@allocator-one/rcl 4.4.19

package/dist/dispatch/checkpoint-async.js

@@ -0,0 +1,270 @@
+import { z } from 'zod';
+import { blockingCheckpointReviewSchema } from './checkpoint.js';
+import { sha256Hex, stableStringify } from '../report/run-header.js';
+import { MAX_ARTIFACT_BYTES } from '../telemetry/envelope-validation.js';
+import { MAX_TIMER_DELAY_MS } from '../config/schema.js';
+import { hasCheckpointIntentCapacity, MAX_ASYNC_PHASE_RECORDS, MAX_PHASE_NOT_DISPATCHED } from './checkpoint-phase-limits.js';
+const integer = z.number().int().nonnegative().safe();
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const text = z.string().min(1).max(512).refine(value => !!value.trim() && !/[\0\r\n]/.test(value));
+const uuid = z.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i);
+const contextSchema = z.object({ runId: uuid, target: text, planDigest: digest, capturedInputsSha256: digest,
+    launchSha256: digest, startedAtMs: integer, expiresAtMs: integer, reviewerReservedCalls: integer.min(1).max(500) }).strict();
+const callSchema = z.object({ id: text, assignment: text, chunk: integer, chunkSha256: digest,
+    provider: text, model: text, role: text, systemPromptSha256: digest, userPromptSha256: digest }).strict();
+const planSchema = z.object({ version: z.literal(1), context: contextSchema, calls: z.array(callSchema).min(1).max(8),
+    maxPhysicalCalls: integer.min(1).max(500), maxAttemptsPerCall: integer.min(1).max(500), expiresAtMs: integer }).strict();
+const intentSchema = z.object({ callIndex: integer, attemptId: z.string().regex(/^async-[a-f0-9-]{36}$/), startedAtMs: integer }).strict();
+const resultSchema = z.object({ callIndex: integer, attemptId: intentSchema.shape.attemptId, finishedAtMs: integer,
+    reviewBytes: z.string().min(1), reviewSha256: digest, possiblyBilled: z.boolean() }).strict();
+const notDispatchedSchema = z.object({ callIndex: integer, attemptId: intentSchema.shape.attemptId, finishedAtMs: integer,
+    reviewBytes: z.string().min(1), reviewSha256: digest }).strict();
+const eventSchema = z.discriminatedUnion('type', [
+    z.object({ type: z.literal('intent'), intent: intentSchema }).strict(),
+    z.object({ type: z.literal('result'), result: resultSchema }).strict(),
+    z.object({ type: z.literal('not-dispatched'), result: notDispatchedSchema }).strict(),
+    z.object({ type: z.literal('seal'), cutoffMs: integer }).strict(),
+]);
+const recordSchema = z.object({ sequence: integer.min(1), previousDigest: digest, digest, event: eventSchema }).strict();
+const wireSchema = z.object({ version: z.literal(1), plan: planSchema, records: z.array(recordSchema).max(MAX_ASYNC_PHASE_RECORDS) }).strict();
+const asyncReviewSchema = blockingCheckpointReviewSchema.extend({ async: z.literal(true) }).strict();
+const validatedAsyncStates = new WeakMap();
+export function asyncRefuse(condition, reason) { if (!condition)
+    throw new Error(`checkpoint_async_${reason}`); }
+export function freezeAsync(value) { if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+    for (const v of Object.values(value))
+        freezeAsync(v);
+    Object.freeze(value);
+} return value; }
+/** Constant-time admission facts from a state returned by the full validator. */
+export function asyncCallAdmission(state, callIndex) {
+    const metadata = validatedAsyncStates.get(state);
+    asyncRefuse(metadata && Number.isSafeInteger(callIndex) && callIndex >= 0, 'unvalidated_state');
+    const last = metadata.lastIntentByCall.get(callIndex);
+    return freezeAsync({ billedTotal: metadata.billedIntentCount,
+        billedForCall: metadata.billedIntentsByCall.get(callIndex) ?? 0,
+        last, outcome: last && metadata.outcomesByAttempt.get(last.attemptId),
+        declined: last && metadata.notDispatchedByAttempt.get(last.attemptId) });
+}
+function bound(bytes, limit = MAX_ARTIFACT_BYTES) {
+    asyncRefuse(typeof bytes === 'string' && Buffer.byteLength(bytes, 'utf8') <= limit && Buffer.from(bytes, 'utf8').toString('utf8') === bytes, 'invalid_bytes');
+}
+/** Frozen phase allocation, not evidence that its async call matrix came from captured inputs. */
+export function validateAsyncPlan(input) {
+    const parsed = planSchema.safeParse(input);
+    asyncRefuse(parsed.success, 'invalid_plan');
+    const plan = parsed.data, context = plan.context;
+    asyncRefuse(context.expiresAtMs >= context.startedAtMs && context.expiresAtMs - context.startedAtMs <= MAX_TIMER_DELAY_MS &&
+        plan.expiresAtMs >= context.startedAtMs && plan.expiresAtMs <= context.expiresAtMs, 'deadline');
+    asyncRefuse(plan.maxPhysicalCalls + context.reviewerReservedCalls <= 500, 'budget');
+    const ids = new Set(), assignments = new Map();
+    for (const call of plan.calls) {
