@bjoernrochel/sevro 1.0.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (405) hide show
  1. package/CONTRIBUTING.md +34 -4
  2. package/README.md +7 -6
  3. package/dist/examples/basic/graded.json +13 -0
  4. package/dist/examples/basic/host.js +9 -0
  5. package/dist/examples/basic/host.js.map +1 -0
  6. package/dist/examples/basic/prompt-only.json +7 -0
  7. package/dist/examples/recipes/candidate.js +23 -0
  8. package/dist/examples/recipes/candidate.js.map +1 -0
  9. package/dist/examples/recipes/cases/coding-change.json +21 -0
  10. package/dist/examples/recipes/cases/host-tools.json +21 -0
  11. package/dist/examples/recipes/cases/mise.json +21 -0
  12. package/dist/examples/recipes/cases/node.json +21 -0
  13. package/dist/examples/recipes/cases/python-uv.json +21 -0
  14. package/dist/examples/recipes/cases/semantic.json +17 -0
  15. package/dist/examples/recipes/coding-change/check.js +16 -0
  16. package/dist/examples/recipes/coding-change/check.js.map +1 -0
  17. package/dist/examples/recipes/executable.js +20 -0
  18. package/dist/examples/recipes/executable.js.map +1 -0
  19. package/dist/examples/recipes/extension-artifacts.js +56 -0
  20. package/dist/examples/recipes/extension-artifacts.js.map +1 -0
  21. package/dist/examples/recipes/extension-methods.js +167 -0
  22. package/dist/examples/recipes/extension-methods.js.map +1 -0
  23. package/dist/examples/recipes/extension.js +28 -0
  24. package/dist/examples/recipes/extension.js.map +1 -0
  25. package/dist/examples/recipes/modules.js +9 -0
  26. package/dist/examples/recipes/modules.js.map +1 -0
  27. package/dist/examples/recipes/repository-skill/.agents/skills/startup-guide/SKILL.md +7 -0
  28. package/dist/examples/recipes/repository-skill/.claude/skills/startup-guide/SKILL.md +7 -0
  29. package/dist/examples/recipes/repository-skill/README.md +3 -0
  30. package/dist/examples/recipes/run-inputs.js +144 -0
  31. package/dist/examples/recipes/run-inputs.js.map +1 -0
  32. package/dist/examples/recipes/run-options.js +103 -0
  33. package/dist/examples/recipes/run-options.js.map +1 -0
  34. package/dist/examples/recipes/run.js +62 -0
  35. package/dist/examples/recipes/run.js.map +1 -0
  36. package/dist/examples/recipes/runtime/empty.json +1 -0
  37. package/dist/examples/recipes/runtime/goals.json +1 -0
  38. package/dist/examples/recipes/runtime/mise.json +6 -0
  39. package/dist/examples/recipes/runtime/path.json +1 -0
  40. package/dist/examples/recipes/runtime/plugins.json +4 -0
  41. package/dist/examples/recipes/runtime/python-uv.json +10 -0
  42. package/dist/examples/recipes/semantic-judge.js +27 -0
  43. package/dist/examples/recipes/semantic-judge.js.map +1 -0
  44. package/dist/examples/templates/coding/adapter.js +14 -0
  45. package/dist/examples/templates/coding/adapter.js.map +1 -0
  46. package/dist/examples/templates/coding/case.json +15 -0
  47. package/dist/examples/templates/repository-skill/.agents/skills/startup-guide/SKILL.md +6 -0
  48. package/dist/examples/templates/repository-skill/extension-data.js +61 -0
  49. package/dist/examples/templates/repository-skill/extension-data.js.map +1 -0
  50. package/dist/examples/templates/repository-skill/extension.js +29 -0
  51. package/dist/examples/templates/repository-skill/extension.js.map +1 -0
  52. package/dist/examples/templates/response/adapter.js +13 -0
  53. package/dist/examples/templates/response/adapter.js.map +1 -0
  54. package/dist/examples/templates/response/case.json +13 -0
  55. package/dist/src/advisory.js +86 -0
  56. package/dist/src/advisory.js.map +1 -0
  57. package/dist/src/candidate-artifacts.js +139 -0
  58. package/dist/src/candidate-artifacts.js.map +1 -0
  59. package/dist/src/candidate-codex-state.js +110 -0
  60. package/dist/src/candidate-codex-state.js.map +1 -0
  61. package/dist/src/case-validation.js +92 -0
  62. package/dist/src/case-validation.js.map +1 -0
  63. package/dist/src/cli/cancellation.js +21 -0
  64. package/dist/src/cli/cancellation.js.map +1 -0
  65. package/dist/src/cli/command.js +60 -0
  66. package/dist/src/cli/command.js.map +1 -0
  67. package/dist/src/cli/completion.js +14 -0
  68. package/dist/src/cli/completion.js.map +1 -0
  69. package/dist/src/cli/demo.js +45 -0
  70. package/dist/src/cli/demo.js.map +1 -0
  71. package/dist/src/cli/evaluation.js +40 -0
  72. package/dist/src/cli/evaluation.js.map +1 -0
  73. package/dist/src/cli/extension.js +54 -0
  74. package/dist/src/cli/extension.js.map +1 -0
  75. package/dist/src/cli/help.js +190 -0
  76. package/dist/src/cli/help.js.map +1 -0
  77. package/dist/src/cli/hosts.js +33 -0
  78. package/dist/src/cli/hosts.js.map +1 -0
  79. package/dist/src/cli/init-settings.js +29 -0
  80. package/dist/src/cli/init-settings.js.map +1 -0
  81. package/dist/src/cli/init.js +82 -0
  82. package/dist/src/cli/init.js.map +1 -0
  83. package/dist/src/cli/invocation.js +431 -0
  84. package/dist/src/cli/invocation.js.map +1 -0
  85. package/dist/src/cli/loading.js +110 -0
  86. package/dist/src/cli/loading.js.map +1 -0
  87. package/dist/src/cli/preparation.js +88 -0
  88. package/dist/src/cli/preparation.js.map +1 -0
  89. package/dist/src/cli/presentation.js +61 -0
  90. package/dist/src/cli/presentation.js.map +1 -0
  91. package/dist/src/cli/progress.js +5 -0
  92. package/dist/src/cli/progress.js.map +1 -0
  93. package/dist/src/cli/run-manifest.js +108 -0
  94. package/dist/src/cli/run-manifest.js.map +1 -0
  95. package/dist/src/cli/run-options.js +367 -0
  96. package/dist/src/cli/run-options.js.map +1 -0
  97. package/dist/src/cli/run-overrides.js +51 -0
  98. package/dist/src/cli/run-overrides.js.map +1 -0
  99. package/dist/src/cli/settings.js +127 -0
  100. package/dist/src/cli/settings.js.map +1 -0
  101. package/dist/src/cli/summary.js +28 -0
  102. package/dist/src/cli/summary.js.map +1 -0
  103. package/dist/src/cli.js +20 -0
  104. package/dist/src/cli.js.map +1 -0
  105. package/dist/src/contract-types.js +2 -0
  106. package/dist/src/contract-types.js.map +1 -0
  107. package/dist/src/engine.js +4 -0
  108. package/dist/src/engine.js.map +1 -0
  109. package/dist/src/evaluation/advisory.js +85 -0
  110. package/dist/src/evaluation/advisory.js.map +1 -0
  111. package/dist/src/evaluation/check-plan.js +292 -0
  112. package/dist/src/evaluation/check-plan.js.map +1 -0
  113. package/dist/src/evaluation/collection.js +61 -0
  114. package/dist/src/evaluation/collection.js.map +1 -0
  115. package/dist/src/evaluation/context.js +2 -0
  116. package/dist/src/evaluation/context.js.map +1 -0
  117. package/dist/src/evaluation/grading-host.js +28 -0
  118. package/dist/src/evaluation/grading-host.js.map +1 -0
  119. package/dist/src/evaluation/grading.js +154 -0
  120. package/dist/src/evaluation/grading.js.map +1 -0
  121. package/dist/src/evaluation/invocation-plan.js +312 -0
  122. package/dist/src/evaluation/invocation-plan.js.map +1 -0
  123. package/dist/src/evaluation/plan.js +376 -0
  124. package/dist/src/evaluation/plan.js.map +1 -0
  125. package/dist/src/evaluation/progress.js +14 -0
  126. package/dist/src/evaluation/progress.js.map +1 -0
  127. package/dist/src/evaluation/resources.js +159 -0
  128. package/dist/src/evaluation/resources.js.map +1 -0
  129. package/dist/src/evaluation/run.js +148 -0
  130. package/dist/src/evaluation/run.js.map +1 -0
  131. package/dist/src/evaluation/scheduler.js +27 -0
  132. package/dist/src/evaluation/scheduler.js.map +1 -0
  133. package/dist/src/evaluation/semantic.js +183 -0
  134. package/dist/src/evaluation/semantic.js.map +1 -0
  135. package/dist/src/evaluation/trial.js +593 -0
  136. package/dist/src/evaluation/trial.js.map +1 -0
  137. package/dist/src/evaluation/types.js +20 -0
  138. package/dist/src/evaluation/types.js.map +1 -0
  139. package/dist/src/evidence/host-results.js +67 -0
  140. package/dist/src/evidence/host-results.js.map +1 -0
  141. package/dist/src/evidence/retained-artifacts.js +17 -0
  142. package/dist/src/evidence/retained-artifacts.js.map +1 -0
  143. package/dist/src/evidence/trial-writer.js +131 -0
  144. package/dist/src/evidence/trial-writer.js.map +1 -0
  145. package/dist/src/evidence/usage.js +14 -0
  146. package/dist/src/evidence/usage.js.map +1 -0
  147. package/dist/src/executable.js +20 -0
  148. package/dist/src/executable.js.map +1 -0
  149. package/dist/src/extension-client.js +212 -0
  150. package/dist/src/extension-client.js.map +1 -0
  151. package/dist/src/extension-session.js +236 -0
  152. package/dist/src/extension-session.js.map +1 -0
  153. package/dist/src/fixtures/advisory.js +206 -0
  154. package/dist/src/fixtures/advisory.js.map +1 -0
  155. package/dist/src/fixtures/bin.js +41 -0
  156. package/dist/src/fixtures/bin.js.map +1 -0
  157. package/dist/src/fixtures/cleanup.js +43 -0
  158. package/dist/src/fixtures/cleanup.js.map +1 -0
  159. package/dist/src/fixtures/create.js +94 -0
