@blxzer/pactile 0.6.0-beta.2 → 0.6.0-beta.5

package/dist/core/task/task-kernel-workspaces.js

@@ -0,0 +1,250 @@
+import fs from "node:fs";
+import path from "node:path";
+import { KernelError, requireNonEmptyString } from "./kernel-contract.js";
+import { appendDomainEvent, appendMutation, mutateTaskKernel } from "./task-kernel-store-v2.js";
+import { fingerprintTaskValue, parseWorkspaceBinding, parseWorkspaceCleanupLease, parseWorkspaceIntegrationReceipt, } from "./task-kernel-schema.js";
+import { canonicalProjectRoot } from "./task-kernel-paths.js";
+import { taskRunWorkspaceWriteSetsEqual } from "./task-kernel-write-set.js";
+import { TASK_RUN_WORKSPACE_CLEANUP_RISK_DISCLOSURE, TASK_RUN_WORKSPACE_CLAIM_ERROR_CODES } from "./task-kernel-types.js";
+function runAt(current, runId) {
+    const index = current.runs.findIndex((item) => item.id === runId);
+    if (index < 0)
+        throw new KernelError("NOT_FOUND", `Run not found: ${runId}`);
+    const run = current.runs[index];
+    if (!run)
+        throw new KernelError("CORRUPT_STATE", `Run is missing: ${runId}`);
+    return { run, index };
+}
+function replaceRun(current, index, run) {
+    return { ...current, runs: current.runs.map((item, i) => i === index ? run : item) };
+}
+function sameStrings(left, right) {
+    return left.length === right.length && [...left].sort().every((value, index) => value === [...right].sort()[index]);
+}
+function sameProjectDirectory(left, right) {
+    if (path.resolve(left) === path.resolve(right))
+        return true;
+    try {
+        const leftStat = fs.statSync(left, { bigint: true });
+        const rightStat = fs.statSync(right, { bigint: true });
+        return leftStat.isDirectory() && rightStat.isDirectory()
+            && leftStat.ino !== 0n && leftStat.dev === rightStat.dev && leftStat.ino === rightStat.ino;
+    }
+    catch {
+        return false;
+    }
+}
+export function bindTaskRunWorkspace(request) {
+    const actor = requireNonEmptyString(request.actor, "actor");
+    const runId = requireNonEmptyString(request.runId, "runId");
+    const workspace = parseWorkspaceBinding(request.workspace, runId, "workspace");
+    if (!workspace.manager)
+        throw new KernelError("INVALID_REQUEST", "Workspace binding requires manager-owned provenance");
+    if (workspace.integrationState !== "not-integrated" || workspace.integrationReceipt || workspace.cleanupLease) {
+        throw new KernelError("INVALID_REQUEST", "A new manager workspace cannot contain integration or cleanup state");
+    }
+    const fingerprint = fingerprintTaskValue({ runId, workspace });
+    return mutateTaskKernel(request.root, request.taskDir, request.expectedRevision, actor, request.idempotencyKey, fingerprint, request.cwd, (current) => {
+        const { run, index } = runAt(current, runId);
+        if (current.runs.at(-1)?.id !== runId || (run.state !== "running" && run.state !== "waiting")) {
+            throw new KernelError("INVALID_TRANSITION", "Managed workspace can only bind to the latest active or waiting Run");
+        }
+        if (run.workspace)
+            throw new KernelError("INVALID_TRANSITION", "Run workspace cannot be replaced after it has been bound");
+        const root = canonicalProjectRoot(request.root, request.cwd);
+        const manager = workspace.manager;
+        // Git for Windows can expand an 8.3 temp path that Node keeps in its short
+        // spelling. Compare directory identity while still rejecting another root.
+        if (!manager || !sameProjectDirectory(manager.projectRoot, root)) {
+            throw new KernelError("INVALID_REQUEST", "Manager provenance project root does not match this Task Kernel");
+        }
+        const runWriteSet = [...run.writeSetSnapshot].sort();
+        if (!taskRunWorkspaceWriteSetsEqual(workspace.writeSet, runWriteSet))
+            throw new KernelError("INVALID_REQUEST", "Workspace write set must match the Run write-set snapshot");
+        if (run.candidateBaseSha &&
+            run.candidateBaseSha.toLowerCase() !== workspace.baseSha.toLowerCase()) {
+            throw new KernelError("CANDIDATE_MISMATCH", "Managed workspace base must match the Git commit captured when the Run started.");
+        }
+        const next = replaceRun(current, index, {
+            ...run,
+            candidateBaseSha: workspace.baseSha,
+            candidateBaseBranch: workspace.branch,
+            workspace,
+        });
+        return appendDomainEvent(next, actor, request.idempotencyKey, "run.workspace-bound", runId, fingerprint);
+    });
+}
+export function recordTaskRunWorkspaceIntegration(request) {
+    const actor = requireNonEmptyString(request.actor, "actor");
+    const runId = requireNonEmptyString(request.runId, "runId");
+    const receipt = parseWorkspaceIntegrationReceipt(request.receipt, "workspaceIntegrationReceipt");
+    const fingerprint = fingerprintTaskValue({ runId, receipt });
+    return mutateTaskKernel(request.root, request.taskDir, request.expectedRevision, actor, request.idempotencyKey, fingerprint, request.cwd, (current) => {
+        const { run, index } = runAt(current, runId);
+        const workspace = run.workspace;
+        if (!workspace?.manager)
+            throw new KernelError("INVALID_TRANSITION", "Only a manager-owned Run workspace can record integration");
+        if (run.state !== "completed" || !run.result || !run.candidateSnapshot) {
+            throw new KernelError("INVALID_TRANSITION", "Only a completed Run with preserved result and candidate can be integrated");
+        }
+        if (workspace.integrationState !== "not-integrated" || workspace.integrationReceipt) {
+            throw new KernelError("INVALID_TRANSITION", "Run workspace integration receipt is immutable once recorded");
+        }
+        if (receipt.runId !== run.id || receipt.candidateSnapshotId !== run.candidateSnapshot.id