+        asyncRefuse(call.id === `${call.assignment}:${call.chunk}` && !ids.has(call.id), 'call');
+        ids.add(call.id);
+        const route = stableStringify([call.model, call.role, call.provider]);
+        asyncRefuse(!assignments.has(call.assignment) || assignments.get(call.assignment) === route, 'call');
+        assignments.set(call.assignment, route);
+    }
+    bound(stableStringify(plan));
+    return freezeAsync(plan);
+}
+/** Exact schema-valid observed bytes; no provider truth or billing authority is inferred. */
+export function parseAsyncReview(bytes, call) {
+    assertAsyncReviewBytes(bytes);
+    let value;
+    try {
+        value = JSON.parse(bytes);
+    }
+    catch {
+        throw new Error('checkpoint_async_invalid_review');
+    }
+    const parsed = asyncReviewSchema.safeParse(value);
+    asyncRefuse(parsed.success && (parsed.data.adapterAttempts ?? 0) <= 1 && parsed.data.model === call.model && parsed.data.role === call.role && parsed.data.provider === call.provider, 'invalid_review');
+    return freezeAsync(parsed.data);
+}
+/** Bound caller bytes before hashing, parsing or acquiring a persistence lock. */
+export function assertAsyncReviewBytes(bytes) { bound(bytes, 8 * 1024 * 1024); }
+export function validateAsyncResult(input, plan, intents) {
+    const parsed = resultSchema.safeParse(input);
+    asyncRefuse(parsed.success, 'invalid_result');
+    const result = parsed.data;
+    const intent = intents.find(row => row.attemptId === result.attemptId);
+    return validateAsyncResultForIntent(result, plan, intent).result;
+}
+export function validateAsyncNotDispatched(input, plan, intents) {
+    const parsed = notDispatchedSchema.safeParse(input);
+    asyncRefuse(parsed.success, 'invalid_not_dispatched');
+    const result = parsed.data;
+    const intent = intents.find(row => row.attemptId === result.attemptId);
+    return validateAsyncNotDispatchedForIntent(result, plan, intent);
+}
+function validateAsyncNotDispatchedForIntent(result, plan, intent) {
+    asyncRefuse(intent && intent.callIndex === result.callIndex && result.finishedAtMs >= intent.startedAtMs, 'not_dispatched_intent');
+    assertAsyncReviewBytes(result.reviewBytes);
+    asyncRefuse(sha256Hex(result.reviewBytes) === result.reviewSha256, 'not_dispatched_digest');
+    const review = parseAsyncReview(result.reviewBytes, plan.calls[result.callIndex]);
+    asyncRefuse(review.status === 'error', 'not_dispatched_review');
+    return freezeAsync(result);
+}
+function validateAsyncResultForIntent(result, plan, intent) {
+    asyncRefuse(intent && intent.callIndex === result.callIndex && result.finishedAtMs >= intent.startedAtMs, 'result_intent');
+    assertAsyncReviewBytes(result.reviewBytes);
+    asyncRefuse(sha256Hex(result.reviewBytes) === result.reviewSha256, 'result_digest');
+    const review = parseAsyncReview(result.reviewBytes, plan.calls[result.callIndex]);
+    asyncRefuse(review.status !== 'success' || result.possiblyBilled, 'success_billing');
+    return { result: freezeAsync(result), status: review.status };
+}
+/** Replays exact ordered records. Unknown outcomes consume budget and cannot be retried. */
+export function validateAsyncRecords(input, planInput) {
+    asyncRefuse(Array.isArray(input) && input.length <= MAX_ASYNC_PHASE_RECORDS, 'too_many_records');
+    let reviewBytes = 0;
+    for (const raw of input) {
+        const event = raw?.event;
+        if (event?.type !== 'result' && event?.type !== 'not-dispatched' || typeof event.result?.reviewBytes !== 'string')
+            continue;
+        reviewBytes += Buffer.byteLength(event.result.reviewBytes, 'utf8');
+        asyncRefuse(reviewBytes <= MAX_ARTIFACT_BYTES, 'invalid_bytes');
+        assertAsyncReviewBytes(event.result.reviewBytes);
+    }
+    const plan = validateAsyncPlan(planInput);
+    const records = [], intents = [], outcomes = [], notDispatched = [];
+    const intentsByAttempt = new Map(), outcomesByAttempt = new Map(), notDispatchedByAttempt = new Map(), outcomeStatusByAttempt = new Map();
+    const lastIntentByCall = new Map(), billedIntentsByCall = new Map();
+    let billedIntentCount = 0;
+    const planDigest = sha256Hex(stableStringify(plan));
+    let cutoffMs, previous = planDigest;
+    for (const [index, raw] of input.entries()) {
+        const parsed = recordSchema.safeParse(raw);
+        asyncRefuse(parsed.success, 'invalid_record');
+        const record = parsed.data, { digest: hash, ...unsigned } = record;
+        asyncRefuse(cutoffMs === undefined && record.sequence === index + 1 && record.previousDigest === previous && hash === sha256Hex(stableStringify(unsigned)), 'invalid_record');
+        const event = record.event;
