@allocator-one/rcl 4.4.19

package/dist/evidence/reviewer-lineage.js

@@ -0,0 +1,293 @@
+import { checkpointRecoveryCells } from '../dispatch/checkpoint.js';
+import { readCheckpointAsyncExecution } from '../dispatch/checkpoint-async-store.js';
+import { CheckpointJournal, checkpointPath, exportCheckpointProof } from '../dispatch/checkpoint.js';
+import { decodeRecoveryOperation } from '../dispatch/recovery-operation.js';
+import { recoveryAttemptsFromCheckpoint } from '../dispatch/recovery.js';
+import { previewReviewerRecovery } from '../dispatch/recovery-policy.js';
+import { decodeCapturedInputs } from '../dispatch/captured-inputs.js';
+import { inspectReviewerArtifact } from '../report/reviewer-artifact.js';
+import { validateInspectedReviewerArtifactChain } from '../report/reviewer-evidence.js';
+import { stableStringify } from '../report/run-header.js';
+import { UUID } from '../telemetry/recovery/source.js';
+const MAX_LINEAGE_DEPTH = 32;
+const validatedLineages = new WeakSet();
+/**
+ * Compare current effective inputs only after complete source validation. The
+ * sole compatibility exception is the new verifier discriminator on a legacy
+ * aggregation blob. Historical bytes remain the execution/source authority.
+ */
+export function matchesReviewerRecoveryInputs(source, freshBytes) {
+    if (!validatedLineages.has(source))
+        fail('unvalidated_source');
+    const old = source.latest.captured;
+    let fresh;
+    try {
+        fresh = decodeCapturedInputs(freshBytes, source.plan);
+    }
+    catch (error) {
+        // A changed current plan is ineligible for recovery. The CLI then retains
+        // its existing separately guarded fresh-original path; it grants no reuse.
+        if (error instanceof Error && error.message === 'capture_plan_mismatch')
+            return false;
+        throw error;
+    }
+    if (fresh.bytes === old.bytes)
+        return true;
+    if (!old.aggregation || old.aggregation.verifierContractVersion !== undefined || fresh.aggregation?.verifierContractVersion !== 2)
+        return false;
+    const aggregation = JSON.parse(fresh.aggregation.bytes);
+    delete aggregation.verifierContractVersion;
+    if (stableStringify(aggregation) !== old.aggregation.bytes)
+        return false;
+    const wire = JSON.parse(fresh.bytes);
+    delete wire.blobs[fresh.aggregation.digest];
+    wire.blobs[old.aggregation.digest] = old.aggregation.bytes;
+    wire.aggregationSha256 = old.aggregation.digest;
+    return stableStringify(wire) === old.bytes;
+}
+function fail(code) { throw new Error(`reviewer_lineage_${code}`); }
+function sameRun(left, right) { return left.toLowerCase() === right.toLowerCase(); }
+function validInput(input) {
+    if (!input || typeof input !== 'object' || Array.isArray(input) || typeof input.commonDir !== 'string' || !input.commonDir ||
+        typeof input.target !== 'string' || !input.target.trim() || typeof input.runId !== 'string' || !UUID.test(input.runId))
+        fail('invalid_input');
+}
+/** Historical plan-1 reads retain the original all-recoverable-seat policy. */
+function historicalEligibleCalls(plan, preview) {
+    if (preview.successesNeeded === 0 || preview.remainingCalls === 0)
+        return [];
+    const retained = new Set(preview.retainedCallIndices);
+    const blocked = new Set(preview.blockedCells.map(entry => entry.cell));
+    const seats = new Map();
+    for (const [index, cell] of plan.cells.entries()) {
+        const indices = seats.get(cell.seat) ?? [];
+        indices.push(index);
+        seats.set(cell.seat, indices);
+    }
+    const recoverable = [...seats.values()].map(indices => indices.filter(index => !retained.has(index)))
+        .filter(missing => missing.length > 0 && missing.every(index => !blocked.has(plan.cells[index].id)))
+        .sort((left, right) => left.length - right.length || left[0] - right[0]);
+    if (preview.successfulSeats + recoverable.length < preview.policy.minimumSuccessful)
+        return [];
+    return recoverable.flat();
+}
+/**
+ * Replays immutable journal events in order so a sealed artifact cannot turn
+ * extra physical provider calls into an admissible report. Failed calls may be
+ * retried within the saved per-cell limit; successes and uncertain calls may
+ * never be retried. Distinct cells may remain concurrently in flight.
