@0xmaxma/claude-gateway 1.8.14 → 2.0.0

package/dist/orchestration/line-loading.d.ts

@@ -0,0 +1,21 @@
+import type { AgentConfig } from '../types';
+import { OrchestrationStore } from './store';
+/** LINE clears loading on every outbound message, including task acknowledgements.
+ * Renew from durable work state, not the lifetime of the ingress HTTP request. */
+export declare class LineLoading {
+    private readonly store;
+    private readonly agent;
+    private readonly enabled;
+    private readonly request;
+    private timer?;
+    private readonly abort;
+    private readonly pulses;
+    private readonly pending;
+    private closed;
+    constructor(store: OrchestrationStore, agent: () => AgentConfig, enabled: () => boolean, request?: typeof fetch);
+    start(): void;
+    tick(): Promise<void>;
+    private busy;
+    close(): void;
+}
+//# sourceMappingURL=line-loading.d.ts.map

package/dist/orchestration/line-loading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-loading.d.ts","sourceRoot":"","sources":["../../src/orchestration/line-loading.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE7C;kFACkF;AAClF,qBAAa,WAAW;IAOV,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAsB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAC5E,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAiB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPnE,OAAO,CAAC,KAAK,CAAC,CAAiC;IAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsD;IAC7E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,MAAM,CAAS;gBAEM,KAAK,EAAE,kBAAkB,EAAmB,KAAK,EAAE,MAAM,WAAW,EAC9E,OAAO,EAAE,MAAM,OAAO,EAAmB,OAAO,GAAE,OAAO,KAAa;IAEzF,KAAK,IAAI,IAAI;IAMP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuC3B,OAAO,CAAC,IAAI;IAQZ,KAAK,IAAI,IAAI;CAMd"}

package/dist/orchestration/line-loading.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LineLoading = void 0;
+const line_request_order_1 = require("../shared/line-request-order");
+/** LINE clears loading on every outbound message, including task acknowledgements.
+ * Renew from durable work state, not the lifetime of the ingress HTTP request. */
+class LineLoading {
+    constructor(store, agent, enabled, request = fetch) {
+        this.store = store;
+        this.agent = agent;
+        this.enabled = enabled;
+        this.request = request;
+        this.abort = new AbortController();
+        this.pulses = new Map();
+        this.pending = new Set();
+        this.closed = false;
+    }
+    start() {
+        if (this.timer || this.closed)
+            return;
+        this.timer = setInterval(() => { void this.tick().catch(() => { }); }, 1000);
+        this.timer.unref();
+    }
+    async tick() {
+        if (this.closed)
+            return;
+        const token = this.agent().line?.channelAccessToken;
+        if (!this.enabled() || !token) {
+            this.pulses.clear();
+            return;
+        }
+        // User IDs start with U; LINE does not support this API for groups or rooms.
+        // Waiting for user input / reconciliation is not active work.
+        const chats = this.store.all(`SELECT c.chat_id,
+      COALESCE((SELECT MAX(d.rowid) FROM deliveries d JOIN conversation_bindings b ON b.id=d.binding_id
+        WHERE b.channel='line' AND b.chat_id=c.chat_id AND d.state='delivered'),0) AS receipt
+      FROM conversations c WHERE c.source='line' AND c.chat_id GLOB 'U*' AND (
+        EXISTS (SELECT 1 FROM conversation_inputs i WHERE i.conversation_id=c.id AND i.status IN ('accepted','assigned')) OR
+        EXISTS (SELECT 1 FROM conversation_decisions d WHERE d.conversation_id=c.id AND d.state IN ('running','interrupting')) OR
+        EXISTS (SELECT 1 FROM tasks t WHERE t.conversation_id=c.id AND t.state IN ('queued','starting','running','interrupting','cancel_requested'))
+      ) GROUP BY c.chat_id`);
+        const busy = new Set(chats.map(row => String(row.chat_id)));
+        for (const chat of this.pulses.keys())
+            if (!busy.has(chat))
+                this.pulses.delete(chat);
+        await Promise.all(chats.map(async (row) => {
+            const chat = String(row.chat_id), receipt = Number(row.receipt), now = Date.now();
+            const previous = this.pulses.get(chat);
+            if (this.pending.has(chat) || (previous && now - previous.at < 4000 && previous.receipt === receipt))
+                return;
+            this.pulses.set(chat, { at: now, receipt });
+            this.pending.add(chat);
+            try {
+                // Five-second expiry bounds a stale indicator if a request races the final
+                // reply or work fails without a reply. LINE offers no explicit stop API.
+                await (0, line_request_order_1.orderLineRequest)(this.agent().id, chat, async () => {
+                    // A final reply may have finished while this renewal was queued.
+                    if (this.closed || !this.enabled() || !this.busy(chat))
+                        return;
+                    await this.request('https://api.line.me/v2/bot/chat/loading/start', {
+                        method: 'POST', headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` },
+                        body: JSON.stringify({ chatId: chat, loadingSeconds: 5 }),
+                        signal: AbortSignal.any([this.abort.signal, AbortSignal.timeout(3000)]),
+                    });
+                });
+            }
+            catch { /* Best effort; never fail or delay inference/delivery. Retry on the next renewal. */ }
+            finally {
+                this.pending.delete(chat);
+            }
+        }));
+    }
+    busy(chat) {
+        return !!this.store.get(`SELECT c.id FROM conversations c WHERE c.source='line' AND c.chat_id=? AND (
+      EXISTS (SELECT 1 FROM conversation_inputs i WHERE i.conversation_id=c.id AND i.status IN ('accepted','assigned')) OR
+      EXISTS (SELECT 1 FROM conversation_decisions d WHERE d.conversation_id=c.id AND d.state IN ('running','interrupting')) OR
+      EXISTS (SELECT 1 FROM tasks t WHERE t.conversation_id=c.id AND t.state IN ('queued','starting','running','interrupting','cancel_requested'))
+    ) LIMIT 1`, chat);
+    }
+    close() {
+        this.closed = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.abort.abort();
+        this.pulses.clear();
+    }
+}
+exports.LineLoading = LineLoading;
+//# sourceMappingURL=line-loading.js.map