+            || receipt.candidateFingerprint !== run.candidateSnapshot.fingerprint
+            || !receipt.contentFingerprint
+            || !sameStrings(receipt.resultEvidenceRefs, run.result.evidenceRefs) || receipt.resultEvidenceRefs.length === 0) {
+            throw new KernelError("INVALID_REQUEST", "Integration receipt does not match the completed Run result and candidate");
+        }
+        const nextWorkspace = { ...workspace, integrationState: "integrated", reclamationState: "pending", integrationReceipt: receipt };
+        const next = replaceRun(current, index, { ...run, workspace: nextWorkspace });
+        return appendDomainEvent(next, actor, request.idempotencyKey, "run.workspace-integrated", runId, fingerprint);
+    });
+}
+export function acquireTaskRunWorkspaceCleanupLease(request) {
+    const actor = requireNonEmptyString(request.actor, "actor");
+    const runId = requireNonEmptyString(request.runId, "runId");
+    const lease = parseWorkspaceCleanupLease({ ...request.lease, state: "held", reason: null }, "workspaceCleanupLease");
+    if (lease.riskDisclosure !== TASK_RUN_WORKSPACE_CLEANUP_RISK_DISCLOSURE) {
+        throw new KernelError("INVALID_REQUEST", "Workspace cleanup lease must persist the accepted Git removal race disclosure");
+    }
+    const fingerprint = fingerprintTaskValue({ runId, lease });
+    return mutateTaskKernel(request.root, request.taskDir, request.expectedRevision, actor, request.idempotencyKey, fingerprint, request.cwd, (current) => {
+        const { run, index } = runAt(current, runId);
+        const workspace = run.workspace;
+        if (!workspace?.manager || !workspace.integrationReceipt?.contentFingerprint || workspace.integrationState !== "integrated") {
+            throw new KernelError("INVALID_TRANSITION", "Workspace cleanup requires manager ownership and a persisted integration receipt");
+        }
+        if (run.state !== "completed" || !run.result?.summary.trim() || !run.result.evidenceRefs.length || !run.candidateSnapshot) {
+            throw new KernelError("INVALID_TRANSITION", "Workspace cleanup requires a completed Run with preserved result and candidate evidence");
+        }
+        const closure = current.closure;
+        if (current.phase !== "close" || closure?.runId !== run.id
+            || closure.candidateSnapshotId !== run.candidateSnapshot.id
+            || closure.candidateFingerprint !== run.candidateSnapshot.fingerprint
+            || closure.deliveryEvidence.reference.trim() === "") {
+            throw new KernelError("INVALID_TRANSITION", "Workspace cleanup is allowed only after the same candidate is closed with delivery evidence");
+        }
+        const terminal = run.host?.stopReceipt;
+        if (terminal?.runId !== run.id || terminal.taskId !== current.identity.taskId || terminal.contractStale) {
+            throw new KernelError("INVALID_TRANSITION", "Workspace cleanup requires a verified, persisted host terminal receipt");
+        }
+        const eligibleHost = run.host?.host === "codex-desktop"
+            ? terminal.terminalStatus === "completed" && terminal.source === "codex-desktop-bridge" && terminal.evidenceLevel === "desktop-native"
+            : run.host?.host === "pi"
+                ? terminal.terminalStatus === "exited" && terminal.source === "pactile-pi-rpc"
+                : false;
+        if (!eligibleHost)
+            throw new KernelError("INVALID_TRANSITION", "This host terminal receipt does not authorize automatic worktree cleanup");
+        const integration = workspace.integrationReceipt;
+        if (lease.expectedHeadSha.toLowerCase() !== integration.worktreeHeadSha.toLowerCase()
+            || lease.targetBranch !== integration.targetBranch || lease.targetHeadSha.toLowerCase() !== integration.targetHeadSha.toLowerCase()
+            || lease.receiptRef !== terminal.receiptRef) {
+            throw new KernelError("INVALID_REQUEST", "Cleanup lease does not match the persisted integration and host receipts");
+        }
+        const priorLease = workspace.cleanupLease;
+        if (priorLease?.state === "held" || priorLease?.state === "partial-removal" || priorLease?.state === "recovery-required") {
+            throw new KernelError("INVALID_TRANSITION", "An existing cleanup lease or recovery state must be reconciled before retry");
+        }
+        const nextWorkspace = { ...workspace, cleanupLease: lease, reclamationState: "pending" };
+        const next = replaceRun(current, index, { ...run, workspace: nextWorkspace });
+        return appendDomainEvent(next, actor, request.idempotencyKey, "run.workspace-cleanup-acquired", runId, fingerprint);
+    });
+}
+export function finishTaskRunWorkspaceCleanup(request) {
+    const actor = requireNonEmptyString(request.actor, "actor");
+    const runId = requireNonEmptyString(request.runId, "runId");
+    const leaseId = requireNonEmptyString(request.leaseId, "leaseId");
+    if (request.result !== "reclaimed" && !request.reason?.trim())
+        throw new KernelError("INVALID_REQUEST", "A retained cleanup result requires a reason");
+    const reason = request.result === "reclaimed" ? null : request.reason?.trim() ?? null;
+    const fingerprint = fingerprintTaskValue({ runId, leaseId, result: request.result, reason, updatedManagerBinding: request.updatedManagerBinding ?? null });
+    return mutateTaskKernel(request.root, request.taskDir, request.expectedRevision, actor, request.idempotencyKey, fingerprint, request.cwd, (current) => {
+        const { run, index } = runAt(current, runId);
+        const workspace = run.workspace;
+        const manager = workspace?.manager;
+        const lease = workspace?.cleanupLease;
+        const recoveryBindingUpdate = lease?.state === "recovery-required"
+            && request.result === "recovery-required"
+            && !!request.updatedManagerBinding;
+        if (!manager || lease?.leaseId !== leaseId
