }
-        catch (err) {
-            const msg = err.message;
-            this.lastError = `gondolin gc failed: ${msg}`;
-            log.warn('vm reaper: gondolin gc failed', { error: msg });
-        }
-    }
-    async observeSessions() {
-        try {
-            return await this.listSessions();
-        }
-        catch (err) {
-            const msg = err.message;
-            this.lastError = `session enumeration failed: ${msg}`;
-            log.warn('vm reaper: session enumeration failed', { error: msg });
-            return [];
-        }
-    }
-    async killSession(e) {
-        const key = `kill_session:${e.pid}`;
-        // Belt-and-suspenders: `decideVm` already excludes self / anomalous pids,
-        // but a bad pid reaching the actual `process.kill` is catastrophic
-        // (`pid <= 0` signals the whole process group; `selfPid` signals the
-        // orchestrator). Guard once more before the signal ever leaves the shell.
-        if (e.pid === this.selfPid || !Number.isSafeInteger(e.pid) || e.pid <= 0) {
-            const msg = `refused to signal unsafe pid ${e.pid}`;
-            this.lastError = msg;
-            this.ledger.start(key);
-            this.ledger.error(key, msg);
-            log.warn('vm reaper: refused unsafe pid', { pid: e.pid, label: e.label, self_pid: this.selfPid });
-            return;
-        }
-        this.ledger.start(key);
-        // SIGTERM. If the process is already gone (ESRCH) treat as success.
-        try {
-            this.killProcess(e.pid, 'SIGTERM');
-        }
-        catch (err) {
-            const code = err.code;
-            if (code === 'ESRCH') {
-                this.ledger.done(key);
-                return;
-            }
-            const msg = err.message;
-            this.lastError = msg;
-            this.ledger.error(key, msg);
-            log.warn('vm reaper: SIGTERM failed', { pid: e.pid, label: e.label, error: msg });
-            return;
-        }
-        // Inline timer (rather than `node:timers/promises`) keeps the file
-        // adapter-import-free for the functional-core lint.
-        await new Promise((resolve) => { setTimeout(resolve, this.killGraceMs); });
-        // Probe with signal 0 — throws ESRCH if the process has exited. If it's
-        // still alive, escalate to SIGKILL.
-        let alive = false;
-        try {
-            this.killProcess(e.pid, 0);
-            alive = true;
-        }
-        catch (err) {
-            const code = err.code;
-            if (code !== 'ESRCH') {
-                // EPERM and friends — assume alive but unkillable; surface as an error.
-                const msg = err.message;
-                this.lastError = msg;
-                this.ledger.error(key, msg);
-                log.warn('vm reaper: alive-probe failed', { pid: e.pid, error: msg });
-                return;
-            }
-        }
-        if (!alive) {
-            this.ledger.done(key);
-            return;
-        }
-        try {
-            this.killProcess(e.pid, 'SIGKILL');
-            this.ledger.done(key);
-            log.info('vm reaper: SIGKILL applied after grace', {
-                pid: e.pid,
-                label: e.label,
-                grace_ms: this.killGraceMs,
-            });
-        }
-        catch (err) {
-            const code = err.code;
-            if (code === 'ESRCH') {
-                this.ledger.done(key);
-                return;
-            }
-            const msg = err.message;
-            this.lastError = msg;
-            this.ledger.error(key, msg);
-            log.warn('vm reaper: SIGKILL failed', { pid: e.pid, label: e.label, error: msg });
-        }
-    }
-}
-//# sourceMappingURL=vm.js.map

package/dist/reconciler/vm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vm.js","sourceRoot":"","sources":["../../src/reconciler/vm.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,8EAA8E;AAC9E,6CAA6C;AAC7C,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,mEAAmE;AACnE,EAAE;AACF,gEAAgE;AAChE,6EAA6E;AAC7E,4EAA4E;AAC5E,qBAAqB;AACrB,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,wEAAwE;AACxE,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,wEAAwE;AACxE,iDAAiD;AAEjD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGnD,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,qBAAqB;AACrB,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAE9C,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AA6F9B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAsB;IAC7C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,SAAS;QACpD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,6EAA6E;QAC7E,6CAA6C;QAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YAAE,SAAS;QACzD,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