package/dist/orchestration/line-loading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-loading.js","sourceRoot":"","sources":["../../src/orchestration/line-loading.ts"],"names":[],"mappings":";;;AAAA,qEAAgE;AAIhE;kFACkF;AAClF,MAAa,WAAW;IAOtB,YAA6B,KAAyB,EAAmB,KAAwB,EAC9E,OAAsB,EAAmB,UAAwB,KAAK;QAD5D,UAAK,GAAL,KAAK,CAAoB;QAAmB,UAAK,GAAL,KAAK,CAAmB;QAC9E,YAAO,GAAP,OAAO,CAAe;QAAmB,YAAO,GAAP,OAAO,CAAsB;QANxE,UAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9B,WAAM,GAAG,IAAI,GAAG,EAA2C,CAAC;QAC5D,YAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,WAAM,GAAG,KAAK,CAAC;IAGqE,CAAC;IAE7F,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACtC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/D,6EAA6E;QAC7E,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;;;;;;;2BAON,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC;gBAAE,OAAO;YAC7G,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC;gBACH,2EAA2E;gBAC3E,yEAAyE;gBACzE,MAAM,IAAA,qCAAgB,EAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;oBACvD,iEAAiE;oBACjE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,+CAA+C,EAAE;wBACpE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;wBACjG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;wBACzD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;qBACtE,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,qFAAqF,CAAC,CAAC;oBACzF,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QACxC,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;;;;cAId,EAAE,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AArED,kCAqEC"}

package/dist/orchestration/media.d.ts

@@ -0,0 +1,3 @@
+/** Content-addressed ingestion keeps provider retries bound to the same bytes. */
+export declare function ingestOrchestrationMedia(agentsRoot: string, agentId: string, chatId: string, source: string): string;
+//# sourceMappingURL=media.d.ts.map

package/dist/orchestration/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/orchestration/media.ts"],"names":[],"mappings":"AAMA,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAmBpH"}

package/dist/orchestration/media.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ingestOrchestrationMedia = ingestOrchestrationMedia;
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const types_1 = require("./types");
+const media_store_1 = require("../history/media-store");
+/** Content-addressed ingestion keeps provider retries bound to the same bytes. */
+function ingestOrchestrationMedia(agentsRoot, agentId, chatId, source) {
+    if ((0, fs_1.statSync)(source).size > 50 * 1024 * 1024)
+        throw new types_1.OrchestrationError('ATTACHMENT_TOO_LARGE');
+    const bytes = (0, fs_1.readFileSync)(source);
+    if (bytes.length > 50 * 1024 * 1024)
+        throw new types_1.OrchestrationError('ATTACHMENT_TOO_LARGE');
+    const digest = (0, crypto_1.createHash)('sha256').update(bytes).digest('hex');
+    const suffix = (0, path_1.extname)(source).slice(0, 12).replace(/[^a-zA-Z0-9.]/g, '');
+    const relative = (0, path_1.join)('media', chatId, `orchestration-${digest}${suffix}`);
+    const destination = media_store_1.MediaStore.resolvePath(agentsRoot, agentId, relative);
+    (0, fs_1.mkdirSync)((0, path_1.join)(destination, '..'), { recursive: true, mode: 0o700 });
+    try {
+        const file = (0, fs_1.openSync)(destination, 'wx', 0o600);
+        try {
+            (0, fs_1.writeFileSync)(file, bytes);
+            (0, fs_1.fsyncSync)(file);
+        }
+        finally {
+            (0, fs_1.closeSync)(file);
+        }
+        const directory = (0, fs_1.openSync)((0, path_1.join)(destination, '..'), 'r');
+        try {
+            (0, fs_1.fsyncSync)(directory);
+        }
+        finally {
+            (0, fs_1.closeSync)(directory);
+        }
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        if ((0, crypto_1.createHash)('sha256').update((0, fs_1.readFileSync)(destination)).digest('hex') !== digest)
+            throw new types_1.OrchestrationError('ATTACHMENT_RECONCILIATION_REQUIRED');
+    }
+    return relative;
+}
+//# sourceMappingURL=media.js.map

package/dist/orchestration/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/orchestration/media.ts"],"names":[],"mappings":";;AAOA,4DAmBC;AA1BD,mCAAoC;AACpC,2BAAsG;AACtG,+BAAqC;AACrC,mCAA6C;AAC7C,wDAAoD;AAEpD,kFAAkF;AAClF,SAAgB,wBAAwB,CAAC,UAAkB,EAAE,OAAe,EAAE,MAAc,EAAE,MAAc;IAC1G,IAAI,IAAA,aAAQ,EAAC,MAAM,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,0BAAkB,CAAC,sBAAsB,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,IAAA,iBAAY,EAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,0BAAkB,CAAC,sBAAsB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,wBAAU,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAA,cAAS,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,aAAQ,EAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YAAC,IAAA,kBAAa,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,IAAA,cAAS,EAAC,IAAI,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAA,cAAS,EAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAA,aAAQ,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,IAAA,cAAS,EAAC,SAAS,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAA,cAAS,EAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,IAAI,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,iBAAY,EAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,0BAAkB,CAAC,oCAAoC,CAAC,CAAC;IAC1J,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/orchestration/migrations/schema.d.ts