+            || (lease.state !== "held" && !recoveryBindingUpdate)) {
+            throw new KernelError("INVALID_TRANSITION", "Cleanup result does not match the currently held Run workspace lease");
+        }
+        if (request.updatedManagerBinding) {
+            const update = request.updatedManagerBinding;
+            if (update.version !== 1 || update.credentialId !== manager.credentialId
+                || update.projectRoot !== manager.projectRoot || update.commonDir !== manager.commonDir
+                || update.source !== manager.source || !path.isAbsolute(update.gitDir)) {
+                throw new KernelError("INVALID_REQUEST", "Workspace recovery manager binding does not preserve the original owner credential and Git common directory");
+            }
+        }
+        const reclamationState = request.result === "reclaimed" ? "reclaimed"
+            : request.result === "retained" ? "failed" : "recovery-required";
+        const nextLease = { ...lease, state: request.result, reason };
+        const nextWorkspace = { ...workspace, ...(request.updatedManagerBinding ? { manager: request.updatedManagerBinding } : {}), cleanupLease: nextLease, reclamationState };
+        const next = replaceRun(current, index, { ...run, workspace: nextWorkspace });
+        const type = request.result === "reclaimed" ? "run.workspace-reclaimed"
+            : request.result === "retained" ? "run.workspace-retained" : "run.workspace-recovery-required";
+        return appendDomainEvent(next, actor, request.idempotencyKey, type, runId, fingerprint);
+    });
+}
+/** Persist a fail-closed cleanup refusal even when no cleanup lease can be acquired. */
+export function recordTaskRunWorkspaceCleanupRefusal(request) {
+    const actor = requireNonEmptyString(request.actor, "actor");
+    const runId = requireNonEmptyString(request.runId, "runId");
+    const reason = requireNonEmptyString(request.reason, "reason")
+        .replace(/\p{Cc}+/gu, " ")
+        .replace(/\s+/g, " ")
+        .trim()
+        .slice(0, 500);
+    if (!reason)
+        throw new KernelError("INVALID_REQUEST", "Cleanup refusal reason must not be empty");
+    const fingerprint = fingerprintTaskValue({ runId, result: "retained", reason });
+    return mutateTaskKernel(request.root, request.taskDir, request.expectedRevision, actor, request.idempotencyKey, fingerprint, request.cwd, (current) => {
+        const { run } = runAt(current, runId);
+        return appendMutation(current, actor, request.idempotencyKey, "run.workspace-cleanup-refused", run.id, fingerprint, {}, `Workspace cleanup refused: ${reason}`);
+    });
+}
+const WORKSPACE_CLAIM_REFUSAL_REASONS = {
+    "owner-conflict": "Existing Run ownership prevents this workspace claim.",
+    "path-exists": "The requested workspace location already exists.",
+    "invalid-run-id": "The Run identifier failed workspace ownership validation.",
+    "invalid-write-set": "The Run write set failed workspace validation.",
+    "invalid-ref": "The Git reference could not be verified for this workspace claim.",
+    "candidate-baseline-mismatch": "The requested Git base does not match the commit captured when the Run started.",
+    "candidate-baseline-unavailable": "The Run has no frozen Git baseline for a managed checkout.",
+    "path-anomaly": "The workspace path failed canonical location checks.",
+    "invalid-repository": "The repository identity could not be verified.",
+    "adoption-not-authorized": "Recorded adoption authorization is missing or invalid.",
+    "adoption-not-safe": "The existing checkout failed adoption safety checks.",
+    "git-command-failed": "Git could not complete the workspace claim checks.",
+    "git-path-unrepresentable": "The Git path could not be verified safely.",
+    "gitdir-mismatch": "The Git registration did not match the workspace path.",
+    "manager-provenance-invalid": "Existing manager ownership evidence is invalid.",
+    "manager-provenance-write-failed": "Manager ownership evidence could not be recorded.",
+    "worktree-create-failed": "Git could not create and register the requested checkout.",
+    "post-create-verification-failed": "The created checkout failed verification; preserve it for recovery.",
+    "workspace-kernel-bind-failed": "The checkout was preserved, but its Task Kernel owner binding could not be recorded; reconcile the Run before dispatch.",
+    "claim-failed": "The workspace claim did not pass manager validation or persistence.",
+};
+/** Persist a redacted create/adopt/reconcile refusal without changing Run or workspace ownership. */
+export function recordTaskRunWorkspaceClaimRefusal(request) {
+    const actor = requireNonEmptyString(request.actor, "actor");
+    const runId = requireNonEmptyString(request.runId, "runId");
+    if (request.operation !== "create" && request.operation !== "adopt" && request.operation !== "reconcile") {
+        throw new KernelError("INVALID_REQUEST", "Workspace claim operation is invalid");
+    }
+    if (!TASK_RUN_WORKSPACE_CLAIM_ERROR_CODES.includes(request.errorCode)) {
+        throw new KernelError("INVALID_REQUEST", "Workspace claim refusal code is invalid");
+    }
+    const reason = WORKSPACE_CLAIM_REFUSAL_REASONS[request.errorCode];
+    if (!reason)
+        throw new KernelError("INVALID_REQUEST", "Workspace claim refusal code is invalid");
+    const fingerprint = fingerprintTaskValue({ runId, operation: request.operation, errorCode: request.errorCode, reason });
+    return mutateTaskKernel(request.root, request.taskDir, request.expectedRevision, actor, request.idempotencyKey, fingerprint, request.cwd, (current) => {
+        const { run } = runAt(current, runId);
+        return appendMutation(current, actor, request.idempotencyKey, "run.workspace-claim-refused", run.id, fingerprint, {}, `Workspace ${request.operation} claim refused [${request.errorCode}]: ${reason}`);
+    });
+}
+//# sourceMappingURL=task-kernel-workspaces.js.map