+ */
+function validatePhysicalHistory(runs, rootClaim) {
+    const attemptIds = new Set();
+    const attemptsByCell = new Map();
+    const successful = new Set();
+    const uncertain = new Set();
+    const claims = new Set([rootClaim.attempt]);
+    const settled = [];
+    let previousClaim = rootClaim;
+    for (const [index, run] of runs.entries()) {
+        const root = index === 0;
+        const launch = root ? run.inspected.launch : undefined;
+        const operation = root ? undefined : run.inspected.operation;
+        const ownLimit = root ? launch.maxPhysicalCalls : operation.maxAdditionalCalls;
+        const perCellLimit = root ? launch.maxAttemptsPerCell : operation.maxAttemptsPerCell;
+        let ownIntents = 0;
+        const active = new Map();
+        const attempts = new Map(recoveryAttemptsFromCheckpoint(run.state).map(attempt => [attempt.id, attempt]));
+        const cellIndexById = root ? undefined : new Map(run.plan.cells.map((cell, cellIndex) => [cell.id, cellIndex]));
+        const recoveryCells = root ? undefined : checkpointRecoveryCells(run.plan);
+        if (!root) {
+            const claim = run.inspected.nativeClaim;
+            const attempt = claim?.attempt;
+            const round = claim?.round;
+            if (!claim || typeof attempt !== 'number' || typeof round !== 'number' ||
+                !Number.isSafeInteger(attempt) || !Number.isSafeInteger(round) || attempt < 1 || round < 1) {
+                fail('successor_claim_invalid');
+            }
+            const checkedClaim = { attempt, round };
+            if (checkedClaim.round !== rootClaim.round || checkedClaim.attempt <= previousClaim.attempt || claims.has(checkedClaim.attempt)) {
+                fail('successor_claim_not_monotonic');
+            }
+            claims.add(checkedClaim.attempt);
+            previousClaim = checkedClaim;
+        }
+        for (const record of run.state.records) {
+            if (record.type === 'intent') {
+                const cell = record.cell;
+                const attempt = record.paidAttempt;
+                if (ownIntents >= ownLimit)
+                    fail(root ? 'root_physical_call_limit' : 'successor_additional_call_limit');
+                if (attemptIds.has(attempt.id))
+                    fail('duplicate_attempt');
+                if (successful.has(cell))
+                    fail('success_resampled');
+                if (uncertain.has(cell))
+                    fail('uncertain_resampled');
+                if (active.has(cell))
+                    fail('duplicate_inflight_attempt');
+                const count = (attemptsByCell.get(cell) ?? 0) + 1;
+                if (count > perCellLimit)
+                    fail(root ? 'root_attempts_per_cell_limit' : 'successor_attempts_per_cell_limit');
+                if (!root) {
+                    const cellIndex = cellIndexById.get(cell);
+                    const preview = previewReviewerRecovery(recoveryCells, settled, run.captured.policy, {
+                        maxAttemptsPerCell: perCellLimit,
+                        maxAdditionalCalls: ownLimit,
+                        additionalCallsUsed: ownIntents - active.size,
+                        remainingMs: 1,
+                    });
+                    // Version comes from the validated immutable plan. This exception is
+                    // historical inspection only; new paid launches require plan 2.
+                    const eligible = run.plan.version === 1 ? historicalEligibleCalls(run.plan, preview) : preview.eligibleCallIndices;
+                    if (cellIndex === undefined || !eligible.includes(cellIndex))
+                        fail('successor_ineligible_attempt');
+                }
+                attemptIds.add(attempt.id);
+                attemptsByCell.set(cell, count);
+                active.set(cell, { id: attempt.id, cell });
+                ownIntents++;
+            }
+            else if (record.type === 'result' && record.result.kind === 'success') {
+                successful.add(record.cell);
+                const activeAttempt = active.get(record.cell);
+                const attempt = activeAttempt && attempts.get(activeAttempt.id);
+                if (!activeAttempt || !attempt)
+                    fail('result_without_intent');
+                settled.push(attempt);
+                active.delete(record.cell);
+            }
+            else if (record.type === 'result') {
+                const activeAttempt = active.get(record.cell);
+                const attempt = activeAttempt && attempts.get(activeAttempt.id);
+                if (!activeAttempt || !attempt)
+                    fail('result_without_intent');
+                settled.push(attempt);
+                active.delete(record.cell);
+            }
+            else if (record.type === 'uncertain') {
+                uncertain.add(record.cell);
+                const activeAttempt = active.get(record.cell);
+                if (!activeAttempt)
+                    fail('uncertain_without_intent');
+                settled.push(activeAttempt);
+                active.delete(record.cell);
+            }
+        }
+        // A finalized journal can retain intents without an explicit uncertain
+        // event. Treat those calls as possibly billed before reading a successor.
+        settled.push(...active.values());
+    }
+}
+async function assertVerification(journal, inspected) {
+    const phase = await journal.readVerification();
+    if ((phase !== undefined) !== (inspected.verificationProof !== undefined))
+        fail('verification_mismatch');
+    if (phase !== undefined) {
+        const proof = await journal.exportVerificationProof();
+        if (proof.bytes !== inspected.verificationProof.bytes || proof.digest !== inspected.verificationProof.digest)
+            fail('verification_mismatch');
+    }
+}
+async function loadStored(commonDir, target, runId) {
+    const journal = await CheckpointJournal.inspectRead(checkpointPath(commonDir, target, runId));
+    const plan = journal.getPlan();
+    if (plan.target !== target)
+        fail('target_mismatch');
+    const [state, terminal] = await Promise.all([journal.read(), journal.readTerminalReport()]);
+    if (!state.finalized)
+        fail('unsealed');
+    if (!terminal)
+        fail('terminal_missing');
+    const proof = await exportCheckpointProof(journal);
+    return { runId, journal, plan, state, proof, terminal };
+}
+async function inspectStored(stored, ancestors) {
+    const { runId, journal, plan, state, proof, terminal } = stored;
+    // Only select the legacy representation here. Uploaded references never
+    // supply expected ancestors; the inspector rederives them from stored pairs.