  160. package/dist/src/fixtures/create.js.map +1 -0
  161. package/dist/src/fixtures/generated.js +181 -0
  162. package/dist/src/fixtures/generated.js.map +1 -0
  163. package/dist/src/fixtures/git-hooks.js +16 -0
  164. package/dist/src/fixtures/git-hooks.js.map +1 -0
  165. package/dist/src/fixtures/preparation.js +201 -0
  166. package/dist/src/fixtures/preparation.js.map +1 -0
  167. package/dist/src/fixtures/repository.js +255 -0
  168. package/dist/src/fixtures/repository.js.map +1 -0
  169. package/dist/src/fixtures/setup.js +175 -0
  170. package/dist/src/fixtures/setup.js.map +1 -0
  171. package/dist/src/fixtures/tools.js +57 -0
  172. package/dist/src/fixtures/tools.js.map +1 -0
  173. package/dist/src/fixtures/workspace-state.js +155 -0
  174. package/dist/src/fixtures/workspace-state.js.map +1 -0
  175. package/dist/src/generated/cli-result.cjs +2 -0
  176. package/dist/src/generated/extension.cjs +2 -0
  177. package/dist/src/generated/report.cjs +2 -0
  178. package/dist/src/generated/run-evidence.cjs +2 -0
  179. package/dist/src/generated/runtime.cjs +2 -0
  180. package/dist/src/git.js +72 -0
  181. package/dist/src/git.js.map +1 -0
  182. package/dist/src/graders/artifact.js +68 -0
  183. package/dist/src/graders/artifact.js.map +1 -0
  184. package/dist/src/graders/git-head.js +112 -0
  185. package/dist/src/graders/git-head.js.map +1 -0
  186. package/dist/src/graders/output.js +345 -0
  187. package/dist/src/graders/output.js.map +1 -0
  188. package/dist/src/graders/semantic.js +132 -0
  189. package/dist/src/graders/semantic.js.map +1 -0
  190. package/dist/src/graders/shell.js +321 -0
  191. package/dist/src/graders/shell.js.map +1 -0
  192. package/dist/src/host-diagnostic-redaction.js +52 -0
  193. package/dist/src/host-diagnostic-redaction.js.map +1 -0
  194. package/dist/src/host-diagnostics.js +248 -0
  195. package/dist/src/host-diagnostics.js.map +1 -0
  196. package/dist/src/hosts/claude-continuation.js +89 -0
  197. package/dist/src/hosts/claude-continuation.js.map +1 -0
  198. package/dist/src/hosts/claude-credential.js +121 -0
  199. package/dist/src/hosts/claude-credential.js.map +1 -0
  200. package/dist/src/hosts/claude-events.js +136 -0
  201. package/dist/src/hosts/claude-events.js.map +1 -0
  202. package/dist/src/hosts/claude-keychain.js +100 -0
  203. package/dist/src/hosts/claude-keychain.js.map +1 -0
  204. package/dist/src/hosts/claude-login-recovery.js +67 -0
  205. package/dist/src/hosts/claude-login-recovery.js.map +1 -0
  206. package/dist/src/hosts/claude-login-refresh.js +146 -0
  207. package/dist/src/hosts/claude-login-refresh.js.map +1 -0
  208. package/dist/src/hosts/claude-login-store.js +124 -0
  209. package/dist/src/hosts/claude-login-store.js.map +1 -0
  210. package/dist/src/hosts/claude-login.js +74 -0
  211. package/dist/src/hosts/claude-login.js.map +1 -0
  212. package/dist/src/hosts/claude-native-goal.js +138 -0
  213. package/dist/src/hosts/claude-native-goal.js.map +1 -0
  214. package/dist/src/hosts/claude-process.js +10 -0
  215. package/dist/src/hosts/claude-process.js.map +1 -0
  216. package/dist/src/hosts/claude-refresh-lock.js +76 -0
  217. package/dist/src/hosts/claude-refresh-lock.js.map +1 -0
  218. package/dist/src/hosts/claude-repository-invocation.js +229 -0
  219. package/dist/src/hosts/claude-repository-invocation.js.map +1 -0
  220. package/dist/src/hosts/claude-settings.js +158 -0
  221. package/dist/src/hosts/claude-settings.js.map +1 -0
  222. package/dist/src/hosts/claude-skill-activations.js +131 -0
  223. package/dist/src/hosts/claude-skill-activations.js.map +1 -0
  224. package/dist/src/hosts/claude-state.js +237 -0
  225. package/dist/src/hosts/claude-state.js.map +1 -0
  226. package/dist/src/hosts/claude-tool-calls.js +150 -0
  227. package/dist/src/hosts/claude-tool-calls.js.map +1 -0
  228. package/dist/src/hosts/claude.js +373 -0
  229. package/dist/src/hosts/claude.js.map +1 -0
  230. package/dist/src/hosts/codex-app-server.js +764 -0
  231. package/dist/src/hosts/codex-app-server.js.map +1 -0
  232. package/dist/src/hosts/codex-configuration.js +91 -0
  233. package/dist/src/hosts/codex-configuration.js.map +1 -0
  234. package/dist/src/hosts/codex-events.js +104 -0
  235. package/dist/src/hosts/codex-events.js.map +1 -0
  236. package/dist/src/hosts/codex-exec-controls.js +434 -0
  237. package/dist/src/hosts/codex-exec-controls.js.map +1 -0
  238. package/dist/src/hosts/codex-invocation.js +54 -0
  239. package/dist/src/hosts/codex-invocation.js.map +1 -0
  240. package/dist/src/hosts/codex-marketplace.js +185 -0
  241. package/dist/src/hosts/codex-marketplace.js.map +1 -0
  242. package/dist/src/hosts/codex-native-calls.js +516 -0
  243. package/dist/src/hosts/codex-native-calls.js.map +1 -0
  244. package/dist/src/hosts/codex-process.js +10 -0
  245. package/dist/src/hosts/codex-process.js.map +1 -0
  246. package/dist/src/hosts/codex-profile.js +206 -0
  247. package/dist/src/hosts/codex-profile.js.map +1 -0
  248. package/dist/src/hosts/codex-session-files.js +89 -0
  249. package/dist/src/hosts/codex-session-files.js.map +1 -0
  250. package/dist/src/hosts/codex-state.js +310 -0
  251. package/dist/src/hosts/codex-state.js.map +1 -0
  252. package/dist/src/hosts/codex.js +527 -0
  253. package/dist/src/hosts/codex.js.map +1 -0
  254. package/dist/src/hosts/isolation-common.js +43 -0
  255. package/dist/src/hosts/isolation-common.js.map +1 -0
  256. package/dist/src/hosts/isolation-roots.js +64 -0
  257. package/dist/src/hosts/isolation-roots.js.map +1 -0
  258. package/dist/src/hosts/isolation.js +12 -0
  259. package/dist/src/hosts/isolation.js.map +1 -0
  260. package/dist/src/hosts/linux-sandbox.js +127 -0
  261. package/dist/src/hosts/linux-sandbox.js.map +1 -0
  262. package/dist/src/hosts/mac-sandbox.js +137 -0
  263. package/dist/src/hosts/mac-sandbox.js.map +1 -0
  264. package/dist/src/hosts/native-controls.js +151 -0
  265. package/dist/src/hosts/native-controls.js.map +1 -0
  266. package/dist/src/hosts/native-request.js +33 -0
  267. package/dist/src/hosts/native-request.js.map +1 -0
  268. package/dist/src/hosts/process-lifecycle.js +167 -0
  269. package/dist/src/hosts/process-lifecycle.js.map +1 -0
  270. package/dist/src/hosts/protected-worktrees.js +81 -0
  271. package/dist/src/hosts/protected-worktrees.js.map +1 -0
  272. package/dist/src/hosts/skill-hook-catalog.js +100 -0
  273. package/dist/src/hosts/skill-hook-catalog.js.map +1 -0
  274. package/dist/src/hosts/skill-hook-handler.js +228 -0
  275. package/dist/src/hosts/skill-hook-handler.js.map +1 -0
  276. package/dist/src/hosts/skill-hooks.js +423 -0
  277. package/dist/src/hosts/skill-hooks.js.map +1 -0
  278. package/dist/src/hosts/workspace-fingerprint.js +72 -0
  279. package/dist/src/hosts/workspace-fingerprint.js.map +1 -0
  280. package/dist/src/identity.js +167 -0
  281. package/dist/src/identity.js.map +1 -0
  282. package/dist/src/instrumentation.js +83 -0
  283. package/dist/src/instrumentation.js.map +1 -0
  284. package/dist/src/native-transcript-state.js +85 -0
  285. package/dist/src/native-transcript-state.js.map +1 -0
  286. package/dist/src/native-transcript-view.js +65 -0
  287. package/dist/src/native-transcript-view.js.map +1 -0
  288. package/dist/src/native-transcripts.js +208 -0
  289. package/dist/src/native-transcripts.js.map +1 -0
  290. package/dist/src/paths.js +13 -0
  291. package/dist/src/paths.js.map +1 -0
  292. package/dist/src/process-lifecycle.js +101 -0
  293. package/dist/src/process-lifecycle.js.map +1 -0
  294. package/dist/src/provenance.js +263 -0
  295. package/dist/src/provenance.js.map +1 -0
  296. package/dist/src/prune.js +228 -0
  297. package/dist/src/prune.js.map +1 -0
  298. package/dist/src/report.js +276 -0
  299. package/dist/src/report.js.map +1 -0
  300. package/dist/src/resolved-case.js +29 -0
  301. package/dist/src/resolved-case.js.map +1 -0
  302. package/dist/src/results-lock.js +40 -0
  303. package/dist/src/results-lock.js.map +1 -0
  304. package/dist/src/results.js +127 -0
  305. package/dist/src/results.js.map +1 -0
  306. package/dist/src/run-owner.js +283 -0
  307. package/dist/src/run-owner.js.map +1 -0
  308. package/dist/src/runner-paths.js +11 -0
  309. package/dist/src/runner-paths.js.map +1 -0
  310. package/dist/src/runtime/config.js +323 -0
  311. package/dist/src/runtime/config.js.map +1 -0
  312. package/dist/src/runtime/discovery-apple.js +65 -0
  313. package/dist/src/runtime/discovery-apple.js.map +1 -0
  314. package/dist/src/runtime/discovery-providers.js +37 -0
  315. package/dist/src/runtime/discovery-providers.js.map +1 -0
  316. package/dist/src/runtime/discovery.js +40 -0
  317. package/dist/src/runtime/discovery.js.map +1 -0
  318. package/dist/src/runtime/hook-processes.js +81 -0
  319. package/dist/src/runtime/hook-processes.js.map +1 -0