,SAAS;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,UAAU;IAaQ;IAZpB,EAAE,GAAG,IAAI,CAAC;IACV,SAAS,GAAa,EAAE,CAAC;IAEjB,EAAE,CAAwB;IAC1B,YAAY,CAAiC;IAC7C,WAAW,CAAoD;IAC/D,WAAW,CAAS;IACpB,OAAO,CAAS;IAEhB,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACxF,SAAS,GAAkB,IAAI,CAAC;IAExC,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;QAClD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,uEAAuE;QACvE,wEAAwE;QACxE,aAAa;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QAErD,sEAAsE;QACtE,iEAAiE;QACjE,yEAAyE;QACzE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEnB,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,QAAQ;QACN,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;SAChC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;YAC/B,IAAI,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,uBAAuB,GAAG,EAAE,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,+BAA+B,GAAG,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,CAAoB;QAC5C,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,CAAC;QACpC,0EAA0E;QAC1E,mEAAmE;QACnE,qEAAqE;QACrE,0EAA0E;QAC1E,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,gCAAgC,CAAC,CAAC,GAAG,EAAE,CAAC;YACpD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,oEAAoE;QACpE,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,wEAAwE;QACxE,oCAAoC;QACpC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,wEAAwE;gBACxE,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;gBACnC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACjD,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,IAAI,CAAC,WAAW;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;CACF"}

package/dist/reconciler/workspace-defaults.js

@@ -1,83 +0,0 @@
-// Workspace resource adapters (shell). Concrete fs + git implementations of
-// the listing / inspection / removal ports declared on {@link WorkspaceResource}.
-// Lifted from workspace.ts (issue 86) so the core resource no longer imports
-// `node:fs/promises` or `util/process`. Production wiring lives in
-// `reconciler/index.ts`; tests pass stubs and reach for these helpers only
-// when they want the real fs/git path.
-import { readdir, rm, stat } from 'node:fs/promises';
-import path from 'node:path';
-import { runProcess } from '../util/process.js';
-/**
- * Enumerate workspace dirs under `root`. Non-directories are filtered out.
- * ENOENT on the root → empty list (cold start). Other errors propagate so the
- * resource records them in `last_error` rather than reaping every workspace
- * on a transient FS hiccup.
- */
-export async function defaultListWorkspaceDirs(root) {
-    let entries;
-    try {
-        entries = await readdir(root);
-    }
-    catch (err) {
-        if (err.code === 'ENOENT')
-            return [];
-        throw err;
-    }
-    const out = [];
-    for (const name of entries) {
-        const p = path.join(root, name);
-        try {
-            const st = await stat(p);
-            if (st.isDirectory())
-                out.push({ name, path: p });
-        }
-        catch {
-            // Entry vanished mid-pass; next reconcile picks it up.
-        }
-    }
-    return out;
-}
-/**
- * Default inspector. All git invocations are workspace-local; drift detection
- * lives in the resource (compares `workspaceBaseSha` to the source repo's
- * current base SHA). Returns `head: null` for anything that doesn't look like
- * a git repo — the caller treats that as "don't touch this dir."
- */
-export async function defaultInspectWorkspace(workspacePath, baseBranch) {
-    const head = await runGitCapture(workspacePath, ['rev-parse', 'HEAD']);
-    if (head.exit !== 0 || head.stdout.trim().length === 0) {
-        return { head: null, workspaceBaseSha: null, hasUncommitted: false, commitsAheadOfBase: 0 };
-    }
-    const headSha = head.stdout.trim();
-    const status = await runGitCapture(workspacePath, ['status', '--porcelain']);
-    const hasUncommitted = status.exit === 0 && status.stdout.length > 0;
-    // Workspace's frozen view of the base branch — the SHA that was current in
-    // the source repo at clone time. The setup pipeline cuts the agent branch
-    // from this ref, so it's always present unless an operator manually deleted it.
-    const wsBase = await runGitCapture(workspacePath, ['rev-parse', baseBranch]);
-    const workspaceBaseSha = wsBase.exit === 0 && wsBase.stdout.trim().length > 0 ? wsBase.stdout.trim() : null;
-    let aheadCount = 0;
-    if (workspaceBaseSha !== null) {
-        // `<base>..HEAD` walks only objects the workspace itself owns — no cross-repo
-        // reachability needed. Exits non-zero only for malformed refs; treat that
-        // as 0 commits ahead rather than poisoning the snapshot.