+    const lineage = JSON.parse(terminal.reviewerArtifactBytes)?.lineage;
+    const legacy = Array.isArray(lineage) && lineage.length === 0;
+    const inspected = inspectReviewerArtifact(terminal.reviewerArtifactBytes, {
+        expectedReportBytes: terminal.reportBytes, expectedRunId: runId, expectedTarget: plan.target, expectedPlan: plan,
+        ...(legacy ? {} : { ancestors }),
+    });
+    if (inspected.proof.digest !== proof.digest || inspected.reportSha256 !== terminal.reportSha256 ||
+        inspected.captured.plan.digest !== plan.digest)
+        fail('proof_mismatch');
+    await assertVerification(journal, inspected);
+    const kind = inspected.descriptor.kind === 'original' ? 'original' : 'successor';
+    return Object.freeze({ runId, journal, plan, state, proof, terminal, inspected, captured: inspected.captured, kind });
+}
+/** Loads only a sealed, proof-bound lineage. It never grants native/server authority. */
+export async function loadReviewerLineage(input) {
+    validInput(input);
+    const commonDir = input.commonDir;
+    const target = input.target.trim();
+    const initialRunId = input.runId;
+    const newest = [];
+    const seen = new Set();
+    let runId = initialRunId;
+    for (let depth = 0; depth < MAX_LINEAGE_DEPTH; depth++) {
+        const key = runId.toLowerCase();
+        if (seen.has(key))
+            fail('cycle');
+        seen.add(key);
+        const run = await loadStored(commonDir, target, runId);
+        newest.push(run);
+        const operationBytes = run.proof.bindings.operation;
+        if (operationBytes === undefined)
+            break;
+        // Discover predecessors from the independently validated saved journal,
+        // never the artifact's embedded checkpoints or claimed lineage references.
+        // Complete capture/source/native-claim checks follow actual inspection.
+        const operation = decodeRecoveryOperation(operationBytes);
+        if (operation.target !== target || operation.planDigest !== run.plan.digest ||
+            !sameRun(operation.successorRunId, runId))
+            fail('source_binding_mismatch');
+        runId = operation.sourceRunId;
+    }
+    if (!newest.length || newest.at(-1).proof.bindings.operation !== undefined)
+        fail('depth');
+    const runs = [];
+    for (const stored of newest.reverse()) {
+        const run = await inspectStored(stored, runs.map(prior => prior.inspected));
+        if (run.kind === 'successor') {
+            const operation = run.inspected.operation;
+            const source = run.inspected.descriptor.kind === 'supplemented' ? run.inspected.descriptor.source : undefined;
+            if (!operation || !source || !sameRun(operation.sourceRunId, source.run_id) ||
+                operation.sourceReportSha256 !== source.report_sha256 || operation.sourceCheckpointSha256 !== source.checkpoint_sha256)
+                fail('source_binding_mismatch');
+        }
+        runs.push(run);
+    }
+    validateInspectedReviewerArtifactChain(runs.map(run => run.inspected));
+    const root = runs[0];
+    if (root.captured.async) {
+        const proof = await readCheckpointAsyncExecution({ commonDir, namespace: root.runId, plan: root.plan });
+        if (!proof || proof.bytes !== root.inspected.asyncExecution?.bytes || proof.digest !== root.inspected.asyncExecution?.digest)
+            fail('async_mismatch');
+    }
+    if (!root.inspected.launch || !root.inspected.nativeClaim ||
+        root.inspected.launch.originalNativeClaim.attempt !== root.inspected.nativeClaim.attempt ||
+        root.inspected.launch.originalNativeClaim.round !== root.inspected.nativeClaim.round)
+        fail('root_claim_mismatch');
+    const rootClaim = root.inspected.launch.originalNativeClaim;
+    for (const run of runs) {
+        if (run.plan.digest !== root.plan.digest || run.captured.digest !== root.captured.digest)
+            fail('input_mismatch');
+        if (run.kind === 'successor') {
+            const operation = run.inspected.operation;
+            if (operation.originalNativeClaim.attempt !== rootClaim.attempt || operation.originalNativeClaim.round !== rootClaim.round ||
+                !operation.successorNativeClaim || !run.inspected.nativeClaim ||
+                operation.successorNativeClaim.attempt !== run.inspected.nativeClaim.attempt ||
+                operation.successorNativeClaim.round !== run.inspected.nativeClaim.round ||
+                operation.successorNativeClaim.round !== rootClaim.round)
+                fail('successor_claim_mismatch');
+        }
+    }
+    validatePhysicalHistory(runs, rootClaim);
+    const lineage = Object.freeze({ target, plan: root.plan, runs: Object.freeze(runs), attempts: Object.freeze(runs.flatMap(run => recoveryAttemptsFromCheckpoint(run.state))), latest: runs.at(-1) });
+    validatedLineages.add(lineage);
+    return lineage;
+}
+//# sourceMappingURL=reviewer-lineage.js.map