  320. package/dist/src/runtime/hooks.js +304 -0
  321. package/dist/src/runtime/hooks.js.map +1 -0
  322. package/dist/src/runtime/paths.js +244 -0
  323. package/dist/src/runtime/paths.js.map +1 -0
  324. package/dist/src/runtime/query.js +76 -0
  325. package/dist/src/runtime/query.js.map +1 -0
  326. package/dist/src/runtime/seeds.js +98 -0
  327. package/dist/src/runtime/seeds.js.map +1 -0
  328. package/dist/src/runtime/shared-cache.js +81 -0
  329. package/dist/src/runtime/shared-cache.js.map +1 -0
  330. package/dist/src/runtime/state.js +106 -0
  331. package/dist/src/runtime/state.js.map +1 -0
  332. package/dist/src/runtime-process.js +148 -0
  333. package/dist/src/runtime-process.js.map +1 -0
  334. package/dist/src/schema-types.js +2 -0
  335. package/dist/src/schema-types.js.map +1 -0
  336. package/dist/src/schema.js +16 -0
  337. package/dist/src/schema.js.map +1 -0
  338. package/dist/src/shell.js +5 -0
  339. package/dist/src/shell.js.map +1 -0
  340. package/dist/src/sqlite-lock.js +18 -0
  341. package/dist/src/sqlite-lock.js.map +1 -0
  342. package/dist/src/storage.js +21 -0
  343. package/dist/src/storage.js.map +1 -0
  344. package/dist/src/transcript-retention.js +109 -0
  345. package/dist/src/transcript-retention.js.map +1 -0
  346. package/dist/src/value-guards.js +26 -0
  347. package/dist/src/value-guards.js.map +1 -0
  348. package/docs/architecture.md +5 -2
  349. package/docs/creating-cases.md +2 -3
  350. package/docs/development-cli.md +12 -7
  351. package/docs/documentation-quality.md +4 -3
  352. package/docs/evaluation-workflow.md +8 -8
  353. package/docs/getting-started.md +7 -6
  354. package/docs/guide-evaluation.md +1 -1
  355. package/docs/identity-v1.md +4 -1
  356. package/docs/installing.md +31 -13
  357. package/docs/licensing.md +2 -2
  358. package/docs/native-hosts.md +1 -1
  359. package/docs/recipes.md +41 -40
  360. package/docs/releases.md +20 -4
  361. package/docs/run-settings-v1.md +3 -3
  362. package/docs/specs/repository-guide.md +1 -1
  363. package/docs/troubleshooting.md +1 -1
  364. package/docs/typescript-quality.md +18 -1
  365. package/examples/recipes/executable.ts +19 -0
  366. package/examples/recipes/extension-artifacts.ts +1 -1
  367. package/examples/recipes/extension.ts +2 -1
  368. package/examples/recipes/modules.ts +9 -0
  369. package/examples/recipes/run-inputs.ts +14 -19
  370. package/examples/recipes/run-options.ts +9 -8
  371. package/examples/recipes/run.ts +21 -7
  372. package/examples/templates/repository-skill/extension-data.ts +1 -1
  373. package/examples/templates/repository-skill/extension.ts +2 -1
  374. package/package.json +14 -6
  375. package/src/cli/demo.ts +3 -2
  376. package/src/cli/help.ts +4 -3
  377. package/src/cli/init-settings.ts +5 -4
  378. package/src/cli/init.ts +9 -8
  379. package/src/cli/invocation.ts +2 -1
  380. package/src/cli/preparation.ts +2 -2
  381. package/src/cli.ts +1 -1
  382. package/src/executable.ts +19 -0
  383. package/src/extension-client.ts +6 -12
  384. package/src/fixtures/setup.ts +3 -2
  385. package/src/git.ts +2 -1
  386. package/src/graders/git-head.ts +3 -2
  387. package/src/graders/shell.ts +4 -3
  388. package/src/hosts/claude-keychain.ts +3 -2
  389. package/src/hosts/claude-login-refresh.ts +3 -2
  390. package/src/hosts/claude-refresh-lock.ts +2 -1
  391. package/src/hosts/claude-settings.ts +3 -1
  392. package/src/hosts/claude.ts +1 -1
  393. package/src/hosts/isolation-roots.ts +3 -2
  394. package/src/hosts/process-lifecycle.ts +4 -6
  395. package/src/hosts/protected-worktrees.ts +2 -1
  396. package/src/hosts/skill-hook-handler.ts +1 -1
  397. package/src/hosts/skill-hooks.ts +10 -2
  398. package/src/provenance.ts +7 -6
  399. package/src/results-lock.ts +4 -4
  400. package/src/run-owner.ts +15 -9
  401. package/src/runner-paths.ts +21 -0
  402. package/src/runtime/hook-processes.ts +2 -1
  403. package/src/runtime/hooks.ts +9 -7
  404. package/src/runtime-process.ts +194 -0
  405. package/src/sqlite-lock.ts +25 -0
@@ -0,0 +1,434 @@
1
+ import { createRequire } from "node:module";
2
+ import { isRecord, isUnknownArray } from "../value-guards.js";
3
+ const require = createRequire(import.meta.url);
4
+ let parser;
5
+ function typescript() {
6
+ return (parser ??= require("typescript"));
7
+ }
8
+ function toolNamespace(name) {
9
+ if ([
10
+ "spawn_agent",
11
+ "list_agents",
12
+ "wait_agent",
13
+ "followup_task",
14
+ "send_message",
15
+ "interrupt_agent",
16
+ ].includes(name))
17
+ return "collaboration";
18
+ if ([
19
+ "create_goal",
20
+ "get_goal",
21
+ "update_goal",
22
+ "exec_command",
23
+ "write_stdin",
24
+ ].includes(name))
25
+ return "functions";
26
+ return "other";
27
+ }
28
+ function toolName(node) {
29
+ const ts = typescript();
30
+ if (!ts.isPropertyAccessExpression(node))
31
+ return undefined;
32
+ if (!ts.isIdentifier(node.expression) || node.expression.text !== "tools")
33
+ return undefined;
34
+ return /^[A-Za-z_][A-Za-z0-9_]{0,63}$/.test(node.name.text)
35
+ ? node.name.text
36
+ : undefined;
37
+ }
38
+ function literal(node) {
39
+ const ts = typescript();
40
+ if (ts.isStringLiteralLike(node) || ts.isNumericLiteral(node))
41
+ return true;
42
+ return [
43
+ ts.SyntaxKind.TrueKeyword,
44
+ ts.SyntaxKind.FalseKeyword,
45
+ ts.SyntaxKind.NullKeyword,
46
+ ].includes(node.kind);
47
+ }
48
+ function member(node, owner, names) {
49
+ const ts = typescript();
50
+ return (ts.isPropertyAccessExpression(node) &&
51
+ ts.isIdentifier(node.expression) &&
52
+ node.expression.text === owner &&
53
+ names.includes(node.name.text));
54
+ }
55
+ function localName(node) {
56
+ const ts = typescript();
57
+ if (!ts.isIdentifier(node))
58
+ return undefined;
59
+ return [
60
+ "tools",
61
+ "text",
62
+ "store",
63
+ "Promise",
64
+ "load",
65
+ "JSON",
66
+ "String",
67
+ ].includes(node.text)
68
+ ? undefined
69
+ : node.text;
70
+ }
71
+ class Submission {
72
+ calls = [];
73
+ locals = new Set();
74
+ collections = new Set();
75
+ indices = new Set();
76
+ nodes = 0;
77
+ expression(node) {
78
+ const ts = typescript();
79
+ if (++this.nodes > 2048)
80
+ return false;
81
+ switch (true) {
82
+ case literal(node):
83
+ return true;
84
+ case ts.isTemplateExpression(node):
85
+ return node.templateSpans.every((span) => this.expression(span.expression));
86
+ case ts.isBinaryExpression(node):
87
+ return this.composition(node);
88
+ case ts.isAwaitExpression(node):
89
+ return this.expression(node.expression);
90
+ case ts.isObjectLiteralExpression(node):
91
+ return node.properties.every((property) => this.property(property));
92
+ case ts.isArrayLiteralExpression(node):
93
+ return node.elements.every((element) => this.expression(element));
94
+ case ts.isIdentifier(node):
95
+ return this.locals.has(node.text);
96
+ case ts.isPropertyAccessExpression(node):
97
+ return this.localProperty(node);
98
+ case ts.isCallExpression(node):
99
+ return this.call(node);
100
+ case ts.isConditionalExpression(node):
101
+ return [node.condition, node.whenTrue, node.whenFalse].every((part) => this.outputExpression(part));
102
+ case ts.isElementAccessExpression(node):
103
+ return (this.collection(node.expression) &&
104
+ typescript().isIdentifier(node.argumentExpression) &&
105
+ this.indices.has(node.argumentExpression.text));
106
+ default:
107
+ return false;
108
+ }
109
+ }
110
+ property(node) {
111
+ const ts = typescript();
112
+ if (ts.isSpreadAssignment(node))
113
+ return this.outputExpression(node.expression);
114
+ if (ts.isShorthandPropertyAssignment(node))
115
+ return this.shorthand(node);
116
+ if (!ts.isPropertyAssignment(node) || ts.isComputedPropertyName(node.name))
117
+ return false;
118
+ return this.expression(node.initializer);
119
+ }
120
+ shorthand(node) {
121
+ return !node.objectAssignmentInitializer && this.expression(node.name);
122
+ }
123
+ composition(node) {
124
+ if ([
125
+ typescript().SyntaxKind.EqualsEqualsEqualsToken,
126
+ typescript().SyntaxKind.ExclamationEqualsEqualsToken,
127
+ ].includes(node.operatorToken.kind))
128
+ return (this.outputExpression(node.left) && this.outputExpression(node.right));
129
+ return (node.operatorToken.kind === typescript().SyntaxKind.PlusToken &&
130
+ this.expression(node.left) &&
131
+ this.expression(node.right));
132
+ }
133
+ call(node) {
134
+ if (this.outputEach(node))
135
+ return true;
136
+ if (!node.arguments.every((argument) => this.expression(argument)))
137
+ return false;
138
+ return helperCall(node.expression) || this.retainToolCall(node.expression);
139
+ }
140
+ retainToolCall(expression) {
141
+ const name = toolName(expression);
142
+ if (!name || this.calls.length >= 128)
143
+ return false;
144
+ this.calls.push({
145
+ index: this.calls.length,
146
+ namespace: toolNamespace(name),
147
+ name,
148
+ });
149
+ return name !== "exec";
150
+ }
151
+ statement(node) {