package/dist/core/task/task-kernel-workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-kernel-workspaces.js","sourceRoot":"","sources":["../../../src/core/task/task-kernel-workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAc5E,OAAO,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,MAAM,wBAAwB,CAAC;AAE1H,SAAS,KAAK,CAAC,OAA6B,EAAE,KAAa;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IAClE,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,OAA6B,EAAE,KAAa,EAAE,GAAc;IAC9E,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB,EAAE,KAAwB;IACpE,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa;IACvD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,QAAQ,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,WAAW,EAAE;eACnD,QAAQ,CAAC,GAAG,KAAK,EAAE,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC;IACxH,IAAI,SAAS,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC9G,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,qEAAqE,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/D,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;QACpJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,qEAAqE,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,0DAA0D,CAAC,CAAC;QAC3H,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAClC,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,iEAAiE,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;QAC5K,IACE,GAAG,CAAC,gBAAgB;YACpB,GAAG,CAAC,gBAAgB,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EACtE,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE;YACtC,GAAG,GAAG;YACN,gBAAgB,EAAE,SAAS,CAAC,OAAO;YACnC,mBAAmB,EAAE,SAAS,CAAC,MAAM;YACrC,SAAS;SACV,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,qBAAqB,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,OAAiD;IACjG,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,gCAAgC,CAAC,OAAO,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;QACpJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,EAAE,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,2DAA2D,CAAC,CAAC;QAClI,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACvE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,4EAA4E,CAAC,CAAC;QAC5H,CAAC;QACD,IAAI,SAAS,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;YACpF,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,8DAA8D,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,IAAI,OAAO,CAAC,mBAAmB,KAAK,GAAG,CAAC,iBAAiB,CAAC,EAAE;eACnF,OAAO,CAAC,oBAAoB,KAAK,GAAG,CAAC,iBAAiB,CAAC,WAAW;eAClE,CAAC,OAAO,CAAC,kBAAkB;eAC3B,CAAC,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,2EAA2E,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,aAAa,GAAG,EAAE,GAAG,SAAS,EAAE,gBAAgB,EAAE,YAAqB,EAAE,gBAAgB,EAAE,SAAkB,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;QACnJ,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,0BAA0B,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,OAAmD;IACrG,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,0BAA0B,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACrH,IAAI,KAAK,CAAC,cAAc,KAAK,0CAA0C,EAAE,CAAC;QACxE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,+EAA+E,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;QACpJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,IAAI,SAAS,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;YAC5H,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,kFAAkF,CAAC,CAAC;QAClI,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC1H,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,yFAAyF,CAAC,CAAC;QACzI,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,EAAE,KAAK,KAAK,GAAG,CAAC,EAAE;eACrD,OAAO,CAAC,mBAAmB,KAAK,GAAG,CAAC,iBAAiB,CAAC,EAAE;eACxD,OAAO,CAAC,oBAAoB,KAAK,GAAG,CAAC,iBAAiB,CAAC,WAAW;eAClE,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,6FAA6F,CAAC,CAAC;QAC7I,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC;QACvC,IAAI,QAAQ,EAAE,KAAK,KAAK,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YACxG,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,wEAAwE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe;YACrD,CAAC,CAAC,QAAQ,CAAC,cAAc,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,sBAAsB,IAAI,QAAQ,CAAC,aAAa,KAAK,gBAAgB;YACtI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI;gBACvB,CAAC,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB;gBAC9E,CAAC,CAAC,KAAK,CAAC;QACZ,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,0EAA0E,CAAC,CAAC;QAC3I,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,CAAC;QACjD,IAAI,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,eAAe,CAAC,WAAW,EAAE;eAChF,KAAK,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,aAAa,CAAC,WAAW,EAAE;eAChI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,0EAA0E,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC;QAC1C,IAAI,UAAU,EAAE,KAAK,KAAK,MAAM,IAAI,UAAU,EAAE,KAAK,KAAK,iBAAiB,IAAI,UAAU,EAAE,KAAK,KAAK,mBAAmB,EAAE,CAAC;YACzH,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,6EAA6E,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,aAAa,GAAG,EAAE,GAAG,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAkB,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,gCAAgC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAA6C;IACzF,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAC;IACvJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACtF,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3J,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;QACpJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAChC,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,EAAE,YAAY,CAAC;QACtC,MAAM,qBAAqB,GAAG,KAAK,EAAE,KAAK,KAAK,mBAAmB;eAC7D,OAAO,CAAC,MAAM,KAAK,mBAAmB;eACtC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACrC,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,OAAO,KAAK,OAAO;eACrC,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,sEAAsE,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;YAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;mBACnE,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;mBACpF,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,6GAA6G,CAAC,CAAC;YAC1J,CAAC;QACH,CAAC;QACD,MAAM,gBAAgB,GAAgD,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW;YAChH,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9D,MAAM,aAAa,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QACxK,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,yBAAyB;YACrE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,iCAAiC,CAAC;QACjG,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oCAAoC,CAAC,OAAoD;IACvG,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;SAC3D,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;IAClG,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAChF,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;QACpJ,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,+BAA+B,EAAE,GAAG,CAAC,EAAE,EACnG,WAAW,EAAE,EAAE,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,+BAA+B,GAA6D;IAChG,gBAAgB,EAAE,uDAAuD;IACzE,aAAa,EAAE,kDAAkD;IACjE,gBAAgB,EAAE,2DAA2D;IAC7E,mBAAmB,EAAE,gDAAgD;IACrE,aAAa,EAAE,mEAAmE;IAClF,6BAA6B,EAAE,iFAAiF;IAChH,gCAAgC,EAAE,4DAA4D;IAC9F,cAAc,EAAE,sDAAsD;IACtE,oBAAoB,EAAE,gDAAgD;IACtE,yBAAyB,EAAE,wDAAwD;IACnF,mBAAmB,EAAE,sDAAsD;IAC3E,oBAAoB,EAAE,oDAAoD;IAC1E,0BAA0B,EAAE,4CAA4C;IACxE,iBAAiB,EAAE,wDAAwD;IAC3E,4BAA4B,EAAE,iDAAiD;IAC/E,iCAAiC,EAAE,mDAAmD;IACtF,wBAAwB,EAAE,2DAA2D;IACrF,iCAAiC,EAAE,qEAAqE;IACxG,8BAA8B,EAAE,yHAAyH;IACzJ,cAAc,EAAE,qEAAqE;CACtF,CAAC;AAEF,qGAAqG;AACrG,MAAM,UAAU,kCAAkC,CAAC,OAAkD;IACnG,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QACzG,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAE,oCAA0D,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,+BAA+B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACxH,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;QACpJ,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,cAAc,CACnB,OAAO,EACP,KAAK,EACL,OAAO,CAAC,cAAc,EACtB,6BAA6B,EAC7B,GAAG,CAAC,EAAE,EACN,WAAW,EACX,EAAE,EACF,aAAa,OAAO,CAAC,SAAS,mBAAmB,OAAO,CAAC,SAAS,MAAM,MAAM,EAAE,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/task/task-kernel-write-set.d.ts