package/dist/evidence/reviewer-lineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-lineage.js","sourceRoot":"","sources":["../../src/evidence/reviewer-lineage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,qBAAqB,EAAyE,MAAM,2BAA2B,CAAC;AAC5K,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EAAE,oBAAoB,EAA+B,MAAM,gCAAgC,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAkC,MAAM,gCAAgC,CAAC;AACzG,OAAO,EAAE,sCAAsC,EAAE,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AAEvD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA4B7B,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAmB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAuB,EAAE,UAAkB;IACvF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IACnC,IAAI,KAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,KAAK,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC9D,OAAO,KAAK,EAAE,CAAC;QACb,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB;YAAE,OAAO,KAAK,CAAC;QACtF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,uBAAuB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,uBAAuB,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChJ,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,WAAW,CAAC,uBAAuB,CAAC;IAC3C,IAAI,eAAe,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC;IAC3D,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IAChD,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,IAAW,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnF,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa,IAAa,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC7G,SAAS,UAAU,CAAC,KAA+B;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS;QACxH,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,eAAe,CAAC,CAAC;AAClJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,uBAAuB,CAAC,IAA0B,EAAE,OAAwB;IACnF,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;SAClG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SACpG,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO,EAAE,CAAC;IAC/F,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,IAAmC,EAAE,SAA6C;IACjH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,aAAa,GAAG,SAAS,CAAC;IAE9B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAU,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,MAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAU,CAAC,kBAAkB,CAAC;QACjF,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,MAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAU,CAAC,kBAAkB,CAAC;QACvF,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAChH,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE3E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC;YACxC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,CAAC;YAC/B,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC;YAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBACpE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC7F,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,YAAY,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACxC,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChI,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,aAAa,GAAG,YAAY,CAAC;QAC/B,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAY,CAAC;gBACpC,IAAI,UAAU,IAAI,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC;gBACxG,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBAC1D,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACpD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBACrD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,KAAK,GAAG,YAAY;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC;gBAC5G,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,SAAS,GAAG,aAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM,OAAO,GAAG,uBAAuB,CAAC,aAAc,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE;wBACpF,kBAAkB,EAAE,YAAY;wBAChC,kBAAkB,EAAE,QAAQ;wBAC5B,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAAC,IAAI;wBAC7C,WAAW,EAAE,CAAC;qBACf,CAAC,CAAC;oBACH,qEAAqE;oBACrE,gEAAgE;oBAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;oBACnH,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACrG,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3B,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,UAAU,EAAE,CAAC;YACf,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC7B,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC/C,MAAM,OAAO,GAAG,aAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC/C,MAAM,OAAO,GAAG,aAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACvC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC/C,IAAI,CAAC,aAAa;oBAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,0EAA0E;QAC1E,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAA0B,EAAE,SAAoC;IAChG,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS,CAAC;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,iBAAkB,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,iBAAkB,CAAC,MAAM;YAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChJ,CAAC;AACH,CAAC;AAID,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,KAAa;IACxE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAyB,EAAE,SAA+C;IACrG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAChE,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,qBAAqB,EAAE;QACxE,mBAAmB,EAAE,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI;QAChH,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QAC7F,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzE,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACxH,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACvE,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC;IACjC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAK,GAAG,YAAY,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpD,IAAI,cAAc,KAAK,SAAS;YAAE,MAAM;QACxC,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,SAAS,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM;YACzE,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7E,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;gBACzE,SAAS,CAAC,kBAAkB,KAAK,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC,sBAAsB,KAAK,MAAM,CAAC,iBAAiB;gBAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC5J,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;QACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO;QACxF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACpH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjH,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,SAAU,CAAC;YAC3C,IAAI,SAAS,CAAC,mBAAmB,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,mBAAmB,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;gBACxH,CAAC,SAAS,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW;gBAC7D,SAAS,CAAC,oBAAoB,CAAC,OAAO,KAAK,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO;gBAC5E,SAAS,CAAC,oBAAoB,CAAC,KAAK,KAAK,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK;gBACxE,SAAS,CAAC,oBAAoB,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;gBAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IACrM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/evidence/reviewer-original.d.ts

@@ -0,0 +1,67 @@
+import { type GuardedLaunchClaim, type GuardedLaunchOptions, type PreparedOriginalLaunch } from '../converge/launch-guard.js';
+import type { NativeTargetOwnership } from '../converge/target-ownership.js';
+import { type CapturedReviewerInputs } from '../dispatch/captured-inputs.js';
+import { type OriginalLaunch } from '../dispatch/original-launch.js';
+import { type CheckpointJournal } from '../dispatch/checkpoint.js';
+import type { CompletedReviewInput } from '../report/assembly.js';
+import type { Diff } from '../resolver/types.js';
+import { AttestedReviewerDelivery } from '../telemetry/attested-reviewer-delivery.js';
+import type { Attestation } from '../telemetry/attest.js';
+import type { HarnessCredential } from '../telemetry/credentials.js';
+export type RetainedOriginalRun = Omit<CompletedReviewInput['run'], 'id' | 'converge'> & {
+    id: string;
+};
+export type RetainedOriginalAccess = {
+    kind: 'local';
+} | {
+    kind: 'asserted';
+    credential: HarnessCredential;
+    fetchImpl?: typeof fetch;
+} | {
+    kind: 'protected';
+    attestation: Attestation;
+    fetchImpl?: typeof fetch;
+};
+export interface RetainedOriginalSession {
+    prepared: PreparedOriginalLaunch;
+    launch: OriginalLaunch;
+    captured: CapturedReviewerInputs;
+    journal: CheckpointJournal;
+    ownership: NativeTargetOwnership;
+    run: RetainedOriginalRun & {
+        converge: import('../report/run-header.js').ConvergeContext & {
+            attempt: number;
+            round: number;
+        };
+    };
+    signal: AbortSignal;
+    executionExpiresAtMs: number;
+    /** Only the protected lane; retain this transient coordinator for delivery. */
+    delivery?: AttestedReviewerDelivery;
+}
+export interface RetainedOriginalOptions {
+    guard: Pick<GuardedLaunchOptions, 'gitCommonDir' | 'target' | 'round' | 'maxAttempts' | 'maxRounds' | 'intent' | 'retryReason' | 'startOver' | 'cycleRemote'>;
+    captured: CapturedReviewerInputs;
+    run: RetainedOriginalRun;
+    diff: Diff;
+    /** Independently resolved effective comparison base; never the observed upstream tip. */
+    effectiveMergeBaseSha: string;
+    bounds: Pick<OriginalLaunch, 'startedAtMs' | 'expiresAtMs' | 'maxPhysicalCalls' | 'maxAttemptsPerCell'>;
+    access: RetainedOriginalAccess;
+    /** A continuation must retain its native ledger. A genuine first original may initialize it. */
+    requireExistingNativeState?: boolean;
+    signal?: AbortSignal;
+    validate: GuardedLaunchOptions['validate'];
+    onClaim?: GuardedLaunchOptions['onClaim'];
+    beforeClaim?: (prepared: PreparedOriginalLaunch) => Promise<void>;
+    execute: (session: RetainedOriginalSession) => ReturnType<GuardedLaunchOptions['run']>;
+}
+/**
+ * Bind original retained work to the normal owned guard's actual numeric claim.
+ * Local mode establishes no server capability. Asserted/protected preflight uses
+ * the supplied current credential; protected is an internal integration API,
+ * not permission to combine the public --guarded-converge and --attest flags.
+ * This creates no source grants, restores no missing ledger and enables no async
+ * physical accounting. Callers retain responsibility for final artifact delivery.
+ */
+export declare function guardRetainedOriginal(input: RetainedOriginalOptions): Promise<GuardedLaunchClaim>;

package/dist/evidence/reviewer-original.js

@@ -0,0 +1,148 @@
+import { retainedPaidCutoff } from './retained-time-budget.js';
+import { isDeepStrictEqual } from 'node:util';
+import { DEFAULT_MAX_RETRIES } from '../config/defaults.js';
+import { guardReviewLaunch } from '../converge/launch-guard.js';
+import { loadConvergeAttemptState } from '../converge/attempt-budget.js';
+import { loadConvergeRunState } from '../converge/run-state.js';
+import { retainedLaunchInputSha256 } from '../converge/retained-report.js';
+import { decodeCapturedInputs } from '../dispatch/captured-inputs.js';
+import { bindOriginalCouncil } from '../dispatch/original-execution.js';
+import { assertOriginalLaunchBudget } from '../dispatch/original-launch.js';
+import { requireReviewerLaneBinding } from '../dispatch/checkpoint.js';
+import { configDigest, diffDigest, sha256Hex } from '../report/run-header.js';
+import { parseRepoName } from '../resolver/github.js';
+import { abortSignalWithTimeout } from '../telemetry/abort-signal.js';
+import { AttestedReviewerDelivery } from '../telemetry/attested-reviewer-delivery.js';
+import { parseAttestedExpiry } from '../telemetry/attested-retry.js';
+import { HarnessSink } from '../telemetry/sink.js';