152
+ const ts = typescript();
153
+ if (ts.isVariableStatement(node))
154
+ return this.declarations(node.declarationList);
155
+ if (ts.isForOfStatement(node))
156
+ return this.outputLoop(node);
157
+ if (ts.isForStatement(node))
158
+ return this.numericOutputLoop(node);
159
+ return ts.isExpressionStatement(node) && this.expression(node.expression);
160
+ }
161
+ localProperty(node) {
162
+ return (this.expression(node.expression) &&
163
+ !["constructor", "__proto__", "prototype"].includes(node.name.text));
164
+ }
165
+ declarations(list) {
166
+ const ts = typescript();
167
+ if (!(list.flags & ts.NodeFlags.Const))
168
+ return false;
169
+ return list.declarations.every((declaration) => this.declaration(declaration));
170
+ }
171
+ declaration(node) {
172
+ if (!node.initializer)
173
+ return false;
174
+ const names = this.bindingNames(node.name, node.initializer);
175
+ if (!names)
176
+ return false;
177
+ if (!this.expression(node.initializer))
178
+ return false;
179
+ names.forEach((name) => this.locals.add(name));
180
+ this.retainCollection(node.name, node.initializer, names);
181
+ return true;
182
+ }
183
+ retainCollection(name, initializer, names) {
184
+ if (localName(name) && collectionExpression(initializer))
185
+ names.forEach((name) => this.collections.add(name));
186
+ }
187
+ bindingNames(node, initializer) {
188
+ const ts = typescript();
189
+ if (ts.isIdentifier(node)) {
190
+ const name = this.declaredName(node);
191
+ return name ? [name] : undefined;
192
+ }
193
+ if (!ts.isArrayBindingPattern(node) || !collectionExpression(initializer))
194
+ return undefined;
195
+ return this.batchNames(node);
196
+ }
197
+ batchNames(node) {
198
+ const names = node.elements.map((element) => this.batchBinding(element));
199
+ if (!names.every((name) => name !== undefined))
200
+ return undefined;
201
+ return new Set(names).size === names.length ? names : undefined;
202
+ }
203
+ batchBinding(node) {
204
+ const ts = typescript();
205
+ if (!ts.isBindingElement(node))
206
+ return undefined;
207
+ if (node.dotDotDotToken || node.initializer || node.propertyName)
208
+ return undefined;
209
+ return this.declaredName(node.name);
210
+ }
211
+ declaredName(node) {
212
+ const name = localName(node);
213
+ return name && !this.locals.has(name) ? name : undefined;
214
+ }
215
+ outputEach(node) {
216
+ const ts = typescript();
217
+ const [callback] = node.arguments;
218
+ if (node.arguments.length !== 1 ||
219
+ !callback ||
220
+ !ts.isIdentifier(callback) ||
221
+ callback.text !== "text")
222
+ return false;
223
+ return [...this.collections].some((name) => member(node.expression, name, ["forEach"]));
224
+ }
225
+ outputLoop(node) {
226
+ const ts = typescript();
227
+ if (!this.collection(node.expression))
228
+ return false;
229
+ if (!ts.isVariableDeclarationList(node.initializer))
230
+ return false;
231
+ const name = loopVariable(node.initializer);
232
+ if (!name || this.locals.has(name))
233
+ return false;
234
+ this.locals.add(name);
235
+ const valid = this.outputBody(node.statement);
236
+ this.locals.delete(name);
237
+ return valid;
238
+ }
239
+ outputExpression(node) {
240
+ const count = this.calls.length;
241
+ return this.expression(node) && this.calls.length === count;
242
+ }
243
+ numericOutputLoop(node) {
244
+ const name = numericLoopVariable(node);
245
+ if (!name || this.locals.has(name))
246
+ return false;
247
+ const condition = node.condition;
248
+ const bound = condition.right;
249
+ if (!this.collection(bound.expression))
250
+ return false;
251
+ this.locals.add(name);
252
+ this.indices.add(name);
253
+ const valid = this.outputBody(node.statement);
254
+ this.locals.delete(name);
255
+ this.indices.delete(name);
256
+ return valid;
257
+ }
258
+ outputBody(node) {
259
+ const ts = typescript();
260
+ if (ts.isBlock(node))
261
+ return node.statements.every((statement) => this.outputBody(statement));
262
+ if (ts.isIfStatement(node))
263
+ return this.outputConditional(node);
264
+ return (ts.isExpressionStatement(node) && this.outputExpression(node.expression));
265
+ }
266
+ outputConditional(node) {
267
+ return (this.outputExpression(node.expression) &&
268
+ this.outputBody(node.thenStatement) &&
269
+ (!node.elseStatement || this.outputBody(node.elseStatement)));
270
+ }
271
+ collection(node) {
272
+ const ts = typescript();
273
+ return ts.isIdentifier(node) && this.collections.has(node.text);
274
+ }
275
+ }
276
+ function helperCall(node) {
277
+ const ts = typescript();
278
+ if (ts.isIdentifier(node) && ["text", "store", "String"].includes(node.text))
279
+ return true;
280
+ return (member(node, "Promise", ["all", "allSettled"]) ||
281
+ member(node, "JSON", ["stringify"]));
282
+ }
283
+ function namedIdentifier(node, name) {
284
+ return (node !== undefined && typescript().isIdentifier(node) && node.text === name);
285
+ }
286
+ function collectionExpression(node) {
287
+ const ts = typescript();
288
+ if (!ts.isAwaitExpression(node) || !ts.isCallExpression(node.expression))
289
+ return false;
290
+ return member(node.expression.expression, "Promise", ["all", "allSettled"]);
291
+ }
292
+ function loopVariable(list) {
293
+ const ts = typescript();
294
+ if (!(list.flags & ts.NodeFlags.Const) || list.declarations.length !== 1)
295
+ return undefined;
296
+ const declaration = list.declarations[0];
297
+ return declaration && !declaration.initializer
298
+ ? localName(declaration.name)
299
+ : undefined;
300
+ }
301
+ function numericLoopVariable(node) {
302
+ const ts = typescript();
303
+ if (!node.initializer || !ts.isVariableDeclarationList(node.initializer))
304
+ return undefined;
305
+ const name = numericBinding(node.initializer);
306
+ return name && numericLoopBounds(node, name) ? name : undefined;
307
+ }
308
+ function numericBinding(list) {
309
+ if (!(list.flags & typescript().NodeFlags.Let) ||
310
+ list.declarations.length !== 1)
311
+ return undefined;
312
+ const declaration = list.declarations[0];
313
+ return declaration && zeroInitializer(declaration.initializer)
314
+ ? localName(declaration.name)
315
+ : undefined;
316
+ }
317
+ function zeroInitializer(node) {
318
+ return (node !== undefined &&
319
+ typescript().isNumericLiteral(node) &&
320
+ node.text === "0");
321
+ }
322
+ function numericLoopBounds(node, name) {
323
+ const ts = typescript();
324
+ const condition = node.condition;
325
+ if (!condition || !ts.isBinaryExpression(condition))
326
+ return false;
327
+ return (numericCondition(condition, name) &&
328
+ numericIncrement(node.incrementor, name));
329
+ }
330
+ function numericCondition(node, name) {
331
+ return (node.operatorToken.kind === typescript().SyntaxKind.LessThanToken &&
332
+ namedIdentifier(node.left, name) &&
333
+ lengthProperty(node.right));
334
+ }
335
+ function lengthProperty(node) {
336
+ return (typescript().isPropertyAccessExpression(node) && node.name.text === "length");
337
+ }
338
+ function numericIncrement(node, name) {
339
+ return (node !== undefined &&
340
+ typescript().isPostfixUnaryExpression(node) &&
341
+ node.operator === typescript().SyntaxKind.PlusPlusToken &&
342
+ namedIdentifier(node.operand, name));
343
+ }
344
+ function inspectedSource(code) {
345
+ if (typeof code !== "string")
346
+ return { reason: "unsupported_source" };
347
+ if (code.length > 65536)
348
+ return { reason: "source_limit" };
349
+ const ts = typescript();
350
+ const source = ts.createSourceFile("submitted.js", code, ts.ScriptTarget.Latest, false, ts.ScriptKind.JS);
351
+ const diagnostics = source.parseDiagnostics;
352
+ if (diagnostics.length !== 0)
353
+ return { reason: "malformed_source" };
354
+ const submission = new Submission();
355
+ return source.statements.every((statement) => submission.statement(statement))
356
+ ? { submission, reason: null }
357
+ : { reason: "unsupported_source" };
358
+ }
359
+ function outputBlocks(output) {
360
+ if (isUnknownArray(output))
361
+ return output;
362
+ if (typeof output !== "string")
363
+ return [];
364
+ try {
365
+ const blocks = JSON.parse(output);
366
+ return isUnknownArray(blocks) ? blocks : [];
367
+ }
368
+ catch {
369
+ return [];
370
+ }
371
+ }
372
+ function completeTextBlock(block) {
373
+ if (!isRecord(block) || !["text", "input_text"].includes(String(block.type)))
374
+ return false;
375
+ return typeof block.text === "string";
376
+ }
377
+ function completedHeader(block) {
378
+ return (isRecord(block) &&
379
+ typeof block.text === "string" &&
380
+ /^Script completed\nWall time [0-9]+(?:\.[0-9]+)? seconds\nOutput:\n$/.test(block.text));
381
+ }
382
+ function submissionOutput(entry, entries) {
383
+ const id = entry.payload.call_id;
384
+ if (typeof id !== "string")
385
+ return [];
386
+ const matches = entries.filter((other) => other.payload.call_id === id);
387
+ if (matches.length !== 2)
388
+ return [];
389