@@ -0,0 +1,3 @@
+/** Uses the canonical Task Kernel equivalence rule for Run/workspace write sets. */
+export declare function taskRunWorkspaceWriteSetsEqual(left: readonly string[], right: readonly string[]): boolean;
+//# sourceMappingURL=task-kernel-write-set.d.ts.map

package/dist/core/task/task-kernel-write-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-kernel-write-set.d.ts","sourceRoot":"","sources":["../../../src/core/task/task-kernel-write-set.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAUT"}

package/dist/core/task/task-kernel-write-set.js

@@ -0,0 +1,12 @@
+/** Uses the canonical Task Kernel equivalence rule for Run/workspace write sets. */
+export function taskRunWorkspaceWriteSetsEqual(left, right) {
+    const normalize = (values) => values
+        .map((value) => value.replaceAll("\\", "/").replace(/\/$/u, ""))
+        .map((value) => (process.platform === "win32" ? value.toLowerCase() : value))
+        .sort();
+    const normalizedLeft = normalize(left);
+    const normalizedRight = normalize(right);
+    return normalizedLeft.length === normalizedRight.length
+        && normalizedLeft.every((value, index) => value === normalizedRight[index]);
+}
+//# sourceMappingURL=task-kernel-write-set.js.map

package/dist/core/task/task-kernel-write-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-kernel-write-set.js","sourceRoot":"","sources":["../../../src/core/task/task-kernel-write-set.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,UAAU,8BAA8B,CAC5C,IAAuB,EACvB,KAAwB;IAExB,MAAM,SAAS,GAAG,CAAC,MAAyB,EAAY,EAAE,CACxD,MAAM;SACH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SAC5E,IAAI,EAAE,CAAC;IACZ,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,cAAc,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;WAClD,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/core/task/task-kernel.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Task Kernel public facade.
+ *
+ * The implementation is split by stable lifecycle responsibilities; all writes
+ * still go through the single kernel.json store and mutation authority.
+ */
+export type { TaskDeliveryLevel, TaskAcceptanceCriterion, TaskDefinitionV2, TaskSnapshotEntry, TaskCandidateSnapshot, TaskCandidateObservation, TaskRunInput, TaskRunAuthorization, TaskRunState, TaskRunDurations, TaskRunMeasurementRefs, TaskRunResult, TaskRunEvidenceSource, TaskRunEvidenceItemV1, TaskRunEvidenceVerificationV1, TaskRunFailure, TaskRunWorkspaceBinding, TaskRunWorkspaceManagerBinding, TaskRunWorkspaceIntegrationReceipt, TaskRunWorkspaceCleanupLease, TaskRunHostBinding, TaskRunHostStopReceipt, TaskRunV2, TaskReviewDecision, TaskReviewEvidenceSource, TaskReviewEvidenceItemV1, TaskReviewEvidenceVerificationV1, TaskReviewV2, TaskDeliveryEvidence, TaskClosureV2, TaskKernelEventType, TaskKernelEventV2, TaskKernelSnapshotV2, TaskKernelMutationResult, CreateTaskKernelRequest, AddTaskDependencyRequest, StartTaskRunRequest, RecordTaskRunResultRequest, RecordTaskReviewRequest, CloseTaskKernelRequest, CheckTaskCloseRequest, ResumeTaskRunRequest, BindTaskRunHostReceiptRequest, AppendTaskRunHostSettlementRefsRequest, RecordTaskRunHostStopReceiptRequest, BindTaskRunWorkspaceRequest, RecordTaskRunWorkspaceIntegrationRequest, AcquireTaskRunWorkspaceCleanupLeaseRequest, FinishTaskRunWorkspaceCleanupRequest, RecordTaskRunWorkspaceCleanupRefusalRequest, RecordTaskRunWorkspaceClaimRefusalRequest, TaskRunWorkspaceClaimOperation, TaskRunWorkspaceClaimErrorCode, TaskKernelReadResult, LegacyTaskKernelReadResult, AnyTaskKernelReadResult, TaskKernelLifecycleProjection, } from "./task-kernel-types.js";
+export { TASK_KERNEL_SCHEMA_VERSION, TASK_DELIVERY_LEVELS, TASK_RUN_WORKSPACE_CLAIM_ERROR_CODES, } from "./task-kernel-types.js";
+export { isTaskDeliveryLevel, fingerprintTaskValue, createTaskCandidateSnapshot, projectTaskKernelLifecycle, parseTaskKernelSnapshotV2, } from "./task-kernel-schema.js";
+export { readTaskKernel, createTaskKernel, listTaskKernelSnapshots, } from "./task-kernel-store-v2.js";
+export { addTaskDependency } from "./task-kernel-dependencies.js";
+export { startTaskRun, resumeTaskRun, recordTaskRunResult, } from "./task-kernel-runs.js";
+export { bindTaskRunHostReceipt, appendTaskRunHostSettlementRefs, recordTaskRunHostStopReceipt, } from "./task-kernel-host.js";
+export { bindTaskRunWorkspace, recordTaskRunWorkspaceIntegration, acquireTaskRunWorkspaceCleanupLease, finishTaskRunWorkspaceCleanup, recordTaskRunWorkspaceCleanupRefusal, recordTaskRunWorkspaceClaimRefusal, } from "./task-kernel-workspaces.js";
+export { recordTaskReview } from "./task-kernel-reviews.js";
+export { resolveTaskReviewEvidenceV1, verifyTaskReviewEvidenceV1, } from "./task-review-evidence.js";
+export type { ResolveTaskReviewEvidenceV1Request, VerifyTaskReviewEvidenceV1Request, } from "./task-review-evidence.js";
+export { checkTaskClose, closeTaskKernel } from "./task-kernel-close.js";
+//# sourceMappingURL=task-kernel.d.ts.map