@@ -0,0 +1,3 @@
+/** Additive sidecar only. Canonical conversation history stays in the existing stores. */
+export declare const ORCHESTRATION_SCHEMA_V1 = "\nCREATE TABLE IF NOT EXISTS orchestration_schema_migrations(version INTEGER PRIMARY KEY, applied_at INTEGER NOT NULL);\nCREATE TABLE conversations(\n id TEXT PRIMARY KEY, agent_id TEXT NOT NULL, agent_session_id TEXT NOT NULL,\n source TEXT NOT NULL, account_id TEXT NOT NULL, chat_id TEXT NOT NULL, thread_key TEXT NOT NULL,\n owner_principal_id TEXT NOT NULL, status TEXT NOT NULL DEFAULT 'active', stream_id TEXT NOT NULL UNIQUE,\n last_event_seq INTEGER NOT NULL DEFAULT 0, last_input_seq INTEGER NOT NULL DEFAULT 0,\n epoch INTEGER NOT NULL DEFAULT 0, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL,\n UNIQUE(agent_id,source,account_id,chat_id,thread_key,agent_session_id));\nCREATE TABLE conversation_members(conversation_id TEXT NOT NULL REFERENCES conversations(id), principal_id TEXT NOT NULL,\n role TEXT NOT NULL, PRIMARY KEY(conversation_id,principal_id));\nCREATE TABLE conversation_bindings(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n channel TEXT NOT NULL, account_id TEXT NOT NULL, chat_id TEXT NOT NULL, thread_key TEXT NOT NULL,\n reply_policy TEXT NOT NULL, capabilities_json TEXT NOT NULL,\n UNIQUE(conversation_id,channel,account_id,chat_id,thread_key));\nCREATE TABLE conversation_inputs(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n input_seq INTEGER NOT NULL, principal_id TEXT NOT NULL, binding_id TEXT NOT NULL REFERENCES conversation_bindings(id),\n modality TEXT NOT NULL, text TEXT NOT NULL, attachment_refs_json TEXT NOT NULL, request_id TEXT,\n store_user_message INTEGER NOT NULL, status TEXT NOT NULL DEFAULT 'accepted', created_at INTEGER NOT NULL, ingress_json TEXT NOT NULL DEFAULT '{}',\n UNIQUE(conversation_id,input_seq));\nCREATE INDEX pending_inputs ON conversation_inputs(conversation_id,status,input_seq);\nCREATE TABLE ingress_receipts(ingress_key TEXT PRIMARY KEY, payload_hash TEXT NOT NULL,\n input_id TEXT NOT NULL REFERENCES conversation_inputs(id), conversation_id TEXT NOT NULL REFERENCES conversations(id), accepted_at INTEGER NOT NULL);\nCREATE TABLE conversation_decisions(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n epoch INTEGER NOT NULL, kind TEXT NOT NULL, request_id TEXT, state TEXT NOT NULL, session_id TEXT NOT NULL,\n input_ids_json TEXT NOT NULL, notification_ids_json TEXT NOT NULL, started_at INTEGER NOT NULL, ended_at INTEGER);\nCREATE UNIQUE INDEX one_active_decision ON conversation_decisions(conversation_id) WHERE state IN ('running','interrupting');\nCREATE TABLE assistant_responses(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n decision_id TEXT NOT NULL REFERENCES conversation_decisions(id), request_id TEXT, state TEXT NOT NULL,\n generated_text TEXT NOT NULL, created_at INTEGER NOT NULL, completed_at INTEGER);\nCREATE TABLE tasks(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n state TEXT NOT NULL, state_version INTEGER NOT NULL, revision INTEGER NOT NULL,\n active_attempt_id TEXT, snapshot_json TEXT NOT NULL, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL);\nCREATE INDEX task_queue ON tasks(state,created_at);\nCREATE INDEX conversation_tasks ON tasks(conversation_id,state);\nCREATE TABLE task_revisions(task_id TEXT NOT NULL REFERENCES tasks(id), revision INTEGER NOT NULL,\n payload_json TEXT NOT NULL, PRIMARY KEY(task_id,revision));\nCREATE TABLE task_attempts(id TEXT PRIMARY KEY, task_id TEXT NOT NULL REFERENCES tasks(id), generation INTEGER NOT NULL,\n revision INTEGER NOT NULL, state TEXT NOT NULL, payload_json TEXT NOT NULL, UNIQUE(task_id,generation));\nCREATE UNIQUE INDEX one_active_attempt ON task_attempts(task_id) WHERE state IN ('starting','running','unknown');\nCREATE TABLE task_commands(action_id TEXT PRIMARY KEY, task_id TEXT REFERENCES tasks(id),\n conversation_id TEXT NOT NULL REFERENCES conversations(id), principal_id TEXT NOT NULL,\n decision_id TEXT, command_type TEXT NOT NULL, payload_hash TEXT NOT NULL, receipt_json TEXT NOT NULL, created_at INTEGER NOT NULL);\nCREATE TABLE conversation_events(conversation_id TEXT NOT NULL REFERENCES conversations(id), seq INTEGER NOT NULL,\n event_id TEXT NOT NULL UNIQUE, type TEXT NOT NULL, payload_json TEXT NOT NULL, occurred_at INTEGER NOT NULL,\n PRIMARY KEY(conversation_id,seq));\nCREATE TABLE worker_events(attempt_id TEXT NOT NULL REFERENCES task_attempts(id), local_seq INTEGER NOT NULL,\n type TEXT NOT NULL, payload_json TEXT NOT NULL, occurred_at INTEGER NOT NULL, PRIMARY KEY(attempt_id,local_seq));\nCREATE TABLE outbox(id TEXT PRIMARY KEY, kind TEXT NOT NULL, dedup_key TEXT NOT NULL UNIQUE,\n payload_json TEXT NOT NULL, state TEXT NOT NULL DEFAULT 'pending', attempt_count INTEGER NOT NULL DEFAULT 0,\n available_at INTEGER NOT NULL, lease_owner TEXT, lease_expires_at INTEGER, last_error TEXT, created_at INTEGER NOT NULL);\nCREATE INDEX pending_outbox ON outbox(state,available_at);\nCREATE TABLE deliveries(id TEXT PRIMARY KEY, response_id TEXT REFERENCES assistant_responses(id), event_id TEXT,\n binding_id TEXT NOT NULL REFERENCES conversation_bindings(id), modality TEXT NOT NULL, state TEXT NOT NULL,\n provider_message_id TEXT, delivered_text TEXT, audio_progress_json TEXT, updated_at INTEGER NOT NULL);\nCREATE TABLE task_resources(id TEXT PRIMARY KEY, task_id TEXT NOT NULL REFERENCES tasks(id), workspace_id TEXT NOT NULL,\n mode TEXT NOT NULL, base_commit TEXT, worktree_path TEXT, context_snapshot_ref TEXT, lock_key TEXT,\n lifecycle_state TEXT NOT NULL, cleanup_after INTEGER);\nCREATE UNIQUE INDEX resource_lock ON task_resources(lock_key) WHERE lock_key IS NOT NULL AND lifecycle_state = 'active';\nCREATE TABLE notifications(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n task_id TEXT NOT NULL REFERENCES tasks(id), task_state_version INTEGER NOT NULL,\n originating_binding_id TEXT NOT NULL REFERENCES conversation_bindings(id), status TEXT NOT NULL DEFAULT 'pending',\n decision_id TEXT, UNIQUE(task_id,task_state_version));\nCREATE TABLE history_operations(operation_id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),\n input_id TEXT REFERENCES conversation_inputs(id), response_id TEXT REFERENCES assistant_responses(id),\n intended_action TEXT NOT NULL, canonical_message_ref TEXT, state TEXT NOT NULL, updated_at INTEGER NOT NULL);\nCREATE TABLE runtime_sessions(id TEXT PRIMARY KEY, role TEXT NOT NULL, conversation_id TEXT REFERENCES conversations(id),\n task_id TEXT REFERENCES tasks(id), attempt_id TEXT REFERENCES task_attempts(id), backend TEXT NOT NULL,\n generation INTEGER NOT NULL, lifecycle_state TEXT NOT NULL, last_seen_at INTEGER NOT NULL);\nCREATE TABLE task_files(id TEXT PRIMARY KEY,task_id TEXT NOT NULL REFERENCES tasks(id),attempt_id TEXT NOT NULL,\n action_id TEXT NOT NULL,path TEXT NOT NULL,name TEXT NOT NULL,kind TEXT NOT NULL,caption TEXT NOT NULL,response_id TEXT,\n created_at INTEGER NOT NULL,args_hash TEXT NOT NULL,UNIQUE(attempt_id,action_id));\nCREATE TABLE response_speech(response_id TEXT PRIMARY KEY REFERENCES assistant_responses(id),text TEXT NOT NULL);\nCREATE TABLE voice_note_transcripts(input_id TEXT PRIMARY KEY REFERENCES conversation_inputs(id),state TEXT NOT NULL,text TEXT,error_code TEXT);\n";
+//# sourceMappingURL=schema.d.ts.map