+ const result = matches.find((other) => other.payload.type === "custom_tool_call_output");
390
+ return result && result.ordinal > entry.ordinal
391
+ ? outputBlocks(result.payload.output)
392
+ : [];
393
+ }
394
+ function outputEvidence(blocks) {
395
+ if (!blocks.length || !blocks.every(completeTextBlock))
396
+ return { execution: "incomplete", output: "unavailable" };
397
+ const header = blocks[0];
398
+ const execution = executionStatus(header);
399
+ const truncated = blocks.some((block) => block.text.includes("Warning: truncated output"));
400
+ return { execution, output: truncated ? "truncated" : "complete" };
401
+ }
402
+ function executionStatus(header) {
403
+ if (completedHeader(header))
404
+ return "completed";
405
+ return /^Script failed\b/.test(header.text) ? "failed" : "incomplete";
406
+ }
407
+ function nativeExecNamespace(namespace) {
408
+ return namespace === undefined || namespace === "functions";
409
+ }
410
+ /** Static inspection only: submitted code is never executed by the observer. */
411
+ export function codexExecCallReceipts(entries) {
412
+ return entries
413
+ .filter(({ payload }) => payload.type === "custom_tool_call" && payload.name === "exec")
414
+ .map((entry) => ({
415
+ ordinal: entry.ordinal,
416
+ ...inspectionEvidence(entry),
417
+ ...outputEvidence(submissionOutput(entry, entries)),
418
+ }));
419
+ }
420
+ function inspectionEvidence(entry) {
421
+ if (!nativeExecNamespace(entry.payload.namespace))
422
+ return {
423
+ completeness: "partial",
424
+ calls: [],
425
+ inspectionReason: "foreign_namespace",
426
+ };
427
+ const inspected = inspectedSource(entry.payload.input);
428
+ return {
429
+ completeness: inspected.submission ? "complete" : "partial",
430
+ calls: inspected.submission?.calls ?? [],
431
+ inspectionReason: inspected.reason,
432
+ };
433
+ }
434
+ //# sourceMappingURL=codex-exec-controls.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"codex-exec-controls.js","sourceRoot":"","sources":["codex-exec-controls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB;AAE5C,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,2BAAwB;AAE3D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,IAAI,MAA6B,CAAC;AAClC,SAAS,UAAU;IACjB,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,YAAY,CAAc,CAAC,CAAC;AACzD,CAAC;AAyBD,SAAS,aAAa,CAAC,IAAY;IACjC,IACE;QACE,aAAa;QACb,aAAa;QACb,YAAY;QACZ,eAAe;QACf,cAAc;QACd,iBAAiB;KAClB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhB,OAAO,eAAe,CAAC;IACzB,IACE;QACE,aAAa;QACb,UAAU;QACV,aAAa;QACb,cAAc;QACd,aAAa;KACd,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhB,OAAO,WAAW,CAAC;IACrB,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,SAAS,QAAQ,CAAC,IAAmB;IACnC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO;QACvE,OAAO,SAAS,CAAC;IACnB,OAAO,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AACD,SAAS,OAAO,CAAC,IAAmB;IAClC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO;QACL,EAAE,CAAC,UAAU,CAAC,WAAW;QACzB,EAAE,CAAC,UAAU,CAAC,YAAY;QAC1B,EAAE,CAAC,UAAU,CAAC,WAAW;KAC1B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AACD,SAAS,MAAM,CAAC,IAAmB,EAAE,KAAa,EAAE,KAAe;IACjE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,OAAO,CACL,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QACnC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,KAAK;QAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/B,CAAC;AACJ,CAAC;AACD,SAAS,SAAS,CAAC,IAAoB;IACrC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO;QACL,OAAO;QACP,MAAM;QACN,OAAO;QACP,SAAS;QACT,MAAM;QACN,MAAM;QACN,QAAQ;KACT,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAChB,CAAC;AACD,MAAM,UAAU;IACL,KAAK,GAAoB,EAAE,CAAC;IACpB,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,GAAG,CAAC,CAAC;IAClB,UAAU,CAAC,IAAmB;QAC5B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI;YAAE,OAAO,KAAK,CAAC;QACtC,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,OAAO,CAAC,IAAI,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,KAAK,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;gBAChC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CACjC,CAAC;YACJ,KAAK,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBAC9B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChC,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,KAAK,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;gBACrC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtE,KAAK,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;gBACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACpE,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;gBACxB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;gBACtC,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,KAAK,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACpE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAC5B,CAAC;YACJ,KAAK,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;gBACrC,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;oBAChC,UAAU,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC;oBAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAC/C,CAAC;YACJ;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IACO,QAAQ,CAAC,IAAiC;QAChD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACO,SAAS,CAAC,IAAoC;QACpD,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IACO,WAAW,CAAC,IAAyB;QAC3C,IACE;YACE,UAAU,EAAE,CAAC,UAAU,CAAC,uBAAuB;YAC/C,UAAU,EAAE,CAAC,UAAU,CAAC,4BAA4B;SACrD,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YAEnC,OAAO,CACL,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CACtE,CAAC;QACJ,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC,UAAU,CAAC,SAAS;YAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAC5B,CAAC;IACJ,CAAC;IACO,IAAI,CAAC,IAAuB;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,OAAO,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IACO,cAAc,CAAC,UAAyB;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACxB,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC;YAC9B,IAAI;SACL,CAAC,CAAC;QACH,OAAO,IAAI,KAAK,MAAM,CAAC;IACzB,CAAC;IACD,SAAS,CAAC,IAAkB;QAC1B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IACO,aAAa,CAAC,IAAiC;QACrD,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CACpE,CAAC;IACJ,CAAC;IACO,YAAY,CAAC,IAAgC;QACnD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAC7C,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAC9B,CAAC;IACJ,CAAC;IACO,WAAW,CAAC,IAA4B;QAC9C,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACO,gBAAgB,CACtB,IAAoB,EACpB,WAA0B,EAC1B,KAAe;QAEf,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,WAAW,CAAC;YACtD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IACO,YAAY,CAClB,IAAoB,EACpB,WAA0B;QAE1B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACO,UAAU,CAAC,IAA4B;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IACO,YAAY,CAAC,IAA4B;QAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY;YAC9D,OAAO,SAAS,CAAC;QACnB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACO,YAAY,CAAC,IAAoB;QACvC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IACO,UAAU,CAAC,IAAuB;QACxC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAClC,IACE,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,QAAQ;YACT,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC1B,QAAQ,CAAC,IAAI,KAAK,MAAM;YAExB,OAAO,KAAK,CAAC;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAC3C,CAAC;IACJ,CAAC;IACO,UAAU,CAAC,IAAuB;QACxC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACO,gBAAgB,CAAC,IAAmB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;IAC9D,CAAC;IACO,iBAAiB,CAAC,IAAqB;QAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAgC,CAAC;QACxD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAoC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACO,UAAU,CAAC,IAAkB;QACnC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YAClB,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1E,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,CACL,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CACzE,CAAC;IACJ,CAAC;IACO,iBAAiB,CAAC,IAAoB;QAC5C,OAAO,CACL,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;YACnC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAC7D,CAAC;IACJ,CAAC;IACO,UAAU,CAAC,IAAmB;QACpC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;CACF;AACD,SAAS,UAAU,CAAC,IAAmB;IACrC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,OAAO,CACL,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CACpC,CAAC;AACJ,CAAC;AACD,SAAS,eAAe,CACtB,IAA+B,EAC/B,IAAY;IAEZ,OAAO,CACL,IAAI,KAAK,SAAS,IAAI,UAAU,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAC5E,CAAC;AACJ,CAAC;AACD,SAAS,oBAAoB,CAAC,IAAmB;IAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,YAAY,CAAC,IAAgC;IACpD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,WAAW,IAAI,CAAC,WAAW,CAAC,WAAW;QAC5C,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AACD,SAAS,mBAAmB,CAAC,IAAqB;IAChD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,OAAO,IAAI,IAAI,