+function refuse(reason) { throw new Error(`retained_original_${reason}`); }
+function assertBindings(captured, run, diff, target, mergeBase) {
+    const plan = captured.plan, aggregation = captured.aggregation;
+    requireReviewerLaneBinding(plan);
+    if (!aggregation || !isDeepStrictEqual(captured.config.thresholds, aggregation.thresholds) ||
+        captured.config.output?.belowThresholdAppendix !== aggregation.belowThresholdAppendix)
+        refuse('aggregation_mismatch');
+    if (aggregation.verifierContractVersion !== 2)
+        refuse('verifier_contract');
+    const repo = run.target.repo && parseRepoName(run.target.repo);
+    const pr = run.target.prNumber;
+    if (!repo || !Number.isSafeInteger(pr) || pr < 1 || !['patch', 'pr'].includes(run.target.kind))
+        refuse('target_mismatch');
+    const prTarget = `${repo.owner}/${repo.repo}#${pr}`.toLowerCase();
+    const planPr = /^[^/\s]+\/[^/#\s]+#[1-9]\d*$/.test(plan.target);
+    if (target !== plan.target || planPr && prTarget !== plan.target.toLowerCase() ||
+        run.target.headSha !== plan.headSha || mergeBase !== plan.mergeBaseSha ||
+        diffDigest(diff.files) !== plan.patchSha256 || configDigest(captured.config) !== plan.configSha256)
+        refuse('target_mismatch');
+    if (run.target.kind === 'patch' && run.target.baseSha !== mergeBase)
+        refuse('base_mismatch');
+    if (run.target.kind === 'pr' && (!diff.metadata || diff.source !== 'github' ||
+        diff.metadata.headSha !== plan.headSha || diff.metadata.mergeBaseSha !== mergeBase ||
+        diff.metadata.baseSha !== run.target.baseSha ||
+        `${diff.metadata.owner}/${diff.metadata.repo}#${diff.metadata.number}`.toLowerCase() !== prTarget))
+        refuse('source_mismatch');
+    const roster = run.roster.filter(seat => seat.lane === 'blocking' || seat.lane === 'secondary')
+        .map(seat => ({ model: seat.model, role: seat.role, route: seat.provider, lane: seat.lane }));
+    if (!isDeepStrictEqual(roster, plan.roster.map(({ model, role, route, lane }) => ({ model, role, route, lane }))))
+        refuse('roster_mismatch');
+    if ((run.spec?.sha256 ?? sha256Hex('')) !== plan.specSha256)
+        refuse('spec_mismatch');
+    const context = JSON.parse(captured.contextBytes);
+    if (!isDeepStrictEqual(run.contextFiles ?? [], context.map(doc => ({ path: doc.label, sha256: doc.sha256 }))))
+        refuse('context_mismatch');
+    if (!(run.startedAt instanceof Date) || !Number.isFinite(run.startedAt.getTime()))
+        refuse('started_at');
+}
+/**
+ * Bind original retained work to the normal owned guard's actual numeric claim.
+ * Local mode establishes no server capability. Asserted/protected preflight uses
+ * the supplied current credential; protected is an internal integration API,
+ * not permission to combine the public --guarded-converge and --attest flags.
+ * This creates no source grants, restores no missing ledger and enables no async
+ * physical accounting. Callers retain responsibility for final artifact delivery.
+ */
+export async function guardRetainedOriginal(input) {
+    if (!['local', 'asserted', 'protected'].includes(input.access.kind))
+        refuse('credential_lane');
+    const { validate, onClaim, beforeClaim, execute } = input;
+    const originalAttestation = input.access.kind === 'protected' ? input.access.attestation : undefined;
+    const captured = decodeCapturedInputs(input.captured.bytes, input.captured.plan);
+    if (!isDeepStrictEqual(captured, input.captured))
+        refuse('capture_mismatch');
+    const run = structuredClone(input.run), diff = structuredClone(input.diff), guard = { ...input.guard };
+    const bounds = { ...input.bounds }, continuation = input.requireExistingNativeState === true;
+    const access = input.access.kind === 'local' ? input.access : { ...input.access,
+        ...(input.access.kind === 'asserted' ? { credential: structuredClone(input.access.credential) } : { attestation: structuredClone(input.access.attestation) }) };
+    assertBindings(captured, run, diff, guard.target, input.effectiveMergeBaseSha);
+    if (access.kind === 'protected') {
+        if (access.attestation.runId !== run.id || run.target.kind !== 'pr')
+            refuse('protected_binding');
+        const expiry = parseAttestedExpiry(access.attestation.expiresAt);
+        if (expiry === undefined)
+            refuse('credential_expiry');
+        bounds.expiresAtMs = Math.min(bounds.expiresAtMs, expiry);
+    }
+    if (access.kind === 'asserted' && (access.credential.source === 'attest' || access.credential.token.startsWith('rbc_')))
+        refuse('credential_lane');
+    assertOriginalLaunchBudget(bounds.expiresAtMs - bounds.startedAtMs, bounds.maxPhysicalCalls, bounds.maxAttemptsPerCell);
+    const perCell = (captured.config.maxRetries ?? DEFAULT_MAX_RETRIES) + 1;
+    if (bounds.maxAttemptsPerCell > perCell || bounds.maxPhysicalCalls > captured.plan.cells.length * perCell)
+        refuse('retry_bounds');
+    const executionExpiresAtMs = retainedPaidCutoff(bounds);
+    const remaining = executionExpiresAtMs - Date.now();
+    if (remaining <= 0 || Date.now() < bounds.startedAtMs)
+        refuse('deadline');
+    const lease = abortSignalWithTimeout(input.signal, remaining);
+    let delivery;
+    const active = () => { lease.signal.throwIfAborted(); if (Date.now() >= executionExpiresAtMs || Date.now() < bounds.startedAtMs)
+        refuse('deadline'); };
+    try {
+        active();
+        return await guardReviewLaunch({ ...guard, headSha: captured.plan.headSha,