package/dist/orchestration/migrations/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/orchestration/migrations/schema.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,eAAO,MAAM,uBAAuB,ypOA0EnC,CAAC"}

package/dist/orchestration/migrations/schema.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORCHESTRATION_SCHEMA_V1 = void 0;
+/** Additive sidecar only. Canonical conversation history stays in the existing stores. */
+exports.ORCHESTRATION_SCHEMA_V1 = `
+CREATE TABLE IF NOT EXISTS orchestration_schema_migrations(version INTEGER PRIMARY KEY, applied_at INTEGER NOT NULL);
+CREATE TABLE conversations(
+ id TEXT PRIMARY KEY, agent_id TEXT NOT NULL, agent_session_id TEXT NOT NULL,
+ source TEXT NOT NULL, account_id TEXT NOT NULL, chat_id TEXT NOT NULL, thread_key TEXT NOT NULL,
+ owner_principal_id TEXT NOT NULL, status TEXT NOT NULL DEFAULT 'active', stream_id TEXT NOT NULL UNIQUE,
+ last_event_seq INTEGER NOT NULL DEFAULT 0, last_input_seq INTEGER NOT NULL DEFAULT 0,
+ epoch INTEGER NOT NULL DEFAULT 0, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL,
+ UNIQUE(agent_id,source,account_id,chat_id,thread_key,agent_session_id));
+CREATE TABLE conversation_members(conversation_id TEXT NOT NULL REFERENCES conversations(id), principal_id TEXT NOT NULL,
+ role TEXT NOT NULL, PRIMARY KEY(conversation_id,principal_id));
+CREATE TABLE conversation_bindings(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ channel TEXT NOT NULL, account_id TEXT NOT NULL, chat_id TEXT NOT NULL, thread_key TEXT NOT NULL,
+ reply_policy TEXT NOT NULL, capabilities_json TEXT NOT NULL,
+ UNIQUE(conversation_id,channel,account_id,chat_id,thread_key));
+CREATE TABLE conversation_inputs(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ input_seq INTEGER NOT NULL, principal_id TEXT NOT NULL, binding_id TEXT NOT NULL REFERENCES conversation_bindings(id),
+ modality TEXT NOT NULL, text TEXT NOT NULL, attachment_refs_json TEXT NOT NULL, request_id TEXT,
+ store_user_message INTEGER NOT NULL, status TEXT NOT NULL DEFAULT 'accepted', created_at INTEGER NOT NULL, ingress_json TEXT NOT NULL DEFAULT '{}',
+ UNIQUE(conversation_id,input_seq));
+CREATE INDEX pending_inputs ON conversation_inputs(conversation_id,status,input_seq);
+CREATE TABLE ingress_receipts(ingress_key TEXT PRIMARY KEY, payload_hash TEXT NOT NULL,
+ input_id TEXT NOT NULL REFERENCES conversation_inputs(id), conversation_id TEXT NOT NULL REFERENCES conversations(id), accepted_at INTEGER NOT NULL);
+CREATE TABLE conversation_decisions(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ epoch INTEGER NOT NULL, kind TEXT NOT NULL, request_id TEXT, state TEXT NOT NULL, session_id TEXT NOT NULL,
+ input_ids_json TEXT NOT NULL, notification_ids_json TEXT NOT NULL, started_at INTEGER NOT NULL, ended_at INTEGER);
+CREATE UNIQUE INDEX one_active_decision ON conversation_decisions(conversation_id) WHERE state IN ('running','interrupting');
+CREATE TABLE assistant_responses(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ decision_id TEXT NOT NULL REFERENCES conversation_decisions(id), request_id TEXT, state TEXT NOT NULL,
+ generated_text TEXT NOT NULL, created_at INTEGER NOT NULL, completed_at INTEGER);
+CREATE TABLE tasks(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ state TEXT NOT NULL, state_version INTEGER NOT NULL, revision INTEGER NOT NULL,
+ active_attempt_id TEXT, snapshot_json TEXT NOT NULL, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL);
+CREATE INDEX task_queue ON tasks(state,created_at);
+CREATE INDEX conversation_tasks ON tasks(conversation_id,state);
+CREATE TABLE task_revisions(task_id TEXT NOT NULL REFERENCES tasks(id), revision INTEGER NOT NULL,
+ payload_json TEXT NOT NULL, PRIMARY KEY(task_id,revision));
+CREATE TABLE task_attempts(id TEXT PRIMARY KEY, task_id TEXT NOT NULL REFERENCES tasks(id), generation INTEGER NOT NULL,