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AACD,SAAS,cAAc,CAAC,IAAgC;IACtD,IACE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;QAC1C,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAE9B,OAAO,SAAS,CAAC;IACnB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,WAAW,IAAI,eAAe,CAAC,WAAW,CAAC,WAAW,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AACD,SAAS,eAAe,CAAC,IAA+B;IACtD,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,UAAU,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,IAAI,KAAK,GAAG,CAClB,CAAC;AACJ,CAAC;AACD,SAAS,iBAAiB,CAAC,IAAqB,EAAE,IAAY;IAC5D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CACL,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC;QACjC,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CACzC,CAAC;AACJ,CAAC;AACD,SAAS,gBAAgB,CAAC,IAAyB,EAAE,IAAY;IAC/D,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC,UAAU,CAAC,aAAa;QACjE,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QAChC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3B,CAAC;AACJ,CAAC;AACD,SAAS,cAAc,CAAC,IAAmB;IACzC,OAAO,CACL,UAAU,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAC7E,CAAC;AACJ,CAAC;AACD,SAAS,gBAAgB,CACvB,IAA+B,EAC/B,IAAY;IAEZ,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,UAAU,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAC3C,IAAI,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC,UAAU,CAAC,aAAa;QACvD,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CACpC,CAAC;AACJ,CAAC;AACD,SAAS,eAAe,CAAC,IAAa;IAIpC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACtE,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC3D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAChC,cAAc,EACd,IAAI,EACJ,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,KAAK,EACL,EAAE,CAAC,UAAU,CAAC,EAAE,CACjB,CAAC;IACF,MAAM,WAAW,GACf,MACD,CAAC,gBAAgB,CAAC;IACnB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE;QAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AACvC,CAAC;AACD,SAAS,YAAY,CAAC,MAAe;IACnC,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACxC,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,sEAAsE,CAAC,IAAI,CACzE,KAAK,CAAC,IAAI,CACX,CACF,CAAC;AACJ,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAY,EAAE,OAAgB;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,yBAAyB,CAC5D,CAAC;IACF,OAAO,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO;QAC7C,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AACD,SAAS,cAAc,CACrB,MAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACpD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAqB,CAAC;IAC7C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACrC,KAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CACvE,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACrE,CAAC;AACD,SAAS,eAAe,CAAC,MAExB;IACC,IAAI,eAAe,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AACxE,CAAC;AACD,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,WAAW,CAAC;AAC9D,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,OAAO;SACX,MAAM,CACL,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CACjE;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,kBAAkB,CAAC,KAAK,CAAC;QAC5B,GAAG,cAAc,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KACpD,CAAC,CAAC,CAAC;AACR,CAAC;AACD,SAAS,kBAAkB,CACzB,KAAY;IAEZ,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/C,OAAO;YACL,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,EAAE;YACT,gBAAgB,EAAE,mBAAmB;SACtC,CAAC;IACJ,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC3D,KAAK,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QACxC,gBAAgB,EAAE,SAAS,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC","sourcesContent":["import { createRequire } from \"node:module\";\nimport type ts from \"typescript\";\nimport { isRecord, isUnknownArray } from \"../value-guards\";\n\nconst require = createRequire(import.meta.url);\nlet parser: typeof ts | undefined;\nfunction typescript(): typeof ts {\n return (parser ??= require(\"typescript\") as typeof ts);\n}\n\ninterface Entry {\n ordinal: number;\n payload: Record<string, unknown>;\n}\ninterface SubmittedCall {\n index: number;\n namespace: \"functions\" | \"collaboration\" | \"other\";\n name: string;\n}\nexport interface ExecCallReceipt {\n ordinal: number;\n completeness: \"complete\" | \"partial\";\n calls: SubmittedCall[];\n inspectionReason?:\n | \"unsupported_source\"\n | \"malformed_source\"\n | \"source_limit\"\n | \"foreign_namespace\"\n | null;\n execution?: \"completed\" | \"failed\" | \"incomplete\";\n output?: \"complete\" | \"truncated\" | \"unavailable\";\n}\n\nfunction toolNamespace(name: string): SubmittedCall[\"namespace\"] {\n if (\n [\n \"spawn_agent\",\n \"list_agents\",\n \"wait_agent\",\n \"followup_task\",\n \"send_message\",\n \"interrupt_agent\",\n ].includes(name)\n )\n return \"collaboration\";\n if (\n [\n \"create_goal\",\n \"get_goal\",\n \"update_goal\",\n \"exec_command\",\n \"write_stdin\",\n ].includes(name)\n )\n return \"functions\";\n return \"other\";\n}\nfunction toolName(node: ts.Expression): string | undefined {\n const ts = typescript();\n if (!ts.isPropertyAccessExpression(node)) return undefined;\n if (!ts.isIdentifier(node.expression) || node.expression.text !== \"tools\")\n return undefined;\n return /^[A-Za-z_][A-Za-z0-9_]{0,63}$/.test(node.name.text)\n ? node.name.text\n : undefined;\n}\nfunction literal(node: ts.Expression): boolean {\n const ts = typescript();\n if (ts.isStringLiteralLike(node) || ts.isNumericLiteral(node)) return true;\n return [\n ts.SyntaxKind.TrueKeyword,\n ts.SyntaxKind.FalseKeyword,\n ts.SyntaxKind.NullKeyword,\n ].includes(node.kind);\n}\nfunction member(node: ts.Expression, owner: string, names: string[]): boolean {\n const ts = typescript();\n return (\n ts.isPropertyAccessExpression(node) &&\n ts.isIdentifier(node.expression) &&\n node.expression.text === owner &&\n names.includes(node.name.text)\n );\n}\nfunction localName(node: ts.BindingName): string | undefined {\n const ts = typescript();\n if (!ts.isIdentifier(node)) return undefined;\n return [\n \"tools\",\n \"text\",\n \"store\",\n \"Promise\",\n \"load\",\n \"JSON\",\n \"String\",\n ].includes(node.text)\n ? undefined\n : node.text;\n}\nclass Submission {\n readonly calls: SubmittedCall[] = [];\n private readonly locals = new Set<string>();\n private readonly collections = new Set<string>();\n private readonly indices = new Set<string>();\n private nodes = 0;\n expression(node: ts.Expression): boolean {\n const ts = typescript();\n if (++this.nodes > 2048) return false;\n switch (true) {\n case literal(node):\n return true;\n case ts.isTemplateExpression(node):\n return node.templateSpans.every((span) =>\n this.expression(span.expression),\n );\n case ts.isBinaryExpression(node):\n return this.composition(node);\n case ts.isAwaitExpression(node):\n return this.expression(node.expression);\n case ts.isObjectLiteralExpression(node):\n return node.properties.every((property) => this.property(property));\n case ts.isArrayLiteralExpression(node):\n return node.elements.every((element) => this.expression(element));\n case ts.isIdentifier(node):\n return this.locals.has(node.text);\n case ts.isPropertyAccessExpression(node):\n return this.localProperty(node);\n case ts.isCallExpression(node):\n return this.call(node);\n case ts.isConditionalExpression(node):\n return [node.condition, node.whenTrue, node.whenFalse].every((part) =>\n this.outputExpression(part),\n );\n case ts.isElementAccessExpression(node):\n return (\n this.collection(node.expression) &&\n typescript().isIdentifier(node.argumentExpression) &&\n this.indices.has(node.argumentExpression.text)\n );\n default:\n return false;\n }\n }\n private property(node: ts.ObjectLiteralElementLike): boolean {\n const ts = typescript();\n if (ts.isSpreadAssignment(node))\n return this.outputExpression(node.expression);\n if (ts.isShorthandPropertyAssignment(node)) return this.shorthand(node);\n if (!ts.isPropertyAssignment(node) || ts.isComputedPropertyName(node.name))\n return false;\n return this.expression(node.initializer);\n }\n private shorthand(node: ts.ShorthandPropertyAssignment): boolean {\n return !node.objectAssignmentInitializer && this.expression(node.name);\n }\n private composition(node: ts.BinaryExpression): boolean {\n if (\n [\n typescript().SyntaxKind.EqualsEqualsEqualsToken,\n typescript().SyntaxKind.ExclamationEqualsEqualsToken,\n ].includes(node.operatorToken.kind)\n )\n return (\n this.outputExpression(node.left) && this.outputExpression(node.right)\n );\n return (\n node.operatorToken.kind === typescript().SyntaxKind.PlusToken &&\n this.expression(node.left) &&\n this.expression(node.right)\n );\n }\n private call(node: ts.CallExpression): boolean {\n if (this.outputEach(node)) return true;\n if (!node.arguments.every((argument) => this.expression(argument)))\n return false;\n return helperCall(node.expression) || this.retainToolCall(node.expression);\n }\n private retainToolCall(expression: ts.Expression): boolean {\n const name = toolName(expression);\n if (!name || this.calls.length >= 128) return false;\n this.calls.push({\n index: this.calls.length,\n namespace: toolNamespace(name),\n name,\n });\n return name !