+        if (event.type === 'intent') {
+            const intent = event.intent, last = lastIntentByCall.get(intent.callIndex), result = last && outcomesByAttempt.get(last.attemptId), declined = last && notDispatchedByAttempt.get(last.attemptId);
+            const prior = billedIntentsByCall.get(intent.callIndex) ?? 0;
+            asyncRefuse(intent.callIndex < plan.calls.length && !intentsByAttempt.has(intent.attemptId), 'duplicate_or_unknown_intent');
+            asyncRefuse(!last || declined || result && outcomeStatusByAttempt.get(result.attemptId) !== 'success', 'retry_unresolved_or_success');
+            asyncRefuse(intent.startedAtMs >= plan.context.startedAtMs && intent.startedAtMs < plan.expiresAtMs &&
+                intent.startedAtMs >= (intents.at(-1)?.startedAtMs ?? 0) && intent.startedAtMs >= (result?.finishedAtMs ?? declined?.finishedAtMs ?? 0), 'intent_time');
+            asyncRefuse(billedIntentCount < plan.maxPhysicalCalls && prior < plan.maxAttemptsPerCall, 'budget');
+            intents.push(intent);
+            intentsByAttempt.set(intent.attemptId, intent);
+            lastIntentByCall.set(intent.callIndex, intent);
+            billedIntentCount += 1;
+            billedIntentsByCall.set(intent.callIndex, prior + 1);
+        }
+        else if (event.type === 'result') {
+            const checked = validateAsyncResultForIntent(event.result, plan, intentsByAttempt.get(event.result.attemptId)), result = checked.result;
+            asyncRefuse(!outcomesByAttempt.has(result.attemptId) && !notDispatchedByAttempt.has(result.attemptId), 'duplicate_result');
+            outcomes.push(result);
+            outcomesByAttempt.set(result.attemptId, result);
+            outcomeStatusByAttempt.set(result.attemptId, checked.status);
+        }
+        else if (event.type === 'not-dispatched') {
+            const result = validateAsyncNotDispatchedForIntent(event.result, plan, intentsByAttempt.get(event.result.attemptId));
+            asyncRefuse(!outcomesByAttempt.has(result.attemptId) && !notDispatchedByAttempt.has(result.attemptId), 'duplicate_result');
+            asyncRefuse(notDispatched.length < MAX_PHASE_NOT_DISPATCHED, 'not_dispatched_capacity');
+            notDispatched.push(result);
+            notDispatchedByAttempt.set(result.attemptId, result);
+            const prior = billedIntentsByCall.get(result.callIndex) ?? 0;
+            asyncRefuse(prior > 0 && billedIntentCount > 0, 'not_dispatched_intent');
+            billedIntentCount -= 1;
+            if (prior === 1)
+                billedIntentsByCall.delete(result.callIndex);
+            else
+                billedIntentsByCall.set(result.callIndex, prior - 1);
+        }
+        else {
+            asyncRefuse(event.cutoffMs >= plan.context.startedAtMs && intents.every(row => row.startedAtMs <= event.cutoffMs) &&
+                outcomes.every(row => row.finishedAtMs <= event.cutoffMs) && notDispatched.every(row => row.finishedAtMs <= event.cutoffMs), 'cutoff_time');
+            cutoffMs = event.cutoffMs;
+        }
+        records.push(record);
+        previous = hash;
+    }
+    const wireBytes = stableStringify({ version: 1, plan, records });
+    bound(wireBytes);
+    const state = freezeAsync({ records, intents, outcomes, notDispatched,
+        uncertain: intents.filter(row => !outcomesByAttempt.has(row.attemptId) && !notDispatchedByAttempt.has(row.attemptId)), ...(cutoffMs === undefined ? {} : { cutoffMs }) });
+    validatedAsyncStates.set(state, { planDigest, retainedBytes: Buffer.byteLength(wireBytes, 'utf8'), previousDigest: previous,
+        intentsByAttempt, outcomesByAttempt, notDispatchedByAttempt, outcomeStatusByAttempt, lastIntentByCall,
+        billedIntentCount, billedIntentsByCall });
+    return state;
+}
+/** Append only to state returned by this module's full validator in the same operation. */
+export function appendAsyncRecordToValidatedState(state, eventInput, planInput) {
+    const metadata = validatedAsyncStates.get(state), plan = validateAsyncPlan(planInput), planDigest = sha256Hex(stableStringify(plan));
+    asyncRefuse(metadata && metadata.planDigest === planDigest, 'unvalidated_state');
+    validatedAsyncStates.delete(state);
+    asyncRefuse(state.records.length < MAX_ASYNC_PHASE_RECORDS, 'too_many_records');
+    const parsed = eventSchema.safeParse(eventInput);
+    asyncRefuse(parsed.success, 'invalid_record');
+    const event = parsed.data;
+    asyncRefuse(state.cutoffMs === undefined, 'invalid_record');
+    if (event.type === 'intent') {
+        asyncRefuse(hasCheckpointIntentCapacity(state.records.length, state.uncertain.length, state.notDispatched.length, MAX_ASYNC_PHASE_RECORDS), 'intent_capacity');