+            inputSha256: retainedLaunchInputSha256(captured.digest, run),
+            validate: async () => {
+                active();
+                if (continuation && (!(await loadConvergeAttemptState(guard.gitCommonDir, guard.target)) ||
+                    !(await loadConvergeRunState(guard.gitCommonDir, guard.target))))
+                    refuse('native_state_missing');
+                await validate();
+                active();
+            },
+            originalLaunch: { input: { ...bounds, runId: run.id, capturedInputsSha256: captured.digest, planDigest: captured.plan.digest },
+                beforeClaim: async (prepared) => {
+                    active();
+                    if (access.kind === 'protected') {
+                        if (!isDeepStrictEqual(originalAttestation, access.attestation))
+                            refuse('credential_changed');
+                        delivery = new AttestedReviewerDelivery(originalAttestation, { kind: 'original', rclVersion: run.rclVersion,
+                            operationBytes: prepared.launchBytes, fetchImpl: access.fetchImpl });
+                        await delivery.checkOriginal({ signal: lease.signal });
+                    }
+                    else if (access.kind === 'asserted') {
+                        const sink = new HarnessSink({ credential: access.credential, rclVersion: run.rclVersion, fetchImpl: access.fetchImpl });
+                        if ((await sink.checkReviewerRecovery({ signal: lease.signal })).kind !== 'ok')
+                            refuse('capability_unavailable');
+                    }
+                    active();
+                    await beforeClaim?.(prepared);
+                    active();
+                } },
+            onClaim,
+            run: async (converge, ownership, prepared) => {
+                if (!prepared || converge.attempt === undefined || converge.round === undefined)
+                    refuse('claim_missing');
+                active();
+                const journal = await bindOriginalCouncil({ commonDir: guard.gitCommonDir, ownership, captured, launch: prepared.launch });
+                if ((await journal.readBindings()).launch !== prepared.launchBytes)
+                    refuse('launch_mismatch');
+                active();
+                return execute({ prepared, launch: prepared.launch, captured, journal, ownership,
+                    run: { ...run, ...(converge.cycleId ? { cycleId: converge.cycleId } : {}), converge: { target: converge.target, attempt: converge.attempt, round: converge.round } }, signal: lease.signal, executionExpiresAtMs,
+                    ...(delivery ? { delivery } : {}) });
+            }, });
+    }
+    finally {
+        lease.dispose();
+    }
+}
+//# sourceMappingURL=reviewer-original.js.map

package/dist/evidence/reviewer-original.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-original.js","sourceRoot":"","sources":["../../src/evidence/reviewer-original.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAmF,MAAM,6BAA6B,CAAC;AACjJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAA+B,MAAM,gCAAgC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAuB,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAA0B,MAAM,2BAA2B,CAAC;AAE/F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAoCnD,SAAS,MAAM,CAAC,MAAc,IAAW,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAE1F,SAAS,cAAc,CAAC,QAAgC,EAAE,GAAwB,EAAE,IAAU,EAAE,MAAc,EAAE,SAAiB;IAC/H,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC/D,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC;QACxF,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,KAAK,WAAW,CAAC,sBAAsB;QAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACxH,IAAI,WAAW,CAAC,uBAAuB,KAAK,CAAC;QAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAG,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,IAAI,CAAC,YAAY;QACtE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,YAAY;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAChI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7F,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QACzE,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;QAClF,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO;QAC5C,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;SAC5F,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC7I,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAA6C,CAAC;IAC9F,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,CAAC,YAAY,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA8B;IACxE,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC/F,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACvG,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,YAAY,GAAG,KAAK,CAAC,0BAA0B,KAAK,IAAI,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM;QAC7E,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAA4B,CAAC;IAC5L,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACnJ,0BAA0B,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,kBAAkB,GAAG,OAAO,IAAI,MAAM,CAAC,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAClI,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpD,IAAI,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW;QAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,QAA8C,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,oBAAoB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW;QAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvJ,IAAI,CAAC;QACH,MAAM,EAAE,CAAC;QACT,OAAO,MAAM,iBAAiB