package/dist/core/task/task-kernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-kernel.d.ts","sourceRoot":"","sources":["../../../src/core/task/task-kernel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,cAAc,EACd,uBAAuB,EACvB,8BAA8B,EAC9B,kCAAkC,EAClC,4BAA4B,EAC5B,kBAAkB,EAClB,sBAAsB,EACtB,SAAS,EACT,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,gCAAgC,EAChC,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,6BAA6B,EAC7B,sCAAsC,EACtC,mCAAmC,EACnC,2BAA2B,EAC3B,wCAAwC,EACxC,0CAA0C,EAC1C,oCAAoC,EACpC,2CAA2C,EAC3C,yCAAyC,EACzC,8BAA8B,EAC9B,8BAA8B,EAC9B,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,EACpC,kCAAkC,GACnC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/core/task/task-kernel.js

@@ -0,0 +1,17 @@
+/**
+ * Task Kernel public facade.
+ *
+ * The implementation is split by stable lifecycle responsibilities; all writes
+ * still go through the single kernel.json store and mutation authority.
+ */
+export { TASK_KERNEL_SCHEMA_VERSION, TASK_DELIVERY_LEVELS, TASK_RUN_WORKSPACE_CLAIM_ERROR_CODES, } from "./task-kernel-types.js";
+export { isTaskDeliveryLevel, fingerprintTaskValue, createTaskCandidateSnapshot, projectTaskKernelLifecycle, parseTaskKernelSnapshotV2, } from "./task-kernel-schema.js";
+export { readTaskKernel, createTaskKernel, listTaskKernelSnapshots, } from "./task-kernel-store-v2.js";
+export { addTaskDependency } from "./task-kernel-dependencies.js";
+export { startTaskRun, resumeTaskRun, recordTaskRunResult, } from "./task-kernel-runs.js";
+export { bindTaskRunHostReceipt, appendTaskRunHostSettlementRefs, recordTaskRunHostStopReceipt, } from "./task-kernel-host.js";
+export { bindTaskRunWorkspace, recordTaskRunWorkspaceIntegration, acquireTaskRunWorkspaceCleanupLease, finishTaskRunWorkspaceCleanup, recordTaskRunWorkspaceCleanupRefusal, recordTaskRunWorkspaceClaimRefusal, } from "./task-kernel-workspaces.js";
+export { recordTaskReview } from "./task-kernel-reviews.js";
+export { resolveTaskReviewEvidenceV1, verifyTaskReviewEvidenceV1, } from "./task-review-evidence.js";
+export { checkTaskClose, closeTaskKernel } from "./task-kernel-close.js";
+//# sourceMappingURL=task-kernel.js.map

package/dist/core/task/task-kernel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-kernel.js","sourceRoot":"","sources":["../../../src/core/task/task-kernel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8DH,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,EACpC,kCAAkC,GACnC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/core/task/task-pull-request-observer.d.ts

@@ -0,0 +1,25 @@
+export interface PullRequestProviderFact {
+    readonly source: "github-rest-pull-request-v1";
+    readonly url: string;
+    readonly repository: string;
+    readonly number: number;
+    readonly state: "open" | "closed";
+    readonly draft: boolean;
+    readonly headSha: string;
+    readonly baseBranch: string;
+    readonly merged: boolean;
+    readonly mergeCommitSha: string | null;
+}
+export declare class PullRequestObservationError extends Error {
+    readonly code: "unsupported-provider" | "repository-mismatch" | "provider-unavailable" | "provider-response-invalid" | "pull-request-state-invalid";
+    constructor(code: PullRequestObservationError["code"], message: string);
+}
+export interface ProviderCommandResult {
+    readonly status: number | null;
+    readonly stdout: string;
+    readonly error?: NodeJS.ErrnoException;
+}
+export type ProviderCommandRunner = (args: readonly string[]) => ProviderCommandResult;
+/** Query trusted provider facts through the built-in, read-only GitHub CLI API. */
+export declare function observeGitHubPullRequest(repositoryRoot: string, reference: string, commandRunner?: ProviderCommandRunner): PullRequestProviderFact;
+//# sourceMappingURL=task-pull-request-observer.d.ts.map

package/dist/core/task/task-pull-request-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-pull-request-observer.d.ts","sourceRoot":"","sources":["../../../src/core/task/task-pull-request-observer.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAgB,IAAI,EAChB,sBAAsB,GACtB,qBAAqB,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,4BAA4B,CAAC;gBAG/B,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,EACzC,OAAO,EAAE,MAAM;CAMlB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CACxC;AAED,MAAM,MAAM,qBAAqB,GAAG,CAClC,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,qBAAqB,CAAC;AA+K3B,mFAAmF;AACnF,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,aAAa,GAAE,qBAAoC,GAClD,uBAAuB,CAkDzB"}