+        const intent = event.intent;
+        const prior = metadata.billedIntentsByCall.get(intent.callIndex) ?? 0;
+        const last = metadata.lastIntentByCall.get(intent.callIndex), result = last && metadata.outcomesByAttempt.get(last.attemptId), declined = last && metadata.notDispatchedByAttempt.get(last.attemptId);
+        asyncRefuse(intent.callIndex < plan.calls.length && !metadata.intentsByAttempt.has(intent.attemptId), 'duplicate_or_unknown_intent');
+        asyncRefuse(!last || declined || result && metadata.outcomeStatusByAttempt.get(result.attemptId) !== 'success', 'retry_unresolved_or_success');
+        asyncRefuse(intent.startedAtMs >= plan.context.startedAtMs && intent.startedAtMs < plan.expiresAtMs &&
+            intent.startedAtMs >= (state.intents.at(-1)?.startedAtMs ?? 0) && intent.startedAtMs >= (result?.finishedAtMs ?? declined?.finishedAtMs ?? 0), 'intent_time');
+        asyncRefuse(metadata.billedIntentCount < plan.maxPhysicalCalls && prior < plan.maxAttemptsPerCall, 'budget');
+    }
+    else if (event.type === 'result') {
+        const result = validateAsyncResultForIntent(event.result, plan, metadata.intentsByAttempt.get(event.result.attemptId)).result;
+        asyncRefuse(!metadata.outcomesByAttempt.has(result.attemptId) && !metadata.notDispatchedByAttempt.has(result.attemptId), 'duplicate_result');
+    }
+    else if (event.type === 'not-dispatched') {
+        const result = validateAsyncNotDispatchedForIntent(event.result, plan, metadata.intentsByAttempt.get(event.result.attemptId));
+        asyncRefuse(!metadata.outcomesByAttempt.has(result.attemptId) && !metadata.notDispatchedByAttempt.has(result.attemptId), 'duplicate_result');
+        asyncRefuse(state.notDispatched.length < MAX_PHASE_NOT_DISPATCHED, 'not_dispatched_capacity');
+    }
+    else {
+        asyncRefuse(event.cutoffMs >= plan.context.startedAtMs && state.intents.every(row => row.startedAtMs <= event.cutoffMs) &&
+            state.outcomes.every(row => row.finishedAtMs <= event.cutoffMs) &&
+            state.notDispatched.every(row => row.finishedAtMs <= event.cutoffMs), 'cutoff_time');
+    }
+    const unsigned = { sequence: state.records.length + 1, previousDigest: metadata.previousDigest, event };
+    const record = { ...unsigned, digest: sha256Hex(stableStringify(unsigned)) };
+    const retainedBytes = metadata.retainedBytes + Buffer.byteLength(stableStringify(record), 'utf8') + (state.records.length ? 1 : 0);
+    asyncRefuse(retainedBytes <= MAX_ARTIFACT_BYTES, 'invalid_bytes');
+    return freezeAsync(record);
+}
+export function appendAsyncRecord(records, event, plan) {
+    return appendAsyncRecordToValidatedState(validateAsyncRecords(records, plan), event, plan);
+}
+/** A canonical sealed accounting snapshot; external capture/producer/lineage authority is separate. */
+export function decodeAsyncProof(bytes, expectedContext) {
+    bound(bytes);
+    let value;
+    try {
+        value = JSON.parse(bytes);
+    }
+    catch {
+        throw new Error('checkpoint_async_invalid_proof');
+    }
+    const parsed = wireSchema.safeParse(value);
+    asyncRefuse(parsed.success && stableStringify(parsed.data) === bytes, 'noncanonical_proof');
+    const plan = validateAsyncPlan(parsed.data.plan);
+    asyncRefuse(stableStringify(contextSchema.parse(expectedContext)) === stableStringify(plan.context), 'context');
+    const state = validateAsyncRecords(parsed.data.records, plan);
+    asyncRefuse(state.cutoffMs !== undefined, 'unsealed');
+    const notDispatched = new Set(state.notDispatched.map(result => result.attemptId));
+    const outcomes = new Map(state.outcomes.map(result => [result.attemptId, result]));
+    const physicalAttempts = [];
+    for (const intent of state.intents) {
+        if (notDispatched.has(intent.attemptId))
+            continue;
+        const result = outcomes.get(intent.attemptId), call = plan.calls[intent.callIndex], review = result && parseAsyncReview(result.reviewBytes, call);
+        physicalAttempts.push({ runId: plan.context.runId, attemptId: intent.attemptId, callIndex: intent.callIndex, call,
+            outcomeCertainty: result ? 'observed' : 'uncertain', possiblyBilled: result?.possiblyBilled ?? true, reviewBytes: result?.reviewBytes ?? null,
+            reviewSha256: result?.reviewSha256 ?? null, durationMs: review?.durationMs ?? null, usage: review?.usage ?? null });
+    }
+    return freezeAsync({ version: 1, bytes, digest: sha256Hex(bytes), context: plan.context, plan, state, physicalAttempts });
+}
+export function encodeAsyncProof(plan, records) {
+    return decodeAsyncProof(stableStringify({ version: 1, plan, records }), plan.context);
+}
+//# sourceMappingURL=checkpoint-async.js.map