+ revision INTEGER NOT NULL, state TEXT NOT NULL, payload_json TEXT NOT NULL, UNIQUE(task_id,generation));
+CREATE UNIQUE INDEX one_active_attempt ON task_attempts(task_id) WHERE state IN ('starting','running','unknown');
+CREATE TABLE task_commands(action_id TEXT PRIMARY KEY, task_id TEXT REFERENCES tasks(id),
+ conversation_id TEXT NOT NULL REFERENCES conversations(id), principal_id TEXT NOT NULL,
+ decision_id TEXT, command_type TEXT NOT NULL, payload_hash TEXT NOT NULL, receipt_json TEXT NOT NULL, created_at INTEGER NOT NULL);
+CREATE TABLE conversation_events(conversation_id TEXT NOT NULL REFERENCES conversations(id), seq INTEGER NOT NULL,
+ event_id TEXT NOT NULL UNIQUE, type TEXT NOT NULL, payload_json TEXT NOT NULL, occurred_at INTEGER NOT NULL,
+ PRIMARY KEY(conversation_id,seq));
+CREATE TABLE worker_events(attempt_id TEXT NOT NULL REFERENCES task_attempts(id), local_seq INTEGER NOT NULL,
+ type TEXT NOT NULL, payload_json TEXT NOT NULL, occurred_at INTEGER NOT NULL, PRIMARY KEY(attempt_id,local_seq));
+CREATE TABLE outbox(id TEXT PRIMARY KEY, kind TEXT NOT NULL, dedup_key TEXT NOT NULL UNIQUE,
+ payload_json TEXT NOT NULL, state TEXT NOT NULL DEFAULT 'pending', attempt_count INTEGER NOT NULL DEFAULT 0,
+ available_at INTEGER NOT NULL, lease_owner TEXT, lease_expires_at INTEGER, last_error TEXT, created_at INTEGER NOT NULL);
+CREATE INDEX pending_outbox ON outbox(state,available_at);
+CREATE TABLE deliveries(id TEXT PRIMARY KEY, response_id TEXT REFERENCES assistant_responses(id), event_id TEXT,
+ binding_id TEXT NOT NULL REFERENCES conversation_bindings(id), modality TEXT NOT NULL, state TEXT NOT NULL,
+ provider_message_id TEXT, delivered_text TEXT, audio_progress_json TEXT, updated_at INTEGER NOT NULL);
+CREATE TABLE task_resources(id TEXT PRIMARY KEY, task_id TEXT NOT NULL REFERENCES tasks(id), workspace_id TEXT NOT NULL,
+ mode TEXT NOT NULL, base_commit TEXT, worktree_path TEXT, context_snapshot_ref TEXT, lock_key TEXT,
+ lifecycle_state TEXT NOT NULL, cleanup_after INTEGER);
+CREATE UNIQUE INDEX resource_lock ON task_resources(lock_key) WHERE lock_key IS NOT NULL AND lifecycle_state = 'active';
+CREATE TABLE notifications(id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ task_id TEXT NOT NULL REFERENCES tasks(id), task_state_version INTEGER NOT NULL,
+ originating_binding_id TEXT NOT NULL REFERENCES conversation_bindings(id), status TEXT NOT NULL DEFAULT 'pending',
+ decision_id TEXT, UNIQUE(task_id,task_state_version));
+CREATE TABLE history_operations(operation_id TEXT PRIMARY KEY, conversation_id TEXT NOT NULL REFERENCES conversations(id),
+ input_id TEXT REFERENCES conversation_inputs(id), response_id TEXT REFERENCES assistant_responses(id),
+ intended_action TEXT NOT NULL, canonical_message_ref TEXT, state TEXT NOT NULL, updated_at INTEGER NOT NULL);
+CREATE TABLE runtime_sessions(id TEXT PRIMARY KEY, role TEXT NOT NULL, conversation_id TEXT REFERENCES conversations(id),
+ task_id TEXT REFERENCES tasks(id), attempt_id TEXT REFERENCES task_attempts(id), backend TEXT NOT NULL,
+ generation INTEGER NOT NULL, lifecycle_state TEXT NOT NULL, last_seen_at INTEGER NOT NULL);
+CREATE TABLE task_files(id TEXT PRIMARY KEY,task_id TEXT NOT NULL REFERENCES tasks(id),attempt_id TEXT NOT NULL,
+ action_id TEXT NOT NULL,path TEXT NOT NULL,name TEXT NOT NULL,kind TEXT NOT NULL,caption TEXT NOT NULL,response_id TEXT,
+ created_at INTEGER NOT NULL,args_hash TEXT NOT NULL,UNIQUE(attempt_id,action_id));
+CREATE TABLE response_speech(response_id TEXT PRIMARY KEY REFERENCES assistant_responses(id),text TEXT NOT NULL);
+CREATE TABLE voice_note_transcripts(input_id TEXT PRIMARY KEY REFERENCES conversation_inputs(id),state TEXT NOT NULL,text TEXT,error_code TEXT);
+`;
+//# sourceMappingURL=schema.js.map