-        const ahead = await runGitCapture(workspacePath, [
-            'rev-list',
-            '--count',
-            `${workspaceBaseSha}..${headSha}`,
-        ]);
-        aheadCount = ahead.exit === 0 ? Number(ahead.stdout.trim()) || 0 : 0;
-    }
-    return { head: headSha, workspaceBaseSha, hasUncommitted, commitsAheadOfBase: aheadCount };
-}
-/** Default removal: `rm -rf` the dir. Production wraps `WorkspaceManager.remove`; the two-callback design lets tests pass a stub. */
-export async function defaultRemoveWorkspace(workspaceRoot, identifier) {
-    await rm(path.join(workspaceRoot, identifier), { recursive: true, force: true });
-}
-// Thin shape adapter over runProcess: the inspector reads `result.exit`
-// (vs. `exit_code`) and uses a tighter 16 KiB cap than runProcess's default.
-async function runGitCapture(cwd, args) {
-    const r = await runProcess('git', args, { cwd, maxBytes: 16_384, appendErrorToStderr: false });
-    return { exit: r.exit_code ?? -1, stdout: r.stdout, stderr: r.stderr };
-}
-//# sourceMappingURL=workspace-defaults.js.map

package/dist/reconciler/workspace-defaults.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workspace-defaults.js","sourceRoot":"","sources":["../../src/reconciler/workspace-defaults.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,kFAAkF;AAClF,6EAA6E;AAC7E,mEAAmE;AACnE,2EAA2E;AAC3E,uCAAuC;AAEvC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY;IACzD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,EAAE,CAAC,WAAW,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,UAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GACpB,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,8EAA8E;QAC9E,0EAA0E;QAC1E,yDAAyD;QACzD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE;YAC/C,UAAU;YACV,SAAS;YACT,GAAG,gBAAgB,KAAK,OAAO,EAAE;SAClC,CAAC,CAAC;QACH,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAC7F,CAAC;AAED,qIAAqI;AACrI,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAqB,EACrB,UAAkB;IAElB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,IAAc;IAEd,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzE,CAAC"}

package/dist/reconciler/workspace.js

@@ -1,272 +0,0 @@
-// Workspace resource (issue 34 / reconciler stage 3). Owns the lifecycle of
-// per-issue workspace directories under `workspace.root`. Replaces the
-// orchestrator's old `startupTerminalCleanup` sweep with a continuous-converge
-// resource that also surfaces drift between an active workspace's HEAD and the
-// current base branch tip.
-//
-// What this resource owns:
-//   • Removing workspace dirs that no longer correspond to any non-terminal
-//     issue file. The old startup sweep only fired once on boot; here it runs
-//     on every reconcile tick.
-//   • Creating workspace dirs for non-terminal issues that don't yet have one
-//     on disk. The action body (clone source repo, cut `agent/<id>`, optional
-//     origin restore) is delegated to `WorkspaceManager.ensureFor` so
-//     dispatch-time and reconciler-driven eager creation share a single code
-//     path. Idempotency / race safety is enforced inside `ensureFor` via a
-//     per-identifier in-flight promise lock.
-//   • Reporting drift between an active workspace's HEAD and the current
-//     base-branch tip (e.g. base advanced while the issue was paused). v1 is
-//     non-destructive: drift is surfaced as a `stale` / `stuck` annotation in
-//     the snapshot and the workspace is left on disk. Re-clone (or any other
-//     destructive recovery) is explicitly opt-in via an operator action or
-//     per-issue label and is out of scope for this stage.
-//
-// Race-condition rule (same shape as VmResource): the intended set comes
-// from a provider the orchestrator implements. It returns both the active
-// issue identifiers (long-lived desired set) AND the identifiers currently
-// in-flight (running + claimed). The in-flight slice covers the window
-// between "tick claims an issue" and "tracker shows it as active" — without
-// it, a brand-new issue's workspace could be reaped seconds after creation
-// because the reconciler raced ahead of the tracker read.
-import { sanitizeWorkspaceKey } from '../util/workspace-key.js';
-import { log } from '../logging.js';
-import { ResourceActionLedger } from './ledger.js';
-const MAX_ACTION_HISTORY = 32;
-/**
- * Workspace resource. Desired = active issue workspaces (set of sanitized
- * identifiers from the tracker plus in-flight allocations). Actual = dirs
- * under `workspace.root`. Diff drives two converging actions plus two
- * snapshot annotations:
- *
- *   • create_workspace — identifier in the desired set with no matching dir
- *                        on disk. Delegates to `WorkspaceManager.ensureFor`,
- *                        which runs the canonical clone+branch+remote setup.