package/dist/dispatch/checkpoint-async.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-async.js","sourceRoot":"","sources":["../../src/dispatch/checkpoint-async.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE9H,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACtD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACnG,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;AAC5G,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM;IAC1G,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/H,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM;IAC3F,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5G,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnH,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC3H,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC3I,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO;IAChH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO;IACvH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACnE,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACtE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACtE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IACrF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CAClE,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/I,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AA0BrG,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAuC,CAAC;AAChF,MAAM,UAAU,WAAW,CAAC,SAAkB,EAAE,MAAc,IAAuB,IAAI,CAAC,SAAS;IAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACrJ,MAAM,UAAU,WAAW,CAAI,KAAQ,IAAO,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAAC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;AAChN,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,SAAiB;IACrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,WAAW,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,iBAAiB;QAC1D,aAAa,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QAC/D,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACrE,QAAQ,EAAE,IAAI,IAAI,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AACD,SAAS,KAAK,CAAC,KAAa,EAAE,KAAK,GAAG,kBAAkB;IACtD,WAAW,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,eAAe,CAAC,CAAC;AAChK,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC1I,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB;QACvH,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAClG,WAAW,CAAC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,IAAI,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,EAAE,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,WAAW,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChJ,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AACD,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAe;IAC7D,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAAC,IAAI,KAAc,CAAC;IAAC,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAAC,CAAC;IACnJ,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,WAAW,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC5P,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AACD,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,KAAa,IAAU,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9F,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,IAAe,EAAE,OAA+B;IAClG,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IACxH,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;IACvE,OAAO,4BAA4B,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;AACnE,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,IAAe,EAAE,OAA+B;IACzG,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IACvI,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;IACvE,OAAO,mCAAmC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,mCAAmC,CAAC,MAA0B,EAAE,IAAe,EACtF,MAA+B;IAC/B,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IACnI,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAE,CAAC,CAAC;IACnF,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAChE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AACD,SAAS,4BAA4B,CAAC,MAAmB,EAAE,IAAe,EAAE,MAA+B;IACzG,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC3H,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAE,CAAC,CAAC;IACnF,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACtJ,CAAC;AACD,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB,CAAC,KAAyB,EAAE,SAAoB;IAClF,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;IACjG,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAI,GAAmC,EAAE,KAAK,CAAC;QAC1D,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,KAAK,QAAQ;YAAE,SAAS;QAC5H,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnE,WAAW,CAAC,WAAW,IAAI,kBAAkB,EAAE,eAAe,CAAC,CAAC;QAChE,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAkB,EAAE,EAAE,OAAO,GAAkB,EAAE,EAAE,QAAQ,GAAkB,EAAE,EAAE,aAAa,GAAyB,EAAE,CAAC;IACvI,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,EAAE,iBAAiB,GAAG,IAAI,GAAG,EAAuB,EACzG,sBAAsB,GAAG,IAAI,GAAG,EAA8B,EAAE,sBAAsB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,EAAE,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzG,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,IAAI,QAA4B,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC7G,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC9J,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC9K,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAChI,QAAQ,GAAG,IAAI,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7D,WAAW,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,6BAA6B,CAAC,CAAC;YAC5H,WAAW,CAAC,CAAC,IAAI,IAAI,QAAQ,IAAI,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,6BAA6B,CAAC,CAAC;YACtI,WAAW,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW;gBACjG,MAAM,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAC1J,WAAW,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACpG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACrH,iBAAiB,IAAI,CAAC,CAAC;YAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxI,WAAW,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnM,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,mCAAmC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACrH,WAAW,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC3H,WAAW,CAAC,aAAa,CAAC,MAAM,GAAG,wBAAwB,EAAE,yBAAyB,CAAC,CAAC;YACxF,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7D,WAAW,CAAC,KAAK,GAAG,CAAC,IAAI,iBAAiB,GAAG,CAAC,EAAE,uBAAuB,CAAC,CAAC;YACzE,iBAAiB,IAAI,CAAC,CAAC;YACvB,IAAI,KAAK,KAAK,CAAC;gBAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;;gBACzD,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC;gBAC/G,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3K,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa;QACnE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5K,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,cAAc,EAAE,QAAQ;QACzH,gBAAgB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,gBAAgB;QACrG,iBAAiB,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,2FAA2F;AAC3F,MAAM,UAAU,iCAAiC,CAAC,KAAiB,EAAE,UAAsB,EAAE,SAAoB;IAC/G,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACrI,WAAW,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjF,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3H,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,WAAW,CAAC,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,EAClF,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,IAAI,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAC3H,QAAQ,GAAG,IAAI,IAAI,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzE,WAAW,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,6BAA6B,CAAC,CAAC;QACrI,WAAW,CAAC,CAAC,IAAI,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,6BAA6B,CAAC,CAAC;QAC/I,WAAW,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW;YACjG,MAAM,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAChK,WAAW,CAAC,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC/G,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9H,WAAW,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC/I,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,mCAAmC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9H,WAAW,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC7I,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,wBAAwB,EAAE,yBAAyB,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC;YACrH,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC;YAC/D,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;IACxG,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,WAAW,CAAC,aAAa,IAAI,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAAC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAChG,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,OAA+B,EAAE,KAAiB,EAAE,IAAe;IACnG,OAAO,iCAAiC,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7F,CAAC;AACD,uGAAuG;AACvG,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,eAA6B;IAC3E,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,IAAI,KAAc,CAAC;IAAC,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAAC,CAAC;IACjI,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,WAAW,CAAC,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACxI,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,WAAW,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAClK,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,UAAU,CAAC,CAAC;IACrH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,gBAAgB,GAAmC,EAAE,CAAC;IAC5D,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAE,EAAE,MAAM,GAAG,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnJ,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI;YAC/G,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI;YAC7I,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC5H,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAe,EAAE,OAA+B;IAC/E,OAAO,gBAAgB,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC"}