== \"exec\";\n }\n statement(node: ts.Statement): boolean {\n const ts = typescript();\n if (ts.isVariableStatement(node))\n return this.declarations(node.declarationList);\n if (ts.isForOfStatement(node)) return this.outputLoop(node);\n if (ts.isForStatement(node)) return this.numericOutputLoop(node);\n return ts.isExpressionStatement(node) && this.expression(node.expression);\n }\n private localProperty(node: ts.PropertyAccessExpression): boolean {\n return (\n this.expression(node.expression) &&\n ![\"constructor\", \"__proto__\", \"prototype\"].includes(node.name.text)\n );\n }\n private declarations(list: ts.VariableDeclarationList): boolean {\n const ts = typescript();\n if (!(list.flags & ts.NodeFlags.Const)) return false;\n return list.declarations.every((declaration) =>\n this.declaration(declaration),\n );\n }\n private declaration(node: ts.VariableDeclaration): boolean {\n if (!node.initializer) return false;\n const names = this.bindingNames(node.name, node.initializer);\n if (!names) return false;\n if (!this.expression(node.initializer)) return false;\n names.forEach((name) => this.locals.add(name));\n this.retainCollection(node.name, node.initializer, names);\n return true;\n }\n private retainCollection(\n name: ts.BindingName,\n initializer: ts.Expression,\n names: string[],\n ): void {\n if (localName(name) && collectionExpression(initializer))\n names.forEach((name) => this.collections.add(name));\n }\n private bindingNames(\n node: ts.BindingName,\n initializer: ts.Expression,\n ): string[] | undefined {\n const ts = typescript();\n if (ts.isIdentifier(node)) {\n const name = this.declaredName(node);\n return name ? [name] : undefined;\n }\n if (!ts.isArrayBindingPattern(node) || !collectionExpression(initializer))\n return undefined;\n return this.batchNames(node);\n }\n private batchNames(node: ts.ArrayBindingPattern): string[] | undefined {\n const names = node.elements.map((element) => this.batchBinding(element));\n if (!names.every((name): name is string => name !== undefined))\n return undefined;\n return new Set(names).size === names.length ? names : undefined;\n }\n private batchBinding(node: ts.ArrayBindingElement): string | undefined {\n const ts = typescript();\n if (!ts.isBindingElement(node)) return undefined;\n if (node.dotDotDotToken || node.initializer || node.propertyName)\n return undefined;\n return this.declaredName(node.name);\n }\n private declaredName(node: ts.BindingName): string | undefined {\n const name = localName(node);\n return name && !this.locals.has(name) ? name : undefined;\n }\n private outputEach(node: ts.CallExpression): boolean {\n const ts = typescript();\n const [callback] = node.arguments;\n if (\n node.arguments.length !== 1 ||\n !callback ||\n !ts.isIdentifier(callback) ||\n callback.text !== \"text\"\n )\n return false;\n return [...this.collections].some((name) =>\n member(node.expression, name, [\"forEach\"]),\n );\n }\n private outputLoop(node: ts.ForOfStatement): boolean {\n const ts = typescript();\n if (!this.collection(node.expression)) return false;\n if (!ts.isVariableDeclarationList(node.initializer)) return false;\n const name = loopVariable(node.initializer);\n if (!name || this.locals.has(name)) return false;\n this.locals.add(name);\n const valid = this.outputBody(node.statement);\n this.locals.delete(name);\n return valid;\n }\n private outputExpression(node: ts.Expression): boolean {\n const count = this.calls.length;\n return this.expression(node) && this.calls.length === count;\n }\n private numericOutputLoop(node: ts.ForStatement): boolean {\n const name = numericLoopVariable(node);\n if (!name || this.locals.has(name)) return false;\n const condition = node.condition as ts.BinaryExpression;\n const bound = condition.right as ts.PropertyAccessExpression;\n if (!this.collection(bound.expression)) return false;\n this.locals.add(name);\n this.indices.add(name);\n const valid = this.outputBody(node.statement);\n this.locals.delete(name);\n this.indices.delete(name);\n return valid;\n }\n private outputBody(node: ts.Statement): boolean {\n const ts = typescript();\n if (ts.isBlock(node))\n return node.statements.every((statement) => this.outputBody(statement));\n if (ts.isIfStatement(node)) return this.outputConditional(node);\n return (\n ts.isExpressionStatement(node) && this.outputExpression(node.expression)\n );\n }\n private outputConditional(node: ts.IfStatement): boolean {\n return (\n this.outputExpression(node.expression) &&\n this.outputBody(node.thenStatement) &&\n (!node.elseStatement || this.outputBody(node.elseStatement))\n );\n }\n private collection(node: ts.Expression): boolean {\n const ts = typescript();\n return ts.isIdentifier(node) && this.collections.has(node.text);\n }\n}\nfunction helperCall(node: ts.Expression): boolean {\n const ts = typescript();\n if (ts.isIdentifier(node) && [\"text\", \"store\", \"String\"].includes(node.text))\n return true;\n return (\n member(node, \"Promise\", [\"all\", \"allSettled\"]) ||\n member(node, \"JSON\", [\"stringify\"])\n );\n}\nfunction namedIdentifier(\n node: ts.Expression | undefined,\n name: string,\n): boolean {\n return (\n node !== undefined && typescript().isIdentifier(node) && node.text === name\n );\n}\nfunction collectionExpression(node: ts.Expression): boolean {\n const ts = typescript();\n if (!ts.isAwaitExpression(node) || !ts.isCallExpression(node.expression))\n return false;\n return member(node.expression.expression, \"Promise\", [\"all\", \"allSettled\"]);\n}\nfunction loopVariable(list: ts.VariableDeclarationList): string | undefined {\n const ts = typescript();\n if (!(list.flags & ts.NodeFlags.Const) || list.declarations.length !== 1)\n return undefined;\n const declaration = list.declarations[0];\n return declaration && !declaration.initializer\n ? localName(declaration.name)\n : undefined;\n}\nfunction numericLoopVariable(node: ts.ForStatement): string | undefined {\n const ts = typescript();\n if (!node.initializer || !ts.isVariableDeclarationList(node.initializer))\n return undefined;\n const name = numericBinding(node.initializer);\n return name && numericLoopBounds(node, name) ? name : undefined;\n}\nfunction numericBinding(list: ts.VariableDeclarationList): string | undefined {\n if (\n !(list.flags & typescript().NodeFlags.Let) ||\n list.declarations.length !== 1\n )\n return undefined;\n const declaration = list.declarations[0];\n return declaration && zeroInitializer(declaration.initializer)\n ? localName(declaration.name)\n : undefined;\n}\nfunction zeroInitializer(node: ts.Expression | undefined): boolean {\n return (\n node !== undefined &&\n typescript().isNumericLiteral(node) &&\n node.text === \"0\"\n );\n}\nfunction numericLoopBounds(node: ts.ForStatement, name: string): boolean {\n const ts = typescript();\n const condition = node.condition;\n if (!condition || !ts.isBinaryExpression(condition)) return false;\n return (\n numericCondition(condition, name) &&\n numericIncrement(node.incrementor, name)\n );\n}\nfunction numericCondition(node: ts.BinaryExpression, name: string): boolean {\n return (\n node.operatorToken.kind === typescript().SyntaxKind.LessThanToken &&\n namedIdentifier(node.left, name) &&\n lengthProperty(node.right)\n );\n}\nfunction lengthProperty(node: ts.Expression): boolean {\n return (\n typescript().isPropertyAccessExpression(node) && node.name.text === \"length\"\n );\n}\nfunction numericIncrement(\n node: ts.Expression | undefined,\n name: string,\n): boolean {\n return (\n node !== undefined &&\n typescript().isPostfixUnaryExpression(node) &&\n node.operator === typescript().SyntaxKind.PlusPlusToken &&\n namedIdentifier(node.operand, name)\n );\n}\nfunction inspectedSource(code: unknown): {\n submission?: Submission;\n reason: ExecCallReceipt[\"inspectionReason\"];\n} {\n if (typeof code !== \"string\") return { reason: \"unsupported_source\" };\n if (code.length > 65536) return { reason: \"source_limit\" };\n const ts = typescript();\n const source = ts.createSourceFile(\n \"submitted.js\",\n code,\n ts.ScriptTarget.Latest,\n false,\n ts.ScriptKind.JS,\n );\n const diagnostics = (\n source as ts.SourceFile & { parseDiagnostics: readonly ts.Diagnostic[] }\n ).parseDiagnostics;\n if (diagnostics.length !== 0) return { reason: \"malformed_source\" };\n const submission = new Submission();\n return source.statements.every((statement) => submission.statement(statement))\n ? { submission, reason: null }\n : { reason: \"unsupported_source\" };\n}\nfunction outputBlocks(output: unknown): unknown[] {\n if (isUnknownArray(output)) return output;\n if (typeof output !