- *   • remove_workspace — dir has no matching non-terminal issue.
- *   • mark_stale       — dir matches but HEAD is behind base and the
- *                        workspace has no uncommitted / ahead work. Non-
- *                        destructive: re-clone is operator-triggered in v1.
- *   • mark_stuck       — dir matches but HEAD is behind base AND has
- *                        uncommitted changes or commits ahead of base. Non-
- *                        destructive; surfaced so the operator can intervene
- *                        before any rebuild attempt.
- *
- * `dependsOn: ['base_ref']` is informational. v1 doesn't ship a base_ref
- * resource; the BaseRefProvider is a direct dependency call.
- */
-export class WorkspaceResource {
-    opts;
-    id = 'workspace';
-    dependsOn = [];
-    ledger = new ResourceActionLedger(this.id, { maxHistory: MAX_ACTION_HISTORY });
-    lastError = null;
-    staleCount = 0;
-    stuckCount = 0;
-    createdCount = 0;
-    constructor(opts) {
-        this.opts = opts;
-    }
-    ready() {
-        // Janitorial; doesn't gate dispatch (bake is the only dispatch gate today).
-        return true;
-    }
-    async reconcile() {
-        // Read the desired set up front. Even if `listWorkspaces` returns the
-        // empty set (workspace.root not yet created), we still want to create
-        // dirs for every active identifier — the create path will mkdir the root
-        // via `ensureFor`. Pulling this before the listing collapses the two
-        // branches into one flow.
-        //
-        // Fail closed when the tracker read throws: we must NOT treat the empty
-        // set as the desired state. Reaping every workspace on a transient
-        // tracker hiccup is the regression this contract closes. Catch here,
-        // surface as last_error, and bail — the next pass retries.
-        let active;
-        try {
-            active = await this.opts.intended.activeIdentifiers();
-        }
-        catch (err) {
-            const msg = err.message;
-            this.lastError = `active_fetch_failed: ${msg}`;
-            log.warn('workspace reconcile: active fetch failed', { error: msg });
-            return;
-        }
-        const inFlight = this.opts.intended.inFlightIdentifiers();
-        // Map sanitized key → { identifier, state } so the create callback gets
-        // the operator-visible identifier AND the current state name (used by the
-        // orchestrator's merge-state guard). Sanitize-then-set so
-        // the dir-name comparison matches `workspacePathFor`'s post-sanitize
-        // layout. Active issues take precedence over in-flight in case of
-        // overlap so the tracker's authoritative state wins over an in-flight
-        // entry that may carry a target_state (where the issue is going, not
-        // where it currently lives).
-        const wanted = new Map();
-        for (const [id, state] of inFlight) {
-            wanted.set(sanitizeWorkspaceKey(id), { identifier: id, state });
-        }
-        for (const [id, state] of active) {
-            wanted.set(sanitizeWorkspaceKey(id), { identifier: id, state });
-        }
-        let entries;
-        try {
-            entries = await this.opts.listWorkspaces();
-        }
-        catch (err) {
-            this.lastError = `workspace_root_read_failed: ${err.message}`;
-            log.warn('workspace reconcile: list failed', { error: err.message });
-            return;
-        }
-        let baseRef = null;
-        if (this.opts.baseRef) {
-            try {
-                baseRef = await this.opts.baseRef.currentBaseRef();
-            }
-            catch (err) {
-                log.debug('workspace reconcile: base ref lookup failed', {
-                    error: err.message,
-                });
-                baseRef = null;
-            }
-        }
-        this.staleCount = 0;
-        this.stuckCount = 0;
-        this.createdCount = 0;
-        // Reset lastError at the start of every pass so a transient stale/stuck
-        // condition that has since resolved doesn't keep haunting the snapshot.
-        // Errors raised during this pass below will repopulate it.
-        this.lastError = null;
-        // Track which desired identifiers already exist on disk so the
-        // create-loop below only fires for the missing ones.