package/dist/dispatch/checkpoint-gating-execution.d.ts

@@ -0,0 +1,26 @@
+import type { AskFn } from '../consensus/gating.js';
+import { type NativeTargetOwnership } from '../converge/target-ownership.js';
+import type { CheckpointAssemblyInput } from '../report/checkpoint-consensus.js';
+import { type CheckpointGatingProjection, type SealedVerificationProof } from '../report/checkpoint-gating.js';
+import type { CheckpointJournal } from './checkpoint.js';
+export interface CheckpointGatingExecutionOptions {
+    assembly: CheckpointAssemblyInput;
+    commonDir: string;
+    ownership: NativeTargetOwnership;
+    journal: CheckpointJournal;
+    askFactory: (model: string) => AskFn;
+    /** Caller authenticates the original launch or the complete recovery source chain. */
+    beforeLaunch: () => Promise<void>;
+    onLateAuditError: (error: unknown, batchIndex: number) => void;
+    signal?: AbortSignal;
+    /** Runtime tightening only; existing phase bytes are never replaced on resume. */
+    executionExpiresAtMs?: number;
+    nowMs?: () => number;
+    monotonicNow?: () => number;
+}
+/** Execute under the caller's ownership, then reconstruct output from the sealed private phase. */
+export declare function executeCheckpointGating(input: CheckpointGatingExecutionOptions): Promise<{
+    projection: CheckpointGatingProjection;
+    verificationProof?: SealedVerificationProof;
+    newPhysicalCalls: number;
+}>;

package/dist/dispatch/checkpoint-gating-execution.js

@@ -0,0 +1,84 @@
+import { readCheckpointAsyncExecution } from './checkpoint-async-store.js';
+import { withOwnedNativeOperation } from '../converge/target-ownership.js';
+import { deriveCheckpointGating, prepareCheckpointGating } from '../report/checkpoint-gating.js';
+import { stableStringify } from '../report/run-header.js';
+import { detectProvider } from '../roles/dispatcher.js';
+import { verificationContextForCheckpointProof } from './checkpoint-verification-context.js';
+import { executeVerification } from './verification-execution.js';
+import { createVerificationLateAudit } from './verification-late-audit.js';
+/** Execute under the caller's ownership, then reconstruct output from the sealed private phase. */
+export function executeCheckpointGating(input) {
+    const options = { ...input, assembly: { ...input.assembly,
+            diff: structuredClone(input.assembly.diff), run: structuredClone(input.assembly.run) } };
+    return withOwnedNativeOperation(options.ownership, options.commonDir, options.journal.getPlan().target, async (ownership) => {
+        const { plan, originalAsync, currentReviewerCalls } = prepareCheckpointGating(options.assembly);
+        const expected = options.assembly.projection.proofs.at(-1).proof;
+        const actual = await options.journal.exportProof();
+        if (actual.bytes !== expected.bytes || actual.digest !== expected.digest) {
+            throw new Error('checkpoint_gating_execution_journal_mismatch');
+        }
+        if (options.assembly.asyncExecution && options.assembly.projection.proofs.length === 1) {
+            const location = { commonDir: options.commonDir,
+                namespace: options.assembly.projection.proofs.at(-1).runId, plan: options.journal.getPlan() };
+            const exact = await readCheckpointAsyncExecution(location);
+            if (!exact)
+                throw new Error('checkpoint_gating_execution_async_mismatch');
+            if (exact.bytes !== options.assembly.asyncExecution.bytes || exact.digest !== options.assembly.asyncExecution.digest) {
+                throw new Error('checkpoint_gating_execution_async_mismatch');
+            }
+        }
+        const existing = await options.journal.readVerification();
+        if (plan === undefined || plan.batches.length === 0) {
+            if (existing !== undefined)
+                throw new Error('checkpoint_gating_phase_not_applicable');
+            return { projection: deriveCheckpointGating(options.assembly), newPhysicalCalls: 0 };
+        }
+        const context = verificationContextForCheckpointProof(actual);
+        if (context.runId !== options.assembly.run.id)
+            throw new Error('checkpoint_gating_run_mismatch');
+        const now = (options.nowMs ?? Date.now)();
+        if (!Number.isSafeInteger(now) || now < 0)
+            throw new Error('checkpoint_gating_execution_invalid_clock');
+        const executionExpiresAtMs = options.executionExpiresAtMs ?? context.expiresAtMs;
+        if (!Number.isSafeInteger(executionExpiresAtMs) || executionExpiresAtMs < context.startedAtMs || executionExpiresAtMs > context.expiresAtMs) {
+            throw new Error('checkpoint_gating_execution_invalid_deadline');
+        }
+        const startedAtMs = Math.min(Math.max(now, context.startedAtMs), executionExpiresAtMs);
+        const request = {
+            runId: context.runId, gatingPlanBytes: stableStringify(plan), model: plan.model,
+            provider: detectProvider(plan.model),
+            batches: plan.batches.map(({ systemPrompt, userPrompt }) => ({ systemPrompt, userPrompt })),
+            verificationTimeoutMs: plan.verificationTimeoutMs,
+            verificationPassTimeoutMs: plan.verificationPassTimeoutMs,
+        };
+        if (existing !== undefined) {
+            for (const key of Object.keys(request)) {
+                if (stableStringify(existing.plan[key]) !== stableStringify(request[key])) {
+                    throw new Error('checkpoint_gating_plan_mismatch');
+                }
+            }
+        }
+        const retainedPlan = existing?.plan ?? { ...request, startedAtMs,
+            expiresAtMs: Math.min(startedAtMs + plan.verificationPassTimeoutMs, executionExpiresAtMs),
+            maxPhysicalCalls: Math.min(plan.batches.length, 500 - currentReviewerCalls - originalAsync),
+        };
+        const audit = createVerificationLateAudit({ commonDir: options.commonDir, journal: options.journal,
+            ownership, onError: options.onLateAuditError });
+        try {
+            const result = await executeVerification({ ...options, ownership, regeneratedPlan: plan,
+                retainedPlan, executionExpiresAtMs: Math.min(executionExpiresAtMs, retainedPlan.expiresAtMs), otherPhysicalCalls: originalAsync, askFactory: () => options.askFactory(plan.model),
+                auditLateAnswer: audit.accept, registerLateAudit: audit.retain });
+            await audit.flushAfterFinalization();
+            return { projection: deriveCheckpointGating(options.assembly, result.proof),
+                verificationProof: result.proof, newPhysicalCalls: result.newPhysicalCalls };
+        }
+        finally {
+            // Preserve observed late answers before releasing ownership; a hanging
+            // provider cannot extend the original operation's absolute lifetime.
+            if ((await options.journal.readVerification())?.terminal)
+                await audit.flushAfterFinalization();
+            await audit.drain();
+        }
+    });
+}
+//# sourceMappingURL=checkpoint-gating-execution.js.map