package/dist/orchestration/migrations/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/orchestration/migrations/schema.ts"],"names":[],"mappings":";;;AAAA,0FAA0F;AAC7E,QAAA,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0EtC,CAAC"}

package/dist/orchestration/notification-mailbox.d.ts

@@ -0,0 +1,5 @@
+import { OrchestrationStore } from './store';
+/** Retry reports, never task execution. Decisions/inputs retain the retry clock
+ * across restarts, including failed reports written before this implementation. */
+export declare function pendingReports(store: OrchestrationStore, activeSessions: string[], scheduled: string[], automatic: boolean, now?: number): import("./store").Row[];
+//# sourceMappingURL=notification-mailbox.d.ts.map

package/dist/orchestration/notification-mailbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-mailbox.d.ts","sourceRoot":"","sources":["../../src/orchestration/notification-mailbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE7C;mFACmF;AACnF,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,SAAa,2BAuB5I"}

package/dist/orchestration/notification-mailbox.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pendingReports = pendingReports;
+/** Retry reports, never task execution. Decisions/inputs retain the retry clock
+ * across restarts, including failed reports written before this implementation. */
+function pendingReports(store, activeSessions, scheduled, automatic, now = Date.now()) {
+    return store.all(`WITH candidates AS (
+    SELECT n.id notification_id,c.*,i.id previous_input_id,i.input_seq previous_seq,
+      d.state decision_state,d.ended_at,
+      (SELECT COUNT(*) FROM conversation_decisions x WHERE x.conversation_id=c.id AND x.state='failed'
+        AND EXISTS(SELECT 1 FROM json_each(x.notification_ids_json) WHERE value=n.id)) attempts
+    FROM notifications n JOIN conversations c ON c.id=n.conversation_id
+    LEFT JOIN conversation_inputs i ON i.id=(SELECT x.id FROM conversation_inputs x
+      WHERE x.conversation_id=c.id AND (json_extract(x.ingress_json,'$.ingressKey')='notification:'||n.id
+        OR json_extract(x.ingress_json,'$.ingressKey') LIKE 'notification:'||n.id||':retry:%') ORDER BY x.input_seq DESC LIMIT 1)
+    LEFT JOIN conversation_decisions d ON d.id=(SELECT d2.id FROM conversation_decisions d2
+      WHERE d2.conversation_id=c.id AND EXISTS(SELECT 1 FROM json_each(d2.notification_ids_json) WHERE value=n.id)
+      ORDER BY d2.epoch DESC LIMIT 1)
+    WHERE n.status='pending'
+      AND c.agent_session_id NOT IN (SELECT value FROM json_each(?))
+      AND (? OR c.id IN (SELECT value FROM json_each(?)) OR EXISTS (SELECT 1 FROM tasks monitored WHERE monitored.id=n.task_id AND monitored.state='running' AND json_extract(monitored.snapshot_json,'$.supervision.id') IS NOT NULL AND monitored.state_version=n.task_state_version))
+      AND NOT EXISTS(SELECT 1 FROM conversation_inputs queued WHERE queued.conversation_id=c.id AND queued.status IN ('accepted','assigned'))
+  ), eligible AS (
+    SELECT *,ROW_NUMBER() OVER (PARTITION BY id ORDER BY notification_id) position FROM candidates
+    WHERE decision_state IS NULL OR decision_state='completed' OR (decision_state='failed'
+      AND ended_at+MIN(300000,5000*(1 << MIN(6,attempts-1)))<=?)
+  ) SELECT * FROM eligible WHERE position=1 ORDER BY notification_id LIMIT 20`, JSON.stringify(activeSessions), automatic ? 1 : 0, JSON.stringify(scheduled), now);
+}
+//# sourceMappingURL=notification-mailbox.js.map

package/dist/orchestration/notification-mailbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-mailbox.js","sourceRoot":"","sources":["../../src/orchestration/notification-mailbox.ts"],"names":[],"mappings":";;AAIA,wCAuBC;AAzBD;mFACmF;AACnF,SAAgB,cAAc,CAAC,KAAyB,EAAE,cAAwB,EAAE,SAAmB,EAAE,SAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC3I,OAAO,KAAK,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;8EAoB2D,EAC5E,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AACrF,CAAC"}

package/dist/orchestration/process-activity.d.ts

@@ -0,0 +1,23 @@
+export interface ProcessSample {
+    observedAt: number;
+    available: boolean;
+    processCount?: number;
+    cpuTicksDelta?: number;
+    childCpuTicksDelta?: number;
+    readBytesDelta?: number;
+    writeBytesDelta?: number;
+    membershipChanged?: boolean;
+    ioAvailable?: boolean;
+}
+/** Read counters only, never argv/env/output. A process identity is PID + start time.
+ * Descendants in new process groups are included while still linked to the root.
+ * Detached/reparented children outside the original group cannot be proven here. */
+export declare class ProcessActivitySampler {
+    private readonly pid;
+    private readonly enabled;
+    private rootStart?;
+    private previous?;
+    constructor(pid: () => number | undefined, enabled?: boolean);
+    sample(): Promise<ProcessSample>;
+}
+//# sourceMappingURL=process-activity.d.ts.map