-        const present = new Set();
-        for (const { name, path: dirPath } of entries) {
-            if (!wanted.has(name)) {
-                await this.runRemove(name, 'stale_issue');
-                continue;
-            }
-            present.add(name);
-            // In the desired set. Check for drift (non-destructive). No baseRef
-            // means we can't compare; just skip and treat the workspace as ok.
-            if (baseRef === null)
-                continue;
-            let inspection;
-            try {
-                inspection = await this.opts.inspect(dirPath, baseRef.branch);
-            }
-            catch (err) {
-                log.debug('workspace reconcile: inspect failed', {
-                    identifier: name,
-                    error: err.message,
-                });
-                continue;
-            }
-            if (inspection.head === null)
-                continue;
-            // Workspace has no local copy of the base branch — operator likely
-            // deleted it. Skip drift detection rather than guess.
-            if (inspection.workspaceBaseSha === null)
-                continue;
-            // Drift = workspace's frozen base SHA disagrees with source's current
-            // base SHA. Any disagreement counts (fast-forward, divergence, rewind
-            // all surface as "the operator's base moved out from under us"); the
-            // operator can decide what to do.
-            if (inspection.workspaceBaseSha === baseRef.sha)
-                continue;
-            // Drift detected. v1 never auto-removes for drift; we annotate and move
-            // on so the operator can decide whether to relaunch the workspace.
-            if (inspection.hasUncommitted || inspection.commitsAheadOfBase > 0) {
-                this.stuckCount += 1;
-                const reason = inspection.hasUncommitted
-                    ? 'uncommitted changes present'
-                    : `${inspection.commitsAheadOfBase} commit(s) ahead of base`;
-                const msg = `workspace ${name} stuck: base advanced and ${reason}`;
-                this.lastError = msg;
-                this.recordMark(name, 'stuck', reason);
-                log.warn('workspace reconcile: stuck (drift, agent work present)', {
-                    identifier: name,
-                    reason,
-                });
-                continue;
-            }
-            this.staleCount += 1;
-            const staleReason = 'base advanced past workspace HEAD; re-clone is opt-in';
-            this.lastError = `workspace ${name} stale: ${staleReason}`;
-            this.recordMark(name, 'stale', staleReason);
-            log.info('workspace reconcile: stale (drift, no agent work to lose)', {
-                identifier: name,
-                reason: staleReason,
-            });
-        }
-        // Create any desired identifier that has no dir on disk. The create
-        // callback is optional so test harnesses that exercise only the reaper
-        // can skip it; production wires `WorkspaceManager.ensureFor`, which is
-        // idempotent (per-identifier lock + dir-exists check) so a concurrent
-        // dispatch call coalesces into the same setup pass.
-        if (this.opts.create) {
-            for (const [key, { identifier, state }] of wanted) {
-                if (present.has(key))
-                    continue;
-                await this.runCreate(identifier, key, state);
-            }
-        }
-    }
-    snapshot() {
-        return {
-            id: this.id,
-            ready: true,
-            desired_hash: null,
-            last_error: this.lastError,
-            actions: this.ledger.snapshot(),
-        };
-    }
-    /** Test helper: number of workspaces marked stale on the last reconcile pass. */
-    staleOnLastPass() {
-        return this.staleCount;
-    }
-    /** Test helper: number of workspaces marked stuck on the last reconcile pass. */
-    stuckOnLastPass() {
-        return this.stuckCount;
-    }
-    /** Test helper: number of workspaces created on the last reconcile pass. */
-    createdOnLastPass() {
-        return this.createdCount;
-    }
-    async runCreate(identifier, sanitizedKey, state) {
-        if (!this.opts.create)
-            return;
-        // Action key uses the sanitized identifier (matches what
-        // remove_workspace uses) so dashboards can correlate the two
-        // operations on the same workspace dir.
-        const actionKey = `create_workspace:${sanitizedKey}`;
-        const res = await this.ledger.run(actionKey, () => this.opts.create(identifier, state));
-        if (res.ok) {
-            this.createdCount += 1;
-            log.info('workspace reconcile: created', { identifier, state });
-        }
-        else {
-            this.lastError = res.error;
-            log.warn('workspace reconcile: create failed', { identifier, state, error: res.error });
-        }
-    }
-    async runRemove(identifier, reason) {
-        const actionKey = `remove_workspace:${identifier}`;
-        const res = await this.ledger.run(actionKey, () => this.opts.remove(identifier, reason));
-        if (res.ok) {
-            log.info('workspace reconcile: removed', { identifier, reason });
-        }
-        else {
-            this.lastError = res.error;
-            log.warn('workspace reconcile: remove failed', { identifier, reason, error: res.error });
-        }
-    }
-    /**
-     * Record a non-destructive drift annotation in the action ledger so the
-     * dashboard can render "stale" / "stuck" badges per workspace without the
-     * janitor touching disk. `mark_stale:<id>` and `mark_stuck:<id>` are the
-     * v1 surfaces; the reason rides on the action's `error` field for parity
-     * with the existing snapshot-error shape, even though it isn't a hard
-     * failure.