package/dist/dispatch/checkpoint-gating-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-gating-execution.js","sourceRoot":"","sources":["../../src/dispatch/checkpoint-gating-execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAA8B,MAAM,iCAAiC,CAAC;AAEvG,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EACxB,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAkB3E,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,KAAuC;IAK7E,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ;YACvD,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC3F,OAAO,wBAAwB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QACxH,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC7C,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACjG,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACtF,OAAO,EAAE,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,OAAO,GAAG,qCAAqC,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACxG,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC,WAAW,CAAC;QACjF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5I,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;YAC/E,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YACpC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3F,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;SAC1D,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAgC,EAAE,CAAC;gBACtE,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,EAAE,IAAI,IAAI,EAAE,GAAG,OAAO,EAAE,WAAW;YAC9D,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,yBAAyB,EAAE,oBAAoB,CAAC;YACzF,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,oBAAoB,GAAG,aAAa,CAAC;SAC5F,CAAC;QACF,MAAM,KAAK,GAAG,2BAA2B,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;YAChG,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI;gBACrF,YAAY,EAAE,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;gBACjL,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAC;YACrC,OAAO,EAAE,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;gBACzE,iBAAiB,EAAE,MAAM,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACjF,CAAC;gBAAS,CAAC;YACT,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ;gBAAE,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAC/F,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/dispatch/checkpoint-phase-limits.d.ts

@@ -0,0 +1,5 @@
+export declare const MAX_PHASE_NOT_DISPATCHED = 500;
+export declare const MAX_ASYNC_PHASE_RECORDS: number;
+export declare const MAX_VERIFICATION_PHASE_RECORDS: number;
+/** Reserve every outstanding outcome, the new intent/outcome pair and the seal. */
+export declare function hasCheckpointIntentCapacity(records: number, unresolved: number, notDispatched: number, limit: number): boolean;

package/dist/dispatch/checkpoint-phase-limits.js

@@ -0,0 +1,11 @@
+// Each phase permits at most 500 physical calls. Non-starts have an independent,
+// finite allowance; refunding paid budget must not make the journal unbounded.
+export const MAX_PHASE_NOT_DISPATCHED = 500;
+export const MAX_ASYNC_PHASE_RECORDS = 2 * (500 + MAX_PHASE_NOT_DISPATCHED) + 1;
+export const MAX_VERIFICATION_PHASE_RECORDS = MAX_ASYNC_PHASE_RECORDS + 1; // Plan record.
+/** Reserve every outstanding outcome, the new intent/outcome pair and the seal. */
+export function hasCheckpointIntentCapacity(records, unresolved, notDispatched, limit) {
+    // Any outstanding callback may still report a non-start under the same lock.
+    return notDispatched + unresolved < MAX_PHASE_NOT_DISPATCHED && records + unresolved + 3 <= limit;
+}
+//# sourceMappingURL=checkpoint-phase-limits.js.map