== \"string\") return [];\n try {\n const blocks: unknown = JSON.parse(output);\n return isUnknownArray(blocks) ? blocks : [];\n } catch {\n return [];\n }\n}\nfunction completeTextBlock(block: unknown): boolean {\n if (!isRecord(block) || ![\"text\", \"input_text\"].includes(String(block.type)))\n return false;\n return typeof block.text === \"string\";\n}\nfunction completedHeader(block: unknown): boolean {\n return (\n isRecord(block) &&\n typeof block.text === \"string\" &&\n /^Script completed\\nWall time [0-9]+(?:\\.[0-9]+)? seconds\\nOutput:\\n$/.test(\n block.text,\n )\n );\n}\nfunction submissionOutput(entry: Entry, entries: Entry[]): unknown[] {\n const id = entry.payload.call_id;\n if (typeof id !== \"string\") return [];\n const matches = entries.filter((other) => other.payload.call_id === id);\n if (matches.length !== 2) return [];\n const result = matches.find(\n (other) => other.payload.type === \"custom_tool_call_output\",\n );\n return result && result.ordinal > entry.ordinal\n ? outputBlocks(result.payload.output)\n : [];\n}\nfunction outputEvidence(\n blocks: unknown[],\n): Pick<ExecCallReceipt, \"execution\" | \"output\"> {\n if (!blocks.length || !blocks.every(completeTextBlock))\n return { execution: \"incomplete\", output: \"unavailable\" };\n const header = blocks[0] as { text: string };\n const execution = executionStatus(header);\n const truncated = blocks.some((block) =>\n (block as { text: string }).text.includes(\"Warning: truncated output\"),\n );\n return { execution, output: truncated ? \"truncated\" : \"complete\" };\n}\nfunction executionStatus(header: {\n text: string;\n}): ExecCallReceipt[\"execution\"] {\n if (completedHeader(header)) return \"completed\";\n return /^Script failed\\b/.test(header.text) ? \"failed\" : \"incomplete\";\n}\nfunction nativeExecNamespace(namespace: unknown): boolean {\n return namespace === undefined || namespace === \"functions\";\n}\n/** Static inspection only: submitted code is never executed by the observer. */\nexport function codexExecCallReceipts(entries: Entry[]): ExecCallReceipt[] {\n return entries\n .filter(\n ({ payload }) =>\n payload.type === \"custom_tool_call\" && payload.name === \"exec\",\n )\n .map((entry) => ({\n ordinal: entry.ordinal,\n ...inspectionEvidence(entry),\n ...outputEvidence(submissionOutput(entry, entries)),\n }));\n}\nfunction inspectionEvidence(\n entry: Entry,\n): Pick<ExecCallReceipt, \"completeness\" | \"calls\" | \"inspectionReason\"> {\n if (!nativeExecNamespace(entry.payload.namespace))\n return {\n completeness: \"partial\",\n calls: [],\n inspectionReason: \"foreign_namespace\",\n };\n const inspected = inspectedSource(entry.payload.input);\n return {\n completeness: inspected.submission ? \"complete\" : \"partial\",\n calls: inspected.submission?.calls ?? [],\n inspectionReason: inspected.reason,\n };\n}\n"]}
@@ -0,0 +1,54 @@
1
+ import { lstat } from "node:fs/promises";
2
+ import { join } from "node:path";
3
+ function invocationTokenCount(request, token) {
4
+ return (request.prompt.split(token).length -
5
+ 1 +
6
+ (request.followUpPrompt?.split(token).length ?? 1) -
7
+ 1);
8
+ }
9
+ function validSkillName(name) {
10
+ return /^[A-Za-z0-9._-]+$/.test(name) && ![".", ".."].includes(name);
11
+ }
12
+ export async function verifyCodexInvocation(request) {
13
+ const selected = request.explicitSkillInvocation;
14
+ if (!selected)
15
+ return;
16
+ if (!validSkillName(selected.skillName) ||
17
+ invocationTokenCount(request, selected.token) !== 1)
18
+ throw new Error("invalid Codex explicit skill invocation");
19
+ if (selected.scope === "repository") {
20
+ await verifyRepositorySkill(request, selected);
21
+ return;
22
+ }
23
+ requirePluginInvocation(request, selected);
24
+ }
25
+ async function verifyRepositorySkill(request, selected) {
26
+ if (selected.token !== `$${selected.skillName}`)
27
+ throw new Error("invalid Codex explicit skill invocation");
28
+ let path = request.workspace;
29
+ for (const [index, part] of [
30
+ ".agents",
31
+ "skills",
32
+ selected.skillName,
33
+ "SKILL.md",
34
+ ].entries()) {
35
+ path = join(path, part);
36
+ const entry = await lstat(path).catch(() => null);
37
+ if (!safeRepositoryEntry(entry, index))
38
+ throw new Error("invoked Codex repository skill is unavailable or unsafe");
39
+ }
40
+ }
41
+ function safeRepositoryEntry(entry, index) {
42
+ if (!entry || entry.isSymbolicLink())
43
+ return false;
44
+ return index === 3
45
+ ? entry.isFile() && entry.size <= 1024 * 1024
46
+ : entry.isDirectory();
47
+ }
48
+ function requirePluginInvocation(request, selected) {
49
+ if (!request.codexMarketplace?.pluginNames.includes(selected.pluginName) ||
50
+ !/^[a-z][a-z0-9-]*$/.test(selected.pluginName) ||
51
+ selected.token !== `$${selected.pluginName}:${selected.skillName}`)
52
+ throw new Error("invalid Codex explicit skill invocation");
53
+ }
54
+ //# sourceMappingURL=codex-invocation.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"codex-invocation.js","sourceRoot":"","sources":["codex-invocation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,yBAAyB;AACzC,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAKjC,SAAS,oBAAoB,CAAC,OAAgB,EAAE,KAAa;IAC3D,OAAO,CACL,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM;QAClC,CAAC;QACD,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAClD,CAAC,CACF,CAAC;AACJ,CAAC;AACD,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,IACE,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;QACnC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAEnD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACpC,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AACD,KAAK,UAAU,qBAAqB,CAClC,OAAgB,EAChB,QAAoB;IAEpB,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,SAAS,EAAE;QAC7C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,IAAI,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,SAAS;QACT,QAAQ;QACR,QAAQ,CAAC,SAAS;QAClB,UAAU;KACX,CAAC,OAAO,EAAE,EAAE,CAAC;QACZ,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;IACN,CAAC;AACH,CAAC;AACD,SAAS,mBAAmB,CAAC,KAAmB,EAAE,KAAa;IAC7D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,KAAK,KAAK,CAAC;QAChB,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI;QAC7C,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AAC1B,CAAC;AACD,SAAS,uBAAuB,CAC9B,OAAgB,EAChB,QAA2C;IAE3C,IACE,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpE,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9C,QAAQ,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,SAAS,EAAE;QAElE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import type { Stats } from \"node:fs\";\nimport { lstat } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { HostAdapter } from \"../engine\";\ntype Request = Parameters<HostAdapter[\"run\"]>[0];\ntype Invocation = NonNullable<Request[\"explicitSkillInvocation\"]>;\n\nfunction invocationTokenCount(request: Request, token: string): number {\n return (\n request.prompt.split(token).length -\n 1 +\n (request.followUpPrompt?.split(token).length ?? 1) -\n 1\n );\n}\nfunction validSkillName(name: string): boolean {\n return /^[A-Za-z0-9._-]+$/.test(name) && ![\".\", \"..\"].includes(name);\n}\nexport async function verifyCodexInvocation(request: Request): Promise<void> {\n const selected = request.explicitSkillInvocation;\n if (!selected) return;\n if (\n !validSkillName(selected.skillName) ||\n invocationTokenCount(request, selected.token) !== 1\n )\n throw new Error(\"invalid Codex explicit skill invocation\");\n if (selected.scope === \"repository\") {\n await verifyRepositorySkill(request, selected);\n return;\n }\n requirePluginInvocation(request, selected);\n}\nasync function verifyRepositorySkill(\n request: Request,\n selected: Invocation,\n): Promise<void> {\n if (selected.token !== `$${selected.skillName}`)\n throw new Error(\"invalid Codex explicit skill invocation\");\n let path = request.workspace;\n for (const [index, part] of [\n \".agents\",\n \"skills\",\n selected.skillName,\n \"SKILL.md\",\n ].entries()) {\n path = join(path, part);\n const entry = await lstat(path).catch(() => null);\n if (!safeRepositoryEntry(entry, index))\n throw new Error(\n \"invoked Codex repository skill is unavailable or unsafe\",\n );\n }\n}\nfunction safeRepositoryEntry(entry: Stats | null, index: number): boolean {\n if (!entry || entry.isSymbolicLink()) return false;\n return index === 3\n ? entry.isFile() && entry.size <= 1024 * 1024\n : entry.isDirectory();\n}\nfunction requirePluginInvocation(\n request: Request,\n selected: Invocation & { scope?: \"plugin\" },\n): void {\n if (\n !request.codexMarketplace?.pluginNames.includes(selected.pluginName) ||\n !/^[a-z][a-z0-9-]*$/.test(selected.pluginName) ||\n selected.token !== `$${selected.pluginName}:${selected.skillName}`\n )\n throw new Error(\"invalid Codex explicit skill invocation\");\n}\n"]}