-     */
-    recordMark(identifier, status, reason) {
-        this.ledger.record(`mark_${status}:${identifier}`, 'done', reason);
-    }
-}
-//# sourceMappingURL=workspace.js.map

package/dist/reconciler/workspace.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/reconciler/workspace.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,+EAA+E;AAC/E,+EAA+E;AAC/E,2BAA2B;AAC3B,EAAE;AACF,2BAA2B;AAC3B,4EAA4E;AAC5E,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,6EAA6E;AAC7E,2EAA2E;AAC3E,6CAA6C;AAC7C,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,4EAA4E;AAC5E,2EAA2E;AAC3E,0DAA0D;AAE1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAsInD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,iBAAiB;IAUC;IATpB,EAAE,GAAG,WAAW,CAAC;IACjB,SAAS,GAAa,EAAE,CAAC;IAEjB,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACxF,SAAS,GAAkB,IAAI,CAAC;IAChC,UAAU,GAAG,CAAC,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAG,CAAC,CAAC;IAEzB,YAA6B,IAA8B;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAE/D,KAAK;QACH,4EAA4E;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS;QACb,sEAAsE;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,qEAAqE;QACrE,0BAA0B;QAC1B,EAAE;QACF,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,2DAA2D;QAC3D,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,wBAAwB,GAAG,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC1D,wEAAwE;QACxE,0EAA0E;QAC1E,0DAA0D;QAC1D,qEAAqE;QACrE,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,6BAA6B;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwD,CAAC;QAC/E,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,+BAAgC,GAAa,CAAC,OAAO,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAA2C,IAAI,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBACvD,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,wEAAwE;QACxE,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,+DAA+D;QAC/D,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAElB,oEAAoE;YACpE,mEAAmE;YACnE,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC/B,IAAI,UAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE;oBAC/C,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI;gBAAE,SAAS;YACvC,mEAAmE;YACnE,sDAAsD;YACtD,IAAI,UAAU,CAAC,gBAAgB,KAAK,IAAI;gBAAE,SAAS;YACnD,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,kCAAkC;YAClC,IAAI,UAAU,CAAC,gBAAgB,KAAK,OAAO,CAAC,GAAG;gBAAE,SAAS;YAC1D,wEAAwE;YACxE,mEAAmE;YACnE,IAAI,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;gBACrB,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc;oBACtC,CAAC,CAAC,6BAA6B;oBAC/B,CAAC,CAAC,GAAG,UAAU,CAAC,kBAAkB,0BAA0B,CAAC;gBAC/D,MAAM,GAAG,GAAG,aAAa,IAAI,6BAA6B,MAAM,EAAE,CAAC;gBACnE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;gBACrB,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,wDAAwD,EAAE;oBACjE,UAAU,EAAE,IAAI;oBAChB,MAAM;iBACP,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,MAAM,WAAW,GAAG,uDAAuD,CAAC;YAC5E,IAAI,CAAC,SAAS,GAAG,aAAa,IAAI,WAAW,WAAW,EAAE,CAAC;YAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,2DAA2D,EAAE;gBACpE,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC;QAED,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,oDAAoD;QACpD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;gBAClD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ;QACN,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,eAAe;QACb,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,iFAAiF;IACjF,eAAe;QACb,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;QACf,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,UAAkB,EAClB,YAAoB,EACpB,KAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAC9B,yDAAyD;QACzD,6DAA6D;QAC7D,wCAAwC;QACxC,MAAM,SAAS,GAAG,oBAAoB,YAAY,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QACzF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,MAAoB;QAC9D,MAAM,SAAS,GAAG,oBAAoB,UAAU,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,UAAU,CAAC,UAAkB,EAAE,MAAyB,EAAE,MAAc;QAC9E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;CACF"}