package/dist/orchestration/process-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-activity.d.ts","sourceRoot":"","sources":["../../src/orchestration/process-activity.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAGD;;oFAEoF;AACpF,qBAAa,sBAAsB;IAGrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAA4B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpF,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,CAAsB;gBACV,GAAG,EAAE,MAAM,MAAM,GAAG,SAAS,EAAmB,OAAO,UAAO;IACrF,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC;CAyDvC"}

package/dist/orchestration/process-activity.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProcessActivitySampler = void 0;
+const promises_1 = require("fs/promises");
+/** Read counters only, never argv/env/output. A process identity is PID + start time.
+ * Descendants in new process groups are included while still linked to the root.
+ * Detached/reparented children outside the original group cannot be proven here. */
+class ProcessActivitySampler {
+    constructor(pid, enabled = true) {
+        this.pid = pid;
+        this.enabled = enabled;
+    }
+    async sample() {
+        const unavailable = { observedAt: Date.now(), available: false };
+        const pid = this.pid();
+        if (!this.enabled || process.platform !== 'linux' || !pid || pid <= 0)
+            return unavailable;
+        try {
+            const members = new Map();
+            const entries = await (0, promises_1.readdir)('/proc');
+            // Sequential stat reads bound open files and memory on busy shared hosts.
+            for (const entry of entries) {
+                if (!/^\d+$/.test(entry))
+                    continue;
+                try {
+                    const stat = await (0, promises_1.readFile)(`/proc/${entry}/stat`, 'utf8');
+                    const f = stat.slice(stat.lastIndexOf(')') + 2).trim().split(/\s+/);
+                    members.set(Number(entry), { pid: Number(entry), parent: Number(f[1]), group: Number(f[2]), state: f[0], start: f[19], cpu: Number(f[11]) + Number(f[12]) });
+                }
+                catch { /* Processes may exit while being sampled. */ }
+            }
+            const root = members.get(pid);
+            if (!root || ['Z', 'X'].includes(root.state) || (this.rootStart && this.rootStart !== root.start))
+                return unavailable;
+            this.rootStart = root.start;
+            const owned = new Set([pid]);
+            let changed = true;
+            while (changed) {
+                changed = false;
+                for (const m of members.values())
+                    if (!owned.has(m.pid) && (owned.has(m.parent) || (root.group === pid && m.group === pid))) {
+                        owned.add(m.pid);
+                        changed = true;
+                    }
+            }
+            const current = new Map();
+            for (const id of owned) {
+                const m = members.get(id);
+                if (['Z', 'X'].includes(m.state))
+                    continue;
+                try {
+                    const io = await (0, promises_1.readFile)(`/proc/${id}/io`, 'utf8');
+                    // Logical I/O includes pipes/cache, so piped test output is visible.
+                    m.read = Number(/^rchar:\s+(\d+)/m.exec(io)?.[1]);
+                    m.write = Number(/^wchar:\s+(\d+)/m.exec(io)?.[1]);
+                }
+                catch { /* CPU/membership remain usable without I/O permission. */ }
+                try {
+                    const stat = await (0, promises_1.readFile)(`/proc/${id}/stat`, 'utf8');
+                    if (stat.slice(stat.lastIndexOf(')') + 2).trim().split(/\s+/)[19] !== m.start)
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                current.set(`${id}:${m.start}`, m);
+            }
+            const result = { observedAt: Date.now(), available: true, processCount: current.size, ioAvailable: [...current.values()].every(m => Number.isFinite(m.read) && Number.isFinite(m.write)) };
+            if (this.previous) {
+                result.childCpuTicksDelta = 0;
+                result.cpuTicksDelta = 0;
+                result.readBytesDelta = 0;
+                result.writeBytesDelta = 0;
+                result.membershipChanged = current.size !== this.previous.size || [...current.keys()].some(k => !this.previous.has(k));
+                for (const [key, m] of current) {
+                    const prior = this.previous.get(key);
+                    result.cpuTicksDelta += Math.max(0, m.cpu - (prior?.cpu ?? 0));
+                    if (m.pid !== pid)
+                        result.childCpuTicksDelta += Math.max(0, m.cpu - (prior?.cpu ?? 0));
+                    if (Number.isFinite(m.read) && (!prior || Number.isFinite(prior.read)))
+                        result.readBytesDelta += Math.max(0, m.read - (prior?.read ?? 0));
+                    if (Number.isFinite(m.write) && (!prior || Number.isFinite(prior.write)))
+                        result.writeBytesDelta += Math.max(0, m.write - (prior?.write ?? 0));
+                }
+            }
+            this.previous = current;
+            return result;
+        }
+        catch {
+            return unavailable;
+        }
+    }
+}
+exports.ProcessActivitySampler = ProcessActivitySampler;
+//# sourceMappingURL=process-activity.js.map

package/dist/orchestration/process-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-activity.js","sourceRoot":"","sources":["../../src/orchestration/process-activity.ts"],"names":[],"mappings":";;;AAAA,0CAAgD;AAehD;;oFAEoF;AACpF,MAAa,sBAAsB;IAGjC,YAA6B,GAA6B,EAAmB,UAAU,IAAI;QAA9D,QAAG,GAAH,GAAG,CAA0B;QAAmB,YAAO,GAAP,OAAO,CAAO;IAAG,CAAC;IAC/F,KAAK,CAAC,MAAM;QACV,MAAM,WAAW,GAAkB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC;QAC1F,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAC;YACvC,0EAA0E;YAC1E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/J,CAAC;gBAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,WAAW,CAAC;YACrH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,OAAO,OAAO,EAAE,CAAC;gBACf,OAAO,GAAG,KAAK,CAAC;gBAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;wBAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;wBAAC,OAAO,GAAG,IAAI,CAAC;oBAAC,CAAC;YACpK,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;gBAC3B,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC1C,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,IAAA,mBAAQ,EAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACpD,qEAAqE;oBACrE,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClD,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;gBACtE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBACxD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK;wBAAE,SAAS;gBAC1F,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,MAAM,GAAkB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1M,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;gBAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;gBAAC,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;gBAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;gBAC/G,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxH,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACrC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC/D,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;wBAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACvF,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAE,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAK,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3I,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBAAE,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAM,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,WAAW,CAAC;QAAC,CAAC;IACjC,CAAC;CACF;AA7DD,wDA6DC"}