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;YACvE,WAAW,EAAE,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;YAC5D,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,MAAM,EAAE,CAAC;gBACT,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;oBACtF,CAAC,CAAC,MAAM,oBAAoB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACnG,MAAM,QAAQ,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC;YAC7B,CAAC;YACD,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5H,WAAW,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;oBAC5B,MAAM,EAAE,CAAC;oBACT,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBAChC,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC;4BAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBAC9F,QAAQ,GAAG,IAAI,wBAAwB,CAAC,mBAAoB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU;4BAC1G,cAAc,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;wBACvE,MAAM,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;oBACzD,CAAC;yBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;wBACtC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;wBACzH,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI;4BAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;oBACnH,CAAC;oBACD,MAAM,EAAE,CAAC;oBAAC,MAAM,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC;oBAAC,MAAM,EAAE,CAAC;gBACpD,CAAC,EAAE;YACL,OAAO;YACP,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;gBAC3C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,eAAe,CAAC,CAAC;gBACzG,MAAM,EAAE,CAAC;gBACT,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC3H,IAAI,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,WAAW;oBAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC9F,MAAM,EAAE,CAAC;gBACT,OAAO,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS;oBAC9E,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,oBAAoB;oBAChN,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC,GACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAChC,CAAC"}

package/dist/evidence/reviewer-recovery.d.ts

@@ -0,0 +1,74 @@
+import type { ConvergeAttemptClaim } from '../converge/attempt-budget.js';
+import { CheckpointJournal } from '../dispatch/checkpoint.js';
+import { type CapturedRecoveryOptions } from '../dispatch/recovery.js';
+import { type RecoveryOperation } from '../dispatch/recovery-operation.js';
+import type { AssemblyDependencies } from '../report/assembly.js';
+import { type ReviewerArtifact } from '../report/reviewer-artifact.js';
+import type { ReviewerHealth } from '../report/reviewer-health.js';
+import { type RunHeaderInput } from '../report/run-header.js';
+/** Immutable references for the caller's actual-credential capability/owner check. */
+export interface ReviewerRecoveryPreflight {
+    target: string;
+    headSha: string;
+    successorRunId: string;
+    source: {
+        runId: string;
+        reportSha256: string;
+        reviewerArtifactSha256: string;
+    };
+    lineage: Array<{
+        runId: string;
+        reportSha256: string;
+        reviewerArtifactSha256: string;
+    }>;
+}
+interface CommonRecoveryOptions extends Pick<CapturedRecoveryOptions, 'adapterFactory' | 'onPhysicalReviewComplete' | 'signal' | 'nowMs'> {
+    commonDir: string;
+    target: string;
+    successorRunId: string;
+    currentHeadSha: string;
+    /** Recomputed from current effective inputs, retaining the original frozen model weights. */
+    freshCaptureBytes: string;
+    currentRunBindings: Pick<RunHeaderInput, 'target' | 'roster' | 'spec'>;
+    rclVersion: string;
+    runner: RunHeaderInput['runner'];
+    /** Must verify server support and the exact source under the actual producer credential. */
+    preflight: (request: ReviewerRecoveryPreflight, operationBytes: string) => Promise<void>;
+    /** New apply claims only; resuming the saved operation never spends or reports another claim. */
+    onClaim?: (claim: ConvergeAttemptClaim) => Promise<void>;
+    onLateAuditError: (error: unknown, callIndex: number) => void;
+    onStage?: AssemblyDependencies['onStage'];
+}
+export interface ApplyReviewerRecoveryOptions extends CommonRecoveryOptions {
+    sourceRunId: string;
+    operationId: string;
+    startedAtMs: number;
+    expiresAtMs: number;
+    maxAdditionalCalls: number;
+    maxAttemptsPerCell: number;
+    maxAttempts?: number;
+}
+export type ResumeReviewerRecoveryOptions = CommonRecoveryOptions;
+export interface CompletedReviewerRecovery {
+    kind: 'completed';
+    claim: ConvergeAttemptClaim;
+    operation: RecoveryOperation;
+    reusedTerminal: boolean;
+    /** PRIVATE in-process result; never print this object as CLI status or telemetry. */
+    terminal: NonNullable<Awaited<ReturnType<CheckpointJournal['readTerminalReport']>>>;
+    health: ReviewerHealth;
+    gate: ReviewerArtifact['validation']['gate'];
+}
+export type ApplyReviewerRecoveryResult = CompletedReviewerRecovery | {
+    kind: 'already_quorate';
+    sourceRunId: string;
+};
+/**
+ * Compose guarded missing-assignment execution and immutable terminal retention.
+ * This internal service requires caller-owned server preflight; it does not
+ * implement that authority, deliver evidence, admit a native round, or triage it.
+ */
+export declare function applyReviewerRecovery(input: ApplyReviewerRecoveryOptions): Promise<ApplyReviewerRecoveryResult>;
+/** Resume the exact saved operation; caller-supplied replacement budgets are not part of this API. */
+export declare function resumeReviewerRecovery(input: ResumeReviewerRecoveryOptions): Promise<CompletedReviewerRecovery>;
+export {};