package/dist/core/task/task-pull-request-observer.js

@@ -0,0 +1,187 @@
+import { spawnSync } from "node:child_process";
+import { GitCandidateObservationError, readGitRemoteUrl, } from "./task-candidate-observer.js";
+const MAX_PROVIDER_RESPONSE_BYTES = 64 * 1024;
+const COMMIT_SHA_RE = /^[a-f0-9]{40}([a-f0-9]{24})?$/i;
+export class PullRequestObservationError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "PullRequestObservationError";
+        this.code = code;
+    }
+}
+function runGitHubApi(args) {
+    const environment = {
+        ...process.env,
+        GH_PROMPT_DISABLED: "1",
+        GH_PAGER: "cat",
+        GIT_TERMINAL_PROMPT: "0",
+    };
+    const result = spawnSync("gh", [...args], {
+        env: environment,
+        encoding: "utf8",
+        windowsHide: true,
+        maxBuffer: MAX_PROVIDER_RESPONSE_BYTES,
+        timeout: 10_000,
+        stdio: "pipe",
+    });
+    return {
+        status: result.status,
+        stdout: result.stdout ?? "",
+        ...(result.error === undefined
+            ? {}
+            : { error: result.error }),
+    };
+}
+function repositoryFromRemote(remoteUrl) {
+    const scp = /^git@github\.com:([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/i.exec(remoteUrl);
+    if (scp)
+        return scp[1]?.toLowerCase() ?? null;
+    try {
+        const url = new URL(remoteUrl);
+        if (url.hostname.toLowerCase() !== "github.com" ||
+            (url.protocol !== "https:" && url.protocol !== "ssh:") ||
+            (url.protocol === "https:" && url.username.length > 0) ||
+            (url.protocol === "ssh:" && url.username !== "git") ||
+            url.password.length > 0 ||
+            url.search.length > 0 ||
+            url.hash.length > 0) {
+            return null;
+        }
+        const repository = url.pathname
+            .replace(/^\/+|\/+$/g, "")
+            .replace(/\.git$/i, "");
+        return /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository)
+            ? repository.toLowerCase()
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function parsePullRequestUrl(reference) {
+    let url;
+    try {
+        url = new URL(reference);
+    }
+    catch {
+        throw new PullRequestObservationError("unsupported-provider", "Pull-request evidence must be an absolute GitHub pull-request URL.");
+    }
+    const parts = url.pathname.split("/").filter(Boolean);
+    if (url.protocol !== "https:" ||
+        url.hostname.toLowerCase() !== "github.com" ||
+        url.username.length > 0 ||
+        url.password.length > 0 ||
+        url.search.length > 0 ||
+        url.hash.length > 0 ||
+        parts.length !== 4 ||
+        parts[2]?.toLowerCase() !== "pull" ||
+        !/^[A-Za-z0-9_.-]+$/.test(parts[0] ?? "") ||
+        !/^[A-Za-z0-9_.-]+$/.test(parts[1] ?? "") ||
+        !/^\d+$/.test(parts[3] ?? "")) {
+        throw new PullRequestObservationError("unsupported-provider", "Only canonical HTTPS GitHub pull-request URLs are supported by the built-in read-only provider.");
+    }
+    const number = Number(parts[3]);
+    if (!Number.isSafeInteger(number) || number < 1) {
+        throw new PullRequestObservationError("unsupported-provider", "Pull-request number is invalid.");
+    }
+    const repository = `${parts[0]}/${parts[1]}`.toLowerCase();
+    return {
+        url: `https://github.com/${parts[0]}/${parts[1]}/pull/${number}`,
+        repository,
+        number,
+    };
+}
+function nonEmptyString(value) {
+    return (typeof value === "string" && value.length > 0 && value === value.trim());
+}
+function parseProviderResponse(value, expected) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new PullRequestObservationError("provider-response-invalid", "GitHub returned an invalid pull-request response.");
+    }
+    const input = value;
+    const base = input.base;
+    const head = input.head;
+    const baseRepository = base?.repo;
+    const headSha = head?.sha?.toLowerCase();
+    const mergeCommitSha = input.merge_commit_sha === null
+        ? null
+        : typeof input.merge_commit_sha === "string"
+            ? input.merge_commit_sha.toLowerCase()
+            : undefined;
+    const state = input.state;
+    if (input.number !== expected.number ||
+        typeof input.html_url !== "string" ||
+        input.html_url.replace(/\/$/, "").toLowerCase() !==
+            expected.url.toLowerCase() ||
+        !nonEmptyString(baseRepository?.full_name) ||
+        baseRepository.full_name.toLowerCase() !== expected.repository ||
+        !nonEmptyString(headSha) ||
+        !COMMIT_SHA_RE.test(headSha) ||
+        !nonEmptyString(base?.ref) ||
+        (state !== "open" && state !== "closed") ||
+        typeof input.draft !== "boolean" ||
+        typeof input.merged !== "boolean" ||
+        (mergeCommitSha !== null &&
+            (typeof mergeCommitSha !== "string" ||
+                !COMMIT_SHA_RE.test(mergeCommitSha))) ||
+        mergeCommitSha === undefined) {
+        throw new PullRequestObservationError("provider-response-invalid", "GitHub pull-request facts do not match the requested repository and number.");
+    }
+    if (input.merged && state !== "closed") {
+        throw new PullRequestObservationError("provider-response-invalid", "GitHub pull-request state and merge facts disagree.");
+    }
+    return {
+        source: "github-rest-pull-request-v1",
+        url: expected.url,
+        repository: expected.repository,
+        number: expected.number,
+        state,
+        draft: input.draft,
+        headSha,
+        baseBranch: base.ref,
+        merged: input.merged,
+        mergeCommitSha,
+    };
+}
+/** Query trusted provider facts through the built-in, read-only GitHub CLI API. */
+export function observeGitHubPullRequest(repositoryRoot, reference, commandRunner = runGitHubApi) {
+    const expected = parsePullRequestUrl(reference);
+    let remoteRepository;
+    try {
+        remoteRepository = repositoryFromRemote(readGitRemoteUrl(repositoryRoot));
+    }
+    catch (error) {
+        if (error instanceof GitCandidateObservationError) {
+            throw new PullRequestObservationError("repository-mismatch", "A configured GitHub origin is required to validate pull-request ownership.");
+        }
+        throw error;
+    }
+    if (remoteRepository === null || remoteRepository !== expected.repository) {
+        throw new PullRequestObservationError("repository-mismatch", "Pull-request repository does not match the local GitHub origin.");
+    }
+    const result = commandRunner([
+        "api",
+        "-X",
+        "GET",
+        "--hostname",
+        "github.com",
+        "-H",
+        "Accept: application/vnd.github+json",
+        `repos/${expected.repository}/pulls/${expected.number}`,
+    ]);
+    if (result.error !== undefined ||
+        result.status !== 0 ||
+        Buffer.byteLength(result.stdout, "utf8") > MAX_PROVIDER_RESPONSE_BYTES) {
+        throw new PullRequestObservationError("provider-unavailable", "GitHub pull-request facts are unavailable; Close cannot use a caller-supplied URL as proof.");
+    }
+    let response;
+    try {
+        response = JSON.parse(result.stdout);
+    }
+    catch {
+        throw new PullRequestObservationError("provider-response-invalid", "GitHub returned malformed pull-request JSON.");
+    }
+    return parseProviderResponse(response, expected);
+}
+//# sourceMappingURL=task-pull-request-observer.js.map