package/dist/orchestration/process-supervisor.d.ts

@@ -0,0 +1,15 @@
+/** Linux process-group evidence ignores exited zombies. Escaped/detached
+ * process groups are outside this proof and must be reconciled separately. */
+export declare function liveGroupMembers(group: number): number[] | undefined;
+export declare function stopProcessGroup(group: number): Promise<boolean>;
+/** Kernel identity prevents signalling an unrelated process after PID reuse. */
+export declare function processFingerprint(pid: number): {
+    bootId: string;
+    startTicks: string;
+} | undefined;
+export declare function cleanupPersistedProcess(identity?: {
+    pid: number;
+    bootId?: string;
+    startTicks?: string;
+}): Promise<boolean>;
+//# sourceMappingURL=process-supervisor.d.ts.map

package/dist/orchestration/process-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-supervisor.d.ts","sourceRoot":"","sources":["../../src/orchestration/process-supervisor.ts"],"names":[],"mappings":"AAEA;8EAC8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAcpE;AACD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAatE;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQlG;AACD,wBAAsB,uBAAuB,CAAC,QAAQ,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAQhI"}

package/dist/orchestration/process-supervisor.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.liveGroupMembers = liveGroupMembers;
+exports.stopProcessGroup = stopProcessGroup;
+exports.processFingerprint = processFingerprint;
+exports.cleanupPersistedProcess = cleanupPersistedProcess;
+const fs_1 = require("fs");
+/** Linux process-group evidence ignores exited zombies. Escaped/detached
+ * process groups are outside this proof and must be reconciled separately. */
+function liveGroupMembers(group) {
+    if (process.platform !== 'linux' || !Number.isSafeInteger(group) || group <= 0)
+        return undefined;
+    const members = [];
+    try {
+        for (const entry of (0, fs_1.readdirSync)('/proc')) {
+            if (!/^\d+$/.test(entry))
+                continue;
+            try {
+                const stat = (0, fs_1.readFileSync)(`/proc/${entry}/stat`, 'utf8');
+                const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+                if (Number(fields[2]) === group && fields[0] !== 'Z' && fields[0] !== 'X')
+                    members.push(Number(entry));
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT' && error.code !== 'ESRCH')
+                    return undefined;
+            }
+        }
+        return members;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function stopProcessGroup(group) {
+    if (process.platform !== 'linux' || !Number.isSafeInteger(group) || group <= 0)
+        return false;
+    try {
+        process.kill(-group, 'SIGTERM');
+    }
+    catch (error) {
+        if (error.code !== 'ESRCH')
+            return false;
+    }
+    const deadline = Date.now() + 2000;
+    while (Date.now() < deadline) {
+        const members = liveGroupMembers(group);
+        if (!members)
+            return false;
+        if (!members.length)
+            return true;
+        await new Promise(resolve => setTimeout(resolve, 25));
+    }
+    try {
+        process.kill(-group, 'SIGKILL');
+    }
+    catch (error) {
+        if (error.code !== 'ESRCH')
+            return false;
+    }
+    await new Promise(resolve => setTimeout(resolve, 50));
+    return liveGroupMembers(group)?.length === 0;
+}
+/** Kernel identity prevents signalling an unrelated process after PID reuse. */
+function processFingerprint(pid) {
+    if (process.platform !== 'linux' || !Number.isSafeInteger(pid) || pid <= 0)
+        return undefined;
+    try {
+        const stat = (0, fs_1.readFileSync)(`/proc/${pid}/stat`, 'utf8');
+        const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+        if (Number(fields[2]) !== pid)
+            return undefined;
+        return { bootId: (0, fs_1.readFileSync)('/proc/sys/kernel/random/boot_id', 'utf8').trim(), startTicks: fields[19] };
+    }
+    catch {
+        return undefined;
+    }
+}
+async function cleanupPersistedProcess(identity) {
+    if (!identity || !Number.isSafeInteger(identity.pid) || identity.pid <= 0)
+        return false;
+    const members = liveGroupMembers(identity.pid);
+    if (!members)
+        return false;
+    if (!members.length)
+        return true;
+    const current = processFingerprint(identity.pid);
+    if (!current || !identity.bootId || !identity.startTicks || current.bootId !== identity.bootId || current.startTicks !== identity.startTicks)
+        return false;
+    return stopProcessGroup(identity.pid);
+}
+//# sourceMappingURL=process-supervisor.js.map

package/dist/orchestration/process-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-supervisor.js","sourceRoot":"","sources":["../../src/orchestration/process-supervisor.ts"],"names":[],"mappings":";;AAIA,4CAcC;AACD,4CAaC;AAGD,gDAQC;AACD,0DAQC;AApDD,2BAA+C;AAE/C;8EAC8E;AAC9E,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,IAAA,gBAAW,EAAC,OAAO,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAChE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;oBAAE,OAAO,SAAS,CAAC;YAAC,CAAC;QACpJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AACM,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IAAC,CAAC;IAC/H,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,IAAA,iBAAY,EAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AACM,KAAK,UAAU,uBAAuB,CAAC,QAAgE;IAC5G,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC3J,OAAO,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC"}