package/dist/dispatch/checkpoint-phase-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-phase-limits.js","sourceRoot":"","sources":["../../src/dispatch/checkpoint-phase-limits.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAuB,GAAG,CAAC,CAAC,CAAC,eAAe;AAE1F,mFAAmF;AACnF,MAAM,UAAU,2BAA2B,CAAC,OAAe,EAAE,UAAkB,EAAE,aAAqB,EAAE,KAAa;IACnH,6EAA6E;IAC7E,OAAO,aAAa,GAAG,UAAU,GAAG,wBAAwB,IAAI,OAAO,GAAG,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC;AACpG,CAAC"}

package/dist/dispatch/checkpoint-verification-context.d.ts

@@ -0,0 +1,15 @@
+import type { CheckpointProof, FrozenCheckpointPlan } from './checkpoint.js';
+import type { VerificationContext } from './checkpoint-verification.js';
+/**
+ * Derive the existing verifier-record context from caller-validated checkpoint
+ * state. This is an internal structural helper: callers must already have
+ * validated `plan`, `state`, and `bindings` as one coherent checkpoint. It
+ * performs no IO and establishes no source, producer, native, server, or
+ * provider authority.
+ */
+export declare function verificationContextFromValidatedCheckpoint(plan: Pick<FrozenCheckpointPlan, 'digest' | 'target'>, main: Pick<CheckpointProof, 'state' | 'bindings'>): VerificationContext;
+/**
+ * Derive verifier-record context from a branded, sealed checkpoint proof.
+ * The proof brand is required before delegating to the validated-state helper.
+ */
+export declare function verificationContextForCheckpointProof(proof: CheckpointProof): VerificationContext;

package/dist/dispatch/checkpoint-verification-context.js

@@ -0,0 +1,48 @@
+import { createHash } from 'node:crypto';
+import { isCheckpointProof } from './checkpoint.js';
+import { decodeOriginalLaunch } from './original-launch.js';
+import { decodeRecoveryOperation } from './recovery-operation.js';
+const sha256 = (value) => createHash('sha256').update(value).digest('hex');
+/**
+ * Derive the existing verifier-record context from caller-validated checkpoint
+ * state. This is an internal structural helper: callers must already have
+ * validated `plan`, `state`, and `bindings` as one coherent checkpoint. It
+ * performs no IO and establishes no source, producer, native, server, or
+ * provider authority.
+ */
+export function verificationContextFromValidatedCheckpoint(plan, main) {
+    if (!main.state.finalized)
+        throw new Error('checkpoint_verification_requires_finalization');
+    const capture = main.bindings['captured-inputs'];
+    const hasLaunch = main.bindings.launch !== undefined;
+    const hasOperation = main.bindings.operation !== undefined;
+    if (capture === undefined || hasLaunch === hasOperation)
+        throw new Error('checkpoint_verification_missing_binding');
+    const operationBytes = (main.bindings.launch ?? main.bindings.operation);
+    const parent = hasLaunch ? decodeOriginalLaunch(operationBytes) : decodeRecoveryOperation(operationBytes);
+    if (parent.planDigest !== plan.digest || parent.target !== plan.target ||
+        parent.capturedInputsSha256 !== sha256(capture) ||
+        ('successorRunId' in parent && !parent.successorNativeClaim)) {
+        throw new Error('checkpoint_verification_binding_mismatch');
+    }
+    return Object.freeze({
+        planDigest: plan.digest,
+        finalizationDigest: main.state.records.at(-1).digest,
+        capturedInputsSha256: sha256(capture),
+        operationSha256: sha256(operationBytes),
+        runId: 'runId' in parent ? parent.runId : parent.successorRunId,
+        startedAtMs: parent.startedAtMs,
+        expiresAtMs: parent.expiresAtMs,
+        reviewerAttemptIds: Object.freeze(main.state.records.filter(row => row.type === 'intent').map(row => row.paidAttempt.id)),
+    });
+}
+/**
+ * Derive verifier-record context from a branded, sealed checkpoint proof.
+ * The proof brand is required before delegating to the validated-state helper.
+ */
+export function verificationContextForCheckpointProof(proof) {
+    if (!isCheckpointProof(proof))
+        throw new Error('checkpoint_verification_unvalidated_proof');
+    return verificationContextFromValidatedCheckpoint(proof.plan, { state: proof.state, bindings: proof.bindings });
+}
+//# sourceMappingURL=checkpoint-verification-context.js.map

package/dist/dispatch/checkpoint-verification-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-verification-context.js","sourceRoot":"","sources":["../../src/dispatch/checkpoint-verification-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGlE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F;;;;;;GAMG;AACH,MAAM,UAAU,0CAA0C,CACxD,IAAqD,EACrD,IAAiD;IAEjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC;IAC3D,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpH,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC1G,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAClE,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,OAAO,CAAC;QAC/C,CAAC,gBAAgB,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM;QACrD,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC;QACrC,eAAe,EAAE,MAAM,CAAC,cAAc,CAAC;QACvC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc;QAC/D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAY,CAAC,EAAE,CAAC,CAAC;KAC3H,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qCAAqC,CAAC,KAAsB;IAC1E,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC5F,OAAO,0CAA0C,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;AAClH,CAAC"}