package/dist/core/task/task-pull-request-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-pull-request-observer.js","sourceRoot":"","sources":["../../../src/core/task/task-pull-request-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAevD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpC,IAAI,CAKa;IAEjC,YACE,IAAyC,EACzC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAYD,SAAS,YAAY,CAAC,IAAuB;IAC3C,MAAM,WAAW,GAAG;QAClB,GAAG,OAAO,CAAC,GAAG;QACd,kBAAkB,EAAE,GAAG;QACvB,QAAQ,EAAE,KAAK;QACf,mBAAmB,EAAE,GAAG;KACzB,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACxC,GAAG,EAAE,WAAW;QAChB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,2BAA2B;QACtC,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAA8B,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,MAAM,GAAG,GACP,kEAAkE,CAAC,IAAI,CACrE,SAAS,CACV,CAAC;IACJ,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IACE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,YAAY;YAC3C,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;YACtD,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACtD,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;YACnD,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ;aAC5B,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1B,OAAO,oCAAoC,CAAC,IAAI,CAAC,UAAU,CAAC;YAC1D,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;YAC1B,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAK5C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CACnC,sBAAsB,EACtB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,YAAY;QAC3C,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACnB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM;QAClC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,sBAAsB,EACtB,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,2BAA2B,CACnC,sBAAsB,EACtB,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,OAAO;QACL,GAAG,EAAE,sBAAsB,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,MAAM,EAAE;QAChE,UAAU;QACV,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,QAAgD;IAEhD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,2BAA2B,CACnC,2BAA2B,EAC3B,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAsC,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAsC,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,EAAE,IAAsC,CAAC;IACpE,MAAM,OAAO,GAAI,IAAI,EAAE,GAA0B,EAAE,WAAW,EAAE,CAAC;IACjE,MAAM,cAAc,GAClB,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAC7B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;YAC1C,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACtC,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IACE,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAChC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7C,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;QAC5B,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC;QAC1C,cAAc,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,UAAU;QAC9D,CAAC,cAAc,CAAC,OAAO,CAAC;QACxB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC;QAC1B,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,CAAC;QACxC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;QAChC,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS;QACjC,CAAC,cAAc,KAAK,IAAI;YACtB,CAAC,OAAO,cAAc,KAAK,QAAQ;gBACjC,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACzC,cAAc,KAAK,SAAS,EAC5B,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,2BAA2B,EAC3B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,2BAA2B,CACnC,2BAA2B,EAC3B,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,6BAA6B;QACrC,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc;KACf,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CACtC,cAAsB,EACtB,SAAiB,EACjB,gBAAuC,YAAY;IAEnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,gBAA+B,CAAC;IACpC,IAAI,CAAC;QACH,gBAAgB,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;YAClD,MAAM,IAAI,2BAA2B,CACnC,qBAAqB,EACrB,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC1E,MAAM,IAAI,2BAA2B,CACnC,qBAAqB,EACrB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,KAAK;QACL,IAAI;QACJ,KAAK;QACL,YAAY;QACZ,YAAY;QACZ,IAAI;QACJ,qCAAqC;QACrC,SAAS,QAAQ,CAAC,UAAU,UAAU,QAAQ,CAAC,MAAM,EAAE;KACxD,CAAC,CAAC;IACH,IACE,MAAM,CAAC,KAAK,KAAK,SAAS;QAC1B,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,2BAA2B,EACtE,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,sBAAsB,EACtB,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAY,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CACnC,2BAA2B,EAC3B,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC"}

package/dist/core/task/task-review-evidence.d.ts

@@ -0,0 +1,27 @@
+import type { TaskReviewEvidenceVerificationV1, TaskRunEvidenceVerificationV1, TaskRunV2 } from "./task-kernel-types.js";
+export interface ResolveTaskReviewEvidenceV1Request {
+    readonly root: string;
+    readonly taskDir: string;
+    readonly cwd?: string;
+    readonly run: TaskRunV2;
+    readonly candidateSnapshotId: string;
+    readonly candidateFingerprint: string;
+    readonly evidenceRefs: readonly string[];
+    readonly allowRunEvidence?: boolean;
+    readonly allowTaskEvidence?: boolean;
+}
+export interface VerifyTaskReviewEvidenceV1Request extends ResolveTaskReviewEvidenceV1Request {
+    readonly expected: TaskReviewEvidenceVerificationV1;
+}
+/** Freeze Run evidence against the real candidate bytes or TaskDir files at completion. */
+export declare function freezeTaskRunEvidenceV1(request: {
+    readonly root: string;
+    readonly taskDir: string;
+    readonly cwd?: string;
+    readonly run: TaskRunV2;
+}): TaskRunEvidenceVerificationV1;
+/** Resolve Review and acceptance references to bounded, current file bytes. */
+export declare function resolveTaskReviewEvidenceV1(request: ResolveTaskReviewEvidenceV1Request): TaskReviewEvidenceVerificationV1;
+/** Re-resolve and compare stored Review evidence at Close time. */
+export declare function verifyTaskReviewEvidenceV1(request: VerifyTaskReviewEvidenceV1Request): void;
+//# sourceMappingURL=task-review-evidence.d.ts.map

package/dist/core/task/task-review-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-review-evidence.d.ts","sourceRoot":"","sources":["../../../src/core/task/task-review-evidence.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAEV,gCAAgC,EAEhC,6BAA6B,EAC7B,SAAS,EACV,MAAM,wBAAwB,CAAC;AAMhC,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,iCAAkC,SAAQ,kCAAkC;IAC3F,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;CACrD;AAgLD,2FAA2F;AAC3F,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;CACzB,GAAG,6BAA6B,CAgGhC;AAoND,+EAA+E;AAC/E,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,gCAAgC,CAYlC;AAED,mEAAmE;AACnE,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iCAAiC,GACzC,IAAI,CAeN"}